last executing test programs: 24m43.983539954s ago: executing program 4 (id=1091): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80000000000007c, 0x8000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r2 = io_uring_setup(0x3457, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x38}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socket$tipc(0x1e, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 24m36.820903878s ago: executing program 4 (id=1116): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003080)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0x5, 0x4, 0x2, 0x4, 0x5, 0x2234, 0x83, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x800004, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0x1, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x3, 0x5b1f, 0x7b0, 0x7, 0x100, 0x2, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x11ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffef9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x3, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x7, 0x80000000, 0x7f, 0x7, 0x9, 0xff, 0x24, 0x5, 0x7, 0x6, 0x10007a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x10009, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10003, 0x8, 0x7, 0x11, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x9, 0xfffffffd, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0x9, 0x18, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0xf7800000, 0xac, 0x8, 0x3, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0xa, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xb, 0x399d, 0x8, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x0, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0x4, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xfffeffff, 0x2, 0xffff, 0xa6, 0x3, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x0, 0x2, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94b, 0x9, 0x8, 0x6, 0x100, 0x2, 0xffff, 0x4, 0x2, 0x3ff, 0x2, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ffb, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0xffffff37, 0x3, 0x9, 0xc, 0xff, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x40, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x9, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x1, 0x8, 0x50, 0xf, 0xf, 0xe, 0x6, 0x0, 0x81, 0xfff80000, 0x0, 0x1, 0x6, 0x3, 0x7ef8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x0, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0x4000fff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0xc000, 0xffffff97, 0x2, 0x40, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0xfff, 0xe, 0x3, 0x9, 0xa, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x20000000, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0xb}, {0x6, 0x2, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r5, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 24m36.587378628s ago: executing program 4 (id=1117): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xfffffffb}, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0xa, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix={0x0, 0x0, 0x34325852, 0x2, 0x5, 0xfffffffc, 0x3}}) sendmsg$nl_xfrm(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, 0x0, 0x0) add_key(0x0, &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 24m35.116373695s ago: executing program 4 (id=1121): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8003, 0x0, 0x9, 0x8000, 0x3, 0x4, 0xfffbffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$getownex(r0, 0x10, 0x0) ptrace$cont(0x1f, 0x0, 0x100, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) unshare(0x2a060c00) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') 24m33.416081539s ago: executing program 4 (id=1127): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x20000081) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(r1, &(0x7f0000000180), 0x0, 0x80000000, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x100, 0x6}, 0x0) socket$inet(0x2, 0x3, 0x33) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x800) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents64(r3, &(0x7f00000004c0)=""/186, 0xffd0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2) 24m32.266497256s ago: executing program 4 (id=1130): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) close(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 24m32.039798531s ago: executing program 32 (id=1130): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) close(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 15.380713181s ago: executing program 3 (id=4552): r0 = fsopen(&(0x7f0000000580)='overlay\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000200)={0xd8a, 0x20000800, 0x2000, 0x0, 0x3, 0x1, 0x1, 0x1}, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0x42, 0x4, 0x348, 0xffffffff, 0x1b8, 0x0, 0x1b8, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}, @common=@unspec=@connmark={{0x30}, {0x5}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xb8, 0xf8, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0xf, 0x2}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000440)=ANY=[@ANYBLOB="400000000000000002004e22ac14142c00"/99], 0x110) r6 = openat$fb0(0xffffffffffffff9c, 0x0, 0x22902, 0x0) ioctl$FBIOBLANK(r6, 0x4611, 0x3) ioctl$FBIO_WAITFORVSYNC(r6, 0x40044620, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0x0, 0x0, 0xff, "810000cc2b000000000000fa25ffff00ffffff"}) r8 = syz_open_pts(r7, 0x141601) fcntl$setstatus(r8, 0x4, 0x102800) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000100)=0x19) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 15.077694797s ago: executing program 0 (id=4554): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)='W', 0x1}], 0x2, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000003, 0xfa10, 0xffffffff}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1e8}, 0x1, 0x0, 0x0, 0x40040814}, 0x0) syz_emit_ethernet(0x6e, 0x0, 0x0) r3 = syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r3, &(0x7f0000001100), 0x0, &(0x7f0000001140)) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6) ftruncate(r4, 0x2000000) syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') socket(0x28, 0x800, 0xfffeffff) syz_io_uring_setup(0x1630, &(0x7f0000000500)={0x0, 0x6040, 0x10100, 0x0, 0x83}, &(0x7f00000000c0), &(0x7f0000000400)) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e0000"], 0xfe33) 13.897317722s ago: executing program 5 (id=4556): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r2, &(0x7f00000002c0)={'#! ', './file0', [], 0xa, "1f410e2852ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bd030000005a3c7c04055f1f70e4064d46b2bb9e5100d446bb6afb2c0fc07b58f4a9c1006a0b6c05639e23ec12979ff9b48ca61e6dec58682449c75d86eb4337b8d343ed9c18927289d3d788fa281a5742690ff5a505cfff34fc1503afbfd2d44b50e4ca119f67b2890064"}, 0x96) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) close(r2) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0, 0x800, r3}, 0x38) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r4, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}, 0x0) 13.345512541s ago: executing program 0 (id=4557): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x1, 0xffffffff, @loopback={0xffffffffffff0000}, 0x92}, 0x1c) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x2afc0, 0x1c1, 0x6}, 0x18) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000640)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x9, 0x3a, '\xe2\xbf\xd9\xafk\xd3~a3\xd0\x94\r]\xad>\xa3\x15^\xa0\x9e\xd0\x0e\x80\x1e\x84\x1a\xa0\xd9\xcat\x99\x1bir\xcf\xfd2)S\vK\x9a,\x9c\x9d=dfr', 0x3a, '\xe6T\xee^', 0x3a, './file0', 0x3a, [0x46, 0x43, 0x50, 0x50, 0x4f, 0x4f, 0x43, 0x50, 0x43, 0x46]}, 0x66) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x1080, 0x0) syz_usb_connect$uac2(0x3, 0xcd, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000408c0d1400400001020301090286000301003003080b00020109200609040000000101200009240102000626000311240803010000000000000200010000000c240304020301"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) syz_usb_connect(0x0, 0x3b, &(0x7f0000000200)=ANY=[@ANYBLOB="12011400c7f36d088d0e0020c621000000010902290001000000000904000000db02ef00052406"], 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) sendmmsg$inet(r0, &(0x7f00000007c0)=[{{&(0x7f00000000c0)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="50c8d727e3c867a2084a301dc456edc75b3c653e6d47eb87ca54d8e78316a40b3cd0a661bbfc27f1f9e32588cec51b4fa41032393cb21dc47ad1673fd9b5b4e53bc1fc8a0a6d0c2c0e9c0a23872cb3c1", 0x50}, {&(0x7f0000000240)="625013d61bfc48cb7bddb606240bf9a064ebd8bc60480ef1858e4f118a7e9eef20716c45ebd3d0808bdd594c601e7a49d444992ecb0a85e6845a2161b4dc6f01e547f935174d6719fac7c0128faf1a2e5f200ec865f16ac66537cbe23117eb2e230d54481c6d31f626dd4c333724bb0caf1319f622f9d8075b936696f1fa3074c3de12c3f2f36bcecc2de0549d1841b165a0d27cb5172763a55d64fa1d7629784673a76eee3b80e51ff4", 0xaa}, {&(0x7f0000000340)="3513c5d8c0a50031b3df1f4cbe0a36a90d3d2ae634ea93ec4e1a0d396d280680e90d40356e4484236721dd1458793ff24fa729f8b47aa35ed85c9e59d1505adc8a1ca58871a7", 0x46}], 0x3, &(0x7f00000004c0)}}, {{&(0x7f0000000540)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000580)="603a63a800", 0x5}, {&(0x7f0000000800)="29feccfc4569378f2d93c77ddd9f4afa8b7b934ea77b910041796fa63bd671cf954c73f44cec9842909420a86586844a353018226d3dfd5dfd82c3f4c29e05eea4ca7d5c4905184459339f5d7009f4bb61106d026a250e76b1212b4070185001e1b6deee55847d544cbe205b4109c9a7875eeb04dce74df1f07c487d37126c67ab52746e7101a9b6d09c92bfd50b390c37f9df476c8769a9aad19599457ab28bdba1a3432a9ca8d1ff1f2adcebede3c8dec5980c7094ee5fdb3fc3dfd9d13e312c755142101c08a8bbdc552621ff89f3ac1f73f2f14a9f014d2d8d926a6b4b6db0e5681b30d21334366fe035dfd1994c6c", 0xf1}, {&(0x7f00000006c0)="0d150b913d1d2fbfb3a54526be5e9a3786159c38c9db0bcae7d98c9cd765bfc8864fd644bb3c30d2a064ccfdbbfc773eb0f88e671c3ec23a22188d77f4a045145837c454a2d8a3112ef4d696d4", 0x4d}, {&(0x7f0000000740)="42dea94348d05343", 0x8}], 0x4}}], 0x2, 0x20000800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xa7, 0x22, &(0x7f00000003c0)="e3ef7f670000ec6783b4241544940000000000000000000000000033a42c9550f50ac311e0f0544b00aab05450dc23d925bde6a1b56f92241432fa00228f11b0cc67e2e658d909c57270d30b39d3050b381d133fa9f1a44b2bc30ed6239eb52ee012b4c3e1932780b192d2d61359ae0fe9d6312a6faff570879d2f1b517210627c69e56ed195980a9a880700d5f059a6b7bb7b6a9787136a408914de373597695c519462765a4a", 0x0, 0xa0000000, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x18, 0x25, 0x301, 0x270bd24, 0x25dfdbff, {0x1}, [@nested={0x4, 0xae}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/114, 0xc}, {&(0x7f0000001700)=""/81, 0x75}, {&(0x7f0000000580)=""/132}], 0x3}, 0x1160) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r4, 0x100}, 0x8) syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/profiling', 0x2, 0x184) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x7, @empty, 0xa094}, {0xa, 0x4ea5, 0x0, @mcast1, 0x8}, 0xffffffffffffffff, 0x8001}}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) 12.3505918s ago: executing program 3 (id=4559): socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'fpu(pcbc(aes-aesni))\x00'}, 0x58) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x100}) 11.47176816s ago: executing program 3 (id=4561): r0 = socket(0x80000000000000a, 0x2, 0x0) bind$unix(r0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0x55b4e85f}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140), 0x20080, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r5, 0x40046103, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000000000002000002e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000027dabfc54c2c0e1f532d95a1a200000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000200000002004e0300"/200], 0x18c) unlinkat(0xffffffffffffffff, 0x0, 0x0) unshare(0x1e028180) semget$private(0x0, 0x4000, 0x0) write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000001c0)={0x0, 0x9}, &(0x7f0000000200)=0x8) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@l2tp, &(0x7f00000000c0)=0x80) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x2f, 0xd, 0x80, 0x3, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, 0x8, 0x7, 0x1, 0x7}}) 10.07772147s ago: executing program 0 (id=4563): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) bind$xdp(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = memfd_secret(0x0) syz_io_uring_setup(0x84007fe3, &(0x7f0000000180)={0x0, 0xc32e, 0x1000, 0x5, 0xc7, 0x0, r2}, &(0x7f0000000200), &(0x7f0000000340)) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SG_SET_DEBUG(r4, 0x227e, &(0x7f00000000c0)) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000003c0)='syz1\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x0, 0x9, 0x5, 0x0, 0x7043}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@mcast2}, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x44004) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x24068045}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581"], 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_open_dev$vim2m(&(0x7f0000000380), 0x7f, 0x2) close_range(r6, 0xffffffffffffffff, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) 10.077342959s ago: executing program 2 (id=4564): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r3, 0xc0585609, &(0x7f0000000040)={0x58, 0x9, 0x4, 0x2, 0x2, {}, {0x5, 0x0, 0x7, 0x2, 0xf7, 0x6, "4e5ed31d"}, 0xfffffff9, 0x4, {}, 0x7}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$usbfs(0x0, 0x76, 0x101301) openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r6, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r8, 0x40045612, &(0x7f0000000080)=0x2) ioctl$USBDEVFS_CLEAR_HALT(r4, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 9.719928331s ago: executing program 5 (id=4565): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x59) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000080)={0x10000, 0x80000000}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) preadv(r2, &(0x7f0000001200)=[{&(0x7f0000000dc0)=""/72, 0x48}, {0x0}], 0x2, 0x40, 0x3) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r4 = dup(r3) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r6, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008", 0x8a) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) getsockopt$inet_int(r5, 0x0, 0x13, 0x0, &(0x7f0000000c00)=0xfffffffffffffe87) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) 9.216739185s ago: executing program 1 (id=4566): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x20007, 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="00b107471e52"], 0xfdef) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0xc04c561a, &(0x7f00000000c0)) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b70500060000000061102c000000bb7ae8203d318351e419ac5fad57293900004000000000000000950000000000000095fb01604c65a0973e95dc7f9ccea5da4f6415581d"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r2, 0x80047456, &(0x7f0000000040)={0x3, 0xb, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0x2000775) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000010400"/19, @ANYRES32=0x0, @ANYBLOB="5d5b0000000000001c001a8018000a8001000700000000000000000000000000000000001400350077673100000000000000000000000000ed0c595c27f95a1b796e2bd39bb6f2056dd4c3564c2bb613e67cea150dc0f18284037150a3f007798d7e46e60cdae33425aa68b88c27443883688a97d06bd2df0e8a329335600ec1ff0997730b58db259254e67cbb1fdfc1cb9304"], 0x50}}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x4000000004882, 0x0) mremap(&(0x7f0000662000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f000016b000/0x2000)=nil) 8.589532963s ago: executing program 5 (id=4567): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) socket$xdp(0x2c, 0x3, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x48000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f00000001c0)={@remote, r4}, 0x14) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x1, 0x2, 0xfffffffe, 0x3, 0x22}, 0x7}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r7 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsopen(&(0x7f0000001280)='ntfs3\x00', 0x0) close(r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r9, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close_range(r8, r9, 0x0) openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/pm_print_times', 0x325840, 0x115) 7.541337016s ago: executing program 2 (id=4568): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$XFS_IOC_FSGROWFSRT(r0, 