last executing test programs: 25m34.592609719s ago: executing program 2 (id=3617): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000180)={{&(0x7f0000a92000/0x2000)=nil, 0x2000}, 0x1}) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f00000000c0)="010000000600275eaea4ca5826d8f50ee7f9ff0000006bb57ae0fffc5aadff07000088d18ee9cb1a75d14ff5cf5ad0ca816f40a8333c3532a19673b6dab6301fd45fb0393b6c91a6449faf9de0d0f990dbac85a3b278a5463e299aabc5b97b20e57a6bcb82dfe970afdaab4a", 0x6c, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmmsg(r5, &(0x7f0000007080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=ANY=[], 0xc}}], 0x1, 0x4000810) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x82, 0x9}, 0x18) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000580)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f0000000040)={r9, 0x2, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_RMFB(r7, 0xc00464af, &(0x7f0000000240)=r9) ioctl$SNDCTL_SYNTH_ID(r7, 0xc08c5114, &(0x7f00000002c0)={"e5c471ee395784846345a23ed58b0957ba9ce69597b3b54e4706d0fa305e", 0x5, 0x0, 0x401, 0x8, 0x8c, 0x8000, 0x0, 0x1, [0xc, 0x80, 0x2, 0x0, 0x2005, 0x200, 0x8, 0x7f, 0xffffffff, 0x6, 0x8818, 0x0, 0x6, 0x9, 0x0, 0x28000, 0x2, 0x2, 0x2]}) r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r10, 0x5b24, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x7c, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r2, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @gre={{0x8}, {0x48, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_GRE_IKEY={0x8}, @IFLA_GRE_FWMARK={0x8, 0x14, 0xfffff2d0}, @IFLA_GRE_IKEY={0x8, 0x4, 0x1b52}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_OKEY={0x8, 0x5, 0x6}, @IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x7c}, 0x1, 0x0, 0x0, 0x48890}, 0x4000800) 25m31.303922762s ago: executing program 2 (id=3643): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f00000029c0), 0x400006d, 0x20000004) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000040), &(0x7f0000000080)=0x4) 25m30.721336495s ago: executing program 2 (id=3644): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) (async) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) prctl$PR_SCHED_CORE(0x2f, 0x1, 0x0, 0x2, 0x0) io_uring_setup(0x1631, &(0x7f0000000100)={0x0, 0xd7fe, 0x0, 0x1, 0x3a}) (async) io_uring_setup(0x1631, &(0x7f0000000100)={0x0, 0xd7fe, 0x0, 0x1, 0x3a}) io_uring_enter(0xffffffffffffffff, 0x79a5, 0x2, 0x46, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x14) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x14) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) ioctl$KVM_RUN(r5, 0xae80, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/8, 0x8}, 0x2000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000380)="c4e255dec96665673e360df17900000fc73066b9290b000066b89c87000066ba000000000f3066b9800000c00f326635004000000f301764656764660f6fc60f79917f00ba2000edbaf80c66b8dcd0568a66efbafc0cb80affef", 0x5a}], 0x1, 0x44, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000380)="c4e255dec96665673e360df17900000fc73066b9290b000066b89c87000066ba000000000f3066b9800000c00f326635004000000f301764656764660f6fc60f79917f00ba2000edbaf80c66b8dcd0568a66efbafc0cb80affef", 0x5a}], 0x1, 0x44, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x800000002, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x2b, 0x3, 0x1) (async) socket(0x2b, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 25m29.488082592s ago: executing program 2 (id=3654): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4009}, 0x0) recvmsg(r0, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x2000) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0xac}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000480)=""/92, 0x5c}, {&(0x7f0000003200)=""/4111, 0x100f}, {&(0x7f0000001680)=""/114, 0x72}, {&(0x7f0000000040)=""/65, 0x41}, {&(0x7f00000005c0)=""/45, 0x2d}], 0x5}, 0x9}, {{0x0, 0x0, 0x0}, 0xd3a9}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x496d}, {{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, 0x0}, 0xa9e5}], 0x9, 0x2000, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000007100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000002140)={0x50, 0x0, r4, {0x7, 0x2b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80}}, 0x50) read$FUSE(r2, &(0x7f000000cdc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r5}, 0x10) syz_fuse_handle_req(r2, &(0x7f0000004940)="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", 0x2000, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x3c}}) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f0000000180)) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) r7 = openat$dir(0xffffff9c, &(0x7f00000000c0)='./file0\x00', 0x204280, 0x40) statx(r7, &(0x7f0000000100)='./file0\x00', 0x6000, 0x20, &(0x7f0000000240)) close(0x3) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r8, 0x4601, &(0x7f0000000940)={0x60, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {0x3}}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000080)=[@in={0x2, 0x4e23, @local}]}, &(0x7f0000000140)=0xffffffffffffffb3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r9, @in={{0x2, 0xce23, @dev={0xac, 0x14, 0x14, 0x3a}}}}, &(0x7f0000000040)=0x84) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) ptrace$peeksig(0x4212, r10, &(0x7f0000000140), 0x0) bpf$BPF_GET_PROG_INFO(0x3, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0}, 0x10) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) 25m29.253304307s ago: executing program 2 (id=3656): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x8003}, 0x4) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x3b}, 0x1c) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) (fail_nth: 1) 25m28.859673839s ago: executing program 2 (id=3659): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0xb27, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0\x00') sendto(r0, &(0x7f0000000740)='P', 0x1, 0x4008044, 0x0, 0x0) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0xffffffff, 0x4880) 25m28.052994748s ago: executing program 32 (id=3659): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0xb27, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0\x00') sendto(r0, &(0x7f0000000740)='P', 0x1, 0x4008044, 0x0, 0x0) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0xffffffff, 0x4880) 1m21.055099716s ago: executing program 5 (id=8682): socket$nl_generic(0x10, 0x3, 0x10) sched_setattr(0x0, 0x0, 0x0) socket(0x2, 0x2, 0x1) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000280)={0xa1, 0x5, 0x802, 0xfffe, 0x0, 0x4, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040844) connect$unix(r0, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r4, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)="5338a3848b25e258a25f9dae13ed", 0xe}], 0x1}}], 0x1, 0x20008000) recvmsg(r4, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380), 0x5c}, 0x123) getpgid(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0100001000130426bd700040000000ac1414bb0000000000663f24a21696b516530e05cd2013f51b00000000000000ac1e010100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141422000000000000000000000000000004d43200000000000000000000000000ffffe000000100080000000000007d0100000000000000000000000000000400000000004000ffffffffffffffff06000000000000007f0000000000000002000000000000000000000000000000fd2100000000000004000000000000000400000000000000f6004000040000000800000000000000ff340000020001be330000004c001200726663343330392863636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000"], 0x13c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000804) creat(0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) 1m19.514095065s ago: executing program 5 (id=8684): r0 = socket$nl_generic(0x10, 0x3, 0x10) sched_setattr(0x0, 0x0, 0x0) socket(0x2, 0x2, 0x1) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000280)={0xa1, 0x5, 0x802, 0xfffe, 0x0, 0x4, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040844) connect$unix(r1, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)="5338a3848b25e258a25f9dae13ed", 0xe}], 0x1}}], 0x1, 0x20008000) recvmsg(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380), 0x5c}, 0x123) shutdown(0xffffffffffffffff, 0x1) getpgid(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0100001000130426bd700040000000ac1414bb0000000000663f24a21696b516530e05cd2013f51b00000000000000ac1e010100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141422000000000000000000000000000004d43200000000000000000000000000ffffe000000100080000000000007d0100000000000000000000000000000400000000004000ffffffffffffffff06000000000000007f0000000000000002000000000000000000000000000000fd2100000000000004000000000000000400000000000000f6004000040000000800000000000000ff340000020001be330000004c001200726663343330392863636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000"], 0x13c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000804) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x64, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "9ea2d328893918792a5ca222a6ad614b6f3aa3a6af1f106ddbf56004"}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 1m17.589642267s ago: executing program 5 (id=8688): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101e040031000022000001090224000100000000090400000103000000092100000001220500090581030002"], 0x0) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x14, 0xe, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x44000) syz_usb_control_io(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x20301, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000080)=0x10000) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="d80000001e0081054e81f782dbe8abd22d267e8e1c007c09e8fe08a104000e800a00142603600e1208000fc01e000402a80016c008000e400400027c035c0461c1d67f6f94007134cff6d26efb8000a0ffa290457f0189c129f509c1c9d8c87017eeadc9c809b316277ce06bba0000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccce9500360db7e5167fda40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x40400) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x0, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3f}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8", 0x21}], 0x1}, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000400)='\x00\x00') 1m14.193568436s ago: executing program 5 (id=8698): r0 = socket$nl_generic(0x10, 0x3, 0x10) sched_setattr(0x0, 0x0, 0x0) socket(0x2, 0x2, 0x1) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000280)={0xa1, 0x5, 0x802, 0xfffe, 0x0, 0x4, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040844) connect$unix(r1, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r4, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)="5338a3848b25e258a25f9dae13ed", 0xe}], 0x1}}], 0x1, 0x20008000) recvmsg(r4, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380), 0x5c}, 0x123) shutdown(r4, 0x1) getpgid(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0100001000130426bd700040000000ac1414bb0000000000663f24a21696b516530e05cd2013f51b00000000000000ac1e010100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141422000000000000000000000000000004d43200000000000000000000000000ffffe000000100080000000000007d0100000000000000000000000000000400000000004000ffffffffffffffff06000000000000007f0000000000000002000000000000000000000000000000fd2100000000000004000000000000000400000000000000f6004000040000000800000000000000ff340000020001be330000004c001200726663343330392863636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000"], 0x13c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000804) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x64, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "9ea2d328893918792a5ca222a6ad614b6f3aa3a6af1f106ddbf56004"}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 1m12.607616523s ago: executing program 5 (id=8701): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20040010) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000000300)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x388, 0x1b4, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2c0, 0x20a, 0x278, 0x2c0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [0x0, 0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x190, 0x1b4, 0x0, {}, [@common=@inet=@tcp={{0x2c}, {[], [0x0, 0xffff], 0x0, 0x0, 0x2, 0xe}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3e4) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r5 = syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x103901) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000040)={0x80, 0x8, 0x7ff, 0x0, 0x0, 0xf421, 0x0}) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') r6 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000034000)={0x3, {{0xa, 0x1, 0x3, @mcast2, 0x10000000}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f00000003c0)={0x2, {{0xa, 0x0, 0x0, @mcast1, 0xb}}}, 0x88) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000180)={0x4, {{0xa, 0x4e24, 0x3, @mcast1, 0x5}}, {{0xa, 0x4e21, 0x8b5f, @private1={0xfc, 0x1, '\x00', 0x1}, 0xe57}}}, 0x108) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="0100000000000000000001000000140002007767300000000000000000000000000004000880"], 0x2c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m11.38283332s ago: executing program 5 (id=8704): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000000)=0x1, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x16, 0x25c, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, 0x0, 0x0) timer_gettime(0x0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e74000905780b7f0000100109050b96dd16"], 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000d10ffc)=0x775, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs={0x1}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000f00)=[{{&(0x7f0000000580)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000e00)=[{&(0x7f0000000d40)="8b55a733122418919e67dae8fea7a05ac249d1a5364c92f2bdc84f8a1ef58a249e4f1b9a94a5887ef01b4aac389be555f72efbc88ae4e4424962ac42b3c39ccc975419747f43cc6bfc3c735986af59e6ee9619e291a1fa23f3031d9301af1a9964b11e07264e7cc480262ecd5c68f754317b46ffd515b8a7851bd9552219d5eebfe67461f3a40ff594455c8d91", 