last executing test programs: 7.459741217s ago: executing program 3 (id=233): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000240)={{0xffffffffffffffff, &(0x7f0000000000)='\x86^\x00', 0x2, &(0x7f0000000040)={@align=0x8, {0xe, 0x29, 0x5}}, 0x90000, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x2}, 0x1, &(0x7f0000000200)=[{0x1, 0x8001, &(0x7f0000000100)='\x00', &(0x7f0000000140)="e2542bc3427076f4e3488f885a62df542b3a7be6666c412a969fc1cb20daf37ab5a155dc59ffc5932ab903e44c32e30d1a4695cc2f34c920f6f60f9c3d43bf60ece35618774207bc530c2845bb2ce81ab990b28ef7557d83af9bd61bebb1301a020450adff7640c4c608ccad0eb0cc3b98727fb39ca487465a73e62308af5c76b04cdc69ceb5010d2b16e92e64d588c4789137416446fedd10a4950b4a", 0x9d, 0x18}]}) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000300)={0x3, &(0x7f00000002c0)=[{0x5, 0x5, 0x1, 0x7e1}, {0x0, 0x2, 0x8, 0x101}, {0x1000, 0xa, 0x4, 0x8}]}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000380)={0x5, &(0x7f0000000340)=[{0x3, 0xa, 0xf, 0x2}, {0x9, 0x5, 0x6, 0x10001}, {0x7f, 0x1, 0x4, 0xe}, {0x4, 0x3, 0x7, 0x8001}, {0x6, 0xfc, 0xc, 0x7ff}]}) (async) sendmsg$inet(r0, &(0x7f0000000800)={&(0x7f00000003c0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000400)="79a6721e0119ed62886cfe1fc24b94ad08787344221eb6ba9690e4", 0x1b}, {&(0x7f0000000440)="95e0dee69f9ff651387e849aae04d850cf4b1045608e68311260c8fd394406bec0660e1a9710d45195866352c8e8183414b40ac72eb7ee45d1e57188b654cffa2ca8481242bc900a75af669d23d3c97731fae33311e105c54e2ad73ed615ddc18782b3bf576650", 0x67}, {&(0x7f00000004c0)="106036e0687ed6348034a4", 0xb}, {&(0x7f0000000500)="b462448f9be5b0b2174c0b8f93b5140d75d3abe0e7508dabd3aa85e5ddee8b05101acc83bd013a6002b6cee7d9", 0x2d}, {&(0x7f0000000540)}, {&(0x7f0000000580)="6378c47e9717ce8f0f783fa4f73971c5835664a2cd40894a916d88e138320b75", 0x20}], 0x6, &(0x7f0000000640)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7fffffff}}, @ip_retopts={{0xc0, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4c, 0xb6, 0x1, 0x8, [{@local, 0x3}, {@multicast1, 0xffffff0d}, {@remote, 0x4}, {@remote, 0x200}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@broadcast, 0x7}, {@private=0xa010101, 0x2}, {@local, 0x1}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x3}]}, @timestamp={0x44, 0x2c, 0xf9, 0x0, 0xa, [0x5, 0xffffffff, 0x8, 0x5, 0xe9d8, 0x10, 0xd, 0x7f8, 0xc4b, 0x7]}, @cipso={0x86, 0x2f, 0x3, [{0x2, 0xf, "3fc0a812fbc57e62ff78d405c0"}, {0x0, 0x12, "bdbabae7e9dc99b8979af6516985e153"}, {0x5, 0x6, "bbcb59a7"}, {0x2, 0x2}]}, @generic={0x89, 0x7, "5c260b56f6"}, @noop]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_retopts={{0xb0, 0x0, 0x7, {[@cipso={0x86, 0x3c, 0x2, [{0x1, 0x10, "cb14f261061c2420e32ad78d5c70"}, {0x2, 0x5, "ceabbf"}, {0x0, 0xf, "1d32e4ae67c324afc21597771a"}, {0x5, 0x12, "47c4d522fdd201af49b10aaeb8ce61dd"}]}, @timestamp_addr={0x44, 0x24, 0x6, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x3b}, 0x2}, {@remote, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@broadcast, 0x100}]}, @generic={0x86, 0xa, "0aa12025783dc23f"}, @timestamp={0x44, 0x14, 0xed, 0x0, 0x1, [0x0, 0x1000, 0x0, 0x83]}, @generic={0x83, 0x9, "fd344ea720856c"}, @rr={0x7, 0x17, 0x97, [@private=0xa010100, @loopback, @multicast2, @local, @dev={0xac, 0x14, 0x14, 0x32}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x101}}], 0x1b8}, 0x4044004) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000840), &(0x7f0000000880)=0x4) (async) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000008c0)={0x2, @raw_data="1d46c33cfe48213f6e00e6b4db2fbfe4c41e5f81e5e1a57435e01611cbfcb71504932956dca4f401c55dd7dbe7d988a80526b865b7a3ebf54769a07dae523904799eaf0745e2c5c6260d5f1df0cf956bca60663e1d6d95c71fe4443c1ad8b8ccedab728f05959c007fddec169297ed60009e6ceb307514f983592f8ac11b159ad5171cc0524854d56a70910d1a9e5e29c08afd673c7aea247ba3f49d2832569d8401be225d42438224bf8589c891b50bf47f804b0eef31695395d72564032a1e187bac3d5c02deef"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000a00)={0x4, &(0x7f00000009c0)=[{0x3, 0x80, 0x10, 0xa5}, {0x1, 0x9, 0x9, 0x7}, {0xca, 0x40, 0x0, 0x4}, {0x0, 0x6, 0x8, 0x5}]}) (async) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) (async) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000a80)={0x5, &(0x7f0000000a40)=[{0x4, 0x8, 0x5, 0x1}, {0x9, 0x5, 0x7, 0x824}, {0xfffb, 0x5, 0x5, 0x5}, {0x48, 0xb, 0x6, 0x5}, {0xed45, 0xbf, 0x9, 0x1}]}) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000ac0), 0x200b02, 0x0) write$ppp(r2, &(0x7f0000000b00)="c96e40483ed6cf9583ca30f75dc4289f422589fcc6f90f463a107ff48d42308adbd956feb6c7046b02fe29e50b32dd91752be92a1b204d9926ff6a37df9653607e703c178d8481751c20", 0x4a) (async) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000bc0)={0x1, &(0x7f0000000b80)=[{0x1, 0xc5, 0x4, 0xffffff5e}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000c40)={0x3, &(0x7f0000000c00)=[{0x7, 0xb0, 0x80, 0x7fff}, {0x5, 0xfa, 0xb5, 0x3}, {0x5, 0x7, 0x3, 0x1}]}, 0x10) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000c80)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000001080)={r3, 0xf7b, 0x0, [0x6, 0xffffffffffffffff, 0x5, 0x80000001, 0x4], [0x5, 0x1, 0x7, 0xdc, 0x3, 0x3, 0x2, 0x8, 0x200, 0x5cb1, 0xcce0, 0x9, 0x7, 0x4, 0x5, 0x7, 0x3, 0x4, 0xf, 0x4, 0xb10a, 0x1, 0x1, 0xffffffffffffffff, 0xd2d9, 0x6, 0x98, 0x9af, 0x5d, 0x6, 0x4, 0xfffffffffffffffa, 0x7, 0xf, 0x8, 0x8000, 0x1, 0x200, 0x1ff, 0x4, 0x9, 0x5, 0x2, 0x5, 0xffff, 0x10, 0xb110, 0x4, 0x772f949f, 0x5, 0x3, 0x2, 0xecd, 0x6, 0x5, 0x6, 0x4, 0x0, 0x7fffffffffffffff, 0x40000000000, 0x4, 0x9, 0x200, 0xa, 0x40, 0xda, 0x1, 0x101, 0x5, 0x0, 0x8, 0xbf4, 0x8, 0x9, 0x0, 0x7, 0x9, 0x7, 0x4, 0x8000000000000001, 0xfffffffffffffffa, 0xc, 0x1, 0x27, 0x1d8, 0x4, 0x7fff, 0x8, 0x7, 0x1d3, 0x6, 0x9, 0x10000000000, 0xc478, 0x3, 0x5e, 0x3, 0x100000001, 0x5, 0x4, 0x0, 0x4, 0x2, 0xffffffffffffffff, 0x7, 0x5, 0x2, 0x7f, 0x7fffffffffffffff, 0xfffffffffffffffb, 0x80000001, 0xffffffff, 0x97, 0xfffffffffffffff8, 0x5, 0xa, 0xeeb, 0x1, 0x2bc, 0xb, 0xb5c8]}) (async) connect$netlink(r0, &(0x7f00000014c0)=@unspec, 0xc) (async) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000001540)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)=@newtfilter={0x2c, 0x2c, 0x200, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x1, 0xe}, {0x9, 0xfff2}, {0xf, 0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0xffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x4000) (async) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000001640), &(0x7f0000001680)=0x4) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001700), r0) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000001840)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000001800)={&(0x7f0000001740)={0x88, r6, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x1890, 0x9, 0x2]}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x9f, 0x9, 0x100]}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00'}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x88}, 0x1, 0x0, 0x0, 0x20080000}, 0x10) (async) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000001880)={0x1, {{0x2, 0x4e22, @broadcast}}, 0x1, 0x1, [{{0x2, 0x4e22, @empty}}]}, 0x110) syz_open_dev$usbfs(&(0x7f00000019c0), 0x1, 0x0) io_setup(0x2, &(0x7f0000001a00)=0x0) (async) clock_gettime(0x0, &(0x7f0000001b80)={0x0, 0x0}) io_getevents(r7, 0x2, 0x9, &(0x7f0000001a40)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000001bc0)={r8, r9+10000000}) (async) r10 = pidfd_getfd(r2, r4, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r10, 0x4018aee1, &(0x7f0000001c40)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000001c00)={0x95, 0x547}}) accept$inet6(r10, &(0x7f0000001c80)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @empty}}, &(0x7f0000001cc0)=0x1c) 6.433259481s ago: executing program 3 (id=243): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getpeername$netlink(r0, &(0x7f0000000040), &(0x7f0000000080)=0xc) r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0], 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) (async) syz_usb_control_io$uac2(r1, 0x0, 0x0) syz_usb_control_io$uac2(r1, 0x0, 0x0) (async) syz_usb_control_io$uac3(r1, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (async) r2 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async) syz_usb_control_io$uac1(r2, 0x0, 0x0) (async) syz_usb_control_io$printer(r2, 0x0, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') read$FUSE(r3, 0x0, 0x500) (async) syz_usb_control_io$uac1(r1, 0x0, 0x0) (async) syz_usb_control_io$uac1(r2, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)={0x40, 0xe, 0xaa, {0xaa, 0x6, "696862f2c2b846a935059345bebb3fac39fbebf5cf819a2d7e98acc306736dacb6d18d37538fa22a3069c90a2617c5962f2a2d929b70562f678e934eb167b2f97e4a82f498fe1b6f280d29439280a1f3ecdaf91483e6c83b4435b65b026bca814c5be594263821d20a33da8a637f80a60a81b72ba676b19192fc33ef61d49850ed2fd04db29e5bfc3617274029b3993144fe3881698e753d7ad434b2da270df3769a9cdf7ac423cf"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x810}}}, &(0x7f0000000480)={0x44, &(0x7f0000000200)={0x20, 0xa, 0x69, "6cc733032593a3aba43b3be2271d24eda0ef5a91183f7c911e21079a0af7e0662bc1bc13c9ed93d5d3a2fa1c7e5bb73706615116291b0d5061b236971b01099f74a0d517f209bc5d6585f69575e033fd3a6d21eecfb35c47360d6889b39d7ff35a7e8697500899681b"}, &(0x7f00000002c0)={0x0, 0xa, 0x1}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000340)={0x20, 0x81, 0x2, "58c7"}, &(0x7f0000000380)={0x20, 0x82, 0x2, "fe17"}, &(0x7f00000003c0)={0x20, 0x83, 0x3, "c64b3c"}, &(0x7f0000000500)=ANY=[@ANYBLOB="208402000000708cc6c18bc6daf87148677cdb7f54e87d43129ecd3ead461705514d1a5eed824e8591a6e981c986ff102def71ccaea245f3ad6b20c41296e601b5d764ead28e061c07ac9736c78c93a9420d89f30560bc4bc8f2e82399cfd6918ed5e99523cdfc62c367c1eb27d252ccae42dc2c2f867a3e559fe6bc14adbe39637f8f0579b4a0b5c90a477eabb4a4b9591c9c8c84d539ba2f4b21a495f8bcd19ab3051295958cac2a9407e2f5878706b0a8819cb530ae159fb0f3bbe3ed5f5f51abe00a931e7b26a6a3"], &(0x7f0000000440)={0x20, 0x85, 0x3, "f86907"}}) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (async) syz_usb_control_io$uac2(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) 5.288264121s ago: executing program 2 (id=249): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)={0x2c, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40) 5.072695337s ago: executing program 2 (id=250): r0 = shmget$private(0x0, 0x800000, 0x40, &(0x7f0000173000/0x800000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) shmctl$SHM_LOCK(r0, 0xb) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r4, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r4, r5], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000340)={0x0, 0x0, r4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, "b1eddb851ba62b00d8730000000000000000000800"}}) close_range(r1, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) shmget$private(0x0, 0x800000, 0x40, &(0x7f0000173000/0x800000)=nil) (async) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) (async) shmctl$SHM_LOCK(r0, 0xb) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) (async) open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) (async) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r4, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r4, r5], 0x2}) (async) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000340)={0x0, 0x0, r4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, "b1eddb851ba62b00d8730000000000000000000800"}}) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) shmctl$SHM_UNLOCK(r0, 0xc) (async) 4.774783409s ago: executing program 2 (id=252): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000000)=0x1) ppoll(&(0x7f0000000180)=[{r1, 0x1}], 0x1, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = syz_open_pts(r2, 0x141601) write(r3, &(0x7f0000000000)="d5", 0xfffffedf) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 4.69617126s ago: executing program 4 (id=253): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x2a202) r1 = memfd_create(&(0x7f0000000180)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6*t\xc8\xf4>q%\xa4\x81\xe2\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\x1cf\xf0\xf2xW?\x8e\xd9\x06\xc7\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<+l\xfdG\x8e\t\x96rT|\xe3\x13\x19\xe3%g\xa7n\xa93\xf5>\x81R\xe7`\x83N\xf4\xa7\xc8:\x8eY\x0e@\x1b\x17Y>b\x85\xd3\x12I\xbf\xac\x9eM\x884Z\xaf\xf3\'\x8aj\"\xd1~k\x7f%\x96\xf95&\x84A%\x97\xb8\x18\xa7\x88\xe3w', 0x1) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x0, 0x0, 0xe, 0xd, "eeddb7c255409929c925fe8c7b0157ce0dc9b4e500476312cd6cb4f4f686ce0058265f66cdddf2e9ce8bb87ae03e87a61fb648d5c6a3e9977956be87176a30a9", "a863a5170a11d26a730cb3d1e9fb18cb0e58986d58e881bbe5e4230de84eea7a", [0x4, 0x800]}) 4.596173265s ago: executing program 2 (id=254): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x21, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x160, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@loopback, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x200, 0x0, 0x4e20, 0x2, 0xa, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@loopback, 0x4d4, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1c}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x543}, {0x4, 0x7fffffffffffffff}, {0x0, 0xffffffff}, 0x70bd28, 0x3500, 0x2, 0x4}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x60, "39ca7b8070b853dde51a5e83242fbc238cce6d6ef5992b6c9a7a82d87d63a4d06857957d"}}]}, 0x160}, 0x1, 0x0, 0x0, 0x880}, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYRESDEC=r1, @ANYRESHEX=r1], 0x0) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x22, 0x2d, {0x2d, 0x22, "24c76f465c04ed65d2de22717df034c8e7b75348d718ce7d5bff0701e90d6f5759c6979bdd5d9054c1dbea"}}, &(0x7f0000000100)={0x0, 0x3, 0x3f, @string={0x3f, 0x3, "8604154a7627eaf38eedebedf38a07f507f2317bcf6f938386c1a4c5fff372f484d5dbb5fe85c8060c107b54eb27e571cd70db3607ec69bea9b08845b1"}}, &(0x7f0000000180)={0x0, 0xf, 0x2d, {0x5, 0xf, 0x2d, 0x5, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x52275e1d6d68d30f, 0x5, 0x3, 0x5}, @wireless={0xb, 0x10, 0x1, 0x8, 0xc, 0x2, 0x3, 0x8, 0x81}, @ssp_cap={0x10, 0x10, 0xa, 0x3, 0x1, 0x100, 0xf00f, 0x9, [0xfffff0]}]}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0xb, 0xa4, "8a4eacc4", "aa6982e9"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x1, 0xa, 0x5, 0xd, 0x6, 0x9}}}, &(0x7f0000000840)={0x84, &(0x7f0000000400)={0x0, 0x3, 0x49, "3e368ddf8790ad0380d06cadd7e0867e83784a1780c3e6a8978bb7e9fcdb074a0433938c8edd1dc28f44524f8d22811c7b88d79e7918a3c18a292b9a6849d606bfd9b01e5bfdf97946"}, &(0x7f0000000480)={0x0, 0xa, 0x1}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000000540)={0x20, 0x0, 0x8, {0x200, 0x20, [0xff0]}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x4}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000600)={0x40, 0xb, 0x2, "d7be"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000680)={0x40, 0x13, 0x6}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @local}, &(0x7f0000000700)={0x40, 0x19, 0x2, "70e9"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0xa19}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0xf9}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000800)={0x40, 0x21, 0x1}}) 4.431059943s ago: executing program 4 (id=255): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async, rerun: 32) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async, rerun: 32) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_128={{0x304}, "0000650381c66e54", "27c8291a0f479e020000002cb3237cb1", '\x00', "38cb8a873cfcabba"}, 0x28) (async) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) (async) r3 = eventfd(0x5f0) ioctl$KVM_IOEVENTFD(r2, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x0, 0x0, r3}) (async) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000100)={0x0, 0x600000, 0x8}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async, rerun: 64) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_TIOCOUTQ(r4, 0x5411, 0x0) (async, rerun: 32) syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) (async, rerun: 32) listen(0xffffffffffffffff, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) 4.226503038s ago: executing program 4 (id=256): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) recvmmsg(r0, &(0x7f00000040c0)=[{{0x0, 0x0, &(0x7f0000000600)}, 0x7}, {{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000240)=""/161, 0xa1}, {0x0}, {&(0x7f0000000640)=""/4096, 0x1000}], 0x3}, 0x80000000}, {{&(0x7f0000001700)=@nfc_llcp, 0x80, &(0x7f00000018c0)=[{&(0x7f0000001780)=""/31, 0x1f}, {&(0x7f00000017c0)=""/216, 0xd8}], 0x2}, 0xe7}, {{&(0x7f0000001980)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000003fc0)=[{0x0}, {0x0}, {&(0x7f0000002fc0)=""/4096, 0x1000}], 0x3}, 0x2}], 0x4, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) dup3(r0, r0, 0x0) poll(&(0x7f0000000040)=[{r0, 0x84}, {r1}], 0x2, 0x9) 3.974649278s ago: executing program 0 (id=258): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9401"}, @global=@item_4={0x3, 0x1, 0x0, "8500"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)='B', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000013c0)="e4f70e6f91e6673b0618b18eb29bb9e24114db7dd3fc71f3230937079602375fdd26975655a80c84606bcbd3bd506c9640cd4d5213d1d3f4ae496a12ec7a3f388b4e8af5384319f4c407bbc177928822eabc094841ca6feaeb562d80b7e3c90e5787bb77810b72e68308a5e6fffc27217174cec7e5ba7067398ce7491c40f111620862c138b697a98f4d9bbcfab4d9766afb23d2532896a69286ee46c35f88f5bac39aff8bf93be7896039dd8efcaa4c248c8d29f50d5c4d40269ea7a24a332f671be204894c716b38c7fb4bb95cacf95cd4f7b2013a3d9740ade0427d8e0f2fd3c829705f47d3ea694e7b43b0e5986e8c60d752e8d3fe6daa2b3240a4de747600e367fdfcd3cff024ddb814a60c574400cb439aaed611632f3c0b1db79950162f125fc6264a337d40f86e89383cefea86845625460fc6f4b2414f16e656429f4e50ed1dbd84fbc5d1a4236497e7bdd9ef67b9762ce9932a9c283af8af5c9d4709eecf64dc59287caf4a49c9582c25b03410910ce84aaf7f5be5b63b637bee041f939294b6722fb8b7d75cff97b09272c47fc257009d12a6ee89348c33f8eecb13d6ec500078e79950f6b6a44bf46c631b7c6896871aed8e3c7dae66711bdc27b8fcd2f1bb617a6481a82555d71531a70a2a1ba9cdd2394c1caf9f328e5796639ca86dd52ecc6e888f44edd4333a0fc663ceed0e307b10fb5a5dda4b2359565cb21bc6a4ddc06888906e27ccbd153b94d20d52e50ffb9e54cc3e651f87544fc725bbbdeed4ddb647f7f652083495a08570beb0f5788eccd18b56c558948dba5c1452d612f42082b29faf35db902e278a61184fbb51515d276226a5be6c9e40a1d0fed74a5c932499434eb7ed93683fde5be56ba3604d4c4c85e652e0cc908b03d7cb66e7b5f4cf10eb26b9748bcf122ed26ce6a5668967de0121e9487ad6e81ec14e74fb9b1a91d7ada94bab1fbb1bd8871d1f2e1a7062d2f07d776e871402c4ebd6f4eaa2fa007096e263ad63993c4d9b87c4b8ac2cc9b3f168f14296c92794b06dec545f657cc999b76c9ae767ce005ec07bc1fdc573000e7e8bb033bb30c989fdcd78086b63995c933a6848cda67be84045bbb23a0da8af2e15ca16f144a3afb411db328167d71cc7891f7b334dac9b1c6dbf291274f7f5d738d09743c4734d9a2e0f3c4c79361f0799763d2dfb47bceba4bee6f38d2dded1efdab904a4286dc8164c8e204281051b3a4bcac3e3406d149885216ef754d64e6c6e86e37e6ef1bbab92ee93cb8c44f3708a1cbc7b12882df0adf67ce982523a3da0cacd6f617ebf89a32a624e39822586812f37b0d8857ac5a0e42e442dffe8a2fb08bc0324c65781fb8743ec121d3947cf9aadc436d57ce2dc35517a5c564d1dc629519e5be02d1c7b2bdbe4818b4d6889f2283ceb1373c5ecf1720b6a52ce449f92d533e2d74b107c39e55ec3f6c523d6a4a01f4b46f2945492f5f9a0170afaac8324f45e78bb32001d2c9f8f50d484ede048994fcdcb5ddfae6bce8387bbfa18771296e95509f1", 0x443}], 0x1}}], 0x2, 0x468d0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 3.974099608s ago: executing program 4 (id=259): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00'}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)={0x2c, r4, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf9}, @BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2}) prlimit64(0x0, 0x3, &(0x7f0000000140)={0xa, 0x8b}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f0000000500)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r7 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r7, &(0x7f0000000240)=""/112, 0x349b7f55) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x2540229}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x80, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x44, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x1000}]}}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xe4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r0) 3.59142147s ago: executing program 1 (id=260): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)={0x2c, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40) 3.531299505s ago: executing program 1 (id=261): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setpgid(r0, r0) setpgid(0x0, r0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) wait4(r0, 0x0, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000003380)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7}, 0x8}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f0000000200)=r4) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r9, 0x1, 0xd8, 0x6, @broadcast}, 0x14) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="d1b56803c359f2fd09bc0b9c3b19684a300bbe34d20dbfeb38a2b56a99d13ab230b38113ba6654a3fd87e00115e28ff9d46508e8e2a18811ef13bc1607c1c9a846d137ce1e485a199bb5528e715e45dc4fc9f52b84e41a2bbccf67517f117e305635e1d53073317d408800e823689865e9c86606a500d523ce9663c7b7aea3b59618a757ea8e2bae1d025ec024c12021", @ANYRES16=r12, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r13, @ANYBLOB="3f000e0080000000ffffffffffffffffffffffff50505050505000000000000000000000640001003c04010fa104710700fcffffffb2607606003b1800060000080026006c09000008000c006400000008000d00000000000500d50000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x84}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x66ef77bd6193696b}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x38, r1, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x40000000, 0x7a}}}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r14}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000080}, 0x10) setpgid(r0, r0) 3.266641189s ago: executing program 3 (id=262): r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$inet(0x2, 0x1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f00000000c0), &(0x7f0000000180)=0x4) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x3}}, 0x10) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r5, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x42}, 0x3}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffe}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r7, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24008895}, 0x4) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x90, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x600, 0x0, 0x0}, &(0x7f0000000240)=0x108) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000000001050000000000000000000700000195080003400000000400"/44], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x48004) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 3.257872328s ago: executing program 0 (id=263): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) timer_create(0x2, &(0x7f0000000080)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x804) syz_emit_ethernet(0x83, 0x0, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket(0x10, 0x803, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r8) getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) sendto$packet(r7, &(0x7f0000000040)="2717a90af1a30d71286f47000000", 0xe, 0x40000, &(0x7f0000000180)={0x11, 0x18, r9, 0x1, 0x0, 0x6, @link_local}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b400000000000000691074000000000004000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 2.856849739s ago: executing program 1 (id=264): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002000000090001"], 0x7c}, 0x1, 0x500}, 0x0) 2.662811634s ago: executing program 1 (id=265): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x800) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) (async) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) sendfile(r3, r3, 0x0, 0x2000fb) write$uinput_user_dev(r1, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x0, 0x8, 0x1009, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x27, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0xffffffff, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xb, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x1, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x7, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0xb, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x40, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x9, 