last executing test programs: 1m47.028661609s ago: executing program 2 (id=363): r0 = socket(0x8, 0x2, 0x4000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x20040}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r3, 0x225, 0x68020}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000406d0422c20000000000010902240001f1675610b5ed02ec8e05cc11e30000000918000001030001000921ea0106012207000905810300000d03007dfa1bd3f2b055fa44"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000001100)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x1, "1f9a523c"}]}}, 0x0}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000002400010300000000000000000100000004"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r5) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) recvmmsg(r5, &(0x7f0000008200)=[{{0x0, 0x0, 0x0}, 0x104}, {{0x0, 0x0, &(0x7f0000000040)}, 0x8000002}, {{0x0, 0x0, 0x0}, 0x987e}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/157, 0x9d}, {&(0x7f0000000740)=""/250, 0xfa}, {&(0x7f00000004c0)=""/52, 0x34}, {&(0x7f0000000440)=""/73, 0x49}, {&(0x7f0000001a00)=""/4125, 0x101d}, {&(0x7f0000000640)=""/235, 0xeb}], 0x6}, 0x8cc}], 0x4, 0x12002, 0x0) syz_open_dev$hiddev(&(0x7f0000000c00), 0x0, 0x200) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xdc, 0xf5, 0x1e, 0x10, 0x93a, 0x2601, 0xffbc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0xa6, 0x40, 0xd, [{{0x9, 0x4, 0xdd, 0x1, 0x0, 0x7d, 0x36, 0x2f, 0x2}}]}}]}}, 0x0) r6 = syz_usb_connect$sierra_net(0x1, 0x3f, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xf, 0x2, 0x40, 0xa, 0x2, 0x7}, {0x9, 0x5, 0x1, 0x2, 0x8e52785791c74f20, 0x3, 0x0, 0x6}, {0x9, 0x5, 0x7, 0x3, 0x660, 0x6, 0x80, 0xa}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r6, &(0x7f0000000640)={0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="4010650000006510d0c1a4dc667d58e8f1cfd4b17e8b302703ece62106d7284174085631368c7e3b60c6f15546a5491687238dbec6ba2007cfba190982ba9a4dfb875d7446999390a732d4804412a0d10f38cc0200f3164a4121833fa9e8e9d43ac3a100609db4e3be12e5"], &(0x7f0000000600)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x457}}}, &(0x7f0000000bc0)={0x1c, &(0x7f0000000680)={0x0, 0x1b, 0x96, "f12d1c69f6c208dc4ae1505007b3ac2c6d1d271a944bc67b51600c49885cefb448e5ec0dde52a0a2e5c1df1d3a2eef22c0077dc4f78841ef46937bd6a1a2dd48d3c83f7668f8ccb1c61922aaa0a0ff88cd554c270bd298d47be77d83af2f9902f294e52ad66ace9348c451988aafbc27086249fa513fde9d1e030687551e4a8a1316f373d548e5d56ffef3e1e4ef665318691717f6bd"}, &(0x7f0000000740)={0xa1, 0x1, 0x400, "121eb0bc441e6eb3869e04474f636bd308d4f4d142ee88b07fb25abc1563b0a69ec64eeeae9a925012430ee77679762204bd377648dbeba94380fd5ef64e9d002483babac37369cbc0fb672f35798852ddff428b833c959e8d2864e9d647b975f1aa3cc24fb1dde48a6f9c46b48b61aa9633c090c37e76c3e4d86d1a7b88b1574008e86dc08eaa9fee9f2fbdaec455fbe06b022d6f031e9167e2458ff6134ca82ff00c66edbc6ca781a6d9de4ba83b6d28aebf20285d887348424d690a902f03b8aeee8196cd6f91d0cefcfc3b892e829e44b7f3d8b8d13e0df86c3bbade88902d0d24b44ca73c5eac0ec7dd638dff5da38fde16376d6673a3450cbf7cc00a59f76945b44db4de425b33cadbac19213dfbc9b9e107105864709917604132912b97a25746f0e10a5614136c480df8c9124934acb37aa29de0d974f098779f005cf2c56213dcc533d49b1354afdc827fc575106adbc19a9bab40c8519966c1f8c4b3a4f197d12986ab26b1b523b09167c145acc34645094c2adf11cd118c4e1ef152c80741d5d61e48d31ca5726d6f9ffb99628c2816a8787fdab1402f1e4b7838b9f350d8ca82fbc59f5597bc7b04d1bea46c870f5734a3f11ec548554dd984fd25ad024b45198ba4dc3e04564555717f54c0619bad04ea96ac6519c3778ce93acb27a1a7a8219ebd4ceb4a0ddd9fa067ae673c13d60caeba22a49708ccaa217a334531bc5e0b35a5e90b3dd87042d92c049709453c1a092b6a660563af27009ec1abf953e4f9a43d8e4604e6f38af6e2c42251136ef943535066534ae62cfccf999f53f63e8db89153afbdd56de69ef43ed7b5c966f42e4beb91d07451bcec91e425cdaffa2f4e2249440fa1fcd2950098a87633865ada065e816dcb8660380687949b71e0d75a5e6deef8448a037023af893f4f1cc18062c8d17a9cc10b70c37f541d4f9c8074387a41e176a9a79e5538fc7ed415602189ed043f6e03347ac368e02ed7c035182e61bb0cfde0ae831b30e53ec5c9bcdd6f7d49597fdef6acb2873d2d212a57a3d836db22c787cd87c9a5ce5411abc6b2059f917a41212947d057bacd29d042b33061fc82e2b108184a29f2665919e67e7de7377448699f4692daf3199f12acabdaf9676340ecdda99ee3789ed10cb538b236fb81bec47b1b24efe8d69dbaaa57f0621743b6d8e589a05f78b58a63a5005cd6606e3995773f965d838b027d4537897eb66c7d8d72fae85a9d06d5c05293bebb61a451d38dfd2da2efee661490b1ee1acaca7ac44f73823a344815147db833d35d866fe38b5f63e9129d1c1550951b761d81561e40d0e5d4e92fdeea382cb501ccda4838a26b51fa299350fd9b0b473aa327ef006bf6bf702c2674e10c5ff83f2ecc984bffa0d5e33827139ce804b18c22bbc6ef7ef24614146644caa2d77d8a770b4113000541"}, &(0x7f0000000b80)={0x21, 0x0, 0x2, "93a6"}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/vmallocinfo\x00', 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mq_open(0x0, 0x42, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') read$hiddev(r7, &(0x7f00000000c0)=""/4092, 0xffc) ioctl$SG_GET_NUM_WAITING(r7, 0x227d, &(0x7f0000001140)) 1m44.117409281s ago: executing program 2 (id=378): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000000000008580418400000000000010902240001000040200904000002030001000921070000012205000905810300020600000359fa465e5acaf6a133e16daca1fac8fcdcba0600d68b0c41ac6238ca2aed0777ebfc74cf3fbc27a59cfc951a172445727c24de0326648abe8bec64cf761215ba204def6ff05b17798c9d218254fa3c2f1b70ead0296977"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002210000000a15a96"], 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) sendmmsg(r5, &(0x7f0000001180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x404000c) bind$vsock_stream(r4, &(0x7f0000000180)={0x28, 0x0, 0xffffd8ee}, 0x10) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000004b80)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@deltaction={0x14, 0x31, 0x300, 0x70bd2b, 0x25dfdbf7}, 0x33fe0}, 0x1, 0x0, 0x0, 0x40040c4}, 0x4054) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) 1m43.149431262s ago: executing program 0 (id=384): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a800008100000086dd6076cd8a0018000020010000000000000000000000000000fe800000000000000000000000000000000200000000000005"], 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000580)={[{0x3d, 0x4e00, "766a118555c6502f9c437f0dcf70e59a8cb16224cbcf01adc9d68a388e6500dafec17b48eea217622d0709e7c5ea458c6cb09f9a7d72b24599b80a9071"}]}) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xa1, 0x45, 0x9a, 0x10, 0x5ac, 0x24a, 0x2978, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x0, 0x10, 0xb, [{{0x9, 0x4, 0x5f, 0x0, 0x0, 0x3, 0x37, 0x2, 0xff}}]}}]}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000001000010029bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="84270020248100001400030074756e6c300000000000000000000000080029"], 0x54}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0xffffffffffffff0f}]}}]}, 0x48}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/consoles\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000380)={&(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, r8}) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r6, 0x0) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) 1m40.925489122s ago: executing program 2 (id=386): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x194) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) close(0xffffffffffffffff) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) 1m40.68638591s ago: executing program 2 (id=388): r0 = socket(0x8, 0x2, 0x4000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x20040}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r3, 0x225, 0x68020}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000406d0422c20000000000010902240001f1675610b5ed02ec8e05cc11e30000000918000001030001000921ea0106012207000905810300000d03007dfa1bd3f2b055fa44"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000001100)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x1, "1f9a523c"}]}}, 0x0}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000002400010300000000000000000100000004"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r5) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) recvmmsg(r5, &(0x7f0000008200)=[{{0x0, 0x0, 0x0}, 0x104}, {{0x0, 0x0, &(0x7f0000000040)}, 0x8000002}, {{0x0, 0x0, 0x0}, 0x987e}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/157, 0x9d}, {&(0x7f0000000740)=""/250, 0xfa}, {&(0x7f00000004c0)=""/52, 0x34}, {&(0x7f0000000440)=""/73, 0x49}, {&(0x7f0000001a00)=""/4125, 0x101d}, {&(0x7f0000000640)=""/235, 0xeb}], 0x6}, 0x8cc}], 0x4, 0x12002, 0x0) syz_open_dev$hiddev(&(0x7f0000000c00), 0x0, 0x200) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xdc, 0xf5, 0x1e, 0x10, 0x93a, 0x2601, 0xffbc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0xa6, 0x40, 0xd, [{{0x9, 0x4, 0xdd, 0x1, 0x0, 0x7d, 0x36, 0x2f, 0x2}}]}}]}}, 0x0) r6 = syz_usb_connect$sierra_net(0x1, 0x3f, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xf, 0x2, 0x40, 0xa, 0x2, 0x7}, {0x9, 0x5, 0x1, 0x2, 0x8e52785791c74f20, 0x3, 0x0, 0x6}, {0x9, 0x5, 0x7, 0x3, 0x660, 0x6, 0x80, 0xa}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r6, &(0x7f0000000640)={0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="4010650000006510d0c1a4dc667d58e8f1cfd4b17e8b302703ece62106d7284174085631368c7e3b60c6f15546a5491687238dbec6ba2007cfba190982ba9a4dfb875d7446999390a732d4804412a0d10f38cc0200f3164a4121833fa9e8e9d43ac3a100609db4e3be12e5"], &(0x7f0000000600)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x457}}}, &(0x7f0000000bc0)={0x1c, &(0x7f0000000680)={0x0, 0x1b, 0x96, "f12d1c69f6c208dc4ae1505007b3ac2c6d1d271a944bc67b51600c49885cefb448e5ec0dde52a0a2e5c1df1d3a2eef22c0077dc4f78841ef46937bd6a1a2dd48d3c83f7668f8ccb1c61922aaa0a0ff88cd554c270bd298d47be77d83af2f9902f294e52ad66ace9348c451988aafbc27086249fa513fde9d1e030687551e4a8a1316f373d548e5d56ffef3e1e4ef665318691717f6bd"}, &(0x7f0000000740)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000b80)={0x21, 0x0, 0x2, "93a6"}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/vmallocinfo\x00', 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mq_open(0x0, 0x42, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') read$hiddev(r7, &(0x7f00000000c0)=""/4092, 0xffc) ioctl$SG_GET_NUM_WAITING(r7, 0x227d, &(0x7f0000001140)) 1m40.325556495s ago: executing program 3 (id=389): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000d000300686173683a6e6574000000000900020073797a32000000000500040000000000050005000a000000200001000600000014000780"], 0x5c}}, 0x0) 1m40.27163612s ago: executing program 3 (id=390): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x604000000000000) 1m39.961429962s ago: executing program 0 (id=392): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004580)={0x1, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x480, 0x6}, [@call={0x85, 0x0, 0x0, 0x69}]}, &(0x7f0000000040)='syzkaller\x00', 0x6, 0x29, &(0x7f0000000200)=""/41, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 1m39.929378s ago: executing program 0 (id=393): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x30, 0x2, 0x0, "4c4900e1b0faa9b0071c937f7f00002e0c0000c39b0000000000000000012000"}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000500)={'batadv0\x00', 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x68942, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000100000000000000000000009500000063c14ced"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x200400, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x40040) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) r7 = socket$inet(0x2, 0x2, 0x7) openat$vmci(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="020e0000180000000000000000000000030005000000000002000000ac1e0001000000000000000003000600000700000200000000000000000000000000000004000400000000000000000000000000000000000000000000000000000000000800120000000200000000000000000006000000000000000000000000000000ff02000000000000000000000000000100000000000000000000000000000000040003"], 0xc0}}, 0x0) setsockopt$inet_opts(r7, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) r9 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x129000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r9, 0xc10c5541, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r7, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) getpeername$inet(r7, 0x0, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) sendto$packet(r1, &(0x7f00000000c0)="0300f198aaaeba98ca00008586dd2a7b24969dfa37655c109710dc045292092e9f821dd9bbb7d3f53640f9cfae9d96ffbe85a3c06a5b", 0x36, 0x4, &(0x7f0000000200)={0x11, 0xf6, r2, 0x1, 0xfe, 0x6, @multicast}, 0x14) 1m39.013468249s ago: executing program 0 (id=398): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x1, {0xfffffffd, 0xfffffffd}, {0x0, 0x0, 0xfffffffe}, {0x0, 0xffff0000, 0xfffbff7f}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9}) 1m38.794299063s ago: executing program 3 (id=399): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x12, 0x7c5, 0x1, 0x1, 0xd59f80, 0x4, 0x5, 0x7, 0x8, 0x5, 0x722, 0xe72, 0x8, 0xc, 0x2e, 0x8, {0xffff945a, 0x1}, 0x3, 0xed}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x6}, [@map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f0000000040)='GPL\x00', 0xfffffbff, 0x95, &(0x7f00000001c0)=""/149, 0x40f00, 0x49, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0xf, 0x8, 0x4}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f0000000280)=[0x1, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x0, 0x1, 0x8, 0x3}, {0x2, 0x3, 0xc, 0x7}, {0x5, 0x4, 0x9, 0x5}, {0x4, 0x4, 0xf, 0x3}], 0x10, 0x3}, 0x94) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/uevent_helper', 0x40, 0xc3) getdents(r2, &(0x7f0000000140)=""/177, 0xb1) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x8, 0x0, 0x201}}, &(0x7f0000000980)='GPL\x00', 0xff, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x3, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m38.760425921s ago: executing program 0 (id=400): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r0, 0x40305829, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00'}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x200, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040091}, 0x8000) fchdir(r1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/211, 0xd3) unshare(0x22020400) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000380)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x101, @rand_addr=' \x01\x00', 0xa1fc}, 0x1c, 0x0}}], 0x1, 0x20008040) r6 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r6, &(0x7f0000000f00)={&(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000100)='f', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000000000008400000008"], 0x20}, 0x0) sendmsg$inet(r6, &(0x7f0000000f00)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)='&', 0x1}], 0x1, &(0x7f0000000000)=ANY=[], 0x20}, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0xe}, &(0x7f0000000180)=0x8) 1m38.649391162s ago: executing program 3 (id=402): r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x40) fcntl$notify(r0, 0x402, 0x79) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x101, 0x48001051, 0xffffffffffffffff, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x39, 0x1a, r2, 0x0) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 1m38.591260418s ago: executing program 0 (id=403): syz_open_dev$vim2m(&(0x7f0000000340), 0x1, 0x2) socket$rxrpc(0x21, 0x2, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x11) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000b00)=0x6) r4 = syz_io_uring_setup(0x3c63, &(0x7f0000000140)={0x0, 0xfffffffb, 0x10100, 0x2, 0x4000004}, &(0x7f00000002c0)=0x0, &(0x7f00000015c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x2df0, 0x3ffffffe, 0x0, 0x0, 0x0) r7 = openat$dsp(0xffffff9c, &(0x7f0000000080), 0x82040, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r7, 0xc0044dff, &(0x7f0000000100)=0x9) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r8, 0x100000000) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xae9e, 0x2, 0x0, 0x196}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r9, 0x3516, 0x0, 0x0, 0x0, 0x0) 1m38.568397668s ago: executing program 3 (id=404): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001180)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x0, 0x0, {0x81}, [@FRA_DST={0x14, 0x1, @remote}]}, 0x30}}, 0x0) r2 = socket(0x10, 0x803, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, 0x0, &(0x7f0000000480)) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x437, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r4, 0x5120b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x8000004) socket$inet6(0xa, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001180)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x0, 0x0, {0x81}, [@FRA_DST={0x14, 0x1, @remote}]}, 0x30}}, 0x0) (async) socket(0x10, 0x803, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) (async) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, 0x0, &(0x7f0000000480)) (async) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x437, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r4, 0x5120b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) (async) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x8000004) (async) 1m38.361154368s ago: executing program 3 (id=406): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet(0x2, 0x80001, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x0, 0x0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'ipvlan0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r5, &(0x7f0000001fc0)=ANY=[@ANYBLOB="450000000600000000000000000000000500ffdc0000002003000000000000001c000000000000002f73797c2f6b65726e656c2f64656275672f7379b5d3ec7c384b24266a"], 0x45) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "c4d65ab71f5ef2fe", "9e8ecc7bb5352776725e104757e7dc25c6519a85ef828f711330ff2bb17b5508", "dc5db43f"}, 0x38) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f90424fc60", 0x14}], 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7c010000190001000000000001000000fe8000000000000000000000000000aafc01000000000000000000000000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1m38.277409851s ago: executing program 2 (id=407): r0 = memfd_secret(0x80000) semget$private(0x0, 0x0, 0x232) close_range(r0, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000040)=ANY=[@ANYBLOB='\b\x00']) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000140)=0x2, 0x4) syz_emit_ethernet(0x3a, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c2000003aaaaaaaaaaaa08004508002c000000000206907800000000e700000000104e26", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60c200019078000005020000"], 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r7, 0x0, 0xcb, &(0x7f00000000c0)={0x7fff, 0x0, 0xcf, 0xfe, @vifc_lcl_addr=@remote, @broadcast}, 0x10) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESOCT=r6, @ANYRESOCT=r7, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) readahead(r6, 0x3, 0xffffffffffffffff) 1m38.262502999s ago: executing program 4 (id=409): socketpair(0xa, 0x4, 0x48000000, &(0x7f0000000000)) r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, 0x0, 0xfffffffffffffeae, 0x2, 0x0) syz_open_dev$radio(0x0, 0x1, 0x2) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000240)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @multicast1}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 1m37.99697948s ago: executing program 4 (id=411): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b702000000090001db120a000000000007000000000000009500000000000a6682f0a61b01e4c027d252f602901b7cbbd5b9097bb8334a5541cf9e345af317e35f2ad53d857708f974879196ac07622b10548ccd2028eaf7610ae297a58e413b22d81494fcb1dbd1e9cb784c590ddd3d400ac1949839f92232e7684f2305d906ee929a27a5dedf301650960d8ae1cf339f6bda65bf65"], 0x0, 0x5}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="034886dd0100000300001400ff006000000000042f"], 0xfdef) 1m37.686869744s ago: executing program 2 (id=412): r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000086d040ec20000000000010902"], 0x0) write$sysctl(r3, &(0x7f0000000000)='2\x00', 0x2) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='4.::\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00', 0x11, 0xff, 0xf}, 0x2c) r7 = socket(0x1a, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) r8 = syz_io_uring_setup(0x116, &(0x7f0000000100)={0x0, 0xf5a, 0x80, 0x0, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) io_uring_enter(r8, 0xf3, 0x80ffff, 0x49, 0x0, 0x40) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b0000", @ANYRES32=r10, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r10, 0xff7f}}, 0x20}}, 0x0) socket(0x1, 0x803, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) 1m36.941292728s ago: executing program 4 (id=413): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000040)={0x80, 0x40000105, 0x0, 0x0, 0xfffffd30}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$CEC_ADAP_G_PHYS_ADDR(0xffffffffffffffff, 0x80026101, &(0x7f00000000c0)) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x7, 0x48, [@private]}, @timestamp={0x44, 0x8, 0x5, 0x0, 0x0, [0x0]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r2, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000740)={0x0}) 1m36.560341983s ago: executing program 4 (id=414): r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x40) fcntl$notify(r0, 0x402, 0x79) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x101, 0x48001051, 0xffffffffffffffff, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x39, 0x1a, r2, 0x0) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 1m36.348958735s ago: executing program 4 (id=415): io_setup(0x8, &(0x7f00000001c0)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000300)="87992d800d80", 0x6, 0x4}]) r2 = accept$packet(r1, &(0x7f0000002500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002540)=0x14) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000002580)=0x224, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x15, 0x0, 0x1}, {0x24}, {0x6, 0x0, 0x0, 0x7ffffdbd}]}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x410501, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r3, 0x4b35, 0x3c7) r4 = semget$private(0x0, 0x1, 0xc0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r5, 0xc0603d0f, 0x0) semtimedop(r4, &(0x7f0000000000)=[{0x0, 0xffff, 0x2000}], 0x1, 0x0) 1m35.309343639s ago: executing program 4 (id=416): socket$nl_route(0x10, 0x3, 0x0) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000010100000024000180060005004e23080007000c000200000008000300ac1414aa0800060001000000"], 0x38}}, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, 0x0) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcfa, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0xfc, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7e, 0x9e, 0xb4, 0x10, 0x54c, 0x38, 0x16f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0xc5, 0x38}}]}}]}}, 0x0) syz_usb_control_io$hid(r9, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES32=r11, @ANYRES32=r12], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_usb_control_io$uac1(r9, 0x0, 0x0) 1m21.223615952s ago: executing program 32 (id=403): syz_open_dev$vim2m(&(0x7f0000000340), 0x1, 0x2) socket$rxrpc(0x21, 0x2, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x11) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000b00)=0x6) r4 = syz_io_uring_setup(0x3c63, &(0x7f0000000140)={0x0, 0xfffffffb, 0x10100, 0x2, 0x4000004}, &(0x7f00000002c0)=0x0, &(0x7f00000015c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x2df0, 0x3ffffffe, 0x0, 0x0, 0x0) r7 = openat$dsp(0xffffff9c, &(0x7f0000000080), 0x82040, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r7, 0xc0044dff, &(0x7f0000000100)=0x9) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r8, 0x100000000) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xae9e, 0x2, 0x0, 0x196}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r9, 0x3516, 0x0, 0x0, 0x0, 0x0) 1m20.014190301s ago: executing program 33 (id=412): r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000086d040ec20000000000010902"], 0x0) write$sysctl(r3, &(0x7f0000000000)='2\x00', 0x2) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='4.::\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00', 0x11, 0xff, 0xf}, 0x2c) r7 = socket(0x1a, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) r8 = syz_io_uring_setup(0x116, &(0x7f0000000100)={0x0, 0xf5a, 0x80, 0x0, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) io_uring_enter(r8, 0xf3, 0x80ffff, 0x49, 0x0, 0x40) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b0000", @ANYRES32=r10, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r10, 0xff7f}}, 0x20}}, 0x0) socket(0x1, 0x803, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) 1m19.795081543s ago: executing program 34 (id=406): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet(0x2, 0x80001, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x0, 