last executing test programs: 6m35.704566632s ago: executing program 0 (id=2337): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, 0x0, 0x0) ioctl$XFS_IOC_COMMIT_RANGE(r0, 0x40585883, &(0x7f00000000c0)={r2, 0x0, 0x8000000000000001, 0x4, 0x0, 0x1, [0x10001, 0xffffffffffff0001, 0x4, 0x10831aa2, 0x5, 0x7fff]}) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f7", 0x1}], 0x1}], 0x1, 0x0) recvmsg$can_raw(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000780)=""/4096, 0x108d}], 0x1}, 0x40000003) syz_clone3(&(0x7f0000001500)={0x8100, 0x0, 0x0, 0x0, {}, &(0x7f0000000480)=""/4096, 0x1000, 0x0, 0x0}, 0x58) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) accept4(r0, 0x0, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0xb) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, 0x0, 0x0) (async) ioctl$XFS_IOC_COMMIT_RANGE(r0, 0x40585883, &(0x7f00000000c0)={r2, 0x0, 0x8000000000000001, 0x4, 0x0, 0x1, [0x10001, 0xffffffffffff0001, 0x4, 0x10831aa2, 0x5, 0x7fff]}) (async) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f7", 0x1}], 0x1}], 0x1, 0x0) (async) recvmsg$can_raw(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000780)=""/4096, 0x108d}], 0x1}, 0x40000003) (async) syz_clone3(&(0x7f0000001500)={0x8100, 0x0, 0x0, 0x0, {}, &(0x7f0000000480)=""/4096, 0x1000, 0x0, 0x0}, 0x58) (async) 6m35.294821193s ago: executing program 0 (id=2338): r0 = socket(0x400000000010, 0x3, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x841}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac1414000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000300000006"], 0x34c}}, 0x0) 6m34.842236346s ago: executing program 0 (id=2340): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000a80), 0x0, 0x404845c) 6m34.626936329s ago: executing program 0 (id=2341): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000540)={&(0x7f0000000240)={0x2, 0x4e24, @broadcast}, 0x10, 0x0}, 0x2000c040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x200000, 0x0, 0xb49, 0x6, 0xc, 0x0, 0x1}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) r3 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$dsp(r3, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001100)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) fsetxattr$security_evm(r5, 0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0301080000c34900030000"], 0x9, 0x2) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000040)={0xf, {"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", 0x1000}}, 0x1006) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000005c0)=0x1) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r4, &(0x7f00000002c0)=[{&(0x7f0000000040)="00214717a7070000000003060000000000000000a8a6761d5874f72cf86d73d32f46381d8fee86d9ca0e6a9c4db5a4", 0x2f}], 0x1, 0xe, 0x200004) prctl$PR_MCE_KILL(0x29, 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') socket$kcm(0x10, 0x3, 0x10) r6 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x12, r6, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x61}, 0x8a1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x81}) 6m31.770251236s ago: executing program 0 (id=2347): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x23, &(0x7f0000000040)="020000000980ffff", 0x8) (async) setsockopt(r0, 0x84, 0x23, &(0x7f0000000040)="020000000980ffff", 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000280)={0x3, 0x2}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000007000)='cpuset.cpu_exclusive\x00', 0x2, 0x0) (async) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000007000)='cpuset.cpu_exclusive\x00', 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000007640), 0x8000, 0x0) r5 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000007680)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r7 = syz_clone(0x900000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = gettid() kcmp$KCMP_EPOLL_TFD(r7, r8, 0x7, r6, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x15}) statx(0xffffffffffffffff, &(0x7f00000076c0)='./file0\x00', 0x0, 0x7ff, &(0x7f0000007700)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000007800)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000007840)) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000007840)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000007880)={{0x1, 0x1, 0x18, r0, {0x0, 0xffffffffffffffff}}, './file0\x00'}) getresgid(&(0x7f00000078c0), &(0x7f0000007900), &(0x7f0000007940)) (async) getresgid(&(0x7f00000078c0)=0x0, &(0x7f0000007900), &(0x7f0000007940)=0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007a40)=[{{&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000300)="cfd02cc033fb2d9cf91721cf86b49c722ea51ebe3fb1ab7c227f95394f7330655844aefa70e2a632478bbbf0a1b3ba74044a63283f67876e7fd3d52ae181570a374fd99c4957db5c476b54d1629afb6cc28e76f327a00629da302d09", 0x5c}, {&(0x7f0000000480)="84d7714d8eff62bf569289cd0159a7348280fb6dc0935f6821ce24ff7ce4207fbdc1720eeaf3c882f0886c87a2b49e5e0b6d780f6cd080396d5279ae0d2a760f95ad0da003451cbc2c4c1a99a9e5280cbfb5d6d07796b46b871b75978f5d272921a940cc904b28747c5f5d0f13a81b792eaca2e8c4abd9ac7ec50587e200856b1767890cee5995", 0x87}, {&(0x7f0000000540)="58f23e6d28e373425a1618e0e39c4eb30d3013a5a7e0358b41d86987de9292f3803fdf3ce4d5c08f5d8724e4a5acec939385d7b992eeb0e46deea90dfeed48727ae5b9d1b67709d3b2eab973e0b0cc71944ab9ddb77513293ed4ad0d5967ad0bd1c55ff68403826e5091b76c8860e8563a8964abf43f6832361d88599cee74e2d7fe70d0130af31e5925e58e793a9e1c1c9dc276a484c1032f39a227545ff431ff0c1ded7d3484b02ae01bfa49ca2e4079e5f508012d17591ca2cca5b7d799611dfc0c6e910a9365eb7b4999d72581509857f000701b5673e741630b4dc08ab8d0649610677c7555498c", 0xea}, {&(0x7f00000006c0)="4a871d504b47b04866cedf8024fd2849c38855b5a739dc6fbebffeb228b65948cc9b93abfc9b64640df4f700a5ec2a75777b1883049d91088dba8cb71da15efdb1080bb294d3909766bdd8bcfae5bb61725269dcaea9230e03685677c8631adea8eb95dfa6ecccc3aad49dc1026d24b87fcdb811b755b045cc877dcaf3af478bfe97ee4fbe827413e0d2539b10c4b2992559007709101847666d0d51f55c3a051811f478114de401796337cd5496c835ab822ad70c3f753119880b6658780aafc3dec8072aed9e44886cd38ac72a73d5a51199944b488f036ef0a6cf0fc96cabe0b2c98e273352f615e105b27a7bab592db70b1e9ab0", 0xf6}, {&(0x7f00000007c0)="9b52e0a8d5c3736e8fafb84d49b78f243de863347f7157e7d3f4a4f300e50f53d346efedf57d62b7160104c3d2afeb056ccc9fb66dd2167518b52c55e1c37024c2cac8783ba096fd92f1af1262c4ba2936fb584868cad37a11661bc63dee09c51260c181a5bf68df3758f1beae2e8e266bf1636621f9947e9344881e1414af36ec2fb3dae350c00633dbe8255dfc907a58c956337a8dd91df1182e2ffa6649d36f30dabff5695e86b9ed854ec3a207f84adbfbfb025b274e8b8cd931e2035b0b4d152187c77678021c167491eaf7eb4442c7e01365d2715cceaf8e662071a1c7f6bc644133b3d3befb4c23f9f63ccf6ca027", 0xf2}, {&(0x7f00000008c0)="655b20c389c7fff8475de9343b2b9809f4e5f749d3a9e010551bf6f6ca8b82cf2a2268a08fbbd53ac7ec13d468c97e2fc83b85284cd99afc021326acefe9bb92ac55fb1834fe103263ba7f6b5748e84f45f898c6b00d1d5552dec797aa0c2b83896120b662554622c9", 0x69}, {&(0x7f0000000940)="8088011c5f155b9761b262778554d7a49285beaaef82f035edff2a9a1eed4e251d1a19bf6ac52f123e4023827822a32eedd49f0459c83b1eb6df86b6658a4b0710e6f892783fe229a4ac01bf91cc07ac2c2bbf7b56dcb1ef959c2f71d1a66f4ec2a45f15e00413e46b32c6fea5ae2fa80e178fab7ff646ba2ecdc9412fc472", 0x7f}], 0x7, &(0x7f0000000c80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32=r1, @ANYBLOB="28000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r13, @ANYRES32=r11, @ANYRES32=r16, @ANYBLOB="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"/421, @ANYRES32=r2, @ANYRES32=r0], 0xf0, 0x14}}, {{&(0x7f0000000f40)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001000)=[{&(0x7f0000000fc0)="535ceebfd0a70d9fe42f8e701c7db751a989eaf5436bbad4d78fcff5b004931c", 0x20}], 0x1, &(0x7f0000006700)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [r1, r0, r1, r2, 0xffffffffffffffff, r1, r0, r1]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r1, r1, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8, 0x1}}, {{&(0x7f00000067c0)=@file={0x0, '.\x00'}, 0x6e, &(0x7f0000006840), 0x0, &(0x7f0000006d40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r1, r1, r1]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, r2]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r1]}}], 0x120, 0x34000891}}, {{&(0x7f0000006e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000006fc0)=[{&(0x7f0000006f00)="54c18b8bd69776c331e9e6fc8c2c0859caa34dc4a1de45a7abe46689245ed04505504906581e33dd513fe7d03254a0dbbdf001aefbab76e4a69fbe553aa7166b7133c1cba8af9e7ddbef3839bb4c76444b4a5edb2dd7d2c3b8404dae28c2f92798db535776feccb827297926ef02207adf24d5e1302948b843ce0e6be81230c491eeb80a696f6882aa4f", 0x8a}], 0x1, &(0x7f0000000b40)=ANY=[@ANYBLOB="2c87579c0000000000e6ff0000000001000000f50b1b73a79067a14246d04db7e8d33b789452dea40d9e7aaa8330fe04c16fff7cf770f781d4859556d21a1c418b44ecba1b39381b1c382daf5183cd08d4cc8af8f3d58b5017b38c3fed22623599f54afff9edea1a57f88609d7dabdf190b42dda2a8548fef80e02ed7bb0c40ae7b4e11331383b06da02c972beb1a9c536f171a2d777be3065ee953fd79135839684f1b16edb8a165dd71dea9ab90b364d", @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=r1], 0x90, 0x400c810}}, {{&(0x7f0000007100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000075c0)=[{&(0x7f0000007180)="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", 0xfa}, {&(0x7f0000007280)="bf09", 0x2}, {&(0x7f00000072c0)="97a2", 0x2}, {&(0x7f0000007300)="68259d3e34500bc41e70a05278d5150d403ae523695d6e0cc4bf33739f9938d67ab17e37eeba28b90532ff1cb648be0a18d601454af4f922658df21b1fc12e742bf724a1ad4b587cfb37556884db94a6", 0x50}, {&(0x7f0000007380)="9e919c59293b9c03ed051e412f65c0ee79c11d3fc7c14e3d91cc5d53057b9d2f003958001a083c6e6804952b4c918520b41f33f2ad385b85030e1494001001d7c397387608f219614aaf1897189ba3b53c88e5a854397cc0aae8649f1951f7ca2d902f35d861ed074b7a0f112255d662f67ce21c877e68758e4d8531bead64a9010af0b4f446c067a6bcd5745750b6b4eccfa0e64b1bf2edd0e95f2c959e889b2d5b", 0xa2}, {&(0x7f0000007440)="7d644342c96b92f956e8b43bbc702deaf3ddb15c8d589c891d4ae699fe9159a3bc6670a64ef6492c8bad9fd2d3f354f189f18cc2eb4968470ddbd1b7d67f9a5e6ad5cfaaf6c68a5dd77f7929bbd9cc553ab5daf8afe53bb0ffddee7a4d290452ea69f476f929e6d0c6df5ed164aa4fa961998df75b458ec1c7ef010e2e5236b10d936d6c8e6457", 0x87}, {&(0x7f0000007500)="d189758ace0b15602dac2f335d7509a13bd7ba6d05fac3bd54424d267baf06db9ec0f6425a0660b2ca67d4532a977b888e3b058c750daccebcf1f5931598fb8d8f44e7028d8de040ce3ea6829a47f9039d77b54bc83825b145348272d84294c30037012e3c2f973b35d82869ffe44bc197eaf6a6fd73d38c1e04f8bd65da01f0ebf3906faa", 0x85}], 0x7, &(0x7f0000007980)=[@rights={{0x30, 0x1, 0x1, [r10, r1, r2, r1, r2, r2, r4, r1]}}, @rights={{0x20, 0x1, 0x1, [r0, r2, r5, r2]}}, @cred={{0x1c, 0x1, 0x2, {r7, r9, r12}}}, @rights={{0x24, 0x1, 0x1, [r0, r1, r2, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r13, r14, r15}}}], 0xb8, 0x100}}], 0x5, 0x4000090) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000000)=[r17, r17, r17, r17], 0x4, 0x80000}) socket$nl_generic(0x10, 0x3, 0x10) (async) r18 = socket$nl_generic(0x10, 0x3, 0x10) r19 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r18) sendmsg$TIPC_CMD_ENABLE_BEARER(r18, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r19, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r20 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r21 = syz_open_dev$video(&(0x7f0000000180), 0xc407, 0x800) ioctl$VIDIOC_S_FMT(r21, 0xc0d05605, &(0x7f0000000380)={0x9, @win={{0x6, 0x2, 0x6}, 0x0, 0x5, 0x0, 0x4, 0x0, 0x3}}) close(r20) (async) close(r20) socket$unix(0x1, 0x1, 0x0) (async) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r20, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) ioctl$SIOCSIFHWADDR(r20, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5m24.507867519s ago: executing program 0 (id=2352): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000000)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f00000005c0)=0x200, 0xffffffffffffffa5) (async, rerun: 32) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) (async, rerun: 32) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) (async) sendmsg$sock(r5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0xf}}], 0x30}, 0x4000) (async) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_CAP_HYPERV_SYNIC2(r6, 0x4068aea3, &(0x7f0000000140)) (async, rerun: 64) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0xfffffffffffffffd}, {0x400000b1, 0x0, 0x8}]}) (rerun: 64) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async, rerun: 64) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) (async, rerun: 64) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r9}, &(0x7f00000002c0), &(0x7f0000000300)=r8}, 0x20) (async) iopl(0x0) close_range(r7, 0xffffffffffffffff, 0x0) 5m24.50028901s ago: executing program 32 (id=2352): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000000)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f00000005c0)=0x200, 0xffffffffffffffa5) (async, rerun: 32) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) (async, rerun: 32) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) (async) sendmsg$sock(r5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0xf}}], 0x30}, 0x4000) (async) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_CAP_HYPERV_SYNIC2(r6, 0x4068aea3, &(0x7f0000000140)) (async, rerun: 64) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0xfffffffffffffffd}, {0x400000b1, 0x0, 0x8}]}) (rerun: 64) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async, rerun: 64) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) (async, rerun: 64) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r9}, &(0x7f00000002c0), &(0x7f0000000300)=r8}, 0x20) (async) iopl(0x0) close_range(r7, 0xffffffffffffffff, 0x0) 7.34101418s ago: executing program 3 (id=3365): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x34d602, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x952f, 0x1, 0x6, 0xfa11, 0xffffffff}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x0, 0x0}) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffff8}, 0x0, {[0x3, 0x0, 0x0, 0x1, 0x50, 0x5, 0x7, 0x2]}}, 0x5c) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0) socket$tipc(0x1e, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@private2, 0x0, r6}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000040)={@private2}, 0x14) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010029bd7000fcdbdf2500000000", @ANYRES32=r6, @ANYBLOB="3a8d04005a10000008000400440000003cfeca652dfefec1385909000000000000003aa5e5f0f3e1f7e2472f9a08e572ef2ccbd659b1625497a86055c72dc96e4face0c53925144eb419e65095d7ff820db18efd6343bf4dee7057c7cd194a9b62bc29cf448cdfe8081c8279d0d88efb3fedbf14bf3a5548c13ef27ba9245ea03a23b9a6670e90e0462a0117bb8a60c37c691aa6d6e7dff8c9ebe9d00c0bbe444be32859af1d01da6b981c98c00c5b35f1be8b76885e573392c70f2d024a5f0ca3416bef8cff18b6fc60f70b68bd51b3ac11cb265cc3db6d"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4.887780466s ago: executing program 3 (id=3375): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0xa, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x80) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x8}]}) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000000)) close_range(r2, 0xffffffffffffffff, 0x0) 4.768269107s ago: executing program 4 (id=3376): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') setpriority(0x1, 0xffffffffffffffff, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', @broadcast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) fchdir(0xffffffffffffffff) close(0xffffffffffffffff) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)=@o_path={&(0x7f0000000380)='./cgroup/../file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, &(0x7f0000000280), &(0x7f0000000440)=r5}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, &(0x7f0000000280), &(0x7f0000000440)=r5}, 0x20) close(r4) r6 = socket$unix(0x1, 0x2, 0x0) r7 = syz_open_dev$video4linux(&(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r7, 0xc0405627, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$unix(0x1, 0x1, 0x0) (async) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80080000, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_LIMIT={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80080000, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_LIMIT={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) futex_waitv(&(0x7f0000000ec0)=[{0x3, 0x0, 0x2}, {0x3, 0x0, 0x104}, {0x5, 0x0, 0x82}, {0x0, 0x0, 0x2}, {0x5, 0x0, 0x82}, {0x800, 0x0, 0x82}, {0x80000001, 0x0, 0x2}, {0x4, 0x0, 0x82}, {0x10000, 0x0, 0x82}, {0x7, 0x0, 0x2}, {0xfffffffffffff801, 0x0, 0x2}, {0xffffffffffffffc0, 0x0, 0x2}, {0x6, 0x0, 0x2}, {0x81, 0x0, 0x2}, {0x7f, 0x0, 0x82}, {0xb3, 0x0, 0x2}, {0x5, 0x0, 0x82}, {0x6, 0x0, 0x82}, {0x1000, 0x0, 0x2}, {0x1, 0x0, 0x2}, {0x9, 0x0, 0x2}, {0x6, 0x0, 0x2}, {0x4, 0x0, 0x2}, {0x9, 0x0, 0x2}, {0x6, 0x0, 0x2}, {0x7ff, 0x0, 0x2}, {0x3, 0x0, 0x82}, {0x2, 0x0, 0x2}, {0x8, 0x0, 0x80}, {0x0, 0x0, 0x2}, {0x8, 0x0, 0x82}, {0x8452, 0x0, 0x82}, {0xe6c, 0x0, 0x82}, {0x8000000000000001, 0x0, 0x2}, {0x800000000000007, 0x0, 0x2}, {0x3, 0x0, 0x82}, {0x6, 0x0, 0x82}, {0x453f, 0x0, 0x2}, {0x400, 0x0, 0x82}, {0xfffffffffffffc00, 0x0, 0x82}, {0x8000000000000001, 0x0, 0x82}, {0x6, 0x0, 0x82}, {0xe12c, 0x0, 0x2}, {0x8000, 0x0, 0x2}, {0xfffffffffffffff8, 0x0, 0x2}, {0x6, 0x0, 0x82}, {0xa10, 0x0, 0x82}, {0x100, 0x0, 0x2}, {0x5, 0x0, 0x82}, {0x3, 0x0, 0x82}, {0x9, 0x0, 0x82}, {0x0, 0x0, 0x2}, {0x7985, 0x0, 0x2}, {0x2, 0x0, 0x82}], 0x36, 0x0, &(0x7f0000001440)={0x77359400}, 0x1) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000000)={0x8}) 4.76666889s ago: executing program 2 (id=3377): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}, [@mark={0xc, 0x15, {0x35075b, 0x4a}}]}, 0xc4}}, 0x2c000010) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000140001000000000000000000e000000200000000000000000000000000000080ff000000000000000000000000000000100000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) 4.348393665s ago: executing program 2 (id=3379): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x9082}], 0x1, 0x0, 0x0, 0x0) r2 = openat$pidfd(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) pidfd_send_signal(r2, 0x0, &(0x7f00000000c0)={0x5, 0x0, 0x7}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r10) r11 = socket$unix(0x1, 0x1, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xa0000, {0x0, 0x0, 0x0, r13, {0x0, 0x9}, {0x5, 0xb}, {0x0, 0xa858712265c6c23}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x6}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240000a0}, 0x4028040) ioctl$SIOCSIFHWADDR(r10, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@newlink={0x48, 0x10, 0x403, 0x70bd25, 0x1, {0x0, 0x0, 0x4, 0x0, 0x1300}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008081}, 0x0) 3.990792975s ago: executing program 4 (id=3382): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000240)) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fanotify_init(0x202, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f000068f000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20044185) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) r4 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000100)={r3, 0x0, 0x4000, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000080)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000002c0)=0x1) syz_emit_ethernet(0x7e, &(0x7f0000000040)=ANY=[], 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r5, 0x5407, &(0x7f0000000040)={0x6, 0x7, 0xcd, 0x0, 0x12, "100056f200"}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000004bcf902e6664bd510ee825ec6230ee91fb4066e6c753d11efca3ae2293506da837dd5c1d0fe57f10bcfccab9ec916c0a7e202351bcc6956fb705e19486fe4ef9b6178303e54cbfc5b3d475e339f91a36871bea2c83dc54024c4902259df8e1af4ed56a87503025b57224d776f275d2a99f9c676fdff7e6feccb6c46e98521ddbf889d67dbb5de3c23410ea28861253d5fcc246c7798a5d54cab2d4fef5755f269f0002000000000000bef15c03153660889ca37110255ab01321d05d2ca08f3f49189843b4de696d61ebcbcb"], &(0x7f0000001400)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r6, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, 0x8, 0x0, 0x0}}, 0x10) ioctl$TIOCMSET(r5, 0x5418, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3.872875084s ago: executing program 1 (id=3383): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000ac0)={[&(0x7f0000000280)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000180)='\x7f\xbf\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000380)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000080)='\xf6\x98l_\xf5<\x1a_6:', &(0x7f0000000480)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000bc0)='\x7f\xb7\xc3\x7f\xa5a\xd6\xd3\x18\xd0\xe0\xd8R\xf02b\xefA|uiWb\x8f\xee\x1ch\x83\x94y\x89\xf1Y{\x87\xd5\xf7\xccMr\xc5\xbdT\x9e\xd4\x84\x06\xcd\x8b\xcd\t\x01\x11\xbc\x86<\x8b\xad\xc4\x80B\xce\x86\x86g\x92\x92w\x89\xfe\xba\xbeeC\x96Ad\t\xc2\xc8\xed\xf3\x1e\x84Ot\x12`=\x98r\x94[\xc8\x91r\xbaG3\xd6a\xca\x05\xd5\xec\xfd\xfa\xaa\xa1\xa7\xcc\x85\xf5D_\xb4$r\xca\x8f\xcf[T\xb9\x0f\xaf\x00\xbc\xa4\xba\xb6=]\x8a\xfb\xaa\xdc+\xbe\a\x06>\r\xe5,i\xa2\xa8\xa2M\xc7\xfb\x11\xd1U\xe5H\xd6\x1b\xf7\xf6B\xcbG\xe4\xe6\xc3{\xf5\xf9_F\x02\x8ah\x15G`+\xf9\xb9\x95V\xa3\xb0\x1b\x0e\xafle%/K\xbb\x9d\x17\xde0\xc2\xa41\x9aS\xe6M\x1e\xb9\xc9\xe8\xf7i\x02e\x8c\xce\xa9\xe7\xc9\x13\xa4\xe8\xf4\x1c\xff\x82\xe13\x89\xeex\xb5\xcf\xce\x108j#\xabH\xc3RU\x00M?\xca\x9c\xefT\xaaJ8*\xe0S\rV\x9c\xaf\xb3yh\x15\xa2\xce>>f\x16\x8d(\xeaot\x83\xe5\x13\xf2bA\xc1O\xbb~\xe5p\x83\xb3\x9d\x1c}\xe7\xd7\x811\x15\x9eP\xea\x00\x00\x00\x00\x00\xfd\x8c\x96\xebw\xdeg\"\xe4\xf6\xfc\x96N\xaf>!\xd9\xaf\x1be\xfa\xedJ\"\xab\x18xK5?\xec\xa0\xc2<\xa8\xdbo\xb1l\nn\xdb#\x97\xbcd\x0e\x93\x9e\xea\xb9\x9d-\xb6u\x7f\xe0\xa6\xef\xb4#\x1b@N\x04\xa0s\xa0\xe1\x90k8\xc3\r\xd0\x1b70b\xda\xe5\xb0\xa8\x01\x14N\xcf\x8dJ\xad\xc69\v\xbc[\xec\x97\xe7\xb2\x90j\xbd\xb1GX\xf2\xed\x15\xceK\xac\x19`a\x1e\x15\x90\x8d\xf4r\xd4Q\xd5\xc19|\xf7\x99\xed\x0e\xaf\xf7\xefR\xa6\xd0:\xe2yB\xfdpG\xf5\xc5\x919\x0f\xfa\xd1R\xc7\x8b\xbc)l\x11\xa8h2V\xe8\x1a\xf7\x8e\x14\xcbF\r\xa7w\xd3\xd3\xb7\xa5\x88\"\xa8\xa4>\xf0*\xbeM\x02\xf0i\x10m(7\xb64\xf5\xa1aZ\x16^\xde\a\xfae\xae\xe7{1\xd0\xa2\t\f\x85\x98\xdaK4]Hi1J\x95\x0e\xa37\x86ch\xcb\xeb\xbfq\xc6\xd3\x98\xd3\x8c_R\xe4oN\xa7\xab\x03\x1c\xc5}\xf1\x92\x82\xe3\xa5~jy<\xf7T\xaf\xabYQ\x82EI\xf0P\x96', &(0x7f0000000680)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000000)='\xc1r\x9dnyb`\x00\xa2\xabCg\x13\b\x8f*\xdaA\x822\xf7\xaf\xf6U\xad\xb0\xb2\f\x88s\x19\xa3D\xa9\x82\x8a\xa3\x94\xab\"|\xcf\x1f\x12\x8d\xe1\xe5\xc3\x01\x03\x003\xa9p^\x01^\x16>tnF', &(0x7f00000007c0)='\x00', &(0x7f0000000900)='\x01-\x00\xb6\xb7\xe1\x7fl\xd5\xf8G\xfdQ=\xc3\xd4\x02RP\xb2\xbf\x99\xfc\x10\" \x93)\xc5\x93\x98\x11\xe0\xd4\x14\x9a\f#LU\xda\xeb\f\x03\xa4\xf7\x85\xddYL\xf7\xf2\xc4\xff@+\x04^\xcc\xc8\xa1\x9f\xa7p\xd2\xaa\xa2^\xa6\xd1\v\xd1\xdd+o\x91\xc8\x90\xeebUCE\xdc=\x89\x86\x81S\x038', &(0x7f0000000840)='\x10!