0x4, 0xe47, 0x4, 0x0, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x0, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x4, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) (async) ioctl$UI_DEV_CREATE(r1, 0x5501) r4 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) (async) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) io_setup(0x7, &(0x7f0000000280)) r5 = openat$sysfs(0xffffff9c, &(0x7f00000001c0)='/sys/power/pm_trace', 0x42, 0x0) readv(r4, &(0x7f0000000140)=[{&(0x7f0000000100)=""/15, 0xf}], 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x1, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) getsockopt$packet_int(r5, 0x107, 0x9, &(0x7f0000000080), 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "0200", "ab02a1a449283e8a3bc95815ece487ebcc5bb6a8d8a744e4b7edb45c7e7336ab", 'vb q', "9900000100"}, 0x38) shutdown(r6, 0x1) (async) shutdown(r6, 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) sendfile(r6, r7, 0x0, 0xffffffff004) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) (async) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 2.213498476s ago: executing program 1 (id=266): r0 = socket(0xa, 0x3, 0x87) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x1f) add_key$user(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x7, 0x8, &(0x7f00000002c0)="b8000005000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc2}, &(0x7f0000000180)={0x0, "34fa8f263bcc16a6f423a1b5cdd0a77ab84e2c3504c9405a14cbff940f2aa75db1473267ae0574391894a3836a00b6f9fa4eb2678a8cb1010904425fe63df6ba", 0x19}, 0x48, 0xfffffffffffffffe) request_key(&(0x7f0000001540)='asymmetric\x00', &(0x7f0000001580)={'syz', 0x2}, &(0x7f00000015c0)='syz', r4) keyctl$set_timeout(0xf, r4, 0x1ff) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8916, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0xfffffffc, 0x5, 0x0, 0xe, 0x0, 0x5}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRESHEX], 0x40c}}, 0x4000000) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000080)={0x8, 0x9, 0x10000007}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000240)={0x1, 0x6576, 0x9}) close_range(r7, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) 2.137910787s ago: executing program 4 (id=267): sched_setscheduler(0x0, 0x1, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x85) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000a007) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000, 0x0) preadv2(r0, &(0x7f0000000ec0)=[{&(0x7f0000000c80)=""/46, 0x2e}], 0x1, 0x0, 0x80000002, 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10002, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)}}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0xe) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)=',8Z', 0x3) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$inet(r2, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$rds(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 2.009408206s ago: executing program 3 (id=268): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000011000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000040000000c001a8008000580040003"], 0x2c}}, 0x800) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x40010) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000017c0)={'syztnl0\x00', &(0x7f0000001700)={'gre0\x00', 0x0, 0x40, 0x700, 0x7b4, 0x9, {{0x1d, 0x4, 0x2, 0x6, 0x74, 0x66, 0x0, 0xb, 0x4, 0x0, @local, @broadcast, {[@noop, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x24, 0x3a, 0x3, 0xd, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9a}, {@remote, 0xc0}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@local, 0x8}]}, @timestamp_prespec={0x44, 0xc, 0x6, 0x3, 0x0, [{@rand_addr=0x64010101, 0x3}]}, @noop, @timestamp={0x44, 0x24, 0xe2, 0x0, 0x8, [0x8ae3, 0x3, 0x7, 0x2, 0x5, 0x4, 0x81, 0x8001]}, @ra={0x94, 0x4, 0x1}, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000001c40)={'erspan0\x00', &(0x7f0000001c80)={'erspan0\x00', r6, 0x10, 0x10, 0x6, 0x0, {{0x6, 0x4, 0x1, 0x27, 0x18, 0x68, 0x0, 0x5, 0x4, 0x0, @loopback, @multicast1, {[@timestamp_prespec={0x44, 0x4, 0xf2, 0x3, 0x6}]}}}}}) sendmmsg$inet(r0, &(0x7f0000001d40)=[{{&(0x7f0000000040)={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f0000001680)=[{&(0x7f0000000080)="60f6984067b7888da0c99307bec18407a301e7b4869f37f69d35e02087c2ba880014045630f87cdad89aeb92c54f16dd8e716b0340699e615b93873075edb2877d6ec40441a9b3446a2a6f6755cc7eb3943dd8ff6ccb706f35f32d633102b8f8f44d1ecdf59bf3f35206966316ae4b128797e9bb6f1869c596a8831654d9c5ee80cd5b88015f194a347ad5c2f8efcba4d0850b026de1e5436678", 0x9a}, {&(0x7f00000001c0)="93a8083b7c903d75a7c6dafc4f7741a2ea8879ecab1073a62460f0bc99db76169f0b7381eea3fb8a2f589d124b253fe67e851112761e2114edae0414103506c9a5bee15e53e9ec3dc63502a537a04f24a90828fbc5b204e498915d423506ebcab764abbd86a777b16cbc6520e2003147fdc336", 0x73}, {&(0x7f0000001dc0)="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", 0x179}, {&(0x7f0000000300)="328de179754593cf48822f02f515c9550e4e6f0da1f16aa99db5701cddaefe3c6d2b17d9920938d11f2aa0512865470d01c13cfb5fb3bbd801d48f38d4c56f3cacf3fc60e2fca48ab00acc36c8200e8368a0d45edfc1ef3632e2123c263eb6c022bcd901e708c8b1828a0fe5767da2a0d6fbd187ee3d2bfb2ab3200199cf08f3471b6672b685af5a9826f2871e49f784161536e8c88f995689eed361b8f3544067e6f1a4b29a44bb3acc0d991ed9e603b5d72268a7744ec8c69031f9cf757e60a2309ada10eab1b99d0d0aceb1cead21cd1c6f56e99115ca309376cb04fd8d6d85ea2a839acfc6da593a1dcfa4b8fb", 0xef}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="190a1b198b96fd9b4cbd4aded1b4de1d0c4510490cc0feccb0c54e8aa846c6792b2d5b4515cc2a795d9a290dfb35ee0d2cb9a15199980f669607e5b8a38b885586b83b90a1755597efe488e35aac1b61e2b6d638278989e8757e427d61302a1c0ff56778b8df17b9fbb5a30062a785c6302841769ae2e6ad615e8288fb79f55225dbe9729cca91ea916f36145999eae60817a7c73da10b25326c28996b9973a127b9d35cacf0784d2603527d87d56efd3bf0d9553cdf1067528747", 0xbb}, {&(0x7f00000014c0)="8d0d29317a0502a9695abf0c711925a22bd581aa3ee08321fda55122462aba3fd5e7356253dc1d9cbcaebc36ecc12a9cda9bd1d152450d1d58212ad0e0ef0b5281e4a0f926a7e188d733389f15828f0dd588d7921d8ca811dedf095893604e679da8efdafa891b60105e8b546fc28666e953b069904bf0dbca7e17d8666a086b010782a719c69a61dc72ed3f5900afeec99384c2f71752dd3e07", 0x9a}, {&(0x7f0000001580)="4f33434585732fa3add89dafacba43acf23d7b58ada915275a47712d7bc15567f9c918cf7761ea7d0e5256d05724564f74748d8d37ad412f78c9329f1c387ea42c8539ef1b43ed9a6bce7191ce29edd80422f513b0e900bd8d414598de0479ba7121e57b6e23376313f152e9ad6f81b8de30ba24281c95a7710f13e151e98986f1af226c48a5e8d1aa154ebbaa8e69a44bacd4f80befd379d76f4cabef748ee04bcca07ac606417ba470667496d566a90d9b6d6a5f8677bc93dbc6830edb3f82e0c17b5e42a99f0b1e1c6a561f215e49520af9bd358371e9c30a766a752b80e1352ad95f95db9119949eca51d0bfb264a0", 0xf1}], 0x8, &(0x7f0000001800)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @local}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x13}, @dev={0xac, 0x14, 0x14, 0x44}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @loopback, @broadcast}}}], 0xd8}}, {{&(0x7f0000001900)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001b80)=[{&(0x7f0000001940)="31a74f68e750ac922cdca4dd1b9f207d430ea82c7ef1182a3e2949cf9930b5b7dc93d58023f0c2e6e4dbe307e4a244bcb7c8f3742bb591561abeec86cc23acbe5db9", 0x42}, {&(0x7f00000019c0)="c52e006a14aa5470669205b0b25e53cc9a1c14ee56c20f9dae3bae6879e059fb91b35be7be644b", 0x27}, {&(0x7f0000001a00)="8301e6498f3d1e660d98a9048f85c37ff78c1365902412a665a6f5d8c70ce43db8e8ff8d14f144336545afb73ca7a16f224d54888ccba9e3885fc93eafc8c60798fd0c2e41d4d8fe7eb362c3cdc3228e5bfe35522de47501479ef45b7394b28938a8e35c53b9f74e8ac3b24fade6d9cac9b572dae8d210720e2cb03712d5", 0x7e}, {&(0x7f0000001a80)="9761a5a25c48f0d75f194ac747d493b3bf90f0cd8fb833777f2854f81993257c618afbc2494e101b05729ad40b711a32021cf35000cc9a61a542f34d37a1ea435540de117d7eff03dc82defbd3b68c1a63978bac1867b1e92bdfa272339ed689ab0b1224039ce4565e806c3eaadaf68c54f8e8308a7e6da1145d701dfcc472ca71e59762ece94ed28bb3a8a849b03c67b716af97a27d37dcc5d219c141bb505884cc7d662cef617b9d27bbf6b000d9c0fa71e417d6dd4787c9b08d761fcfbcc150138e591ed30e51676f4ee89dabc78edb8f31a78ac11ab86fa9", 0xda}], 0x4, &(0x7f0000000240)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1000}}, @ip_ttl={{0x14, 0x0, 0x2, 0x40}}, @ip_retopts={{0x10}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7f}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @multicast2, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffe}}], 0xa8}}], 0x2, 0x1) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000140), &(0x7f0000000180)=0x4) 1.806949293s ago: executing program 3 (id=269): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000080)=0x8000, 0x4) (async) r1 = syz_usb_connect(0x5, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040001"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000002580)={'ip6_vti0\x00', &(0x7f0000002500)={'syztnl0\x00', 0x0, 0x29, 0x5, 0x3, 0x7, 0x18, @local, @rand_addr=' \x01\x00', 0x8, 0x7800, 0x7, 0x2}}) 1.670338627s ago: executing program 0 (id=270): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="c40000001900010000000000000000000000000000000000000000000000000000000000000000000000ffffe000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0040000000000000070000000000000000000000000000008e0808000000000000000000000000002d00000000000000000000000000000000000000000000000700000000000000ffffffffffffffff00000000000000000000000000000000000000000000000001000003000000000a00100011"], 0xc4}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032abd7000ffdbdf250a0000005c0009800800020001000000080001000008000008000100070000000800010000080000080001000600000008000200ffffff7f0800020004000000080001007f0000bf0e978fc9ca88e40008000100911f000008"], 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff000000000008000100ac1414000c0009"], 0x30}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0xb4, 0x25, 0x1, 0x70bd0b, 0x25dfdbfb, {0xc}, [@nested={0xa0, 0xe, 0x0, 0x1, [@nested={0x9c, 0x30, 0x0, 0x1, [@typed={0x4, 0xfb}, @typed={0x14, 0x157, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @generic="12c1e10b5b45426ef2119446ccffb27addddb1acda4e61df321b94a59915e0cd0cca2d42458217da56d755e0f8ff3aa21668bb90118adf2af7deb83c8fe64f9d052207d2f210923071c0772c64a0cdd2f4efd475b763df1616f76f1d349f85ec943ae87b39c9d885927f02bf", @typed={0x14, 0x1a, 0x0, 0x0, @ipv6=@private1}]}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000d}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) ioctl$sock_netdev_private(r0, 0x89fa, &(0x7f00000005c0)="811907fcbe46e045ffbd8f0f0f19e9e13729927b8345a290f17ba2ffc10e006fea609d22e7b4601dcc47fa730a182cfb6a6662953e7bceb373ef0eab2d5eb543c360cd4a33075b620c647eff1e5e98805911702a9997ab1455440950bdc37225c1d85ee87e53de45bb395ea0db8b2d627e6ec78e6fe3eb3e1619ccd8873be908635aa067c23e63ef7c61797115cce48da28daa942e46bf87f154c5768710ffbb999cc9939acd2e751ddadab37bc8ad6011ce8f8f559b9b7a528aaf737f48052bc5a01dc600b4e1bbb8e843a1172acddf6527ff643868828060230a3a8e3d4a782ad154dd") syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000220edf104c05c10687c20102030109022400010000ae0009040000024f69960009050f029d8229720009058202"], 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000ac0)=@newtfilter={0x310, 0x2c, 0xd27, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xfff2, 0xfff6}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x2e0, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_TO={0x8, 0x2, 0x34}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x3c}, @TCA_ROUTE4_ACT={0x2ac, 0x6, [@m_bpf={0x1a0, 0x18, 0x0, 0x0, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_OPS={0x34, 0x4, [{0xfffa, 0x81, 0x7, 0x4}, {0x8, 0xed, 0xfb, 0x6}, {0x5, 0x89, 0x7, 0x2f}, {0xfff9, 0xfc, 0xbc, 0xc8}, {0xed5f, 0x1, 0xfa, 0x1}, {0x4, 0xd5, 0x1, 0x5}]}, @TCA_ACT_BPF_OPS={0x0, 0x4, [{0x9, 0x9, 0xc0, 0x7}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x0, 0x2, 0x8, 0x5}, {0x6, 0x8b, 0x2, 0x8001}, {0x8, 0x5c, 0x8, 0x4}, {0x6, 0x3, 0xff, 0x5}, {0x6, 0xfa, 0x1}, {0x7, 0x2, 0x3, 0xfffffffd}, {0x8001, 0xdf, 0x7, 0x9}]}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0xc7, 0x6, "545216cadd81e45f8b11e21f7fc73a74bdf891ee9e2caff67869340deb03d13f61d0fb2c03587ddb378a4a4831f6461b451c3525c3d8daee45ae97a416c5ae20de88152190f233eca1a7bf21ed6a991f681caa19754da8adacec5f9031f2dc44cc970507b99a283588bb16911f710341c7d9fd786c26864baf08e5d77cd5a417aac5f69fedd779efac18c3f9263ec756b2b0becd5db04795cdcca760ba77c92c6ffc2f8cb08a816f685669b8f61901152fce16cbb182b724bf30ceef19920530ae11f4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_skbedit={0x108, 0xb, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE]}, {0xc5, 0x6, "a8ef1ffd9c060eaeb1c80d33a4dcff34f3846521599d98c548e460442e312ddf2d5ca20bc8a8e167fcb56528b40a0ba312a5b199a45b777d48b7ee6a1eadd299278aefcc3b1f5a59b814d32b9dd358b332cc8a2d02edecea86bcb59cb5cb3fe9e18912992ad43c354b3d804da84cec8ce7f24e7762ef8c122fcd28f741acf77ff37a93e877783b689f914cf4ee4e3efad4fb19827f41e1f3e72ea89a4d85fe389c866e48e489bac471aa661a8d7cf38a5324d7f62922512167867e6a6f3d8795781a678ced36c0a8ac34fb3dbc96ba"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0xe0}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xfff2, 0x2}}, @TCA_ROUTE4_CLASSID={0x0, 0x1, {0x5, 0xffe0}}]}}]}, 0x310}, 0x1, 0x0, 0x0, 0x810}, 0x0) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) accept4(r8, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x1c, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x2, 0x0, 0x0, {[@sack={0x5, 0x2}, @generic={0x22, 0x6, "963b4794"}]}}}}}}}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r10, @ANYBLOB="080025000441578451d3951f30aeefb03320cecc0040aded21f36f1998f47a3267f83e204b2c8bc4bbf606bf9b49f5e69e"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r9, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x3, 0x4a}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xc004840}, 0x8000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'ip6tnl0\x00'}) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000003c0)=0x40) 1.457514416s ago: executing program 2 (id=271): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)={0x2c, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40) 1.352603711s ago: executing program 2 (id=272): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000001340)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000100037040400"/20, @ANYRES32, @ANYBLOB="8304050000000000380012800b000100697036746e6c000028000280"], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001800dd8d0900000000000000020000fc0000000500000000060015000200000014001680100008800c000380050001"], 0x38}}, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000005c0)=r3, 0x12) syz_open_procfs(r3, &(0x7f0000000080)='projid_map\x00') r6 = accept(0xffffffffffffffff, 0x0, 0x0) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$printer(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) syz_usb_control_io$uac3(r7, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000008c0)={0x0, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB=' \r\x00\x00\t\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$lan78xx(r7, 0x0, &(0x7f0000000400)={0x34, &(0x7f00000004c0)={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0}) connect$inet(r6, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) 1.042289462s ago: executing program 4 (id=273): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x0, 0x2, 0x1}, 0x18, 0x0) dup(r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xf4) syz_emit_ethernet(0x143, &(0x7f0000000540)={@broadcast, @random="015a37cb9737", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10d, 0x3a, 0xff, @private2, @ipv4={'\x00', '\xff\xff', @multicast2}, {[], @ndisc_na={0x88, 0x0, 0x0, 0x1, '\x00', @mcast1, [{0x2, 0x1e, "cd9364768997ecf05991d64482e04c4c47c215eb2ee92b5f15df186fedb4bfebc99a36e6a4fe33ebb7295972d37c0dba98c1f7ce6b71d1b6842b6fb4eba0f24007297837fbf205026c707133af13a804f29f921906f8958f9f4d820ed853f90883f24693863c7a15820db42ba357a1828c302854e04677947bc6f5eb68f2caaa63ad4359463d42945b23d9a8f7f2aaa761c2ba98b217a89cf4e07761483683d05260b697b97f01abe644bf6088a8fa4c54ec59914a89749549f10f70dc30cef22381f500760bc70a603e682097e5a34416b14dd1c26262e8d15275c984d6fa0f9aad1ec0dd24648a0a71ae1aa7eda8b577a643"}]}}}}}}, 0x0) syz_usb_connect(0x0, 0x5d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b36cec20ca08602058c60102030109024b0e01000000000904"], 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_ONE_REG(r6, 0x4010aeac, 0x0) r7 = socket(0x10, 0x2, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000340)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) syz_open_dev$sndmidi(&(0x7f0000000140), 0x3, 0x2008c2) write$binfmt_script(r8, &(0x7f0000000500)={'#! ', './file0'}, 0xb) writev(r8, &(0x7f00000001c0)=[{&(0x7f0000000100)="f2", 0x1}], 0x1) close_range(r7, r8, 0x0) 992.052787ms ago: executing program 0 (id=274): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xca003, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000240)="b9800000c00f3235000100000f300f20c035000000800f22c066ba6100b805000000efc4e1555538c4c1b1d24900660f60c50f2055660fae3a66bad004edc744240000000080c7442402f8ff0000c7442406000000000f011c24", 0x5a}], 0x1, 0x44, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 722.726111ms ago: executing program 0 (id=275): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x80802, 0xcd) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r2, 0x80605414, &(0x7f0000000500)) r3 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x2c020400) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r3}, 0x68) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4010000000000ffd, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}}) io_setup(0x1, &(0x7f00000016c0)=0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x141000) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r7, 0x408c5333, &(0x7f0000000200)={0x7, 0x6, 0x1, 'queue1\x00', 0x5}) ioctl$FE_GET_PROPERTY(r6, 0x80106f53, &(0x7f00000002c0)={0x38, &(0x7f0000000040)=[{0x3d, '\x00', @data, 0x4db6}]}) fsetxattr$trusted_overlay_upper(r6, &(0x7f0000000300), &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xbd, 0x1) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x5d, @remote, 0x4e22, 0x2, 'wrr\x00', 0x36, 0x80000000, 0x800}, 0x2c) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000eaffffff2b000480280001800d00010073796e70736ff8790000000014000280050002000680001106000140000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000500000a"], 0x80}}, 0x0) io_submit(r4, 0x16, &(0x7f0000001640)=[&(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x1, 0x4, r0, &(0x7f0000000280)='a', 0x1, 0x5}]) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) 618.584344ms ago: executing program 1 (id=276): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x284, 0x0, 0x216}]}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="17090010000000000000010000000500070000000000080009000000000008000a0000000000060002000000000006001a"], 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, &(0x7f0000000380)={0x1, r6}) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, &(0x7f00000002c0)={0x1, r6}) r7 = semget$private(0x0, 0x6, 0x0) semtimedop(r7, &(0x7f0000000380)=[{0x2, 0xf, 0x1000}, {0x2, 0x3, 0x3000}], 0x2, 0x0) semtimedop(r7, &(0x7f00000003c0), 0x0, 0x0) semop(0x0, &(0x7f0000000340)=[{0x2, 0x8001, 0x1000}], 0x1) semop(0x0, &(0x7f0000000300)=[{0x2, 0x0, 0x2000}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000000)={0x3800, {"e6a3785ef3ea62186288f8d2b35df471", "d35c65ff7462d83df18224e8fe7e024f", "82e70a363e66af9d666e017c542a839d"}, 0x7ad, 0x7}) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r8 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r9 = msgget$private(0x0, 0x0) msgctl$MSG_STAT_ANY(r9, 0xd, &(0x7f0000000000)=""/49) ioctl$I2C_RDWR(r8, 0x707, &(0x7f0000000200)={&(0x7f0000000080)=[{0x50, 0x8001, 0x0, 0x0}, {0xd, 0x18001, 0x0, &(0x7f0000000040)}], 0x2}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 198.689232ms ago: executing program 0 (id=277): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000004180)={0x2020}, 0xffffffffffffff40) io_uring_enter(r0, 0x52aa, 0x13c8, 0x2, &(0x7f0000000000)={[0x401]}, 0x8) openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000140)={0x0, 0x9, 0x3}, 0x8) socket$unix(0x1, 0x1, 0x0) write$FUSE_NOTIFY_RESEND(r0, &(0x7f0000000880)={0x14}, 0x14) socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x67, r3}) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000540), 0x42a00) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/dev_mcast\x00') syz_emit_vhci(&(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x2d) read$FUSE(r5, &(0x7f0000000340)={0x2020}, 0x2020) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r5, 0xc0505405, &(0x7f0000000580)={{0xfffffffffffffffc, 0x3, 0x0, 0x0, 0x81}, 0x7, 0x800004, 0x83ffffe}) ioctl$LOOP_CONFIGURE(r4, 0x1277, 0x0) socket$tipc(0x1e, 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8004, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) 0s ago: executing program 3 (id=278): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0xffffffffffffffff) keyctl$invalidate(0x15, r2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="a6e2", 0x2, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000740)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x1, 0x0, 0x31}, &(0x7f0000000780)=0x40) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = open_tree(0xffffffffffffffff, &(0x7f0000002d00)='./file0\x00', 0x89100) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000002d40)={0xffffffff, 0x1000, {0xffffffffffffffff}, {0xee01}, 0xfffffffffffffffa, 0x5}) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000000080)={0x50, 0x0, r9, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) syz_fuse_handle_req(r8, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r8, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)={0x150, 0x0, 0xfffffffffffffffb, [{{0x2, 0x1, 0x6, 0x800, 0x8, 0x4, {0xfffffffffffffffd, 0x56541a38, 0x7, 0x8, 0x4, 0x1ff, 0xb28d, 0x0, 0xffff, 0x4000, 0x0, r10, r11, 0x8, 0x6}}, {0x4, 0x7, 0x2, 0x0, '.%'}}, {{0x2, 0x0, 0x6, 0x8b5, 0x4, 0x7fff, {0x5, 0xd23, 0x3, 0x7fff, 0x3, 0x7, 0x8, 0x9, 0x0, 0x1000, 0xba2f, 0x0, r11, 0x20000000}}, {0x1, 0x8, 0x2, 0x2, '.%'}}]}, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000002d80)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@private2}}, &(0x7f0000002e80)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000002ec0)={{{@in=@private, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@empty}}, &(0x7f0000002fc0)=0xe8) syz_mount_image$fuse(&(0x7f0000002c80), &(0x7f0000002cc0)='./file0\x00', 0x100004, &(0x7f0000003000)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r7}, 0x2c, {'group_id', 0x3d, r11}, 0x2c, {[{@default_permissions}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x4}}, {@blksize={'blksize', 0x3d, 0x800}}, {@blksize}], [{@appraise_type}, {@fsname={'fsname', 0x3d, '\'+[.+$^&-.'