0x0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'ipvlan0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r5, &(0x7f0000001fc0)=ANY=[@ANYBLOB="450000000600000000000000000000000500ffdc0000002003000000000000001c000000000000002f73797c2f6b65726e656c2f64656275672f7379b5d3ec7c384b24266a"], 0x45) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "c4d65ab71f5ef2fe", "9e8ecc7bb5352776725e104757e7dc25c6519a85ef828f711330ff2bb17b5508", "dc5db43f"}, 0x38) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f90424fc60", 0x14}], 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7c010000190001000000000001000000fe8000000000000000000000000000aafc01000000000000000000000000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1m19.539518024s ago: executing program 35 (id=416): socket$nl_route(0x10, 0x3, 0x0) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000010100000024000180060005004e23080007000c000200000008000300ac1414aa0800060001000000"], 0x38}}, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, 0x0) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcfa, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0xfc, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7e, 0x9e, 0xb4, 0x10, 0x54c, 0x38, 0x16f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0xc5, 0x38}}]}}]}}, 0x0) syz_usb_control_io$hid(r9, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES32=r11, @ANYRES32=r12], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_usb_control_io$uac1(r9, 0x0, 0x0) 30.054730018s ago: executing program 5 (id=461): open_tree(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x45a5dd219f78af9d) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) lseek(r3, 0xfffffffffffffffc, 0x300000000000000) r4 = socket(0x11, 0x800000003, 0x0) socket(0x11, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)) r5 = syz_open_dev$sg(&(0x7f0000004740), 0x0, 0x200) connect$inet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000003c0)=@newlink={0x2c, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x1, @random='/*d3Ao'}]}, 0x2c}}, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000280)={0x53, 0x0, 0x0, 0xe, @buffer={0x0, 0x0, 0x0}, &(0x7f00000000c0), 0x0, 0xb, 0x10000, 0xffffffffffffffff, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x2, 0x7, 0x7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000000), 0x10) socket$nl_generic(0x10, 0x3, 0x10) 27.156487987s ago: executing program 5 (id=470): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) 26.905250871s ago: executing program 5 (id=473): socket(0x80000000000000a, 0x1, 0x0) socket$inet6(0xa, 0x800, 0x8010000000000084) openat$mice(0xffffffffffffff9c, 0x0, 0x80) r0 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000340)='name', &(0x7f00000000c0)='ccnA\xf6gro_p\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x10aa, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='blkio.bfq.empty_time\x00', 0x275a, 0x0) flistxattr(r4, 0x0, 0xfbffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0xfffffdf6, 0x0, 0x1, 0x70bde6, 0x25dfdbf9, {}, [@ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x8}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x4}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x230}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x40}]}, 0x3c}}, 0x14) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000000101040000000000000400010000001c0018800800f9400000040008000340000010000800024000000007040001803479ed34a81f0a769de1a8ab57187e4f70b0adfe9f4a5f4ac699cb11ff41c99a911145ab6e732e3ec8eb1922d3ffcbab3a3ef19ec84683749ca6f9a303a4ef752e8bbb9cf160dcf1ec8618584dae86afe798d0ceb85b280740e6fcf089d6fbd4cb45cc634ff9914e9201af06000000a65518010099b1a2b53da5159286c5c1217f09dff78abc23fed3db6ce1d53679956ca1992712b4f4b9cf3400c951c0aac82743e3fa0e43502b8cc938ff7c3f38904e989bf399808198a0359bcc7c675cf2aee78fc800e6dd8c8e369217"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c0017800400ad0014"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) 20.875537609s ago: executing program 1 (id=477): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="4000000010004b0428bd7000000000007a000041", @ANYRES32=0x0, @ANYBLOB="0000000080480500140012800b000100627269646765"], 0x40}}, 0x4) 19.146927085s ago: executing program 1 (id=480): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f00000002c0), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x25b9, 0x100, 0x0, 0x215}, &(0x7f0000000040)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r3, 0x32, &(0x7f00000000c0)=@un=@abs={0x1, 0x0, 0x4e20}}) io_uring_enter(r4, 0x3516, 0x483, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r7, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="f081550000a000000f0100180045000fbe252e8a094d36420f705626002e660f3a176a4b00b9800000c00f3267420f01c30f5966baf80cb8c087678eef66bac60ced45c194710a000000058a3bc4827dbcae009008f2", 0x56}], 0x1, 0x48, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x6f, &(0x7f0000000100)=[@cr4={0x1, 0x8ea}], 0x1) ioctl$KVM_RUN(r7, 0xae80, 0x0) 18.482984739s ago: executing program 6 (id=482): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYBLOB="ce4ff4185821495ac14f1113aa59222c46d562ad70b4d9b88e33111e69b1c264099f9a4928fcbbbf98587c116a4e394b9aa03a62d3c2c8cb55c6085ad6783314c41780092d8906ae2d41cbc96951a928011a2bdb236e9133696b480001beaaa8423424b97ff3d1f196f6266c65eb2bc4651733867e8577016702d1bed7096d07de3333e776b999d24e1cf326ac509fb078a0bffeca8e6c656a3e59cce229cad9f6b59d4e5f4017a090a20cc14fcf8d5b77b886ff", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x4005) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x403, 0x2000000, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x800, 0x55007}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0xf}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) 17.177506948s ago: executing program 1 (id=483): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) 16.633321705s ago: executing program 6 (id=484): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.numa_stat\x00', 0x275a, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x12, 0x0, 0x0) r3 = socket(0x400000000010, 0x800, 0xfffffffd) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x8911, &(0x7f0000000280)={'gretap0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x0, 0x5, 0x10, 0x1, 0x0, 0x5f, 0x4, 0x0, 0xa6, 0x3, 0x7, 0x1}, {0xfffffffc, 0x0, 0x0, 0x1, 0x0, 0xf6, 0x1, 0x8, 0x4, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x5, 0x4, 0xfe, 0x5, 0x0, 0x0, 0x4, 0x36}], 0x10000}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, 0x0, 0x0, 0x4}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x4, 0x0, 0x2, 0x0, 0x7fffffff], 0x80a0000, 0x80}) ioctl$KVM_RUN(r4, 0xae80, 0x20000000) write$UHID_INPUT(r0, &(0x7f0000002300)={0x8, {"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", 0x1000}}, 0x1006) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x2, 0x0, 0x100000, 0x1000, &(0x7f0000145000/0x1000)=nil}) socket$netlink(0x10, 0x3, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030003080008b60007000000000000030006000000000002000003000000000000000000000000030006000000000002004e23ac1414000000000000000000"], 0x40}, 0x1, 0x7}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) 16.458800559s ago: executing program 1 (id=485): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000f40), 0x7, 0x585280) r2 = socket$rxrpc(0x21, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount_setattr(0xffffffffffffffff, 0x0, 0x800, &(0x7f0000000200)={0x20, 0x76, 0x80000}, 0x20) socket(0x10, 0x3, 0x0) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) eventfd2(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$unix(0x1, 0x2, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup2(r1, r2) syz_usb_connect$uac1(0x6, 0x80, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000086b1d010140000102030109026e0003010220040904000000010100000a2409580d99390b78b2af0100020102000009040101010102000009050109000036040b072501820107000904020000010200000904020101010200000fffffff7f00040008d2aeef4de22f09058209080001010207250103050500"], &(0x7f0000000580)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x3, 0x2, 0xe2, 0x10, 0x3}, 0x9b, &(0x7f0000000140)={0x5, 0xf, 0x9b, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x7, 0x5, 0x2000}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x7, 0x80, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x5, 0xcf, 0xa}, @generic={0x64, 0x10, 0x2, "7c94a4aebe61bdcd3a19a45716c38ba683ff673b2ec38a52c24782c988630fc175ce72e28f74bd55311460175fdd29f59366136f1faa404835aeaef22276221699b0a777952bb889679e00120b35f1804e1c7dd93ed5c939d67dcd603462907248"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "7bccede0c4fdb74c1fea8c20a5303fa9"}]}, 0x6, [{0x4, &(0x7f0000000200)=@lang_id={0x4}}, {0xd7, &(0x7f0000000280)=@string={0xd7, 0x3, "2c077e43d07ee2a6770b6ba73746480d204d98f3cfb33715268cd29b1ebd0dd7b3f0d8167f01be1ea5e0dbaa5d8db80f20721749a91372e8e4824948931108f1210d51ab8126c92cf58c4a3ca803f04e12371689d3216699a99e99fe75630f2f3224d972f7ec1f52bc0396fbe4f542aa58545845c6030168befb4564306310dfb6d3b168ddfe9c3c996365f9736b5c0146fe330866e7a48bd224540aefaa3cb39207faab3ba521c54547d1edaa7766c060e195cd758c526c8a12b3294d5add8b60c84ba29fa8384991247ce66095d1902d2c8e4aa0"}}, {0x43, &(0x7f0000000380)=@string={0x43, 0x3, "d806826823aef255190e4580ce3c525e1c7cadb192b7ba42d2fd3e98333d199102d75c4609cc81be6959554cb6ba0825d636cc3cdc5dde70c58f20cb90a481f776"}}, {0x3f, &(0x7f0000000400)=@string={0x3f, 0x3, "0bf68aade918c3c7bb0de63a68e675ea62869fc863623172f3cf5f565c4b8baf057b07c6f4dab3846e36c9e94854ce1a3a5f1b2995af97f36a65654602"}}, {0xdd, &(0x7f0000000440)=@string={0xdd, 0x3, "2e7eb0de65019c043a9191b2ae7dd7629b4008bd4494fed38d99a4a9b8f430d42a324da83701376995fe5cf04b3447806ecc057ab37ebc5a3536fa37d8a65a0e92c6ffefaa594d6fb638ce3f7da24afb73fb4b3a3016777454c3411e93b7b081e9a756483e87ea06b59e3e746b9513dc61658fa686bb31ab561462f53a804f8eea5b85ba2d416b83457f8982cf5fddb6e06cd18d0298c5b66eddf17b2474472fff282e52f94b9df6bbf86bc25a78eb2cffb18e03faa8dd7f47edcf7de354f209284ef6becca3b0b7e9f78a601dc10de0c0c48466e624fc1d9e5883"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4}}]}) syz_usb_control_io(r0, 0x0, 0x0) 15.731182667s ago: executing program 5 (id=486): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) (fail_nth: 5) 14.941405042s ago: executing program 8 (id=487): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)=0x3, 0x4) r0 = syz_io_uring_setup(0x239, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x2000000000, &(0x7f0000000140)={0x77359400}}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_TIMEOUT_REMOVE) io_uring_enter(r0, 0x4866, 0x0, 0xb, 0x0, 0x0) 14.912683261s ago: executing program 7 (id=488): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000780)=ANY=[@ANYBLOB="1201000000000010c410cf8a00000000000109022d000100000000090400000203000000092100000001220d00090581030000000000090502030000000000e088ff1f69c1d5122c4df0542a0700aadbc609823b0318e0d2e811a0a74a0670eaa3fb9ccea94040cbea1175a265d63bdcec1ced9d7425270322d182f2150bbbe21701f0e0f7b223"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x4157d}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @IFLA_BROADCAST={0xa, 0x2, @random="9d430ec05724"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x8000002) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r3, &(0x7f0000009780)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000400)={0xb0, 0xfffffffffffffff5, 0x3, [{{0x5, 0x1, 0x5, 0x5, 0x2, 0xdf7, {0x3, 0x6, 0x28, 0x0, 0x2b26f94500000000, 0xca, 0x8, 0xff, 0x7, 0x1000, 0x3, 0x0, r4, 0xe5, 0x6}}, {0x0, 0xd70b, 0x1, 0x1, '-'}}]}, 0xb0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, &(0x7f0000000280)={{0xc}, 0x0, [0x40000000, 0x0, 0x4, 0x3, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x2, 0x8, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x4829d, 0x0, 0x0, 0x0, 0x0, 0x1000008000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x9, 0x0, 0xfffffffffffffffc, 0x4, 0x0, 0x10000, 0x4, 0xfdfffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20040000000, 0x1000000, 0x8, 0x80000000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x100003, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1075, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x3, 0x7, 0x0, 0x20, 0x6, 0xffffffff80000001, 0x2, 0x0, 0xfffffffffffffffc, 0x4]}) splice(r0, &(0x7f0000000040)=0x3, r0, &(0x7f0000000080)=0x3, 0x7a, 0x8) 14.908812315s ago: executing program 5 (id=489): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) io_uring_setup(0x40, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7ffd}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}]}, 0x24}}, 0x48850) 13.461421679s ago: executing program 8 (id=490): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400000000000000000ffe0000", @ANYRES32=0x0, @ANYBLOB="e5fda988200000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 10.629396595s ago: executing program 7 (id=491): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x6c90, &(0x7f0000000480)={0x0, 0x8ec4, 0x200, 0xffffffff, 0xffdfffff}, &(0x7f00000000c0)=0x0, &(0x7f0000000180)=0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r1, 0x0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0, 0x44004}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@gettaction={0x74, 0x32, 0x8, 0x70bd25, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x2}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000805}, 0x0) close_range(r2, r1, 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) open(&(0x7f0000000040)='.\x00', 0x8000, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0xc4, 0x24, 0x200, 0x70bd2a, 0x25dfdbfe, {0x44}, [@nested={0xb0, 0xe, 0x0, 0x1, [@nested={0xac, 0x151, 0x0, 0x1, [@nested={0x99, 0x13a, 0x0, 0x1, [@nested={0x75, 0x61, 0x0, 0x1, [@nested={0x4, 0x54, 0x0, 0x1, [@nested={0x0, 0x88, 0x0, 0x1, [@generic="e9da1f7498b6916101c80848a899fe28a56a963b67323d7095910985953fc6130719ec1941b3203d821823febcf625ad176934607c9a4cd4b5ca03e6ebf3e3d131fa8275803a54fa88ad0dad2e238bb0c830fdacdaa62ad8b1b0f278ab728adcf49d7812d227de684ca1cba7778afec7b4", @generic="868cba59ed6c707a9610be2f9390f0c21d612a1926549530bc44ac6299402620415eee38435a7da174955f70e971b6e2524beb9bfa466fe810ec34db2464cce7dceefc4495b8e83b8dc6876c5a067d7086ad734633ec04221e21a7fceee725e8669f6d7fb7292c1269", @generic="96269f9d7d3b07b26f64ce4f395491d1ccc69159886745b81a3b9600ee82b7bdc84242d6e6239ec96d3261a72372fdd3dc2fd75cfbb195ae05ed07d8931a45a55f40539a4205852669268ac7b38f6e97b5c5b029c00ac813c9f901306d725e13f88d365b1ed604902471fcae4d9cc4a1dfd4afbf81e129b77d8ac48ffd9acd7a1136fc5ef31101d1ab1a6425a25466fb78aef7f6456691ecf4eae92fe2cae90083831acf81389044e99ce5b19f319c46eb474083e396659a227817d112450b346af9bcd1ae23dfb4247dc27c5cff34652f7d4d7bd544bcae13c48d825e5ba28ceaf8ea720c316c5b0450d9c352f4af97bbbf981e785196", @generic="a38d71fbbf9a83c539089e14bdac8d5de56bc582d975bcb0fdae944175ce7838503cc1ad204cb69a6fc6a848b686073a4b056bc343e49f7d22d43e42eda4f410bec8942fd703caeadaec4478ae87aee07ca9c68d3d320820c47a743017", @typed={0x0, 0x13, 0x0, 0x0, @uid}, @typed={0x0, 0xf5, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0x0, 0x126, 0x0, 0x0, @binary="e31f37bb543d0d4d8351d7ca4d34dd0f07ec78d68cd7a45f9e7b6caffe456dbc1fc59c35a962e4ec9693b59096f04ba327f899"}]}, @generic="a315030c364585b65b6d268186000d2225601cb07dc7fd6489e5198a66fcc884d5004c3fb6d4ae45a6199ab21f1328cee342d35572ca88b07349d84f96b3d4f8313138038fc923db266774c77275504a637415f080f9667880e5be9047b8e05cb25049b2a78e8f6f9b8849c75ce390a4bc131e143f29b4e65504b0223985d358a7bd41b5", @nested={0x0, 0xa4, 0x0, 0x1, [@nested={0x0, 0x112, 0x0, 0x1, [@nested={0x0, 0x7d}, @generic="c3630e2d6a10f3d4ca80c03000df88cf2c07772c46e674bb4a3fd6d4a8003d9e76c4a5e0593cb7134a8cbaf59a2d1afbf7e931bc85ab7fac974a6401a952b3139710e9d23a2441233f5b415ebec64fe5d74327f938607eba11a4ec8cf4e35ca5f8a3b35d4cc3f5acc960bd7c9a5b6a9d233a6f9f8b50f06b8784913df5e15440c1b09a493a844a26ace710"]}, @generic="f7265d782cdfbe547d228ab5f0f73427ee0672efa6d783fbe35145ac067cbf3ddde869a9c5cf6afe5f4934d581465ddcfeb6524338b33fdf74a0f5d0c99b48c836ed1329fa4486f66655ddc5b232d2ec", @typed={0x0, 0x111, 0x0, 0x0, @fd=r6}, @typed={0x0, 0x141, 0x0, 0x0, @u32=0x1}, @nested={0x0, 0xc2, 0x0, 0x1, [@typed={0x0, 0x39, 0x0, 0x0, @u64=0xefbe}, @nested={0x0, 0xd8}, @nested={0x0, 0x96}, @generic="232b15cd9a9743458a72071ba71007d53f1821fc7c82954baaef64d4d554111ce5b498002535f7445170fbb07a53ae045f5092b3aac50e33b7244e353c85f177cca10ed12a8ccd3e89d5de8fadacd8d3424251d2c51b04e941b9973c71ee9a23c6935ce655321403a84186a0894165c27274e41312d65917efcd201427123574c09180876749b83cc244f439558f2a4bd0782085a95086fe0d5b40889b6bce9faf08634aa0410f7f6ff70ddd07addb1957aec44a98b11a24fc5b9c2a5ba410"]}]}, @typed={0x0, 0x67, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @typed={0x0, 0x4, 0x0, 0x0, @str='\x00'}, @generic, @nested={0x0, 0x113, 0x0, 0x1, [@nested={0x0, 0x144, 0x0, 0x1, [@generic="a5f745f98446fa1ddc059914db69bc94b4555c145b09726703a132141424ae4e0ae641bdc7c7ed867a26200e0efe913fe648e5e66674c90004bec77159e728f660c7694e9f27675baa03aca97bc92f8f783c04c2595c036c58a7c93572069b15582c856a8ca7537b17ce178152a26a769630bd6221d4baa41b81fadaeb687fd9e9bf1fd317607108f533ff1093817d60eb07e13d204efd21c2b35660fcb494c4a58096d355095e7a8ba5c7c0bef58ac320b6f44c971828a28424b4d0661e6a56338d9a6dd5d04eff88a94f4ceb610e19017b945cc922ed20bb0a1a1f2b378f2becac7941a71e1543c8a971a0", @generic="9ae3707cc6549a6f0a1fb69c37050fb27cf65c435189b25a1731eb036f38fd09f2b6d7f3f53b089d506f6030e3719ad2026586daf31f2d5695abb461a8ebd822", @typed={0x0, 0x147, 0x0, 0x0, @u32=0xfffffff9}, @nested={0x0, 0xc}, @generic="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", @nested={0x0, 0xaa}, @nested={0x0, 0xd0}, @generic="9fbb12f0336917940e76fd4cba394b8ef93ce2b2455febdcb8915dec33", @generic="9dfd3172870677655e076d987be6c5"]}, @typed={0x0, 0xa4, 0x0, 0x0, @uid}, @generic="5fd231b937b031d9a1ba6e23e34f8078a2e64895f63822c271fda91aa69e5d62228adcb263b85fd6e0916bdbc9176fc2f1d85858b02c9eea60742830b35c74da734bea2f58c913a829339fed0bd2fac1", @typed={0x0, 0x112, 0x0, 0x0, @str='skbmod\x00'}, @generic="d4ce6f8db2b0394aedf37d89c264d3d3b581a2d3bf1a7c5b29987488e68bce7836c571d9b7991fad5b8aeb74cdead13c621a0f0864d6dd664f129967944788426b7ef48deaa397764088ead12293e281b21c3916de6571e559e93e08063beb8d00ecf661ce3b1afa9450f16ce88fe039ae9d8a9e1e8245c9ea91bc3001ff085d57b6813909d2ffa3841b2a134df5ac685ba3821f6f2ffd96171449dcbd5a839f9091c22e6547aef96f9f86fd54d5eb0f6f63f4743edf84bee8d9c16fd9a44eb2", @generic="db5f9b81f9afbf8ca1c05752beeab01c3a5542aa687f894c2fe279f80701427b0ff55cecb2d7fdb4004fee63624d285a965574eac7ac62c630f9c93b24c7f111de6f28e552dbdee576340cadf948a1c5c6945a5cf43fee02ce72a58a2c734e9e0fd3483bcbd165be51d96fc2a7710324853d45b976e5d97b4da094509b0218e7f03adc8246e86f97c305cff8a1e192123a700103f086f47b00a46c9f14"]}, @generic="1374fc17addbb7c36696deae6c005590eb2ba361ffc6f95c488aa80d2521e0a161dc9cfc8b95ae24b4ea1ae091715389b6443ccc8b64df9d", @nested={0x0, 0x12c, 0x0, 0x1, [@generic="e777dafa3fb281c52b45fa5525f6bc59c049", @generic="f222a954601a97161cd40d27e9e8424be4bd49a353c5f98967483a7367e3560021bcde6f39e885", @generic="47e4fd092e32cbd4a8689e4d932b09fc2b9350aec0951b84d88b6ff72f58ea90b247a89cb083babd2a34a1e1258f6c817c43d956968aabac5a249c75ebc7d009067191637ee284247b3cf934bc64fc84c1332b4cbbadd6c9cc372e66785863f0ab760e46e75c2d898da95c2e75e5a4b7263615478fcd70511fc5eaa94bf1e3037d3e65773f5595796f3a5ff5933c0c71a09367853c9d5b4f87239a743d46b58ed5ccb0cb99aaa5b71589f7be07b1ef36631fdd37671f690e6e7c14", @nested={0x0, 0x138, 0x0, 0x1, [@typed={0x0, 0x1e, 0x0, 0x0, @binary="0adc1eee18226367fa2ca8e294675ff4e975e828424f291c7dc57dc0c7d6a5e381a7d8050f26f146990265f6537652687da4925b8868134cb1a4a4db4d9e367f9d5ba398043e80a9bec38e020eaf4d4603ca90fa7f693bbd30f810f8176af4b51732ab008bebf74ffa4557998acf22dbd54ff9233c9a2b15803bc8e6af6647de6a51"}, @generic="802500347099e5e69361b08511218faf08d5305f22ac182d24bb2a20a53f4a6bae4d3e67fdd1428051c38a2e5b42c341d76e3517b41f479e8bdfe5d2f0e4efa4b3a4348843839bc064a1cbc27902292dada07fd5c56854eb222030dc766101679cc38ca84f667a04f02087", @nested={0x0, 0x5c}]}, @typed={0x0, 0x50, 0x0, 0x0, @ipv4=@empty}]}, @generic="a5dc89f945a898a93724528a984a74ae229e98b4c58bea9ea1693882807e336eb434dbdc607a93d749dc2d96a54a2ff63a2525d77deb298278ea50295f826d8a10de39c05b4089b9480805723dbf245043623963af52a1645931020bd1ec40d3e9732e4233b78ffbec4fc9ab431d8a6c8b20f02c373d19381f98ec8d3826990036f218bc3755cd68d2bd2c11f0908c43d5bfe124ca8caebccf1adb7018b56d72c942efcd256c787308dff7d2edd33fcd07b2d84eec83c95ab42a0b0e6e95e556635462d128d71f7081773fffbce963feedc5bed703776db7032ce1ac4f13cba6ebbc485d94255135057edc5fa9a747bd0fb17da2499ad1423388"]}, @typed={0x8, 0x8, 0x0, 0x0, @u32=0x5}, @nested={0x38, 0x27}, @typed={0x8, 0x14f, 0x0, 0x0, @fd}, @generic="94266f49a421c47f3dcdd06d92cad8b78788b88629fa0e9f4700d27a23f113c29743ec8c2a"]}, @typed={0xfccd, 0x35, 0x0, 0x0, @ipv4=@loopback}, @generic="07c09ae79df366b21938d968ecd1e09d83", @typed={0x4, 0x4c}]}, @typed={0x8, 0xdb, 0x0, 0x0, @pid}, @generic="d5938376"]}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000d}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r7, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r8, @ANYRES32=r8], 0x44}}, 0x0) recvmsg(r5, &(0x7f0000000440)={&(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000200)=[{&(0x7f00000007c0)=""/205, 0xcd}], 0x1}, 0x2000) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40000020) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{0x6, 0x2, 0x0, 0x7ff}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a3200000000f70007404884b24b02a8a7758a688958ed60ecfd057e10926ba77e5596b13e43cd4488e4aa68af5f7236ec205b6e4cac2a0d86c336bf07dbe861f4f57bcef92dcf818d532d4475b5daa4dadc1690f228e860bba5a0b5d9bde86862e8f7fc08f0debd4974c6fae7d737a0007ec948ac4d8714ebff6b25648fb910e0d6d07f023cf5fa4051627b9c5b69e265538f9ba683bf172a5ff815afa543c12e550a1bcc9287080c7c12cc89d216c56febb0b06134672ea6b0077c846396169475f271319988f49ec94f2996e5d0e1cb151fb223e556f10fb681d068e055eb34e5f8fc7a524ffe5f4632a6c74ad0fe0b1542497d76a5a4416c47805e001c0005800800014008000008080002"], 0x1ec}}, 0x0) 10.501694728s ago: executing program 1 (id=492): r0 = socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'dummy0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000020c0)={@ipv4={'\x00', '\xff\xff', @empty}, 0x80, r2}) 10.337344258s ago: executing program 6 (id=493): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x22, 0x3, 0xe, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x6, 0x40000) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x3012, 0x800, 0xffffffff, 0x100000, 0x8, 0x1}) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x5, 0x0, @buffer={0x2, 0x51, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96e", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000340)='name', &(0x7f00000002c0)='+\x1e\x8dt0\xce\x19C\xec\x9c!gro_p\x00', 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r4, 0xc038563c, &(0x7f0000000080)={0x0, 0x0, {0x5, 0x7, 0x101, 0x1}}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="11110200002061637365630000180002800c000400f200000000000000080005000900000008001000fe3033fc4c9dda19809cdab176b921fd9f22bff171031adafd2bf2b0f2a40a68b2196abe7aac9ead6f8e515e495373b0cdc80ad351cb6916ac3172c250e894a7c88e38512e93778b58ab052c0aebdd9c6ac2feec99cf0d10097e4313c13acd0485043488c237806bf3eb367f795a792c6e87422ec1287f79f7ac0c3d6677da079f77ebbf349036ee3ac4922b2fc7178c71f485cbeec95e6494b18b00"/207, @ANYRES32=r6, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 9.511192448s ago: executing program 8 (id=494): socket$inet6_udp(0xa, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) socket(0x10, 0x2, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) open(&(0x7f00000000c0)='.