last executing test programs: 5.236516789s ago: executing program 4 (id=2920): r0 = socket(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x2, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0xffffffff, @local}}}, &(0x7f0000003c00)=0x90) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000040)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000080)=0x28) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6a}}}, &(0x7f00000002c0)=0x84) recvmsg$kcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000001500)=""/4075, 0xfeb}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0}, 0x48011) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x0, 0x0, 0x3745}}}}]}, 0x48}}, 0x0) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000180), &(0x7f00000001c0)=0xc) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r7, &(0x7f0000000400), 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r10, 0x0, 0xf3a, 0x0) splice(r6, 0x0, r10, 0x0, 0x80, 0x0) write(r10, &(0x7f00000005c0)="8e", 0x1) write(r8, 0x0, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) shmget(0x3, 0x2000, 0x1, &(0x7f0000581000/0x2000)=nil) write$binfmt_script(r11, &(0x7f0000000140)={'#! ', '', [], 0xa, "c425b5b2d65a57754729d042a777a6d96f42caa1a4d7e24afdeeee96411ab8183db4da73a07fbb16356994369ae77a77cba9135505b8a8257cd60d304090e396edb38b22ce906314"}, 0x4c) r12 = socket$kcm(0x29, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r12, 0x40e, 0x0) 4.275052242s ago: executing program 4 (id=2925): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@flat=@weak_handle, @flat=@weak_binder, @flat=@weak_handle={0x77682a85, 0x0, 0x0, 0xfcffffff}}, &(0x7f0000000240)={0x0, 0x18, 0x84}}, 0x1000}], 0x0, 0x0, 0x0}) 4.200391327s ago: executing program 2 (id=2926): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b00)=@updsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@loopback, 0x0, 0x33}, @in=@empty, {0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x40030000000000}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) 4.028496336s ago: executing program 4 (id=2928): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005ae4c410960501fbff050102030109021b0001000000000904d60001b5e145000ced0a5fff03030704f652872b44cbff96c127266be14d890309b7c85b8044333e97e2a49bb513da62e9bed3fa47716a381d48bf14b555a7d33464357d7dfc111fb34c49018923bf75cbcab7218adeb4a8c5c64c53f6c8db025ed0effe2f5e83f32b81334e6cb24acdbc07e229e6fd7099c27aca66035e50b32e150a2e0fe597cf23cf1061aff11f7f6125989e9f2e37a2b8ac7df06c2f4f"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000c80)={0x44, &(0x7f0000000400)=ANY=[@ANYBLOB="ebc716f2400010000000077b75ea89e87f94d14d0581125dadad60071e975679d0e74b007b98eea7f891c3ed0d4add591b8b31c5e4aa31c810f9a8ebc14f0bdd2fb1cd772641038fc08462271bc8d01a1519c18e1579fbb1c7fd9a62a49873c210c786b72234093ab40a757d9dad37eb3b4e28fe3e21e8716bdf7f3d816dd4301e78d0a2e6c5f1dc0464282acac2faf9ab98deb566001e363bcd90eed21dd9c13bb23386574cdd607dcfd460bb661f9e30138183ca"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_RMID(r1, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000000)=0xff, 0x4) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f0000000080)=0x3ff, 0x4) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000100)={0x73, 0x7ff, 0x6, 0x10, 0x2}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000180)) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r3, 0x400) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, &(0x7f0000000140)='!', 0x1, 0x0, 0x0, 0x0) accept$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x8, 0x0, {{0x2e, 0x4, 0x0, 0x0, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x34, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@dev={0xac, 0x14, 0x14, 0xb}}, {@remote}, {@dev, 0x659}, {@broadcast, 0x5}, {@multicast2, 0xffd200}]}, @timestamp_prespec={0x44, 0x3c, 0xff, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0xfd}}, {@remote}, {@multicast2}, {@private=0xa010101}, {}, {@broadcast}, {@multicast2}]}, @noop, @noop, @noop, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast2, @private=0xa010102, @multicast2]}]}}}}}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000240), 0x208e24b) 3.975258593s ago: executing program 2 (id=2930): r0 = syz_open_dev$dri(&(0x7f0000000240), 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x1, 0x98) symlinkat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1, &(0x7f0000000100)='./file0\x00') open_tree(r1, &(0x7f00000001c0)='./file0\x00', 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x40, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_STATUS={0x8}]}, 0x40}}, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000540)={0x0, 0x1, &(0x7f0000000440)=[r2], &(0x7f0000000580)=[0xf], &(0x7f0000000580), &(0x7f00000005c0)}) clock_settime(0x0, &(0x7f0000000080)={0x77359400}) 3.776646554s ago: executing program 2 (id=2932): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30002400000900030073797a300000000074000000060a010400000000000000000100000008000b40000000004c00048048000180080001006e6174003c000280080006400000000a0800074000000001080005400000000a080003400000000e080005400000000d0800014000000000080002400000000a0900010073797a30"], 0xe8}}, 0x0) 3.759500179s ago: executing program 0 (id=2933): socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000002f00)={0x0, 0x10, &(0x7f0000002ec0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000002f40)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x18, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800000039000900000f0f0000b9000001000000040000000c000180cafc089d00000073080002"], 0x78}}, 0x0) r3 = getpid() fchmod(0xffffffffffffffff, 0x169) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={r1, 0x0, 0x30}, &(0x7f0000000080)=0x18) close(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_emit_ethernet(0xfe2f, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x0, 0xf989, "fbf555f7bd7d050b03d5a10659a687"}]}}}}}}}, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) getpid() getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000280)=0x14) r5 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x0, 0x0, 0x0, 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x44, '\x00', 0x0, 0x30}, 0x90) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x9, &(0x7f0000000600)=ANY=[@ANYRES64=r5, @ANYRES64=r0, @ANYRES16=r4], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xe8) mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000a00)={'wg2\x00'}) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYRESOCT=r0, @ANYRESDEC=r3, @ANYRES16=r6], 0x30}}, 0x0) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x0, 0x3}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 3.608484387s ago: executing program 2 (id=2935): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8a00fe00000064b5080000000000007bacf0ff00000000bfa100000000000007010000f8ffffffbda400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000000800000095"], &(0x7f0000000300)='GPL\x00', 0x9, 0x0, 0x0, 0x41100}, 0x90) 3.509528793s ago: executing program 2 (id=2937): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000090a000000000000000000000000000008000a40000000000900020073797a30"], 0x50}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) r4 = dup(r2) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000100)={0x9e4, 0x7, 0x7, 0x7, 0x7f}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0xaaaaaaaaaaaab7a, 0x3e, 0x0, 0x0) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) r6 = memfd_create(&(0x7f0000002840)='\x1aj~\x97\xc1\x00\x00\x00\xff\x00\x00\x00\x7f\xef_\xd3\xdc=f.z=\x80=8\x1f\x14\xa2&\xbam\v\xa9\f\xf5\x17t\xc9\x80\xf4\xa1\xeb\x907L\x7f \xe3\x19\xcb\xbf\xfc\x00\x00\x00\x00\x15\x00\x00\x00\x00\x00\x00\x00\x00h}\x00\x135V\xd9\xe0\xb0\x17\x01g\xff?\xc8\xfb3\x93\xbc\xcf\xf2\x95\xbeYd,\xb3\x17\xb0L\xe841(\"\xc2K\x11\x81\xef.m\xf7@\xb1\xf9\xee\xce\\\xd9\x03\nHNzF``\xa0\xc4}P\xb3\b\x0e\xcd\x86\'qb\x9a\xce\"\xfb\xd6\x91\'\x9b~\xcd\xfd\xaa\n\xea\x8dC\x9aQ\n\xce\"\x9cN\xed0\xf0\xc2x\x93h\xe8\\\x18\xd26\xe7\x8d4\x06\xf0\xe3M\xe5\x91\x0f\x85\x97gla\x06\xe1\xba\x1a\x1d \n\fr\xae\x12M\xcb6\xe0\x15\xd5d\x16\xc3\xdf\xa2\x04wB\xd0\x18\xa4\x17|\vH\xf5\xb0\xb5\xc7\x9f`Fz\xa3x\x99\xe17\xd2vAW\xe5\x18)9\xba\xa68A\xf8y\xe6\xac\xda\xc7u\xa9\x00{:\x01\xee,\a:\x06\xad{\x80\xfd\xc7\"\x95\x0f\xe3\x86\x19\xc3\xd2\xf7\x18\xf8\xed\x8b\"\xd8\x8f\xde`\xb0D\xfd\x84\xa3\xd7\xf3R\x8d\x88\xdaJ\xb0\xf8^\xd4>\xc7e\xab\x8f+\xda\x9b\xae\xf2\xca\xb9\xde\xb5\x8f\xdb\xba}\x7f\xf8\xe5i,m\b\xf0\xc7\xe9R\x9cY$\xcb\x00/!Z\xeb\x9bE\xf2\xb9\xcc\xf0\x9c\x02\xfc\x9c\x91q\xba|\x80n\x1f\xffG\xc3\x13\xe7v\xa7\x95md\x0f\xa5\x06\v^n\x84d5o\x02\xb3.\x8dc\x18\xe0\xc2\x9b\xe1D\x0fB] \xdfJGr\xdbc,\xef82%\x97\xe4;u\xa9\xe5\xef*n\xf613\x17\x80[\x90]\xef\xc1\x8e\rD\xd2\xe0\x8c\xf2\x00\x00\x00\x00\x00\x00\x00Gs\xab\x1e\xa13\x93\x8d\x04U\xf5\xb8Th9s3\xc9\xbf\xe5My$\x99.\xf0\xd5\xc8\xb1\xfc4\xe7\x83z\x11a\xb7\xebY\x1d\xcd\x81N\xed\xbd\xa5\xce\xa0f\xe5q2\xbc#w\xe4_\x8a-\xad\xc2/_\xe6\nE\xeb\x9c\x96\xf4`\xa2\x06\xe0^\xfb\x99\xbb}\xfb\x052_\x83*B\xf1\xf0\x95\xd2K\xd6\xe5\xb1\x1a\x02,\xbe\xf5\xd0\xd4\xa1A\xf3!\n\xc6b\xeb\x92\xea\xd8\xe1$\xbbUO\x1fS\x02\x9e\xa7|i:\xb1\xf60\xf6M\xe6,\x81=F\xa1\xca\x06\x0e\x14\x89/\xa7\"\x17-h9\x176\x9d\x04\x1el\xdcp\x89\x1b \x93f\x9a\x10\xd9\xa2Y\b\xfalA\xe1\x1bI\xb9\xf8\xa0\xb0\xc2\x04\xedO\n\vj&\xb5\x04\xc3{Yt\xf4rS^\x0e$\xe9\x05\xcd\x9b\x84\x14`\xed\x9e\xbbh\x81h\xf2\xe7\xe2DO\x1a\xe9\xc1\x1cu\xa5\xbd\x90\xbb\x03\xd5\x00\xf2\x83T\xe4\x0eF\x7f\x85\xb5\xe9CJ0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x33, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) 2.831437928s ago: executing program 0 (id=2942): socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, 0x0, 0x0, 0x0) socket(0x2, 0x3, 0xff) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0x9, {"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", 0x1000}}, 0x1006) syz_open_procfs(0x0, &(0x7f00000000c0)='timerslack_ns\x00') socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="7dbf230d007fff002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a0001"], 0x64}}, 0x0) 2.408143995s ago: executing program 0 (id=2943): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ppoll(&(0x7f0000000000)=[{r0, 0x4402}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCCBRK(r0, 0x5428) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001e20000000000000bf91000000000000b7020000000000008500000004000000b7000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000300)=ANY=[]) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x24f9, &(0x7f0000002ec0), &(0x7f00000000c0), &(0x7f0000000140)=0x0) r6 = memfd_secret(0x0) ftruncate(r6, 0x3) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r7, 0x0, 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000001aa80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0xe, 0x2, 0x1, 0x0, 'syzkaller\x00'}, @NFTA_LOG_FLAGS={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x302, 0x0, 0x0, {0x2, 0x0, 0x5}}, @NFT_MSG_NEWSETELEM={0x31cc, 0xc, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0xfa4, 0x3, 0x0, 0x1, [{0xfa0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_USERDATA={0xf84, 0x6, 0x1, 0x0, "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"}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x220c, 0x3, 0x0, 0x1, [{0x2208, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x115c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9e, 0x1, "acc92b4762b0bba3d8aeb2851216b8336b0dbdb43c232d29c6b87f16c6b3c61e7a77e2d3a07ba9552d899d9649fdd1d7ea281688eb0b82639a00837f1345fb07eaa52fda2e28fed5ee0b85d1996a8d4c8d03be2f4923ffbbb825bd63d44ae83ae1a7a678b50709e3815435caf94a9e814b44963b3709d2634538adaad7c705a4ee80092f85ad7e24b450fc0525e717ed931aa439e32a5d232aac"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x6d, 0x1, "e0e590a56a6ba6dd9502139cb4f07dabc2879a41354334d0700a4e95edc43bfe2055b14ee6560efbe2c8827ac8a459edca6f3ddcda038fca0fc222330176ef27d162c9a7f7988f40eb9c2f1b9a47d8da2713efba6afc571fbf9dd01a197b1ab391475595b9f0754453"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_DATA={0x10a8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x64f80000}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2e}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8ac}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x66, 0x1, "85af46d96105c76f6bccd064c1c25854ade446f22546a6e7e030d22d50be7bf5f2b570410734cb6e05c8f4642b9a353d21b31b0b8c2a4895c03bdc1ea5cecb644822965cf86e3e30f3cfaf2283f5e155208a91357c4421fe315affd7acb09f291572"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x10001}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xe, 0x1, "a683e8eebb5bd4de65e3"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xc79aa96e16301265}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xf06, 0x1, "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"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x32d8}}, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2000002, 0x11, r6, 0x0) syz_io_uring_submit(r9, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x4a, 0x0, 0xffffffffffffff9c, 0x0, 0x0}) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000480)="42fce9a6f4", 0x5}, {0x0}], 0x2) 2.378238017s ago: executing program 2 (id=2944): socket$kcm(0x10, 0x2, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020"], 0xfe33) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000f80)={0x44, &(0x7f0000000b00)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000000f80)={0x44, &(0x7f0000000b00)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) (async) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) write$P9_RXATTRWALK(r2, &(0x7f00000008c0)={0xf, 0x1f, 0x1, 0xa}, 0xf) (async) write$P9_RXATTRWALK(r2, &(0x7f00000008c0)={0xf, 0x1f, 0x1, 0xa}, 0xf) syz_usb_control_io(r3, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r3, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) (async) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f00000012c0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r3, 0x0, &(0x7f00000012c0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000001240)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "4f03f5cd"}, 0x0, 0x0, 0x0, 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000b8000000000000003c03000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000002000000000000005b0000008500000081000000bf91000000000000b7020000020000008500000084000000b7000000000000009500"/120], &(0x7f0000000000)='syzkaller\x00', 0x8, 0xb0, &(0x7f0000000140)=""/176, 0x40f00, 0x9, '\x00', 0x0, 0xc, r2, 0x8, &(0x7f0000000200)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x5, 0x1000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280), 0x10, 0x8001}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r4, 0x0, 0x4c, 0x82, &(0x7f0000000380)="52d856cfc7fd273ec8f883f09b8c49ad2fcbf049d379d126ddcf4467ac48d8e32a0fb3b369e37377aafe16870b2a85e903b39373a212fe0edde49a6fdb4d63fa3b99e4602bfcbc5f80941805", &(0x7f0000000400)=""/130, 0x9, 0x0, 0xed, 0x8d, &(0x7f00000004c0)="cdda005f6e131b8fcd076a78920724e30aac1641310586bd21c8fdfcde81fe9a80c79b894e87b7521f867080631948b317fbd4035503b10b24bb08467535d8b6c88f1f30f1c142394f989bd48f5a1b4720632f36f49981b1e7316145deaeb7e4b5514848d99be8d19078dd3212e80dce5e5b4935e55c1ab63b14fb9726c80883c9a59957d899760249c60ea4237d4d666b990933e340bf58355dab6f5031dfbd41496d2b4c048d45060c66781995fa1ee05fe44ad83c0666b21338612dc4da15307bbdf9ccd63e5cf365c089610d759197969bf167742c6223bf3bf149a28e310ad0ee2fe4b9a8fabdfc066a15", &(0x7f00000005c0)="c1e59b6f16c9443472f5f179846a1e60dc0bf863c1695d9e9b96f6cd2edaac7b8d0203667b0edc419ccdcb4aa948a722ac326f3c9abd18f858a32bb554864fe1e063e5f815a6b3aa5ccca2c944bb33cd7ad9a8cc446e2c9cdb7af1e9f0666a893c805b3fdc00763726d5574b9c1646dbf8e4c283dd323e672292a0a6677ca9b43831dbd5a90774d7cee54f46eb", 0x3, 0x0, 0xffffffff}, 0x50) syz_usb_connect$cdc_ncm(0x4, 0x7f, &(0x7f0000000dc0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d, 0x2, 0x1, 0xb, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "6466ae8221"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x8, 0x5, 0x7}, {0x6, 0x24, 0x1a, 0xfd, 0x1a}, [@mdlm_detail={0x0, 0x24, 0x13, 0x7f, "6c3285c7ca20f2e23004f1da9799e1370c068c8aaffc003fa71bdd9e5754eca073e456d616b422b38c550924bbe6d10959f480f36ca3b0061d820f0057886a258cbba25e206de41922d2bd"}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x9, 0x5, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0xa, 0xff, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x8, 0x5, 0x3}}}}}}}]}}, &(0x7f0000000d40)={0xa, &(0x7f0000000940)={0xa, 0x6, 0x200, 0xfb, 0x0, 0x6, 0x10, 0x79}, 0xc4, &(0x7f0000000980)={0x5, 0xf, 0xc4, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x67, 0x40, 0xc0, 0x6, 0x80}, @ptm_cap={0x3}, @generic={0x9d, 0x10, 0x1, "b721648c16117386734c8ac1da858b583bf0a9d25088c8cd0d11d47e4b1d4a73c9c2e93bb659b247c545aa0f8882f23041e413f24280a3523020ca707959a779022c0c215ee6e3867921da8676215a991cec8236d0bd718c842c3444c3a0dc0375ed8e6dad14eb5c153181f8d1a52bd8dd5b35598e6f3900a0b18c1fd698f5a8fe83f163e9104d0caf70842fe35df3f08ada0a5e147dfcb37d0f"}, @ss_container_id={0x14, 0x10, 0x4, 0xfb, "9ec536b6d4e135c1c325af4ec6863119"}]}, 0x5, [{0xf1, &(0x7f0000000b40)=@string={0xf1, 0x3, "ff386220ea68a7f8cf0d8c5b470c8ddc068bb2bb8a7aa5032acc44fb3e21440b9e533250392a4ea7bd9ff17b89258794eac579ccc8c55a923b903e7123240265e9a9e65d6ea590c1310390e1a465ee17f648b222e57972871bfb7ec66ba3849524ef71ec61735cb6e248c26ce04183e6d0a48c8edab3bb9513e31eb4a6bbb05d71ca0a921d761b4f92acb0a3063906bb9d19c7d82808090a7551bbb8cb4210dbf7a5d2854f63aa0f09fe9a8c5ea3d77a8461995028068a86960fcf56c48ac65cdb3a0b5a095e51d2e97f97f250ccd7d0f3424508e2a44a6cf30f854eff4da9466c6b0eaa58beab17ab664f95ff0682"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x412}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x81d}}, {0x1c, &(0x7f0000000c40)=@string={0xb5, 0x3, "2ae2e629304660b0777ae9bb8052bb16912f858c6701d497073b7c6e95aeafe9b535c4dfcd95569c3624b0ea7e356c05bd40b07b54950032ad34e6e908ebf25964f9d0302cc8cd0501cf91a1eaca528d395a73af4432b6aaf855e6608eb618813a6d939b7aff517ed2c6b191e582b974d714f87aaa8a089590335614394bcfe706080f1283b98f18ece508e170a65f2b55636589f90ceec44c479aa1dafa303aac3d3cb4db7bbf2a6e0267cd2b52b55d65b87f"}}, {0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0x1007}}]}) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x2, 0x9, 0x10, 0x0, 0x21, 0x0, 0x70bd25, 0x25dfdbfc, [@sadb_x_policy={0x8, 0x12, 0x1, 0x0, 0x0, 0x0, 0x2, {0x6, 0x3c, 0x9, 0xfc, 0x0, 0x9ec, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@empty}}, @sadb_sa={0x2, 0x1, 0x4d5, 0xfb, 0x6, 0x78, 0x0, 0x60000001}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e23}, @sadb_x_nat_t_type={0x1, 0x14, 0x2}, @sadb_x_filter={0x5, 0x1a, @in6=@mcast1, @in6=@dev={0xfe, 0x80, '\x00', 0x14}, 0xb, 0x30, 0x10}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, '\x00', 0x2e}}, @in6={0xa, 0x4e22, 0x0, @mcast2, 0x9}}, @sadb_x_sec_ctx={0x4, 0x18, 0xb5, 0x4, 0x11, "0eb1a2e62b87eed15ea758189a8fb8ba18"}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x4d4}]}, 0x108}}, 0x80) socket$qrtr(0x2a, 0x2, 0x0) 1.937359753s ago: executing program 3 (id=2947): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x438, 0x0, 0x168, 0x0, 0x268, 0xa, 0x368, 0x250, 0x250, 0x368, 0x250, 0x3, 0x0, {[{{@uncond, 0x0, 0x228, 0x268, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'caif0\x00', {0x0, 0x7ff, 0x0, 0x0, 0x0, 0x6, 0x1000}}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {0x0, 0x1000000}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) 1.874129893s ago: executing program 3 (id=2948): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000540)={'wg1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000009000128009000100766c616e00000000800002800600010000000000280003800c00390000000000000000000c000100268b0000020000000c00010000000000010000004c0004800c00010009000000000800000c00010003000000f60d00000c00010002000000d60900000c00010006000000070000000c00010000000080050000000c000100070000000000000008000500", @ANYRES32=r2], 0xc0}, 0x1, 0xba01}, 0x0) 1.842819632s ago: executing program 3 (id=2949): r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_DBG_S_REGISTER(r0, 0x4038564f, &(0x7f0000000040)={{0x3, @name="f51b186b9343f102dae7a9ce2609fe9914265cbc13aaccb4a74d5367b528a6a8"}, 0x8, 0x1000, 0xffffffff}) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000080)={0xdae, 0x0, '\x00', {0x0, @reserved}}) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000140)=0x3, 0xd, 0x4) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0xa000, 0x0) recvmmsg(r1, &(0x7f00000039c0)=[{{&(0x7f00000001c0)=@alg, 0x80, &(0x7f0000001400)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/100, 0x64}, {&(0x7f00000012c0)=""/134, 0x86}, {&(0x7f0000001380)=""/79, 0x4f}], 0x4, &(0x7f0000001440)=""/166, 0xa6}, 0x5}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000001500)=""/63, 0x3f}, {&(0x7f0000001540)=""/62, 0x3e}, {&(0x7f0000001580)=""/18, 0x12}, {&(0x7f00000015c0)=""/131, 0x83}, {&(0x7f0000001680)=""/4096, 0x1000}], 0x5, &(0x7f0000002700)=""/138, 0x8a}, 0x9}, {{0x0, 0x0, &(0x7f0000003980)=[{&(0x7f00000027c0)=""/217, 0xd9}, {&(0x7f00000028c0)=""/86, 0x56}, {&(0x7f0000002940)=""/19, 0x13}, {&(0x7f0000002980)=""/4096, 0x1000}], 0x4}, 0x7fff}], 0x3, 0x21, &(0x7f0000003a80)={0x0, 0x3938700}) r2 = userfaultfd(0x81800) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000003ac0)) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000003c00)={&(0x7f0000003b00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003bc0)={&(0x7f0000003b40)={0x64, 0x0, 0x2, 0x3, 0x0, 0x0, {0x1, 0x0, 0x1}, [@CTA_EXPECT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x9b}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x881) ioctl$VIDIOC_S_MODULATOR(r0, 0x40445637, &(0x7f0000003c40)={0x59abe4cb, "3b3e52a052f32e5e933cf661150c81a14c85677f3327f6f29e0be93663c3ca12", 0x2, 0x0, 0x5, 0x8, 0x1791f543974c518}) r3 = inotify_init1(0x80800) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000003cc0)={{0x1, 0x1, 0x18, r3, {0x7fff}}, './file0\x00'}) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r4, 0x4068aea3, &(0x7f0000003d00)) r5 = add_key(&(0x7f0000003d80)='pkcs7_test\x00', &(0x7f0000003dc0)={'syz', 0x3}, &(0x7f0000003e00)="c3a4e6f16ab0668e9536eb835ce9786751c922a1910ae84e73cff59c77a575cd9eca07652d5720b2b102957217ec8b30c12c65a57452497520d1e3e6935a980038060806756b655f841d16866920c69382d029fe4c74617d5dcb109e5dbc51dff112ca6a02020c6395744307d59ee95e9d3c54d3ee318344ea99c5f75e76c00d2078411835c05b5a687ab097ae94422334bf39b86b8f364a6a8454b545ea3bd77bb983b14a9422ad3741cb84384bff220aedcb4d50ac3bafa42ec35db97228d7099476c9ac329c9ff490ea2aa17d1c3a5752f0a3eafe315d34f0aa58bc7f53745e04768ea02caa2fd11c73403a2810143a3b105f1f424273", 0xf8, 0xfffffffffffffff8) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000003f40)={&(0x7f0000003f00)=[0x0, 0x0], 0x2, 0x40000, 0x0, 0xffffffffffffffff}) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0xd6) creat(&(0x7f0000003f80)='./file0\x00', 0xc0) r7 = syz_io_uring_complete(0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r7, 0xc4c03d09, &(0x7f0000003fc0)) syz_pidfd_open(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r4, 0xc080661a, &(0x7f0000004480)={@id={0x2, 0x0, @d}}) pipe2(&(0x7f0000004500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) ioctl$EXT4_IOC_MIGRATE(r8, 0x6609) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r9, 0x84, 0x1e, &(0x7f0000004540)=0x80000001, 0x4) r10 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r4, &(0x7f0000004580)={0x50000010}) setsockopt$MRT_PIM(r7, 0x0, 0xcf, &(0x7f00000045c0)=0x1, 0x4) r11 = accept$inet(r1, 0x0, &(0x7f0000004600)) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r11, 0x84, 0x76, &(0x7f0000004700)={0x0, 0xfffffffa}, 0x8) 1.756544255s ago: executing program 3 (id=2950): landlock_create_ruleset(&(0x7f0000000bc0)={0x0, 0x1}, 0x10, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102393, 0x18ff9}], 0x1, 0x0, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000600)={r4, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r5, r6], [0x2b8]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) r7 = io_uring_setup(0x30d3, &(0x7f0000001200)) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000}, 0x1c) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000300)={@cgroup, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd6e, 0x0, 0x0, 0x0, 0x0}, 0x40) r9 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f0000000180)={0x2, 0x2, 0x2}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000200)=0x2) close_range(r7, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000d00000007a0a00ff00e5ffff26f1000000000000950000000000109233215c0018100000", @ANYRES32, @ANYBLOB="00000000ff00000005000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) 1.702175183s ago: executing program 3 (id=2951): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1.635538318s ago: executing program 3 (id=2952): syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000004c0)={0x0, 0x465f}, 0x8) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000001080)={{0x12, 0x1, 0x0, 0xff, 0x0, 0x0, 0x40, 0x572, 0xcb01, 0x2665, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xaa, 0x75, 0xb7}}]}}]}}, 0x0) syz_usb_control_io(r1, &(0x7f0000000a80)={0x2c, 0x0, &(0x7f0000000980)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000380)={0x14, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x79, &(0x7f0000000280)=ANY=[], 0x8) bind$pptp(0xffffffffffffffff, 0x0, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) fsetxattr$trusted_overlay_origin(r3, &(0x7f0000000100), &(0x7f00000001c0), 0x2, 0x2) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000140)=':-.