last executing test programs: 3m13.154407652s ago: executing program 3 (id=426): socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)}, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000000)={0xa, 0x100, 0x1, {0x6, 0x1000, 0x2, 0x86b}}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xee}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000240)={0x5, 0x0, [{0xffff2b63, 0x4, 0x0, 0x0, @irqchip={0x81c, 0x4}}, {0xfffffffb, 0x3, 0x1, 0x0, @irqchip={0x1006, 0x7f}}, {0x26, 0x3, 0x1, 0x0, @irqchip={0x6}}, {0x2, 0x5, 0x0, 0x0, @adapter={0x7fff, 0xfff, 0x1, 0x6943, 0x5}}, {0x8e, 0x2, 0x0, 0x0, @msi={0xdfe9, 0x1ba, 0x7, 0x9}}]}) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000040)='A', 0x1}], 0x1}, 0x400c0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000012c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee00}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x0, 0xa, 0xd0e0000, 0x138, 0x100, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0xffffff00, 0xff, 'wlan1\x00', 'veth1_to_team\x00', {}, {0xff}, 0x1, 0x3, 0x10}, 0x0, 0x98, 0x100, 0x0, {}, [@common=@icmp={{0x28}, {0x8, '\x00', 0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x0, 0x36, 0x1, 'snmp_trap\x00', 'syz1\x00', {0x5}}}}, {{@uncond, 0x3202, 0xd8, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@set={{0x40}, {{0xffffffffffffffff, [0x1, 0x2, 0x4, 0x0, 0x6, 0xc], 0x5, 0x7a19653e03c56032}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x10, 0x4, {0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f0000000200)=@filename='./file0\x00', r4, &(0x7f0000001500)) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000280000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142da7646c4fe02996b60cf81ebcd50fa9ea4308123f602000000000000de89e661168c1886d0d4d94f204e345c652fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762011052eac2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dc8aff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340a1c8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e4b9ec7a410ec42315255be1ed66d9051f22614d1f62734d679039a97d2b74f9e8e997ccd314000f747f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798ab20000000bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d2000000000000000819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a56a6d920335c8e8726fd8329d9a728995b1531bd20360d33d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c55969a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba84279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047050d7296cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5603a9d801300000000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed03a6fe7860b3e13c3173a60a1823cb7dde8212a8531bd9060000006a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d535556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a0000000000000001ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba0790ee0d112f99e59ba82e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee52303da186b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c44500f8ffff970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8f09c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c1b04e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305977eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f87204311327c18380fedf3d3dad8549f99bf6c5cb060fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39289f675f39d01719cdbab3f1ce1060f3e6806e774a5f079c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae794286b6c3e1f5a76b85ed6e1f0000c608b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) syz_clone(0x4029000, 0x0, 0x0, 0x0, 0x0, 0x0) write$sysctl(r6, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000010902"], 0x0) write$sysctl(r6, &(0x7f00000000c0)='2\x00', 0x2) 3m11.747457683s ago: executing program 0 (id=432): socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x32, 0x0, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) r0 = syz_io_uring_setup(0xf03, &(0x7f0000000240)={0x0, 0x4fbd, 0xc00, 0x0, 0x387}, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = socket$nl_crypto(0x10, 0x3, 0x15) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000a00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000780)={0x1cc, r6, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x9c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfe}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb}]}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xa980}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3bba}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}]}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xe0}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x481c}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NODE={0xc0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_ID={0xa2, 0x3, "e10c16d359bb589c2554b75e34b784e219bd0548092b45fe4477f246b70baadde0656bc227852148de75a3cf1ebed200701730c290b867f80ab90cafc555ceff8b9b825bae46c82aa567894ca64f79ac86d521c7dc587128a0be1877c5e685b89479212113dad37946272d700216b69372ed103947cdc0a515ce302b9c8701c9c6f19b44a3b755aaa1477bdf8b8d80aeca533550937fb97f42f54deb75b8"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7db}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x4000001}, 0x24000804) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0, 0x120, 0x0, {0x4}}) sendmsg$nl_crypto(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=@alg={0xe0, 0x10, 0x4, 0x70bd29, 0x25dfdbfe, {{'sha512-arm64\x00'}, '\x00', '\x00', 0x2000, 0x400}}, 0xe0}}, 0x4000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) io_uring_enter(r0, 0x1, 0x21, 0x1, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000140)=0x200000000) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f00000004c0)={{0xffffffffffffffff, &(0x7f0000000000)='-)^\x00', 0x101000, 0x0, 0x8, 0x0, 0x0}, 0x1, &(0x7f0000000480)=[{0x1, 0x9, &(0x7f0000000380)='\xaa\xaa\xaa\xaa\xaa', &(0x7f00000003c0)="7ca0924c396c3c7af6b28477025779dec0962f5f119690301702ef175c317bdc57a05c6fd34ecd0604fad9685b9d7c1e9520f63de0a670f3520a12e49c6c5c1b0ae71b50fcf2bf4aa0cd999d644e1f8915c61ecdc04a8edc1f1cb755ba5427ae59e595ce7d97ed17e49ed9a5deb02c9a1eeb5fc8ef7f500027a4810371253f392e399a4354c91ea31a70b21d788a9a8f496a36db5dc1272b39f83aae94b0418d01ba66be5cbe5072b5e197fd7703316334ed2b36fa98a188ed6f001b0c6f52", 0xbf, 0x38}]}) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000600), 0x6828, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$dir(0xffffffffffffff9c, 0x0, 0xc0040, 0x2c) getdents64(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCSKEYCODE(r8, 0x40084504, &(0x7f0000000140)=[0xf, 0x8]) 3m8.635654456s ago: executing program 0 (id=438): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000f00)=0x7) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000880)={0xc, 0x8, 0x144, {0x0}}, 0x10) r1 = syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001e0001000000", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r5, &(0x7f0000000cc0)={&(0x7f0000000740)=@nl=@proc, 0x80, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000008c0)=""/88, 0x58}, {&(0x7f0000000940)=""/129, 0x81}, {&(0x7f0000000a00)=""/177, 0xb1}, {&(0x7f0000000ac0)=""/34, 0x22}, {&(0x7f0000000b00)=""/74, 0x4a}], 0x6, &(0x7f0000000c00)=""/164, 0xa4}, 0x2100) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x9, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000140), 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x11a, 0x4, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000700)={&(0x7f0000006000)={[{&(0x7f0000000340)="9311752b2890525422e50a2620cb2b315ca7f8e5f9b088f9109602060581655da1e2a4bec8926f0acf54bee805773938137ac3ac4d2fcc65b79480f6da12ffef3519cf15c82a713330a76a1b2e1ac20cd625fe60496cfc2147b38d8f1f681657fd93edd030bc7d51be5e3876ac562a2e85a6d9af34606582317a3fdad576c96acdd55654895bab479031d19270c10a117fee0efce02c67a353484096cd85bb419a552efd60adb7962c78f5a109df388f59aff121b983d85102086c1e0efc64e15dc19b4db3c5b1b01f05dad1a35b7a821635c2ddc3e60075a05e4788525e6efa0aeb3993b0e02b3e145be8517155c24f0e82f73d5e", 0xf5}, {&(0x7f0000000280)="ccd5ee80db4890b98c599735bb812ea37cfcc67345e0d5eb0d59a5a0cf47bf0c", 0x20, 0x1}, {&(0x7f0000004300)="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", 0xff0, 0x2}, {&(0x7f0000000440)="300af27344a50195227146b8db1c7007628b1a676b869597658cebe124ceca282f2f0b61eb5fd4f118c294aaf8f932a7e0ea6030f9849a86a5aec097eba6013c21acd5ba18adf45482a3b7d4218c5422c80dcae805ecc3409a7e7b0d3b1013193ecddfc9e7c9ed6d36571cf11233ba5155aca3de98dd7fd18c742ec7a99af0129be917fbfc1f4af5460a0de577ccbd6fe7a6ca8581eeda02752b103a9f1bfb06e142eeb6040db577911d2e7a21b90c8e3197483c65e8b593906db93c42569cc61e166ad7ac740ca3c51e8bfc2695", 0xce, 0x2}, {&(0x7f0000000540)="8f646dcdf59a6c8f7cda182f03b6192af841432c66758f89e9305d8c743f4b58ab39cab8a7bbd61db9b3708df3c56ce3ca31e29ed8e4010215a78c9484209b6cd9d3bd97f9d64e378fc9c2cf406edf24cfb245ddc1289cf4640ede33ed05b5f028fdd6669dc4d9796489b6097f4e034586ee9bce3c92e9270adfd03e4d2600367f23beecd163b345269f86bbbdfc5778e8157d55a6cd0327d64071d74fce9fc8ba9a13ffd47055ab531c", 0xaa, 0x2}, {&(0x7f0000000640)="4d851546972f53e3086953b1f234292d31361a1a685ace8c95ebb435af78d45ff8383d2ad8433878de3030ef60e5d6a0cfdfa15119c94634e0505adff1249a4071d0e7ae8a137c8c3d9caf7b6c53cca792a698a8000cadbacd5f6ed5a221febc5183291d4042a79df5f94ef13a84cbf3c2473d7ecde349fdcde98aa9626a41fd2b781d63c3f8ee9c7b1a16504a96b75815d1", 0x92, 0x3}]}, 0x6}, 0x1) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000284000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0x124}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ptrace(0x10, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001380)={0xe8, r9, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0xc0, 0x8, 0x0, 0x1, [{0x84, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7b4326167f79726ecfae0aeee91d38ba88df91957e9dead91c7bebb4db027bf1"}, @WGPEER_A_ALLOWEDIPS={0x8, 0x9, 0x0, 0x1, [{0x4}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0x38, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7fff}, @WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_ALLOWEDIPS={0x4}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 3m8.196980507s ago: executing program 3 (id=440): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0xfc00, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0xb, 0xfc00}}, @ip_tos_u8={{0x11, 0x29, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x0) 3m7.998956269s ago: executing program 3 (id=441): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000000)="1c681411f7ab96c0dacc6a3c24465b016f64b4c00b5f7c691cb24cb8000000081a0000200000008ba3d747ab00", 0x0, 0x48) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xca100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x100000000, 0x0, 0x20, 0x0, 0x0, 0x2004c9, 0x7000, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x4000000000000004, 0x2], 0xffff1000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_io_uring_setup(0x4fe, &(0x7f00000001c0)={0x0, 0x6dd2, 0x4, 0x1, 0x1be}, &(0x7f0000000280)=0x0, &(0x7f00000002c0), &(0x7f0000000340)) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x40010, 0xffffffffffffffff, 0x0) r11 = mmap$IORING_OFF_SQES(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000010, 0xffffffffffffffff, 0x10000000) r12 = open$dir(&(0x7f0000000440)='./file0\x00', 0x6000, 0x1c) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f0000000500)=@IORING_OP_UNLINKAT={0x24, 0x10, 0x0, r12, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x200, 0x0, {0x0, r13}}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) r15 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x4, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r16 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r15, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r17, {0xffff, 0xc}, {}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004004) getsockopt$sock_buf(r0, 0x1, 0x1c, 0xffffffffffffffff, &(0x7f00000004c0)) 3m6.446800283s ago: executing program 3 (id=443): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r4, 0x0) ftruncate(r4, 0x51a9497) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000c58000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000d62000/0x3000)=nil) migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x9, &(0x7f0000000000)=0x102) ioctl$TIOCSETD(r4, 0x5423, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) r5 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$update(0x2, r5, &(0x7f0000000140)="aa", 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100)) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r6, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) 3m5.411037534s ago: executing program 1 (id=445): r0 = memfd_create(&(0x7f0000000000)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19\xe5\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKl\xcc\xa4:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xc3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) fallocate(r0, 0x0, 0x9, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) (fail_nth: 9) 3m4.900774662s ago: executing program 4 (id=447): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007980)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)}], 0x2}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="320e7bb18dff29d51137271b2c8231e9e40d2e7bb56322b03390fac78c2b1a354f35bc1328225e0a1ed6e3f411a48a53e9d34ceb7781a6fc9a2c31baefcb571a4434b48e4cfaaf1ebd3053828a0986777ca6c26a0336ffc41933594b775525df48ce100e67478ebcb59b3eeb15f372cd44a4739c1583c56907479f4cca62a7fb5d0303493f914b15ed3d7b209681a175576e0e2b3aac968188bd2e43384abcaff7f14d4c93", 0xa5}, {&(0x7f0000000880)="7035778905c2358b3ff9b75d1a3f836c8eb517894eeff6c3ee08f90b36b40ab65fe12942de6e899ac1c72c2b26cab39a23e073567e8b4f311f6f0ee91f1c21aaa91ec103706d8b0bb468babe142dc2fe14205b8b103eddb7dc4859df7a5435fb0ab98a9d090fda41c52411b0bc760b6395b38f4bb42e636f0e3cc18ea09098c449d270e9273c7f9b1ab34a93dc00f86fd9db692070cd76d050a18ecd11675465b23ad28cd927e5d819de8da2c0f7a116988133e822db0f855107e0fbf1f2f03b7036b252c56290a4eb70a44487c19c117db925981fc925b7c45967cdf3", 0xdd}, {&(0x7f00000002c0)="7c1a2d6c68f2b19af5ad5b3fbc13c1398f392d4e4912a47fd97c06e88e711432b971d95d781d72632d1369d5bc4db51e6dedbc9dd35219282a22db679e0734d6f64f608f7db61ee9dcba4b43f11d902fb9ba9566c7f94f39dbcae20665c5e1172a2ea6060acb92714a17ee6714dc06068795e0892d041d8c2f3559", 0x7b}, {&(0x7f0000000540)="08368fefde39d21623e23a9dd67b0c95a48022b4f407396964e4d1d2bcf1a7c71f16681007b08c6061a5a2e2aa144f9f9f3834323ffac830e41ec7ebe29248a7850257cedaaa8a54b1d65005dbd8fe4e86fc625d981ed8c6cd18", 0x5a}, {0x0}, {&(0x7f0000000780)="e4562c344990b6edfba22eb307933df7454c92ad4d6266de0c508ecec4d22f530e2327f8d8edf73c54257bfc7bb393243b5fcd5f56a49650811e03b2796eb019de5647a4ff4f117a3aae441e9826d45c4cfb9edb82ca009ecadf936755db280697d8fc0fc9a664186582b44242e82bd682a992b95c8724de45f89bb6fee4b7346cb39028e0ed564a02041ea3bfa729481fc09e9777c2b89a83243d8ce84822aed2848ec62dffdbafb6", 0xa9}, {&(0x7f0000000b40)="2aa89dcc6d20cf5a732764f89bf238658cba80614e317b8304dae54c36f6e447b2b6cc36779a2bc14605bdf8b1beccc5fde0f08e0363a89d728c719de27252ce4ddb980418e0a63877d1df377f63b485e06bcee092556dc841358902ec2c010d4a462bf625f1ebd1b56b45aaf5340b9298d866fae9ec13b1c4b5736e8e98b0f07466b5d9685ec2c7300d1f36371d565f1a439e", 0x93}], 0x7, &(0x7f0000000a80)=[@mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x801}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xa0}}], 0x78}}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000c40)="889b2b663bc52b998e5164ef592dd016e1a57453dcf4c7ad0ee309b7f112c5f4931298006989fa7e5be6bf9e896bd9c52dd43dca2d3958c359583f523996ecbf226f8178281c96c49f97d0c04dd75e3fb23a982399273b6ba5cae6abb65eef0747e5e47c3338cd58b073fc86bd355faf", 0x70}, {&(0x7f0000000d40)}, {0x0}, {&(0x7f0000000f00)="be5db51b6a872fdcd55b5177992aaef4ac57a21bd929bc23aa9ac7f23c14aa214728bc2d3f468e5501762a340223849c9abb8f7e8f27754900e84a", 0x3b}, {&(0x7f0000000f80)}, {&(0x7f0000000fc0)}], 0x6, &(0x7f00000010c0)}}, {{&(0x7f0000001380)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x80, 0x0}}, {{&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, 0xdbc2, 0x2}, 0x80, 0x0}}], 0x5, 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002dc0)=ANY=[], 0x570}}], 0x1, 0x810) (async, rerun: 32) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) (async, rerun: 32) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000f80)=ANY=[@ANYBLOB="280000002d00010029bd70000000000008000000", @ANYRESOCT=r1, @ANYBLOB="0a004dac06b695250ff7008000101e5787bc994327ac3c9682e33b74f2fce79938090309753f2a20557b91aec2ea73b28d8eb4d980bd18cc058c5722d75e869041b89a3c6b07a6aee426d9300ebde7b761e812f6c72b6f6429e8d2f9663339ca74"], 0x28}, {&(0x7f0000000e40)={0x88, 0x36, 0x200, 0x70bd2b, 0x25dfdbfc, "", [@typed={0x8, 0x90, 0x0, 0x0, @ipv4=@loopback}, @generic="fa651290fd6df44f550afbd12d5d0faed5a25182af551ae47df7548192e693fd44547af397056a70efb6fab90ad8963724870e1325eb233ddeeef73c9a86eb453f701beba9aac85cfcb7e2bf3e018b328627fc690b543c66ab43f7bc64f963f31a26d2eaa72c0b85dd723ec5cc4314"]}, 0x88}], 0x2, 0x0, 0x0, 0x2400c081}, 0x0) (async) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async, rerun: 32) modify_ldt$write(0x1, &(0x7f0000000a00)={0x9, 0x20000000, 0xffffffffffffffff, 0x1, 0x2, 0x1}, 0x10) (async, rerun: 32) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000dc0)="0f01c83e2e36366566400f38f85fe50f01cf660f01720066baf80cb8e603ca82eb66bafc0c66ed67baf80cb88ce3ff8cef66bafc0cec400f4c5fc9400f216fbb1b0800000f32420f01c9", 0x4a}], 0x1, 0x11, 0x0, 0x0) (async) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000040)="273eebfecb7c0e923301b61c42cb1d11f41d00bdab2a3d983b065a56", 0x1c}, {&(0x7f0000000140)="10eba9fdb4cbab48929e1af15100"/28, 0x1c}], 0x2) (async) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000280)=0x7f, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = socket$inet_udp(0x2, 0x2, 0x0) getsockname$inet(r9, &(0x7f0000000980)={0x2, 0x0, @empty}, &(0x7f00000009c0)=0x10) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="980000000002010cff000000000000000a00000104000180440003800c00028005000100210000002c00018014000300fe80000000000000000000000000002a14000400ff01000000000000000000000000000106000340000200003c0002802c00018014000300ff0200000000000000000000000000011400040000070000000000000000ffff7f0000010c000280050001"], 0x98}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) (async) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) (async) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r10, &(0x7f0000000500)={0xa, 0x4e24, 0x8, @mcast2, 0x7}, 0x1c) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000012000501b56a30f709ec44f1ec2395040132e8867aeb4a981ea1a966811b87910000ffdbdf250400190000000000b7103aece46527d05873928b62cea01187e8d0d0259a0b6a211c6c7c0c23d5d4b0cb3525bc897f0b6fc78d6b9f8146617c3eef9e1860882f35"], 0x18}, 0x1, 0x0, 0x0, 0x880}, 0x20040840) 3m4.783033851s ago: executing program 2 (id=448): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000000080)='+}\x00', &(0x7f0000000140)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x4000000}, 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0xfffffffb, 0x30, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) 3m4.68335684s ago: executing program 1 (id=449): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = open(&(0x7f0000000000)='./file0\x00', 0x2000, 0x34) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000040)={0xffffffffffffffff, 0x4, 0x3, 0x401, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x1f}, @local}, 0x10) connect$can_bcm(r0, &(0x7f0000000100), 0x10) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001140)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8001) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f00000002c0)={0x1, 0x0, &(0x7f0000000280)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r3, 0xc04064aa, &(0x7f00000003c0)={0x0, 0x0, r4}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300000000000b000100736f636b65740000080002400000000314"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x24, r2, 0x20, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x3}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 3m4.640402583s ago: executing program 4 (id=450): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x40d82, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002500010125bd7000fdffffff550000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x20004840}, 0x28000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20004840}, 