0x8d}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="000001000008000708000000", @ANYRES32=r4, @ANYRES32=r0, @ANYBLOB="1c0000000100000001000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r4], 0x30, 0x80}}], 0x1, 0x40) recvmmsg(r3, &(0x7f0000000180)=[{{&(0x7f0000000840)=@rc={0x1f, @none}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/171, 0xa4}, {&(0x7f0000000f40)=""/224, 0xe0}, {&(0x7f0000000200)=""/123, 0x70}, {&(0x7f00000002c0)=""/157, 0x9d}, {&(0x7f00000008c0)=""/175, 0xa3}, {&(0x7f0000000c00)=""/194, 0xc2}], 0x2f, &(0x7f0000001040)=""/253, 0xfffffffffffffdb1}, 0x7}], 0x1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') lseek(r6, 0x36, 0x1) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x8002) ioctl$KVM_SET_NESTED_STATE(r6, 0x4048aecb, &(0x7f0000001440)) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = openat$vim2m(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r9, 0xc0f8565c, &(0x7f0000000080)={0xffff, 0x7, 0x1, {0x2, @raw_data="403639da854cfbde6d2ae07397a5c03ac2bb94d0c9036eecc9344b5f4374cda4ca3f484ed1462fe95c278a0119608fe907d8f3b1c29d0e95846eca86e28f7a3b91a045b39764f6e0d2adceef996d0ab5178602cea7f988f0f5ee0a7d212ab114821ed2cb3dc2ce01206630f36e2054fd5743072977ceb840a62e8c94d0dfdc43ddd7726fe6d782ce1515bc8550d184a442fca48b65629b9a15c21992d995a7aad748517bdf2ce288be001d5bd46075692814a3e45b5ce21b169edfd52ea3c1a477716153451d0e5e"}, 0x949}) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB="28010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a0002007000000014000e00fe8000000000000000000000000000bb24000900b4000000000000000100000000000080b4000000000000000500000000000000aedc6e5c386a00"/226], 0x128}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 55.806485998s ago: executing program 33 (id=8704): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000000)=0x1, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x16, 0x25c, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, 0x0, 0x0) timer_gettime(0x0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e74000905780b7f0000100109050b96dd16"], 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000d10ffc)=0x775, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs={0x1}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000f00)=[{{&(0x7f0000000580)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000e00)=[{&(0x7f0000000d40)="8b55a733122418919e67dae8fea7a05ac249d1a5364c92f2bdc84f8a1ef58a249e4f1b9a94a5887ef01b4aac389be555f72efbc88ae4e4424962ac42b3c39ccc975419747f43cc6bfc3c735986af59e6ee9619e291a1fa23f3031d9301af1a9964b11e07264e7cc480262ecd5c68f754317b46ffd515b8a7851bd9552219d5eebfe67461f3a40ff594455c8d91", 0x8d}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="000001000008000708000000", @ANYRES32=r4, @ANYRES32=r0, @ANYBLOB="1c0000000100000001000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r4], 0x30, 0x80}}], 0x1, 0x40) recvmmsg(r3, &(0x7f0000000180)=[{{&(0x7f0000000840)=@rc={0x1f, @none}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/171, 0xa4}, {&(0x7f0000000f40)=""/224, 0xe0}, {&(0x7f0000000200)=""/123, 0x70}, {&(0x7f00000002c0)=""/157, 0x9d}, {&(0x7f00000008c0)=""/175, 0xa3}, {&(0x7f0000000c00)=""/194, 0xc2}], 0x2f, &(0x7f0000001040)=""/253, 0xfffffffffffffdb1}, 0x7}], 0x1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') lseek(r6, 0x36, 0x1) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x8002) ioctl$KVM_SET_NESTED_STATE(r6, 0x4048aecb, &(0x7f0000001440)) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = openat$vim2m(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r9, 0xc0f8565c, &(0x7f0000000080)={0xffff, 0x7, 0x1, {0x2, @raw_data="403639da854cfbde6d2ae07397a5c03ac2bb94d0c9036eecc9344b5f4374cda4ca3f484ed1462fe95c278a0119608fe907d8f3b1c29d0e95846eca86e28f7a3b91a045b39764f6e0d2adceef996d0ab5178602cea7f988f0f5ee0a7d212ab114821ed2cb3dc2ce01206630f36e2054fd5743072977ceb840a62e8c94d0dfdc43ddd7726fe6d782ce1515bc8550d184a442fca48b65629b9a15c21992d995a7aad748517bdf2ce288be001d5bd46075692814a3e45b5ce21b169edfd52ea3c1a477716153451d0e5e"}, 0x949}) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB="28010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a0002007000000014000e00fe8000000000000000000000000000bb24000900b4000000000000000100000000000080b4000000000000000500000000000000aedc6e5c386a00"/226], 0x128}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 13.127828523s ago: executing program 0 (id=8851): r0 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0xf8, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x44, 0x6, "443927cd512cf78e0961e61da5a4c3d09b979b53746da93a0be0848bc7b20abc5c9d9ef860aff21dd6c25af74f19ed390db536e069a69d9896f5b2203a001bac"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xfffffffffffffe3d, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0x49, 0x6, "3bd381147315748487c909ed410419bf8a4e6cd889027c8c3cbb5653150f4e18c1daa87badcf46da40f3df0b5248e3a368bb10227b389adb74b9718a9753b15ca091595d96"}]}, @NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x36}, @NFTA_SET_EXPR={0x30, 0x11, 0x0, 0x1, @fwd={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}], {0x14, 0x10}}, 0x18c}, 0x1, 0x0, 0x0, 0x40011}, 0x20000800) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0xa, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x40}}, 0x4000) r2 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r3, 0xc0045009, 0x0) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x43, &(0x7f0000000340)={{{@in6=@local, @in6=@private0, 0x4e23, 0x403, 0x800, 0x0, 0x0, 0x80, 0x20}, {0x1, 0x0, 0x0, 0x6cc, 0xffffffffffffffa4, 0x1000}, {0x0, 0x0, 0x0, 0x7}, 0x7, 0xfffffffd, 0x0, 0x1, 0x1, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0xff}, 0x2, @in=@private=0xa010102, 0x0, 0x0, 0x1, 0x0, 0x0, 0x93}}, 0xe8) 11.675533304s ago: executing program 1 (id=8855): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r1 = dup(0xffffffffffffffff) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x5, 0x1801) ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) write$sndseq(r5, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) ioctl$SNDCTL_DSP_RESET(r3, 0x5000, 0x0) write$binfmt_script(r1, &(0x7f0000000140)={'#! ', './file0'}, 0xb) add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e466173af4c775f238fae344b198915446b576be455f251e79f7ec703f937cd8530410f3700000000000000", 0x90, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000380)=""/131, 0x83}], 0x1, 0x80000001, 0x3) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_SREGS2(r7, 0x4140aecd, &(0x7f0000000300)={{0x10000, 0x8000000, 0x8, 0xf, 0x80, 0x80, 0x7, 0x1, 0x40, 0x2, 0x4, 0x8}, {0x30000, 0x54000, 0xd, 0xf, 0x80, 0x5, 0x10, 0xe9, 0x2, 0x2, 0x2, 0x3}, {0x80a0000, 0x58000, 0x10, 0x8, 0x0, 0x5b, 0x80, 0x0, 0x4, 0xf, 0x2, 0x3}, {0xc000, 0x0, 0xa, 0x5, 0x80, 0x9, 0xfb, 0x10, 0xc6, 0x0, 0x12, 0x6}, {0xdddd0000, 0x54000, 0x0, 0x9, 0x99, 0x7, 0x3, 0x3, 0x7, 0x2, 0x32, 0x5}, {0x26000, 0x50000, 0x4, 0x0, 0x7, 0x3, 0x3, 0x2, 0x1, 0x2c, 0xd, 0x2}, {0x10000, 0xc000, 0x1b, 0x4, 0x7, 0x4, 0x8, 0x40, 0xc, 0x8, 0x2, 0xc7}, {0xeeef0000, 0xe000, 0x3, 0x6, 0x7, 0xfa, 0x3, 0x8, 0x35, 0x3c, 0x7, 0x2}, {0x0, 0x72}, {0x10000, 0x5}, 0x1, 0x0, 0x26000, 0x22000, 0xc, 0x0, 0x10000, 0x1, [0x7, 0xfffffffffffffff9, 0x401, 0x4]}) 10.045293516s ago: executing program 6 (id=8862): socket$nl_generic(0x10, 0x3, 0x10) sched_setattr(0x0, 0x0, 0x0) socket(0x2, 0x2, 0x1) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000280)={0xa1, 0x5, 0x802, 0xfffe, 0x0, 0x4, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040844) connect$unix(r0, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r4, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)="5338a3848b25e258a25f9dae13ed", 0xe}], 0x1}}], 0x1, 0x20008000) recvmsg(r4, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380), 0x5c}, 0x123) shutdown(r4, 0x1) getpgid(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0100001000130426bd700040000000ac1414bb0000000000663f24a21696b516530e05cd2013f51b00000000000000ac1e010100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141422000000000000000000000000000004d43200000000000000000000000000ffffe000000100080000000000007d0100000000000000000000000000000400000000004000ffffffffffffffff06000000000000007f0000000000000002000000000000000000000000000000fd2100000000000004000000000000000400000000000000f6004000040000000800000000000000ff340000020001be330000004c001200726663343330392863636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000"], 0x13c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000804) creat(0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) 9.99616913s ago: executing program 0 (id=8863): socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x325000, 0x800}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.empty_time\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) pipe(&(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 9.957325214s ago: executing program 3 (id=8864): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x60000, 0x9000}) socket$xdp(0x2c, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x11) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0xa1300) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet(r5, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) connect$inet(r5, &(0x7f0000000740)={0x2, 0x4e24, @local}, 0x10) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r6, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3}, 0xb2a1}) write$sndseq(r7, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e466173af4c775f238fae344b198915446b576be455f251e79f", 0x7e, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) 9.481474873s ago: executing program 0 (id=8865): r0 = socket$nl_generic(0x10, 0x3, 0x10) sched_setattr(0x0, 0x0, 0x0) socket(0x2, 0x2, 0x1) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000280)={0xa1, 0x5, 0x802, 0xfffe, 0x0, 0x4, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040844) connect$unix(r1, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) recvmsg(r5, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380), 0x5c}, 0x123) shutdown(r5, 0x1) getpgid(0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0100001000130426bd700040000000ac1414bb0000000000663f24a21696b516530e05cd2013f51b00000000000000ac1e010100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141422000000000000000000000000000004d43200000000000000000000000000ffffe000000100080000000000007d0100000000000000000000000000000400000000004000ffffffffffffffff06000000000000007f0000000000000002000000000000000000000000000000fd2100000000000004000000000000000400000000000000f6004000040000000800000000000000ff340000020001be330000004c001200726663343330392863636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000"], 0x13c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000804) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x64, r6, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "9ea2d328893918792a5ca222a6ad614b6f3aa3a6af1f106ddbf56004"}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 7.89408157s ago: executing program 3 (id=8867): setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a00001ffc0020", 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122e", 0x3d, 0xfffffffffffffffe) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)={0x30, 0x40, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x5, 0x17, 0x0, 0x1, [@generic="b0"]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x97}, [@ldst={0x6, 0x2, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r5, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={0x0, 0xfffffffffffffea8, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000050}, 0x24000040) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xe0}}, 0x0) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)={0x14, 0x7, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x20004840}, 0x20008000) recvmmsg(r6, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r7, 0x0, 0x14, &(0x7f0000000000)=0x109, 0x4) listen(r7, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x3, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x7fff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x17}, 0x2000401c) 7.862784137s ago: executing program 1 (id=8877): r0 = socket$nl_generic(0x10, 0x3, 0x10) sched_setattr(0x0, 0x0, 0x0) socket(0x2, 0x2, 0x1) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000280)={0xa1, 0x5, 0x802, 0xfffe, 0x0, 0x4, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040844) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r5, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)="5338a3848b25e258a25f9dae13ed", 0xe}], 0x1}}], 0x1, 0x20008000) recvmsg(r5, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380), 0x5c}, 0x123) shutdown(r5, 0x1) getpgid(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0100001000130426bd700040000000ac1414bb0000000000663f24a21696b516530e05cd2013f51b00000000000000ac1e010100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141422000000000000000000000000000004d43200000000000000000000000000ffffe000000100080000000000007d0100000000000000000000000000000400000000004000ffffffffffffffff06000000000000007f0000000000000002000000000000000000000000000000fd2100000000000004000000000000000400000000000000f6004000040000000800000000000000ff340000020001be330000004c001200726663343330392863636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000"], 0x13c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000804) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x64, r6, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "9ea2d328893918792a5ca222a6ad614b6f3aa3a6af1f106ddbf56004"}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 7.818714268s ago: executing program 6 (id=8868): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f0000000180)) 7.63672529s ago: executing program 0 (id=8869): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000040)=0x100005, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0xb05, 0x1869, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x100, 0x7, "", [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000100)=@string={0x2}}, {0x88, &(0x7f0000000180)=@string={0x88, 0x3, "85f7ec1222356b53d5c8e881b1ddd18a83682022f5b052dee1ceea9de68495be0b71342c0a8922402751af840bb2d4876cf4ffb1ca7de0d42cbb771dd0fcf77536f463ef353492acc0726b33131aaf9b295f7e4dffdbd6be2cbbf69096975d60c2e2b68f445112654f54a762915787779019fa72cd735f2e90fe87520cad1e84e5da57d900dd"}}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, 0x1, 0x4, 0x301, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFULA_CFG_MODE={0xa, 0x2, {0xa, 0x1}}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x50) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x80000001, 0x4, 0x32, 0x0, 0xff}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x80}}, 0x0, 0x8, 0x0, 0x0, 0x8a}, 0x9c) socket$unix(0x1, 0x1, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_PANIC(r4, 0x5100) sendto$inet6(r2, &(0x7f0000000080)='8', 0x1, 0x65055, &(0x7f0000000340)={0xa, 0x4e20, 0x5, @local, 0x7}, 0x1c) r5 = socket$unix(0x1, 0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/pid_for_children\x00') r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000000)=0x8000, 0x4) socket$packet(0x11, 0x3, 0x300) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x7c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x44, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xe, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9}}]}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x7c}, 0x1, 0x0, 0x0, 0x600}, 0x0) getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f0000000180)) 7.343497827s ago: executing program 6 (id=8870): setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a00001ffc0020", 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000300)=ANY=[], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122e", 0x3d, 0xfffffffffffffffe) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)={0x30, 0x40, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x5, 0x17, 0x0, 0x1, [@generic="b0"]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x97}, [@ldst={0x6, 0x2, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r5, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={0x0, 0xfffffffffffffea8, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000050}, 0x24000040) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xe0}}, 0x0) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)={0x14, 0x7, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x20004840}, 0x20008000) recvmmsg(r6, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r7, 0x0, 0x14, &(0x7f0000000000)=0x109, 0x4) listen(r7, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x3, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x7fff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x17}, 0x2000401c) 7.215221481s ago: executing program 4 (id=8872): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd16", 0x8}], 0x2, &(0x7f00000003c0)=[@assoc={0x18, 0x117, 0x4, 0x8}], 0x18, 0x28044854}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001700)}, 0x0) 7.079044223s ago: executing program 4 (id=8873): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x1e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000240)=@mmap={0x5, 0x2, 0x4, 0x100000, 0x9, {}, {0x3, 0x0, 0x4, 0xc0, 0x0, 0xf0, "9880860b"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000040)=0x1) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xb40, 0x870, 0x1, 0x2, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x5, 0x2800, 0x9, 0x2, 0xba2, 0xc, 0x30, {0x8, 0x1}, 0xd0, 0x9}}) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000340)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r6, 0x0, 0x31, &(0x7f0000007180), 0x3) openat$sequencer(0xffffff9c, &(0x7f0000000180), 0x181102, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000040)={@empty, @random="6a2ddcf6177a", @val={@val={0x88a8, 0x3, 0x0, 0x3}, {0x8100, 0x1, 0x1, 0x1}}, {@ipv4={0x8864, @udp={{0x5, 0x4, 0x3, 0x1, 0x24, 0x68, 0x57, 0x6, 0x11, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x4e20, 0x4e21, 0x10, 0x0, @gue={{0x2, 0x1, 0x0, 0x2, 0x100, @val=0x80}}}}}}}, 0x0) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000084c000/0x3000)=nil) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000080)=0x2) 6.07883968s ago: executing program 3 (id=8874): socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x4000, &(0x7f0000000400)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r1) pselect6(0x40, &(0x7f0000000600)={0x11, 0xff7ffffffffffffc, 0x2, 0xffffffffffffffff, 0xfffffffffffffffe, 0x9, 0xfff, 0xa}, 0x0, &(0x7f0000000400)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0x1}, 0x0, 0x0) 5.721622183s ago: executing program 4 (id=8875): socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x325000, 0x800}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.empty_time\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) pipe(0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 5.715066587s ago: executing program 1 (id=8876): socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x448000, 0x0) restart_syscall() r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000002c00ef5f"], 0x14}, 0x1, 0x0, 0x0, 0x20048081}, 0x800) recvmsg(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x12000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$netlink(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000002e00090027bd7000000000000400000004dd18000800170002000000"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x4000000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, 0x0, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) syz_pidfd_open(0x0, 0x0) migrate_pages(0x0, 0xff08, &(0x7f00000000c0)=0x7ff, &(0x7f0000000140)=0x100000000) 5.352712918s ago: executing program 6 (id=8878): socket$nl_generic(0x10, 0x3, 0x10) sched_setattr(0x0, 0x0, 0x0) socket(0x2, 0x2, 0x1) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000280)={0xa1, 0x5, 0x802, 0xfffe, 0x0, 0x4, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040844) connect$unix(r0, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)="5338a3848b25e258a25f9dae13ed", 0xe}], 0x1}}], 0x1, 0x20008000) recvmsg(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380), 0x5c}, 0x123) shutdown(0xffffffffffffffff, 0x1) getpgid(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0100001000130426bd700040000000ac1414bb0000000000663f24a21696b516530e05cd2013f51b00000000000000ac1e010100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141422000000000000000000000000000004d43200000000000000000000000000ffffe000000100080000000000007d0100000000000000000000000000000400000000004000ffffffffffffffff06000000000000007f0000000000000002000000000000000000000000000000fd2100000000000004000000000000000400000000000000f6004000040000000800000000000000ff340000020001be330000004c001200726663343330392863636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000"], 0x13c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000804) creat(0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) 5.237581246s ago: executing program 4 (id=8879): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x1e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000080)=0x2) 4.617524128s ago: executing program 3 (id=8880): socket$nl_generic(0x10, 0x3, 0x10) sched_setattr(0x0, 0x0, 0x0) socket(0x2, 0x2, 0x1) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000280)={0xa1, 0x5, 0x802, 0xfffe, 0x0, 0x4, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040844) connect$unix(r0, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r4, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)="5338a3848b25e258a25f9dae13ed", 0xe}], 0x1}}], 0x1, 0x20008000) recvmsg(r4, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380), 0x5c}, 0x123) shutdown(r4, 0x1) getpgid(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0100001000130426bd700040000000ac1414bb0000000000663f24a21696b516530e05cd2013f51b00000000000000ac1e010100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141422000000000000000000000000000004d43200000000000000000000000000ffffe000000100080000000000007d0100000000000000000000000000000400000000004000ffffffffffffffff06000000000000007f0000000000000002000000000000000000000000000000fd2100000000000004000000000000000400000000000000f6004000040000000800000000000000ff340000020001be330000004c001200726663343330392863636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000"], 0x13c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000804) creat(0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) 3.644156449s ago: executing program 6 (id=8881): r0 = socket$nl_generic(0x10, 0x3, 0x10) sched_setattr(0x0, 0x0, 0x0) socket(0x2, 0x2, 0x1) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000280)={0xa1, 0x5, 0x802, 0xfffe, 0x0, 0x4, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040844) connect$unix(r1, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) recvmsg(r5, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380), 0x5c}, 0x123) shutdown(r5, 0x1) getpgid(0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0100001000130426bd700040000000ac1414bb0000000000663f24a21696b516530e05cd2013f51b00000000000000ac1e010100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141422000000000000000000000000000004d43200000000000000000000000000ffffe000000100080000000000007d0100000000000000000000000000000400000000004000ffffffffffffffff06000000000000007f0000000000000002000000000000000000000000000000fd2100000000000004000000000000000400000000000000f6004000040000000800000000000000ff340000020001be330000004c001200726663343330392863636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000"], 0x13c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000804) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x64, r6, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "9ea2d328893918792a5ca222a6ad614b6f3aa3a6af1f106ddbf56004"}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 3.626867753s ago: executing program 0 (id=8891): socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x448000, 0x0) restart_syscall() r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000002c00ef5f"], 0x14}, 0x1, 0x0, 0x0, 0x20048081}, 0x800) recvmsg(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x12000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$netlink(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000002e00090027bd7000000000000400000004dd18000800170002000000"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x4000000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, 0x0, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) syz_pidfd_open(0x0, 0x0) migrate_pages(0x0, 0xff08, &(0x7f00000000c0)=0x7ff, &(0x7f0000000140)=0x100000000) 3.624333729s ago: executing program 1 (id=8882): r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x3) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000000)) syz_io_uring_submit(0x0, r4, 0x0, &(0x7f0000000000)) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r6 = socket$inet(0x2, 0x2, 0x73) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000006910a40000000000bf001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xa6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000f5c80)={0x2, [], 0x64, "c2c4188dedff3f"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r6, 0xd000943d, &(0x7f00000f6c80)={0xd6, [], 0xf9, "6863c7aab22ec6"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r7, 0x0, 0xe40, 0x0, &(0x7f00000006c0)="ffffffff106c3ed990f77e9eb3cf", 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket(0xa, 0x3, 0xff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='cdg', 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) 2.534981102s ago: executing program 3 (id=8883): setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a00001ffc0020", 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000300)=ANY=[@ANYRESOCT=r0], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122e", 0x3d, 0xfffffffffffffffe) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0xc020) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x97}, [@ldst={0x6, 0x2, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r5, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={0x0, 0xfffffffffffffea8, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000050}, 0x24000040) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xe0}}, 0x0) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)={0x14, 0x7, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x20004840}, 0x20008000) recvmmsg(r6, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r7, 0x0, 0x14, &(0x7f0000000000)=0x109, 0x4) listen(r7, 0x2) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x3, {0x0, 0x0, 0x0, r9, {0x0, 0x3}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x7fff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x17}, 0x2000401c) 2.039667166s ago: executing program 4 (id=8884): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd16", 0x8}], 0x2, &(0x7f00000003c0)=[@assoc={0x18, 0x117, 0x4, 0x8}], 0x18, 0x28044854}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000040)=""/6, 0x6}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x2}, 0x0) 1.802142361s ago: executing program 4 (id=8885): setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a00001ffc0020", 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000300)=ANY=[@ANYRESOCT=r0], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122e", 0x3d, 0xfffffffffffffffe) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0xc020) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x97}, [@ldst={0x6, 