\x00', &(0x7f0000000180)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="240003"], 0x10e0}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 1.513106533s ago: executing program 0 (id=2954): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000090a000000000000000000000000000008000a40000000000900020073797a30"], 0x50}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) r4 = dup(r2) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000100)={0x9e4, 0x7, 0x7, 0x7, 0x7f}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0xaaaaaaaaaaaab7a, 0x3e, 0x0, 0x0) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) r6 = memfd_create(&(0x7f0000002840)='\x1aj~\x97\xc1\x00\x00\x00\xff\x00\x00\x00\x7f\xef_\xd3\xdc=f.z=\x80=8\x1f\x14\xa2&\xbam\v\xa9\f\xf5\x17t\xc9\x80\xf4\xa1\xeb\x907L\x7f \xe3\x19\xcb\xbf\xfc\x00\x00\x00\x00\x15\x00\x00\x00\x00\x00\x00\x00\x00h}\x00\x135V\xd9\xe0\xb0\x17\x01g\xff?\xc8\xfb3\x93\xbc\xcf\xf2\x95\xbeYd,\xb3\x17\xb0L\xe841(\"\xc2K\x11\x81\xef.m\xf7@\xb1\xf9\xee\xce\\\xd9\x03\nHNzF``\xa0\xc4}P\xb3\b\x0e\xcd\x86\'qb\x9a\xce\"\xfb\xd6\x91\'\x9b~\xcd\xfd\xaa\n\xea\x8dC\x9aQ\n\xce\"\x9cN\xed0\xf0\xc2x\x93h\xe8\\\x18\xd26\xe7\x8d4\x06\xf0\xe3M\xe5\x91\x0f\x85\x97gla\x06\xe1\xba\x1a\x1d \n\fr\xae\x12M\xcb6\xe0\x15\xd5d\x16\xc3\xdf\xa2\x04wB\xd0\x18\xa4\x17|\vH\xf5\xb0\xb5\xc7\x9f`Fz\xa3x\x99\xe17\xd2vAW\xe5\x18)9\xba\xa68A\xf8y\xe6\xac\xda\xc7u\xa9\x00{:\x01\xee,\a:\x06\xad{\x80\xfd\xc7\"\x95\x0f\xe3\x86\x19\xc3\xd2\xf7\x18\xf8\xed\x8b\"\xd8\x8f\xde`\xb0D\xfd\x84\xa3\xd7\xf3R\x8d\x88\xdaJ\xb0\xf8^\xd4>\xc7e\xab\x8f+\xda\x9b\xae\xf2\xca\xb9\xde\xb5\x8f\xdb\xba}\x7f\xf8\xe5i,m\b\xf0\xc7\xe9R\x9cY$\xcb\x00/!Z\xeb\x9bE\xf2\xb9\xcc\xf0\x9c\x02\xfc\x9c\x91q\xba|\x80n\x1f\xffG\xc3\x13\xe7v\xa7\x95md\x0f\xa5\x06\v^n\x84d5o\x02\xb3.\x8dc\x18\xe0\xc2\x9b\xe1D\x0fB] \xdfJGr\xdbc,\xef82%\x97\xe4;u\xa9\xe5\xef*n\xf613\x17\x80[\x90]\xef\xc1\x8e\rD\xd2\xe0\x8c\xf2\x00\x00\x00\x00\x00\x00\x00Gs\xab\x1e\xa13\x93\x8d\x04U\xf5\xb8Th9s3\xc9\xbf\xe5My$\x99.\xf0\xd5\xc8\xb1\xfc4\xe7\x83z\x11a\xb7\xebY\x1d\xcd\x81N\xed\xbd\xa5\xce\xa0f\xe5q2\xbc#w\xe4_\x8a-\xad\xc2/_\xe6\nE\xeb\x9c\x96\xf4`\xa2\x06\xe0^\xfb\x99\xbb}\xfb\x052_\x83*B\xf1\xf0\x95\xd2K\xd6\xe5\xb1\x1a\x02,\xbe\xf5\xd0\xd4\xa1A\xf3!\n\xc6b\xeb\x92\xea\xd8\xe1$\xbbUO\x1fS\x02\x9e\xa7|i:\xb1\xf60\xf6M\xe6,\x81=F\xa1\xca\x06\x0e\x14\x89/\xa7\"\x17-h9\x176\x9d\x04\x1el\xdcp\x89\x1b \x93f\x9a\x10\xd9\xa2Y\b\xfalA\xe1\x1bI\xb9\xf8\xa0\xb0\xc2\x04\xedO\n\vj&\xb5\x04\xc3{Yt\xf4rS^\x0e$\xe9\x05\xcd\x9b\x84\x14`\xed\x9e\xbbh\x81h\xf2\xe7\xe2DO\x1a\xe9\xc1\x1cu\xa5\xbd\x90\xbb\x03\xd5\x00\xf2\x83T\xe4\x0eF\x7f\x85\xb5\xe9CJ0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x33, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) 1.339372197s ago: executing program 1 (id=2955): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000400)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) (fail_nth: 5) 884.735497ms ago: executing program 1 (id=2956): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x30, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 783.89308ms ago: executing program 4 (id=2957): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180), 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x3, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0x3]}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick=0x4, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote={{0x0, 0x81}}}, {0x0, 0x0, 0x8, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect={{}, {0x2, 0xfc}}}], 0xc4) syz_io_uring_setup(0x7dce, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x3, 0xa8}, &(0x7f0000000140), &(0x7f0000000040)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000007c0), &(0x7f0000000780)=0x0, &(0x7f0000000080)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) syz_io_uring_setup(0x279, &(0x7f00000003c0)={0x0, 0xee32, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) syz_emit_vhci(0x0, 0xa) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = semget$private(0x0, 0x4000000009, 0x0) semop(r4, &(0x7f0000000040), 0x0) semop(r4, &(0x7f0000000200), 0x53) semop(0x0, &(0x7f0000000380)=[{0x0, 0x7d12}], 0x1) semtimedop(0x0, &(0x7f0000000180)=[{0x0, 0xfff}], 0x1, 0x0) semtimedop(0x0, &(0x7f0000000080)=[{0x3, 0x4, 0x1000}, {0x1, 0xd}, {0x0, 0xe370}, {0x3, 0xa, 0x1800}, {0x4, 0x0, 0x1000}], 0x5, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x0, 0xc63e}, {}], 0x2) semctl$GETZCNT(0x0, 0x5, 0xf, 0x0) r5 = semget(0x2, 0x0, 0x100) semctl$GETZCNT(0x0, 0x0, 0xf, 0x0) r6 = semget(0x1, 0x0, 0x208) semtimedop(r6, &(0x7f0000000140)=[{0x0, 0x1, 0x1000}, {}, {0x3, 0xfffd}, {0x0, 0x9}], 0x4, &(0x7f0000000300)) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semop(r5, &(0x7f0000000100), 0x46) semctl$IPC_INFO(0x0, 0x0, 0x3, 0x0) semget$private(0x0, 0x3, 0x0) 703.373061ms ago: executing program 1 (id=2958): openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa04000000ffff8100000086dd604f3bf500303a00200100000000000000000001ff892a02ff05"], 0x0) io_setup(0x5fd, 0x0) 461.458246ms ago: executing program 1 (id=2959): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000540)={'wg1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000009000128009000100766c616e00000000800002800600010000000000280003800c00390000000000000000000c000100268b0000020000000c00010000000000010000004c0004800c00010009000000000800000c00010003000000f60d00000c00010002000000d60900000c00010006000000070000000c00010000000080050000000c000100070000000000000008000500", @ANYRES32=r2], 0xc0}, 0x1, 0xba01}, 0x0) 337.84443ms ago: executing program 1 (id=2960): set_mempolicy(0x6, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x8, 0x4, 0x0, 0x0}, 0x90) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1d02010100aaaaaaaaaa001110a1ed94495df99cf6e78831ca231f262700"], 0x20) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x800454cf, 0xa9dd47192d7f0000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfd, 0x4000000}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0x1, &(0x7f0000000040)) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x1, 0x8}, {}, 0x0, 0x0, 0x1, 0x1}, {{@in=@private=0xa010101, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x18}, 0x200, 0x3, 0x0, 0x7, 0x0, 0x0, 0x80}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x4000805) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev={0xac, 0x14, 0x14, 0x40}, @in6=@local, 0x0, 0x0, 0x0, 0x8, 0xa, 0x0, 0x0, 0x6c}, {0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8000000000000}, {0x0, 0x1}, 0x7, 0x6e6bb2, 0x1}, {{@in6=@local, 0x4d3, 0x33}, 0xa, @in=@dev, 0x0, 0x3}}, 0xe8) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000640)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) 333.652592ms ago: executing program 4 (id=2961): bind$alg(0xffffffffffffffff, &(0x7f00000003c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f000001be80)={0x0, 0x0, &(0x7f000001be40)={&(0x7f0000009100)=@newtaction={0x4e50, 0x30, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [{0x1b14, 0x1, [@m_ipt={0xc8, 0x17, 0x0, 0x0, {{0x8}, {0x84, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0xf6}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffff0}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x23bf}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0x1e, 0x6, "2df8324e04198d487cda86d43fffa88ab27a5be77970dd19b864"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ipt={0xa4, 0x15, 0x0, 0x0, {{0x8}, {0x4}, {0x79, 0x6, "a5924625b6577d8fa8458a416ffa8553e23d3d0f110466f2351454f9909bc23b6687c0ed9ec687bdbdf16197918c05d701714c9c17b8ef81e8816ac6e36a88523014f661f70fe88aa70e65637141715a85dbdd3f88cb92540dd3e456ee4f518a283f98624ed64fd96503b20b56381f0d3a883678c4"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ipt={0x64, 0x20, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0x2a, 0x6, "4ff921ad85114030bd462a95f05488e116dbd990ac95839e27cea6aea81833b9de807ca8a8b3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ipt={0x58, 0x16, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0x28, 0x6, "70824c824474900ccc462767ffd779a4337daf45ae090b225f64b5da454b45f3ebe6acca"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ipt={0x21c, 0x15, 0x0, 0x0, {{0x8}, {0x10c, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x107, 0x6, {0x4, 'security\x00', 0xff, 0xa804, "50baa2322ef3f5a80aee333fc193edf21d06763adc88283c6683bace67487c7d826a9c003849d290cfb585d5fb9addab5ad0611d41914c91e7b85758f7818a4dadbe4c3bf3166c747a6bff42c8b1892b8004e26a3a7806e4ecc52ef66712ff1cfe506dfbe9a31b231346048e6940f830956ceba193b3f4a4255b058f1f2ea1be8a00aee0d19dc2242271c2fab76f01bbef9737fb9f539826df98c360e15b94ec9853b06d786cccd03ea8a18008cae8668c2920b900862bc894b5484a7c4b77fd46b54c5772b0c4fe5696f617e898655cc7eec733504773eafc86733c66"}}]}, {0xea, 0x6, "0bd33e5c0913dea7318d1fd5e8b88a8868699c8c4bd8ca9c2558392ed51334c1357d30ef6894bd004ede2f0d64b1032a3edb8050185496b102054778f8e4b6c2a71a7c49396811bcb79a06a5c202fe4e0f98abf5d268902b34baebe6e207dae1daac1ee252f837d0ce7c718783ca94a743e5e53815bf6efe30f9cb503c6e4d62b3852dc4f2688ca40184e8b188611e34e1fc1b93d4212ac321cfe7a6ec6c4adda57806ca7455263da53fe2ee4746d875c1f24a05394d9b8a6304845a1766ddaa476ccbe0be193f088a0fb882de9406034d30ae654424e13173f0cf0eb8c612d2439059d5f186"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4}}}}, @m_ipt={0x154, 0x1e, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0xdd8}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}]}, {0xd9, 0x6, "be85bcef091b5f7ab42063dcb92bd4c5e6703bb01bfea1f985921c694b10bbfc69e8e1673fcdea220ece0f3b2d51ffdba125fbff42aba4e02ddef22228dd01e38e611eb27e8c836890e19449da6fdc8eadabcc2c29b6f9889decefd46b558102ec2317d2c7764bd58af0ebb17ec1d0d5217f06524e889a680671cbd118aa1dc5a1cc2ab70709aedb2a365fbe22cc4da8c8f2eda13b833aeee1366cb6047c154d138e84893c81a156b12c58900eb5805108a60d09efd97ea91f7144f56ad28d2229a3853bf95a5ac6c7e7b6b5db81a69f736c18fb80"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x190, 0x13, 0x0, 0x0, {{0x8}, {0x124, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x7}, @TCA_IPT_TARG={0x96, 0x6, {0x0, 'mangle\x00', 0x4, 0x4, "6f8fa3dd88771de775b1fbc416b4f6f54c2a184f0bf83069c1fbe4b7cd340d49ca6a3dfbf37a263bc890f3c5b34db9e5c0d0fcdd986f2b6dddb930de2de037641d3d082801068308349c10b67d38f2ef073925198f7d87702725c8554dd7a901b2669e39a9d6527f8cb20dbe"}}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x80}, @TCA_IPT_INDEX={0x8, 0x3, 0xcdd}, @TCA_IPT_TARG={0x43, 0x6, {0xf82c, 'filter\x00', 0x5, 0xac00, "179496aef2114972a84338ff3ecdb22a0a01be4bdf555b6042"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}]}, {0x47, 0x6, "4318f21439c9da4c62ade881be1f2556621c607eff40fe220e90c943262742c47ac82ca788ca222105ed23ba488e6c24e57b7b58c1fa6d62bf79dada6f71a935cd2411"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x1}}}}, @m_ipt={0xec, 0x1a, 0x0, 0x0, {{0x8}, {0xa8, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_TARG={0x92, 0x6, {0xa, 'raw\x00', 0x1, 0x5, "74f92d0488f3d48f7c3b8c64b39e3f3199424a7c691c92f32294e84ac8f065a4266458c76bc39bdad6f776666a5eb1a636435f6f44c78f6f0cc9707b01dd43a61e067615d0710b1cc33559377b1cc8517b561f62369e8cd5f658aa863eccf796e37c47d87ca5de1c"}}]}, {0x1d, 0x6, "f7e499c91f6dcad78fcdb4b58e8ec80efed40c3bd1c2f5abd0"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ipt={0x1254, 0x17, 0x0, 0x0, {{0x8}, {0x112c, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TARG={0x6e, 0x6, {0x400, 'mangle\x00', 0x40, 0x8, "705b3c1e8899d3d206237e6993d5592364119001e6e51de560f193979693ec1792736f49d5e0a950de35a90676cef231cf82f661c82c449204e5e7fb303c3919708c92bf"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TARG={0x102a, 0x6, {0x5, 'nat\x00', 0x9, 0x9, "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"}}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0x103, 0x6, "43d1734dad620a0d05c566d75ec400e60c3f4575813c8f902031f61da9089461fde73ab6079f2e563521c92c4ac9ae978645e2a716cfb7ac41a2fb490c99ad0ae84eb6717d73540c9aeff464b0fb8c20ed2187510697c7afd893bb5267266783703886c86dfb9e7958012c17545c77c26a2f8903ae604a44cb8ee18914a77a0a99fa91fb8a6d7b87ecca9a563ac2e4e539a921f8ca72e9fc6fa3eca75f08bbae99cf764538229d4fb15675cad912d947bb25b224a3dcab28924e0c01b044ced604b90a53b55a96e56f12253c6263b7f06400b21a8e973ff45e82c453391ae07e09be0c945c25578aa37e46536521414a9872941553f8b12269225a614e5041"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ipt={0xa8, 0x18, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0x4c, 0x6, "1841d9c29792001ec4e347c39875fa6a94a727a01e2d56a4cf07e1b5ef6325efe0d0da77d3db99ff4d6f11ededc543406c94b3f003900da2fa3bb3417bcff5f9f2e5a2991b6b4fba"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, {0x690, 0x1, [@m_ipt={0x17c, 0x17, 0x0, 0x0, {{0x8}, {0x138, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xb5, 0x6, {0xfff5, 'filter\x00', 0x9, 0x81, "003d76cc4e1bcdfd1de8277927e02b6388440bb38d62e8b3c46bb0ef143777a17b949417c8682af1f916a2b9119dd0339b3b1400273dab7a3f77d1e030a8c3003de64cbdb431be1c28dc333d8e555b933773657d7867ac5e4473c55c35d8e51c1c10c1a017ce2b86ef1721866fc0ac98e64f3d6f032460419340d14f1cc6f071c3ff401c940ae0ad81cef0"}}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}]}, {0x1e, 0x6, "2b3a36e5382471b1e7f4e4771902929fef8ae8d1dccc2e4b21c5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ipt={0x26c, 0x10, 0x0, 0x0, {{0x8}, {0x1ac, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x10e, 0x6, {0x8000, 'nat\x00', 0xd, 0x4, "971c14888b6c44f2a58203a821d661ba6246890251b354dc4f3d7b8dcdcda43e34071d9e81786a1218b9329160d5d65c40f355e52563f4d6b0be664c4db368d092c053a894ae18f26f3b84fb08849cfd69da7b2b4b3d5e5a5912ace37f7fa0398aa8ca21fae8272b7a041637ebd6723eac078640a7b72de5d73d37ac7bb377951c88302dc7cae55f99dda573d8b7fe7b1da2acdd568540fa2702fb6baabfd82cb9dcb76d13954eb701918aafdff97721eee9f6c032436c61871de8efa1b0750eb93b94ca3041b7dbff3f44f81f4a47a73b2057266ce0d8309b0ba3faa925bb5123b7e760"}}, @TCA_IPT_TARG={0x95, 0x6, {0xe9b, 'security\x00', 0x8, 0x0, "6320204e3b82c4ad152d4873b2efadb33e3e3354a55fd1c4ecdad02c156638cab26ddd6f04ade6665fdc5937c7a2e2b61dda15f758d378936a6f7ab28c29463ae7a6ef75d0446840e1e663dac124cb8b646935dbe1f873ebb731d9bacb7fd12438c073358b11a0521da7df"}}]}, {0x99, 0x6, "21594a2779febd36fc2853b8af917762a7536f55cb867d8e03ea9a08fb53d558e6b52371e4c4643a2f63d7008903b74b7c5ab0f588c8fa6746e012f62e825ac1e15e9c7a884f5462d2bdbb25f1cb4220cac73eb5da6783318388f692fe967170a1c198b888edf9c5cfecbb64e21cd97ee2498d22a1251ee111b08ea99e449826eb0260daa9746a22362079b4b6d463414babbd80dd"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_ipt={0x2a4, 0x7, 0x0, 0x0, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0xf0, 0x6, {0xb, 'mangle\x00', 0xfe, 0x6, "e7c82fcb87893794e022d4701a73fd0cfb772475cc5f4d8379450e212e97d19aa2a4d1fbbb21b29f4f0a6c82d4556168c6fa76284815e1854910664dbfe747c53af1ea7264b4a8015448073d297875771a79737c2c9f9e5cfc92885448e6352c21d30658c2a0f2bfdaad01fbfa6c06679c83387c8e4dc1d15ddda1b55f76cfc4f6821fb1165bc52e3f7949e806bd4ac8e54fb7df2469c960d7bbd3d8f900eb3afff7aa5edc39b38a1548047153a4df1848bc09b8da37b1036396cddb633a95b3400f7e6ec0fc"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0xb0, 0x6, {0xff, 'security\x00', 0x2, 0x0, "def7517142ea990e6677e512a20b86c530691d38248efbf93d1082e258b8f7917c2b27b725bf4d1215450ea6a6dafd1109b2ae3d8d2370929503d9e34b3fcb0843052df8f45c187b414ac505b7eeec33fa51bee4dd2015d89ac72265070a104c7005d7461b1bd92a8c3ce892196ab68319b40ff44acfd95fd649f18439f4fc0b31ea37508144"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}]}, {0x95, 0x6, "2d89e77872f3a31be50842d74ba9afd3b905b9f5a19bc414369066587387c641dc1511a27e7637ebd21e5628167a44c2f9d547508a33981736e6237e26dc7d38fa7ffd09c35e0369bd291f63dba8cdf4d3357428b4725c1c6df0ffdb1d045088a72154c43489803465be7ee31f21eb602e4b532d47ac70c395bc06bde05a87874ac8b2d8cee5622f5db743225545938065"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, {0x2b60, 0x1, [@m_ipt={0x12c8, 0x3, 0x0, 0x0, {{0x8}, {0x11b0, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_INDEX={0x8, 0x3, 0xd511}, @TCA_IPT_TARG={0x102a, 0x6, {0xa1d6, 'raw\x00', 0x23, 0xafbd, "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"}}, @TCA_IPT_INDEX={0x8, 0x3, 0xf}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_TARG={0x75, 0x6, {0x4, 'filter\x00', 0x7, 0x1, "a3e967a7838f6b9b020054ba94acbff98b72fbaa7afed9f25025f3a0264df0d278f5ea3bb5bafccfc9e3ba141019ac4978a212fa903e5ff99af39cec98a483087d6b4d064eefbd9f99ea40"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TARG={0x98, 0x6, {0xff, 'filter\x00', 0x0, 0x4, "668e62574d9a38cac4d796239ec3ecc6c9d611468622db64335eb0e8ff414b189174bca573192587020e1fcf501ed96c1eae8330881a2b6bc6a8f07f7e5fdc2662f2db83727b1755750c00f4c03cf3780b952ca1f75b32141f087260aab13277fb4b343b00ab7cb7ea4675d6081a"}}]}, {0xf4, 0x6, "ecbbbdcea5322b1ef8f084e5d4cc1c27dd8e6b965cd91c30f9c2d5a66867405eb6b51e33c3bf35806bb7e546d7fee1e436b0fb002f231316af10896f8cc7ced82720c3a2d1f58b3dc723c2af618f058f4502f34ebcad13a8feeecf0e0b2689eae25059beb239e037a77317f75c05ccbeabdd2a438741fc9fee6c828263421f648873f11d0eefbab975effd31caab66c8f2872f89103932883bf7f6f4efb26c29fe93bab3a2ee3909ff8b1d1a8bbad4a54448d4d763b7134b90c4471d3e740bf7a50dd91e2a9a53d70fbe1dad3599869c769083245760330cc2f355e17c8a6846f32c5732cd87ae04598d97ec8736c674"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ipt={0xcc, 0xb, 0x0, 0x0, {{0x8}, {0x4}, {0xa4, 0x6, "4f45abefe49f9cca669d39bdae6d071e80856b138d2a753cdc5312ddfa18c761a7919deb4fc5f522478814887ad2180b0d581a702351e3e2a910f71db08e266a42b5f68013aa2fc58b0b896e83d61dd6cb2481ff6419b86ab993674023256bd2b4b8c5ff24734cefec850ac1d9af04c386d6480b5dc59d7e7769f82510b6785379294dc63f246a0502082f5e315e584ec26bf8d38f77c9d53a2d341be9256d14"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_ipt={0x1058, 0x17, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x200}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0xdef86aeb096bfc42}}}}, @m_ipt={0x364, 0x6, 0x0, 0x0, {{0x8}, {0x2fc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x68}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TARG={0x6f, 0x6, {0x2c, 'raw\x00', 0x13, 0x43a, "f79fecb08b12b354190765ea68c6de65172e1166b5ca4a7ad3d4d914486e8cea74207e91758d83e03d4cfe040a3393f1c99ff4d7103648deecc780311275cb5dc413ab1658"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0x121, 0x6, {0x6, 'raw\x00', 0x6, 0x9, "1e675fcf9de6b29f0503a266bb3ec616ab8a48b77ed31828036fe083b6847f0d1a1ed34486b1ed19981308bdd77cb2b0bc6003e661cfef7f9f1a3d0466a4b513f713391426c3a3e4a8b4a9bf797e3ca9a2447b49831108baf914f11a3f0bcc50e02ece63da2a20b101b40771398d557de0c62a7a86e655681ae1ace4033036360124b84cf062a05fc030e08dbdbec0db6d6b08d61a4251623b34b848520b211b605161f0c5e0039b40bdb8b7d69c8604c39382f9563550f8b9a90280fb71247ab49ad3b2369cca5ee10dc4d55ff206a24305b9abf4756828e1a016c6774fbdcc2d14522c9808386cb367d77d6a4d4326c8e03177e9c74e"}}, @TCA_IPT_TARG={0xf2, 0x6, {0xfffd, 'filter\x00', 0x9, 0x800, "aa08929fbd0837c8db93df10be18e4ee7542e8b704accb1b32016c3fb1ab247840ed4ed33d2f87034429486a042cebd48573348ca1a53ee8fe3bcd5c7553fd5e01ee8fa31ba51c3ac60f128a70538ef0e26ec4c5ef51ed5c9751a45ed9aa569462e49596dd57625759668b552536c5ebf664ba034828271afd771df23dd37f51a2055b62b7e4cf64446b64a50d905f91694c2f21938c7f9426fcf50c185e6f18af5831c445a6121e81f206632b4338a945a8a9f3febd0ab8cb8804421257113215ac255fa8b49d59"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0x43, 0x6, "d45c5e6a002cd7d3053fecfd1e80016e6c933bc5b591bc899d1b6767e6ed642e4dfd0da3ff7d6a147addc24612e786c254947cb21e4f7dc44cbbd02c0fc222"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_ipt={0x1c8, 0x17, 0x0, 0x0, {{0x8}, {0x10c, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xf7, 0x6, {0xfff7, 'security\x00', 0x8f, 0xf, "b6f9194f0da7cfc174c054133e5d60db1470feb46922dd144573ff9e5ee20e429da6211a062e8af60a7c16373041392407b5fd6f9bcc0b93072913194ecd0adece12ee739ddd10909ce0f50afe339d7be400386092a9813c3e33f4ba6b9d7cc5ffc2886f1e7844f00d33a3e5eff75b42694cad4a17f4a4fff9266b472e53d245a7f095bc9992033c85330445c1f3695b60f0bdafccf1f1b8d6a180aab6d6569df57156ce48aee7f1da95d5106a67e9d552c8b1a776b2b306ded9bfd00ae84778c8f6d8816cca43f32c749c7043"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}]}, {0x96, 0x6, "f63d500ca1506d37b3143bf0981ffefea53547d473b51d859f8718729b98cbff3ab41e96cc76d32f11c5840f9fb11efcd9c301c2e0ff06bf62d6a1c862433ce3f125223d8ddd03cb4ab693b6d232c2c044178932d8d98c8b2d9f3a1396591915b707d1a31ab3836dddbded4c92d7dec48a39a7e2403ecfb555c8ff5f7a9616b7f501daa3c98819f13088732ab9c5d1984593"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x244, 