\x00', 0x800, 0xd0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00200000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 3.845698079s ago: executing program 6 (id=495): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) 3.652975629s ago: executing program 1 (id=496): socket(0x80000000000000a, 0x1, 0x0) socket$inet6(0xa, 0x800, 0x8010000000000084) openat$mice(0xffffffffffffff9c, 0x0, 0x80) r0 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000340)='name', &(0x7f00000000c0)='ccnA\xf6gro_p\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x10aa, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='blkio.bfq.empty_time\x00', 0x275a, 0x0) flistxattr(r4, 0x0, 0xfbffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0xfffffdf6, 0x0, 0x1, 0x70bde6, 0x25dfdbf9, {}, [@ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x8}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x4}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x230}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x40}]}, 0x3c}}, 0x14) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c0017800400ad0014"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) 3.651417548s ago: executing program 7 (id=497): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="d7000000200007007911b800000000201801000020646c2500000000002020207b18f8ff00000000bfa1000000ffffffbf010000f8ffffffb702000008000000b70300000700000085000000d40000009500740000000000ef5f6082e4a0a52b72bde925efe35e0c28542f1716572a77c3939e085958131eb5d6ab7a69e1a83a4c8354fce7a66fe529cf5d06f6010e13c72fe2174e984706fbb446efe6271a62fc1c495beb391ce3ca6f852a3a36ecf9c5"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x18, &(0x7f000000cf3d)=""/195, 0x0, 0xc, '\x00', 0x0, @fallback=0xd}, 0x59) 3.651225781s ago: executing program 8 (id=498): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x5}, 0x4) syz_emit_ethernet(0xb6, &(0x7f0000000080)={@local, @random="5b01e618bc2c", @void, {@ipv4={0x800, @icmp={{0x25, 0x4, 0x1, 0x9, 0xa8, 0x64, 0x0, 0xc8, 0x1, 0x0, @multicast2, @private=0xa010101, {[@end, @generic={0x89, 0x5, "1823d0"}, @timestamp_addr={0x44, 0x4c, 0xa4, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xf2e}, {@empty}, {@broadcast, 0x9}, {@broadcast, 0x7}, {@loopback, 0x1d5}, {@empty, 0x9}, {@remote, 0x5}, {@remote, 0xd3}, {@rand_addr=0x64010100, 0x2}]}, @timestamp={0x44, 0x10, 0xd5, 0x0, 0x6, [0x37, 0x10001, 0x1]}, @lsrr={0x83, 0x1b, 0xc, [@remote, @local, @local, @private=0x9, @multicast1, @empty]}]}}, @timestamp={0xd, 0x0, 0x0, 0x800, 0x8, 0xf4a, 0x2, 0x2}}}}}, 0x0) 3.402865289s ago: executing program 6 (id=499): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x14, 0x0, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 3.265398753s ago: executing program 7 (id=500): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)=0x3, 0x4) r0 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x7b}, 0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x2000000000, &(0x7f0000000140)={0x77359400}}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_TIMEOUT_REMOVE) io_uring_enter(r0, 0x4866, 0x0, 0xb, 0x0, 0x0) 3.137715252s ago: executing program 8 (id=501): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000015171103a00000000009c050100000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 2.82898315s ago: executing program 7 (id=502): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x7d}, [@ldst={0x6, 0x0, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xa00}, 0x1dd}, 0x48) 2.529390318s ago: executing program 6 (id=503): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000029c0)={0x14, 0x35, 0x107, 0x0, 0x0, {0x4, 0x7c}}, 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x7c8}) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x22802, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDCTL_DSP_GETCAPS(0xffffffffffffffff, 0x8004500f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) 2.362809314s ago: executing program 8 (id=504): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x8, 0x0, 0x201}, [@tail_call]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x3, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000440)='htcp\x00', 0x5) shutdown(r1, 0x1) r3 = openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r3, 0x4004510d, &(0x7f0000000000)) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) gettid() r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0x4004010) recvmmsg(r4, &(0x7f0000002c00), 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) timer_create(0x7, &(0x7f0000000080)={0x0, 0x3c, 0x0, @thr={0x0, &(0x7f0000000100)="8700ce0bc89e8283082ccc47363814fc9bcc0e7522b190110bc257698a1f9d0981016b437d04d98d5c0f4b5dcf4c3565673606dc2d1f6e1382cddb7d0c788767f677caeaa1f8a7a37bdb7f7dc7ef27350a1f4a3a2e9e0db56a16da4a05f80fbc46"}}, 0x0) 1.469055122s ago: executing program 7 (id=505): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000780)={@val={0x0, 0x8864}, @val={0x0, 0x0, 0x3, 0x0, 0x1}, @mpls={[], @ipv4=@gre={{0x6, 0x4, 0x0, 0x0, 0xfc0, 0x0, 0x11, 0x0, 0x21, 0x0, @broadcast, @broadcast, {[@lsrr={0x83, 0x3, 0xb8}]}}, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [], "50726483718ba3e6d08f7571cc59e627d3ed353e879da15784c220746fc2eba11f56fe932b544f53b43a34b265bd5d44fd387d1b56b3b8767c382bc52ee2b8fcbbd661f151afd5315d5f502920c297a3916d7ea039eb558ebb06336662367e15363058de9b806035d5c980832248d1fc96c6b2fb2a4dffa91026dd0228974f70bea2a8e3150d9aae345d6e19f2"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "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"}, {0x8, 0x88be, 0x12000000, {{0x0, 0x1, 0x5}}}, {}, {0x8, 0x6558, 0x0, "20e62929c11cb0549208c925145acbdc02d1fec745f9b654f2d97c9269199fc2293765cfbba8e22fa0ba230c891eb5a9490864bc2e2993a2831d52a0f75fda3f213ec297d9acaa7a8aedc6826e3274b7f48681313b4b677b469a77dd667c84aaf2766d84d9f6dd1b6aa2ab1860b1394813e57c4c6d557a4d049d74cdc674b82da3e6c6f0b9a890edc47dd5a6801c24ba1da62ac03a3620d1f109122a34cd8f552730c4239a81f09bc9174d89403e8011a5436bc7abbd69d49f68a786837a51689f7a4b422061f4768c9052c000016fffffe700e53f083b13e53ef485d121779c5da2b6ce80f9cc4a030570a1cc071d9a6845b6018baaa77418d5fb030700f7b63620c369c466108465b7c7967c0c84a9b828118c9ba7808abfe69f783c3795ecbe1714d91d56b64b9e8e7f86d3fff9c8084b5ec69fcf586b23c29dc078db3fda0fe8cfaed8ab7a5a39bc2ec6a1410270ea7d41ecbd90e45fc60062bc"}}}}}, 0xfce) 0s ago: executing program 5 (id=506): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@delchain={0x19bc, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0x5}}, [@filter_kind_options=@f_basic={{0xa}, {0x198c, 0x2, [@TCA_BASIC_ACT={0x384, 0x3, [@m_mirred={0xc8, 0x20, 0x0, 0x0, {{0xb}, {0x4}, {0x9a, 0x6, "8468806f6961c02b2d4a3aea729e4de9d779d055cc8850a9bf8bd548398948e8a248451b5937c6787e33d5745f61bf94ebb99bc8d527953f3d3eaed746d7850313cf44fe445ceaf7b16ec748861b128f66c3f94d6e511fa23e1b3a3e9602216e4e12c170f59f74657ad94b2b5868628b5bbb0ab745c3b0de5090464477b2ef3c970d8248d282deb63ce9f7e5842ac15575d04b91adba"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_vlan={0x15c, 0xf, 0x0, 0x0, {{0x9}, {0x68, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x101, 0x7, 0x0, 0x7, 0x36}, 0x1}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xa96}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0xcb, 0x6, "77e39afaf521b1b9eecc7e1887f83afe049f32b3e727955aa717e594b1512604224c7bf4e60c09f476477d318cf8151c999a124111171fc33c9509a1addae4701213b2688586f57c8f34d31600da9a69622da3231d5faeaaf155b53e6265103809820c72a8e77ebcc8ea4d2371f36ea13c53e9f235665cafdb35bedd60f13c24217c3d3bd75ed3f6b8f6271c45e6dd72ae1ec03cabcba213ba521364c18df239285e2a0aaf2ec692e522fbd68f857a1d0da42f05ce1a9971dbd64d50f510895c214ed566a66366"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ife={0x15c, 0xa, 0x0, 0x0, {{0x8}, {0xa8, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x4}, @TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_METALST={0x38, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x6}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x100}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x1}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x9}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x7}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xa}]}, @TCA_IFE_DMAC={0xa, 0x3, @remote}, @TCA_IFE_METALST={0x24, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x7fffffff}, @IFE_META_PRIO={0x8, 0x3, @val=0x2}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x9a}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x2}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}]}, {0x90, 0x6, "1b8720f888bd2ffeec20776546641d144eb0b443c88a3925bd78670888b904302a13d853970346960eef92e36afbf8f1c044e9e82f11141c2084ee51d444292bb4d8eacce3bfd66df91577c04a18cc137bcfe0149dfaddf4aaa7e8d8d379918cf6752b1f15d6b47f9cf2d5c157b3911bac498381e2c286dd2e00c0ebea3560b62ad2365bfefbf5a0b982f68d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_BASIC_POLICE={0x104c, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x5, 0x7, 0x103a5677, 0xe, 0x2, 0x1, 0x1000, 0x9, 0x4, 0x7fff, 0x4, 0x80, 0x6, 0x80, 0x5, 0x4, 0x0, 0x6, 0xff, 0x1, 0xa8, 0x7, 0x1d00c491, 0x7be3, 0x3, 0x2a62, 0x54e6, 0x4, 0x7ff, 0x9, 0x2, 0x3, 0x9, 0x4, 0x7f, 0xd, 0x80, 0x3, 0x5, 0x4, 0x1, 0xffffffff, 0x3ff, 0x7ff, 0x7, 0x4, 0x3ffd5ed8, 0xe, 0x9, 0x101, 0x4, 0x6, 0x9, 0xfd, 0x5, 0xc, 0x0, 0x2, 0x4, 0x3, 0x6aacbd56, 0xfff, 0x0, 0xff, 0xffffffff, 0xcea1, 0x7ff, 0x7f, 0x9fd6, 0x5, 0x5, 0xfb, 0x2, 0xffffffff, 0x7, 0xfffffb24, 0x0, 0x5, 0x4, 0x4, 0x2, 0x7fff, 0x1, 0x68, 0x100, 0x1, 0xeeb, 0x6, 0x5, 0x637e, 0x100, 0x2bf0, 0x80, 0x9, 0x40, 0x8, 0xa678, 0x0, 0x4, 0x80000000, 0x8, 0xc27f, 0xc, 0xfffffacd, 0x5, 0x5, 0xfffffffe, 0x1, 0x1, 0x2, 0x80, 0x10, 0x1760, 0x1, 0x8001, 0x160, 0xe, 0xb, 0x4, 0x11, 0x1, 0x8000, 0x7, 0x80, 0x7, 0x80000001, 0x0, 0xff, 0xde, 0x5, 0x5a7, 0x800000, 0x4, 0xc000, 0x0, 0x2, 0x9, 0x7fffffff, 0xc2, 0x4, 0x8, 0xe0, 0x60000000, 0x9, 0x81, 0x6, 0x8, 0x1, 0x80000000, 0x200, 0x80000001, 0x0, 0x6a, 0x79dd, 0x0, 0x1, 0x0, 0x400, 0x3, 0xffff, 0x8, 0x6, 0xd7b6, 0xfffffffa, 0x7, 0x44, 0x0, 0x0, 0x9, 0x6, 0x6, 0x5, 0xb2, 0xb004, 0x8001, 0x72, 0x8, 0x7, 0x7f, 0x3, 0x80000001, 0xff, 0x4, 0x0, 0xa, 0x0, 0xfc7e, 0x3, 0x80000001, 0x101, 0x100, 0x4, 0x9, 0x800, 0x0, 0x2, 0x1, 0x401, 0x1, 0xe8, 0x0, 0x8, 0x4, 0x400, 0x5, 0x9, 0xfffffff9, 0x7, 0x9, 0x9, 0x3, 0x81, 0x0, 0x9, 0x1, 0x8, 0x2, 0x9, 0x3eb0, 0x8, 0x2000000, 0x8, 0x6, 0x7, 0x2, 0xc, 0x9, 0xa0, 0x3, 0x5, 0x7fff, 0x6, 0x3, 0x8, 0x8, 0xd45e, 0xc, 0x7, 0x2d0f6fe0, 0x1ff, 0xfffffe00, 0x4cc2634, 0xe9, 0x468000, 0x6, 0x1, 0x4, 0x1000, 0x3, 0x8, 0xc88, 0x3, 0x1, 0x7, 0x4]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x80000000, 0x2, 0x101, 0x1, 0x6, 0x67e8, 0x3, 0x7, 0x5, 0xfffffff8, 0x3, 0xa, 0x3, 0x4e5, 0x0, 0x3, 0x4, 0x7, 0x3fb, 0x1, 0x2, 0x9, 0x7ff, 0xf6, 0x4a6c, 0x1, 0x9, 0x3251cbe2, 0x0, 0xb, 0x8bb9, 0xeed0, 0x9, 0x1ff, 0x7, 0x7ff, 0x3, 0x17d, 0x1, 0x0, 0x6, 0x1b, 0x1000, 0xb, 0x689d894f, 0x7, 0x9, 0x10001, 0x7, 0x3, 0x3, 0x6, 0x4, 0x6, 0x7994, 0x5, 0x8, 0xb4, 0x7fff, 0x2, 0x4, 0x6000000, 0x3, 0x20c, 0x8, 0x92, 0x3, 0x8, 0x6, 0xa9, 0x80000001, 0x6, 0x8, 0x58, 0x6, 0x2, 0x9, 0x7fffffff, 0x80000001, 0x100, 0x0, 0x4, 0x1, 0xffffffff, 0x7, 0x8, 0xa1, 0x3, 0x3, 0x8, 0x5, 0x800, 0x1, 0x1, 0xff, 0x8000, 0x6, 0x2, 0xffffffff, 0x1a, 0x9, 0x8, 0x100, 0x800, 0x8, 0x1, 0x3, 0xffffffff, 0x10001, 0x3, 0x6, 0x10000, 0xd970, 0xffffffe4, 0x1, 0xfffffffb, 0x5, 0x7f, 0x80, 0x1d96, 0x6, 0x9, 0x89800000, 0x7, 0x45, 0x74e0a343, 0xfffffffb, 0x4c8, 0x3d4d, 0x9, 0x1, 0x8, 0x81, 0x6, 0x8, 0xa105, 0xe99, 0x9, 0x5, 0x7, 0x7, 0xfffffff9, 0xffffffff, 0x0, 0x4, 0x2d, 0x6, 0x80000000, 0xffffffff, 0x8000, 0x80000000, 0x100, 0x0, 0xb00, 0x19a, 0xf, 0x6, 0x1, 0x1ff, 0x5, 0xffffffff, 0x3, 0x7, 0x7, 0x100, 0x5, 0x8, 0xd, 0x0, 0x6, 0x63cb, 0x487, 0x1, 0x1, 0x21, 0x80000000, 0x3, 0x9, 0x81, 0x7, 0x4, 0x4, 0x7ff, 0x6, 0x4, 0xffff, 0x0, 0x4109, 0x80, 0x6, 0x1, 0x3, 0x5, 0x6, 0x0, 0x6, 0x9, 0x4, 0x3, 0x0, 0x95a, 0x6, 0x1, 0x10000, 0x1, 0x512, 0xde4d, 0x3, 0x2db, 0x10001, 0x3, 0xf, 0x4, 0x80, 0x6, 0xfffffc95, 0x6, 0x7f, 0xfffffffa, 0x200, 0xffffffff, 0x2, 0x81, 0x8ed, 0x7, 0x7, 0x7, 0x48000000, 0x5, 0x55e, 0x8, 0x7, 0x4, 0x6d6, 0x9, 0x1cce, 0xfff, 0x8, 0x7, 0x3, 0x6, 0x1, 0x1, 0x200, 0x9, 0x3b, 0x5, 0x3, 0x645, 0xffff, 0x8, 0x3, 0xfffffff8, 0x1ff, 0xfffffffe]}, @TCA_POLICE_RATE={0x404, 0x2, [0x905e, 0x0, 0x32c, 0x6, 0x71d65203, 0x9, 0x1, 0x8, 0x5, 0xfffffff8, 0x4, 0x7cee, 0x96, 0xe, 0x2, 0x80, 0x65, 0x6, 0x7fffffff, 0x0, 0x9, 0x8, 0xcd, 0xffffffff, 0x101, 0x5, 0xf33b, 0x0, 0x9, 0x2, 0x3ff, 0x1, 0xb0f, 0x1, 0x8, 0x1, 0x500, 0x749, 0x100, 0x8001, 0x8, 0x6, 0xfff, 0x1, 0x481e86fb, 0x150, 0x9, 0x4af7, 0x0, 0x8, 0x4, 0x6, 0x7, 0x8, 0xfffffffd, 0xfffffffa, 0x800, 0x0, 0x0, 0x2, 0xb5, 0xfffffe00, 0x6, 0x4, 0x4, 0x3, 0xb, 0x3, 0x2, 0x5, 0x5a5e6af9, 0x80000000, 0x1, 0x3, 0x81, 0x10, 0xffffffff, 0xa78, 0x7ff, 0x7, 0x1, 0x6, 0x7e837035, 0x3, 0x4, 0xffffffff, 0x4, 0x5, 0x5, 0x80000001, 0xb552, 0x5, 0x4, 0x2, 0xffffffff, 0x7, 0x900000, 0xaa44, 0x3, 0x4, 0x43, 0xfffffffc, 0x8001, 0xfffffffa, 0x1, 0xb, 0x1a6e, 0x9, 0x7, 0x8, 0x9, 0x1, 0x7fffffff, 0x8, 0xe, 0x7, 0x0, 0x7, 0x8, 0xe2c1, 0x2, 0x5, 0xfffffffc, 0x3, 0x1, 0x70, 0xfffffff8, 0x1, 0x4, 0xe, 0xfffffeff, 0xb, 0x7, 0x9, 0x9, 0x8, 0xff, 0x9, 0x800, 0x2, 0x2, 0x40, 0x7ff, 0x8, 0x8, 0x1, 0x9, 0x80000001, 0x7000000, 0x7, 0x800, 0x5, 0xb, 0x4, 0x400, 0xbda8, 0xf, 0x8, 0x2, 0x4, 0x0, 0x5, 0x3, 0x1, 0x2f, 0xffffff01, 0x7, 0xecd, 0x7, 0x10001, 0x5, 0x6, 0xf, 0x3b, 0x2, 0x5, 0x3, 0x1, 0x7, 0x0, 0x7, 0x0, 0x8, 0xffff, 0x1, 0xfffffff7, 0x3, 0x6, 0x90a, 0x7ff, 0xa, 0x4, 0xa, 0x7, 0x7f, 0x65, 0x7, 0x6, 0xfffffffc, 0x6, 0x1, 0x2, 0x9, 0x4, 0x6c, 0x3, 0x400000, 0x8000, 0xe7, 0x6, 0xb1, 0x4, 0x1, 0x7, 0xfff, 0xe, 0x4, 0x7, 0x5, 0x135f2c36, 0xb, 0x4, 0x3, 0x5, 0x3, 0xf23, 0xc45, 0x80, 0x8, 0x1, 0x9, 0x5, 0x8, 0x2, 0x7f, 0xfffffff7, 0x3d8b6186, 0x7, 0x5, 0x9, 0xfffffff3, 0xfffff000, 0x0, 0x400, 0x2, 0x8, 0xfffffffb, 0x5, 0x2, 0x4d, 0x0, 0x997f, 0xf, 0x3, 0xfa, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xcf12}, @TCA_POLICE_RATE64={0xc, 0x8, 0x44}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7ff, 0x8, 0x7, 0x8, 0x4d03, 0x8, 0x6, 0x7, 0xffff8001, 0x61a10fb, 0x0, 0x100, 0x0, 0x9, 0x7, 0x7, 0x401, 0x259, 0x8, 0x8, 0x8001, 0x9, 0x3, 0xf9f6, 0x9, 0xfffffffd, 0xe55, 0x0, 0x1, 0x5, 0x5403, 0x4, 0x818f, 0xb, 0x4, 0x10001, 0x20, 0x8, 0x8, 0x6, 0x2c3, 0x7, 0x8, 0x6, 0x7ff, 0x0, 0x79a8, 0x5, 0x4, 0x2e, 0x8, 0x3, 0x80, 0x0, 0x7, 0xb, 0x2, 0x847, 0x1, 0x87, 0x2, 0x7ff, 0x8000, 0x6a2, 0x0, 0x0, 0x6, 0x7, 0x7f, 0x10001, 0x2, 0x4, 0x10001, 0x2, 0x49d, 0x7, 0x24, 0x8eaa, 0x80000000, 0x4, 0x2, 0x6, 0x8, 0x6, 0x8, 0x9, 0x3, 0x8, 0x680, 0x9, 0x8, 0x3, 0x7, 0x4, 0x9, 0x7, 0xad9a, 0x95e, 0xfffffff7, 0x2, 0x8, 0x100, 0x5, 0xecc2, 0xf, 0x10000, 0xffff, 0xb8, 0x1ff, 0x1, 0x2, 0x6, 0x4, 0x10000, 0x80000001, 0x8000, 0x6, 0x296, 0xfff, 0x9, 0x80000001, 0x3, 0xe, 0x7, 0x548b, 0x5e, 0x2, 0x9, 0x8, 0x82, 0x7, 0xfffffc01, 0x8, 0x81, 0x1000, 0x6b, 0x7f, 0x10000, 0x90, 0xfffffff9, 0x5, 0x2, 0x9, 0x91, 0x3ff, 0xd, 0x0, 0x25, 0x0, 0x8, 0x0, 0x4, 0x8, 0x1, 0x8, 0x1000, 0x4000000, 0x2, 0x48f8, 0x800, 0x2, 0xfffffff3, 0x1, 0x7fffffff, 0x4, 0xffc00000, 0x7, 0x7, 0xb, 0xaf13, 0x9, 0x5, 0x9, 0x5, 0x0, 0x0, 0x4ba, 0xf, 0x3, 0x4, 0x10, 0x3, 0xdf0, 0x2, 0x4, 0x200, 0x1, 0xfffffc01, 0x9, 0xdf8, 0x4, 0x2, 0x8, 0x5, 0x5b, 0x7, 0x4, 0xfff, 0x8, 0x8, 0xb, 0x8, 0x4, 0xc, 0x6, 0x2, 0x32b, 0x3, 0xf, 0x9, 0x0, 0x5, 0x6000000, 0x1, 0xb, 0xd, 0x3, 0x4, 0x7, 0x3, 0x3, 0x5, 0xcb, 0x7, 0x0, 0x7f, 0x4, 0xd30f, 0xef6, 0xaa6, 0x7, 0x3, 0x4, 0x8000, 0x6, 0x1, 0x101, 0x0, 0x1, 0x6, 0xfffff298, 0x2b0, 0xe, 0x7ff, 0x132, 0x6, 0x200, 0x6, 0x8, 0xa6, 0xe, 0x1, 0x1ff, 0x2, 0x6, 0x29b]}]}, @TCA_BASIC_POLICE={0x49c, 0x4, [@TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4d5, 0x7, 0x5eb, 0x100, 0x4, 0xac, 0x1, 0x7f, 0xf, 0x7, 0x3, 0x3, 0x0, 0x400, 0x86f, 0x2, 0x4, 0x3ff, 0xfffffff1, 0x6, 0xffffffff, 0xeddd, 0x101, 0x7906, 0x4, 0x80000000, 0x1, 0x9, 0x6, 0x0, 0x0, 0x7f, 0x1, 0x200, 0x10001, 0x9, 0x6, 0x7, 0x0, 0x7, 0x1a9, 0x8, 0x4, 0xc, 0x2, 0x3, 0x5, 0x9, 0x10001, 0x8000, 0xc, 0x5ef, 0xbc, 0x0, 0x9, 0x7fffffff, 0x5, 0x401, 0x200, 0xffff, 0x5, 0xffffffff, 0x2, 0x7, 0x1, 0xfffffffd, 0x9, 0x8, 0x7, 0x0, 0x8, 0x8, 0x95e, 0x9, 0x2, 0x2, 0xfffff800, 0x48, 0x3, 0x7, 0x1980000, 0x97b8, 0x2, 0x9, 0x0, 0x1000, 0xfff, 0x3, 0xcdb4, 0x8, 0x7, 0x4, 0x40, 0x7, 0x7, 0xd25, 0x6, 0xccaf, 0x7, 0x101, 0x3, 0x8, 0x200000, 0x7b1, 0x0, 0x3, 0x0, 0x9, 0xf, 0x9, 0x9, 0x1d, 0x6c46, 0xffff373a, 0x8, 0x4, 0x3ff, 0x3, 0x1, 0x80000000, 0x2, 0xc, 0x800, 0x2, 0x3, 0x0, 0xf, 0x80000001, 0xfffffc01, 0xa58, 0x9, 0x5, 0x10000, 0x2, 0x9, 0x6, 0x0, 0x7, 0xf12, 0xd, 0xffffffff, 0x80000000, 0x6, 0x5, 0x0, 0xfffffffc, 0x10, 0x6, 0xc, 0x0, 0x0, 0x0, 0x5, 0x6, 0xb, 0x6, 0x6, 0x8, 0x8819, 0x9854, 0x9, 0x10000, 0x3, 0x2, 0x7, 0x0, 0x80000001, 0x66e, 0x2, 0x80, 0x100, 0x10001, 0x8000, 0x3, 0x9, 0x60, 0x2000000, 0x0, 0x1, 0x80, 0x1, 0x4, 0x0, 0x8, 0x1000, 0x6b, 0xffffffff, 0x2, 0x6, 0x8, 0x6, 0x0, 0xf0, 0x4, 0x9, 0xfffffffb, 0x8000, 0x3, 0x2, 0x1, 0x2, 0x9, 0x80, 0x2f7f7d38, 0x2, 0x3ee, 0x1, 0x5, 0x2, 0x1, 0xffffffff, 0x9, 0x9f, 0xa6, 0x7, 0x1, 0x6, 0xfffffeff, 0x3, 0x858, 0x401, 0x3, 0xfa, 0x4, 0x2, 0x7fff, 0x1000, 0xe0000000, 0x3, 0xb, 0x7, 0x81, 0x80, 0x759, 0x9fd1, 0x1d, 0x9, 0x0, 0x6, 0x1, 0x0, 0xfffffffc, 0x6da, 0x6, 0x7, 0x2a6, 0xff, 0x2, 0xfd9b, 0x40, 0x9, 0xade, 0x800, 0x2, 0xf, 0xfff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0xc1c2, 0x0, 0x2, {0x7, 0x1, 0x6, 0x10, 0x400, 0x10000}, {0xc, 0x2, 0x2, 0x8, 0xfffb, 0x7fffffff}, 0x2, 0xfffff000, 0x7}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x400}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x10000000, 0x5, 0x719, 0x1, {0x67, 0x0, 0x9, 0x5, 0x1, 0x3}, {0x3, 0x3, 0x3, 0xf5, 0x4, 0x6}, 0x5f8, 0x3}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x8, 0x9}}, @TCA_BASIC_EMATCHES={0x10c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x7, 0x0, 0x5}}}]}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0xcc, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xc630, 0x8, 0xff}, {0x4, 0x4, 0x3}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x0, 0x1, 0x81}, {0x40, 0x5f, 0x6, 0x1, 0xc}}}, @TCF_EM_CONTAINER={0x20, 0x2, 0x0, 0x0, {{0x5f4f, 0x0, 0x1}, "61dd8c5fd930c292124abac4522b45ced3"}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xf, 0x1, 0xfe01}, {0x80000000, 0x535, 0x9, 0x4, 0x7, 0x0, 0x2}}}, @TCF_EM_NBYTE={0x1c, 0x2, 0x0, 0x0, {{}, {0x7, 0x9, 0x2, "28cf9f4ac2a0e016c2"}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x3, 0x7, 0x1}, {{0x1, 0x0, 0x1, 0x1}, {0x3, 0x1, 0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x9, 0x1, 0x8}, {0x7fff, 0x9, 0x675e, 0x1, 0x6, 0x1, 0x1}}}, @TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0x6c14, 0x0, 0xd1}, "c0d9ba3c"}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x3ff, 0x8, 0xfea}, {0x0, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xc2d}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1a2}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x8, 0xfff1}}]}}]}, 0x19bc}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) kernel console output (not intermixed with test programs): =0 gid=0 ses=4294967295 subj=unconfined pid=6263 comm="syz.3.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f8e78ebe9 code=0x7ffc0000 [ 95.748771][ T30] audit: type=1326 audit(1756072069.025:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6263 comm="syz.3.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f4f8e78ebe9 code=0x7ffc0000 [ 95.832390][ T5946] usb 4-1: USB disconnect, device number 3 [ 95.849752][ T30] audit: type=1326 audit(1756072069.025:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6263 comm="syz.3.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f8e78ebe9 code=0x7ffc0000 [ 96.077773][ T6270] netlink: 20 bytes leftover after parsing attributes in process `syz.4.96'. [ 96.194103][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.202234][ T30] audit: type=1326 audit(1756072069.025:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6263 comm="syz.3.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f8e78ebe9 code=0x7ffc0000 [ 96.245239][ T10] usb 1-1: config 0 descriptor?? [ 96.328153][ T30] audit: type=1326 audit(1756072069.025:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6263 comm="syz.3.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f4f8e78ebe9 code=0x7ffc0000 [ 96.356658][ T30] audit: type=1326 audit(1756072069.025:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6263 comm="syz.3.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f8e78ebe9 code=0x7ffc0000 [ 96.386997][ T30] audit: type=1326 audit(1756072069.025:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6263 comm="syz.3.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4f8e78ebe9 code=0x7ffc0000 [ 96.414057][ T30] audit: type=1326 audit(1756072069.025:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6263 comm="syz.3.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f8e78ebe9 code=0x7ffc0000 [ 96.501695][ T30] audit: type=1326 audit(1756072069.025:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6263 comm="syz.3.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f4f8e78ebe9 code=0x7ffc0000 [ 96.692220][ T10] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 96.702440][ T6277] loop4: detected capacity change from 0 to 7 [ 96.718571][ T10] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 96.726222][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 96.729715][ T5881] Dev loop4: unable to read RDB block 7 [ 96.749416][ T5881] loop4: AHDI p1 p2 [ 96.758588][ T5881] loop4: partition table partially beyond EOD, truncated [ 96.768005][ T5881] loop4: p1 size 4227858431 extends beyond EOD, truncated [ 96.789940][ T10] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0003/input/input7 [ 96.815975][ T6277] Dev loop4: unable to read RDB block 7 [ 96.835555][ T6277] loop4: AHDI p1 p2 [ 96.840622][ T10] cm6533_jd 0003:0D8C:0022.0003: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 96.854380][ T6277] loop4: partition table partially beyond EOD, truncated [ 96.877205][ T6277] loop4: p1 size 4227858431 extends beyond EOD, truncated [ 96.896483][ T10] usb 1-1: USB disconnect, device number 2 [ 96.904500][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 96.922382][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.950159][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.011128][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 97.037265][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 97.053367][ T5999] udevd[5999]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 97.063765][ T9] usb 3-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 97.087379][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.127485][ T6283] Invalid logical block size (12) [ 97.138970][ T5999] udevd[5999]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 97.154905][ T9] usb 3-1: config 0 descriptor?? [ 97.327457][ T6282] fido_id[6282]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 97.435966][ T6289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.102'. [ 97.545581][ T6291] kvm: kvm [6290]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0xa [ 97.777872][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 97.784147][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 98.016260][ T9] usb 3-1: USB disconnect, device number 5 [ 98.158293][ T6295] loop4: detected capacity change from 0 to 7 [ 98.166163][ T6295] Dev loop4: unable to read RDB block 7 [ 98.172186][ T6295] loop4: unable to read partition table [ 98.182913][ T6295] loop4: partition table beyond EOD, truncated [ 98.203716][ T5982] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 98.217615][ T6295] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 98.371300][ T5982] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.408704][ T5982] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 98.415826][ T6302] kvm: pic: non byte write [ 98.617243][ T5982] usb 4-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 98.636631][ T5982] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.697831][ T5982] usb 4-1: config 0 descriptor?? [ 98.969359][ T5982] usb 4-1: USB disconnect, device number 4 [ 99.013199][ T6314] netlink: 68 bytes leftover after parsing attributes in process `syz.4.109'. [ 99.293674][ T5919] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 99.463686][ T5919] usb 3-1: Using ep0 maxpacket: 32 [ 99.476196][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.539599][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.621100][ T5919] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 99.634599][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.697841][ T5919] usb 3-1: config 0 descriptor?? [ 99.711940][ T5919] hub 3-1:0.0: USB hub found [ 99.941841][ T5919] hub 3-1:0.0: 1 port detected [ 100.024759][ T6328] netlink: 'syz.3.112': attribute type 7 has an invalid length. [ 100.032980][ T6328] netlink: 'syz.3.112': attribute type 8 has an invalid length. [ 100.114567][ T5919] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 100.379351][ T5919] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 100.534055][ T5919] usbhid 3-1:0.0: can't add hid device: -71 [ 100.552899][ T5919] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 100.562285][ T6333] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.637804][ T5919] usb 3-1: USB disconnect, device number 6 [ 100.953740][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 101.144310][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 101.161843][ T10] usb 1-1: config 0 has an invalid interface number: 145 but max is 1 [ 101.183084][ T10] usb 1-1: config 0 has an invalid interface number: 43 but max is 1 [ 101.237984][ T10] usb 1-1: config 0 has no interface number 0 [ 101.301623][ T10] usb 1-1: config 0 has no interface number 1 [ 101.336886][ T10] usb 1-1: config 0 interface 43 altsetting 250 bulk endpoint 0xF has invalid maxpacket 1023 [ 101.428221][ T10] usb 1-1: config 0 interface 43 altsetting 250 has a duplicate endpoint with address 0x2, skipping [ 101.581005][ T10] usb 1-1: config 0 interface 43 altsetting 250 has an endpoint descriptor with address 0xCE, changing to 