0x400c5870, &(0x7f0000000180)={0xb7, 0x3}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) sendmsg$rds(r2, &(0x7f0000001380)={&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_map={0x2c, 0x10c, 0x3, {{0x0}, 0x0, 0x10}}, @cswp={0x58, 0x114, 0x7, {{0x7ff80000, 0x101}, 0x0, 0x0, 0x89, 0x4, 0xeb, 0x10000000008a, 0x22, 0x77}}], 0x84}, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f0000000240)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r5 = syz_io_uring_setup(0x42d9, 0x0, &(0x7f0000000080), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000800)={&(0x7f0000001000)={[{0x0, 0x0, 0xfffe}]}, 0x1, 0xffff}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000100)={0x0, 0x0, 0x3}, 0x1) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) 6.704060987s ago: executing program 0 (id=4569): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000440)=""/200, 0x200000, 0x1000, 0x0, 0x3}, 0x20) r3 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b24d, 0x11a20}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}, @IFLA_LINKMODE={0x5, 0x11, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0xc1}, 0x0) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}]}) r7 = msgget$private(0x0, 0x4a0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@ipv4_newnexthop={0x24, 0x68, 0x109, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x10}, @NHA_FDB={0x4}]}, 0x24}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c0002800600010000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0xb, "bdab7e9d"}, @main=@item_4={0x3, 0x0, 0xa, "582a6eb3"}]}}, 0x0}, 0x0) msgctl$IPC_STAT(r7, 0x2, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0x4, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0xd0b, 0xfffffffffffffff9, 0x2000000000000003, 0x5], 0x80a0000, 0x4284}) 6.253420301s ago: executing program 5 (id=4570): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)="9c30fb4d", 0x4}], 0x1) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x98}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x20004, 0xffffffffffffffff, 0x80000}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000001c0)={0xffffffffffffffff, 0xa1, &(0x7f0000000200)}, 0x14) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0005}]}) timer_create(0x2, 0x0, &(0x7f0000000480)) 6.252515369s ago: executing program 1 (id=4580): r0 = socket(0x10, 0x80002, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r8 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r8) read$FUSE(r2, &(0x7f0000000640)={0x2020}, 0x2020) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000a40)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmmsg$alg(r0, 0x0, 0x0, 0x0) 5.246992019s ago: executing program 3 (id=4571): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) bind$xdp(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x29, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004700)) sendmsg$TEAM_CMD_OPTIONS_SET(r4, 0x0, 0x44094) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000080)={@remote, r5}, 0x14) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x7}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket(0x840000000002, 0x3, 0xff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x8c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x110}}, 0x0) 5.223208419s ago: executing program 2 (id=4582): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000086e051c0140000102030109022d000101000904002501"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x28a}]}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x28, 0x6, 0xff, 0xfffff020}, {0x6, 0x0, 0x0, 0x8000000}]}, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000300)={0x30000, 0x0, {[0x5, 0x4, 0x9, 0x4, 0x2, 0x8001, 0x7, 0x3]}}) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) r5 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r6, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r6, 0x200000000114, 0x2715, 0x0, &(0x7f0000000000)) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r5, 0x40045731, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ff199610b90661408801010203010902120001000000000904"], 0x0) 4.375349756s ago: executing program 5 (id=4572): socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'fpu(pcbc(aes-aesni))\x00'}, 0x58) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x100}) 4.017001081s ago: executing program 1 (id=4573): socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'fpu(pcbc(aes-aesni))\x00'}, 0x58) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x100}) 3.89787029s ago: executing program 0 (id=4574): socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'fpu(pcbc(aes-aesni))\x00'}, 0x58) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x100}) 3.25644643s ago: executing program 3 (id=4575): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) openat(0xffffffffffffff9c, 0x0, 0x64040, 0xd0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0) socket$inet(0x2, 0x2, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000000)=0x1) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400), 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000380)={0x2020}, 0x2020) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0) mkdirat$cgroup(r3, &(0x7f0000000100)='syz0\x00', 0x1ff) sendfile(r4, r4, 0x0, 0x9) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)={0x2040, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x2014, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1002, 0x4, "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"/4094}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7fff}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x2040}}, 0x0) 3.088602452s ago: executing program 1 (id=4576): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r1, 0x802c550a, &(0x7f0000000500)=@urb_type_control={0x2, {0x0, 0x1}, 0x6, 0x80, &(0x7f0000000000)={0x1, 0x14, 0xf801, 0x200}, 0x8, 0x8001, 0x0, 0x0, 0x1676ab34, 0xdffffff9, 0x0}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000500)={0x0, 0xfffffff7, 0x0, 0x3}, 0x10) io_setup(0x9, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000340), 0x2000, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r5, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r5, 0x5008, 0x0) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) io_submit(r3, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f00000000000029ffffff000000", 0x20000238}]) 2.447123734s ago: executing program 2 (id=4577): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) set_mempolicy(0x3, &(0x7f0000000080)=0x2, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x2710}, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) unshare(0x62040200) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000600000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {0xa, 0x0, 0x1a141c8808b564b6}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f0000000340)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) set_mempolicy(0x0, 0x0, 0x7) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0xfffffffd, 0x10004}}) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x30, 0x0, 0x1, 0x0, 0x4000000, {{}, {}, {0x14, 0x17, {0x0, 0x401, @l2={'ib', 0x3a, 'wg1\x00'}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24008044}, 0x0) 1.977985514s ago: executing program 2 (id=4578): r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) get_robust_list(0x0, &(0x7f0000000300)=0x0, &(0x7f0000000340)) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x1a, {"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", 0x1000}}, 0x1006) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000080)=@buf) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_setup(0x222, &(0x7f0000001040)=0x0) io_submit(r4, 0x3, &(0x7f0000000780)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x5, r3, &(0x7f0000000a00)="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", 0x1c0, 0x200}, 0x0, 0x0]) capset(0x0, &(0x7f0000001080)={0xfffffffc, 0x1, 0x4007, 0x81, 0x12}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0e, &(0x7f0000000000)) pselect6(0x0, 0x0, &(0x7f0000000200)={0x5, 0x0, 0x49a, 0x6, 0x8, 0x45a, 0x400000ffffffff, 0x10000}, &(0x7f0000000240)={0x0, 0x1000, 0x744, 0x7, 0x9, 0x7ff, 0x0, 0xa}, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={[0xe78]}, 0x8}) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000400)='jq', 0x2}], 0x2}, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_timeval(r6, 0x1, 0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x3, &(0x7f0000000200)=0x80000000, 0x4) 1.936084667s ago: executing program 1 (id=4579): socket$nl_netfilter(0x10, 0x3, 0xc) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="390000001300034700bb5be1c3fbfeff06000000010000004500000025000000190004", 0x23}], 0x1) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e23, @multicast1}], 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) preadv2(r0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000280)=""/216, 0xd8}], 0x2, 0xda6, 0x58ca, 0x2) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}]}, &(0x7f00000003c0)=0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioprio_set$pid(0x1, 0x0, 0x4000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2200, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x217e783d, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000240)="800000800000210ee7decd7a000000008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 1.332160968s ago: executing program 3 (id=4581): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'fpu(pcbc(aes-aesni))\x00'}, 0x58) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x100}) 696.489672ms ago: executing program 0 (id=4583): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000004000000000000000000850000000e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @local}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @empty}]}}]}, 0x50}}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r0, 0x4) syz_emit_ethernet(0x86, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbb0000000000e9070045000078000000000011907800000000e000000100004e2000649078027188e05a00000000000000eea2ce15f073cfc7b867a8f1eae374992b05d96de4fee8723648ec884824c0fadad132180b5c87e3c4ce5aace7bd878fbfb382e7c4f35588608b6b77d41797815c1eec4fe3340aa2a2dfcc3569d1153d"], 0x0) memfd_secret(0x80000) 696.213052ms ago: executing program 1 (id=4584): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80000000000007c, 0x8000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = io_uring_setup(0x3457, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x38}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x6, 0x40}, {0xffffffff, 0x10000, 0xc, 0xeb, 0x2, 0x8, 0xff, 0x0, 0x7, 0xff}, {0xeeee0000, 0x8000000, 0xc, 0x0, 0x7, 0xc4, 0x0, 0x0, 0x45, 0x3, 0x0, 0xfc}, {0x1, 0x1, 0x9, 0x4, 0x1, 0x0, 0x9, 0x0, 0x3, 0x0, 0xc2}, {0x6000, 0xffff1000, 0x3, 0xfd, 0x0, 0x4, 0x0, 0x6, 0x0, 0x3c, 0x0, 0x2}, {0xffff1000, 0x0, 0x0, 0x78, 0x1, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x15}, {0x0, 0xeeee8000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0xe, 0x0, 0x1}, {0x0, 0x6000, 0xc, 0x0, 0xd8, 0x7, 0x8, 0x40, 0x26, 0x0, 0x3, 0x2}, {0x80a0000, 0x3}, {0xdddd1000, 0xfffd}, 0xfdf8fffb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0xfec00000, [0x80000001, 0x0, 0x1, 0xfffffffffffffffe]}) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f0000000040)={0xe000, 0x10b000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 695.97886ms ago: executing program 5 (id=4585): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000000), 0x44483, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x24) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r0}, 0x8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8953, &(0x7f0000000180)={{0x2, 0x2, @loopback}, {}, 0x10, {0x2, 0x0, @broadcast}}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000001c0)={0x4, 0x2, 0x3, 0x0, 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x141301) ioctl$USBDEVFS_CONTROL(r5, 0xc0105500, &(0x7f0000000040)={0x80, 0x6, 0x301, 0x4, 0x0, 0x0, 0x0}) r6 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r6, 0x0, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r11, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4c840}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc, 0x0, 0x4}, 0x4000810) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c40)=@delchain={0x24, 0x66, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r11, {0x1, 0xfff3}, {0xfff3, 0xffff}, {0x0, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000400)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0xa, "206e66dc"}, @main=@item_4={0x3, 0x0, 0xa, "25dcc6d9"}, @global=@item_4]}}, 0x0}, 0x0) r12 = getpid() process_vm_readv(r12, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {0x0, 0x36}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r1], 0x4c}, 0x1, 0x0, 0x0, 0x8415}, 0x8800) 0s ago: executing program 2 (id=4586): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}]}, 0x2c}}, 0x80) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) r5 = add_key$keyring(&(0x7f00000005c0), &(0x7f0000001100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e308002", 0x1001, r5) r6 = socket(0x10, 0x2, 0x0) write(r6, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r6, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000ffff27bd7000f7dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fda45d0521860000140012800c0001006d616376746170000400028008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @random="7c44a8d5ef31", @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x1, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@ra={0x94, 0x4}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) unshare(0x62040200) syz_usb_connect(0x2, 0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000084a48e08d112f74247aa000000010902"], 0x0) r10 = socket$inet(0xa, 0x801, 0x84) getsockopt$IPT_SO_GET_INFO(r10, 0x0, 0x40, &(0x7f00000000c0)={'filter\x00', 0x0, [0x8, 0x0, 0x7, 0x4, 0x8b32]}, &(0x7f0000000200)=0x54) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x4000000}]}], {0x14, 0x10}}, 0xc0}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) kernel console output (not intermixed with test programs): k: 48 bytes leftover after parsing attributes in process `syz.0.3885'. [ 1660.399675][T17875] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1660.559707][T17875] usb 3-1: Using ep0 maxpacket: 8 [ 1660.577133][T17875] usb 3-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1660.589717][T17875] usb 3-1: config 5 has 0 interfaces, different from the descriptor's value: 1 [ 1660.631919][T17875] usb 3-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=10.e1 [ 1660.649485][T17875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1660.677709][T17875] usb 3-1: Product: syz [ 1660.687279][T17875] usb 3-1: Manufacturer: syz [ 1660.711654][T17875] usb 3-1: SerialNumber: syz [ 1660.841476][T24105] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1661.028780][T24094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3888'. [ 1661.084843][T17875] usb 3-1: USB disconnect, device number 77 [ 1661.984028][T24119] vivid-007: ================= START STATUS ================= [ 1662.017517][T24119] vivid-007: Enable Output Cropping: true grabbed [ 1662.068113][T24119] vivid-007: Enable Output Composing: true grabbed [ 1662.111122][T24119] vivid-007: Enable Output Scaler: true grabbed [ 1662.159268][T24119] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 1662.214833][T24119] vivid-007: Transmit Mode: HDMI grabbed [ 1662.274402][T24119] vivid-007: Hotplug Present: 0x00000000 [ 1662.322361][T24119] vivid-007: RxSense Present: 0x00000000 [ 1662.352263][T24119] vivid-007: EDID Present: 0x00000000 [ 1662.374177][T24119] vivid-007: ================== END STATUS ================== [ 1663.258940][T24134] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3894'. [ 1663.286028][T24134] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3894'. [ 1664.001834][T24139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3897'. [ 1664.031556][T24139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3897'. [ 1664.052395][T24139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3897'. [ 1664.078810][T24139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3897'. [ 1664.113081][T24139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3897'. [ 1664.148722][T24139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3897'. [ 