last executing test programs: 13m27.655862717s ago: executing program 2 (id=1205): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0x80, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x54, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}}, 0x0) (fail_nth: 14) 13m26.849233423s ago: executing program 2 (id=1207): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x200006, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = inotify_init() r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000002, 0x9132, 0xffffffffffffffff, 0x9aa9b000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, 0x0, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, &(0x7f00000002c0)={0x8f, 0x0, 0x1}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000005001000050000000500"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r6, 0x0, &(0x7f0000000180)=""/177}, 0x20) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_MMIO(r1, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000050000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000002214000000110001"], 0xd8}}, 0x0) munmap(&(0x7f0000f64000/0x2000)=nil, 0x2000) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000340)={{&(0x7f0000ce7000/0x1000)=nil, 0x1000}, 0x1}) close_range(r0, 0xffffffffffffffff, 0x0) 13m24.249035168s ago: executing program 2 (id=1216): socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000340)={0x0, 0x63f6, 0x80, 0x5, 0x1d7}, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 13m22.714479188s ago: executing program 2 (id=1225): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000bfd000/0x400000)=nil) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r4, r4, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 13m21.612559652s ago: executing program 2 (id=1234): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='timerslack_ns\x00') write$khugepaged_scan(r0, &(0x7f0000000040), 0x8) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffffd) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000005c0)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f00000000c0)={0x0, @aes128, 0x0, @desc2}) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000480)={0x0, 0x9b, 0x1, [0x1000]}, &(0x7f00000004c0)=0xa) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x82, &(0x7f0000000300)={r6, 0x10, 0x7}, 0x8) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) r9 = dup3(r8, r7, 0x0) ioctl$SNDCTL_SEQ_PANIC(r8, 0x5111) ioctl$SNDCTL_SEQ_OUTOFBAND(r9, 0x40085112, &(0x7f0000000000)=@l={0x92, 0x5, 0xc0, 0xe, 0x40, 0x61, 0x5}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={r6, 0x5}, &(0x7f0000000200)=0x8) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$XFS_IOC_FSGEOMETRY_V4(r1, 0x8070587c, &(0x7f0000000100)) 13m21.2813404s ago: executing program 2 (id=1237): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000140)}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x670, 0x5, 0x450, 0x0, 0x210, 0xfeffffff, 0x0, 0x2e0, 0x3b8, 0x3b8, 0xffffffff, 0x3b8, 0x3b8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@addrtype={{0x30}, {0x50, 0x0, 0x1, 0x1}}, @common=@inet=@tcp={{0x30}, {[0x4e24, 0x4e22], [0x4e23, 0x4e23], 0x8, 0x80, 0x8, 0xe}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x1], 0x2}}}, @common=@addrtype={{0x30}, {0x1, 0x522, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id=0x2, @gre_key=0x8}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x6}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port=0xffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2f8, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xff000000, 0xffffff00, 0x6dc8f3d6512d1aed, 0xffffffff], [0xff, 0xff000000, 0xff000000], 'bond_slave_0\x00', 'batadv0\x00', {}, {}, 0x2f, 0x2, 0x3, 0xe}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x17}, @mcast1, [], [], 'veth1\x00', 'wlan1\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7fffffff, 0x9, 0xb3, 0x1, 0x0, "86d6b549c4bf723e1f33da7c11e5cee0b1adedc05fbfc6af15c3f8b75adf8819ec9d8cd0614114f5f1d3b7ba1d33f3750c2e3b8acf37107767e107dac4688212"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000021, 0x0, 0x0) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r7 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000009c0)="08f05173018937dc0b51fd83f9600b2dbbfb68d16f837583c57da6c64b7342cce982567487515f82064e89e162a79b98868e3c16f27f587a6a41e6ed89aedee24ab377d1d1fc2aa72ad289429cffe55169e18a072a06537bf0474ca7d8c55d", 0x5f, 0xfffffffffffffffe) keyctl$update(0x2, r7, &(0x7f0000000140)="c4", 0x1) add_key$user(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000380)="35f9f7fd3ade877adc201ea6595baa51893b3d8d80454698572d70a1f5fc7b4a7472ced195919ee0199deb9e1ea0f9f78bc28927c5dca1de79aee8cda6d62da0d47bb58d6e4be0cb6538682d5822c957092a960a4d746882465f3df021a84b65784eb4", 0x63, r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) unshare(0x4000400) r9 = open(&(0x7f0000000980)='./file0\x00', 0x300080, 0x6c) write$RDMA_USER_CM_CMD_MIGRATE_ID(r8, &(0x7f0000000400)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r9}}, 0x18) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000140)={0x0, 0x5, 0x1, {0xa, @pix_mp={0x9, 0x81, 0x0, 0x8, 0xa, [{0xd, 0x2}, {0x3, 0x8000}, {0xa64a80ed, 0x7fffffff}, {0x200, 0x3ff}, {0x5, 0x1}, {0x4ce, 0x8}, {0x7ff, 0x9}, {0x6, 0x1}], 0x7, 0xff, 0x6, 0x1, 0x5}}}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000ac0)=ANY=[@ANYRESOCT=r3, @ANYRES32=0x0, @ANYBLOB="211200000000000020a25d39846800128008000100736974001400028006000d000500000008000300ac1414aa"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) 13m20.805652014s ago: executing program 32 (id=1237): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000140)}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x670, 0x5, 0x450, 0x0, 0x210, 0xfeffffff, 0x0, 0x2e0, 0x3b8, 0x3b8, 0xffffffff, 0x3b8, 0x3b8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@addrtype={{0x30}, {0x50, 0x0, 0x1, 0x1}}, @common=@inet=@tcp={{0x30}, {[0x4e24, 0x4e22], [0x4e23, 0x4e23], 0x8, 0x80, 0x8, 0xe}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x1], 0x2}}}, @common=@addrtype={{0x30}, {0x1, 0x522, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id=0x2, @gre_key=0x8}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x6}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port=0xffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2f8, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xff000000, 0xffffff00, 0x6dc8f3d6512d1aed, 0xffffffff], [0xff, 0xff000000, 0xff000000], 'bond_slave_0\x00', 'batadv0\x00', {}, {}, 0x2f, 0x2, 0x3, 0xe}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x17}, @mcast1, [], [], 'veth1\x00', 'wlan1\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7fffffff, 0x9, 0xb3, 0x1, 0x0, "86d6b549c4bf723e1f33da7c11e5cee0b1adedc05fbfc6af15c3f8b75adf8819ec9d8cd0614114f5f1d3b7ba1d33f3750c2e3b8acf37107767e107dac4688212"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000021, 0x0, 0x0) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r7 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000009c0)="08f05173018937dc0b51fd83f9600b2dbbfb68d16f837583c57da6c64b7342cce982567487515f82064e89e162a79b98868e3c16f27f587a6a41e6ed89aedee24ab377d1d1fc2aa72ad289429cffe55169e18a072a06537bf0474ca7d8c55d", 0x5f, 0xfffffffffffffffe) keyctl$update(0x2, r7, &(0x7f0000000140)="c4", 0x1) add_key$user(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000380)="35f9f7fd3ade877adc201ea6595baa51893b3d8d80454698572d70a1f5fc7b4a7472ced195919ee0199deb9e1ea0f9f78bc28927c5dca1de79aee8cda6d62da0d47bb58d6e4be0cb6538682d5822c957092a960a4d746882465f3df021a84b65784eb4", 0x63, r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) unshare(0x4000400) r9 = open(&(0x7f0000000980)='./file0\x00', 0x300080, 0x6c) write$RDMA_USER_CM_CMD_MIGRATE_ID(r8, &(0x7f0000000400)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r9}}, 0x18) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000140)={0x0, 0x5, 0x1, {0xa, @pix_mp={0x9, 0x81, 0x0, 0x8, 0xa, [{0xd, 0x2}, {0x3, 0x8000}, {0xa64a80ed, 0x7fffffff}, {0x200, 0x3ff}, {0x5, 0x1}, {0x4ce, 0x8}, {0x7ff, 0x9}, {0x6, 0x1}], 0x7, 0xff, 0x6, 0x1, 0x5}}}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000ac0)=ANY=[@ANYRESOCT=r3, @ANYRES32=0x0, @ANYBLOB="211200000000000020a25d39846800128008000100736974001400028006000d000500000008000300ac1414aa"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) 22.292945312s ago: executing program 0 (id=4411): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x20, 0x1e, 0x21, 0x70bd2b, 0x0, {0x7}, [@typed={0x5, 0x2a, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0xf}]}, 0x20}, 0x1, 0x0, 0x0, 0x2008800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001200ffff2dbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="210000006318030024002e"], 0x54}, 0x1, 0x0, 0x0, 0x8c851}, 0x40040) 21.977095658s ago: executing program 0 (id=4412): r0 = socket$l2tp6(0xa, 0x2, 0x73) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000380)=0x10001, 0x4) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) 20.958220191s ago: executing program 0 (id=4414): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x2915024094f4014f, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x2}, 0x0) 20.787516755s ago: executing program 0 (id=4415): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x34, 0x3e, 0x107, 0x3, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @typed={0x11, 0x1, 0x0, 0x0, @str='hma\xd3\x1a\xcb\x1b224)\x01\x00'}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0xf4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000100)=0x7, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000780)=[@nested_amd_vmload={0x182, 0x18, 0x1}, @nested_create_vm={0x12d, 0x18, 0x3}, @rdmsr={0x66, 0x18, {0x906}}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @nested_amd_clgi={0x17f, 0x10}, @wr_crn={0x67, 0x20, {0x912b975a80e10bb4, 0x40}}, @out_dx={0x6a, 0x28, {0x6ebe, 0x4, 0x114}}, @uexit={0x0, 0x18, 0x3}, @out_dx={0x6a, 0x28, {0xfee7, 0x7, 0x6}}, @uexit={0x0, 0x18}, @wr_drn={0x68, 0x20, {0x6, 0x2}}, @wr_crn={0x67, 0x20, {0x2, 0x2}}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @out_dx={0x6a, 0x28, {0xb657, 0x7, 0x5}}, @nested_amd_invlpga={0x17d, 0x20, {0xa000, 0xb2cc}}, @in_dx={0x69, 0x20, {0x507f, 0x5}}, @nested_amd_clgi={0x17f, 0x10}, @uexit={0x0, 0x18, 0x7fffffffffffffff}, @nested_load_code={0x12e, 0x7e, {0x1, "450f18a9ab000000c7442400af000000c74424020001c0feff1c24420f323e45c15fff28660fec977936b308f3410f01df66ba6100b804000000ef3667263e66440f1404e0440f20c03503000000440f22c066baf80cb858309b8aef66bafc0cb804000000ef"}}, @nested_amd_clgi={0x17f, 0x10}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @out_dx={0x6a, 0x28, {0x8244, 0xd8e30c0dc3137730, 0x7}}, @nested_load_code={0x12e, 0x5e, {0x3, "c4418c5de9420f2091410f222143af460fc7be0000008047dc6f0066670f06c443b17d078bc744240000480000c7442402c0000000c7442406000000000f011c24660f388212"}}, @code={0xa, 0x4e, {"450f01c8460f09f3400fae23640f38f998f2d779dd66baf80cb87e08ad88ef66bafc0c66b8008066efc4017c5aec0f09f30f09b9ab0b00000f32400f09"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @host16=0xc02, 0x3, 0x5, 0x2}}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_amd_inject_event={0x180, 0x38, {0xfffffffffffffffe, 0xba, 0x5, 0x7, 0x3}}, @nested_vmresume={0x130, 0x18, 0xa0f}, @code={0xa, 0x4c, {"660f3881882c470000450f01ca450f01c9400f06c4c17d1169800f017e00c421f9d6a5b5d89fbac483cd6fa70500000000410f791166b8fe008ec8"}}, @nested_amd_clgi={0x17f, 0x10}, @nested_load_code={0x12e, 0x50, {0x1, "8f8860cc5b000066430f3a0f93070000000e66ba4000edf30f090f0059df440f20c0350f000000440f22c0f3a5260f0159b964d9e4260f09"}}, @enable_nested={0x12c, 0x18}], 0x4d6}) ioctl$KVM_GET_SREGS2(r3, 0x8140aecc, &(0x7f0000000380)) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, 0x0, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r4, &(0x7f0000000180)='\x00', 0x1, 0x24000010, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000000c80)="7cffa9", 0x3, 0xbcff, 0x0, 0x0) shutdown(r4, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x4d5e, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)={0x2, 'bridge0\x00', {0xfffffffa}, 0x9f6}) sendto$inet(r0, &(0x7f0000000740)="5e000d001b71ecab36c7f263c06bddc65b99fb63499dd5c8ef68ff53e24127f1a538594685e48943f26e", 0x2a, 0x40000, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x4) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x104000, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 20.441387102s ago: executing program 0 (id=4417): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x48000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 20.379943005s ago: executing program 0 (id=4418): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000400)=@v1={0x1000000, [{0xbfa5, 0x7fff}]}, 0xc, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x1, 0x0, 0x3, 0x64}}) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xce05562}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xb0}}, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000540)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PANTHOR_VM_DESTROY(r2, 0xc0086442, &(0x7f0000000700)) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x6}, @TCA_CAKE_INGRESS={0x8}]}}]}, 0x44}}, 0x44080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r6) sendmsg$TIPC_NL_KEY_FLUSH(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r7, 0xb0b562451b02691d, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000900)={0xf8, r7, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x90f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x403}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}}, {0x14, 0x2, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3d}}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400e16f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x14, 0x2, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40080d4}, 0x11) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000040)=0x7, 0x4) syz_emit_ethernet(0x4e, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd625616990000000000000000060000000000000000000001200100000000000000000000000000023b0200000000000007"], 0x0) recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/70, 0x46}}], 0x1, 0x1001, 0x0) socket$inet6(0xa, 0x2, 0x0) r8 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r8, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r8, 0x0, 0x0) syz_usb_control_io$lan78xx(r8, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001200)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in=@local, 0x1, 0x71c, 0x4e23, 0x7, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x0, 0x8, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x10001, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) 19.895699226s ago: executing program 33 (id=4418): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000400)=@v1={0x1000000, [{0xbfa5, 0x7fff}]}, 0xc, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x1, 0x0, 0x3, 0x64}}) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xce05562}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xb0}}, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000540)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PANTHOR_VM_DESTROY(r2, 0xc0086442, &(0x7f0000000700)) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x6}, @TCA_CAKE_INGRESS={0x8}]}}]}, 0x44}}, 0x44080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r6) sendmsg$TIPC_NL_KEY_FLUSH(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r7, 0xb0b562451b02691d, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000900)={0xf8, r7, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x90f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x403}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}}, {0x14, 0x2, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3d}}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400e16f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x14, 0x2, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40080d4}, 0x11) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000040)=0x7, 0x4) syz_emit_ethernet(0x4e, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd625616990000000000000000060000000000000000000001200100000000000000000000000000023b0200000000000007"], 0x0) recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/70, 0x46}}], 0x1, 0x1001, 0x0) socket$inet6(0xa, 0x2, 0x0) r8 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r8, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r8, 0x0, 0x0) syz_usb_control_io$lan78xx(r8, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001200)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in=@local, 0x1, 0x71c, 0x4e23, 0x7, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x0, 0x8, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x10001, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) 12.786147864s ago: executing program 6 (id=4422): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x2) preadv(r0, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000000740)=""/153, 0x99}], 0x2, 0x5, 0x32a) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) r5 = syz_io_uring_setup(0x49a, &(0x7f00000003c0)={0x0, 0x79ad, 0x3180, 0x7ffd, 0x32c, 0x0, r4}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r4, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r5, 0xfd0, 0x4c1, 0x43, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000580)={{0x12, 0x1, 0x300, 0xd0, 0xff, 0x1c, 0x40, 0x4f2, 0xaff8, 0x31a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x4, 0xc8, 0xf8, [{{0x9, 0x4, 0xd2, 0xc, 0x0, 0x3c, 0xae, 0x83, 0x7}}]}}]}}, &(0x7f0000000f40)={0x0, 0x0, 0x7a, &(0x7f0000000c40)=ANY=[@ANYBLOB="050f7a0004"]}) 11.460395303s ago: executing program 5 (id=4468): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x8, 0x0, &(0x7f0000000100)=0x22) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0xd) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r5, 0x65, 0x6, &(0x7f0000000040), 0x4) dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x402) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x7, 0xfffffffffffffffd, 0x0, 0xffff, 0x1, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffffffffffd], 0x30000, 0x2011c0}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket(0x28, 0x5, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f00000b0000/0x4000)=nil, 0x4000, 0x2, 0x28011, r9, 0x2000) ftruncate(r9, 0xc17a) 11.349597152s ago: executing program 1 (id=4469): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0x10) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4, 0x0, @mcast1}, 0x1c) syz_emit_ethernet(0x66, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c200000300000000000086dd6000000000033aff00000000000000000000000000000000ff020000000003400000000000000001"], 0x0) 10.640508018s ago: executing program 1 (id=4471): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) io_setup(0x5, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000140)={0xfffffff7, "421ae3753785251500e9e29b00", 0xffffffffffffffff}) io_submit(0x0, 0x1, &(0x7f0000000800)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) r5 = socket$kcm(0x2, 0xd, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000110000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 8.864418783s ago: executing program 1 (id=4474): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x80a00) read$FUSE(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000044182, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r2, 0xc038563b, &(0x7f0000000040)={0x1, 0x0, {0x69}}) fallocate(r4, 0x11, 0x600, 0x7c000) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x2000000}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x10001}]}}]}, 0x40}}, 0x40004080) 6.334158164s ago: executing program 3 (id=4485): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x8000000d}) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="260000000000000093"], 0x20) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000000)='\t', 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0xffff}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r10 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) setsockopt$inet6_tcp_TLS_TX(r10, 0x11a, 0x1, &(0x7f0000000080)=@gcm_256={{0x304}, "00781beca8267798", "d9126a286bc05380c199d04f41ad9dfc24b430a77b6f6a722839d492519b521f", "af7a86ef", "54d5c7080263672f"}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r9}, &(0x7f0000000000), &(0x7f0000000140)=r8}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000060000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.193094629s ago: executing program 3 (id=4491): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x38, 0x5, 0xa, 0x2915024094f4014f, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2}, 0x0) 5.080127587s ago: executing program 3 (id=4493): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYRES8=r0], 0x0) 4.328471635s ago: executing program 1 (id=4496): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000, 0xfffffffd, 0x20000000334e8b}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000000240)={0x18, r4}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000cc0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x20048000) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001380)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = fsopen(&(0x7f0000000040)='ceph\x00', 