0x8E [ 101.613877][ T10] usb 1-1: config 0 interface 43 altsetting 250 endpoint 0x8E has an invalid bInterval 180, changing to 11 [ 101.631707][ T10] usb 1-1: config 0 interface 43 altsetting 250 endpoint 0x8E has invalid maxpacket 16902, setting to 1024 [ 101.643574][ T10] usb 1-1: config 0 interface 43 altsetting 250 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 101.664175][ T10] usb 1-1: config 0 interface 145 has no altsetting 0 [ 101.671413][ T10] usb 1-1: config 0 interface 43 has no altsetting 0 [ 101.685630][ T10] usb 1-1: New USB device found, idVendor=06cd, idProduct=0104, bcdDevice=c8.6a [ 101.695250][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.705711][ T6336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.758686][ T10] usb 1-1: Product: syz [ 101.762997][ T10] usb 1-1: Manufacturer: syz [ 101.769108][ T10] usb 1-1: SerialNumber: syz [ 101.783395][ T10] usb 1-1: config 0 descriptor?? [ 101.844107][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 102.023692][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 102.043082][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.085112][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.127607][ T9] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 102.165590][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.224824][ T9] usb 4-1: config 0 descriptor?? [ 102.341745][ T6356] kvm: kvm [6355]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0xfdd9771a771d [ 102.898949][ T6374] netlink: 'syz.1.128': attribute type 7 has an invalid length. [ 102.932564][ T6374] netlink: 'syz.1.128': attribute type 8 has an invalid length. [ 103.016159][ T6377] FAULT_INJECTION: forcing a failure. [ 103.016159][ T6377] name failslab, interval 1, probability 0, space 0, times 0 [ 103.035628][ T6377] CPU: 1 UID: 0 PID: 6377 Comm: syz.2.129 Not tainted syzkaller #0 PREEMPT(full) [ 103.035654][ T6377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 103.035670][ T6377] Call Trace: [ 103.035678][ T6377] [ 103.035686][ T6377] dump_stack_lvl+0x189/0x250 [ 103.035710][ T6377] ? __pfx____ratelimit+0x10/0x10 [ 103.035743][ T6377] ? __pfx_dump_stack_lvl+0x10/0x10 [ 103.035761][ T6377] ? __pfx__printk+0x10/0x10 [ 103.035784][ T6377] ? __lock_acquire+0xab9/0xd20 [ 103.035815][ T6377] should_fail_ex+0x414/0x560 [ 103.035842][ T6377] should_failslab+0xa8/0x100 [ 103.035866][ T6377] kmem_cache_alloc_noprof+0x73/0x3c0 [ 103.035886][ T6377] ? skb_clone+0x212/0x3a0 [ 103.035908][ T6377] skb_clone+0x212/0x3a0 [ 103.035930][ T6377] __netlink_deliver_tap+0x404/0x850 [ 103.035965][ T6377] ? netlink_deliver_tap+0x2e/0x1b0 [ 103.035989][ T6377] netlink_deliver_tap+0x19c/0x1b0 [ 103.036012][ T6377] netlink_unicast+0x7fa/0x9e0 [ 103.036042][ T6377] ? __pfx_netlink_unicast+0x10/0x10 [ 103.036065][ T6377] ? netlink_sendmsg+0x642/0xb30 [ 103.036092][ T6377] ? skb_put+0x11b/0x210 [ 103.036112][ T6377] netlink_sendmsg+0x805/0xb30 [ 103.036143][ T6377] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.036169][ T6377] ? aa_sock_msg_perm+0xf1/0x1d0 [ 103.036187][ T6377] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 103.036204][ T6377] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.036227][ T6377] __sock_sendmsg+0x21c/0x270 [ 103.036252][ T6377] ____sys_sendmsg+0x505/0x830 [ 103.036276][ T6377] ? __pfx_____sys_sendmsg+0x10/0x10 [ 103.036303][ T6377] ? import_iovec+0x74/0xa0 [ 103.036325][ T6377] ___sys_sendmsg+0x21f/0x2a0 [ 103.036346][ T6377] ? __pfx____sys_sendmsg+0x10/0x10 [ 103.036400][ T6377] ? __fget_files+0x2a/0x420 [ 103.036421][ T6377] ? __fget_files+0x3a0/0x420 [ 103.036454][ T6377] __x64_sys_sendmsg+0x19b/0x260 [ 103.036474][ T6377] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 103.036502][ T6377] ? __pfx_ksys_write+0x10/0x10 [ 103.036519][ T6377] ? rcu_is_watching+0x15/0xb0 [ 103.036539][ T6377] ? do_syscall_64+0xbe/0x3b0 [ 103.036564][ T6377] do_syscall_64+0xfa/0x3b0 [ 103.036587][ T6377] ? lockdep_hardirqs_on+0x9c/0x150 [ 103.036608][ T6377] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.036624][ T6377] ? clear_bhb_loop+0x60/0xb0 [ 103.036643][ T6377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.036659][ T6377] RIP: 0033:0x7f1d4218ebe9 [ 103.036681][ T6377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.036694][ T6377] RSP: 002b:00007f1d42ffe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 103.036712][ T6377] RAX: ffffffffffffffda RBX: 00007f1d423b5fa0 RCX: 00007f1d4218ebe9 [ 103.036724][ T6377] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008 [ 103.036735][ T6377] RBP: 00007f1d42ffe090 R08: 0000000000000000 R09: 0000000000000000 [ 103.036745][ T6377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.036754][ T6377] R13: 00007f1d423b6038 R14: 00007f1d423b5fa0 R15: 00007f1d424dfa28 [ 103.036783][ T6377] [ 103.340974][ C1] vkms_vblank_simulate: vblank timer overrun [ 103.412530][ T9] letsketch 0003:6161:4D15.0004: Device info: â·· [ 103.685401][ T9] letsketch 0003:6161:4D15.0004: Device info: ᣠ[ 103.692917][ T6380] FAULT_INJECTION: forcing a failure. [ 103.692917][ T6380] name failslab, interval 1, probability 0, space 0, times 0 [ 103.723223][ T10] keyspan_pda 1-1:0.145: required endpoints missing [ 103.744938][ T6380] CPU: 1 UID: 0 PID: 6380 Comm: syz.4.131 Not tainted syzkaller #0 PREEMPT(full) [ 103.744962][ T6380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 103.744972][ T6380] Call Trace: [ 103.744979][ T6380] [ 103.744987][ T6380] dump_stack_lvl+0x189/0x250 [ 103.745011][ T6380] ? __pfx____ratelimit+0x10/0x10 [ 103.745033][ T6380] ? __pfx_dump_stack_lvl+0x10/0x10 [ 103.745052][ T6380] ? __pfx__printk+0x10/0x10 [ 103.745079][ T6380] ? __pfx___might_resched+0x10/0x10 [ 103.745095][ T6380] ? fs_reclaim_acquire+0x7d/0x100 [ 103.745122][ T6380] should_fail_ex+0x414/0x560 [ 103.745149][ T6380] should_failslab+0xa8/0x100 [ 103.745173][ T6380] __kmalloc_noprof+0xcb/0x4f0 [ 103.745192][ T6380] ? kfree+0x4d/0x440 [ 103.745208][ T6380] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 103.745231][ T6380] tomoyo_realpath_from_path+0xe3/0x5d0 [ 103.745249][ T6380] ? tomoyo_domain+0xd9/0x130 [ 103.745278][ T6380] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 103.745300][ T6380] tomoyo_path_number_perm+0x1e8/0x5a0 [ 103.745324][ T6380] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 103.745362][ T6380] ? __lock_acquire+0xab9/0xd20 [ 103.745404][ T6380] ? __fget_files+0x2a/0x420 [ 103.745429][ T6380] ? __fget_files+0x2a/0x420 [ 103.745449][ T6380] ? __fget_files+0x3a0/0x420 [ 103.745468][ T6380] ? __fget_files+0x2a/0x420 [ 103.745494][ T6380] security_file_ioctl+0xcb/0x2d0 [ 103.745516][ T6380] __se_sys_ioctl+0x47/0x170 [ 103.745538][ T6380] do_syscall_64+0xfa/0x3b0 [ 103.745558][ T6380] ? lockdep_hardirqs_on+0x9c/0x150 [ 103.745578][ T6380] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.745595][ T6380] ? clear_bhb_loop+0x60/0xb0 [ 103.745615][ T6380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.745630][ T6380] RIP: 0033:0x7fcb6c78ebe9 [ 103.745645][ T6380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.745659][ T6380] RSP: 002b:00007fcb6d51d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 103.745677][ T6380] RAX: ffffffffffffffda RBX: 00007fcb6c9b5fa0 RCX: 00007fcb6c78ebe9 [ 103.745689][ T6380] RDX: 0000000000000000 RSI: 0000000000005100 RDI: 0000000000000004 [ 103.745699][ T6380] RBP: 00007fcb6d51d090 R08: 0000000000000000 R09: 0000000000000000 [ 103.745709][ T6380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.745719][ T6380] R13: 00007fcb6c9b6038 R14: 00007fcb6c9b5fa0 R15: 00007fcb6cadfa28 [ 103.745748][ T6380] [ 103.745755][ T6380] ERROR: Out of memory at tomoyo_realpath_from_path. [ 103.782081][ T10] keyspan_pda 1-1:0.43: Keyspan PDA converter detected [ 104.032237][ T9] letsketch 0003:6161:4D15.0004: Device info: à° [ 104.058377][ T10] usb 1-1: Keyspan PDA converter now attached to ttyUSB0 [ 104.074082][ T10] usb 1-1: USB disconnect, device number 3 [ 104.088594][ T10] keyspan_pda ttyUSB0: Keyspan PDA converter now disconnected from ttyUSB0 [ 104.146964][ T10] keyspan_pda 1-1:0.43: device disconnected [ 104.402495][ T6390] warning: `syz.4.133' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 104.678847][ T9] usb 4-1: Max retries (5) exceeded reading string descriptor 2 [ 104.711560][ T9] letsketch 0003:6161:4D15.0004: probe with driver letsketch failed with error -71 [ 104.815389][ T9] usb 4-1: USB disconnect, device number 5 [ 104.897885][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 104.899666][ T30] audit: type=1326 audit(1756072078.255:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6395 comm="syz.1.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458cd8ebe9 code=0x7ffc0000 [ 105.274200][ T30] audit: type=1326 audit(1756072078.255:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6395 comm="syz.1.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f458cd8ebe9 code=0x7ffc0000 [ 105.335838][ T5982] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 105.338025][ T30] audit: type=1326 audit(1756072078.255:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6395 comm="syz.1.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458cd8ebe9 code=0x7ffc0000 [ 105.471546][ T30] audit: type=1326 audit(1756072078.255:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6395 comm="syz.1.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458cd8ebe9 code=0x7ffc0000 [ 105.504229][ T30] audit: type=1326 audit(1756072078.255:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6395 comm="syz.1.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f458cd8ebe9 code=0x7ffc0000 [ 105.526780][ T30] audit: type=1326 audit(1756072078.255:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6395 comm="syz.1.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458cd8ebe9 code=0x7ffc0000 [ 105.667057][ T6405] syz_tun: entered allmulticast mode [ 105.690054][ T6405] dvmrp1: entered allmulticast mode [ 105.743720][ T5982] usb 3-1: Using ep0 maxpacket: 16 [ 105.832212][ T30] audit: type=1326 audit(1756072078.255:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6395 comm="syz.1.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f458cd8ebe9 code=0x7ffc0000 [ 105.889542][ T6408] usb usb8: check_ctrlrecip: process 6408 (syz.2.136) requesting ep 01 but needs 81 [ 105.900947][ T6408] usb usb8: usbfs: process 6408 (syz.2.136) did not claim interface 0 before use [ 105.920622][ T6407] netlink: 4 bytes leftover after parsing attributes in process `syz.3.137'. [ 105.943551][ T30] audit: type=1326 audit(1756072078.255:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6395 comm="syz.1.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458cd8ebe9 code=0x7ffc0000 [ 106.086262][ T30] audit: type=1326 audit(1756072078.255:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6395 comm="syz.1.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f458cd8ebe9 code=0x7ffc0000 [ 106.197527][ T6407] syz_tun (unregistering): left allmulticast mode [ 106.223880][ T5919] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 106.261935][ T30] audit: type=1326 audit(1756072078.255:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6395 comm="syz.1.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458cd8ebe9 code=0x7ffc0000 [ 106.459513][ T5919] usb 4-1: config 1 has an invalid interface number: 128 but max is 1 [ 106.468067][ T5919] usb 4-1: config 1 has an invalid descriptor of length 172, skipping remainder of the config [ 106.549734][ T5919] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 106.759305][ T5919] usb 4-1: config 1 has no interface number 0 [ 106.771304][ T5919] usb 4-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 106.831132][ T6414] nftables ruleset with unbound chain [ 106.841487][ T5919] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 106.852681][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.861079][ T5919] usb 4-1: Product: syz [ 106.865569][ T5919] usb 4-1: Manufacturer: syz [ 106.895259][ T6417] netlink: 'syz.1.139': attribute type 7 has an invalid length. [ 106.903162][ T6417] netlink: 'syz.1.139': attribute type 8 has an invalid length. [ 106.937081][ T5919] usb 4-1: SerialNumber: syz [ 106.960720][ T5919] cdc_wdm 4-1:1.128: skipping garbage [ 106.966576][ T5919] cdc_wdm 4-1:1.128: probe with driver cdc_wdm failed with error -22 [ 107.027947][ T6420] netlink: 12 bytes leftover after parsing attributes in process `syz.0.140'. [ 107.097288][ T6420] vlan2: entered promiscuous mode [ 107.117235][ T6420] batadv0: entered promiscuous mode [ 107.165544][ T5919] usb 4-1: USB disconnect, device number 6 [ 107.798984][ T6427] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 107.856804][ T6427] team0: Port device batadv1 added [ 107.899178][ T6431] ip6tnl1: entered promiscuous mode [ 108.185565][ T6426] ptrace attach of "./syz-executor exec"[5881] was attempted by "./syz-executor exec"[6426] [ 108.440232][ T5982] usb 3-1: unable to get BOS descriptor or descriptor too short [ 108.514766][ T5982] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 108.612521][ T6443] netlink: 'syz.0.146': attribute type 7 has an invalid length. [ 108.630524][ T6443] netlink: 'syz.0.146': attribute type 8 has an invalid length. [ 108.653868][ T5982] usb 3-1: can't read configurations, error -71 [ 109.108442][ T6448] loop2: detected capacity change from 0 to 7 [ 109.120645][ T6448] Dev loop2: unable to read RDB block 7 [ 109.128941][ T6448] loop2: unable to read partition table [ 109.135704][ T6448] loop2: partition table beyond EOD, truncated [ 109.163668][ T6448] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 109.348631][ T6455] netlink: 8 bytes leftover after parsing attributes in process `syz.3.149'. [ 109.753317][ T6466] bridge_slave_0: left allmulticast mode [ 109.809756][ T6466] bridge_slave_0: left promiscuous mode [ 109.816454][ T6466] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.877639][ T6471] fuse: Bad value for 'fd' [ 109.960594][ T6466] bridge_slave_1: left allmulticast mode [ 109.966398][ T6466] bridge_slave_1: left promiscuous mode [ 109.973949][ T6466] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.174488][ T5919] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 110.205435][ T6466] bond0: (slave bond_slave_0): Releasing backup interface [ 110.311445][ T6466] bond0: (slave bond_slave_1): Releasing backup interface [ 110.434848][ T5919] usb 1-1: too many configurations: 164, using maximum allowed: 8 [ 110.463746][ T5939] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 110.465103][ T5919] usb 1-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 110.483028][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.597253][ T6466] team0: Port device team_slave_0 removed [ 110.634905][ T5919] usb 1-1: config 0 descriptor?? [ 110.655052][ T5919] usb 1-1: bad CDC descriptors [ 110.755294][ T6466] team0: Port device team_slave_1 removed [ 110.811045][ T6466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.818801][ T5939] usb 4-1: Using ep0 maxpacket: 16 [ 110.845551][ T5939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.866596][ T5939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.890215][ T6466] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.909773][ T5939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 110.940153][ T5939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 110.970127][ T5939] usb 4-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 111.010520][ T6466] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.018288][ T5939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.057549][ T5939] usb 4-1: config 0 descriptor?? [ 111.154648][ T6466] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.260745][ T6466] team0: Port device batadv1 removed [ 111.802213][ T5939] usbhid 4-1:0.0: can't add hid device: -71 [ 111.811753][ T5939] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 111.829984][ T5939] usb 4-1: USB disconnect, device number 7 [ 111.984896][ T5919] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 112.146065][ T5919] usb 3-1: config index 0 descriptor too short (expected 69, got 36) [ 112.155588][ T5919] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.202000][ T5919] usb 3-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 112.247931][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.300454][ T5919] usb 3-1: Product: syz [ 112.302003][ T5939] IPVS: starting estimator thread 0... [ 112.310739][ T5919] usb 3-1: Manufacturer: syz [ 112.340336][ T5919] usb 3-1: SerialNumber: syz [ 112.375809][ T5919] usb 3-1: config 0 descriptor?? [ 112.423799][ T6493] IPVS: using max 51 ests per chain, 122400 per kthread [ 112.544223][ T5939] usb 1-1: USB disconnect, device number 4 [ 112.606392][ T5919] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 112.627925][ T6497] netlink: 14 bytes leftover after parsing attributes in process `syz.0.160'. [ 112.671979][ T6498] netlink: 272 bytes leftover after parsing attributes in process `syz.3.159'. [ 113.365468][ T6497] bond0 (unregistering): Released all slaves [ 113.512905][ T5919] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 113.519958][ T5919] gspca_pac7302 3-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 113.579745][ T5919] usb 3-1: USB disconnect, device number 9 [ 113.700317][ T6508] netlink: 'syz.3.162': attribute type 7 has an invalid length. [ 113.719545][ T6508] netlink: 'syz.3.162': attribute type 8 has an invalid length. [ 113.944136][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 114.098676][ T6514] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 114.118667][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 114.134151][ T6514] kvm: requested 44419 ns i8254 timer period limited to 200000 ns [ 114.150724][ T6514] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 114.169384][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 114.189272][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 114.202035][ T6514] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 114.212686][ T6514] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 114.225922][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 114.235465][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.265060][ T6514] kvm: requested 39390 ns i8254 timer period limited to 200000 ns [ 114.273820][ T6514] kvm: requested 81295 ns i8254 timer period limited to 200000 ns [ 114.273880][ T10] usb 5-1: config 0 descriptor?? [ 114.300038][ T10] em28xx 5-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 114.532070][ T6507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.554141][ T6507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.677399][ T5919] usb 5-1: USB disconnect, device number 5 [ 114.827908][ T6537] tipc: Started in network mode [ 114.832951][ T6537] tipc: Node identity 7f000001, cluster identity 4711 [ 114.844222][ T6537] tipc: New replicast peer: 0.0.0.0 [ 114.853228][ T6537] tipc: Enabled bearer , priority 10 [ 114.880869][ T6537] ptrace attach of "./syz-executor exec"[5877] was attempted by "./syz-executor exec"[6537] [ 115.808218][ T6548] netlink: 596 bytes leftover after parsing attributes in process `syz.0.174'. [ 115.864788][ T10] tipc: Node number set to 2130706433 [ 115.925040][ T6552] syzkaller1: entered promiscuous mode [ 115.946896][ T6552] syzkaller1: entered allmulticast mode [ 116.377915][ T6555] fuse: Bad value for 'group_id' [ 116.393189][ T6555] fuse: Bad value for 'group_id' [ 116.406130][ T6555] fuse: Bad value for 'group_id' [ 116.412251][ T6555] fuse: Bad value for 'group_id' [ 116.501763][ T6560] usb usb8: usbfs: process 6560 (syz.0.178) did not claim interface 0 before use [ 116.843781][ T6572] process 'syz.2.181' launched './file2' with NULL argv: empty string added [ 116.937107][ T6573] netlink: 'syz.0.180': attribute type 7 has an invalid length. [ 116.959019][ T6573] netlink: 'syz.0.180': attribute type 8 has an invalid length. [ 117.168577][ T6578] syzkaller1: entered promiscuous mode [ 117.175096][ T6578] syzkaller1: entered allmulticast mode [ 117.196027][ T5939] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 117.335941][ T5919] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 117.366427][ T5939] usb 3-1: Using ep0 maxpacket: 8 [ 117.382561][ T5939] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 117.392610][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.426383][ T5939] usb 3-1: Product: syz [ 117.438419][ T5939] usb 3-1: Manufacturer: syz [ 117.446620][ T5939] usb 3-1: SerialNumber: syz [ 117.494750][ T5939] usb 3-1: config 0 descriptor?? [ 117.526492][ T5939] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 117.531004][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.610170][ T6584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.185'. [ 117.643814][ T5919] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 117.654585][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.706150][ T5919] usb 2-1: config 0 descriptor?? [ 118.289509][ T5939] gspca_sonixj: reg_r err -110 [ 118.305730][ T5939] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 118.406267][ T5919] usbhid 2-1:0.0: can't add hid device: -71 [ 118.424263][ T5919] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 118.437005][ T5919] usb 2-1: USB disconnect, device number 4 [ 118.520350][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 118.520366][ T30] audit: type=1326 audit(1756072091.805:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6595 comm="syz.4.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb6c78ebe9 code=0x7ffc0000 [ 118.610423][ T30] audit: type=1326 audit(1756072091.805:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6595 comm="syz.4.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb6c78ebe9 code=0x7ffc0000 [ 118.640535][ T6607] usb usb8: usbfs: process 6607 (syz.1.191) did not claim interface 0 before use [ 118.690853][ T30] audit: type=1326 audit(1756072091.805:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6595 comm="syz.4.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fcb6c78ebe9 code=0x7ffc0000 [ 118.873085][ T30] audit: type=1326 audit(1756072091.815:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6595 comm="syz.4.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb6c78ebe9 code=0x7ffc0000 [ 119.156506][ T30] audit: type=1326 audit(1756072091.815:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6595 comm="syz.4.