1664.169579][T24139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3897'. [ 1664.179698][T17895] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1664.209252][T24139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3897'. [ 1664.329715][T17895] usb 3-1: Using ep0 maxpacket: 32 [ 1664.352417][T17895] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1664.370819][T17895] usb 3-1: config 0 has no interface number 0 [ 1664.399919][T17895] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1664.426163][T17895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1664.449651][T17895] usb 3-1: Product: syz [ 1664.463049][T17895] usb 3-1: Manufacturer: syz [ 1664.484435][T17895] usb 3-1: SerialNumber: syz [ 1664.505951][T17895] usb 3-1: config 0 descriptor?? [ 1664.531131][T17895] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1664.762163][T17895] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1664.804027][T17895] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1664.906501][T17875] usb 6-1: USB disconnect, device number 53 [ 1665.079150][T24159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1665.249597][T17873] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 1665.404326][T24162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1665.426473][T17873] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1665.482796][T17873] usb 4-1: not running at top speed; connect to a high speed hub [ 1665.518683][T17873] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 1665.524614][T24166] netlink: 'syz.5.3901': attribute type 3 has an invalid length. [ 1665.765291][T17873] usb 4-1: New USB device found, idVendor=0499, idProduct=105c, bcdDevice= 0.40 [ 1665.856571][T17873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1665.910277][T17873] usb 4-1: Product: syz [ 1665.914681][T17873] usb 4-1: Manufacturer: syz [ 1665.919991][T17873] usb 4-1: SerialNumber: syz [ 1665.936025][T24157] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1666.166154][ T29] audit: type=1326 audit(1774361587.677:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24163 comm="syz.5.3901" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42f6c code=0x7ffc0000 [ 1666.241794][T24153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1666.285796][ T29] audit: type=1326 audit(1774361587.707:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24163 comm="syz.5.3901" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42f6c code=0x7ffc0000 [ 1666.353177][ T29] audit: type=1326 audit(1774361587.717:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24163 comm="syz.5.3901" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f42f6c code=0x7ffc0000 [ 1666.428556][ T29] audit: type=1326 audit(1774361587.717:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24163 comm="syz.5.3901" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42f6c code=0x7ffc0000 [ 1666.489662][ T29] audit: type=1326 audit(1774361587.727:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24163 comm="syz.5.3901" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42f6c code=0x7ffc0000 [ 1666.853746][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1666.854464][T17875] usb 3-1: USB disconnect, device number 78 [ 1666.920872][T17875] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1666.965893][T17875] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1667.007718][T17875] quatech2 3-1:0.51: device disconnected [ 1668.069857][T17873] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1668.243111][T17873] usb 4-1: USB disconnect, device number 62 [ 1668.477740][T23996] udevd[23996]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1668.905458][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.912127][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1672.228908][T24225] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1672.616676][T24236] input: syz1 as /devices/virtual/input/input47 [ 1675.270136][T24263] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1675.277443][T24263] IPv6: NLM_F_CREATE should be set when creating new route [ 1675.285037][T24263] IPv6: NLM_F_CREATE should be set when creating new route [ 1675.292315][T24263] IPv6: NLM_F_CREATE should be set when creating new route [ 1675.589807][T24268] __nla_validate_parse: 11 callbacks suppressed [ 1675.589865][T24268] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3919'. [ 1676.461574][T24276] libceph: resolve '0..' (ret=-3): failed [ 1676.950437][ T29] audit: type=1326 audit(1774361598.467:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24279 comm="syz.3.3922" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1677.054439][ T29] audit: type=1326 audit(1774361598.497:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24279 comm="syz.3.3922" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1677.131947][ T29] audit: type=1326 audit(1774361598.497:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24279 comm="syz.3.3922" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1677.233116][ T29] audit: type=1326 audit(1774361598.497:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24279 comm="syz.3.3922" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1677.325476][ T29] audit: type=1326 audit(1774361598.497:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24279 comm="syz.3.3922" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1677.447177][ T29] audit: type=1326 audit(1774361598.497:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24279 comm="syz.3.3922" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1677.530483][T24291] ip6t_REJECT: ECHOREPLY is not supported [ 1677.577492][T24289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3922'. [ 1677.588130][ T29] audit: type=1326 audit(1774361598.497:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24279 comm="syz.3.3922" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1677.661206][T24289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3922'. [ 1677.730021][ T29] audit: type=1326 audit(1774361598.497:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24279 comm="syz.3.3922" exe="/root/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1677.845938][ T29] audit: type=1326 audit(1774361598.507:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24279 comm="syz.3.3922" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1677.912118][ T29] audit: type=1326 audit(1774361598.507:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24279 comm="syz.3.3922" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1677.940441][T17869] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1678.104576][T17869] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1678.114163][T17869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1678.159470][T17869] usb 6-1: Product: syz [ 1678.185809][T17869] usb 6-1: Manufacturer: syz [ 1678.197491][T17869] usb 6-1: SerialNumber: syz [ 1678.435521][T24302] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1681.152666][T17869] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1681.176145][T17869] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1681.240314][T17869] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1681.364715][T17869] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 1681.442965][T17869] usb 6-1: USB disconnect, device number 54 [ 1682.203593][T24336] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1682.272480][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 1682.272516][ T29] audit: type=1326 audit(1774361603.787:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24333 comm="syz.2.3932" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1682.354866][ T29] audit: type=1326 audit(1774361603.787:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24333 comm="syz.2.3932" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1682.435837][ T29] audit: type=1326 audit(1774361603.817:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24333 comm="syz.2.3932" exe="/root/syz-executor" sig=0 arch=40000003 syscall=428 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1682.526410][ T29] audit: type=1326 audit(1774361603.817:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24333 comm="syz.2.3932" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1682.612829][ T29] audit: type=1326 audit(1774361603.817:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24333 comm="syz.2.3932" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1682.695337][ T29] audit: type=1326 audit(1774361603.817:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24333 comm="syz.2.3932" exe="/root/syz-executor" sig=0 arch=40000003 syscall=429 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1682.931058][ T29] audit: type=1326 audit(1774361603.817:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24333 comm="syz.2.3932" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1683.205920][ T29] audit: type=1326 audit(1774361603.817:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24333 comm="syz.2.3932" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1683.363812][ T29] audit: type=1326 audit(1774361603.817:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24333 comm="syz.2.3932" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1683.510438][ T29] audit: type=1326 audit(1774361603.817:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24333 comm="syz.2.3932" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1685.249984][T24350] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3934'. [ 1685.269884][T24350] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3934'. [ 1685.416962][T24350] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3934'. [ 1685.440613][T24355] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3934'. [ 1685.672786][T24363] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3936'. [ 1685.682198][T24363] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1685.955691][T24361] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1686.678525][T24376] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3938'. [ 1686.742247][T24376] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3938'. [ 1686.776443][T24376] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3938'. [ 1686.826855][T24379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3939'. [ 1687.073120][T24381] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3938'. [ 1689.075763][T24394] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1690.939904][T17869] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1691.026442][T24410] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3945'. [ 1691.035913][T24410] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3945'. [ 1691.103409][T17869] usb 3-1: Using ep0 maxpacket: 8 [ 1691.122409][T17869] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 1691.188729][T17869] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1691.262356][T17869] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1691.399657][T17869] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1691.439045][T17869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1691.503927][T17869] usb 3-1: Product: syz [ 1691.508222][T17869] usb 3-1: Manufacturer: syz [ 1691.554367][T17869] usb 3-1: SerialNumber: syz [ 1691.582114][T17869] usb 3-1: config 0 descriptor?? [ 1693.714053][T17869] usb 3-1: USB disconnect, device number 79 [ 1694.078112][T24434] overlayfs: missing 'lowerdir' [ 1694.571927][T24440] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3952'. [ 1695.164790][T24454] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3954'. [ 1695.877652][T24460] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3956'. [ 1696.295876][T24466] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1696.914809][T24476] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1697.033965][T24478] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1697.459069][T24484] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1699.973397][T24495] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1702.237644][T24515] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3962'. [ 1702.344697][T24528] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3968'. [ 1702.485982][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 1702.486005][ T29] audit: type=1326 audit(1774361623.997:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24529 comm="syz.3.3969" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1702.534536][ T29] audit: type=1326 audit(1774361624.027:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24529 comm="syz.3.3969" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1702.678955][ T29] audit: type=1326 audit(1774361624.027:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24529 comm="syz.3.3969" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1702.834792][ T29] audit: type=1326 audit(1774361624.037:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24529 comm="syz.3.3969" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1702.928386][ T29] audit: type=1326 audit(1774361624.057:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24529 comm="syz.3.3969" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1703.008242][ T29] audit: type=1326 audit(1774361624.057:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24529 comm="syz.3.3969" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1703.093619][ T29] audit: type=1326 audit(1774361624.057:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24529 comm="syz.3.3969" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1703.161667][ T29] audit: type=1326 audit(1774361624.057:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24529 comm="syz.3.3969" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1703.199940][ T29] audit: type=1326 audit(1774361624.087:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24529 comm="syz.3.3969" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1703.274332][ T29] audit: type=1326 audit(1774361624.087:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24529 comm="syz.3.3969" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1703.971044][T24547] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1706.664546][T24564] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3975'. [ 1706.782039][T24567] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3976'. [ 1706.794029][T24567] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3976'. [ 1707.974018][T24580] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3978'. [ 1710.055550][T24599] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3982'. [ 1710.358408][T24611] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1711.129373][T24612] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1712.633430][T24633] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3987'. [ 1712.669767][T24633] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3987'. [ 1712.751933][T24633] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3987'. [ 1713.111807][T24636] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.3987'. [ 1713.231026][T24641] binder: 24639:24641 ioctl 4018620d 0 returned -22 [ 1713.376126][T24642] binder: 24639:24642 ioctl d000941e 0 returned -22 [ 1715.176103][T24660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3992'. [ 1715.292450][T24661] snd_virmidi snd_virmidi.0: control 1:9:195:џџ :53367 is already present [ 1716.186666][T24676] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1716.697115][T24698] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3996'. [ 1717.127815][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 1717.127841][ T29] audit: type=1326 audit(1774361638.607:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24702 comm="syz.0.3998" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3f6c code=0x7ffc0000 [ 1717.297775][ T29] audit: type=1326 audit(1774361638.667:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24702 comm="syz.0.3998" exe="/root/syz-executor" sig=0 arch=40000003 syscall=264 compat=1 ip=0xf7ff3f6c code=0x7ffc0000 [ 1717.416013][ T29] audit: type=1326 audit(1774361638.667:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24702 comm="syz.0.3998" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3f6c code=0x7ffc0000 [ 1717.552602][ T29] audit: type=1326 audit(1774361638.667:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24702 comm="syz.0.3998" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3f6c