}}, {@fowner_eq={'fowner', 0x3d, r13}}, {@measure}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vlan\x00'}}, {@dont_hash}, {@euid_eq={'euid', 0x3d, r14}}, {@dont_appraise}, {@smackfsfloor={'smackfsfloor', 0x3d, '}-(*&&'}}]}}, 0x1, 0x0, &(0x7f00000031c0)="987dda977ff782") sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newtfilter={0x98, 0x2c, 0xd27, 0x70bd2f, 0x25dfdbfa, {0x0, 0x0, 0x0, r5, {0xfff2, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_matchall={{0xd}, {0x64, 0x2, [@TCA_MATCHALL_ACT={0x60, 0x2, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x1, 0xffffffff, 0xfffffffffffffff9, 0x800, 0x4}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x598}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x4004890}, 0x20084084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002c40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002c00)={&(0x7f00000000c0)=@newtfilter={0x2b3c, 0x2c, 0x400, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xffe0, 0xffe0}, {0x0, 0x4}, {0xfff1, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_flow={{0x9}, {0x1bc, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x8}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x9}, @TCA_FLOW_XOR={0x8, 0x7, 0x9}, @TCA_FLOW_ACT={0x190, 0x9, 0x0, 0x1, [@m_csum={0x10c, 0x5, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x40, 0x7, 0x2, 0x100, 0x3ff}, 0x5b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfa, 0x5, 0x30000005, 0x7, 0x163a0}, 0x28}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2b7, 0x80000001, 0x7, 0x0, 0x6}, 0x55}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x5, 0x2, 0xffffffff}, 0x69}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x9, 0x7, 0x4b82b0ed, 0x10000}, 0x14}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x200, 0x7, 0x10000001, 0x3, 0x7fff}, 0x21}}]}, {0x36, 0x6, "733ef47f9944b9fd9fb9d24e5c860398bfa1c200b023d468371d278028750f8fc0badf466848540a244de1b663dd90dd24f5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_ct={0x80, 0xa, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0xd}, @TCA_CT_MARK_MASK={0x8, 0x6, 0xfffffffe}]}, {0x47, 0x6, "80732e88ea1a2561bec6c3cd0debb8cd6d4ed9da8acf7b1a26178aee2c7a37085a84bab896b0ffecc8bc356521d6f1015391819905ad297b0a65bb68dc3eb57eaa0d94"}, {0xc}, {0xc}}}]}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x5, 0xe}}, @TCA_FLOW_XOR={0x8, 0x7, 0x9306}]}}, @filter_kind_options=@f_basic={{0xa}, {0x2934, 0x2, [@TCA_BASIC_EMATCHES={0x37c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x8c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x800, 0x3, 0x8}, {0x3, 0x396, 0xa, 0xfffffff9}}}, @TCF_EM_IPT={0x14, 0x3, 0x0, 0x0, {{0x5, 0x9, 0x4}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x7, 0x3, 0x1}, {0x4, 0xf558, 0xfffffff8, 0xf}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xb, 0x8, 0x7}, {0x3, 0x3, 0x2}}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0xd65, 0x2, 0x3}, {0x80, 0x1, 0x1, "fa"}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0xaa, 0x2, 0x6}, {0x3, 0x6, 0x0, "340b1a9280a1"}}}]}, @TCA_EMATCH_TREE_LIST={0x2e4, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x400, 0x2, 0x3}, {0x8, 0x7, 0x2, "e76d4b2a5ba66c"}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x3, 0x212}, {0xa, 0x8, 0x3, 0x3}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x7fff, 0x8, 0x3}, {0x1, 0x2, 0x1}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x8}, {0x1ff, 0x1, 0x6, 0x2}}}, @TCF_EM_IPT={0x20, 0x3, 0x0, 0x0, {{0x200}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}]}}, @TCF_EM_META={0x44, 0x2, 0x0, 0x0, {{0x7ff, 0x4, 0x1}, [@TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_RVALUE={0x1b, 0x3, [@TCF_META_TYPE_VAR="41c9edbf", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="808c03f27b3723", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR]}, @TCA_EM_META_LVALUE={0xd, 0x2, [@TCF_META_TYPE_VAR="ae3fb42b71e8282a1a"]}]}}, @TCF_EM_IPT={0x134, 0x3, 0x0, 0x0, {{0x7, 0x9, 0xb8}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_MATCH_DATA={0xaa, 0x5, "f4a0669764a86fc74adad0b808229350fba9d369a07ee610468d176db34ca5e20cef7960f88c70108878bd11b49ae18e1aec9c7cd9b386ec575e974562e7b62f5e3bbf65d485e0af29cc69565240d265dc931e36f8df8ec9054725c59254848b04adeff7bc3a2aa793f814e6a6e58e868a6d5e7811e96b177733d3911c4641215ac342632e696d3d918db990f3772c6d6bebb34e5e1f41b34c714b3dcf52800bdbc3e5f7f335"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x3f, 0x5, "326f48c10662486bc21705d770cf854de87c2a5ac5b3df66b57daed1ffa38c9c696fa0d0641e1b424df965e81008912847fda6005b7dfa767cdccd"}]}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x5, 0x2, 0x8}, {0x8, 0x1, 0x2, "f9"}}}, @TCF_EM_CONTAINER={0xa8, 0x2, 0x0, 0x0, {{0x3, 0x0, 0x86ff}, "2d1f0ae2f53c9faca91bef11c853b006ff2fa1a9af3d52bc2bee934936da6365b39fbf6ffda7d09658fd0efbc72a71a2d0c420e8b18a0ff0c45c9b9e116efdc780415a0398f1799acb9b2760c27e956ac5ba71698f1c0ef35e56f1d97d19e6240a4a5536e88423eba6fde6c2314b795a671a52916abebc530b6928ade6bcc2fa990c42f0d031c3415a259e7fcbf9e2c92f8600a2f6ef9a8334"}}, @TCF_EM_META={0x2c, 0x3, 0x0, 0x0, {{0x7, 0x4, 0x3}, [@TCA_EM_META_RVALUE={0x20, 0x3, [@TCF_META_TYPE_VAR="dd325c5f19", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="e113ad10b276", @TCF_META_TYPE_VAR="f6"]}]}}]}]}, @TCA_BASIC_ACT={0x25ac, 0x3, [@m_gact={0x148, 0xf, 0x0, 0x0, {{0x9}, {0x70, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x18c9, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x2, 0x2, 0x7fffffff, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0xfffffffe, 0x10000000, 0x7442, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0xe7, 0x2, 0x10000000, 0x8, 0x3a}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x2679}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x15e0, 0x4}}]}, {0xb0, 0x6, "ef0081f0f326038e37281efe458f441ed563aea071985bc124e6c1af7548a9ec0244b1aa7464371ff6fa2d7103ffeef9f0ae166118411d3b83b169443d4fb1fb14629e2ad75a2adcb8b4321ffa7e38b53bd860f0192c329f46c29a7fd7eef8a18da3259a893e1890569528d81fd4c49e04fb0da43bdab19555fc74d675041dd9c985011a850376f9c3635eadd5505cdffa07abb91df71e14fc973ba284db95bda4b1d637e41d790c27388255"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_nat={0x204, 0x14, 0x0, 0x0, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xffff8001, 0xc815, 0x3, 0x4, 0xfff}, @multicast1, @private=0xa010100, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x1, 0xffffffffffffffff, 0x1283, 0x40000000}, @private=0xa010102, @private=0xa010101, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x5, 0x3, 0x8e18, 0x10}, @empty, @local, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xeb0a, 0xb03, 0x5, 0x9, 0x5}, @local, @rand_addr=0x64010102, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xc93, 0x4, 0x1, 0x3, 0x8}, @multicast2, @remote, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0xd3a, 0xffffffffffffffff, 0x3, 0x94}, @remote, @multicast2}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x4, 0x7, 0x3, 0x1}, @remote, @private=0xa010102, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0xa, 0x4, 0xffff, 0x821}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x401, 0x3, 0x67, 0x9}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0xffffff00, 0x1}}]}, {0x72, 0x6, "6643bf9e3ae2cb236cdcb4d5c9f357389d6e8f7e0c73a1166c48edfbd24ea1aeb2a4a56faab023262576e9bf80046f9ee29355464ee4dfa4d4a3c02836dc39f55bc8995e25e56b8be6dc82e50a682c68a82ea895a9ba4cbcfadc69e65cd6059219dae8b1e560dece4b3a5335e45f"}, {0xc}, {0xc}}}, @m_skbmod={0x184, 0xf, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xfffa}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x8, 0x3, 0x20000005, 0x9, 0x3}, 0x4}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x81}]}, {0xe7, 0x6, "c366acf51034857f2ba50f44f6e5e21c1412d348329e85acef5377ef5c63c0ce796a5fd27827cb88a53ed10995579826995c7b0aa84316d11bb269bfcb4bb5c62c774d3ce4a192ce1b12664de6c506409dfe0aecbc4905968b556b42e69d09acaadc6af8b19270311a8bf2eb8156fed2f96c336804cd536c6484ff66138b6eb112295f23d00714e3ebe69c9e606127b85169d691d054bc47cf3b735985ba5081c15529ff9a72d9587ae8845d3bb0ff0df9013d065e4f4cbac5b5148770c4f904f2fb05857a72c2df052a7c30da17761f98fa31f95a67deefb07f507c58a299f9ca3995"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x6, 0x2}}}}, @m_pedit={0x1e30, 0x1, 0x0, 0x0, {{0xa}, {0x1db4, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0xc8, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x8ad648cbbfee8bcd}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS={0xe38, 0x2, {{{0xf8, 0x5, 0x3, 0x4, 0xa5}, 0x2, 0x0, [{0x0, 0x9, 0x5, 0x49, 0x6, 0x5ac4}]}, [{0x80, 0x1, 0x0, 0x9, 0x7, 0x4}, {0x5, 0x9, 0xf, 0x13aea2a4, 0x7}, {0x5b, 0x8003, 0x2, 0xd7, 0x3, 0x661d}, {0x5, 0x5, 0x10000, 0x1, 0xc0000, 0x5}, {0xffffee74, 0x8, 0x1000, 0x1ff, 0x10}, {0x80000001, 0x8, 0x8000000, 0x7, 0x6e0, 0x5}, {0x841, 0xff, 0x8, 0x569, 0x2, 0x8000}, {0x0, 0x2, 0x4, 0x9, 0x2, 0x2}, {0x91, 0x0, 0x79, 0x100, 0xffffff3c, 0x2d}, {0x0, 0x5, 0xc, 0xfffffffe, 0xffffacdd, 0x7}, {0x9, 0x6, 0x1, 0x6, 0x99, 0x7}, {0x1, 0x1, 0xf820, 0x2, 0x8, 0x6}, {0x5, 0x3, 0x605f, 0x3, 0x0, 0x6}, {0x0, 0x5f, 0x0, 0x5, 0x7e4, 0x5a17}, {0x0, 0x6, 0xd7, 0x6, 0x0, 0x200}, {0xc3, 0x6, 0x8, 0x1, 0x1c2, 0x8}, {0x8, 0x3, 0x101, 0x4, 0x1, 0x4}, {0x9, 0x4, 0xfffffffe, 0x5, 0x10000, 0x9}, {0x7, 0x8, 0x5, 0x100, 0x5, 0xc}, {0x6, 0x8, 0x7, 0x28, 0x10000000, 0x5c}, {0xc29, 0x9, 0xff, 0x3, 0x100, 0x6}, {0x5, 0x4, 0x7, 0xa, 0x5fb, 0x6}, {0x7, 0x663, 0x9, 0xab, 0xffffffff, 0x500}, {0x7ff, 0x9, 0x2, 0x1000000, 0x9, 0x987}, {0x80000001, 0x7fff, 0x9, 0x3, 0x48}, {0x3, 0xa8e, 0x3, 0x8, 0xd9c, 0x7}, {0xd1, 0xc, 0x4, 0x5d, 0xc4, 0x9}, {0x6, 0x6, 0x5325, 0x1, 0x6, 0xcda8}, {0xff, 0x0, 0x3, 0x6, 0x74, 0xd}, {0x6, 0x3, 0x7fffffff, 0x0, 0x5, 0x775}, {0x7, 0x1, 0x2, 0x1000, 0xfff, 0xb}, {0x10000, 0x28, 0x6, 0x6, 0x8, 0xfffffffe}, {0xac, 0x5, 0x8000, 0x2, 0x7a, 0x1}, {0x7, 0xefc, 0xe, 0x3, 0x80000001, 0x1}, {0x956, 0x3, 0x9, 0xa, 0x1, 0x5}, {0x1, 0x4, 0x401, 0x2, 0xedec, 0x9}, {0x9, 0x0, 0x2, 0x4, 0x14ba, 0x80000000}, {0x5, 0x9, 0x80000000, 0x40, 0x5, 0x3}, {0x7c0d, 0x5, 0x457eb9cb, 0x1, 0xa, 0x38}, {0x0, 0x6, 0xe83, 0x2, 0x2, 0x6}, {0x5, 0x1ff, 0x7fff, 0xfc7, 0x6, 0x5}, {0x7ff, 0x6, 0x7, 0x2793, 0xd}, {0x7d7f, 0x10000, 0x4, 0x0, 0xa38, 0x14000000}, {0x80000000, 0xf3d1, 0x40, 0xd2, 0xc6e, 0x6}, {0xfffffff8, 0x5, 0xffffffff, 0x0, 0xf, 0x7}, {0x1, 0x8, 0x4, 0xffff, 0xb, 0x8000}, {0xfc87, 0x8, 0xdb, 0x5, 0x6, 0x80}, {0x7, 0xfff, 0xe, 0x7, 0xe, 0x8}, {0x8, 0x239e, 0x6, 0xfffffff7, 0x5f55, 0x9}, {0xffffffff, 0x5, 0xc, 0x3d, 0x7, 0xfffffff8}, {0xf0000000, 0xfffffffb, 0x5, 0x58e, 0x7ff, 0x2}, {0xb, 0x78, 0x9, 0xc5e, 0x7, 0xa82c}, {0x6, 0x5, 0x8, 0x8, 0x3, 0x2}, {0x5, 0x0, 0x4, 0xef3, 0x7fffffff, 0x1ff}, {0x10000, 0x5, 0x4, 0x4, 0xf2140, 0xfffffc01}, {0x6, 0x6, 0x2, 0x7, 0x2, 0x5}, {0x9, 0x101, 0xfffffffe, 0x9, 0x10000}, {0x0, 0xb40e, 0x3, 0x0, 0x3da0, 0x4}, {0x14000, 0x7, 0x3, 0x5, 0x7}, {0x1, 0x1, 0xc, 0x9, 0x8, 0xfffffff8}, {0x7, 0x3, 0x8000, 0x3, 0x5, 0x5}, {0x6, 0xffffff49, 0x573d, 0x9, 0x5, 0x8}, {0xffffffff, 0x5, 0x100, 0xd3, 0x4a5}, {0x8, 0xffffffff, 0x7, 0x9, 0x0, 0x1}, {0x665, 0x100, 0x4, 0x5a4c, 0x2, 0x9}, {0xffff8001, 0x7, 0x2, 0x9, 0x5, 0x400}, {0x7f, 0xfffffffe, 0x10000, 0x7, 0x5, 0x5763}, {0x100, 0x5, 0x8, 0x2, 0x9}, {0x1, 0x1, 0x911, 0x3, 0x6, 0x1}, {0x1, 0x10, 0x1, 0x80000001, 0x6, 0xbb2e}, {0x5, 0x4, 0x7fff, 0x8, 0x8fba, 0x7}, {0xfffffffb, 0xfffffff7, 0xfffffff7, 0x5, 0x7, 0x400}, {0x7ff, 0xffffff45, 0x3, 0x0, 0x4, 0x6}, {0x10000, 0x7, 0x6, 0x3ff, 0x8, 0x60d4d19f}, {0x7fff, 0x0, 0x2, 0x2, 0x8, 0x3}, {0xff, 0x7fff, 0x9de, 0xc, 0x8}, {0x6, 0x0, 0x6, 0x6, 0x800, 0x5}, {0x8, 0x9, 0x9, 0x8, 0x1288, 0x6}, {0x1, 0x0, 0x80000001, 0xfffffffd, 0x3, 0x1}, {0x1, 0x8001, 0x2, 0x7, 0x7f, 0x2cd}, {0x8, 0x8, 0x5, 0x4, 0x80000000}, {0xd815, 0x9, 0x8, 0x7e, 0x4, 0x7}, {0x86b, 0xffffa576, 0x0, 0x8, 0x2, 0x6f7e}, {0x7, 0x8001, 0x9, 0x756, 0x3ff, 0x1}, {0x9, 0x8, 0xe73, 0x7c, 0xde81, 0x6}, {0x2e7, 0x87, 0x0, 0x3, 0x3, 0xffff}, {0x4, 0x2, 0xfe3, 0x8, 0xb610, 0x9}, {0x2dfe780c, 0x0, 0x4, 0x6, 0x2, 0x3}, {0x3, 0x6, 0x5, 0xc, 0xa, 0x1}, {0x6, 0x0, 0x8, 0x6, 0x4, 0x6}, {0x10, 0x2, 0x9, 0xbfd3, 0x7, 0xff}, {0xdeae, 0x3, 0x2, 0x2, 0x856e, 0x24000000}, {0xffff, 0x6, 0xfffff046, 0xf3, 0x57b, 0x26}, {0x1500, 0x3, 0x0, 0x6, 0x9, 0x5}, {0xc, 0x10, 0x8, 0x2, 0x3, 0xcd8}, {0x79f3, 0x290, 0x10000, 0xc, 0x6, 0xb0}, {0x7, 0x4, 0x6, 0x8, 0x7, 0x8}, {0x3, 0x400, 0x4, 0x9, 0x9, 0x9}, {0x4, 0x4, 0x50, 0x7, 0x0, 0xa000}, {0x4, 0x3, 0x8, 0xfffff801, 0x8, 0x9}, {0x9, 0x3, 0x5, 0xa, 0xcac0, 0x2}, {0x7, 0x1000, 0x735, 0x7, 0x6, 0x4}, {0xffff, 0x1, 0x8, 0x7d, 0xd21, 0x200}, {0x3, 0x3, 0x9, 0x858e, 0x7, 0x8}, {0xf, 0x4321, 0x800, 0x2, 0x1, 0x800}, {0x8001, 0x5, 0xffffffff, 0xf, 0x100000, 0x6}, {0xe, 0x6, 0x8, 0xcc46, 0x6, 0x40000000}, {0x0, 0x1, 0xceb, 0x105f555d, 0x100, 0x1}, {0x5, 0x5, 0x1, 0xe, 0x260000, 0x4}, {0xf4, 0x7, 0x40, 0x7ff, 0xa8ec, 0x1000}, {0x1, 0x0, 0x5, 0x5, 0x1, 0x5}, {0x4, 0x1000, 0x1ff, 0x1, 0x7, 0x20000000}, {0x6, 0x4, 0x0, 0x9, 0x4, 0x5}, {0x0, 0x9, 0x6, 0xfffffffa, 0x5, 0x2}, {0x80, 0x8, 0x2, 0x7, 0x1, 0xfffffffc}, {0x8, 0x6, 0x5, 0x9, 0x1, 0xa3}, {0x9, 0x5, 0xffff, 0x9, 0x89d, 0x7}, {0x5, 0xc8ca, 0x0, 0xe31, 0x7, 0x1ff}, {0x2, 0x1, 0x0, 0x10000, 0xc, 0x3}, {0x9, 0xffff, 0x0, 0x2, 0xbb8, 0xb4}, {0x8001, 0x5, 0x4, 0xbe35, 0x5, 0x401a}, {0x1, 0x3, 0xc8, 0x3, 0xfffffff9, 0x401}, {0x2, 0x4, 0xff, 0x2, 0x5, 0x15}, {0x0, 0x280000, 0x6, 0x9, 0x8ad}, {0x4, 0x400, 0x0, 0x664, 0x9, 0xb}, {0x81, 0xfffffffb, 0x5, 0x9, 0x84, 0x9}, {0x81, 0x7, 0x2, 0x80000000, 0x3000, 0x800}, {0x2, 0x6, 0x7, 0xfff, 0x3ff, 0x1}], [{0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x5, 0x1}, {0x7}, {}, {0x2}, {0x3, 0x1}, {0x3}, {0x5}, {0x3}, {0x3}, {0x2}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x4}, {0x5}, {0x4}, {0x3}, {0x3, 0x1}, {0x6}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x1}, {0x5, 0x1}, {0x2}, {0x2}, {0x1}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x2}, {0x2}, {0x3}, {}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x5}, {}, {0x4}, {0x2, 0x1}, {0x1}, {0x5}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x4}, {0x1}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {}, {0x1, 0x1}, {0x5}, {0x2}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x1, 0x1}, {0x6}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {}, {0x5}, {0x4, 0x1}, {0x2}, {0x3}, {0x5}, {0x5}, {0x5, 0x1}, {0x2, 0x1}]}}, @TCA_PEDIT_PARMS_EX={0xeb0, 0x4, {{{0x0, 0x5, 0x6, 0x3, 0x800}, 0x81, 0x0, [{0x6, 0x7, 0x0, 0x8, 0x3, 0x800}, {0x8, 0x52f4, 0x2, 0xff, 0xffffff69, 0x7}, {0xfffffff2, 0xa7, 0x0, 0x42, 0x9, 0x5}, {0x7ff, 0x3, 0x10, 0x7, 0x0, 0x8001}, {0x6, 0x10000, 0xeca0000, 0x80000001, 0x401, 0x3}, {0x2, 0x2, 0x0, 0x8, 0x2bce15f6, 0xe}]}, [{0x200, 0x2000000, 0x6, 0x8, 0x80}, {0x80000000, 0xc, 0x0, 0x5, 0x0, 0xa9}, {0x5, 0xfff, 0x3ff, 0x6, 0x9, 0x3}, {0x4000000, 0xc43, 0x5, 0x7ba7, 0x0, 0x3}, {0x9, 0x792a, 0xd, 0x9215, 0xe01, 0x7fffffff}, {0x8, 0x3ff, 0x1cf, 0x8, 0xe2e7, 0xd}, {0x6, 0xfffffffc, 0x9, 0x1000, 0x1, 0x2}, {0x0, 0x0, 0x7f5, 0x8, 0x44, 0x8}, {0x6, 0x8, 0x415, 0x80, 0x4, 0xff}, {0x80000000, 0x8, 0x5, 0xe3, 0x401, 0x10000}, {0x130b, 0x6, 0x9, 0x1000, 0xa2}, {0x4, 0x7, 0x3216, 0xd4d, 0xb6293000, 0x400}, {0x5f, 0x3, 0x42, 0x7ff, 0xfffffffa, 0x9}, {0x37, 0xa4, 0x1bb6, 0x9, 0x1, 0x2}, {0xf, 0xa, 0x6, 0x80, 0x3, 0x4}, {0x8, 0x3, 0x1, 0x9, 0x8000, 0x8000}, {0x2, 0x3, 0x2, 0x4470, 0x40, 0x4}, {0x2, 0x8, 0x80000001, 0x2, 0x7, 0x2}, {0x89, 0x6, 0xfff, 0x7, 0x2, 0x80}, {0x81f2, 0x6, 0x89, 0x9, 0x10001, 0x7}, {0x20, 0x4, 0x3, 0x800, 0x1, 0x30a}, {0x2, 0xc42, 0x6, 0x7f, 0xffffff66, 0xfe}, {0x5, 0x9f, 0x2, 0x7963ef18, 0x0, 0x3}, {0x40, 0x1, 0x5, 0x6, 0x9d37, 0x6}, {0x80000000, 0x5, 0xff, 0x7f, 0x7, 0xfff}, {0xd, 0x7fff, 0x80000000, 0x5aa3, 0x9, 0x7ff}, {0xb, 0x3, 0x3, 0x82, 0xffffffff, 0x5}, {0x7, 0x3, 0x200, 0x8095, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x36, 0x4, 0x1}, {0x3, 0x8, 0x0, 0x4d2d, 0x2, 0x6}, {0x10000, 0xff, 0x5, 0x0, 0x3, 0x95}, {0x6d8, 0xfd, 0x4, 0x10, 0x7, 0xffffff5e}, {0x8, 0x10000, 0x4, 0x4e, 0x4, 0x988}, {0xe, 0x0, 0x180, 0x7, 0x7, 0xd559}, {0xffff, 0x401, 0x8, 0x401, 0x3, 0xb}, {0xc, 0x3ff, 0x80000, 0x80000001, 0x7, 0xfff}, {0x8, 0x3, 0x9, 0x8, 0x80, 0xffff}, {0x6, 0xc, 0xb5, 0x9, 0x7, 0x2}, {0x40, 0x6, 0x3, 0x6, 0xff, 0x6}, {0x8001, 0x7, 0x15c1, 0x4, 0x3, 0x7ff}, {0x8, 0x0, 0x6, 0x2da, 0x7, 0x401}, {0x6ce2, 0x200, 0x1000, 0x9, 0xb00, 0xc80}, {0x0, 0x7, 0x5, 0x0, 0x3, 0x4e}, {0x88, 0x4, 0x5, 0x5, 0x1, 0x6}, {0x8, 0x100, 0x200, 0xe, 0x4, 0x1}, {0x4, 0xa02, 0x41, 0x6, 0x2, 0x1}, {0x6, 0x855, 0xd3, 0x4d6, 0x0, 0x960}, {0x6, 0x2, 0x9, 0xff, 0x9, 0x6}, {0x7, 0x3, 0xd, 0xd, 0x3, 0x3}, {0x8, 0x2, 0x3, 0x2, 0x40, 0x1}, {0x1, 0x4, 0xe, 0x1, 0x1, 0xf}, {0x100, 0xba74, 0x80000000, 0x9, 0xffff, 0x7}, {0x4, 0x2, 0x9, 0x8, 0x2c5, 0x8}, {0x3, 0x6, 0x180, 0x8000, 0x8001, 0x3ff}, {0x6, 0xe4, 0x1, 0x3ff, 0x9, 0x8}, {0x4e66, 0x7, 0xfffff040, 0xe, 0x0, 0x7fff}, {0xfff, 0x0, 0x9, 0x401, 0xb614, 0x1ff}, {0x1000, 0x8000, 0x6, 0x21c, 0xa, 0x3}, {0x7, 0x3, 0x329, 0x2, 0x10001, 0x2}, {0x2, 0xfffffda1, 0x6, 0x6, 0x4, 0xfffffffc}, {0x9cad, 0x7, 0xb, 0x2, 0x3, 0x20000}, {0x7, 0x7fffffff, 0x8, 0xf, 0x1000}, {0x5, 0x48, 0x1, 0x80000000, 0x0, 0x7}, {0x95, 0x7, 0xfffff001, 0xeb44, 0xc, 0x8}, {0x9, 0x8, 0x1, 0x1ff, 0x101, 0x8001}, {0xffff, 0x81, 0x28800, 0x6, 0x1}, {0xf, 0xef, 0x8000, 0xa, 0xcfa, 0x5}, {0x511c, 0x0, 0x7, 0x0, 0x2, 0x80000000}, {0x1, 0x40b, 0xc9, 0x4, 0x618b781a, 0x1000}, {0x162c, 0x7, 0x0, 0x0, 0x10, 0x3}, {0x200, 0x7, 0xb38, 0xbb3d, 0x3, 0x5}, {0x3dc2, 0x7fff, 0xfff, 0x5, 0x7, 0x100}, {0x4, 0x1, 0x1, 0x2, 0xfa29, 0xfaf}, {0x9928, 0x0, 0x8, 0x9, 0x0, 0x3}, {0x6, 0x8, 0x5, 0x9, 0x1ff, 0x5}, {0x6, 0x6, 0x0, 0x0, 0x70, 0x9}, {0x40, 0x100, 0xd, 0x2, 0x0, 0xffff}, {0x2, 0x1, 0xd6e3, 0x7, 0x6, 0x10000}, {0x3, 0x8000, 0x5, 0x2, 0x3a, 0x401}, {0x4, 0x4, 0x7, 0x8, 0x3, 0xffffffff}, {0x5, 0xffff, 0x25c5, 0x7, 0x8, 0x3ff}, {0x7, 0x5, 0x3, 0x9, 0x0, 0x9}, {0x9, 0x1, 0xfff, 0x1, 0xfffffff9, 0xfffffff7}, {0x2, 0x7fff, 0xfd, 0x101, 0x5, 0xc000}, {0x52e, 0x5, 0x7, 0x8, 0x3f, 0x8000}, {0xfffffffa, 0x9f7d, 0x6, 0xac, 0x2, 0x7}, {0x100, 0x0, 0x1b, 0xffffff36, 0x18f, 0x9}, {0x6, 0x84, 0x2, 0x10000, 0x9, 0x3ff}, {0x4, 0x10, 0x5, 0x8, 0x4, 0x3ff}, {0x4, 0x10, 0x80e8, 0x5, 0xfffffff9, 0x3}, {0x7, 0x1000, 0xffff, 0x4, 0x8, 0x2d9}, {0x7fff, 0x0, 0x101, 0x6, 0x101}, {0x1, 0xfffff801, 0x5, 0x3, 0x1, 0x4532}, {0x98, 0x9, 0xffff8000, 0x3, 0xa9}, {0x80, 0x280000, 0x7fffffff, 0x2, 0x5, 0x2}, {0xe734773, 0x9, 0x8, 0x3, 0x416, 0x40}, {0x9, 0x0, 0xffff, 0x101, 0x3e33f4c7, 0x3}, {0x5, 0x7, 0x3, 0x2, 0x2, 0x7ff}, {0x4800, 0x7, 0x5d3d, 0x3, 0x2c4, 0x2}, {0x10000, 0x2, 0x2, 0xff, 0xbf, 0x100}, {0x7, 0x1, 0x4, 0x2, 0x96, 0x3}, {0x0, 0x6, 0x0, 0x6, 0x9, 0x2}, {0xffffffff, 0x2, 0x2, 0x2, 0x200, 0xc3f}, {0x9, 0x806d, 0x5, 0x1000, 0x7a3db69c}, {0x7, 0x17f5, 0x1, 0x8, 0x1, 0xffff8e12}, {0x6, 0xc63, 0x2, 0x7f, 0x4, 0x10000}, {0x8, 0x8, 0x7, 0x4, 0x0, 0x101}, {0x9, 0x3, 0x5, 0x1, 0x1ff, 0x2}, {0x0, 0x81, 0x3, 0x5cc, 0x4, 0x8}, {0xb9f7, 0x1, 0xffffff80, 0x1, 0x7, 0x9}, {0x7, 0x2, 0x4, 0xf, 0x6, 0x9}, {0x3, 0x5, 0x6, 0x0, 0x7, 0x3}, {0x3, 0x9, 0x6, 0x7, 0x1, 0x7}, {0x8, 0x8000, 0x7, 0x6, 0xdd2, 0x80000001}, {0xb, 0x4, 0x6c3, 0x9, 0xddc, 0x7}, {0x7, 0x2, 0x9, 0x1, 0xd, 0x80000000}, {0x7, 0x299a79b, 0x3, 0xffffff80, 0xe, 0x4f}, {0x6, 0x3, 0x134, 0x0, 0x1, 0x7}, {0x3, 0x7, 0x81, 0x3, 0xe, 0x3ff}, {0x3, 0x0, 0xfffffff9, 0x81, 0x400, 0xc65}, {0xffff, 0x6, 0x0, 0x9b4, 0x1, 0x3}, {0xa1, 0x7f, 0x1000, 0x1, 0x0, 0x6}, {0x5, 0x8, 0x4cc, 0xfffffffe, 0x75025583, 0x7}, {0x0, 0x74, 0xf493, 0x2, 0x6, 0x4a3}, {0x6, 0x10001, 0x8, 0xffff, 0x3945, 0x6}, {0x1, 0x7fffffff, 0x0, 0x2, 0x9fd, 0x5}, {0x7, 0xff, 0xcfa, 0x5, 0x0, 0x4}, {0x7, 0x6, 0x715, 0x7, 0xe, 0x7}], [{0x3, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x4}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0xa8f5047d90757d8b}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x5}, {0x2}, {0x5, 0x1}, {0x2}, {0x3}, {0x3}, {0x1}, {0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x4}, {0x6, 0x1}, {0xb7820eb0c6114920, 0x1}, {0x3, 0x1}, {0xc, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x4}, {}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x4}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x6}, {0x2}, {0x4}, {0x2}, {0x5, 0x1}, {0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {}, {0x5}, {0x5}, {0x1}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x4}, {0xe8879e022a188165, 0x1}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0xc, 0x1}, {0x4}, {}, {}, {0x3, 0x1}, {0x2, 0x1}], 0x6}}]}, {0x54, 0x6, "4453edda9ecd09b71e999a915c7bb47abf4352ffbb214f2998b8ed9705cf2fea7fdf3b448b454283c07c40e2161fa52e237b85862b1dad207df76035fdaa8367109fc39d87e0dc5f5c8448ece55f18cc"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_skbmod={0xc8, 0x4, 0x0, 0x0, {{0xb}, {0x60, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1ac}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x9}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5}]}, {0x3e, 0x6, "ca34d5853ff1f3504b76e22b8ac6fae4396e9574a51a92e4c2e997015669eb18a12e8153728962de7fad19cc04017d551c7a63dbccb9c98de3f8"}, {0xc}, {0xc, 0x8, {0x6}}}}, @m_xt={0x184, 0x1a, 0x0, 0x0, {{0x7}, {0xf8, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x6}, @TCA_IPT_TARG={0x82, 0x6, {0x8, 'nat\x00', 0xcb, 0xfffa, "4d528ced398867c54ebd9c225d42fb040a17e44b8c9e3899ae030215de3068b89c744ab5582b4a7f56a5e216afd57b9e8a9510249009b2a05c43e10667cc4164188d7a078c79f857401f9a14438cd0c1b01682944e93e676"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}]}, {0x67, 0x6, "5301e840023e6fafdca55da4b1a07a154abeaa7f75e06bcdc2ec37a1c1b193d71aa7df0ab5449587d60f4eff6d9f22a207415d04a83b03ed9753910cfded634afb9be208707a8165fc87b861cbef2950ed76bfae9c163173778dc8c0eb9aa32279c439"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_tunnel_key={0x5c, 0x9, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, {0x5, 0x6, "ef"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xfff1, 0xa}}]}}, @TCA_RATE={0x6, 0x5, {0x72, 0x4}}]}, 0x2b3c}, 0x1, 0x0, 0x0, 0x90}, 0x40040) syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000143edd08b82225646cd3010203010902440001000000010904000000020a0000052406000105240000000d240f0100000000000000000006241a000000152412"], 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000083c0)={'gretap0\x00', &(0x7f0000004200)={'syztnl2\x00', r12, 0xff10, 0x7800, 0x7, 0x8, {{0x1c, 0x4, 0x3, 0xb, 0x70, 0x66, 0x0, 0x8, 0x2f, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x27, 0x58, [@multicast2, @multicast2, @private=0xa010101, @rand_addr=0x64010100, @remote, @local, @private=0xa010100, @empty, @rand_addr=0x64010102]}, @timestamp={0x44, 0x18, 0x4f, 0x0, 0xb, [0x333, 0x0, 0x0, 0x5, 0x6]}, @generic={0x44, 0xf, "c427b64f197dc67073e29c7736"}, @ra={0x94, 0x4, 0x1}, @generic={0x10, 0x8, "738dda4f0bfe"}]}}}}}) connect(r3, &(0x7f0000008400)=@ll={0x11, 0x0, r15, 0x1, 0x3, 0x6, @broadcast}, 0x80) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.76' (ED25519) to the list of known hosts. [ 98.403425][ T5624] cgroup: Unknown subsys name 'net' [ 98.520872][ T5624] cgroup: Unknown subsys name 'cpuset' [ 98.529557][ T5624] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 99.942734][ T5624] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 102.122633][ T5637] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 102.130916][ T5637] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 102.140518][ T5637] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 102.149793][ T5637] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 102.158541][ T5637] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 102.166818][ T5637] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 102.174786][ T5647] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 102.175273][ T5637] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 102.183508][ T5647] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 102.194964][ T5637] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 102.205736][ T5647] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 102.214589][ T5637] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 102.216494][ T5648] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 102.226078][ T5637] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 102.230044][ T5648] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 102.237761][ T5637] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 102.242611][ T5647] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 102.258181][ T5649] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 102.260378][ T5637] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 102.268530][ T5649] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 102.272429][ T5648] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 102.280728][ T5649] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 102.287685][ T5637] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 102.293289][ T5647] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 102.304244][ T5637] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 103.179065][ T5652] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.186958][ T5652] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.194603][ T5652] bridge_slave_0: entered allmulticast mode [ 103.203217][ T5652] bridge_slave_0: entered promiscuous mode [ 103.252685][ T5652] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.260567][ T5652] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.267829][ T5652] bridge_slave_1: entered allmulticast mode [ 103.275082][ T5652] bridge_slave_1: entered promiscuous mode [ 103.294990][ T5650] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.302181][ T5650] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.309452][ T5650] bridge_slave_0: entered allmulticast mode [ 103.316417][ T5650] bridge_slave_0: entered promiscuous mode [ 103.364000][ T5650] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.371254][ T5650] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.378523][ T5650] bridge_slave_1: entered allmulticast mode [ 103.385464][ T5650] bridge_slave_1: entered promiscuous mode [ 103.440661][ T5652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.479589][ T5652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.489020][ T5654] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.496204][ T5654] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.504000][ T5654] bridge_slave_0: entered allmulticast mode [ 103.511069][ T5654] bridge_slave_0: entered promiscuous mode [ 103.525513][ T5650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.560630][ T5654] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.567814][ T5654] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.574950][ T5654] bridge_slave_1: entered allmulticast mode [ 103.581999][ T5654] bridge_slave_1: entered promiscuous mode [ 103.598649][ T5650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.627546][ T5652] team0: Port device team_slave_0 added [ 103.660804][ T5655] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.668039][ T5655] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.675193][ T5655] bridge_slave_0: entered allmulticast mode [ 103.682397][ T5655] bridge_slave_0: entered promiscuous mode [ 103.691126][ T5652] team0: Port device team_slave_1 added [ 103.704922][ T5653] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.712109][ T5653] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.719488][ T5653] bridge_slave_0: entered allmulticast mode [ 103.726414][ T5653] bridge_slave_0: entered promiscuous mode [ 103.742399][ T5655] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.749613][ T5655] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.756744][ T5655] bridge_slave_1: entered allmulticast mode [ 103.764192][ T5655] bridge_slave_1: entered promiscuous mode [ 103.781932][ T5654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.791239][ T5653] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.799082][ T5653] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.806251][ T5653] bridge_slave_1: entered allmulticast mode [ 103.814033][ T5653] bridge_slave_1: entered promiscuous mode [ 103.822413][ T5650] team0: Port device team_slave_0 added [ 103.847377][ T5654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.870305][ T5650] team0: Port device team_slave_1 added [ 103.884943][ T5652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.891998][ T5652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.918179][ T5652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.959498][ T5655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.969412][ T5652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.976456][ T5652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.002417][ T5652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.030947][ T5653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.054259][ T5655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.084689][ T5654] team0: Port device team_slave_0 added [ 104.092440][ T5653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.113732][ T5650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.120769][ T5650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.147165][ T5650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.159481][ T5650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.166463][ T5650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.192548][ T5650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.205206][ T5655] team0: Port device team_slave_0 added [ 104.212642][ T5654] team0: Port device team_slave_1 added [ 104.243138][ T5655] team0: Port device team_slave_1 added [ 104.260201][ T5653] team0: Port device team_slave_0 added [ 104.294652][ T5653] team0: Port device team_slave_1 added [ 104.306521][ T5652] hsr_slave_0: entered promiscuous mode [ 104.313299][ T5652] hsr_slave_1: entered promiscuous mode [ 104.329623][ T5654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.336709][ T5654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.358518][ T4948] Bluetooth: hci1: command tx timeout [ 104.363081][ T5641] Bluetooth: hci0: command tx timeout [ 104.368830][ T5637] Bluetooth: hci4: command tx timeout [ 104.374351][ T5649] Bluetooth: hci2: command tx timeout [ 104.380381][ T5642] Bluetooth: hci3: command tx timeout [ 104.387895][ T5654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.433458][ T5655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.441608][ T5655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.467789][ T5655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.479398][ T5654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.486356][ T5654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.512486][ T5654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.550144][ T5650] hsr_slave_0: entered promiscuous mode [ 104.556651][ T5650] hsr_slave_1: entered promiscuous mode [ 104.562933][ T5650] debugfs: 'hsr0' already exists in 'hsr' [ 104.568891][ T5650] Cannot create hsr debugfs directory [ 104.575058][ T5655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.582137][ T5655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.608277][ T5655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.625157][ T5653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.632218][ T5653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.658261][ T5653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.693101][ T5653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.700155][ T5653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.726065][ T5653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.871175][ T5655] hsr_slave_0: entered promiscuous mode [ 104.877819][ T5655] hsr_slave_1: entered promiscuous mode [ 104.883825][ T5655] debugfs: 'hsr0' already exists in 'hsr' [ 104.890161][ T5655] Cannot create hsr debugfs directory [ 104.900515][ T5654] hsr_slave_0: entered promiscuous mode [ 104.906723][ T5654] hsr_slave_1: entered promiscuous mode [ 104.912998][ T5654] debugfs: 'hsr0' already exists in 'hsr' [ 104.918867][ T5654] Cannot create hsr debugfs directory [ 104.963012][ T5653] hsr_slave_0: entered promiscuous mode [ 104.969321][ T5653] hsr_slave_1: entered promiscuous mode [ 104.975414][ T5653] debugfs: 'hsr0' already exists in 'hsr' [ 104.981363][ T5653] Cannot create hsr debugfs directory [ 105.373962][ T5652] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.387062][ T5652] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.395470][ T5652] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.408109][ T5652] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.438720][ T5652] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.449337][ T5652] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.465319][ T5652] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.476242][ T5652] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.538768][ T5650] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 105.549510][ T5650] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.562487][ T5650] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.572419][ T5650] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.581110][ T5650] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.590460][ T5650] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.598447][ T5650] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.609314][ T5650] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.705844][ T5655] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 105.715894][ T5655] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.730522][ T5655] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 105.741070][ T5655] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.753361][ T5655] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 105.763215][ T5655] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.771323][ T5655] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 105.780517][ T5655] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.852337][ T5652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.893008][ T5654] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.902674][ T5654] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.918194][ T5654] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.929011][ T5654] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.936725][ T5654] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.947419][ T5654] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.955285][ T5654] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.965461][ T5654] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.979203][ T5652] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.009394][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.017220][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.032148][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.039275][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.138827][ T5653] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 106.148918][ T5653] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.165440][ T5653] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 106.175202][ T5653] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.183346][ T5653] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 106.193382][ T5653] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.202064][ T5653] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 106.212421][ T5653] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.240175][ T5650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.292147][ T5650] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.323817][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.331012][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.354871][ T3365] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.362036][ T3365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.379434][ T5655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.425621][ T5655] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.437153][ T5642] Bluetooth: hci3: command tx timeout [ 106.443233][ T5637] Bluetooth: hci4: command tx timeout [ 106.449015][ T4948] Bluetooth: hci1: command tx timeout [ 106.449060][ T5641] Bluetooth: hci0: command tx timeout [ 106.461674][ T5649] Bluetooth: hci2: command tx timeout [ 106.493115][ T5652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.510371][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.517498][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.553918][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.561056][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.590865][ T5654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.630417][ T5653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.648891][ T5650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.666836][ T5654] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.691848][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.699060][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.733077][ T3365] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.740193][ T3365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.752233][ T5653] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.796782][ T5652] veth0_vlan: entered promiscuous mode [ 106.810106][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.817278][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.841683][ T3365] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.848855][ T3365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.870921][ T5652] veth1_vlan: entered promiscuous mode [ 106.890277][ T5655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.961623][ T5650] veth0_vlan: entered promiscuous mode [ 107.002954][ T5650] veth1_vlan: entered promiscuous mode [ 107.016066][ T5652] veth0_macvtap: entered promiscuous mode [ 107.045886][ T5652] veth1_macvtap: entered promiscuous mode [ 107.076022][ T5654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.102677][ T5652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.114228][ T5655] veth0_vlan: entered promiscuous mode [ 107.136487][ T5652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.159936][ T5650] veth0_macvtap: entered promiscuous mode [ 107.184608][ T5655] veth1_vlan: entered promiscuous mode [ 107.191910][ T3312] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.201883][ T3312] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.215774][ T5653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.235098][ T5650] veth1_macvtap: entered promiscuous mode [ 107.243108][ T3312] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.253005][ T3312] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.354112][ T5650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.376840][ T5654] veth0_vlan: entered promiscuous mode [ 107.401414][ T5655] veth0_macvtap: entered promiscuous mode [ 107.412664][ T5650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.424792][ T3312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.444932][ T3312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.468877][ T5654] veth1_vlan: entered promiscuous mode [ 107.475936][ T5655] veth1_macvtap: entered promiscuous mode [ 107.485288][ T5653] veth0_vlan: entered promiscuous mode [ 107.519962][ T3365] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.530138][ T3365] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.549284][ T5653] veth1_vlan: entered promiscuous mode [ 107.556375][ T3365] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.565389][ T3365] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.583022][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.599308][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.649684][ T5655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.685767][ T5655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.690270][ T5652] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 107.730295][ T5654] veth0_macvtap: entered promiscuous mode [ 107.741724][ T5653] veth0_macvtap: entered promiscuous mode [ 107.753283][ T5654] veth1_macvtap: entered promiscuous mode [ 107.761909][ T3365] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.770482][ T3365] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.828733][ T3312] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.845652][ T3312] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.855874][ T5653] veth1_macvtap: entered promiscuous mode [ 107.876709][ T3312] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.886378][ T3312] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.910120][ T5653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.922253][ T3312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.931234][ T3312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.946631][ T5653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.966335][ T5654] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.012814][ T5654] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.065687][ T187] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.083197][ T187] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.143599][ T187] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.164058][ T5732] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 108.191211][ T3365] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.234498][ T3365] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.263584][ T5713] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 108.283289][ T5713] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 108.305842][ T5729] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 5729 comm: syz.3.4) [ 108.306404][ T5713] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 108.336340][ T30] audit: type=1800 audit(1778949000.823:2): pid=5729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=7788 res=0 errno=0 [ 108.368907][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.391524][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.404912][ T3365] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.417623][ T5713] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 108.426606][ T3365] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.435681][ T5713] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 108.443711][ T3365] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.453761][ T5713] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 108.461297][ T5713] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 108.468810][ T5713] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 108.486279][ T5713] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 108.519259][ T5649] Bluetooth: hci4: command tx timeout [ 108.524993][ T5641] Bluetooth: hci1: command tx timeout [ 108.525943][ T5637] Bluetooth: hci3: command tx timeout [ 108.530495][ T5649] Bluetooth: hci2: command tx timeout [ 108.536868][ T4948] Bluetooth: hci0: command tx timeout [ 108.549386][ T5713] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0 [ 108.613008][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.640714][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.658862][ T5713] hid-generic 00A0:0006:0003.0001: hidraw0: HID v0.05 Device [syz0] on syz0 [ 108.724109][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.765625][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.849418][ T5736] fido_id[5736]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 109.002788][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.050095][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.123864][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.151549][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.219910][ T3365] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.255486][ T3365] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.398919][ T5745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.418500][ T5745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.437488][ T994] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 109.618443][ T5610] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 109.633736][ T994] usb 2-1: Using ep0 maxpacket: 32 [ 109.700696][ T994] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 109.720337][ T5752] capability: warning: `syz.0.8' uses deprecated v2 capabilities in a way that may be insecure [ 109.745880][ T994] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 109.760342][ T994] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 109.771044][ T994] usb 2-1: Product: syz [ 109.775897][ T994] usb 2-1: Manufacturer: syz [ 109.781317][ T994] usb 2-1: SerialNumber: syz [ 109.812970][ T5610] usb 5-1: device descriptor read/64, error -71 [ 109.825876][ T994] usb 2-1: config 0 descriptor?? [ 109.837222][ T5724] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 109.857401][ T5738] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 109.884154][ T994] hub 2-1:0.0: bad descriptor, ignoring hub [ 109.912574][ T994] hub 2-1:0.0: probe with driver hub failed with error -5 [ 110.021443][ T5724] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 110.033059][ T5755] netlink: 'syz.0.10': attribute type 12 has an invalid length. [ 110.045246][ T5755] netlink: 'syz.0.10': attribute type 29 has an invalid length. [ 110.056008][ T5755] netlink: 148 bytes leftover after parsing attributes in process `syz.0.10'. [ 110.066521][ T5724] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.066917][ T5755] netlink: 'syz.0.10': attribute type 3 has an invalid length. [ 110.092382][ T5610] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 110.109082][ T5724] usb 3-1: Product: syz [ 110.111952][ T5755] netlink: 'syz.0.10': attribute type 2 has an invalid length. [ 110.123629][ T5760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10'. [ 110.125795][ T5724] usb 3-1: Manufacturer: syz [ 110.134796][ T5755] netlink: 35 bytes leftover after parsing attributes in process `syz.0.10'. [ 110.142953][ T5724] usb 3-1: SerialNumber: syz [ 110.155362][ T5760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10'. [ 110.166193][ T5724] usb 3-1: config 0 descriptor?? [ 110.210014][ T24] usb 2-1: USB disconnect, device number 2 [ 110.248213][ T5610] usb 5-1: device descriptor read/64, error -71 [ 110.335100][ T5765] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12'. [ 110.368683][ T5610] usb usb5-port1: attempt power cycle [ 110.375209][ T5765] team0: Port device team_slave_0 removed [ 110.581465][ T5724] usb 3-1: Firmware version (0.0) predates our first public release. [ 110.590095][ T5724] usb 3-1: Please update to version 0.2 or newer [ 110.597509][ T5637] Bluetooth: hci2: command tx timeout [ 110.598114][ T5642] Bluetooth: hci4: command tx timeout [ 110.603004][ T5649] Bluetooth: hci3: command tx timeout [ 110.603030][ T5649] Bluetooth: hci0: command tx timeout [ 110.608535][ T4948] Bluetooth: hci1: command tx timeout [ 110.617265][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 110.637244][ T809] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 110.727311][ T5610] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 110.748279][ T5610] usb 5-1: device descriptor read/8, error -71 [ 110.768524][ T10] usb 4-1: device descriptor read/64, error -71 [ 110.788630][ T809] usb 1-1: Using ep0 maxpacket: 16 [ 110.795447][ T809] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.807624][ T809] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 110.819661][ T809] usb 1-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 110.830155][ T809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.840321][ T809] usb 1-1: Product: syz [ 110.844534][ T809] usb 1-1: Manufacturer: syz [ 110.850507][ T809] usb 1-1: SerialNumber: syz [ 110.858788][ T809] usb 1-1: config 0 descriptor?? [ 110.954458][ T5771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'. [ 110.969234][ T5771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'. [ 110.984129][ T5771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'. [ 110.997229][ T5610] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 111.004685][ T5771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'. [ 111.019779][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 111.030123][ T5610] usb 5-1: device descriptor read/8, error -71 [ 111.038950][ T5771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'. [ 111.150193][ T5610] usb usb5-port1: unable to enumerate USB device [ 111.173526][ T809] usb 1-1: USB disconnect, device number 2 [ 111.188583][ T10] usb 4-1: device descriptor read/64, error -71 [ 111.308701][ T10] usb usb4-port1: attempt power cycle [ 111.360963][ T5781] mmap: syz.1.16 (5781) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 111.414185][ T5781] Zero length message leads to an empty skb [ 111.667652][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 111.697967][ T10] usb 4-1: device descriptor read/8, error -71 [ 111.728300][ T5704] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 111.897063][ T5704] usb 2-1: Using ep0 maxpacket: 8 [ 111.903950][ T5704] usb 2-1: unable to get BOS descriptor or descriptor too short [ 111.913032][ T5704] usb 2-1: config 6 interface 0 has no altsetting 0 [ 111.923028][ T5704] usb 2-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=7e.1c [ 111.932296][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.940424][ T5704] usb 2-1: Product: syz [ 111.944594][ T5704] usb 2-1: Manufacturer: syz [ 111.949244][ T5704] usb 2-1: SerialNumber: syz [ 111.957525][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 111.978542][ T10] usb 4-1: device descriptor read/8, error -71 [ 112.092772][ T10] usb usb4-port1: unable to enumerate USB device [ 112.167918][ T5704] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected. [ 112.178444][ T5704] pwc: Failed to set LED on/off time (-71) [ 112.184540][ T5704] pwc: send_video_command error -71 [ 112.190089][ T5704] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 112.201603][ T5704] Philips webcam 2-1:6.0: probe with driver Philips webcam failed with error -71 [ 112.218990][ T5704] usb 2-1: USB disconnect, device number 3 [ 112.471828][ T5704] usb 3-1: USB disconnect, device number 2 [ 112.567726][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 112.762664][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 112.789634][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.814559][ T10] usb 1-1: config 0 interface 0 altsetting 16 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 112.849337][ T10] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 