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb6c78ebe9 code=0x7ffc0000 [ 119.551427][ T6618] syzkaller1: entered promiscuous mode [ 119.579959][ T6618] syzkaller1: entered allmulticast mode [ 119.714999][ T6622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.728021][ T6622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.904066][ T43] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 119.912587][ T6624] Context (ID=0x0) not attached to queue pair (handle=0x4d5:0x0) [ 120.083785][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 120.090484][ T43] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 120.100128][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.113429][ T43] usb 5-1: config 0 descriptor?? [ 120.123719][ T30] audit: type=1326 audit(1756072093.475:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6628 comm="syz.0.198" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0145f8ebe9 code=0x0 [ 120.148488][ T43] gspca_main: sunplus-2.14.0 probing 041e:400b [ 120.957090][ T43] gspca_sunplus: reg_w_riv err -71 [ 120.979803][ T43] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 121.033530][ T43] usb 5-1: USB disconnect, device number 6 [ 122.051348][ T43] usb 3-1: USB disconnect, device number 10 [ 122.195410][ T6648] usb usb8: usbfs: process 6648 (syz.1.202) did not claim interface 0 before use [ 122.557975][ T6662] netlink: 16 bytes leftover after parsing attributes in process `syz.4.203'. [ 123.586342][ T6667] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 123.693738][ T43] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 124.004127][ T43] usb 3-1: config 0 has no interfaces? [ 124.041904][ T43] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 124.051726][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.239073][ T43] usb 3-1: Product: syz [ 124.311135][ T43] usb 3-1: Manufacturer: syz [ 124.366082][ T43] usb 3-1: SerialNumber: syz [ 124.596341][ T43] usb 3-1: config 0 descriptor?? [ 124.646411][ T6679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.676797][ T6679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.835012][ T6665] tls_set_device_offload_rx: netdev not found [ 124.949861][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 125.005029][ T6684] netlink: 196 bytes leftover after parsing attributes in process `syz.2.206'. [ 125.248470][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 125.268551][ T10] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 125.299811][ T10] usb 2-1: config 0 has no interface number 0 [ 125.338705][ T10] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 125.413394][ T10] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 125.613658][ T10] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 125.648985][ T6692] fuse: Unknown parameter 'fowner<00000000000000000000' [ 125.659495][ T10] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 125.712637][ T10] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 125.733642][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.490721][ T10] usb 2-1: config 0 descriptor?? [ 126.530234][ T10] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 126.594253][ T6696] netlink: 'syz.3.215': attribute type 1 has an invalid length. [ 126.655209][ T6702] netlink: 168 bytes leftover after parsing attributes in process `syz.0.214'. [ 126.734688][ T6679] ldusb 2-1:0.55: Write buffer overflow, 2147479232 bytes dropped [ 126.841284][ T6705] netlink: 12 bytes leftover after parsing attributes in process `syz.3.216'. [ 126.873054][ T6707] usb usb8: usbfs: process 6707 (syz.4.217) did not claim interface 0 before use [ 126.981141][ T43] usb 3-1: USB disconnect, device number 11 [ 127.067069][ T6705] 8021q: adding VLAN 0 to HW filter on device bond2 [ 128.623710][ T43] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 128.913762][ T5982] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 128.963824][ T43] usb 4-1: config 0 has no interfaces? [ 129.111442][ T5982] usb 1-1: device descriptor read/64, error -71 [ 129.129961][ T43] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 129.148242][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.393735][ T5982] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 129.437451][ T982] usb 2-1: USB disconnect, device number 5 [ 129.460205][ T6737] fuse: Bad value for 'rootmode' [ 129.471407][ T43] usb 4-1: Product: syz [ 129.499250][ T43] usb 4-1: Manufacturer: syz [ 129.532698][ T982] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 129.553822][ T5982] usb 1-1: device descriptor read/64, error -71 [ 129.609682][ T43] usb 4-1: SerialNumber: syz [ 129.629279][ T43] usb 4-1: config 0 descriptor?? [ 129.737819][ T5982] usb usb1-port1: attempt power cycle [ 129.946553][ T6733] tls_set_device_offload_rx: netdev not found [ 130.067377][ T6741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.225'. [ 130.098513][ T5982] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 130.250862][ T5982] usb 1-1: device descriptor read/8, error -71 [ 130.577162][ T5982] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 130.614591][ T5982] usb 1-1: device descriptor read/8, error -71 [ 130.805547][ T5982] usb usb1-port1: unable to enumerate USB device [ 131.113215][ T6751] netlink: 84 bytes leftover after parsing attributes in process `syz.1.226'. [ 131.450014][ T6749] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 131.619426][ T5982] usb 4-1: USB disconnect, device number 8 [ 131.736861][ T6760] bond3: entered allmulticast mode [ 131.747045][ T6760] 8021q: adding VLAN 0 to HW filter on device bond3 [ 131.988803][ T6766] usb usb8: usbfs: process 6766 (syz.3.230) did not claim interface 0 before use [ 132.324034][ T6775] netlink: 'syz.0.232': attribute type 7 has an invalid length. [ 132.353323][ T6775] netlink: 'syz.0.232': attribute type 8 has an invalid length. [ 132.427443][ T6779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.233'. [ 132.850461][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.856855][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.003806][ T982] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 133.179221][ T982] usb 4-1: config index 0 descriptor too short (expected 8192, got 77) [ 133.193736][ T982] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.223690][ T982] usb 4-1: config 0 has no interfaces? [ 133.273951][ T5982] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 133.318900][ T982] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 133.330820][ T982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.341921][ T982] usb 4-1: Product: syz [ 133.348768][ T982] usb 4-1: Manufacturer: syz [ 133.353540][ T982] usb 4-1: SerialNumber: syz [ 133.370786][ T982] usb 4-1: config 0 descriptor?? [ 133.458804][ T5982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.473844][ T5982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.488795][ T5982] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 133.499382][ T5982] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.639436][ T6779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.233'. [ 133.683216][ T5982] usb 2-1: config 0 descriptor?? [ 134.131861][ T5982] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 134.195512][ T5982] cp2112 0003:10C4:EA90.0005: reserved main item tag 0xd [ 134.198068][ T6789] loop4: detected capacity change from 0 to 7 [ 134.238801][ T5881] Dev loop4: unable to read RDB block 7 [ 134.247068][ T5982] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 134.277497][ T5881] loop4: AHDI p1 p2 [ 134.290642][ T5881] loop4: partition table partially beyond EOD, truncated [ 134.301066][ T5881] loop4: p1 size 4227858431 extends beyond EOD, truncated [ 134.343322][ T5982] cp2112 0003:10C4:EA90.0005: Part Number: 0x82 Device Version: 0xFE [ 134.360583][ T6789] Dev loop4: unable to read RDB block 7 [ 134.375222][ T6789] loop4: AHDI p1 p2 [ 134.384283][ T6789] loop4: partition table partially beyond EOD, truncated [ 134.391607][ T6789] loop4: p1 size 4227858431 extends beyond EOD, truncated [ 134.416698][ T5234] Dev loop4: unable to read RDB block 7 [ 134.433763][ T5234] loop4: AHDI p1 p2 [ 134.447432][ T5234] loop4: partition table partially beyond EOD, truncated [ 134.469128][ T5234] loop4: p1 size 4227858431 extends beyond EOD, truncated [ 134.609379][ T5882] udevd[5882]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 134.653048][ T5882] udevd[5882]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 134.726823][ T5882] udevd[5882]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 135.205377][ T6787] cp2112 0003:10C4:EA90.0005: Error starting transaction: -38 [ 135.223074][ T6802] netlink: 36 bytes leftover after parsing attributes in process `syz.0.240'. [ 135.329159][ T982] usb 4-1: USB disconnect, device number 9 [ 135.503949][ T5982] usb 2-1: reset high-speed USB device number 6 using dummy_hcd [ 135.527728][ T6811] usb usb8: usbfs: process 6811 (syz.0.243) did not claim interface 0 before use [ 135.835295][ T6821] netdevsim netdevsim0: Direct firmware load for nel/config failed with error -2 [ 135.844791][ T6821] netdevsim netdevsim0: Falling back to sysfs fallback for: nel/config [ 135.918961][ T6822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.244'. [ 136.176328][ T6824] netlink: 272 bytes leftover after parsing attributes in process `syz.1.245'. [ 136.316981][ T43] usb 2-1: USB disconnect, device number 6 [ 136.511400][ T6831] netlink: 'syz.1.247': attribute type 7 has an invalid length. [ 136.537607][ T6831] netlink: 'syz.1.247': attribute type 8 has an invalid length. [ 137.824529][ T5868] Bluetooth: hci4: command 0x0405 tx timeout [ 138.234680][ T6856] input: syz1 as /devices/virtual/input/input8 [ 138.833327][ T6866] syzkaller0: entered promiscuous mode [ 138.848815][ T6866] syzkaller0: entered allmulticast mode [ 139.411671][ T6876] netlink: 12 bytes leftover after parsing attributes in process `syz.1.258'. [ 139.676506][ T6876] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.803701][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 139.832329][ T6878] bond1: (slave veth3): Enslaving as an active interface with an up link [ 139.971978][ T6892] FAULT_INJECTION: forcing a failure. [ 139.971978][ T6892] name failslab, interval 1, probability 0, space 0, times 0 [ 139.985515][ T6892] CPU: 0 UID: 0 PID: 6892 Comm: syz.1.264 Not tainted syzkaller #0 PREEMPT(full) [ 139.985538][ T6892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 139.985549][ T6892] Call Trace: [ 139.985556][ T6892] [ 139.985564][ T6892] dump_stack_lvl+0x189/0x250 [ 139.985589][ T6892] ? __pfx____ratelimit+0x10/0x10 [ 139.985611][ T6892] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.985637][ T6892] ? __pfx__printk+0x10/0x10 [ 139.985665][ T6892] ? __pfx___might_resched+0x10/0x10 [ 139.985686][ T6892] should_fail_ex+0x414/0x560 [ 139.985713][ T6892] should_failslab+0xa8/0x100 [ 139.985738][ T6892] __kmalloc_cache_noprof+0x70/0x3d0 [ 139.985758][ T6892] ? snd_seq_port_connect+0x6b/0x460 [ 139.985782][ T6892] snd_seq_port_connect+0x6b/0x460 [ 139.985799][ T6892] ? do_raw_read_unlock+0x3d/0x80 [ 139.985819][ T6892] ? _raw_read_unlock+0x28/0x50 [ 139.985843][ T6892] snd_seq_ioctl_subscribe_port+0x339/0x710 [ 139.985870][ T6892] ? __pfx_snd_seq_ioctl_subscribe_port+0x10/0x10 [ 139.985906][ T6892] snd_seq_oss_midi_open+0x4b9/0x7b0 [ 139.985935][ T6892] ? __pfx_snd_seq_oss_midi_open+0x10/0x10 [ 139.985978][ T6892] snd_seq_oss_synth_reset+0x3c4/0x880 [ 139.986006][ T6892] ? __pfx_snd_seq_oss_synth_reset+0x10/0x10 [ 139.986038][ T6892] ? __lock_acquire+0xab9/0xd20 [ 139.986062][ T6892] snd_seq_oss_reset+0x5a/0x240 [ 139.986085][ T6892] snd_seq_oss_ioctl+0x6c8/0x1090 [ 139.986108][ T6892] ? __pfx_snd_seq_oss_ioctl+0x10/0x10 [ 139.986133][ T6892] ? rcu_is_watching+0x15/0xb0 [ 139.986151][ T6892] ? trace_contention_end+0x39/0x120 [ 139.986169][ T6892] ? __mutex_lock+0x335/0x1350 [ 139.986194][ T6892] ? __lock_acquire+0xab9/0xd20 [ 139.986222][ T6892] ? odev_ioctl+0x81/0xf0 [ 139.986244][ T6892] ? __pfx___mutex_lock+0x10/0x10 [ 139.986277][ T6892] ? __fget_files+0x2a/0x420 [ 139.986297][ T6892] ? __fget_files+0x3a0/0x420 [ 139.986318][ T6892] ? __fget_files+0x2a/0x420 [ 139.986341][ T6892] ? __pfx_odev_ioctl+0x10/0x10 [ 139.986360][ T6892] odev_ioctl+0xb2/0xf0 [ 139.986379][ T6892] __se_sys_ioctl+0xf9/0x170 [ 139.986401][ T6892] do_syscall_64+0xfa/0x3b0 [ 139.986423][ T6892] ? lockdep_hardirqs_on+0x9c/0x150 [ 139.986444][ T6892] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.986461][ T6892] ? clear_bhb_loop+0x60/0xb0 [ 139.986482][ T6892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.986498][ T6892] RIP: 0033:0x7f458cd8ebe9 [ 139.986513][ T6892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.986526][ T6892] RSP: 002b:00007f458dc62038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 139.986544][ T6892] RAX: ffffffffffffffda RBX: 00007f458cfb5fa0 RCX: 00007f458cd8ebe9 [ 139.986557][ T6892] RDX: 0000000000000000 RSI: 0000000000005100 RDI: 0000000000000004 [ 139.986567][ T6892] RBP: 00007f458dc62090 R08: 0000000000000000 R09: 0000000000000000 [ 139.986577][ T6892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.986587][ T6892] R13: 00007f458cfb6038 R14: 00007f458cfb5fa0 R15: 00007f458d0dfa28 [ 139.986616][ T6892] [ 139.988227][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.312454][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.322303][ T10] usb 4-1: New USB device found, idVendor=06a3, idProduct=0cfa, bcdDevice= 0.00 [ 140.331519][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.348498][ T10] usb 4-1: config 0 descriptor?? [ 140.433887][ T5939] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 140.624864][ T5939] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 140.633375][ T5939] usb 1-1: config 0 has no interface number 0 [ 140.653744][ T5939] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.668061][ T6896] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 140.711870][ T5939] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.732097][ T5939] usb 1-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 140.751832][ T5939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.770607][ T6896] vim2m vim2m.0: vidioc_s_fmt queue busy [ 140.784941][ T5939] usb 1-1: config 0 descriptor?? [ 140.794134][ T10] saitek 0003:06A3:0CFA.0006: unknown main item tag 0x0 [ 140.844736][ T10] saitek 0003:06A3:0CFA.0006: hidraw0: USB HID v0.00 Device [HID 06a3:0cfa] on usb-dummy_hcd.3-1/input0 [ 141.011026][ T6880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.036134][ T30] audit: type=1326 audit(1756072114.375:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.0.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0145f8ebe9 code=0x7ffc0000 [ 141.052874][ T6880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.111878][ T5982] usb 4-1: USB disconnect, device number 10 [ 141.162411][ T30] audit: type=1326 audit(1756072114.375:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.0.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0145f8ebe9 code=0x7ffc0000 [ 141.199104][ T30] audit: type=1326 audit(1756072114.375:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.0.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0145f8ebe9 code=0x7ffc0000 [ 141.264614][ T30] audit: type=1326 audit(1756072114.375:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.0.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0145f8ebe9 code=0x7ffc0000 [ 141.303197][ T30] audit: type=1326 audit(1756072114.375:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.0.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0145f8ebe9 code=0x7ffc0000 [ 141.411887][ T30] audit: type=1326 audit(1756072114.375:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.0.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0145f8ebe9 code=0x7ffc0000 [ 141.467041][ T30] audit: type=1326 audit(1756072114.375:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.0.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0145f8ebe9 code=0x7ffc0000 [ 141.557463][ T30] audit: type=1326 audit(1756072114.375:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.0.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f0145f8ebe9 code=0x7ffc0000 [ 141.580669][ T30] audit: type=1326 audit(1756072114.375:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.0.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0145f8ebe9 code=0x7ffc0000 [ 141.695088][ T6914] IPv6: sit1: Disabled Multicast RS [ 141.767566][ T30] audit: type=1326 audit(1756072114.385:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.0.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f0145f8ebe9 code=0x7ffc0000 [ 142.423704][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 142.647290][ T10] usb 4-1: config 0 has no interfaces? [ 142.694309][ T10] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 142.853478][ T5939] usbhid 1-1:0.2: can't add hid device: -71 [ 142.890114][ T5939] usbhid 1-1:0.2: probe with driver usbhid failed with error -71 [ 142.903329][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.922821][ T10] usb 4-1: Product: syz [ 142.933033][ T5939] usb 1-1: USB disconnect, device number 9 [ 142.942810][ T10] usb 4-1: Manufacturer: syz [ 142.957963][ T10] usb 4-1: SerialNumber: syz [ 142.998021][ T10] usb 4-1: config 0 descriptor?? [ 143.076829][ T6924] syzkaller0: entered promiscuous mode [ 143.113759][ T6924] syzkaller0: entered allmulticast mode [ 143.316529][ T6921] tls_set_device_offload_rx: netdev not found [ 143.365736][ T6921] netlink: 196 bytes leftover after parsing attributes in process `syz.3.270'. [ 143.661125][ T6928] FAULT_INJECTION: forcing a failure. [ 143.661125][ T6928] name failslab, interval 1, probability 0, space 0, times 0 [ 143.687612][ T6928] CPU: 0 UID: 0 PID: 6928 Comm: syz.4.273 Not tainted syzkaller #0 PREEMPT(full) [ 143.687636][ T6928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 143.687646][ T6928] Call Trace: [ 143.687654][ T6928] [ 143.687662][ T6928] dump_stack_lvl+0x189/0x250 [ 143.687686][ T6928] ? __pfx____ratelimit+0x10/0x10 [ 143.687709][ T6928] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.687728][ T6928] ? __pfx__printk+0x10/0x10 [ 143.687750][ T6928] ? __lock_acquire+0xab9/0xd20 [ 143.687782][ T6928] should_fail_ex+0x414/0x560 [ 143.687808][ T6928] should_failslab+0xa8/0x100 [ 143.687831][ T6928] kmem_cache_alloc_noprof+0x73/0x3c0 [ 143.687851][ T6928] ? skb_clone+0x212/0x3a0 [ 143.687873][ T6928] skb_clone+0x212/0x3a0 [ 143.687895][ T6928] __netlink_deliver_tap+0x404/0x850 [ 143.687931][ T6928] ? netlink_deliver_tap+0x2e/0x1b0 [ 143.687954][ T6928] netlink_deliver_tap+0x19c/0x1b0 [ 143.687977][ T6928] netlink_unicast+0x7fa/0x9e0 [ 143.688007][ T6928] ? __pfx_netlink_unicast+0x10/0x10 [ 143.688027][ T6928] ? netlink_sendmsg+0x642/0xb30 [ 143.688046][ T6928] ? skb_put+0x11b/0x210 [ 143.688066][ T6928] netlink_sendmsg+0x805/0xb30 [ 143.688098][ T6928] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.688124][ T6928] ? aa_sock_msg_perm+0xf1/0x1d0 [ 143.688143][ T6928] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 143.688160][ T6928] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.688183][ T6928] __sock_sendmsg+0x21c/0x270 [ 143.688208][ T6928] ____sys_sendmsg+0x505/0x830 [ 143.688232][ T6928] ? __pfx_____sys_sendmsg+0x10/0x10 [ 143.688260][ T6928] ? import_iovec+0x74/0xa0 [ 143.688289][ T6928] ___sys_sendmsg+0x21f/0x2a0 [ 143.688309][ T6928] ? __pfx____sys_sendmsg+0x10/0x10 [ 143.688365][ T6928] ? __fget_files+0x2a/0x420 [ 143.688386][ T6928] ? __fget_files+0x3a0/0x420 [ 143.688419][ T6928] __x64_sys_sendmsg+0x19b/0x260 [ 143.688440][ T6928] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 143.688468][ T6928] ? __pfx_ksys_write+0x10/0x10 [ 143.688486][ T6928] ? rcu_is_watching+0x15/0xb0 [ 143.688506][ T6928] ? do_syscall_64+0xbe/0x3b0 [ 143.688531][ T6928] do_syscall_64+0xfa/0x3b0 [ 143.688551][ T6928] ? lockdep_hardirqs_on+0x9c/0x150 [ 143.688569][ T6928] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.688583][ T6928] ? clear_bhb_loop+0x60/0xb0 [ 143.688602][ T6928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.688615][ T6928] RIP: 0033:0x7fcb6c78ebe9 [ 143.688629][ T6928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.688641][ T6928] RSP: 002b:00007fcb6d51d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 143.688660][ T6928] RAX: ffffffffffffffda RBX: 00007fcb6c9b5fa0 RCX: 00007fcb6c78ebe9 [ 143.688672][ T6928] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 143.688682][ T6928] RBP: 00007fcb6d51d090 R08: 0000000000000000 R09: 0000000000000000 [ 143.688692][ T6928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.688701][ T6928] R13: 00007fcb6c9b6038 R14: 00007fcb6c9b5fa0 R15: 00007fcb6cadfa28 [ 143.688729][ T6928] [ 144.522498][ T6942] FAULT_INJECTION: forcing a failure. [ 144.522498][ T6942] name failslab, interval 1, probability 0, space 0, times 0 [ 144.559383][ T6942] CPU: 1 UID: 0 PID: 6942 Comm: syz.0.277 Not tainted syzkaller #0 PREEMPT(full) [ 144.559400][ T6942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 144.559406][ T6942] Call Trace: [ 144.559411][ T6942] [ 144.559415][ T6942] dump_stack_lvl+0x189/0x250 [ 144.559432][ T6942] ? __pfx____ratelimit+0x10/0x10 [ 144.559447][ T6942] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.559458][ T6942] ? __pfx__printk+0x10/0x10 [ 144.559474][ T6942] ? __pfx___might_resched+0x10/0x10 [ 144.559485][ T6942] should_fail_ex+0x414/0x560 [ 144.559501][ T6942] should_failslab+0xa8/0x100 [ 144.559517][ T6942] __kmalloc_noprof+0xcb/0x4f0 [ 144.559529][ T6942] ? qrtr_tun_write_iter+0xbf/0x180 [ 144.559541][ T6942] ? security_file_permission+0x75/0x290 [ 144.559555][ T6942] qrtr_tun_write_iter+0xbf/0x180 [ 144.559568][ T6942] aio_write+0x535/0x7a0 [ 144.559582][ T6942] ? __pfx_aio_write+0x10/0x10 [ 144.559598][ T6942] ? __might_fault+0xb0/0x130 [ 144.559620][ T6942] io_submit_one+0x78b/0x1310 [ 144.559637][ T6942] ? __pfx_io_submit_one+0x10/0x10 [ 144.559647][ T6942] ? __might_fault+0xb0/0x130 [ 144.559664][ T6942] ? __might_fault+0xb0/0x130 [ 144.559679][ T6942] __se_sys_io_submit+0x185/0x2f0 [ 144.559694][ T6942] ? __pfx___se_sys_io_submit+0x10/0x10 [ 144.559707][ T6942] ? ksys_write+0x22a/0x250 [ 144.559725][ T6942] ? do_syscall_64+0xbe/0x3b0 [ 144.559740][ T6942] do_syscall_64+0xfa/0x3b0 [ 144.559753][ T6942] ? lockdep_hardirqs_on+0x9c/0x150 [ 144.559766][ T6942] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.559775][ T6942] ? clear_bhb_loop+0x60/0xb0 [ 144.559786][ T6942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.559795][ T6942] RIP: 0033:0x7f0145f8ebe9 [ 144.559805][ T6942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.559813][ T6942] RSP: 002b:00007f0146ed1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 144.559824][ T6942] RAX: ffffffffffffffda RBX: 00007f01461b5fa0 RCX: 00007f0145f8ebe9 [ 144.559830][ T6942] RDX: 0000200000000180 RSI: 0000000000000001 RDI: 00007f0146eb0000 [ 144.559836][ T6942] RBP: 00007f0146ed1090 R08: 0000000000000000 R09: 0000000000000000 [ 144.559842][ T6942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.559847][ T6942] R13: 00007f01461b6038 R14: 00007f01461b5fa0 R15: 00007f01462dfa28 [ 144.559861][ T6942] [ 144.933737][ T5939] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 145.029147][ T982] usb 4-1: USB disconnect, device number 11 [ 145.106211][ T5939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 145.142007][ T5939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 145.192017][ T6950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.280'. [ 145.194013][ T5939] usb 2-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 145.241984][ T5939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.338850][ T5939] usb 2-1: config 0 descriptor?? [ 145.371216][ T6946] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 145.621415][ T6971] loop4: detected capacity change from 0 to 7 [ 145.650921][ T6971] Dev loop4: unable to read RDB block 7 [ 145.669935][ T6971] loop4: AHDI p1 p2 [ 145.684735][ T6971] loop4: partition table partially beyond EOD, truncated [ 145.709014][ T6971] loop4: p1 size 4227858431 extends beyond EOD, truncated [ 145.806747][ T6977] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.284'. [ 145.824070][ T6977] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.284'. [ 145.835575][ T5939] glorious 0003:22D4:1503.0007: hidraw0: USB HID v0.00 Device [Glorious Model I] on usb-dummy_hcd.1-1/input0 [ 145.866519][ T5882] udevd[5882]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 146.004901][ T6946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.027467][ T6946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.096716][ T6980] tipc: Enabled bearer , priority 0 [ 146.129311][ T6980] tipc: Resetting bearer [ 146.150425][ T6979] tipc: Disabling bearer [ 146.330423][ T6984] netlink: 272 bytes leftover after parsing attributes in process `syz.4.292'. [ 146.580962][ T10] usb 2-1: USB disconnect, device number 7 [ 147.495942][ T7010] netdevsim netdevsim2 : renamed from netdevsim0 (while UP) [ 148.826751][ T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 149.226570][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.253807][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 149.259413][ T7052] netlink: 'syz.4.312': attribute type 2 has an invalid length. [ 149.337632][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 149.398843][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 149.481893][ T10] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 149.621109][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.621199][ T982] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 149.646877][ T10] usb 3-1: Product: syz [ 149.656537][ T10] usb 3-1: Manufacturer: syz [ 149.661151][ T10] usb 3-1: SerialNumber: syz [ 149.751145][ T10] usb 3-1: config 0 descriptor?? [ 149.823704][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 149.863996][ T982] usb 5-1: device descriptor read/64, error -71 [ 149.912742][ T10] garmin_gps 3-1:0.0: Garmin GPS usb/tty converter detected [ 149.996335][ T10] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 150.021900][ T9] usb 4-1: config 0 has no interfaces? [ 150.079149][ T9] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 150.094236][ T10] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 150.108479][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.123988][ T982] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 150.159319][ T9] usb 4-1: Product: syz [ 150.164140][ T9] usb 4-1: Manufacturer: syz [ 150.168835][ T9] usb 4-1: SerialNumber: syz [ 150.227419][ T9] usb 4-1: config 0 descriptor?? [ 150.259310][ T7065] netlink: 12 bytes leftover after parsing attributes in process `syz.1.316'. [ 150.276701][ T982] usb 5-1: device descriptor read/64, error -71 [ 150.350106][ T7065] 8021q: adding VLAN 0 to HW filter on device bond2 [ 150.369195][ T5982] usb 3-1: USB disconnect, device number 13 [ 150.377090][ T5982] garmin_gps 3-1:0.0: device disconnected [ 150.394343][ T982] usb usb5-port1: attempt power cycle [ 150.442650][ T7068] bond2: (slave veth5): Enslaving as an active interface with an up link [ 150.578903][ T7063] tls_set_device_offload_rx: netdev not found [ 150.606194][ T7063] netlink: 196 bytes leftover after parsing attributes in process `syz.3.314'. [ 