code=0x7ffc0000 [ 1717.739560][ T29] audit: type=1326 audit(1774361638.677:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24702 comm="syz.0.3998" exe="/root/syz-executor" sig=0 arch=40000003 syscall=175 compat=1 ip=0xf7ff3f6c code=0x7ffc0000 [ 1717.838313][ T29] audit: type=1326 audit(1774361638.677:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24702 comm="syz.0.3998" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3f6c code=0x7ffc0000 [ 1717.967173][ T29] audit: type=1326 audit(1774361638.677:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24702 comm="syz.0.3998" exe="/root/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7ff3f6c code=0x7ffc0000 [ 1718.081123][ T29] audit: type=1326 audit(1774361638.677:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24702 comm="syz.0.3998" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3f6c code=0x7ffc0000 [ 1718.202472][ T29] audit: type=1326 audit(1774361638.677:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24702 comm="syz.0.3998" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3f6c code=0x7ffc0000 [ 1718.275724][ T29] audit: type=1326 audit(1774361638.677:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24702 comm="syz.0.3998" exe="/root/syz-executor" sig=0 arch=40000003 syscall=238 compat=1 ip=0xf7ff3f6c code=0x7ffc0000 [ 1718.663140][T24715] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3999'. [ 1719.395217][T24730] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1721.425626][T24750] libceph: resolve '0..' (ret=-3): failed [ 1721.443346][T24751] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1721.449913][T24751] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1721.544313][T24751] vhci_hcd vhci_hcd.0: Device attached [ 1721.642770][T24751] netlink: 184 bytes leftover after parsing attributes in process `syz.3.4006'. [ 1721.670217][T24751] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1721.780292][T23643] usb 40-1: SetAddress Request (2) to port 0 [ 1721.787577][T23643] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1722.203183][T24758] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4008'. [ 1722.221677][T24752] vhci_hcd: connection reset by peer [ 1722.247939][T12394] vhci_hcd vhci_hcd.3: stop threads [ 1722.260884][T24758] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4008'. [ 1722.281041][T12394] vhci_hcd vhci_hcd.3: release socket [ 1722.300412][T12394] vhci_hcd vhci_hcd.3: disconnect device [ 1722.350332][T24758] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4008'. [ 1722.682553][T24760] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.4008'. [ 1722.993309][T24767] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4009'. [ 1724.321822][T24779] netlink: 'syz.3.4011': attribute type 21 has an invalid length. [ 1724.366535][T24779] netlink: 100 bytes leftover after parsing attributes in process `syz.3.4011'. [ 1725.288558][T24785] openvswitch: netlink: IP tunnel dst address not specified [ 1726.899697][T23643] usb 40-1: device descriptor read/8, error -110 [ 1727.320697][T23643] usb usb40-port1: attempt power cycle [ 1727.443520][T24821] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4021'. [ 1727.495644][T24821] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4021'. [ 1727.521477][T24821] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4021'. [ 1727.992794][T23643] usb usb40-port1: unable to enumerate USB device [ 1728.401928][T24831] program syz.5.4022 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1729.891482][T24821] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.4021'. [ 1730.279792][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 1730.279813][ T29] audit: type=1326 audit(1774361651.787:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24849 comm="syz.2.4027" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1730.315538][ T29] audit: type=1326 audit(1774361651.827:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24849 comm="syz.2.4027" exe="/root/syz-executor" sig=0 arch=40000003 syscall=264 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1730.383336][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.392249][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.430263][ T29] audit: type=1326 audit(1774361651.827:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24849 comm="syz.2.4027" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1730.497751][ T29] audit: type=1326 audit(1774361651.827:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24849 comm="syz.2.4027" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1730.569182][ T29] audit: type=1326 audit(1774361651.827:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24849 comm="syz.2.4027" exe="/root/syz-executor" sig=0 arch=40000003 syscall=175 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1730.628355][ T29] audit: type=1326 audit(1774361651.827:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24849 comm="syz.2.4027" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1730.677324][ T29] audit: type=1326 audit(1774361651.827:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24849 comm="syz.2.4027" exe="/root/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1730.740050][ T29] audit: type=1326 audit(1774361651.827:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24849 comm="syz.2.4027" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1730.821129][ T29] audit: type=1326 audit(1774361651.897:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24849 comm="syz.2.4027" exe="/root/syz-executor" sig=0 arch=40000003 syscall=238 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1730.961273][ T29] audit: type=1326 audit(1774361651.917:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24849 comm="syz.2.4027" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 1732.124236][T24876] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1734.881422][T24910] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1735.314517][T24924] xt_policy: output policy not valid in PREROUTING and INPUT [ 1737.147425][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 1737.147446][ T29] audit: type=1326 audit(1774361658.657:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24931 comm="syz.3.4041" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1737.227828][ T29] audit: type=1326 audit(1774361658.697:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24931 comm="syz.3.4041" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1737.302556][ T29] audit: type=1326 audit(1774361658.697:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24931 comm="syz.3.4041" exe="/root/syz-executor" sig=0 arch=40000003 syscall=264 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1737.377513][ T29] audit: type=1326 audit(1774361658.697:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24931 comm="syz.3.4041" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1737.458844][ T29] audit: type=1326 audit(1774361658.697:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24931 comm="syz.3.4041" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1737.517237][ T29] audit: type=1326 audit(1774361658.697:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24931 comm="syz.3.4041" exe="/root/syz-executor" sig=0 arch=40000003 syscall=175 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1737.600935][ T29] audit: type=1326 audit(1774361658.697:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24931 comm="syz.3.4041" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1737.745590][ T29] audit: type=1326 audit(1774361658.697:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24931 comm="syz.3.4041" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1737.889592][ T29] audit: type=1326 audit(1774361658.697:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24931 comm="syz.3.4041" exe="/root/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1738.023148][ T29] audit: type=1326 audit(1774361658.697:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24931 comm="syz.3.4041" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1738.701780][T24951] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1740.103846][T24958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1740.122190][T24958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1740.366636][T24956] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4046'. [ 1740.384304][T24956] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4046'. [ 1740.920327][T24963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4048'. [ 1741.270671][T24971] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4049'. [ 1741.533006][T17869] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1741.693460][T17869] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1741.706552][T17869] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1741.761878][T17869] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1741.809609][T17869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1741.836665][T17869] usb 6-1: Product: syz [ 1741.853493][T17869] usb 6-1: Manufacturer: syz [ 1741.858120][T17869] usb 6-1: SerialNumber: syz [ 1741.898772][T17869] usb 6-1: config 0 descriptor?? [ 1742.019694][T23643] usb 3-1: new full-speed USB device number 80 using dummy_hcd [ 1742.083692][T24979] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4052'. [ 1742.186328][T23643] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1742.283209][T23643] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1742.312967][T23643] usb 3-1: Product: syz [ 1742.329626][T23643] usb 3-1: Manufacturer: syz [ 1742.346844][T23643] usb 3-1: SerialNumber: syz [ 1742.399995][T23643] usb 3-1: config 0 descriptor?? [ 1742.668699][T24981] ipip0: left promiscuous mode [ 1742.704370][T23643] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1742.744347][T24981] vxlan0: left promiscuous mode [ 1743.385859][T24991] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.4053'. [ 1744.461425][T24362] usb 6-1: USB disconnect, device number 55 [ 1744.664033][T25002] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4057'. [ 1744.699518][T25002] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4057'. [ 1744.734433][T25002] netlink: 'syz.5.4057': attribute type 14 has an invalid length. [ 1744.768418][T25002] netlink: 'syz.5.4057': attribute type 13 has an invalid length. [ 1744.786150][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 1744.786171][ T29] audit: type=1326 audit(1774361666.297:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25001 comm="syz.5.4057" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f42f6c code=0x0 [ 1744.932804][T23643] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1744.966412][T23643] usb 3-1: USB disconnect, device number 80 [ 1746.587540][T25032] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4063'. [ 1748.505514][T25045] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1751.187999][T25067] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4069'. [ 1751.252041][T25067] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4069'. [ 1751.269089][T25067] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4069'. [ 1751.410864][T25069] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4069'. [ 1751.422813][T25075] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4071'. [ 1751.463041][T25075] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4071'. [ 1751.482387][T25075] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4071'. [ 1751.686308][T25072] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1751.761969][T25075] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.4071'. [ 1751.883452][T25085] program syz.1.4073 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1753.204220][T25097] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 1753.210873][T25097] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1753.279756][T25097] vhci_hcd vhci_hcd.0: Device attached [ 1753.289643][T25101] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(13) [ 1753.296261][T25101] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1753.365349][T25101] vhci_hcd vhci_hcd.0: Device attached [ 1753.371509][T25105] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(12) [ 1753.378144][T25105] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1753.385721][T25097] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(18) [ 1753.392356][T25097] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1753.401089][T25104] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4076'. [ 1753.452619][T25105] vhci_hcd vhci_hcd.0: Device attached [ 1753.543695][T25101] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(15) [ 1753.550378][T25101] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1753.566860][T25105] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(22) [ 1753.573531][T25105] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1753.574015][T25115] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1753.581533][T17895] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 1753.610033][T25101] vhci_hcd vhci_hcd.0: Device attached [ 1753.617349][T25105] vhci_hcd vhci_hcd.0: Device attached [ 1753.617380][T25097] vhci_hcd vhci_hcd.0: Device attached [ 1753.632730][T25101] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1753.709637][T25101] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(29) [ 1753.716392][T25101] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1753.790393][T25101] vhci_hcd vhci_hcd.0: Device attached [ 1753.956747][T25097] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1754.045749][T25116] vhci_hcd: connection closed [ 1754.046054][T12394] vhci_hcd vhci_hcd.2: stop threads [ 1754.068017][T25108] vhci_hcd: connection closed [ 1754.068339][T25102] vhci_hcd: connection closed [ 1754.068421][T25098] vhci_hcd: connection reset by peer [ 1754.073315][T25106] vhci_hcd: connection closed [ 1754.073540][T25113] vhci_hcd: connection closed [ 1754.073718][T25111] vhci_hcd: connection closed [ 1754.124838][T12394] vhci_hcd vhci_hcd.2: release socket [ 1754.136089][T25127] binder: 25118:25127 ioctl 4018620d 0 returned -22 [ 1754.151281][T12394] vhci_hcd vhci_hcd.2: disconnect device [ 1754.157574][T12394] vhci_hcd vhci_hcd.2: stop threads [ 1754.162905][T12394] vhci_hcd vhci_hcd.2: release socket [ 1754.175108][T12394] vhci_hcd vhci_hcd.2: disconnect device [ 1754.185384][T12394] vhci_hcd vhci_hcd.2: stop threads [ 1754.199619][T12394] vhci_hcd vhci_hcd.2: release socket [ 1754.208751][T12394] vhci_hcd vhci_hcd.2: disconnect device [ 1754.218874][T12394] vhci_hcd vhci_hcd.2: stop threads [ 1754.228747][T12394] vhci_hcd vhci_hcd.2: release socket [ 1754.248921][T12394] vhci_hcd vhci_hcd.2: disconnect device [ 1754.275914][T12394] vhci_hcd vhci_hcd.2: stop threads [ 1754.297204][T12394] vhci_hcd vhci_hcd.2: release socket [ 1754.316139][T12394] vhci_hcd vhci_hcd.2: disconnect device [ 1754.346879][T12394] vhci_hcd vhci_hcd.2: stop threads [ 1754.364900][T12394] vhci_hcd vhci_hcd.2: release socket [ 1754.393211][T12394] vhci_hcd vhci_hcd.2: disconnect device [ 1754.429957][T12394] vhci_hcd vhci_hcd.2: stop threads [ 1754.445688][T12394] vhci_hcd vhci_hcd.2: release socket [ 1754.468035][T12394] vhci_hcd vhci_hcd.2: disconnect device [ 1755.201122][T25141] netlink: 'syz.2.4080': attribute type 21 has an invalid length. [ 1755.209116][T25141] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4080'. [ 1756.776068][T25154] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1757.464568][T25168] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4085'. [ 1757.710753][T25171] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1758.717989][T25177] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4088'. [ 1758.729595][T17895] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1760.000554][T23643] usb usb38-port1: attempt power cycle [ 1760.566657][T23643] usb usb38-port1: unable to enumerate USB device [ 1760.924961][T25199] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1761.331403][ T29] audit: type=1326 audit(1774361682.837:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25201 comm="syz.1.4093" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2f6c code=0x7ffc0000 [ 1761.364843][ T29] audit: type=1326 audit(1774361682.847:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25201 comm="syz.1.4093" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2f6c