0x28000) close(r0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4, {0x1}}, './file1\x00'}) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000300)={0xc}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r7, 0xfffffffd) r8 = accept4(r7, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) ioctl$sock_inet_sctp_SIOCINQ(r8, 0x541b, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r9}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="01000040000400000000000001000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000000100000004000040020300007b442856bfec870b"], 0x48}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x202, 0x19, {0x77359400}, {}, {}, 0x1, @can={{0x0, 0x1, 0x1, 0x1}, 0x4, 0x1, 0x0, 0x0, "4c86b8b1f25c1517"}}, 0x48}}, 0x40000) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x8) 3m4.592582588s ago: executing program 2 (id=451): openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000240)={0x101402, 0x85, 0x20}, 0x18) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) recvmmsg(r2, &(0x7f00000001c0), 0x440, 0x2020, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0002000001, 0xfa11, 0x3}, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000140)={'team0\x00', {0x2, 0x0, @local}}) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x107c83, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)="9c30", 0x2}], 0x1) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@getqdisc={0x3c, 0x26, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0x1}, {0x5, 0xffe0}, {0xf, 0xc}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008000000000000008000c100", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) r6 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) lseek(r6, 0x3, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000180)={0x8}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000578000/0x1000)=nil, 0x1000, 0xa, 0x100010, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) 3m4.410896321s ago: executing program 1 (id=452): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xb, 0x9}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=@newtfilter={0x314, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2e4, 0x2, [@TCA_BASIC_EMATCHES={0x2e0, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x2d4, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x84, 0x1, 0x0, 0x0, {{0xfa97}, [@TCA_EM_IPT_MATCH_DATA={0x76, 0x5, "6f54eb5ca0c9e8a9e85214a0dab31cec660730c9b04ee96726d6355ba210a4b66635cc5b34b9e2a941211facc678b09d886ef7ffee31b135cd2753f474c7c974ae6f261bb0cb73f68a7c421e6e8099ad0acbf902aba60c2b8ddd7fa96c4f2571ee9dba3fea83ca31d7a784a085548d484e86"}]}}, @TCF_EM_CONTAINER={0xfc, 0x1, 0x0, 0x0, {{0x49, 0x0, 0x81}, "ee9fa98036dbdc914b729acbfc1ca061e4fa55fe86d2d00d279b4feac61670320bf6110bdb27eca11c4eba702745fbc45b1c9f19589762da3cdcc8cedb50a3c4a347967244984271e11a9fa192d3bf5368c234ffabcd0a93ebb8f92857b6562c5560c21534b093ea7b5cd92ee66b1b1ce3c75a6fc23c252ba9bd7b116de21b6617d1a1b6ff1e7ec11ffec850d43463ffdd9ab663de2507108d43364b2a6e0eca8b0a756711d95dcb673f627133379633da3b6d63f7821281b483ea0e203f16d8c8e7e49cd2c8765118f1fd6ad858540b71349eaf2976c0c51e707a52597466008d052f35672c644126488926ca45"}}, @TCF_EM_META={0x84, 0x1, 0x0, 0x0, {{0x4, 0x4, 0x5}, [@TCA_EM_META_LVALUE={0x17, 0x2, [@TCF_META_TYPE_VAR="703620ba", @TCF_META_TYPE_VAR="22278ef743eead", @TCF_META_TYPE_VAR="bd1d579c3b2d8d67"]}, @TCA_EM_META_RVALUE={0x32, 0x3, [@TCF_META_TYPE_VAR="c42bd9a7e4001cc51f", @TCF_META_TYPE_VAR="9fc7788138b33791", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="7b9b7c0a2ef34f992e7f", @TCF_META_TYPE_VAR="d32992", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x21, 0x9, 0x2}, {0x1c0, 0x1, 0x2}}}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xca01, 0x1}, {0x8, 0x7, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7f, 0x4, 0x2}, {0xb, 0x4}}}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x800, 0x7, 0x80}, {{0x1, 0x1, 0x1, 0x1}, {0x1, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x7c, 0x3, 0x0, 0x0, {{0xe, 0x4, 0x8}, [@TCA_EM_META_LVALUE={0x22, 0x2, [@TCF_META_TYPE_VAR="fd400ad0e0e5a0", @TCF_META_TYPE_VAR="6d350e8d2f", @TCF_META_TYPE_VAR="46dcf8", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="a7", @TCF_META_TYPE_VAR="cc1a"]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_LVALUE={0xb, 0x2, [@TCF_META_TYPE_VAR="aa1a86", @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_RVALUE={0x1f, 0x3, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="b8548db81b", @TCF_META_TYPE_VAR="c2095be8d3d25fbb5d", @TCF_META_TYPE_VAR="dad3a88a", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR='?']}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0xe3, 0x1}, {0xfff, 0x99, 0x2}}}, @TCA_EM_META_RVALUE={0x4}]}}, @TCF_EM_META={0x10, 0x2, 0x0, 0x0, {{0x4, 0x4, 0x3}, [@TCA_EM_META_RVALUE={0x4}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x5, 0x8, 0x3}, {0x4, 0x5, 0x1}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xd4a4, 0x3, 0x95d}, {0x9, 0x2, 0x400, 0xff}}}]}]}]}}]}, 0x314}, 0x1, 0x0, 0x0, 0x20001091}, 0x0) 3m4.273003781s ago: executing program 0 (id=453): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$inet(0x2, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0x8}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0x2}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40080}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m4.225867725s ago: executing program 1 (id=454): socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)}, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000000)={0xa, 0x100, 0x1, {0x6, 0x1000, 0x2, 0x86b}}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xee}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000240)={0x5, 0x0, [{0xffff2b63, 0x4, 0x0, 0x0, @irqchip={0x81c, 0x4}}, {0xfffffffb, 0x3, 0x1, 0x0, @irqchip={0x1006, 0x7f}}, {0x26, 0x3, 0x1, 0x0, @irqchip={0x6}}, {0x2, 0x5, 0x0, 0x0, @adapter={0x7fff, 0xfff, 0x1, 0x6943, 0x5}}, {0x8e, 0x2, 0x0, 0x0, @msi={0xdfe9, 0x1ba, 0x7, 0x9}}]}) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000040)='A', 0x1}], 0x1}, 0x400c0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000012c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee00}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x0, 0xa, 0xd0e0000, 0x138, 0x100, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0xffffff00, 0xff, 'wlan1\x00', 'veth1_to_team\x00', {}, {0xff}, 0x1, 0x3, 0x10}, 0x0, 0x98, 0x100, 0x0, {}, [@common=@icmp={{0x28}, {0x8, '\x00', 0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x0, 0x36, 0x1, 'snmp_trap\x00', 'syz1\x00', {0x5}}}}, {{@uncond, 0x3202, 0xd8, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@set={{0x40}, {{0xffffffffffffffff, [0x1, 0x2, 0x4, 0x0, 0x6, 0xc], 0x5, 0x7a19653e03c56032}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x10, 0x4, {0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f0000000200)=@filename='./file0\x00', r4, &(0x7f0000001500)) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) syz_clone(0x4029000, 0x0, 0x0, 0x0, 0x0, 0x0) write$sysctl(r6, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a056300000000"], 0x0) write$sysctl(r6, &(0x7f00000000c0)='2\x00', 0x2) 3m3.465598787s ago: executing program 2 (id=455): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) 3m3.08864216s ago: executing program 0 (id=456): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000f00)=0x7) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000880)={0xc, 0x8, 0x144, {0x0}}, 0x10) r1 = syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001e0001000000", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r5, &(0x7f0000000cc0)={&(0x7f0000000740)=@nl=@proc, 0x80, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000008c0)=""/88, 0x58}, {&(0x7f0000000940)=""/129, 0x81}, {&(0x7f0000000a00)=""/177, 0xb1}, {&(0x7f0000000ac0)=""/34, 0x22}, {&(0x7f0000000b00)=""/74, 0x4a}], 0x6, &(0x7f0000000c00)=""/164, 0xa4}, 0x2100) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x9, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000140), 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x11a, 0x4, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000700)={&(0x7f0000006000)={[{&(0x7f0000000340)="9311752b2890525422e50a2620cb2b315ca7f8e5f9b088f9109602060581655da1e2a4bec8926f0acf54bee805773938137ac3ac4d2fcc65b79480f6da12ffef3519cf15c82a713330a76a1b2e1ac20cd625fe60496cfc2147b38d8f1f681657fd93edd030bc7d51be5e3876ac562a2e85a6d9af34606582317a3fdad576c96acdd55654895bab479031d19270c10a117fee0efce02c67a353484096cd85bb419a552efd60adb7962c78f5a109df388f59aff121b983d85102086c1e0efc64e15dc19b4db3c5b1b01f05dad1a35b7a821635c2ddc3e60075a05e4788525e6efa0aeb3993b0e02b3e145be8517155c24f0e82f73d5e", 0xf5}, {&(0x7f0000000280)="ccd5ee80db4890b98c599735bb812ea37cfcc67345e0d5eb0d59a5a0cf47bf0c", 0x20, 0x1}, {&(0x7f0000004300)="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", 0xff0, 0x2}, {&(0x7f0000000440)="300af27344a50195227146b8db1c7007628b1a676b869597658cebe124ceca282f2f0b61eb5fd4f118c294aaf8f932a7e0ea6030f9849a86a5aec097eba6013c21acd5ba18adf45482a3b7d4218c5422c80dcae805ecc3409a7e7b0d3b1013193ecddfc9e7c9ed6d36571cf11233ba5155aca3de98dd7fd18c742ec7a99af0129be917fbfc1f4af5460a0de577ccbd6fe7a6ca8581eeda02752b103a9f1bfb06e142eeb6040db577911d2e7a21b90c8e3197483c65e8b593906db93c42569cc61e166ad7ac740ca3c51e8bfc2695", 0xce, 0x2}, {&(0x7f0000000540)="8f646dcdf59a6c8f7cda182f03b6192af841432c66758f89e9305d8c743f4b58ab39cab8a7bbd61db9b3708df3c56ce3ca31e29ed8e4010215a78c9484209b6cd9d3bd97f9d64e378fc9c2cf406edf24cfb245ddc1289cf4640ede33ed05b5f028fdd6669dc4d9796489b6097f4e034586ee9bce3c92e9270adfd03e4d2600367f23beecd163b345269f86bbbdfc5778e8157d55a6cd0327d64071d74fce9fc8ba9a13ffd47055ab531c", 0xaa, 0x2}, {&(0x7f0000000640)="4d851546972f53e3086953b1f234292d31361a1a685ace8c95ebb435af78d45ff8383d2ad8433878de3030ef60e5d6a0cfdfa15119c94634e0505adff1249a4071d0e7ae8a137c8c3d9caf7b6c53cca792a698a8000cadbacd5f6ed5a221febc5183291d4042a79df5f94ef13a84cbf3c2473d7ecde349fdcde98aa9626a41fd2b781d63c3f8ee9c7b1a16504a96b75815d1", 0x92, 0x3}]}, 0x6}, 0x1) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000284000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0x124}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ptrace(0x10, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001380)={0xe8, r9, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0xc0, 0x8, 0x0, 0x1, [{0x84, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7b4326167f79726ecfae0aeee91d38ba88df91957e9dead91c7bebb4db027bf1"}, @WGPEER_A_ALLOWEDIPS={0x8, 0x9, 0x0, 0x1, [{0x4}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0x38, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7fff}, @WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_ALLOWEDIPS={0x4}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 3m3.087275278s ago: executing program 2 (id=457): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4c810}, 0x24000000) (async) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) r2 = syz_io_uring_setup(0xf02, &(0x7f0000002100)={0x0, 0x191e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000020c0)=0x0) socket$kcm(0x10, 0x2, 0x4) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f0000000040)=ANY=[], 0x28) (async) sendto$inet6(r6, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c) (async) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x541}, 0x1}) semctl$IPC_INFO(0x0, 0x1, 0x3, &(0x7f00000004c0)=""/201) (async) io_uring_enter(r2, 0xf, 0x7929, 0x1, 0x0, 0x0) 3m2.935992018s ago: executing program 3 (id=458): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="00000c000000eaff01"], 0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/profiling', 0x101a02, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000040)={0x9, 0x5, 0x9000, 0x5}) copy_file_range(r1, &(0x7f0000000000)=0x7, r1, 0x0, 0x7, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000000}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x7d}, 0xff03}], 0x4000070, 0x8000) recvmmsg(r4, &(0x7f00000004c0)=[{{&(0x7f0000000080)=@tipc, 0x80, &(0x7f0000000480)=[{&(0x7f0000000140)=""/26, 0x1a}, {&(0x7f0000000380)=""/205, 0xcd}], 0x2}, 0x8000}], 0x1, 0x40012021, &(0x7f0000000500)) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB='#\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0}) 3m1.790428625s ago: executing program 4 (id=459): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8fe0000000094080000000f1700638af0ff000000001fa900000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000001000000b703000008000000850000001900000095"], &(0x7f0000005d80)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 3m1.651001426s ago: executing program 2 (id=460): r0 = memfd_create(&(0x7f0000000000)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19\xe5\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKl\xcc\xa4:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xc3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) fallocate(r0, 0x0, 0x9, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) (fail_nth: 10) 3m1.489165614s ago: executing program 4 (id=461): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x48, 0x10, 0x439, 0x0, 0x5fffd, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x30}}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x1fe}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20044080}, 0x8000000) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x48, 0x10, 0x439, 0x0, 0x5fffd, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x30}}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x1fe}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20044080}, 0x8000000) 3m0.878801872s ago: executing program 4 (id=462): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='tunl0\x00', 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007bd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@delchain={0x54, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x2c}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0xb}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) 3m0.534631008s ago: executing program 2 (id=463): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000053c0)=@deltfilter={0x24, 0x2d, 0x10, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x4}, {0xfff1, 0xfff3}, {0xfff3, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x4, {0x9, @pix_mp={0x12, 0x5be7, 0xb5315258, 0x6, 0xb, [{0x80000004, 0x7}, {0x7ff, 0x5}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r5, &(0x7f0000000280)=ANY=[], 0xff2e) ioctl$TCFLSH(r5, 0x540b, 0x1) r6 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@getstat={0xe0, 0x15, 0x1, 0x70bd28, 0x25dfdbfd, {{'cryptd(ecb-aes-neon)\x00'}, '\x00', '\x00', 0x2000, 0x2000}}, 0xe0}, 0x1, 0x0, 0x0, 0xc000}, 0x20040000) syncfs(r5) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28182, 0x0) ioctl$AUTOFS_IOC_FAIL(r7, 0x4c80, 0xffffffffffffffb6) syz_80211_inject_frame(&(0x7f0000018780)=@device_b, &(0x7f00000187c0)=ANY=[@ANYBLOB="94000a0008021100000108021100000001b03000366514b371965c2e67dc6d1fe1b828818312969b693eaf1feca75d0bea4f5b313b48c8c4bec4099ea1b228d5972691e78beef4d01b608b1979015b5000b75f622539a8d4a80a290cc418d097742b5d52fe41c1bd9f85d405bdd4a2d519e7e4ebad903d3e100825fedc33a8bafc7b9c455455b43722174c390dd93affce9813b2"], 0x94) 2m59.671701363s ago: executing program 1 (id=464): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xb, 0x9}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=@newtfilter={0x314, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2e4, 0x2, [@TCA_BASIC_EMATCHES={0x2e0, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x2d4, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x84, 0x1, 0x0, 0x0, {{0xfa97}, [@TCA_EM_IPT_MATCH_DATA={0x76, 0x5, "6f54eb5ca0c9e8a9e85214a0dab31cec660730c9b04ee96726d6355ba210a4b66635cc5b34b9e2a941211facc678b09d886ef7ffee31b135cd2753f474c7c974ae6f261bb0cb73f68a7c421e6e8099ad0acbf902aba60c2b8ddd7fa96c4f2571ee9dba3fea83ca31d7a784a085548d484e86"}]}}, @TCF_EM_CONTAINER={0xfc, 0x1, 0x0, 0x0, {{0x49, 0x0, 0x81}, "ee9fa98036dbdc914b729acbfc1ca061e4fa55fe86d2d00d279b4feac61670320bf6110bdb27eca11c4eba702745fbc45b1c9f19589762da3cdcc8cedb50a3c4a347967244984271e11a9fa192d3bf5368c234ffabcd0a93ebb8f92857b6562c5560c21534b093ea7b5cd92ee66b1b1ce3c75a6fc23c252ba9bd7b116de21b6617d1a1b6ff1e7ec11ffec850d43463ffdd9ab663de2507108d43364b2a6e0eca8b0a756711d95dcb673f627133379633da3b6d63f7821281b483ea0e203f16d8c8e7e49cd2c8765118f1fd6ad858540b71349eaf2976c0c51e707a52597466008d052f35672c644126488926ca45"}}, @TCF_EM_META={0x84, 0x1, 0x0, 0x0, {{0x4, 0x4, 0x5}, [@TCA_EM_META_LVALUE={0x17, 0x2, [@TCF_META_TYPE_VAR="703620ba", @TCF_META_TYPE_VAR="22278ef743eead", @TCF_META_TYPE_VAR="bd1d579c3b2d8d67"]}, @TCA_EM_META_RVALUE={0x32, 0x3, [@TCF_META_TYPE_VAR="c42bd9a7e4001cc51f", @TCF_META_TYPE_VAR="9fc7788138b33791", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="7b9b7c0a2ef34f992e7f", @TCF_META_TYPE_VAR="d32992", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x21, 0x9, 0x2}, {0x1c0, 0x1, 0x2}}}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xca01, 0x1}, {0x8, 0x7, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7f, 0x4, 0x2}, {0xb, 0x4}}}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x800, 0x7, 0x80}, {{0x1, 0x1, 0x1, 0x1}, {0x1, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x7c, 0x3, 0x0, 0x0, {{0xe, 0x4, 0x8}, [@TCA_EM_META_LVALUE={0x22, 0x2, [@TCF_META_TYPE_VAR="fd400ad0e0e5a0", @TCF_META_TYPE_VAR="6d350e8d2f", @TCF_META_TYPE_VAR="46dcf8", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="a7", @TCF_META_TYPE_VAR="cc1a"]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_RVALUE={0x1f, 0x3, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="b8548db81b", @TCF_META_TYPE_VAR="c2095be8d3d25fbb5d", @TCF_META_TYPE_VAR="dad3a88a", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR='?']