150.753883][ T982] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 150.774413][ T982] usb 5-1: device descriptor read/8, error -71 [ 151.123802][ T982] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 151.146641][ T982] usb 5-1: device descriptor read/8, error -71 [ 151.254036][ T982] usb usb5-port1: unable to enumerate USB device [ 151.437777][ T7080] capability: warning: `syz.2.319' uses deprecated v2 capabilities in a way that may be insecure [ 151.475088][ T7080] netlink: 'syz.2.319': attribute type 30 has an invalid length. [ 151.705922][ T7082] FAULT_INJECTION: forcing a failure. [ 151.705922][ T7082] name failslab, interval 1, probability 0, space 0, times 0 [ 151.721153][ T7082] CPU: 1 UID: 0 PID: 7082 Comm: syz.2.320 Not tainted syzkaller #0 PREEMPT(full) [ 151.721168][ T7082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 151.721174][ T7082] Call Trace: [ 151.721179][ T7082] [ 151.721184][ T7082] dump_stack_lvl+0x189/0x250 [ 151.721200][ T7082] ? __pfx____ratelimit+0x10/0x10 [ 151.721216][ T7082] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.721231][ T7082] ? __pfx__printk+0x10/0x10 [ 151.721247][ T7082] ? __pfx___might_resched+0x10/0x10 [ 151.721259][ T7082] should_fail_ex+0x414/0x560 [ 151.721275][ T7082] should_failslab+0xa8/0x100 [ 151.721291][ T7082] __kmalloc_cache_noprof+0x70/0x3d0 [ 151.721304][ T7082] ? snd_seq_port_connect+0x6b/0x460 [ 151.721318][ T7082] snd_seq_port_connect+0x6b/0x460 [ 151.721328][ T7082] ? do_raw_read_unlock+0x3d/0x80 [ 151.721340][ T7082] ? _raw_read_unlock+0x28/0x50 [ 151.721355][ T7082] snd_seq_ioctl_subscribe_port+0x339/0x710 [ 151.721370][ T7082] ? __pfx_snd_seq_ioctl_subscribe_port+0x10/0x10 [ 151.721382][ T7082] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 151.721400][ T7082] snd_seq_oss_midi_open+0x39d/0x7b0 [ 151.721418][ T7082] ? __pfx_snd_seq_oss_midi_open+0x10/0x10 [ 151.721442][ T7082] snd_seq_oss_synth_reset+0x3c4/0x880 [ 151.721459][ T7082] ? __pfx_snd_seq_oss_synth_reset+0x10/0x10 [ 151.721483][ T7082] ? __lock_acquire+0xab9/0xd20 [ 151.721498][ T7082] snd_seq_oss_reset+0x5a/0x240 [ 151.721512][ T7082] snd_seq_oss_ioctl+0x6c8/0x1090 [ 151.721526][ T7082] ? __pfx_snd_seq_oss_ioctl+0x10/0x10 [ 151.721540][ T7082] ? rcu_is_watching+0x15/0xb0 [ 151.721550][ T7082] ? trace_contention_end+0x39/0x120 [ 151.721561][ T7082] ? __mutex_lock+0x335/0x1350 [ 151.721576][ T7082] ? __lock_acquire+0xab9/0xd20 [ 151.721592][ T7082] ? odev_ioctl+0x81/0xf0 [ 151.721605][ T7082] ? __pfx___mutex_lock+0x10/0x10 [ 151.721624][ T7082] ? __fget_files+0x2a/0x420 [ 151.721639][ T7082] ? __fget_files+0x3a0/0x420 [ 151.721651][ T7082] ? __fget_files+0x2a/0x420 [ 151.721666][ T7082] ? __pfx_odev_ioctl+0x10/0x10 [ 151.721677][ T7082] odev_ioctl+0xb2/0xf0 [ 151.721688][ T7082] __se_sys_ioctl+0xf9/0x170 [ 151.721701][ T7082] do_syscall_64+0xfa/0x3b0 [ 151.721715][ T7082] ? lockdep_hardirqs_on+0x9c/0x150 [ 151.721728][ T7082] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.721736][ T7082] ? clear_bhb_loop+0x60/0xb0 [ 151.721748][ T7082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.721757][ T7082] RIP: 0033:0x7f1d4218ebe9 [ 151.721767][ T7082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.721774][ T7082] RSP: 002b:00007f1d42ffe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 151.721786][ T7082] RAX: ffffffffffffffda RBX: 00007f1d423b5fa0 RCX: 00007f1d4218ebe9 [ 151.721792][ T7082] RDX: 0000000000000000 RSI: 0000000000005100 RDI: 0000000000000004 [ 151.721798][ T7082] RBP: 00007f1d42ffe090 R08: 0000000000000000 R09: 0000000000000000 [ 151.721803][ T7082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.721808][ T7082] R13: 00007f1d423b6038 R14: 00007f1d423b5fa0 R15: 00007f1d424dfa28 [ 151.721823][ T7082] [ 152.306909][ T7086] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.322'. [ 152.317939][ T7086] netlink: zone id is out of range [ 152.323072][ T7086] netlink: get zone limit has 8 unknown bytes [ 152.473847][ T7088] syzkaller0: entered promiscuous mode [ 152.489296][ T7088] syzkaller0: entered allmulticast mode [ 152.569220][ T7090] netlink: 28 bytes leftover after parsing attributes in process `syz.4.324'. [ 152.766998][ T7094] netlink: 24 bytes leftover after parsing attributes in process `syz.4.327'. [ 153.235516][ T24] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 153.239855][ T5939] usb 4-1: USB disconnect, device number 12 [ 153.423800][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 153.561092][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 153.574201][ T24] usb 2-1: config 10 has an invalid interface number: 119 but max is 0 [ 153.586140][ T24] usb 2-1: config 10 has no interface number 0 [ 153.607793][ T24] usb 2-1: config 10 interface 119 has no altsetting 0 [ 153.869214][ T5939] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 153.892918][ T24] usb 2-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=67.73 [ 153.903147][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.948933][ T24] usb 2-1: Product: syz [ 153.953111][ T24] usb 2-1: Manufacturer: syz [ 153.978039][ T24] usb 2-1: SerialNumber: syz [ 154.109071][ T5939] usb 4-1: config 0 has no interfaces? [ 154.230394][ T7097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.412640][ T7097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.458315][ T5939] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 154.475916][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.487162][ T5939] usb 4-1: Product: syz [ 154.512017][ T24] usb 2-1: USB disconnect, device number 8 [ 154.522577][ T5939] usb 4-1: Manufacturer: syz [ 154.549301][ T5939] usb 4-1: SerialNumber: syz [ 154.579198][ T5939] usb 4-1: config 0 descriptor?? [ 154.902823][ T7118] tls_set_device_offload_rx: netdev not found [ 154.923272][ T7118] netlink: 196 bytes leftover after parsing attributes in process `syz.3.331'. [ 155.367517][ T7133] openvswitch: netlink: Duplicate or invalid key (type 0). [ 155.374988][ T7133] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.463876][ T7156] netlink: 16 bytes leftover after parsing attributes in process `syz.4.341'. [ 156.528283][ T7156] bond0: entered promiscuous mode [ 156.578177][ T982] usb 4-1: USB disconnect, device number 13 [ 156.580929][ T7158] netlink: 'syz.2.342': attribute type 13 has an invalid length. [ 156.586454][ T7156] bond_slave_0: entered promiscuous mode [ 156.673939][ T7156] bond_slave_1: entered promiscuous mode [ 156.711707][ T7156] bond0: left promiscuous mode [ 156.743495][ T7156] bond_slave_0: left promiscuous mode [ 156.782057][ T7156] bond_slave_1: left promiscuous mode [ 157.254716][ T7174] FAULT_INJECTION: forcing a failure. [ 157.254716][ T7174] name failslab, interval 1, probability 0, space 0, times 0 [ 157.348696][ T7174] CPU: 1 UID: 0 PID: 7174 Comm: syz.4.347 Not tainted syzkaller #0 PREEMPT(full) [ 157.348719][ T7174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 157.348728][ T7174] Call Trace: [ 157.348736][ T7174] [ 157.348744][ T7174] dump_stack_lvl+0x189/0x250 [ 157.348766][ T7174] ? __pfx____ratelimit+0x10/0x10 [ 157.348788][ T7174] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.348805][ T7174] ? __pfx__printk+0x10/0x10 [ 157.348826][ T7174] ? __pfx___might_resched+0x10/0x10 [ 157.348838][ T7174] ? fs_reclaim_acquire+0x7d/0x100 [ 157.348860][ T7174] should_fail_ex+0x414/0x560 [ 157.348881][ T7174] should_failslab+0xa8/0x100 [ 157.348900][ T7174] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 157.348917][ T7174] ? __alloc_skb+0x112/0x2d0 [ 157.348932][ T7174] __alloc_skb+0x112/0x2d0 [ 157.348947][ T7174] netlink_ack+0x146/0xa50 [ 157.348963][ T7174] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 157.348980][ T7174] ? ref_tracker_free+0x63a/0x7d0 [ 157.348998][ T7174] ? __asan_memcpy+0x40/0x70 [ 157.349011][ T7174] ? __pfx_ref_tracker_free+0x10/0x10 [ 157.349026][ T7174] ? __skb_clone+0x63/0x7a0 [ 157.349046][ T7174] netlink_rcv_skb+0x28c/0x470 [ 157.349064][ T7174] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 157.349083][ T7174] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 157.349108][ T7174] ? netlink_deliver_tap+0x2e/0x1b0 [ 157.349131][ T7174] netlink_unicast+0x82f/0x9e0 [ 157.349154][ T7174] ? __pfx_netlink_unicast+0x10/0x10 [ 157.349172][ T7174] ? netlink_sendmsg+0x642/0xb30 [ 157.349187][ T7174] ? skb_put+0x11b/0x210 [ 157.349202][ T7174] netlink_sendmsg+0x805/0xb30 [ 157.349226][ T7174] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.349246][ T7174] ? aa_sock_msg_perm+0xf1/0x1d0 [ 157.349260][ T7174] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 157.349274][ T7174] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.349292][ T7174] __sock_sendmsg+0x21c/0x270 [ 157.349310][ T7174] ____sys_sendmsg+0x505/0x830 [ 157.349328][ T7174] ? __pfx_____sys_sendmsg+0x10/0x10 [ 157.349348][ T7174] ? import_iovec+0x74/0xa0 [ 157.349365][ T7174] ___sys_sendmsg+0x21f/0x2a0 [ 157.349380][ T7174] ? __pfx____sys_sendmsg+0x10/0x10 [ 157.349419][ T7174] ? __fget_files+0x2a/0x420 [ 157.349436][ T7174] ? __fget_files+0x3a0/0x420 [ 157.349461][ T7174] __x64_sys_sendmsg+0x19b/0x260 [ 157.349476][ T7174] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 157.349496][ T7174] ? __pfx_ksys_write+0x10/0x10 [ 157.349511][ T7174] ? rcu_is_watching+0x15/0xb0 [ 157.349528][ T7174] ? do_syscall_64+0xbe/0x3b0 [ 157.349555][ T7174] do_syscall_64+0xfa/0x3b0 [ 157.349571][ T7174] ? lockdep_hardirqs_on+0x9c/0x150 [ 157.349587][ T7174] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.349600][ T7174] ? clear_bhb_loop+0x60/0xb0 [ 157.349615][ T7174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.349627][ T7174] RIP: 0033:0x7fcb6c78ebe9 [ 157.349645][ T7174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.349655][ T7174] RSP: 002b:00007fcb6d51d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.349674][ T7174] RAX: ffffffffffffffda RBX: 00007fcb6c9b5fa0 RCX: 00007fcb6c78ebe9 [ 157.349683][ T7174] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 157.349691][ T7174] RBP: 00007fcb6d51d090 R08: 0000000000000000 R09: 0000000000000000 [ 157.349699][ T7174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.349706][ T7174] R13: 00007fcb6c9b6038 R14: 00007fcb6c9b5fa0 R15: 00007fcb6cadfa28 [ 157.349727][ T7174] [ 157.691661][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.335151][ T7193] FAULT_INJECTION: forcing a failure. [ 158.335151][ T7193] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 158.412978][ T7193] CPU: 0 UID: 0 PID: 7193 Comm: syz.4.350 Not tainted syzkaller #0 PREEMPT(full) [ 158.413003][ T7193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 158.413013][ T7193] Call Trace: [ 158.413020][ T7193] [ 158.413029][ T7193] dump_stack_lvl+0x189/0x250 [ 158.413053][ T7193] ? __pfx____ratelimit+0x10/0x10 [ 158.413076][ T7193] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.413095][ T7193] ? __pfx__printk+0x10/0x10 [ 158.413117][ T7193] ? __might_fault+0xb0/0x130 [ 158.413150][ T7193] should_fail_ex+0x414/0x560 [ 158.413177][ T7193] _copy_from_iter+0x1de/0x1790 [ 158.413210][ T7193] ? __pfx__copy_from_iter+0x10/0x10 [ 158.413232][ T7193] ? rcu_is_watching+0x15/0xb0 [ 158.413250][ T7193] ? trace_kmalloc+0x1f/0xd0 [ 158.413267][ T7193] ? __kmalloc_noprof+0x29b/0x4f0 [ 158.413285][ T7193] ? qrtr_tun_write_iter+0xbf/0x180 [ 158.413309][ T7193] qrtr_tun_write_iter+0xdf/0x180 [ 158.413331][ T7193] aio_write+0x535/0x7a0 [ 158.413355][ T7193] ? __pfx_aio_write+0x10/0x10 [ 158.413385][ T7193] ? __might_fault+0xb0/0x130 [ 158.413425][ T7193] io_submit_one+0x78b/0x1310 [ 158.413457][ T7193] ? __pfx_io_submit_one+0x10/0x10 [ 158.413475][ T7193] ? __might_fault+0xb0/0x130 [ 158.413507][ T7193] ? __might_fault+0xb0/0x130 [ 158.413531][ T7193] __se_sys_io_submit+0x185/0x2f0 [ 158.413565][ T7193] ? __pfx___se_sys_io_submit+0x10/0x10 [ 158.413588][ T7193] ? ksys_write+0x22a/0x250 [ 158.413615][ T7193] ? do_syscall_64+0xbe/0x3b0 [ 158.413640][ T7193] do_syscall_64+0xfa/0x3b0 [ 158.413660][ T7193] ? lockdep_hardirqs_on+0x9c/0x150 [ 158.413679][ T7193] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.413696][ T7193] ? clear_bhb_loop+0x60/0xb0 [ 158.413716][ T7193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.413732][ T7193] RIP: 0033:0x7fcb6c78ebe9 [ 158.413748][ T7193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.413761][ T7193] RSP: 002b:00007fcb6d51d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 158.413780][ T7193] RAX: ffffffffffffffda RBX: 00007fcb6c9b5fa0 RCX: 00007fcb6c78ebe9 [ 158.413792][ T7193] RDX: 0000200000000180 RSI: 0000000000000001 RDI: 00007fcb6d4fc000 [ 158.413804][ T7193] RBP: 00007fcb6d51d090 R08: 0000000000000000 R09: 0000000000000000 [ 158.413813][ T7193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.413823][ T7193] R13: 00007fcb6c9b6038 R14: 00007fcb6c9b5fa0 R15: 00007fcb6cadfa28 [ 158.413852][ T7193] [ 159.934796][ T982] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 159.991202][ T7205] fuse: Bad value for 'fd' [ 160.047807][ T7210] loop4: detected capacity change from 0 to 7 [ 160.093582][ T7210] Dev loop4: unable to read RDB block 7 [ 160.131124][ T7210] loop4: AHDI p1 p2 [ 160.139516][ T982] usb 5-1: config 0 has no interfaces? [ 160.156420][ T982] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 160.169838][ T982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.185525][ T982] usb 5-1: Product: syz [ 160.208515][ T982] usb 5-1: Manufacturer: syz [ 160.209945][ T7213] netlink: 272 bytes leftover after parsing attributes in process `syz.2.357'. [ 160.220372][ T982] usb 5-1: SerialNumber: syz [ 160.227548][ T7210] loop4: partition table partially beyond EOD, truncated [ 160.248994][ T982] usb 5-1: config 0 descriptor?? [ 160.257444][ T7210] loop4: p1 size 4227858431 extends beyond EOD, truncated [ 160.346284][ T5999] udevd[5999]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 160.490766][ T7223] kvm: MONITOR instruction emulated as NOP! [ 160.502094][ T7203] tls_set_device_offload_rx: netdev not found [ 160.526531][ T7203] netlink: 196 bytes leftover after parsing attributes in process `syz.4.353'. [ 161.273722][ T5982] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 161.470670][ T5982] usb 3-1: config 241 has an invalid descriptor of length 181, skipping remainder of the config [ 161.500560][ T5982] usb 3-1: config 241 has 0 interfaces, different from the descriptor's value: 1 [ 161.540178][ T5982] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 161.583028][ T5982] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.694907][ T7246] fuse: Bad value for 'fd' [ 161.957292][ T7235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.004217][ T7235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.191408][ T7235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.228607][ T7235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.506717][ T7268] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 162.537311][ T7268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.374'. [ 162.551978][ T7268] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 162.560670][ T7268] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.934486][ T5982] usb 3-1: string descriptor 0 read error: -71 [ 163.001783][ T9] usb 5-1: USB disconnect, device number 11 [ 163.004103][ T5982] usb 3-1: USB disconnect, device number 14 [ 163.302204][ T7274] netlink: 176 bytes leftover after parsing attributes in process `syz.4.376'. [ 163.354785][ T7276] syz.4.376 (7276): /proc/7273/oom_adj is deprecated, please use /proc/7273/oom_score_adj instead. [ 163.396792][ T7274] ip6gretap0: entered promiscuous mode [ 163.973828][ T5982] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 164.013883][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 164.145639][ T5982] usb 2-1: Using ep0 maxpacket: 32 [ 164.163729][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 164.188530][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 164.225693][ T10] usb 3-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 164.245087][ T5982] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.263852][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.287154][ T5982] usb 2-1: config 0 interface 0 altsetting 16 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 164.304294][ T10] usb 3-1: config 0 descriptor?? [ 164.378045][ T5982] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 164.428766][ T5982] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x8F has invalid wMaxPacketSize 0 [ 164.459394][ T5982] usb 2-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 164.511386][ T5982] usb 2-1: config 0 interface 0 has no altsetting 0 [ 164.585065][ T7295] fuse: Bad value for 'fd' [ 164.642624][ T5982] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 164.749737][ T5982] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.781700][ T5982] usb 2-1: config 0 descriptor?? [ 164.826184][ T10] kye 0003:0458:4018.0008: unbalanced collection at end of report description [ 164.852782][ T10] kye 0003:0458:4018.0008: parse failed [ 164.899148][ T10] kye 0003:0458:4018.0008: probe with driver kye failed with error -22 [ 165.071839][ T5939] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 165.123737][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 165.258305][ T5939] usb 1-1: Using ep0 maxpacket: 32 [ 165.272233][ T5939] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 165.280840][ T5939] usb 1-1: config 0 has no interface number 0 [ 165.293079][ T5939] usb 1-1: config 0 interface 184 has no altsetting 0 [ 165.350343][ T9] usb 5-1: config 0 has no interfaces? [ 165.365170][ T5939] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 165.415813][ T5939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.443781][ T5939] usb 1-1: Product: syz [ 165.451244][ T5982] hid-thrustmaster 0003:044F:B65D.0009: unknown main item tag 0x0 [ 165.462288][ T5939] usb 1-1: Manufacturer: syz [ 165.469457][ T5982] hid-thrustmaster 0003:044F:B65D.0009: unknown main item tag 0x0 [ 165.486343][ T5939] usb 1-1: SerialNumber: syz [ 165.486349][ T5982] hid-thrustmaster 0003:044F:B65D.0009: unknown main item tag 0x0 [ 165.486376][ T5982] hid-thrustmaster 0003:044F:B65D.0009: unknown main item tag 0x0 [ 165.583763][ T9] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 165.673229][ T5982] hid-thrustmaster 0003:044F:B65D.0009: unknown main item tag 0x0 [ 165.680700][ T5939] usb 1-1: config 0 descriptor?? [ 165.688870][ T5982] hid-thrustmaster 0003:044F:B65D.0009: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.1-1/input0 [ 165.708666][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.717383][ T5982] hid-thrustmaster 0003:044F:B65D.0009: setup data couldn't be sent [ 165.750158][ T5939] smsc75xx v1.0.0 [ 165.756271][ T9] usb 5-1: Product: syz [ 165.923748][ T9] usb 5-1: Manufacturer: syz [ 165.969080][ T9] usb 5-1: SerialNumber: syz [ 166.032237][ T9] usb 5-1: config 0 descriptor?? [ 166.269172][ T7307] tls_set_device_offload_rx: netdev not found [ 166.323032][ T7307] netlink: 196 bytes leftover after parsing attributes in process `syz.4.385'. [ 166.506677][ T7311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.518728][ T7311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.820775][ T9] usb 3-1: USB disconnect, device number 15 [ 167.497503][ T7319] netlink: 28 bytes leftover after parsing attributes in process `syz.3.389'. [ 167.513778][ T982] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 167.653327][ C1] hid-thrustmaster 0003:044F:B65D.0009: URB to get model id failed with error -71 [ 167.656322][ T9] usb 2-1: USB disconnect, device number 9 [ 167.695933][ T982] usb 3-1: config 241 has an invalid descriptor of length 181, skipping remainder of the config [ 167.729007][ T982] usb 3-1: config 241 has 0 interfaces, different from the descriptor's value: 1 [ 167.775183][ T5939] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 167.799374][ T5939] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 167.804407][ T982] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 167.832635][ T5939] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 167.875670][ T5939] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 167.904237][ T982] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.980985][ T5939] usb 1-1: USB disconnect, device number 10 [ 168.187151][ T7315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.196138][ T7315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.215333][ T7315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.344321][ T7315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.398812][ T7335] fuse: Bad value for 'fd' [ 168.440060][ T5982] usb 5-1: USB disconnect, device number 12 [ 168.657745][ T7340] netlink: 1 bytes leftover after parsing attributes in process `syz.4.396'. [ 168.674210][ T7340] : renamed from sit0 (while UP) [ 168.729720][ T7340] : entered promiscuous mode [ 168.834930][ T7340] netlink: 4 bytes leftover after parsing attributes in process `syz.4.396'. [ 168.918701][ T7344] syzkaller0: entered promiscuous mode [ 168.918724][ T7344] syzkaller0: entered allmulticast mode [ 168.928924][ T982] usb 3-1: string descriptor 0 read error: -71 [ 168.930836][ T982] usb 3-1: USB disconnect, device number 16 [ 169.819075][ T7382] fuse: Bad value for 'fd' [ 169.853790][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 170.083699][ T24] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 170.244231][ T24] usb 2-1: device descriptor read/64, error -71 [ 170.524351][ T24] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 170.578411][ T9] usb 4-1: config 0 has no interfaces? [ 170.597522][ T9] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 170.606925][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.619250][ T9] usb 4-1: Product: syz [ 170.623448][ T9] usb 4-1: Manufacturer: syz [ 170.656252][ T982] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 170.675817][ T9] usb 4-1: SerialNumber: syz [ 170.684067][ T24] usb 2-1: device descriptor read/64, error -71 [ 170.715337][ T9] usb 4-1: config 0 descriptor?? [ 170.794974][ T24] usb usb2-port1: attempt power cycle [ 170.827653][ T982] usb 3-1: Using ep0 maxpacket: 8 [ 170.846251][ T982] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 170.873366][ T982] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.906411][ T982] usb 3-1: config 0 has no interfaces? [ 170.935542][ T982] usb 3-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 170.958478][ T7373] tls_set_device_offload_rx: netdev not found [ 170.984324][ T7373] netlink: 196 bytes leftover after parsing attributes in process `syz.3.406'. [ 171.033975][ T982] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.091169][ T982] usb 3-1: config 0 descriptor?? [ 171.153871][ T24] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 171.174817][ T24] usb 2-1: device descriptor read/8, error -71 [ 171.325234][ T7390] libceph: resolve '4.' (ret=-3): failed [ 171.395214][ T982] IPVS: starting estimator thread 0... [ 171.402369][ T7390] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 171.434124][ T24] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 171.474851][ T24] usb 2-1: device descriptor read/8, error -71 [ 171.512287][ T7397] IPVS: using max 32 ests per chain, 76800 per kthread [ 171.645179][ T24] usb usb2-port1: unable to enumerate USB device [ 171.691127][ T7390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.412'. [ 173.313758][ T5939] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 174.303168][ T5939] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.348473][ T5939] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.375032][ T979] usb 4-1: USB disconnect, device number 14 [ 174.477662][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 185.773637][ C1] sched: DL replenish lagged too much [ 185.794918][ T5939] usb 5-1: New USB device found, idVendor=06a3, idProduct=0cfa, bcdDevice= 0.00 [ 186.530866][ T5939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.531114][ T5939] usb 5-1: config 0 descriptor?? [ 187.594092][ T5939] usb 5-1: can't set config #0, error -71 [ 187.642140][ T5947] usb 3-1: USB disconnect, device number 17 [ 187.723165][ T5939] usb 5-1: USB disconnect, device number 13 [ 194.777007][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.783358][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.537876][ T5875] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 195.546935][ T5875] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 195.555850][ T5875] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 195.584657][ T5875] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 195.655770][ T5184] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 195.665073][ T5184] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 195.673505][ T5184] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 195.717736][ T5874] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 