0x9, 0x0, 0x0, {{0x8}, {0x1a4, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x91, 0x6, {0x3, 'nat\x00', 0x7, 0x6, "b37aded8e8687c9afe8278275a5c130b7ab2f52785e591cf5ba01887946a66fe13bc3d7d488893140ecf33ba944cb3ac7a0527cee2d50dabba9e182f1b234f7fda6c7408375b9be26239fe3b1f7c68b9b02597b9c7050c61dcadef4eb71a7cfe00d966f9859652"}}, @TCA_IPT_TARG={0x96, 0x6, {0x9, 'security\x00', 0x15, 0x10, "af65f1a8ca29a96f44d9c59e1c8ec8a32919047c20254bf997a833218d5c0457baf438b831e15a7cab73e666e2e586944bad6836547c2d1530dc6f5e2e00389509464ea268e7fbff7326194cd3cbff223c9dbd7e635522f2944fb446344932397a60127f771a46e26cb34e80"}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_TARG={0x48, 0x6, {0x85, 'filter\x00', 0x81, 0xce50, "c4c8dfc4be044a2fc23f4f011305a01d3d56d9b7d7774c36d521276ea384"}}]}, {0x79, 0x6, "fe8ce387853e6c821c85d284b82baaa02bf4e778ca0b4159704285739f4471352aeaa6b2d1306f988ae467c4b04c8529d28571ba825d702a7576d73c5ad0c4ff967f3b0236717f16f9d5041ffa3588d983a50c57b8cdbcbc06421502dcbdab3571e49c1a33fdebfd8cb999a5c4d2110a44ccec8c96"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, {0x138, 0x1, [@m_ipt={0x134, 0x13, 0x0, 0x0, {{0x8}, {0x64, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x40}]}, {0xab, 0x6, "c85f12ab9f0dfe7d3728c207c9f995f126a8ea7e636c9715e4bef3694e5e601e3a4e97dc0086df2870480aa107b290396694b2175f2132c07338c7f13f8f4874ca31bfbc38492aeeef3942f3ae524502c5ddaa218db26a4d5680a825425a1adc2180712c68f3bf5fcf6fde9332511488b6e2eb853ec7b8d92ca5f027f2b2c130a638a828310f7a709dbf1fe433ad041982ecae109546819eb226afbffa9283070894b94fb7ba34"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x6, 0x2}}}}]}]}, 0x4e50}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/92], 0xd8}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) r2 = accept(r1, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000240)=0x80) accept(r2, &(0x7f0000000300)=@pppoe={0x18, 0x0, {0x0, @random}}, &(0x7f0000000400)=0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000340)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000014c0)={0xb0, r4, 0x5d2346a9be0a0437, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x94, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x34, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8000}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PUBLIC_KEY={0xffffffffffffffb3}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}]}, 0xb0}}, 0x0) r7 = gettid() sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@dellink={0x38, 0x11, 0x8, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x21001, 0x2}, [@IFLA_CARRIER={0x5, 0x21, 0x8}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x2}, @IFLA_NET_NS_PID={0x8, 0x13, r7}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000011}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100766574680000000004000280080029000ced010008002800004d78"], 0x44}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@ipv4_delroute={0x24, 0x18, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) recvmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003300)=""/4088, 0xff8}], 0x1}}], 0x1, 0x0, 0x0) 301.534612ms ago: executing program 0 (id=2962): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 164.602529ms ago: executing program 0 (id=2963): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000038ff4f40d313193267fa0102030109021200010000000009047a01005e8b6ca562b7d454b52685c232e11500"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2020) 134.157363ms ago: executing program 4 (id=2964): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x2, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8}}]}, 0x24}}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f00000005c0)=0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000002, 0x30, 0xffffffffffffffff, 0x8000000) connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00010c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug', 0x0, 0x0) r7 = gettid() syz_open_dev$dmmidi(&(0x7f00000000c0), 0x2, 0x0) readv(r6, &(0x7f0000000c00), 0x0) tkill(r7, 0x7) lseek(r6, 0xfffffffffffffffe, 0x1) syz_usb_control_io(r5, &(0x7f0000000340)={0x2c, &(0x7f0000000080)={0x0, 0x24, 0x7f, {0x7f, 0x8, "0724fafd966ced10bd5334355e5c38826c51ca022509739c9ceb34af6f1e62b1ac7b1dbdf215d6e04a7682d7102bb5a4aa0bae0762f65cbaeafc9a053a13fe4658080d70af4e0ec0ba4665833c3029f8040b4d6d3f0a25cb7f3b5b7fc57fe0e48dc5a1b33e6a8f4ab2d7a35f14fc53634b7261171403d59e4715cef01a"}}, &(0x7f0000000200)={0x0, 0x3, 0x7c, @string={0x7c, 0x3, "05fde582227434669ff8be332e3b7945c5df4c106de2e55b4074d9efdff306cf91e9bedcf32475ec95c1967cfff9d6c45846f32dd45abf3ad3ce69a9f9a8701969a8e3160a28def14a459cf52b7cd1b1c9770531cb529efcfa03c92150f4e6e536f0cba0181fa4e9cbd525098dcf94b0cc326c73a53a6cd25efb"}}, &(0x7f0000000140)=ANY=[@ANYBLOB="000f49000017050f49000144100101000000000000f094eb1aafa937fb23818837dea53f109f027bc902b0600b5402a5bc8d6f8d5c062b9e597a9875ab66457f45a53584b555794f1e51d7fbf98c88"], &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xde, 0x0, 0x7, 0x2, "009afd2b", "edf1c4e4"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xa, 0x60, 0x3, 0x80, 0x40, 0x3, 0x49}}}, &(0x7f0000000a80)={0x84, &(0x7f0000000480)={0x20, 0x1, 0xfa, "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"}, &(0x7f0000000380)={0x0, 0xa, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000e00)=ANY=[], &(0x7f0000000600)={0x40, 0x7, 0x2, 0x120}, &(0x7f0000000640)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000680)={0x40, 0xb, 0x2, "9c36"}, &(0x7f00000006c0)={0x40, 0xf, 0x2, 0x401}, &(0x7f0000000700)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000740)={0x40, 0x17, 0x6}, &(0x7f0000000780)={0x40, 0x19, 0x2, "4ebc"}, &(0x7f00000007c0)={0x40, 0x1a, 0x2, 0xc}, &(0x7f0000000800)={0x40, 0x1c, 0xfffffffffffffe7f, 0xff}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x1}}) r8 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r8, 0x4141, 0x0) 0s ago: executing program 1 (id=2965): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x200}, 0x48) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1b, 0xf, &(0x7f00000004c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="580000001400192340834b", 0xb}, {&(0x7f00000002c0)="db6dfa07d8098bd2ced64ad5edc54382ee45da9203efd5732acfcc727b53d3079ed06ecae1342e4ec9c8283311dceddf89948d3ef84ff58ffb015760e03187c365999492cb07f544c5f8e72917b4af1e3e47b4655360c078947e62afae62d2ec31a3e0043a888d2096a4fe21b43cef30a6299fda9e752ea4ac9bd768a5a01356f8f5d1dae5c092d7f0fba15747b05104819751a787c6202cca9911ddff6f00ddc9997b", 0xa3}], 0x100000e0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5, 0xd, 0x3}]}}}]}, 0x3c}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f1b"], 0x22) (async) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async) r4 = io_uring_setup(0x4011, &(0x7f0000000180)={0x0, 0x6e42, 0x2000, 0x3, 0x3d7}) r5 = syz_io_uring_setup(0x8a5, &(0x7f0000000080)={0x0, 0xc524, 0x4, 0x0, 0x0, 0x0, r4}, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000280)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}) (async) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001880), 0x400000, 0x0) dup(r8) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r9, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f00000001c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x1, &(0x7f0000000140)=@gcm_256={{0x304}, "85406704bbcd6043", "898e9d750bfd000000000400", "a22300", "8ce3a39e3181899b"}, 0x38) (async) setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x2, &(0x7f0000000280)=@ccm_128={{0x304}, "3a997aae6644173f", "b9c0a8cd2707555d2fd4cc373ac51cf2", "1784fe44", "d3e69d47722a0439"}, 0x28) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000240)=0x10000) r10 = socket$rxrpc(0x21, 0x2, 0xa) sendmmsg(r10, &(0x7f0000000900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x20}}], 0x1, 0x0) (async) setsockopt$RXRPC_SECURITY_KEY(r10, 0x110, 0x1, 0x0, 0x0) (async) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="041706fffffff7fffff40bfe338d969126b404301be4c9b597f365383707df02fa5d0e66b4e30717d764239253f8725c409a121146f72b25c9ff4947fb882d03e96bde4bdfafcef129385084ba6ba28954e526850310472c7bb936746d496efbb24da5bd8260aca749fca60ae19072d0de9ede84b9d616b56e61d5c4ca2d4ce6ec8b8542007f28cc035edac010c318d68f3a7f7eb1f33ac59018433e449b69c6ae81fae87873e447d536f86248ea1f9efc1689096f33835824831e249fc0b89a2d84baae8ce8ec727feace714980e07fed34422372a429ed49ce1c929b73ae96a8906485183e8886665f2e3e252fdfb3cef2"], 0x9) (async) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) (async) io_uring_enter(r5, 0xa3d, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): frm_add_policy+0x270/0x980 [ 638.021525][T15889] ? __pfx_xfrm_add_policy+0x10/0x10 [ 638.026801][T15889] ? __nla_parse+0x40/0x60 [ 638.031205][T15889] xfrm_user_rcv_msg+0x75b/0xa80 [ 638.036133][T15889] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 638.041614][T15889] ? __mutex_trylock_common+0x183/0x2e0 [ 638.047159][T15889] ? __pfx___might_resched+0x10/0x10 [ 638.052444][T15889] netlink_rcv_skb+0x1e3/0x430 [ 638.057201][T15889] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 638.062647][T15889] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 638.067957][T15889] xfrm_netlink_rcv+0x79/0x90 [ 638.072625][T15889] netlink_unicast+0x7f0/0x990 [ 638.077386][T15889] ? __pfx_netlink_unicast+0x10/0x10 [ 638.082653][T15889] ? __virt_addr_valid+0x183/0x530 [ 638.087762][T15889] ? __check_object_size+0x49c/0x900 [ 638.093037][T15889] ? bpf_lsm_netlink_send+0x9/0x10 [ 638.098138][T15889] netlink_sendmsg+0x8e4/0xcb0 [ 638.102900][T15889] ? __pfx_netlink_sendmsg+0x10/0x10 [ 638.108175][T15889] ? __import_iovec+0x536/0x820 [ 638.113012][T15889] ? aa_sock_msg_perm+0x91/0x160 [ 638.117935][T15889] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 638.123204][T15889] ? security_socket_sendmsg+0x87/0xb0 [ 638.128650][T15889] ? __pfx_netlink_sendmsg+0x10/0x10 [ 638.133926][T15889] __sock_sendmsg+0x221/0x270 [ 638.138595][T15889] ____sys_sendmsg+0x525/0x7d0 [ 638.143351][T15889] ? __pfx_____sys_sendmsg+0x10/0x10 [ 638.148631][T15889] __sys_sendmsg+0x2b0/0x3a0 [ 638.153208][T15889] ? __pfx___sys_sendmsg+0x10/0x10 [ 638.158301][T15889] ? vfs_write+0x7c4/0xc90 [ 638.162732][T15889] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 638.169053][T15889] ? do_syscall_64+0x100/0x230 [ 638.173822][T15889] ? do_syscall_64+0xb6/0x230 [ 638.178482][T15889] do_syscall_64+0xf3/0x230 [ 638.182972][T15889] ? clear_bhb_loop+0x35/0x90 [ 638.187639][T15889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.193526][T15889] RIP: 0033:0x7f883c5799f9 [ 638.197928][T15889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 638.218918][T15889] RSP: 002b:00007f883d34f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 638.227320][T15889] RAX: ffffffffffffffda RBX: 00007f883c715f80 RCX: 00007f883c5799f9 [ 638.235283][T15889] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 638.243241][T15889] RBP: 00007f883d34f090 R08: 0000000000000000 R09: 0000000000000000 [ 638.251280][T15889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 638.259237][T15889] R13: 0000000000000000 R14: 00007f883c715f80 R15: 00007f883c83fa38 [ 638.267207][T15889] [ 638.537373][ T5295] usb 3-1: USB disconnect, device number 86 [ 638.601208][T15902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2481'. [ 638.655714][T15906] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2483'. [ 638.743562][ T5275] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 638.935132][ T5275] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 638.963217][ T5275] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 638.973602][ T5275] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 639.001254][ T5275] usb 2-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 639.010807][ T5275] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.014233][T15927] fuse: Invalid uid '00000000000000000011' [ 639.032575][T15927] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2486'. [ 639.044076][ T5275] usb 2-1: config 0 descriptor?? [ 639.089458][T15919] Invalid option length (1047205) for dns_resolver key [ 639.461411][ T5275] usb 2-1: string descriptor 0 read error: -71 [ 639.487964][ T5275] usbhid 2-1:0.0: can't add hid device: -71 [ 639.501723][ T5275] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 639.532608][ T5275] usb 2-1: USB disconnect, device number 77 [ 639.987397][ T29] audit: type=1326 audit(1723517679.766:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15948 comm="syz.0.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bcad799f9 code=0x7ffc0000 [ 640.006905][T15951] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2497'. [ 640.019131][ T29] audit: type=1326 audit(1723517679.786:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15948 comm="syz.0.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bcad799f9 code=0x7ffc0000 [ 640.057765][ T29] audit: type=1326 audit(1723517679.786:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15948 comm="syz.0.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f0bcad799f9 code=0x7ffc0000 [ 640.115623][ T29] audit: type=1326 audit(1723517679.786:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15948 comm="syz.0.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bcad799f9 code=0x7ffc0000 [ 640.139245][ T29] audit: type=1326 audit(1723517679.786:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15948 comm="syz.0.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0bcad799f9 code=0x7ffc0000 [ 640.192029][ T29] audit: type=1326 audit(1723517679.786:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15948 comm="syz.0.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bcad799f9 code=0x7ffc0000 [ 640.251577][ T29] audit: type=1326 audit(1723517679.786:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15948 comm="syz.0.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bcad799f9 code=0x7ffc0000 [ 640.295461][ T29] audit: type=1326 audit(1723517679.786:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15948 comm="syz.0.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0bcad799f9 code=0x7ffc0000 [ 640.322531][ T2974] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.339778][ T29] audit: type=1326 audit(1723517680.076:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15948 comm="syz.0.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bcad799f9 code=0x7ffc0000 [ 640.366609][ T6951] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 640.376674][ T29] audit: type=1326 audit(1723517680.076:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15948 comm="syz.0.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bcad799f9 code=0x7ffc0000 [ 640.459651][ T2974] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.592358][ T6951] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 640.605584][ T2974] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.616302][ T6951] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 640.643096][ T6951] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.661101][ T6951] usb 1-1: config 0 descriptor?? [ 640.806237][ T2974] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.833746][T15967] binder: BINDER_SET_CONTEXT_MGR already set [ 640.853088][T15967] binder: 15963:15967 ioctl 4018620d 20000040 returned -16 [ 640.934328][T15964] pim6reg1: entered promiscuous mode [ 640.939704][T15964] pim6reg1: entered allmulticast mode [ 641.120127][ T4619] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 641.139046][ T4619] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 641.148331][ T4619] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 641.158999][ T4619] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 641.169404][ T4619] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 641.178741][ T4619] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 641.427455][ T2974] team0: left allmulticast mode [ 641.447807][ T2974] team_slave_0: left allmulticast mode [ 641.472847][ T2974] team_slave_1: left allmulticast mode [ 641.490128][ T2974] bridge0: port 3(team0) entered disabled state [ 641.529188][ T2974] bridge_slave_0: left allmulticast mode [ 641.535019][ T2974] bridge_slave_0: left promiscuous mode [ 641.561679][ T2974] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.814565][T15987] netlink: 'syz.2.2508': attribute type 3 has an invalid length. [ 641.856601][T15987] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2508'. [ 642.169348][T15992] ebtables: ebtables: counters copy to user failed while replacing table [ 642.440767][ T2974] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 642.593701][ T5295] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 642.770558][ T2974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 642.789350][ T2974] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 642.796912][ T5295] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 642.810684][ T2974] bond0 (unregistering): Released all slaves [ 642.824911][ T5295] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.826662][ T2974] bond1 (unregistering): Released all slaves [ 642.849147][ T2974] bond2 (unregistering): Released all slaves [ 642.851271][ T5295] usb 4-1: Product: syz [ 642.867839][ T2974] bond3 (unregistering): Released all slaves [ 642.873967][ T5295] usb 4-1: Manufacturer: syz [ 642.873989][ T5295] usb 4-1: SerialNumber: syz [ 642.890070][ T5295] usb 4-1: config 0 descriptor?? [ 642.924383][T15990] macvlan0: entered allmulticast mode [ 642.932706][T15990] veth1_vlan: entered allmulticast mode [ 642.956529][T15993] pim6reg: entered allmulticast mode [ 642.985285][T15999] pim6reg: left allmulticast mode [ 642.990590][T15999] macvlan0: left allmulticast mode [ 643.019755][T15999] veth1_vlan: left allmulticast mode [ 643.063349][ T5277] usb 1-1: USB disconnect, device number 83 [ 643.140560][ T5295] cx82310_eth 4-1:0.0: probe with driver cx82310_eth failed with error -22 [ 643.148187][ T2974] tipc: Left network mode [ 643.202893][ T5235] Bluetooth: hci1: command tx timeout [ 643.416727][T16015] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2514'. [ 643.539749][ T5295] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 643.787558][T16024] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 643.954561][ T2974] hsr_slave_0: left promiscuous mode [ 643.977262][ T2974] hsr_slave_1: left promiscuous mode [ 644.030723][ T2974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 644.046737][ T2974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 644.080722][ T2974] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 644.108115][ T2974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 644.190789][ T2974] veth1_macvtap: left promiscuous mode [ 644.214711][ T2974] veth0_macvtap: left promiscuous mode [ 644.225029][ T2974] veth1_vlan: left promiscuous mode [ 644.231736][ T2974] veth0_vlan: left promiscuous mode [ 644.240037][T16051] FAULT_INJECTION: forcing a failure. [ 644.240037][T16051] name failslab, interval 1, probability 0, space 0, times 0 [ 644.266515][T16052] netlink: 'syz.1.2520': attribute type 2 has an invalid length. [ 644.266633][T16051] CPU: 0 UID: 0 PID: 16051 Comm: syz.2.2521 Not tainted 6.11.0-rc3-syzkaller-00007-gd74da846046a #0 [ 644.284985][T16051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 644.295029][T16051] Call Trace: [ 644.298300][T16051] [ 644.301218][T16051] dump_stack_lvl+0x241/0x360 [ 644.305891][T16051] ? __pfx_dump_stack_lvl+0x10/0x10 [ 644.311081][T16051] ? __pfx__printk+0x10/0x10 [ 644.315659][T16051] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.321718][T16051] should_fail_ex+0x3b0/0x4e0 [ 644.326391][T16051] should_failslab+0xac/0x100 [ 644.331085][T16051] ? __alloc_skb+0x1c3/0x440 [ 644.335663][T16051] kmem_cache_alloc_node_noprof+0x71/0x320 [ 644.341465][T16051] __alloc_skb+0x1c3/0x440 [ 644.345878][T16051] ? __pfx___alloc_skb+0x10/0x10 [ 644.350801][T16051] ? km_report+0x230/0x240 [ 644.355207][T16051] ? __pfx_lock_release+0x10/0x10 [ 644.360224][T16051] xfrm_alloc_compat+0x1b6/0x1690 [ 644.365246][T16051] ? xfrm_get_translator+0x19/0x240 [ 644.370435][T16051] ? __pfx_xfrm_alloc_compat+0x10/0x10 [ 644.375888][T16051] xfrm_nlmsg_multicast+0xd7/0x1f0 [ 644.380990][T16051] xfrm_send_policy_notify+0x1277/0x2360 [ 644.386628][T16051] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 644.392598][T16051] ? xfrm_policy_insert+0x665/0x940 [ 644.397786][T16051] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 644.403511][T16051] ? xfrm_policy_kill+0xb8/0x2c0 [ 644.408546][T16051] ? xfrm_policy_destroy+0x184/0x210 [ 644.413838][T16051] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 644.419817][T16051] km_policy_notify+0x126/0x210 [ 644.424658][T16051] ? km_policy_notify+0x2e/0x210 [ 644.429588][T16051] xfrm_add_policy+0x54c/0x980 [ 644.434348][T16051] ? __pfx_xfrm_add_policy+0x10/0x10 [ 644.439630][T16051] ? __nla_parse+0x40/0x60 [ 644.444040][T16051] xfrm_user_rcv_msg+0x75b/0xa80 [ 644.448973][T16051] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 644.454874][T16051] ? __mutex_trylock_common+0x183/0x2e0 [ 644.460411][T16051] ? __pfx___might_resched+0x10/0x10 [ 644.465689][T16051] netlink_rcv_skb+0x1e3/0x430 [ 644.470446][T16051] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 644.475897][T16051] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 644.481198][T16051] xfrm_netlink_rcv+0x79/0x90 [ 644.485879][T16051] netlink_unicast+0x7f0/0x990 [ 644.490638][T16051] ? __pfx_netlink_unicast+0x10/0x10 [ 644.495913][T16051] ? __virt_addr_valid+0x183/0x530 [ 644.501012][T16051] ? __check_object_size+0x49c/0x900 [ 644.506296][T16051] ? bpf_lsm_netlink_send+0x9/0x10 [ 644.511400][T16051] netlink_sendmsg+0x8e4/0xcb0 [ 644.516163][T16051] ? __pfx_netlink_sendmsg+0x10/0x10 [ 644.521440][T16051] ? __import_iovec+0x536/0x820 [ 644.526278][T16051] ? aa_sock_msg_perm+0x91/0x160 [ 644.531213][T16051] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 644.536486][T16051] ? security_socket_sendmsg+0x87/0xb0 [ 644.541944][T16051] ? __pfx_netlink_sendmsg+0x10/0x10 [ 644.547222][T16051] __sock_sendmsg+0x221/0x270 [ 644.551895][T16051] ____sys_sendmsg+0x525/0x7d0 [ 644.556652][T16051] ? __pfx_____sys_sendmsg+0x10/0x10 [ 644.561932][T16051] __sys_sendmsg+0x2b0/0x3a0 [ 644.566516][T16051] ? __pfx___sys_sendmsg+0x10/0x10 [ 644.571621][T16051] ? vfs_write+0x7c4/0xc90 [ 644.576096][T16051] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 644.582415][T16051] ? do_syscall_64+0x100/0x230 [ 644.587176][T16051] ? do_syscall_64+0xb6/0x230 [ 644.591845][T16051] do_syscall_64+0xf3/0x230 [ 644.596336][T16051] ? clear_bhb_loop+0x35/0x90 [ 644.600999][T16051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.606878][T16051] RIP: 0033:0x7f1e7e5799f9 [ 644.611277][T16051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 644.630867][T16051] RSP: 002b:00007f1e7f31d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 644.639267][T16051] RAX: ffffffffffffffda RBX: 00007f1e7e715f80 RCX: 00007f1e7e5799f9 [ 644.647229][T16051] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 