code=0x7ffc0000 [ 1761.424355][ T29] audit: type=1326 audit(1774361682.877:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25201 comm="syz.1.4093" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fe2f6c code=0x7ffc0000 [ 1761.492150][ T29] audit: type=1326 audit(1774361682.877:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25201 comm="syz.1.4093" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2f6c code=0x7ffc0000 [ 1761.554430][ T29] audit: type=1326 audit(1774361682.877:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25201 comm="syz.1.4093" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2f6c code=0x7ffc0000 [ 1761.640044][ T29] audit: type=1326 audit(1774361682.877:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25201 comm="syz.1.4093" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7fe2f6c code=0x7ffc0000 [ 1761.730835][ T29] audit: type=1326 audit(1774361682.877:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25201 comm="syz.1.4093" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2f6c code=0x7ffc0000 [ 1761.805687][ T29] audit: type=1326 audit(1774361682.877:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25201 comm="syz.1.4093" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2f6c code=0x7ffc0000 [ 1761.867590][ T29] audit: type=1326 audit(1774361682.877:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25201 comm="syz.1.4093" exe="/root/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7fe2f6c code=0x7ffc0000 [ 1761.943877][ T29] audit: type=1326 audit(1774361682.877:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25201 comm="syz.1.4093" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2f6c code=0x7ffc0000 [ 1763.032124][T25208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4093'. [ 1763.076662][T25208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4093'. [ 1763.154486][T25207] netlink: 288 bytes leftover after parsing attributes in process `syz.1.4093'. [ 1763.276024][T25215] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4095'. [ 1763.318350][T25215] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4095'. [ 1763.357193][T25215] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4095'. [ 1763.405417][T25215] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4095'. [ 1763.446082][T25215] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4095'. [ 1765.056168][T25239] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4099'. [ 1765.888869][T25250] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4101'. [ 1767.489215][T24362] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1767.659725][T24362] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 1767.668649][T24362] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1767.680233][T24362] usb 3-1: config 0 has no interface number 0 [ 1767.686968][T24362] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1767.701975][T24362] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1767.733041][T24362] usb 3-1: config 0 descriptor?? [ 1767.754497][T24362] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1768.079392][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 1768.123246][T25276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1768.162824][T25276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1768.244913][T25278] usb usb8: usbfs: process 25278 (syz.3.4105) did not claim interface 2 before use [ 1768.334230][T25278] openvswitch: netlink: IP tunnel dst address not specified [ 1768.819928][T24685] usb 3-1: Failed to submit usb control message: -110 [ 1768.820003][T24685] usb 3-1: unable to send the bmi data to the device: -110 [ 1768.820026][T24685] usb 3-1: unable to get target info from device [ 1768.820043][T24685] usb 3-1: could not get target info (-110) [ 1768.820065][T24685] usb 3-1: could not probe fw (-110) [ 1771.075789][T24362] usb 3-1: USB disconnect, device number 81 [ 1771.455525][T25312] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4111'. [ 1771.707495][T25319] input: syz1 as /devices/virtual/input/input50 [ 1774.033690][T25349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1774.122327][T25349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1775.010911][T25356] netlink: 'syz.0.4120': attribute type 21 has an invalid length. [ 1775.023493][T25356] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4120'. [ 1776.123287][T25371] input: syz0 as /devices/virtual/input/input51 [ 1777.618179][T25388] fuse: Unknown parameter 'fd00000000000000000000' [ 1779.080918][T23643] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1779.219896][T23643] usb 4-1: device descriptor read/64, error -71 [ 1779.459665][T23643] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1779.631116][T23643] usb 4-1: device descriptor read/64, error -71 [ 1779.729479][T17888] usb 3-1: new full-speed USB device number 82 using dummy_hcd [ 1779.744846][T23643] usb usb4-port1: attempt power cycle [ 1779.912804][T17888] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 1779.964488][T17888] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 1779.990910][T17888] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1780.051632][T17888] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1780.103905][T17888] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1780.119470][T23643] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1780.144479][T17888] usb 3-1: Product: syz [ 1780.194572][T17888] usb 3-1: Manufacturer: syz [ 1780.218484][T17888] usb 3-1: SerialNumber: syz [ 1780.225530][T23643] usb 4-1: device descriptor read/8, error -71 [ 1780.254565][T17888] usb 3-1: config 0 descriptor?? [ 1780.354854][T17888] usb 3-1: selecting invalid altsetting 0 [ 1780.520152][T23643] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1780.616334][T23643] usb 4-1: device descriptor read/8, error -71 [ 1780.749753][T23643] usb usb4-port1: unable to enumerate USB device [ 1780.822547][T25408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1780.864038][T25408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1781.225453][T17888] usb 3-1: USB disconnect, device number 82 [ 1783.045450][T25429] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1783.052027][T25429] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1783.064242][T25429] vhci_hcd vhci_hcd.0: Device attached [ 1783.083745][T25409] tipc: New replicast peer: 255.255.255.255 [ 1783.100959][T25409] tipc: Enabled bearer , priority 10 [ 1783.115744][T25430] netlink: 184 bytes leftover after parsing attributes in process `syz.0.4133'. [ 1783.140517][T25430] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1783.339733][T17888] usb 34-1: SetAddress Request (6) to port 0 [ 1783.346040][T17888] usb 34-1: new SuperSpeed USB device number 6 using vhci_hcd [ 1783.622880][T25439] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1783.827472][T25431] vhci_hcd: connection reset by peer [ 1783.839962][T19724] vhci_hcd vhci_hcd.0: stop threads [ 1783.845444][T19724] vhci_hcd vhci_hcd.0: release socket [ 1783.851987][T19724] vhci_hcd vhci_hcd.0: disconnect device [ 1784.781402][T25460] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4139'. [ 1784.809640][T25460] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4139'. [ 1784.827913][T25460] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4139'. [ 1785.208832][T25462] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4139'. [ 1786.786458][T25488] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4144'. [ 1787.674989][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 1787.675012][ T29] audit: type=1326 audit(1774361709.187:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25491 comm="syz.3.4145" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1787.734437][T25499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4146'. [ 1787.815732][ T29] audit: type=1326 audit(1774361709.227:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25491 comm="syz.3.4145" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1787.918540][T25501] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 1788.020201][ T29] audit: type=1326 audit(1774361709.227:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25491 comm="syz.3.4145" exe="/root/syz-executor" sig=0 arch=40000003 syscall=138 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1788.122512][ T29] audit: type=1326 audit(1774361709.227:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25491 comm="syz.3.4145" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1788.190671][ T29] audit: type=1326 audit(1774361709.227:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25491 comm="syz.3.4145" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1788.216129][ T29] audit: type=1326 audit(1774361709.227:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25491 comm="syz.3.4145" exe="/root/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1788.323998][ T29] audit: type=1326 audit(1774361709.277:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25491 comm="syz.3.4145" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1788.325038][ T29] audit: type=1326 audit(1774361709.277:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25491 comm="syz.3.4145" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1788.325197][ T29] audit: type=1326 audit(1774361709.297:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25500 comm="syz.3.4145" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71a5cab code=0x7ffc0000 [ 1788.325360][ T29] audit: type=1326 audit(1774361709.327:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25491 comm="syz.3.4145" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1788.401785][T25508] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4147'. [ 1788.401834][T25508] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4147'. [ 1788.426934][T17888] usb 34-1: device descriptor read/8, error -110 [ 1788.486478][T25508] capability: warning: `syz.5.4147' uses 32-bit capabilities (legacy support in use) [ 1788.810534][T17888] usb usb34-port1: attempt power cycle [ 1789.370618][T17888] usb usb34-port1: unable to enumerate USB device [ 1789.384898][T25515] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4158'. [ 1790.684755][T25532] netlink: 'syz.1.4150': attribute type 4 has an invalid length. [ 1790.735991][T25532] netlink: 'syz.1.4150': attribute type 4 has an invalid length. [ 1790.993624][T25537] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1791.379109][T25542] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4152'. [ 1791.797453][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.806436][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.137608][T25547] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.4153'. [ 1792.722371][T25554] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4155'. [ 1792.770055][T25554] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4155'. [ 1792.779244][T25554] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4155'. [ 1792.815045][T25555] fuse: Unknown parameter 'fd00000000000000000000' [ 1792.909989][T25556] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.4155'. [ 1793.928392][T25569] input: syz1 as /devices/virtual/input/input53 [ 1794.126438][T25571] usb usb8: usbfs: process 25571 (syz.5.4159) did not claim interface 0 before use [ 1794.837566][T25579] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4161'. [ 1796.990582][T25598] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4162'. [ 1797.322419][T25608] input: syz0 as /devices/virtual/input/input54 [ 1797.405974][T25608] [U]  [ 1797.408799][T25608] [U] K{‘ [ 1797.439028][T25608] [U] фt Ž1ЪрТŠЊFьЧФfЫŠю`GЪJч˜мgіцЏЙЌЁ—ўШoеё/ќmCч [ 1797.479668][T25608] [U] tžи–/,~ˆФœ­‹jѕџЪ}8юЪў'o1м"™7-ю‚JQœK—ЄWКяqщ5c%"ЌH12–ІY“„‰ž€ЪXЭ`ˆ‚эшМ`+Гћ(ЗтП!(щћщz'рtXlnЛIЎgХj– Аќн­Зpх~ї7э!‘еђ"јЈЮ ОЊ(Ш5ˆObќЄ‡ЭƒJж [ 1797.578594][T25608] [U] Бk\&—}6Ѓ6œXюHX ЅєЕ„Ьў.`Иa“$л40|ЯЖП9АјоЈ„ЏР ЯU‚ђ4єфЎVbzУ№}ЬwдM”TКŽэQŸ§ЮІr’ 4”џ [ 1797.634113][T25608] [U] ".h6јо"жkу‡[›‰ЄŒJс4чиInЈ™[Z(•„C|Tы]z{т3Ÿc=ЛЈxюєžы…ю4пw‰)\T‘XJјSH{q;ьЙЂ…іtдЧ+‹ІїgэшџЎd„.Ы‚Г>yžїщwUh„fN—ŽЧhl]Sд2ŠЧй\g%ŠOМ&z)Е№š'Јpul‚_<у ЂиА‰ђЎдх`вБTдСўœаЫў;_є"(‘u{7jœП2X ‘/€'нйcбЬѕIКЉРЯHПcеГžVІ=‘AiЧ%wМEsž RšŸjŠюœƒк”gТїrСЙэЁhI˜Ђœaяь6-њDњVЈс i"јхnцЈ ўкAsc~4СЊЙ8cј*­OO5/џœJš~КЇЁw—vK+ЌЎ‰Œ3шЧY)ŽЙMАИцvЖЬyqцН€DTrЏOtpem%fзЪejЭA5цдT_-X~ ^aaл‚ђ˜Нqжх [ 1797.812477][T25608] [U] +w‰G?]Ѓг'a: Лк)еяѓ™“' B>tЂ Ёf/™ї<'шUг'–МhЇiщ.+]eŸ.Н-ЩПџПв%їш>2`Ж^Uџ8F.Š6ЄХ3ги+ЫAОТЋЋ„Аg3гpТѓ6:^0Рtщшvї'EѕtМ€ћтYC‰nОўrЯЉоnшPjз ;цZ†ъєёћ‘8!ЏШ\љ…ИAиЪ–2СЃ$№Е™Т­wi.Эч#ŠШ/BaiМФ`№с4j’єdюy@гz„ќgWї5ЫПBФ Ейœ Nѓy"vI2ћЬ [ 1797.940936][T25608] [U] єTІ_K5ИtЌYJаўЮ9№еcЪ$brŸLњNul Жќ9wШ§Э|žGх"ЪƒЦ%ЧњЖъCЊиАЖКqюй ŸЧ3‹ЦqЏєN^HP*Нм$ Е.Ю7yгБœ2Г [ 1797.983625][T25608] [U] Н?Љџ hќф*йС”Ю3э7мщО^#Q"0~‡ ‚№(щoяX LŒbЃ,'vюг=‹ныCЬSЋ…’G‚SЖо0•ж‚‹й`˜›žй‡Ÿ†=1(їюО™їp#ђ2DO*Щƒ [ 1798.040811][T25608] [U] ЉsЙ“gžЕВЖ“˜Guадd-{И™т|&“ЎŸŸё2Е›Lоc_Љœ!`ЈЭozжЅЂBЖГ%>ъrёЖіwя‡§ŽSsТH"ЃyA4ЃO.šYйлф„RTдЖŒBк[+/< [ 1911.933778][T26902] bridge0: port 3(erspan0) entered disabled state [ 1912.117411][T26902] gretap1: left promiscuous mode [ 1912.128711][T26902] ipip0: left promiscuous mode [ 1912.139081][T26902] ipip0: left allmulticast mode [ 1912.152133][T26902] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 1913.905609][T26925] usb usb7: usbfs: process 26925 (syz.5.4412) did not claim interface 0 before use [ 1914.057090][T26931] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4421'. [ 1914.085649][T26930] input: syz0 as /devices/virtual/input/input57 [ 1914.603420][T26942] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1914.664022][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.671193][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.829939][T26956] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1917.878007][T26984] netlink: 'syz.0.4422': attribute type 2 has an invalid length. [ 1917.953539][T26985] netlink: 'syz.0.4422': attribute type 2 has an invalid length. [ 1919.122273][T26962] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1919.160451][T26974] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1919.213069][T26985] !: left promiscuous mode [ 1921.014368][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 1921.014390][ T29] audit: type=1326 audit(1774361842.507:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27001 comm="syz.5.4426" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42f6c code=0x7ffc0000 [ 1921.114948][ T29] audit: type=1326 audit(1774361842.587:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27001 comm="syz.5.4426" exe="/root/syz-executor" sig=0 arch=40000003 syscall=229 compat=1 ip=0xf7f42f6c code=0x7ffc0000 [ 1921.369229][T27012] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1921.562221][ T29] audit: type=1326 audit(1774361843.077:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27001 comm="syz.5.4426" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42f6c code=0x7ffc0000 [ 1921.616906][ T29] audit: type=1326 audit(1774361843.117:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27001 comm="syz.5.4426" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42f6c code=0x7ffc0000 [ 1921.697460][ T29] audit: type=1326 audit(1774361843.167:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27001 comm="syz.5.4426" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f42f6c code=0x7ffc0000 [ 1923.580132][T27035] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 1923.590153][T27035] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 1923.656575][T27035] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 1924.085997][T27043] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4433'. [ 1925.033604][T27057] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1925.208283][T27059] bridge0: port 3(erspan0) entered blocking state [ 1925.214877][T27059] bridge0: port 3(erspan0) entered listening state [ 1925.374484][T27059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1925.413635][T27059] 8021q: adding VLAN 0 to HW filter on device team0 [ 1925.533715][T27059] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1927.636369][T27080] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1928.151307][T27091] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1928.242400][T27092] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4441'. [ 1930.172010][T27117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4446'. [ 1930.304729][T27118] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4446'. [ 