195.729985][ T5184] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 195.747018][ T5874] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 195.899368][ T5874] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 195.914034][ T5874] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 195.938339][ T5874] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 195.947018][ T5874] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 195.958756][ T5874] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 196.186334][ T5875] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 196.216383][ T5875] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 196.225002][ T5875] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 196.233161][ T5875] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 196.241403][ T5875] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 196.856459][ T5862] Bluetooth: hci1: command 0x0406 tx timeout [ 196.862500][ T5862] Bluetooth: hci3: command 0x0406 tx timeout [ 196.868948][ T5868] Bluetooth: hci2: command 0x0406 tx timeout [ 196.875021][ T7437] Bluetooth: hci0: command 0x0406 tx timeout [ 197.859217][ T51] Bluetooth: hci5: command tx timeout [ 198.045843][ T51] Bluetooth: hci7: command tx timeout [ 198.363895][ T51] Bluetooth: hci6: command tx timeout [ 198.370282][ T5866] Bluetooth: hci8: command tx timeout [ 199.883893][ T51] Bluetooth: hci5: command tx timeout [ 200.123879][ T51] Bluetooth: hci7: command tx timeout [ 200.443765][ T51] Bluetooth: hci6: command tx timeout [ 200.449207][ T51] Bluetooth: hci8: command tx timeout [ 201.963736][ T51] Bluetooth: hci5: command tx timeout [ 202.203736][ T51] Bluetooth: hci7: command tx timeout [ 202.523835][ T5866] Bluetooth: hci6: command tx timeout [ 202.531892][ T51] Bluetooth: hci8: command tx timeout [ 204.043758][ T51] Bluetooth: hci5: command tx timeout [ 204.283740][ T51] Bluetooth: hci7: command tx timeout [ 204.603771][ T5866] Bluetooth: hci6: command tx timeout [ 204.609601][ T51] Bluetooth: hci8: command tx timeout [ 213.361474][ T60] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.713040][ T60] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.838041][ T60] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.182320][ T60] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.220468][ T7460] openvswitch: netlink: Message has 4 unknown bytes. [ 214.249689][ T7439] chnl_net:caif_netlink_parms(): no params data found [ 214.253679][ T7460] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.330557][ T7459] netlink: 'syz.1.427': attribute type 14 has an invalid length. [ 215.103877][ T7439] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.118456][ T7439] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.131628][ T7439] bridge_slave_0: entered allmulticast mode [ 215.148424][ T7439] bridge_slave_0: entered promiscuous mode [ 215.304042][ T7438] chnl_net:caif_netlink_parms(): no params data found [ 215.357800][ T7439] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.404790][ T7439] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.414036][ T7439] bridge_slave_1: entered allmulticast mode [ 215.425129][ T7439] bridge_slave_1: entered promiscuous mode [ 215.479146][ T7446] chnl_net:caif_netlink_parms(): no params data found [ 215.876371][ T7445] chnl_net:caif_netlink_parms(): no params data found [ 216.009437][ T7486] tipc: Enabling of bearer rejected, failed to enable media [ 216.217326][ T7481] mmap: syz.1.430 (7481) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 216.388707][ T7486] syzkaller0: entered promiscuous mode [ 216.413964][ T7486] syzkaller0: entered allmulticast mode [ 216.427551][ T7439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.589618][ T60] bridge_slave_1: left allmulticast mode [ 216.610970][ T60] bridge_slave_1: left promiscuous mode [ 216.626270][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.669060][ T60] bridge_slave_0: left allmulticast mode [ 216.674964][ T60] bridge_slave_0: left promiscuous mode [ 216.693963][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.663324][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.724561][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.743954][ T60] bond0 (unregistering): Released all slaves [ 217.866341][ T7439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.989301][ T7438] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.006608][ T7438] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.021157][ T7438] bridge_slave_0: entered allmulticast mode [ 218.055279][ T7438] bridge_slave_0: entered promiscuous mode [ 218.204810][ T7509] input: syz1 as /devices/virtual/input/input10 [ 218.583486][ T7446] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.609856][ T7446] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.619253][ T7446] bridge_slave_0: entered allmulticast mode [ 218.634536][ T7446] bridge_slave_0: entered promiscuous mode [ 218.643350][ T7438] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.660679][ T7438] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.684365][ T7438] bridge_slave_1: entered allmulticast mode [ 218.717554][ T7438] bridge_slave_1: entered promiscuous mode [ 218.795089][ T7439] team0: Port device team_slave_0 added [ 218.821865][ T7439] team0: Port device team_slave_1 added [ 218.838912][ T7446] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.866164][ T7446] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.873532][ T7446] bridge_slave_1: entered allmulticast mode [ 218.895564][ T7446] bridge_slave_1: entered promiscuous mode [ 219.095434][ T7446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.116813][ T7438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.136632][ T7438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.194541][ T7445] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.201707][ T7445] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.209238][ T7445] bridge_slave_0: entered allmulticast mode [ 219.224127][ T7445] bridge_slave_0: entered promiscuous mode [ 219.302024][ T7446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.390591][ T7445] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.414244][ T7445] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.421435][ T7445] bridge_slave_1: entered allmulticast mode [ 219.444898][ T7445] bridge_slave_1: entered promiscuous mode [ 219.573345][ T7439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.580492][ T7439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.621886][ T7439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.667438][ T7439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.735293][ T7439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.768074][ T7439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.878876][ T60] hsr_slave_0: left promiscuous mode [ 219.881164][ T60] hsr_slave_1: left promiscuous mode [ 219.881731][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.881753][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.882360][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.882379][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.906282][ T60] veth1_macvtap: left promiscuous mode [ 219.906440][ T60] veth0_macvtap: left promiscuous mode [ 219.906648][ T60] veth1_vlan: left promiscuous mode [ 219.906815][ T60] veth0_vlan: left promiscuous mode [ 220.533698][ T5938] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 220.730002][ T5938] usb 2-1: unable to get BOS descriptor or descriptor too short [ 220.800847][ T5938] usb 2-1: config index 0 descriptor too short (expected 19644, got 71) [ 220.820175][ T5938] usb 2-1: config 248 has too many interfaces: 127, using maximum allowed: 32 [ 221.153704][ T5938] usb 2-1: config 248 has an invalid descriptor of length 0, skipping remainder of the config [ 221.202759][ T5938] usb 2-1: config 248 has 1 interface, different from the descriptor's value: 127 [ 221.222663][ T5938] usb 2-1: config 248 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 221.253823][ T5938] usb 2-1: config 248 interface 0 has no altsetting 0 [ 221.295360][ T5938] usb 2-1: New USB device found, idVendor=0525, idProduct=02a1, bcdDevice= 0.72 [ 221.314438][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.344894][ T5938] usb 2-1: Product: syz [ 221.349103][ T5938] usb 2-1: Manufacturer: syz [ 221.360811][ T5938] usb 2-1: SerialNumber: syz [ 221.749945][ T60] team0 (unregistering): Port device team_slave_1 removed [ 221.839169][ T60] team0 (unregistering): Port device team_slave_0 removed [ 222.639731][ T7438] team0: Port device team_slave_0 added [ 222.807487][ T7446] team0: Port device team_slave_0 added [ 222.815037][ T7438] team0: Port device team_slave_1 added [ 222.856476][ T7446] team0: Port device team_slave_1 added [ 222.904754][ T5938] usb 2-1: bad CDC descriptors [ 222.950433][ T7445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.962651][ T5938] usb 2-1: USB disconnect, device number 15 [ 222.994038][ T7445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.719190][ T7438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.770558][ T7438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.821876][ T7539] netlink: 84 bytes leftover after parsing attributes in process `syz.1.434'. [ 223.849305][ T7438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.880511][ T7439] hsr_slave_0: entered promiscuous mode [ 223.895158][ T7439] hsr_slave_1: entered promiscuous mode [ 223.905399][ T7439] debugfs: 'hsr0' already exists in 'hsr' [ 223.917002][ T7439] Cannot create hsr debugfs directory [ 223.924740][ T7446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.940177][ T7446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.968709][ T7446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.025344][ T7438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.032303][ T7438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.060613][ T7438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.079909][ T7446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.087685][ T7446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.114096][ T7446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.143044][ T7445] team0: Port device team_slave_0 added [ 224.243295][ T7445] team0: Port device team_slave_1 added [ 224.408305][ T7446] hsr_slave_0: entered promiscuous mode [ 224.430466][ T7446] hsr_slave_1: entered promiscuous mode [ 224.446047][ T7446] debugfs: 'hsr0' already exists in 'hsr' [ 224.452051][ T7446] Cannot create hsr debugfs directory [ 224.546568][ T7445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.553539][ T7445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.581538][ T7445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.669567][ T7445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.694914][ T7445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.723656][ T7445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.751830][ T7438] hsr_slave_0: entered promiscuous mode [ 224.782944][ T7438] hsr_slave_1: entered promiscuous mode [ 224.790209][ T7438] debugfs: 'hsr0' already exists in 'hsr' [ 224.796553][ T7438] Cannot create hsr debugfs directory [ 225.020988][ T7445] hsr_slave_0: entered promiscuous mode [ 225.028095][ T7445] hsr_slave_1: entered promiscuous mode [ 225.035722][ T7445] debugfs: 'hsr0' already exists in 'hsr' [ 225.041481][ T7445] Cannot create hsr debugfs directory [ 225.427432][ T60] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.561796][ T60] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.710931][ T60] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.842746][ T60] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.881046][ T7446] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 225.903993][ T7446] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 225.920715][ T7446] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 225.931398][ T7446] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 226.068786][ T7439] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 226.139973][ T7439] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 226.161977][ T7439] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 226.202475][ T7439] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 226.270703][ T60] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.445643][ T60] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.537903][ T60] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.565880][ T7438] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 226.609933][ T7438] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 226.633141][ T7438] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 226.678074][ T60] netdevsim netdevsim2  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.721184][ T7438] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 226.973457][ T7445] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 226.986576][ T7445] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 227.033514][ T7445] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 227.079394][ T7445] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 227.162258][ T60] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.191129][ T7446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.298990][ T60] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.340365][ T7439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.357427][ T7608] netlink: 4 bytes leftover after parsing attributes in process `syz.1.439'. [ 227.370858][ T7446] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.397747][ T7450] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.404941][ T7450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.421998][ T7450] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.429190][ T7450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.513211][ T60] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.631051][ T60] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.123208][ T7439] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.200556][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.207763][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.249015][ T7446] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 228.281203][ T7446] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 228.357056][ T7438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.530045][ T7450] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.537290][ T7450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.622715][ T7438] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.827415][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.834643][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.912046][ T7445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.955583][ T60] bridge_slave_1: left allmulticast mode [ 228.972633][ T60] bridge_slave_1: left promiscuous mode [ 228.983243][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.022570][ T60] bridge_slave_0: left allmulticast mode [ 229.029749][ T60] bridge_slave_0: left promiscuous mode [ 229.041944][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.056001][ T60] bridge_slave_1: left allmulticast mode [ 229.061670][ T60] bridge_slave_1: left promiscuous mode [ 229.067621][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.079985][ T60] bridge_slave_0: left allmulticast mode [ 229.086049][ T60] bridge_slave_0: left promiscuous mode [ 229.091813][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.761475][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.772825][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.783143][ T60] bond0 (unregistering): Released all slaves [ 229.941740][ T60] dvmrp1 (unregistering): left allmulticast mode [ 230.131095][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.142095][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.151988][ T60] bond0 (unregistering): Released all slaves [ 230.165644][ T60] bond1 (unregistering): Released all slaves [ 230.262748][ T60] bond2 (unregistering): Released all slaves [ 230.359330][ T60] bond3 (unregistering): Released all slaves [ 230.382671][ T7446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.491157][ T7413] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.498307][ T7413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.607799][ T7445] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.652990][ T60] tipc: Left network mode [ 230.682915][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.690059][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.699803][ T60] tipc: Disabling bearer [ 230.713221][ T60] tipc: Left network mode [ 230.773496][ T7439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.881506][ T7413] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.888723][ T7413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.943503][ T7446] veth0_vlan: entered promiscuous mode [ 230.997432][ T7438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.146960][ T7446] veth1_vlan: entered promiscuous mode [ 231.335175][ T7446] veth0_macvtap: entered promiscuous mode [ 231.425271][ T7438] veth0_vlan: entered promiscuous mode [ 231.439622][ T7446] veth1_macvtap: entered promiscuous mode [ 231.465206][ T7439] veth0_vlan: entered promiscuous mode [ 231.489414][ T7438] veth1_vlan: entered promiscuous mode [ 231.691680][ T7439] veth1_vlan: entered promiscuous mode [ 231.798547][ T7446] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.833054][ T7667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.447'. [ 231.877649][ T7446] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.914384][ T7667] 8021q: adding VLAN 0 to HW filter on device bond3 [ 231.923090][ T7445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.978130][ T7669] bond3: (slave veth7): Enslaving as an active interface with an up link [ 232.041270][ T7438] veth0_macvtap: entered promiscuous mode [ 232.175978][ T7439] veth0_macvtap: entered promiscuous mode [ 232.192559][ T1039] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.231329][ T7438] veth1_macvtap: entered promiscuous mode [ 232.265948][ T49] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.286727][ T49] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.337691][ T7439] veth1_macvtap: entered promiscuous mode [ 232.372274][ T60] hsr_slave_0: left promiscuous mode [ 232.388256][ T60] hsr_slave_1: left promiscuous mode [ 232.412119][ T60] hsr_slave_0: left promiscuous mode [ 232.427944][ T60] hsr_slave_1: left promiscuous mode [ 232.439891][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.451115][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.461859][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.469563][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.485304][ T60] hsr_slave_0: left promiscuous mode [ 232.491455][ T60] hsr_slave_1: left promiscuous mode [ 232.502691][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.510829][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.519408][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.528512][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.603532][ T60] veth1_macvtap: left promiscuous mode [ 232.620433][ T60] veth0_macvtap: left promiscuous mode [ 232.631631][ T60] veth1_vlan: left promiscuous mode [ 232.640407][ T60] veth0_vlan: left promiscuous mode [ 232.651970][ T60] veth1_macvtap: left promiscuous mode [ 232.657977][ T60] veth0_macvtap: left promiscuous mode [ 232.668063][ T60] veth1_vlan: left promiscuous mode [ 232.673443][ T60] veth0_vlan: left promiscuous mode [ 232.680067][ T60] veth1_macvtap: left promiscuous mode [ 232.690822][ T60] veth0_macvtap: left promiscuous mode [ 232.702442][ T60] veth1_vlan: left promiscuous mode [ 232.708935][ T60] veth0_vlan: left promiscuous mode [ 234.113301][ T60] team0 (unregistering): Port device team_slave_1 removed [ 234.151432][ T60] team0 (unregistering): Port device team_slave_0 removed [ 234.845275][ T60] team0 (unregistering): Port device team_slave_1 removed [ 234.880489][ T60] team0 (unregistering): Port device team_slave_0 removed [ 235.231164][ T49] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.259253][ T7438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.273447][ T7685] tipc: Enabled bearer , priority 0 [ 235.299368][ T7438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.362174][ T7685] tipc: Disabling bearer [ 235.443571][ T7445] veth0_vlan: entered promiscuous mode [ 235.470752][ T49] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.508490][ T49] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.528297][ T7439] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.561976][ T7439] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.623082][ T49] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.657441][ T7445] veth1_vlan: entered promiscuous mode [ 235.681033][ T2911] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.698730][ T7703] batadv0: entered promiscuous mode [ 235.704499][ T7703] vlan2: entered promiscuous mode [ 235.742366][ T2911] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.772282][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.797087][ T2911] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.820520][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.904035][ T2911] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.056490][ T2911] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.092776][ T7445] veth0_macvtap: entered promiscuous mode [ 236.153375][ T7445] veth1_macvtap: entered promiscuous mode [ 236.219810][ T2911] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.228212][ T2911] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.340397][ T7445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.406693][ T2911] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.422587][ T2911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.441067][ T7445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.502307][ T49] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.627449][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.653812][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.683473][ T2921] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.738212][ T2921] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.808291][ T2921] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.854402][ T4079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.887091][ T7730] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20002 [ 236.893875][ T4079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.925736][ T5946] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 236.953988][ T4079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.961828][ T4079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.141805][ T5946] usb 2-1: Using ep0 maxpacket: 16 [ 237.160073][ T1039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.209481][ T1039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.227473][ T5946] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.297428][ T5946] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 237.307085][ T7736] netlink: 'syz.6.419': attribute type 2 has an invalid length. [ 237.346428][ T5946] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 237.360985][ T2921] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.368273][ T5946] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 237.379353][ T5946] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 237.448164][ T2921] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.492624][ T5946] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 237.563243][ T5946] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 237.583017][ T60] IPVS: stop unused estimator thread 0... [ 237.613962][ T5946] usb 2-1: Manufacturer: syz [ 237.675302][ T5946] usb 2-1: config 0 descriptor?? [ 237.957431][ T7750] fuse: Bad value for 'fd' [ 238.280211][ T7767] netlink: 100 bytes leftover after parsing attributes in process `syz.1.458'. [ 238.304815][ T5946] rc_core: IR keymap rc-hauppauge not found [ 238.335998][ T5946] Registered IR keymap rc-empty [ 238.386584][ T5946] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 238.431280][ T5946] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 238.497776][ T5946] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 238.694799][ T5946] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input11 [ 238.900284][ T5946] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 238.934337][ T5946] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 238.974757][ T5946] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 239.344705][ T5946] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 239.354730][ T10] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 239.409532][ T5946] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 239.506768][ T5946] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 239.543715][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 239.548941][ T5946] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 239.565354][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.576942][ T5946] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 239.589686][ T10] usb 9-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 239.623769][ T5946] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 239.646265][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.694429][ T5946] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 239.714121][ T10] usb 9-1: config 0 descriptor?? [ 239.772196][ T5946] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 239.841028][ T5946] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 240.077592][ T5946] usb 2-1: USB disconnect, device number 16 [ 240.544960][ T10] usbhid 9-1:0.0: can't add hid device: -71 [ 240.597914][ T10] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 240.613771][ T7797] netlink: 272 bytes leftover after parsing attributes in process `syz.1.469'. [ 240.636278][ T10] usb 9-1: USB disconnect, device number 2 [ 240.832594][ T7802] IPVS: length: 184 != 8 [ 241.190926][ T7821] openvswitch: netlink: Message has 20 unknown bytes. [ 241.198120][ T7821] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.427156][ T7832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.477'. [ 247.688842][ T7832] netlink: 4 bytes leftover after parsing attributes in process `syz.1.477'. [ 250.064497][ T7850] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 250.151680][ T7850] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.161016][ T7850] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.097132][ T43] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 252.293454][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 252.293480][ T30] audit: type=1326 audit(1756072225.635:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7868 comm="syz.5.