0x2, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r5, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={0x0, 0xfffffffffffffea8, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000050}, 0x24000040) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xe0}}, 0x0) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)={0x14, 0x7, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x20004840}, 0x20008000) recvmmsg(r6, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r7, 0x0, 0x14, &(0x7f0000000000)=0x109, 0x4) listen(r7, 0x2) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x3, {0x0, 0x0, 0x0, r9, {0x0, 0x3}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x7fff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x17}, 0x2000401c) 1.484636801s ago: executing program 0 (id=8886): setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a00001ffc0020", 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122e", 0x3d, 0xfffffffffffffffe) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)={0x30, 0x40, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x5, 0x17, 0x0, 0x1, [@generic="b0"]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x97}, [@ldst={0x6, 0x2, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r5, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={0x0, 0xfffffffffffffea8, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000050}, 0x24000040) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xe0}}, 0x0) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)={0x14, 0x7, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x20004840}, 0x20008000) recvmmsg(r6, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r7, 0x0, 0x14, &(0x7f0000000000)=0x109, 0x4) listen(r7, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x3, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x7fff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x17}, 0x2000401c) 1.073564857s ago: executing program 1 (id=8887): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) recvmmsg(r0, &(0x7f0000006280)=[{{&(0x7f0000000640)=@sco, 0x80, &(0x7f0000000900)=[{&(0x7f0000000700)=""/65, 0x41}], 0x1}, 0x3}, {{0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000000fc0)=""/4096, 0x1000}], 0x1}, 0x8}], 0x2, 0x40000140, 0x0) 827.168666ms ago: executing program 6 (id=8888): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000280)=0x4, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000340)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xfffc, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x394}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x40001) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) sendmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4004041) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0xfffffffc) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020ac0537020000000000010902240001000060000904008002030002"], 0x0) 468.910482ms ago: executing program 1 (id=8889): setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a00001ffc0020", 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000300)=ANY=[], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122e", 0x3d, 0xfffffffffffffffe) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)={0x30, 0x40, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x5, 0x17, 0x0, 0x1, [@generic="b0"]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x97}, [@ldst={0x6, 0x2, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r5, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={0x0, 0xfffffffffffffea8, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000050}, 0x24000040) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xe0}}, 0x0) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)={0x14, 0x7, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x20004840}, 0x20008000) recvmmsg(r6, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r7, 0x0, 0x14, &(0x7f0000000000)=0x109, 0x4) listen(r7, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x3, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x7fff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x17}, 0x2000401c) 0s ago: executing program 3 (id=8890): socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x4000, &(0x7f0000000400)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r1) pselect6(0x40, &(0x7f0000000600)={0x11, 0xff7ffffffffffffc, 0x2, 0xffffffffffffffff, 0xfffffffffffffffe, 0x9, 0xfff, 0xa}, 0x0, &(0x7f0000000400)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0x1}, 0x0, 0x0) 0s ago: executing program 0 (id=8896): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd16", 0x8}], 0x2, &(0x7f00000003c0)=[@assoc={0x18, 0x117, 0x4, 0x8}], 0x18, 0x28044854}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000040)=""/6, 0x6}], 0x1}, 0x0) kernel console output (not intermixed with test programs): A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2553.298198][ T6660] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8498'. [ 2553.328813][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 2553.328826][ T29] audit: type=1326 audit(1775777484.189:7997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.0.8500" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 2553.369561][ T29] audit: type=1326 audit(1775777484.219:7998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.0.8500" exe="/root/syz-executor" sig=0 arch=40000003 syscall=300 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 2553.369615][ T29] audit: type=1326 audit(1775777484.219:7999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.0.8500" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 2553.369650][ T29] audit: type=1326 audit(1775777484.229:8000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.0.8500" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 2553.369680][ T29] audit: type=1326 audit(1775777484.229:8001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.0.8500" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 2553.369712][ T29] audit: type=1326 audit(1775777484.229:8002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.0.8500" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 2553.369743][ T29] audit: type=1326 audit(1775777484.229:8003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.0.8500" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 2553.369778][ T29] audit: type=1326 audit(1775777484.229:8004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.0.8500" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 2553.369815][ T29] audit: type=1326 audit(1775777484.229:8005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.0.8500" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 2553.369851][ T29] audit: type=1326 audit(1775777484.229:8006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.0.8500" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 2553.378443][ T6663] openvswitch: netlink: Message has 1 unknown bytes. [ 2553.378468][ T6663] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2554.535355][ T6678] openvswitch: netlink: Message has 1 unknown bytes. [ 2554.542251][ T6678] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2554.671095][T22134] usb 4-1: USB disconnect, device number 122 [ 2555.162710][ T6684] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2555.447971][ T6688] input: syz1 as /devices/virtual/input/input220 [ 2555.752934][T28279] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 2555.816379][ T6700] program syz.1.8510 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2556.082308][T28279] usb 4-1: Using ep0 maxpacket: 8 [ 2556.096608][T28279] usb 4-1: config 218 has too many interfaces: 244, using maximum allowed: 32 [ 2556.106073][T28279] usb 4-1: config 218 has 1 interface, different from the descriptor's value: 244 [ 2556.120017][T28279] usb 4-1: config 218 has no interface number 0 [ 2556.132479][T28279] usb 4-1: config 218 interface 95 altsetting 64 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2556.170286][T28279] usb 4-1: config 218 interface 95 altsetting 64 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2556.289848][T28279] usb 4-1: config 218 interface 95 altsetting 64 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2556.335289][T28279] usb 4-1: config 218 interface 95 has no altsetting 0 [ 2556.367375][T28279] usb 4-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 2556.377324][T28279] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2556.385429][T28279] usb 4-1: Product: syz [ 2556.391335][T28279] usb 4-1: Manufacturer: syz [ 2556.723573][T28279] usb 4-1: SerialNumber: syz [ 2556.901165][ T6713] binder: 6707:6713 ioctl c0306201 0 returned -14 [ 2557.723737][ T6719] openvswitch: netlink: Message has 1 unknown bytes. [ 2557.774578][ T6719] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2557.871866][T22134] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 2558.032051][T22134] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 2558.041447][T22134] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2558.051188][T22134] usb 2-1: Product: syz [ 2558.118899][T28279] usb 4-1: USB disconnect, device number 123 [ 2558.126325][T22134] usb 2-1: Manufacturer: syz [ 2558.131004][T22134] usb 2-1: SerialNumber: syz [ 2558.171774][T30384] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 2558.195314][T22134] usb 2-1: config 0 descriptor?? [ 2558.213830][T22134] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 2558.322044][T30384] usb 6-1: Using ep0 maxpacket: 16 [ 2558.329196][T30384] usb 6-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2558.466000][T30384] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2558.473345][T30384] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 2558.521618][T30384] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2558.569068][T30384] usb 6-1: config 0 descriptor?? [ 2558.595206][ T6729] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2558.614880][T30384] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 2558.974236][T22134] gspca_sunplus: reg_w_riv err -110 [ 2558.979544][T22134] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 2559.043879][T22125] usb 2-1: USB disconnect, device number 21 [ 2559.199092][ T6738] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8521'. [ 2559.467939][ T6745] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8523'. [ 2559.831129][ T6749] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2559.842674][ T6749] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2559.886100][ T6749] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(12) [ 2559.892750][ T6749] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2559.903245][ T6749] vhci_hcd vhci_hcd.0: Device attached [ 2559.969026][ T6752] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2560.040558][ T6749] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2560.055844][ T6749] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2560.296099][T30384] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 2560.361811][T30384] usb 35-3: new full-speed USB device number 14 using vhci_hcd [ 2560.392664][T22140] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 2560.532400][T22140] usb 2-1: device descriptor read/64, error -71 [ 2560.772352][T22140] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 2560.821696][ T6756] FAULT_INJECTION: forcing a failure. [ 2560.821696][ T6756] name failslab, interval 1, probability 0, space 0, times 0 [ 2560.835331][ T6756] CPU: 0 UID: 0 PID: 6756 Comm: syz.4.8526 Tainted: G L syzkaller #0 PREEMPT(full) [ 2560.835351][ T6756] Tainted: [L]=SOFTLOCKUP [ 2560.835356][ T6756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2560.835363][ T6756] Call Trace: [ 2560.835368][ T6756] [ 2560.835374][ T6756] dump_stack_lvl+0xe8/0x150 [ 2560.835394][ T6756] should_fail_ex+0x412/0x560 [ 2560.835413][ T6756] should_failslab+0xa8/0x100 [ 2560.835428][ T6756] ? sctp_get_port_local+0x6f2/0x1730 [ 2560.835442][ T6756] kmem_cache_alloc_noprof+0x87/0x650 [ 2560.835458][ T6756] sctp_get_port_local+0x6f2/0x1730 [ 2560.835477][ T6756] ? __pfx_sctp_get_port_local+0x10/0x10 [ 2560.835491][ T6756] ? sctp_bind_addr_match+0x28b/0x2b0 [ 2560.835504][ T6756] sctp_do_bind+0x4f1/0x9d0 [ 2560.835522][ T6756] sctp_connect_new_asoc+0x270/0x6b0 [ 2560.835537][ T6756] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 2560.835553][ T6756] ? __local_bh_enable_ip+0xd0/0x130 [ 2560.835567][ T6756] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 2560.835580][ T6756] ? security_sctp_bind_connect+0x7e/0x2c0 [ 2560.835596][ T6756] sctp_sendmsg+0x1528/0x2c10 [ 2560.835615][ T6756] ? __pfx_sctp_sendmsg+0x10/0x10 [ 2560.835629][ T6756] ? aa_sk_perm+0x6d5/0x900 [ 2560.835648][ T6756] ? __pfx_aa_sk_perm+0x10/0x10 [ 2560.835664][ T6756] ? sock_rps_record_flow+0x19/0x400 [ 2560.835678][ T6756] ? __pfx_inet_sendmsg+0x10/0x10 [ 2560.835691][ T6756] ? inet_sendmsg+0x2f4/0x370 [ 2560.835704][ T6756] ? __pfx_inet_sendmsg+0x10/0x10 [ 2560.835718][ T6756] __sys_sendto+0x5de/0x710 [ 2560.835732][ T6756] ? __pfx___sys_sendto+0x10/0x10 [ 2560.835754][ T6756] ? fput+0xa0/0xd0 [ 2560.835770][ T6756] ? ksys_write+0x242/0x270 [ 2560.835784][ T6756] __ia32_sys_sendto+0xdd/0x100 [ 2560.835824][ T6756] __do_fast_syscall_32+0x20d/0x640 [ 2560.835840][ T6756] ? do_fast_syscall_32+0x33/0x70 [ 2560.835853][ T6756] ? asm_int80_emulation+0x1a/0x20 [ 2560.835863][ T6756] ? do_int80_emulation+0x274/0x4d0 [ 2560.835876][ T6756] ? trace_irq_disable+0x3b/0x150 [ 2560.835888][ T6756] do_fast_syscall_32+0x33/0x70 [ 2560.835902][ T6756] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2560.835916][ T6756] RIP: 0023:0xf6fdef6c [ 2560.835927][ T6756] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2560.835936][ T6756] RSP: 002b:00000000f53cd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 2560.835949][ T6756] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 2560.835956][ T6756] RDX: 0000000000000001 RSI: 0000000000000051 RDI: 