112.884635][ T10] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x8F has invalid wMaxPacketSize 0 [ 112.917051][ T10] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 112.953439][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 112.972731][ T10] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 113.001896][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.017934][ T809] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 113.037930][ T10] usb 1-1: config 0 descriptor?? [ 113.132229][ T5808] bond1: option primary_reselect: invalid value (21) [ 113.147536][ T5808] bond1 (unregistering): Released all slaves [ 113.210281][ T809] usb 2-1: unable to get BOS descriptor or descriptor too short [ 113.229713][ T809] usb 2-1: config 3 has an invalid interface number: 92 but max is 0 [ 113.242428][ T809] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 113.256833][ T809] usb 2-1: config 3 has no interface number 0 [ 113.265485][ T809] usb 2-1: config 3 interface 92 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 113.277905][ T5792] netlink: 'syz.0.19': attribute type 3 has an invalid length. [ 113.280321][ T809] usb 2-1: config 3 interface 92 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 113.298991][ T809] usb 2-1: config 3 interface 92 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 113.314242][ T809] usb 2-1: config 3 interface 92 has no altsetting 0 [ 113.349892][ T809] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=2e.d7 [ 113.381279][ T809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.410169][ T809] usb 2-1: Product: syz [ 113.430186][ T809] usb 2-1: Manufacturer: syz [ 113.444071][ T809] usb 2-1: SerialNumber: syz [ 113.517869][ T5811] netlink: 'syz.3.24': attribute type 10 has an invalid length. [ 113.698268][ T5803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.729723][ T5803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.790790][ T5803] loop2: detected capacity change from 0 to 7 [ 113.825927][ T5803] loop2: [ 113.832696][ T5803] loop2: partition table partially beyond EOD, truncated [ 113.860317][ T809] usb 2-1: probing VID:PID(0424:012C) [ 113.877712][ T809] usb 2-1: vub300 testing BULK OUT EndPoint(0) 03 [ 113.887999][ T809] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs [ 113.922080][ T809] vub300 2-1:3.92: probe with driver vub300 failed with error -22 [ 113.964848][ T809] usb 2-1: USB disconnect, device number 4 [ 114.004672][ T5826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.022387][ T5826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.237373][ T5610] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 114.397068][ T5610] usb 3-1: Using ep0 maxpacket: 8 [ 114.412844][ T5610] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 114.424036][ T5610] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.433125][ T5610] usb 3-1: Product: syz [ 114.454337][ T5610] usb 3-1: Manufacturer: syz [ 114.455761][ T5831] syz.1.30: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 114.463567][ T5610] usb 3-1: SerialNumber: syz [ 114.482993][ T5831] CPU: 1 UID: 0 PID: 5831 Comm: syz.1.30 Not tainted syzkaller #0 PREEMPT(full) [ 114.483015][ T5831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 114.483033][ T5831] Call Trace: [ 114.483044][ T5831] [ 114.483051][ T5831] dump_stack_lvl+0xe8/0x150 [ 114.483083][ T5831] warn_alloc+0x249/0x340 [ 114.483114][ T5831] ? __pfx_warn_alloc+0x10/0x10 [ 114.483155][ T5831] __vmalloc_node_range_noprof+0x132/0x1750 [ 114.483180][ T5831] ? __mutex_trylock_common+0x158/0x260 [ 114.483204][ T5831] ? __pfx___mutex_trylock_common+0x10/0x10 [ 114.483230][ T5831] ? trace_contention_end+0x3d/0x140 [ 114.483254][ T5831] ? __mutex_lock+0x319/0x1550 [ 114.483288][ T5831] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 114.483308][ T5831] ? tomoyo_path_number_perm+0x219/0x630 [ 114.483329][ T5831] ? dvb_demux_do_ioctl+0x320/0x540 [ 114.483354][ T5831] ? __pfx___mutex_lock+0x10/0x10 [ 114.483381][ T5831] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 114.483405][ T5831] vmalloc_noprof+0xb2/0xe0 [ 114.483427][ T5831] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 114.483452][ T5831] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 114.483482][ T5831] dvb_demux_do_ioctl+0x45d/0x540 [ 114.483508][ T5831] dvb_usercopy+0x199/0x2e0 [ 114.483529][ T5831] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 114.483551][ T5831] ? __pfx_dvb_usercopy+0x10/0x10 [ 114.483582][ T5831] ? __fget_files+0x3a0/0x420 [ 114.483601][ T5831] ? __fget_files+0x2a/0x420 [ 114.483623][ T5831] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 114.483645][ T5831] dvb_demux_ioctl+0x29/0x40 [ 114.483667][ T5831] __se_sys_ioctl+0xfc/0x170 [ 114.483690][ T5831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.483709][ T5831] do_syscall_64+0x15f/0xf80 [ 114.483731][ T5831] ? trace_irq_disable+0x3b/0x140 [ 114.483758][ T5831] ? clear_bhb_loop+0x40/0x90 [ 114.483778][ T5831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.483794][ T5831] RIP: 0033:0x7fd53c39ce59 [ 114.483826][ T5831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.483839][ T5831] RSP: 002b:00007fd53d179028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 114.483858][ T5831] RAX: ffffffffffffffda RBX: 00007fd53c615fa0 RCX: 00007fd53c39ce59 [ 114.483870][ T5831] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000003 [ 114.483879][ T5831] RBP: 00007fd53c432d6f R08: 0000000000000000 R09: 0000000000000000 [ 114.483890][ T5831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.483899][ T5831] R13: 00007fd53c616038 R14: 00007fd53c615fa0 R15: 00007fd53c73fa48 [ 114.483928][ T5831] [ 114.484017][ T5831] Mem-Info: [ 114.608704][ T5610] usb 3-1: config 0 descriptor?? [ 114.793598][ T5834] xt_TCPMSS: Only works on TCP SYN packets [ 114.816309][ T5831] active_anon:6039 inactive_anon:0 isolated_anon:0 [ 114.816309][ T5831] active_file:2924 inactive_file:39980 isolated_file:0 [ 114.816309][ T5831] unevictable:768 dirty:1719 writeback:0 [ 114.816309][ T5831] slab_reclaimable:10370 slab_unreclaimable:92787 [ 114.816309][ T5831] mapped:29558 shmem:1291 pagetables:1206 [ 114.816309][ T5831] sec_pagetables:0 bounce:0 [ 114.816309][ T5831] kernel_misc_reclaimable:0 [ 114.816309][ T5831] free:1330138 free_pcp:15146 free_cma:0 [ 114.925595][ T5831] Node 0 active_anon:24192kB inactive_anon:0kB active_file:12196kB inactive_file:159716kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122324kB dirty:6900kB writeback:0kB shmem:3636kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12484kB pagetables:4728kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 115.010722][ T5831] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 115.067798][ T5831] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 115.126306][ T5831] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 115.180482][ T5831] Node 0 DMA32 free:1367092kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24904kB inactive_anon:0kB active_file:12296kB inactive_file:159716kB unevictable:3320kB writepending:6932kB zspages:0kB present:3129332kB managed:2552572kB mlocked:1784kB bounce:0kB free_pcp:58892kB local_pcp:40232kB free_cma:0kB [ 115.224192][ T5704] IPVS: starting estimator thread 0... [ 115.249576][ T5831] lowmem_reserve[]: 0 0 0 0 0 [ 115.304682][ T5831] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:668kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 115.320030][ T5843] IPVS: using max 54 ests per chain, 129600 per kthread [ 115.398493][ T5831] lowmem_reserve[]: 0 0 0 0 0 [ 115.422694][ T5831] Node 1 Normal free:3935720kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 115.526648][ T5831] lowmem_reserve[]: 0 0 0 0 0 [ 115.544521][ T5831] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 115.587307][ T5831] Node 0 DMA32: 982*4kB (U) 271*8kB (UE) 21*16kB (UM) 4*32kB (ME) 3*64kB (UE) 1*128kB (M) 2*256kB (UE) 2*512kB (UM) 1*1024kB (M) 5*2048kB (ME) 327*4096kB (M) = 1359072kB [ 115.641972][ T5831] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 115.721309][ T5831] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 1*16kB (M) 2*32kB (UM) 4*64kB (UM) 3*128kB (UM) 3*256kB (UM) 2*512kB (M) 1*1024kB (M) 0*2048kB 960*4096kB (M) = 3935720kB [ 115.885519][ T5831] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 116.034276][ T5831] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 116.054706][ T5610] dvb_usb_rtl28xxu 3-1:0.0: chip type detection failed -110 [ 116.070124][ T5610] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 116.085381][ T5846] IPv6: addrconf: prefix option has invalid lifetime [ 116.202300][ T30] audit: type=1326 audit(1778949008.693:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5847 comm="syz.0.33" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd5039ce59 code=0x0 [ 116.203807][ T5831] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 116.321200][ T5831] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 116.354181][ T5831] 44855 total pagecache pages [ 116.385542][ T5831] 0 pages in swap cache [ 116.407573][ T5831] Free swap = 124996kB [ 116.424542][ T5831] Total swap = 124996kB [ 116.446594][ T5831] 2097051 pages RAM [ 116.461723][ T5831] 0 pages HighMem/MovableOnly [ 116.482387][ T5831] 427126 pages reserved [ 116.495363][ T5831] 0 pages cma reserved [ 116.655136][ T5850] ip6t_srh: unknown srh invflags 4000 [ 116.813911][ T5610] usb 3-1: USB disconnect, device number 3 [ 117.146819][ T5864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.162113][ T5865] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 117.177844][ T5864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.373005][ T5869] __nla_validate_parse: 4 callbacks suppressed [ 117.373022][ T5869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.40'. [ 117.389299][ T994] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 117.427595][ T5873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.36'. [ 117.469590][ T5869] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 117.486605][ T5869] team0 (unregistering): Port device team_slave_1 removed [ 117.577252][ T994] usb 5-1: Using ep0 maxpacket: 32 [ 117.594519][ T994] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 117.620389][ T994] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 117.639108][ T994] usb 5-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 117.649161][ T994] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.659811][ T5878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.668693][ T994] usb 5-1: Product: syz [ 117.683787][ T5878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.692134][ T994] usb 5-1: Manufacturer: syz [ 117.697332][ T994] usb 5-1: SerialNumber: syz [ 117.727596][ T5724] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 117.739594][ T994] snd-ua101 5-1:1.1: sample format descriptor not found [ 117.746950][ T994] snd-ua101 5-1:1.0: invalid num_altsetting [ 117.899447][ T5724] usb 3-1: unable to get BOS descriptor or descriptor too short [ 117.932313][ T994] usb 5-1: USB disconnect, device number 6 [ 117.944910][ T5724] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 117.980325][ T5724] usb 3-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 118.010589][ T5724] usb 3-1: config 1 interface 0 has no altsetting 1 [ 118.026776][ T5724] usb 3-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 118.068956][ T5724] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.089020][ T5724] usb 3-1: Product: syz [ 118.097182][ T5724] usb 3-1: Manufacturer: syz [ 118.107112][ T5724] usb 3-1: SerialNumber: syz [ 118.148767][ T5724] smsusb:smsusb_probe: board id=8, interface number 0 [ 118.354387][ T5724] smsusb:smsusb_probe: usb_set_interface failed, rc -71 [ 118.390232][ T5724] smsusb 3-1:1.0: probe with driver smsusb failed with error -71 [ 118.441109][ T5724] usb 3-1: USB disconnect, device number 4 [ 118.452854][ T10] usbhid 1-1:0.0: can't add hid device: -32 [ 118.485881][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 118.621608][ T5884] usb usb7: usbfs: process 5884 (syz.0.44) did not claim interface 0 before use [ 118.871322][ T5886] program syz.4.45 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 119.025347][ T5899] netlink: 'syz.4.48': attribute type 11 has an invalid length. [ 119.049249][ T5899] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.48'. [ 119.272970][ T5907] xt_TPROXY: Can be used only with -p tcp or -p udp [ 119.387293][ T5724] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 119.558928][ T5724] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 60, changing to 7 [ 119.582207][ T5724] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 119.608918][ T5724] usb 2-1: New USB device found, idVendor=0499, idProduct=5008, bcdDevice= 0.40 [ 119.636327][ T5724] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.652257][ T5917] bond0: (slave netdevsim0): Error: Device can not be enslaved while up [ 119.662548][ T5724] usb 2-1: Product: syz [ 119.673507][ T5724] usb 2-1: Manufacturer: syz [ 119.684611][ T5917] netlink: 12 bytes leftover after parsing attributes in process `syz.3.55'. [ 119.714371][ T5724] usb 2-1: SerialNumber: syz [ 119.948228][ T5901] syz.1.49 uses obsolete (PF_INET,SOCK_PACKET) [ 119.978664][ T5901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.999703][ T5901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.023252][ T5901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.49'. [ 120.206288][ T5724] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 120.229308][ T5724] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 120.259750][ T5724] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 120.276161][ T5724] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 120.303845][ T5724] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 120.480633][ T5724] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 120.531665][ T5724] usb 2-1: USB disconnect, device number 5 [ 120.593902][ T5629] udevd[5629]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 120.884659][ T5929] input: syz0 as /devices/virtual/input/input5 [ 122.147992][ T5724] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 122.214704][ T5961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.229183][ T5955] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 122.254872][ T5961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.271452][ T5955] bond1 (unregistering): Released all slaves [ 122.337390][ T5724] usb 2-1: Using ep0 maxpacket: 8 [ 122.354179][ T5724] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 122.381909][ T5724] usb 2-1: config 0 has no interface number 0 [ 122.399716][ T5724] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 122.430216][ T5724] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.456784][ T5724] usb 2-1: Product: syz [ 122.477968][ T5724] usb 2-1: Manufacturer: syz [ 122.494698][ T5724] usb 2-1: SerialNumber: syz [ 122.517566][ T5724] usb 2-1: config 0 descriptor?? [ 122.735173][ T5972] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 122.762912][ T5953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.779189][ T5953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.834354][ T5724] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 122.863490][ T5724] uvcvideo 2-1:0.31: Entity type for entity Output 32774 was not initialized! [ 122.910959][ T5724] uvcvideo 2-1:0.31: Failed to create links for entity 5 [ 122.942800][ T5724] uvcvideo 2-1:0.31: Failed to register entities (-22). [ 122.997755][ T5724] usb 2-1: USB disconnect, device number 6 [ 123.496266][ T5996] tipc: Failed to remove unknown binding: 66,0,0/0:2693961215/2693961217 [ 123.524065][ T5996] tipc: Failed to remove unknown binding: 66,0,0/0:2693961215/2693961216 [ 123.542392][ T5996] tipc: Failed to remove unknown binding: 66,0,0/0:2693961215/2693961217 [ 123.551834][ T5996] tipc: Failed to remove unknown binding: 66,0,0/0:2693961215/2693961216 [ 123.767325][ T5704] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 123.841084][ T5986] syz.4.71 (5986): drop_caches: 2 [ 123.941109][ T5704] usb 2-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 123.961963][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.982203][ T5704] usb 2-1: Product: syz [ 123.989015][ T5704] usb 2-1: Manufacturer: syz [ 123.994047][ T5704] usb 2-1: SerialNumber: syz [ 124.007842][ T5704] usb 2-1: config 0 descriptor?? [ 124.015128][ T5704] hub 2-1:0.0: bad descriptor, ignoring hub [ 124.023394][ T5704] hub 2-1:0.0: probe with driver hub failed with error -5 [ 124.031859][ T5704] f81232 2-1:0.0: f81534a converter detected [ 124.232914][ T5704] usb 2-1: f81534a converter now attached to ttyUSB0 [ 124.341127][ T6019] netlink: 40 bytes leftover after parsing attributes in process `syz.2.80'. [ 124.473759][ T6026] netlink: 'syz.0.81': attribute type 13 has an invalid length. [ 124.558030][ T5704] usb 2-1: USB disconnect, device number 7 [ 124.592976][ T5704] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0 [ 124.603957][ T5704] f81232 2-1:0.0: device disconnected [ 124.721564][ T30] audit: type=1326 audit(1778949017.213:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6008 comm="syz.4.78" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc10b9ce59 code=0x7fc00000 [ 124.801842][ T30] audit: type=1326 audit(1778949017.213:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6008 comm="syz.4.78" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcc10b9ce59 code=0x7fc00000 [ 124.872189][ T30] audit: type=1326 audit(1778949017.213:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6008 comm="syz.4.78" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc10b9ce59 code=0x7fc00000 [ 124.983937][ T30] audit: type=1326 audit(1778949017.213:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6008 comm="syz.4.78" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc10b9ce59 code=0x7fc00000 [ 125.082381][ T30] audit: type=1326 audit(1778949017.213:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6008 comm="syz.4.78" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc10b9ce59 code=0x7fc00000 [ 125.189813][ T30] audit: type=1326 audit(1778949017.213:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6008 comm="syz.4.78" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc10b9ce59 code=0x7fc00000 [ 125.348378][ T30] audit: type=1326 audit(1778949017.213:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6008 comm="syz.4.78" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc10b9ce59 code=0x7fc00000 [ 125.460572][ T30] audit: type=1326 audit(1778949017.213:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6008 comm="syz.4.78" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc10b9ce59 code=0x7fc00000 [ 125.484670][ T809] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 125.503409][ T30] audit: type=1326 audit(1778949017.213:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6008 comm="syz.4.78" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc10b9ce59 code=0x7fc00000 [ 125.550847][ T30] audit: type=1326 audit(1778949017.213:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6008 comm="syz.4.78" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc10b9ce59 code=0x7fc00000 [ 125.647625][ T809] usb 2-1: Using ep0 maxpacket: 32 [ 125.656719][ T809] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 125.667082][ T5704] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 125.677559][ T809] usb 2-1: config 0 has no interface number 0 [ 125.685394][ T809] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 125.700964][ T809] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 125.722627][ T809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.737503][ T809] usb 2-1: Product: syz [ 125.745693][ T809] usb 2-1: Manufacturer: syz [ 125.758318][ T809] usb 2-1: SerialNumber: syz [ 125.784755][ T809] usb 2-1: config 0 descriptor?? [ 125.816160][ T809] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 125.845701][ T809] em28xx 2-1:0.132: Video interface 132 found: [ 126.147131][ T5753] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 126.208649][ T809] em28xx 2-1:0.132: unknown em28xx chip ID (39) [ 126.317050][ T5753] usb 4-1: Using ep0 maxpacket: 32 [ 126.350702][ T5753] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 126.376599][ T5753] usb 4-1: config 0 has no interface number 0 [ 126.403383][ T5753] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 126.440879][ T5753] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 126.448947][ T6035] process 'syz.1.84' launched './file0' with NULL argv: empty string added [ 126.458570][ T5753] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.458619][ T5753] usb 4-1: Product: syz [ 126.458632][ T5753] usb 4-1: Manufacturer: syz [ 126.507598][ T5753] usb 4-1: SerialNumber: syz [ 126.552646][ T5753] usb 4-1: config 0 descriptor?? [ 126.581506][ T5753] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 126.594965][ T5753] em28xx 4-1:0.132: Video interface 132 found: [ 126.628601][ T809] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 126.638891][ T6044] tipc: Failed to remove unknown binding: 66,0,0/0:2636386209/2636386211 [ 126.638929][ T6044] tipc: Failed to remove unknown binding: 66,0,0/0:2636386209/2636386210 [ 126.645319][ T6044] tipc: Failed to remove unknown binding: 66,0,0/0:2636386209/2636386211 [ 126.650610][ T809] em28xx 2-1:0.132: board has no eeprom [ 126.673210][ T6044] tipc: Failed to remove unknown binding: 66,0,0/0:2636386209/2636386210 [ 126.737868][ T809] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 126.755089][ T809] em28xx 2-1:0.132: analog set to bulk mode. [ 126.755130][ T6046] fuse: Unknown parameter 'root000000-o|t#00000220000luser_id' [ 126.774287][ T5725] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 126.800881][ T4948] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 126.811571][ T24] em28xx 2-1:0.132: Registering V4L2 extension [ 126.850241][ T809] usb 2-1: USB disconnect, device number 8 [ 126.883246][ T809] em28xx 2-1:0.132: Disconnecting em28xx [ 126.960830][ T5725] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 126.979489][ T5725] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.988902][ T5753] em28xx 4-1:0.132: unknown em28xx chip ID (39) [ 127.015646][ T5725] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 127.042164][ T5725] usb 3-1: config 0 interface 0 has no altsetting 0 [ 127.050601][ T5725] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 127.062790][ T5725] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 127.079033][ T24] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 127.079570][ T6051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.107023][ T24] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 127.124540][ T5725] usb 3-1: config 0 interface 0 has no altsetting 0 [ 127.131759][ T24] em28xx 2-1:0.132: No AC97 audio processor [ 127.135133][ T6051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.149870][ T5725] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 127.162196][ T5725] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 127.178101][ T24] usb 2-1: Decoder not found [ 127.183063][ T24] em28xx 2-1:0.132: failed to create media graph [ 127.204367][ T5725] usb 3-1: config 0 interface 0 has no altsetting 0 [ 127.220704][ T24] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 127.230692][ T5725] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 127.246175][ T5725] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 127.271394][ T24] em28xx 2-1:0.132: Remote control support is not available for this card. [ 127.286294][ T5753] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 127.296409][ T5725] usb 3-1: config 0 interface 0 has no altsetting 0 [ 127.305645][ T809] em28xx 2-1:0.132: Closing input extension [ 127.316161][ T5753] em28xx 4-1:0.132: board has no eeprom [ 127.327415][ T5725] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 127.340454][ T5725] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 127.361004][ T5725] usb 3-1: config 0 interface 0 has no altsetting 0 [ 127.386936][ T5725] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 127.402081][ T5753] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 127.418138][ T5725] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 127.429645][ T5753] em28xx 4-1:0.132: analog set to bulk mode. [ 127.437533][ T24] em28xx 4-1:0.132: Registering V4L2 extension [ 127.447250][ T5725] usb 