%{@{+\x00', &(0x7f0000000880)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00', &(0x7f00000008c0)='-\xf3\x00', &(0x7f0000000980)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000780)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00', &(0x7f0000000a80)='::-$[]#:{\x00']}, &(0x7f0000000b80)={[&(0x7f0000000800)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00\x00\x00\x00\x00', &(0x7f00000000c0)='-\xf3\x00']}) 3.871338486s ago: executing program 3 (id=3384): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x4d8, 0x340, 0x18c, 0x203, 0x0, 0x19030000, 0x408, 0x2e0, 0x2e0, 0x408, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x340, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {0x3}, {}, {0x0, 0x9b}, {0x0, 0x0, 0x0, 0x20000000}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x6}]}}, @common=@hl={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x1000, 0x5, 0x6, 0x1, 0x7, 0x0, 0xac10, 0xc4]}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x538) 3.811594053s ago: executing program 4 (id=3385): syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) (async) r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x154, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x2, 0x12, 0xfc, 0x3}}, @TCA_CHOKE_STAB={0x104, 0x2, "0600000000000000b3da2c64426a1d777a61e2fad4599fb11a71e149072d265bbcf090bd7bbe0e5d2de66213d88d7e773024ba3482c95f5dc6359186172ae22ed9616876e0ec13f573a7c2f0d185109a8457e43c5390e59a84747ee7b311ecc2f8bac84497d72789a3fa4ab2e321de479655bda89963ae5f37684f73a07ca9d223dfe04aae9e1ff7f8441133075f4355c81d80a33e4907edd482cafffa6cf279ea06d0d17b9770d10d6978345f4fb5f2b61619e5e3b4b4090c77e69d028f41ab371e8c6bef4485fe557e260ff37e8f6a854d0b686963dcfea9a71953940f9d6ec1de1d4e2221adfd549d529a594013b2dcde2d070f6ba92fcbb700"}, @TCA_CHOKE_MAX_P={0x20, 0x3, 0x10}]}}]}, 0x154}, 0x1, 0x0, 0x0, 0x24040800}, 0x40020) (async) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x154, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x2, 0x12, 0xfc, 0x3}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x20, 0x3, 0x10}]}}]}, 0x154}, 0x1, 0x0, 0x0, 0x24040800}, 0x40020) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000080)=0x4081, 0x4) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000440)={0x14, &(0x7f0000000380)={0x20, 0x21, 0x6f, {0x6f, 0x0, "794f3d7c066de49c392a8051e02e5b303a65f7010463d060aa76e0f302ff3a40dec29177677d6f0bf7f71dde0a2b4498e0049e1e4bf2b464cfaadeb40f963bee1ad475dc34dec2c84627c8d4ce2e3f32f7136c99e18077b84d6f64254fc1e053c570310042f54158aeb8579928"}}, &(0x7f0000000400)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000006c0)={0x44, &(0x7f0000000480)={0x0, 0xe, 0x60, "7411390d674305130d9eca787184b1bcdddd2e64caeb866e3194238a0debfbb6a28b82556644d69726e7f0a13fe8182d7d45ac6d528718e58ad64cc83f73d34e94f098ab25a7d851a48276538a5faae5c3a394e709cece21d60986e305dbde3c"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000580)={0x20, 0x80, 0x1c, {0x8, 0xf0, 0x4c2d, 0x200, 0xbf, 0x7f, 0x9, 0x40000, 0x8, 0x3, 0x1, 0xda}}, &(0x7f00000005c0)={0x20, 0x85, 0x4, 0x4}, &(0x7f0000000600)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000640)={0x20, 0x87, 0x2, 0x1}, &(0x7f0000000680)={0x20, 0x89, 0x2, 0x1}}) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000440)={0x14, &(0x7f0000000380)={0x20, 0x21, 0x6f, {0x6f, 0x0, "794f3d7c066de49c392a8051e02e5b303a65f7010463d060aa76e0f302ff3a40dec29177677d6f0bf7f71dde0a2b4498e0049e1e4bf2b464cfaadeb40f963bee1ad475dc34dec2c84627c8d4ce2e3f32f7136c99e18077b84d6f64254fc1e053c570310042f54158aeb8579928"}}, &(0x7f0000000400)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000006c0)={0x44, &(0x7f0000000480)={0x0, 0xe, 0x60, "7411390d674305130d9eca787184b1bcdddd2e64caeb866e3194238a0debfbb6a28b82556644d69726e7f0a13fe8182d7d45ac6d528718e58ad64cc83f73d34e94f098ab25a7d851a48276538a5faae5c3a394e709cece21d60986e305dbde3c"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000580)={0x20, 0x80, 0x1c, {0x8, 0xf0, 0x4c2d, 0x200, 0xbf, 0x7f, 0x9, 0x40000, 0x8, 0x3, 0x1, 0xda}}, &(0x7f00000005c0)={0x20, 0x85, 0x4, 0x4}, &(0x7f0000000600)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000640)={0x20, 0x87, 0x2, 0x1}, &(0x7f0000000680)={0x20, 0x89, 0x2, 0x1}}) setsockopt$packet_int(r4, 0x107, 0x9, &(0x7f0000000000)=0x4800, 0x4) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe004681000000078a151f75080039000500", 0x27) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) r6 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_G_FMT(r6, 0xc0d05604, &(0x7f0000001400)={0x1, @win={{0xd, 0x8, 0xbb, 0x200}, 0x4, 0x9, 0x0, 0xffffffa3, 0x0, 0x1}}) ioctl$VIDIOC_LOG_STATUS(r6, 0x5646, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="c265772064656661756c7420757365723a73"], 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) (async) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000340)={0x0, 0x16, 0x1, "ff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.583437958s ago: executing program 1 (id=3387): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x63, 0x86, 0x35, 0x10, 0xcf3, 0x1010, 0x3687, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x4, 0x50, 0x0, "", [{{0x9, 0x4, 0x7c, 0xb, 0x0, 0xa4, 0xca, 0xd4}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x5, &(0x7f00000002c0)={0x5, 0xf, 0x5}}) syz_emit_ethernet(0x3b6, &(0x7f0000000440)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d23396", 0x380, 0x3a, 0xff, @remote, @remote, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8e2d, [{0x0, 0xa, "a78ce5400659808000000003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42c60a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d036397a0acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1ffffffffffffda8, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a000023f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743474671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68f2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "fc07876d4ec1876d4e6fa3ce2dfdb43a6f021659ff5c2d6b3d9363ed09bd9281c9fe68a3000000006f0000044e43e740e077e1d16212fb"}, {0x2, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1eb91a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d96967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c000000000000000000"}, {0x0, 0x5, "090000000900000036da018dff16e70b8b1400000000e18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) (async, rerun: 32) syz_usb_disconnect(r0) (async, rerun: 32) syz_usb_connect$uac2(0x1, 0x7b, &(0x7f0000000e00)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8f, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x4, 0x679f2c29b0fe1442, 0x2, {0x8, 0xb, 0x1, 0x1, 0x1, 0x5, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x5409, 0xb, 0x9, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0xff, 0x1, 0x80, {0x8, 0x25, 0x1, 0x1, 0x0, 0x6, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x81, 0x6, 0x9, {0x8, 0x25, 0x1, 0x0, 0x3c, 0x3, 0x9}}}}}}}}]}}, 0x0) 3.582423379s ago: executing program 3 (id=3388): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000007c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000ab4000000060a010400000000000000000a0000010900010073797a31000000004c000480340001800b000100746172676574000024000280080003009ac4200008000240000000000d000100434c41535349465900000000140001800b00010064796e7365740000040002800900020073797a32000000003c000580080001400000890d080001400000001c080002"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r4, 0x0, 0x0, 0x20004041, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2663}, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r6) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) sendmmsg$inet(r2, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000640)=@get={0x1, &(0x7f0000000680)=""/68, 0x401}) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r2, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000700), 0x9, 0x0) unshare(0x62040200) 3.490772971s ago: executing program 4 (id=3389): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0xa, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x80) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x8}]}) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000000)) close_range(r2, 0xffffffffffffffff, 0x0) 3.25396008s ago: executing program 2 (id=3391): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 2.833089743s ago: executing program 2 (id=3392): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x4, @empty}, 0x1c) recvmmsg(r1, &(0x7f00000015c0)=[{{0x0, 0x0, 0x0}, 0x4b6e}], 0x1, 0x820b, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="13010000bd460e10490d1070900c010203010902120001000000000904000000d2", @ANYRES16=r0], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet6(0xa, 0x2, 0x0) (async) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x4, @empty}, 0x1c) (async) recvmmsg(r1, &(0x7f00000015c0)=[{{0x0, 0x0, 0x0}, 0x4b6e}], 0x1, 0x820b, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) sendto$inet6(r2, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) (async) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="13010000bd460e10490d1070900c010203010902120001000000000904000000d2", @ANYRES16=r0], 0x0) (async) 2.677400722s ago: executing program 5 (id=3393): openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r2) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000480)={r1, &(0x7f0000000240)='[,!(.&\\\x00', 0x8000, &(0x7f0000000300)={@align=0x9, {0x9, 0xb0, 0x8, 0xf}}, 0x1, &(0x7f0000000380)={@_ha_fsid}, &(0x7f0000000440)=0x7}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000500)=@allocspi={0x100, 0x16, 0x501, 0x70bd2c, 0x25dfdbfe, {{{@in6=@dev={0xfe, 0x80, '\x00', 0x27}, @in=@multicast2, 0x4e22, 0x6, 0x4e24, 0xfffa, 0x2, 0x80, 0x120, 0x88}, {@in=@dev={0xac, 0x14, 0x14, 0xa}, 0x4d5, 0x33}, @in6=@remote, {0x1ff, 0xa2, 0x7, 0xfffffffffffffffc, 0x0, 0x4, 0x7fff, 0x48fe}, {0x4, 0x9, 0x5fde, 0xffff}, {0x5, 0xfffffff8, 0x9}, 0x70bd26, 0x0, 0xa, 0x2, 0x7f, 0x1}, 0x3, 0xde}, [@tfcpad={0x8, 0x16, 0x80000000}]}, 0x100}, 0x1, 0x0, 0x0, 0x4075}, 0xc800) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) getpid() syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r5 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x400) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0x5, 0x0, 0x0) r6 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000340)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000007900)}], 0x1, &(0x7f0000001380)=[@assoc={0x18, 0x117, 0x4, 0xcf5}], 0x18}], 0x1, 0x0) r7 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000180)=@multiplanar_overlay={0x8, 0x9, 0x4, 0x1000, 0x6, {0x77359400}, {0x2, 0x0, 0x7c, 0x9, 0xf, 0x5, "a4f3915a"}, 0xff, 0x3, {&(0x7f0000000100)=[{0x7f, 0x3, {0x10000}, 0x2}, {0xe96, 0x2, {}, 0x3}]}, 0x6}) r8 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001ac0), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000080)={0x5, 0x1, 0x2, "621aa47a37346cc50088615b2090a35771e9053f2a3d4969290c9fcb76760026", 0x32314247}) recvmmsg(r6, &(0x7f0000006400)=[{{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000004d80)=""/4102, 0x1006}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c00000003060104000000000000000002000005050001000700000025e0144d06db249617cab2013cfc2694c2e1fbf957bf4ea85e3a962656fcaf7b2c5242df28d75e9a5317dfd9db9095578c19f668"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 2.417107929s ago: executing program 4 (id=3394): dup(0xffffffffffffffff) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) (async, rerun: 32) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x40009, 0x0) (async, rerun: 32) r2 = io_uring_setup(0x3454, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) (async) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0xfda, &(0x7f0000000300)=0x400) (async) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) 1.884415999s ago: executing program 3 (id=3395): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0xa, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x80) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x8}]}) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000000)) close_range(r2, 0xffffffffffffffff, 0x0) 1.668423136s ago: executing program 2 (id=3396): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x6b682, 0x0) fdatasync(r1) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket(0x1d, 0x80802, 0x6) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0xd) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) recvmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/62, 0x3e}, {&(0x7f0000000080)=""/47, 0x2f}], 0x2}, 0x102) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x4, 0x8, 0x80}, 0x0, &(0x7f00000002c0)={0x3ff, 0x30e3, 0x0, 0x3, 0x5, 0x8000000000, 0x80000001, 0xfffffffffffffffc}, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) socket(0x400000000010, 0x3, 0x0) syz_io_uring_setup(0x2cf2, &(0x7f00000001c0)={0x0, 0x2000c684, 0x0, 0x6, 0x400250}, 0x0, 0x0, 0x0) syz_io_uring_setup(0x10a, &(0x7f0000000680)={0x0, 0x80334c, 0x10, 0x3, 0x3d3}, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9], 0x90}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) 1.058194327s ago: executing program 5 (id=3397): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1f, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r3}) r5 = open_tree(r1, &(0x7f00000002c0)='./file0\x00', 0x1401) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r6) socket$alg(0x26, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8b15, &(0x7f0000000000)={'geneve1\x00', @multicast}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f00000003c0)=[0xf], &(0x7f0000000340)=[r4], &(0x7f0000000100)=[0x31], 0x0, 0xff}) io_setup(0x3fd, &(0x7f0000000500)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000690000/0x7000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ff1000/0xc000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000690000/0x4000)=nil, 0x0}, 0x68) io_uring_setup(0x6, &(0x7f0000000040)={0x0, 0xc8a1, 0x1000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x340, 0x340, 0x0, 0x340, 0x270, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'ipvlan1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [0x0, 0x0, 0xff000000], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x1100}}, {0x28}}}}, 0x560) 913.002132ms ago: executing program 4 (id=3398): ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000180)=0x9) r0 = syz_usb_connect(0x5, 0x58, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000012e7c820dd0407808edf0102030109024600010000000a09047ef30002060000052406000005240048000d240f01060000000300500036052406000105260009000d240f"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_IMMEDIATE_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$inet(r3, &(0x7f0000003e00)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="f1e538943a7ccfa5c6a23afc1bbc63657f7cfb36f81a03a698ee1b36cd21a0dc2dc525fae7fe1c762453d4566261", 0x2e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)="c7dd7e36ecd58e182972aa83894a1fad1f996aa277d86beb886c590891f30dd11f2960f01dd5a69309517207a8b015d31dd2260dda9f391278cacbcc29b10d4450456da1753f10c6865d94e55f056bcdcb818857d3ec66260b264dd184df9504a2f272262f6607579e324caf918d00913845c1f73fbf302e273341be01cf34719b81bf8f3fd9ed6b051c8e3e16bc883d92ff0a310736cb7c0ce708ceff1197dd33327fb35db764552c91d208e2ea6833d3ff8ecb32acce5c00c332d18375b5acf69bddf38121d29fa1d68ba3f44b75adcbfc34b43e8da35eef21e6c60e9140141b7b0e", 0xe3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000003c0)="6d8927da228592a1aaafcb73dc58bbdd739892204d9e3949e43e5c3c1718eb53e59740101113a19f9a7329e7646bf087b682f15d30a55a016cda631c8d7fa7f25447ba0c8293ec344e400c28ef0f2db41c25e41c03166dcbbb91fecb53a620076bf6793846f6b565f8d580c0d2fdd434c1402744a1f91d606c41b3ce062bb677ad54a981cb19e9270c500532c2e3f36a996387b843a1521d0203eb765e0b09ca22975eec125d193642e748ab7dc898c70e3d220490538c92f171593eec01888df40512c5ca4be49209bc86593305b747cc8f5cc6c0d658ebf7f901112fab2b", 0xdf}, {&(0x7f0000000200)="e866e6491b0b13c3a7be5bba6c911b66f430375f3e920c7a926ce27821e8ec1522a2caefcbdb7ed1e37374ebd06448ec1b2b3295386e19fe1b756ab5601d193e", 0x40}, {&(0x7f0000000740)="83f424e345da3f1985d7ed9f43ec4b97cccb25a50fc298115a1f7c301511565b44fbe7bafbdb5f3088f6247fa7e47e6bd19ae92224cbb491d4a1f1c3c60d22bfbcf28d8978", 0x45}, {&(0x7f00000007c0)="0be90882a7df5b5d13d352e3e15aa2bf48eb3e4dea46ae936d5d3d606d159595ffe6d7ada2ccba5cd6337ce28ef3", 0x2e}], 0x4}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000880)="8d3b117c2c8005f2712b8a968ee121ed39c84b5813985fb9a3f897da37640daa50dbfd57dbc2d730cb8cf4cd1e6722b8663d", 0x32}, {&(0x7f00000008c0)="f19e3420a8580be3e948c8b6078fc95c894f1c2e6e2df9a58d40cbe8ea7206e132a427a3bb0754c3c1eacd545e7006565935df92a96ce4c83db7cd780fbb8080960fc0c340ae4f84887f5699e48b85a4ca51ec2eb81b8c9a5a7e5abf915a62848b67ff33fc6bb18495c485cd9b6ff42006fe6e09a5a4c9322a69e1f3226c63de27275d8abbccbab0d047043986291b9d0ec67ae0a9282a67c23f61ff5707fe182fa4a264e4b4c64cfa1a95487ff6d03dbab74fd1e1594139486ff245471a6ed079cbdf1408eadcbaf25a418e01089ce25b6cf2bca7a78887dcced7a058f6a37af8d4ac1379978010c62818a29fc120d9d46b5c8e", 0xf4}, {&(0x7f00000009c0)="017b0507c7b0483e0aaac803e7423948779f323ba18d49414226b481278b42bb939c2cea1bd30a93b4d2e75a25f890c45891a09de51f2c594f8daf6dc06aca4577c8513d59e74fe15f944536671f9d71f68d0802b10b197706d9ca15770a0d3eab4b4855af84db8487b5fafd17941a5c750041c876cba51e0a42e6216bc518d2a6b5cd23c45fa8e9878de9768ff191baebd5f458accfa13e47529c132eee03b8d5db03dd3da89f273613797bdbfec2661327e1743e45dafb22fc747ee17d6a8bb3eb3d06e0e04cc1f6e2ca79e8e33c78be695e8148a08c16", 0xd8}, {&(0x7f0000001bc0)="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", 0xb60}], 0x4}}], 0x4, 0x8000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000006080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000000)={0x50, r6, 0x11, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xfffffffb, 0x2d}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}]]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001700)={&(0x7f0000000140), 0xc, &(0x7f00000016c0)={&(0x7f0000001480)={0x20c, r4, 0x20, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x0, 0x1e}}}}, [@NL80211_ATTR_STA_WME={0x14, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x2}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x74f}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xa8, 0xac, "6351c566716d60550495f3e1030ffe00eed0dbb850395514ed4faab8b3518cfd406aa2d11086e184e688cf0c321214190449564fc59757a94206973d1f110f3675b06023e1d47b7584b691fce49ef9393bb902ba42b61be369fb5dfe80b686416a36df2fee00ffe0f65742a76f4b941964e8cde9e2a0bcd079fe6072fac9c7a7d88bbd6a6cd73e9108ad9be91e625bd07abf121036c09aed2ac9609f33e10fbf073a3bd3"}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xee, 0xac, "fcb211fa81006bd4f8b129a01b8b3ddebdf17157b763b59ef2fb6e226070f50a61027b6ff0efcc43e037faab7e8085ddd50d840985d1ab7e466ea63e8e19b3582a61418410a4cdb5ed9a54c90cb69f841eced20b79e981a4fca817a4c01a9ab7ca851b62b493af60cfeb1dd6db23908f991127e2dee844839a2c1ad68e9df7784e4dc4520eb0b4da8acf34b6738e345bacd58c9613a5212d5f4c6aca98f6be85363e9ded7b3ff316b836acedfce5523725398fc02c3852c2e836a7d78a17acc5177c36e79906ac0cca21facbb357694fc12d0db06efdab5a7247836e6f53e4798f35ee3c3aceb3d83358"}]}, 0x20c}, 0x1, 0x0, 0x0, 0x10044}, 0x90) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x120, &(0x7f0000000000)={[{0x4c, 0x4e00, "232dd451a494beea3f9c1bb12c8949ef25282a223deb6e357d01ed4319374f1eba38fcbc9a42b012e60d60adfc33d3cba035264225c809301b2863ffc66013a515567814e28ede2657600925"}, {0x59, 0x4e00, "e8d085be875b082b5f3b43cbcae583d11d5e8269d9c7e5d36865117a9b7007006795f8b138af104efc4be8535699cc5e2d9ea55d0af35d82ac437bd0e6628de0e73b07c2a4e601079df498ed2ad5c63366e795ac7d5e1fcbdf"}, {0x69, 0x4e00, "a24622ab4f0816fd069a3a42edd63399c457b9e8de8e792d410c46eb64c6ecb6b6a4572828e19d0a65e5377e34168076977c8cb31b4f285155be9aade053523b78d84c2f5aaf48ac92dfd6a170be1062d56a47f680eae5d0dbdc7c4338731cb86aa2ea035d7a7595e1"}]}) r8 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r8, &(0x7f0000000400)={'#! ', './file0', [{0x20, '[,'}, {0x20, '@'}, {0x20, '@^.