644.655187][T16051] RBP: 00007f1e7f31d090 R08: 0000000000000000 R09: 0000000000000000 [ 644.663143][T16051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 644.671102][T16051] R13: 0000000000000000 R14: 00007f1e7e715f80 R15: 00007f1e7e83fa38 [ 644.679067][T16051] [ 644.714082][ T5235] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 644.727146][ T5235] Bluetooth: hci4: Injecting HCI hardware error event [ 644.739434][ T5235] Bluetooth: hci4: hardware error 0x00 [ 645.284555][ T4619] Bluetooth: hci1: command tx timeout [ 645.508870][ T2974] team_slave_1 (unregistering): left promiscuous mode [ 645.536272][ T2974] team0 (unregistering): Port device team_slave_1 removed [ 645.602094][ T2974] team_slave_0 (unregistering): left promiscuous mode [ 645.619301][ T2974] team0 (unregistering): Port device team_slave_0 removed [ 646.155644][T16039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2512'. [ 646.170280][T16039] mac80211_hwsim hwsim91 wlan0: entered promiscuous mode [ 646.181316][T16039] macsec1: entered promiscuous mode [ 646.195447][T16039] macsec1: entered allmulticast mode [ 646.203410][T16039] mac80211_hwsim hwsim91 wlan0: entered allmulticast mode [ 646.216588][T16045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2520'. [ 646.289006][ T6951] usb 4-1: USB disconnect, device number 97 [ 646.449605][T15975] chnl_net:caif_netlink_parms(): no params data found [ 646.534067][T16067] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2526'. [ 646.551169][T16068] FAULT_INJECTION: forcing a failure. [ 646.551169][T16068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 646.581139][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 646.581154][ T29] audit: type=1326 audit(1723517686.356:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16062 comm="syz.2.2525" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e7e5799f9 code=0x0 [ 646.592930][T16068] CPU: 0 UID: 0 PID: 16068 Comm: syz.0.2528 Not tainted 6.11.0-rc3-syzkaller-00007-gd74da846046a #0 [ 646.620015][T16068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 646.630073][T16068] Call Trace: [ 646.633362][T16068] [ 646.636280][T16068] dump_stack_lvl+0x241/0x360 [ 646.640946][T16068] ? __pfx_dump_stack_lvl+0x10/0x10 [ 646.646129][T16068] ? __pfx__printk+0x10/0x10 [ 646.650700][T16068] ? aa_label_sk_perm+0x4f0/0x6d0 [ 646.655711][T16068] should_fail_ex+0x3b0/0x4e0 [ 646.660372][T16068] _copy_from_user+0x2f/0xe0 [ 646.664953][T16068] copy_from_sockptr+0x62/0xa0 [ 646.669704][T16068] packet_setsockopt+0xcac/0x1970 [ 646.674713][T16068] ? __pfx___might_resched+0x10/0x10 [ 646.679981][T16068] ? __pfx_packet_setsockopt+0x10/0x10 [ 646.685429][T16068] ? aa_sk_perm+0x967/0xab0 [ 646.689915][T16068] ? __pfx_aa_sk_perm+0x10/0x10 [ 646.694752][T16068] ? __pfx_lock_acquire+0x10/0x10 [ 646.699759][T16068] ? aa_sock_opt_perm+0x79/0x120 [ 646.704683][T16068] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 646.710219][T16068] ? security_socket_setsockopt+0x87/0xb0 [ 646.715925][T16068] ? __pfx_packet_setsockopt+0x10/0x10 [ 646.721368][T16068] do_sock_setsockopt+0x3af/0x720 [ 646.726384][T16068] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 646.731916][T16068] ? __fget_files+0x29/0x470 [ 646.736492][T16068] ? __fget_files+0x3f6/0x470 [ 646.741158][T16068] __sys_setsockopt+0x1ae/0x250 [ 646.745998][T16068] __x64_sys_setsockopt+0xb5/0xd0 [ 646.751006][T16068] do_syscall_64+0xf3/0x230 [ 646.755499][T16068] ? clear_bhb_loop+0x35/0x90 [ 646.760162][T16068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.766037][T16068] RIP: 0033:0x7f0bcad799f9 [ 646.770436][T16068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 646.790023][T16068] RSP: 002b:00007f0bcbae9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 646.798420][T16068] RAX: ffffffffffffffda RBX: 00007f0bcaf15f80 RCX: 00007f0bcad799f9 [ 646.806377][T16068] RDX: 0000000000000012 RSI: 0000000000000107 RDI: 0000000000000003 [ 646.814337][T16068] RBP: 00007f0bcbae9090 R08: 0000000000000008 R09: 0000000000000000 [ 646.822293][T16068] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 646.830244][T16068] R13: 0000000000000000 R14: 00007f0bcaf15f80 R15: 00007f0bcb03fa38 [ 646.838204][T16068] [ 646.877239][ T4619] Bluetooth: hci4: unexpected event for opcode 0x0c57 [ 646.886202][T16070] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 646.893127][ T5235] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 647.212974][T15975] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.246207][T15975] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.296490][T15975] bridge_slave_0: entered allmulticast mode [ 647.321096][T15975] bridge_slave_0: entered promiscuous mode [ 647.363312][ T5235] Bluetooth: hci1: command tx timeout [ 647.402965][T15975] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.429188][T15975] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.450606][T15975] bridge_slave_1: entered allmulticast mode [ 647.471152][T15975] bridge_slave_1: entered promiscuous mode [ 647.483077][ T5277] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 647.659731][T15975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 647.680143][ T5277] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 647.696107][T15975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 647.716894][ T5277] usb 1-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 647.746582][ T5277] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 647.768598][ T5277] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.867752][T16104] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2535'. [ 647.909779][T15975] team0: Port device team_slave_0 added [ 648.008790][ T4619] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 648.021694][ T4619] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 648.040180][ T4619] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 648.048856][ T4619] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 648.056751][ T4619] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 648.065489][ T4619] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 648.087323][ T2974] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.146337][T15975] team0: Port device team_slave_1 added [ 648.253598][ T2974] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.268804][T15975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 648.276812][T15975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 648.302732][ C1] vkms_vblank_simulate: vblank timer overrun [ 648.311277][T15975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 648.329426][T15975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 648.338796][T15975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 648.375500][T15975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 648.402871][ T1850] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 648.453004][ T2974] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.557240][ T2974] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.599742][T15975] hsr_slave_0: entered promiscuous mode [ 648.605917][ T1850] usb 3-1: Using ep0 maxpacket: 8 [ 648.613402][T15975] hsr_slave_1: entered promiscuous mode [ 648.622335][ T1850] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 648.631634][T15975] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 648.640326][ T1850] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 648.651737][T15975] Cannot create hsr debugfs directory [ 648.659355][ T1850] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 648.678615][ T1850] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 648.695718][ T1850] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 648.822153][ T1850] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 648.845835][ T1850] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.086840][ T1850] usb 3-1: usb_control_msg returned -32 [ 649.092467][ T1850] usbtmc 3-1:16.0: can't read capabilities [ 649.112937][ T2974] bridge_slave_1: left allmulticast mode [ 649.118642][ T2974] bridge_slave_1: left promiscuous mode [ 649.125308][ T2974] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.144749][ T2974] bridge_slave_0: left allmulticast mode [ 649.155017][ T2974] bridge_slave_0: left promiscuous mode [ 649.164613][ T2974] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.184805][ T2974] bridge_slave_1: left allmulticast mode [ 649.190542][ T2974] bridge_slave_1: left promiscuous mode [ 649.204214][ T2974] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.220569][ T2974] bridge_slave_0: left allmulticast mode [ 649.228728][ T2974] bridge_slave_0: left promiscuous mode [ 649.240397][ T2974] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.443296][ T4619] Bluetooth: hci1: command tx timeout [ 649.476460][T16136] usb 3-1: usbtmc_ioctl_clear_in_halt returned -32 [ 649.978456][ T2974] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 649.990305][ T2974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 650.001455][ T2974] bond0 (unregistering): Released all slaves [ 650.076919][ T9] usb 1-1: USB disconnect, device number 84 [ 650.173348][ T4619] Bluetooth: hci0: command tx timeout [ 650.187116][ T2974] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 650.223348][ T2974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 650.244263][ T2974] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 650.259396][ T2974] bond0 (unregistering): Released all slaves [ 650.294818][T16144] FAULT_INJECTION: forcing a failure. [ 650.294818][T16144] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 650.314812][T16144] CPU: 0 UID: 0 PID: 16144 Comm: syz.0.2542 Not tainted 6.11.0-rc3-syzkaller-00007-gd74da846046a #0 [ 650.325594][T16144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 650.335651][T16144] Call Trace: [ 650.339008][T16144] [ 650.341929][T16144] dump_stack_lvl+0x241/0x360 [ 650.346608][T16144] ? __pfx_dump_stack_lvl+0x10/0x10 [ 650.351799][T16144] ? __pfx__printk+0x10/0x10 [ 650.356385][T16144] ? snprintf+0xda/0x120 [ 650.360619][T16144] should_fail_ex+0x3b0/0x4e0 [ 650.365290][T16144] _copy_to_user+0x2f/0xb0 [ 650.369699][T16144] simple_read_from_buffer+0xca/0x150 [ 650.375065][T16144] proc_fail_nth_read+0x1e9/0x250 [ 650.380086][T16144] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 650.385637][T16144] ? rw_verify_area+0x520/0x6b0 [ 650.390485][T16144] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 650.396025][T16144] vfs_read+0x204/0xbc0 [ 650.400172][T16144] ? __pfx_lock_release+0x10/0x10 [ 650.405193][T16144] ? do_sock_setsockopt+0x3e2/0x720 [ 650.410384][T16144] ? __pfx_vfs_read+0x10/0x10 [ 650.415050][T16144] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 650.420592][T16144] ? __fget_files+0x29/0x470 [ 650.425180][T16144] ? __fget_files+0x3f6/0x470 [ 650.429856][T16144] ksys_read+0x1a0/0x2c0 [ 650.434096][T16144] ? __pfx_ksys_read+0x10/0x10 [ 650.438853][T16144] ? do_syscall_64+0x100/0x230 [ 650.443614][T16144] ? do_syscall_64+0xb6/0x230 [ 650.448285][T16144] do_syscall_64+0xf3/0x230 [ 650.452782][T16144] ? clear_bhb_loop+0x35/0x90 [ 650.457452][T16144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.463335][T16144] RIP: 0033:0x7f0bcad7843c [ 650.467746][T16144] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 650.487351][T16144] RSP: 002b:00007f0bcbae9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 650.495757][T16144] RAX: ffffffffffffffda RBX: 00007f0bcaf15f80 RCX: 00007f0bcad7843c [ 650.503718][T16144] RDX: 000000000000000f RSI: 00007f0bcbae90a0 RDI: 0000000000000006 [ 650.511679][T16144] RBP: 00007f0bcbae9090 R08: 0000000000000000 R09: 0000000000000000 [ 650.519636][T16144] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 650.527595][T16144] R13: 0000000000000000 R14: 00007f0bcaf15f80 R15: 00007f0bcb03fa38 [ 650.535570][T16144] [ 650.747778][T16113] chnl_net:caif_netlink_parms(): no params data found [ 651.123035][ T5275] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 651.308813][T16113] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.320696][T16113] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.325015][ T5275] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 651.334096][T16113] bridge_slave_0: entered allmulticast mode [ 651.342824][ T5275] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 651.354526][ T5275] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 651.364312][ T5275] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 651.371789][T16113] bridge_slave_0: entered promiscuous mode [ 651.372577][ T5275] usb 4-1: SerialNumber: syz [ 651.509490][T16113] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.521357][T16113] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.528748][T16113] bridge_slave_1: entered allmulticast mode [ 651.537928][T16113] bridge_slave_1: entered promiscuous mode [ 651.591707][ T5275] usb 4-1: 0:2 : does not exist [ 651.606211][T16167] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 651.630093][ T9] usb 3-1: USB disconnect, device number 87 [ 651.736914][T16113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 651.767589][T16171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2551'. [ 651.867454][T16113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 651.947543][ T2974] hsr_slave_0: left promiscuous mode [ 651.977875][ T2974] hsr_slave_1: left promiscuous mode [ 651.993025][T16178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.005841][T16178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 652.045218][ T2974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 652.055325][ T2974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 652.074415][ T2974] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 652.104429][ T2974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 652.144974][ T2974] hsr_slave_0: left promiscuous mode [ 652.182941][ T2974] hsr_slave_1: left promiscuous mode [ 652.205498][ T2974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 652.220311][ T2974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 652.231382][ T2974] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 652.247128][ T4619] Bluetooth: hci0: command tx timeout [ 652.264919][ T2974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 652.364892][T16182] binder: transaction release 277 bad object at offset 536871616, size 72 [ 652.383049][T16182] binder: transaction release 277 bad object at offset 536871168, size 72 [ 652.393424][ T2974] veth1_macvtap: left promiscuous mode [ 652.399039][ T2974] veth0_macvtap: left promiscuous mode [ 652.423548][ T2974] veth1_vlan: left promiscuous mode [ 652.434522][ T2974] veth0_vlan: left promiscuous mode [ 652.447847][ T2974] veth1_macvtap: left promiscuous mode [ 652.459095][ T2974] veth0_macvtap: left promiscuous mode [ 652.465294][ T2974] veth1_vlan: left promiscuous mode [ 652.472139][ T2974] veth0_vlan: left promiscuous mode [ 652.561028][T16190] loop8: detected capacity change from 0 to 6 [ 652.574457][T16190] Dev loop8: unable to read RDB block 6 [ 652.589878][T16190] loop8: unable to read partition table [ 652.603211][T16190] loop8: partition table beyond EOD, truncated [ 652.616314][T16190] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 652.616314][T16190] ) failed (rc=-5) [ 652.861078][T16197] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2558'. [ 652.873267][T16197] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2558'. [ 653.094884][T16200] ebtables: ebtables: counters copy to user failed while replacing table [ 653.617303][ T2974] team0 (unregistering): Port device team_slave_1 removed [ 653.682451][ T2974] team0 (unregistering): Port device team_slave_0 removed [ 653.866538][ T5277] usb 4-1: USB disconnect, device number 98 [ 654.322951][ T4619] Bluetooth: hci0: command tx timeout [ 654.462916][ T5277] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 654.699554][ T5277] usb 4-1: New USB device found, idVendor=102c, idProduct=6251, bcdDevice=75.3e [ 654.712595][ T5277] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.723058][ T1850] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 654.732595][ T5277] usb 4-1: Product: syz [ 654.747232][ T5277] usb 4-1: Manufacturer: syz [ 654.752575][ T5277] usb 4-1: SerialNumber: syz [ 654.761638][ T5277] usb 4-1: config 0 descriptor?? [ 654.785269][ T5277] gspca_main: etoms-2.14.0 probing 102c:6251 [ 654.926628][ T1850] usb 3-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 654.941987][ T1850] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.950135][ T1850] usb 3-1: Product: syz [ 654.962555][ T1850] usb 3-1: Manufacturer: syz [ 654.967306][ T1850] usb 3-1: SerialNumber: syz [ 655.003286][ T1850] usb 3-1: config 0 descriptor?? [ 655.025103][ T1850] powermate 3-1:0.0: probe with driver powermate failed with error -22 [ 655.116581][T16214] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 655.162025][T16214] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 655.397932][ T2974] team0 (unregistering): Port device team_slave_1 removed [ 655.540336][ T2974] team0 (unregistering): Port device team_slave_0 removed [ 656.126922][ T5277] usb 3-1: USB disconnect, device number 88 [ 656.140263][T16113] team0: Port device team_slave_0 added [ 656.206901][T16113] team0: Port device team_slave_1 added [ 656.215822][ T9] usb 4-1: USB disconnect, device number 99 [ 656.339194][T15975] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 656.370026][T16113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 656.377561][T16113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 656.405408][T16113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 656.413520][ T4619] Bluetooth: hci0: command tx timeout [ 656.422417][T16113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 656.429451][T16113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 656.455659][T16113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 656.469112][T15975] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 656.479762][T15975] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 656.514663][T15975] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 656.604189][T16113] hsr_slave_0: entered promiscuous mode [ 656.619277][T16113] hsr_slave_1: entered promiscuous mode [ 656.625706][ T5275] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 656.635576][T16113] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 656.652772][T16113] Cannot create hsr debugfs directory [ 656.845040][ T5275] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 656.877471][ T5275] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.898273][T16226] binder: transaction release 285 bad object at offset 536871616, size 72 [ 656.924789][ T5275] usb 1-1: config 0 descriptor?? [ 656.949539][ T5275] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 656.955976][T16226] binder: transaction release 285 bad object at offset 536871168, size 72 [ 657.037028][ T29] audit: type=1326 audit(1723517696.816:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16223 comm="syz.3.2567" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f883c5799f9 code=0x0 [ 657.098612][T15975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 657.310231][T15975] 8021q: adding VLAN 0 to HW filter on device team0 [ 657.470825][ T1297] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.477972][ T1297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 657.624363][ T1297] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.631524][ T1297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 657.736491][ T5275] cpia1 1-1:0.0: only firmware version 1 is supported (got: 4) [ 657.919553][T15975] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 658.098306][T15975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 658.153040][ T5275] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 658.250858][T15975] veth0_vlan: entered promiscuous mode [ 658.272163][T15975] veth1_vlan: entered promiscuous mode [ 658.302931][T16113] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 658.331530][T16113] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 658.336100][T16113] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 658.351812][T16113] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 658.377700][ T5275] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 658.377732][ T5275] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.377753][ T5275] usb 3-1: Product: syz [ 658.377769][ T5275] usb 3-1: Manufacturer: syz [ 658.377778][ T5275] usb 3-1: SerialNumber: syz [ 658.386217][ T5275] usb 3-1: config 0 descriptor?? [ 658.427975][T15975] veth0_macvtap: entered promiscuous mode [ 658.433372][T15975] veth1_macvtap: entered promiscuous mode [ 658.481561][T15975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 658.481608][T15975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.481621][T15975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 658.481635][T15975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.481646][T15975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 658.481659][T15975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.486154][T15975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 658.504577][T15975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.504601][T15975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.504634][T15975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.504648][T15975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.504659][T15975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.504671][T15975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.507530][T15975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 658.523826][T15975] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.523861][T15975] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.523908][T15975] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.523932][T15975] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.608372][ T5275] cx82310_eth 3-1:0.0: probe with driver cx82310_eth failed with error -22 [ 658.678688][T16113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 658.910061][T16113] 8021q: adding VLAN 0 to HW filter on device team0 [ 658.948413][ T2974] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.955640][ T2974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 659.002704][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.004629][ T2974] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.010554][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.017695][ T2974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 659.035231][ T5275] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 659.137637][ T1075] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.160912][ T1075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.339912][T16113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 659.485007][ T46] usb 1-1: USB disconnect, device number 85 [ 659.502124][T16113] veth0_vlan: entered promiscuous mode [ 659.518590][ T1850] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 659.598294][T16291] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2499'. [ 659.604665][T16113] veth1_vlan: entered promiscuous mode [ 659.733961][ T1850] usb 4-1: Using ep0 maxpacket: 8 [ 659.751894][ T1850] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 659.780711][ T1850] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 659.808124][T16113] veth0_macvtap: entered promiscuous mode [ 659.835324][ T1850] usb 4-1: New USB device found, idVendor=05ac, idProduct=9219, bcdDevice=61.da [ 659.847986][T16113] veth1_macvtap: entered promiscuous mode [ 659.861012][ T1850] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 659.889214][ T1850] usb 4-1: Manufacturer: syz [ 659.916828][T16113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 659.928492][ T1850] usb 4-1: config 0 descriptor?? [ 659.960905][ T1850] appledisplay 4-1:0.0: Could not find int-in endpoint [ 659.971441][T16113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.982698][ T1850] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 659.990196][T16113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 660.014811][T16113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.050643][T16113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 660.069768][T16113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.079924][T16113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 660.091106][T16113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.114006][T16113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 660.142369][T16113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 660.175141][T16113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.209932][T16113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 660.254672][T16113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.276116][T16113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 660.306972][T16113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.337032][T16113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 660.369064][T16113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.406658][T16113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 660.449664][T16312] binder: transaction release 293 bad object at offset 536871616, size 72 [ 660.462062][T16113] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.476483][T16312] binder: transaction release 293 bad object at offset 536871168, size 72 [ 660.511801][T16113] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.542457][T16113] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.569218][T16113] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.838606][ T1850] usb 3-1: USB disconnect, device number 89 [ 660.881840][ T1075] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 660.966478][ T1075] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.182036][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.220562][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.342769][ T5295] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 661.572105][ T5295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 661.591886][T16345] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 661.600847][T16345] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 661.609749][T16345] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 661.618490][T16345] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 661.653056][ T5295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 661.674239][ T5295] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 661.692872][ T5295] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.718411][ T5295] usb 1-1: config 0 descriptor?? [ 661.769765][T16345] vxlan0: entered promiscuous mode [ 661.819935][T16345] vxlan0: entered allmulticast mode [ 661.941254][T16345] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 661.951280][T16345] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 661.961084][T16345] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 661.970374][T16345] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 662.210723][T16319] syz.4.2580 (16319) used greatest stack depth: 18768 bytes left [ 662.282977][ T6951] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 662.305668][ T46] usb 4-1: USB disconnect, device number 100 [ 662.495804][ T6951] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 662.536772][ T6951] usb 2-1: config 0 has no interface number 0 [ 662.562064][ T6951] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 662.619081][ T6951] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.697225][ T6951] usb 2-1: config 0 descriptor?? [ 662.754949][ T6951] usb 2-1: selecting invalid altsetting 1 [ 662.776304][ T6951] dvb_ttusb_budget: ttusb_init_controller: error [ 662.809567][ T46] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 662.820037][ T6951] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 662.924291][ T6951] DVB: Unable to find symbol cx22700_attach() [ 663.013128][ T46] usb 4-1: Using ep0 maxpacket: 16 [ 663.046052][ T46] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 663.098097][ T6951] DVB: Unable to find symbol tda10046_attach() [ 663.106127][ T46] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 663.124095][ T6951] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 663.150837][ T6951] usb 2-1: USB disconnect, device number 78 [ 663.164814][ T46] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 663.201178][ T46] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 663.244542][ T46] usb 4-1: Product: syz [ 663.249097][ T46] usb 4-1: Manufacturer: syz [ 663.272096][ T46] usb 4-1: SerialNumber: syz [ 663.294839][ T46] usb 4-1: config 0 descriptor?? [ 663.312410][ T46] usb 4-1: NFC: intf ffff88804e415000 id ffffffff8f2caa40 [ 663.529598][ T9] usb 4-1: USB disconnect, device number 101 [ 663.677659][T16393] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2592'. [ 663.894192][T16399] syz.4.2594 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 663.910171][ T5295] usbhid 1-1:0.0: can't add hid device: -71 [ 663.924896][ T5275] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 663.931753][ T5295] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 663.953567][ T5295] usb 1-1: USB disconnect, device number 86 [ 664.146484][ T5275] usb 3-1: Using ep0 maxpacket: 16 [ 664.166944][ T5275] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 664.205163][ T5275] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 664.228737][ T5275] usb 3-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 664.274285][ T5275] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.339168][ T5275] usb 3-1: config 0 descriptor?? [ 664.409507][T16422] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2599'. [ 664.412824][ T6951] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 664.461395][T16423] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2600'. [ 664.619989][T16430] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2603'. [ 664.634550][ T6951] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 664.653654][ T6951] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 664.697665][ T6951] usb 2-1: config 0 has no interface number 0 [ 664.710633][T16430] : entered promiscuous mode [ 664.717960][ T6951] usb 2-1: config 0 interface 106 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 664.739682][ T6951] usb 2-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 664.762175][ T6951] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 664.775843][ T6951] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.797963][ T6951] usb 2-1: config 0 descriptor?? [ 664.798988][ T5275] ntrig 0003:1B96:0008.002F: unbalanced collection at end of report description [ 664.868963][ T6951] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 664.910967][ T5275] ntrig 0003:1B96:0008.002F: parse failed [ 664.940182][ T5275] ntrig 0003:1B96:0008.002F: probe with driver ntrig failed with error -22 [ 665.096802][ T5295] usb 3-1: USB disconnect, device number 90 [ 665.923182][ T1075] usb 2-1: Failed to submit usb control message: -110 [ 665.988233][ T1075] usb 2-1: unable to send the bmi data to the device: -110 [ 666.022871][ T1075] usb 2-1: unable to get target info from device [ 666.048040][ T1075] usb 2-1: could not get target info (-110) [ 666.072881][ T1075] usb 2-1: could not probe fw (-110) [ 666.222145][T16469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2611'. [ 666.772783][ T5280] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 666.982232][ T5295] usb 2-1: USB disconnect, device number 79 [ 667.033096][ T5280] usb 1-1: device descriptor read/64, error -71 [ 667.353170][ T5280] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 667.385333][T16501] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2616'. [ 667.404666][T16501] netlink: 31 bytes leftover after parsing attributes in process `syz.3.2616'. [ 667.445810][T16501] netlink: 'syz.3.2616': attribute type 3 has an invalid length. [ 667.494589][ T5295] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 667.506779][T16501] netlink: 'syz.3.2616': attribute type 2 has an invalid length. [ 667.518644][T16501] netlink: 31 bytes leftover after parsing attributes in process `syz.3.2616'. [ 667.577252][ T5280] usb 1-1: device descriptor read/64, error -71 [ 667.609743][ T4619] Bluetooth: hci5: command 0x0406 tx timeout [ 667.624343][T16479] dccp_close: ABORT with 1964 bytes unread [ 667.733641][ T5280] usb usb1-port1: attempt power cycle [ 667.744589][ T5295] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 667.810907][ T5295] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 667.841796][ T5295] usb 2-1: New USB device found, idVendor=468c, idProduct=90ea, bcdDevice=99.6d [ 667.873047][ T5295] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.887455][ T5295] usb 2-1: Product: syz [ 667.910124][ T5295] usb 2-1: Manufacturer: syz [ 667.941284][ T5295] usb 2-1: SerialNumber: syz [ 667.964223][ T5295] usb 2-1: config 0 descriptor?? [ 668.002933][ T5295] usb 2-1: Found UVC 0.00 device syz (468c:90ea) [ 668.009309][ T5295] usb 2-1: No valid video chain found. [ 668.155198][T16521] trusted_key: encrypted_key: insufficient parameters specified [ 668.173891][ T5280] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 668.184115][T16521] trusted_key: encrypted_key: insufficient parameters specified [ 668.204423][ T5280] usb 1-1: device descriptor read/8, error -71 [ 668.233752][T16521] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 668.293556][T16521] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 668.392891][T16526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 668.416399][T16526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.501447][T16531] loop8: detected capacity change from 0 to 6 [ 668.512816][ T5280] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 668.522856][T16531] Dev loop8: unable to read RDB block 6 [ 668.528449][T16531] loop8: unable to read partition table [ 668.548866][T16531] loop8: partition table beyond EOD, truncated [ 668.563008][T16531] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 668.563008][T16531] ) failed (rc=-5) [ 668.577834][ T5280] usb 1-1: device descriptor read/8, error -71 [ 668.622964][ T8] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 668.709712][ T5280] usb usb1-port1: unable to enumerate USB device [ 668.842748][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 668.852023][ T8] usb 5-1: New USB device found, idVendor=0e41, idProduct=414d, bcdDevice=28.2f [ 668.862515][ T5295] usb 2-1: USB disconnect, device number 80 [ 668.869203][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.882713][ T8] usb 5-1: Product: syz [ 668.886900][ T8] usb 5-1: Manufacturer: syz [ 668.893219][ T8] usb 5-1: SerialNumber: syz [ 668.913918][ T8] usb 5-1: config 0 descriptor?? [ 668.936539][ T8] snd_usb_podhd 5-1:0.0: Line 6 POD HD500 found [ 668.952703][ T8] usb 5-1: selecting invalid altsetting 1 [ 668.958447][ T8] snd_usb_podhd 5-1:0.0: set_interface failed [ 668.972895][ T6951] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 668.982953][ T8] snd_usb_podhd 5-1:0.0: Line 6 POD HD500 now disconnected [ 668.990346][ T8] snd_usb_podhd 5-1:0.0: probe with driver snd_usb_podhd failed with error -22 [ 669.138209][ T1850] usb 5-1: USB disconnect, device number 110 [ 669.170899][ T6951] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 669.185121][ T6951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.197777][ T6951] usb 3-1: Product: syz [ 669.201962][ T6951] usb 3-1: Manufacturer: syz [ 669.210514][ T6951] usb 3-1: SerialNumber: syz [ 669.218156][ T6951] usb 3-1: config 0 descriptor?? [ 669.433983][ T6951] cx82310_eth 3-1:0.0: probe with driver cx82310_eth failed with error -22 [ 669.487997][T16540] fuse: Invalid rootmode [ 669.839068][ T6951] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 669.971491][T16555] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2633'. [ 670.280395][T16571] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2635'. [ 670.432851][ T8] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 670.671693][ T8] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 670.707931][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.739832][ T8] usb 5-1: Product: syz [ 670.747837][ T8] usb 5-1: Manufacturer: syz [ 670.782962][ T8] usb 5-1: SerialNumber: syz [ 670.821423][ T8] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 670.920172][ T5280] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 671.144108][ T5295] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 671.368679][ T5295] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 671.398394][ T5295] usb 1-1: config 0 has no interface number 0 [ 671.417829][ T5295] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 671.431771][ T5295] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.445446][ T5295] usb 1-1: config 0 descriptor?? [ 671.469552][ T5295] usb 1-1: selecting invalid altsetting 1 [ 671.477915][ T5295] dvb_ttusb_budget: ttusb_init_controller: error [ 671.484959][ T5295] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 671.533110][ T8] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 671.563494][ T5295] DVB: Unable to find symbol cx22700_attach() [ 671.639172][ T5295] DVB: Unable to find symbol tda10046_attach() [ 671.669320][ T5295] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 671.704825][ T5295] usb 1-1: USB disconnect, device number 91 [ 671.722815][ T8] usb 2-1: device descriptor read/64, error -71 [ 671.763366][ T1850] usb 3-1: USB disconnect, device number 91 [ 671.989200][T16596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2642'. [ 672.006226][ T5280] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 672.015817][ T5280] ath9k_htc: Failed to initialize the device [ 672.024956][ T8] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 672.058812][ T5280] usb 5-1: ath9k_htc: USB layer deinitialized [ 672.202857][ T8] usb 2-1: device descriptor read/64, error -71 [ 672.333676][ T8] usb usb2-port1: attempt power cycle [ 672.772929][ T8] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 672.824844][ T8] usb 2-1: device descriptor read/8, error -71 [ 672.897174][ T29] audit: type=1326 audit(1723517712.676:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16610 comm="syz.3.2648" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f883c5799f9 code=0x0 [ 672.999191][T16616] fuse: Unknown parameter '' [ 673.047490][T16618] binder: 16613:16618 ioctl c018620c 0 returned -14 [ 673.113263][ T8] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 673.163672][ T8] usb 2-1: device descriptor read/8, error -71 [ 673.241781][ T5295] usb 5-1: USB disconnect, device number 111 [ 673.302311][ T8] usb usb2-port1: unable to enumerate USB device [ 673.337273][T16625] netlink: 41 bytes leftover after parsing attributes in process `syz.4.2650'. [ 673.483981][T16630] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2651'. [ 673.597005][ T29] audit: type=1326 audit(1723517713.376:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16633 comm="syz.0.2652" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0bcad799f9 code=0x0 [ 673.762797][ T5295] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 673.962853][ T5295] usb 5-1: Using ep0 maxpacket: 16 [ 673.976087][ T5295] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 673.983763][ T5295] usb 5-1: config 0 interface 0 altsetting 8 has 6 endpoint descriptors, different from the interface descriptor's value: 12 [ 673.997076][ T5295] usb 5-1: config 0 interface 0 has no altsetting 0 [ 674.009960][ T5295] usb 5-1: New USB device found, idVendor=1199, idProduct=0027, bcdDevice=1e.57 [ 674.022956][ T5295] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.031131][ T5295] usb 5-1: Product: syz [ 674.036573][ T5295] usb 5-1: Manufacturer: syz [ 674.041331][ T5295] usb 5-1: SerialNumber: syz [ 674.055444][ T5295] usb 5-1: config 0 descriptor?? [ 674.069278][ T5295] sierra 5-1:0.0: Sierra USB modem converter detected [ 674.502076][T16647] loop8: detected capacity change from 0 to 6 [ 674.520119][T16647] Dev loop8: unable to read RDB block 6 [ 674.536533][T16647] loop8: unable to read partition table [ 674.542376][T16647] loop8: partition table beyond EOD, truncated [ 674.595380][T16647] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 674.595380][T16647] ) failed (rc=-5) [ 674.773884][T16625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.790357][T16625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 674.806858][ T5295] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 674.817839][ T5295] usb 5-1: Sierra USB modem converter now attached to ttyUSB1 [ 674.922815][ T9] usb 1-1: new full-speed USB device number 92 using dummy_hcd [ 675.045949][T16665] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2663'. [ 675.141986][T16649] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2656'. [ 675.184787][ T5295] usb 5-1: USB disconnect, device number 112 [ 675.204228][T16668] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2656'. [ 675.222500][ T5295] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 675.283312][ T5295] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 675.294755][T16664] ebtables: ebtables: counters copy to user failed while replacing table [ 675.310121][ T5295] sierra 5-1:0.0: device disconnected [ 675.357713][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 675.372372][T16673] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2664'. [ 675.413700][ T9] usb 1-1: too many configurations: 148, using maximum allowed: 8 [ 675.459054][ T9] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 675.483386][ T9] usb 1-1: can't read configurations, error -71 [ 675.507739][T16677] syzkaller1: entered promiscuous mode [ 675.513563][T16677] syzkaller1: entered allmulticast mode [ 675.602057][T16681] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2667'. [ 675.635287][T16681] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2667'. [ 676.041663][T16691] netlink: 'syz.1.2672': attribute type 1 has an invalid length. [ 676.166079][T16697] loop8: detected capacity change from 0 to 6 [ 676.186731][T16697] Dev loop8: unable to read RDB block 6 [ 676.192828][ T9] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 676.200833][T16697] loop8: unable to read partition table [ 676.208266][T16697] loop8: partition table beyond EOD, truncated [ 676.214579][T16697] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 676.214579][T16697] ) failed (rc=-5) [ 676.362835][ T8] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 676.395136][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 676.413259][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 676.428057][ T9] usb 1-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 676.439626][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.477763][ T9] usb 1-1: config 0 descriptor?? [ 676.541847][T16708] vivid-000: disconnect [ 676.576378][ T8] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 676.598425][T16707] vivid-000: reconnect [ 676.604649][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.656264][ T8] usb 2-1: config 0 descriptor?? [ 676.710703][ T9] zydacron 0003:13EC:0006.0030: item fetching failed at offset 3/5 [ 676.756582][ T9] zydacron 0003:13EC:0006.0030: parse failed [ 676.772052][ T9] zydacron 0003:13EC:0006.0030: probe with driver zydacron failed with error -22 [ 676.819766][T16712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2679'. [ 676.911187][ T6951] usb 1-1: USB disconnect, device number 93 [ 677.053881][T16719] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2682'. [ 677.090667][ T8] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 677.207413][T16729] ======================================================= [ 677.207413][T16729] WARNING: The mand mount option has been deprecated and [ 677.207413][T16729] and is ignored by this kernel. Remove the mand [ 677.207413][T16729] option from the mount to silence this warning. [ 677.207413][T16729] ======================================================= [ 677.242272][ C0] vkms_vblank_simulate: vblank timer overrun [ 677.249345][T16729] fuse: Bad value for 'fd' [ 677.256194][T16725] binder: 16724:16725 ioctl c0096616 200001c0 returned -22 [ 677.301137][ T29] audit: type=1326 audit(1723517717.076:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16722 comm="syz.2.2683" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e7e5799f9 code=0x10000 [ 677.387237][T16727] ebtables: ebtables: counters copy to user failed while replacing table [ 677.427659][T16734] bridge_slave_1: left allmulticast mode [ 677.438876][T16734] bridge_slave_1: left promiscuous mode [ 677.449792][T16734] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.479737][T16734] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 677.498576][ T29] audit: type=1326 audit(1723517717.276:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16690 comm="syz.1.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcd67799f9 code=0x7ffc0000 [ 677.576928][ T8] gs_usb 2-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 677.584962][ T29] audit: type=1326 audit(1723517717.276:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16690 comm="syz.1.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcd67799f9 code=0x7ffc0000 [ 677.683975][ T8] usb 2-1: USB disconnect, device number 85 [ 677.717502][ T29] audit: type=1326 audit(1723517717.276:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16690 comm="syz.1.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbcd67799f9 code=0x7ffc0000 [ 677.780325][T16741] syzkaller1: entered promiscuous mode [ 677.800198][ T29] audit: type=1326 audit(1723517717.276:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16690 comm="syz.1.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcd67799f9 code=0x7ffc0000 [ 677.803722][T16741] syzkaller1: entered allmulticast mode [ 677.832123][ T29] audit: type=1326 audit(1723517717.276:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16690 comm="syz.1.