0x1) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000c00)=ANY=[@ANYBLOB="4c0000001400010125bd7000fddbdf25101f08104e264e2203000000060000000f000000c3000000f91c00000e0000000000004007000000", @ANYBLOB="01000000ffffff7f09000000c3000000498d662e50e7e7bace33855f4329a8650d9331c170468859e1da477d31f61223db01340be7dc21e2a07b0b2fbfc02d8d387f33f89d0f6c45e15010f83612f9b3c77b82ac16585c48a5d1eeefd93f5ef5625e4b619810cd915b17821fc917cf41cd15b4a520130cce"], 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x5) syz_usb_connect(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000298962d08e2041414b9c50102030109023b00027f0130090904ab020002af27cf052406000005240008000d240f0106000000018002000d0904"], 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f00000004c0)) 4.315704185s ago: executing program 6 (id=4498): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0x10) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4, 0x0, @mcast1}, 0x1c) syz_emit_ethernet(0x66, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c200000300000000000086dd6000000000303aff0000000000000000000000000000000dff020000000000000000000000000001"], 0x0) 4.262546946s ago: executing program 5 (id=4499): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="94000000020605000000000000000000000000004c0007800800124000000009080008400000009805000700ff000000080012400000002c060004404e2300001800018014000240fe88000000000000000000000000000105001400060000f704000500f2ffffff04000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e657400000000"], 0x94}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r5, 0x0, 0x25a5, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x400100, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) unshare(0x22020400) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b7000000ff020000bfa3000000000000070300c034ffffff620af0fff8ffffff71a4f0ff000000002d040200000000001d400200000000004604000001ed000062030000c0ff00001d440000000000007a0a00fe00ffffffc3030000a1000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0465f2f994114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840b08000000f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e82623951743283070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) openat$vcs(0xffffffffffffff9c, &(0x7f0000001980), 0x0, 0x0) epoll_create1(0x0) 4.126551907s ago: executing program 6 (id=4500): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0x2, 0x3, 0xf8) connect$pppl2tp(r3, &(0x7f00000005c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x0, 0x5, 0x3, 0x4, {0xa, 0x4e24, 0x5, @remote, 0xff000000}}}, 0x32) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x11, &(0x7f0000000000)=ANY=[@ANYBLOB="180800000500000000000000fbffffff18110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf090000000000005509010000000000950000000000000018190000", @ANYRES32=r4, @ANYBLOB="0000000000000000bf9800000000000057080000000000008500000007000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFBR(r5, 0x8940, &(0x7f0000000040)=@get={0x1, &(0x7f0000000600)=""/166, 0x8}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ptrace$ARCH_GET_GS(0x1e, r0, &(0x7f0000000000), 0x1004) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r6, 0xc018643a, &(0x7f00000002c0)={0x10000000, 0x40000c, 0xd229}) 3.776689874s ago: executing program 5 (id=4502): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0xa, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_clone3(&(0x7f0000000480)={0x4808000, &(0x7f0000000040), &(0x7f0000000140), &(0x7f00000001c0), {0x2c}, &(0x7f0000000380)=""/92, 0x5c, &(0x7f00000002c0), &(0x7f0000000400)=[0x0, 0x0], 0x2}, 0x58) fcntl$lock(r0, 0x24, &(0x7f0000000500)={0x0, 0x3, 0xd1, 0x3e, r3}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCOUTQ(r4, 0x5411, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket$inet6(0xa, 0x3, 0x3c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_io_uring_setup(0x492c, &(0x7f0000000540)={0x0, 0xd5a6, 0x4000, 0x1, 0x1b8}, &(0x7f00000002c0), &(0x7f00000005c0)) io_uring_setup(0x2c7d, &(0x7f0000000600)={0x0, 0xf322, 0x800, 0x1, 0x239, 0x0, r7}) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ptrace$setopts(0x4206, r3, 0x69, 0x11) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @remote, 0x7}, 0x1c) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) 3.663439387s ago: executing program 4 (id=4503): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x38, 0x5, 0xa, 0x2915024094f4014f, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2}, 0x0) 3.252123195s ago: executing program 4 (id=4504): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x8000000d}) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="260000000000000093"], 0x20) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000000)='\t', 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0xffff}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r10 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) setsockopt$inet6_tcp_TLS_TX(r10, 0x11a, 0x1, &(0x7f0000000080)=@gcm_256={{0x304}, "00781beca8267798", "d9126a286bc05380c199d04f41ad9dfc24b430a77b6f6a722839d492519b521f", "af7a86ef", "54d5c7080263672f"}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r9}, &(0x7f0000000000), &(0x7f0000000140)=r8}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000070000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.912711769s ago: executing program 3 (id=4505): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000054000000030a01040000000000002200010000000900030073797a31000000000900010073797a310000000028000480080002400c86c30108000140000000051400030070696d7265673100000000000000120028000000000a05000000000000000000010000080900010073797a3100000000080002400000000114000000110001"], 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 1.901640051s ago: executing program 4 (id=4506): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x40000000, 0x6}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x0) write$uinput_user_dev(r3, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x0, [0x0, 0x0, 0x200, 0x0, 0x4, 0x7ff, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0xffffffff, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x8, 0xb16, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xd, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x5795, 0xffffffff, 0xfffffffe, 0x0, 0xff, 0xfffffffd, 0xfffffffd, 0x4ec5, 0xfffffffa, 0x0, 0x80000040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0xffffffff], [0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xddc, 0x0, 0x0, 0xfffffffc, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x7, 0x4], [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc045, 0x0, 0x16, 0x0, 0x4, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x0, 0x0, 0xffffffff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) close(r3) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = syz_io_uring_setup(0x10d, &(0x7f00000006c0)={0x0, 0x5885, 0x0, 0x2}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r6, 0x0, 0x0, 0x0, 0x80800, 0x1}) io_uring_enter(r7, 0x3516, 0xc2de, 0x8, 0x0, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000300)={0x1, 0x0, 0x1, 0x2}) fstat(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x10, &(0x7f00000004c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r10}, 0x2c, {'group_id', 0x3d, r11}, 0x2c, {[{@allow_other}, {@allow_other}, {@allow_other}, {@blksize}, {@blksize={'blksize', 0x3d, 0xc00}}, {@default_permissions}], [{@func={'func', 0x3d, 'PATH_CHECK'}}, {@obj_user={'obj_user', 0x3d, '(!'}}]}}, 0x0, 0x0, &(0x7f00000005c0)="f4209b392a1ad44ee93be7ec174dc3972a1bc3d045acdabc1fa3faf8ce55df386470dc74fdfcabc5d8e7b93527229f2db76574a5c1ef6fe6c54da1974f70c416c40d1780784094bec3fd1a7c785afc57fbe36d80a783c2b142b80199116fc258f2bebf1fe34b54b51e27d6c0679481fc96e1e6e2d6cb20ac87b5f975") fcntl$lock(r1, 0x25, &(0x7f0000000140)={0x0, 0x1, 0x7}) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}], {0x14}}, 0x64}}, 0x0) 1.732190293s ago: executing program 3 (id=4507): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80100, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) (async) socket(0xa, 0x3, 0x3a) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000340)={0x1, @pix={0x0, 0x0, 0x3147504d, 0x0, 0x0, 0x0, 0x3, 0xfeedcafe, 0x3, 0x8, 0x2, 0x4}}) (async) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) (async) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) (async) r4 = syz_open_dev$evdev(&(0x7f0000000140), 0x2, 0x40000) ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, 0x0) (async) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000004c0)="d80000001400810c4e81f782db44b9040a1d080211000000040000a118000200ff05140100000e1208000f0100810401a80016ea1f000840042e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb0900073905a2b4f76c70cbc981e700001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d1601000000eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e006000000000000e87fbb9ad809d5e1cace81b341139fe3cd40", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x2040) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x40010, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) remap_file_pages(&(0x7f000002c000/0x2000)=nil, 0x2000, 0x2000000, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000030a010200000000000000000200000009c9770073797a30000000002200030091abc12404cf378042f26c43f91f68d8a90767c0bc71f60877974475de3d000014000000020a0900000000000000000000000000140000001100010000000000000000000000000a"], 0x80}, 0x1, 0x0, 0x0, 0x40014}, 0x0) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000cc0), 0x8a140, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) 1.356854733s ago: executing program 6 (id=4508): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x18, 0xfffffffffffffff5, 0xa96, {'rootmode'}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000200002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000fdffffffffffffff00000000000000000000000300000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000dd020000000000000000000000000000000000000000000084010500ac14143b000000000000000000000000000000002b00000000000000ac14140c000000000000000000000000000000000000ff00000000000000000000000000fc02000000000000000000000000000000000000320000000000000000000000000000000000000000000000023500000000000000000000000000000000000000000000000000000000000000000001000000003c"], 0x23c}}, 0x0) 1.088237233s ago: executing program 5 (id=4509): syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)={{0x12, 0x1, 0x0, 0x36, 0x57, 0x1a, 0x20, 0xccd, 0x80, 0x67fe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcd, 0x76, 0xe3}}]}}]}}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0xc, &(0x7f0000000400)="001ca73e", 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSET={0x64, 0xb, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x1ff}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, @NFTA_SET_DESC={0x18, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x75d4}]}, @NFTA_SET_KEY_TYPE={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000000)='S', 0x1) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BLKFRAGET(r3, 0x1265, &(0x7f0000000180)) getsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000100)=""/31, &(0x7f0000000080)=0x1f) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) socket(0x11, 0x100000, 0x2) bind$packet(r0, &(0x7f0000000040)={0x11, 0x4, r4}, 0x14) syz_emit_ethernet(0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa24001101001a36406bcb27b4974c68c1e6918431ca699261672b0b54e10ba6f78e084da96845b95b7571b8c0876273af9064c0b136c0cfc38b2f2f09335f951b8097ce42d6e9c90def027aefe35f85f80e3ea7f7c36acdc1985c3363b013db098f824f0160f37041f5911c914b79abea2e5f57ebe44aa2de7722ec81e645811a9da1c035e2b039a685ff1e5f"], 0x0) 1.013238494s ago: executing program 6 (id=4510): syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "f5000000000000000000000200000000000000004000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 766.176513ms ago: executing program 6 (id=4511): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000900)={0x1d, r1, 0x1}, 0x18) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff9", 0x22, 0x0, 0x0, 0x0) 665.022125ms ago: executing program 1 (id=4512): r0 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r0, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r0, 0x0) madvise(&(0x7f00005a9000/0x4000)=nil, 0x4000, 0x13) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f00000002c0)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000340)={0xc, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f0000001380)={0x28, 0x3, r1, r2, 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000380)="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"}) fcntl$addseals(r0, 0x409, 0xc) 503.679829ms ago: executing program 4 (id=4513): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r1, &(0x7f0000000580)={0x237, 0x7d, 0x2, {{0x500, 0xf6, 0x0, 0x5000000, {0x96346fe8a85d2583, 0x0, 0x8}, 0x41400000, 0x0, 0xe5e0, 0x5, 0x1b, '\x04nodev{evoo~\x05E\xc6\x00\x05\b\x007\xd9:\x8b\x92\x00\x00\x00', 0x33, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x37, '\xcf\xc3m\a\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e^\x98\x9c\xd5\xefMQ\xf6\r\xa7X,J\x05\xc8\xf8(\xf6\x8d\xc1wM]\xe2\xe8 \x86#\x81\xf6hm\xd1\xbb\x8f\xd7\x00\x00\x00', 0x3e, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c<;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0w\xdct\x00\x00\x00\x00\x00\x00\x00\x00\a\xec!\xca\xbf\xf2\x0f\x9c\x00\x89\xf9\x06\x00\x00\x00\x00\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x13r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x237) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x29a}]}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYRES16=r2, @ANYRES32=0x0, @ANYRES64=r2, @ANYRES32=r0, @ANYBLOB="040013001400030017"], 0x68}}, 0x48804) 261.254494ms ago: executing program 4 (id=4514): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x38, 0x5, 0xa, 0x2915024094f4014f, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2}, 0x0) 202.163823ms ago: executing program 4 (id=4515): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000340)={0x2, 0x0, [{0x40000000, 0x1000, 0x6, 0x8, 0x62c, 0x2, 0xfffffffa}, {0x80000001, 0x217, 0x4, 0xa, 0x80000001, 0x8, 0x2}]}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syzkaller1\x00', 0x0}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r6, &(0x7f0000007900)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x3d66, @local, 0x5}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000980)="dc", 0x1}], 0x1}}, {{&(0x7f0000000200)={0xa, 0x4e20, 0x86, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x532}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000700)='R', 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) shutdown(r6, 0x1) getsockopt$bt_hci(r6, 0x84, 0x83, &(0x7f0000001c40)=""/4130, &(0x7f0000000000)=0x913) bind$packet(r4, &(0x7f0000000240)={0x11, 0x1c, r5, 0x1, 0x3, 0x6, @local}, 0x14) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) socket$kcm(0x29, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r8 = syz_io_uring_setup(0x1ed3, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x5, 0x279}, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='('], 0x38}}, 0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) r12 = openat$cgroup_ro(r11, &(0x7f0000000100)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) write$UHID_CREATE2(r12, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r12, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x8, 0x0, 0x0, 0x9, 0x7, 0x1}) io_uring_enter(r8, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r13 = socket(0x27, 0x800, 0x0) futex(&(0x7f00000000c0), 0x80, 0x0, &(0x7f00000001c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) 139.262719ms ago: executing program 5 (id=4516): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002480)=@newtfilter={0x8b4, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x880, 0x2, [@TCA_U32_POLICE={0x858, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x80000, 0x3, 0xf, 0xfdb, 0x1, 0x80, 0x7, 0x7, 0x40000000, 0xaa04, 0x80000001, 0x99, 0x8000, 0x1000, 0x3, 0x0, 0x7fffffff, 0x80, 0x1, 0x7, 0x0, 0x9, 0x4, 0x5, 0x80000001, 0x2, 0xe0, 0x9, 0x1, 0x80000000, 0x1, 0xffff8001, 0x9, 0x10001, 0x7, 0x10000, 0x30, 0x803, 0x1000, 0xfff, 0x7, 0x2, 0x5, 0x48a, 0x9, 0x1000, 0x7, 0x7198, 0x8, 0x80000001, 0x1, 0x101, 0x3, 0x7, 0x2, 0x8, 0x10001, 0x2, 0x1, 0x2, 0x6, 0x9, 0x13, 0x2, 0xffff, 0x80, 0xbf77, 0x8, 0xc52, 0x6, 0x9, 0x7, 0x9, 0x5, 0x8, 0x3, 0x8, 0x5, 0x8, 0x1, 0x3, 0x7fffffff, 0x8, 0x2845, 0x2, 0xe9, 0x2a, 0x3, 0x891, 0x8, 0x1, 0x12, 0x6, 0xfff, 0xffffc9b5, 0x4, 0x2, 0x6, 0x6, 0xaa, 0x0, 0x8, 0x0, 0x0, 0x5, 0x1, 0x2, 0x40, 0x4, 0x7, 0xa, 0x8000, 0x4, 0xffffff2d, 0x0, 0xffff7fff, 0x2, 0x3, 0x6, 0xebb, 0x8, 0xfcb, 0x8, 0x1, 0x9, 0x6fe68a84, 0x200, 0x1, 0xfffffff9, 0xb, 0x1, 0xab, 0x9, 0x7, 0x0, 0xe, 0x10001, 0x8, 0xa, 0x6, 0x0, 0xa1, 0x4, 0xffff519d, 0x9, 0x4, 0x2, 0x3, 0x1, 0x2, 0x9, 0x4ae, 0x8, 0x1e9, 0x9, 0x101, 0x200, 0x4, 0x4, 0x1, 0x5, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80, 0x2, 0x2, 0x1, 0x5, 0x101, 0x7, 0x4, 0x9, 0x7e32, 0x8800, 0x4, 0xf85f, 0x10000, 0x800, 0xffffffff, 0x7, 0x4af, 0x7e21, 0x1, 0x5027, 0x8, 0x10000, 0x4, 0x3, 0x7, 0x680, 0xc1, 0x2, 0x7, 0x8, 0x401, 0x74dc, 0x400000, 0x401, 0x92c, 0xffff32d2, 0x4, 0xafcf, 0x7f, 0x5, 0xffff0000, 0x0, 0x8, 0x200, 0x4a, 0x4000, 0x0, 0x9, 0x10000, 0x4d4fbb35, 0xb2, 0x4, 0x5, 0x0, 0x100, 0x8001, 0x6, 0xfffffff8, 0x9, 0x2, 0x7f, 0x2, 0xc, 0xa, 0x94, 0x3b0, 0x401, 0x118966c9, 0xe56, 0x8, 0x4, 0x1800000, 0x6a, 0x9d6, 0x200, 0x2, 0x40, 0x7, 0x8000, 0x7e, 0x6, 0x5, 0x7, 0x4, 0x3, 0xff, 0xe, 0x4, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1, 0x5, 0x53e5, 0x7f, 0x4, 0x3000000, 0x0, 0xf0000000, 0x3, 0xfff, 0xe, 0x7, 0xf6, 0x1ff, 0x3, 0x800001, 0xfffffffb, 0x8001, 0xff, 0x0, 0xfff, 0x80, 0x1, 0x5, 0xffff, 0x6, 0x1, 0x7, 0x9, 0x10000, 0x0, 0x5, 0xe184, 0x4, 0x1, 0xadd, 0x1, 0x16, 0x4, 0xa35c, 0xc, 0x80, 0xff, 0x6, 0x2, 0xd, 0x4, 0x4003, 0x5, 0x4, 0x401, 0x4, 0x4, 0x1, 0x3, 0x8, 0xfffffffc, 0x3, 0xc1, 0x2, 0xffff, 0x80, 0xfffffff1, 0x7ff, 0x9, 0xfffffffe, 0x2, 0x6, 0x80, 0x200, 0x1000, 0xb11a, 0x0, 0x5, 0x8, 0xf49d, 0x5, 0x3361, 0x435, 0x7fffffff, 0x2, 0x6, 0xc4, 0x9, 0x0, 0xee2, 0x2, 0x401, 0xfffffffa, 0x8000, 0x2, 0x0, 0x5, 0x5dd3c81c, 0xffffffff, 0x7, 0x3, 0x81, 0x9, 0x5, 0xfffffffc, 0x2, 0x1, 0x8, 0x6, 0x0, 0x6, 0xc, 0x8, 0x6, 0x100, 0x1, 0xb5a, 0xa, 0x4, 0x18, 0x8, 0x31, 0x1ff, 0x4, 0x9, 0x400, 0x2, 0x6, 0x7, 0x9, 0x91e7, 0x5, 0x7, 0x81eb, 0x400, 0xffff, 0x9, 0x9, 0x6, 0x7, 0x6, 0xea, 0x3, 0x9, 0x4, 0x3, 0x7, 0x0, 0x8, 0x1, 0xbf0, 0x7, 0x7, 0x66, 0x7, 0x6, 0x3, 0x9, 0x0, 0x9c4, 0x7fff, 0x7, 0x800, 0x5, 0x9, 0x10001, 0x4, 0x2a64aeea, 0x0, 0x5, 0x2, 0x1, 0xf, 0x1ff, 0x400, 0x3, 0x3ff, 0xb, 0x39, 0x0, 0x8, 0xffffffff, 0x4000, 0x8, 0x6, 0x9, 0x2, 0xffffffff, 0x401, 0x9, 0x800, 0x9, 0xeb, 0x8, 0x6ed, 0x5, 0x2004, 0x4c3e, 0x1bd, 0x381, 0x4282, 0x4, 0x7, 0x1, 0x4, 0xfffffff7, 0x5, 0x7, 0x0, 0x46, 0x9, 0x3, 0x3, 0x6, 0x9, 0x4, 0x1, 0x4, 0xfffeffff, 0xe, 0x3ff, 0x80000000, 0x7, 0x80, 0x7, 0x42b, 0x7, 0x7, 0xfff, 0x5, 0x8, 0xffffffff, 0xffff671f, 0x7, 0x4, 0x80, 0x6, 0x4, 0xd, 0x1, 0xff, 0x2, 0x5be228d5, 0x2, 0x0, 0x8, 0xaff0, 0x8001, 0x3, 0x1, 0x7, 0x0, 0x51e, 0x2, 0x6, 0x4, 0xfffffffc, 0xd97, 0xa8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x6, 0x0, {0x7, 0x2, 0x3, 0x10, 0x4, 0x8}, {0x6, 0x2, 0x9, 0xe23, 0x100, 0x5}, 0x7, 0x99, 0xef2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xadd1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3ff}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x8b4}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084) 36.592559ms ago: executing program 1 (id=4517): socket$inet6(0xa, 0x800000000000002, 0x0) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) socket$inet6(0xa, 0x805, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000403766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r0], 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000c800) 35.116472ms ago: executing program 3 (id=4518): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="120100000000001032151b01000000000001090224000100000000090400000103000d0009210000000122050009058103"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x17d4}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104801c01"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) syz_usb_control_io(r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) write$binfmt_aout(r2, &(0x7f0000000380)=ANY=[], 0x20) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x1, 0x48001011, r3, 0x0) splice(r2, &(0x7f0000000040)=0x2, r3, 0x0, 0x889, 0x8) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x0}, 0x0) syz_emit_ethernet(0xa6, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c200000ec437b78cb64c86dd6900000000703aff00000000000000000000ffffac1414aaff0200000000000000000000000000010000000000000000890600010000000000000000000000000000000000000001fe880000000000000000000000000101fc020000000000000000000000000000020090780000001497490175d4b1d608621611be00813a0000000000000000000000000000000000fe88000000000000"], 0x0) 0s ago: executing program 5 (id=4519): r0 = epoll_create1(0x0) (async) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) r2 = socket$alg(0x26, 0x5, 0x0) accept$alg(r2, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x10009, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000002c0)={0xa002a014}) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{}]}) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]}) kernel console output (not intermixed with test programs): cs 0003:047F:FFFF.0068: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1080.162169][T19063] usb 5-1: USB disconnect, device number 118 [ 1080.266319][T20355] xt_CT: No such helper "snmp_trap" [ 1080.360601][T10940] usb 1-1: USB disconnect, device number 11 [ 1080.768823][T10940] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1080.807815][T19063] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1080.934472][T10940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1080.953123][T20372] netlink: 'syz.0.4027': attribute type 3 has an invalid length. [ 1080.961346][T19063] usb 5-1: Using ep0 maxpacket: 16 [ 1080.969156][T10940] usb 4-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 1080.984280][T19063] usb 5-1: config 0 has no interfaces? [ 1080.993835][T10940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.017885][T10940] usb 4-1: config 0 descriptor?? [ 1081.023810][T19063] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1081.050134][T19063] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.059308][T10940] smsusb:smsusb_probe: board id=8, interface number 0 [ 1081.071293][T10940] smsusb:smsusb_probe: Device initialized with return code -19 [ 1081.079642][T19063] usb 5-1: Product: syz [ 1081.083836][T19063] usb 5-1: Manufacturer: syz [ 1081.098971][T19063] usb 5-1: SerialNumber: syz [ 1081.122315][T19063] usb 5-1: config 0 descriptor?? [ 1081.267757][T18115] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1081.376924][T19067] usb 5-1: USB disconnect, device number 119 [ 1081.408352][T18115] usb 2-1: device descriptor read/64, error -71 [ 1081.434936][T20375] tipc: Started in network mode [ 1081.439974][T20375] tipc: Node identity 7f000001, cluster identity 4711 [ 1081.447531][T20375] tipc: Enabled bearer , priority 10 [ 1081.456242][ T30] audit: type=1326 audit(1770985096.184:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20364 comm="syz.3.