}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0xe3, 0x1}, {0xfff, 0x99, 0x2}}}, @TCA_EM_META_RVALUE={0x4}]}}, @TCF_EM_META={0x10, 0x2, 0x0, 0x0, {{0x4, 0x4, 0x3}, [@TCA_EM_META_RVALUE={0x4}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x5, 0x8, 0x3}, {0x4, 0x5, 0x1}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xd4a4, 0x3, 0x95d}, {0x9, 0x2, 0x400, 0xff}}}]}]}]}}]}, 0x314}, 0x1, 0x0, 0x0, 0x20001091}, 0x0) 2m59.334512558s ago: executing program 1 (id=465): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = timerfd_create(0x7, 0x0) timerfd_settime(r1, 0x1, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='dctcp', 0x5) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000400)="02", 0x1, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r2, 0x200204) syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500003c0000000000069078ac1414bbac1414aa00004e22", @ANYRES32, @ANYRES32=0x41424344, @ANYRESHEX=0x0], 0x0) r3 = socket$inet6(0x10, 0x2, 0x4) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000380)=ANY=[], 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) read$FUSE(r4, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000280)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r4, 0xc02064cc, &(0x7f00000004c0)={r9, 0x0, 0xacf, 0x2, 0x3}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r4, 0xc01864cd, &(0x7f0000000480)={&(0x7f0000000400)=[r6, 0x0, r7, r8, r9, 0x0, 0x0, r10], &(0x7f0000000440)=[0xe76, 0x62, 0x8, 0x1, 0x8], 0x8}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000280)={r10}) sendto$inet6(r3, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) r11 = accept4(r0, 0x0, &(0x7f0000000040), 0x81000) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r13, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r12], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r11, &(0x7f0000000180)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="000226bd700d000600000000000000577e000000000008002b0000000000050037000000000008003b00030000000000000000", @ANYRESHEX=r5, @ANYRES32=r3, @ANYRES16=0x0], 0x40}}, 0x20000000) 2m59.210867689s ago: executing program 4 (id=466): socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x70bd29, 0xfffffffd, {0x0, 0x0, 0x12, 0x0, {}, {0xe, 0xd}, {0xd}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004001}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x4000010) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0003230c1100"}) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000250091"], 0xfe33) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2431}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r4 = syz_open_procfs(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfe, {{@in=@broadcast, @in=@local, 0x0, 0x0, 0x4e25, 0x0, 0x2, 0x0, 0x20, 0x33}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2}}, 0xb8}}, 0x0) r7 = socket(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f0000000100)={0xa, r4, 0x29, {0x52f78a5, 0x5}, 0x1}, 0x1) bind$inet(r7, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) sendto$inet(r7, 0x0, 0x17, 0x48890, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000006c0)={0x2, &(0x7f0000000100)=[{0x80, 0x0, 0x2, 0xfffffffe}, {0x6}]}) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0xbe05f0c56415d815}, 0x80) 2m58.831027256s ago: executing program 0 (id=467): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) 2m58.546131773s ago: executing program 0 (id=468): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000)={0x7, 0x5, 0x4, 0x20, 0x80, 0x6, 0xd, 0x7, 0x2, 0x31, 0xa2, 0xb, 0x81, 0x84}, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000001080)={0x13, &(0x7f0000000280)=[{0x28, '\x00', @st={0x4, [{0x2, @svalue=0xf}, {0x0, @uvalue=0x1ff}, {0x2, @svalue=0x2a800}, {0x2, @svalue=0xde}]}, 0x8}]}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r5, 0x20) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='bic', 0x3) shutdown(r5, 0x300000000000000) r6 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000000)=@t={0x4, 0x8, 0x1, 0x2}) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20001002, 0x0, 0x111, 0xa}}, 0x20) prlimit64(0x0, 0xb, &(0x7f0000000180)={0x3, 0xffffffffffffffff}, &(0x7f0000000440)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}, {0xa, 0x0, 0x9, @mcast1}}}, 0x38) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/50, 0x32, 0x20000000000040) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r7, r7, 0x0, 0x200000) sendto$inet6(r1, &(0x7f0000000500)="a4", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x400, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@dev, @in=@loopback}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f0000000040)=0xe8) close(r1) r8 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x4000104) readv(r8, &(0x7f0000001540), 0x0) 2m58.306748618s ago: executing program 3 (id=469): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x40d82, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002500010125bd7000fdffffff550000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x20004840}, 0x28000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20004840}, 0x28000) close(r0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4, {0x1}}, './file1\x00'}) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000300)={0xc}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r7, 0xfffffffd) r8 = accept4(r7, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) ioctl$sock_inet_sctp_SIOCINQ(r8, 0x541b, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r9}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="01000040000400000000000001000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000000100000004000040020300007b442856bfec870b"], 0x48}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x202, 0x19, {0x77359400}, {}, {}, 0x1, @can={{0x0, 0x1, 0x1, 0x1}, 0x4, 0x1, 0x0, 0x0, "4c86b8b1f25c1517"}}, 0x48}}, 0x40000) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x8) 0s ago: executing program 32 (id=468): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000)={0x7, 0x5, 0x4, 0x20, 0x80, 0x6, 0xd, 0x7, 0x2, 0x31, 0xa2, 0xb, 0x81, 0x84}, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000001080)={0x13, &(0x7f0000000280)=[{0x28, '\x00', @st={0x4, [{0x2, @svalue=0xf}, {0x0, @uvalue=0x1ff}, {0x2, @svalue=0x2a800}, {0x2, @svalue=0xde}]}, 0x8}]}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r5, 0x20) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='bic', 0x3) shutdown(r5, 0x300000000000000) r6 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000000)=@t={0x4, 0x8, 0x1, 0x2}) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20001002, 0x0, 0x111, 0xa}}, 0x20) prlimit64(0x0, 0xb, &(0x7f0000000180)={0x3, 0xffffffffffffffff}, &(0x7f0000000440)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}, {0xa, 0x0, 0x9, @mcast1}}}, 0x38) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/50, 0x32, 0x20000000000040) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r7, r7, 0x0, 0x200000) sendto$inet6(r1, &(0x7f0000000500)="a4", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x400, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@dev, @in=@loopback}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f0000000040)=0xe8) close(r1) r8 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x4000104) readv(r8, &(0x7f0000001540), 0x0) kernel console output (not intermixed with test programs): ek 2-1:166.177: USB Mass Storage device detected [ 81.190849][ T126] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 81.205028][ T126] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 81.220328][ T5931] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 81.232158][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 81.242226][ T987] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 81.252926][ T5931] usb 4-1: Product: syz [ 81.257404][ T5931] usb 4-1: SerialNumber: syz [ 81.263065][ T126] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 81.272225][ T126] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 81.285253][ T126] usb 3-1: Product: syz [ 81.290922][ T5931] usb 4-1: config 0 descriptor?? [ 81.298576][ T126] usb 3-1: SerialNumber: syz [ 81.317494][ T126] usb 3-1: config 0 descriptor?? [ 81.327000][ T5931] cm109 4-1:0.8: invalid payload size 1024, expected 4 [ 81.363126][ T5888] ums-realtek 2-1:166.34: USB Mass Storage device detected [ 81.363737][ T126] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 81.404598][ T5931] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input5 [ 81.418656][ T987] usb 5-1: Using ep0 maxpacket: 8 [ 81.445412][ T987] usb 5-1: unable to get BOS descriptor or descriptor too short [ 81.455404][ T126] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input6 [ 81.484334][ T987] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 81.524741][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 81.533840][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 81.541731][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 81.549240][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 81.556480][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 81.563754][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 81.573230][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 81.580515][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 81.580737][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 81.580947][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 81.583419][ T5931] usb 4-1: USB disconnect, device number 2 [ 81.590381][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 81.629069][ T987] usb 5-1: can't read configurations, error -61 [ 81.666294][ T5888] ums-realtek 2-1:166.34: probe with driver ums-realtek failed with error -5 [ 81.670185][ T987] usb usb5-port1: attempt power cycle [ 81.684969][ T5888] uvcvideo 2-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 81.685012][ T5888] uvcvideo 2-1:166.34: No valid video chain found. [ 81.738065][ T5888] usb 2-1: USB disconnect, device number 2 [ 81.817503][ T5148] Bluetooth: hci1: command tx timeout [ 81.817542][ T5839] Bluetooth: hci0: command tx timeout [ 81.817553][ T5148] Bluetooth: hci2: command tx timeout [ 81.817567][ T5839] Bluetooth: hci3: command tx timeout [ 81.819352][ T5832] Bluetooth: hci4: command tx timeout [ 81.860172][ T5931] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 82.020195][ T987] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 82.046033][ T987] usb 5-1: Using ep0 maxpacket: 8 [ 82.051595][ T987] usb 5-1: unable to get BOS descriptor or descriptor too short [ 82.059228][ T987] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 82.059289][ T987] usb 5-1: can't read configurations, error -61 [ 82.110636][ T5965] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 82.231199][ T987] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 82.252093][ T987] usb 5-1: Using ep0 maxpacket: 8 [ 82.254853][ T987] usb 5-1: unable to get BOS descriptor or descriptor too short [ 82.265076][ T987] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 82.265133][ T987] usb 5-1: can't read configurations, error -61 [ 82.265383][ T987] usb usb5-port1: unable to enumerate USB device [ 82.312306][ T5969] netlink: 96 bytes leftover after parsing attributes in process `syz.0.11'. [ 82.606561][ T5965] binder: 5934:5965 ioctl c0306201 2000000003c0 returned -14 [ 82.980538][ T5931] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 83.140614][ T5931] usb 2-1: Using ep0 maxpacket: 8 [ 83.149927][ T5931] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 83.164205][ T5931] usb 2-1: config 0 has no interface number 0 [ 83.176700][ T5931] usb 2-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 83.199691][ T5931] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 83.223255][ T5931] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 83.241610][ T5931] usb 2-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.cb [ 83.257990][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.284138][ T5931] usb 2-1: config 0 descriptor?? [ 83.313793][ T5931] hso 2-1:0.1: Failed to find BULK eps [ 83.533757][ T5931] usb 2-1: USB disconnect, device number 3 [ 83.712390][ T5987] netlink: 'syz.4.17': attribute type 8 has an invalid length. [ 83.839744][ T9] usb 3-1: USB disconnect, device number 2 [ 83.839816][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 83.900721][ T9] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 84.005313][ T5992] tipc: Started in network mode [ 84.018050][ T5992] tipc: Node identity b66bac0d084d, cluster identity 4711 [ 84.032901][ T5992] tipc: Enabled bearer , priority 0 [ 84.063341][ T5992] syzkaller0: entered promiscuous mode [ 84.092480][ T5992] syzkaller0: entered allmulticast mode [ 84.115993][ T5992] tipc: Resetting bearer [ 84.129603][ T5991] tipc: Resetting bearer [ 84.189069][ T5991] tipc: Disabling bearer [ 84.218345][ T5994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19'. [ 84.238270][ T5994] netlink: 24 bytes leftover after parsing attributes in process `syz.3.19'. [ 84.285904][ T5994] netlink: 'syz.3.19': attribute type 4 has an invalid length. [ 84.303981][ T5994] netlink: 152 bytes leftover after parsing attributes in process `syz.3.19'. [ 84.355584][ T5994] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 84.740254][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 84.900665][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 84.926827][ T24] usb 3-1: config 166 has an invalid interface number: 177 but max is 1 [ 84.949482][ T24] usb 3-1: config 166 has an invalid interface number: 34 but max is 1 [ 84.988271][ T24] usb 3-1: config 166 has no interface number 0 [ 85.002362][ T24] usb 3-1: config 166 has no interface number 1 [ 85.008970][ T24] usb 3-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 85.034048][ T24] usb 3-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 85.049892][ T24] usb 3-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 85.053757][ T6013] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 85.085832][ T24] usb 3-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 85.128471][ T24] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 85.145100][ T24] usb 3-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 85.158307][ T24] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 85.176526][ T24] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 85.187367][ T24] usb 3-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 85.202640][ T24] usb 3-1: config 166 interface 177 has no altsetting 0 [ 85.210336][ T987] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 85.285336][ T24] usb 3-1: config 166 interface 34 has no altsetting 0 [ 85.297389][ T24] usb 3-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 85.308025][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.317664][ T24] usb 3-1: Product: syz [ 85.324121][ T24] usb 3-1: Manufacturer: syz [ 85.328881][ T24] usb 3-1: SerialNumber: syz [ 85.391357][ T987] usb 1-1: config 0 has no interfaces? [ 85.397065][ T987] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 85.406705][ T987] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.451442][ T987] usb 1-1: config 0 descriptor?? [ 85.555055][ T24] ums-realtek 3-1:166.177: USB Mass Storage device detected [ 85.762886][ T24] ums-realtek 3-1:166.34: USB Mass Storage device detected [ 85.827547][ T24] ums-realtek 3-1:166.34: probe with driver ums-realtek failed with error -5 [ 85.856530][ T24] uvcvideo 3-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 85.871401][ T24] uvcvideo 3-1:166.34: No valid video chain found. [ 85.913149][ T24] usb 3-1: USB disconnect, device number 3 [ 86.662841][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 86.683177][ T6036] netlink: 16 bytes leftover after parsing attributes in process `syz.1.28'. [ 86.790772][ T10] cfg80211: failed to load regulatory.db [ 86.832705][ T9] usb 3-1: device descriptor read/64, error -71 [ 87.070150][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 87.080436][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 87.210134][ T9] usb 3-1: device descriptor read/64, error -71 [ 87.241889][ T10] usb 4-1: config 171 has an invalid interface number: 109 but max is 0 [ 87.267461][ T10] usb 4-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 87.286531][ T10] usb 4-1: config 171 has no interface number 0 [ 87.298684][ T10] usb 4-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 87.316781][ T10] usb 4-1: config 171 interface 109 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 87.336181][ T9] usb usb3-port1: attempt power cycle [ 87.357660][ T10] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 87.372438][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.386771][ T10] usb 4-1: Product: syz [ 87.394081][ T10] usb 4-1: Manufacturer: syz [ 87.402154][ T10] usb 4-1: SerialNumber: syz [ 87.424026][ T6038] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 87.680393][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 87.730953][ T9] usb 3-1: device descriptor read/8, error -71 [ 87.945413][ T5888] usb 1-1: USB disconnect, device number 2 [ 87.992701][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 88.041982][ T9] usb 3-1: device descriptor read/8, error -71 [ 88.100847][ T6046] netlink: 'syz.4.31': attribute type 8 has an invalid length. [ 88.149508][ T6048] tipc: Started in network mode [ 88.161129][ T6048] tipc: Node identity 26631055844b, cluster identity 4711 [ 88.180021][ T6048] tipc: Enabled bearer , priority 0 [ 88.188423][ T9] usb usb3-port1: unable to enumerate USB device [ 88.208593][ T6049] syzkaller0: entered promiscuous mode [ 88.227887][ T6049] syzkaller0: entered allmulticast mode [ 88.283986][ T6048] tipc: Resetting bearer [ 88.332959][ T6047] tipc: Resetting bearer [ 88.383697][ T6047] tipc: Disabling bearer [ 88.429701][ T6052] capability: warning: `syz.1.33' uses deprecated v2 capabilities in a way that may be insecure [ 88.530837][ T10] ath6kl: Failed to submit usb control message: -110 [ 88.543021][ T10] ath6kl: unable to send the bmi data to the device: -110 [ 88.566328][ T10] ath6kl: Unable to send get target info: -110 [ 88.582820][ T10] ath6kl: Failed to init ath6kl core: -110 [ 88.614761][ T10] ath6kl_usb 4-1:171.109: probe with driver ath6kl_usb failed with error -110 [ 88.625852][ T6055] loop5: detected capacity change from 0 to 7 [ 88.650207][ T6055] Dev loop5: unable to read RDB block 7 [ 88.657673][ T6055] loop5: unable to read partition table [ 88.665270][ T6055] loop5: partition table beyond EOD, truncated [ 88.682045][ T6055] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 89.171527][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 89.270218][ T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 89.334454][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 89.345940][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.356784][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 89.367027][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 89.383098][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 89.392698][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.401165][ T10] usb 1-1: Product: syz [ 89.405371][ T10] usb 1-1: Manufacturer: syz [ 89.409980][ T10] usb 1-1: SerialNumber: syz [ 89.440133][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 89.457610][ T24] usb 5-1: config 166 has an invalid interface number: 177 but max is 1 [ 89.478513][ T24] usb 5-1: config 166 has an invalid interface number: 34 but max is 1 [ 89.493815][ T24] usb 5-1: config 166 has no interface number 0 [ 89.511915][ T24] usb 5-1: config 166 has no interface number 1 [ 89.531711][ T24] usb 5-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 89.555418][ T24] usb 5-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 89.580354][ T24] usb 5-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 89.600199][ T24] usb 5-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 89.612168][ T24] usb 5-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 89.625610][ T24] usb 5-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 89.659555][ T24] usb 5-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 89.675093][ T24] usb 5-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 89.690608][ T24] usb 5-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 89.703950][ T24] usb 5-1: config 166 interface 177 has no altsetting 0 [ 89.711725][ T24] usb 5-1: config 166 interface 34 has no altsetting 0 [ 89.725305][ T24] usb 5-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 89.743569][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.751720][ T24] usb 5-1: Product: syz [ 89.755897][ T24] usb 5-1: Manufacturer: syz [ 89.761185][ T24] usb 5-1: SerialNumber: syz [ 89.761876][ T5888] usb 4-1: USB disconnect, device number 3 [ 89.991333][ T24] ums-realtek 5-1:166.177: USB Mass Storage device detected [ 90.175905][ T6070] mmap: syz.2.40 (6070) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 90.212068][ T24] ums-realtek 5-1:166.34: USB Mass Storage device detected [ 90.295314][ T24] ums-realtek 5-1:166.34: probe with driver ums-realtek failed with error -5 [ 90.344388][ T24] uvcvideo 5-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 90.361519][ T24] uvcvideo 5-1:166.34: No valid video chain found. [ 90.394976][ T24] usb 5-1: USB disconnect, device number 6 [ 90.473479][ T6083] netlink: 228 bytes leftover after parsing attributes in process `syz.2.42'. [ 90.516833][ T6087] netlink: 36 bytes leftover after parsing attributes in process `syz.3.39'. [ 90.633047][ T6091] tipc: Enabled bearer , priority 0 [ 90.645463][ T6091] syzkaller0: entered promiscuous mode [ 90.651798][ T6091] syzkaller0: entered allmulticast mode [ 90.674796][ T6091] tipc: Resetting bearer [ 90.685386][ T6089] tipc: Resetting bearer [ 90.703379][ T6089] tipc: Disabling bearer [ 90.857114][ T6095] netlink: 'syz.0.45': attribute type 8 has an invalid length. [ 91.140551][ T24] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 91.300330][ T987] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 91.315924][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 91.353419][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 91.417315][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 91.451967][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 91.480147][ T987] usb 5-1: Using ep0 maxpacket: 32 [ 91.507869][ T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 91.538399][ T987] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 91.551930][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.567608][ T987] usb 5-1: config 0 has no interface number 0 [ 91.589984][ T987] usb 5-1: config 0 interface 184 has no altsetting 0 [ 91.616053][ T24] usb 3-1: config 0 descriptor?? [ 91.647216][ T987] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 91.664524][ T6113] process 'syz.0.50' launched './file0' with NULL argv: empty string added [ 91.679033][ T987] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.725140][ T987] usb 5-1: Product: syz [ 91.754517][ T987] usb 5-1: Manufacturer: syz [ 91.775346][ T987] usb 5-1: SerialNumber: syz [ 91.796542][ T6115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.817052][ T987] usb 5-1: config 0 