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcd67799f9 code=0x7ffc0000 [ 677.878955][ T29] audit: type=1326 audit(1723517717.276:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16690 comm="syz.1.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fbcd67799f9 code=0x7ffc0000 [ 677.972096][ T29] audit: type=1326 audit(1723517717.276:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16690 comm="syz.1.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcd67799f9 code=0x7ffc0000 [ 677.995714][ T46] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 678.017392][ T29] audit: type=1326 audit(1723517717.276:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16690 comm="syz.1.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcd67799f9 code=0x7ffc0000 [ 678.046648][ T29] audit: type=1326 audit(1723517717.306:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16690 comm="syz.1.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fbcd67799f9 code=0x7ffc0000 [ 678.078176][ T29] audit: type=1326 audit(1723517717.306:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16690 comm="syz.1.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcd67799f9 code=0x7ffc0000 [ 678.107525][ T29] audit: type=1326 audit(1723517717.316:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16690 comm="syz.1.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbcd6778390 code=0x7ffc0000 [ 678.141227][ T29] audit: type=1326 audit(1723517717.336:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16690 comm="syz.1.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcd67799f9 code=0x7ffc0000 [ 678.168287][ T29] audit: type=1326 audit(1723517717.336:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16690 comm="syz.1.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcd67799f9 code=0x7ffc0000 [ 678.199060][ T29] audit: type=1326 audit(1723517717.336:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16690 comm="syz.1.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbcd67799f9 code=0x7ffc0000 [ 678.232387][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 678.261777][ T46] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 678.283039][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 678.299911][ T46] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 678.310154][ T29] audit: type=1326 audit(1723517717.336:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16690 comm="syz.1.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcd67799f9 code=0x7ffc0000 [ 678.364409][ T46] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 678.409461][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.445919][T16752] loop8: detected capacity change from 0 to 6 [ 678.452330][ T46] usb 1-1: config 0 descriptor?? [ 678.474056][T16752] Dev loop8: unable to read RDB block 6 [ 678.485517][T16753] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2692'. [ 678.502063][ T29] audit: type=1326 audit(1723517717.336:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16690 comm="syz.1.2672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcd67799f9 code=0x7ffc0000 [ 678.502108][T16752] loop8: unable to read partition table [ 678.633346][T16752] loop8: partition table beyond EOD, truncated [ 678.668444][T16752] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 678.668444][T16752] ) failed (rc=-5) [ 679.083817][T16769] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2695'. [ 679.240550][ T5275] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 679.282856][T16774] fuse: Unknown parameter 'audit' [ 679.291096][ T46] hdpvr 1-1:0.0: unexpected answer of status request, len -71 [ 679.314455][ T46] hdpvr 1-1:0.0: device init failed [ 679.319924][ T46] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12 [ 679.350673][ T46] usb 1-1: USB disconnect, device number 94 [ 679.412817][ T6951] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 679.485027][ T5275] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 679.522698][ T5275] usb 2-1: config 0 has no interface number 0 [ 679.528944][ T5275] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 679.582420][ T5275] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.596370][ T5275] usb 2-1: config 0 descriptor?? [ 679.605551][ T6951] usb 4-1: Using ep0 maxpacket: 8 [ 679.623629][ T5275] usb 2-1: selecting invalid altsetting 1 [ 679.634101][ T5275] dvb_ttusb_budget: ttusb_init_controller: error [ 679.644886][ T6951] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 679.666407][ T5275] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 679.707645][ T6951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.718132][ T6951] usb 4-1: Product: syz [ 679.722392][ T6951] usb 4-1: Manufacturer: syz [ 679.729348][ T6951] usb 4-1: SerialNumber: syz [ 679.740036][ T6951] usb 4-1: config 0 descriptor?? [ 679.842216][ T5275] DVB: Unable to find symbol cx22700_attach() [ 679.975570][ T6951] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 680.039140][ T5275] DVB: Unable to find symbol tda10046_attach() [ 680.064641][ T5275] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 680.140955][ T5275] usb 2-1: USB disconnect, device number 86 [ 680.727416][T16798] ebtables: ebtables: counters copy to user failed while replacing table [ 681.028741][T16819] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2705'. [ 681.054398][T16821] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2707'. [ 681.110538][T16821] batman_adv: batadv0: Adding interface: dummy0 [ 681.123261][T16821] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 681.168790][T16821] batman_adv: batadv0: Interface activated: dummy0 [ 681.182982][ T9] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 681.397379][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 681.417252][T16831] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 681.441056][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 681.445525][T16831] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 681.489501][ T9] usb 1-1: New USB device found, idVendor=0404, idProduct=2801, bcdDevice= 0.00 [ 681.565885][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.587234][ T9] usb 1-1: config 0 descriptor?? [ 681.800761][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 681.831502][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 681.867415][ T9] usb 1-1: USB disconnect, device number 95 [ 682.012271][T16836] kvm: pic: non byte write [ 682.245310][ T6951] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 682.593988][T16848] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2714'. [ 682.656224][T16850] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2715'. [ 682.866168][ T46] usb 4-1: USB disconnect, device number 102 [ 683.022541][T16862] Cannot find set identified by id 0 to match [ 683.069110][T16865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2721'. [ 683.440298][ T5235] Bluetooth: hci5: ISO packet for unknown connection handle 0 [ 683.475899][T16877] loop8: detected capacity change from 0 to 6 [ 683.488787][T16877] Dev loop8: unable to read RDB block 6 [ 683.496779][T16877] loop8: unable to read partition table [ 683.511430][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 683.511445][ T29] audit: type=1326 audit(1723517723.286:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16874 comm="syz.2.2725" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e7e5799f9 code=0x0 [ 683.533027][T16877] loop8: partition table beyond EOD, truncated [ 683.558544][T16877] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 683.558544][T16877] ) failed (rc=-5) [ 683.634792][T16888] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 683.641564][T16888] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 683.693823][T16888] vhci_hcd vhci_hcd.0: Device attached [ 683.709290][ T9] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 683.713919][T16892] dvmrp0: entered allmulticast mode [ 683.729556][T16888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2725'. [ 683.755732][T16892] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2731'. [ 683.777981][ T46] IPVS: starting estimator thread 0... [ 683.787895][T16892] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 683.872816][T16896] IPVS: using max 33 ests per chain, 79200 per kthread [ 683.883764][ T6951] vhci_hcd: vhci_device speed not set [ 683.902849][ T5275] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 683.932817][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 683.948393][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 683.963929][ T6951] usb 13-1: new full-speed USB device number 2 using vhci_hcd [ 683.985145][ T9] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 683.995136][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.010761][ T9] usb 4-1: Product: syz [ 684.015172][ T9] usb 4-1: Manufacturer: syz [ 684.055195][ T9] usb 4-1: SerialNumber: syz [ 684.076282][ T9] usb 4-1: config 0 descriptor?? [ 684.099362][T16902] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 684.123149][ T5275] usb 5-1: Using ep0 maxpacket: 32 [ 684.129129][ T9] usb 4-1: no audio or video endpoints found [ 684.141796][ T5275] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 684.155346][ T5275] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 684.181208][ T5275] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 684.195364][ T5275] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 684.196242][T16889] vhci_hcd: connection reset by peer [ 684.204525][ T5275] usb 5-1: config 1 has no interface number 0 [ 684.218643][ T5275] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 684.234112][ T5275] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 684.239906][ T1075] vhci_hcd: stop threads [ 684.244330][ T5275] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.296034][ T1075] vhci_hcd: release socket [ 684.321527][ T1075] vhci_hcd: disconnect device [ 684.331728][ T9] usb 4-1: USB disconnect, device number 103 [ 684.351908][ T5275] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 684.516113][ T5275] snd_usb_pod 5-1:1.1: endpoint not available, using fallback values [ 684.550634][T16907] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2737'. [ 684.564223][ T5275] snd_usb_pod 5-1:1.1: invalid control EP [ 684.573855][ T5275] snd_usb_pod 5-1:1.1: cannot start listening: -22 [ 684.608767][ T5275] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 684.636751][ T5275] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 684.801878][T16911] netlink: 'syz.2.2739': attribute type 29 has an invalid length. [ 684.837317][T16911] netlink: 'syz.2.2739': attribute type 29 has an invalid length. [ 684.873359][ T5295] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 685.023018][ T5295] usb 2-1: device descriptor read/64, error -71 [ 685.292908][ T5295] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 685.480801][ T46] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 685.488684][ T5295] usb 2-1: device descriptor read/64, error -71 [ 685.622950][ T5295] usb usb2-port1: attempt power cycle [ 685.688509][ T46] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 685.714720][ T46] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 685.732777][ T9] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 685.740471][ T46] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 685.764504][ T46] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 685.799425][ T46] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 685.815188][ T46] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 685.830462][ T46] usb 4-1: Product: syz [ 685.834971][ T46] usb 4-1: Manufacturer: syz [ 685.854621][ T46] cdc_wdm 4-1:1.0: skipping garbage [ 685.872138][ T46] cdc_wdm 4-1:1.0: skipping garbage [ 685.882570][ T46] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 685.922765][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 685.935032][ T9] usb 1-1: config 0 has no interfaces? [ 685.939135][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=05e6, bcdDevice=4e.00 [ 685.939156][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.939168][ T9] usb 1-1: Product: syz [ 685.939177][ T9] usb 1-1: Manufacturer: syz [ 685.939186][ T9] usb 1-1: SerialNumber: syz [ 685.941412][ T9] usb 1-1: config 0 descriptor?? [ 686.006168][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.006224][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.049177][ T5295] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 686.073433][ T5295] usb 2-1: device descriptor read/8, error -71 [ 686.204484][T16921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 686.204506][T16921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.204648][T16921] dummy0: entered promiscuous mode [ 686.205293][T16921] dummy0: left promiscuous mode [ 686.229298][ T46] usb 4-1: USB disconnect, device number 104 [ 686.323171][ T5275] usb 1-1: USB disconnect, device number 96 [ 686.353635][ T5295] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 686.386611][ T5295] usb 2-1: device descriptor read/8, error -71 [ 686.503242][ T5295] usb usb2-port1: unable to enumerate USB device [ 686.590047][ T5295] usb 5-1: USB disconnect, device number 113 [ 686.775211][T16928] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2743'. [ 687.006662][ T5235] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 687.997755][T16945] kvm: pic: non byte write [ 688.230025][T16961] binder: transaction release 311 bad object at offset 536871616, size 72 [ 688.242101][T16961] binder: transaction release 311 bad object at offset 536871168, size 72 [ 688.468610][T16974] loop8: detected capacity change from 0 to 6 [ 688.494150][T16974] Dev loop8: unable to read RDB block 6 [ 688.524343][T16974] loop8: unable to read partition table [ 688.531392][T16974] loop8: partition table beyond EOD, truncated [ 688.548204][T16974] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 688.548204][T16974] ) failed (rc=-5) [ 688.566309][ T5275] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 688.668475][T16986] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.717228][T16984] ptrace attach of "./syz-executor exec"[16987] was attempted by ""[16984] [ 688.729862][T16986] loop0: detected capacity change from 0 to 7 [ 688.746366][T16986] Dev loop0: unable to read RDB block 7 [ 688.759427][T16986] loop0: unable to read partition table [ 688.765666][T16986] loop0: partition table beyond EOD, truncated [ 688.771851][T16986] loop_reread_partitions: partition scan of loop0 (被xd) failed (rc=-5) [ 688.789680][ T5275] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 688.824686][ T5275] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 688.868309][ T5275] usb 5-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 688.887223][ T5275] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.907565][ T5275] usb 5-1: config 0 descriptor?? [ 689.133916][ T6951] vhci_hcd: vhci_device speed not set [ 689.620736][T17014] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2772'. [ 690.400855][T17031] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 691.216314][T17053] ptrace attach of "./syz-executor exec"[17056] was attempted by ""[17053] [ 691.311602][ T5275] usbhid 5-1:0.0: can't add hid device: -71 [ 691.333541][ T5275] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 691.362330][ T5275] usb 5-1: USB disconnect, device number 114 [ 691.476654][ T8] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 691.609400][T17062] Cannot find set identified by id 0 to match [ 691.683091][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 691.711150][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 691.747143][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 691.777853][ T8] usb 2-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.00 [ 691.806852][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.850733][ T8] usb 2-1: config 0 descriptor?? [ 691.865298][T17066] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2790'. [ 691.969745][T17070] loop8: detected capacity change from 0 to 6 [ 691.984051][T17070] Dev loop8: unable to read RDB block 6 [ 691.993417][T17070] loop8: unable to read partition table [ 691.999321][T17070] loop8: partition table beyond EOD, truncated [ 692.015908][T17070] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 692.015908][T17070] ) failed (rc=-5) [ 692.215457][ T5280] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 692.253903][T17078] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2794'. [ 692.299669][T17055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 692.349150][T17055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 692.396606][T17080] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 692.469149][ T5280] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 692.501354][ T5280] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 692.548743][ T8] usbhid 2-1:0.0: can't add hid device: -71 [ 692.560902][ T5280] usb 4-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 692.563143][ T6951] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 692.598155][ T8] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 692.645466][ T5280] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.665166][ T8] usb 2-1: USB disconnect, device number 91 [ 692.689868][ T5280] usb 4-1: config 0 descriptor?? [ 692.718781][T17085] netlink: 'syz.1.2798': attribute type 2 has an invalid length. [ 692.747428][T17085] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2798'. [ 692.802784][ T6951] usb 3-1: Using ep0 maxpacket: 8 [ 692.809916][ T6951] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 692.824977][ T6951] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 692.844169][ T6951] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 692.861202][ T6951] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 692.910275][ T6951] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 692.937663][ T6951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.163768][ T8] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 693.281673][ T6951] usb 3-1: GET_CAPABILITIES returned 0 [ 693.303728][ T6951] usbtmc 3-1:16.0: can't read capabilities [ 693.402327][ T8] usb 2-1: unable to get BOS descriptor or descriptor too short [ 693.443578][ T8] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 693.473013][ T8] usb 2-1: can't read configurations, error -71 [ 693.508573][ T5280] usbhid 4-1:0.0: can't add hid device: -71 [ 693.522819][ T5280] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 693.549626][ T5280] usb 4-1: USB disconnect, device number 105 [ 693.600760][ T5275] usb 3-1: USB disconnect, device number 92 [ 694.322614][T17106] ptrace attach of "./syz-executor exec"[17111] was attempted by ""[17106] [ 694.629614][ T1125] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.840360][ T1125] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.943748][T17123] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2812'. [ 695.104623][ T1125] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.327844][ T1125] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.613728][ T1125] bridge_slave_0: left allmulticast mode [ 695.640627][ T1125] bridge_slave_0: left promiscuous mode [ 695.662844][ T1125] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.119466][T17143] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2820'. [ 696.205259][ T4619] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 696.217011][ T4619] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 696.225822][ T4619] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 696.235353][ T4619] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 696.244189][ T4619] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 696.252712][ T4619] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 696.387312][ T5275] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 696.587771][T17150] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2822'. [ 696.608237][ T5275] usb 4-1: Using ep0 maxpacket: 32 [ 696.685872][T17153] ptrace attach of "./syz-executor exec"[17154] was attempted by ""[17153] [ 696.885521][ T1125] geneve1 (unregistering): left allmulticast mode [ 696.923019][ T1125] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 696.940361][ T1125] macvlan2 (unregistering): left promiscuous mode [ 697.500583][ T1125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 697.528784][T17158] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2824'. [ 697.541978][ T1125] bond_slave_0: left promiscuous mode [ 697.550839][ T1125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 697.564461][ T1125] bond_slave_1: left promiscuous mode [ 697.585316][ T1125] bond0 (unregistering): Released all slaves [ 697.601795][ T1125] bond1 (unregistering): Released all slaves [ 697.656960][ T1125] bond2 (unregistering): Released all slaves [ 697.716208][T17135] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 697.855387][ T1125] tipc: Left network mode [ 698.323129][ T5235] Bluetooth: hci2: command tx timeout [ 698.548542][ T1125] mac80211_hwsim hwsim91 wlan0 (unregistering): left allmulticast mode [ 698.945349][ T5275] usb 4-1: unable to get BOS descriptor or descriptor too short [ 698.964981][ T1125] hsr_slave_0: left promiscuous mode [ 698.980461][ T5275] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 698.992929][ T5275] usb 4-1: can't read configurations, error -71 [ 699.068519][ T1125] hsr_slave_1: left promiscuous mode [ 699.088032][ T1125] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 699.112720][ T1125] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 699.138838][ T5235] Bluetooth: to_multiplier 0 < 10 [ 699.168742][ T1125] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 699.213401][ T1125] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 699.338753][ T1125] veth1_macvtap: left promiscuous mode [ 699.347342][ T1125] veth0_macvtap: left promiscuous mode [ 699.357579][ T1125] veth1_vlan: left promiscuous mode [ 699.363167][ T1125] veth0_vlan: left promiscuous mode [ 699.372974][ T5275] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 699.473577][ T8] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 699.572792][ T5275] usb 4-1: Using ep0 maxpacket: 16 [ 699.588369][ T5275] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 699.611532][ T5275] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 699.626864][T17206] ptrace attach of "./syz-executor exec"[17207] was attempted by ""[17206] [ 699.643006][ T5275] usb 4-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 699.662292][ T5275] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.684798][ T8] usb 5-1: config 215 has an invalid descriptor of length 198, skipping remainder of the config [ 699.696841][ T5275] usb 4-1: config 0 descriptor?? [ 699.708223][ T8] usb 5-1: config 215 has 0 interfaces, different