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17f78ebe9 code=0x7ffc0000 [ 252.333944][ T7869] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 252.341617][ T7869] audit: out of memory in audit_log_start [ 252.390011][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 252.412560][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.514677][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.758425][ T30] audit: type=1326 audit(1756072225.685:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7868 comm="syz.5.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe17f78d550 code=0x7ffc0000 [ 252.916203][ T43] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 253.223795][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.234182][ T30] audit: type=1326 audit(1756072225.695:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7868 comm="syz.5.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe17f78d69f code=0x7ffc0000 [ 253.332425][ T43] usb 2-1: config 0 descriptor?? [ 253.379283][ T43] hub 2-1:0.0: USB hub found [ 253.813758][ T30] audit: type=1326 audit(1756072225.785:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7868 comm="syz.5.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fe17f78d5fc code=0x7ffc0000 [ 253.872913][ T43] hub 2-1:0.0: 1 port detected [ 256.536488][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.542815][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.706865][ T30] audit: type=1326 audit(1756072225.785:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7868 comm="syz.5.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe17f78d69f code=0x7ffc0000 [ 256.739806][ T43] hub 2-1:0.0: hub_hub_status failed (err = -32) [ 256.783731][ T5938] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 257.032147][ T43] hub 2-1:0.0: config failed, can't get hub status (err -32) [ 257.124624][ T30] audit: type=1326 audit(1756072225.785:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7868 comm="syz.5.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe17f78d84a code=0x7ffc0000 [ 257.168386][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 257.238000][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 257.274661][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 257.293682][ T7885] netlink: 12 bytes leftover after parsing attributes in process `syz.8.490'. [ 257.382200][ T43] usbhid 2-1:0.0: can't add hid device: -71 [ 257.388924][ T30] audit: type=1326 audit(1756072225.785:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7868 comm="syz.5.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17f78ebe9 code=0x7ffc0000 [ 257.433762][ T43] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 257.565893][ T43] usb 2-1: USB disconnect, device number 17 [ 257.647046][ T30] audit: type=1326 audit(1756072225.785:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7868 comm="syz.5.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17f78ebe9 code=0x7ffc0000 [ 257.905373][ T7893] netlink: 48 bytes leftover after parsing attributes in process `syz.6.493'. [ 264.835645][ T7912] usb usb8: usbfs: process 7912 (syz.6.499) did not claim interface 0 before use [ 265.155587][ T7916] openvswitch: netlink: Message has 20 unknown bytes. [ 265.171152][ T7916] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 317.268175][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.287725][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.643624][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 381.650603][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7937/1:b..l P7931/1:b..l P5880/1:b..l [ 381.661076][ C0] rcu: (detected by 0, t=10502 jiffies, g=27117, q=593 ncpus=2) [ 381.668813][ C0] task:syz-executor state:R running task stack:20680 pid:5880 tgid:5880 ppid:5856 task_flags:0x400140 flags:0x00004000 [ 381.683284][ C0] Call Trace: [ 381.686581][ C0] [ 381.689517][ C0] __schedule+0x1798/0x4cc0 [ 381.694129][ C0] ? __pfx___schedule+0x10/0x10 [ 381.698970][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 381.704278][ C0] ? unwind_get_return_address+0x4d/0x90 [ 381.709924][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 381.715217][ C0] preempt_schedule_irq+0xb5/0x150 [ 381.720336][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 381.726069][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 381.731877][ C0] irqentry_exit+0x6f/0x90 [ 381.736298][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 381.742287][ C0] RIP: 0010:page_ext_lookup+0x90/0x180 [ 381.747759][ C0] Code: 74 0c 48 c7 c7 00 80 b1 99 e8 8c e4 f4 ff 48 8b 05 d5 4a 83 17 48 85 c0 74 36 4e 8d 34 f0 4c 89 f0 48 c1 e8 03 42 80 3c 28 00 <74> 08 4c 89 f7 e8 66 e4 f4 ff 4d 8b 36 4d 85 f6 74 1b 48 c1 eb 0f [ 381.767378][ C0] RSP: 0018:ffffc9000457f688 EFLAGS: 00000246 [ 381.773462][ C0] RAX: 1ffff11047ffde80 RBX: 0000000000040b59 RCX: ffff8880319eda00 [ 381.781448][ C0] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000000000000 [ 381.789429][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff822c796e [ 381.797409][ C0] R10: 000000000000000f R11: ffffffff81ac3820 R12: 0000000000040b59 [ 381.805390][ C0] R13: dffffc0000000000 R14: ffff88823ffef400 R15: 0000000000001000 [ 381.813387][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 381.819543][ C0] ? __update_page_owner_free_handle+0x2e/0x470 [ 381.825802][ C0] ? page_ext_lookup+0x4d/0x180 [ 381.830659][ C0] ? __update_page_owner_free_handle+0x2e/0x470 [ 381.836904][ C0] __update_page_owner_free_handle+0x103/0x470 [ 381.843063][ C0] ? page_ext_put+0x97/0xc0 [ 381.847570][ C0] __reset_page_owner+0x85/0x1f0 [ 381.852489][ C0] __free_frozen_pages+0xbc4/0xd30 [ 381.857603][ C0] __put_partials+0x156/0x1a0 [ 381.862294][ C0] put_cpu_partial+0x17c/0x250 [ 381.867064][ C0] ? put_cpu_partial+0x6d/0x250 [ 381.871922][ C0] __slab_free+0x2d5/0x3c0 [ 381.876345][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 381.882247][ C0] ? __phys_addr+0xd3/0x180 [ 381.886756][ C0] qlist_free_all+0x97/0x140 [ 381.891358][ C0] kasan_quarantine_reduce+0x148/0x160 [ 381.896817][ C0] __kasan_kmalloc+0x22/0xb0 [ 381.901395][ C0] __kmalloc_noprof+0x27a/0x4f0 [ 381.906233][ C0] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 381.911953][ C0] tomoyo_realpath_from_path+0xe3/0x5d0 [ 381.917513][ C0] ? tomoyo_domain+0xd9/0x130 [ 381.922218][ C0] tomoyo_path_perm+0x213/0x4b0 [ 381.927080][ C0] ? stack_depot_save_flags+0x40/0x860 [ 381.932546][ C0] ? tomoyo_path_perm+0x1e3/0x4b0 [ 381.937576][ C0] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 381.942982][ C0] ? __might_fault+0xb0/0x130 [ 381.947756][ C0] ? __might_fault+0xb0/0x130 [ 381.952416][ C0] security_inode_getattr+0x12f/0x330 [ 381.957776][ C0] vfs_fstatat+0xb1/0x170 [ 381.962109][ C0] __x64_sys_newfstatat+0x116/0x190 [ 381.967301][ C0] ? __pfx___x64_sys_newfstatat+0x10/0x10 [ 381.973045][ C0] ? rcu_is_watching+0x15/0xb0 [ 381.977819][ C0] ? do_syscall_64+0xbe/0x3b0 [ 381.982507][ C0] do_syscall_64+0xfa/0x3b0 [ 381.987018][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.993089][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 381.998745][ C0] ? clear_bhb_loop+0x60/0xb0 [ 382.003406][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.009285][ C0] RIP: 0033:0x7f458cd8d3fa [ 382.013705][ C0] RSP: 002b:00007f458d0dfce8 EFLAGS: 00000206 ORIG_RAX: 0000000000000106 [ 382.022123][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f458cd8d3fa [ 382.030096][ C0] RDX: 00007f458d0dfcf0 RSI: 00007f458ce4ede2 RDI: 0000000000000003 [ 382.038069][ C0] RBP: 00007f458d0dfcf0 R08: 0000000000000000 R09: 0000000000000000 [ 382.046040][ C0] R10: 0000000000001000 R11: 0000000000000206 R12: 0000000000000078 [ 382.054018][ C0] R13: 0000000000000000 R14: 0000000000040cda R15: 00007f458d0dfe40 [ 382.061998][ C0] [ 382.065009][ C0] task:syz.7.505 state:R running task stack:25128 pid:7931 tgid:7931 ppid:7439 task_flags:0x400040 flags:0x00004006 [ 382.078492][ C0] Call Trace: [ 382.081776][ C0] [ 382.084711][ C0] __schedule+0x1798/0x4cc0 [ 382.089230][ C0] ? __lock_acquire+0xab9/0xd20 [ 382.094110][ C0] ? __pfx___schedule+0x10/0x10 [ 382.098970][ C0] ? fib6_ifdown+0xb5/0x4c0 [ 382.103483][ C0] ? preempt_schedule+0xae/0xc0 [ 382.108323][ C0] ? __fib6_clean_all+0x23c/0x380 [ 382.113353][ C0] preempt_schedule_common+0x83/0xd0 [ 382.118631][ C0] preempt_schedule+0xae/0xc0 [ 382.123319][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 382.128695][ C0] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 382.134766][ C0] preempt_schedule_thunk+0x16/0x30 [ 382.139978][ C0] __local_bh_enable_ip+0x13e/0x1c0 [ 382.145174][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 382.150900][ C0] ? __fib6_clean_all+0x23c/0x380 [ 382.155926][ C0] __fib6_clean_all+0x23c/0x380 [ 382.160777][ C0] ? __fib6_clean_all+0x9b/0x380 [ 382.165713][ C0] ? __pfx_fib6_ifdown+0x10/0x10 [ 382.170667][ C0] ? __pfx___fib6_clean_all+0x10/0x10 [ 382.176069][ C0] ? __pfx_fib6_clean_node+0x10/0x10 [ 382.181378][ C0] ? __pfx_fib6_ifdown+0x10/0x10 [ 382.186334][ C0] ? __mutex_trylock_common+0x153/0x260 [ 382.191980][ C0] rt6_disable_ip+0x120/0x720 [ 382.196669][ C0] ? rcu_is_watching+0x15/0xb0 [ 382.201430][ C0] ? trace_contention_end+0x39/0x120 [ 382.206709][ C0] ? __pfx_rt6_disable_ip+0x10/0x10 [ 382.211917][ C0] addrconf_ifdown+0x15d/0x1880 [ 382.216762][ C0] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 382.222433][ C0] ? tls_dev_event+0x717/0xec0 [ 382.227207][ C0] ? __pfx_addrconf_ifdown+0x10/0x10 [ 382.232509][ C0] addrconf_notify+0x1bc/0x1010 [ 382.237375][ C0] notifier_call_chain+0x1b6/0x3e0 [ 382.242501][ C0] unregister_netdevice_many_notify+0x14d7/0x1ff0 [ 382.248926][ C0] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 382.255680][ C0] ? __queue_work+0xc56/0xfb0 [ 382.260362][ C0] ? queue_delayed_work_on+0x11a/0x280 [ 382.265812][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 382.271029][ C0] unregister_netdevice_queue+0x33c/0x380 [ 382.276755][ C0] ? __pfx_queue_delayed_work_on+0x10/0x10 [ 382.282563][ C0] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 382.288809][ C0] ? linkwatch_urgent_event+0x62/0x3a0 [ 382.294373][ C0] __tun_detach+0xda4/0x1560 [ 382.298968][ C0] ? __pfx_tun_chr_close+0x10/0x10 [ 382.304065][ C0] tun_chr_close+0x10a/0x1c0 [ 382.308656][ C0] __fput+0x44c/0xa70 [ 382.312642][ C0] task_work_run+0x1d4/0x260 [ 382.317224][ C0] ? __pfx_task_work_run+0x10/0x10 [ 382.322348][ C0] ? exit_to_user_mode_loop+0x40/0x110 [ 382.327816][ C0] exit_to_user_mode_loop+0xec/0x110 [ 382.333104][ C0] do_syscall_64+0x2bd/0x3b0 [ 382.337712][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 382.342918][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.348981][ C0] ? clear_bhb_loop+0x60/0xb0 [ 382.353647][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.359544][ C0] RIP: 0033:0x7f5b8c78ebe9 [ 382.363963][ C0] RSP: 002b:00007f5b8cadfb88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 382.372382][ C0] RAX: 0000000000000000 RBX: 0000000000041177 RCX: 00007f5b8c78ebe9 [ 382.380352][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 382.388312][ C0] RBP: 00007f5b8c9b7da0 R08: 0000000000000001 R09: 000000058cadfe7f [ 382.396302][ C0] R10: 0000001b33b20000 R11: 0000000000000246 R12: 00007f5b8c9b5fac [ 382.404283][ C0] R13: 00007f5b8c9b5fa0 R14: ffffffffffffffff R15: 00007f5b8cadfca0 [ 382.412268][ C0] [ 382.415277][ C0] task:syz.6.503 state:R running task stack:26888 pid:7937 tgid:7925 ppid:7438 task_flags:0x40044c flags:0x00004004 [ 382.428765][ C0] Call Trace: [ 382.432043][ C0] [ 382.434979][ C0] __schedule+0x1798/0x4cc0 [ 382.439513][ C0] ? __pfx___schedule+0x10/0x10 [ 382.444373][ C0] ? irqentry_exit+0x74/0x90 [ 382.448965][ C0] ? page_table_check_clear+0x187/0x700 [ 382.454503][ C0] ? preempt_schedule+0xae/0xc0 [ 382.459361][ C0] preempt_schedule_common+0x83/0xd0 [ 382.464654][ C0] preempt_schedule+0xae/0xc0 [ 382.469337][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 382.474714][ C0] ? __folio_rmap_sanity_checks+0x411/0x7d0 [ 382.480614][ C0] preempt_schedule_thunk+0x16/0x30 [ 382.485828][ C0] _raw_spin_unlock+0x3f/0x50 [ 382.490511][ C0] unmap_page_range+0x3a79/0x4370 [ 382.495595][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 382.500981][ C0] ? mas_find+0xb0e/0xd30 [ 382.505317][ C0] ? unmap_vmas+0x144/0x580 [ 382.509835][ C0] unmap_vmas+0x399/0x580 [ 382.514176][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 382.519056][ C0] exit_mmap+0x248/0xb50 [ 382.523341][ C0] ? uprobe_clear_state+0x20f/0x290 [ 382.528554][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 382.533317][ C0] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 382.538976][ C0] ? __pfx_exit_aio+0x10/0x10 [ 382.543668][ C0] ? uprobe_clear_state+0x274/0x290 [ 382.548882][ C0] __mmput+0x118/0x420 [ 382.552933][ C0] exit_mm+0x1da/0x2c0 [ 382.556999][ C0] ? __pfx_exit_mm+0x10/0x10 [ 382.561590][ C0] ? rcu_is_watching+0x15/0xb0 [ 382.566347][ C0] do_exit+0x648/0x2300 [ 382.570514][ C0] ? do_raw_spin_lock+0x121/0x290 [ 382.575543][ C0] ? __pfx_do_exit+0x10/0x10 [ 382.580153][ C0] do_group_exit+0x21c/0x2d0 [ 382.584745][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 382.589951][ C0] get_signal+0x1286/0x1340 [ 382.594476][ C0] arch_do_signal_or_restart+0x9a/0x750 [ 382.600030][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 382.606194][ C0] ? exit_to_user_mode_loop+0x40/0x110 [ 382.611664][ C0] exit_to_user_mode_loop+0x75/0x110 [ 382.616944][ C0] do_syscall_64+0x2bd/0x3b0 [ 382.621540][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 382.626741][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.632808][ C0] ? clear_bhb_loop+0x60/0xb0 [ 382.637489][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.643383][ C0] RIP: 0033:0x7f9398f8ebe9 [ 382.647799][ C0] RSP: 002b:00007f9399e100e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 382.656206][ C0] RAX: fffffffffffffe00 RBX: 00007f93991b6098 RCX: 00007f9398f8ebe9 [ 382.664189][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f93991b6098 [ 382.672164][ C0] RBP: 00007f93991b6090 R08: 0000000000000000 R09: 0000000000000000 [ 382.680146][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 382.688128][ C0] R13: 00007f93991b6128 R14: 00007f93992df940 R15: 00007f93992dfa28 [ 382.696124][ C0] [ 382.699159][ C0] rcu: rcu_preempt kthread starved for 1742 jiffies! g27117 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 382.710253][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 382.720224][ C0] rcu: RCU grace-period kthread stack dump: [ 382.726114][ C0] task:rcu_preempt state:R running task stack:26792 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 382.739599][ C0] Call Trace: [ 382.742882][ C0] [ 382.745816][ C0] __schedule+0x1798/0x4cc0 [ 382.750322][ C0] ? __pfx___schedule+0x10/0x10 [ 382.755173][ C0] ? schedule+0x91/0x360 [ 382.759434][ C0] schedule+0x165/0x360 [ 382.763593][ C0] schedule_timeout+0x12b/0x270 [ 382.768442][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 382.773816][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 382.779715][ C0] ? __pfx_process_timeout+0x10/0x10 [ 382.785007][ C0] ? prepare_to_swait_event+0x341/0x380 [ 382.790560][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 382.795432][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 382.801590][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 382.806867][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 382.812073][ C0] ? finish_swait+0xcd/0x1f0 [ 382.816659][ C0] rcu_gp_kthread+0x99/0x390 [ 382.821268][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 382.826469][ C0] ? __kthread_parkme+0x7b/0x200 [ 382.831409][ C0] ? __kthread_parkme+0x1a1/0x200 [ 382.836439][ C0] kthread+0x70e/0x8a0 [ 382.840514][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 382.845713][ C0] ? __pfx_kthread+0x10/0x10 [ 382.850311][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 382.855497][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 382.860728][ C0] ? __pfx_kthread+0x10/0x10 [ 382.865309][ C0] ret_from_fork+0x3f9/0x770 [ 382.869905][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 382.875030][ C0] ? __switch_to_asm+0x39/0x70 [ 382.879795][ C0] ? __switch_to_asm+0x33/0x70 [ 382.884559][ C0] ? __pfx_kthread+0x10/0x10 [ 382.889154][ C0] ret_from_fork_asm+0x1a/0x30 [ 382.893937][ C0] [ 382.896950][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 382.903269][ C0] Sending NMI from CPU 0 to CPUs 1: [ 382.908468][ C1] NMI backtrace for cpu 1 [ 382.908490][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 382.908525][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 382.908543][ C1] RIP: 0010:unwind_next_frame+0x1734/0x2390 [ 382.908570][ C1] Code: 21 c9 33 11 01 4c 89 f7 e8 89 0c 00 00 e9 f7 01 00 00 48 8b 54 24 08 48 8d 5a 02 48 83 c2 03 48 89 d8 48 c1 e8 03 0f b6 04 28 <84> c0 0f 85 19 0b 00 00 48 89 d0 48 c1 e8 03 0f b6 04 28 84 c0 0f [ 382.908583][ C1] RSP: 0018:ffffc90000a07cf8 EFLAGS: 00000a02 [ 382.908596][ C1] RAX: 0000000000000000 RBX: ffffffff90baae70 RCX: 0000000000000000 [ 382.908607][ C1] RDX: ffffffff90baae71 RSI: 0000000000000001 RDI: ffffc90000a07e28 [ 382.908617][ C1] RBP: dffffc0000000000 R08: ffffc90000a07e27 R09: 0000000000000000 [ 382.908627][ C1] R10: ffffc90000a07e18 R11: fffff52000140fc5 R12: ffffc90000a08a60 [ 382.908639][ C1] R13: ffffc90000a07e18 R14: ffffc90000a07dc8 R15: 1ffffffff21755ce [ 382.908650][ C1] FS: 0000000000000000(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 382.908662][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 382.908673][ C1] CR2: 00002000000cd030 CR3: 00000000326aa000 CR4: 00000000003526f0 [ 382.908686][ C1] Call Trace: [ 382.908692][ C1] [ 382.908702][ C1] ? unwind_next_frame+0xa5/0x2390 [ 382.908718][ C1] ? __netif_receive_skb+0xd3/0x380 [ 382.908739][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 382.908756][ C1] arch_stack_walk+0x11c/0x150 [ 382.908774][ C1] ? process_backlog+0x60e/0x14f0 [ 382.908794][ C1] stack_trace_save+0x9c/0xe0 [ 382.908809][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 382.908824][ C1] ? kasan_save_free_info+0x46/0x50 [ 382.908839][ C1] ? consume_skb+0x9e/0xf0 [ 382.908851][ C1] ? nft_synproxy_eval_v6+0x376/0x560 [ 382.908867][ C1] ? nft_synproxy_do_eval+0x3d7/0x570 [ 382.908884][ C1] ? __lock_acquire+0xab9/0xd20 [ 382.908903][ C1] kasan_save_track+0x3e/0x80 [ 382.908919][ C1] ? kasan_save_track+0x3e/0x80 [ 382.908934][ C1] ? kasan_save_free_info+0x46/0x50 [ 382.908947][ C1] ? __kasan_slab_free+0x5b/0x80 [ 382.908962][ C1] ? kmem_cache_free+0x18f/0x400 [ 382.908978][ C1] ? nft_synproxy_eval_v6+0x376/0x560 [ 382.908992][ C1] ? nft_synproxy_do_eval+0x3d7/0x570 [ 382.909007][ C1] ? nft_do_chain+0x40c/0x1920 [ 382.909021][ C1] ? nft_do_chain_inet+0x25d/0x340 [ 382.909036][ C1] ? nf_hook_slow+0xc5/0x220 [ 382.909048][ C1] ? NF_HOOK+0x206/0x3a0 [ 382.909064][ C1] ? ip6_input+0x16a/0x270 [ 382.909080][ C1] ? NF_HOOK+0x30c/0x3a0 [ 382.909095][ C1] ? __netif_receive_skb+0xd3/0x380 [ 382.909131][ C1] ? nft_synproxy_eval_v6+0x376/0x560 [ 382.909166][ C1] kasan_save_free_info+0x46/0x50 [ 382.909179][ C1] __kasan_slab_free+0x5b/0x80 [ 382.909196][ C1] kmem_cache_free+0x18f/0x400 [ 382.909215][ C1] nft_synproxy_eval_v6+0x376/0x560 [ 382.909233][ C1] ? __pfx_nft_synproxy_eval_v6+0x10/0x10 [ 382.909250][ C1] ? nf_ip_checksum+0x13c/0x510 [ 382.909267][ C1] nft_synproxy_do_eval+0x3d7/0x570 [ 382.909282][ C1] ? unwind_next_frame+0xa5/0x2390 [ 382.909300][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 382.909323][ C1] nft_do_chain+0x40c/0x1920 [ 382.909337][ C1] ? unwind_next_frame+0xa5/0x2390 [ 382.909359][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 382.909372][ C1] ? ipv6_find_hdr+0xc78/0x1050 [ 382.909408][ C1] nft_do_chain_inet+0x25d/0x340 [ 382.909423][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 382.909438][ C1] ? __lock_acquire+0xab9/0xd20 [ 382.909458][ C1] ? NF_HOOK+0x9a/0x3a0 [ 382.909475][ C1] ? NF_HOOK+0x9a/0x3a0 [ 382.909492][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 382.909508][ C1] nf_hook_slow+0xc5/0x220 [ 382.909523][ C1] NF_HOOK+0x206/0x3a0 [ 382.909540][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 382.909557][ C1] ? NF_HOOK+0x9a/0x3a0 [ 382.909573][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 382.909591][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 382.909614][ C1] ip6_input+0x16a/0x270 [ 382.909630][ C1] ? ip6_input+0x23/0x270 [ 382.909648][ C1] NF_HOOK+0x30c/0x3a0 [ 382.909664][ C1] ? skb_orphan+0xaf/0xd0 [ 382.909681][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 382.909698][ C1] ? NF_HOOK+0x9a/0x3a0 [ 382.909714][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 382.909732][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 382.909754][ C1] __netif_receive_skb+0xd3/0x380 [ 382.909772][ C1] ? process_backlog+0x2d5/0x14f0 [ 382.909791][ C1] process_backlog+0x60e/0x14f0 [ 382.909815][ C1] ? __pfx_process_backlog+0x10/0x10 [ 382.909834][ C1] ? do_raw_spin_lock+0x121/0x290 [ 382.909852][ C1] __napi_poll+0xc4/0x360 [ 382.909868][ C1] ? net_rx_action+0x46d/0xe30 [ 382.909887][ C1] net_rx_action+0x707/0xe30 [ 382.909912][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 382.909946][ C1] handle_softirqs+0x283/0x870 [ 382.909962][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 382.909978][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 382.909995][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 382.910013][ C1] __irq_exit_rcu+0xca/0x1f0 [ 382.910026][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 382.910044][ C1] irq_exit_rcu+0x9/0x30 [ 382.910056][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 382.910074][ C1] [ 382.910078][ C1] [ 382.910084][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 382.910100][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 382.910117][ C1] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 86 0e 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 382.910129][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 382.910146][ C1] RAX: 31a1f97d77793e00 RBX: ffffffff819683c8 RCX: 31a1f97d77793e00 [ 382.910158][ C1] RDX: 0000000000000001 RSI: ffffffff8d9b77c5 RDI: ffffffff8be33680 [ 382.910168][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f9b R09: 1ffff110170e65f3 [ 382.910178][ C1] R10: dffffc0000000000 R11: ffffed10170e65f4 R12: ffffffff8fa38930 [ 382.910189][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d5b40 [ 382.910201][ C1] ? do_idle+0x1e8/0x510 [ 382.910219][ C1] default_idle+0x13/0x20 [ 382.910231][ C1] default_idle_call+0x74/0xb0 [ 382.910245][ C1] do_idle+0x1e8/0x510 [ 382.910261][ C1] ? __pfx_do_idle+0x10/0x10 [ 382.910273][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 382.910297][ C1] cpu_startup_entry+0x44/0x60 [ 382.910311][ C1] start_secondary+0x101/0x110 [ 382.910329][ C1] common_startup_64+0x13e/0x147 [ 382.910354][ C1]