1930.336031][T27118] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4446'. [ 1931.502078][T27129] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4450'. [ 1931.574821][T27132] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4450'. [ 1932.002303][T27141] usb usb7: usbfs: process 27141 (syz.0.4453) did not claim interface 0 before use [ 1932.094725][T27139] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4452'. [ 1932.245490][T27150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1932.314161][T27150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1932.323038][T27152] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1932.410907][T27155] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1933.343774][T27163] loop5: detected capacity change from 0 to 7 [ 1933.743775][T27082] Dev loop5: unable to read RDB block 7 [ 1933.754853][T27082] loop5: unable to read partition table [ 1933.770867][T27082] loop5: partition table beyond EOD, truncated [ 1934.107545][T27177] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4460'. [ 1934.153717][T27177] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4460'. [ 1934.178980][T27177] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4460'. [ 1935.325634][T27163] Dev loop5: unable to read RDB block 7 [ 1935.331825][T27163] loop5: unable to read partition table [ 1935.339718][T27163] loop5: partition table beyond EOD, truncated [ 1935.345954][T27163] loop_reread_partitions: partition scan of loop5 (њљƒWхЁ™‰ќОУНИ*‹Ка œым%ѕЋЕ4FLQkнŠ5) failed (rc=-5) [ 1935.382689][T27186] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1935.603715][T27192] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 1935.610296][T27192] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1935.646174][T27192] vhci_hcd vhci_hcd.0: Device attached [ 1935.675300][T27195] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(12) [ 1935.681963][T27195] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1935.724523][T27195] vhci_hcd vhci_hcd.0: Device attached [ 1935.731689][T27192] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(11) [ 1935.738305][T27192] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1935.759431][T27192] vhci_hcd vhci_hcd.0: Device attached [ 1935.779785][T27195] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(14) [ 1935.786441][T27195] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1935.817806][T27195] vhci_hcd vhci_hcd.0: Device attached [ 1935.833435][T27192] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(16) [ 1935.840069][T27192] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1935.889620][T17869] usb 43-1: new low-speed USB device number 3 using vhci_hcd [ 1935.899671][T27195] vhci_hcd vhci_hcd.0: pdev(5) rhport(5) sockfd(18) [ 1935.906300][T27195] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1935.913844][T27192] vhci_hcd vhci_hcd.0: Device attached [ 1935.934363][T27195] vhci_hcd vhci_hcd.0: Device attached [ 1935.967306][T27192] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1936.026773][T27192] vhci_hcd vhci_hcd.0: pdev(5) rhport(7) sockfd(25) [ 1936.033588][T27192] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1936.073954][T27195] vhci_hcd vhci_hcd.0: port 0 already used [ 1936.103973][T27192] vhci_hcd vhci_hcd.0: Device attached [ 1936.158594][T27210] vhci_hcd: connection closed [ 1936.160316][T27206] vhci_hcd: connection closed [ 1936.171659][T27200] vhci_hcd: connection closed [ 1936.176583][T27203] vhci_hcd: connection closed [ 1936.182024][T27198] vhci_hcd: connection closed [ 1936.186836][T19724] vhci_hcd vhci_hcd.5: stop threads [ 1936.189149][T27196] vhci_hcd: connection closed [ 1936.200820][T27193] vhci_hcd: connection reset by peer [ 1936.212074][T19724] vhci_hcd vhci_hcd.5: release socket [ 1936.225924][T19724] vhci_hcd vhci_hcd.5: disconnect device [ 1936.252136][T19724] vhci_hcd vhci_hcd.5: stop threads [ 1936.268738][T19724] vhci_hcd vhci_hcd.5: release socket [ 1936.287468][T19724] vhci_hcd vhci_hcd.5: disconnect device [ 1936.312274][T19724] vhci_hcd vhci_hcd.5: stop threads [ 1936.326540][T19724] vhci_hcd vhci_hcd.5: release socket [ 1936.344224][T19724] vhci_hcd vhci_hcd.5: disconnect device [ 1936.361315][T19724] vhci_hcd vhci_hcd.5: stop threads [ 1936.402768][T19724] vhci_hcd vhci_hcd.5: release socket [ 1936.417620][T19724] vhci_hcd vhci_hcd.5: disconnect device [ 1936.445764][T19724] vhci_hcd vhci_hcd.5: stop threads [ 1936.457181][T19724] vhci_hcd vhci_hcd.5: release socket [ 1936.465216][T19724] vhci_hcd vhci_hcd.5: disconnect device [ 1936.480640][T19724] vhci_hcd vhci_hcd.5: stop threads [ 1936.504723][T19724] vhci_hcd vhci_hcd.5: release socket [ 1936.522049][T19724] vhci_hcd vhci_hcd.5: disconnect device [ 1936.532124][T19724] vhci_hcd vhci_hcd.5: stop threads [ 1936.545640][T19724] vhci_hcd vhci_hcd.5: release socket [ 1936.562644][T19724] vhci_hcd vhci_hcd.5: disconnect device [ 1937.733687][T27229] binder: 27226:27229 ioctl 4018620d 0 returned -22 [ 1938.629704][T27236] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4468'. [ 1938.719142][T27236] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4468'. [ 1940.416948][T27247] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1941.051157][T17869] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1943.636202][T27282] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4476'. [ 1944.823210][T27292] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4478'. [ 1946.026659][T27311] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4481'. [ 1946.221833][ T29] audit: type=1326 audit(1774361867.737:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27303 comm="syz.3.4481" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1946.284122][T27317] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4484'. [ 1946.307215][T27317] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4484'. [ 1946.309506][T17888] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1946.327678][ T29] audit: type=1326 audit(1774361867.737:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27303 comm="syz.3.4481" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1946.356760][ T29] audit: type=1326 audit(1774361867.767:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27303 comm="syz.3.4481" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1946.389575][ T29] audit: type=1326 audit(1774361867.767:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27303 comm="syz.3.4481" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1946.418460][ T29] audit: type=1326 audit(1774361867.767:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27303 comm="syz.3.4481" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1946.473421][T27317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4484'. [ 1946.557894][T27322] team0: Port device bond0 removed [ 1946.565251][T27322] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1946.681418][T17888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1946.717029][T17888] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1946.768140][T27327] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4486'. [ 1946.816174][T17888] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1947.036887][T17888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1947.096284][T17888] usb 3-1: config 0 descriptor?? [ 1947.199136][T17888] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1947.492735][T17869] usb 3-1: USB disconnect, device number 86 [ 1947.876105][T27340] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 1947.882714][T27340] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1947.916270][T27340] vhci_hcd vhci_hcd.0: Device attached [ 1947.929067][T27344] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(12) [ 1947.935699][T27344] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1947.951520][T27344] vhci_hcd vhci_hcd.0: Device attached [ 1947.965293][T27340] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(11) [ 1947.972031][T27340] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1948.015967][T27340] vhci_hcd vhci_hcd.0: Device attached [ 1948.025721][T27344] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(16) [ 1948.032361][T27344] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1948.051515][T27344] vhci_hcd vhci_hcd.0: Device attached [ 1948.076811][T27340] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(15) [ 1948.083466][T27340] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1948.103298][T27353] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1948.119755][T27340] vhci_hcd vhci_hcd.0: Device attached [ 1948.133244][T27344] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(20) [ 1948.139888][T27344] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1948.169509][T17888] usb 37-1: new low-speed USB device number 4 using vhci_hcd [ 1948.180279][T27340] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1948.189435][T27344] vhci_hcd vhci_hcd.0: Device attached [ 1948.209761][T27340] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(25) [ 1948.216441][T27340] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1948.218838][T27360] xt_TCPMSS: Only works on TCP SYN packets [ 1948.263071][T27340] vhci_hcd vhci_hcd.0: Device attached [ 1948.270970][T27344] vhci_hcd vhci_hcd.0: port 0 already used [ 1948.337961][T27358] vhci_hcd: connection closed [ 1948.338609][T27354] vhci_hcd: connection closed [ 1948.340796][T27356] vhci_hcd: connection closed [ 1948.343726][T27351] vhci_hcd: connection closed [ 1948.353678][T12396] vhci_hcd vhci_hcd.2: stop threads [ 1948.366882][T27348] vhci_hcd: connection closed [ 1948.366964][T27345] vhci_hcd: connection closed [ 1948.373114][T27341] vhci_hcd: connection reset by peer [ 1948.385637][T12396] vhci_hcd vhci_hcd.2: release socket [ 1948.394829][T27364] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1948.432193][T12396] vhci_hcd vhci_hcd.2: disconnect device [ 1948.432454][T12396] vhci_hcd vhci_hcd.2: stop threads [ 1948.432471][T12396] vhci_hcd vhci_hcd.2: release socket [ 1948.436305][T12396] vhci_hcd vhci_hcd.2: disconnect device [ 1948.436462][T12396] vhci_hcd vhci_hcd.2: stop threads [ 1948.436481][T12396] vhci_hcd vhci_hcd.2: release socket [ 1948.436582][T12396] vhci_hcd vhci_hcd.2: disconnect device [ 1948.437334][T12396] vhci_hcd vhci_hcd.2: stop threads [ 1948.437896][T12396] vhci_hcd vhci_hcd.2: release socket [ 1948.437990][T12396] vhci_hcd vhci_hcd.2: disconnect device [ 1948.439164][T12396] vhci_hcd vhci_hcd.2: stop threads [ 1948.439176][T12396] vhci_hcd vhci_hcd.2: release socket [ 1948.439231][T12396] vhci_hcd vhci_hcd.2: disconnect device [ 1948.440740][T12396] vhci_hcd vhci_hcd.2: stop threads [ 1948.440760][T12396] vhci_hcd vhci_hcd.2: release socket [ 1948.440983][T12396] vhci_hcd vhci_hcd.2: disconnect device [ 1948.441113][T12396] vhci_hcd vhci_hcd.2: stop threads [ 1948.441129][T12396] vhci_hcd vhci_hcd.2: release socket [ 1948.441240][T12396] vhci_hcd vhci_hcd.2: disconnect device [ 1949.345345][T27372] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4493'. [ 1949.485368][T27378] futex_wake_op: syz.5.4495 tries to shift op by 32; fix this program [ 1949.763425][T27385] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4496'. [ 1949.774171][T27385] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4496'. [ 1949.826279][T27385] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4496'. [ 1950.062173][T27389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1950.101074][T27389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1950.151297][T27389] tipc: Enabled bearer , priority 10 [ 1950.176469][T27336] cifs: Unknown parameter 'ђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџђџџџ [ 1950.454638][T27393] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4498'. [ 1951.279768][T17869] tipc: Node number set to 3730403631 [ 1951.343546][T27399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1951.354001][T27399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1952.583271][T27425] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1953.289605][T17888] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1953.574350][T27435] usb usb7: usbfs: process 27435 (syz.3.4508) did not claim interface 0 before use [ 1954.615802][T17889] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1954.854415][T17889] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1954.915278][T17889] usb 3-1: can't read configurations, error -61 [ 1955.097958][T17889] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1955.228319][T27451] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1955.298223][T17889] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1955.306731][T17889] usb 3-1: can't read configurations, error -61 [ 1955.352486][T17889] usb usb3-port1: attempt power cycle [ 1955.504141][ T29] audit: type=1326 audit(1774361877.007:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27452 comm="syz.1.4513" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2f6c code=0x7ffc0000 [ 1955.536615][T23643] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1955.583475][ T29] audit: type=1326 audit(1774361877.007:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27452 comm="syz.1.4513" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2f6c code=0x7ffc0000 [ 1955.619909][ C0] bridge0: port 3(erspan0) entered learning state [ 1955.678375][ T29] audit: type=1326 audit(1774361877.007:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27452 comm="syz.1.4513" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7fe2f6c code=0x7ffc0000 [ 1955.739863][T17889] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1955.749517][T23643] usb 4-1: Using ep0 maxpacket: 8 [ 1955.757768][ T29] audit: type=1326 audit(1774361877.007:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27452 comm="syz.1.4513" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2f6c code=0x7ffc0000 [ 1955.814228][T23643] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1955.833376][T17889] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1955.865009][ T29] audit: type=1326 audit(1774361877.017:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27452 comm="syz.1.4513" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2f6c code=0x7ffc0000 [ 1955.888123][T23643] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1955.898652][T27461] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1955.919494][T17889] usb 3-1: can't read configurations, error -61 [ 1955.929715][T23643] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1955.944727][T23643] usb 4-1: Product: syz [ 1955.955547][T23643] usb 4-1: Manufacturer: syz [ 1955.964461][T23643] usb 4-1: SerialNumber: syz [ 1955.982121][ T29] audit: type=1326 audit(1774361877.017:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27452 comm="syz.1.4513" exe="/root/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7fe2f6c code=0x7ffc0000 [ 1956.063279][T27466] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4515'. [ 1956.070221][T17889] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1956.087677][ T29] audit: type=1326 audit(1774361877.017:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27452 comm="syz.1.4513" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2f6c code=0x7ffc0000 [ 1956.087749][ T29] audit: type=1326 audit(1774361877.017:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27452 comm="syz.1.4513" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2f6c code=0x7ffc0000 [ 1956.087795][ T29] audit: type=1326 audit(1774361877.077:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27452 comm="syz.1.4513" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7fe2f6c code=0x7ffc0000 [ 1956.087876][ T29] audit: type=1326 audit(1774361877.087:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27452 comm="syz.1.4513" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7fe2f6c code=0x7ffc0000 [ 1956.107218][T17889] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1956.107250][T17889] usb 3-1: can't read configurations, error -61 [ 1956.107453][T17889] usb usb3-port1: unable to enumerate USB device [ 1957.003685][T27471] misc userio: Invalid payload size [ 1958.224982][T17873] usb 4-1: USB disconnect, device number 70 [ 1958.737910][T27487] netlink: 'syz.3.4519': attribute type 13 has an invalid length. [ 1959.115101][T27495] usb usb7: usbfs: process 27495 (syz.5.4521) did not claim interface 0 before use [ 