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a0879bf79 code=0x7ffc0000 [ 1081.495932][T20375] tipc: Enabling of bearer rejected, failed to enable media [ 1081.563243][ T30] audit: type=1326 audit(1770985096.184:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20364 comm="syz.3.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5a0879bf79 code=0x7ffc0000 [ 1081.588152][ T30] audit: type=1326 audit(1770985096.184:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20364 comm="syz.3.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a0879bf79 code=0x7ffc0000 [ 1081.614202][ T30] audit: type=1326 audit(1770985096.184:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20364 comm="syz.3.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5a0879bf79 code=0x7ffc0000 [ 1081.687132][ T30] audit: type=1326 audit(1770985096.184:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20364 comm="syz.3.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a0879bf79 code=0x7ffc0000 [ 1081.737807][T18115] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1081.760871][ T30] audit: type=1326 audit(1770985096.184:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20364 comm="syz.3.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5a0879d807 code=0x7ffc0000 [ 1081.829796][ T30] audit: type=1326 audit(1770985096.184:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20364 comm="syz.3.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f5a0875c84e code=0x7ffc0000 [ 1081.868636][T18115] usb 2-1: device descriptor read/64, error -71 [ 1081.885987][ T30] audit: type=1326 audit(1770985096.184:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20364 comm="syz.3.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f5a0875c84e code=0x7ffc0000 [ 1081.951099][ T30] audit: type=1326 audit(1770985096.184:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20364 comm="syz.3.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f5a0875c84e code=0x7ffc0000 [ 1082.001978][T18115] usb usb2-port1: attempt power cycle [ 1082.025375][ T30] audit: type=1326 audit(1770985096.184:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20364 comm="syz.3.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5a0875c84e code=0x7ffc0000 [ 1082.282547][T20382] loop6: detected capacity change from 0 to 7 [ 1082.305465][T13801] Dev loop6: unable to read RDB block 7 [ 1082.318195][T13801] loop6: AHDI p1 p2 p3 p4 [ 1082.329539][T13801] loop6: partition table partially beyond EOD, truncated [ 1082.346963][T13801] loop6: p1 start 512 is beyond EOD, truncated [ 1082.358726][T18115] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1082.370241][T13801] loop6: p2 size 335544320 extends beyond EOD, truncated [ 1082.380083][T18115] usb 2-1: device descriptor read/8, error -71 [ 1082.387845][T13801] loop6: p3 start 2427370299 is beyond EOD, truncated [ 1082.401088][T20382] Dev loop6: unable to read RDB block 7 [ 1082.412306][T20382] loop6: AHDI p1 p2 p3 p4 [ 1082.423568][T20382] loop6: partition table partially beyond EOD, truncated [ 1082.462308][T20382] loop6: p1 start 512 is beyond EOD, truncated [ 1082.469281][T20382] loop6: p2 size 335544320 extends beyond EOD, truncated [ 1082.492952][T20382] loop6: p3 start 2427370299 is beyond EOD, truncated [ 1082.559680][T10940] tipc: Node number set to 2130706433 [ 1082.612931][T13801] udevd[13801]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1082.688027][T18115] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1082.708836][T18115] usb 2-1: device descriptor read/8, error -71 [ 1082.725102][T13801] udevd[13801]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1082.818366][T18115] usb usb2-port1: unable to enumerate USB device [ 1082.938377][T19068] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1083.099588][T19068] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1083.124682][T19068] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1083.149643][T19068] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1083.174323][T19068] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.201098][T19068] usb 1-1: config 0 descriptor?? [ 1083.218487][T19068] usbhid 1-1:0.0: can't add hid device: -22 [ 1083.227895][T19068] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 1083.495850][T20397] netlink: 'syz.0.4031': attribute type 33 has an invalid length. [ 1083.587732][T18115] usb 5-1: new full-speed USB device number 120 using dummy_hcd [ 1083.879458][T18115] usb 5-1: config index 0 descriptor too short (expected 27675, got 27) [ 1083.888357][T18115] usb 5-1: config 37 has too many interfaces: 108, using maximum allowed: 32 [ 1083.907492][T18115] usb 5-1: config 37 has an invalid descriptor of length 0, skipping remainder of the config [ 1083.926408][T20404] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4036'. [ 1083.942446][T18115] usb 5-1: config 37 has 0 interfaces, different from the descriptor's value: 108 [ 1083.954426][T20404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4036'. [ 1084.021505][T18115] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1084.033206][T18115] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.047818][T18115] usb 5-1: Product: syz [ 1084.059670][T20406] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4038'. [ 1084.068988][T18115] usb 5-1: Manufacturer: syz [ 1084.073895][T18115] usb 5-1: SerialNumber: syz [ 1084.580920][T19068] usb 4-1: USB disconnect, device number 52 [ 1084.855801][T20420] loop6: detected capacity change from 0 to 524288000 [ 1085.011882][T20421] support for the xor transformation has been removed. [ 1085.776179][T10940] usb 1-1: USB disconnect, device number 12 [ 1086.446089][T19063] usb 5-1: USB disconnect, device number 120 [ 1087.416716][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 1087.416738][ T30] audit: type=1326 audit(1770985102.154:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20436 comm="syz.3.4045" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5a0879bf79 code=0x0 [ 1087.794703][T20457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4049'. [ 1088.529285][T20469] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4054'. [ 1088.590104][T20471] ptrace attach of ""[20472] was attempted by "./syz-executor exec"[20471] [ 1088.678106][ T5897] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1088.726010][T19068] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1088.887798][ T5897] usb 5-1: Using ep0 maxpacket: 8 [ 1088.970071][T20476] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4055'. [ 1088.989844][T19068] usb 6-1: Using ep0 maxpacket: 16 [ 1089.084050][T19068] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1089.126941][T19068] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1089.138229][ T5897] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1089.158131][ T5897] usb 5-1: config 179 has no interface number 0 [ 1089.164676][ T5897] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1089.261637][ T5897] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1089.273876][T19068] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1089.404296][T19068] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.417859][ T5897] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1089.437661][T19068] usb 6-1: Product: syz [ 1089.442031][T19068] usb 6-1: Manufacturer: syz [ 1089.446624][T19068] usb 6-1: SerialNumber: syz [ 1089.469651][ T5897] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1089.571945][ T5897] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1089.586189][T19068] usb 6-1: config 0 descriptor?? [ 1089.614242][T19068] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1089.649137][T19068] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1089.657866][T19063] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 1089.668008][ T5897] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1089.723848][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.833071][T20465] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1089.872362][T19063] usb 4-1: config index 0 descriptor too short (expected 27675, got 27) [ 1089.894955][T19063] usb 4-1: config 37 has too many interfaces: 108, using maximum allowed: 32 [ 1089.924475][T19063] usb 4-1: config 37 has an invalid descriptor of length 0, skipping remainder of the config [ 1089.955291][T19063] usb 4-1: config 37 has 0 interfaces, different from the descriptor's value: 108 [ 1090.019296][T19063] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1090.036689][T19063] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.073078][T19063] usb 4-1: Product: syz [ 1090.077326][T19063] usb 4-1: Manufacturer: syz [ 1090.108984][T19063] usb 4-1: SerialNumber: syz [ 1090.117200][ T5897] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input72 [ 1090.256884][T19063] usb 5-1: USB disconnect, device number 121 [ 1090.257473][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1090.271457][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1090.290775][T19068] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1090.302943][T19068] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1090.324722][T19068] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 1090.352070][T19068] em28xx 6-1:0.0: No AC97 audio processor [ 1091.504868][ T5897] usb 6-1: USB disconnect, device number 79 [ 1091.511811][ T5897] em28xx 6-1:0.0: Disconnecting em28xx [ 1091.525859][ T5897] em28xx 6-1:0.0: Freeing device [ 1092.573975][ T5897] usb 4-1: USB disconnect, device number 53 [ 1093.310408][ T30] audit: type=1804 audit(1770985108.044:1357): pid=20534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.4072" name="bus" dev="ramfs" ino=123448 res=1 errno=0 [ 1094.220105][ T5897] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1094.407704][ T5897] usb 5-1: Using ep0 maxpacket: 8 [ 1094.807115][ T5897] usb 5-1: config 127 has an invalid interface number: 171 but max is 1 [ 1094.825835][ T5897] usb 5-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 1094.901578][T20561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4081'. [ 1094.973829][ T5897] usb 5-1: config 127 has no interface number 1 [ 1094.987665][ T5897] usb 5-1: config 127 interface 171 has no altsetting 0 [ 1095.029417][ T5897] usb 5-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 1095.099593][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.139887][ T5897] usb 5-1: Product: syz [ 1095.144106][ T5897] usb 5-1: Manufacturer: syz [ 1095.197818][ T5897] usb 5-1: SerialNumber: syz [ 1095.197818][T19063] usb 6-1: new full-speed USB device number 80 using dummy_hcd [ 1095.280390][T20566] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4080'. [ 1095.456092][T19063] usb 6-1: config index 0 descriptor too short (expected 27675, got 27) [ 1095.492019][T19063] usb 6-1: config 37 has too many interfaces: 108, using maximum allowed: 32 [ 1095.516327][T19063] usb 6-1: config 37 has an invalid descriptor of length 0, skipping remainder of the config [ 1095.540462][T19063] usb 6-1: config 37 has 0 interfaces, different from the descriptor's value: 108 [ 1095.697875][T19063] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1095.756344][T19063] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.817116][T19063] usb 6-1: Product: syz [ 1095.866530][T19063] usb 6-1: Manufacturer: syz [ 1095.896164][T19063] usb 6-1: SerialNumber: syz [ 1098.133100][ T5897] xr_serial 5-1:127.171: xr_serial converter detected [ 1098.186415][ T5897] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 1098.227699][ T5897] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1098.286753][ T5897] usb 5-1: USB disconnect, device number 122 [ 1098.320106][ T5897] xr_serial 5-1:127.171: device disconnected [ 1098.371548][T19089] usb 6-1: USB disconnect, device number 80 [ 1098.506794][T20599] bond2: option arp_interval: invalid value (18446744073709547516) [ 1098.515808][T20599] bond2: option arp_interval: allowed values 0 - 2147483647 [ 1098.530745][T20599] bond2 (unregistering): Released all slaves [ 1098.872834][T20611] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4095'. [ 1099.357831][T19089] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 1099.598054][T19089] usb 4-1: config 0 has an invalid interface number: 84 but max is 0 [ 1099.610790][T19089] usb 4-1: config 0 has no interface number 0 [ 1099.628675][T19089] usb 4-1: config 0 interface 84 altsetting 253 endpoint 0x7 has invalid maxpacket 1279, setting to 64 [ 1099.677774][T19089] usb 4-1: config 0 interface 84 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 1099.738927][T19089] usb 4-1: config 0 interface 84 has no altsetting 0 [ 1099.745689][T19089] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0191, bcdDevice= f.05 [ 1099.815397][T19089] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.837791][ T5897] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1099.856619][T19089] usb 4-1: config 0 descriptor?? [ 1099.879035][T20617] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1099.936389][T19089] option 4-1:0.84: GSM modem (1-port) converter detected [ 1100.017768][ T5897] usb 5-1: Using ep0 maxpacket: 8 [ 1100.031126][ T5897] usb 5-1: config 127 has an invalid interface number: 171 but max is 1 [ 1100.058300][ T5897] usb 5-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 1100.092198][ T5897] usb 5-1: config 127 has no interface number 1 [ 1100.112865][ T5897] usb 5-1: config 127 interface 171 has no altsetting 0 [ 1100.136217][ T5897] usb 5-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 1100.157305][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.177539][ T5897] usb 5-1: Product: syz [ 1100.187678][ T5897] usb 5-1: Manufacturer: syz [ 1100.204334][ T5897] usb 5-1: SerialNumber: syz [ 1100.226060][ T30] audit: type=1326 audit(1770985114.974:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20614 comm="syz.0.4097" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc2df99bf79 code=0x0 [ 1102.028306][T19063] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 1102.192745][T19063] usb 1-1: config index 0 descriptor too short (expected 27675, got 27) [ 1102.202442][T19063] usb 1-1: config 37 has too many interfaces: 108, using maximum allowed: 32 [ 1102.247210][T19063] usb 1-1: config 37 has an invalid descriptor of length 0, skipping remainder of the config [ 1102.357822][T19063] usb 1-1: config 37 has 0 interfaces, different from the descriptor's value: 108 [ 1102.404759][T19063] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1102.455440][T19063] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.559946][T19063] usb 1-1: Product: syz [ 1102.564171][T19063] usb 1-1: Manufacturer: syz [ 1102.641997][T19063] usb 1-1: SerialNumber: syz [ 1102.719246][T20641] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1102.846109][ T5897] xr_serial 5-1:127.171: xr_serial converter detected [ 1103.028002][ T5897] xr_serial ttyUSB1: Failed to set reg 0x1a: -71 [ 1103.051469][ T5897] xr_serial ttyUSB1: probe with driver xr_serial failed with error -71 [ 1103.137959][T19089] usb 4-1: USB disconnect, device number 54 [ 1103.156531][ T5897] usb 5-1: USB disconnect, device number 123 [ 1103.164246][T19089] option 4-1:0.84: device disconnected [ 1103.205133][ T5897] xr_serial 5-1:127.171: device disconnected [ 1103.296217][T20650] loop6: detected capacity change from 0 to 7 [ 1103.336334][T13801] Dev loop6: unable to read RDB block 7 [ 1103.365164][T13801] loop6: AHDI p1 p2 p3 p4 [ 1103.372815][T13801] loop6: partition table partially beyond EOD, truncated [ 1103.384507][T13801] loop6: p1 start 512 is beyond EOD, truncated [ 1103.391394][T20655] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4108'. [ 1103.412894][T13801] loop6: p2 size 335544320 extends beyond EOD, truncated [ 1103.449322][T13801] loop6: p3 start 2427370299 is beyond EOD, truncated [ 1103.477181][T20650] Dev loop6: unable to read RDB block 7 [ 1103.496534][T20650] loop6: AHDI p1 p2 p3 p4 [ 1103.514758][T20650] loop6: partition table partially beyond EOD, truncated [ 1103.530419][T20650] loop6: p1 start 512 is beyond EOD, truncated [ 1103.542571][T20650] loop6: p2 size 335544320 extends beyond EOD, truncated [ 1103.555089][T20650] loop6: p3 start 2427370299 is beyond EOD, truncated [ 1103.815819][T13801] udevd[13801]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1103.950253][T13801] udevd[13801]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1104.053109][T20665] vivid-007: disconnect [ 1104.860868][T19063] usb 1-1: USB disconnect, device number 13 [ 1104.938343][T20662] vivid-007: reconnect [ 1104.958257][T18117] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1105.147456][T18117] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 1105.161004][T18117] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1105.194687][T18117] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1105.230561][T18117] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1105.271504][T20676] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4114'. [ 1105.288804][T18117] usb 6-1: Manufacturer: syz [ 1105.317540][T18117] usb 6-1: config 0 descriptor?? [ 1105.679139][T20681] IPVS: set_ctl: invalid protocol: 24930 100.118.95.115:27745 [ 1105.788035][T18117] rc_core: IR keymap rc-hauppauge not found [ 1105.796307][T18117] Registered IR keymap rc-empty [ 1105.817254][T18117] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1105.854888][T19089] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1105.891058][T18117] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input73 [ 1106.052603][T19089] usb 1-1: Using ep0 maxpacket: 16 [ 1106.106685][T19089] usb 1-1: config 0 has no interfaces? [ 1106.150110][T19089] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1106.203561][T19089] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1106.219237][T19068] usb 6-1: USB disconnect, device number 81 [ 1106.227924][T19063] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1106.289758][T19089] usb 1-1: Manufacturer: syz [ 1106.327654][T19089] usb 1-1: config 0 descriptor?? [ 1106.398367][T19063] usb 4-1: Using ep0 maxpacket: 8 [ 1106.408940][T19063] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1106.429244][T19063] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1106.440379][T19063] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.475989][T19063] usb 4-1: config 0 descriptor?? [ 1106.687800][T18117] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1106.708499][T19063] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1106.832981][T20695] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4119'. [ 1106.877798][T18117] usb 5-1: Using ep0 maxpacket: 8 [ 1106.885260][T18117] usb 5-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 1106.901904][T18117] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.061591][T18117] usb 5-1: config 0 descriptor?? [ 1107.096067][T20697] loop6: detected capacity change from 0 to 7 [ 1107.182398][T20697] Dev loop6: unable to read RDB block 7 [ 1107.197364][T20697] loop6: AHDI p1 p2 p3 p4 [ 1107.212750][T20697] loop6: partition table partially beyond EOD, truncated [ 1107.241552][T20697] loop6: p1 start 512 is beyond EOD, truncated [ 1107.254906][T20697] loop6: p2 size 335544320 extends beyond EOD, truncated [ 1107.279062][T20697] loop6: p3 start 2427370299 is beyond EOD, truncated [ 1107.304592][T19089] usb 5-1: USB disconnect, device number 124 [ 1107.382381][T13801] udevd[13801]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1107.528062][T18117] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1107.637881][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1107.645327][ C1] bridge0: topology change detected, propagating [ 1107.652189][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1107.659623][ C1] bridge0: topology change detected, propagating [ 1107.692675][T18117] usb 2-1: Using ep0 maxpacket: 32 [ 1107.701922][T18117] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1107.712959][T18117] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1107.741980][T18117] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1107.766014][T18117] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1107.803799][T18117] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1107.826114][T18117] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1107.839980][T18117] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1107.849195][T18117] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.927740][T10940] usb 6-1: new full-speed USB device number 82 using dummy_hcd [ 1107.960972][T18117] usb 2-1: config 0 descriptor?? [ 1108.090274][T10940] usb 6-1: config index 0 descriptor too short (expected 27675, got 27) [ 1108.098827][T10940] usb 6-1: config 37 has too many interfaces: 108, using maximum allowed: 32 [ 1108.107785][T10940] usb 6-1: config 37 has an invalid descriptor of length 0, skipping remainder of the config [ 1108.132631][T10940] usb 6-1: config 37 has 0 interfaces, different from the descriptor's value: 108 [ 1108.146717][T10940] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1108.156697][T10940] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.165715][T10940] usb 6-1: Product: syz [ 1108.170716][T10940] usb 6-1: Manufacturer: syz [ 1108.175472][T10940] usb 6-1: SerialNumber: syz [ 1108.190122][T18117] usblp 2-1:0.0: usblp1: USB Bidirectional printer dev 37 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1108.245433][T18117] usb 2-1: USB disconnect, device number 37 [ 1108.303001][T18117] usblp1: removed [ 1108.727826][T18117] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1108.786237][T20721] tipc: Can't bind to reserved service type 0 [ 1108.888007][T18117] usb 2-1: Using ep0 maxpacket: 32 [ 1108.927539][T19063] usb 4-1: USB disconnect, device number 55 [ 1108.947058][T18117] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1108.955813][T18117] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1108.971481][T18117] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1108.980754][T18117] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1108.992054][T18117] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1109.002748][T18117] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1109.116352][T18117] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1109.143428][T18117] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.184365][T18117] usb 2-1: config 0 descriptor?? [ 1109.331111][T19089] usb 1-1: USB disconnect, device number 14 [ 1109.554009][T20727] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1109.606359][T18117] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 38 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1109.704169][T20736] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4131'. [ 1110.051085][T18117] usb 2-1: USB disconnect, device number 38 [ 1110.059860][T18117] usblp0: removed [ 1110.475209][T20742] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4132'. [ 1110.487764][T20742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4132'. [ 1111.357754][ T5897] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1111.737312][T19089] usb 6-1: USB disconnect, device number 82 [ 1111.748077][ T5897] usb 2-1: Using ep0 maxpacket: 8 [ 1111.780493][ T5897] usb 2-1: config 0 has no interfaces? [ 1111.810313][ T5897] usb 2-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 1111.839567][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.877649][ T5897] usb 2-1: Product: syz [ 1111.890881][ T5897] usb 2-1: Manufacturer: syz [ 1111.895591][ T5897] usb 2-1: SerialNumber: syz [ 1111.931999][ T5897] usb 2-1: config 0 descriptor?? [ 1112.141087][T20744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1112.150193][T20744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1112.165412][T20744] binder: 20743:20744 ioctl c0306201 2000000003c0 returned -14 [ 1112.176355][T20744] binder: BINDER_SET_CONTEXT_MGR already set [ 1112.182408][T20744] binder: 20743:20744 ioctl 4018620d 200000004a80 returned -16 [ 1112.194119][T20744] binder: 20743:20744 ioctl c0306201 2000000001c0 returned -14 [ 1112.205611][T19089] usb 2-1: USB disconnect, device number 39 [ 1112.808801][T20765] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4138'. [ 1113.377951][T19089] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1113.429130][T19068] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1113.500379][T20780] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4141'. [ 1113.510374][T20780] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4141'. [ 1113.707688][T19089] usb 4-1: Using ep0 maxpacket: 16 [ 1113.724509][T19089] usb 4-1: config 0 has no interfaces? [ 1113.733721][T19089] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1113.744678][T19089] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1113.765426][T19089] usb 4-1: Manufacturer: syz [ 1113.787703][T19068] usb 1-1: Using ep0 maxpacket: 8 [ 1113.812254][T19068] usb 1-1: config 127 has an invalid interface number: 171 but max is 1 [ 1113.820895][T19068] usb 1-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 1113.839016][T19068] usb 1-1: config 127 has no interface number 1 [ 1113.849557][T19089] usb 4-1: config 0 descriptor?? [ 1113.887944][T19068] usb 1-1: config 127 interface 171 has no altsetting 0 [ 1113.942885][T19068] usb 1-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 1113.953340][T19068] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.962495][T19068] usb 1-1: Product: syz [ 1113.976860][T19068] usb 1-1: Manufacturer: syz [ 1114.357758][T19068] usb 1-1: SerialNumber: syz [ 1114.623031][T20784] loop6: detected capacity change from 0 to 7 [ 1114.644300][T20784] Dev loop6: unable to read RDB block 7 [ 1114.659859][T20784] loop6: AHDI p1 p2 p3 p4 [ 1114.676882][T20784] loop6: partition table partially beyond EOD, truncated [ 1114.799289][T20784] loop6: p1 start 512 is beyond EOD, truncated [ 1114.831649][T20784] loop6: p2 size 335544320 extends beyond EOD, truncated [ 1114.885966][T20784] loop6: p3 start 2427370299 is beyond EOD, truncated [ 1115.212002][T13801] udevd[13801]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1115.222485][T20786] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1115.948093][T18117] usb 6-1: new full-speed USB device number 83 using dummy_hcd [ 1115.961881][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.968734][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.110429][T18117] usb 6-1: config index 0 descriptor too short (expected 27675, got 27) [ 1116.143940][T18117] usb 6-1: config 37 has too many interfaces: 108, using maximum allowed: 32 [ 1116.192811][T10940] usb 4-1: USB disconnect, device number 56 [ 1116.206933][T18117] usb 6-1: config 37 has an invalid descriptor of length 0, skipping remainder of the config [ 1116.254753][T18117] usb 6-1: config 37 has 0 interfaces, different from the descriptor's value: 108 [ 1116.286759][T20793] geneve2: entered promiscuous mode [ 1116.311420][T18117] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1116.321126][T18117] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.348059][T18117] usb 6-1: Product: syz [ 1116.367961][T18117] usb 6-1: Manufacturer: syz [ 1116.409227][T18117] usb 6-1: SerialNumber: syz [ 1116.664353][T19068] xr_serial 1-1:127.171: xr_serial converter detected [ 1116.692671][T20798] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4149'. [ 1116.715594][T19068] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 1116.737525][T19068] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1116.796763][T19068] usb 1-1: USB disconnect, device number 15 [ 1116.847829][T19068] xr_serial 1-1:127.171: device disconnected [ 1117.205551][T20818] netlink: 124 bytes leftover after parsing attributes in process `syz.3.4155'. [ 1117.231150][T20816] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4153'. [ 1117.245359][T20816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4153'. [ 1117.810906][T20822] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4157'. [ 1118.179706][ T30] audit: type=1326 audit(1770985132.854:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20819 comm="syz.3.4156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a0879bf79 code=0x7ffc0000 [ 1118.270284][ T30] audit: type=1326 audit(1770985132.854:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20819 comm="syz.3.4156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a0879bf79 code=0x7ffc0000 [ 1118.333470][ T30] audit: type=1326 audit(1770985132.854:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20819 comm="syz.3.4156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f5a0879bf79 code=0x7ffc0000 [ 1118.385209][T20830] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4159'. [ 1118.445293][ T30] audit: type=1326 audit(1770985132.854:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20819 comm="syz.3.4156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a0879bf79 code=0x7ffc0000 [ 1118.542193][ T30] audit: type=1326 audit(1770985132.854:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20819 comm="syz.3.4156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a0879bf79 code=0x7ffc0000 [ 1118.677938][T19068] usb 6-1: USB disconnect, device number 83 [ 1119.007989][T18117] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1119.177993][T18117] usb 2-1: device descriptor read/64, error -71 [ 1119.435271][T20849] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4168'. [ 1119.444354][T20849] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4168'. [ 1119.453410][T18117] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1119.597945][T18117] usb 2-1: device descriptor read/64, error -71 [ 1119.735367][T18117] usb usb2-port1: attempt power cycle [ 1120.242431][T18117] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1120.318483][T18117] usb 2-1: device descriptor read/8, error -71 [ 1120.584249][T18117] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1120.629863][T18117] usb 2-1: device descriptor read/8, error -71 [ 1120.738993][T18117] usb usb2-port1: unable to enumerate USB device [ 1120.993950][T18117] usb 6-1: new full-speed USB device number 84 using dummy_hcd [ 1121.253277][T18117] usb 6-1: config index 0 descriptor too short (expected 27675, got 27) [ 1121.261826][T18117] usb 6-1: config 37 has too many interfaces: 108, using maximum allowed: 32 [ 1121.321937][T18117] usb 6-1: config 37 has an invalid descriptor of length 0, skipping remainder of the config [ 1121.342503][T18117] usb 6-1: config 37 has 0 interfaces, different from the descriptor's value: 108 [ 1121.376941][T18117] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1121.386425][T18117] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.396576][T18117] usb 6-1: Product: syz [ 1121.447715][T18117] usb 6-1: Manufacturer: syz [ 1121.467778][T18117] usb 6-1: SerialNumber: syz [ 1122.232334][T20877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1122.251291][ T30] audit: type=1804 audit(1770985136.984:1364): pid=20879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.4174" name="bus" dev="ramfs" ino=125356 res=1 errno=0 [ 1124.096864][T20893] xt_socket: unknown flags 0xc [ 1124.186036][T20895] FAULT_INJECTION: forcing a failure. [ 1124.186036][T20895] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1124.243941][T20895] CPU: 0 UID: 0 PID: 20895 Comm: syz.0.4178 Tainted: G L syzkaller #0 PREEMPT(full) [ 1124.243981][T20895] Tainted: [L]=SOFTLOCKUP [ 1124.243988][T20895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1124.244000][T20895] Call Trace: [ 1124.244009][T20895] [ 1124.244018][T20895] dump_stack_lvl+0xe8/0x150 [ 1124.244052][T20895] should_fail_ex+0x412/0x560 [ 1124.244080][T20895] _copy_from_user+0x2d/0xb0 [ 1124.244106][T20895] ___sys_sendmsg+0x1c6/0x360 [ 1124.244129][T20895] ? __lock_acquire+0x6b5/0x2cf0 [ 1124.244155][T20895] ? __pfx____sys_sendmsg+0x10/0x10 [ 1124.244211][T20895] ? __fget_files+0x2a/0x420 [ 1124.244234][T20895] ? __fget_files+0x3a0/0x420 [ 1124.244266][T20895] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1124.244293][T20895] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1124.244325][T20895] ? __pfx_ksys_write+0x10/0x10 [ 1124.244362][T20895] do_syscall_64+0x14d/0xf80 [ 1124.244386][T20895] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1124.244406][T20895] ? trace_irq_disable+0x37/0x100 [ 1124.244429][T20895] ? clear_bhb_loop+0x40/0x90 [ 1124.244453][T20895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1124.244472][T20895] RIP: 0033:0x7fc2df99bf79 [ 1124.244492][T20895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1124.244508][T20895] RSP: 002b:00007fc2e07a1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1124.244529][T20895] RAX: ffffffffffffffda RBX: 00007fc2dfc15fa0 RCX: 00007fc2df99bf79 [ 1124.244543][T20895] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1124.244555][T20895] RBP: 00007fc2e07a1090 R08: 0000000000000000 R09: 0000000000000000 [ 1124.244568][T20895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1124.244588][T20895] R13: 00007fc2dfc16038 R14: 00007fc2dfc15fa0 R15: 00007fc2dfd3fa48 [ 1124.244629][T20895] [ 1124.614273][T20901] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4182'. [ 1124.623549][T20901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4182'. [ 1124.713866][T19089] usb 6-1: USB disconnect, device number 84 [ 1124.746240][T20905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4181'. [ 1125.179999][T20921] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4185'. [ 1125.297734][T18117] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1125.450202][T18117] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1125.457718][T19068] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1125.460431][T18117] usb 4-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 1125.637878][T18117] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.670697][T18117] usb 4-1: config 0 descriptor?? [ 1125.678128][T19089] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1125.747828][T19068] usb 1-1: device descriptor read/64, error -71 [ 1125.825253][T20931] xt_socket: unknown flags 0xc [ 1125.848090][T19089] usb 5-1: Using ep0 maxpacket: 16 [ 1125.874851][T19089] usb 5-1: config 0 has no interfaces? [ 1125.932904][T19089] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1125.963698][T19089] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1125.990622][T19089] usb 5-1: Manufacturer: syz [ 1126.005520][T19089] usb 5-1: config 0 descriptor?? [ 1126.010727][T19068] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1126.056001][T20934] nvme_fabrics: missing parameter 'transport=%s' [ 1126.064502][T20934] nvme_fabrics: missing parameter 'nqn=%s' [ 1126.159469][T19068] usb 1-1: device descriptor read/64, error -71 [ 1126.359351][T19068] usb usb1-port1: attempt power cycle [ 1126.717714][T19068] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1126.757974][T19068] usb 1-1: device descriptor read/8, error -71 [ 1127.027707][T19068] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1127.037711][T19089] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 1127.048681][T19068] usb 1-1: device descriptor read/8, error -71 [ 1127.158975][T19068] usb usb1-port1: unable to enumerate USB device [ 1127.193433][T19089] usb 2-1: config index 0 descriptor too short (expected 27675, got 27) [ 1127.206808][T19089] usb 2-1: config 37 has too many interfaces: 108, using maximum allowed: 32 [ 1127.226888][T19089] usb 2-1: config 37 has an invalid descriptor of length 0, skipping remainder of the config [ 1127.246376][T19089] usb 2-1: config 37 has 0 interfaces, different from the descriptor's value: 108 [ 1127.293013][T19089] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1127.354019][T19089] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.403790][T19089] usb 2-1: Product: syz [ 1127.459308][T19089] usb 2-1: Manufacturer: syz [ 1127.475614][T19089] usb 2-1: SerialNumber: syz [ 1128.112480][T18117] razer 0003:1532:010E.0069: failed to enable macro keys: -71 [ 1128.139853][T18117] razer 0003:1532:010E.0069: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.3-1/input0 [ 1128.152466][T19068] usb 5-1: USB disconnect, device number 125 [ 1128.269128][T18117] usb 4-1: USB disconnect, device number 57 [ 1128.382784][T20954] fido_id[20954]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 1128.747835][T19068] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1129.117746][T19068] usb 6-1: device descriptor read/64, error -71 [ 1129.140091][T20964] syzkaller0: entered promiscuous mode [ 1129.151806][T20964] syzkaller0: entered allmulticast mode [ 1129.453325][T20964] tipc: Started in network mode [ 1129.458370][T20964] tipc: Node identity b2ac2110acf5, cluster identity 4711 [ 1129.478520][T20964] tipc: Enabled bearer , priority 0 [ 1129.508036][T20964] veth1_virt_wifi: mtu less than device minimum [ 1129.560241][T19068] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1129.573470][ T5897] usb 2-1: USB disconnect, device number 44 [ 1129.727952][T19068] usb 6-1: device descriptor read/64, error -71 [ 1129.759473][T20967] tipc: Resetting bearer [ 1129.873105][T19068] usb usb6-port1: attempt power cycle [ 1129.934313][T20967] tipc: Disabling bearer [ 1129.955090][T20975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1129.967976][T20975] batadv_slave_0: entered promiscuous mode [ 1129.975632][T20975] batadv_slave_0: entered allmulticast mode [ 1130.148242][T19089] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1130.289714][T19068] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1130.355114][T19068] usb 6-1: device descriptor read/8, error -71 [ 1130.365410][T19089] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1130.376720][T20986] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1130.377645][T19089] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.397214][T20986] Cannot find add_set index 0 as target [ 1130.397231][T19089] usb 1-1: Product: syz [ 1130.408436][T19089] usb 1-1: Manufacturer: syz [ 1130.420499][T19089] usb 1-1: SerialNumber: syz [ 1130.447845][T19089] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1130.488384][ T5897] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1130.622918][T19068] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1130.678887][T19068] usb 6-1: device descriptor read/8, error -71 [ 1130.737160][T20977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1130.746667][T20977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1130.807492][T19068] usb usb6-port1: unable to enumerate USB device [ 1131.198132][T19068] usb 1-1: USB disconnect, device number 20 [ 1131.357818][T19063] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 1131.559578][ T5897] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1131.570578][ T5897] ath9k_htc: Failed to initialize the device [ 1131.592699][T19063] usb 2-1: config index 0 descriptor too short (expected 27675, got 27) [ 1131.594797][T19068] usb 1-1: ath9k_htc: USB layer deinitialized [ 1131.618968][T19063] usb 2-1: config 37 has too many interfaces: 108, using maximum allowed: 32 [ 1131.674880][T19063] usb 2-1: config 37 has an invalid descriptor of length 0, skipping remainder of the config [ 1131.850890][T19063] usb 2-1: config 37 has 0 interfaces, different from the descriptor's value: 108 [ 1131.902736][T19063] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1131.947280][T19063] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.112889][T19063] usb 2-1: Product: syz [ 1132.117460][T19063] usb 2-1: Manufacturer: syz [ 1132.144065][T19063] usb 2-1: SerialNumber: syz [ 1132.294146][T21024] vlan2: entered promiscuous mode [ 1132.456162][ T5897] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1132.769258][ T5897] usb 1-1: Using ep0 maxpacket: 8 [ 1132.799072][ T5897] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 1132.810813][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.833531][ T5897] usb 1-1: Product: syz [ 1132.850040][ T5897] usb 1-1: Manufacturer: syz [ 1132.865538][ T5897] usb 1-1: SerialNumber: syz [ 1132.896187][ T5897] usb 1-1: config 0 descriptor?? [ 1133.179949][ T5897] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1134.439241][ T5897] gspca_sunplus: reg_w_riv err -110 [ 1134.444695][ T5897] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 1134.550787][T10940] usb 2-1: USB disconnect, device number 45 [ 1134.591275][T21049] xt_socket: unknown flags 0xc [ 1135.505026][T21063] IPv6: sit1: Disabled Multicast RS [ 1135.525934][T21063] sit1: entered allmulticast mode [ 1135.637208][T21065] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4227'. [ 1135.666808][T21065] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4227'. [ 1135.759079][T19063] usb 1-1: USB disconnect, device number 21 [ 1135.845146][T10940] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1135.988239][ T30] audit: type=1326 audit(1770985150.744:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21055 comm="syz.3.4225" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5a0879bf79 code=0x0 [ 1136.007701][T10940] usb 6-1: Using ep0 maxpacket: 32 [ 1136.032184][T10940] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 1136.040746][T10940] usb 6-1: config 0 has no interface number 0 [ 