from the descriptor's value: 1 [ 699.727930][ T8] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 699.753048][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.049913][ T8] usb 5-1: string descriptor 0 read error: -71 [ 700.072472][ T8] usb 5-1: USB disconnect, device number 115 [ 700.213105][ T5275] waltop 0003:172F:0032.0031: hidraw0: USB HID v0.00 Device [HID 172f:0032] on usb-dummy_hcd.3-1/input0 [ 700.402984][ T5235] Bluetooth: hci2: command tx timeout [ 701.206683][ T5235] Bluetooth: hci1: command tx timeout [ 701.234107][ T1125] team0 (unregistering): Port device team_slave_1 removed [ 701.350796][ T1125] team0 (unregistering): Port device team_slave_0 removed [ 702.096215][ T9535] usb 4-1: USB disconnect, device number 107 [ 702.483313][ T5235] Bluetooth: hci2: command tx timeout [ 702.597308][T17210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2835'. [ 702.663761][T17213] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2834'. [ 702.752297][T17147] chnl_net:caif_netlink_parms(): no params data found [ 703.004407][ T8] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 703.241206][ T8] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 703.272798][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.280827][ T8] usb 4-1: Product: syz [ 703.306525][ T8] usb 4-1: Manufacturer: syz [ 703.311146][ T8] usb 4-1: SerialNumber: syz [ 703.317592][T17147] bridge0: port 1(bridge_slave_0) entered blocking state [ 703.362519][T17147] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.363428][ T8] usb 4-1: config 0 descriptor?? [ 703.386059][T17147] bridge_slave_0: entered allmulticast mode [ 703.412750][T17147] bridge_slave_0: entered promiscuous mode [ 703.439900][T17147] bridge0: port 2(bridge_slave_1) entered blocking state [ 703.474824][T17147] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.482059][T17147] bridge_slave_1: entered allmulticast mode [ 703.500507][T17147] bridge_slave_1: entered promiscuous mode [ 703.610163][T17269] netlink: 'syz.4.2846': attribute type 1 has an invalid length. [ 703.632978][ T8] cx82310_eth 4-1:0.0: probe with driver cx82310_eth failed with error -22 [ 703.716703][T17269] trusted_key: syz.4.2846 sent an empty control message without MSG_MORE. [ 703.762021][T17147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 703.964366][T17147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 704.028432][ T8] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 704.036402][ T5275] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 704.101343][T17147] team0: Port device team_slave_0 added [ 704.178379][T17147] team0: Port device team_slave_1 added [ 704.194840][T17287] Cannot find add_set index 0 as target [ 704.255890][ T5275] usb 2-1: config 0 has no interfaces? [ 704.268381][T17147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 704.275473][ T5275] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 704.278992][T17147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 704.315591][T17147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 704.322137][ T5275] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.329743][T17147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 704.347483][T17147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 704.392814][T17147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 704.393737][ T5275] usb 2-1: config 0 descriptor?? [ 704.405963][T17287] netdevsim netdevsim4: Direct firmware load for ng failed with error -2 [ 704.429509][T17287] netdevsim netdevsim4: Falling back to sysfs fallback for: ng [ 704.548418][T17147] hsr_slave_0: entered promiscuous mode [ 704.555579][T17147] hsr_slave_1: entered promiscuous mode [ 704.563508][ T5235] Bluetooth: hci2: command tx timeout [ 704.742766][ T1850] usb 3-1: new low-speed USB device number 93 using dummy_hcd [ 704.922984][ T1850] usb 3-1: Invalid ep0 maxpacket: 16 [ 705.082797][ T1850] usb 3-1: new low-speed USB device number 94 using dummy_hcd [ 705.283939][ T1850] usb 3-1: Invalid ep0 maxpacket: 16 [ 705.301443][T17310] fuse: Bad value for 'fd' [ 705.309085][T17310] fuse: Bad value for 'fd' [ 705.316175][ T1850] usb usb3-port1: attempt power cycle [ 705.320542][ T5275] usb 2-1: USB disconnect, device number 94 [ 705.390670][T17310] input: syz1 as /devices/virtual/input/input41 [ 705.498071][T17316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2856'. [ 705.703193][T17147] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 705.724847][T17147] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 705.741402][ T6951] usb 4-1: USB disconnect, device number 108 [ 705.760066][ T1850] usb 3-1: new low-speed USB device number 95 using dummy_hcd [ 705.804276][T17147] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 705.825319][ T1850] usb 3-1: Invalid ep0 maxpacket: 16 [ 705.863358][T17147] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 705.983662][ T1850] usb 3-1: new low-speed USB device number 96 using dummy_hcd [ 706.034399][ T1850] usb 3-1: Invalid ep0 maxpacket: 16 [ 706.045587][ T1850] usb usb3-port1: unable to enumerate USB device [ 706.148143][T17147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 706.160308][T17334] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2861'. [ 706.192939][ T5275] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 706.212085][T17147] 8021q: adding VLAN 0 to HW filter on device team0 [ 706.244179][ T1125] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.251324][ T1125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 706.262199][ T1125] bridge0: port 2(bridge_slave_1) entered blocking state [ 706.269381][ T1125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 706.300295][T17338] netlink: 'syz.3.2863': attribute type 10 has an invalid length. [ 706.393039][ T5275] usb 2-1: Using ep0 maxpacket: 32 [ 706.402491][ T5275] usb 2-1: New USB device found, idVendor=0cde, idProduct=0023, bcdDevice=21.32 [ 706.430012][ T5275] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.447456][T17147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 706.463709][ T5275] usb 2-1: Product: syz [ 706.473405][ T5275] usb 2-1: Manufacturer: syz [ 706.485012][ T5275] usb 2-1: SerialNumber: syz [ 706.507538][ T5275] usb 2-1: config 0 descriptor?? [ 706.575178][T17147] veth0_vlan: entered promiscuous mode [ 706.612210][T17147] veth1_vlan: entered promiscuous mode [ 706.696923][T17147] veth0_macvtap: entered promiscuous mode [ 706.728758][T17147] veth1_macvtap: entered promiscuous mode [ 706.809966][T17147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 706.820538][T17147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.842728][T17147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 706.868709][T17147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.878985][T17147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 706.889857][T17147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.900587][T17147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 706.912735][T17147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.924367][T17147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 706.946604][T17354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2866'. [ 706.973386][T17147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 706.992027][T17147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 707.010928][T17147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 707.029004][T17147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 707.041578][T17147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 707.061768][T17147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 707.072105][T17147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 707.088398][T17147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 707.100591][T17147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 707.129886][T17147] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.142401][T17147] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.158830][T17147] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.172100][T17147] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.293152][ T5295] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 707.301649][ T1059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 707.320514][ T1059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 707.351715][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 707.361921][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 707.479621][ T5275] usb 2-1: reset high-speed USB device number 95 using dummy_hcd [ 707.484716][ T5295] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 707.512830][ T5295] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 707.542357][T17375] FAULT_INJECTION: forcing a failure. [ 707.542357][T17375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 707.552710][ T5295] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 707.560446][T17375] CPU: 0 UID: 0 PID: 17375 Comm: syz.2.2867 Not tainted 6.11.0-rc3-syzkaller-00007-gd74da846046a #0 [ 707.575881][T17375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 707.578945][ T5295] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 707.585928][T17375] Call Trace: [ 707.585941][T17375] [ 707.585950][T17375] dump_stack_lvl+0x241/0x360 [ 707.585985][T17375] ? __pfx_dump_stack_lvl+0x10/0x10 [ 707.586009][T17375] ? __pfx__printk+0x10/0x10 [ 707.586035][T17375] ? __pfx_lock_release+0x10/0x10 [ 707.586064][T17375] should_fail_ex+0x3b0/0x4e0 [ 707.586087][T17375] _copy_from_user+0x2f/0xe0 [ 707.586112][T17375] copy_msghdr_from_user+0xae/0x680 [ 707.586156][T17375] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 707.644796][T17375] __sys_sendmsg+0x23d/0x3a0 [ 707.649383][T17375] ? __pfx___sys_sendmsg+0x10/0x10 [ 707.654483][T17375] ? vfs_write+0x7c4/0xc90 [ 707.658918][T17375] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 707.665240][T17375] ? do_syscall_64+0x100/0x230 [ 707.670000][T17375] ? do_syscall_64+0xb6/0x230 [ 707.674668][T17375] do_syscall_64+0xf3/0x230 [ 707.679162][T17375] ? clear_bhb_loop+0x35/0x90 [ 707.683833][T17375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.689714][T17375] RIP: 0033:0x7f1e7e5799f9 [ 707.694116][T17375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 707.713710][T17375] RSP: 002b:00007f1e7f31d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 707.722118][T17375] RAX: ffffffffffffffda RBX: 00007f1e7e715f80 RCX: 00007f1e7e5799f9 [ 707.730089][T17375] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 707.738050][T17375] RBP: 00007f1e7f31d090 R08: 0000000000000000 R09: 0000000000000000 [ 707.746009][T17375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 707.753968][T17375] R13: 0000000000000000 R14: 00007f1e7e715f80 R15: 00007f1e7e83fa38 [ 707.761938][T17375] [ 707.853057][ T5295] usb 4-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 707.862253][ T5295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.873378][ T5295] usb 4-1: config 0 descriptor?? [ 707.954128][ T5275] usb 2-1: device firmware changed [ 707.995788][ T5275] usb 2-1: USB disconnect, device number 95 [ 708.166436][T17389] vlan0: entered promiscuous mode [ 708.166463][T17389] vlan0: entered allmulticast mode [ 708.174337][ T5275] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 708.286560][T17393] sctp: [Deprecated]: syz.0.2870 (pid 17393) Use of int in max_burst socket option deprecated. [ 708.286560][T17393] Use struct sctp_assoc_value instead [ 708.326482][ T5295] thrustmaster 0003:044F:B653.0032: unknown main item tag 0x0 [ 708.362031][ T5295] thrustmaster 0003:044F:B653.0032: unknown main item tag 0x1 [ 708.374789][ T5275] usb 2-1: Using ep0 maxpacket: 32 [ 708.395052][ T5295] thrustmaster 0003:044F:B653.0032: unknown main item tag 0x0 [ 708.397117][ T5275] usb 2-1: string descriptor 0 read error: -22 [ 708.420307][ T5295] thrustmaster 0003:044F:B653.0032: item fetching failed at offset 3/7 [ 708.421359][ T5295] thrustmaster 0003:044F:B653.0032: parse failed [ 708.421398][ T5295] thrustmaster 0003:044F:B653.0032: probe with driver thrustmaster failed with error -22 [ 708.435645][ T5275] usb 2-1: New USB device found, idVendor=0cde, idProduct=0023, bcdDevice=21.32 [ 708.435674][ T5275] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.452772][ T5275] usb 2-1: config 0 descriptor?? [ 708.536351][T17400] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2872'. [ 708.606802][T17400] : entered promiscuous mode [ 708.732444][T17403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2873'. [ 708.750262][ T5295] usb 4-1: USB disconnect, device number 109 [ 708.775266][ T5275] usb 2-1: reset high-speed USB device number 96 using dummy_hcd [ 709.040810][T17415] binder: transaction release 325 bad object at offset 536871616, size 72 [ 709.068857][T17415] binder: transaction release 325 bad object at offset 536871168, size 72 [ 709.103538][ T9] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 709.296871][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 709.330010][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 709.368764][ T9] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 709.389183][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 709.401007][ T9] usb 5-1: SerialNumber: syz [ 709.524995][ T5235] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 709.535870][ T5235] Bluetooth: hci1: Injecting HCI hardware error event [ 709.544960][ T5235] Bluetooth: hci1: hardware error 0x00 [ 709.611593][T17432] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2881'. [ 709.630765][ T9] usb 5-1: 0:2 : does not exist [ 709.684070][ T9] usb 5-1: USB disconnect, device number 116 [ 709.712639][T15218] udevd[15218]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 709.753799][T17443] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2883'. [ 709.770330][ T5275] usb 2-1: USB disconnect, device number 96 [ 710.067733][T17455] FAULT_INJECTION: forcing a failure. [ 710.067733][T17455] name failslab, interval 1, probability 0, space 0, times 0 [ 710.112343][T17455] CPU: 1 UID: 0 PID: 17455 Comm: syz.2.2887 Not tainted 6.11.0-rc3-syzkaller-00007-gd74da846046a #0 [ 710.123154][T17455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 710.133225][T17455] Call Trace: [ 710.136518][T17455] [ 710.139465][T17455] dump_stack_lvl+0x241/0x360 [ 710.144172][T17455] ? __pfx_dump_stack_lvl+0x10/0x10 [ 710.149391][T17455] ? __pfx__printk+0x10/0x10 [ 710.154010][T17455] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 710.160010][T17455] ? __pfx___might_resched+0x10/0x10 [ 710.165316][T17455] should_fail_ex+0x3b0/0x4e0 [ 710.170012][T17455] should_failslab+0xac/0x100 [ 710.174711][T17455] ? __alloc_skb+0x1c3/0x440 [ 710.179316][T17455] kmem_cache_alloc_node_noprof+0x71/0x320 [ 710.185158][T17455] __alloc_skb+0x1c3/0x440 [ 710.189584][T17455] ? __pfx___alloc_skb+0x10/0x10 [ 710.194510][T17455] ? netlink_autobind+0xd6/0x2f0 [ 710.199425][T17455] ? netlink_autobind+0x2b0/0x2f0 [ 710.204439][T17455] netlink_sendmsg+0x638/0xcb0 [ 710.209203][T17455] ? __pfx_netlink_sendmsg+0x10/0x10 [ 710.214476][T17455] ? __import_iovec+0x536/0x820 [ 710.219307][T17455] ? aa_sock_msg_perm+0x91/0x160 [ 710.224247][T17455] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 710.229523][T17455] ? security_socket_sendmsg+0x87/0xb0 [ 710.234971][T17455] ? __pfx_netlink_sendmsg+0x10/0x10 [ 710.240256][T17455] __sock_sendmsg+0x221/0x270 [ 710.244927][T17455] ____sys_sendmsg+0x525/0x7d0 [ 710.249694][T17455] ? __pfx_____sys_sendmsg+0x10/0x10 [ 710.254981][T17455] __sys_sendmsg+0x2b0/0x3a0 [ 710.259565][T17455] ? __pfx___sys_sendmsg+0x10/0x10 [ 710.264664][T17455] ? vfs_write+0x7c4/0xc90 [ 710.269087][T17455] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 710.275406][T17455] ? do_syscall_64+0x100/0x230 [ 710.280159][T17455] ? do_syscall_64+0xb6/0x230 [ 710.284823][T17455] do_syscall_64+0xf3/0x230 [ 710.289316][T17455] ? clear_bhb_loop+0x35/0x90 [ 710.293981][T17455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.299856][T17455] RIP: 0033:0x7f1e7e5799f9 [ 710.304254][T17455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 710.323858][T17455] RSP: 002b:00007f1e7f31d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 710.332454][T17455] RAX: ffffffffffffffda RBX: 00007f1e7e715f80 RCX: 00007f1e7e5799f9 [ 710.340409][T17455] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 710.348362][T17455] RBP: 00007f1e7f31d090 R08: 0000000000000000 R09: 0000000000000000 [ 710.356336][T17455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 710.364306][T17455] R13: 0000000000000000 R14: 00007f1e7e715f80 R15: 00007f1e7e83fa38 [ 710.372272][T17455] [ 710.571728][T17466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2892'. [ 710.718641][T17473] binder: transaction release 333 bad object at offset 536871616, size 72 [ 710.752755][T17473] binder: transaction release 333 bad object at offset 536871168, size 72 [ 710.776982][ T5280] usb 3-1: new full-speed USB device number 97 using dummy_hcd [ 710.972820][ T5280] usb 3-1: device descriptor read/64, error -71 [ 711.269855][ T5280] usb 3-1: new full-speed USB device number 98 using dummy_hcd [ 711.443618][ T5280] usb 3-1: device descriptor read/64, error -71 [ 711.578528][ T5280] usb usb3-port1: attempt power cycle [ 711.684896][ T5235] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 712.012907][ T5280] usb 3-1: new full-speed USB device number 99 using dummy_hcd [ 712.062486][T17504] bridge_slave_1: left allmulticast mode [ 712.068498][T17504] bridge_slave_1: left promiscuous mode [ 712.075542][ T5280] usb 3-1: device descriptor read/8, error -71 [ 712.084370][T17504] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.108000][T17504] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 712.112091][T17506] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 712.332282][T17517] Cannot find set identified by id 0 to match [ 712.339035][ T29] audit: type=1326 audit(1723517752.096:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17509 comm="syz.3.2911" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f883c5799f9 code=0x0 [ 712.373507][ T5280] usb 3-1: new full-speed USB device number 100 using dummy_hcd [ 712.431815][ T5280] usb 3-1: device descriptor read/8, error -71 [ 712.529795][T17529] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2914'. [ 712.573933][ T5280] usb usb3-port1: unable to enumerate USB device [ 712.670792][T17534] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2916'. [ 712.693806][T17538] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2918'. [ 712.800490][T17535] ebtables: ebtables: counters copy to user failed while replacing table [ 713.533866][ T8] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 713.734665][ T8] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 713.758362][ T8] usb 4-1: config 0 has no interface number 0 [ 713.777605][ T8] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 713.804115][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.817722][T17563] binder: transaction release 341 bad object at offset 536871616, size 72 [ 713.831608][ T8] usb 4-1: config 0 descriptor?? [ 713.852958][T17563] binder: transaction release 341 bad object at offset 536871168, size 72 [ 713.865940][ T8] usb 4-1: selecting invalid altsetting 1 [ 713.895896][ T8] dvb_ttusb_budget: ttusb_init_controller: error [ 713.902938][ T8] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 714.052228][T17572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2929'. [ 714.058820][ T8] DVB: Unable to find symbol cx22700_attach() [ 714.101681][ T8] DVB: Unable to find symbol tda10046_attach() [ 714.117079][ T8] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 714.146148][ T8] usb 4-1: USB disconnect, device number 110 [ 714.193526][T17578] Cannot find set identified by id 0 to match [ 714.276403][T17582] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2933'. [ 714.311315][T17582] : entered promiscuous mode [ 714.316441][ T5275] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 714.332324][T17584] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2934'. [ 714.502805][ T5275] usb 5-1: Using ep0 maxpacket: 16 [ 714.531694][ T5275] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 714.589755][ T5275] usb 5-1: config 0 has an invalid descriptor of length 12, skipping remainder of the config [ 714.632568][ T5275] usb 5-1: config 0 has no interface number 0 [ 714.642462][ T5275] usb 5-1: config 0 interface 214 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 714.689507][ T5275] usb 5-1: New USB device found, idVendor=0596, idProduct=fb01, bcdDevice= 5.ff [ 714.709521][ T5275] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.737266][ T5275] usb 5-1: Product: syz [ 714.767550][ T5275] usb 5-1: Manufacturer: syz [ 714.795725][ T5275] usb 5-1: SerialNumber: syz [ 714.818088][ T5275] usb 5-1: config 0 descriptor?? [ 715.080172][T17603] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2941'. [ 715.140147][ T5275] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 715.324639][T17606] vlan2: entered promiscuous mode [ 715.324665][T17606] vlan2: entered allmulticast mode [ 715.376489][ T5275] usb 2-1: config 0 has an invalid interface number: 122 but max is 0 [ 715.376521][ T5275] usb 2-1: config 0 has no interface number 0 [ 715.410782][ T5275] usb 2-1: config 0 interface 122 has no altsetting 0 [ 715.448304][ T5275] usb 2-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=fa.67 [ 715.462747][ T5275] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.472191][ T5275] usb 2-1: Product: syz [ 715.477818][ T5275] usb 2-1: Manufacturer: syz [ 715.483651][ T5275] usb 2-1: SerialNumber: syz [ 715.505056][ T5275] usb 2-1: config 0 descriptor?? [ 715.781796][T17614] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2944'. [ 715.805861][T17615] dccp_close: ABORT with 1 bytes unread [ 715.878527][ T5275] dvb_usb_m920x 2-1:0.122: probe with driver dvb_usb_m920x failed with error -71 [ 715.928879][ T5275] usb 2-1: USB disconnect, device number 97 [ 716.072946][ T6951] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 716.272910][ T6951] usb 3-1: Using ep0 maxpacket: 16 [ 716.283818][ T6951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 716.297539][ T6951] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 716.309137][ T6951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.319364][ T6951] usb 3-1: Product: syz [ 716.326239][ T6951] usb 3-1: Manufacturer: syz [ 716.331059][ T6951] usb 3-1: SerialNumber: syz [ 716.339277][ T6951] usb 3-1: config 0 descriptor?? [ 716.350966][ T6951] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 716.361447][ T6951] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 716.692843][ T25] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 716.710076][T17643] FAULT_INJECTION: forcing a failure. [ 716.710076][T17643] name failslab, interval 1, probability 0, space 0, times 0 [ 716.728853][T17643] CPU: 0 UID: 0 PID: 17643 Comm: syz.1.2955 Not tainted 