1960.434894][T27503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4522'. [ 1960.833192][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 1960.833208][ T29] audit: type=1326 audit(1774361882.347:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27500 comm="syz.1.4522" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2f6c code=0x7ffc0000 [ 1960.869948][ T29] audit: type=1326 audit(1774361882.347:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27500 comm="syz.1.4522" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2f6c code=0x7ffc0000 [ 1960.899374][ T29] audit: type=1326 audit(1774361882.377:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27500 comm="syz.1.4522" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7fe2f6c code=0x7ffc0000 [ 1960.932213][ T29] audit: type=1326 audit(1774361882.377:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27500 comm="syz.1.4522" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2f6c code=0x7ffc0000 [ 1960.967499][ T29] audit: type=1326 audit(1774361882.377:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27500 comm="syz.1.4522" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2f6c code=0x7ffc0000 [ 1961.559036][T27515] netdevsim netdevsim3: Direct firmware load for nel/address_bits failed with error -2 [ 1961.631104][T27515] netdevsim netdevsim3: Falling back to sysfs fallback for: nel/address_bits [ 1962.712337][T27538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4528'. [ 1962.723316][T27538] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4528'. [ 1962.834525][T27537] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1963.341219][T27546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4530'. [ 1963.903545][ T29] audit: type=1326 audit(1774361885.387:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27543 comm="syz.1.4530" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2f6c code=0x7ffc0000 [ 1964.089548][ T29] audit: type=1326 audit(1774361885.387:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27543 comm="syz.1.4530" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2f6c code=0x7ffc0000 [ 1964.161968][ T29] audit: type=1326 audit(1774361885.407:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27543 comm="syz.1.4530" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7fe2f6c code=0x7ffc0000 [ 1964.226338][ T29] audit: type=1326 audit(1774361885.407:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27543 comm="syz.1.4530" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2f6c code=0x7ffc0000 [ 1964.311591][T27561] usb usb7: usbfs: process 27561 (syz.0.4534) did not claim interface 0 before use [ 1964.335000][ T29] audit: type=1326 audit(1774361885.407:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27543 comm="syz.1.4530" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2f6c code=0x7ffc0000 [ 1965.652817][T27575] input: syz0 as /devices/virtual/input/input58 [ 1967.296134][T27582] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 1967.372639][T27582] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 1967.400871][T27582] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1967.572088][T27584] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4538'. [ 1967.627278][T27597] netlink: 100 bytes leftover after parsing attributes in process `syz.5.4539'. [ 1967.661304][T27597] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1967.684795][T27596] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4540'. [ 1967.740955][T17873] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 1967.972691][T17873] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1967.989442][T17873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1968.045546][T17873] usb 4-1: Product: syz [ 1968.096564][T17873] usb 4-1: Manufacturer: syz [ 1968.136981][T17873] usb 4-1: SerialNumber: syz [ 1968.285872][T17873] usb 4-1: config 0 descriptor?? [ 1968.542678][T17873] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1969.390583][T27608] tipc: Enabling of bearer rejected, already enabled [ 1969.444956][T27608] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4543'. [ 1969.486007][T27607] bond4: (slave .`): Releasing active interface [ 1969.499802][T27607] .`: (slave bond_slave_0): Releasing backup interface [ 1969.510325][T27607] .`: (slave bond_slave_1): Releasing backup interface [ 1969.523335][T27607] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1969.845432][T27611] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993 [ 1969.873971][T27611] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4545'. [ 1969.901990][T27611] sctp: [Deprecated]: syz.0.4545 (pid 27611) Use of int in max_burst socket option. [ 1969.901990][T27611] Use struct sctp_assoc_value instead [ 1971.015400][T17873] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1971.067935][T17873] usb 4-1: USB disconnect, device number 71 [ 1971.523557][T27633] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1972.256324][T27638] tipc: Failed to remove unknown binding: 66,1,1/2427362532:1850498189/1850498191 [ 1972.296162][T27638] tipc: Failed to remove unknown binding: 66,1,1/2427362532:1850498189/1850498191 [ 1973.308344][T27647] overlayfs: missing 'lowerdir' [ 1973.364335][T27651] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 1973.601655][T27655] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4554'. [ 1973.670036][T27655] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4554'. [ 1973.679478][T27655] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4554'. [ 1976.112477][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.118802][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.141802][T27674] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1976.188051][T27676] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1977.185253][T27691] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4562'. [ 1977.195041][T27691] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4562'. [ 1977.208141][T27692] QAT: failed to copy from user. [ 1977.539511][T17889] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1977.709940][T17889] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1977.723829][T17889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1977.764845][T17889] usb 4-1: config 0 descriptor?? [ 1977.783864][T17889] cp210x 4-1:0.0: cp210x converter detected [ 1978.574999][T27703] blktrace: Concurrent blktraces are not allowed on sg0 [ 1981.201651][T27725] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1982.002949][T27730] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1982.036564][T17889] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1982.053033][T17889] cp210x 4-1:0.0: querying part number failed [ 1982.104599][T17889] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1982.181945][T27730] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1982.201001][T17889] usb 4-1: USB disconnect, device number 72 [ 1982.275339][T17889] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1982.312193][T17889] cp210x 4-1:0.0: device disconnected [ 1982.360616][T27736] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4580'. [ 1982.446735][T27739] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4570'. [ 1982.780858][ T29] audit: type=1326 audit(1774361904.277:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27733 comm="syz.5.4570" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42f6c code=0x7ffc0000 [ 1982.843460][T27743] bridge0: port 1(veth0_to_bond) entered blocking state [ 1982.855653][T27743] bridge0: port 1(veth0_to_bond) entered disabled state [ 1982.881271][T27743] veth0_to_bond: entered allmulticast mode [ 1982.890827][ T29] audit: type=1326 audit(1774361904.277:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27733 comm="syz.5.4570" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42f6c code=0x7ffc0000 [ 1982.980201][T27743] veth0_to_bond: entered promiscuous mode [ 1983.010194][ T29] audit: type=1326 audit(1774361904.297:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27733 comm="syz.5.4570" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f42f6c code=0x7ffc0000 [ 1983.072674][ T29] audit: type=1326 audit(1774361904.297:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27733 comm="syz.5.4570" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42f6c code=0x7ffc0000 [ 1983.261084][ T29] audit: type=1326 audit(1774361904.297:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27733 comm="syz.5.4570" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42f6c code=0x7ffc0000 [ 1984.432731][T27756] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1984.559476][T17889] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1984.574370][T27759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1984.630356][T27759] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1984.729578][T17889] usb 3-1: Using ep0 maxpacket: 16 [ 1984.743006][T17889] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1984.765920][T17889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1984.794324][T17889] usb 3-1: Product: syz [ 1984.808747][T17889] usb 3-1: Manufacturer: syz [ 1984.824632][T17889] usb 3-1: SerialNumber: syz [ 1984.852103][T17889] usb 3-1: config 0 descriptor?? [ 1984.970841][T27765] 8021q: adding VLAN 0 to HW filter on device .` [ 1985.016250][T27765] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1985.100783][T17889] speedtch 3-1:0.0: speedtch_bind: data interface not found! [ 1985.142979][T17889] speedtch 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1985.192086][T17889] usb 3-1: USB disconnect, device number 91 [ 1985.411948][T27772] usb usb7: usbfs: process 27772 (syz.1.4576) did not claim interface 0 before use [ 1985.699409][ C0] bridge0: port 3(erspan0) entered forwarding state [ 1985.706282][ C0] bridge0: topology change detected, propagating [ 1987.368043][T27794] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1988.061113][T17888] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1988.232407][T17888] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1988.257582][T17888] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1988.285808][T17888] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1988.319872][T17888] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1988.365533][T17888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1988.406163][T17888] usb 6-1: config 0 descriptor?? [ 1988.665887][T27798] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4585'. [ 1988.942892][T27812] bridge0: entered promiscuous mode [ 1988.948648][T27812] team0: entered promiscuous mode [ 1988.953797][T27812] bond0: entered promiscuous mode [ 1988.958878][T27812] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:591 [ 1988.968340][T27812] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 27812, name: syz.2.4586 [ 1988.977587][T27812] preempt_count: 201, expected: 0 [ 1988.982763][T27812] RCU nest depth: 0, expected: 0 [ 1988.987702][T27812] 3 locks held by syz.2.4586/27812: [ 1988.992977][T27812] #0: ffffffff9011f3c8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1989.002703][T27812] #1: ffffffff8fbcea08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 1989.011834][T27812] #2: ffff88805d1d0370 (&dev_addr_list_lock_key#7/3){+...}-{3:3}, at: dev_uc_add+0x67/0x120 [ 1989.022150][T27812] Preemption disabled at: [ 1989.022162][T27812] [] dev_uc_add+0x56/0x120 [ 1989.032546][T27812] CPU: 1 UID: 0 PID: 27812 Comm: syz.2.4586 Tainted: G L syzkaller #0 PREEMPT(full) [ 1989.032578][T27812] Tainted: [L]=SOFTLOCKUP [ 1989.032587][T27812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1989.032599][T27812] Call Trace: [ 1989.032658][T27812] [ 1989.032692][T27812] dump_stack_lvl+0xe8/0x150 [ 1989.032783][T27812] __might_resched+0x378/0x4d0 [ 1989.032808][T27812] ? dev_uc_add+0x56/0x120 [ 1989.032850][T27812] __mutex_lock+0x119/0x1300 [ 1989.032938][T27812] ? __pfx_vprintk_emit+0x10/0x10 [ 1989.032970][T27812] ? prb_read_valid+0x3c/0x60 [ 1989.032995][T27812] ? dev_set_promiscuity+0x10e/0x260 [ 1989.033021][T27812] ? _printk+0xdd/0x130 [ 1989.033049][T27812] ? __pfx___mutex_lock+0x10/0x10 [ 1989.033082][T27812] ? vprintk_emit+0x4eb/0x560 [ 1989.033104][T27812] ? __netdev_printk+0x36f/0x480 [ 1989.033140][T27812] dev_set_promiscuity+0x10e/0x260 [ 1989.033166][T27812] bond_change_rx_flags+0x21a/0x690 [ 1989.033229][T27812] ? __pfx_bond_change_rx_flags+0x10/0x10 [ 1989.033254][T27812] ? vprintk_emit+0x4eb/0x560 [ 1989.033275][T27812] ? __pfx_bond_change_rx_flags+0x10/0x10 [ 1989.033293][T27812] __dev_set_promiscuity+0x515/0x710 [ 1989.033317][T27812] ? netdev_info+0x11e/0x180 [ 1989.033343][T27812] netif_set_promiscuity+0x50/0xe0 [ 1989.033369][T27812] dev_set_promiscuity+0x126/0x260 [ 1989.033397][T27812] team_change_rx_flags+0x124/0x240 [ 1989.033430][T27812] ? __pfx_team_change_rx_flags+0x10/0x10 [ 1989.033443][T27812] __dev_set_promiscuity+0x515/0x710 [ 1989.033460][T27812] ? netdev_info+0x11e/0x180 [ 1989.033494][T27812] netif_set_promiscuity+0x50/0xe0 [ 1989.033520][T27812] dev_set_promiscuity+0x126/0x260 [ 1989.033549][T27812] br_manage_promisc+0x180/0x560 [ 1989.033601][T27812] ? __pfx_br_dev_change_rx_flags+0x10/0x10 [ 1989.033617][T27812] __dev_set_promiscuity+0x515/0x710 [ 1989.033641][T27812] ? __hw_addr_add_ex+0x361/0x650 [ 1989.033671][T27812] __dev_set_rx_mode+0x17c/0x260 [ 1989.033698][T27812] dev_uc_add+0xc8/0x120 [ 1989.033720][T27812] macvlan_open+0x446/0x8e0 [ 1989.033745][T27812] __dev_open+0x44d/0x830 [ 1989.033813][T27812] ? __pfx___dev_open+0x10/0x10 [ 1989.033840][T27812] ? __dev_change_flags+0x1b0/0x690 [ 1989.033866][T27812] ? __local_bh_enable_ip+0xd0/0x130 [ 1989.033893][T27812] __dev_change_flags+0x1f7/0x690 [ 1989.033910][T27812] ? __pfx___dev_change_flags+0x10/0x10 [ 1989.033924][T27812] ? netdev_is_rx_handler_busy+0x56/0x120 [ 1989.033949][T27812] ? __pfx_tap_handle_frame+0x10/0x10 [ 1989.033981][T27812] ? macvtap_newlink+0x166/0x1b0 [ 1989.034010][T27812] rtnl_newlink_create+0x587/0xb70 [ 1989.034032][T27812] ? __pfx___nla_validate_parse+0x10/0x10 [ 1989.034079][T27812] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1989.034106][T27812] ? __pfx___mutex_lock+0x10/0x10 [ 1989.034142][T27812] ? ns_capable+0x89/0xe0 [ 1989.034172][T27812] rtnl_newlink+0x1666/0x1be0 [ 1989.034195][T27812] ? __pfx_rtnl_newlink+0x10/0x10 [ 1989.034206][T27812] ? do_fast_syscall_32+0x33/0x70 [ 1989.034261][T27812] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1989.034344][T27812] ? kasan_quarantine_put+0xbb/0x1f0 [ 1989.034382][T27812] ? lockdep_hardirqs_on+0x7a/0x110 [ 1989.034418][T27812] ? kmem_cache_free+0x187/0x630 [ 1989.034450][T27812] ? nlmon_xmit+0xb0/0x100 [ 1989.034524][T27812] ? __lock_acquire+0x6b5/0x2cf0 [ 1989.034543][T27812] ? __local_bh_enable_ip+0xd0/0x130 [ 1989.034628][T27812] ? lockdep_hardirqs_on+0x7a/0x110 [ 1989.034655][T27812] ? __dev_queue_xmit+0x277/0x3890 [ 1989.034683][T27812] ? __local_bh_enable_ip+0xd0/0x130 [ 1989.034708][T27812] ? __dev_queue_xmit+0x277/0x3890 [ 1989.034793][T27812] ? __pfx_rtnl_newlink+0x10/0x10 [ 1989.034810][T27812] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1989.034841][T27812] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1989.034875][T27812] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1989.034904][T27812] ? ref_tracker_free+0x693/0x840 [ 1989.034934][T27812] ? __copy_skb_header+0xa3/0x4a0 [ 1989.035029][T27812] ? __pfx_ref_tracker_free+0x10/0x10 [ 1989.035072][T27812] netlink_rcv_skb+0x232/0x4b0 [ 1989.035148][T27812] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1989.035169][T27812] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1989.035211][T27812] ? netlink_deliver_tap+0x2e/0x1b0 [ 1989.035252][T27812] netlink_unicast+0x80f/0x9b0 [ 1989.035285][T27812] ? __pfx_netlink_unicast+0x10/0x10 [ 1989.035304][T27812] ? netlink_sendmsg+0x650/0xb40 [ 1989.035315][T27812] ? skb_put+0x11b/0x210 [ 1989.035332][T27812] netlink_sendmsg+0x813/0xb40 [ 1989.035363][T27812] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1989.035387][T27812] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1989.035441][T27812] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1989.035530][T27812] ____sys_sendmsg+0x972/0x9f0 [ 1989.035597][T27812] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1989.035621][T27812] ___sys_sendmsg+0x2a5/0x360 [ 1989.035639][T27812] ? __pfx____sys_sendmsg+0x10/0x10 [ 1989.035668][T27812] ? futex_wait+0x29a/0x380 [ 1989.035727][T27812] ? __fget_files+0x2a/0x420 [ 1989.035770][T27812] ? __fget_files+0x3a0/0x420 [ 1989.035795][T27812] __sys_sendmsg+0x183/0x260 [ 1989.035816][T27812] ? __pfx___sys_sendmsg+0x10/0x10 [ 1989.035864][T27812] __do_fast_syscall_32+0x20d/0x640 [ 1989.035892][T27812] ? lockdep_hardirqs_on+0x7a/0x110 [ 1989.035913][T27812] ? do_fast_syscall_32+0x33/0x70 [ 1989.035928][T27812] ? irqentry_exit+0x10e/0x620 [ 1989.035942][T27812] ? trace_irq_disable+0x3b/0x150 [ 1989.035964][T27812] do_fast_syscall_32+0x33/0x70 [ 1989.035989][T27812] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1989.036015][T27812] RIP: 0023:0xf707ef6c [ 1989.036064][T27812] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1989.036076][T27812] RSP: 002b:00000000f542b50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1989.036110][T27812] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000000 [ 1989.036121][T27812] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1989.036133][T27812] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1989.036145][T27812] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1989.036158][T27812] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1989.036191][T27812] [ 1989.036203][T27812] [ 1989.629731][T27812] ============================= [ 1989.634575][T27812] [ BUG: Invalid wait context ] [ 1989.639594][T27812] syzkaller #0 Tainted: G W L [ 1989.645579][T27812] ----------------------------- [ 1989.650480][T27812] syz.2.4586/27812 is trying to lock: [ 1989.655859][T27812] ffff88805b8ecd88 (&dev_instance_lock_key#24){+.