1136.046891][T10940] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1136.104828][T10940] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1136.132146][T10940] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.142409][T10940] usb 6-1: Product: syz [ 1136.146586][T10940] usb 6-1: Manufacturer: syz [ 1136.154137][T10940] usb 6-1: SerialNumber: syz [ 1136.295352][T10940] usb 6-1: config 0 descriptor?? [ 1136.322173][T21067] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1136.448078][T19063] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1136.542493][T21067] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1136.677961][T19063] usb 1-1: Using ep0 maxpacket: 32 [ 1136.685839][T19063] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 1136.694862][T19063] usb 1-1: config 0 has no interface number 0 [ 1136.703174][T19063] usb 1-1: config 0 interface 12 has no altsetting 0 [ 1136.756455][T19063] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1136.794124][T19063] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.822050][T19063] usb 1-1: Product: syz [ 1136.835858][T19063] usb 1-1: Manufacturer: syz [ 1136.856614][T19063] usb 1-1: SerialNumber: syz [ 1136.922108][T19063] usb 1-1: config 0 descriptor?? [ 1137.356362][T21067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1137.365652][T21067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1137.487906][T19089] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 1137.638136][T19063] f81534 1-1:0.12: f81534_set_register: reg: 1003 data: b0 failed: -71 [ 1137.646669][T19063] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 1137.662258][T19063] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1137.679736][T19089] usb 4-1: config index 0 descriptor too short (expected 27675, got 27) [ 1137.687868][T19063] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 1137.691688][T19089] usb 4-1: config 37 has too many interfaces: 108, using maximum allowed: 32 [ 1137.725664][T21091] fuse: Unknown parameter 'ld' [ 1137.730974][T19089] usb 4-1: config 37 has an invalid descriptor of length 0, skipping remainder of the config [ 1137.752045][T19063] usb 1-1: USB disconnect, device number 22 [ 1137.789537][T19089] usb 4-1: config 37 has 0 interfaces, different from the descriptor's value: 108 [ 1137.944447][T19089] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1137.953928][T19089] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1137.967654][T19089] usb 4-1: Product: syz [ 1137.971931][T19089] usb 4-1: Manufacturer: syz [ 1137.985175][T21067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1137.994486][T21067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1138.061167][T19089] usb 4-1: SerialNumber: syz [ 1138.090343][T21067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1138.114759][T21067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1138.154861][T21067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1138.180482][T21067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1138.279733][T10940] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1138.299026][T10940] asix 6-1:0.188: probe with driver asix failed with error -71 [ 1138.369998][T10940] usb 6-1: USB disconnect, device number 89 [ 1138.713360][T21105] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4239'. [ 1139.188871][T19089] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1139.386929][ T30] audit: type=1326 audit(1770985154.134:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21108 comm="syz.5.4241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7c2f9bf79 code=0x7ffc0000 [ 1139.560914][ T30] audit: type=1326 audit(1770985154.164:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21108 comm="syz.5.4241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7c2f9bf79 code=0x7ffc0000 [ 1139.647822][ T30] audit: type=1326 audit(1770985154.184:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21108 comm="syz.5.4241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fb7c2f9bf79 code=0x7ffc0000 [ 1139.688457][ T30] audit: type=1326 audit(1770985154.184:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21108 comm="syz.5.4241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7c2f9bf79 code=0x7ffc0000 [ 1139.711444][T19089] usb 2-1: Using ep0 maxpacket: 32 [ 1139.722777][ T30] audit: type=1326 audit(1770985154.184:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21108 comm="syz.5.4241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7c2f9bf79 code=0x7ffc0000 [ 1139.746297][T19089] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 1139.755461][T19089] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1139.765634][ T30] audit: type=1326 audit(1770985154.354:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21108 comm="syz.5.4241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb7c2f9bf79 code=0x7ffc0000 [ 1139.788780][T19089] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1139.800335][T19089] usb 2-1: config 1 has no interface number 0 [ 1139.806990][T19089] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1139.837875][ T30] audit: type=1326 audit(1770985154.354:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21108 comm="syz.5.4241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7c2f9bf79 code=0x7ffc0000 [ 1139.868557][T19089] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1139.883181][T19089] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1139.895933][ T30] audit: type=1326 audit(1770985154.354:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21108 comm="syz.5.4241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb7c2f9bf79 code=0x7ffc0000 [ 1139.919102][T19089] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.936151][ T30] audit: type=1326 audit(1770985154.354:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21108 comm="syz.5.4241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7c2f9bf79 code=0x7ffc0000 [ 1139.963964][T19089] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 1140.172248][T19089] snd_usb_pod 2-1:1.1: invalid control EP [ 1140.178860][T19089] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 1140.186805][T19089] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 1140.206924][T19089] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 1140.266806][T21115] syzkaller0: entered promiscuous mode [ 1140.272580][T21115] syzkaller0: entered allmulticast mode [ 1140.303514][T21115] tipc: Enabled bearer , priority 0 [ 1140.539128][T10940] usb 2-1: USB disconnect, device number 46 [ 1140.547745][T19068] usb 5-1: new full-speed USB device number 126 using dummy_hcd [ 1140.710185][T19068] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1140.731951][T19068] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1140.760443][T19068] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.816614][T19068] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1140.973318][ T5883] usb 4-1: USB disconnect, device number 58 [ 1141.049070][T21113] tipc: Resetting bearer [ 1141.072806][T19068] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1141.134076][T19068] usb 5-1: USB disconnect, device number 126 [ 1141.172403][T21113] tipc: Disabling bearer [ 1141.417953][T10940] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 1141.476264][ T5883] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1141.578582][T10940] usb 2-1: too many configurations: 108, using maximum allowed: 8 [ 1141.599144][T10940] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1141.607167][T10940] usb 2-1: can't read configurations, error -61 [ 1141.638828][ T5883] usb 4-1: Using ep0 maxpacket: 8 [ 1141.651886][ T5883] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1141.659711][ T5883] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1141.687801][ T5883] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1141.707754][ T5883] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1141.727978][ T5883] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1141.759893][T10940] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 1141.770146][ T5883] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1141.785437][ T5883] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1141.810558][ T5883] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1141.838219][ T5883] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1141.851308][ T5883] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1141.889206][ T5883] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1141.896959][ T5883] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1141.927778][ T5883] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1141.943394][T10940] usb 2-1: too many configurations: 108, using maximum allowed: 8 [ 1141.964634][T10940] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1141.977896][T10940] usb 2-1: can't read configurations, error -61 [ 1141.986980][ T5883] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1141.999624][T10940] usb usb2-port1: attempt power cycle [ 1142.007331][ T5883] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1142.022972][ T5883] usb 4-1: string descriptor 0 read error: -22 [ 1142.052648][ T5883] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1142.072684][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.108007][ T5883] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1142.158238][T21142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4249'. [ 1142.515840][T10940] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 1142.559439][T10940] usb 2-1: too many configurations: 108, using maximum allowed: 8 [ 1142.573508][T10940] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1142.603661][T10940] usb 2-1: can't read configurations, error -61 [ 1142.758762][T10940] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 1142.799409][T10940] usb 2-1: too many configurations: 108, using maximum allowed: 8 [ 1142.825019][T10940] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1142.906303][T10940] usb 2-1: can't read configurations, error -61 [ 1142.916714][T10940] usb usb2-port1: unable to enumerate USB device [ 1143.278154][T19068] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 1143.447458][T19068] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1143.527053][T19068] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1143.537671][T19089] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1143.567060][T19068] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 1143.603694][T19068] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.650442][T19068] usb 1-1: config 0 descriptor?? [ 1143.669981][T21145] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1143.743432][T19089] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1143.766576][T19089] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1143.794483][T19089] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1143.817624][T19089] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.855628][T19089] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1143.863549][T19089] usb 5-1: invalid MIDI out EP 0 [ 1144.032077][T19089] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1144.115014][T19068] hid_parser_main: 1 callbacks suppressed [ 1144.115032][T19068] konepure 0003:1E7D:2DBE.006A: unknown main item tag 0x0 [ 1144.117721][T21152] fuse: Unknown parameter '00000000000000000005' [ 1144.139813][T19068] konepure 0003:1E7D:2DBE.006A: unknown main item tag 0x0 [ 1144.212147][T19068] konepure 0003:1E7D:2DBE.006A: hidraw0: USB HID v80.00 Device [HID 1e7d:2dbe] on usb-dummy_hcd.0-1/input0 [ 1144.319294][ T5883] usb 1-1: USB disconnect, device number 23 [ 1144.353933][T21158] fido_id[21158]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1144.398473][T10940] usb 4-1: USB disconnect, device number 59 [ 1144.656226][T21152] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4252'. [ 1144.680466][T21152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4252'. [ 1144.829351][T18117] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 1144.857888][T10940] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1145.037739][T10940] usb 4-1: Using ep0 maxpacket: 16 [ 1145.064871][T18117] usb 2-1: config index 0 descriptor too short (expected 27675, got 27) [ 1145.085429][T18117] usb 2-1: config 37 has too many interfaces: 108, using maximum allowed: 32 [ 1145.095017][T10940] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1145.107682][T10940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1145.203000][T18117] usb 2-1: config 37 has an invalid descriptor of length 0, skipping remainder of the config [ 1145.251020][T10940] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1145.298657][T18117] usb 2-1: config 37 has 0 interfaces, different from the descriptor's value: 108 [ 1145.308968][T10940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.316962][T10940] usb 4-1: Product: syz [ 1145.328896][T12453] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1145.339288][T10940] usb 4-1: Manufacturer: syz [ 1145.345237][T10940] usb 4-1: SerialNumber: syz [ 1145.345468][T12453] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1145.361497][T18117] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1145.379641][T12453] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1145.410346][T18117] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.428018][T18117] usb 2-1: Product: syz [ 1145.428246][T12453] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1145.438043][T18117] usb 2-1: Manufacturer: syz [ 1145.445709][T12453] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1145.507154][T10940] usb 4-1: config 0 descriptor?? [ 1145.512291][T18117] usb 2-1: SerialNumber: syz [ 1145.545882][T10940] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1145.567523][T10940] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1146.179395][T10940] em28xx 4-1:0.0: chip ID is em28178 [ 1146.438881][T21165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1146.452693][T21165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1146.461989][T10940] usb 4-1: USB disconnect, device number 60 [ 1146.468916][T10940] em28xx 4-1:0.0: Disconnecting em28xx [ 1146.476743][T10940] em28xx 4-1:0.0: Freeing device [ 1146.751895][T21177] chnl_net:caif_netlink_parms(): no params data found [ 1147.197110][T19068] usb 5-1: USB disconnect, device number 127 [ 1147.390329][T21177] bridge0: port 1(bridge_slave_0) entered blocking state [ 1147.407861][T19089] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1147.436470][T21177] bridge0: port 1(bridge_slave_0) entered disabled state [ 1147.443918][T21177] bridge_slave_0: entered allmulticast mode [ 1147.459793][T21177] bridge_slave_0: entered promiscuous mode [ 1147.471473][T21177] bridge0: port 2(bridge_slave_1) entered blocking state [ 1147.479551][T21177] bridge0: port 2(bridge_slave_1) entered disabled state [ 1147.487193][T21177] bridge_slave_1: entered allmulticast mode [ 1147.495870][T21177] bridge_slave_1: entered promiscuous mode [ 1147.560061][T12453] Bluetooth: hci1: command tx timeout [ 1147.587740][T19089] usb 4-1: Using ep0 maxpacket: 32 [ 1147.595642][T19089] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1147.618405][T19089] usb 4-1: config 0 has no interface number 0 [ 1147.630993][T19089] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1147.642020][T19089] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1147.650894][T19089] usb 4-1: Product: syz [ 1147.657648][T19089] usb 4-1: Manufacturer: syz [ 1147.665443][T19089] usb 4-1: SerialNumber: syz [ 1147.712110][ T5883] usb 2-1: USB disconnect, device number 51 [ 1147.715912][T19089] usb 4-1: config 0 descriptor?? [ 1147.751328][T19089] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1147.897236][T21200] xt_socket: unknown flags 0xc [ 1148.131526][ T12] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1148.253527][ T12] dvmrp0 (unregistering): left allmulticast mode [ 1148.616867][ T12] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 1148.676005][ T12] bond0 (unregistering): Released all slaves [ 1148.701719][ T12] bond1 (unregistering): Released all slaves [ 1148.837771][ T5883] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1148.915672][T21177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1148.949357][T19089] usb 4-1: qt2_attach - failed to power on unit: -71 [ 1148.967746][ T12] : left promiscuous mode [ 1148.968069][T19089] quatech2 4-1:0.51: probe with driver quatech2 failed with error -71 [ 1148.986490][T19089] usb 4-1: USB disconnect, device number 61 [ 1149.007948][ T5883] usb 2-1: Using ep0 maxpacket: 8 [ 1149.055698][T21177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1149.074989][ T5883] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1149.087448][ T5883] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1149.116848][ T5883] usb 2-1: Product: syz [ 1149.132751][ T5883] usb 2-1: Manufacturer: syz [ 1149.137400][ T5883] usb 2-1: SerialNumber: syz [ 1149.156137][ T12] @„;: left promiscuous mode [ 1149.179548][ T5883] usb 2-1: config 0 descriptor?? [ 1149.196428][ T5883] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1149.296662][T21177] team0: Port device team_slave_0 added [ 1149.304537][ T12] tipc: Left network mode [ 1149.314861][T21177] team0: Port device team_slave_1 added [ 1149.407479][T21177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1149.417403][T21177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1149.444471][T21177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1149.500266][T21177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1149.507377][T21177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1149.577642][T21177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1149.614893][ T5883] gspca_zc3xx: reg_r err -71 [ 1149.619778][ T5883] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1149.647840][T12453] Bluetooth: hci1: command tx timeout [ 1149.734108][ T5883] usb 2-1: USB disconnect, device number 52 [ 1149.987733][T19089] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 1149.991548][T21177] hsr_slave_0: entered promiscuous mode [ 1150.012126][T21177] hsr_slave_1: entered promiscuous mode [ 1150.078112][T21177] debugfs: 'hsr0' already exists in 'hsr' [ 1150.083904][T21177] Cannot create hsr debugfs directory [ 1150.157043][T21252] bridge2: entered promiscuous mode [ 1150.331669][ T12] hsr_slave_0: left promiscuous mode [ 1150.348362][T19089] usb 4-1: config index 0 descriptor too short (expected 27675, got 27) [ 1150.357124][ T12] hsr_slave_1: left promiscuous mode [ 1150.459585][T19089] usb 4-1: config 37 has too many interfaces: 108, using maximum allowed: 32 [ 1150.529689][T19089] usb 4-1: config 37 has an invalid descriptor of length 0, skipping remainder of the config [ 1150.580732][T19089] usb 4-1: config 37 has 0 interfaces, different from the descriptor's value: 108 [ 1150.662493][ T12] macvlan0 (unregistering): left allmulticast mode [ 1150.682301][T19089] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1150.710724][T19089] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1150.741979][T19089] usb 4-1: Product: syz [ 1150.785305][T19089] usb 4-1: Manufacturer: syz [ 1150.958077][T19089] usb 4-1: SerialNumber: syz [ 1151.176230][T21271] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4278'. [ 1151.258033][ T5883] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1151.487728][ T5883] usb 2-1: Using ep0 maxpacket: 32 [ 1151.717888][T12453] Bluetooth: hci1: command tx timeout [ 1151.732330][ T5883] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1151.745080][ T5883] usb 2-1: config 0 has no interface number 0 [ 1151.777744][T18117] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1151.867409][ T5883] usb 2-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1151.893819][T21279] loop6: detected capacity change from 0 to 524288000 [ 1151.998390][ T5883] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1152.108007][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.118182][T21280] support for the xor transformation has been removed. [ 1152.137717][T18117] usb 1-1: Using ep0 maxpacket: 16 [ 1152.150346][T18117] usb 1-1: config 0 has no interfaces? [ 1152.159263][T18117] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1152.168666][T18117] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1152.187958][T18117] usb 1-1: Manufacturer: syz [ 1152.231722][ T5883] usb 2-1: Product: syz [ 1152.244059][ T5883] usb 2-1: Manufacturer: syz [ 1152.254902][T18117] usb 1-1: config 0 descriptor?? [ 1152.262494][ T5883] usb 2-1: SerialNumber: syz [ 1152.289617][ T5883] usb 2-1: config 0 descriptor?? [ 1152.338954][ T5883] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1152.528683][ T5883] usb 2-1: qt2_setup_urbs - submit read urb failed -8 [ 1152.554943][ T5883] quatech2 2-1:0.51: probe with driver quatech2 failed with error -8 [ 1153.792605][T19068] usb 4-1: USB disconnect, device number 62 [ 1153.798926][T12453] Bluetooth: hci1: command tx timeout [ 1154.002643][T21295] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1154.254875][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 1154.254895][ T30] audit: type=1800 audit(1770985169.004:1397): pid=21298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4284" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 1154.883437][T19089] usb 2-1: USB disconnect, device number 53 [ 1155.323871][ T5883] usb 1-1: USB disconnect, device number 24 [ 1155.420151][T21177] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1155.515491][T21177] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1155.607807][ T5897] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1155.710558][T21177] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1155.724099][T21177] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1155.877788][ T5883] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1155.927742][ T5897] usb 2-1: Using ep0 maxpacket: 16 [ 1155.950549][ T5897] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1155.979577][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1156.004836][ T5897] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 1156.069749][ T5883] usb 4-1: Using ep0 maxpacket: 8 [ 1156.085603][ T5897] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1156.110515][ T5883] usb 4-1: config 127 has an invalid interface number: 171 but max is 1 [ 1156.120802][ T5883] usb 4-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 1156.143590][ T5883] usb 4-1: config 127 has no interface number 1 [ 1156.160651][ T5897] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 1156.169904][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1156.178222][ T5897] usb 2-1: Product: syz [ 1156.182542][ T5897] usb 2-1: Manufacturer: syz [ 1156.197843][ T5897] usb 2-1: SerialNumber: syz [ 1156.257791][ T5883] usb 4-1: config 127 interface 171 has no altsetting 0 [ 1156.336725][ T5883] usb 4-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 1156.358921][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1156.394089][ T5883] usb 4-1: Product: syz [ 1156.410799][ T5883] usb 4-1: Manufacturer: syz [ 1156.442616][ T5883] usb 4-1: SerialNumber: syz [ 1156.480245][ T5897] usb 2-1: config 0 descriptor?? [ 1156.483892][T21177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1156.576782][T21177] 8021q: adding VLAN 0 to HW filter on device team0 [ 1156.596802][ T5897] port100 2-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 1156.682104][T11996] bridge0: port 1(bridge_slave_0) entered blocking state [ 1156.689355][T11996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1156.749876][T18117] usb 2-1: USB disconnect, device number 54 [ 1156.889007][T11996] bridge0: port 2(bridge_slave_1) entered blocking state [ 1156.896221][T11996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1157.323449][T21177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1157.557403][T21177] veth0_vlan: entered promiscuous mode [ 1157.688961][T21177] veth1_vlan: entered promiscuous mode [ 1157.931702][T21177] veth0_macvtap: entered promiscuous mode [ 1157.997070][T19067] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 1158.030685][T21357] loop6: detected capacity change from 0 to 524288000 [ 1158.052378][T21177] veth1_macvtap: entered promiscuous mode [ 1158.087772][T21357] support for the xor transformation has been removed. [ 1158.145460][T21177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1158.284099][T19067] usb 2-1: config index 0 descriptor too short (expected 27675, got 27) [ 1158.300211][T21177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1158.381184][T19067] usb 2-1: config 37 has too many interfaces: 108, using maximum allowed: 32 [ 1158.399104][ T6331] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.446213][T19067] usb 2-1: config 37 has an invalid descriptor of length 0, skipping remainder of the config [ 1158.472421][ T6331] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.524615][ T6331] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.535541][T19067] usb 2-1: config 37 has 0 interfaces, different from the descriptor's value: 108 [ 1158.572565][ T6331] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.594474][T19067] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1158.621120][T19067] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.665694][T19067] usb 2-1: Product: syz [ 1158.677167][T19067] usb 2-1: Manufacturer: syz [ 1158.732931][T19067] usb 2-1: SerialNumber: syz [ 1158.970922][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1159.003171][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1159.151400][T21360] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4294'. [ 1159.195173][ T6330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1159.217459][T21360] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4294'. [ 1159.236055][ T6330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1159.370028][ T5883] xr_serial 4-1:127.171: xr_serial converter detected [ 1159.521609][T21368] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1159.574773][ T5883] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 1159.594766][ T5883] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1159.662227][ T5883] usb 4-1: USB disconnect, device number 63 [ 1159.701489][ T5883] xr_serial 4-1:127.171: device disconnected [ 1159.810422][T21375] netlink: 236 bytes leftover after parsing attributes in process `syz.0.4296'. [ 1159.958296][T19063] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1160.099498][T18116] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1160.128804][T19063] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1160.138253][T19063] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.151636][T19063] usb 6-1: Product: syz [ 1160.163005][T19063] usb 6-1: Manufacturer: syz [ 1160.173626][T19063] usb 6-1: SerialNumber: syz [ 1160.209174][ T5883] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1160.255573][T18116] usb 1-1: device descriptor read/64, error -71 [ 1160.419124][ T5883] usb 4-1: Using ep0 maxpacket: 32 [ 1160.425314][ T5883] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 1160.439369][ T5883] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1160.448762][ T5883] usb 4-1: config 0 has no interface number 0 [ 1160.456357][ T5883] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 768 [ 1160.555361][T18116] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1160.606616][ T5883] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1160.647913][ T5883] usb 4-1: config 0 has no interface number 0 [ 1160.654088][ T5883] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 768 [ 1160.697220][ T5883] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1160.711307][T19063] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1160.729229][T18116] usb 1-1: device descriptor read/64, error -71 [ 1160.742475][T19063] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 1160.767955][ T5883] usb 4-1: config 0 has no interface number 0 [ 1160.782719][ T5883] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 768 [ 1160.795936][T19063] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1160.813936][T19063] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1160.824909][ T5883] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1160.851914][T19063] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1160.855764][T19067] usb 2-1: USB disconnect, device number 55 [ 1160.860773][ T5883] usb 4-1: config 0 has no interface number 0 [ 1160.873141][T18116] usb usb1-port1: attempt power cycle [ 1160.889454][ T5883] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 768 [ 1160.913186][ T5883] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1160.928670][T19063] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 1160.936888][ T5883] usb 4-1: config 0 has no interface number 0 [ 1160.952540][ T5883] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 768 [ 1160.968075][T19063] usb 6-1: USB disconnect, device number 90 [ 1160.992957][ T5883] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1161.013201][ T5883] usb 4-1: config 0 has no interface number 0 [ 1161.029424][ T5883] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 768 [ 1161.045239][ T5883] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1161.061015][T21399] netlink: 'syz.1.4302': attribute type 6 has an invalid length. [ 1161.070735][T21399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4302'. [ 1161.081497][ T5883] usb 4-1: config 0 has no interface number 0 [ 1161.087915][ T5883] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 768 [ 1161.136372][ T5883] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1161.147029][ T5883] usb 4-1: config 0 has no interface number 0 [ 1161.167798][ T5883] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 768 [ 1161.185035][ T5883] usb 4-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 1161.203767][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1161.217779][T18116] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1161.228129][ T5883] usb 4-1: Product: syz [ 1161.235733][ T5883] usb 4-1: Manufacturer: syz [ 1161.246037][ T5883] usb 4-1: SerialNumber: syz [ 1161.253047][T18116] usb 1-1: device descriptor read/8, error -71 [ 1161.279566][ T5883] usb 4-1: config 0 descriptor?? [ 1161.299154][T21377] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1161.308812][ T5883] etas_es58x 4-1:0.2: Starting syz syz (Serial Number syz) [ 1161.427709][T19063] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1161.512187][ T5883] etas_es58x 4-1:0.2: could not parse product info: '424242424242' [ 1161.520551][T18116] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1161.563451][T18116] usb 1-1: device descriptor read/8, error -71 [ 1161.589512][T19063] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1161.621628][T19063] usb 2-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 1161.649880][T19063] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.675086][T19063] usb 2-1: config 0 descriptor?? [ 1161.688258][T18116] usb usb1-port1: unable to enumerate USB device [ 1161.736291][T18116] usb 4-1: USB disconnect, device number 64 [ 1161.769669][T18116] etas_es58x 4-1:0.2: Disconnecting syz syz [ 1162.144878][T21437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1162.153762][T21436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1162.164020][T21437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1162.188261][T21436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1162.298417][T21444] loop6: detected capacity change from 0 to 524288000 [ 1162.418366][T21445] support for the xor transformation has been removed. [ 1162.746323][T21453] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1163.160978][T19063] usbhid 2-1:0.0: can't add hid device: -71 [ 1163.178537][T19063] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1163.281062][T19063] usb 2-1: USB disconnect, device number 56 [ 1163.927960][T18115] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 1164.151594][T18115] usb 2-1: config index 0 descriptor too short (expected 27675, got 27) [ 1164.194264][T18115] usb 2-1: config 37 has too many interfaces: 108, using maximum allowed: 32 [ 1164.238191][T18115] usb 2-1: config 37 has an invalid descriptor of length 0, skipping remainder of the config [ 1164.268725][T18115] usb 2-1: config 37 has 0 interfaces, different from the descriptor's value: 108 [ 1164.501028][T21475] netdevsim netdevsim3: Direct firmware load for  failed with error -2 [ 1164.511405][T21475] netdevsim netdevsim3: Falling back to sysfs fallback for:  [ 1164.521591][T18115] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1164.531183][T18115] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.547189][T18115] usb 2-1: Product: syz [ 1164.567721][T21474] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1164.656347][T18115] usb 2-1: Manufacturer: syz [ 1164.663682][T18115] usb 2-1: SerialNumber: syz [ 1164.838329][T19089] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1165.038838][T19089] usb 6-1: Using ep0 maxpacket: 16 [ 1165.088870][T19089] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 1165.097701][T19089] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1165.115890][T19089] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1165.138486][T19089] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1165.158100][T19089] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1165.206589][T19089] usb 6-1: config 0 has no interface number 0 [ 1165.227310][T19089] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1165.264446][T19089] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1165.296296][T19089] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1165.324626][T19089] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1165.345788][T19089] usb 6-1: config 0 interface 125 has no altsetting 0 [ 1165.361143][T19089] usb 6-1: config 0 interface 125 has no altsetting 2 [ 1165.379290][T19089] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1165.389327][T19089] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1165.397438][T19089] usb 6-1: Product: syz [ 1165.402196][T19089] usb 6-1: Manufacturer: syz [ 1165.407040][T19089] usb 6-1: SerialNumber: syz [ 1165.417898][T18115] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1165.418946][T19089] usb 6-1: config 0 descriptor?? [ 1165.477348][T19089] usb 6-1: selecting invalid altsetting 2 [ 1165.557795][T18115] usb 5-1: device descriptor read/64, error -71 [ 1165.798044][T18115] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1165.927964][T18115] usb 5-1: device descriptor read/64, error -71 [ 1166.046501][T18115] usb usb5-port1: attempt power cycle [ 1166.161195][T21486] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4319'. [ 1166.437797][T18115] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1166.517439][T21495] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4320'. [ 1166.530362][T21495] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4320'. [ 1166.550421][T18115] usb 5-1: device descriptor read/8, error -71 [ 1166.661358][T21496] netlink: 'syz.3.4321': attribute type 27 has an invalid length. [ 1166.693951][T21496] veth0_to_team: left promiscuous mode [ 1166.735047][T19063] usb 2-1: USB disconnect, device number 57 [ 1167.027655][T18115] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1167.117824][T21496] hsr1: left allmulticast mode [ 1167.122684][T21496] dummy0: left allmulticast mode [ 1167.138953][T18115] usb 5-1: device descriptor read/8, error -71 [ 1167.192073][T21496] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 1167.278083][T18115] usb usb5-port1: unable to enumerate USB device [ 1168.122052][T19089] usb 6-1: USB disconnect, device number 91 [ 1168.245568][T21504] loop6: detected capacity change from 0 to 7 [ 1168.270822][T21504] Dev loop6: unable to read RDB block 7 [ 1168.292458][T21504] loop6: AHDI p1 p2 p3 p4 [ 1168.328692][T21504] loop6: partition table partially beyond EOD, truncated [ 1168.340288][T21507] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1168.378598][T21504] loop6: p1 start 512 is beyond EOD, truncated [ 1168.419840][T21504] loop6: p2 size 335544320 extends beyond EOD, truncated [ 1168.458960][T21504] loop6: p3 start 2427370299 is beyond EOD, truncated [ 1168.633510][T13801] udevd[13801]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1168.761097][T21514] loop6: detected capacity change from 0 to 524288000 [ 1168.938597][T21517] support for the xor transformation has been removed. [ 1169.111195][T21521] netlink: 'syz.1.4328': attribute type 1 has an invalid length. [ 1169.417681][T19089] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1169.611062][T19089] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1169.621879][T19089] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1169.647814][T18116] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 1169.790419][T19089] usb 4-1: Product: syz [ 1169.794629][T19089] usb 4-1: Manufacturer: syz [ 1169.841180][T19089] usb 4-1: SerialNumber: syz [ 1169.858718][T19089] usb 4-1: config 0 descriptor?? [ 1169.880781][T19089] ch341 4-1:0.0: ch341-uart converter detected [ 1169.947855][T18116] usb 5-1: config index 0 descriptor too short (expected 27675, got 27) [ 1169.956278][T18116] usb 5-1: config 37 has too many interfaces: 108, using maximum allowed: 32 [ 1170.056437][T21543] bond2: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 1170.134187][T21543] bond2 (unregistering): Released all slaves [ 1170.151481][T18116] usb 5-1: config 37 has an invalid descriptor of length 0, skipping remainder of the config [ 1170.197954][T18116] usb 5-1: config 37 has 0 interfaces, different from the descriptor's value: 108 [ 1170.291954][T18116] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1170.343218][T18116] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1170.363554][T18116] usb 5-1: Product: syz [ 1170.398888][T18116] usb 5-1: Manufacturer: syz [ 1170.455346][T18116] usb 5-1: SerialNumber: syz [ 1171.135875][T21554] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4335'. [ 1171.206223][T21534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1171.224288][T21534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1171.272043][T19089] usb 4-1: ch341-uart converter now attached to ttyUSB0 [ 1171.349674][ T5897] usb 6-1: new low-speed USB device number 92 using dummy_hcd [ 1171.436861][T21559] bridge0: entered promiscuous mode [ 1171.446157][T21559] vlan3: entered promiscuous mode [ 1171.475830][T19067] usb 4-1: USB disconnect, device number 65 [ 1171.488556][T19067] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 1171.498149][ T5897] usb 6-1: device descriptor read/64, error -71 [ 1171.518156][T19067] ch341 4-1:0.0: device disconnected [ 1171.650751][T21565] loop6: detected capacity change from 0 to 7 [ 1171.658208][T21565] Dev loop6: unable to read RDB block 7 [ 1171.663771][T21565] loop6: AHDI p1 p2 p3 p4 [ 1171.668982][T21565] loop6: partition table partially beyond EOD, truncated [ 1171.681286][T21565] loop6: p1 start 512 is beyond EOD, truncated [ 1171.693015][T21565] loop6: p2 size 335544320 extends beyond EOD, truncated [ 1171.708983][T21565] loop6: p3 start 2427370299 is beyond EOD, truncated [ 1171.747704][ T5897] usb 6-1: new low-speed USB device number 93 using dummy_hcd [ 1171.796019][T13801] udevd[13801]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1171.818040][T18115] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1171.888251][ T5897] usb 6-1: device descriptor read/64, error -71 [ 1171.967662][T18115] usb 2-1: Using ep0 maxpacket: 8 [ 1171.976242][T18115] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1172.005391][T18115] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1172.014970][T18115] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1172.015191][ T5897] usb usb6-port1: attempt power cycle [ 1172.038055][T18115] usb 2-1: Product: syz [ 1172.059124][T18115] usb 2-1: Manufacturer: syz [ 1172.076199][T18115] usb 2-1: SerialNumber: syz [ 1172.125325][T18115] usb 2-1: config 0 descriptor?? [ 1172.132709][T18115] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1172.464852][T21571] can: request_module (can-proto-0) failed. [ 1172.471186][ T5897] usb 6-1: new low-speed USB device number 94 using dummy_hcd [ 1172.498447][ T5897] usb 6-1: device descriptor read/8, error -71 [ 1172.534608][T18116] usb 5-1: USB disconnect, device number 6 [ 1172.547745][T19067] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1172.710391][T19067] usb 4-1: Using ep0 maxpacket: 16 [ 1172.718206][T19067] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1172.745385][T19067] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1172.755400][ T5897] usb 6-1: new low-speed USB device number 95 using dummy_hcd [ 1172.776728][T19067] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1172.800161][ T5897] usb 6-1: device descriptor read/8, error -71 [ 1172.813388][T19067] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1172.840716][T19067] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1172.881020][T19067] usb 4-1: config 0 descriptor?? [ 1172.919457][ T5897] usb usb6-port1: unable to enumerate USB device [ 1172.938390][T18115] gspca_zc3xx: reg_w_i err -110 [ 1173.113900][T21588] loop6: detected capacity change from 0 to 524288000 [ 1173.172594][T21588] support for the xor transformation has been removed. [ 1173.293191][T19067] microsoft 0003:045E:07DA.006B: unknown main item tag 0x0 [ 1173.305816][T19067] microsoft 0003:045E:07DA.006B: ignoring exceeding usage max [ 1173.316416][T19067] microsoft 0003:045E:07DA.006B: unknown main item tag 0x0 [ 1173.327182][T19067] microsoft 0003:045E:07DA.006B: unknown main item tag 0x0 [ 1173.335653][T19067] microsoft 0003:045E:07DA.006B: unknown main item tag 0x0 [ 1173.416231][T19067] microsoft 0003:045E:07DA.006B: unknown main item tag 0x0 [ 1173.438523][T19067] microsoft 0003:045E:07DA.006B: unknown main item tag 0x0 [ 1173.451631][T19067] microsoft 0003:045E:07DA.006B: unknown main item tag 0x0 [ 1173.465231][T19067] microsoft 0003:045E:07DA.006B: unknown main item tag 0x0 [ 1173.481372][T19067] microsoft 0003:045E:07DA.006B: unknown main item tag 0x0 [ 1173.496238][T19067] microsoft 0003:045E:07DA.006B: unknown main item tag 0x0 [ 1173.526854][T19067] microsoft 0003:045E:07DA.006B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1173.539964][T18115] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1173.546377][T18115] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 1173.582741][T19067] microsoft 0003:045E:07DA.006B: no inputs found [ 1173.604085][T19067] microsoft 0003:045E:07DA.006B: could not initialize ff, continuing anyway [ 1173.812730][T21602] netlink: 774 bytes leftover after parsing attributes in process `syz.0.4348'. [ 1174.034122][T21605] FAULT_INJECTION: forcing a failure. [ 1174.034122][T21605] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1174.073195][T21605] CPU: 1 UID: 0 PID: 21605 Comm: syz.5.4350 Tainted: G L syzkaller #0 