\\@^'}, {0x20, '/dev/bus/usb/00#/00#\x00'}, {0x20, '/dev/bus/usb/00#/00#\x00'}, {}, {0x20, '[$'}, {0x20, '/dev/bus/usb/00#/00#\x00'}, {}], 0xa, "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"}, 0x105e) 722.625759ms ago: executing program 2 (id=3399): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000001800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x10}}], 0x40, 0x40001}}], 0x1, 0x0) (async) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) (async) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x4f2, 0x1236, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x8, 0x3, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x0, 0xe}}}}}]}}]}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_usb_disconnect(r6) syz_usb_control_io$sierra_net(r6, &(0x7f0000000300)={0x14, &(0x7f0000000240)={0x20, 0x22, 0x79, {0x79, 0xf, "91ecaebf3f0e11e13ea5eaaa4bd25ab9a7a0441205abe92129345422f4e26c164cb5cf4bcd50151684ab207e9ff3918ccc0fba78732667339fa366c69d7274dc5170d7b618b1e1bfcc05b615455874b3a79eeefa4c7b7990c5e3d06b0b49328c84fad12b4756854c0a2f20f5375138561eece69efb50ab"}}, &(0x7f00000002c0)={0x0, 0x3, 0x16, @string={0x16, 0x3, "ccd19d8fd8b9d19ede62593583fd529f9d70b3c2"}}}, &(0x7f0000000a40)={0x1c, &(0x7f0000000440)={0x20, 0x14, 0xc9, "09f948a62c1924666508c5a989ed5fcf50c8bc4a8a7d9c4a3c944cebc02d2f4c27f601c774d28d6a9af85d125f93aeb48b9bebe142d0b1ca4b0e88e88303ee6701b1a2f1f2f58694b87457a80f850f2d4b051a40a633d07598a669cb799e55ac2e8525abce93e11628199c8645c7057712c05a31800e105ecdc38b6cdde3cc89cf0d8b8f145e4553cfd9def6fed41f9c5e45e2d49494d5968913061740c3289406cce3774628749ea949f4371f0c755161b3f0928fe268d436b17871e9fec24f965dfc492d51bd09ab"}, &(0x7f00000005c0)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000a00)={0x21, 0x0, 0x4, "73880a94"}}) (async) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000002600)={0x0, 0x3, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b80000000b76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0ae4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f600"}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x6, 0x9, 0x8000000000000000, 0xf4a, 0x0, 0xbdb], 0xffff1001, 0x4000}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'vlan0\x00', 0x0}) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086", 0x17, 0x0, &(0x7f0000000040)={0xc9, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) r10 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r10, 0xc040564a, &(0x7f0000000200)={0x52, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x180a0000, 0x1}) r11 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) (async) ioctl$KVM_RUN(r11, 0xae80, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (async) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) syz_usb_connect(0x3, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0xdd, 0x28, 0x41, 0x10, 0x3f0, 0x207, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x10, 0xc, 0x70, 0x2, "", [{{0x9, 0x4, 0x52, 0x0, 0x0, 0x19, 0x2c, 0xd8, 0xfd}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 720.831347ms ago: executing program 3 (id=3400): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b00010000100009045507010349020009058203"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = fanotify_init(0x200, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) fanotify_mark(r6, 0x1, 0x4800003e, r5, 0x0) r7 = dup2(r6, r5) readv(r7, &(0x7f0000001400)=[{&(0x7f0000000040)=""/81, 0x51}], 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$RTC_WKALM_SET(r8, 0x4028700f, &(0x7f0000000280)={0x1, 0x1, {0x36, 0x25, 0xd, 0x13, 0x6, 0x2, 0x0, 0x1e}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r9 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0xc, 0x0, 0x5c8c, 0x0, @empty, @mcast1, 0x8000, 0x0, 0x1, 0x20000000}}) io_uring_enter(r9, 0x2219, 0x7721, 0x16, 0x0, 0x0) pipe2(&(0x7f0000000000), 0x80080) syz_usb_control_io(r3, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, &(0x7f0000000340)={0x24, &(0x7f00000000c0)={0x20, 0x22, 0x2, {0x2, 0x10}}, &(0x7f0000000640)=ANY=[@ANYBLOB="00034300000043030901c648156d86ad53bd9800000000a74f2f425d90d89260f1b1f19b95917577cae9b0c37dc39ca79cdec68064dbe664cc6e0f5ed0bebba3f027e2d19163fef73520229f760f7a7b59b611c8e331"], &(0x7f00000002c0)={0x0, 0x22, 0x12, {[@main=@item_012={0x2, 0x0, 0x8, "e0bc"}, @local=@item_012={0x0, 0x2, 0x1}, @local=@item_4={0x3, 0x2, 0x1, "aa68d936"}, @main=@item_012={0x0, 0x0, 0xb}, @global=@item_012={0x2, 0x1, 0xb, "edb3"}, @main=@item_4={0x3, 0x0, 0x9, "cc319b23"}]}}, &(0x7f0000000300)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x4, 0x1, {0x22, 0x4a6}}}}, &(0x7f0000000580)={0x2c, &(0x7f0000000380)={0x40, 0x3e, 0xc3, "2986f312f15bbcd9e6cbc58449ef60dce9a435da710c8d65eade56f68960c38ebd720f079e37389b8acacee0b9265b55a049bb396566998fc6446873311c2f309d120a6aa11f460d2495a14e3df2724ae8f94d98ecd5fb721d5e52a702c03c0b16dbe877b298ff16754437d1ac0bc4631fd8c7fdbc395229c63a0d97ebf572ba0d20964a6608b4348fc5609cd3cd431598987539859dad76c73e1fd344a85ddf5a93bd06ee65c5134c6cd18339a9e05d3aa90fdaa09b264d0f7f21d7b17c16a68d7b49"}, &(0x7f0000000480)={0x0, 0xa, 0x1}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000500)=ANY=[@ANYBLOB="20012c000f0205bea4d16efaf60c14438eca625b000021686484f137bf429f9b4e328f19ffaed414a4b3e56daa1a0b"], &(0x7f0000000540)={0x20, 0x3, 0x1, 0x1}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x41, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109022400010000000009040000025c291d0009058e00000000000009050b"], 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x800, 0x0, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r10, r10, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f00000001c0)="260f013d36360f38f96f660ffb121f1fb8010000000f01d966b9600300000f3266b86493fd8566eff30f0966b80000010066efe60fc77281260f01c20f20c06635080000000f3922c0c0f5ece4", 0x4d}], 0x1, 0x73, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 486.300192ms ago: executing program 1 (id=3401): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r0, 0x5) sendmmsg(r0, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x11}, 0xa, 0x1}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000340)="e0", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000000000008400000005"], 0x10}}], 0x2, 0xc8844) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newlink={0x74, 0x10, 0x701, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x60181}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x6}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x4000804) 485.864337ms ago: executing program 5 (id=3402): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x40000}, 0x0) 393.235027ms ago: executing program 1 (id=3403): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c881, 0x0, 0x0) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a80), 0x0, 0x404845c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000080), 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x220c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x3) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x55) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x7) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, 0x0, 0x0) 322.388313ms ago: executing program 1 (id=3404): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000580)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e20, 0x6, @remote, 0x273a}}, 0x0, 0x7ffd}, 0x90) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000500)={0x0, &(0x7f0000000900)=[@nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @control_nat=0x600e, 0x3, 0xde, 0x600}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x488, 0x4040000000000000, 0x7, 0x80}}, @in_dx={0x69, 0x20, {0xb401}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @host64=0x2c00, 0xf0ba, 0xfffffffffffffffd, 0x2}}, @wr_crn={0x67, 0x20, {0x0, 0x86}}, @nested_load_syzos={0x136, 0xee, {0x0, 0x7, [@uexit={0x0, 0x18, 0x6}, @code={0xa, 0x66, {"0f01f8b921000000b8693c4754ba000000000f300f00d56465460f01c3b904020000b8081f0000ba000000000f3066bad104b005eec4c1fa7e9829871e7666b830000f00d8c441322ad666470f3a60a60d00000001"}}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_amd_inject_event={0x180, 0x38, {0x7, 0x40, 0x7, 0xecce, 0x2}}]}}, @nested_load_syzos={0x136, 0xa0, {0x1, 0xffff, [@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18, 0x3}, @wr_drn={0x68, 0x20, {0x7}}, @nested_amd_vmsave={0x183, 0x18}, @nested_create_vm={0x12d, 0x18, 0x1}]}}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x7b, 0x2, 0x0, 0x9}}, @cpuid={0x64, 0x18, {0x5, 0x7}}, @in_dx={0x69, 0x20, {0xce18, 0x1}}, @code={0xa, 0x38, {"360f306466400f3801c8640fc7190fc75c9900470f32d9c20f01c50f78e6420f01dff3410f1efa"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @host64=0x2c01, 0x8, 0x6, 0x9}}, @rdmsr={0x66, 0x18, {0x805}}, @nested_amd_vmsave={0x183, 0x18}, @uexit={0x0, 0x18, 0x545e}, @nested_load_code={0x12e, 0x7f, {0x3, "2e2626420f01d166b820018ec00fc71c34c744240003010000c7442402b06526cfff2c24c4e2f13a21b903010040b800080000ba000000000f30260f20da040d0f20e035020000000f22e0c74424004e000000c7442402d9a10000c7442406000000000f011424"}}, @nested_load_syzos={0x136, 0x290, {0x0, 0x4d2, [@nested_amd_set_intercept={0x181, 0x30, {0x2, 0x0, 0x1, 0x1}}, @nested_amd_clgi={0x17f, 0x10}, @nested_load_syzos={0x136, 0x120, {0x1, 0x6, [@nested_amd_set_intercept={0x181, 0x30, {0x0, 0x1e50, 0x8}}, @set_irq_handler={0xc8, 0x20, {0x1a, 0x2}}, @nested_amd_invlpga={0x17d, 0x20, {0x1000, 0x69d3}}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x8000000000000001, 0x8}}, @nested_create_vm={0x12d, 0x18}, @cpuid={0x64, 0x18, {0x4b, 0x3}}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x4, 0x77e, 0x1}}]}}, @nested_vmresume={0x130, 0x18}, @wr_drn={0x68, 0x20, {0x0, 0x1}}, @rdmsr={0x66, 0x18, {0x23e}}, @nested_load_syzos={0x136, 0xa0, {0x3, 0x10001, [@nested_vmresume={0x130, 0x18, 0x1}, @nested_amd_stgi={0x17e, 0x10}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @host_nat=0x6c04, 0x9, 0x1, 0x5}}, @wr_crn={0x67, 0x20, {0x0, 0x6}}]}}, @wrmsr={0x65, 0x20, {0x4b564d01, 0x3}}]}}, @out_dx={0x6a, 0x28, {0x7fa3, 0x1, 0x5}}, @nested_amd_vmload={0x182, 0x18, 0x1}, @out_dx={0x6a, 0x28, {0x688e, 0x1, 0x100004}}], 0x72d}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000540)=@arm64={0xf, 0xfc, 0xf, '\x00', 0x2}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400f60000"], 0x14}, 0x1, 0x0, 0x0, 0x2400a051}, 0x44000) close_range(r5, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) ioctl$KVM_GET_VCPU_EVENTS(r9, 0x4048aecb, &(0x7f0000000240)) r10 = syz_open_dev$vbi(&(0x7f0000000140), 0x3, 0x2) ioctl$VIDIOC_S_PARM(r10, 0xc0cc5616, &(0x7f0000000040)={0xd, @output={0x0, 0x0, {0x8bf9, 0x80200}, 0x12, 0x40a9b7b8}}) r11 = syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/pid\x00') ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="90e5b75683150fce393b82cdb0a0ab611ce38098b616e59e47d2ebf0eb3e4145b3b077c81610d28322335590c6efbeb8306ab410291c979affea543b10db670708bb73a7d205cb29cd1545bf66faba", @ANYBLOB="050000000000000000000600000008000300", @ANYRESHEX=r5, @ANYBLOB="85af080025000b00", @ANYRESDEC=r11], 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) 281.294434ms ago: executing program 5 (id=3405): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket(0x2b, 0x1, 0x100) (async) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0x0, 0xf000, 0x0, 0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xddccb000, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xdddd8000, 0x18, 0x8, 0x0, 0x4, 0x81, 0x0, 0x80, 0xe, 0x4, 0x3}, {0x10b002, 0x2000, 0xc, 0xfd, 0x80, 0x0, 0x3}, {0x1000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0xfd, 0x1c, 0x1a, 0xa8}, {0x10000, 0xd000, 0x0, 0x4, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xfc, 0x86, 0xfe}, {0xeeee8000, 0x30000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x80, 0x0, 0x4}, {0xd000, 0xeeee8000, 0x3, 0x82, 0x9, 0x10, 0x4, 0xe}, {0x6000}, {0x1, 0xfffe}, 0x40000009, 0x0, 0x0, 0x10, 0x1, 0x0, 0x900, [0x0, 0x0, 0x10000, 0x3]}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x5, 0xe1, 0x7, 0x2, 0x4, 0x9, 0x6, 0x5, 0x9, 0x3, 0x4d6, 0x1, 0x4, 0x1, 0x3, 0x8], 0x50000, 0x120000}) (async) ioctl$KVM_SET_MSRS(r2, 0x4140aecd, &(0x7f0000000100)) 60.477072ms ago: executing program 5 (id=3406): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800a00010071756f7461000000100002800c0001400000000000000000a41400000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000781403800c0000800800034000000002"], 0x1548}, 0x1, 0x900}, 0x0) 10.453382ms ago: executing program 1 (id=3407): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="b80000001900010027b970000008000000000000000000000000000000000000fe8000000000000000000000000000bbb62f92f632437e8e0200000004000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000200000000000000000000000000000000000000000000000014000000d8090000000000000000000000000000000000000000000001"], 0xb8}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYRES8=r1, @ANYRES16=r2, @ANYRES32=r2, @ANYRES32=r1, @ANYRES16=r1, @ANYBLOB="b387034fd88a70363895c7bbc86666c640f5e390711bbeb4c4fb9a81518246bcd9599108f4eb32eef4ccf88b929a6dff4bdd37053cad8afbf5982b4d9202d0eedf9c477718c44302da21f56d1eb2fa189a556711ddbcb441e483833492317bee7634a83e9705865b1164521877dd0d1d974b7f9c13b2cf658b63d9e10ba6e7a3e93971f66a31d1c8bc1fd56bfec8de89"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) socket(0x2, 0x80805, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=@newtaction={0x44c, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x438, 0x1, [@m_police={0x434, 0x2, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x28, 0xfffffff8, 0x3, 0x4, 0xffffffc0, 0x6, 0x5, 0x5, 0x2, 0x117, 0x10000, 0x8001, 0x2, 0x1, 0x7, 0x9, 0x80000000, 0xaa, 0x3ff, 0x4, 0x9, 0x0, 0x51, 0xf, 0x2, 0x1, 0x10000, 0x200, 0x7, 0x2, 0x4, 0x8, 0x101, 0x8, 0x0, 0x3, 0xe, 0x66d, 0x80000000, 0x3, 0x1, 0x8, 0x2, 0x7fff, 0xd, 0x4, 0x1ff, 0xffff, 0x7f, 0xfffffffd, 0x40, 0x7, 0x3, 0x400, 0x6, 0x8, 0x2, 0x1, 0x7, 0x9, 0x594, 0x0, 0x2900, 0x100, 0x4, 0x305c000, 0x7, 0xfffffff7, 0x7, 0x800, 0x9, 0xf24, 0x5, 0x7fffffff, 0x923, 0x101, 0x1155, 0x3, 0x1, 0x0, 0xffffffff, 0xcd2, 0xfffffffa, 0x800, 0x4, 0x81, 0x3, 0x0, 0x3, 0xf, 0x1, 0x1, 0xe, 0x3b2, 0x6, 0x4, 0x1ff, 0x6, 0x5, 0x1000, 0xe6, 0x7fff, 0x1, 0x8c, 0x1, 0x80, 0xfffffffb, 0x5, 0x7f0, 0xfffffff0, 0xffff, 0xfffffff7, 0xcfb6, 0x6, 0x4, 0x1194, 0xaf, 0xa, 0x2, 0xe0, 0x0, 0x7f, 0x6, 0x0, 0x2, 0x9a7, 0x7a2, 0x5, 0x83f, 0xa36e58b, 0x100, 0x9, 0x7, 0x8, 0x2, 0x1, 0xfffffffe, 0x1242, 0x579, 0x3, 0x5, 0x7, 0x0, 0x4, 0x8d, 0x3, 0x4, 0x5, 0x8, 0xc, 0x6, 0xffffffff, 0xaebe, 0x9, 0x90a, 0x7, 0x3, 0xe, 0x80000000, 0x9, 0x9, 0x5, 0xfffffff1, 0x3cd, 0xc, 0x4, 0x2, 0x9, 0x6, 0x4, 0x4, 0x7, 0x0, 0x2, 0x1, 0x5, 0x7f, 0xe6ef, 0x9, 0x6, 0x1, 0x7, 0x0, 0x7fffffff, 0x7, 0x0, 0x8, 0x9, 0x5, 0x8, 0x0, 0x6, 0x7, 0x1, 0x401, 0x8762, 0x9, 0x0, 0x4, 0x4, 0xff, 0x3, 0xc, 0x8, 0xf, 0x2, 0x6, 0x80000000, 0x3, 0x7f, 0xfffffffc, 0x2, 0x61, 0x8, 0x100, 0x5, 0xc56, 0xe, 0x0, 0x8, 0x8, 0x6, 0x9, 0x5b0, 0x6, 0xffff, 0x5f3, 0xc5f8, 0x1000, 0x2, 0x9, 0x7, 0x1, 0x1, 0x3, 0x0, 0x2, 0x200, 0x253a, 0xb, 0x9, 0x3, 0x0, 0xf, 0x1, 0x4, 0x2, 0x1000, 0x7, 0xb96, 0x3, 0xff, 0x8, 0x9, 0xb]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x44c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000001440)={&(0x7f0000001240), &(0x7f0000001280)=[{}, {}, {}, {}], &(0x7f0000000140), &(0x7f0000001400)=[0x0, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_MODE_GETENCODER(r5, 0xc01464a6, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/consoles\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000f, 0x2010, r4, 0x200000ffd000) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12011001000000402505a8a440000102030109022400010105200d09040000020701020b0905010210000806020905820240020e04033ffb00cdbf7a8cb03f3bf1a89ba827de736e8915fdd0f589c2a95d6c96e503103f50fd623d2b6de0c59c8b5bc29fb0da67c51e312c4c77e93d3ce2b491c430d50fbfa5efce472755a8b0c7fb1fc44f7c62015471818dea"], 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000000180)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x3, 0x4}}, 0x80, 0x0}, 0x11) syz_usb_connect(0x5, 0x27, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) r8 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000640), 0x1, 0x0) write$binfmt_register(r8, &(0x7f0000000680)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x7, 0x3a, 'ethtool\x00', 0x3a, '/dev/vbi#\x00', 0x3a, './file0'}, 0x39) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x4e21, 0x8, @mcast1, 0x7}, 0x54) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 0s ago: executing program 5 (id=3408): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) kernel console output (not intermixed with test programs): all slaves [ 816.955737][ T8846] bond6 (unregistering): Released all slaves [ 817.380065][T16315] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 817.480522][T12889] Bluetooth: hci5: command tx timeout [ 817.492867][ T8846] tipc: Left network mode [ 817.704089][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.765045][T16322] 8021q: adding VLAN 0 to HW filter on device bond4 [ 817.772495][T12926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.158661][T16335] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2962'. [ 818.339244][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.450742][T16340] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2962'. [ 818.514167][T16340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 818.613670][T16340] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 818.623639][T16344] input: syz0 as /devices/virtual/input/input85 [ 818.647249][T16345] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2963'. [ 818.827398][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.872771][T16347] netlink: 'syz.2.2963': attribute type 4 has an invalid length. [ 819.540376][T12889] Bluetooth: hci5: command tx timeout [ 819.674597][T16354] binder: 16350:16354 ioctl c018620c 200000000000 returned -22 [ 819.727215][ T8846] hsr_slave_0: left promiscuous mode [ 819.804175][ T8846] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 819.891345][T12926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.908111][ T8846] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 819.950241][ T8846] veth1_macvtap: left promiscuous mode [ 819.955899][ T8846] veth0_macvtap: left promiscuous mode [ 819.966783][ T8846] veth1_vlan: left promiscuous mode [ 819.980186][ T8846] veth0_vlan: left promiscuous mode [ 820.300263][ T29] audit: type=1326 audit(1775485190.878:4686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16360 comm="syz.4.2966" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f22eff9c819 code=0x0 [ 820.818024][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.971048][T12926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.081245][ T8846] team0 (unregistering): Port device team_slave_1 removed [ 821.160995][ T8846] team0 (unregistering): Port device team_slave_0 removed [ 821.506599][T16232] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 821.575527][T16232] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 821.644557][T16232] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 821.689277][T16232] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 821.933970][T16393] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2969'. [ 821.943824][T16393] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2969'. [ 822.047389][ T6533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.058605][T16393] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2969'. [ 822.282812][T16397] 8021q: adding VLAN 0 to HW filter on device bond5 [ 822.392653][T16408] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2971'. [ 822.400363][T16232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 822.408911][T16409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2971'. [ 822.563266][T16232] 8021q: adding VLAN 0 to HW filter on device team0 [ 822.614023][ T140] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.621294][ T140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 822.736974][ T140] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.744144][ T140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 822.811092][ T5918] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 823.004245][ T5918] usb 4-1: Using ep0 maxpacket: 16 [ 823.025222][ T5918] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 823.054381][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.066466][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 823.116746][T16232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 823.119878][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 823.206867][ T5918] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 823.244385][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.258796][ T29] audit: type=1326 audit(1775485193.838:4687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16426 comm="syz.5.2976" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f678199c819 code=0x0 [ 823.260631][ T6533] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 823.297292][T16232] veth0_vlan: entered promiscuous mode [ 823.331219][ T5918] usb 4-1: Product: syz [ 823.334989][T16232] veth1_vlan: entered promiscuous mode [ 823.354659][ T5918] usb 4-1: Manufacturer: syz [ 823.373783][ T5918] usb 4-1: SerialNumber: syz [ 823.385694][ T5918] usb 4-1: config 0 descriptor?? [ 823.449852][T16232] veth0_macvtap: entered promiscuous mode [ 823.701907][ T6533] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 823.865199][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.870966][ T6533] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 823.884795][ T6533] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 823.894025][ T6533] usb 3-1: Product: syz [ 823.898393][ T6533] usb 3-1: Manufacturer: syz [ 823.903989][ T6533] usb 3-1: SerialNumber: syz [ 823.955318][T16232] veth1_macvtap: entered promiscuous mode [ 824.020647][T16411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 824.026558][T16232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 824.047869][T16411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 824.073875][T16232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 824.104860][ T5918] pegasus_notetaker 4-1:0.0: packet size is too small (0) [ 824.120719][ T5918] pegasus_notetaker 4-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 824.131726][ T7886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.188075][ T140] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.223963][ T5918] usb 4-1: USB disconnect, device number 10 [ 824.253310][ T140] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.302782][ T140] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.324200][ T6533] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 824.342770][ T140] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.409282][T16435] netlink: 512 bytes leftover after parsing attributes in process `syz.5.2977'. [ 824.732315][ C1] usblp0: nonzero write bulk status received: -71 [ 824.741105][ T6533] usb 3-1: USB disconnect, device number 13 [ 824.776775][ T6533] usblp0: removed [ 824.789974][ T352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 824.832018][ T352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 824.929888][ T8848] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 824.946769][ T8848] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 825.342742][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.735514][T16447] 8021q: adding VLAN 0 to HW filter on device bond8 [ 826.080634][ T6533] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 826.090035][T16464] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2983'. [ 826.228216][T16465] netlink: 'syz.5.2983': attribute type 4 has an invalid length. [ 826.236536][ T6533] usb 3-1: Using ep0 maxpacket: 32 [ 826.244108][ T6533] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 826.253705][ T6533] usb 3-1: config 0 has no interface number 0 [ 826.264137][ T6533] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 826.277616][ T6533] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.301933][ T6533] usb 3-1: Product: syz [ 826.306233][ T6533] usb 3-1: Manufacturer: syz [ 826.312644][ T6533] usb 3-1: SerialNumber: syz [ 826.434847][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.575971][ T6533] usb 3-1: config 0 descriptor?? [ 826.896412][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.082746][T16476] netlink: 512 bytes leftover after parsing attributes in process `syz.4.2987'. [ 827.119773][ T6533] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 827.132008][ T6533] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 827.374955][ T6533] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 827.386509][ T6533] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32 [ 827.417686][T16482] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2989'. [ 