3-1: config 0 interface 0 has no altsetting 0 [ 127.463166][ T5753] usb 4-1: USB disconnect, device number 6 [ 127.471350][ T5725] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 127.480779][ T809] em28xx 2-1:0.132: Freeing device [ 127.493372][ T5725] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 127.527167][ T5725] usb 3-1: config 0 interface 0 has no altsetting 0 [ 127.534379][ T5753] em28xx 4-1:0.132: Disconnecting em28xx [ 127.564855][ T5725] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 127.590020][ T5725] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 127.621964][ T5725] usb 3-1: config 0 interface 0 has no altsetting 0 [ 127.640142][ T5725] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 127.663332][ T5725] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 127.696827][ T5725] usb 3-1: Product: syz [ 127.708759][ T5725] usb 3-1: Manufacturer: syz [ 127.720945][ T5725] usb 3-1: SerialNumber: syz [ 127.742690][ T5725] usb 3-1: config 0 descriptor?? [ 127.781043][ T5725] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 127.813113][ T24] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 127.836786][ T24] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 127.846241][ T24] em28xx 4-1:0.132: No AC97 audio processor [ 127.867416][ T24] usb 4-1: Decoder not found [ 127.872462][ T24] em28xx 4-1:0.132: failed to create media graph [ 127.887100][ T24] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 127.919227][ T24] em28xx 4-1:0.132: Remote control support is not available for this card. [ 127.948398][ T5753] em28xx 4-1:0.132: Closing input extension [ 128.044613][ T5753] em28xx 4-1:0.132: Freeing device [ 128.105950][ C1] usb 3-1: yurex_control_callback - control failed: -71 [ 128.116595][ T24] usb 3-1: USB disconnect, device number 5 [ 128.151891][ T6072] yurex 3-1:0.0: yurex_write - failed to send bulk msg, error -19 [ 128.192146][ T24] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 128.235925][ T6081] netlink: 8 bytes leftover after parsing attributes in process `syz.3.96'. [ 128.265836][ T6081] netlink: 8 bytes leftover after parsing attributes in process `syz.3.96'. [ 128.405381][ T6088] tipc: Failed to remove unknown binding: 66,0,0/0:3453045163/3453045165 [ 128.433151][ T6088] tipc: Failed to remove unknown binding: 66,0,0/0:3453045163/3453045164 [ 128.461438][ T6088] tipc: Failed to remove unknown binding: 66,0,0/0:3453045163/3453045165 [ 128.486232][ T6088] tipc: Failed to remove unknown binding: 66,0,0/0:3453045163/3453045164 [ 129.047580][ T24] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 129.107094][ T5704] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 129.217089][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 129.235429][ T24] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 129.258387][ T24] usb 4-1: config 0 has no interface number 0 [ 129.267063][ T5704] usb 5-1: Using ep0 maxpacket: 16 [ 129.284463][ T24] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 129.315110][ T5704] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.339474][ T24] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 129.348915][ T5704] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 129.365530][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.377275][ T5704] usb 5-1: config 0 interface 0 has no altsetting 0 [ 129.383934][ T24] usb 4-1: Product: syz [ 129.391363][ T5704] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 129.402309][ T24] usb 4-1: Manufacturer: syz [ 129.409902][ T24] usb 4-1: SerialNumber: syz [ 129.421150][ T5704] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.429804][ T24] usb 4-1: config 0 descriptor?? [ 129.442643][ T24] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 129.457665][ T5704] usb 5-1: config 0 descriptor?? [ 129.470803][ T24] em28xx 4-1:0.132: Video interface 132 found: [ 129.485483][ T5704] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 129.844911][ T24] em28xx 4-1:0.132: unknown em28xx chip ID (39) [ 130.118877][ T24] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 130.130257][ T24] em28xx 4-1:0.132: board has no eeprom [ 130.197295][ T24] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 130.206404][ T24] em28xx 4-1:0.132: analog set to bulk mode. [ 130.213633][ T809] em28xx 4-1:0.132: Registering V4L2 extension [ 130.236731][ T24] usb 4-1: USB disconnect, device number 7 [ 130.253232][ T24] em28xx 4-1:0.132: Disconnecting em28xx [ 130.343955][ T809] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 130.356470][ T809] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 130.371526][ T809] em28xx 4-1:0.132: No AC97 audio processor [ 130.399942][ T809] usb 4-1: Decoder not found [ 130.412734][ T809] em28xx 4-1:0.132: failed to create media graph [ 130.421506][ T809] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 130.433682][ T809] em28xx 4-1:0.132: Remote control support is not available for this card. [ 130.443329][ T24] em28xx 4-1:0.132: Closing input extension [ 130.469061][ T24] em28xx 4-1:0.132: Freeing device [ 130.546251][ T6129] tipc: Failed to remove unknown binding: 66,0,0/0:2082028550/2082028552 [ 130.557991][ T6129] tipc: Failed to remove unknown binding: 66,0,0/0:2082028550/2082028551 [ 130.570918][ T6129] tipc: Failed to remove unknown binding: 66,0,0/0:2082028550/2082028552 [ 130.581456][ T6129] tipc: Failed to remove unknown binding: 66,0,0/0:2082028550/2082028551 [ 131.079647][ T6142] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 131.120417][ T6149] xt_hashlimit: max too large, truncated to 1048576 [ 131.557337][ T5753] usb 5-1: USB disconnect, device number 8 [ 131.589573][ T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 131.753967][ T24] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 131.768956][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 131.782029][ T24] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 131.802411][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.820064][ T24] usb 2-1: Product: syz [ 131.825881][ T24] usb 2-1: Manufacturer: syz [ 131.831051][ T24] usb 2-1: SerialNumber: syz [ 131.843201][ T24] usb 2-1: config 0 descriptor?? [ 131.851676][ T6162] dummy0: entered allmulticast mode [ 131.860828][ T24] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 131.937098][ T5753] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 132.091275][ T5753] usb 5-1: unable to get BOS descriptor or descriptor too short [ 132.108489][ T5753] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.131768][ T24] gspca_sunplus: reg_r err -71 [ 132.139271][ T24] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 132.148400][ T5753] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 132.166261][ T24] usb 2-1: USB disconnect, device number 9 [ 132.172979][ T5753] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 132.201578][ T5753] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 132.220770][ T5753] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 132.232313][ T5753] usb 5-1: config 1 interface 1 has no altsetting 0 [ 132.246796][ T5753] usb 5-1: string descriptor 0 read error: -22 [ 132.254160][ T5753] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 132.264410][ T5753] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.288953][ T6167] fuse: Bad value for 'fd' [ 132.350091][ T6167] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 132.717090][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 132.759131][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.766591][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.897265][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 132.912498][ T10] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 132.933685][ T10] usb 3-1: config 0 has no interface number 0 [ 132.948789][ T10] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 132.969352][ T10] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 132.982543][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.995865][ T10] usb 3-1: Product: syz [ 133.003025][ T10] usb 3-1: Manufacturer: syz [ 133.008492][ T10] usb 3-1: SerialNumber: syz [ 133.022334][ T10] usb 3-1: config 0 descriptor?? [ 133.044160][ T10] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 133.057294][ T10] em28xx 3-1:0.132: Video interface 132 found: [ 133.109134][ T5753] usb 5-1: 2:0: failed to get current value for ch 1 (-71) [ 133.276894][ T5753] usb 5-1: USB disconnect, device number 9 [ 133.437647][ T10] em28xx 3-1:0.132: unknown em28xx chip ID (39) [ 133.746925][ T6181] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 133.755484][ T10] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 133.791456][ T10] em28xx 3-1:0.132: board has no eeprom [ 133.815045][ T6185] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 133.877110][ T10] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 133.889665][ T10] em28xx 3-1:0.132: analog set to bulk mode. [ 133.899825][ T994] em28xx 3-1:0.132: Registering V4L2 extension [ 133.961643][ T994] em28xx 3-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 133.972329][ T10] usb 3-1: USB disconnect, device number 6 [ 133.979778][ T10] em28xx 3-1:0.132: Disconnecting em28xx [ 134.147175][ T5753] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 134.180161][ T994] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 134.200536][ T994] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 134.232466][ T994] em28xx 3-1:0.132: No AC97 audio processor [ 134.275744][ T994] usb 3-1: Decoder not found [ 134.285816][ T6188] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 134.298807][ T994] em28xx 3-1:0.132: failed to create media graph [ 134.313666][ T994] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 134.317100][ T5753] usb 5-1: Using ep0 maxpacket: 32 [ 134.331356][ T994] em28xx 3-1:0.132: Remote control support is not available for this card. [ 134.344707][ T10] em28xx 3-1:0.132: Closing input extension [ 134.348603][ T5753] usb 5-1: config 0 has an invalid interface number: 2 but max is 1 [ 134.381334][ T5753] usb 5-1: config 0 has no interface number 1 [ 134.395553][ T10] em28xx 3-1:0.132: Freeing device [ 134.403701][ T5753] usb 5-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 134.439763][ T5753] usb 5-1: config 0 interface 0 has no altsetting 0 [ 134.468806][ T5753] usb 5-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 134.505756][ T5753] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 134.542047][ T5753] usb 5-1: SerialNumber: syz [ 134.563433][ T5753] usb 5-1: config 0 descriptor?? [ 134.602795][ T5753] usb-storage 5-1:0.0: USB Mass Storage device detected [ 134.660595][ T5753] usb-storage 5-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 134.899759][ T5753] usb-storage 5-1:0.2: USB Mass Storage device detected [ 134.936774][ T5753] usb-storage 5-1:0.2: Quirks match for vid 152d pid 0539: 4000000 [ 134.949316][ T24] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 135.023537][ T5753] usb 5-1: USB disconnect, device number 10 [ 135.119448][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.149835][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 135.176724][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 135.189505][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 135.212918][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 135.225213][ T24] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 135.241773][ T24] usb 3-1: Manufacturer: syz [ 135.252926][ T24] usb 3-1: config 0 descriptor?? [ 135.577361][ T24] rc_core: IR keymap rc-hauppauge not found [ 135.588810][ T24] Registered IR keymap rc-empty [ 135.598163][ T24] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 135.628312][ T24] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 135.672207][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 135.712265][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input8 [ 135.746868][ T24] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 135.777384][ T24] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 135.822026][ T24] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 135.867943][ T24] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 135.897957][ T24] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 135.909677][ T6235] netlink: 12 bytes leftover after parsing attributes in process `syz.3.136'. [ 135.939052][ T24] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 135.968203][ T24] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 135.998030][ T24] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 136.034398][ T24] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 136.069004][ T24] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 136.094804][ T6241] input: syz1 as /devices/virtual/input/input9 [ 136.111383][ T24] mceusb 3-1:0.0: Registered 4242 with mce emulator interface version 1 [ 136.130180][ T24] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 136.151801][ T24] usb 3-1: USB disconnect, device number 7 [ 136.168707][ T5704] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 136.268243][ T6241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.139'. [ 136.317063][ T5753] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 136.337275][ T5704] usb 5-1: Using ep0 maxpacket: 32 [ 136.347250][ T5704] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 136.365928][ T5704] usb 5-1: config 0 has no interface number 0 [ 136.372162][ T5704] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 136.395326][ T5704] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 136.406268][ T5704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.417253][ T5704] usb 5-1: Product: syz [ 136.425190][ T5704] usb 5-1: Manufacturer: syz [ 136.430470][ T5704] usb 5-1: SerialNumber: syz [ 136.442391][ T5704] usb 5-1: config 0 descriptor?? [ 136.464149][ T5704] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 136.482475][ T5704] em28xx 5-1:0.132: Video interface 132 found: [ 136.497823][ T5753] usb 4-1: Using ep0 maxpacket: 32 [ 136.509533][ T5753] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 136.521618][ T5753] usb 4-1: config 0 has no interface number 0 [ 136.535985][ T5753] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 136.549017][ T5753] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 136.559329][ T5753] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.569321][ T5753] usb 4-1: Product: syz [ 136.573532][ T5753] usb 4-1: Manufacturer: syz [ 136.578208][ T5753] usb 4-1: SerialNumber: syz [ 136.591076][ T5753] usb 4-1: config 0 descriptor?? [ 136.607780][ T6240] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 136.821386][ T6240] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 136.861021][ T5704] em28xx 5-1:0.132: unknown em28xx chip ID (39) [ 137.052293][ T5753] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 137.087732][ T5753] asix 4-1:0.188: probe with driver asix failed with error -61 [ 137.189672][ T5704] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 137.201642][ T5704] em28xx 5-1:0.132: board has no eeprom [ 137.274321][ T5704] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 137.302953][ T5704] em28xx 5-1:0.132: analog set to bulk mode. [ 137.330452][ T24] em28xx 5-1:0.132: Registering V4L2 extension [ 137.373270][ T5704] usb 5-1: USB disconnect, device number 11 [ 137.413010][ T5704] em28xx 5-1:0.132: Disconnecting em28xx [ 137.650015][ T24] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 137.665406][ T24] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 137.683037][ T24] em28xx 5-1:0.132: No AC97 audio processor [ 137.700750][ T24] usb 5-1: Decoder not found [ 137.706240][ T24] em28xx 5-1:0.132: failed to create media graph [ 137.717216][ T24] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 137.719143][ T5724] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 137.726367][ T24] em28xx 5-1:0.132: Remote control support is not available for this card. [ 137.776319][ T5704] em28xx 5-1:0.132: Closing input extension [ 137.863905][ T5704] em28xx 5-1:0.132: Freeing device [ 137.887057][ T5724] usb 3-1: device descriptor read/64, error -71 [ 138.062691][ T6270] netlink: 'syz.0.144': attribute type 13 has an invalid length. [ 138.146789][ T6276] IPVS: set_ctl: invalid protocol: 29 100.1.0.255:20000 [ 138.169480][ T5724] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 138.317066][ T5724] usb 3-1: device descriptor read/64, error -71 [ 138.437651][ T5724] usb usb3-port1: attempt power cycle [ 138.788706][ T5724] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 138.827784][ T5724] usb 3-1: device descriptor read/8, error -71 [ 139.094906][ T994] usb 4-1: USB disconnect, device number 8 [ 139.106325][ T5724] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 139.147811][ T5724] usb 3-1: device descriptor read/8, error -71 [ 139.281560][ T5724] usb usb3-port1: unable to enumerate USB device [ 139.645088][ T6291] netlink: 12 bytes leftover after parsing attributes in process `syz.4.150'. [ 139.805890][ T6296] FAULT_INJECTION: forcing a failure. [ 139.805890][ T6296] name failslab, interval 1, probability 0, space 0, times 1 [ 139.843176][ T6296] CPU: 0 UID: 0 PID: 6296 Comm: syz.4.152 Tainted: G L syzkaller #0 PREEMPT(full) [ 139.843202][ T6296] Tainted: [L]=SOFTLOCKUP [ 139.843208][ T6296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 139.843217][ T6296] Call Trace: [ 139.843223][ T6296] [ 139.843230][ T6296] dump_stack_lvl+0xe8/0x150 [ 139.843254][ T6296] should_fail_ex+0x412/0x560 [ 139.843288][ T6296] should_failslab+0xa8/0x100 [ 139.843314][ T6296] __kmalloc_noprof+0xe8/0x760 [ 139.843336][ T6296] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 139.843363][ T6296] tomoyo_realpath_from_path+0xe3/0x5d0 [ 139.843386][ T6296] ? tomoyo_domain+0xd7/0x130 [ 139.843412][ T6296] ? tomoyo_path_number_perm+0x219/0x630 [ 139.843430][ T6296] tomoyo_path_number_perm+0x246/0x630 [ 139.843451][ T6296] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 139.843468][ T6296] ? __lock_acquire+0x6b5/0x2cf0 [ 139.843499][ T6296] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 139.843542][ T6296] ? __fget_files+0x2a/0x420 [ 139.843563][ T6296] ? __fget_files+0x2a/0x420 [ 139.843580][ T6296] ? __fget_files+0x3a0/0x420 [ 139.843597][ T6296] ? __fget_files+0x2a/0x420 [ 139.843619][ T6296] security_file_ioctl+0xc3/0x2a0 [ 139.843639][ T6296] __se_sys_ioctl+0x47/0x170 [ 139.843661][ T6296] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.843678][ T6296] do_syscall_64+0x15f/0xf80 [ 139.843699][ T6296] ? trace_irq_disable+0x3b/0x140 [ 139.843721][ T6296] ? clear_bhb_loop+0x40/0x90 [ 139.843740][ T6296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.843756][ T6296] RIP: 0033:0x7fcc10b9ce59 [ 139.843770][ T6296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.843779][ T6296] RSP: 002b:00007fcc11a8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 139.843793][ T6296] RAX: ffffffffffffffda RBX: 00007fcc10e15fa0 RCX: 00007fcc10b9ce59 [ 139.843802][ T6296] RDX: 0000200000000200 RSI: 00000000c058565d RDI: 0000000000000003 [ 139.843809][ T6296] RBP: 00007fcc11a8a090 R08: 0000000000000000 R09: 0000000000000000 [ 139.843817][ T6296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.843825][ T6296] R13: 00007fcc10e16038 R14: 00007fcc10e15fa0 R15: 00007fcc10f3fa48 [ 139.843851][ T6296] [ 139.843858][ T6296] ERROR: Out of memory at tomoyo_realpath_from_path. [ 140.158310][ T6300] netlink: 12 bytes leftover after parsing attributes in process `syz.0.153'. [ 140.184266][ T6300] 8021q: VLANs not supported on wg1 [ 140.558071][ T5704] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 140.670127][ T6318] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 140.737111][ T5704] usb 5-1: Using ep0 maxpacket: 32 [ 140.751799][ T6317] netlink: 32 bytes leftover after parsing attributes in process `syz.2.159'. [ 140.775489][ T5704] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 140.790404][ T5704] usb 5-1: config 0 has no interface number 0 [ 140.810176][ T5704] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 140.832528][ T5704] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 140.872490][ T5704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.892078][ T5704] usb 5-1: Product: syz [ 140.901162][ T5704] usb 5-1: Manufacturer: syz [ 140.909832][ T5704] usb 5-1: SerialNumber: syz [ 140.936594][ T5704] usb 5-1: config 0 descriptor?? [ 140.975925][ T5704] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 141.032750][ T5704] em28xx 5-1:0.132: Video interface 132 found: [ 141.375095][ T5704] em28xx 5-1:0.132: unknown em28xx chip ID (39) [ 141.550678][ T5753] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 141.619453][ T6331] netlink: 12 bytes leftover after parsing attributes in process `syz.1.162'. [ 141.656471][ T5704] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 141.682472][ T5704] em28xx 5-1:0.132: board has no eeprom [ 141.728912][ T5753] usb 3-1: config 0 has an invalid descriptor of length 113, skipping remainder of the config [ 141.749649][ T5704] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 141.759136][ T5753] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 141.769481][ T5704] em28xx 5-1:0.132: analog set to bulk mode. [ 141.780436][ T5753] usb 3-1: New USB device found, idVendor=05d1, idProduct=000c, bcdDevice= 0.00 [ 141.792413][ T809] em28xx 5-1:0.132: Registering V4L2 extension [ 141.812872][ T5753] usb 3-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 141.839667][ T5704] usb 5-1: USB disconnect, device number 12 [ 141.854284][ T5753] usb 3-1: Product: syz [ 141.873525][ T5704] em28xx 5-1:0.132: Disconnecting em28xx [ 141.897705][ T5753] usb 3-1: config 0 descriptor?? [ 142.030410][ T809] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 142.043634][ T809] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 142.069235][ T809] em28xx 5-1:0.132: No AC97 audio processor [ 142.104562][ T809] usb 5-1: Decoder not found [ 142.120428][ T809] em28xx 5-1:0.132: failed to create media graph [ 142.149917][ T809] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 142.180771][ T809] em28xx 5-1:0.132: Remote control support is not available for this card. [ 142.199792][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 142.199808][ T30] audit: type=1800 audit(1778949034.693:16): pid=6342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.164" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 142.200557][ T6347] FAULT_INJECTION: forcing a failure. [ 142.200557][ T6347] name failslab, interval 1, probability 0, space 0, times 0 [ 142.243911][ T5704] em28xx 5-1:0.132: Closing input extension [ 142.264250][ T5704] em28xx 5-1:0.132: Freeing device [ 142.329652][ T6347] CPU: 0 UID: 0 PID: 6347 Comm: syz.0.165 Tainted: G L syzkaller #0 PREEMPT(full) [ 142.329670][ T6347] Tainted: [L]=SOFTLOCKUP [ 142.329673][ T6347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 142.329678][ T6347] Call Trace: [ 142.329683][ T6347] [ 142.329687][ T6347] dump_stack_lvl+0xe8/0x150 [ 142.329703][ T6347] should_fail_ex+0x412/0x560 [ 142.329719][ T6347] should_failslab+0xa8/0x100 [ 142.329735][ T6347] __kmalloc_noprof+0xe8/0x760 [ 142.329747][ T6347] ? tomoyo_encode+0x28b/0x550 [ 142.329762][ T6347] tomoyo_encode+0x28b/0x550 [ 142.329777][ T6347] tomoyo_realpath_from_path+0x58d/0x5d0 [ 142.329794][ T6347] ? tomoyo_path_number_perm+0x219/0x630 [ 142.329804][ T6347] tomoyo_path_number_perm+0x246/0x630 [ 142.329815][ T6347] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 142.329825][ T6347] ? __lock_acquire+0x6b5/0x2cf0 [ 142.329843][ T6347] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 142.329872][ T6347] ? __fget_files+0x2a/0x420 [ 142.329892][ T6347] ? __fget_files+0x2a/0x420 [ 142.329907][ T6347] ? __fget_files+0x3a0/0x420 [ 142.329923][ T6347] ? __fget_files+0x2a/0x420 [ 142.329942][ T6347] security_file_ioctl+0xc3/0x2a0 [ 142.329960][ T6347] __se_sys_ioctl+0x47/0x170 [ 142.329981][ T6347] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.329998][ T6347] do_syscall_64+0x15f/0xf80 [ 142.330018][ T6347] ? trace_irq_disable+0x3b/0x140 [ 142.330033][ T6347] ? clear_bhb_loop+0x40/0x90 [ 142.330044][ T6347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.330052][ T6347] RIP: 0033:0x7fbd5039ce59 [ 142.330063][ T6347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.330070][ T6347] RSP: 002b:00007fbd512ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 142.330081][ T6347] RAX: ffffffffffffffda