descriptor?? [ 91.854334][ T6115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.219003][ T24] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 92.362299][ T987] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 92.403616][ T987] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 92.426209][ T987] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 92.452307][ T987] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -61 [ 92.550159][ T5888] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 92.721746][ T5888] usb 2-1: Using ep0 maxpacket: 32 [ 92.737334][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 12336, setting to 1024 [ 92.782133][ T5888] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 92.813395][ T5888] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 92.832697][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 92.843740][ T5888] usb 2-1: Product: syz [ 92.847986][ T5888] usb 2-1: Manufacturer: syz [ 92.867708][ T5888] usb 2-1: SerialNumber: syz [ 92.895149][ T5888] usb 2-1: config 0 descriptor?? [ 92.905681][ T6122] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 93.128136][ T5888] usb 2-1: USB disconnect, device number 4 [ 93.191899][ T6128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.216405][ T6128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.245605][ T5832] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 93.569202][ T5888] usb 3-1: USB disconnect, device number 8 [ 93.651686][ T987] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 93.824681][ T987] usb 4-1: unable to get BOS descriptor or descriptor too short [ 93.846881][ T987] usb 4-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 93.871470][ T987] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.883297][ T987] usb 4-1: Product: syz [ 93.888913][ T987] usb 4-1: Manufacturer: syz [ 93.894451][ T6134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.904501][ T6134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.912675][ T987] usb 4-1: SerialNumber: syz [ 93.958026][ T9] usb 5-1: USB disconnect, device number 7 [ 93.982720][ T5888] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 94.045729][ T6136] loop5: detected capacity change from 0 to 7 [ 94.055662][ T6136] Dev loop5: unable to read RDB block 7 [ 94.062221][ T6136] loop5: unable to read partition table [ 94.068496][ T6136] loop5: partition table beyond EOD, truncated [ 94.075719][ T6136] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 94.147477][ T5888] usb 3-1: Using ep0 maxpacket: 16 [ 94.165972][ T5888] usb 3-1: config 166 has an invalid interface number: 177 but max is 1 [ 94.201778][ T5888] usb 3-1: config 166 has an invalid interface number: 34 but max is 1 [ 94.232378][ T5888] usb 3-1: config 166 has no interface number 0 [ 94.250438][ T5888] usb 3-1: config 166 has no interface number 1 [ 94.266354][ T5888] usb 3-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 94.284390][ T5888] usb 3-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 94.298127][ T5888] usb 3-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 94.309148][ T5888] usb 3-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 94.324094][ T5888] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 94.336606][ T5888] usb 3-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 94.347668][ T5888] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 94.348336][ T987] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 94.359862][ T5888] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 94.379257][ T5888] usb 3-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 94.393848][ T5888] usb 3-1: config 166 interface 177 has no altsetting 0 [ 94.400910][ T5888] usb 3-1: config 166 interface 34 has no altsetting 0 [ 94.413794][ T5888] usb 3-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 94.424474][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.434613][ T5888] usb 3-1: Product: syz [ 94.439071][ T5888] usb 3-1: Manufacturer: syz [ 94.443791][ T5888] usb 3-1: SerialNumber: syz [ 94.466881][ T10] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 94.475782][ T10] cdc_ncm 1-1:1.0: bind() failure [ 94.481029][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 94.545332][ T29] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 94.555210][ T987] usb 4-1: USB disconnect, device number 4 [ 94.640179][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 94.645817][ T6142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.659980][ T9] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 94.672296][ T9] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 94.672382][ T6142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.681619][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.704230][ T5888] ums-realtek 3-1:166.177: USB Mass Storage device detected [ 94.717830][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 94.728497][ T9] usb 5-1: config 1 has no interface number 0 [ 94.730707][ T29] usb 2-1: Using ep0 maxpacket: 32 [ 94.754217][ T29] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 94.763274][ T29] usb 2-1: config 0 has no interface number 0 [ 94.766960][ T9] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 94.779052][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.787229][ T29] usb 2-1: config 0 interface 67 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 94.801808][ T29] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 94.812223][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.823458][ T29] usb 2-1: Product: syz [ 94.827685][ T29] usb 2-1: Manufacturer: syz [ 94.829326][ T9] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 94.834243][ T29] usb 2-1: SerialNumber: syz [ 94.854993][ T29] usb 2-1: config 0 descriptor?? [ 94.866008][ T29] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 94.877031][ T29] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -22 [ 94.905035][ T5888] ums-realtek 3-1:166.34: USB Mass Storage device detected [ 94.962981][ T5888] ums-realtek 3-1:166.34: probe with driver ums-realtek failed with error -5 [ 94.977970][ T5888] uvcvideo 3-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 95.001976][ T5888] uvcvideo 3-1:166.34: No valid video chain found. [ 95.015777][ T9] snd_usb_pod 5-1:1.1: endpoint not available, using fallback values [ 95.034095][ T5888] usb 3-1: USB disconnect, device number 9 [ 95.041546][ T9] snd_usb_pod 5-1:1.1: invalid control EP [ 95.055495][ T9] snd_usb_pod 5-1:1.1: cannot start listening: -22 [ 95.067442][ T9] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 95.085748][ T9] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 95.155506][ T6153] netlink: 'syz.3.63': attribute type 5 has an invalid length. [ 95.293726][ T9] usb 2-1: USB disconnect, device number 5 [ 95.312459][ T5878] usb 5-1: USB disconnect, device number 8 [ 95.527679][ T30] audit: type=1800 audit(1776624133.281:2): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.67" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=9959 res=0 errno=0 [ 95.620216][ T5888] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 95.781676][ T5888] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.815494][ T5888] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 95.886722][ T5888] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 95.938174][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.950780][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 95.981341][ T5888] usb 4-1: Product: syz [ 96.001168][ T5888] usb 4-1: Manufacturer: syz [ 96.015762][ T5888] usb 4-1: SerialNumber: syz [ 96.036526][ T30] audit: type=1326 audit(1776624133.791:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.1.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc81f39c819 code=0x7ffc0000 [ 96.099152][ T5888] cdc_ncm 4-1:1.0: skipping garbage [ 96.124574][ T5888] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 96.167592][ T5888] cdc_ncm 4-1:1.0: bind() failure [ 96.190182][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 96.216580][ T5888] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 96.224335][ T10] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 96.232770][ T5888] cdc_ncm 4-1:1.1: bind() failure [ 96.243116][ T10] usb 3-1: config 0 has no interface number 0 [ 96.253463][ T10] usb 3-1: config 0 interface 184 has no altsetting 0 [ 96.267337][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 96.278406][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.287535][ T10] usb 3-1: Product: syz [ 96.307681][ T10] usb 3-1: Manufacturer: syz [ 96.316403][ T10] usb 3-1: SerialNumber: syz [ 96.353778][ T10] usb 3-1: config 0 descriptor?? [ 96.363363][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 96.447311][ T6182] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.455647][ T6182] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.545814][ T9] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 96.558503][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.586518][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.626722][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 96.703144][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 96.717495][ T9] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 96.803283][ T6182] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.880664][ T6182] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.888893][ T9] usb 5-1: Manufacturer: syz [ 96.905115][ T9] usb 5-1: config 0 descriptor?? [ 96.925680][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 96.942747][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 96.965103][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 96.986084][ T10] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61 [ 97.128169][ T453] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.153565][ T453] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.167309][ T5902] usb 4-1: USB disconnect, device number 5 [ 97.182110][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 97.195051][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 97.214258][ T453] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.238535][ T453] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.283405][ T9] usb 5-1: USB disconnect, device number 9 [ 97.631095][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 97.755381][ T6208] loop5: detected capacity change from 0 to 7 [ 97.790528][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 97.798600][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 97.835919][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 97.863281][ T9] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 97.872813][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.881632][ T9] usb 5-1: Product: syz [ 97.886134][ T9] usb 5-1: Manufacturer: syz [ 97.892049][ T9] usb 5-1: SerialNumber: syz [ 97.951006][ T9] usb 5-1: config 0 descriptor?? [ 97.999159][ T9] hub 5-1:0.0: bad descriptor, ignoring hub [ 98.021710][ T9] hub 5-1:0.0: probe with driver hub failed with error -5 [ 98.151935][ T6208] Dev loop5: unable to read RDB block 7 [ 98.163370][ T6208] loop5: unable to read partition table [ 98.179372][ T6208] loop5: partition table beyond EOD, truncated [ 98.204927][ T6208] loop_reread_partitions: partition scan of loop5 (0x0000000000000002) failed (rc=-5) [ 98.221387][ T6198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.268378][ T6198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.421201][ T9] usb 5-1: USB disconnect, device number 10 [ 98.430376][ T6220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.474049][ T6220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.740653][ T9] usb 3-1: USB disconnect, device number 10 [ 99.249321][ T30] audit: type=1326 audit(1776624137.001:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.4.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f440a19c819 code=0x7ffc0000 [ 99.307120][ T30] audit: type=1326 audit(1776624137.031:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.4.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f440a19c819 code=0x7ffc0000 [ 99.329598][ T30] audit: type=1326 audit(1776624137.031:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.4.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f440a19c819 code=0x7ffc0000 [ 99.353418][ T30] audit: type=1326 audit(1776624137.031:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.4.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f440a19c819 code=0x7ffc0000 [ 99.375642][ T30] audit: type=1326 audit(1776624137.041:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.4.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f440a19c819 code=0x7ffc0000 [ 99.413932][ T30] audit: type=1326 audit(1776624137.171:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.4.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f440a19c819 code=0x7ffc0000 [ 99.437666][ T30] audit: type=1326 audit(1776624137.171:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.4.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f440a19c819 code=0x7ffc0000 [ 99.523792][ T30] audit: type=1326 audit(1776624137.221:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.4.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f440a19c819 code=0x7ffc0000 [ 99.985592][ T6248] loop5: detected capacity change from 0 to 7 [ 100.006172][ T6248] Dev loop5: unable to read RDB block 7 [ 100.022346][ T6248] loop5: unable to read partition table [ 100.044878][ T6248] loop5: partition table beyond EOD, truncated [ 100.059162][ T6248] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 100.150380][ T5888] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 100.323287][ T5888] usb 2-1: unable to get BOS descriptor or descriptor too short [ 100.357558][ T5888] usb 2-1: not running at top speed; connect to a high speed hub [ 100.392209][ T5888] usb 2-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 100.425115][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.456793][ T5888] usb 2-1: Product: syz [ 100.477824][ T5888] usb 2-1: Manufacturer: syz [ 100.493975][ T5888] usb 2-1: SerialNumber: syz [ 100.728347][ T5888] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 101.122969][ T6265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.139752][ T5888] gp8psk: usb in 128 operation failed. [ 101.161486][ T5888] gp8psk: usb in 137 operation failed. [ 101.192549][ T6265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.200549][ T5888] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 101.228344][ T5888] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-19) [ 101.272855][ T5888] usb 2-1: USB disconnect, device number 6 [ 101.571114][ T29] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 101.630333][ T126] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 101.730349][ T29] usb 4-1: Using ep0 maxpacket: 8 [ 101.753864][ T29] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 101.764876][ T29] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.820421][ T126] usb 3-1: Using ep0 maxpacket: 8 [ 101.827743][ T29] usb 4-1: config 0 has no interface number 0 [ 101.842842][ T29] usb 4-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 101.843160][ T126] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 101.865388][ T29] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 101.877534][ T29] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 101.890080][ T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.901304][ T29] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 101.917421][ T126] usb 3-1: Product: syz [ 101.923548][ T126] usb 3-1: Manufacturer: syz [ 101.931246][ T6282] netlink: 16 bytes leftover after parsing attributes in process `syz.1.99'. [ 101.942094][ T126] usb 3-1: SerialNumber: syz [ 101.947601][ T29] usb 4-1: config 0 interface 52 has no altsetting 0 [ 101.969851][ T29] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 102.015265][ T126] usb 3-1: config 0 descriptor?? [ 102.029787][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.054033][ T126] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 102.126187][ T29] usb 4-1: config 0 descriptor?? [ 102.851882][ T29] usb 4-1: Can not set alternate setting to 1, error: -71 [ 102.892199][ T29] synaptics_usb 4-1:0.52: probe with driver synaptics_usb failed with error -71 [ 102.951576][ T29] usb 4-1: USB disconnect, device number 6 [ 103.130070][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 103.570179][ T5888] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 103.745866][ T5888] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.773972][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 103.804821][ T5888] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 103.827924][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 103.847195][ T5888] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 103.870007][ T5888] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 103.883811][ T5888] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 103.900998][ T5888] usb 5-1: Manufacturer: syz [ 103.923024][ T5888] usb 5-1: config 0 descriptor?? [ 104.243136][ T6296] netlink: 'syz.3.104': attribute type 21 has an invalid length. [ 104.252933][ T5888] usb 5-1: USB disconnect, device number 11 [ 104.286631][ T6296] netlink: 128 bytes leftover after parsing attributes in process `syz.3.104'. [ 104.315346][ T6296] netlink: 'syz.3.104': attribute type 5 has an invalid length. [ 104.323796][ T6296] netlink: 'syz.3.104': attribute type 6 has an invalid length. [ 104.333457][ T6296] netlink: 3 bytes leftover after parsing attributes in process `syz.3.104'. [ 104.660535][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 104.839453][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 104.863652][ T9] usb 4-1: no configurations [ 104.884977][ T9] usb 4-1: can't read configurations, error -22 [ 104.920307][ T126] gspca_sonixj: i2c_w8 err -71 [ 104.949572][ T6300] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 104.959035][ T6300] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 104.978365][ T126] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 105.002913][ T126] usb 3-1: USB disconnect, device number 11 [ 105.060144][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 105.246826][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 105.262999][ T9] usb 4-1: no configurations [ 105.279008][ T9] usb 4-1: can't read configurations, error -22 [ 105.296855][ T9] usb usb4-port1: attempt power cycle [ 105.660237][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 105.698993][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 105.723569][ T9] usb 4-1: no configurations [ 105.741993][ T9] usb 4-1: can't read configurations, error -22 [ 105.968154][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 106.022171][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 106.058760][ T9] usb 4-1: no configurations [ 106.068125][ T9] usb 4-1: can't read configurations, error -22 [ 106.104577][ T9] usb usb4-port1: unable to enumerate USB device [ 106.356528][ T5902] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 106.570682][ T5902] usb 3-1: config index 0 descriptor too short (expected 8192, got 36) [ 106.620119][ T5902] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.654829][ T5902] usb 3-1: config 0 has no interfaces? [ 106.673793][ T5902] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 106.707643][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.736076][ T5902] usb 3-1: config 0 descriptor?? [ 107.280066][ T0] NOHZ tick-stop error: local softirq work is pending, handler #206!!! [ 107.327481][ T6330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.606561][ T6330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.781191][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 108.622912][ T6306] syz.1.106 (6306): drop_caches: 2 [ 108.693694][ T6300] syz.1.106 (6300): drop_caches: 2 [ 109.612177][ T6354] netlink: 92 bytes leftover after parsing attributes in process `syz.1.117'. [ 109.680064][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.116825][ T5895] usb 3-1: USB disconnect, device number 12 [ 111.650368][ T0] NOHZ tick-stop error: local softirq work is pending, handler #286!!! [ 111.734202][ T6388] loop5: detected capacity change from 0 to 7 [ 111.776758][ T6388] Dev loop5: unable to read RDB block 7 [ 111.792515][ T6388] loop5: unable to read partition table [ 111.819621][ T6388] loop5: partition table beyond EOD, truncated [ 111.848713][ T6388] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 112.090615][ T5902] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 112.301337][ T5902] usb 4-1: Using ep0 maxpacket: 32 [ 112.369496][ T5902] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 112.414978][ T5902] usb 4-1: config 0 has no interface number 0 [ 112.457565][ T5902] usb 4-1: config 0 interface 12 has no altsetting 0 [ 112.496670][ T5902] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 112.516267][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.584395][ T5902] usb 4-1: Product: syz [ 112.599589][ T5902] usb 4-1: Manufacturer: syz [ 112.619855][ T5902] usb 4-1: SerialNumber: syz [ 112.644754][ T5902] usb 4-1: config 0 descriptor?? [ 112.740066][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 113.902683][ T5888] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 114.090080][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 114.120279][ T5888] usb 5-1: Using ep0 maxpacket: 8 [ 114.148669][ T5888] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 114.160079][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 114.189738][ T5888] usb 5-1: config 179 has no interface number 0 [ 114.225450][ T5888] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 114.271638][ T5888] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 114.341625][ T5888] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 114.395522][ T5888] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 114.446174][ T5888] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 114.499015][ T5888] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 114.548287][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.602016][ T6407] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 114.777215][ T5902] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -32 [ 114.823300][ T5902] f81534 4-1:0.12: f81534_find_config_idx: read failed: -32 [ 114.867696][ T5902] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 114.910756][ T5902] f81534 4-1:0.12: probe with driver f81534 failed with error -32 [ 115.037063][ T5888] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input9 [ 115.107482][ T29] usb 4-1: USB disconnect, device number 11 [ 115.546571][ T6414] netlink: 96 bytes leftover after parsing attributes in process `syz.4.129'. [ 115.663649][ T6420] netlink: 40 bytes leftover after parsing attributes in process `syz.2.133'. [ 115.703371][ T6414] 8021q: VLANs not supported on sit0 [ 115.823763][ T6419] syz_tun: entered promiscuous mode [ 115.882342][ T6419] syz_tun: refused to change device tx_queue_len [ 115.908275][ T6419] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 116.488152][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 116.488176][ T30] audit: type=1326 audit(1776624154.241:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6426 comm="syz.1.