+.}-{4:4}, at: dev_set_promiscuity+0x10e/0x260 [ 1989.666411][T27812] other info that might help us debug this: [ 1989.672295][T27812] context-{5:5} [ 1989.675762][T27812] 3 locks held by syz.2.4586/27812: [ 1989.680971][T27812] #0: ffffffff9011f3c8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1989.690572][T27812] #1: ffffffff8fbcea08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 1989.699651][T27812] #2: ffff88805d1d0370 (&dev_addr_list_lock_key#7/3){+...}-{3:3}, at: dev_uc_add+0x67/0x120 [ 1989.709959][T27812] stack backtrace: [ 1989.713799][T27812] CPU: 1 UID: 0 PID: 27812 Comm: syz.2.4586 Tainted: G W L syzkaller #0 PREEMPT(full) [ 1989.713831][T27812] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1989.713840][T27812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1989.713853][T27812] Call Trace: [ 1989.713860][T27812] [ 1989.713866][T27812] dump_stack_lvl+0xe8/0x150 [ 1989.713888][T27812] __lock_acquire+0xec1/0x2cf0 [ 1989.713906][T27812] ? __show_trace_log_lvl+0x478/0x550 [ 1989.713936][T27812] lock_acquire+0xf0/0x2e0 [ 1989.713960][T27812] ? dev_set_promiscuity+0x10e/0x260 [ 1989.713983][T27812] ? __might_resched+0x378/0x4d0 [ 1989.714011][T27812] __mutex_lock+0x19f/0x1300 [ 1989.714026][T27812] ? dev_set_promiscuity+0x10e/0x260 [ 1989.714039][T27812] ? __pfx_vprintk_emit+0x10/0x10 [ 1989.714056][T27812] ? prb_read_valid+0x3c/0x60 [ 1989.714080][T27812] ? dev_set_promiscuity+0x10e/0x260 [ 1989.714102][T27812] ? __pfx___mutex_lock+0x10/0x10 [ 1989.714128][T27812] ? vprintk_emit+0x4eb/0x560 [ 1989.714156][T27812] ? __netdev_printk+0x36f/0x480 [ 1989.714179][T27812] dev_set_promiscuity+0x10e/0x260 [ 1989.714192][T27812] bond_change_rx_flags+0x21a/0x690 [ 1989.714212][T27812] ? __pfx_bond_change_rx_flags+0x10/0x10 [ 1989.714234][T27812] ? vprintk_emit+0x4eb/0x560 [ 1989.714262][T27812] ? __pfx_bond_change_rx_flags+0x10/0x10 [ 1989.714289][T27812] __dev_set_promiscuity+0x515/0x710 [ 1989.714311][T27812] ? netdev_info+0x11e/0x180 [ 1989.714328][T27812] netif_set_promiscuity+0x50/0xe0 [ 1989.714342][T27812] dev_set_promiscuity+0x126/0x260 [ 1989.714355][T27812] team_change_rx_flags+0x124/0x240 [ 1989.714370][T27812] ? __pfx_team_change_rx_flags+0x10/0x10 [ 1989.714386][T27812] __dev_set_promiscuity+0x515/0x710 [ 1989.714407][T27812] ? netdev_info+0x11e/0x180 [ 1989.714427][T27812] netif_set_promiscuity+0x50/0xe0 [ 1989.714448][T27812] dev_set_promiscuity+0x126/0x260 [ 1989.714470][T27812] br_manage_promisc+0x180/0x560 [ 1989.714490][T27812] ? __pfx_br_dev_change_rx_flags+0x10/0x10 [ 1989.714502][T27812] __dev_set_promiscuity+0x515/0x710 [ 1989.714515][T27812] ? __hw_addr_add_ex+0x361/0x650 [ 1989.714529][T27812] __dev_set_rx_mode+0x17c/0x260 [ 1989.714549][T27812] dev_uc_add+0xc8/0x120 [ 1989.714571][T27812] macvlan_open+0x446/0x8e0 [ 1989.714610][T27812] __dev_open+0x44d/0x830 [ 1989.714636][T27812] ? __pfx___dev_open+0x10/0x10 [ 1989.714653][T27812] ? __dev_change_flags+0x1b0/0x690 [ 1989.714666][T27812] ? __local_bh_enable_ip+0xd0/0x130 [ 1989.714683][T27812] __dev_change_flags+0x1f7/0x690 [ 1989.714704][T27812] ? __pfx___dev_change_flags+0x10/0x10 [ 1989.714724][T27812] ? netdev_is_rx_handler_busy+0x56/0x120 [ 1989.714750][T27812] ? __pfx_tap_handle_frame+0x10/0x10 [ 1989.714777][T27812] ? macvtap_newlink+0x166/0x1b0 [ 1989.714795][T27812] rtnl_newlink_create+0x587/0xb70 [ 1989.714809][T27812] ? __pfx___nla_validate_parse+0x10/0x10 [ 1989.714824][T27812] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1989.714838][T27812] ? __pfx___mutex_lock+0x10/0x10 [ 1989.714863][T27812] ? ns_capable+0x89/0xe0 [ 1989.714888][T27812] rtnl_newlink+0x1666/0x1be0 [ 1989.714913][T27812] ? __pfx_rtnl_newlink+0x10/0x10 [ 1989.714929][T27812] ? do_fast_syscall_32+0x33/0x70 [ 1989.714947][T27812] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1989.714970][T27812] ? kasan_quarantine_put+0xbb/0x1f0 [ 1989.714983][T27812] ? lockdep_hardirqs_on+0x7a/0x110 [ 1989.714999][T27812] ? kmem_cache_free+0x187/0x630 [ 1989.715021][T27812] ? nlmon_xmit+0xb0/0x100 [ 1989.715046][T27812] ? __lock_acquire+0x6b5/0x2cf0 [ 1989.715072][T27812] ? __local_bh_enable_ip+0xd0/0x130 [ 1989.715095][T27812] ? lockdep_hardirqs_on+0x7a/0x110 [ 1989.715108][T27812] ? __dev_queue_xmit+0x277/0x3890 [ 1989.715122][T27812] ? __local_bh_enable_ip+0xd0/0x130 [ 1989.715137][T27812] ? __dev_queue_xmit+0x277/0x3890 [ 1989.715162][T27812] ? __pfx_rtnl_newlink+0x10/0x10 [ 1989.715181][T27812] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1989.715212][T27812] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1989.715239][T27812] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1989.715260][T27812] ? ref_tracker_free+0x693/0x840 [ 1989.715277][T27812] ? __copy_skb_header+0xa3/0x4a0 [ 1989.715291][T27812] ? __pfx_ref_tracker_free+0x10/0x10 [ 1989.715318][T27812] netlink_rcv_skb+0x232/0x4b0 [ 1989.715348][T27812] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1989.715378][T27812] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1989.715405][T27812] ? netlink_deliver_tap+0x2e/0x1b0 [ 1989.715425][T27812] netlink_unicast+0x80f/0x9b0 [ 1989.715442][T27812] ? __pfx_netlink_unicast+0x10/0x10 [ 1989.715461][T27812] ? netlink_sendmsg+0x650/0xb40 [ 1989.715479][T27812] ? skb_put+0x11b/0x210 [ 1989.715499][T27812] netlink_sendmsg+0x813/0xb40 [ 1989.715521][T27812] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1989.715540][T27812] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1989.715568][T27812] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1989.715589][T27812] ____sys_sendmsg+0x972/0x9f0 [ 1989.715605][T27812] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1989.715630][T27812] ___sys_sendmsg+0x2a5/0x360 [ 1989.715654][T27812] ? __pfx____sys_sendmsg+0x10/0x10 [ 1989.715678][T27812] ? futex_wait+0x29a/0x380 [ 1989.715713][T27812] ? __fget_files+0x2a/0x420 [ 1989.715730][T27812] ? __fget_files+0x3a0/0x420 [ 1989.715749][T27812] __sys_sendmsg+0x183/0x260 [ 1989.715763][T27812] ? __pfx___sys_sendmsg+0x10/0x10 [ 1989.715792][T27812] __do_fast_syscall_32+0x20d/0x640 [ 1989.715816][T27812] ? lockdep_hardirqs_on+0x7a/0x110 [ 1989.715837][T27812] ? do_fast_syscall_32+0x33/0x70 [ 1989.715859][T27812] ? irqentry_exit+0x10e/0x620 [ 1989.715873][T27812] ? trace_irq_disable+0x3b/0x150 [ 1989.715892][T27812] do_fast_syscall_32+0x33/0x70 [ 1989.715906][T27812] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1989.715924][T27812] RIP: 0023:0xf707ef6c [ 1989.715942][T27812] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1989.715960][T27812] RSP: 002b:00000000f542b50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1989.715983][T27812] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000000 [ 1989.715998][T27812] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1989.716010][T27812] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1989.716020][T27812] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1989.716027][T27812] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1989.716039][T27812] [ 1990.689711][T17888] plantronics 0003:047F:FFFF.001D: unbalanced collection at end of report description [ 1990.715792][T17888] plantronics 0003:047F:FFFF.001D: parse failed [ 1990.726121][T27812] bridge0: port 2(macvtap2) entered blocking state [ 1990.738934][T17888] plantronics 0003:047F:FFFF.001D: probe with driver plantronics failed with error -22 [ 1990.749988][T27812] bridge0: port 2(macvtap2) entered disabled state [ 1990.757855][T27812] macvtap2: entered allmulticast mode [ 1990.765886][T27812] bridge0: entered allmulticast mode [ 1990.923959][T27812] macvtap2: left allmulticast mode [ 1990.929128][T27812] bridge0: left allmulticast mode [ 1990.934501][T17895] usb 6-1: USB disconnect, device number 59 [ 1990.980152][T23643] usb 3-1: new full-speed USB device number 92 using dummy_hcd [ 1991.027774][T27812] bridge0: left promiscuous mode [ 1991.032863][T27812] team0: left promiscuous mode [ 1991.037632][T27812] bond0: left promiscuous mode [ 1991.042422][T27812] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:591 [ 1991.051712][T27812] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 27812, name: syz.2.4586 [ 1991.060839][T27812] preempt_count: 201, expected: 0 [ 1991.065960][T27812] RCU nest depth: 0, expected: 0 [ 1991.070907][T27812] INFO: lockdep is turned off. [ 1991.075654][T27812] Preemption disabled at: [ 1991.075661][T27812] [] dev_uc_del+0x56/0x110 [ 1991.086054][T27812] CPU: 0 UID: 0 PID: 27812 Comm: syz.2.4586 Tainted: G W L syzkaller #0 PREEMPT(full) [ 1991.086089][T27812] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1991.086098][T27812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1991.086111][T27812] Call Trace: [ 1991.086120][T27812] [ 1991.086129][T27812] dump_stack_lvl+0xe8/0x150 [ 1991.086160][T27812] __might_resched+0x378/0x4d0 [ 1991.086185][T27812] ? dev_uc_del+0x56/0x110 [ 1991.086205][T27812] __mutex_lock+0x119/0x1300 [ 1991.086226][T27812] ? __pfx_vprintk_emit+0x10/0x10 [ 1991.086250][T27812] ? prb_read_valid+0x3c/0x60 [ 1991.086274][T27812] ? dev_set_promiscuity+0x10e/0x260 [ 1991.086292][T27812] ? _printk+0xdd/0x130 [ 1991.086307][T27812] ? __pfx___mutex_lock+0x10/0x10 [ 1991.086328][T27812] ? vprintk_emit+0x4eb/0x560 [ 1991.086352][T27812] ? __netdev_printk+0x36f/0x480 [ 1991.086376][T27812] dev_set_promiscuity+0x10e/0x260 [ 1991.086393][T27812] ? netdev_info+0x11e/0x180 [ 1991.086410][T27812] bond_change_rx_flags+0x21a/0x690 [ 1991.086437][T27812] ? __pfx_bond_change_rx_flags+0x10/0x10 [ 1991.086464][T27812] ? __pfx_bond_change_rx_flags+0x10/0x10 [ 1991.086487][T27812] __dev_set_promiscuity+0x515/0x710 [ 1991.086505][T27812] ? bond_set_rx_mode+0x84/0x4b0 [ 1991.086529][T27812] netif_set_promiscuity+0x50/0xe0 [ 1991.086547][T27812] dev_set_promiscuity+0x126/0x260 [ 1991.086566][T27812] team_change_rx_flags+0x124/0x240 [ 1991.086594][T27812] ? __pfx_team_change_rx_flags+0x10/0x10 [ 1991.086611][T27812] __dev_set_promiscuity+0x515/0x710 [ 1991.086629][T27812] ? lock_release+0x4b/0x3d0 [ 1991.086650][T27812] netif_set_promiscuity+0x50/0xe0 [ 1991.086667][T27812] dev_set_promiscuity+0x126/0x260 [ 1991.086686][T27812] br_manage_promisc+0x4db/0x560 [ 1991.086709][T27812] ? __pfx_br_dev_change_rx_flags+0x10/0x10 [ 1991.086725][T27812] __dev_set_promiscuity+0x515/0x710 [ 1991.086742][T27812] ? __hw_addr_del_ex+0x73/0x4e0 [ 1991.086763][T27812] __dev_set_rx_mode+0x17c/0x260 [ 1991.086781][T27812] dev_uc_del+0xc0/0x110 [ 1991.086800][T27812] macvlan_stop+0x259/0x3e0 [ 1991.086817][T27812] ? __pfx_macvlan_stop+0x10/0x10 [ 1991.086834][T27812] __dev_close_many+0x368/0x6d0 [ 1991.086860][T27812] ? __pfx___dev_close_many+0x10/0x10 [ 1991.086886][T27812] netif_close_many+0x225/0x420 [ 1991.086912][T27812] ? __pfx_netif_close_many+0x10/0x10 [ 1991.086938][T27812] unregister_netdevice_many_notify+0xb47/0x2370 [ 1991.086961][T27812] ? __pfx___netdev_upper_dev_unlink+0x10/0x10 [ 1991.086980][T27812] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1991.087005][T27812] ? netdev_upper_dev_unlink+0x99/0xe0 [ 1991.087020][T27812] ? __pfx_netdev_upper_dev_unlink+0x10/0x10 [ 1991.087036][T27812] ? macvlan_dellink+0x3e2/0x470 [ 1991.087054][T27812] rtnl_newlink_create+0x84b/0xb70 [ 1991.087073][T27812] ? __pfx___nla_validate_parse+0x10/0x10 [ 1991.087093][T27812] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1991.087111][T27812] ? __pfx___mutex_lock+0x10/0x10 [ 1991.087146][T27812] ? ns_capable+0x89/0xe0 [ 1991.087171][T27812] rtnl_newlink+0x1666/0x1be0 [ 1991.087190][T27812] ? __pfx_rtnl_newlink+0x10/0x10 [ 1991.087204][T27812] ? do_fast_syscall_32+0x33/0x70 [ 1991.087223][T27812] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1991.087253][T27812] ? kasan_quarantine_put+0xbb/0x1f0 [ 1991.087271][T27812] ? lockdep_hardirqs_on+0x7a/0x110 [ 1991.087290][T27812] ? kmem_cache_free+0x187/0x630 [ 1991.087308][T27812] ? nlmon_xmit+0xb0/0x100 [ 1991.087329][T27812] ? __lock_acquire+0x6b5/0x2cf0 [ 1991.087351][T27812] ? __local_bh_enable_ip+0xd0/0x130 [ 1991.087372][T27812] ? lockdep_hardirqs_on+0x7a/0x110 [ 1991.087389][T27812] ? __dev_queue_xmit+0x277/0x3890 [ 1991.087408][T27812] ? __local_bh_enable_ip+0xd0/0x130 [ 1991.087427][T27812] ? __dev_queue_xmit+0x277/0x3890 [ 1991.087454][T27812] ? __pfx_rtnl_newlink+0x10/0x10 [ 1991.087468][T27812] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1991.087494][T27812] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1991.087517][T27812] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1991.087541][T27812] ? ref_tracker_free+0x693/0x840 [ 1991.087565][T27812] ? __copy_skb_header+0xa3/0x4a0 [ 1991.087592][T27812] ? __pfx_ref_tracker_free+0x10/0x10 [ 1991.087619][T27812] netlink_rcv_skb+0x232/0x4b0 [ 1991.087644][T27812] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1991.087670][T27812] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1991.087697][T27812] ? netlink_deliver_tap+0x2e/0x1b0 [ 1991.087733][T27812] netlink_unicast+0x80f/0x9b0 [ 1991.087758][T27812] ? __pfx_netlink_unicast+0x10/0x10 [ 1991.087780][T27812] ? netlink_sendmsg+0x650/0xb40 [ 1991.087794][T27812] ? skb_put+0x11b/0x210 [ 1991.087811][T27812] netlink_sendmsg+0x813/0xb40 [ 1991.087828][T27812] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1991.087843][T27812] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1991.087867][T27812] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1991.087887][T27812] ____sys_sendmsg+0x972/0x9f0 [ 1991.087909][T27812] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1991.087931][T27812] ___sys_sendmsg+0x2a5/0x360 [ 1991.087951][T27812] ? __pfx____sys_sendmsg+0x10/0x10 [ 1991.087971][T27812] ? futex_wait+0x29a/0x380 [ 1991.088002][T27812] ? __fget_files+0x2a/0x420 [ 1991.088026][T27812] ? __fget_files+0x3a0/0x420 [ 1991.088052][T27812] __sys_sendmsg+0x183/0x260 [ 1991.088070][T27812] ? __pfx___sys_sendmsg+0x10/0x10 [ 1991.088096][T27812] __do_fast_syscall_32+0x20d/0x640 [ 1991.088116][T27812] ? lockdep_hardirqs_on+0x7a/0x110 [ 1991.088134][T27812] ? do_fast_syscall_32+0x33/0x70 [ 1991.088152][T27812] ? irqentry_exit+0x10e/0x620 [ 1991.088169][T27812] ? trace_irq_disable+0x3b/0x150 [ 1991.088195][T27812] do_fast_syscall_32+0x33/0x70 [ 1991.088214][T27812] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1991.088234][T27812] RIP: 0023:0xf707ef6c [ 1991.088249][T27812] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1991.088265][T27812] RSP: 002b:00000000f542b50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1991.088284][T27812] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000000 [ 1991.088297][T27812] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1991.088307][T27812] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1991.088317][T27812] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1991.088328][T27812] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1991.088344][T27812] [ 1992.112319][T23643] usb 3-1: device descriptor read/all, error -71