RBX: 00007fbd50615fa0 RCX: 00007fbd5039ce59 [ 142.330087][ T6347] RDX: 0000200000000200 RSI: 00000000c058565d RDI: 0000000000000003 [ 142.330093][ T6347] RBP: 00007fbd512ac090 R08: 0000000000000000 R09: 0000000000000000 [ 142.330098][ T6347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.330103][ T6347] R13: 00007fbd50616038 R14: 00007fbd50615fa0 R15: 00007fbd5073fa48 [ 142.330118][ T6347] [ 142.330226][ T6347] ERROR: Out of memory at tomoyo_realpath_from_path. [ 142.781458][ T6350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.804708][ T6350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.877328][ T5704] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 143.067087][ T5704] usb 5-1: Using ep0 maxpacket: 16 [ 143.082684][ T5704] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.117922][ T5704] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 143.161409][ T5704] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 143.179108][ T6369] FAULT_INJECTION: forcing a failure. [ 143.179108][ T6369] name failslab, interval 1, probability 0, space 0, times 0 [ 143.201660][ T6369] CPU: 0 UID: 0 PID: 6369 Comm: syz.0.170 Tainted: G L syzkaller #0 PREEMPT(full) [ 143.201677][ T6369] Tainted: [L]=SOFTLOCKUP [ 143.201680][ T6369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 143.201686][ T6369] Call Trace: [ 143.201690][ T6369] [ 143.201695][ T6369] dump_stack_lvl+0xe8/0x150 [ 143.201711][ T6369] should_fail_ex+0x412/0x560 [ 143.201726][ T6369] should_failslab+0xa8/0x100 [ 143.201740][ T6369] ? __kernfs_new_node+0xea/0x970 [ 143.201752][ T6369] kmem_cache_alloc_noprof+0x87/0x650 [ 143.201765][ T6369] ? kernfs_add_one+0x477/0x5c0 [ 143.201778][ T6369] __kernfs_new_node+0xea/0x970 [ 143.201792][ T6369] ? __pfx___kernfs_new_node+0x10/0x10 [ 143.201804][ T6369] ? kernfs_root+0x1c/0x230 [ 143.201817][ T6369] ? kernfs_root+0x1c/0x230 [ 143.201827][ T6369] ? kernfs_root+0x1c/0x230 [ 143.201837][ T6369] ? kernfs_root+0x1c/0x230 [ 143.201850][ T6369] kernfs_new_node+0x102/0x210 [ 143.201863][ T6369] __kernfs_create_file+0x4b/0x2e0 [ 143.201876][ T6369] sysfs_add_file_mode_ns+0x238/0x300 [ 143.201890][ T6369] sysfs_create_file_ns+0x12b/0x1b0 [ 143.201901][ T6369] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 143.201912][ T6369] ? __dev_fwnode+0x50/0x80 [ 143.201923][ T6369] ? device_create_file+0xf4/0x1b0 [ 143.201935][ T6369] device_add+0x440/0xbb0 [ 143.201947][ T6369] input_register_device+0x9b3/0x1140 [ 143.201970][ T6369] ? input_ff_create+0x235/0x300 [ 143.201982][ T6369] uinput_create_device+0x422/0x680 [ 143.201998][ T6369] uinput_ioctl_handler+0x417/0x14a0 [ 143.202011][ T6369] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 143.202026][ T6369] ? __fget_files+0x2a/0x420 [ 143.202036][ T6369] ? __fget_files+0x3a0/0x420 [ 143.202049][ T6369] ? bpf_lsm_file_ioctl+0x9/0x20 [ 143.202063][ T6369] ? __pfx_uinput_ioctl+0x10/0x10 [ 143.202073][ T6369] __se_sys_ioctl+0xfc/0x170 [ 143.202086][ T6369] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.202096][ T6369] do_syscall_64+0x15f/0xf80 [ 143.202109][ T6369] ? trace_irq_disable+0x3b/0x140 [ 143.202123][ T6369] ? clear_bhb_loop+0x40/0x90 [ 143.202134][ T6369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.202143][ T6369] RIP: 0033:0x7fbd5039ce59 [ 143.202153][ T6369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.202161][ T6369] RSP: 002b:00007fbd512ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 143.202171][ T6369] RAX: ffffffffffffffda RBX: 00007fbd50615fa0 RCX: 00007fbd5039ce59 [ 143.202178][ T6369] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 143.202183][ T6369] RBP: 00007fbd512ac090 R08: 0000000000000000 R09: 0000000000000000 [ 143.202189][ T6369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.202194][ T6369] R13: 00007fbd50616038 R14: 00007fbd50615fa0 R15: 00007fbd5073fa48 [ 143.202208][ T6369] [ 143.209812][ T5704] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 143.504646][ T5704] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.599022][ T5704] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 143.625318][ T5704] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 143.649055][ T5704] usb 5-1: Manufacturer: syz [ 143.655189][ T6376] netlink: 20 bytes leftover after parsing attributes in process `syz.0.173'. [ 143.670589][ T5704] usb 5-1: config 0 descriptor?? [ 143.786290][ T6382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.807988][ T6382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.937117][ T994] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 143.977515][ T5704] rc_core: IR keymap rc-hauppauge not found [ 143.988432][ T5704] Registered IR keymap rc-empty [ 144.001040][ T5704] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 144.036301][ T6383] netlink: 'syz.0.174': attribute type 10 has an invalid length. [ 144.037349][ T5704] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 144.088161][ T5704] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 144.100950][ T6348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.109349][ T994] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 144.109374][ T994] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 144.109389][ T994] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 144.109405][ T994] usb 2-1: config 220 has no interface number 2 [ 144.109452][ T994] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 144.109475][ T994] usb 2-1: config 220 interface 0 has no altsetting 0 [ 144.109488][ T994] usb 2-1: config 220 interface 76 has no altsetting 0 [ 144.109503][ T994] usb 2-1: config 220 interface 1 has no altsetting 0 [ 144.111568][ T994] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 144.189065][ T6348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.253825][ T5704] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input11 [ 144.290740][ T6348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.300862][ T5704] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 144.308477][ T6348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.321794][ T994] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.337144][ T5704] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 144.368448][ T5704] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 144.383356][ T994] usb 2-1: Product: syz [ 144.397888][ T994] usb 2-1: Manufacturer: syz [ 144.407323][ T5704] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 144.436083][ T994] usb 2-1: SerialNumber: syz [ 144.441463][ T5704] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 144.467831][ T5704] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 144.500803][ T5704] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 144.528059][ T5704] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 144.559310][ T5704] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 144.563441][ T10] usb 3-1: USB disconnect, device number 12 [ 144.599242][ T5704] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 144.645346][ T5704] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 144.672593][ T5704] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 144.697600][ T6378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.718280][ T6378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.779222][ T24] usb 5-1: USB disconnect, device number 13 [ 144.832311][ T994] usb 2-1: selecting invalid altsetting 0 [ 144.854454][ T994] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 144.866148][ T994] uvcvideo 2-1:220.0: No valid video chain found. [ 144.895847][ T994] usb 2-1: selecting invalid altsetting 0 [ 144.907761][ T994] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 144.927446][ T994] usb 2-1: USB disconnect, device number 10 [ 145.043639][ T6401] FAULT_INJECTION: forcing a failure. [ 145.043639][ T6401] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 145.059713][ T6401] CPU: 1 UID: 0 PID: 6401 Comm: syz.3.178 Tainted: G L syzkaller #0 PREEMPT(full) [ 145.059731][ T6401] Tainted: [L]=SOFTLOCKUP [ 145.059734][ T6401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 145.059740][ T6401] Call Trace: [ 145.059744][ T6401] [ 145.059749][ T6401] dump_stack_lvl+0xe8/0x150 [ 145.059764][ T6401] should_fail_ex+0x412/0x560 [ 145.059780][ T6401] _copy_from_user+0x2d/0xb0 [ 145.059794][ T6401] video_usercopy+0x36f/0x1450 [ 145.059809][ T6401] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 145.059831][ T6401] ? __pfx___video_do_ioctl+0x10/0x10 [ 145.059845][ T6401] ? __pfx_video_usercopy+0x10/0x10 [ 145.059862][ T6401] ? __fget_files+0x2a/0x420 [ 145.059874][ T6401] ? __fget_files+0x2a/0x420 [ 145.059883][ T6401] ? __fget_files+0x3a0/0x420 [ 145.059895][ T6401] v4l2_ioctl+0x18d/0x1e0 [ 145.059908][ T6401] ? __pfx_v4l2_ioctl+0x10/0x10 [ 145.059919][ T6401] __se_sys_ioctl+0xfc/0x170 [ 145.059933][ T6401] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.059942][ T6401] do_syscall_64+0x15f/0xf80 [ 145.059955][ T6401] ? trace_irq_disable+0x3b/0x140 [ 145.059968][ T6401] ? clear_bhb_loop+0x40/0x90 [ 145.059980][ T6401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.059989][ T6401] RIP: 0033:0x7fac0d79ce59 [ 145.060000][ T6401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.060007][ T6401] RSP: 002b:00007fac0b9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 145.060018][ T6401] RAX: ffffffffffffffda RBX: 00007fac0da15fa0 RCX: 00007fac0d79ce59 [ 145.060024][ T6401] RDX: 0000200000000200 RSI: 00000000c058565d RDI: 0000000000000003 [ 145.060030][ T6401] RBP: 00007fac0b9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 145.060035][ T6401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.060040][ T6401] R13: 00007fac0da16038 R14: 00007fac0da15fa0 R15: 00007fac0db3fa48 [ 145.060054][ T6401] [ 145.068054][ T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 145.427592][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 145.439239][ T10] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 145.453858][ T10] usb 3-1: config 0 has no interface number 0 [ 145.463927][ T10] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 145.508741][ T10] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 145.525718][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.546259][ T10] usb 3-1: Product: syz [ 145.558280][ T10] usb 3-1: Manufacturer: syz [ 145.577884][ T10] usb 3-1: SerialNumber: syz [ 145.590679][ T10] usb 3-1: config 0 descriptor?? [ 145.620697][ T10] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 145.648676][ T10] em28xx 3-1:0.132: Video interface 132 found: [ 145.814161][ T6419] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 146.005253][ T10] em28xx 3-1:0.132: unknown em28xx chip ID (39) [ 146.289691][ T10] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 146.305705][ T10] em28xx 3-1:0.132: board has no eeprom [ 146.321328][ T6429] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 146.377457][ T10] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 146.388292][ T10] em28xx 3-1:0.132: analog set to bulk mode. [ 146.403970][ T5766] em28xx 3-1:0.132: Registering V4L2 extension [ 146.429518][ T10] usb 3-1: USB disconnect, device number 13 [ 146.452341][ T10] em28xx 3-1:0.132: Disconnecting em28xx [ 146.717892][ T5766] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 146.726291][ T5766] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 146.734040][ T5766] em28xx 3-1:0.132: No AC97 audio processor [ 146.823217][ T5766] usb 3-1: Decoder not found [ 146.845338][ T5766] em28xx 3-1:0.132: failed to create media graph [ 146.874398][ T5766] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 146.900143][ T5766] em28xx 3-1:0.132: Remote control support is not available for this card. [ 146.943921][ T10] em28xx 3-1:0.132: Closing input extension [ 146.991388][ T10] em28xx 3-1:0.132: Freeing device [ 147.064691][ T6447] FAULT_INJECTION: forcing a failure. [ 147.064691][ T6447] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.128525][ T6447] CPU: 1 UID: 0 PID: 6447 Comm: syz.1.189 Tainted: G L syzkaller #0 PREEMPT(full) [ 147.128551][ T6447] Tainted: [L]=SOFTLOCKUP [ 147.128555][ T6447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 147.128562][ T6447] Call Trace: [ 147.128567][ T6447] [ 147.128573][ T6447] dump_stack_lvl+0xe8/0x150 [ 147.128589][ T6447] should_fail_ex+0x412/0x560 [ 147.128605][ T6447] _copy_to_user+0x31/0xb0 [ 147.128620][ T6447] simple_read_from_buffer+0xe1/0x170 [ 147.128635][ T6447] proc_fail_nth_read+0x1bb/0x230 [ 147.128648][ T6447] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 147.128663][ T6447] ? rw_verify_area+0x2a6/0x4d0 [ 147.128676][ T6447] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 147.128687][ T6447] vfs_read+0x20c/0xa70 [ 147.128702][ T6447] ? __pfx___mutex_lock+0x10/0x10 [ 147.128716][ T6447] ? __pfx_vfs_read+0x10/0x10 [ 147.128728][ T6447] ? __fget_files+0x2a/0x420 [ 147.128740][ T6447] ? __fget_files+0x3a0/0x420 [ 147.128750][ T6447] ? __fget_files+0x2a/0x420 [ 147.128764][ T6447] ksys_read+0x150/0x270 [ 147.128778][ T6447] ? __pfx_ksys_read+0x10/0x10 [ 147.128789][ T6447] ? __pfx_v4l2_ioctl+0x10/0x10 [ 147.128805][ T6447] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.128814][ T6447] do_syscall_64+0x15f/0xf80 [ 147.128827][ T6447] ? trace_irq_disable+0x3b/0x140 [ 147.128840][ T6447] ? clear_bhb_loop+0x40/0x90 [ 147.128851][ T6447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.128860][ T6447] RIP: 0033:0x7fd53c35d68e [ 147.128870][ T6447] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 147.128877][ T6447] RSP: 002b:00007fd53d178fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 147.128888][ T6447] RAX: ffffffffffffffda RBX: 00007fd53d1796c0 RCX: 00007fd53c35d68e [ 147.128894][ T6447] RDX: 000000000000000f RSI: 00007fd53d1790a0 RDI: 0000000000000004 [ 147.128900][ T6447] RBP: 00007fd53d179090 R08: 0000000000000000 R09: 0000000000000000 [ 147.128905][ T6447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.128910][ T6447] R13: 00007fd53c616038 R14: 00007fd53c615fa0 R15: 00007fd53c73fa48 [ 147.128925][ T6447] [ 147.702378][ T6465] netlink: 12 bytes leftover after parsing attributes in process `syz.4.193'. [ 148.169965][ T6476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.216569][ T6476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.947499][ T994] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 149.030251][ T6484] capability: warning: `syz.0.200' uses 32-bit capabilities (legacy support in use) [ 149.146812][ T994] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 149.166569][ T994] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.176412][ T994] usb 4-1: Product: syz [ 149.181429][ T994] usb 4-1: Manufacturer: syz [ 149.186358][ T994] usb 4-1: SerialNumber: syz [ 149.198139][ T994] usb 4-1: config 0 descriptor?? [ 149.277059][ T809] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 149.438793][ T994] dvb_usb_rtl28xxu 4-1:0.0: chip type detection failed -71 [ 149.456860][ T994] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 149.457307][ T809] usb 3-1: Using ep0 maxpacket: 32 [ 149.498284][ T994] usb 4-1: USB disconnect, device number 9 [ 149.503614][ T809] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 149.535152][ T809] usb 3-1: config 0 has no interface number 0 [ 149.547726][ T809] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 149.589498][ T809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.597763][ T6502] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 149.606055][ T6502] IPv6: NLM_F_CREATE should be set when creating new route [ 149.607816][ T809] usb 3-1: Product: syz [ 149.613369][ T6502] IPv6: NLM_F_CREATE should be set when creating new route [ 149.636470][ T30] audit: type=1800 audit(1778949042.123:17): pid=6495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.203" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 149.675197][ T809] usb 3-1: Manufacturer: syz [ 149.685254][ T809] usb 3-1: SerialNumber: syz [ 149.703764][ T809] usb 3-1: config 0 descriptor?? [ 149.712609][ T809] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 149.728059][ T5704] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 149.892652][ T5704] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 149.904680][ T5704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.921756][ T809] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 149.923751][ T6506] binder: 6493:6506 ioctl c0306201 0 returned -14 [ 149.945872][ T5704] usb 5-1: Product: syz [ 149.952368][ T5704] usb 5-1: Manufacturer: syz [ 149.966355][ T5704] usb 5-1: SerialNumber: syz [ 149.976793][ T809] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 150.156364][ T6509] netlink: 12 bytes leftover after parsing attributes in process `syz.3.206'. [ 150.406745][ T5704] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 150.467093][ T5704] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 150.967235][ T809] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 151.127128][ T809] usb 4-1: device descriptor read/64, error -71 [ 151.367176][ T809] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 151.517138][ T809] usb 4-1: device descriptor read/64, error -71 [ 151.638242][ T809] usb usb4-port1: attempt power cycle [ 151.702469][ T5704] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 151.759454][ T6530] netlink: 24 bytes leftover after parsing attributes in process `syz.1.212'. [ 151.911911][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 151.912294][ T5724] usb 3-1: USB disconnect, device number 14 [ 151.998001][ T809] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 152.022184][ T5724] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 152.076315][ T5724] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 152.077815][ T809] usb 4-1: device descriptor read/8, error -71 [ 152.118288][ T5724] quatech2 3-1:0.51: device disconnected [ 152.347206][ T809] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 152.377676][ T809] usb 4-1: device descriptor read/8, error -71 [ 152.489718][ T809] usb usb4-port1: unable to enumerate USB device [ 152.861666][ T6544] Invalid logical block size (2097152) [ 152.872999][ T5704] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -EPROTO [ 152.909884][ T5704] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 152.953718][ T5704] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 152.989478][ T5704] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 153.017366][ T6548] netlink: 12 bytes leftover after parsing attributes in process `syz.1.217'. [ 153.033267][ T5704] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 153.065564][ T5704] usb 5-1: USB disconnect, device number 14 [ 153.191483][ T6539] binder: 6538:6539 ioctl 80081272 200000000180 returned -22 [ 153.302925][ T6555] netlink: 48 bytes leftover after parsing attributes in process `syz.1.220'. [ 153.515955][ T6566] netlink: 'syz.4.223': attribute type 4 has an invalid length. [ 153.943311][ T6577] tipc: Failed to remove unknown binding: 66,0,0/0:1655505647/1655505648 [ 153.943760][ T6577] tipc: Failed to remove unknown binding: 66,0,0/0:1655505647/1655505648 [ 153.943776][ T6577] tipc: Failed to remove unknown binding: 66,0,0/0:1655505647/1655505648 [ 154.047118][ T809] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 154.217473][ T809] usb 4-1: Using ep0 maxpacket: 16 [ 154.229103][ T809] usb 4-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 154.238373][ T809] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 154.250508][ T809] usb 4-1: Product: syz [ 154.259794][ T809] usb 4-1: Manufacturer: syz [ 154.267692][ T994] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 154.286870][ T809] usb 4-1: SerialNumber: syz [ 154.300871][ T6583] fuse: Unknown parameter 'rootemode' [ 154.311961][ T809] usb 4-1: config 0 descriptor?? [ 154.437492][ T994] usb 2-1: Using ep0 maxpacket: 8 [ 154.445879][ T994] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 154.471653][ T994] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 154.485443][ T994] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.501682][ T994] usb 2-1: Product: syz [ 154.508916][ T994] usb 2-1: Manufacturer: syz [ 154.516106][ T994] usb 2-1: SerialNumber: syz [ 154.542801][ T809] peak_usb 4-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 154.743413][ T809] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 154.750452][ T809] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 154.764782][ T809] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 154.788390][ T6560] input: syz1 as /devices/virtual/input/input13 [ 154.841795][ T6574] netlink: 12 bytes leftover after parsing attributes in process `syz.1.222'. [ 154.912764][ T994] cdc_ncm 2-1:1.0: bind() failure [ 154.931469][ T994] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 154.943460][ T994] cdc_ncm 2-1:1.1: bind() failure [ 154.950042][ T809] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -22 [ 154.970154][ T994] usb 2-1: USB disconnect, device number 11 [ 155.022726][ T809] usb 4-1: USB disconnect, device number 14 [ 155.390709][ T6598] lo: Caught tx_queue_len zero misconfig [ 155.620672][ T6600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.232'. [ 155.642941][ T30] audit: type=1326 audit(1778949048.133:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6601 comm="syz.3.233" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fac0d79ce59 code=0x0 [ 156.059174][ T10] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 156.186192][ T6624] netlink: 64 bytes leftover after parsing attributes in process `syz.2.239'. [ 156.243466][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 156.255715][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.280984][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.305344][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 156.319941][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 156.339268][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.365505][ T10] usb 5-1: config 0 descriptor?? [ 156.620825][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 156.644879][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 156.691543][ T10] usb 5-1: USB disconnect, device number 15 [ 156.793125][ T6644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.244'. [ 156.897668][ T994] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 156.973726][ C1] af_packet: tpacket_rcv: packet too big, clamped from 54 to 4294967286. macoff=82 [ 157.005807][ T6650] netlink: 'syz.4.247': attribute type 5 has an invalid length. [ 157.047480][ T994] usb 4-1: device descriptor read/64, error -71 [ 157.257042][ T5704] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 157.279270][ T6655] netlink: 'syz.0.246': attribute type 13 has an invalid length. [ 157.298660][ T994] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 157.420855][ T5704] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 157.436211][ T5704] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 157.439573][ T994] usb 4-1: device descriptor read/64, error -71 [ 157.450332][ T5704] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 157.475703][ T5704] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 157.487236][ T5704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.495930][ T5704] usb 5-1: Product: syz [ 157.503410][ T5704] usb 5-1: Manufacturer: syz [ 157.509049][ T5704] usb 5-1: SerialNumber: syz [ 157.530846][ T5704] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 157.540496][ T5704] usb 5-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 157.558058][ T5704] usb 5-1: found format II with max.bitrate = 128, frame size=0 [ 157.566182][ T5704] usb 5-1: 2:1: All rates were zero [ 157.600788][ T994] usb usb4-port1: attempt power cycle [ 157.875129][ T5704] usb 5-1: USB disconnect, device number 16 [ 157.959530][ T994] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 157.998970][ T994] usb 4-1: device descriptor read/8, error -71 [ 158.022414][ T30] audit: type=1800 audit(1778949050.523:19): pid=6662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.250" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 158.073802][ T30] audit: type=1326 audit(1778949050.543:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6661 comm="syz.2.250" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc7ea19ce59 code=0x0 [ 158.258686][ T994] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 158.299073][ T994] usb 4-1: device descriptor read/8, error -71 [ 158.427465][ T994] usb usb4-port1: unable to enumerate USB device [ 158.818128][ T5704] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 158.896772][ T6685] netlink: 52 bytes leftover after parsing attributes in process `syz.0.257'. [ 158.991242][ T5704] usb 3-1: device descriptor read/64, error -71 [ 159.158330][ T6689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.168641][ T6689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.277057][ T5704] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 159.385910][ T6669] syz.1.251 (6669): drop_caches: 2 [ 159.401800][ T24] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 159.411239][ T5704] usb 3-1: device descriptor read/64, error -71 [ 159.528918][ T5704] usb usb3-port1: attempt power cycle [ 159.567092][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 159.575574][ T24] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 159.584399][ T24] usb 5-1: config 0 has no interface number 0 [ 159.591144][ T24] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 159.606001][ T24] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 159.616651][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.626027][ T24] usb 5-1: Product: syz [ 159.630600][ T24] usb 5-1: Manufacturer: syz [ 159.635238][ T24] usb 5-1: SerialNumber: syz [ 159.653806][ T24] usb 5-1: config 0 descriptor?? [ 159.670745][ T24] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 159.680890][ T24] em28xx 5-1:0.132: Video interface 132 found: [ 159.746495][ T6693] syzkaller0: entered promiscuous mode [ 159.755856][ T6693] syzkaller0: entered allmulticast mode [ 159.814222][ T6699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.825624][ T6699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.877556][ T5704] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 159.883204][ T6699] netlink: 'syz.0.263': attribute type 1 has an invalid length. [ 159.900868][ T5704] usb 3-1: device descriptor read/8, error -71 [ 159.971736][ T6699] 8021q: adding VLAN 0 to HW filter on device bond1 [ 160.008114][ T6705] netlink: 'syz.3.262': attribute type 30 has an invalid length. [ 160.068593][ T24] em28xx 5-1:0.132: unknown em28xx chip ID (39) [ 160.090125][ T6703] netlink: 'syz.3.262': attribute type 30 has an invalid length. [ 160.110381][ T6704] bond1: (slave gretap1): making interface the new active one [ 160.177386][ T5704] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 160.209643][ T5704] usb 3-1: device descriptor read/8, error -71 [ 160.233056][ T6704] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 160.237411][ T6708] netlink: 12 bytes leftover after parsing attributes in process `syz.1.264'. [ 160.330359][ T5704] usb usb3-port1: unable to enumerate USB device [ 160.362088][ T24] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 160.388734][ T24] em28xx 5-1:0.132: board has no eeprom [ 160.401920][ T6711] input: syz1 as /devices/virtual/input/input15 [ 160.444319][ T3312] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.468714][ T3312] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.477063][ T24] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 160.484668][ T3312] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.489739][ T24] em28xx 5-1:0.132: analog set to bulk mode. [ 160.512029][ T3312] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.517502][ T5704] em28xx 5-1:0.132: Registering V4L2 extension [ 160.563383][ T24] usb 5-1: USB disconnect, device number 17 [ 160.591284][ T24] em28xx 5-1:0.132: Disconnecting em28xx [ 160.738725][ T5704] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 160.758944][ T5704] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 160.767804][ T5704] em28xx 5-1:0.132: No AC97 audio processor [ 160.793442][ T5704] usb 5-1: Decoder not found [ 160.807023][ T5704] em28xx 5-1:0.132: failed to create media graph [ 160.824602][ T5704] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 160.867108][ T5704] em28xx 5-1:0.132: Remote control support is not available for this card. [ 160.910866][ T24] em28xx 5-1:0.132: Closing input extension [ 160.945059][ T24] em28xx 5-1:0.132: Freeing device [ 161.412815][ T6734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.435750][ T6734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.488491][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 161.658875][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.693477][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 161.720376][ T10] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 161.744323][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.768469][ T10] usb 4-1: Product: syz [ 161.781415][ T10] usb 4-1: Manufacturer: syz [ 161.793670][ T10] usb 4-1: SerialNumber: syz [ 161.811838][ T10] usb 4-1: config 0 descriptor?? [ 161.831671][ T10] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 161.860187][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 161.888270][ T10] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 161.917589][ T10] usb 4-1: media controller created [ 161.942738][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 162.067127][ T5704] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 162.113330][ T10] DVB: Unable to find symbol tda10046_attach() [ 162.142772][ T10] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 162.183594][ T10] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 162.257062][ T5704] usb 3-1: Using ep0 maxpacket: 8 [ 162.281625][ T5704] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 162.302123][ T5704] usb 3-1: config 179 has no interface number 0 [ 162.317078][ T5704] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 162.342203][ T5704] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 162.370247][ T5704] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 162.399797][ T5704] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 162.414630][ T5704] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 162.428808][ T10] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 162.430512][ T5704] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 162.450865][ T5704] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.457770][ T10] usb 4-1: USB disconnect, device number 19 [ 162.465325][ T6749] loop7: detected capacity change from 0 to 7 [ 162.515756][ T6738] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 162.585062][ T6749] Dev loop7: unable to read RDB block 7 [ 162.588943][ C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 162.590999][ T6749] loop7: unable to read partition table [ 162.600675][ C0] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 162.615399][ T6749] loop7: partition table beyond EOD, truncated [ 162.621748][ T6749] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 162.637561][ T994] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 162.726519][ T4997] Dev loop7: unable to read RDB block 7 [ 162.732819][ T4997] loop7: unable to read partition table [ 162.739220][ T4997] loop7: partition table beyond EOD, truncated [ 162.800596][ T994] usb 5-1: Using ep0 maxpacket: 32 [ 162.816375][ T994] usb 5-1: config index 0 descriptor too short (expected 3659, got 75) [ 162.851656][ T994] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.864203][ T6738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.892959][ T994] usb 5-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 162.903502][ T10] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 162.916815][ T6738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.931537][ T994] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.943999][ T994] usb 5-1: Product: syz [ 162.949350][ T994] usb 5-1: Manufacturer: syz [ 162.954043][ T994] usb 5-1: SerialNumber: syz [ 162.962399][ T994] usb 5-1: config 0 descriptor?? [ 162.975334][ T994] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 163.031083][ T5724] usb 3-1: USB disconnect, device number 19 [ 163.031156][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 163.045638][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 163.054574][ C1] ================================================================== [ 163.062681][ C1] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x28b/0x2f0 [ 163.070509][ C1] Read of size 4 at addr ffff888035da785c by task syz.0.277/6757 [ 163.078227][ C1] [ 163.080547][ C1] CPU: 1 UID: 0 PID: 6757 Comm: syz.0.277 Tainted: G L syzkaller #0 PREEMPT(full) [ 163.080567][ C1] Tainted: [L]=SOFTLOCKUP [ 163.080572][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 163.080580][ C1] Call Trace: [ 163.080591][ C1] [ 163.080597][ C1] dump_stack_lvl+0xe8/0x150 [ 163.080616][ C1] print_address_description+0x55/0x1e0 [ 163.080630][ C1] ? do_raw_spin_lock+0x28b/0x2f0 [ 163.080654][ C1] print_report+0x58/0x70 [ 163.080665][ C1] kasan_report+0x117/0x150 [ 163.080686][ C1] ? do_raw_spin_lock+0x28b/0x2f0 [ 163.080706][ C1] do_raw_spin_lock+0x28b/0x2f0 [ 163.080724][ C1] ? __wake_up_common_lock+0x2f/0x1f0 [ 163.080748][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 163.080769][ C1] _raw_spin_lock_irqsave+0x4c/0x60 [ 163.080793][ C1] __wake_up_common_lock+0x2f/0x1f0 [ 163.080815][ C1] __usb_hcd_giveback_urb+0x3b0/0x540 [ 163.080837][ C1] dummy_timer+0xbc0/0x4650 [ 163.080862][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 163.080876][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 163.080893][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 163.080916][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 163.080938][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 163.080957][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 163.080974][ C1] __hrtimer_run_queues+0x3c0/0xa20 [ 163.080997][ C1] hrtimer_run_softirq+0x17a/0x240 [ 163.081017][ C1] handle_softirqs+0x22a/0x840 [ 163.081031][ C1] ? __irq_exit_rcu+0xca/0x220 [ 163.081046][ C1] __irq_exit_rcu+0xca/0x220 [ 163.081063][ C1] irq_exit_rcu+0x9/0x30 [ 163.081076][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 163.081096][ C1] [ 163.081100][ C1] [ 163.081105][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 163.081120][ C1] RIP: 0010:check_preemption_disabled+0x6/0xe0 [ 163.081134][ C1] Code: c7 c6 c0 b0 28 8c eb 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 53 <65> 8b 05 87 3f 90 07 65 8b 0d 7c 3f 90 07 f7 c1 ff ff ff 7f 74 0c [ 163.081146][ C1] RSP: 0018:ffffc9000337f500 EFLAGS: 00000282 [ 163.081159][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffff888028ab8000 [ 163.081168][ C1] RDX: 0000000000000000 RSI: ffffffff8c28b0c0 RDI: ffffffff8c28b080 [ 163.081177][ C1] RBP: 0000000000000001 R08: ffffffff823c93a4 R09: ffffffff8e95cde0 [ 163.081187][ C1] R10: dffffc0000000000 R11: fffff940003ee7e1 R12: 000000000007dcfc [ 163.081200][ C1] R13: dffffc0000000000 R14: ffff88813febb1f0 R15: 0000000000001000 [ 163.081213][ C1] ? page_table_check_clear+0x124/0x4f0 [ 163.081235][ C1] rcu_is_watching+0x15/0xb0 [ 163.081251][ C1] rcu_read_lock_held+0x15/0x50 [ 163.081269][ C1] page_ext_lookup+0xe7/0x180 [ 163.081286][ C1] ? page_table_check_clear+0x124/0x4f0 [ 163.081303][ C1] page_table_check_clear+0x212/0x4f0 [ 163.081321][ C1] ? vm_normal_page+0x12c/0x280 [ 163.081347][ C1] __zap_vma_range+0x366d/0x4b40 [ 163.081381][ C1] ? __pfx___zap_vma_range+0x10/0x10 [ 163.081403][ C1] ? mas_find+0xb0e/0xd30 [ 163.081421][ C1] ? unmap_vmas+0x1bd/0x530 [ 163.081441][ C1] unmap_vmas+0x379/0x530 [ 163.081462][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 163.081494][ C1] exit_mmap+0x280/0x9e0 [ 163.081510][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 163.081529][ C1] ? uprobe_clear_state+0x53/0x3f0 [ 163.081551][ C1] ? __pfx_exit_aio+0x10/0x10 [ 163.081570][ C1] ? uprobe_clear_state+0x2bc/0x3f0 [ 163.081596][ C1] __mmput+0x118/0x430 [ 163.081613][ C1] exit_mm+0x1f6/0x2d0 [ 163.081633][ C1] do_exit+0x6a2/0x22c0 [ 163.081650][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 163.081669][ C1] ? __pfx_do_exit+0x10/0x10 [ 163.081685][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 163.081703][ C1] ? preempt_schedule_common+0x82/0xd0 [ 163.081722][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 163.081742][ C1] do_group_exit+0x21b/0x2d0 [ 163.081765][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.081779][ C1] __x64_sys_exit_group+0x3f/0x40 [ 163.081797][ C1] x64_sys_call+0x221a/0x2240 [ 163.081812][ C1] do_syscall_64+0x15f/0xf80 [ 163.081831][ C1] ? clear_bhb_loop+0x40/0x90 [ 163.081845][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.081858][ C1] RIP: 0033:0x7fbd5039ce59 [ 163.081869][ C1] Code: Unable to access opcode bytes at 0x7fbd5039ce2f. [ 163.081876][ C1] RSP: 002b:00007fbd5073fd88 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 163.081893][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbd5039ce59 [ 163.081904][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 163.081911][ C1] RBP: 00007fbd5073fdec R08: 0000000000000000 R09: 00000000000927c0 [ 163.081920][ C1] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000037 [ 163.081928][ C1] R13: 00000000000927c0 R14: 0000000000027b4e R15: 00007fbd5073fe40 [ 163.081942][ C1] [ 163.081946][ C1] [ 163.552786][ C1] Allocated by task 5704: [ 163.557101][ C1] kasan_save_track+0x3e/0x80 [ 163.561791][ C1] __kasan_kmalloc+0x93/0xb0 [ 163.566377][ C1] __kmalloc_cache_noprof+0x31c/0x660 [ 163.571745][ C1] xpad_probe+0x428/0x1fc0 [ 163.576153][ C1] usb_probe_interface+0x659/0xc70 [ 163.581262][ C1] really_probe+0x267/0xaf0 [ 163.585756][ C1] __driver_probe_device+0x1ef/0x380 [ 163.591036][ C1] driver_probe_device+0x4f/0x240 [ 163.596054][ C1] __device_attach_driver+0x279/0x430 [ 163.601416][ C1] bus_for_each_drv+0x258/0x2f0 [ 163.606253][ C1] __device_attach+0x2c5/0x450 [ 163.611005][ C1] device_initial_probe+0xa1/0xd0 [ 163.616018][ C1] bus_probe_device+0x12a/0x220 [ 163.620851][ C1] device_add+0x7e9/0xbb0 [ 163.625170][ C1] usb_set_configuration+0x1a87/0x2110 [ 163.630623][ C1] usb_generic_driver_probe+0x8d/0x150 [ 163.636067][ C1] usb_probe_device+0x1c4/0x3b0 [ 163.640919][ C1] really_probe+0x267/0xaf0 [ 163.645415][ C1] __driver_probe_device+0x1ef/0x380 [ 163.650694][ C1] driver_probe_device+0x4f/0x240 [ 163.655714][ C1] __device_attach_driver+0x279/0x430 [ 163.661078][ C1] bus_for_each_drv+0x258/0x2f0 [ 163.665918][ C1] __device_attach+0x2c5/0x450 [ 163.670667][ C1] device_initial_probe+0xa1/0xd0 [ 163.675685][ C1] bus_probe_device+0x12a/0x220 [ 163.680527][ C1] device_add+0x7e9/0xbb0 [ 163.684842][ C1] usb_new_device+0xa08/0x16f0 [ 163.689593][ C1] hub_event+0x2a1c/0x4f30 [ 163.694000][ C1] process_scheduled_works+0xb5d/0x1860 [ 163.699529][ C1] worker_thread+0xa53/0xfc0 [ 163.704102][ C1] kthread+0x389/0x470 [ 163.708160][ C1] ret_from_fork+0x514/0xb70 [ 163.712746][ C1] ret_from_fork_asm+0x1a/0x30 [ 163.717503][ C1] [ 163.719809][ C1] Freed by task 5724: [ 163.723771][ C1] kasan_save_track+0x3e/0x80 [ 163.728437][ C1] kasan_save_free_info+0x46/0x50 [ 163.733442][ C1] __kasan_slab_free+0x5c/0x80 [ 163.738191][ C1] kfree+0x1c5/0x640 [ 163.742070][ C1] xpad_disconnect+0x350/0x480 [ 163.746818][ C1] usb_unbind_interface+0x26e/0x910 [ 163.752003][ C1] device_release_driver_internal+0x4d9/0x870 [ 163.758058][ C1] bus_remove_device+0x455/0x570 [ 163.763065][ C1] device_del+0x527/0x8f0 [ 163.767386][ C1] usb_disable_device+0x3d4/0x8d0 [ 163.772405][ C1] usb_disconnect+0x32f/0x990 [ 163.777065][ C1] hub_event+0x1cc9/0x4f30 [ 163.781476][ C1] process_scheduled_works+0xb5d/0x1860 [ 163.787013][ C1] worker_thread+0xa53/0xfc0 [ 163.791598][ C1] kthread+0x389/0x470 [ 163.795649][ C1] ret_from_fork+0x514/0xb70 [ 163.800233][ C1] ret_from_fork_asm+0x1a/0x30 [ 163.804987][ C1] [ 163.807294][ C1] The buggy address belongs to the object at ffff888035da7800 [ 163.807294][ C1] which belongs to the cache kmalloc-1k of size 1024 [ 163.821347][ C1] The buggy address is located 92 bytes inside of [ 163.821347][ C1] freed 1024-byte region [ffff888035da7800, ffff888035da7c00) [ 163.835139][ C1] [ 163.837452][ C1] The buggy address belongs to the physical page: [ 163.843865][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888035da2800 pfn:0x35da0 [ 163.853917][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 163.862404][ C1] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 163.870896][ C1] page_type: f5(slab) [ 163.874862][ C1] raw: 00fff00000000240 ffff88813fe1adc0 ffffea0001f53a10 ffffea0001f87210 [ 163.883430][ C1] raw: ffff888035da2800 000000080010000d 00000000f5000000 0000000000000000 [ 163.892101][ C1] head: 00fff00000000240 ffff88813fe1adc0 ffffea0001f53a10 ffffea0001f87210 [ 163.900771][ C1] head: ffff888035da2800 000000080010000d 00000000f5000000 0000000000000000 [ 163.909519][ C1] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 163.918177][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 163.926917][ C1] page dumped because: kasan: bad access detected [ 163.933321][ C1] page_owner tracks the page as allocated [ 163.939020][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5624, tgid 5624 (syz-executor), ts 98414743191, free_ts 98356780292 [ 163.960369][ C1] post_alloc_hook+0x231/0x280 [ 163.965128][ C1] get_page_from_freelist+0x24ba/0x2540 [ 163.970670][ C1] __alloc_frozen_pages_noprof+0x18d/0x380 [ 163.976469][ C1] allocate_slab+0x77/0x660 [ 163.980965][ C1] refill_objects+0x339/0x3d0 [ 163.985626][ C1] __pcs_replace_empty_main+0x321/0x720 [ 163.991157][ C1] __kmalloc_cache_noprof+0x392/0x660 [ 163.996520][ C1] kernfs_create_root+0x5b/0x580 [ 164.001449][ C1] cgroup_setup_root+0x296/0xf60 [ 164.006390][ C1] cgroup1_get_tree+0x551/0x8a0 [ 164.011228][ C1] vfs_get_tree+0x92/0x2a0 [ 164.015646][ C1] do_new_mount+0x341/0xd30 [ 164.020136][ C1] __se_sys_mount+0x31d/0x420 [ 164.024800][ C1] do_syscall_64+0x15f/0xf80 [ 164.029382][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.035261][ C1] page last free pid 5624 tgid 5624 stack trace: [ 164.041571][ C1] __free_frozen_pages+0xbc7/0xd30 [ 164.046677][ C1] __slab_free+0x274/0x2c0 [ 164.051083][ C1] qlist_free_all+0x99/0x100 [ 164.055668][ C1] kasan_quarantine_reduce+0x148/0x160 [ 164.061123][ C1] __kasan_slab_alloc+0x22/0x80 [ 164.065965][ C1] __kmalloc_cache_noprof+0x2ba/0x660 [ 164.071422][ C1] tomoyo_init_log+0x195/0x1fb0 [ 164.076272][ C1] tomoyo_supervisor+0x353/0x1570 [ 164.081285][ C1] tomoyo_path_permission+0x25a/0x380 [ 164.086644][ C1] tomoyo_path_perm+0x3f3/0x560 [ 164.091488][ C1] security_inode_getattr+0x12b/0x310 [ 164.096853][ C1] vfs_getattr+0x23/0x70 [ 164.101079][ C1] vfs_statx_path+0x2b/0x230 [ 164.105654][ C1] vfs_statx+0x12e/0x200 [ 164.109884][ C1] vfs_fstatat+0x11b/0x170 [ 164.114280][ C1] __x64_sys_newfstatat+0x151/0x200 [ 164.119470][ C1] [ 164.121779][ C1] Memory state around the buggy address: [ 164.127392][ C1] ffff888035da7700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 164.135444][ C1] ffff888035da7780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 164.143595][ C1] >ffff888035da7800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 164.151642][ C1] ^ [ 164.158606][ C1] ffff888035da7880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 164.166683][ C1] ffff888035da7900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 164.174762][ C1] ================================================================== [ 164.182829][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 164.190026][ C1] CPU: 1 UID: 0 PID: 6757 Comm: syz.0.277 Tainted: G L syzkaller #0 PREEMPT(full) [ 164.200775][ C1] Tainted: [L]=SOFTLOCKUP [ 164.205082][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 164.215125][ C1] Call Trace: [ 164.218394][ C1] [ 164.221228][ C1] vpanic+0x56c/0xa60 [ 164.225203][ C1] ? __pfx_vpanic+0x10/0x10 [ 164.229711][ C1] panic+0xc5/0xd0 [ 164.233435][ C1] ? __pfx_panic+0x10/0x10 [ 164.237851][ C1] ? do_raw_spin_lock+0x28b/0x2f0 [ 164.242882][ C1] ? do_raw_spin_lock+0x28b/0x2f0 [ 164.247987][ C1] ? do_raw_spin_lock+0x28b/0x2f0 [ 164.253001][ C1] check_panic_on_warn+0x89/0xb0 [ 164.257939][ C1] ? do_raw_spin_lock+0x28b/0x2f0 [ 164.262971][ C1] end_report+0x73/0x170 [ 164.267215][ C1] ? do_raw_spin_lock+0x28b/0x2f0 [ 164.272241][ C1] kasan_report+0x128/0x150 [ 164.276732][ C1] ? do_raw_spin_lock+0x28b/0x2f0 [ 164.281749][ C1] do_raw_spin_lock+0x28b/0x2f0 [ 164.286598][ C1] ? __wake_up_common_lock+0x2f/0x1f0 [ 164.292055][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 164.297431][ C1] _raw_spin_lock_irqsave+0x4c/0x60 [ 164.302631][ C1] __wake_up_common_lock+0x2f/0x1f0 [ 164.307821][ C1] __usb_hcd_giveback_urb+0x3b0/0x540 [ 164.313192][ C1] dummy_timer+0xbc0/0x4650 [ 164.317705][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 164.322646][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 164.327573][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 164.332945][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 164.337877][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 164.343678][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 164.348607][ C1] __hrtimer_run_queues+0x3c0/0xa20 [ 164.353800][ C1] hrtimer_run_softirq+0x17a/0x240 [ 164.358914][ C1] handle_softirqs+0x22a/0x840 [ 164.363671][ C1] ? __irq_exit_rcu+0xca/0x220 [ 164.368422][ C1] __irq_exit_rcu+0xca/0x220 [ 164.373003][ C1] irq_exit_rcu+0x9/0x30 [ 164.377229][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 164.382873][ C1] [ 164.385793][ C1] [ 164.388711][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 164.394687][ C1] RIP: 0010:check_preemption_disabled+0x6/0xe0 [ 164.400825][ C1] Code: c7 c6 c0 b0 28 8c eb 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 53 <65> 8b 05 87 3f 90 07 65 8b 0d 7c 3f 90 07 f7 c1 ff ff ff 7f 74 0c [ 164.420422][ C1] RSP: 0018:ffffc9000337f500 EFLAGS: 00000282 [ 164.426494][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffff888028ab8000 [ 164.434468][ C1] RDX: 0000000000000000 RSI: ffffffff8c28b0c0 RDI: ffffffff8c28b080 [ 164.442433][ C1] RBP: 0000000000000001 R08: ffffffff823c93a4 R09: ffffffff8e95cde0 [ 164.450399][ C1] R10: dffffc0000000000 R11: fffff940003ee7e1 R12: 000000000007dcfc [ 164.458361][ C1] R13: dffffc0000000000 R14: ffff88813febb1f0 R15: 0000000000001000 [ 164.466322][ C1] ? page_table_check_clear+0x124/0x4f0 [ 164.471878][ C1] rcu_is_watching+0x15/0xb0 [ 164.476481][ C1] rcu_read_lock_held+0x15/0x50 [ 164.481322][ C1] page_ext_lookup+0xe7/0x180 [ 164.486008][ C1] ? page_table_check_clear+0x124/0x4f0 [ 164.491562][ C1] page_table_check_clear+0x212/0x4f0 [ 164.496936][ C1] ? vm_normal_page+0x12c/0x280 [ 164.501791][ C1] __zap_vma_range+0x366d/0x4b40 [ 164.506746][ C1] ? __pfx___zap_vma_range+0x10/0x10 [ 164.512035][ C1] ? mas_find+0xb0e/0xd30 [ 164.516358][ C1] ? unmap_vmas+0x1bd/0x530 [ 164.520856][ C1] unmap_vmas+0x379/0x530 [ 164.525184][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 164.530049][ C1] exit_mmap+0x280/0x9e0 [ 164.534290][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 164.539056][ C1] ? uprobe_clear_state+0x53/0x3f0 [ 164.544169][ C1] ? __pfx_exit_aio+0x10/0x10 [ 164.548941][ C1] ? uprobe_clear_state+0x2bc/0x3f0 [ 164.554132][ C1] __mmput+0x118/0x430 [ 164.558228][ C1] exit_mm+0x1f6/0x2d0 [ 164.562292][ C1] do_exit+0x6a2/0x22c0 [ 164.566443][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 164.572247][ C1] ? __pfx_do_exit+0x10/0x10 [ 164.576829][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 164.582193][ C1] ? preempt_schedule_common+0x82/0xd0 [ 164.587646][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 164.593013][ C1] do_group_exit+0x21b/0x2d0 [ 164.597602][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.603655][ C1] __x64_sys_exit_group+0x3f/0x40 [ 164.608761][ C1] x64_sys_call+0x221a/0x2240 [ 164.613434][ C1] do_syscall_64+0x15f/0xf80 [ 164.618025][ C1] ? clear_bhb_loop+0x40/0x90 [ 164.622697][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.628610][ C1] RIP: 0033:0x7fbd5039ce59 [ 164.633012][ C1] Code: Unable to access opcode bytes at 0x7fbd5039ce2f. [ 164.640010][ C1] RSP: 002b:00007fbd5073fd88 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 164.648493][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbd5039ce59 [ 164.656451][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 164.664407][ C1] RBP: 00007fbd5073fdec R08: 0000000000000000 R09: 00000000000927c0 [ 164.672368][ C1] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000037 [ 164.680329][ C1] R13: 00000000000927c0 R14: 0000000000027b4e R15: 00007fbd5073fe40 [ 164.688295][ C1] [ 164.691766][ C1] Kernel Offset: disabled [ 164.696090][ C1] Rebooting in 86400 seconds..