6.11.0-rc3-syzkaller-00007-gd74da846046a #0 [ 716.739637][T17643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 716.750129][T17643] Call Trace: [ 716.753405][T17643] [ 716.756331][T17643] dump_stack_lvl+0x241/0x360 [ 716.761019][T17643] ? __pfx_dump_stack_lvl+0x10/0x10 [ 716.766220][T17643] ? __pfx__printk+0x10/0x10 [ 716.770813][T17643] ? ref_tracker_alloc+0x332/0x490 [ 716.775920][T17643] should_fail_ex+0x3b0/0x4e0 [ 716.780598][T17643] ? skb_clone+0x20c/0x390 [ 716.785010][T17643] should_failslab+0xac/0x100 [ 716.789689][T17643] ? skb_clone+0x20c/0x390 [ 716.794099][T17643] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 716.799471][T17643] skb_clone+0x20c/0x390 [ 716.803711][T17643] __netlink_deliver_tap+0x3cc/0x7c0 [ 716.809008][T17643] ? netlink_deliver_tap+0x2e/0x1b0 [ 716.814208][T17643] netlink_deliver_tap+0x19d/0x1b0 [ 716.819315][T17643] netlink_unicast+0x7be/0x990 [ 716.824084][T17643] ? __pfx_netlink_unicast+0x10/0x10 [ 716.829360][T17643] ? __virt_addr_valid+0x183/0x530 [ 716.834476][T17643] ? __check_object_size+0x49c/0x900 [ 716.839755][T17643] ? bpf_lsm_netlink_send+0x9/0x10 [ 716.844870][T17643] netlink_sendmsg+0x8e4/0xcb0 [ 716.849638][T17643] ? __pfx_netlink_sendmsg+0x10/0x10 [ 716.854927][T17643] ? __import_iovec+0x536/0x820 [ 716.859770][T17643] ? aa_sock_msg_perm+0x91/0x160 [ 716.864705][T17643] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 716.869986][T17643] ? security_socket_sendmsg+0x87/0xb0 [ 716.875441][T17643] ? __pfx_netlink_sendmsg+0x10/0x10 [ 716.880719][T17643] __sock_sendmsg+0x221/0x270 [ 716.885398][T17643] ____sys_sendmsg+0x525/0x7d0 [ 716.890162][T17643] ? __pfx_____sys_sendmsg+0x10/0x10 [ 716.895450][T17643] __sys_sendmsg+0x2b0/0x3a0 [ 716.900032][T17643] ? __pfx___sys_sendmsg+0x10/0x10 [ 716.905140][T17643] ? vfs_write+0x7c4/0xc90 [ 716.909582][T17643] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 716.915904][T17643] ? do_syscall_64+0x100/0x230 [ 716.920673][T17643] ? do_syscall_64+0xb6/0x230 [ 716.925347][T17643] do_syscall_64+0xf3/0x230 [ 716.929848][T17643] ? clear_bhb_loop+0x35/0x90 [ 716.934519][T17643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.940404][T17643] RIP: 0033:0x7fbcd67799f9 [ 716.944813][T17643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 716.964409][T17643] RSP: 002b:00007fbcd756f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 716.972816][T17643] RAX: ffffffffffffffda RBX: 00007fbcd6915f80 RCX: 00007fbcd67799f9 [ 716.980777][T17643] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 716.988741][T17643] RBP: 00007fbcd756f090 R08: 0000000000000000 R09: 0000000000000000 [ 716.996702][T17643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 717.004671][T17643] R13: 0000000000000000 R14: 00007fbcd6915f80 R15: 00007fbcd6a3fa38 [ 717.012642][T17643] [ 717.015764][ C0] vkms_vblank_simulate: vblank timer overrun [ 717.132518][ T25] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 717.157758][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.174075][ T25] usb 4-1: Product: syz [ 717.179315][ T25] usb 4-1: Manufacturer: syz [ 717.185739][ T25] usb 4-1: SerialNumber: syz [ 717.188950][ T8] usb 5-1: USB disconnect, device number 117 [ 717.199420][ T25] usb 4-1: config 0 descriptor?? [ 717.254196][ T6951] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 717.439287][ T25] cx82310_eth 4-1:0.0: probe with driver cx82310_eth failed with error -22 [ 717.471456][T17614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 717.493001][T17616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 717.526675][T17616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 717.549651][T17614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 717.564680][T17651] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 717.564680][T17651] The task syz.4.2957 (17651) triggered the difference, watch for misbehavior. [ 717.682036][ T6951] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 717.721007][ T6951] em28xx 3-1:0.0: board has no eeprom [ 717.780229][T17657] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2961'. [ 717.824192][ T6951] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 717.851760][ T25] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 717.872804][ T6951] em28xx 3-1:0.0: dvb set to bulk mode. [ 717.881950][ T9535] em28xx 3-1:0.0: Binding DVB extension [ 717.902211][ T6951] usb 3-1: USB disconnect, device number 101 [ 717.930861][T17664] netlink: 'syz.4.2964': attribute type 1 has an invalid length. [ 717.959524][ T6951] em28xx 3-1:0.0: Disconnecting em28xx [ 717.987268][ T9535] em28xx 3-1:0.0: Registering input extension [ 717.994675][ T6951] em28xx 3-1:0.0: Closing input extension [ 718.008689][ T6951] em28xx 3-1:0.0: Freeing device [ 718.069544][ T5235] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:585 [ 718.080163][ T5235] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 5235, name: kworker/u9:6 [ 718.091123][ T5235] preempt_count: 0, expected: 0 [ 718.096349][ T5235] RCU nest depth: 1, expected: 0 [ 718.102042][ T5235] 4 locks held by kworker/u9:6/5235: [ 718.107658][ T5235] #0: ffff888063ed5948 ((wq_completion)hci0#2){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 718.118845][ T5235] #1: ffffc900038bfd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 718.131967][ T5235] #2: ffff88805baa4078 (&hdev->lock){+.+.}-{3:3}, at: hci_le_create_big_complete_evt+0xcf/0xae0 [ 718.146408][ T5235] #3: ffffffff8e9382e0 (rcu_read_lock){....}-{1:2}, at: hci_le_create_big_complete_evt+0xdb/0xae0 [ 718.157396][ T5235] CPU: 1 UID: 0 PID: 5235 Comm: kworker/u9:6 Not tainted 6.11.0-rc3-syzkaller-00007-gd74da846046a #0 [ 718.168253][ T5235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 718.178299][ T5235] Workqueue: hci0 hci_rx_work [ 718.182978][ T5235] Call Trace: [ 718.186248][ T5235] [ 718.189170][ T5235] dump_stack_lvl+0x241/0x360 [ 718.193851][ T5235] ? __pfx_dump_stack_lvl+0x10/0x10 [ 718.199044][ T5235] ? __pfx__printk+0x10/0x10 [ 718.203636][ T5235] __might_resched+0x5d4/0x780 [ 718.208398][ T5235] ? __mutex_lock+0x112/0xd70 [ 718.213085][ T5235] ? __pfx___might_resched+0x10/0x10 [ 718.218391][ T5235] __mutex_lock+0xc1/0xd70 [ 718.222815][ T5235] ? __pfx_lock_acquire+0x10/0x10 [ 718.227841][ T5235] ? hci_le_create_big_complete_evt+0x3d9/0xae0 [ 718.234075][ T5235] ? __pfx_lock_release+0x10/0x10 [ 718.239096][ T5235] ? __pfx___mutex_lock+0x10/0x10 [ 718.244120][ T5235] ? trace_contention_end+0x3c/0x120 [ 718.249398][ T5235] ? skb_pull_data+0x112/0x230 [ 718.254156][ T5235] ? hci_conn_set_handle+0x9a/0x270 [ 718.259355][ T5235] hci_le_create_big_complete_evt+0x3d9/0xae0 [ 718.265417][ T5235] ? __copy_skb_header+0x437/0x5b0 [ 718.270538][ T5235] ? hci_le_create_big_complete_evt+0xdb/0xae0 [ 718.276695][ T5235] ? __pfx_hci_le_create_big_complete_evt+0x10/0x10 [ 718.283278][ T5235] ? hci_le_meta_evt+0x366/0x580 [ 718.288213][ T5235] ? __pfx_hci_le_create_big_complete_evt+0x10/0x10 [ 718.294800][ T5235] hci_event_packet+0xa55/0x1540 [ 718.299734][ T5235] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 718.305016][ T5235] ? __pfx_hci_event_packet+0x10/0x10 [ 718.310377][ T5235] ? do_raw_spin_unlock+0x13c/0x8b0 [ 718.315578][ T5235] ? hci_send_to_monitor+0xd8/0x7f0 [ 718.320773][ T5235] ? kcov_remote_start+0x97/0x7d0 [ 718.325797][ T5235] hci_rx_work+0x3e8/0xca0 [ 718.330212][ T5235] ? process_scheduled_works+0x945/0x1830 [ 718.335924][ T5235] process_scheduled_works+0xa2c/0x1830 [ 718.341485][ T5235] ? __pfx_process_scheduled_works+0x10/0x10 [ 718.347467][ T5235] ? assign_work+0x364/0x3d0 [ 718.352074][ T5235] worker_thread+0x86d/0xd40 [ 718.356682][ T5235] ? __kthread_parkme+0x169/0x1d0 [ 718.361708][ T5235] ? __pfx_worker_thread+0x10/0x10 [ 718.366823][ T5235] kthread+0x2f0/0x390 [ 718.370893][ T5235] ? __pfx_worker_thread+0x10/0x10 [ 718.376000][ T5235] ? __pfx_kthread+0x10/0x10 [ 718.380592][ T5235] ret_from_fork+0x4b/0x80 [ 718.385006][ T5235] ? __pfx_kthread+0x10/0x10 [ 718.389594][ T5235] ret_from_fork_asm+0x1a/0x30 [ 718.394367][ T5235] [ 718.397573][ T5280] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 718.404523][ T5235] [ 718.407453][ T5235] ============================= [ 718.412298][ T5235] [ BUG: Invalid wait context ] [ 718.417142][ T5235] 6.11.0-rc3-syzkaller-00007-gd74da846046a #0 Tainted: G W [ 718.425710][ T5235] ----------------------------- [ 718.430535][ T5235] kworker/u9:6/5235 is trying to lock: [ 718.435974][ T5235] ffffffff8fdedc28 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_le_create_big_complete_evt+0x3d9/0xae0 [ 718.446581][ T5235] other info that might help us debug this: [ 718.452448][ T5235] context-{4:4} [ 718.455887][ T5235] 4 locks held by kworker/u9:6/5235: [ 718.461153][ T5235] #0: ffff888063ed5948 ((wq_completion)hci0#2){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 718.472116][ T5235] #1: ffffc900038bfd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 718.484112][ T5235] #2: ffff88805baa4078 (&hdev->lock){+.+.}-{3:3}, at: hci_le_create_big_complete_evt+0xcf/0xae0 [ 718.494631][ T5235] #3: ffffffff8e9382e0 (rcu_read_lock){....}-{1:2}, at: hci_le_create_big_complete_evt+0xdb/0xae0 [ 718.505325][ T5235] stack backtrace: [ 718.509028][ T5235] CPU: 1 UID: 0 PID: 5235 Comm: kworker/u9:6 Tainted: G W 6.11.0-rc3-syzkaller-00007-gd74da846046a #0 [ 718.521343][ T5235] Tainted: [W]=WARN [ 718.525131][ T5235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 718.535170][ T5235] Workqueue: hci0 hci_rx_work [ 718.539842][ T5235] Call Trace: [ 718.543111][ T5235] [ 718.546030][ T5235] dump_stack_lvl+0x241/0x360 [ 718.550701][ T5235] ? __pfx_dump_stack_lvl+0x10/0x10 [ 718.555893][ T5235] ? __pfx__printk+0x10/0x10 [ 718.560480][ T5235] __lock_acquire+0x153b/0x2040 [ 718.565332][ T5235] lock_acquire+0x1ed/0x550 [ 718.569824][ T5235] ? hci_le_create_big_complete_evt+0x3d9/0xae0 [ 718.576058][ T5235] ? __pfx_lock_acquire+0x10/0x10 [ 718.581070][ T5235] ? __mutex_lock+0x112/0xd70 [ 718.585738][ T5235] ? __pfx___might_resched+0x10/0x10 [ 718.591017][ T5235] __mutex_lock+0x136/0xd70 [ 718.595511][ T5235] ? hci_le_create_big_complete_evt+0x3d9/0xae0 [ 718.601743][ T5235] ? __pfx_lock_acquire+0x10/0x10 [ 718.606757][ T5235] ? hci_le_create_big_complete_evt+0x3d9/0xae0 [ 718.612990][ T5235] ? __pfx_lock_release+0x10/0x10 [ 718.618005][ T5235] ? __pfx___mutex_lock+0x10/0x10 [ 718.623024][ T5235] ? trace_contention_end+0x3c/0x120 [ 718.628294][ T5235] ? skb_pull_data+0x112/0x230 [ 718.633047][ T5235] ? hci_conn_set_handle+0x9a/0x270 [ 718.638234][ T5235] hci_le_create_big_complete_evt+0x3d9/0xae0 [ 718.644289][ T5235] ? __copy_skb_header+0x437/0x5b0 [ 718.649388][ T5235] ? hci_le_create_big_complete_evt+0xdb/0xae0 [ 718.655539][ T5235] ? __pfx_hci_le_create_big_complete_evt+0x10/0x10 [ 718.662121][ T5235] ? hci_le_meta_evt+0x366/0x580 [ 718.667051][ T5235] ? __pfx_hci_le_create_big_complete_evt+0x10/0x10 [ 718.673631][ T5235] hci_event_packet+0xa55/0x1540 [ 718.678559][ T5235] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 718.683833][ T5235] ? __pfx_hci_event_packet+0x10/0x10 [ 718.689189][ T5235] ? do_raw_spin_unlock+0x13c/0x8b0 [ 718.694378][ T5235] ? hci_send_to_monitor+0xd8/0x7f0 [ 718.699567][ T5235] ? kcov_remote_start+0x97/0x7d0 [ 718.704585][ T5235] hci_rx_work+0x3e8/0xca0 [ 718.708991][ T5235] ? process_scheduled_works+0x945/0x1830 [ 718.714699][ T5235] process_scheduled_works+0xa2c/0x1830 [ 718.720241][ T5235] ? __pfx_process_scheduled_works+0x10/0x10 [ 718.726213][ T5235] ? assign_work+0x364/0x3d0 [ 718.730791][ T5235] worker_thread+0x86d/0xd40 [ 718.735375][ T5235] ? __kthread_parkme+0x169/0x1d0 [ 718.740390][ T5235] ? __pfx_worker_thread+0x10/0x10 [ 718.745488][ T5235] kthread+0x2f0/0x390 [ 718.749548][ T5235] ? __pfx_worker_thread+0x10/0x10 [ 718.754652][ T5235] ? __pfx_kthread+0x10/0x10 [ 718.759234][ T5235] ret_from_fork+0x4b/0x80 [ 718.763644][ T5235] ? __pfx_kthread+0x10/0x10 [ 718.768232][ T5235] ret_from_fork_asm+0x1a/0x30 [ 718.772989][ T5235] [ 718.780364][ T8] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 718.789962][ T5235] ================================================================== [ 718.798031][ T5235] BUG: KASAN: slab-use-after-free in hci_le_create_big_complete_evt+0x383/0xae0 [ 718.807037][ T5235] Read of size 8 at addr ffff88807cdcc000 by task kworker/u9:6/5235 [ 718.814993][ T5235] [ 718.817298][ T5235] CPU: 1 UID: 0 PID: 5235 Comm: kworker/u9:6 Tainted: G W 6.11.0-rc3-syzkaller-00007-gd74da846046a #0 [ 718.829598][ T5235] Tainted: [W]=WARN [ 718.833392][ T5235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 718.843454][ T5235] Workqueue: hci0 hci_rx_work [ 718.848147][ T5235] Call Trace: [ 718.851412][ T5235] [ 718.854325][ T5235] dump_stack_lvl+0x241/0x360 [ 718.858997][ T5235] ? __pfx_dump_stack_lvl+0x10/0x10 [ 718.864192][ T5235] ? __pfx__printk+0x10/0x10 [ 718.868763][ T5235] ? _printk+0xd5/0x120 [ 718.872901][ T5235] ? __virt_addr_valid+0x183/0x530 [ 718.877990][ T5235] ? __virt_addr_valid+0x183/0x530 [ 718.883090][ T5235] print_report+0x169/0x550 [ 718.887602][ T5235] ? __virt_addr_valid+0x183/0x530 [ 718.892701][ T5235] ? __virt_addr_valid+0x183/0x530 [ 718.897809][ T5235] ? __virt_addr_valid+0x45f/0x530 [ 718.902932][ T5235] ? __phys_addr+0xba/0x170 [ 718.907422][ T5235] ? hci_le_create_big_complete_evt+0x383/0xae0 [ 718.913650][ T5235] kasan_report+0x143/0x180 [ 718.918151][ T5235] ? hci_le_create_big_complete_evt+0x383/0xae0 [ 718.924380][ T5235] hci_le_create_big_complete_evt+0x383/0xae0 [ 718.930433][ T5235] ? __copy_skb_header+0x437/0x5b0 [ 718.935544][ T5235] ? hci_le_create_big_complete_evt+0xdb/0xae0 [ 718.941696][ T5235] ? __pfx_hci_le_create_big_complete_evt+0x10/0x10 [ 718.948623][ T5235] ? hci_le_meta_evt+0x366/0x580 [ 718.953550][ T5235] ? __pfx_hci_le_create_big_complete_evt+0x10/0x10 [ 718.960129][ T5235] hci_event_packet+0xa55/0x1540 [ 718.965061][ T5235] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 718.970342][ T5235] ? __pfx_hci_event_packet+0x10/0x10 [ 718.975702][ T5235] ? do_raw_spin_unlock+0x13c/0x8b0 [ 718.980893][ T5235] ? hci_send_to_monitor+0xd8/0x7f0 [ 718.986083][ T5235] ? kcov_remote_start+0x97/0x7d0 [ 718.991105][ T5235] hci_rx_work+0x3e8/0xca0 [ 718.995526][ T5235] ? process_scheduled_works+0x945/0x1830 [ 719.001237][ T5235] process_scheduled_works+0xa2c/0x1830 [ 719.006786][ T5235] ? __pfx_process_scheduled_works+0x10/0x10 [ 719.012763][ T5235] ? assign_work+0x364/0x3d0 [ 719.017347][ T5235] worker_thread+0x86d/0xd40 [ 719.021937][ T5235] ? __kthread_parkme+0x169/0x1d0 [ 719.026953][ T5235] ? __pfx_worker_thread+0x10/0x10 [ 719.032056][ T5235] kthread+0x2f0/0x390 [ 719.036120][ T5235] ? __pfx_worker_thread+0x10/0x10 [ 719.041225][ T5235] ? __pfx_kthread+0x10/0x10 [ 719.045810][ T5235] ret_from_fork+0x4b/0x80 [ 719.050217][ T5235] ? __pfx_kthread+0x10/0x10 [ 719.054800][ T5235] ret_from_fork_asm+0x1a/0x30 [ 719.059570][ T5235] [ 719.062581][ T5235] [ 719.064892][ T5235] Allocated by task 5235: [ 719.069201][ T5235] kasan_save_track+0x3f/0x80 [ 719.073874][ T5235] __kasan_kmalloc+0x98/0xb0 [ 719.078453][ T5235] __kmalloc_cache_noprof+0x19c/0x2c0 [ 719.083811][ T5235] __hci_conn_add+0x2f9/0x1850 [ 719.088564][ T5235] hci_le_big_sync_established_evt+0x414/0xc20 [ 719.094711][ T5235] hci_event_packet+0xa55/0x1540 [ 719.099635][ T5235] hci_rx_work+0x3e8/0xca0 [ 719.104036][ T5235] process_scheduled_works+0xa2c/0x1830 [ 719.109572][ T5235] worker_thread+0x86d/0xd40 [ 719.114149][ T5235] kthread+0x2f0/0x390 [ 719.118208][ T5235] ret_from_fork+0x4b/0x80 [ 719.122618][ T5235] ret_from_fork_asm+0x1a/0x30 [ 719.127374][ T5235] [ 719.129682][ T5235] Freed by task 5235: [ 719.133644][ T5235] kasan_save_track+0x3f/0x80 [ 719.138311][ T5235] kasan_save_free_info+0x40/0x50 [ 719.143322][ T5235] poison_slab_object+0xe0/0x150 [ 719.148252][ T5235] __kasan_slab_free+0x37/0x60 [ 719.153007][ T5235] kfree+0x149/0x360 [ 719.156887][ T5235] device_release+0x99/0x1c0 [ 719.161466][ T5235] kobject_put+0x22f/0x480 [ 719.165870][ T5235] hci_conn_del+0x8c4/0xc40 [ 719.170363][ T5235] hci_le_create_big_complete_evt+0x619/0xae0 [ 719.176422][ T5235] hci_event_packet+0xa55/0x1540 [ 719.181346][ T5235] hci_rx_work+0x3e8/0xca0 [ 719.185752][ T5235] process_scheduled_works+0xa2c/0x1830 [ 719.191293][ T5235] worker_thread+0x86d/0xd40 [ 719.195870][ T5235] kthread+0x2f0/0x390 [ 719.199930][ T5235] ret_from_fork+0x4b/0x80 [ 719.204336][ T5235] ret_from_fork_asm+0x1a/0x30 [ 719.209087][ T5235] [ 719.211393][ T5235] The buggy address belongs to the object at ffff88807cdcc000 [ 719.211393][ T5235] which belongs to the cache kmalloc-8k of size 8192 [ 719.225428][ T5235] The buggy address is located 0 bytes inside of [ 719.225428][ T5235] freed 8192-byte region [ffff88807cdcc000, ffff88807cdce000) [ 719.239124][ T5235] [ 719.241435][ T5235] The buggy address belongs to the physical page: [ 719.248280][ T5235] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88807cdc8000 pfn:0x7cdc8 [ 719.258340][ T5235] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 719.266825][ T5235] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 719.275322][ T5235] page_type: 0xfdffffff(slab) [ 719.279997][ T5235] raw: 00fff00000000240 ffff888015842280 ffffea0001b72e10 ffffea0001701e10 [ 719.288575][ T5235] raw: ffff88807cdc8000 0000000000020001 00000001fdffffff 0000000000000000 [ 719.297147][ T5235] head: 00fff00000000240 ffff888015842280 ffffea0001b72e10 ffffea0001701e10 [ 719.305806][ T5235] head: ffff88807cdc8000 0000000000020001 00000001fdffffff 0000000000000000 [ 719.314463][ T5235] head: 00fff00000000003 ffffea0001f37201 ffffffffffffffff 0000000000000000 [ 719.323118][ T5235] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 719.331769][ T5235] page dumped because: kasan: bad access detected [ 719.338174][ T5235] page_owner tracks the page as allocated [ 719.343883][ T5235] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4894, tgid 4894 (dhcpcd), ts 650797607311, free_ts 650585954873 [ 719.366111][ T5235] post_alloc_hook+0x1f3/0x230 [ 719.370875][ T5235] get_page_from_freelist+0x2e4c/0x2f10 [ 719.376411][ T5235] __alloc_pages_noprof+0x256/0x6c0 [ 719.381603][ T5235] alloc_slab_page+0x5f/0x120 [ 719.386269][ T5235] allocate_slab+0x5a/0x2f0 [ 719.390765][ T5235] ___slab_alloc+0xcd1/0x14b0 [ 719.395430][ T5235] __slab_alloc+0x58/0xa0 [ 719.399758][ T5235] __kmalloc_node_track_caller_noprof+0x281/0x440 [ 719.406158][ T5235] kmalloc_reserve+0x111/0x2a0 [ 719.410909][ T5235] __alloc_skb+0x1f3/0x440 [ 719.415313][ T5235] netlink_dump+0x1f7/0xd80 [ 719.419812][ T5235] netlink_recvmsg+0x6bb/0x11d0 [ 719.424651][ T5235] sock_recvmsg+0x22f/0x280 [ 719.429145][ T5235] ____sys_recvmsg+0x1db/0x470 [ 719.433899][ T5235] __sys_recvmsg+0x2f0/0x3e0 [ 719.438480][ T5235] do_syscall_64+0xf3/0x230 [ 719.442976][ T5235] page last free pid 16145 tgid 16145 stack trace: [ 719.449457][ T5235] free_unref_page+0xd22/0xea0 [ 719.454209][ T5235] __put_partials+0xeb/0x130 [ 719.458790][ T5235] put_cpu_partial+0x17c/0x250 [ 719.463541][ T5235] __slab_free+0x2ea/0x3d0 [ 719.467945][ T5235] qlist_free_all+0x9e/0x140 [ 719.472524][ T5235] kasan_quarantine_reduce+0x14f/0x170 [ 719.477974][ T5235] __kasan_slab_alloc+0x23/0x80 [ 719.482818][ T5235] kmem_cache_alloc_noprof+0x135/0x2a0 [ 719.488272][ T5235] getname_flags+0xb7/0x540 [ 719.492766][ T5235] do_sys_openat2+0xd2/0x1d0 [ 719.497345][ T5235] __x64_sys_openat+0x247/0x2a0 [ 719.502181][ T5235] do_syscall_64+0xf3/0x230 [ 719.506674][ T5235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.512554][ T5235] [ 719.514864][ T5235] Memory state around the buggy address: [ 719.520476][ T5235] ffff88807cdcbf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 719.528526][ T5235] ffff88807cdcbf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 719.536571][ T5235] >ffff88807cdcc000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 719.544612][ T5235] ^ [ 719.548659][ T5235] ffff88807cdcc080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 719.556700][ T5235] ffff88807cdcc100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 719.564743][ T5235] ================================================================== [ 719.578973][ T5235] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 719.586194][ T5235] CPU: 1 UID: 0 PID: 5235 Comm: kworker/u9:6 Tainted: G W 6.11.0-rc3-syzkaller-00007-gd74da846046a #0 [ 719.598524][ T5235] Tainted: [W]=WARN [ 719.602311][ T5235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 719.612354][ T5235] Workqueue: hci0 hci_rx_work [ 719.617029][ T5235] Call Trace: [ 719.620293][ T5235] [ 719.623210][ T5235] dump_stack_lvl+0x241/0x360 [ 719.627880][ T5235] ? __pfx_dump_stack_lvl+0x10/0x10 [ 719.633071][ T5235] ? __pfx__printk+0x10/0x10 [ 719.637653][ T5235] ? rcu_is_watching+0x15/0xb0 [ 719.642410][ T5235] ? preempt_schedule+0xe1/0xf0 [ 719.647253][ T5235] ? vscnprintf+0x5d/0x90 [ 719.651570][ T5235] panic+0x349/0x860 [ 719.655457][ T5235] ? check_panic_on_warn+0x21/0xb0 [ 719.660554][ T5235] ? __pfx_panic+0x10/0x10 [ 719.664962][ T5235] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 719.670932][ T5235] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 719.677249][ T5235] ? print_report+0x502/0x550 [ 719.681920][ T5235] check_panic_on_warn+0x86/0xb0 [ 719.686857][ T5235] ? hci_le_create_big_complete_evt+0x383/0xae0 [ 719.693092][ T5235] end_report+0x77/0x160 [ 719.697327][ T5235] kasan_report+0x154/0x180 [ 719.701822][ T5235] ? hci_le_create_big_complete_evt+0x383/0xae0 [ 719.708058][ T5235] hci_le_create_big_complete_evt+0x383/0xae0 [ 719.714114][ T5235] ? __copy_skb_header+0x437/0x5b0 [ 719.719215][ T5235] ? hci_le_create_big_complete_evt+0xdb/0xae0 [ 719.725364][ T5235] ? __pfx_hci_le_create_big_complete_evt+0x10/0x10 [ 719.731941][ T5235] ? hci_le_meta_evt+0x366/0x580 [ 719.736867][ T5235] ? __pfx_hci_le_create_big_complete_evt+0x10/0x10 [ 719.743447][ T5235] hci_event_packet+0xa55/0x1540 [ 719.748376][ T5235] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 719.753651][ T5235] ? __pfx_hci_event_packet+0x10/0x10 [ 719.759011][ T5235] ? do_raw_spin_unlock+0x13c/0x8b0 [ 719.764199][ T5235] ? hci_send_to_monitor+0xd8/0x7f0 [ 719.769386][ T5235] ? kcov_remote_start+0x97/0x7d0 [ 719.774403][ T5235] hci_rx_work+0x3e8/0xca0 [ 719.778810][ T5235] ? process_scheduled_works+0x945/0x1830 [ 719.784519][ T5235] process_scheduled_works+0xa2c/0x1830 [ 719.790064][ T5235] ? __pfx_process_scheduled_works+0x10/0x10 [ 719.796037][ T5235] ? assign_work+0x364/0x3d0 [ 719.800616][ T5235] worker_thread+0x86d/0xd40 [ 719.805199][ T5235] ? __kthread_parkme+0x169/0x1d0 [ 719.810217][ T5235] ? __pfx_worker_thread+0x10/0x10 [ 719.815318][ T5235] kthread+0x2f0/0x390 [ 719.819377][ T5235] ? __pfx_worker_thread+0x10/0x10 [ 719.824477][ T5235] ? __pfx_kthread+0x10/0x10 [ 719.829055][ T5235] ret_from_fork+0x4b/0x80 [ 719.833464][ T5235] ? __pfx_kthread+0x10/0x10 [ 719.838050][ T5235] ret_from_fork_asm+0x1a/0x30 [ 719.842812][ T5235] [ 719.846044][ T5235] Kernel Offset: disabled [ 719.850351][ T5235] Rebooting in 86400 seconds..