827.426950][T16482] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2989'. [ 827.754485][ T6533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.818270][T16482] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2989'. [ 827.939298][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.210345][ T6533] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 828.399397][ T6533] usb 6-1: config 129 has an invalid interface number: 4 but max is 0 [ 828.529889][ T6533] usb 6-1: config 129 has no interface number 0 [ 828.574639][ T6533] usb 6-1: config 129 interface 4 has no altsetting 0 [ 828.635872][ T6533] usb 6-1: New USB device found, idVendor=0403, idProduct=f458, bcdDevice= 0.7c [ 828.669820][ T6533] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.699368][ T6533] usb 6-1: Product: syz [ 828.712008][ T6533] usb 6-1: Manufacturer: syz [ 828.728644][ T6533] usb 6-1: SerialNumber: syz [ 828.814909][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.104337][ T6533] ftdi_sio 6-1:129.4: FTDI USB Serial Device converter detected [ 829.134685][ T6533] usb 6-1: Detected SIO [ 829.154057][ T6533] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 829.195598][ T6533] usb 6-1: USB disconnect, device number 22 [ 829.229925][ T6533] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 829.245809][ T6533] ftdi_sio 6-1:129.4: device disconnected [ 829.420509][ T5897] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 829.842871][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 829.857450][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 829.868052][ T5897] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 829.870535][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.897238][ T5897] usb 4-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 829.929828][T12926] usb 3-1: USB disconnect, device number 14 [ 829.960755][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.988964][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.066622][ T5897] usb 4-1: config 0 descriptor?? [ 830.125205][T16525] netlink: 512 bytes leftover after parsing attributes in process `syz.5.2999'. [ 830.161455][T16520] 8021q: adding VLAN 0 to HW filter on device bond9 [ 830.914423][T12926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.034987][ T5897] nti 0003:0757:0A00.001D: unknown main item tag 0x0 [ 831.048075][T16531] ptrace attach of "./syz-executor exec"[13916] was attempted by ""[16531] [ 831.086738][ T5897] nti 0003:0757:0A00.001D: unknown main item tag 0x0 [ 831.096107][ T5897] nti 0003:0757:0A00.001D: unknown main item tag 0x0 [ 831.103285][ T5897] nti 0003:0757:0A00.001D: unknown main item tag 0x0 [ 831.114152][ T5897] nti 0003:0757:0A00.001D: unknown main item tag 0x0 [ 831.174948][ T5897] nti 0003:0757:0A00.001D: unknown main item tag 0x0 [ 831.184688][ T5897] nti 0003:0757:0A00.001D: unknown main item tag 0x0 [ 831.191507][ T5897] nti 0003:0757:0A00.001D: unknown main item tag 0x0 [ 831.198234][ T5897] nti 0003:0757:0A00.001D: unknown main item tag 0x0 [ 831.205125][ T5897] nti 0003:0757:0A00.001D: unknown main item tag 0x0 [ 831.237202][ T5897] nti 0003:0757:0A00.001D: hidraw0: USB HID v0.00 Device [HID 0757:0a00] on usb-dummy_hcd.3-1/input0 [ 831.246924][T16507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 831.323382][T16507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 831.531899][ T5911] usb 4-1: USB disconnect, device number 11 [ 831.659713][T16546] FAULT_INJECTION: forcing a failure. [ 831.659713][T16546] name failslab, interval 1, probability 0, space 0, times 0 [ 831.674104][T16546] CPU: 0 UID: 0 PID: 16546 Comm: syz.4.3005 Tainted: G L syzkaller #0 PREEMPT(full) [ 831.674126][T16546] Tainted: [L]=SOFTLOCKUP [ 831.674131][T16546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 831.674138][T16546] Call Trace: [ 831.674144][T16546] [ 831.674150][T16546] dump_stack_lvl+0xe8/0x150 [ 831.674172][T16546] should_fail_ex+0x412/0x560 [ 831.674194][T16546] should_failslab+0xa8/0x100 [ 831.674210][T16546] __kmalloc_noprof+0xe8/0x760 [ 831.674225][T16546] ? ethnl_default_start+0x143/0x5c0 [ 831.674239][T16546] ? __kmalloc_noprof+0x1b8/0x760 [ 831.674254][T16546] ethnl_default_start+0x143/0x5c0 [ 831.674271][T16546] genl_start+0x4c3/0x6c0 [ 831.674292][T16546] __netlink_dump_start+0x469/0x7e0 [ 831.674309][T16546] genl_family_rcv_msg_dumpit+0x213/0x310 [ 831.674327][T16546] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 831.674342][T16546] ? genl_get_cmd+0x691/0x930 [ 831.674359][T16546] ? __pfx_genl_start+0x10/0x10 [ 831.674373][T16546] ? __pfx_genl_dumpit+0x10/0x10 [ 831.674387][T16546] ? __pfx_genl_done+0x10/0x10 [ 831.674410][T16546] genl_rcv_msg+0x5e8/0x7a0 [ 831.674429][T16546] ? __pfx_genl_rcv_msg+0x10/0x10 [ 831.674443][T16546] ? __pfx_ethnl_default_start+0x10/0x10 [ 831.674456][T16546] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 831.674469][T16546] ? __pfx_ethnl_default_done+0x10/0x10 [ 831.674482][T16546] ? __lock_acquire+0x6b5/0x2cf0 [ 831.674504][T16546] netlink_rcv_skb+0x232/0x4b0 [ 831.674518][T16546] ? __pfx_genl_rcv_msg+0x10/0x10 [ 831.674534][T16546] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 831.674556][T16546] ? down_read+0x272/0x2e0 [ 831.674572][T16546] ? genl_rcv+0xd/0x40 [ 831.674588][T16546] genl_rcv+0x28/0x40 [ 831.674602][T16546] netlink_unicast+0x80f/0x9b0 [ 831.674624][T16546] ? __pfx_netlink_unicast+0x10/0x10 [ 831.674643][T16546] ? netlink_sendmsg+0x650/0xb40 [ 831.674654][T16546] ? skb_put+0x11b/0x210 [ 831.674670][T16546] netlink_sendmsg+0x813/0xb40 [ 831.674689][T16546] ? __pfx_netlink_sendmsg+0x10/0x10 [ 831.674703][T16546] ? aa_sock_msg_perm+0xf1/0x1b0 [ 831.674722][T16546] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 831.674738][T16546] ____sys_sendmsg+0x972/0x9f0 [ 831.674758][T16546] ? __pfx_____sys_sendmsg+0x10/0x10 [ 831.674778][T16546] ? import_iovec+0x73/0xa0 [ 831.674794][T16546] ___sys_sendmsg+0x2a5/0x360 [ 831.674812][T16546] ? __pfx____sys_sendmsg+0x10/0x10 [ 831.674854][T16546] ? __fget_files+0x2a/0x420 [ 831.674866][T16546] ? __fget_files+0x3a0/0x420 [ 831.674882][T16546] __x64_sys_sendmsg+0x1bd/0x2a0 [ 831.674899][T16546] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 831.674920][T16546] ? __pfx_ksys_write+0x10/0x10 [ 831.674940][T16546] do_syscall_64+0x14d/0xf80 [ 831.674955][T16546] ? trace_irq_disable+0x3b/0x150 [ 831.674966][T16546] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.674978][T16546] ? clear_bhb_loop+0x40/0x90 [ 831.674992][T16546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.675004][T16546] RIP: 0033:0x7f22eff9c819 [ 831.675017][T16546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 831.675027][T16546] RSP: 002b:00007f22f0e0b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 831.675041][T16546] RAX: ffffffffffffffda RBX: 00007f22f0215fa0 RCX: 00007f22eff9c819 [ 831.675050][T16546] RDX: 0000000002000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 831.675058][T16546] RBP: 00007f22f0e0b090 R08: 0000000000000000 R09: 0000000000000000 [ 831.675065][T16546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 831.675072][T16546] R13: 00007f22f0216038 R14: 00007f22f0215fa0 R15: 00007f22f033fa48 [ 831.675090][T16546] [ 831.936263][T12926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.398114][T16551] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3006'. [ 832.670396][ T5918] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 832.759595][T16559] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 832.769460][T16559] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3010'. [ 832.819892][T16561] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3011'. [ 832.860481][ T5918] usb 2-1: Using ep0 maxpacket: 8 [ 832.888475][ T5918] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 832.899382][ T5918] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 832.927755][ T5918] usb 2-1: config 0 has no interface number 0 [ 832.950883][ T5918] usb 2-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 832.973656][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.981874][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.997696][ T5918] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 833.020389][ T5918] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 833.040506][ T5918] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 833.103670][T16562] vivid-000: disconnect [ 833.104021][T16574] loop3: detected capacity change from 0 to 7 [ 833.107996][ T5918] usb 2-1: config 0 interface 52 has no altsetting 0 [ 833.114452][ T5911] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 833.134547][T16574] Dev loop3: unable to read RDB block 7 [ 833.141338][ T5918] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 833.141348][T16574] loop3: unable to read partition table [ 833.141370][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.165044][T16574] loop3: partition table beyond EOD, truncated [ 833.258762][T16574] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 833.259350][T16553] vivid-000: reconnect [ 833.282461][ T5911] usb 3-1: unable to get BOS descriptor or descriptor too short [ 833.293763][ T5911] usb 3-1: config 129 has an invalid interface number: 135 but max is 0 [ 833.299568][ T5918] usb 2-1: config 0 descriptor?? [ 833.312553][ T5911] usb 3-1: config 129 has an invalid interface number: 5 but max is 0 [ 833.342993][ T5911] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 833.369445][ T5911] usb 3-1: config 129 has no interface number 0 [ 833.385043][ T5911] usb 3-1: config 129 has no interface number 1 [ 833.393542][ T5911] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 833.408757][ T5911] usb 3-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 833.420825][ T5911] usb 3-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 833.434549][ T5911] usb 3-1: config 129 interface 135 has no altsetting 0 [ 833.454963][ T5911] usb 3-1: config 129 interface 5 has no altsetting 0 [ 833.476477][ T5911] usb 3-1: string descriptor 0 read error: -22 [ 833.486209][ T5911] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 833.495781][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.526239][ T5918] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input87 [ 833.553448][ T5911] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 833.654513][ T5911] usb 3-1: MIDIStreaming interface descriptor not found [ 833.931290][T16581] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3006'. [ 834.028080][ T6533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.063779][T16551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 834.084152][T16551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 834.644897][T16594] FAULT_INJECTION: forcing a failure. [ 834.644897][T16594] name failslab, interval 1, probability 0, space 0, times 0 [ 834.667057][ T5911] usb 3-1: USB disconnect, device number 15 [ 834.759345][T16594] CPU: 0 UID: 0 PID: 16594 Comm: syz.5.3018 Tainted: G L syzkaller #0 PREEMPT(full) [ 834.759378][T16594] Tainted: [L]=SOFTLOCKUP [ 834.759386][T16594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 834.759397][T16594] Call Trace: [ 834.759405][T16594] [ 834.759414][T16594] dump_stack_lvl+0xe8/0x150 [ 834.759446][T16594] should_fail_ex+0x412/0x560 [ 834.759480][T16594] should_failslab+0xa8/0x100 [ 834.759507][T16594] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 834.759529][T16594] ? __alloc_skb+0x1d0/0x7d0 [ 834.759548][T16594] ? __local_bh_enable_ip+0xd0/0x130 [ 834.759578][T16594] __alloc_skb+0x1d0/0x7d0 [ 834.759604][T16594] netlink_dump+0x1ef/0xe80 [ 834.759628][T16594] ? __pfx_ethnl_parse_header_dev_get+0x10/0x10 [ 834.759649][T16594] ? trace_kmalloc+0x2a/0x110 [ 834.759673][T16594] ? __pfx_netlink_dump+0x10/0x10 [ 834.759692][T16594] ? ethnl_default_start+0x143/0x5c0 [ 834.759712][T16594] ? __kmalloc_noprof+0x1b8/0x760 [ 834.759747][T16594] ? genl_start+0x581/0x6c0 [ 834.759780][T16594] __netlink_dump_start+0x5cb/0x7e0 [ 834.759818][T16594] genl_family_rcv_msg_dumpit+0x213/0x310 [ 834.759848][T16594] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 834.759873][T16594] ? genl_get_cmd+0x691/0x930 [ 834.759902][T16594] ? __pfx_genl_start+0x10/0x10 [ 834.759925][T16594] ? __pfx_genl_dumpit+0x10/0x10 [ 834.759947][T16594] ? __pfx_genl_done+0x10/0x10 [ 834.759986][T16594] genl_rcv_msg+0x5e8/0x7a0 [ 834.760023][T16594] ? __pfx_genl_rcv_msg+0x10/0x10 [ 834.760046][T16594] ? __pfx_ethnl_default_start+0x10/0x10 [ 834.760067][T16594] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 834.760088][T16594] ? __pfx_ethnl_default_done+0x10/0x10 [ 834.760110][T16594] ? __lock_acquire+0x6b5/0x2cf0 [ 834.760146][T16594] netlink_rcv_skb+0x232/0x4b0 [ 834.760167][T16594] ? __pfx_genl_rcv_msg+0x10/0x10 [ 834.760199][T16594] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 834.760237][T16594] ? down_read+0x272/0x2e0 [ 834.760262][T16594] ? genl_rcv+0xd/0x40 [ 834.760289][T16594] genl_rcv+0x28/0x40 [ 834.760313][T16594] netlink_unicast+0x80f/0x9b0 [ 834.760353][T16594] ? __pfx_netlink_unicast+0x10/0x10 [ 834.760385][T16594] ? netlink_sendmsg+0x650/0xb40 [ 834.760405][T16594] ? skb_put+0x11b/0x210 [ 834.760431][T16594] netlink_sendmsg+0x813/0xb40 [ 834.760462][T16594] ? __pfx_netlink_sendmsg+0x10/0x10 [ 834.760487][T16594] ? aa_sock_msg_perm+0xf1/0x1b0 [ 834.760519][T16594] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 834.760545][T16594] ____sys_sendmsg+0x972/0x9f0 [ 834.760580][T16594] ? __pfx_____sys_sendmsg+0x10/0x10 [ 834.760616][T16594] ? import_iovec+0x73/0xa0 [ 834.760643][T16594] ___sys_sendmsg+0x2a5/0x360 [ 834.760675][T16594] ? __pfx____sys_sendmsg+0x10/0x10 [ 834.760741][T16594] ? __fget_files+0x2a/0x420 [ 834.760759][T16594] ? __fget_files+0x3a0/0x420 [ 834.760788][T16594] __x64_sys_sendmsg+0x1bd/0x2a0 [ 834.760825][T16594] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 834.760862][T16594] ? __pfx_ksys_write+0x10/0x10 [ 834.760900][T16594] do_syscall_64+0x14d/0xf80 [ 834.760925][T16594] ? trace_irq_disable+0x3b/0x150 [ 834.760942][T16594] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.760963][T16594] ? clear_bhb_loop+0x40/0x90 [ 834.760988][T16594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.761007][T16594] RIP: 0033:0x7f678199c819 [ 834.761027][T16594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 834.761043][T16594] RSP: 002b:00007f677fbf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 834.761066][T16594] RAX: ffffffffffffffda RBX: 00007f6781c15fa0 RCX: 00007f678199c819 [ 834.761080][T16594] RDX: 0000000002000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 834.761093][T16594] RBP: 00007f677fbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 834.761105][T16594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 834.761117][T16594] R13: 00007f6781c16038 R14: 00007f6781c15fa0 R15: 00007f6781d3fa48 [ 834.761150][T16594] [ 835.233303][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.281245][ T5828] hid-generic 0008:0091:0009.001E: reserved main item tag 0xd [ 835.308226][ T5828] hid-generic 0008:0091:0009.001E: item fetching failed at offset 28/32 [ 835.355398][ T5828] hid-generic 0008:0091:0009.001E: probe with driver hid-generic failed with error -22 [ 835.494369][ T5828] usb 2-1: USB disconnect, device number 105 [ 835.924906][T16622] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3025'. [ 835.960422][ T5911] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 836.013611][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.125645][ T5911] usb 5-1: Using ep0 maxpacket: 8 [ 836.147857][ T5911] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 836.171405][ T5911] usb 5-1: config 179 has no interface number 0 [ 836.177746][ T5911] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 836.200262][ T5911] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 836.222878][ T5911] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 836.280302][ T5911] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 836.280439][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.327495][ T5911] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 836.362120][ T5911] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 836.378228][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.391509][T16614] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 836.459081][ T29] audit: type=1326 audit(1775485207.038:4688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16627 comm="syz.5.3026" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f678199c819 code=0x0 [ 836.565158][T16630] loop3: detected capacity change from 0 to 7 [ 836.574493][T13912] Dev loop3: unable to read RDB block 7 [ 836.580293][T13912] loop3: unable to read partition table [ 836.586317][T13912] loop3: partition table beyond EOD, truncated [ 836.597786][T16630] Dev loop3: unable to read RDB block 7 [ 836.607011][T16630] loop3: unable to read partition table [ 836.618530][T16630] loop3: partition table beyond EOD, truncated [ 836.627350][T16630] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 836.865205][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 836.865209][ T5828] usb 5-1: USB disconnect, device number 16 [ 836.865261][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 837.542724][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.550991][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.562216][T16644] ptrace attach of "./syz-executor exec"[15254] was attempted by "./syz-executor exec"[16644] [ 837.665396][T16647] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 838.301885][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 838.324853][T16675] loop3: detected capacity change from 0 to 7 [ 838.341243][T13912] Dev loop3: unable to read RDB block 7 [ 838.348673][T13912] loop3: unable to read partition table [ 838.356122][T13912] loop3: partition table beyond EOD, truncated [ 838.363954][T16675] Dev loop3: unable to read RDB block 7 [ 838.369953][T16675] loop3: unable to read partition table [ 838.377969][T16675] loop3: partition table beyond EOD, truncated [ 838.386945][T16675] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 838.494701][ T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 838.505610][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 838.530923][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 838.547679][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 838.561489][ T7906] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 838.577277][T12926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.590874][ T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.03 [ 838.606363][ T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 838.615070][ T9] usb 5-1: Product: syz [ 838.619595][ T9] usb 5-1: Manufacturer: syz [ 838.763358][T16681] bridge0: port 4(hsr0) entered blocking state [ 838.790511][T16681] bridge0: port 4(hsr0) entered disabled state [ 838.800733][T16681] hsr0: entered allmulticast mode [ 838.806721][T16681] hsr_slave_0: entered allmulticast mode [ 838.818482][ T7906] usb 3-1: device descriptor read/64, error -71 [ 838.828399][T16680] loop5: detected capacity change from 0 to 7 [ 839.110532][T16681] hsr_slave_1: entered allmulticast mode [ 839.117953][T16681] hsr0: entered promiscuous mode [ 839.123171][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.138472][T16681] bridge0: port 4(hsr0) entered blocking state [ 839.144928][T16681] bridge0: port 4(hsr0) entered forwarding state [ 839.154418][ T9] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 839.430893][ T7906] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 839.468712][ T5828] usb 5-1: USB disconnect, device number 17 [ 839.580634][ T7906] usb 3-1: device descriptor read/64, error -71 [ 839.628907][ T6533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.691138][ T7906] usb usb3-port1: attempt power cycle [ 839.694483][T16680] Dev loop5: unable to read RDB block 7 [ 839.694517][T16680] loop5: unable to read partition table [ 839.694712][T16680] loop5: partition table beyond EOD, truncated [ 839.694754][T16680] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 839.802522][T16668] netlink: 136 bytes leftover after parsing attributes in process `syz.4.3037'. [ 839.802593][T16693] xt_hashlimit: size too large, truncated to 1048576 [ 839.925797][T16668] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 839.991514][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 840.030284][ T7906] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 840.063247][ T7906] usb 3-1: device descriptor read/8, error -71 [ 840.102228][T16697] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 840.140801][ T9] usb 5-1: device descriptor read/64, error -71 [ 840.320562][ T7906] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 840.400334][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 840.408227][ T7906] usb 3-1: device descriptor read/8, error -71 [ 840.560381][ T9] usb 5-1: device descriptor read/64, error -71 [ 840.568007][ T7906] usb usb3-port1: unable to enumerate USB device [ 840.662957][T12926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.680789][ T9] usb usb5-port1: attempt power cycle [ 841.030579][ T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 841.138746][ T9] usb 5-1: device descriptor read/8, error -71 [ 841.449191][ T352] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 841.514663][T16726] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3052'. [ 841.658073][T16728] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3053'. [ 841.696268][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.021731][T16740] xt_hashlimit: size too large, truncated to 1048576 [ 842.057397][T16742] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 842.211767][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.728743][T16757] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3060'. [ 842.743446][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.311642][T16764] vivid-006: disconnect [ 843.512834][T16769] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3062'. [ 843.523405][T16769] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3062'. [ 843.703578][T16769] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3062'. [ 843.776940][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.126433][T16763] vivid-006: reconnect [ 844.215799][T16780] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3064'. [ 844.519361][T16790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 844.550590][ T5828] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 844.571052][T16792] loop3: detected capacity change from 0 to 7 [ 844.579307][T16792] Dev loop3: unable to read RDB block 7 [ 844.587346][T16792] loop3: unable to read partition table [ 844.597816][T16792] loop3: partition table beyond EOD, truncated [ 844.604445][T16790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 844.616873][T16792] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 844.627599][T16790] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3067'. [ 844.670307][ T5911] usb 2-1: new full-speed USB device number 106 using dummy_hcd [ 844.769959][ T5828] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 844.816542][ T5828] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 844.833665][T12926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.839306][T16794] xt_hashlimit: size too large, truncated to 1048576 [ 844.852080][ T5911] usb 2-1: config 129 has an invalid interface number: 4 but max is 0 [ 844.860746][ T5911] usb 2-1: config 129 has no interface number 0 [ 844.868393][ T5911] usb 2-1: config 129 interface 4 has no altsetting 0 [ 844.881124][ T5911] usb 2-1: New USB device found, idVendor=0403, idProduct=f458, bcdDevice= 0.7c [ 844.894403][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.898842][ T5828] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 844.976405][ T5911] usb 2-1: Product: syz [ 844.990331][ T5911] usb 2-1: Manufacturer: syz [ 845.004897][ T5911] usb 2-1: SerialNumber: syz [ 845.052135][ T5828] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 845.112704][ T5828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 845.212090][ T5828] usb 4-1: SerialNumber: syz [ 845.272326][ T5828] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 845.297519][ T5828] usb-storage 4-1:1.0: USB Mass Storage device detected [ 845.298812][ T5911] ftdi_sio 2-1:129.4: FTDI USB Serial Device converter detected [ 845.315281][ T7906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 845.366710][ T5911] usb 2-1: Detected SIO [ 845.378497][ T5828] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 845.380055][ T5911] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 845.485047][ T5828] usb 4-1: USB disconnect, device number 12 [ 845.520583][ T5911] usb 2-1: USB disconnect, device number 106 [ 845.582599][ T5911] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 845.617567][ T5911] ftdi_sio 2-1:129.4: device disconnected [ 845.857614][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.065522][T16807] IPVS: set_ctl: invalid protocol: 41 224.0.0.1:20003 [ 846.303128][ T29] audit: type=1326 audit(1775485216.838:4689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16814 comm="syz.3.3077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd90cf9c819 code=0x7ffc0000 [ 846.383325][ T29] audit: type=1326 audit(1775485216.838:4690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16814 comm="syz.3.3077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd90cf9c819 code=0x7ffc0000 [ 846.461068][ T29] audit: type=1326 audit(1775485216.838:4691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16814 comm="syz.3.3077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd90cf9c819 code=0x7ffc0000 [ 846.534062][ T29] audit: type=1326 audit(1775485216.838:4692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16814 comm="syz.3.3077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd90cf9c819 code=0x7ffc0000 [ 846.595991][ T29] audit: type=1326 audit(1775485216.848:4693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16814 comm="syz.3.3077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd90cf9c819 code=0x7ffc0000 [ 846.646101][ T29] audit: type=1326 audit(1775485216.848:4694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16814 comm="syz.3.3077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd90cf9c819 code=0x7ffc0000 [ 846.698310][ T29] audit: type=1326 audit(1775485216.848:4695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16814 comm="syz.3.3077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd90cf9c819 code=0x7ffc0000 [ 846.753209][ T29] audit: type=1326 audit(1775485216.858:4696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16814 comm="syz.3.3077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd90cf9c819 code=0x7ffc0000 [ 846.794085][ T29] audit: type=1326 audit(1775485216.858:4697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16814 comm="syz.3.3077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd90cf9c819 code=0x7ffc0000 [ 846.817756][ T29] audit: type=1326 audit(1775485216.858:4698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16814 comm="syz.3.3077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd90cf9c819 code=0x7ffc0000 [ 846.897880][ T6533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.924198][T16830] xt_hashlimit: size too large, truncated to 1048576 [ 846.980799][T16832] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3080'. [ 847.127488][T16832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.176526][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.213880][T16838] netlink: 'syz.4.3080': attribute type 4 has an invalid length. [ 847.410084][T16844] bridge_slave_0: left allmulticast mode [ 847.440106][T16847] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3082'. [ 847.460128][T16844] bridge_slave_0: left promiscuous mode [ 847.470693][T16844] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.576350][T16851] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 847.619731][T16852] netlink: 'syz.3.3082': attribute type 4 has an invalid length. [ 847.643539][T16844] bridge_slave_1: left allmulticast mode [ 847.725888][T16844] bridge_slave_1: left promiscuous mode [ 847.734111][T16844] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.859703][T16844] bond0: (slave bond_slave_0): Releasing backup interface [ 847.956273][T16844] bond0: (slave bond_slave_1): Releasing backup interface [ 847.992722][T16844] team0: Port device team_slave_0 removed [ 848.022504][T16844] team0: Port device team_slave_1 removed [ 848.373092][T16844] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 848.420298][T16844] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 848.444037][T16844] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 848.460363][T16844] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 848.492563][T16844] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 848.877216][T16861] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3087'. [ 849.011267][T16868] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3087'. [ 849.015655][T16861] bond4: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 849.044638][ T6533] usb 2-1: new full-speed USB device number 107 using dummy_hcd [ 849.165649][T16861] bond4 (unregistering): Released all slaves [ 849.245933][T16859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 849.261032][T16859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 849.344564][ T6533] usb 2-1: unable to get BOS descriptor or descriptor too short [ 849.369025][ T6533] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 849.407475][ T6533] usb 2-1: can't read configurations, error -71 [ 849.960647][T16883] loop3: detected capacity change from 0 to 7 [ 849.972254][T16883] Dev loop3: unable to read RDB block 7 [ 849.977889][T16883] loop3: unable to read partition table [ 849.998483][T16883] loop3: partition table beyond EOD, truncated [ 850.080710][T16883] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 850.148164][T16887] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3091'. [ 850.360125][T16890] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3093'. [ 850.417941][T16894] netlink: zone id is out of range [ 850.438483][T16894] netlink: zone id is out of range [ 850.456373][T16894] netlink: zone id is out of range [ 850.471891][T16894] netlink: get zone limit has 8 unknown bytes [ 850.512313][T16897] xt_hashlimit: size too large, truncated to 1048576 [ 851.917978][T16928] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3103'. [ 852.534861][T16944] loop3: detected capacity change from 0 to 7 [ 852.803454][T16945] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3105'. [ 852.831368][T16944] Dev loop3: unable to read RDB block 7 [ 852.851876][T16944] loop3: unable to read partition table [ 852.929359][T16944] loop3: partition table beyond EOD, truncated [ 852.964739][T16944] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 853.603891][T16954] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3108'. [ 853.667012][T16956] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3110'. [ 854.080549][ T9] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 854.214282][ T29] kauditd_printk_skb: 111 callbacks suppressed [ 854.214300][ T29] audit: type=1326 audit(1775485224.798:4811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16967 comm="syz.4.3114" exe="/root/syz-executor" sig=31 arch=c000003e syscall=273 compat=0 ip=0x7f22eff58c6c code=0x0 [ 854.252115][ T29] audit: type=1326 audit(1775485224.798:4812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16967 comm="syz.4.3114" exe="/root/syz-executor" sig=31 arch=c000003e syscall=14 compat=0 ip=0x7f22eff5957b code=0x0 [ 854.275866][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 854.284830][ T29] audit: type=1326 audit(1775485224.778:4810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16967 comm="syz.4.3114" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f22eff9c819 code=0x0 [ 854.313020][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 854.356562][ T9] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 854.379196][ T9] usb 2-1: Product: syz [ 854.402830][ T9] usb 2-1: SerialNumber: syz [ 854.423502][ T9] usb 2-1: config 0 descriptor?? [ 854.443439][ T9] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 854.474607][ T9] dvb_usb_af9015 2-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 854.506566][ T9] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 854.537139][ T9] dvb_usb_af9035 2-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 854.645803][T16958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 854.668595][T16958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 854.755711][T16973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 854.794596][T16973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 854.920534][T16974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 854.931060][T16974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 855.301300][T16983] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3117'. [ 855.471105][T16986] netlink: 'syz.5.3117': attribute type 4 has an invalid length. [ 855.790428][ T7886] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 855.950428][ T7886] usb 4-1: Using ep0 maxpacket: 32 [ 855.957736][ T7886] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 855.994103][ T7886] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 856.143954][ T7886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.239215][ T7886] usb 4-1: Product: syz [ 856.414544][ T7886] usb 4-1: Manufacturer: syz [ 856.441847][ T7886] usb 4-1: SerialNumber: syz [ 856.465485][ T7886] usb 4-1: config 0 descriptor?? [ 856.784394][ T7906] usb 2-1: USB disconnect, device number 109 [ 858.432026][ T7906] usb 4-1: USB disconnect, device number 13 [ 870.173605][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.179926][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 873.372011][T14447] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 905.371007][ T1150] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 916.770819][T17006] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3123'. [ 916.780757][T17008] xt_hashlimit: size too large, truncated to 1048576 [ 916.991226][ T7906] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 917.050630][ T5911] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 917.410364][ T9] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 917.430270][ T5911] usb 5-1: device descriptor read/64, error -71 [ 917.478005][ T7906] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 917.487313][ T7906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.496378][ T7906] usb 2-1: Product: syz [ 917.503245][ T7906] usb 2-1: Manufacturer: syz [ 917.508119][ T7906] usb 2-1: SerialNumber: syz [ 917.533355][ T7906] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 917.560659][ T5897] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 917.587838][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 917.607501][ T9] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 917.626864][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.684935][ T5911] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 917.768507][ T9] usb 6-1: config 0 descriptor?? [ 917.826177][T17026] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3127'. [ 917.870404][ T5911] usb 5-1: device descriptor read/64, error -71 [ 917.994366][ T5911] usb usb5-port1: attempt power cycle [ 918.125276][T17031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 918.180122][T17031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 918.272240][ T6533] usb 2-1: USB disconnect, device number 110 [ 918.341435][ T5911] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 918.405007][ T5911] usb 5-1: device descriptor read/8, error -71 [ 918.650688][ T5897] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 918.664744][ T5911] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 918.673057][ T5897] ath9k_htc: Failed to initialize the device [ 918.701527][ T6533] usb 2-1: ath9k_htc: USB layer deinitialized [ 918.712594][ T5911] usb 5-1: device descriptor read/8, error -71 [ 918.755762][ T9] ath6kl: Failed to read usb control message: -71 [ 918.774258][ T9] ath6kl: Unable to read the bmi data from the device: -71 [ 918.794808][ T9] ath6kl: unable to read target info byte count: -71 [ 918.806835][ T9] ath6kl: Failed to init ath6kl core: -71 [ 918.814454][ T9] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 918.828420][ T9] usb 6-1: USB disconnect, device number 23 [ 918.857963][ T5911] usb usb5-port1: unable to enumerate USB device [ 919.010303][ T7886] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 919.171989][ T7886] usb 3-1: config 5 has an invalid interface number: 123 but max is 0 [ 919.180789][ T7886] usb 3-1: config 5 has no interface number 0 [ 919.187014][ T7886] usb 3-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 919.200750][ T7886] usb 3-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 919.211328][ T7886] usb 3-1: config 5 interface 123 has no altsetting 0 [ 919.223550][ T7886] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 919.240452][ T7886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.248771][ T7886] usb 3-1: Product: syz [ 919.256048][ T7886] usb 3-1: Manufacturer: syz [ 919.260972][ T7886] usb 3-1: SerialNumber: syz [ 919.496108][ T7886] ni6501 3-1:5.123: driver 'ni6501' failed to auto-configure device. [ 919.533873][ T7886] usb 3-1: USB disconnect, device number 20 [ 919.574158][T17066] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3137'. [ 919.810657][T17075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 919.990891][T17079] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3140'. [ 920.154397][T17080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 920.231757][ T29] audit: type=1326 audit(1775485290.808:4813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17055 comm="syz.5.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f678199c819 code=0x7fc00000 [ 920.418612][T17075] netlink: 120 bytes leftover after parsing attributes in process `syz.3.3138'. [ 920.618250][T17093] input: syz0 as /devices/virtual/input/input89 [ 920.625384][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 920.636852][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 920.649155][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 920.657866][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 920.666215][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 920.704915][T17089] binder: BINDER_SET_CONTEXT_MGR already set [ 920.711374][T17089] binder: 17085:17089 ioctl 4018620d 200000004a80 returned -16 [ 921.443576][ T5851] syz_tun (unregistering): left allmulticast mode [ 921.598550][T17094] chnl_net:caif_netlink_parms(): no params data found [ 921.825397][T17101] input: syz1 as /devices/virtual/input/input90 [ 921.952197][ T8843] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.284389][ T8843] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.318205][T17104] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3145'. [ 922.424112][ T8843] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.730318][ T5840] Bluetooth: hci0: command tx timeout [ 922.841516][ T8848] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 922.885671][T12926] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 922.895435][ T8848] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 923.195018][T17122] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3150'. [ 923.240483][ T8843] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.310619][ T7886] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 923.370775][ T7886] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 923.520609][T17094] bridge0: port 1(bridge_slave_0) entered blocking state [ 923.530417][T17094] bridge0: port 1(bridge_slave_0) entered disabled state [ 923.552236][T17094] bridge_slave_0: entered allmulticast mode [ 923.568575][T17094] bridge_slave_0: entered promiscuous mode [ 923.646009][T17094] bridge0: port 2(bridge_slave_1) entered blocking state [ 923.665159][T17094] bridge0: port 2(bridge_slave_1) entered disabled state [ 923.678014][T17094] bridge_slave_1: entered allmulticast mode [ 923.721775][T17094] bridge_slave_1: entered promiscuous mode [ 923.866244][T12926] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 923.943044][T17094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 924.007701][T17094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 924.073865][ T8843] vlan2: left allmulticast mode [ 924.082778][ T8843] geneve0: left allmulticast mode [ 924.096116][ T8843] vlan2: left promiscuous mode [ 924.101169][T12926] usb 2-1: Using ep0 maxpacket: 16 [ 924.143959][T12926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 924.157601][T12926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 924.173697][ T8843] geneve0: left promiscuous mode [ 924.179121][ T8843] bridge0: port 3(vlan2) entered disabled state [ 924.187671][T12926] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 924.206873][T12926] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 924.235484][ T8843] bridge_slave_1: left allmulticast mode [ 924.262597][ T8843] bridge_slave_1: left promiscuous mode [ 924.269827][ T8843] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.277102][T12926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.290540][ T8843] bridge_slave_0: left allmulticast mode [ 924.296243][ T8843] bridge_slave_0: left promiscuous mode [ 924.302172][T12926] usb 2-1: config 0 descriptor?? [ 924.309380][ T8843] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.810766][ T5840] Bluetooth: hci0: command tx timeout [ 924.859070][T17148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 924.870125][T17148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 925.018727][ T8843] bond0 (unregistering): (slave c5): Releasing backup interface [ 925.044409][ T8843] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 925.096157][ T8843] bond0 (unregistering): Released all slaves [ 925.123192][ T8843] bond1 (unregistering): Released all slaves [ 925.132353][T17149] netlink: 'syz.1.3153': attribute type 10 has an invalid length. [ 925.169649][ T8843] bond2 (unregistering): Released all slaves [ 925.219955][ T8843] bond3 (unregistering): Released all slaves [ 925.249305][ T8843] bond4 (unregistering): Released all slaves [ 925.276964][ T8843] bond5 (unregistering): Released all slaves [ 925.313585][ T8843] bond6 (unregistering): Released all slaves [ 925.497468][ T8843] bond7 (unregistering): Released all slaves [ 925.555797][ T8843] bond8 (unregistering): Released all slaves [ 925.594621][ T8843] bond9 (unregistering): Released all slaves [ 925.630123][T17094] team0: Port device team_slave_0 added [ 925.669545][T17144] team_slave_0: entered promiscuous mode [ 925.675576][T17144] team_slave_1: entered promiscuous mode [ 925.720420][T17144] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 925.793609][T17149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 925.818615][T17149] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 925.843185][T17094] team0: Port device team_slave_1 added [ 925.902279][ T8843] tipc: Left network mode [ 925.990111][T17094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 925.997630][T17094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 926.234758][T17094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 926.413048][T17094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 926.437581][T17094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 926.468995][ T5828] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 926.635048][T17094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 926.676781][ T5828] usb 3-1: Using ep0 maxpacket: 16 [ 926.722281][ T5828] usb 3-1: config 0 has an invalid interface number: 4 but max is 0 [ 926.788396][ T5828] usb 3-1: config 0 has no interface number 0 [ 926.806941][ T5828] usb 3-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 926.878797][ T5828] usb 3-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 926.890607][ T5840] Bluetooth: hci0: command tx timeout [ 927.005796][ T5828] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 927.041184][ T5897] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 927.047328][ T5828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.176748][ T5828] usb 3-1: config 0 descriptor?? [ 927.210305][ T5897] usb 6-1: Using ep0 maxpacket: 16 [ 927.210369][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 927.249522][ T5897] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 927.287724][T17094] hsr_slave_0: entered promiscuous mode [ 927.310450][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 927.311999][T17094] hsr_slave_1: entered promiscuous mode [ 927.340628][T17094] debugfs: 'hsr0' already exists in 'hsr' [ 927.346547][T17094] Cannot create hsr debugfs directory [ 927.366888][ T5897] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 927.400843][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.410497][ T5897] usb 6-1: Product: syz [ 927.414881][ T5897] usb 6-1: Manufacturer: syz [ 927.419503][ T5897] usb 6-1: SerialNumber: syz [ 927.462856][ T5897] usb 6-1: config 0 descriptor?? [ 927.498878][ T5897] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 927.533345][ T5897] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 927.576092][ T8843] hsr_slave_0: left promiscuous mode [ 927.603033][ T8843] hsr_slave_1: left promiscuous mode [ 927.634651][ T8843] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 927.664803][ T8843] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 927.751838][ T8843] veth1_macvtap: left promiscuous mode [ 927.778385][ T8843] veth0_macvtap: left promiscuous mode [ 927.804835][ T8843] veth1_vlan: left promiscuous mode [ 927.853583][ T8843] veth0_vlan: left promiscuous mode [ 927.903287][ T5828] usbhid 3-1:0.4: can't add hid device: -71 [ 927.909465][ T5828] usbhid 3-1:0.4: probe with driver usbhid failed with error -71 [ 927.959124][T12926] usbhid 2-1:0.0: can't add hid device: -71 [ 928.001108][T12926] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 928.011796][ T5828] usb 3-1: USB disconnect, device number 21 [ 928.044329][T12926] usb 2-1: USB disconnect, device number 111 [ 928.118532][ T5897] em28xx 6-1:0.0: chip ID is em2874 [ 928.287121][ T8843] team0 (unregistering): Port device batadv1 removed [ 928.291104][T17179] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3161'. [ 928.383650][T17163] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 928.510316][T12926] usb 2-1: new full-speed USB device number 112 using dummy_hcd [ 928.565928][ T5828] usb 6-1: USB disconnect, device number 24 [ 928.582322][ T5828] em28xx 6-1:0.0: Disconnecting em28xx [ 928.613860][ T5828] em28xx 6-1:0.0: Freeing device [ 928.688309][T12926] usb 2-1: config 129 has an invalid interface number: 4 but max is 0 [ 928.710575][T12926] usb 2-1: config 129 has no interface number 0 [ 928.718132][T12926] usb 2-1: config 129 interface 4 has no altsetting 0 [ 928.728943][T12926] usb 2-1: New USB device found, idVendor=0403, idProduct=f458, bcdDevice= 0.7c [ 928.738398][T12926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.746866][T12926] usb 2-1: Product: syz [ 928.779429][T12926] usb 2-1: Manufacturer: syz [ 928.784238][T12926] usb 2-1: SerialNumber: syz [ 928.858213][ T8843] team0 (unregistering): Port device team_slave_1 removed [ 928.911037][ T8843] team0 (unregistering): Port device team_slave_0 removed [ 928.970298][ T5840] Bluetooth: hci0: command tx timeout [ 929.037933][T12926] ftdi_sio 2-1:129.4: FTDI USB Serial Device converter detected [ 929.048307][T12926] usb 2-1: Detected SIO [ 929.112465][T12926] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 929.167771][T12926] usb 2-1: USB disconnect, device number 112 [ 929.311009][T12926] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 929.353094][T12926] ftdi_sio 2-1:129.4: device disconnected [ 930.115834][ T8843] IPVS: stop unused estimator thread 0... [ 931.099010][T17220] xt_hashlimit: size too large, truncated to 1048576 [ 931.147246][T17094] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 931.177715][T17094] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 931.211382][T17094] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 931.256328][T17094] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 931.289446][T17218] binder_alloc: 17214: binder_alloc_buf, no vma [ 931.591766][T17094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 931.618844][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.625505][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.645032][T17094] 8021q: adding VLAN 0 to HW filter on device team0 [ 931.675160][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 931.682349][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 931.709237][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 931.716530][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 932.035791][T17236] xt_hashlimit: size too large, truncated to 1048576 [ 932.263384][T17094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 932.436412][T17094] veth0_vlan: entered promiscuous mode [ 932.465961][T17094] veth1_vlan: entered promiscuous mode [ 932.646552][T17094] veth0_macvtap: entered promiscuous mode [ 932.668923][T17094] veth1_macvtap: entered promiscuous mode [ 932.700574][T17094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 932.726182][T17094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 932.759776][T14447] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.789239][T14447] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.838850][T14447] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.904148][T14447] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.019329][T17256] netlink: 'syz.2.3177': attribute type 1 has an invalid length. [ 933.105324][T17256] 8021q: adding VLAN 0 to HW filter on device bond2 [ 933.176970][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 933.225293][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 933.391126][ T29] audit: type=1326 audit(1775485303.978:4814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17264 comm="syz.2.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00979c819 code=0x7ffc0000 [ 933.449123][ T29] audit: type=1326 audit(1775485303.978:4815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17264 comm="syz.2.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00979c819 code=0x7ffc0000 [ 933.463466][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 933.491606][T17270] xt_hashlimit: size too large, truncated to 1048576 [ 933.502588][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 933.529025][ T29] audit: type=1326 audit(1775485303.978:4816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17264 comm="syz.2.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00979c819 code=0x7ffc0000 [ 933.653647][ T29] audit: type=1326 audit(1775485303.978:4817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17264 comm="syz.2.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00979c819 code=0x7ffc0000 [ 933.694293][ T5840] Bluetooth: hci5: command 0x0406 tx timeout [ 933.708478][ T29] audit: type=1326 audit(1775485303.978:4818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17264 comm="syz.2.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa00979c819 code=0x7ffc0000 [ 933.740445][ T29] audit: type=1326 audit(1775485303.978:4819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17264 comm="syz.2.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00979c819 code=0x7ffc0000 [ 933.810487][T17277] binder: BINDER_SET_CONTEXT_MGR already set [ 933.816793][T17277] binder: 17268:17277 ioctl 4018620d 200000004a80 returned -16 [ 933.868832][T17263] binder: BINDER_SET_CONTEXT_MGR already set [ 933.875148][T17263] binder: 17260:17263 ioctl 4018620d 200000004a80 returned -16 [ 933.891119][ T29] audit: type=1326 audit(1775485303.978:4820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17264 comm="syz.2.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00979c819 code=0x7ffc0000 [ 933.958472][ T29] audit: type=1326 audit(1775485303.978:4821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17264 comm="syz.2.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00979c819 code=0x7ffc0000 [ 934.017364][ T29] audit: type=1326 audit(1775485303.978:4822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17264 comm="syz.2.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00979c819 code=0x7ffc0000 [ 934.099995][ T29] audit: type=1326 audit(1775485303.978:4823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17264 comm="syz.2.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa00979c819 code=0x7ffc0000 [ 935.061026][ T5897] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 935.230725][ T5897] usb 3-1: device descriptor read/64, error -71 [ 935.369535][T17311] xt_hashlimit: size too large, truncated to 1048576 [ 935.484316][ T5897] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 935.540263][T17027] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 935.640861][ T5897] usb 3-1: device descriptor read/64, error -71 [ 935.732512][T17027] usb 6-1: config 129 has an invalid interface number: 4 but max is 0 [ 935.748477][T17027] usb 6-1: config 129 has no interface number 0 [ 935.755823][T17027] usb 6-1: config 129 interface 4 has no altsetting 0 [ 935.771124][T17027] usb 6-1: New USB device found, idVendor=0403, idProduct=f458, bcdDevice= 0.7c [ 935.782556][ T5897] usb usb3-port1: attempt power cycle [ 935.802672][T17027] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.821215][T17027] usb 6-1: Product: syz [ 935.821512][T17321] netlink: 'syz.1.3188': attribute type 1 has an invalid length. [ 935.825538][T17027] usb 6-1: Manufacturer: syz [ 935.841291][T17027] usb 6-1: SerialNumber: syz [ 935.928752][T17321] 8021q: adding VLAN 0 to HW filter on device bond1 [ 936.090444][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 936.126299][T17027] ftdi_sio 6-1:129.4: FTDI USB Serial Device converter detected [ 936.142772][ T5897] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 936.166362][T17027] usb 6-1: Detected SIO [ 936.200186][ T5897] usb 3-1: device descriptor read/8, error -71 [ 936.260310][ T7886] usb 2-1: new full-speed USB device number 113 using dummy_hcd [ 936.365042][T17027] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 936.408480][T17027] usb 6-1: USB disconnect, device number 25 [ 936.421826][ T7886] usb 2-1: not running at top speed; connect to a high speed hub [ 936.441746][T17027] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 936.443986][ T7886] usb 2-1: config 4 has an invalid interface number: 183 but max is 0 [ 936.481628][ T7886] usb 2-1: config 4 has no interface number 0 [ 936.499491][T17027] ftdi_sio 6-1:129.4: device disconnected [ 936.527269][ T7886] usb 2-1: config 4 interface 183 has no altsetting 0 [ 936.550994][ T5897] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 936.553542][ T7886] usb 2-1: New USB device found, idVendor=2019, idProduct=ab2b, bcdDevice=d3.31 [ 936.580992][ T5897] usb 3-1: device descriptor read/8, error -71 [ 936.607054][ T7886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.661377][ T7886] usb 2-1: Product: syz [ 936.665692][ T7886] usb 2-1: Manufacturer: syz [ 936.697563][ T7886] usb 2-1: SerialNumber: syz [ 936.711656][ T5897] usb usb3-port1: unable to enumerate USB device [ 936.875545][T17349] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 936.948421][T17351] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3193'. [ 936.990320][ T7886] usb 2-1: USB disconnect, device number 113 [ 937.434441][T17361] bridge_slave_0: left allmulticast mode [ 937.447433][T17361] bridge_slave_0: left promiscuous mode [ 937.456233][T17361] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.496799][T17361] bridge_slave_1: left allmulticast mode [ 937.503344][T17361] bridge_slave_1: left promiscuous mode [ 937.509685][T17361] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.601578][T17361] vlan0: left promiscuous mode [ 937.607342][T17361] geneve0: left promiscuous mode [ 937.679135][T17361] bond0: (slave bond_slave_0): Releasing backup interface [ 937.736417][T17361] bond0: (slave bond_slave_1): Releasing backup interface [ 937.895916][T17361] team0: Port device team_slave_0 removed [ 938.063008][T17361] team0: Port device team_slave_1 removed [ 938.112149][T17361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 938.132875][T17361] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 938.144174][T17375] xt_hashlimit: size too large, truncated to 1048576 [ 938.182873][T17361] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 938.193254][T17361] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 938.594094][T17361] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 938.769773][T17385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 938.790920][T17385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 938.805135][T17385] netlink: 120 bytes leftover after parsing attributes in process `syz.2.3199'. [ 941.370625][T17410] binder: 17409:17410 ioctl 54a0 0 returned -22 [ 941.640379][ T7886] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 941.726690][T17417] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3208'. [ 941.788389][T17417] netlink: 'syz.2.3208': attribute type 4 has an invalid length. [ 941.809649][ T7886] usb 2-1: config 183 has an invalid interface number: 95 but max is 3 [ 941.824901][ T7886] usb 2-1: config 183 has an invalid interface number: 189 but max is 3 [ 941.835080][ T7886] usb 2-1: config 183 has an invalid interface number: 45 but max is 3 [ 941.860520][ T7886] usb 2-1: config 183 has no interface number 0 [ 941.895719][ T6533] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 941.938170][ T7886] usb 2-1: config 183 has no interface number 1 [ 941.945919][ T7886] usb 2-1: config 183 has no interface number 2 [ 941.957995][ T7886] usb 2-1: config 183 interface 95 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 1023 [ 942.127715][ T6533] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 942.141126][ T6533] usb 4-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 942.159892][ T7886] usb 2-1: config 183 interface 3 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 942.171846][ T6533] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 942.196189][ T6533] usb 4-1: config 8 has no interface number 0 [ 942.206117][ T7886] usb 2-1: config 183 interface 3 altsetting 6 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 942.230618][ T6533] usb 4-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 942.246478][ T7886] usb 2-1: config 183 interface 189 altsetting 2 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 942.265942][ T6533] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 942.276608][ T7886] usb 2-1: config 183 interface 189 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 942.294557][ T6533] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.306308][ T7886] usb 2-1: config 183 interface 189 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 942.317509][ T6533] usb 4-1: Product: syz [ 942.322133][ T6533] usb 4-1: Manufacturer: syz [ 942.326786][ T7886] usb 2-1: config 183 interface 189 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 942.339571][ T6533] usb 4-1: SerialNumber: syz [ 942.347474][ T7886] usb 2-1: config 183 interface 189 altsetting 2 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 942.359035][ T7886] usb 2-1: config 183 interface 189 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 942.370515][ T7886] usb 2-1: config 183 interface 189 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 942.402289][ T7886] usb 2-1: config 183 interface 189 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 942.440854][ T7886] usb 2-1: config 183 interface 189 altsetting 2 has a duplicate endpoint with address 0x1, skipping [ 942.462076][ T7886] usb 2-1: config 183 interface 189 altsetting 2 endpoint 0x9 has an invalid bInterval 128, changing to 7 [ 942.561280][ T7886] usb 2-1: config 183 interface 189 altsetting 2 has a duplicate endpoint with address 0x1, skipping [ 942.572571][ T7886] usb 2-1: config 183 interface 189 altsetting 2 has a duplicate endpoint with address 0x1, skipping [ 942.584642][ T7886] usb 2-1: config 183 interface 45 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 942.595914][ T7886] usb 2-1: config 183 interface 45 altsetting 5 bulk endpoint 0xF has invalid maxpacket 1023 [ 942.606520][ T7886] usb 2-1: config 183 interface 95 has no altsetting 0 [ 942.614033][ T7886] usb 2-1: config 183 interface 3 has no altsetting 0 [ 942.629127][ T6533] usb 4-1: USB disconnect, device number 14 [ 942.642068][ T7886] usb 2-1: config 183 interface 189 has no altsetting 0 [ 942.649728][ T7886] usb 2-1: config 183 interface 45 has no altsetting 0 [ 942.701439][ T7886] usb 2-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice=c2.a8 [ 942.710961][ T7886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.719227][ T7886] usb 2-1: Product: syz [ 942.725222][ T7886] usb 2-1: Manufacturer: ы [ 942.729936][ T7886] usb 2-1: SerialNumber: syz [ 942.764892][T17423] syzkaller0: entered promiscuous mode [ 942.771872][T17423] syzkaller0: entered allmulticast mode [ 942.829484][T17410] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 943.041744][T17410] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 943.079827][ T7886] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:183.95/input/input91 [ 943.155545][ T5180] bcm5974 2-1:183.95: could not read from device [ 943.191400][ T5180] bcm5974 2-1:183.95: could not read from device [ 943.215950][ T5180] bcm5974 2-1:183.95: could not read from device [ 943.236687][ T7886] usb 2-1: USB disconnect, device number 114 [ 943.267116][ T5180] bcm5974 2-1:183.95: could not read from device [ 943.453719][T17012] udevd[17012]: Error opening device "/dev/input/event4": No such file or directory [ 943.499286][T17012] udevd[17012]: Unable to EVIOCGABS device "/dev/input/event4" [ 943.552798][T17012] udevd[17012]: Unable to EVIOCGABS device "/dev/input/event4" [ 943.579632][T17012] udevd[17012]: Unable to EVIOCGABS device "/dev/input/event4" [ 943.670795][T17012] udevd[17012]: Unable to EVIOCGABS device "/dev/input/event4" [ 944.160280][T17027] usb 2-1: new full-speed USB device number 115 using dummy_hcd [ 944.351862][T17027] usb 2-1: not running at top speed; connect to a high speed hub [ 944.373247][T17027] usb 2-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 944.400220][T17027] usb 2-1: config 127 has 1 interface, different from the descriptor's value: 2 [ 944.432361][T17027] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=e5.46 [ 944.450251][T17027] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.517875][T17027] usb 2-1: Product: syz [ 944.522175][T17027] usb 2-1: Manufacturer: syz [ 944.540322][T17027] usb 2-1: SerialNumber: syz [ 944.939469][T17027] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 944.966231][T17027] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 945.213651][T17027] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19) [ 945.290575][T17027] usb 2-1: USB disconnect, device number 115 [ 945.703685][T17472] netlink: 'syz.5.3222': attribute type 1 has an invalid length. [ 945.801177][T17472] 8021q: adding VLAN 0 to HW filter on device bond4 [ 945.881534][T17479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 945.953230][T17482] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 945.972571][T17482] netlink: 120 bytes leftover after parsing attributes in process `syz.3.3221'. [ 946.730376][T17027] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 946.895299][T17027] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 946.904723][T17027] usb 5-1: config 0 has no interface number 0 [ 946.911304][T17027] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 947.005745][T17027] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 947.107167][T17027] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 947.147432][T17027] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 947.167131][T17027] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.194233][T17027] usb 5-1: Product: syz [ 947.240253][T17027] usb 5-1: Manufacturer: syz [ 947.246605][T17027] usb 5-1: SerialNumber: syz [ 947.291496][T17027] usb 5-1: config 0 descriptor?? [ 947.307868][T17496] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 947.321311][T17027] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 947.351401][T17505] binder: BINDER_SET_CONTEXT_MGR already set [ 947.357604][T17505] binder: 17500:17505 ioctl 4018620d 200000004a80 returned -16 [ 947.388237][T17027] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 947.417961][T17027] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 947.457736][ T7886] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 947.532538][ T9] usb 5-1: USB disconnect, device number 26 [ 947.585014][ T9] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 947.618500][ T9] cyberjack 5-1:0.69: device disconnected [ 947.639983][ T7886] usb 6-1: config 129 has an invalid interface number: 4 but max is 0 [ 947.903300][ T7886] usb 6-1: config 129 has no interface number 0 [ 947.981455][ T7886] usb 6-1: config 129 interface 4 has no altsetting 0 [ 948.005723][ T7886] usb 6-1: New USB device found, idVendor=0403, idProduct=f458, bcdDevice= 0.7c [ 948.015304][ T7886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.034853][ T7886] usb 6-1: Product: syz [ 948.104699][ T7886] usb 6-1: Manufacturer: syz [ 948.122528][ T7886] usb 6-1: SerialNumber: syz [ 948.461626][ T7886] ftdi_sio 6-1:129.4: FTDI USB Serial Device converter detected [ 948.533077][ T7886] usb 6-1: Detected SIO [ 948.568377][ T7886] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 948.634800][ T7886] usb 6-1: USB disconnect, device number 26 [ 948.721920][ T7886] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 948.741983][ T7886] ftdi_sio 6-1:129.4: device disconnected [ 948.867317][T17517] netlink: 'syz.3.3236': attribute type 1 has an invalid length. [ 948.960729][T17517] 8021q: adding VLAN 0 to HW filter on device bond6 [ 949.180335][ T6533] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 949.279376][T17534] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3241'. [ 949.303573][T17534] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3241'. [ 949.411027][T17534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3241'. [ 949.532062][ T6533] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 949.555693][ T6533] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 949.566430][ T6533] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 949.592926][ T6533] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 949.605250][ T6533] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 949.621684][ T6533] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 949.642119][ T6533] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 949.651044][ T6533] usb 5-1: Product: syz [ 949.656857][ T6533] usb 5-1: Manufacturer: syz [ 949.742171][ T6533] cdc_wdm 5-1:1.0: skipping garbage [ 949.747590][ T6533] cdc_wdm 5-1:1.0: skipping garbage [ 949.764904][T17546] x_tables: duplicate underflow at hook 2 [ 949.765470][ T6533] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 949.777562][ T6533] cdc_wdm 5-1:1.0: Unknown control protocol [ 950.480317][ T9] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 950.650964][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 950.663673][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 