PREEMPT(full) [ 1174.073229][T21605] Tainted: [L]=SOFTLOCKUP [ 1174.073237][T21605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1174.073249][T21605] Call Trace: [ 1174.073258][T21605] [ 1174.073268][T21605] dump_stack_lvl+0xe8/0x150 [ 1174.073301][T21605] should_fail_ex+0x412/0x560 [ 1174.073330][T21605] _copy_from_user+0x2d/0xb0 [ 1174.073359][T21605] do_ipv6_setsockopt+0x264/0x31c0 [ 1174.073382][T21605] ? get_pid_task+0x20/0x1f0 [ 1174.073418][T21605] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 1174.073441][T21605] ? get_pid_task+0x20/0x1f0 [ 1174.073466][T21605] ? get_pid_task+0x20/0x1f0 [ 1174.073490][T21605] ? get_pid_task+0x20/0x1f0 [ 1174.073527][T21605] ? __lock_acquire+0x6b5/0x2cf0 [ 1174.073565][T21605] ? aa_sk_perm+0x15a/0x960 [ 1174.073589][T21605] ? aa_sk_perm+0x82d/0x960 [ 1174.073608][T21605] ? __fget_files+0x2a/0x420 [ 1174.073636][T21605] ? __pfx_aa_sk_perm+0x10/0x10 [ 1174.073660][T21605] ? __fget_files+0x2a/0x420 [ 1174.073680][T21605] ? aa_sock_opt_perm+0xff/0x1a0 [ 1174.073706][T21605] ipv6_setsockopt+0x59/0x170 [ 1174.073729][T21605] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1174.073760][T21605] do_sock_setsockopt+0x17c/0x1b0 [ 1174.073788][T21605] __x64_sys_setsockopt+0x13d/0x1b0 [ 1174.073816][T21605] do_syscall_64+0x14d/0xf80 [ 1174.073840][T21605] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1174.073867][T21605] ? trace_irq_disable+0x37/0x100 [ 1174.073891][T21605] ? clear_bhb_loop+0x40/0x90 [ 1174.073914][T21605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1174.073934][T21605] RIP: 0033:0x7f4f7e79bf79 [ 1174.073953][T21605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1174.073969][T21605] RSP: 002b:00007f4f7f735028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1174.073990][T21605] RAX: ffffffffffffffda RBX: 00007f4f7ea15fa0 RCX: 00007f4f7e79bf79 [ 1174.074004][T21605] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 1174.074015][T21605] RBP: 00007f4f7f735090 R08: 00000000000002d0 R09: 0000000000000000 [ 1174.074027][T21605] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1174.074039][T21605] R13: 00007f4f7ea16038 R14: 00007f4f7ea15fa0 R15: 00007f4f7eb3fa48 [ 1174.074069][T21605] [ 1174.459915][T21608] loop6: detected capacity change from 0 to 7 [ 1174.486470][T21608] Dev loop6: unable to read RDB block 7 [ 1174.511878][T21608] loop6: AHDI p1 p2 p3 p4 [ 1174.538963][T21608] loop6: partition table partially beyond EOD, truncated [ 1174.556641][T21608] loop6: p1 start 512 is beyond EOD, truncated [ 1174.563530][T21608] loop6: p2 size 335544320 extends beyond EOD, truncated [ 1174.572197][T21608] loop6: p3 start 2427370299 is beyond EOD, truncated [ 1174.593589][T18115] usb 2-1: USB disconnect, device number 58 [ 1175.066080][T21615] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:248x16 (0x38415262, 8, 0, 0, 0) [ 1175.086079][T21615] xt_hashlimit: size too large, truncated to 1048576 [ 1175.144827][ T5897] usb 4-1: USB disconnect, device number 66 [ 1175.555494][T13801] udevd[13801]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1176.141371][T21634] syzkaller1: entered promiscuous mode [ 1176.153236][T21634] syzkaller1: entered allmulticast mode [ 1176.796320][T21663] vlan2: entered allmulticast mode [ 1176.801581][T21663] team0: entered allmulticast mode [ 1176.806770][T21663] team_slave_0: entered allmulticast mode [ 1176.813935][T21663] team_slave_1: entered allmulticast mode [ 1177.438704][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.445134][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.970702][T21683] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4373'. [ 1178.288836][T21692] kvm: kvm [21691]: vcpu0, guest rIP: 0x913e Unhandled WRMSR(0xc1) = 0x40 [ 1178.298013][T21692] kvm: kvm [21691]: vcpu0, guest rIP: 0x913e Unhandled WRMSR(0xc2) = 0xbf [ 1178.312420][T21692] kvm: kvm [21691]: vcpu0, guest rIP: 0x913e Unhandled WRMSR(0x11e) = 0xbe7021d1 [ 1178.326591][T21692] kvm: kvm [21691]: vcpu0, guest rIP: 0x913e Unhandled WRMSR(0x186) = 0xff [ 1178.343243][T21692] kvm: kvm [21691]: vcpu0, guest rIP: 0x913e Unhandled WRMSR(0x187) = 0xfc [ 1178.356874][T21692] kvm_intel: kvm [21691]: vcpu0, guest rIP: 0x913e Unhandled WRMSR(0x1d9) = 0xea [ 1178.407881][ T5897] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 1178.568467][ T5897] usb 6-1: Using ep0 maxpacket: 8 [ 1178.580057][ T5897] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 1178.599742][ T5897] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1178.627781][ T5897] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1178.647253][ T5897] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1178.678118][ T5897] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1178.717184][ T5897] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1178.765728][ T5897] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1178.815724][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.072042][ T5897] usb 6-1: usb_control_msg returned -32 [ 1179.108504][ T5897] usbtmc 6-1:16.0: can't read capabilities [ 1179.307748][T18115] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1179.493468][T18115] usb 2-1: Using ep0 maxpacket: 32 [ 1179.512950][T18115] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1179.547224][T18115] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1179.577876][T18115] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1179.585930][T18115] usb 2-1: Product: syz [ 1179.642620][T18115] usb 2-1: Manufacturer: syz [ 1179.647273][T18115] usb 2-1: SerialNumber: syz [ 1179.669684][T18115] usb 2-1: config 0 descriptor?? [ 1179.699596][T18115] microtek usb (rev 0.4.3): expecting 3 got 0 endpoints! Bailing out. [ 1179.825600][T21716] usbtmc 6-1:16.0: send_request_dev_dep_msg_in returned -71 [ 1179.885360][T21709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1179.896053][T21716] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 1179.899537][T21709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1180.233170][T21719] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1180.379982][T21723] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 1180.395865][T21722] loop4: detected capacity change from 0 to 1 [ 1180.424057][T21722] Dev loop4: unable to read RDB block 1 [ 1180.431347][T21723] program syz.0.4385 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1180.443238][T21722] loop4: unable to read partition table [ 1180.449882][T21722] loop4: partition table beyond EOD, truncated [ 1180.492894][T21722] loop_reread_partitions: partition scan of loop4 (þ被xü^>Ñà– ) failed (rc=-5) [ 1180.688386][ T5897] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1180.712122][T21731] FAULT_INJECTION: forcing a failure. [ 1180.712122][T21731] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1180.725394][T21731] CPU: 1 UID: 0 PID: 21731 Comm: syz.0.4388 Tainted: G L syzkaller #0 PREEMPT(full) [ 1180.725421][T21731] Tainted: [L]=SOFTLOCKUP [ 1180.725426][T21731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1180.725433][T21731] Call Trace: [ 1180.725439][T21731] [ 1180.725444][T21731] dump_stack_lvl+0xe8/0x150 [ 1180.725465][T21731] should_fail_ex+0x412/0x560 [ 1180.725481][T21731] _copy_from_user+0x2d/0xb0 [ 1180.725498][T21731] copy_from_sockptr_offset+0x66/0xa0 [ 1180.725514][T21731] do_ip6t_set_ctl+0x93d/0xe10 [ 1180.725529][T21731] ? rcu_is_watching+0x15/0xb0 [ 1180.725544][T21731] ? trace_contention_end+0x39/0x100 [ 1180.725559][T21731] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 1180.725581][T21731] ? __pfx___mutex_lock+0x10/0x10 [ 1180.725595][T21731] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1180.725612][T21731] ? __pfx_aa_sk_perm+0x10/0x10 [ 1180.725628][T21731] nf_setsockopt+0x26f/0x290 [ 1180.725643][T21731] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1180.725661][T21731] do_sock_setsockopt+0x17c/0x1b0 [ 1180.725678][T21731] __x64_sys_setsockopt+0x13d/0x1b0 [ 1180.725694][T21731] do_syscall_64+0x14d/0xf80 [ 1180.725707][T21731] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1180.725718][T21731] ? trace_irq_disable+0x37/0x100 [ 1180.725732][T21731] ? clear_bhb_loop+0x40/0x90 [ 1180.725745][T21731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1180.725757][T21731] RIP: 0033:0x7fc2df99bf79 [ 1180.725770][T21731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1180.725780][T21731] RSP: 002b:00007fc2e07a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1180.725794][T21731] RAX: ffffffffffffffda RBX: 00007fc2dfc15fa0 RCX: 00007fc2df99bf79 [ 1180.725807][T21731] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 1180.725818][T21731] RBP: 00007fc2e07a1090 R08: 00000000000002d0 R09: 0000000000000000 [ 1180.725830][T21731] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1180.725842][T21731] R13: 00007fc2dfc16038 R14: 00007fc2dfc15fa0 R15: 00007fc2dfd3fa48 [ 1180.725872][T21731] [ 1181.030080][ T5897] usb 4-1: Using ep0 maxpacket: 8 [ 1181.048843][ T5897] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1181.060127][ T5897] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1181.070556][ T5897] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1181.080843][ T5897] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1181.094074][ T5897] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1181.104069][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1181.198789][T18115] usb 6-1: USB disconnect, device number 96 [ 1181.432182][T21722] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1181.458040][ T5897] usb 4-1: usb_control_msg returned -71 [ 1181.474150][ T5897] usbtmc 4-1:16.0: can't read capabilities [ 1181.522836][ T5897] usb 4-1: USB disconnect, device number 67 [ 1181.902401][T21758] fuse: Bad value for 'fd' [ 1182.000937][T21759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4395'. [ 1182.110748][T18115] usb 2-1: USB disconnect, device number 59 [ 1182.178222][T21762] fuse: Unknown parameter 'Jd£0x0000000000000004' [ 1182.289837][T21766] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1182.311628][T21767] netlink: 124 bytes leftover after parsing attributes in process `syz.4.4397'. [ 1182.679684][T21764] bond2 (unregistering): Released all slaves [ 1182.827984][T18115] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1182.997726][T18115] usb 5-1: Using ep0 maxpacket: 16 [ 1183.016962][T18115] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1183.047811][T18115] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1183.070240][T18115] usb 5-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 1183.127706][T18115] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.694770][T18115] usb 5-1: config 0 descriptor?? [ 1183.748651][T21786] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4400'. [ 1183.938930][T21772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1183.948131][T21772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1183.996278][T21795] vlan2: entered promiscuous mode [ 1184.281455][T18115] nintendo 0003:057E:2019.006C: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.4-1/input0 [ 1184.426455][T21772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1184.436722][T21772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1184.690231][T18115] nintendo 0003:057E:2019.006C: Failed to get joycon info; ret=-71 [ 1184.785964][T19089] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1184.825510][T18115] nintendo 0003:057E:2019.006C: Failed to retrieve controller info; ret=-71 [ 1184.883445][T18115] nintendo 0003:057E:2019.006C: Failed to initialize controller; ret=-71 [ 1184.945266][T18115] nintendo 0003:057E:2019.006C: probe - fail = -71 [ 1184.970266][T18115] nintendo 0003:057E:2019.006C: probe with driver nintendo failed with error -71 [ 1184.984202][T21812] netlink: 'syz.0.4411': attribute type 15 has an invalid length. [ 1184.992763][T21812] netlink: 'syz.0.4411': attribute type 46 has an invalid length. [ 1184.997688][T19089] usb 2-1: Using ep0 maxpacket: 32 [ 1185.012363][T21812] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4411'. [ 1185.014666][T19089] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1185.035679][T18115] usb 5-1: USB disconnect, device number 7 [ 1185.064748][T19089] usb 2-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=2e.ae [ 1185.075773][T19089] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1185.089393][T19089] usb 2-1: Product: syz [ 1185.093641][T19089] usb 2-1: Manufacturer: syz [ 1185.204535][T19089] usb 2-1: SerialNumber: syz [ 1185.223334][T19089] usb 2-1: config 0 descriptor?? [ 1185.269501][T19089] usbsevseg 2-1:0.0: USB 7 Segment device now attached [ 1185.685797][T21820] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4413'. [ 1186.545251][T21824] hmaÓË224): entered promiscuous mode [ 1186.861590][T19089] usb 2-1: USB disconnect, device number 60 [ 1186.892875][T19089] usbsevseg 2-1:0.0: USB 7 Segment now disconnected [ 1187.484377][T16668] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1187.501305][T16668] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1187.511365][T16668] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1187.528395][T16668] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1187.536880][T16668] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1187.667801][T19089] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1187.707697][T19067] usb 4-1: new full-speed USB device number 68 using dummy_hcd [ 1187.829753][T19089] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1187.840814][T19089] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1187.861044][T19067] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1187.869429][T19089] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1187.878872][T19067] usb 4-1: not running at top speed; connect to a high speed hub [ 1187.887000][T19089] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1187.895913][T19089] usb 2-1: SerialNumber: syz [ 1187.901753][T19067] usb 4-1: config 1 interface 0 altsetting 7 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 1187.913980][T19067] usb 4-1: config 1 interface 0 altsetting 7 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 1187.933376][T19067] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1187.951525][T19067] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1187.968505][T19067] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1187.976707][T19067] usb 4-1: Product: à ¬ [ 1187.983706][T19067] usb 4-1: Manufacturer: Щ [ 1187.985130][T21848] chnl_net:caif_netlink_parms(): no params data found [ 1188.016270][T19067] usb 4-1: SerialNumber: ÐŽ [ 1188.044188][T21845] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1188.052116][T21845] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1188.133217][T19089] usb 2-1: 0:2 : does not exist [ 1188.273144][T21842] netlink: 39 bytes leftover after parsing attributes in process `syz.3.4424'. [ 1188.323082][T21848] bridge0: port 1(bridge_slave_0) entered blocking state [ 1188.338960][T21848] bridge0: port 1(bridge_slave_0) entered disabled state [ 1188.358808][T21848] bridge_slave_0: entered allmulticast mode [ 1188.373230][T19089] usb 2-1: USB disconnect, device number 61 [ 1188.379675][T21848] bridge_slave_0: entered promiscuous mode [ 1188.400927][T21848] bridge0: port 2(bridge_slave_1) entered blocking state [ 1188.426684][T21848] bridge0: port 2(bridge_slave_1) entered disabled state [ 1188.464535][T21848] bridge_slave_1: entered allmulticast mode [ 1188.495314][T21848] bridge_slave_1: entered promiscuous mode [ 1188.623275][T19067] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 1188.644124][T21848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1188.667343][T19067] usb 4-1: USB disconnect, device number 68 [ 1188.712702][T21848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1188.854852][T21848] team0: Port device team_slave_0 added [ 1188.882617][T21848] team0: Port device team_slave_1 added [ 1189.012709][T21848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1189.037230][T21865] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1189.052775][T21848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1189.127694][T21848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1189.134353][T21848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1189.134372][T21848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1189.134400][T21848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1189.138466][T21871] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1189.249857][T21873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4431'. [ 1189.473803][T21848] hsr_slave_0: entered promiscuous mode [ 1189.474672][T21848] hsr_slave_1: entered promiscuous mode [ 1189.475330][T21848] debugfs: 'hsr0' already exists in 'hsr' [ 1189.475346][T21848] Cannot create hsr debugfs directory [ 1189.657800][T12453] Bluetooth: hci0: command tx timeout [ 1189.754099][T21877] netlink: 'syz.4.4432': attribute type 1 has an invalid length. [ 1190.063389][T21882] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1190.075474][T21882] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 1190.425373][T21893] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4436'. [ 1191.672096][T21848] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1191.690752][T21848] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1191.706077][T21848] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1191.707694][T18116] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1191.721288][T12453] Bluetooth: hci0: command tx timeout [ 1191.741076][T21848] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1191.846187][T21929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1191.863852][T21929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1191.885797][T18116] usb 2-1: Using ep0 maxpacket: 16 [ 1191.896557][T18116] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 1191.912973][T21848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1191.920155][T19089] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 1191.927014][T18116] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 1191.940399][T18116] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.951537][T18116] usb 2-1: Product: syz [ 1191.955826][T18116] usb 2-1: Manufacturer: syz [ 1191.963068][T18116] usb 2-1: SerialNumber: syz [ 1191.966231][T21929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1191.979256][T18116] usb 2-1: config 0 descriptor?? [ 1191.998757][T18116] hub 2-1:0.0: bad descriptor, ignoring hub [ 1191.999435][T21848] 8021q: adding VLAN 0 to HW filter on device team0 [ 1192.009106][T18116] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1192.013403][T21929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1192.033514][T18116] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1192.042239][ T6330] bridge0: port 1(bridge_slave_0) entered blocking state [ 1192.049589][ T6330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1192.063277][ T6330] bridge0: port 2(bridge_slave_1) entered blocking state [ 1192.070667][ T6330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1192.106201][T21929] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1192.118963][T21929] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1192.253795][T21848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1192.486791][T21848] veth0_vlan: entered promiscuous mode [ 1192.504397][T19069] usb 2-1: USB disconnect, device number 62 [ 1192.549122][T21848] veth1_vlan: entered promiscuous mode [ 1192.677442][T21848] veth0_macvtap: entered promiscuous mode [ 1192.706637][T21944] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1192.715882][T21848] veth1_macvtap: entered promiscuous mode [ 1192.795539][T21848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1192.832144][T21848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1192.883468][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.918181][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.964574][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.993918][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1193.174647][T21955] xt_TCPMSS: Only works on TCP SYN packets [ 1193.467947][T21960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1193.514189][T21960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1193.602991][ T6334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1193.695391][ T6334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1193.867782][T12453] Bluetooth: hci0: command tx timeout [ 1194.179334][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1194.267110][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1194.280765][T21969] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4457'. [ 1194.328603][T21969] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4457'. [ 1195.057893][T19063] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1195.197791][T19063] usb 7-1: device descriptor read/64, error -71 [ 1195.430028][T21997] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4464'. [ 1195.457838][T19063] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1195.475062][T21997] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4464'. [ 1195.551700][T21992] syzkaller0: entered promiscuous mode [ 1195.570354][T21992] syzkaller0: entered allmulticast mode [ 1195.597478][T19063] usb 7-1: device descriptor read/64, error -71 [ 1195.626477][T21993] netlink: 'syz.5.4464': attribute type 1 has an invalid length. [ 1195.720407][T19063] usb usb7-port1: attempt power cycle [ 1195.829254][T18116] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 