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc81f39c819 code=0x7ffc0000 [ 116.821711][ T30] audit: type=1326 audit(1776624154.241:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6426 comm="syz.1.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fc81f39c819 code=0x7ffc0000 [ 116.955279][ T126] usb 5-1: USB disconnect, device number 12 [ 116.955328][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 116.955373][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 117.047999][ T30] audit: type=1326 audit(1776624154.241:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6426 comm="syz.1.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc81f39c819 code=0x7ffc0000 [ 117.199051][ T30] audit: type=1326 audit(1776624154.241:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6426 comm="syz.1.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fc81f39c819 code=0x7ffc0000 [ 117.262579][ T30] audit: type=1326 audit(1776624154.251:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6426 comm="syz.1.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc81f39c819 code=0x7ffc0000 [ 117.293458][ T30] audit: type=1326 audit(1776624154.251:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6426 comm="syz.1.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc81f39c819 code=0x7ffc0000 [ 117.324323][ T6446] ptrace attach of "./syz-executor exec"[5849] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ./file0 °ÿ Àÿ ÿÿÿÿ    N!à   /sys/kernel/debug/binder/stats €  8   € \x09 Û  þÿÿú ÿÿÿÿ cgroup.controllers [ 117.332974][ T30] audit: type=1326 audit(1776624154.251:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6426 comm="syz.1.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc81f39c819 code=0x7ffc0000 [ 117.473848][ T30] audit: type=1326 audit(1776624154.251:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6426 comm="syz.1.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc81f39c819 code=0x7ffc0000 [ 117.528701][ T6449] netlink: 24 bytes leftover after parsing attributes in process `syz.0.136'. [ 117.540194][ T30] audit: type=1326 audit(1776624154.251:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6426 comm="syz.1.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc81f39c819 code=0x7ffc0000 [ 117.590203][ T29] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 117.608221][ T30] audit: type=1326 audit(1776624154.251:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6426 comm="syz.1.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc81f39c819 code=0x7ffc0000 [ 117.751973][ T29] usb 4-1: Using ep0 maxpacket: 8 [ 117.763940][ T29] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 117.785612][ T29] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 117.818898][ T29] usb 4-1: config 0 has an invalid descriptor of length 99, skipping remainder of the config [ 117.849969][ T29] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 117.897547][ T29] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 117.959287][ T29] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 117.981662][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.052379][ T29] usb 4-1: Product: syz [ 118.084462][ T29] usb 4-1: Manufacturer: syz [ 118.151829][ T29] usb 4-1: SerialNumber: syz [ 118.233983][ T29] usb 4-1: config 0 descriptor?? [ 118.487289][ T29] hub 4-1:0.0: bad descriptor, ignoring hub [ 118.515688][ T29] hub 4-1:0.0: probe with driver hub failed with error -5 [ 118.631301][ T29] usb 4-1: USB disconnect, device number 12 [ 118.701230][ T5895] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 118.871939][ T5895] usb 5-1: config 0 has no interfaces? [ 118.910717][ T5895] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 118.936663][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.972928][ T5895] usb 5-1: Product: syz [ 118.996553][ T5895] usb 5-1: Manufacturer: syz [ 119.020333][ T5895] usb 5-1: SerialNumber: syz [ 119.076825][ T5895] usb 5-1: config 0 descriptor?? [ 119.262840][ T6472] ======================================================= [ 119.262840][ T6472] WARNING: The mand mount option has been deprecated and [ 119.262840][ T6472] and is ignored by this kernel. Remove the mand [ 119.262840][ T6472] option from the mount to silence this warning. [ 119.262840][ T6472] ======================================================= [ 119.546178][ T5902] usb 5-1: USB disconnect, device number 13 [ 120.565760][ T6488] netlink: 40 bytes leftover after parsing attributes in process `syz.1.148'. [ 120.577599][ T6488] netlink: 40 bytes leftover after parsing attributes in process `syz.1.148'. [ 120.613239][ T9] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 120.792655][ T9] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 120.824498][ T9] usb 4-1: config 0 has no interface number 0 [ 120.847908][ T9] usb 4-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 120.847941][ T9] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 120.847968][ T9] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 120.850000][ T9] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 120.850107][ T9] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 120.850128][ T9] usb 4-1: Product: syz [ 120.850143][ T9] usb 4-1: SerialNumber: syz [ 120.855411][ T9] usb 4-1: config 0 descriptor?? [ 120.872007][ T9] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 120.910952][ T9] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input10 [ 121.266355][ T6499] binder: 6483:6499 ioctl c0306201 2000000003c0 returned -14 [ 121.844647][ T6503] loop5: detected capacity change from 0 to 7 [ 121.864160][ T6503] Dev loop5: unable to read RDB block 7 [ 121.912157][ T6503] loop5: unable to read partition table [ 121.938736][ T6503] loop5: partition table beyond EOD, truncated [ 121.965150][ T6503] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 122.311368][ T6511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.334511][ T6511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.371824][ T6511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.411407][ T6511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.450805][ T29] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 122.619943][ T29] usb 5-1: config 1 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 122.645814][ T29] usb 5-1: config 1 interface 0 altsetting 64 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 122.670221][ T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 122.690329][ T29] usb 5-1: config 1 interface 0 has no altsetting 0 [ 122.712224][ T29] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 122.730208][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 122.739389][ T29] usb 5-1: SerialNumber: syz [ 122.792405][ T29] hub 5-1:1.0: bad descriptor, ignoring hub [ 122.814663][ T29] hub 5-1:1.0: probe with driver hub failed with error -5 [ 122.825120][ T29] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 122.835731][ T24] usb 2-1: device descriptor read/64, error -71 [ 123.020065][ T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!! [ 123.080254][ T24] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 123.245179][ T24] usb 2-1: device descriptor read/64, error -71 [ 123.294229][ C0] cm109_urb_ctl_callback: 11 callbacks suppressed [ 123.294254][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 123.308699][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 123.313573][ T126] usb 4-1: USB disconnect, device number 13 [ 123.315674][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 123.371236][ T24] usb usb2-port1: attempt power cycle [ 123.407489][ T126] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 123.673995][ T6530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.697561][ T6530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.730785][ T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 123.762044][ T24] usb 2-1: device descriptor read/8, error -71 [ 123.790065][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 124.060345][ T24] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 124.112319][ T24] usb 2-1: device descriptor read/8, error -71 [ 124.232731][ T24] usb usb2-port1: unable to enumerate USB device [ 125.077059][ T29] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 125.226593][ T29] usb 5-1: USB disconnect, device number 14 [ 125.783801][ T9] IPVS: starting estimator thread 0... [ 125.910377][ T6555] IPVS: using max 54 ests per chain, 129600 per kthread [ 127.602770][ T5902] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 127.780919][ T5902] usb 2-1: Using ep0 maxpacket: 32 [ 127.818449][ T5902] usb 2-1: unable to get BOS descriptor or descriptor too short [ 127.853884][ T5902] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 127.902693][ T5902] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 127.936828][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.978376][ T5902] usb 2-1: Product: syz [ 128.000390][ T5902] usb 2-1: Manufacturer: syz [ 128.026853][ T5902] usb 2-1: SerialNumber: syz [ 128.071107][ T6584] syzkaller1: entered promiscuous mode [ 128.097709][ T6584] syzkaller1: entered allmulticast mode [ 128.259403][ T5902] usb 2-1: Invalid number of CPorts: 0 [ 128.279079][ T5902] es2_ap_driver 2-1:7.0: probe with driver es2_ap_driver failed with error -22 [ 128.489263][ T5902] usb 2-1: USB disconnect, device number 11 [ 129.078100][ T6599] netlink: 64134 bytes leftover after parsing attributes in process `syz.3.176'. [ 129.481936][ T6605] netlink: 'syz.1.177': attribute type 1 has an invalid length. [ 129.688166][ T6605] 8021q: adding VLAN 0 to HW filter on device bond1 [ 129.745759][ T6622] netlink: 92 bytes leftover after parsing attributes in process `syz.4.180'. [ 130.308154][ T6632] netlink: 12 bytes leftover after parsing attributes in process `syz.1.183'. [ 131.164433][ T6642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.198614][ T6642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.483268][ T6620] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 131.567417][ T6620] syz.3.182 uses obsolete (PF_INET,SOCK_PACKET) [ 131.660250][ T126] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 131.843140][ T126] usb 2-1: Using ep0 maxpacket: 32 [ 131.874442][ T126] usb 2-1: unable to get BOS descriptor or descriptor too short [ 131.931578][ T126] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.965955][ T126] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 132.055853][ T6652] FAULT_INJECTION: forcing a failure. [ 132.055853][ T6652] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 132.084813][ T126] usb 2-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 132.086200][ T6652] CPU: 0 UID: 0 PID: 6652 Comm: syz.4.188 Tainted: G L syzkaller #0 PREEMPT(full) [ 132.086226][ T6652] Tainted: [L]=SOFTLOCKUP [ 132.086233][ T6652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 132.086254][ T6652] Call Trace: [ 132.086264][ T6652] [ 132.086271][ T6652] dump_stack_lvl+0xe8/0x150 [ 132.086312][ T6652] should_fail_ex+0x412/0x560 [ 132.086340][ T6652] _copy_from_user+0x2d/0xb0 [ 132.086366][ T6652] kstrtouint_from_user+0xd6/0x180 [ 132.086389][ T6652] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 132.086426][ T6652] proc_fail_nth_write+0x8e/0x210 [ 132.086452][ T6652] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 132.086483][ T6652] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 132.086509][ T6652] vfs_write+0x29a/0xb90 [ 132.086536][ T6652] ? __pfx_vfs_write+0x10/0x10 [ 132.086557][ T6652] ? __fget_files+0x2a/0x420 [ 132.086586][ T6652] ? __fget_files+0x3a0/0x420 [ 132.086608][ T6652] ? __fget_files+0x2a/0x420 [ 132.086646][ T6652] ksys_write+0x150/0x270 [ 132.086667][ T6652] ? __pfx_ksys_write+0x10/0x10 [ 132.086693][ T6652] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.086712][ T6652] do_syscall_64+0x15f/0xf80 [ 132.086733][ T6652] ? trace_irq_disable+0x3b/0x140 [ 132.086754][ T6652] ? clear_bhb_loop+0x40/0x90 [ 132.086776][ T6652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.086792][ T6652] RIP: 0033:0x7f440a15d04e [ 132.086812][ T6652] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 132.086825][ T6652] RSP: 002b:00007f44083f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 132.086842][ T6652] RAX: ffffffffffffffda RBX: 00007f44083f66c0 RCX: 00007f440a15d04e [ 132.086855][ T6652] RDX: 0000000000000001 RSI: 00007f44083f60a0 RDI: 0000000000000009 [ 132.086864][ T6652] RBP: 00007f44083f6090 R08: 0000000000000000 R09: 0000000000000000 [ 132.086875][ T6652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.086884][ T6652] R13: 00007f440a416218 R14: 00007f440a416180 R15: 00007f440a53fa48 [ 132.086913][ T6652] [ 132.321728][ T126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.331431][ T126] usb 2-1: Product: syz [ 132.336773][ T126] usb 2-1: Manufacturer: syz [ 132.342342][ T126] usb 2-1: SerialNumber: syz [ 132.640643][ T6661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.655715][ T126] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 132.681355][ T6661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.689812][ T126] usb 2-1: MIDIStreaming interface descriptor not found [ 132.863103][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.872826][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.298013][ T126] usb 2-1: USB disconnect, device number 12 [ 135.111244][ T24] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 135.314688][ T24] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 135.385202][ T24] usb 5-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 135.455842][ T24] usb 5-1: Product: syz [ 135.471674][ T24] usb 5-1: Manufacturer: syz [ 135.486529][ T24] usb 5-1: SerialNumber: syz [ 135.549635][ T24] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 135.951794][ T6683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.986056][ T6683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.027222][ T24] vp7045: USB control message 'in' went wrong. [ 136.045143][ T24] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 136.120311][ T24] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 136.163500][ T24] usb 5-1: USB disconnect, device number 15 [ 136.982808][ T5888] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 137.060539][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 137.060556][ T30] audit: type=1326 audit(1776624174.811:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6707 comm="syz.4.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f440a19c819 code=0x7ffc0000 [ 137.219009][ T5888] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.233498][ T30] audit: type=1326 audit(1776624174.811:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6707 comm="syz.4.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f440a19c819 code=0x7ffc0000 [ 137.283522][ T5888] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 137.326278][ T5888] usb 2-1: New USB device found, idVendor=0e41, idProduct=4642, bcdDevice= 0.40 [ 137.343096][ T30] audit: type=1326 audit(1776624174.811:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6707 comm="syz.4.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f440a19c819 code=0x7ffc0000 [ 137.370592][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.386591][ T5888] usb 2-1: Product: syz [ 137.395789][ T5888] usb 2-1: Manufacturer: syz [ 137.422881][ T30] audit: type=1326 audit(1776624174.851:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6707 comm="syz.4.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f440a19c819 code=0x7ffc0000 [ 137.446117][ T5888] usb 2-1: SerialNumber: syz [ 137.512766][ T30] audit: type=1326 audit(1776624174.851:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6707 comm="syz.4.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f440a19c819 code=0x7ffc0000 [ 137.554739][ T9] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 137.629130][ T30] audit: type=1326 audit(1776624174.851:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6707 comm="syz.4.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f440a19c819 code=0x7ffc0000 [ 137.721042][ T30] audit: type=1326 audit(1776624174.851:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6707 comm="syz.4.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f440a19c819 code=0x7ffc0000 [ 137.753243][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.794792][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 137.868122][ T30] audit: type=1326 audit(1776624174.851:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6707 comm="syz.4.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f440a19c819 code=0x7ffc0000 [ 137.904544][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 137.928808][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 137.959339][ T9] usb 4-1: SerialNumber: syz [ 137.986774][ T30] audit: type=1326 audit(1776624174.851:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6707 comm="syz.4.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f440a19c819 code=0x7ffc0000 [ 138.025829][ T9] usb 4-1: No union descriptors [ 138.044369][ T9] usb-storage 4-1:1.0: USB Mass Storage device detected [ 138.102344][ T30] audit: type=1326 audit(1776624174.851:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6707 comm="syz.4.