950.688562][T17558] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3244'. [ 950.740417][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 950.772831][ T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 950.773700][T17562] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 950.795853][T17559] netlink: 'syz.3.3244': attribute type 4 has an invalid length. [ 950.981085][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.989254][ T9] usb 6-1: Product: syz [ 951.084536][ T9] usb 6-1: Manufacturer: syz [ 951.091127][ T9] usb 6-1: SerialNumber: syz [ 951.732914][T17571] xt_hashlimit: size too large, truncated to 1048576 [ 952.091543][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 952.121904][T17027] usb 5-1: USB disconnect, device number 27 [ 952.520687][T17581] binder: BINDER_SET_CONTEXT_MGR already set [ 952.526849][T17581] binder: 17577:17581 ioctl 4018620d 200000004a80 returned -16 [ 952.646966][T17586] netlink: 'syz.2.3251': attribute type 1 has an invalid length. [ 952.810851][T17586] 8021q: adding VLAN 0 to HW filter on device bond3 [ 952.860265][ T6533] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 953.132721][ T6533] usb 4-1: config 129 has an invalid interface number: 4 but max is 0 [ 953.147857][ T6533] usb 4-1: config 129 has no interface number 0 [ 953.149593][ T9] usb 6-1: 0:2 : does not exist [ 953.170301][ T6533] usb 4-1: config 129 interface 4 has no altsetting 0 [ 953.187285][ T6533] usb 4-1: New USB device found, idVendor=0403, idProduct=f458, bcdDevice= 0.7c [ 953.199660][ T6533] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.214084][ T6533] usb 4-1: Product: syz [ 953.223745][ T9] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 953.224339][ T6533] usb 4-1: Manufacturer: syz [ 953.267441][ T6533] usb 4-1: SerialNumber: syz [ 953.527828][ T6533] ftdi_sio 4-1:129.4: FTDI USB Serial Device converter detected [ 953.541889][ T6533] usb 4-1: Detected SIO [ 953.547392][ T6533] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 953.571077][ T6533] usb 4-1: USB disconnect, device number 15 [ 953.588260][ T9] usb 6-1: USB disconnect, device number 27 [ 953.634369][ T6533] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 953.683289][ T6533] ftdi_sio 4-1:129.4: device disconnected [ 953.708323][T17597] xt_hashlimit: size too large, truncated to 1048576 [ 953.745893][T17050] udevd[17050]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 953.779077][T17598] FAULT_INJECTION: forcing a failure. [ 953.779077][T17598] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 953.854955][T17598] CPU: 1 UID: 0 PID: 17598 Comm: syz.2.3254 Tainted: G L syzkaller #0 PREEMPT(full) [ 953.854990][T17598] Tainted: [L]=SOFTLOCKUP [ 953.854998][T17598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 953.855009][T17598] Call Trace: [ 953.855018][T17598] [ 953.855026][T17598] dump_stack_lvl+0xe8/0x150 [ 953.855064][T17598] should_fail_ex+0x412/0x560 [ 953.855098][T17598] _copy_from_user+0x2d/0xb0 [ 953.855123][T17598] csum_and_copy_from_iter_full+0x1e7/0x1f00 [ 953.855169][T17598] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 953.855201][T17598] ? rcu_is_watching+0x15/0xb0 [ 953.855227][T17598] ? trace_kmalloc+0x2a/0x110 [ 953.855253][T17598] ip_generic_getfrag+0x149/0x2d0 [ 953.855280][T17598] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 953.855307][T17598] ? __alloc_skb+0x4e5/0x7d0 [ 953.855332][T17598] ? skb_put+0x11b/0x210 [ 953.855361][T17598] __ip6_append_data+0x36be/0x3c50 [ 953.855406][T17598] ? __pfx_raw6_getfrag+0x10/0x10 [ 953.855464][T17598] ? __pfx___ip6_append_data+0x10/0x10 [ 953.855488][T17598] ? ip6_setup_cork+0x544/0xf30 [ 953.855512][T17598] ? ip6_append_data+0x1b7/0x280 [ 953.855537][T17598] ip6_append_data+0x10f/0x280 [ 953.855562][T17598] ? __pfx_raw6_getfrag+0x10/0x10 [ 953.855589][T17598] rawv6_sendmsg+0x12d3/0x18e0 [ 953.855630][T17598] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 953.855669][T17598] ? aa_sk_perm+0x6d5/0x900 [ 953.855706][T17598] ? __pfx_aa_sk_perm+0x10/0x10 [ 953.855739][T17598] ? sock_rps_record_flow+0x19/0x400 [ 953.855767][T17598] ? inet_sendmsg+0x2f4/0x370 [ 953.855791][T17598] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 953.855816][T17598] ____sys_sendmsg+0x80a/0x9f0 [ 953.855852][T17598] ? __pfx_____sys_sendmsg+0x10/0x10 [ 953.855884][T17598] ? import_iovec+0x73/0xa0 [ 953.855911][T17598] ___sys_sendmsg+0x2a5/0x360 [ 953.855939][T17598] ? __pfx____sys_sendmsg+0x10/0x10 [ 953.855999][T17598] ? __fget_files+0x2a/0x420 [ 953.856016][T17598] ? __fget_files+0x3a0/0x420 [ 953.856043][T17598] __x64_sys_sendmsg+0x1bd/0x2a0 [ 953.856070][T17598] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 953.856104][T17598] ? __pfx_ksys_write+0x10/0x10 [ 953.856138][T17598] do_syscall_64+0x14d/0xf80 [ 953.856162][T17598] ? trace_irq_disable+0x3b/0x150 [ 953.856177][T17598] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.856197][T17598] ? clear_bhb_loop+0x40/0x90 [ 953.856220][T17598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.856238][T17598] RIP: 0033:0x7fa00979c819 [ 953.856257][T17598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 953.856273][T17598] RSP: 002b:00007fa00a608028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 953.856296][T17598] RAX: ffffffffffffffda RBX: 00007fa009a16090 RCX: 00007fa00979c819 [ 953.856310][T17598] RDX: 0000000000044004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 953.856323][T17598] RBP: 00007fa00a608090 R08: 0000000000000000 R09: 0000000000000000 [ 953.856335][T17598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 953.856346][T17598] R13: 00007fa009a16128 R14: 00007fa009a16090 R15: 00007fa009b3fa48 [ 953.856378][T17598] [ 955.116636][T17616] syzkaller0: entered promiscuous mode [ 955.143389][T17616] syzkaller0: entered allmulticast mode [ 955.179190][T17616] tc action pedit 'at' offset -524296 out of bounds [ 955.338238][T17619] vivid-000: disconnect [ 955.836219][T17602] vivid-000: reconnect [ 956.592424][T17635] bridge_slave_0: left allmulticast mode [ 956.598257][T17635] bridge_slave_0: left promiscuous mode [ 956.630564][T17635] bridge0: port 1(bridge_slave_0) entered disabled state [ 956.681451][T17635] bridge_slave_1: left allmulticast mode [ 956.687149][T17635] bridge_slave_1: left promiscuous mode [ 956.721656][T17635] bridge0: port 2(bridge_slave_1) entered disabled state [ 956.752404][T17635] bond0: (slave bond_slave_0): Releasing backup interface [ 956.797725][T17635] bond0: (slave bond_slave_1): Releasing backup interface [ 956.838201][T17635] team_slave_0: left promiscuous mode [ 956.891137][ T9] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 956.901846][T17635] team0: Port device team_slave_0 removed [ 956.930188][T17635] team_slave_1: left promiscuous mode [ 957.093188][T17635] team0: Port device team_slave_1 removed [ 957.104454][T17657] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 957.115765][ T9] usb 6-1: config 129 has an invalid interface number: 4 but max is 0 [ 957.124562][ T9] usb 6-1: config 129 has no interface number 0 [ 957.131698][ T9] usb 6-1: config 129 interface 4 has no altsetting 0 [ 957.139634][T17635] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 957.150738][T17635] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 957.158208][ T9] usb 6-1: New USB device found, idVendor=0403, idProduct=f458, bcdDevice= 0.7c [ 957.171282][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.226580][ T9] usb 6-1: Product: syz [ 957.296049][ T9] usb 6-1: Manufacturer: syz [ 957.334417][ T9] usb 6-1: SerialNumber: syz [ 957.451059][T17635] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 957.477647][T17635] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 957.498004][T17635] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 957.707547][ T9] ftdi_sio 6-1:129.4: FTDI USB Serial Device converter detected [ 957.720411][T17661] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3272'. [ 957.755237][ T9] usb 6-1: Detected SIO [ 957.772267][ T9] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 957.799614][ T9] usb 6-1: USB disconnect, device number 28 [ 957.828848][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 957.847696][ T9] ftdi_sio 6-1:129.4: device disconnected [ 957.903535][T17665] xt_hashlimit: size too large, truncated to 1048576 [ 957.992072][T17669] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3273'. [ 958.404244][T17676] netlink: 'syz.4.3272': attribute type 4 has an invalid length. [ 958.990259][ T9] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 959.260604][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 959.268848][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 959.280802][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 959.290988][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 959.320238][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 959.376591][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.437360][ T9] usb 2-1: config 0 descriptor?? [ 959.732560][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 959.800286][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 959.851552][ T9] usb 2-1: USB disconnect, device number 116 [ 960.680896][T17704] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 960.840116][T17705] binder: BINDER_SET_CONTEXT_MGR already set [ 960.846608][T17705] binder: 17696:17705 ioctl 4018620d 200000004a80 returned -16 [ 960.959501][T17710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 960.976259][T17710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 961.012223][T17710] netlink: 120 bytes leftover after parsing attributes in process `syz.2.3284'. [ 961.498155][ T5897] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 962.128055][ T5897] usb 4-1: config 129 has an invalid interface number: 4 but max is 0 [ 962.136505][ T5897] usb 4-1: config 129 has no interface number 0 [ 962.142919][ T5897] usb 4-1: config 129 interface 4 has no altsetting 0 [ 962.159902][ T5897] usb 4-1: New USB device found, idVendor=0403, idProduct=f458, bcdDevice= 0.7c [ 962.170327][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.447145][ T5897] usb 4-1: Product: syz [ 962.460269][ T5897] usb 4-1: Manufacturer: syz [ 962.475168][ T5897] usb 4-1: SerialNumber: syz [ 962.727197][ T5897] ftdi_sio 4-1:129.4: FTDI USB Serial Device converter detected [ 962.751976][ T5897] usb 4-1: Detected SIO [ 962.768561][ T5897] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 962.807456][ T5897] usb 4-1: USB disconnect, device number 16 [ 962.837958][ T5897] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 962.868473][ T5897] ftdi_sio 4-1:129.4: device disconnected [ 963.082639][T17727] xt_hashlimit: size too large, truncated to 1048576 [ 963.563421][T17742] usb usb7: usbfs: process 17742 (syz.2.3292) did not claim interface 0 before use [ 963.910215][T17748] bond_slave_0: entered promiscuous mode [ 963.915978][T17748] bond_slave_1: entered promiscuous mode [ 963.944100][T17748] vlan3: entered promiscuous mode [ 963.962295][T17748] bond0: entered promiscuous mode [ 964.294112][T17756] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3296'. [ 964.530186][T17756] netlink: 'syz.3.3296': attribute type 4 has an invalid length. [ 965.470237][ T6533] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 965.645272][ T6533] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 965.665842][ T6533] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 965.699525][ T6533] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.739669][ T6533] usb 2-1: config 0 descriptor?? [ 965.769326][ T6533] pwc: Askey VC010 type 2 USB webcam detected. [ 965.800584][ T5897] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 965.870533][T17780] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 965.963362][ T5897] usb 3-1: Using ep0 maxpacket: 8 [ 965.972381][ T5897] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 965.977293][T17767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 965.990294][ T5897] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 966.020530][ T5897] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 966.021033][T17767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 966.039632][ T5897] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 966.060937][T17784] netlink: 512 bytes leftover after parsing attributes in process `syz.4.3306'. [ 966.088801][ T5897] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 966.107440][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.180415][T17027] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 966.334997][ T5897] usb 3-1: GET_CAPABILITIES returned 0 [ 966.347445][ T6533] pwc: recv_control_msg error -32 req 02 val 2b00 [ 966.348457][ T5897] usbtmc 3-1:16.0: can't read capabilities [ 966.361177][T17027] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 966.361911][ T6533] pwc: recv_control_msg error -32 req 02 val 2700 [ 966.369323][T17027] usb 6-1: config 1 has no interface number 0 [ 966.369387][T17027] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 966.369424][T17027] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 966.379041][ T6533] pwc: recv_control_msg error -32 req 02 val 2c00 [ 966.413671][T17027] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 966.421787][ T6533] pwc: recv_control_msg error -32 req 04 val 1000 [ 966.432461][ T6533] pwc: recv_control_msg error -32 req 04 val 1300 [ 966.445929][T17027] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 966.455269][T17027] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.480734][T17027] usb 6-1: Product: syz [ 966.484993][T17027] usb 6-1: Manufacturer: syz [ 966.489670][T17027] usb 6-1: SerialNumber: syz [ 966.514068][T17782] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 966.611127][T17771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 966.622337][T17771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 966.716401][ T5897] usb 3-1: USB disconnect, device number 26 [ 966.731064][T17782] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 966.959732][ T29] kauditd_printk_skb: 109 callbacks suppressed [ 966.959753][ T29] audit: type=1326 audit(1775485337.528:4933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17795 comm="syz.4.3310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b4b9c819 code=0x7ffc0000 [ 966.962734][T17027] usb 6-1: Incompatible driver and firmware versions [ 967.045833][ T29] audit: type=1326 audit(1775485337.528:4934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17795 comm="syz.4.3310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b4b9c819 code=0x7ffc0000 [ 967.144787][ T29] audit: type=1326 audit(1775485337.528:4935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17795 comm="syz.4.3310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fa8b4b9c819 code=0x7ffc0000 [ 967.230610][ T29] audit: type=1326 audit(1775485337.528:4936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17795 comm="syz.4.3310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b4b9c819 code=0x7ffc0000 [ 967.235671][ T6533] pwc: recv_control_msg error -71 req 04 val 1400 [ 967.353849][ T6533] pwc: recv_control_msg error -71 req 02 val 2000 [ 967.361051][ T29] audit: type=1326 audit(1775485337.528:4937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17795 comm="syz.4.3310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b4b9c819 code=0x7ffc0000 [ 967.399754][ T6533] pwc: recv_control_msg error -71 req 02 val 2100 [ 967.456549][ T29] audit: type=1326 audit(1775485337.528:4938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17795 comm="syz.4.3310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fa8b4b9c819 code=0x7ffc0000 [ 967.479307][ T29] audit: type=1326 audit(1775485337.528:4939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17795 comm="syz.4.3310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b4b9c819 code=0x7ffc0000 [ 967.503928][ T29] audit: type=1326 audit(1775485337.538:4940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17795 comm="syz.4.3310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fa8b4b9c819 code=0x7ffc0000 [ 967.512463][ T6533] pwc: recv_control_msg error -71 req 04 val 1500 [ 967.532748][ T29] audit: type=1326 audit(1775485337.538:4941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17795 comm="syz.4.3310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b4b9c819 code=0x7ffc0000 [ 967.557360][ T29] audit: type=1326 audit(1775485337.538:4942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17795 comm="syz.4.3310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fa8b4b9c819 code=0x7ffc0000 [ 967.727338][ T6533] pwc: recv_control_msg error -71 req 02 val 2500 [ 967.761727][ T6533] pwc: recv_control_msg error -71 req 02 val 2400 [ 967.780362][ T6533] pwc: recv_control_msg error -71 req 02 val 2600 [ 967.916541][ T6533] pwc: recv_control_msg error -71 req 02 val 2900 [ 967.925868][ T6533] pwc: recv_control_msg error -71 req 02 val 2800 [ 967.935921][ T6533] pwc: recv_control_msg error -71 req 04 val 1100 [ 967.943340][ T6533] pwc: recv_control_msg error -71 req 04 val 1200 [ 968.007864][ T6533] pwc: Registered as video103. [ 968.061982][ T6533] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input93 [ 968.143504][ T6533] usb 2-1: USB disconnect, device number 117 [ 968.193720][T17027] usb 3-1: new low-speed USB device number 27 using dummy_hcd [ 968.404609][T17027] usb 3-1: device descriptor read/64, error -71 [ 968.666013][T17027] usb 3-1: new low-speed USB device number 28 using dummy_hcd [ 968.695479][T17782] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 968.702644][T17782] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 968.774178][T17782] vhci_hcd vhci_hcd.0: Device attached [ 968.866546][T17027] usb 3-1: device descriptor read/64, error -71 [ 969.011046][T17027] usb usb3-port1: attempt power cycle [ 969.030635][ T6533] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 969.126891][T17831] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3318'. [ 969.180267][ T9] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 969.264520][T17832] netlink: 'syz.4.3318': attribute type 4 has an invalid length. [ 969.330723][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 969.343926][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 26232, setting to 64 [ 969.359780][T17027] usb 3-1: new low-speed USB device number 29 using dummy_hcd [ 969.397128][ T9] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 969.418960][T17027] usb 3-1: device descriptor read/8, error -71 [ 969.434467][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.457716][ T9] usb 2-1: Product: syz [ 969.468068][ T9] usb 2-1: Manufacturer: syz [ 969.479549][ T9] usb 2-1: SerialNumber: syz [ 969.534055][ T9] usb 2-1: config 0 descriptor?? [ 969.556294][ T9] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 969.725050][T17027] usb 3-1: new low-speed USB device number 30 using dummy_hcd [ 969.794739][T17027] usb 3-1: device descriptor read/8, error -71 [ 969.804614][ T9] usb 2-1: USB disconnect, device number 118 [ 969.815301][ T1160] usb 2-1: Failed to submit usb control message: -71 [ 969.835334][ T1160] usb 2-1: unable to send the bmi data to the device: -71 [ 969.875060][ T1160] usb 2-1: unable to get target info from device [ 969.885445][ T1160] usb 2-1: could not get target info (-71) [ 969.895979][ T1160] usb 2-1: could not probe fw (-71) [ 969.910634][T17027] usb usb3-port1: unable to enumerate USB device [ 970.026970][T17820] vhci_hcd: connection reset by peer [ 970.062314][ T1160] vhci_hcd vhci_hcd.5: stop threads [ 970.069008][ T1160] vhci_hcd vhci_hcd.5: release socket [ 970.078814][ T1160] vhci_hcd vhci_hcd.5: disconnect device [ 970.090790][T12926] usb 6-1: USB disconnect, device number 29 [ 970.451880][T17842] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 971.651198][T17866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3325'. [ 972.050262][ T7886] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 972.240032][T17880] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 972.258018][ T7886] usb 4-1: Using ep0 maxpacket: 16 [ 972.268249][ T7886] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 972.308423][ T7886] usb 4-1: config 0 interface 0 has no altsetting 0 [ 972.319552][ T7886] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 972.340666][ T7886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.381525][ T7886] usb 4-1: config 0 descriptor?? [ 972.832531][ T7886] nzxt-smart2 0003:1E71:2009.001F: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 973.267365][ T5911] usb 4-1: USB disconnect, device number 17 [ 974.160470][ T6533] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 974.808719][T17913] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3336'. [ 974.953378][T17914] netlink: 'syz.2.3336': attribute type 4 has an invalid length. [ 975.595209][ T6533] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 975.790371][ T6533] usb 4-1: Using ep0 maxpacket: 16 [ 975.798374][ T6533] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 1791, setting to 1024 [ 975.820771][ T6533] usb 4-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 975.850316][ T6533] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.858389][ T6533] usb 4-1: Product: syz [ 975.881067][ T6533] usb 4-1: Manufacturer: syz [ 975.910208][ T6533] usb 4-1: SerialNumber: syz [ 975.972103][ T6533] usb 4-1: config 0 descriptor?? [ 975.979978][T17921] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 976.028465][ T6533] kobil_sct 4-1:0.0: KOBIL USB smart card terminal converter detected [ 976.072116][ T6533] usb 4-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 976.137236][T17930] bridge0: port 2(bridge_slave_1) entered disabled state [ 976.145004][T17930] bridge0: port 1(bridge_slave_0) entered disabled state [ 976.312883][ T6533] usb 4-1: USB disconnect, device number 18 [ 976.383859][ T6533] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 976.427074][ T6533] kobil_sct 4-1:0.0: device disconnected [ 976.630762][T17930] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 976.683926][T17930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 976.825767][T17938] xt_hashlimit: size too large, truncated to 1048576 [ 976.946562][T17943] loop5: detected capacity change from 0 to 7 [ 976.955925][T17943] loop5: [ 976.989744][T17943] loop5: partition table partially beyond EOD, truncated [ 977.391754][ T1160] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.437554][ T1160] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.625158][ T352] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.662429][ T352] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.832598][T17961] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3349'. [ 977.878435][T17962] xt_hashlimit: size too large, truncated to 1048576 [ 978.102063][T17967] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3351'. [ 978.217047][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 978.217069][ T29] audit: type=1326 audit(1775485348.798:5004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17966 comm="syz.3.3352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd90cf9c819 code=0x7ffc0000 [ 978.350375][ T29] audit: type=1326 audit(1775485348.798:5005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17966 comm="syz.3.3352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd90cf9c819 code=0x7ffc0000 [ 978.380466][ T29] audit: type=1326 audit(1775485348.808:5006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17966 comm="syz.3.3352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd90cf9c819 code=0x7ffc0000 [ 978.410643][ T29] audit: type=1326 audit(1775485348.808:5007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17966 comm="syz.3.3352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd90cf9c819 code=0x7ffc0000 [ 978.454697][ T29] audit: type=1326 audit(1775485348.808:5008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17966 comm="syz.3.3352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd90cf9c819 code=0x7ffc0000 [ 978.482312][ T29] audit: type=1326 audit(1775485348.808:5009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17966 comm="syz.3.3352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd90cf9c819 code=0x7ffc0000 [ 978.562022][ T29] audit: type=1326 audit(1775485348.808:5010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17966 comm="syz.3.3352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd90cf9c819 code=0x7ffc0000 [ 978.591025][T17979] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3354'. [ 978.620849][ T29] audit: type=1326 audit(1775485348.808:5011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17966 comm="syz.3.3352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd90cf9c819 code=0x7ffc0000 [ 978.662380][T17979] netlink: 'syz.1.3354': attribute type 4 has an invalid length. [ 978.771691][ T29] audit: type=1326 audit(1775485348.808:5012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17966 comm="syz.3.3352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd90cf9c819 code=0x7ffc0000 [ 978.835047][ T29] audit: type=1326 audit(1775485348.808:5013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17966 comm="syz.3.3352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd90cf9c819 code=0x7ffc0000 [ 979.449206][T17989] xt_hashlimit: size too large, truncated to 1048576 [ 980.310319][ T5828] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 980.547322][ T5828] usb 4-1: Using ep0 maxpacket: 16 [ 980.610091][ T5828] usb 4-1: config 0 has no interfaces? [ 980.635228][ T5828] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 980.719415][ T5828] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 980.751159][ T5828] usb 4-1: Manufacturer: syz [ 980.769447][ T5828] usb 4-1: config 0 descriptor?? [ 982.754525][ T7906] usb 4-1: USB disconnect, device number 19 [ 983.242886][T18026] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3364'. [ 983.364119][ T29] kauditd_printk_skb: 106 callbacks suppressed [ 983.364141][ T29] audit: type=1326 audit(1775485353.948:5120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18027 comm="syz.2.3366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00979c819 code=0x7ffc0000 [ 983.556959][ T29] audit: type=1326 audit(1775485353.948:5121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18027 comm="syz.2.3366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00979c819 code=0x7ffc0000 [ 983.709290][ T29] audit: type=1326 audit(1775485353.978:5122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18027 comm="syz.2.3366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00979c819 code=0x7ffc0000 [ 983.734496][ T29] audit: type=1326 audit(1775485353.978:5123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18027 comm="syz.2.3366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa00979c819 code=0x7ffc0000 [ 983.836587][ T29] audit: type=1326 audit(1775485353.978:5124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18027 comm="syz.2.3366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00979c819 code=0x7ffc0000 [ 984.090406][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 984.114666][ T29] audit: type=1326 audit(1775485353.978:5125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18027 comm="syz.2.3366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00979c819 code=0x7ffc0000 [ 984.138404][ T29] audit: type=1326 audit(1775485353.978:5126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18027 comm="syz.2.3366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00979c819 code=0x7ffc0000 [ 984.168438][ T29] audit: type=1326 audit(1775485353.978:5127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18027 comm="syz.2.3366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00979c819 code=0x7ffc0000 [ 984.195218][ T29] audit: type=1326 audit(1775485353.978:5128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18027 comm="syz.2.3366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa00979c819 code=0x7ffc0000 [ 984.220297][ T29] audit: type=1326 audit(1775485353.978:5129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18027 comm="syz.2.3366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00979c819 code=0x7ffc0000 [ 984.450889][T18050] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3370'. [ 984.502102][T18050] netlink: 'syz.1.3370': attribute type 4 has an invalid length. [ 984.542399][T18053] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 985.772613][T18070] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3377'. [ 985.913482][T18077] tipc: Started in network mode [ 985.915742][T18077] tipc: Node identity fa3c19b0d588, cluster identity 4711 [ 985.915867][T18077] tipc: Enabled bearer , priority 0 [ 985.916448][T18076] syzkaller0: entered promiscuous mode [ 985.916470][T18076] syzkaller0: entered allmulticast mode [ 985.958104][T18077] tipc: Resetting bearer [ 985.994374][T18075] tipc: Resetting bearer [ 986.047209][T18075] tipc: Disabling bearer [ 986.091363][T18085] tipc: Started in network mode [ 986.102065][T18085] tipc: Node identity aaf8c10558f5, cluster identity 4711 [ 986.147490][T18085] tipc: Enabled bearer , priority 0 [ 986.171446][T18086] syzkaller0: entered promiscuous mode [ 986.177554][T18086] syzkaller0: entered allmulticast mode [ 986.194505][T18085] tipc: Resetting bearer [ 986.224826][T18080] vlan2: entered promiscuous mode [ 986.229932][T18080] geneve1: entered promiscuous mode [ 986.275414][T18080] vlan2: entered allmulticast mode [ 986.300536][T18080] geneve1: entered allmulticast mode [ 986.427942][T18097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 986.444967][T18097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 986.467438][T18099] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 986.483032][T18100] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3385'. [ 986.568820][T18097] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3385'. [ 986.605663][T18103] Context (ID=0x4dd) not attached to queue pair (handle=0x2:0x2) [ 986.651731][ T7906] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 986.659653][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 986.697134][T18103] bond5: (slave bond_slave_1): Device is not our slave [ 986.704576][T18103] bond5: option active_slave: invalid value (bond_slave_1) [ 986.717474][T18103] bond5 (unregistering): Released all slaves [ 986.745774][T18073] tipc: Resetting bearer [ 986.774481][T18073] tipc: Disabling bearer [ 986.838293][T18114] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3388'. [ 986.915335][ T7886] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 986.934157][T18116] xt_hashlimit: size too large, truncated to 1048576 [ 986.993116][T18117] netlink: 'syz.3.3388': attribute type 4 has an invalid length. [ 987.160241][ T7886] usb 2-1: Using ep0 maxpacket: 16 [ 987.179292][ T7886] usb 2-1: config 127 has an invalid interface number: 124 but max is 0 [ 987.202036][ T7886] usb 2-1: config 127 has no interface number 0 [ 987.315981][ T7886] usb 2-1: config 127 interface 124 has no altsetting 0 [ 987.364433][ T7886] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 987.384020][ T7886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.395260][ T7886] usb 2-1: Product: syz [ 987.400482][ T7886] usb 2-1: Manufacturer: syz [ 987.405468][ T7886] usb 2-1: SerialNumber: syz [ 987.850251][ T6533] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 988.061946][ T6533] usb 3-1: Using ep0 maxpacket: 16 [ 988.079884][ T6533] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 988.094629][ T6533] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.119756][ T6533] usb 3-1: Product: syz [ 988.129326][ T6533] usb 3-1: Manufacturer: syz [ 988.141396][ T6533] usb 3-1: SerialNumber: syz [ 988.156991][ T6533] usb 3-1: config 0 descriptor?? [ 988.191722][ T6533] ums-onetouch 3-1:0.0: USB Mass Storage device detected [ 988.204831][ T7886] usb 2-1: USB disconnect, device number 120 [ 988.442765][ T7906] usb 3-1: USB disconnect, device number 31 [ 988.720005][T18147] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3396'. [ 988.738378][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 988.738392][ T29] audit: type=1326 audit(1775485359.318:5240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18144 comm="syz.3.3395" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd90cf9c819 code=0x0 [ 988.788568][T18147] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3396'. [ 989.211001][ T29] audit: type=1326 audit(1775485359.798:5241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18150 comm="syz.5.3397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f678199c819 code=0x7ffc0000 [ 989.244575][ T29] audit: type=1326 audit(1775485359.818:5242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18150 comm="syz.5.3397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f678199c819 code=0x7ffc0000 [ 989.271014][ T29] audit: type=1326 audit(1775485359.828:5243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18150 comm="syz.5.3397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f678199c819 code=0x7ffc0000 [ 989.297924][ T29] audit: type=1326 audit(1775485359.828:5244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18150 comm="syz.5.3397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f678199c819 code=0x7ffc0000 [ 989.364181][ T29] audit: type=1326 audit(1775485359.858:5245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18150 comm="syz.5.3397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f678199c819 code=0x7ffc0000 [ 989.389903][ T29] audit: type=1326 audit(1775485359.858:5246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18150 comm="syz.5.3397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f678199c819 code=0x7ffc0000 [ 989.430246][ T29] audit: type=1326 audit(1775485359.858:5247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18150 comm="syz.5.3397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f678199c819 code=0x7ffc0000 [ 989.480362][ T29] audit: type=1326 audit(1775485359.858:5248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18150 comm="syz.5.3397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f678199c819 code=0x7ffc0000 [ 989.530281][ T29] audit: type=1326 audit(1775485359.858:5249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18150 comm="syz.5.3397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f678199c819 code=0x7ffc0000 [ 989.572940][ T7886] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 989.725487][T18164] netlink: 'syz.5.3402': attribute type 1 has an invalid length. [ 989.753046][ T7886] usb 5-1: Using ep0 maxpacket: 32 [ 989.760645][ T7886] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 989.778441][T18164] 8021q: adding VLAN 0 to HW filter on device bond5 [ 989.785726][ T7886] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 989.796525][ T7886] usb 5-1: config 0 has no interface number 0 [ 989.800547][ T7906] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 989.804080][ T7886] usb 5-1: config 0 interface 126 has no altsetting 0 [ 989.819379][ T7886] usb 5-1: New USB device found, idVendor=04dd, idProduct=8007, bcdDevice=df.8e [ 989.828863][ T7886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.837058][ T7886] usb 5-1: Product: syz [ 989.841683][ T7886] usb 5-1: Manufacturer: syz [ 989.847546][ T7886] usb 5-1: SerialNumber: syz [ 989.860978][ T7886] usb 5-1: config 0 descriptor?? [ 989.869840][ T7886] zaurus 5-1:0.126: More than one union descriptor, skipping ... [ 989.873183][ T5911] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 989.877800][ T7886] zaurus 5-1:0.126: skipping garbage [ 989.892347][ T7886] usb 5-1: bad CDC descriptors [ 989.980961][ T7906] usb 3-1: Using ep0 maxpacket: 16 [ 989.997723][T18159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 990.015921][T18159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 990.060757][ T5911] usb 4-1: Using ep0 maxpacket: 32 [ 990.069361][ T5911] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 990.114657][ T5911] usb 4-1: config 0 has no interface number 0 [ 990.130884][ T5911] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 990.154714][T18154] ================================================================== [ 990.162852][T18154] BUG: KASAN: slab-out-of-bounds in af_alg_pull_tsgl+0x1c6/0x740 [ 990.166799][ T5911] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 990.170699][T18154] Read of size 8 at addr ffff888036a64ca0 by task syz.4.3398/18154 [ 990.170721][T18154] [ 990.170737][T18154] CPU: 1 UID: 0 PID: 18154 Comm: syz.4.3398 Tainted: G L syzkaller #0 PREEMPT(full) [ 990.170762][T18154] Tainted: [L]=SOFTLOCKUP [ 990.170770][T18154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 990.170782][T18154] Call Trace: [ 990.170790][T18154] [ 990.170799][T18154] dump_stack_lvl+0xe8/0x150 [ 990.170829][T18154] print_report+0xba/0x230 [ 990.170852][T18154] ? af_alg_pull_tsgl+0x1c6/0x740 [ 990.170881][T18154] kasan_report+0x117/0x150 [ 990.170908][T18154] ? af_alg_pull_tsgl+0x1c6/0x740 [ 990.170941][T18154] af_alg_pull_tsgl+0x1c6/0x740 [ 990.170977][T18154] skcipher_recvmsg+0x5df/0x1140 [ 990.171006][T18154] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 990.171024][T18154] ? aa_sock_msg_perm+0xf1/0x1b0 [ 990.171055][T18154] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 990.171078][T18154] ? security_socket_recvmsg+0x7e/0x2c0 [ 990.171099][T18154] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 990.171121][T18154] sock_recvmsg+0x172/0x1b0 [ 990.171150][T18154] __sys_recvfrom+0x240/0x3c0 [ 990.171176][T18154] ? __pfx___sys_recvfrom+0x10/0x10 [ 990.171206][T18154] ? exc_page_fault+0x6a/0xc0 [ 990.171230][T18154] ? do_user_addr_fault+0xc6f/0x1340 [ 990.171254][T18154] __x64_sys_recvfrom+0xde/0x100 [ 990.171317][T18154] do_syscall_64+0x14d/0xf80 [ 990.171341][T18154] ? trace_irq_disable+0x3b/0x150 [ 990.171357][T18154] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.171375][T18154] ? clear_bhb_loop+0x40/0x90 [ 990.171395][T18154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.171412][T18154] RIP: 0033:0x7fa8b4b5d04e [ 990.171430][T18154] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 990.171446][T18154] RSP: 002b:00007fa8b5a19e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 990.171466][T18154] RAX: ffffffffffffffda RBX: 00007fa8b5a1b6c0 RCX: 00007fa8b4b5d04e [ 990.171479][T18154] RDX: 0000000000001000 RSI: 00007fa8b5a1a000 RDI: 0000000000000006 [ 990.171491][T18154] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 990.171502][T18154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 990.171512][T18154] R13: 00007fa8b5a19f58 R14: 00007fa8b5a1a000 R15: 0000000000000000 [ 990.171531][T18154] [ 990.171538][T18154] [ 990.191644][ T5911] usb 4-1: config 0 interface 85 has no altsetting 0 [ 990.202376][T18154] Allocated by task 18154: [ 990.202395][T18154] kasan_save_track+0x3e/0x80 [ 990.202420][T18154] __kasan_kmalloc+0x93/0xb0 [ 990.202440][T18154] __kmalloc_noprof+0x35c/0x760 [ 990.202459][T18154] sock_kmalloc+0xd6/0x160 [ 990.202481][T18154] skcipher_recvmsg+0x54d/0x1140 [ 990.202500][T18154] sock_recvmsg+0x172/0x1b0 [ 990.202516][T18154] __sys_recvfrom+0x240/0x3c0 [ 990.202535][T18154] __x64_sys_recvfrom+0xde/0x100 [ 990.202553][T18154] do_syscall_64+0x14d/0xf80 [ 990.202573][T18154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.202591][T18154] [ 990.202597][T18154] The buggy address belongs to the object at ffff888036a64c80 [ 990.202597][T18154] which belongs to the cache kmalloc-32 of size 32 [ 990.211827][ T5911] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 990.216997][T18154] The buggy address is located 0 bytes to the right of [ 990.216997][T18154] allocated 32-byte region [ffff888036a64c80, ffff888036a64ca0) [ 990.217025][T18154] [ 990.217032][T18154] The buggy address belongs to the physical page: [ 990.217043][T18154] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x36a64 [ 990.217063][T18154] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 990.217079][T18154] page_type: f5(slab) [ 990.217100][T18154] raw: 00fff00000000000 ffff88813fea6780 dead000000000100 dead000000000122 [ 990.217116][T18154] raw: 0000000000000000 0000000800400040 00000000f5000000 0000000000000000 [ 990.217135][T18154] page dumped because: kasan: bad access detected [ 990.217147][T18154] page_owner tracks the page as allocated [ 990.217155][T18154] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 23353553363, free_ts 23315288582 [ 990.217189][T18154] post_alloc_hook+0x231/0x280 [ 990.217213][T18154] get_page_from_freelist+0x24dc/0x2580 [ 990.217239][T18154] __alloc_frozen_pages_noprof+0x18d/0x380 [ 990.217263][T18154] allocate_slab+0x77/0x660 [ 990.217289][T18154] refill_objects+0x331/0x3c0 [ 990.217314][T18154] __pcs_replace_empty_main+0x2e6/0x730 [ 990.217342][T18154] __kmalloc_node_track_caller_noprof+0x572/0x7b0 [ 990.217365][T18154] kstrdup+0x42/0x100 [ 990.217388][T18154] __kernfs_new_node+0xa9/0x8e0 [ 990.217418][T18154] kernfs_new_node+0x102/0x210 [ 990.217446][T18154] kernfs_create_dir_ns+0x44/0x130 [ 990.217464][T18154] sysfs_create_dir_ns+0x12f/0x2a0 [ 990.217490][T18154] kobject_add_internal+0x62b/0xd00 [ 990.217519][T18154] kobject_init_and_add+0x12b/0x1a0 [ 990.217545][T18154] lookup_or_create_module_kobject+0xe3/0x170 [ 990.217572][T18154] kernel_add_sysfs_param+0x14/0xe0 [ 990.217600][T18154] page last free pid 981 tgid 981 stack trace: [ 990.217613][T18154] __free_frozen_pages+0xc2b/0xdb0 [ 990.217634][T18154] vfree+0x25a/0x400 [ 990.217651][T18154] delayed_vfree_work+0x55/0x80 [ 990.217673][T18154] process_scheduled_works+0xb6e/0x18c0 [ 990.217698][T18154] worker_thread+0xa53/0xfc0 [ 990.217723][T18154] kthread+0x388/0x470 [ 990.217739][T18154] ret_from_fork+0x51e/0xb90 [ 990.217764][T18154] ret_from_fork_asm+0x1a/0x30 [ 990.217789][T18154] [ 990.217794][T18154] Memory state around the buggy address: [ 990.217804][T18154] ffff888036a64b80: 00 00 00 00 fc fc fc fc fa fb fb fb fc fc fc fc [ 990.217818][T18154] ffff888036a64c00: fa fb fb fb fc fc fc fc 00 00 00 fc fc fc fc fc [ 990.217830][T18154] >ffff888036a64c80: 00 00 00 00 fc fc fc fc fa fb fb fb fc fc fc fc [ 990.217839][T18154] ^ [ 990.217850][T18154] ffff888036a64d00: 00 00 00 00 fc fc fc fc 00 00 00 00 fc fc fc fc [ 990.217863][T18154] ffff888036a64d80: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 990.217873][T18154] ================================================================== [ 990.283559][T18154] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 990.283590][T18154] CPU: 1 UID: 0 PID: 18154 Comm: syz.4.3398 Tainted: G L syzkaller #0 PREEMPT(full) [ 990.283616][T18154] Tainted: [L]=SOFTLOCKUP [ 990.283624][T18154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 990.283637][T18154] Call Trace: [ 990.283645][T18154] [ 990.283654][T18154] vpanic+0x56c/0xa60 [ 990.283684][T18154] ? __pfx_vpanic+0x10/0x10 [ 990.283707][T18154] ? __pfx___schedule+0x10/0x10 [ 990.283732][T18154] panic+0xc5/0xd0 [ 990.283755][T18154] ? __pfx_panic+0x10/0x10 [ 990.283780][T18154] ? preempt_schedule_common+0x82/0xd0 [ 990.283805][T18154] ? af_alg_pull_tsgl+0x1c6/0x740 [ 990.283831][T18154] check_panic_on_warn+0x89/0xb0 [ 990.283851][T18154] ? af_alg_pull_tsgl+0x1c6/0x740 [ 990.283876][T18154] end_report+0x73/0x180 [ 990.283898][T18154] ? af_alg_pull_tsgl+0x1c6/0x740 [ 990.283922][T18154] kasan_report+0x128/0x150 [ 990.283945][T18154] ? af_alg_pull_tsgl+0x1c6/0x740 [ 990.283973][T18154] af_alg_pull_tsgl+0x1c6/0x740 [ 990.284004][T18154] skcipher_recvmsg+0x5df/0x1140 [ 990.284030][T18154] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 990.284050][T18154] ? aa_sock_msg_perm+0xf1/0x1b0 [ 990.284076][T18154] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 990.284096][T18154] ? security_socket_recvmsg+0x7e/0x2c0 [ 990.284116][T18154] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 990.284144][T18154] sock_recvmsg+0x172/0x1b0 [ 990.284162][T18154] __sys_recvfrom+0x240/0x3c0 [ 990.284185][T18154] ? __pfx___sys_recvfrom+0x10/0x10 [ 990.284214][T18154] ? exc_page_fault+0x6a/0xc0 [ 990.284237][T18154] ? do_user_addr_fault+0xc6f/0x1340 [ 990.284266][T18154] __x64_sys_recvfrom+0xde/0x100 [ 990.284289][T18154] do_syscall_64+0x14d/0xf80 [ 990.284312][T18154] ? trace_irq_disable+0x3b/0x150 [ 990.284328][T18154] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.284346][T18154] ? clear_bhb_loop+0x40/0x90 [ 990.284366][T18154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.284384][T18154] RIP: 0033:0x7fa8b4b5d04e [ 990.284401][T18154] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 990.284417][T18154] RSP: 002b:00007fa8b5a19e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 990.284439][T18154] RAX: ffffffffffffffda RBX: 00007fa8b5a1b6c0 RCX: 00007fa8b4b5d04e [ 990.284454][T18154] RDX: 0000000000001000 RSI: 00007fa8b5a1a000 RDI: 0000000000000006 [ 990.284467][T18154] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 990.284478][T18154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 990.284490][T18154] R13: 00007fa8b5a19f58 R14: 00007fa8b5a1a000 R15: 0000000000000000 [ 990.284509][T18154] [ 990.287334][T18154] Kernel Offset: disabled