1195.879844][T12453] Bluetooth: hci0: command tx timeout [ 1196.187875][T19063] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1196.473776][T19063] usb 7-1: device descriptor read/8, error -71 [ 1196.528170][T18116] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1196.559069][T18116] usb 5-1: not running at top speed; connect to a high speed hub [ 1196.590004][T18116] usb 5-1: config 1 has an invalid descriptor of length 243, skipping remainder of the config [ 1196.627751][T18116] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1196.652401][T18116] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1196.662476][T18116] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1196.682726][T18116] usb 5-1: Product: syz [ 1196.692216][T18116] usb 5-1: Manufacturer: syz [ 1196.707219][T18116] usb 5-1: SerialNumber: syz [ 1196.726704][T19063] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1196.763533][T19063] usb 7-1: device descriptor read/8, error -71 [ 1196.878296][T19063] usb usb7-port1: unable to enumerate USB device [ 1196.914885][T22021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4471'. [ 1197.076803][T18116] usb 5-1: 0:2 : does not exist [ 1197.332211][T19089] usb 6-1: device descriptor read/64, error -110 [ 1197.431767][T18116] usb 5-1: USB disconnect, device number 8 [ 1197.577937][T19089] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 1197.718158][T19089] usb 6-1: device descriptor read/64, error -32 [ 1197.786701][T22027] random: crng reseeded on system resumption [ 1197.846328][T19089] usb usb6-port1: attempt power cycle [ 1198.198452][T19089] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 1198.238178][T19089] usb 6-1: device descriptor read/8, error -32 [ 1198.372498][T19089] raw-gadget.1 gadget.5: failed to queue suspend event [ 1198.387420][T19089] raw-gadget.1 gadget.5: failed to queue reset event [ 1198.467799][T19089] raw-gadget.1 gadget.5: failed to queue resume event [ 1198.542441][T19089] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 1198.574770][ C1] raw-gadget.1 gadget.5: ignoring, device is not running [ 1198.582361][T19089] usb 6-1: device descriptor read/8, error -32 [ 1198.704946][T19089] raw-gadget.1 gadget.5: failed to queue suspend event [ 1198.715062][T19089] usb usb6-port1: unable to enumerate USB device [ 1199.888085][T19089] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 1200.050140][T19089] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1200.059838][T19089] usb 5-1: not running at top speed; connect to a high speed hub [ 1200.069150][T19089] usb 5-1: config 2 has an invalid interface number: 226 but max is 1 [ 1200.078663][T19089] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1200.090960][T19089] usb 5-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 1200.100346][T19089] usb 5-1: config 2 has no interface number 0 [ 1200.116949][T19089] usb 5-1: config 2 interface 226 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1200.128770][T19089] usb 5-1: config 2 interface 226 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 1200.140377][T19089] usb 5-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1200.158004][T19089] usb 5-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 1200.501775][T19089] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.524602][T19089] usb 5-1: Product: syz [ 1200.529273][T19089] usb 5-1: Manufacturer: syz [ 1200.533891][T19089] usb 5-1: SerialNumber: syz [ 1200.805175][T19089] usb 5-1: USB disconnect, device number 9 [ 1201.047218][ T30] audit: type=1804 audit(1770985215.794:1398): pid=22063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.4485" name="bus" dev="ramfs" ino=131981 res=1 errno=0 [ 1201.687051][T22069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4488'. [ 1202.477882][T19089] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1202.617688][T19089] usb 4-1: device descriptor read/64, error -71 [ 1202.858751][T19089] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1202.979158][T22090] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4497'. [ 1203.017926][T19089] usb 4-1: device descriptor read/64, error -71 [ 1203.083503][T22095] netlink: 'syz.5.4499': attribute type 5 has an invalid length. [ 1203.138995][T19089] usb usb4-port1: attempt power cycle [ 1203.547903][T19067] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1203.555653][T19089] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1203.603926][T19089] usb 4-1: device descriptor read/8, error -71 [ 1203.837386][T19067] usb 2-1: Using ep0 maxpacket: 8 [ 1203.858366][T19067] usb 2-1: config 127 has an invalid interface number: 171 but max is 1 [ 1203.871193][T19067] usb 2-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 1203.896425][T19067] usb 2-1: config 127 has no interface number 1 [ 1203.912604][T19067] usb 2-1: config 127 interface 171 has no altsetting 0 [ 1203.946812][T19067] usb 2-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 1203.961812][T19067] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1203.970265][T19089] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1203.979238][T19067] usb 2-1: Product: syz [ 1203.984619][T19067] usb 2-1: Manufacturer: syz [ 1203.993036][T19067] usb 2-1: SerialNumber: syz [ 1203.998448][T19089] usb 4-1: device descriptor read/8, error -71 [ 1204.218627][ T30] audit: type=1804 audit(1770985218.934:1399): pid=22116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.4504" name="bus" dev="ramfs" ino=132054 res=1 errno=0 [ 1204.329636][T19089] usb usb4-port1: unable to enumerate USB device [ 1205.573403][T22121] input: syz0 as /devices/virtual/input/input74 [ 1206.092540][T22131] fuse: Bad value for 'user_id' [ 1206.097516][T22131] fuse: Bad value for 'user_id' [ 1206.270551][T22133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1206.319101][T22133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1206.468109][T22128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4506'. [ 1206.549383][T19067] xr_serial 2-1:127.171: xr_serial converter detected [ 1206.562128][T19067] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 1206.570220][T19067] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1206.630552][T19067] usb 2-1: USB disconnect, device number 63 [ 1206.661353][T19067] xr_serial 2-1:127.171: device disconnected [ 1207.241149][T22152] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4517'. [ 1207.302630][ T12] [ 1207.305024][ T12] ============================================ [ 1207.311184][ T12] WARNING: possible recursive locking detected [ 1207.317424][ T12] syzkaller #0 Tainted: G L [ 1207.323492][ T12] -------------------------------------------- [ 1207.329632][ T12] kworker/u8:0/12 is trying to acquire lock: [ 1207.335604][ T12] ffff88805845c4a0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet6_getname+0x15d/0x650 [ 1207.344931][ T12] [ 1207.344931][ T12] but task is already holding lock: [ 1207.352293][ T12] ffff88805845c4a0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: rds_tcp_recv_path+0xfe/0x340 [ 1207.361865][ T12] [ 1207.361865][ T12] other info that might help us debug this: [ 1207.369916][ T12] Possible unsafe locking scenario: [ 1207.369916][ T12] [ 1207.377365][ T12] CPU0 [ 1207.380643][ T12] ---- [ 1207.383924][ T12] lock(k-sk_lock-AF_INET6); [ 1207.388657][ T12] lock(k-sk_lock-AF_INET6); [ 1207.393333][ T12] [ 1207.393333][ T12] *** DEADLOCK *** [ 1207.393333][ T12] [ 1207.401478][ T12] May be due to missing lock nesting notation [ 1207.401478][ T12] [ 1207.409792][ T12] 4 locks held by kworker/u8:0/12: [ 1207.414895][ T12] #0: ffff888059ec6148 ((wq_completion)krds_cp_wq#3/0){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 1207.426638][ T12] #1: ffffc90000117c40 ((work_completion)(&(&cp->cp_recv_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 1207.439601][ T12] #2: ffff88805845c4a0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: rds_tcp_recv_path+0xfe/0x340 [ 1207.449704][ T12] #3: ffff88805845c648 (k-clock-AF_INET6){++.-}-{3:3}, at: rds_tcp_data_ready+0x113/0x950 [ 1207.459714][ T12] [ 1207.459714][ T12] stack backtrace: [ 1207.465602][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1207.465623][ T12] Tainted: [L]=SOFTLOCKUP [ 1207.465629][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1207.465640][ T12] Workqueue: krds_cp_wq#3/0 rds_recv_worker [ 1207.465719][ T12] Call Trace: [ 1207.465731][ T12] [ 1207.465738][ T12] dump_stack_lvl+0xe8/0x150 [ 1207.465766][ T12] print_deadlock_bug+0x279/0x290 [ 1207.465787][ T12] __lock_acquire+0x253f/0x2cf0 [ 1207.465804][ T12] ? rcu_is_watching+0x15/0xb0 [ 1207.465824][ T12] ? __pv_queued_spin_lock_slowpath+0x2e3/0xbc0 [ 1207.465843][ T12] ? check_path+0x21/0x40 [ 1207.465862][ T12] ? inet6_getname+0x15d/0x650 [ 1207.465881][ T12] lock_acquire+0x106/0x330 [ 1207.465896][ T12] ? inet6_getname+0x15d/0x650 [ 1207.465914][ T12] ? check_noncircular+0xda/0x150 [ 1207.465931][ T12] ? __bfs+0x153/0x290 [ 1207.465946][ T12] ? __pfx_usage_match+0x10/0x10 [ 1207.465963][ T12] lock_sock_nested+0x48/0x100 [ 1207.465983][ T12] ? inet6_getname+0x15d/0x650 [ 1207.466010][ T12] inet6_getname+0x15d/0x650 [ 1207.466031][ T12] rds_tcp_conn_slots_available+0x288/0x470 [ 1207.466052][ T12] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 1207.466076][ T12] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1207.466092][ T12] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 1207.466112][ T12] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 1207.466126][ T12] ? rds_recv_worker+0xc6/0x310 [ 1207.466141][ T12] ? process_scheduled_works+0xaec/0x17a0 [ 1207.466156][ T12] ? worker_thread+0xa50/0xfc0 [ 1207.466175][ T12] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 1207.466192][ T12] rds_recv_incoming+0x9f6/0x12d0 [ 1207.466208][ T12] ? __pfx_rds_recv_incoming+0x10/0x10 [ 1207.466221][ T12] ? skb_copy_bits+0x7e5/0x8f0 [ 1207.466239][ T12] rds_tcp_data_recv+0x7f1/0xa40 [ 1207.466263][ T12] __tcp_read_sock+0x196/0x970 [ 1207.466284][ T12] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 1207.466305][ T12] rds_tcp_data_ready+0x369/0x950 [ 1207.466324][ T12] ? __pfx_sock_def_readable+0x10/0x10 [ 1207.466344][ T12] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 1207.466368][ T12] tcp_data_queue+0x1e2e/0x5e50 [ 1207.466391][ T12] ? tcp_urg+0x106/0x410 [ 1207.466407][ T12] ? __pfx_tcp_data_queue+0x10/0x10 [ 1207.466423][ T12] ? __pfx_tcp_urg+0x10/0x10 [ 1207.466439][ T12] ? ktime_get+0x45/0x200 [ 1207.466458][ T12] ? seqcount_lockdep_reader_access+0xd0/0x100 [ 1207.466477][ T12] ? tcp_ecn_received_counters+0x2b7/0x7f0 [ 1207.466496][ T12] tcp_rcv_established+0x1270/0x2670 [ 1207.466517][ T12] ? __pfx_tcp_rcv_established+0x10/0x10 [ 1207.466533][ T12] ? ip6_dst_check+0x90/0x7e0 [ 1207.466555][ T12] ? ip6_dst_check+0xe2/0x7e0 [ 1207.466595][ T12] ? ip6_dst_check+0x5e3/0x7e0 [ 1207.466609][ T12] ? __pfx_ip6_dst_check+0x10/0x10 [ 1207.466622][ T12] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 1207.466644][ T12] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 1207.466661][ T12] __release_sock+0x1b8/0x3a0 [ 1207.466680][ T12] release_sock+0x5f/0x1f0 [ 1207.466699][ T12] rds_tcp_recv_path+0x2ee/0x340 [ 1207.466718][ T12] ? __pfx_rds_tcp_recv_path+0x10/0x10 [ 1207.466738][ T12] ? process_scheduled_works+0xa0f/0x17a0 [ 1207.466754][ T12] ? process_scheduled_works+0xa0f/0x17a0 [ 1207.466771][ T12] rds_recv_worker+0xc6/0x310 [ 1207.466787][ T12] ? process_scheduled_works+0xa0f/0x17a0 [ 1207.466802][ T12] process_scheduled_works+0xaec/0x17a0 [ 1207.466826][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 1207.466843][ T12] ? assign_work+0x3d5/0x5e0 [ 1207.466859][ T12] worker_thread+0xa50/0xfc0 [ 1207.466881][ T12] kthread+0x388/0x470 [ 1207.466901][ T12] ? __pfx_worker_thread+0x10/0x10 [ 1207.466916][ T12] ? __pfx_kthread+0x10/0x10 [ 1207.466935][ T12] ret_from_fork+0x51e/0xb90 [ 1207.466952][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 1207.466967][ T12] ? __switch_to+0xc7d/0x1400 [ 1207.466991][ T12] ? __pfx_kthread+0x10/0x10 [ 1207.467010][ T12] ret_from_fork_asm+0x1a/0x30 [ 1207.467034][ T12] [ 1207.851572][ T12] BUG: sleeping function called from invalid context at net/core/sock.c:3782 [ 1207.860415][ T12] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 12, name: kworker/u8:0 [ 1207.869499][ T12] preempt_count: 201, expected: 0 [ 1207.874564][ T12] RCU nest depth: 0, expected: 0 [ 1207.879701][ T12] INFO: lockdep is turned off. [ 1207.884478][ T12] Preemption disabled at: [ 1207.884486][ T12] [<0000000000000000>] 0x0 [ 1207.893271][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1207.893290][ T12] Tainted: [L]=SOFTLOCKUP [ 1207.893294][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1207.893303][ T12] Workqueue: krds_cp_wq#3/0 rds_recv_worker [ 1207.893323][ T12] Call Trace: [ 1207.893328][ T12] [ 1207.893333][ T12] dump_stack_lvl+0xe8/0x150 [ 1207.893349][ T12] __might_resched+0x378/0x4d0 [ 1207.893364][ T12] lock_sock_nested+0x5d/0x100 [ 1207.893380][ T12] inet6_getname+0x15d/0x650 [ 1207.893404][ T12] rds_tcp_conn_slots_available+0x288/0x470 [ 1207.893420][ T12] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 1207.893438][ T12] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1207.893450][ T12] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 1207.893465][ T12] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 1207.893475][ T12] ? rds_recv_worker+0xc6/0x310 [ 1207.893486][ T12] ? process_scheduled_works+0xaec/0x17a0 [ 1207.893499][ T12] ? worker_thread+0xa50/0xfc0 [ 1207.893513][ T12] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 1207.893525][ T12] rds_recv_incoming+0x9f6/0x12d0 [ 1207.893537][ T12] ? __pfx_rds_recv_incoming+0x10/0x10 [ 1207.893553][ T12] ? skb_copy_bits+0x7e5/0x8f0 [ 1207.893566][ T12] rds_tcp_data_recv+0x7f1/0xa40 [ 1207.893584][ T12] __tcp_read_sock+0x196/0x970 [ 1207.893600][ T12] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 1207.893615][ T12] rds_tcp_data_ready+0x369/0x950 [ 1207.893630][ T12] ? __pfx_sock_def_readable+0x10/0x10 [ 1207.893645][ T12] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 1207.893662][ T12] tcp_data_queue+0x1e2e/0x5e50 [ 1207.893679][ T12] ? tcp_urg+0x106/0x410 [ 1207.893691][ T12] ? __pfx_tcp_data_queue+0x10/0x10 [ 1207.893704][ T12] ? __pfx_tcp_urg+0x10/0x10 [ 1207.893716][ T12] ? ktime_get+0x45/0x200 [ 1207.893730][ T12] ? seqcount_lockdep_reader_access+0xd0/0x100 [ 1207.893745][ T12] ? tcp_ecn_received_counters+0x2b7/0x7f0 [ 1207.893760][ T12] tcp_rcv_established+0x1270/0x2670 [ 1207.893776][ T12] ? __pfx_tcp_rcv_established+0x10/0x10 [ 1207.893788][ T12] ? ip6_dst_check+0x90/0x7e0 [ 1207.893799][ T12] ? ip6_dst_check+0xe2/0x7e0 [ 1207.893808][ T12] ? ip6_dst_check+0x5e3/0x7e0 [ 1207.893817][ T12] ? __pfx_ip6_dst_check+0x10/0x10 [ 1207.893828][ T12] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 1207.893844][ T12] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 1207.893857][ T12] __release_sock+0x1b8/0x3a0 [ 1207.893872][ T12] release_sock+0x5f/0x1f0 [ 1207.893882][ T12] rds_tcp_recv_path+0x2ee/0x340 [ 1207.893898][ T12] ? __pfx_rds_tcp_recv_path+0x10/0x10 [ 1207.893913][ T12] ? process_scheduled_works+0xa0f/0x17a0 [ 1207.893925][ T12] ? process_scheduled_works+0xa0f/0x17a0 [ 1207.893938][ T12] rds_recv_worker+0xc6/0x310 [ 1207.893950][ T12] ? process_scheduled_works+0xa0f/0x17a0 [ 1207.893961][ T12] process_scheduled_works+0xaec/0x17a0 [ 1207.893978][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 1207.893991][ T12] ? assign_work+0x3d5/0x5e0 [ 1207.894002][ T12] worker_thread+0xa50/0xfc0 [ 1207.894019][ T12] kthread+0x388/0x470 [ 1207.894034][ T12] ? __pfx_worker_thread+0x10/0x10 [ 1207.894045][ T12] ? __pfx_kthread+0x10/0x10 [ 1207.894059][ T12] ret_from_fork+0x51e/0xb90 [ 1207.894072][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 1207.894084][ T12] ? __switch_to+0xc7d/0x1400 [ 1207.894100][ T12] ? __pfx_kthread+0x10/0x10 [ 1207.894115][ T12] ret_from_fork_asm+0x1a/0x30 [ 1207.894132][ T12] [ 1207.894139][ T12] BUG: scheduling while atomic: kworker/u8:0/12/0x00000202 [ 1208.234859][ T12] INFO: lockdep is turned off. [ 1208.239691][ T12] Modules linked in: [ 1208.243612][ T12] Preemption disabled at: [ 1208.243626][ T12] [<0000000000000000>] 0x0 [ 1208.252434][ T12] Kernel panic - not syncing: scheduling while atomic: panic_on_warn set ... [ 1208.261212][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G W L syzkaller #0 PREEMPT(full) [ 1208.272103][ T12] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1208.277476][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1208.287544][ T12] Workqueue: krds_cp_wq#3/0 rds_recv_worker [ 1208.293475][ T12] Call Trace: [ 1208.296750][ T12] [ 1208.299686][ T12] vpanic+0x56c/0xa60 [ 1208.303668][ T12] ? __pfx_vpanic+0x10/0x10 [ 1208.308350][ T12] ? rcu_is_watching+0x15/0xb0 [ 1208.313144][ T12] panic+0xc5/0xd0 [ 1208.316886][ T12] ? __pfx_panic+0x10/0x10 [ 1208.321469][ T12] ? __pfx__printk+0x10/0x10 [ 1208.326064][ T12] ? vprintk_emit+0x4eb/0x560 [ 1208.330734][ T12] ? __pfx_vprintk_emit+0x10/0x10 [ 1208.335751][ T12] check_panic_on_warn+0x89/0xb0 [ 1208.340772][ T12] __schedule_bug+0xf6/0x150 [ 1208.345353][ T12] __schedule+0x16a0/0x52b0 [ 1208.349850][ T12] ? __wake_up_klogd+0xe6/0x120 [ 1208.354695][ T12] ? vprintk_emit+0x4eb/0x560 [ 1208.359365][ T12] ? rcu_is_watching+0x15/0xb0 [ 1208.364129][ T12] ? __pfx_vprintk_emit+0x10/0x10 [ 1208.369252][ T12] ? unwind_next_frame+0xa5/0x23c0 [ 1208.374398][ T12] ? do_raw_spin_lock+0x12b/0x2f0 [ 1208.379413][ T12] ? prepare_to_wait_exclusive+0x45/0x240 [ 1208.385147][ T12] ? __pfx___schedule+0x10/0x10 [ 1208.389988][ T12] ? schedule+0x90/0x360 [ 1208.394235][ T12] ? rcu_is_watching+0x15/0xb0 [ 1208.399078][ T12] ? rcu_is_watching+0x15/0xb0 [ 1208.403930][ T12] ? lock_release+0x4b/0x3a0 [ 1208.408605][ T12] ? schedule+0x90/0x360 [ 1208.412855][ T12] ? wq_worker_sleeping+0x63/0x250 [ 1208.418050][ T12] schedule+0x164/0x360 [ 1208.422203][ T12] __lock_sock+0x161/0x2c0 [ 1208.426628][ T12] ? __pfx___lock_sock+0x10/0x10 [ 1208.431569][ T12] ? do_raw_spin_lock+0x12b/0x2f0 [ 1208.436863][ T12] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1208.443010][ T12] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1208.448376][ T12] ? dump_stack_lvl+0x135/0x150 [ 1208.453222][ T12] ? lock_sock_nested+0x6a/0x100 [ 1208.458169][ T12] lock_sock_nested+0x9f/0x100 [ 1208.462951][ T12] inet6_getname+0x15d/0x650 [ 1208.467541][ T12] rds_tcp_conn_slots_available+0x288/0x470 [ 1208.473530][ T12] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 1208.479945][ T12] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1208.485760][ T12] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 1208.492608][ T12] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 1208.497742][ T12] ? rds_recv_worker+0xc6/0x310 [ 1208.502596][ T12] ? process_scheduled_works+0xaec/0x17a0 [ 1208.508320][ T12] ? worker_thread+0xa50/0xfc0 [ 1208.513098][ T12] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 1208.518840][ T12] rds_recv_incoming+0x9f6/0x12d0 [ 1208.523954][ T12] ? __pfx_rds_recv_incoming+0x10/0x10 [ 1208.529496][ T12] ? skb_copy_bits+0x7e5/0x8f0 [ 1208.534268][ T12] rds_tcp_data_recv+0x7f1/0xa40 [ 1208.539244][ T12] __tcp_read_sock+0x196/0x970 [ 1208.544030][ T12] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 1208.549497][ T12] rds_tcp_data_ready+0x369/0x950 [ 1208.554613][ T12] ? __pfx_sock_def_readable+0x10/0x10 [ 1208.560162][ T12] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 1208.565753][ T12] tcp_data_queue+0x1e2e/0x5e50 [ 1208.570632][ T12] ? tcp_urg+0x106/0x410 [ 1208.574884][ T12] ? __pfx_tcp_data_queue+0x10/0x10 [ 1208.580088][ T12] ? __pfx_tcp_urg+0x10/0x10 [ 1208.584678][ T12] ? ktime_get+0x45/0x200 [ 1208.589025][ T12] ? seqcount_lockdep_reader_access+0xd0/0x100 [ 1208.595185][ T12] ? tcp_ecn_received_counters+0x2b7/0x7f0 [ 1208.600992][ T12] tcp_rcv_established+0x1270/0x2670 [ 1208.606295][ T12] ? __pfx_tcp_rcv_established+0x10/0x10 [ 1208.611939][ T12] ? ip6_dst_check+0x90/0x7e0 [ 1208.616630][ T12] ? ip6_dst_check+0xe2/0x7e0 [ 1208.621405][ T12] ? ip6_dst_check+0x5e3/0x7e0 [ 1208.626164][ T12] ? __pfx_ip6_dst_check+0x10/0x10 [ 1208.631272][ T12] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 1208.635959][ T12] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 1208.641093][ T12] __release_sock+0x1b8/0x3a0 [ 1208.645789][ T12] release_sock+0x5f/0x1f0 [ 1208.650201][ T12] rds_tcp_recv_path+0x2ee/0x340 [ 1208.655159][ T12] ? __pfx_rds_tcp_recv_path+0x10/0x10 [ 1208.660644][ T12] ? process_scheduled_works+0xa0f/0x17a0 [ 1208.666375][ T12] ? process_scheduled_works+0xa0f/0x17a0 [ 1208.672177][ T12] rds_recv_worker+0xc6/0x310 [ 1208.676874][ T12] ? process_scheduled_works+0xa0f/0x17a0 [ 1208.682606][ T12] process_scheduled_works+0xaec/0x17a0 [ 1208.688186][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 1208.694163][ T12] ? assign_work+0x3d5/0x5e0 [ 1208.698850][ T12] worker_thread+0xa50/0xfc0 [ 1208.703453][ T12] kthread+0x388/0x470 [ 1208.707560][ T12] ? __pfx_worker_thread+0x10/0x10 [ 1208.712712][ T12] ? __pfx_kthread+0x10/0x10 [ 1208.717309][ T12] ret_from_fork+0x51e/0xb90 [ 1208.721894][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 1208.727001][ T12] ? __switch_to+0xc7d/0x1400 [ 1208.731757][ T12] ? __pfx_kthread+0x10/0x10 [ 1208.736376][ T12] ret_from_fork_asm+0x1a/0x30 [ 1208.741139][ T12] [ 1208.744700][ T12] Kernel Offset: disabled [ 1208.749016][ T12] Rebooting in 86400 seconds..