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f440a19c819 code=0x7ffc0000 [ 138.125824][ T9] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 138.783700][ T9] usb 4-1: USB disconnect, device number 14 [ 138.849701][ T5888] snd_usb_pod 2-1:1.0: Line 6 BassPODxt Live found [ 138.896981][ T5888] usb 2-1: selecting invalid altsetting 1 [ 138.924546][ T5888] snd_usb_pod 2-1:1.0: set_interface failed [ 138.965638][ T5888] snd_usb_pod 2-1:1.0: Line 6 BassPODxt Live now disconnected [ 139.054174][ T5888] snd_usb_pod 2-1:1.0: probe with driver snd_usb_pod failed with error -22 [ 139.122618][ T5888] usb 2-1: USB disconnect, device number 13 [ 139.223564][ T6733] netlink: 'syz.3.209': attribute type 11 has an invalid length. [ 139.282721][ T6726] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.295097][ T6726] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.308707][ T6733] netlink: 36 bytes leftover after parsing attributes in process `syz.3.209'. [ 139.868521][ T6726] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.919013][ T6726] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.156782][ T6738] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 140.520188][ T5888] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 140.662021][ T6738] overlayfs: missing 'lowerdir' [ 140.700147][ T5888] usb 5-1: Using ep0 maxpacket: 8 [ 140.743895][ T5888] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 140.766437][ T5888] usb 5-1: config 0 has no interface number 0 [ 140.803056][ T5888] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 140.865850][ T5888] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 140.911271][ T5888] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 140.944825][ T5888] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 140.970214][ T6570] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.003518][ T5888] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 141.013307][ T6570] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.048015][ T6570] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.080974][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.111840][ T6570] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.146107][ T5888] usb 5-1: config 0 descriptor?? [ 141.153447][ T6745] xt_hashlimit: size too large, truncated to 1048576 [ 141.265983][ T5888] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 141.500523][ T126] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 141.620726][ T6754] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1728497071 (13827976568 ns) > initial count (134217856 ns). Using initial count to start timer. [ 141.690839][ T126] usb 4-1: device descriptor read/64, error -71 [ 141.839556][ T9] usb 5-1: USB disconnect, device number 16 [ 141.865879][ T9] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 141.993336][ T126] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 142.180586][ T126] usb 4-1: device descriptor read/64, error -71 [ 142.313545][ T126] usb usb4-port1: attempt power cycle [ 142.324660][ T6762] netlink: 12 bytes leftover after parsing attributes in process `syz.2.216'. [ 142.690304][ T126] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 142.744107][ T126] usb 4-1: device descriptor read/8, error -71 [ 142.815626][ T6773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.220'. [ 143.010653][ T126] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 143.055828][ T126] usb 4-1: device descriptor read/8, error -71 [ 143.191681][ T126] usb usb4-port1: unable to enumerate USB device [ 143.245660][ T6776] netlink: 92 bytes leftover after parsing attributes in process `syz.4.220'. [ 144.798458][ T6806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.859326][ T6806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.999266][ T6809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.037939][ T6809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.081991][ T5888] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 145.191756][ T6807] netlink: 7 bytes leftover after parsing attributes in process `syz.3.224'. [ 145.247658][ T6811] netlink: 'syz.3.224': attribute type 10 has an invalid length. [ 145.270705][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 50, changing to 9 [ 145.298443][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1792, setting to 1024 [ 145.343165][ T5888] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 145.366468][ T5888] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 145.387117][ T6811] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 145.409931][ T5888] usb 2-1: Manufacturer: syz [ 145.425109][ T5888] usb 2-1: config 0 descriptor?? [ 145.448547][ T6801] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 146.126100][ T5888] usbhid 2-1:0.0: can't add hid device: -71 [ 146.135393][ T5888] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 146.200901][ T5888] usb 2-1: USB disconnect, device number 14 [ 147.265305][ T6830] syzkaller0: entered promiscuous mode [ 147.307121][ T6832] netlink: 4 bytes leftover after parsing attributes in process `syz.3.231'. [ 147.317998][ T6830] syzkaller0: entered allmulticast mode [ 147.573441][ T6836] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.611883][ T6836] bond0: (slave bond1): Enslaving as an active interface with an up link [ 148.031900][ T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 148.090681][ T5931] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 148.175254][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 148.175271][ T30] audit: type=1326 audit(1776624185.931:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6850 comm="syz.4.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f440a19c819 code=0x7ffc0000 [ 148.200473][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 148.225309][ T6856] netlink: 116 bytes leftover after parsing attributes in process `syz.1.237'. [ 148.244008][ T24] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 148.247324][ T30] audit: type=1326 audit(1776624185.961:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6850 comm="syz.4.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f440a19c819 code=0x7ffc0000 [ 148.275050][ T5931] usb 4-1: Using ep0 maxpacket: 16 [ 148.305400][ T24] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 148.318287][ T6862] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 148.341075][ T30] audit: type=1326 audit(1776624185.971:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6850 comm="syz.4.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f440a19c819 code=0x7ffc0000 [ 148.391407][ T30] audit: type=1326 audit(1776624185.971:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6850 comm="syz.4.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f440a19c819 code=0x7ffc0000 [ 148.392631][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 148.430840][ T5931] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 148.465507][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 148.508628][ T30] audit: type=1326 audit(1776624185.971:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6850 comm="syz.4.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f440a19c819 code=0x7ffc0000 [ 148.555318][ T5931] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 148.571020][ T24] usb 3-1: config 1 has no interface number 0 [ 148.579919][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.591548][ T24] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 148.606711][ T30] audit: type=1326 audit(1776624185.971:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6850 comm="syz.4.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f440a19c819 code=0x7ffc0000 [ 148.656732][ T30] audit: type=1326 audit(1776624185.971:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6850 comm="syz.4.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f440a19c819 code=0x7ffc0000 [ 148.659126][ T5931] usb 4-1: Product: syz [ 148.709072][ T24] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 148.743379][ T24] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 148.758325][ T5931] usb 4-1: Manufacturer: syz [ 148.769332][ T30] audit: type=1326 audit(1776624185.971:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6850 comm="syz.4.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f440a19c819 code=0x7ffc0000 [ 148.791754][ T5931] usb 4-1: SerialNumber: syz [ 148.798864][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.821913][ T30] audit: type=1326 audit(1776624185.981:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6850 comm="syz.4.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f440a19c819 code=0x7ffc0000 [ 148.823765][ T5931] usb 4-1: config 0 descriptor?? [ 148.901922][ T24] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 148.954141][ T5931] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 148.976093][ T30] audit: type=1326 audit(1776624185.991:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6850 comm="syz.4.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f440a19c819 code=0x7ffc0000 [ 149.037787][ T5931] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 149.088868][ T24] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 149.541368][ T5931] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 149.871716][ T24] usb 3-1: USB disconnect, device number 13 [ 149.896792][ T24] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 150.056251][ T5931] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 150.296857][ T5931] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 150.311089][ T5931] em28xx 4-1:0.0: No AC97 audio processor [ 150.406904][ T5931] usb 4-1: USB disconnect, device number 19 [ 150.454083][ T5931] em28xx 4-1:0.0: Disconnecting em28xx [ 150.510626][ T6873] loop5: detected capacity change from 0 to 7 [ 150.554890][ T6873] Dev loop5: unable to read RDB block 7 [ 150.578099][ T6873] loop5: unable to read partition table [ 150.612293][ T6873] loop5: partition table beyond EOD, truncated [ 150.631173][ T6873] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 150.653027][ T5931] em28xx 4-1:0.0: Freeing device [ 151.002869][ T6880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.243'. [ 151.356521][ T6887] capability: warning: `syz.0.245' uses 32-bit capabilities (legacy support in use) [ 151.416908][ T6888] x_tables: duplicate underflow at hook 1 [ 151.830918][ T6892] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 151.894415][ T6894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.962242][ T6894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.137995][ T6902] binder: 6893:6902 ioctl c0306201 2000000003c0 returned -14 [ 152.640370][ T6913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.250'. [ 152.964962][ T6916] netlink: 92 bytes leftover after parsing attributes in process `syz.1.250'. [ 153.192918][ T6921] netlink: 28 bytes leftover after parsing attributes in process `syz.2.252'. [ 153.491197][ T6924] loop5: detected capacity change from 0 to 7 [ 153.554232][ T6924] Dev loop5: unable to read RDB block 7 [ 153.587595][ T6924] loop5: unable to read partition table [ 153.600492][ T6924] loop5: partition table beyond EOD, truncated [ 153.617166][ T6924] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 154.777095][ T6934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.839935][ T6934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.087381][ T6939] kvm: pic: single mode not supported [ 155.087745][ T6939] kvm: pic: single mode not supported [ 155.129431][ T6939] kvm: pic: single mode not supported [ 155.178393][ T6939] kvm: pic: single mode not supported [ 155.184355][ T6939] kvm: pic: level sensitive irq not supported [ 155.201904][ T6939] kvm: pic: level sensitive irq not supported [ 155.224727][ T6939] kvm: pic: single mode not supported [ 155.243899][ T6939] kvm: pic: single mode not supported [ 156.122724][ T6949] binder: BINDER_SET_CONTEXT_MGR already set [ 156.208013][ T6949] binder: 6948:6949 ioctl 4018620d 200000001000 returned -16 [ 156.412826][ T6954] netlink: 27 bytes leftover after parsing attributes in process `syz.4.259'. [ 156.423700][ T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 156.602125][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.625441][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.664490][ T10] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 156.685126][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.732901][ T10] usb 4-1: config 0 descriptor?? [ 157.092748][ T6947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.129831][ T6947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.381757][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 157.399661][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 157.399680][ T30] audit: type=1326 audit(1776624195.151:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.2.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c7f9c819 code=0x7ffc0000 [ 157.438364][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 157.481034][ T10] usb 4-1: USB disconnect, device number 20 [ 157.569758][ T30] audit: type=1326 audit(1776624195.221:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.2.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c7f9c819 code=0x7ffc0000 [ 157.694886][ T30] audit: type=1326 audit(1776624195.261:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.2.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f29c7f9c819 code=0x7ffc0000 [ 157.760879][ T6970] openvswitch: netlink: Message has 1 unknown bytes. [ 157.780989][ T6970] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.793221][ T30] audit: type=1326 audit(1776624195.261:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.2.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c7f9c819 code=0x7ffc0000 [ 157.873070][ T30] audit: type=1326 audit(1776624195.271:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.2.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f29c7f9c819 code=0x7ffc0000 [ 157.942525][ T6977] loop5: detected capacity change from 0 to 7 [ 157.978504][ T6977] Dev loop5: unable to read RDB block 7 [ 157.985132][ T30] audit: type=1326 audit(1776624195.271:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.2.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c7f9c819 code=0x7ffc0000 [ 158.025793][ T6977] loop5: unable to read partition table [ 158.042305][ T6977] loop5: partition table beyond EOD, truncated [ 158.144982][ T6977] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 158.164737][ T30] audit: type=1326 audit(1776624195.271:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.2.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f29c7f9c819 code=0x7ffc0000 [ 158.352049][ T30] audit: type=1326 audit(1776624195.271:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.2.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c7f9c819 code=0x7ffc0000 [ 158.517480][ T30] audit: type=1326 audit(1776624195.271:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.2.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f29c7f9c819 code=0x7ffc0000 [ 158.631958][ T30] audit: type=1326 audit(1776624195.281:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.2.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c7f9c819 code=0x7ffc0000 [ 159.008596][ T6985] netlink: 12 bytes leftover after parsing attributes in process `syz.4.267'. [ 159.918724][ T6998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.270'. [ 160.206904][ T7006] netlink: 92 bytes leftover after parsing attributes in process `syz.3.270'. [ 161.029487][ T7029] syz_tun: entered allmulticast mode [ 161.540251][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 161.702303][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 161.729397][ T9] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 161.760244][ T9] usb 3-1: config 0 has no interface number 0 [ 161.802383][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 161.829944][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.856476][ T9] usb 3-1: Product: syz [ 161.870418][ T9] usb 3-1: Manufacturer: syz [ 161.917942][ T9] usb 3-1: SerialNumber: syz [ 161.967013][ T9] usb 3-1: config 0 descriptor?? [ 162.356511][ T7032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.385572][ T7032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.676915][ T9] uvcvideo 3-1:0.31: probe with driver uvcvideo failed with error -22 [ 165.748548][ T9] usb 3-1: USB disconnect, device number 14 [ 166.398790][ T24] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 166.701277][ T24] usb 2-1: device descriptor read/64, error -71 [ 167.010419][ T24] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 167.240172][ T24] usb 2-1: device descriptor read/64, error -71 [ 167.364581][ T24] usb usb2-port1: attempt power cycle [ 167.740317][ T24] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 167.844322][ T24] usb 2-1: device descriptor read/8, error -71 [ 168.180364][ T24] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 168.267935][ T24] usb 2-1: device descriptor read/8, error -71 [ 168.439742][ T24] usb usb2-port1: unable to enumerate USB device [ 169.998098][ T7110] trusted_key: encrypted_key: insufficient parameters specified [ 170.241588][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 170.351107][ T7121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.298'. [ 170.400246][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 170.433613][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.477152][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 170.522098][ T9] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 170.546351][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 170.575500][ T9] usb 3-1: Product: syz [ 170.589950][ T9] usb 3-1: Manufacturer: syz [ 170.623178][ T9] usb 3-1: SerialNumber: syz [ 170.665707][ T9] usb 3-1: config 0 descriptor?? [ 173.909549][ T7157] netlink: 'syz.1.310': attribute type 29 has an invalid length. [ 173.947760][ T9] usb 3-1: no audio or video endpoints found [ 173.975486][ T9] usb 3-1: USB disconnect, device number 15 [ 173.986966][ T7157] netlink: 'syz.1.310': attribute type 29 has an invalid length. [ 174.044756][ T7157] netlink: 'syz.1.310': attribute type 29 has an invalid length. [ 174.079961][ T7157] netlink: 'syz.1.310': attribute type 29 has an invalid length. [ 175.597604][ T7188] syzkaller0: entered promiscuous mode [ 175.614972][ T7188] syzkaller0: entered allmulticast mode [ 175.817189][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 175.909863][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 175.966554][ T5895] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 175.992905][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.008058][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.038305][ T9] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 176.049030][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.090465][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 176.096383][ T9] usb 5-1: config 0 descriptor?? [ 176.104217][ T10] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 176.135883][ T10] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 176.152349][ T5895] usb 3-1: config 1 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 176.164606][ T5895] usb 3-1: config 1 interface 0 altsetting 64 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 176.178124][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 176.187818][ T10] usb 2-1: config 1 has no interface number 0 [ 176.194384][ T5895] usb 3-1: config 1 interface 0 has no altsetting 0 [ 176.214048][ T10] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 176.226862][ T5895] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 176.246176][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 176.255121][ T10] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 176.268190][ T5895] usb 3-1: SerialNumber: syz [ 176.285344][ T10] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 176.296031][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.306518][ T5895] hub 3-1:1.0: bad descriptor, ignoring hub [ 176.314170][ T5895] hub 3-1:1.0: probe with driver hub failed with error -5 [ 176.337640][ T10] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 176.356208][ T5895] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 176.361777][ T5931] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 176.545834][ T5931] usb 4-1: Using ep0 maxpacket: 8 [ 176.548776][ T10] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 176.572999][ T5931] usb 4-1: unable to get BOS descriptor or descriptor too short [ 176.582830][ T9] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 176.590424][ T9] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 176.597675][ T9] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 176.602753][ T5931] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 17, changing to 7 [ 176.605716][ T9] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 176.625743][ T9] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 176.633369][ T9] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 176.642141][ T9] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 176.653707][ T5931] usb 4-1: New USB device found, idVendor=0582, idProduct=0044, bcdDevice= 0.40 [ 176.662615][ T9] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 176.690349][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.710695][ T5931] usb 4-1: Product: syz [ 176.720919][ T5931] usb 4-1: Manufacturer: syz [ 176.737377][ T5931] usb 4-1: SerialNumber: syz [ 176.753470][ T9] cp2112 0003:10C4:EA90.0002: Part Number: 0x00 Device Version: 0x00 [ 177.196276][ T5931] usb 4-1: interface 3 not found [ 177.281958][ T5931] usb 4-1: USB disconnect, device number 21 [ 177.402694][ T9] cp2112 0003:10C4:EA90.0002: error reading lock byte: -32 [ 177.572310][ T9] snd_usb_pod 2-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 177.924967][ T9] usb 5-1: reset high-speed USB device number 17 using dummy_hcd [ 179.308494][ T7220] netlink: 'syz.4.335': attribute type 29 has an invalid length. [ 179.337426][ T7221] netlink: 'syz.4.335': attribute type 29 has an invalid length. [ 179.366140][ T7222] netlink: 'syz.4.335': attribute type 29 has an invalid length. [ 179.370477][ T10] usb 5-1: USB disconnect, device number 17 [ 179.413616][ T5895] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 179.447077][ T5931] usb 2-1: USB disconnect, device number 19 [ 179.524218][ T5895] usb 3-1: USB disconnect, device number 16 [ 179.564882][ T5931] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 179.691169][ T6566] tipc: Subscription rejected, illegal request [ 179.745225][ T7228] tipc: Enabled bearer , priority 0 [ 179.792901][ T7228] syzkaller0: entered promiscuous mode [ 179.817076][ T7228] syzkaller0: entered allmulticast mode [ 180.009092][ T7228] tipc: Resetting bearer [ 180.338839][ T7226] tipc: Resetting bearer [ 180.437860][ T7226] tipc: Disabling bearer [ 180.638285][ T7255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.342'. [ 181.231499][ T24] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 181.425626][ T24] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 181.480712][ T24] usb 2-1: config 0 has no interface number 0 [ 181.558082][ T24] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 181.625386][ T24] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 181.718130][ T24] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 181.764945][ T24] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 181.792086][ T24] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 181.816342][ T24] usb 2-1: Product: syz [ 181.842897][ T24] usb 2-1: SerialNumber: syz [ 181.927259][ T24] usb 2-1: config 0 descriptor?? [ 181.975754][ T24] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 182.001249][ T24] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input15 [ 182.370953][ T7271] binder: BINDER_SET_CONTEXT_MGR already set [ 182.371023][ T7271] binder: 7262:7271 ioctl 4018620d 200000000040 returned -16 [ 182.766137][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 182.766157][ T30] audit: type=1326 audit(1776624220.511:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7272 comm="syz.3.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd4e79c819 code=0x7ffc0000 [ 182.928972][ T30] audit: type=1326 audit(1776624220.521:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7272 comm="syz.3.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd4e79c819 code=0x7ffc0000 [ 183.001812][ T30] audit: type=1326 audit(1776624220.551:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7272 comm="syz.3.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7fdd4e79c819 code=0x7ffc0000 [ 183.063550][ T30] audit: type=1326 audit(1776624220.551:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7272 comm="syz.3.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd4e79c819 code=0x7ffc0000 [ 183.143837][ T30] audit: type=1326 audit(1776624220.551:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7272 comm="syz.3.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd4e79c819 code=0x7ffc0000 [ 183.198467][ T30] audit: type=1326 audit(1776624220.551:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7272 comm="syz.3.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7fdd4e79c819 code=0x7ffc0000 [ 183.265156][ T30] audit: type=1326 audit(1776624220.551:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7272 comm="syz.3.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd4e79c819 code=0x7ffc0000 [ 183.314306][ T30] audit: type=1326 audit(1776624220.551:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7272 comm="syz.3.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd4e79c819 code=0x7ffc0000 [ 183.386611][ T30] audit: type=1326 audit(1776624220.561:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7272 comm="syz.3.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fdd4e79c819 code=0x7ffc0000 [ 183.442888][ T30] audit: type=1326 audit(1776624220.581:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7272 comm="syz.3.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd4e79c819 code=0x7ffc0000 [ 183.957238][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 183.965425][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 183.973245][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 183.980978][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 183.988494][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 183.997291][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 184.005458][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 184.013214][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 184.021013][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 184.028490][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 184.055126][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 184.081359][ T5931] usb 2-1: USB disconnect, device number 20 [ 184.243507][ T5931] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 186.460874][ T126] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 186.673622][ T126] usb 2-1: unable to get BOS descriptor or descriptor too short [ 186.707394][ T126] usb 2-1: config 255 has an invalid interface number: 202 but max is 0 [ 186.741864][ T126] usb 2-1: config 255 has no interface number 0 [ 186.761313][ T126] usb 2-1: config 255 interface 202 has no altsetting 0 [ 186.791482][ T126] usb 2-1: string descriptor 0 read error: -22 [ 186.805907][ T126] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice=33.c7 [ 186.832286][ T126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.865879][ T7318] usb 1-1: USB disconnect, device number 3 [ 186.885129][ T7327] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 186.903523][ T7327] PKCS7: Only support pkcs7_signedData type [ 186.912069][ T126] lan78xx 2-1:255.202 (unnamed net_device) (uninitialized): USB bus speed not supported [ 186.939460][ T126] lan78xx 2-1:255.202: probe with driver lan78xx failed with error -5 [ 187.650885][ T7311] syz.0.360 (7311): drop_caches: 2 [ 188.299062][ T7336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.365'. [ 188.339699][ T7338] FAULT_INJECTION: forcing a failure. [ 188.339699][ T7338] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.373364][ T7338] CPU: 0 UID: 0 PID: 7338 Comm: syz.0.366 Tainted: G L syzkaller #0 PREEMPT(full) [ 188.373401][ T7338] Tainted: [L]=SOFTLOCKUP [ 188.373409][ T7338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 188.373419][ T7338] Call Trace: [ 188.373426][ T7338] [ 188.373434][ T7338] dump_stack_lvl+0xe8/0x150 [ 188.373467][ T7338] should_fail_ex+0x412/0x560 [ 188.373496][ T7338] _copy_to_user+0x31/0xb0 [ 188.373525][ T7338] sk_getsockopt+0x1cc4/0x2840 [ 188.373553][ T7338] ? __pfx_sk_getsockopt+0x10/0x10 [ 188.373571][ T7338] ? __pfx_aa_unix_opt_perm+0x10/0x10 [ 188.373604][ T7338] ? get_pid_task+0x20/0x1f0 [ 188.373658][ T7338] do_sock_getsockopt+0x2bd/0x7e0 [ 188.373685][ T7338] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 188.373720][ T7338] ? __fget_files+0x3a0/0x420 [ 188.373746][ T7338] ? __fget_files+0x2a/0x420 [ 188.373777][ T7338] __x64_sys_getsockopt+0x1a4/0x240 [ 188.373802][ T7338] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.373822][ T7338] do_syscall_64+0x15f/0xf80 [ 188.373844][ T7338] ? trace_irq_disable+0x3b/0x140 [ 188.373866][ T7338] ? clear_bhb_loop+0x40/0x90 [ 188.373887][ T7338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.373906][ T7338] RIP: 0033:0x7f45a7b9c819 [ 188.373923][ T7338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.373938][ T7338] RSP: 002b:00007f45a8976028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 188.373958][ T7338] RAX: ffffffffffffffda RBX: 00007f45a7e15fa0 RCX: 00007f45a7b9c819 [ 188.373971][ T7338] RDX: 000000000000001c RSI: 0000000000000001 RDI: 0000000000000004 [ 188.373982][ T7338] RBP: 00007f45a8976090 R08: 00002000000004c0 R09: 0000000000000000 [ 188.373993][ T7338] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 188.374005][ T7338] R13: 00007f45a7e16038 R14: 00007f45a7e15fa0 R15: 00007f45a7f3fa48 [ 188.374033][ T7338] [ 188.665008][ T10] usb 2-1: USB disconnect, device number 21 [ 188.728221][ T7336] netlink: 12 bytes leftover after parsing attributes in process `syz.4.365'. [ 189.460204][ T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 189.651133][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 189.685592][ T10] usb 5-1: New USB device found, idVendor=102c, idProduct=6251, bcdDevice=7e.68 [ 189.738178][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.771296][ T10] usb 5-1: Product: syz [ 189.783064][ T10] usb 5-1: Manufacturer: syz [ 189.805486][ T10] usb 5-1: SerialNumber: syz [ 189.819981][ T7360] warning: `syz.2.374' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 189.852929][ T10] usb 5-1: config 0 descriptor?? [ 189.874426][ T10] gspca_main: etoms-2.14.0 probing 102c:6251 [ 190.459059][ T10] usb 5-1: USB disconnect, device number 18 [ 190.680810][ T5931] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 190.919366][ T5931] usb 4-1: Using ep0 maxpacket: 32 [ 190.988630][ T5931] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 191.032679][ T5931] usb 4-1: config 0 has no interface number 0 [ 191.064915][ T5931] usb 4-1: config 0 interface 184 has no altsetting 0 [ 191.141695][ T5931] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 191.189284][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.224342][ T5931] usb 4-1: Product: syz [ 191.254684][ T5931] usb 4-1: Manufacturer: syz [ 191.298457][ T5931] usb 4-1: SerialNumber: syz [ 191.393992][ T5931] usb 4-1: config 0 descriptor?? [ 191.709783][ T7400] netlink: 'syz.0.387': attribute type 13 has an invalid length. [ 191.753531][ T7400] netlink: 12 bytes leftover after parsing attributes in process `syz.0.387'. [ 191.765772][ T126] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 191.951787][ T126] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.964071][ T126] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.980354][ T126] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 191.994672][ T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.049599][ T126] usb 3-1: config 0 descriptor?? [ 192.127823][ T5931] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 192.212958][ T5931] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 192.226156][ T5931] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 192.240143][ T5931] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61 [ 192.540554][ T126] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 192.574659][ T126] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 192.591525][ T126] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 192.617230][ T126] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 192.648477][ T126] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 192.668084][ T126] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 192.689113][ T126] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 192.713178][ T126] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 192.831242][ T126] cp2112 0003:10C4:EA90.0003: Part Number: 0x00 Device Version: 0x00 [ 193.465599][ T126] cp2112 0003:10C4:EA90.0003: error reading lock byte: -32 [ 193.795212][ T126] usb 4-1: USB disconnect, device number 22 [ 194.010173][ T5931] usb 3-1: reset high-speed USB device number 17 using dummy_hcd [ 194.314526][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.325253][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.660291][ T10] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 194.820171][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 194.836796][ T10] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.870846][ T10] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 194.934932][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 194.961296][ T10] usb 4-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 195.008736][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.050167][ T10] usb 4-1: config 0 descriptor?? [ 195.331775][ T24] usb 3-1: USB disconnect, device number 17 [ 195.531543][ T10] hid-u2fzero 0003:20A0:4287.0004: unknown main item tag 0x0 [ 195.579568][ T10] hid-u2fzero 0003:20A0:4287.0004: unknown main item tag 0x0 [ 195.608527][ T10] hid-u2fzero 0003:20A0:4287.0004: unknown main item tag 0x0 [ 195.646171][ T10] hid-u2fzero 0003:20A0:4287.0004: item fetching failed at offset 14/41 [ 195.704588][ T10] hid-u2fzero 0003:20A0:4287.0004: probe with driver hid-u2fzero failed with error -22 [ 195.731342][ T10] usb 4-1: USB disconnect, device number 23 [ 195.760550][ T5931] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 195.810326][ T24] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 195.990492][ T5931] usb 2-1: Using ep0 maxpacket: 8 [ 196.002516][ T24] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 196.035845][ T5931] usb 2-1: New USB device found, idVendor=102c, idProduct=6251, bcdDevice=7e.68 [ 196.045586][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.062036][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.080253][ T24] usb 3-1: Product: syz [ 196.090118][ T24] usb 3-1: Manufacturer: syz [ 196.095231][ T5931] usb 2-1: Product: syz [ 196.110303][ T24] usb 3-1: SerialNumber: syz [ 196.122159][ T5931] usb 2-1: Manufacturer: syz [ 196.133531][ T5931] usb 2-1: SerialNumber: syz [ 196.147424][ T24] usb 3-1: config 0 descriptor?? [ 196.239667][ T5931] usb 2-1: config 0 descriptor?? [ 196.273359][ T5931] gspca_main: etoms-2.14.0 probing 102c:6251 [ 196.372645][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 196.378935][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 196.380211][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 196.387730][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 196.392963][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 196.822204][ T5931] usb 2-1: USB disconnect, device number 22 [ 196.874373][ T24] usb 3-1: Firmware: major: 151, minor: 121, hardware type: UNKNOWN (172) [ 197.168107][ T24] usb 3-1: Firmware: build â [ 197.422208][ T24] usb 3-1: failed to fetch extended address, random address set [ 197.496332][ T24] usb 3-1: atusb_probe: initialization failed, error = -524 [ 197.509380][ T7466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.543463][ T7466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.595777][ T24] atusb 3-1:0.0: probe with driver atusb failed with error -524 [ 197.654828][ T24] usb 3-1: USB disconnect, device number 18 [ 197.842190][ T7472] tipc: Started in network mode [ 197.850311][ T7472] tipc: Node identity 8ee0b8e12a27, cluster identity 4711 [ 197.861102][ T7472] tipc: Enabled bearer , priority 0 [ 197.877999][ T7472] syzkaller0: entered promiscuous mode [ 197.888080][ T7472] syzkaller0: entered allmulticast mode [ 197.945691][ T7472] tipc: Resetting bearer [ 197.960508][ T7471] tipc: Resetting bearer [ 197.993048][ T7471] tipc: Disabling bearer [ 198.760797][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 198.950102][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 198.962290][ T9] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.987241][ T9] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 199.033436][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 199.060946][ T9] usb 3-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 199.097703][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.135250][ T9] usb 3-1: config 0 descriptor?? [ 199.797273][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 199.822889][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 199.881972][ T9] usb 3-1: USB disconnect, device number 19 [ 200.778972][ T7502] bond0: (slave veth1_vlan): Error: Device is in use and cannot be enslaved [ 203.970907][ T9] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 204.402702][ T7559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.437940][ T7559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.651002][ T9] usb 4-1: config index 0 descriptor too short (expected 8192, got 36) [ 204.695310][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.768124][ T9] usb 4-1: config 0 has no interfaces? [ 204.806323][ T9] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 204.848882][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.949195][ T9] usb 4-1: config 0 descriptor?? [ 206.353059][ T7564] netlink: 20 bytes leftover after parsing attributes in process `syz.4.433'. [ 207.717686][ T10] usb 4-1: USB disconnect, device number 24 [ 207.756108][ T7588] netlink: 'syz.1.439': attribute type 1 has an invalid length. [ 207.855550][ T7590] netlink: 92 bytes leftover after parsing attributes in process `syz.0.438'. [ 208.208926][ T7588] 8021q: adding VLAN 0 to HW filter on device bond2 [ 208.614511][ T7581] vlan2: entered promiscuous mode [ 208.657747][ T7581] bond2: entered promiscuous mode [ 208.705669][ T7581] vlan2: entered allmulticast mode [ 208.726976][ T7581] bond2: entered allmulticast mode [ 210.670595][ T7618] FAULT_INJECTION: forcing a failure. [ 210.670595][ T7618] name failslab, interval 1, probability 0, space 0, times 1 [ 210.728131][ T7618] CPU: 0 UID: 0 PID: 7618 Comm: syz.1.445 Tainted: G L syzkaller #0 PREEMPT(full) [ 210.728162][ T7618] Tainted: [L]=SOFTLOCKUP [ 210.728169][ T7618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 210.728180][ T7618] Call Trace: [ 210.728188][ T7618] [ 210.728196][ T7618] dump_stack_lvl+0xe8/0x150 [ 210.728230][ T7618] should_fail_ex+0x412/0x560 [ 210.728260][ T7618] should_failslab+0xa8/0x100 [ 210.728282][ T7618] ? vm_area_dup+0x2b/0x680 [ 210.728302][ T7618] kmem_cache_alloc_noprof+0x87/0x650 [ 210.728329][ T7618] vm_area_dup+0x2b/0x680 [ 210.728353][ T7618] __split_vma+0x1dc/0xa40 [ 210.728382][ T7618] ? mas_next_slot+0xc3b/0xd10 [ 210.728408][ T7618] ? __pfx___split_vma+0x10/0x10 [ 210.728443][ T7618] ? mas_find+0xb0e/0xd30 [ 210.728470][ T7618] vms_gather_munmap_vmas+0x4fa/0x1380 [ 210.728511][ T7618] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 210.728545][ T7618] ? mas_find+0xa7d/0xd30 [ 210.728572][ T7618] mmap_region+0x856/0x2280 [ 210.728613][ T7618] ? __pfx_mmap_region+0x10/0x10 [ 210.728646][ T7618] ? kasan_quarantine_put+0xbb/0x1f0 [ 210.728665][ T7618] ? lockdep_hardirqs_on+0x7a/0x110 [ 210.728692][ T7618] ? kfree+0x1c5/0x640 [ 210.728717][ T7618] ? process_measurement+0x1800/0x1c80 [ 210.728799][ T7618] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 210.728835][ T7618] ? mm_get_unmapped_area_vmflags+0xd9/0x110 [ 210.728850][ T7618] ? cap_mmap_addr+0xaf/0x100 [ 210.728870][ T7618] ? bpf_lsm_mmap_addr+0x9/0x50 [ 210.728895][ T7618] ? shmem_mapping+0xd/0x50 [ 210.728915][ T7618] ? memfd_check_seals_mmap+0x165/0x200 [ 210.728942][ T7618] do_mmap+0xc39/0x10c0 [ 210.728978][ T7618] ? __pfx_do_mmap+0x10/0x10 [ 210.729001][ T7618] ? down_write_killable+0x180/0x240 [ 210.729028][ T7618] ? __pfx_down_write_killable+0x10/0x10 [ 210.729062][ T7618] ? apparmor_mmap_file+0x2da/0x3e0 [ 210.729087][ T7618] vm_mmap_pgoff+0x2c9/0x4f0 [ 210.729123][ T7618] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 210.729149][ T7618] ? __fget_files+0x2a/0x420 [ 210.729178][ T7618] ? __fget_files+0x3a0/0x420 [ 210.729202][ T7618] ? __fget_files+0x2a/0x420 [ 210.729230][ T7618] ksys_mmap_pgoff+0x51e/0x760 [ 210.729250][ T7618] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.729271][ T7618] do_syscall_64+0x15f/0xf80 [ 210.729292][ T7618] ? trace_irq_disable+0x3b/0x140 [ 210.729314][ T7618] ? clear_bhb_loop+0x40/0x90 [ 210.729335][ T7618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.729353][ T7618] RIP: 0033:0x7fc81f39c819 [ 210.729369][ T7618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.729385][ T7618] RSP: 002b:00007fc8201a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 210.729403][ T7618] RAX: ffffffffffffffda RBX: 00007fc81f615fa0 RCX: 00007fc81f39c819 [ 210.729416][ T7618] RDX: 0000000000000005 RSI: 0000000000003000 RDI: 0000200000000000 [ 210.729427][ T7618] RBP: 00007fc8201a2090 R08: 0000000000000003 R09: 0000000000000000 [ 210.729438][ T7618] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 210.729449][ T7618] R13: 00007fc81f616038 R14: 00007fc81f615fa0 R15: 00007fc81f73fa48 [ 210.729478][ T7618] [ 211.929008][ T7646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.453'. [ 211.972720][ T7646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.453'. [ 212.039722][ T7646] netlink: 'syz.0.453': attribute type 6 has an invalid length. [ 212.283428][ T6570] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.283470][ T7646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.453'. [ 212.341106][ T6570] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.355594][ T6570] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.375201][ T6570] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.410245][ T7646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.453'. [ 212.477020][ T7646] netlink: 'syz.0.453': attribute type 6 has an invalid length. [ 213.050394][ T987] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 213.200762][ T10] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 213.245424][ T7664] netlink: 92 bytes leftover after parsing attributes in process `syz.0.456'. [ 213.324035][ T987] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 213.342385][ T987] usb 2-1: can't read configurations, error -61 [ 213.370228][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 213.385763][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 213.413876][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 213.439260][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 213.460179][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 213.471084][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 213.505845][ T987] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 213.532319][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 213.554349][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.640307][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 213.663199][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.692441][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.724232][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 213.768722][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.787196][ T987] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 213.814588][ T987] usb 2-1: can't read configurations, error -61 [ 213.822423][ T10] usb 3-1: GET_CAPABILITIES returned 0 [ 213.835330][ T9] usb 4-1: config 0 descriptor?? [ 213.850147][ T10] usbtmc 3-1:16.0: can't read capabilities [ 213.891501][ T9] hub 4-1:0.0: USB hub found [ 213.912172][ T987] usb usb2-port1: attempt power cycle [ 214.118033][ T9] hub 4-1:0.0: 1 port detected [ 214.196673][ T5931] usb 3-1: USB disconnect, device number 20 [ 214.340211][ T987] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 214.556192][ T7672] FAULT_INJECTION: forcing a failure. [ 214.556192][ T7672] name failslab, interval 1, probability 0, space 0, times 0 [ 214.646086][ T7672] CPU: 1 UID: 0 PID: 7672 Comm: syz.2.460 Tainted: G L syzkaller #0 PREEMPT(full) [ 214.646117][ T7672] Tainted: [L]=SOFTLOCKUP [ 214.646124][ T7672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 214.646135][ T7672] Call Trace: [ 214.646144][ T7672] [ 214.646152][ T7672] dump_stack_lvl+0xe8/0x150 [ 214.646183][ T7672] should_fail_ex+0x412/0x560 [ 214.646216][ T7672] should_failslab+0xa8/0x100 [ 214.646237][ T7672] ? mas_alloc_nodes+0x291/0x350 [ 214.646259][ T7672] kmem_cache_alloc_noprof+0x87/0x650 [ 214.646281][ T7672] mas_alloc_nodes+0x291/0x350 [ 214.646295][ T7672] mas_preallocate+0x2d6/0x640 [ 214.646307][ T7672] ? rcu_is_watching+0x15/0xb0 [ 214.646319][ T7672] ? __pfx_mas_preallocate+0x10/0x10 [ 214.646342][ T7672] ? __mas_set_range+0x12f/0x3c0 [ 214.646371][ T7672] __split_vma+0x318/0xa40 [ 214.646408][ T7672] ? __pfx___split_vma+0x10/0x10 [ 214.646433][ T7672] ? mas_find+0xb0e/0xd30 [ 214.646449][ T7672] vms_gather_munmap_vmas+0x4fa/0x1380 [ 214.646471][ T7672] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 214.646495][ T7672] ? mas_find+0xa7d/0xd30 [ 214.646523][ T7672] mmap_region+0x856/0x2280 [ 214.646565][ T7672] ? __pfx_mmap_region+0x10/0x10 [ 214.646616][ T7672] ? kasan_quarantine_put+0xbb/0x1f0 [ 214.646626][ T7672] ? lockdep_hardirqs_on+0x7a/0x110 [ 214.646647][ T7672] ? kfree+0x1c5/0x640 [ 214.646671][ T7672] ? process_measurement+0x1800/0x1c80 [ 214.646747][ T7672] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 214.646764][ T7672] ? lockdep_hardirqs_on+0x7a/0x110 [ 214.646780][ T7672] ? mm_get_unmapped_area_vmflags+0xd9/0x110 [ 214.646790][ T7672] ? cap_mmap_addr+0xaf/0x100 [ 214.646806][ T7672] ? bpf_lsm_mmap_addr+0x9/0x50 [ 214.646833][ T7672] ? shmem_mapping+0xd/0x50 [ 214.646855][ T7672] ? memfd_check_seals_mmap+0x165/0x200 [ 214.646883][ T7672] do_mmap+0xc39/0x10c0 [ 214.646906][ T7672] ? __pfx_do_mmap+0x10/0x10 [ 214.646918][ T7672] ? down_write_killable+0x180/0x240 [ 214.646934][ T7672] ? __pfx_down_write_killable+0x10/0x10 [ 214.646950][ T7672] ? apparmor_mmap_file+0x2da/0x3e0 [ 214.646975][ T7672] vm_mmap_pgoff+0x2c9/0x4f0 [ 214.647008][ T7672] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 214.647033][ T7672] ? __fget_files+0x2a/0x420 [ 214.647052][ T7672] ? __fget_files+0x3a0/0x420 [ 214.647066][ T7672] ? __fget_files+0x2a/0x420 [ 214.647082][ T7672] ksys_mmap_pgoff+0x51e/0x760 [ 214.647093][ T7672] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.647109][ T7672] do_syscall_64+0x15f/0xf80 [ 214.647133][ T7672] ? clear_bhb_loop+0x40/0x90 [ 214.647155][ T7672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.647172][ T7672] RIP: 0033:0x7f29c7f9c819 [ 214.647189][ T7672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.647198][ T7672] RSP: 002b:00007f29c8db0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 214.647210][ T7672] RAX: ffffffffffffffda RBX: 00007f29c8215fa0 RCX: 00007f29c7f9c819 [ 214.647217][ T7672] RDX: 0000000000000005 RSI: 0000000000003000 RDI: 0000200000000000 [ 214.647223][ T7672] RBP: 00007f29c8db0090 R08: 0000000000000003 R09: 0000000000000000 [ 214.647229][ T7672] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000002 [ 214.647236][ T7672] R13: 00007f29c8216038 R14: 00007f29c8215fa0 R15: 00007f29c833fa48 [ 214.647255][ T7672] [ 215.308153][ T9] hub 4-1:0.0: activate --> -90 [ 215.320797][ T7677] netlink: 24 bytes leftover after parsing attributes in process `syz.4.462'. [ 216.306084][ T9] hub 4-1:0.0: hub_ext_port_status failed (err = 0) [ 216.670244][ T987] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 216.678232][ T987] usb 2-1: can't read configurations, error -71 [ 216.687345][ T24] usb 4-1: USB disconnect, device number 25 [ 217.049104][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 217.049121][ T30] audit: type=1326 audit(1776624254.761:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7687 comm="syz.1.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc81f39c819 code=0x7ffc0000 [ 217.077800][ T30] audit: type=1326 audit(1776624254.821:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7687 comm="syz.1.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc81f39c819 code=0x7ffc0000 [ 217.260389][ T30] audit: type=1326 audit(1776624254.931:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7687 comm="syz.1.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fc81f39c819 code=0x7ffc0000 [ 217.282822][ T30] audit: type=1326 audit(1776624254.931:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7687 comm="syz.1.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc81f39c819 code=0x7ffc0000 [ 217.368945][ T7694] netlink: 16390 bytes leftover after parsing attributes in process `syz.4.466'. [ 217.429106][ T30] audit: type=1326 audit(1776624254.931:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7687 comm="syz.1.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc81f39c819 code=0x7ffc0000 [ 217.642286][ T7694] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 217.894930][ T30] audit: type=1326 audit(1776624254.931:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7687 comm="syz.1.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7fc81f39c819 code=0x7ffc0000 [ 226.561226][ C0] sched: DL replenish lagged too much [ 232.266324][ T30] audit: type=1326 audit(1776624254.931:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7687 comm="syz.1.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc81f39c819 code=0x7ffc0000 [ 248.619233][ T30] audit: type=1326 audit(1776624254.931:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7687 comm="syz.1.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc81f39c819 code=0x7ffc0000 [ 248.641402][ T30] audit: type=1326 audit(1776624254.931:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7687 comm="syz.1.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc81f39c819 code=0x7ffc0000 [ 248.663727][ T30] audit: type=1326 audit(1776624254.931:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7687 comm="syz.1.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fc81f39c819 code=0x7ffc0000 [ 268.114110][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 268.157795][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.165485][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.234875][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.943972][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.979275][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 428.039946][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 428.047112][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5888/1:b..l [ 428.055367][ C0] rcu: (detected by 0, t=10504 jiffies, g=35201, q=1479809 ncpus=2) [ 428.063641][ C0] task:kworker/0:4 state:R running task stack:21704 pid:5888 tgid:5888 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 428.078124][ C0] Workqueue: mld mld_ifc_work [ 428.082845][ C0] Call Trace: [ 428.086147][ C0] [ 428.089096][ C0] __schedule+0x17b4/0x5680 [ 428.093675][ C0] ? unwind_next_frame+0x1bbf/0x2550 [ 428.099099][ C0] ? __pfx___schedule+0x10/0x10 [ 428.103998][ C0] preempt_schedule_irq+0x4d/0xa0 [ 428.109060][ C0] irqentry_exit+0x14f/0x730 [ 428.113676][ C0] ? trace_irq_disable+0x3b/0x140 [ 428.118730][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 428.124743][ C0] RIP: 0010:lock_acquire+0x221/0x350 [ 428.130071][ C0] Code: ff ff ff e8 a1 67 14 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 8b f2 9d 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 58 d2 94 [ 428.149700][ C0] RSP: 0018:ffffc9000465f1d8 EFLAGS: 00000286 [ 428.155819][ C0] RAX: c04878345e8d3f00 RBX: 0000000000000000 RCX: 0000000000000046 [ 428.163809][ C0] RDX: 00000000868c72fb RSI: ffffffff8e247e65 RDI: ffffffff8c2892e0 [ 428.172046][ C0] RBP: ffffffff81770256 R08: ffffffff81770256 R09: ffffffff8e95cce0 [ 428.180088][ C0] R10: ffffc9000465f338 R11: ffffffff81b0f560 R12: 0000000000000002 [ 428.188169][ C0] R13: ffffffff8e95cce0 R14: 0000000000000000 R15: 0000000000000246 [ 428.196171][ C0] ? unwind_next_frame+0xa6/0x2550 [ 428.201305][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 428.207477][ C0] ? unwind_next_frame+0xa6/0x2550 [ 428.212609][ C0] ? ret_from_fork+0x514/0xb70 [ 428.217436][ C0] ? unwind_next_frame+0xa6/0x2550 [ 428.222571][ C0] unwind_next_frame+0xc3/0x2550 [ 428.227529][ C0] ? unwind_next_frame+0xa6/0x2550 [ 428.232653][ C0] ? unwind_next_frame+0xa6/0x2550 [ 428.237777][ C0] ? kthread+0x388/0x470 [ 428.242036][ C0] ? ret_from_fork+0x514/0xb70 [ 428.246822][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 428.252998][ C0] arch_stack_walk+0x11b/0x150 [ 428.257805][ C0] ? ret_from_fork+0x514/0xb70 [ 428.262715][ C0] stack_trace_save+0xa9/0x100 [ 428.267521][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 428.272929][ C0] save_stack+0x122/0x230 [ 428.277284][ C0] ? __pfx_save_stack+0x10/0x10 [ 428.282152][ C0] ? __free_frozen_pages+0xbc7/0xd30 [ 428.287455][ C0] ? __slab_free+0x274/0x2c0 [ 428.292067][ C0] ? qlist_free_all+0x99/0x100 [ 428.296847][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 428.302499][ C0] ? __kasan_slab_alloc+0x22/0x80 [ 428.307540][ C0] ? __kmalloc_node_track_caller_noprof+0x493/0x7b0 [ 428.314232][ C0] ? __alloc_skb+0x2c1/0x7d0 [ 428.318915][ C0] ? mld_newpack+0x14c/0xc90 [ 428.323510][ C0] ? add_grhead+0x5a/0x2a0 [ 428.327932][ C0] ? add_grec+0x1452/0x1740 [ 428.332445][ C0] ? mld_ifc_work+0x6e6/0xe70 [ 428.337151][ C0] ? process_scheduled_works+0xb5d/0x1860 [ 428.342910][ C0] ? worker_thread+0xa53/0xfc0 [ 428.347687][ C0] ? kthread+0x388/0x470 [ 428.351950][ C0] ? ret_from_fork+0x514/0xb70 [ 428.356735][ C0] ? page_ext_put+0x97/0xc0 [ 428.361263][ C0] __reset_page_owner+0x71/0x1f0 [ 428.366224][ C0] __free_frozen_pages+0xbc7/0xd30 [ 428.371369][ C0] __slab_free+0x274/0x2c0 [ 428.375810][ C0] ? qlist_free_all+0x8e/0x100 [ 428.380607][ C0] qlist_free_all+0x99/0x100 [ 428.385235][ C0] kasan_quarantine_reduce+0x148/0x160 [ 428.390725][ C0] __kasan_slab_alloc+0x22/0x80 [ 428.395592][ C0] __kmalloc_node_track_caller_noprof+0x493/0x7b0 [ 428.402036][ C0] ? mld_newpack+0x14c/0xc90 [ 428.406648][ C0] ? __kmalloc_node_track_caller_noprof+0x34a/0x7b0 [ 428.413258][ C0] __alloc_skb+0x2c1/0x7d0 [ 428.417703][ C0] mld_newpack+0x14c/0xc90 [ 428.422147][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 428.427982][ C0] ? __pfx_mld_newpack+0x10/0x10 [ 428.432938][ C0] ? __mutex_lock+0xef6/0x1550 [ 428.437708][ C0] ? register_lock_class+0x31/0x2e0 [ 428.442927][ C0] add_grhead+0x5a/0x2a0 [ 428.447178][ C0] ? add_grec+0x1360/0x1740 [ 428.451709][ C0] add_grec+0x1452/0x1740 [ 428.456071][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 428.461125][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 428.466544][ C0] mld_ifc_work+0x6e6/0xe70 [ 428.471169][ C0] ? process_scheduled_works+0xa70/0x1860 [ 428.476934][ C0] process_scheduled_works+0xb5d/0x1860 [ 428.482633][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 428.488662][ C0] ? assign_work+0x3d5/0x5e0 [ 428.493290][ C0] worker_thread+0xa53/0xfc0 [ 428.497933][ C0] kthread+0x388/0x470 [ 428.502052][ C0] ? __pfx_worker_thread+0x10/0x10 [ 428.507283][ C0] ? __pfx_kthread+0x10/0x10 [ 428.511901][ C0] ret_from_fork+0x514/0xb70 [ 428.516514][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 428.521639][ C0] ? __switch_to+0xc79/0x1410 [ 428.526335][ C0] ? __pfx_kthread+0x10/0x10 [ 428.530938][ C0] ret_from_fork_asm+0x1a/0x30 [ 428.535729][ C0] [ 428.538753][ C0] rcu: rcu_preempt kthread starved for 595 jiffies! g35201 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 428.549878][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 428.559853][ C0] rcu: RCU grace-period kthread stack dump: [ 428.565753][ C0] task:rcu_preempt state:R running task stack:27544 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 428.579563][ C0] Call Trace: [ 428.583023][ C0] [ 428.585996][ C0] __schedule+0x17b4/0x5680 [ 428.590528][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 428.595521][ C0] ? __pfx___schedule+0x10/0x10 [ 428.600536][ C0] ? schedule+0x90/0x360 [ 428.604803][ C0] schedule+0x164/0x360 [ 428.609049][ C0] schedule_timeout+0x158/0x2c0 [ 428.614110][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 428.619620][ C0] ? __pfx_process_timeout+0x10/0x10 [ 428.624942][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 428.630794][ C0] ? prepare_to_swait_event+0x340/0x370 [ 428.636379][ C0] rcu_gp_fqs_loop+0x312/0x11d0 [ 428.641275][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 428.647465][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 428.652817][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 428.658136][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 428.662766][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 428.667993][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 428.674089][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 428.679215][ C0] ? __kthread_parkme+0x19c/0x1f0 [ 428.684303][ C0] kthread+0x388/0x470 [ 428.688405][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 428.693627][ C0] ? __pfx_kthread+0x10/0x10 [ 428.698242][ C0] ret_from_fork+0x514/0xb70 [ 428.702874][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 428.708009][ C0] ? __switch_to+0xc79/0x1410 [ 428.712798][ C0] ? __pfx_kthread+0x10/0x10 [ 428.717398][ C0] ret_from_fork_asm+0x1a/0x30 [ 428.722187][ C0] [ 428.725211][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 428.731550][ C0] Sending NMI from CPU 0 to CPUs 1: [ 428.736769][ C1] NMI backtrace for cpu 1 [ 428.736798][ C1] CPU: 1 UID: 0 PID: 5849 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 428.736839][ C1] Tainted: [L]=SOFTLOCKUP [ 428.736851][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 428.736869][ C1] RIP: 0010:debug_check_no_obj_freed+0x229/0x550 [ 428.736897][ C1] Code: 03 80 3c 10 00 74 12 4c 89 ff e8 c2 67 75 fd 48 ba 00 00 00 00 00 fc ff df 4d 8b 3f 4d 39 ef 0f 92 c0 4d 39 fc 0f 96 c1 08 c1 <75> 90 4c 8d 6d 10 4c 89 e8 48 c1 e8 03 0f b6 04 10 84 c0 0f 85 da [ 428.736910][ C1] RSP: 0018:ffffc9000439f5d8 EFLAGS: 00000002 [ 428.736925][ C1] RAX: 1ffff11010e38600 RBX: 0000000000000028 RCX: 0000000000000001 [ 428.736935][ C1] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc9000439f540 [ 428.736946][ C1] RBP: ffff8880871c3770 R08: 0000000000000003 R09: 0000000000000004 [ 428.736955][ C1] R10: dffffc0000000000 R11: fffff52000873ea8 R12: ffff8880801f6000 [ 428.736966][ C1] R13: ffff8880801f5000 R14: 1ffff11010e386ee R15: ffff8880871e6950 [ 428.736978][ C1] FS: 000055558fea4500(0000) GS:ffff888125325000(0000) knlGS:0000000000000000 [ 428.736990][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 428.737001][ C1] CR2: 000055558febfa28 CR3: 00000000659b0000 CR4: 00000000003526f0 [ 428.737015][ C1] Call Trace: [ 428.737021][ C1] [ 428.737039][ C1] __free_frozen_pages+0x593/0xd30 [ 428.737060][ C1] __slab_free+0x274/0x2c0 [ 428.737081][ C1] qlist_free_all+0x99/0x100 [ 428.737098][ C1] kasan_quarantine_reduce+0x148/0x160 [ 428.737114][ C1] __kasan_kmalloc+0x22/0xb0 [ 428.737131][ C1] __kmalloc_noprof+0x35c/0x760 [ 428.737147][ C1] ? tomoyo_encode+0x28b/0x550 [ 428.737166][ C1] ? __kmalloc_noprof+0x1b8/0x760 [ 428.737183][ C1] tomoyo_encode+0x28b/0x550 [ 428.737204][ C1] tomoyo_realpath_from_path+0x58d/0x5d0 [ 428.737230][ C1] tomoyo_path_perm+0x283/0x560 [ 428.737247][ C1] ? tomoyo_path_perm+0x251/0x560 [ 428.737262][ C1] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 428.737300][ C1] security_inode_getattr+0x12b/0x310 [ 428.737316][ C1] vfs_getattr+0x23/0x70 [ 428.737335][ C1] vfs_statx_path+0x2b/0x230 [ 428.737348][ C1] ? vfs_statx+0x107/0x200 [ 428.737366][ C1] vfs_statx+0x12e/0x200 [ 428.737386][ C1] ? __pfx_vfs_statx+0x10/0x10 [ 428.737402][ C1] ? strncpy_from_user+0x150/0x2b0 [ 428.737422][ C1] ? do_getname+0x151/0x250 [ 428.737441][ C1] vfs_fstatat+0x11b/0x170 [ 428.737460][ C1] __x64_sys_newfstatat+0x151/0x200 [ 428.737481][ C1] ? __pfx___x64_sys_newfstatat+0x10/0x10 [ 428.737509][ C1] ? __pfx___x64_sys_umount+0x10/0x10 [ 428.737532][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.737547][ C1] do_syscall_64+0x15f/0xf80 [ 428.737566][ C1] ? trace_irq_disable+0x3b/0x140 [ 428.737584][ C1] ? clear_bhb_loop+0x40/0x90 [ 428.737601][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.737616][ C1] RIP: 0033:0x7f440a19ae5a [ 428.737630][ C1] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 [ 428.737642][ C1] RSP: 002b:00007f440a53ecb8 EFLAGS: 00000286 ORIG_RAX: 0000000000000106 [ 428.737657][ C1] RAX: ffffffffffffffda RBX: 00007f440a232048 RCX: 00007f440a19ae5a [ 428.737668][ C1] RDX: 00007f440a53ece0 RSI: 00007f440a53ed70 RDI: 00000000ffffff9c [ 428.737678][ C1] RBP: 00007f440a53ed70 R08: 00007f440a53fd70 R09: 00000000ffffffff [ 428.737688][ C1] R10: 0000000000000100 R11: 0000000000000286 R12: 00007f440a53fe00 [ 428.737698][ C1] R13: 00007f440a232048 R14: 000000000003539b R15: 00007f440a53fe40 [ 428.737716][ C1]