0000000080000080 [ 2560.835963][ T6756] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 2560.835969][ T6756] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2560.835975][ T6756] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2560.835989][ T6756] [ 2561.201867][T22140] usb 2-1: device descriptor read/64, error -71 [ 2561.250670][T22122] usb 6-1: USB disconnect, device number 13 [ 2561.312126][T22140] usb usb2-port1: attempt power cycle [ 2561.762011][T22140] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 2561.803695][T22140] usb 2-1: device descriptor read/8, error -71 [ 2562.123182][T22140] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 2562.203164][ T6781] input: syz1 as /devices/virtual/input/input222 [ 2562.224696][ T6769] binder: 6766:6769 ioctl c0306201 0 returned -14 [ 2562.352663][T22140] usb 2-1: device descriptor read/8, error -71 [ 2562.370432][ T6779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8529'. [ 2562.475922][T22140] usb usb2-port1: unable to enumerate USB device [ 2562.749215][ T6788] openvswitch: netlink: Message has 1 unknown bytes. [ 2562.757285][ T6788] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2562.890261][ T6750] vhci_hcd: connection reset by peer [ 2562.897611][T24219] vhci_hcd vhci_hcd.1: stop threads [ 2562.903429][T24219] vhci_hcd vhci_hcd.1: release socket [ 2562.913302][T24219] vhci_hcd vhci_hcd.1: disconnect device [ 2563.821820][T22134] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 2564.006130][T22134] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 2564.022262][T22134] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2564.195736][T22134] usb 2-1: Product: syz [ 2564.201597][T22134] usb 2-1: Manufacturer: syz [ 2564.211304][T22134] usb 2-1: SerialNumber: syz [ 2564.236471][T22134] usb 2-1: config 0 descriptor?? [ 2564.247737][T22134] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 2564.435373][ T6803] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8536'. [ 2564.947632][ T6808] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8537'. [ 2564.984399][T22134] gspca_sunplus: reg_w_riv err -110 [ 2564.990432][T22134] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 2565.192963][T22134] usb 2-1: USB disconnect, device number 26 [ 2565.521823][T30384] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 2565.546327][ T6813] xt_TCPMSS: Only works on TCP SYN packets [ 2565.871538][ T6816] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8539'. [ 2566.347362][ T6836] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2566.605239][ T6839] binder: 6825:6839 ioctl 4018620d 0 returned -22 [ 2567.377657][ T6849] binder: 6844:6849 ioctl c0306201 0 returned -14 [ 2567.656852][ T6854] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8545'. [ 2568.565881][ T6864] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8549'. [ 2568.638154][ T6860] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8548'. [ 2568.782512][ T6871] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8547'. [ 2568.952848][ T6874] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2569.919492][ T6877] syzkaller0: entered promiscuous mode [ 2569.928863][ T6877] syzkaller0: entered allmulticast mode [ 2570.623355][ T6884] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2570.805019][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 2570.805049][ T29] audit: type=1326 audit(1775777501.659:8088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6891 comm="syz.4.8555" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 2570.971014][T22147] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 2571.027611][ T29] audit: type=1326 audit(1775777501.659:8089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6891 comm="syz.4.8555" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 2571.027846][ T29] audit: type=1326 audit(1775777501.659:8090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6891 comm="syz.4.8555" exe="/root/syz-executor" sig=0 arch=40000003 syscall=300 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 2571.027884][ T29] audit: type=1326 audit(1775777501.659:8091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6891 comm="syz.4.8555" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 2571.274362][T22147] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 2571.274387][T22147] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2571.274400][T22147] usb 6-1: Product: syz [ 2571.274410][T22147] usb 6-1: Manufacturer: syz [ 2571.274419][T22147] usb 6-1: SerialNumber: syz [ 2571.278624][T22147] usb 6-1: config 0 descriptor?? [ 2571.288491][T22147] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 2571.289430][ T29] audit: type=1326 audit(1775777501.659:8092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6891 comm="syz.4.8555" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 2571.289496][ T29] audit: type=1326 audit(1775777501.669:8093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6891 comm="syz.4.8555" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 2571.289553][ T29] audit: type=1326 audit(1775777501.669:8094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6891 comm="syz.4.8555" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 2571.289590][ T29] audit: type=1326 audit(1775777501.669:8095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6891 comm="syz.4.8555" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 2571.289645][ T29] audit: type=1326 audit(1775777501.669:8096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6891 comm="syz.4.8555" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 2571.289684][ T29] audit: type=1326 audit(1775777501.669:8097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6891 comm="syz.4.8555" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 2571.956321][T22147] gspca_sunplus: reg_w_riv err -71 [ 2571.956412][T22147] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 2571.961913][T22147] usb 6-1: USB disconnect, device number 14 [ 2572.427606][ T6912] openvswitch: netlink: Message has 1 unknown bytes. [ 2572.434525][ T6912] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2572.824620][ T6920] openvswitch: netlink: Message has 1 unknown bytes. [ 2572.831723][ T6920] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2573.737329][ T6924] binder: 6923:6924 ioctl c0306201 80000280 returned -14 [ 2573.852557][ T6927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8563'. [ 2574.300715][ T6933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8564'. [ 2574.626392][ T6936] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8566'. [ 2574.810413][ T6947] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8565'. [ 2575.669444][ T6963] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2575.768608][T22122] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 2575.863430][ T6966] openvswitch: netlink: Message has 1 unknown bytes. [ 2575.870307][ T6966] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2576.088011][T22122] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 2576.097132][T22122] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2576.120203][T22122] usb 4-1: Product: syz [ 2576.183358][T22122] usb 4-1: Manufacturer: syz [ 2576.196380][T22122] usb 4-1: SerialNumber: syz [ 2576.309918][T22122] usb 4-1: config 0 descriptor?? [ 2576.374471][T22122] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 2576.902683][T22122] gspca_sunplus: reg_w_riv err -71 [ 2576.908385][T22122] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 2576.963574][T22122] usb 4-1: USB disconnect, device number 124 [ 2577.243831][ T6975] lo: Caught tx_queue_len zero misconfig [ 2577.251528][ T6975] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2577.461047][ T6981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8577'. [ 2577.735416][ T6988] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8579'. [ 2578.217860][ T29] kauditd_printk_skb: 152 callbacks suppressed [ 2578.217879][ T29] audit: type=1326 audit(1775777509.079:8250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6989 comm="syz.5.8580" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 2578.571726][ T29] audit: type=1326 audit(1775777509.089:8251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6989 comm="syz.5.8580" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 2578.647066][ T29] audit: type=1326 audit(1775777509.089:8252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6989 comm="syz.5.8580" exe="/root/syz-executor" sig=0 arch=40000003 syscall=300 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 2578.711927][ T29] audit: type=1326 audit(1775777509.089:8253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6989 comm="syz.5.8580" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 2578.744145][ T29] audit: type=1326 audit(1775777509.089:8254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6989 comm="syz.5.8580" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 2578.772025][ T29] audit: type=1326 audit(1775777509.089:8255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6989 comm="syz.5.8580" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 2578.808495][ T29] audit: type=1326 audit(1775777509.089:8256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6989 comm="syz.5.8580" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 2578.836178][ T29] audit: type=1326 audit(1775777509.089:8257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6989 comm="syz.5.8580" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 2578.900423][ T29] audit: type=1326 audit(1775777509.089:8258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6989 comm="syz.5.8580" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 2579.005608][ T29] audit: type=1326 audit(1775777509.109:8259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6989 comm="syz.5.8580" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 2579.411335][ T7014] openvswitch: netlink: Message has 1 unknown bytes. [ 2579.418547][ T7014] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2579.553500][ T7016] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8587'. [ 2579.980925][ T7020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8586'. [ 2580.712916][ T7025] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8588'. [ 2581.279783][ T7030] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8589'. [ 2582.010567][ T7044] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2582.383021][ T7045] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2582.745007][ T7061] openvswitch: netlink: Message has 1 unknown bytes. [ 2582.751997][ T7061] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2584.038426][ T7071] openvswitch: netlink: Message has 1 unknown bytes. [ 2584.046621][ T7071] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2584.407916][ T7074] netlink: 'syz.3.8599': attribute type 6 has an invalid length. [ 2584.535393][ T7074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8599'. [ 2584.976747][ T29] kauditd_printk_skb: 79 callbacks suppressed [ 2584.976765][ T29] audit: type=1326 audit(1775777515.839:8340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7081 comm="syz.0.8603" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 2585.175119][ T7090] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8602'. [ 2585.423058][ T29] audit: type=1326 audit(1775777515.839:8339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7079 comm="syz.1.8601" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 2585.423139][ T29] audit: type=1326 audit(1775777515.839:8341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7081 comm="syz.0.8603" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 2585.423195][ T29] audit: type=1326 audit(1775777515.839:8342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7079 comm="syz.1.8601" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 2585.423234][ T29] audit: type=1326 audit(1775777515.839:8343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7079 comm="syz.1.8601" exe="/root/syz-executor" sig=0 arch=40000003 syscall=300 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 2585.423271][ T29] audit: type=1326 audit(1775777515.839:8344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7079 comm="syz.1.8601" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 2585.423306][ T29] audit: type=1326 audit(1775777515.839:8345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7079 comm="syz.1.8601" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 2585.423364][ T29] audit: type=1326 audit(1775777515.839:8346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7079 comm="syz.1.8601" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 2585.423401][ T29] audit: type=1326 audit(1775777515.839:8347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7079 comm="syz.1.8601" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 2585.423447][ T29] audit: type=1326 audit(1775777515.839:8348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7079 comm="syz.1.8601" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 2586.087847][ T7095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8604'. [ 2586.423082][T22134] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 2586.703095][T22134] usb 4-1: Using ep0 maxpacket: 16 [ 2586.710121][T22134] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2586.720714][T22134] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2586.761019][T22134] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 2586.782102][T22134] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2586.782280][ T7114] FAULT_INJECTION: forcing a failure. [ 2586.782280][ T7114] name failslab, interval 1, probability 0, space 0, times 0 [ 2586.803680][ T7114] CPU: 1 UID: 0 PID: 7114 Comm: syz.5.8610 Tainted: G L syzkaller #0 PREEMPT(full) [ 2586.803702][ T7114] Tainted: [L]=SOFTLOCKUP [ 2586.803706][ T7114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2586.803713][ T7114] Call Trace: [ 2586.803720][ T7114] [ 2586.803726][ T7114] dump_stack_lvl+0xe8/0x150 [ 2586.803747][ T7114] should_fail_ex+0x412/0x560 [ 2586.803767][ T7114] should_failslab+0xa8/0x100 [ 2586.803782][ T7114] __kmalloc_cache_noprof+0x88/0x660 [ 2586.803795][ T7114] ? j1939_ecu_create_locked+0xcf/0x310 [ 2586.803809][ T7114] j1939_ecu_create_locked+0xcf/0x310 [ 2586.803819][ T7114] ? j1939_ecu_get_by_name_locked+0x139/0x230 [ 2586.803831][ T7114] j1939_local_ecu_get+0xbb/0x200 [ 2586.803843][ T7114] j1939_sk_bind+0x724/0xc70 [ 2586.803859][ T7114] __sys_bind+0x2e3/0x410 [ 2586.803873][ T7114] ? __pfx___sys_bind+0x10/0x10 [ 2586.803894][ T7114] __ia32_sys_bind+0x7a/0x90 [ 2586.803905][ T7114] __do_fast_syscall_32+0x20d/0x640 [ 2586.803921][ T7114] ? do_fast_syscall_32+0x33/0x70 [ 2586.803934][ T7114] ? asm_int80_emulation+0x1a/0x20 [ 2586.803945][ T7114] ? do_int80_emulation+0x274/0x4d0 [ 2586.803958][ T7114] ? trace_irq_disable+0x3b/0x150 [ 2586.803970][ T7114] do_fast_syscall_32+0x33/0x70 [ 2586.803984][ T7114] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2586.803997][ T7114] RIP: 0023:0xf707ef6c [ 2586.804008][ T7114] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2586.804017][ T7114] RSP: 002b:00000000f546d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000169 [ 2586.804029][ T7114] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 2586.804036][ T7114] RDX: 0000000000000018 RSI: 0000000000000000 RDI: 0000000000000000 [ 2586.804042][ T7114] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2586.804048][ T7114] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2586.804054][ T7114] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2586.804068][ T7114] [ 2586.822503][ T7115] openvswitch: netlink: Message has 1 unknown bytes. [ 2586.822573][ T7115] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2586.862610][T22122] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 2586.888141][T22134] usb 4-1: config 0 descriptor?? [ 2586.918752][T22134] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 2587.095341][T22122] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 2587.095362][T22122] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2587.095374][T22122] usb 5-1: Product: syz [ 2587.095383][T22122] usb 5-1: Manufacturer: syz [ 2587.095391][T22122] usb 5-1: SerialNumber: syz [ 2587.097119][T22122] usb 5-1: config 0 descriptor?? [ 2587.103840][T22122] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 2587.486799][T30384] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 2587.761897][T30384] usb 2-1: Using ep0 maxpacket: 16 [ 2587.808472][T30384] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2587.808500][T30384] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2587.808513][T30384] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2587.808537][T30384] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 2587.808558][T30384] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2587.810977][T30384] usb 2-1: config 0 descriptor?? [ 2587.811890][T22122] gspca_sunplus: reg_w_riv err -110 [ 2587.811972][T22122] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 2587.840124][T22134] usb 5-1: USB disconnect, device number 101 [ 2587.844773][ T7123] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2588.648865][ T7133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8614'. [ 2589.169023][T22133] usb 4-1: USB disconnect, device number 125 [ 2589.869723][ T7141] openvswitch: netlink: Message has 1 unknown bytes. [ 2589.877208][ T7141] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2590.181021][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 2590.181035][ T29] audit: type=1326 audit(1775777521.039:8410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7138 comm="syz.4.8617" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 2590.298966][T30384] usbhid 2-1:0.0: can't add hid device: -71 [ 2590.305127][T30384] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2590.331393][T30384] usb 2-1: USB disconnect, device number 27 [ 2590.357505][ T29] audit: type=1326 audit(1775777521.039:8411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7138 comm="syz.4.8617" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 2590.357535][ T29] audit: type=1326 audit(1775777521.039:8412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7138 comm="syz.4.8617" exe="/root/syz-executor" sig=0 arch=40000003 syscall=300 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 2590.357557][ T29] audit: type=1326 audit(1775777521.039:8413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7138 comm="syz.4.8617" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 2590.357588][ T29] audit: type=1326 audit(1775777521.129:8414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7138 comm="syz.4.8617" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 2590.357610][ T29] audit: type=1326 audit(1775777521.129:8415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7138 comm="syz.4.8617" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 2590.357632][ T29] audit: type=1326 audit(1775777521.129:8416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7138 comm="syz.4.8617" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 2590.357653][ T29] audit: type=1326 audit(1775777521.159:8417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7138 comm="syz.4.8617" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 2590.357674][ T29] audit: type=1326 audit(1775777521.159:8418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7138 comm="syz.4.8617" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 2590.357696][ T29] audit: type=1326 audit(1775777521.159:8419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7138 comm="syz.4.8617" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 2590.600373][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.600413][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2591.074784][ T7154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8620'. [ 2591.329543][ T7158] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2592.358239][ T7178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8623'. [ 2592.408846][ T7177] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8624'. [ 2592.485572][ T7179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8627'. [ 2593.637376][ T7190] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8630'. [ 2593.757499][T22133] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 2593.824530][ T7192] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2593.962732][T22133] usb 6-1: Using ep0 maxpacket: 16 [ 2593.972656][T22133] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2593.984171][T22133] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2594.008115][T22133] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2594.015689][T22133] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 2594.027788][T22133] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2594.049428][T22133] usb 6-1: config 0 descriptor?? [ 2594.491823][ T7197] openvswitch: netlink: Message has 1 unknown bytes. [ 2594.499515][ T7197] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2595.669701][ T7207] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8633'. [ 2596.514601][T22133] usbhid 6-1:0.0: can't add hid device: -71 [ 2596.520635][T22133] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2596.542538][T22133] usb 6-1: USB disconnect, device number 15 [ 2596.708423][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 2596.708442][ T29] audit: type=1326 audit(1775777527.569:8496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7213 comm="syz.5.8635" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 2596.810902][ T29] audit: type=1326 audit(1775777527.569:8497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7213 comm="syz.5.8635" exe="/root/syz-executor" sig=0 arch=40000003 syscall=300 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 2597.311860][ T7225] openvswitch: netlink: Message has 1 unknown bytes. [ 2597.318797][ T7225] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2597.472291][ T29] audit: type=1326 audit(1775777527.569:8498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7213 comm="syz.5.8635" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 2597.662290][ T29] audit: type=1326 audit(1775777527.569:8499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7213 comm="syz.5.8635" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 2597.689556][ T29] audit: type=1326 audit(1775777527.569:8500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7213 comm="syz.5.8635" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 2597.713136][ T29] audit: type=1326 audit(1775777527.569:8501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7213 comm="syz.5.8635" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 2597.739599][ T29] audit: type=1326 audit(1775777527.569:8502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7213 comm="syz.5.8635" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 2597.764960][ T29] audit: type=1326 audit(1775777527.569:8503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7213 comm="syz.5.8635" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 2597.800466][ T7231] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2597.861773][ T29] audit: type=1326 audit(1775777527.569:8504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7213 comm="syz.5.8635" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 2597.992020][ T29] audit: type=1326 audit(1775777527.569:8505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7213 comm="syz.5.8635" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 2598.115458][ T7237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8639'. [ 2598.430740][ T7241] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8640'. [ 2599.139405][ T7247] openvswitch: netlink: Message has 1 unknown bytes. [ 2599.146734][ T7247] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2599.553086][ T7249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8642'. [ 2600.031870][T22122] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 2600.197456][ T7255] openvswitch: netlink: Message has 1 unknown bytes. [ 2600.205521][ T7255] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2600.322703][T22122] usb 5-1: Using ep0 maxpacket: 16 [ 2600.347938][T22122] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2600.372456][T22122] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2600.409064][T22122] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 2600.436281][T22122] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2600.464948][T22122] usb 5-1: config 0 descriptor?? [ 2600.590643][T22122] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 2600.972022][T22133] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 2601.152151][T22133] usb 2-1: Using ep0 maxpacket: 16 [ 2601.159634][T22133] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2601.187906][T22133] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2601.233111][T22133] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2601.269814][T22133] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 2601.288988][T22133] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2601.486711][T22133] usb 2-1: config 0 descriptor?? [ 2601.630049][ T7270] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2602.145715][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 2602.145734][ T29] audit: type=1326 audit(1775777533.009:8546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7274 comm="syz.0.8648" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 2602.286803][ T29] audit: type=1326 audit(1775777533.009:8547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7274 comm="syz.0.8648" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 2602.404515][ T29] audit: type=1326 audit(1775777533.009:8548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7274 comm="syz.0.8648" exe="/root/syz-executor" sig=0 arch=40000003 syscall=300 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 2602.459654][ T29] audit: type=1326 audit(1775777533.009:8549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7274 comm="syz.0.8648" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 2602.742802][ T7284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8649'. [ 2602.828441][T22122] usb 5-1: USB disconnect, device number 102 [ 2602.852853][ T29] audit: type=1326 audit(1775777533.009:8550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7274 comm="syz.0.8648" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 2602.876414][ T29] audit: type=1326 audit(1775777533.009:8551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7274 comm="syz.0.8648" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 2602.922805][ T29] audit: type=1326 audit(1775777533.009:8552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7274 comm="syz.0.8648" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 2603.129735][ T29] audit: type=1326 audit(1775777533.009:8553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7274 comm="syz.0.8648" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 2603.244078][ T7291] openvswitch: netlink: Message has 1 unknown bytes. [ 2603.251598][ T7291] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2603.451438][ T29] audit: type=1326 audit(1775777533.009:8554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7274 comm="syz.0.8648" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 2603.537649][ T29] audit: type=1326 audit(1775777533.009:8555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7274 comm="syz.0.8648" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 2604.495946][ T7295] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8652'. [ 2604.582918][ T7303] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2604.592925][ T7303] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2604.660511][ T7305] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2604.671639][ T7305] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2604.719759][ T7303] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(12) [ 2604.726417][ T7303] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2604.789052][ T7303] vhci_hcd vhci_hcd.0: Device attached [ 2604.798089][ T7303] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2604.942668][ T7308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8654'. [ 2604.962506][T28279] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 2605.193851][T28279] usb 33-3: new full-speed USB device number 19 using vhci_hcd [ 2605.325394][T22133] usbhid 2-1:0.0: can't add hid device: -71 [ 2605.333014][T22133] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2605.353517][T22133] usb 2-1: USB disconnect, device number 28 [ 2605.743993][ T7318] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2606.144660][ T7321] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2606.286323][ T7327] openvswitch: netlink: Message has 1 unknown bytes. [ 2606.293703][ T7327] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2606.973626][ T7330] random: crng reseeded on system resumption [ 2607.560574][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 2607.560592][ T29] audit: type=1326 audit(1775777538.419:8588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7332 comm="syz.4.8660" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 2608.092929][ T29] audit: type=1326 audit(1775777538.419:8589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7332 comm="syz.4.8660" exe="/root/syz-executor" sig=0 arch=40000003 syscall=300 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 2608.132343][ T7304] vhci_hcd: connection reset by peer [ 2608.148989][T24219] vhci_hcd vhci_hcd.0: stop threads [ 2608.167641][T24219] vhci_hcd vhci_hcd.0: release socket [ 2608.176652][ T29] audit: type=1326 audit(1775777538.419:8590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7332 comm="syz.4.8660" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 2608.213481][T24219] vhci_hcd vhci_hcd.0: disconnect device [ 2608.219677][ T29] audit: type=1326 audit(1775777538.419:8591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7332 comm="syz.4.8660" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 2608.254006][ T29] audit: type=1326 audit(1775777538.419:8592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7332 comm="syz.4.8660" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 2608.301403][ T29] audit: type=1326 audit(1775777538.429:8593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7332 comm="syz.4.8660" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 2608.332863][T22122] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 2608.368082][ T29] audit: type=1326 audit(1775777538.429:8594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7332 comm="syz.4.8660" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 2608.413707][ T29] audit: type=1326 audit(1775777538.429:8595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7332 comm="syz.4.8660" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 2608.472902][ T29] audit: type=1326 audit(1775777538.429:8596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7332 comm="syz.4.8660" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 2608.511795][T22122] usb 5-1: Using ep0 maxpacket: 16 [ 2608.520929][T22122] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2608.533292][T22122] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2608.540060][ T29] audit: type=1326 audit(1775777538.429:8597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7332 comm="syz.4.8660" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 2608.562832][T22122] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 2608.586821][T22122] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2608.630317][T22122] usb 5-1: config 0 descriptor?? [ 2608.654771][T22122] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 2609.246838][ T7345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8663'. [ 2609.492717][T22133] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 2609.667455][ T7357] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8664'. [ 2609.671745][T22133] usb 4-1: Using ep0 maxpacket: 16 [ 2609.704553][T22133] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2609.716762][T22133] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2609.727235][T22133] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2609.735009][T22133] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 2609.746130][T22133] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2609.935752][ T7361] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2609.963308][T22133] usb 4-1: config 0 descriptor?? [ 2610.332623][T28279] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 2610.896743][ T7375] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8668'. [ 2611.297422][T30384] usb 5-1: USB disconnect, device number 103 [ 2611.567778][ T7380] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8669'. [ 2612.487843][T22133] usbhid 4-1:0.0: can't add hid device: -71 [ 2612.497051][T22133] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2612.529728][T22133] usb 4-1: USB disconnect, device number 126 [ 2612.822228][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 2612.822251][ T29] audit: type=1326 audit(1775777543.639:8631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7388 comm="syz.3.8671" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 2612.822296][ T29] audit: type=1326 audit(1775777543.639:8632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7388 comm="syz.3.8671" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 2612.822329][ T29] audit: type=1326 audit(1775777543.639:8633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7388 comm="syz.3.8671" exe="/root/syz-executor" sig=0 arch=40000003 syscall=300 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 2612.822360][ T29] audit: type=1326 audit(1775777543.639:8634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7388 comm="syz.3.8671" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 2612.824248][ T29] audit: type=1326 audit(1775777543.639:8635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7388 comm="syz.3.8671" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 2612.824307][ T29] audit: type=1326 audit(1775777543.639:8636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7388 comm="syz.3.8671" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 2612.824347][ T29] audit: type=1326 audit(1775777543.639:8637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7388 comm="syz.3.8671" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 2612.824385][ T29] audit: type=1326 audit(1775777543.639:8638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7388 comm="syz.3.8671" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 2612.824424][ T29] audit: type=1326 audit(1775777543.639:8639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7388 comm="syz.3.8671" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 2612.824460][ T29] audit: type=1326 audit(1775777543.639:8640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7388 comm="syz.3.8671" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 2613.244745][ T7397] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2613.499060][ T7402] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2613.638397][ T7397] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(12) [ 2613.645053][ T7397] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2613.663754][ T7397] vhci_hcd vhci_hcd.0: Device attached [ 2613.679844][ T7402] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2613.690865][ T7402] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2613.700803][ T7402] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2613.794154][ T7412] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2613.853286][T30384] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 2614.143883][T22133] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 2614.164097][T30384] usb 43-3: new full-speed USB device number 17 using vhci_hcd [ 2614.430114][T22133] usb 6-1: device descriptor read/64, error -71 [ 2614.475972][ T7414] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2614.704263][T22133] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 2614.842860][T22133] usb 6-1: device descriptor read/64, error -71 [ 2614.961725][T22133] usb usb6-port1: attempt power cycle [ 2615.106156][ T7426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8677'. [ 2615.368787][T22133] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 2615.625196][T22133] usb 6-1: device descriptor read/8, error -71 [ 2615.761585][ T7433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8678'. [ 2615.872486][T22133] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 2616.083143][T22133] usb 6-1: device descriptor read/8, error -71 [ 2616.192684][T22133] usb usb6-port1: unable to enumerate USB device [ 2616.638715][ T7406] vhci_hcd: connection reset by peer [ 2616.645190][T24219] vhci_hcd vhci_hcd.5: stop threads [ 2616.663144][T24219] vhci_hcd vhci_hcd.5: release socket [ 2616.680317][T24219] vhci_hcd vhci_hcd.5: disconnect device [ 2616.862421][T22133] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 2616.922428][T22134] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 2617.022322][T22133] usb 5-1: Using ep0 maxpacket: 16 [ 2617.050887][T22133] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2617.062555][T22133] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2617.083738][T22134] usb 2-1: Using ep0 maxpacket: 16 [ 2617.098603][T22133] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2617.106103][T22134] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2617.116764][T22134] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2617.127276][ T7448] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8682'. [ 2617.153867][T22133] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 2617.163681][T22134] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 2617.173189][T22133] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2617.181550][T22134] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2617.199127][T22133] usb 5-1: config 0 descriptor?? [ 2617.245991][T22134] usb 2-1: config 0 descriptor?? [ 2617.320439][ T7451] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2617.523665][T22134] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2618.409667][ T7460] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8684'. [ 2619.432928][T30384] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 2619.624031][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 2619.624051][ T29] audit: type=1326 audit(1775777550.489:8674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7461 comm="syz.0.8685" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 2619.730525][T22134] usb 2-1: USB disconnect, device number 29 [ 2619.873719][T22133] usbhid 5-1:0.0: can't add hid device: -71 [ 2619.873823][T22133] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2619.881575][T22133] usb 5-1: USB disconnect, device number 104 [ 2619.912522][ T29] audit: type=1326 audit(1775777550.519:8675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7461 comm="syz.0.8685" exe="/root/syz-executor" sig=0 arch=40000003 syscall=300 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 2620.022337][ T29] audit: type=1326 audit(1775777550.519:8676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7461 comm="syz.0.8685" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 2620.061304][ T29] audit: type=1326 audit(1775777550.519:8677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7461 comm="syz.0.8685" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 2620.097446][ T29] audit: type=1326 audit(1775777550.519:8678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7461 comm="syz.0.8685" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 2620.120911][ T29] audit: type=1326 audit(1775777550.519:8679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7461 comm="syz.0.8685" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 2620.144660][ T29] audit: type=1326 audit(1775777550.519:8680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7461 comm="syz.0.8685" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 2620.193174][ T7471] xt_TCPMSS: Only works on TCP SYN packets [ 2620.202642][ T29] audit: type=1326 audit(1775777550.519:8681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7461 comm="syz.0.8685" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 2620.323590][ T7473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8686'. [ 2620.490760][ T29] audit: type=1326 audit(1775777550.519:8682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7461 comm="syz.0.8685" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 2620.525856][ T29] audit: type=1326 audit(1775777550.519:8683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7461 comm="syz.0.8685" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 2620.550755][T22133] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 2620.763246][ T7482] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8690'. [ 2620.782715][ T7481] openvswitch: netlink: Message has 1 unknown bytes. [ 2620.825187][T22133] usb 6-1: Using ep0 maxpacket: 16 [ 2620.845663][ T7481] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2620.869840][T22133] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2621.126927][T22133] usb 6-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 2621.138815][T22133] usb 6-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 2621.148579][T22133] usb 6-1: Manufacturer: syz [ 2621.188241][T22133] usb 6-1: config 0 descriptor?? [ 2621.766080][ T7469] syzkaller0: entered promiscuous mode [ 2621.771814][ T7469] syzkaller0: entered allmulticast mode [ 2621.859975][T22133] input: syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:041E:3100.0037/input/input223 [ 2621.885734][ T7490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8692'. [ 2622.086935][T22133] creative-sb0540 0003:041E:3100.0037: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 2622.379781][ T7498] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2622.893294][T22137] usb 6-1: USB disconnect, device number 20 [ 2622.930919][ T7506] openvswitch: netlink: Message has 1 unknown bytes. [ 2622.937919][ T7506] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2623.432354][T30384] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 2623.575868][T22118] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 2623.650558][T30384] usb 2-1: Using ep0 maxpacket: 16 [ 2623.661944][T30384] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2623.783444][T30384] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2623.793760][T22118] usb 4-1: Using ep0 maxpacket: 16 [ 2623.819939][T22118] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2623.828851][T30384] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 2623.852387][T22118] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2623.878757][T22118] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2623.891159][T30384] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2623.902357][T22118] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 2623.930713][T22118] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2623.944493][T30384] usb 2-1: config 0 descriptor?? [ 2623.970821][T22118] usb 4-1: config 0 descriptor?? [ 2623.981129][T30384] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2624.577760][ T7529] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2625.422862][ T7536] xt_TCPMSS: Only works on TCP SYN packets [ 2626.105005][T22133] usb 2-1: USB disconnect, device number 30 [ 2626.360862][ T7540] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8702'. [ 2626.534238][T22118] usbhid 4-1:0.0: can't add hid device: -71 [ 2626.551472][T22118] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2626.586772][T22118] usb 4-1: USB disconnect, device number 127 [ 2626.813473][T22147] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 2627.014664][T22147] usb 6-1: config 27 interface 0 altsetting 0 has an endpoint descriptor with address 0x78, changing to 0x8 [ 2627.032885][T22147] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 10 [ 2627.047205][T22147] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 127, setting to 64 [ 2627.064703][T22147] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 5853, setting to 64 [ 2627.090513][T22147] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2627.112351][T22147] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2627.144893][ T7544] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2627.153732][ T7544] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2627.168730][T22147] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2627.178144][T22147] usb 6-1: invalid MIDI in EP 0 [ 2627.454947][ T7555] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8704'. [ 2627.497761][ T7556] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2627.638623][ T7559] netlink: 'syz.3.8708': attribute type 23 has an invalid length. [ 2628.095042][T22147] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2629.209100][ T7579] ip6t_REJECT: ECHOREPLY is not supported [ 2629.501729][T22133] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 2629.664928][ T7586] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2629.695063][T22133] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 2629.716369][T22133] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2629.727405][T22133] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 2629.743600][ T7588] openvswitch: netlink: Message has 1 unknown bytes. [ 2629.750446][ T7588] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2629.767141][T22133] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 2629.830930][T22133] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 2629.841842][T22133] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2629.874951][T22133] usb 4-1: Product: syz [ 2629.886324][T22133] usb 4-1: Manufacturer: syz [ 2629.896463][T22133] usb 4-1: SerialNumber: syz [ 2629.937881][T22133] usb 4-1: config 0 descriptor?? [ 2630.156402][T22133] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 2630.388026][T22147] usb 4-1: USB disconnect, device number 2 [ 2630.644654][ T7593] xt_TCPMSS: Only works on TCP SYN packets [ 2631.948220][ T7602] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2632.725860][ T7611] openvswitch: netlink: Message has 1 unknown bytes. [ 2632.732871][ T7611] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2633.816593][ T7622] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8722'. [ 2635.086455][ T7628] binder: 7623:7628 ioctl c0306201 0 returned -14 [ 2635.785184][ T7638] xt_TCPMSS: Only works on TCP SYN packets [ 2636.192459][ T7648] ip6t_REJECT: ECHOREPLY is not supported [ 2636.202640][T22118] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 2636.501105][T22118] usb 4-1: Using ep0 maxpacket: 32 [ 2636.512890][T22118] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 2636.521113][T22118] usb 4-1: config 0 has no interface number 0 [ 2636.598012][ T7662] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2636.614830][T22118] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 2636.667881][T22118] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2636.685579][T22118] usb 4-1: Product: syz [ 2636.712652][T22118] usb 4-1: Manufacturer: syz [ 2636.717314][T22118] usb 4-1: SerialNumber: syz [ 2636.727256][T22118] usb 4-1: config 0 descriptor?? [ 2636.736062][T22118] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 2636.749818][T22118] usb 4-1: selecting invalid altsetting 1 [ 2636.755935][T22118] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 2636.770335][T22118] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2636.840611][T22118] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 2636.863389][T22118] usb 4-1: media controller created [ 2636.905723][T22118] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2636.938801][ T7626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2636.976228][ T7626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2638.086927][ T7670] openvswitch: netlink: Message has 1 unknown bytes. [ 2638.094234][T22118] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 2638.094380][T22118] zl10353_read_register: readreg error (reg=127, ret==-110) [ 2638.202300][ T7670] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2638.294577][T22118] usb 4-1: USB disconnect, device number 3 [ 2639.322839][ T29] kauditd_printk_skb: 92 callbacks suppressed [ 2639.322860][ T29] audit: type=1326 audit(1775777570.179:8776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7681 comm="syz.0.8747" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 2639.382588][ T29] audit: type=1326 audit(1775777570.179:8777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7681 comm="syz.0.8747" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 2639.485917][ T29] audit: type=1326 audit(1775777570.229:8778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7681 comm="syz.0.8747" exe="/root/syz-executor" sig=0 arch=40000003 syscall=300 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 2639.485967][ T29] audit: type=1326 audit(1775777570.229:8779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7681 comm="syz.0.8747" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 2639.702077][ T29] audit: type=1326 audit(1775777570.229:8780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7681 comm="syz.0.8747" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 2639.702113][ T29] audit: type=1326 audit(1775777570.269:8781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7681 comm="syz.0.8747" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 2639.702139][ T29] audit: type=1326 audit(1775777570.269:8782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7681 comm="syz.0.8747" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 2639.702163][ T29] audit: type=1326 audit(1775777570.269:8783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7681 comm="syz.0.8747" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 2639.702185][ T29] audit: type=1326 audit(1775777570.279:8784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7681 comm="syz.0.8747" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 2639.702207][ T29] audit: type=1326 audit(1775777570.279:8785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7681 comm="syz.0.8747" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 2639.782338][ T7679] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2639.960012][ T7694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8738'. [ 2640.672060][T22140] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 2641.013637][T22140] usb 2-1: Using ep0 maxpacket: 32 [ 2641.025352][T22140] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2641.050094][T22140] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2641.096710][T22140] usb 2-1: config 0 descriptor?? [ 2641.113636][ T7704] xt_TCPMSS: Only works on TCP SYN packets [ 2641.127808][ T7705] netlink: 'syz.0.8742': attribute type 23 has an invalid length. [ 2641.402115][T22140] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2641.421522][T22140] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2641.450600][T22140] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2641.489445][T22140] usb 2-1: media controller created [ 2641.542535][T22140] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2641.629317][T22140] az6027: usb out operation failed. (-71) [ 2641.642245][T22140] az6027: usb out operation failed. (-71) [ 2641.654698][T22140] stb0899_attach: Driver disabled by Kconfig [ 2641.669316][T22140] az6027: no front-end attached [ 2641.669316][T22140] [ 2641.697494][T22140] az6027: usb out operation failed. (-71) [ 2641.710586][T22140] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2641.740095][T22140] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input224 [ 2641.761983][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2641.848740][T22140] dvb-usb: schedule remote query interval to 400 msecs. [ 2641.867856][T22140] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2641.898406][T22140] usb 2-1: USB disconnect, device number 31 [ 2642.190906][T22140] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2642.345029][T16484] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2642.364955][T16484] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2642.377992][T16484] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2642.388549][T16484] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2642.400361][T16484] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2642.457348][T28601] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2642.465182][T28601] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2642.473271][T28601] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2642.523113][T28601] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2642.554494][T28601] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2642.863780][ T7728] openvswitch: netlink: Message has 1 unknown bytes. [ 2642.898043][ T7728] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2643.888226][ T7742] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20003 [ 2644.183417][ T7721] chnl_net:caif_netlink_parms(): no params data found [ 2644.315393][ T7753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8752'. [ 2644.595540][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 2644.595558][ T29] audit: type=1326 audit(1775777575.459:8851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7747 comm="syz.4.8753" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 2644.671728][T28601] Bluetooth: hci4: command tx timeout [ 2644.726148][ T7760] xt_TCPMSS: Only works on TCP SYN packets [ 2644.742351][ T29] audit: type=1326 audit(1775777575.499:8852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7747 comm="syz.4.8753" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 2644.861135][ T7721] bridge0: port 1(bridge_slave_0) entered blocking state [ 2644.928438][ T7721] bridge0: port 1(bridge_slave_0) entered disabled state [ 2645.187277][ T7721] bridge_slave_0: entered allmulticast mode [ 2645.210749][ T7721] bridge_slave_0: entered promiscuous mode [ 2645.243749][ T7721] bridge0: port 2(bridge_slave_1) entered blocking state [ 2645.267015][ T7721] bridge0: port 2(bridge_slave_1) entered disabled state [ 2645.327453][ T7721] bridge_slave_1: entered allmulticast mode [ 2645.364142][ T7721] bridge_slave_1: entered promiscuous mode [ 2645.532906][ T7721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2645.549746][ T7779] FAULT_INJECTION: forcing a failure. [ 2645.549746][ T7779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2645.587665][ T7779] CPU: 1 UID: 0 PID: 7779 Comm: syz.4.8759 Tainted: G L syzkaller #0 PREEMPT(full) [ 2645.587687][ T7779] Tainted: [L]=SOFTLOCKUP [ 2645.587691][ T7779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2645.587698][ T7779] Call Trace: [ 2645.587704][ T7779] [ 2645.587710][ T7779] dump_stack_lvl+0xe8/0x150 [ 2645.587729][ T7779] should_fail_ex+0x412/0x560 [ 2645.587748][ T7779] _copy_from_iter+0x1d3/0x1670 [ 2645.587760][ T7779] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2645.587784][ T7779] ? __pfx_policy_nodemask+0x10/0x10 [ 2645.587800][ T7779] ? __pfx__copy_from_iter+0x10/0x10 [ 2645.587813][ T7779] ? set_page_refcounted+0xa0/0x1e0 [ 2645.587827][ T7779] ? page_copy_sane+0x4e/0x270 [ 2645.587838][ T7779] copy_page_from_iter+0xdd/0x170 [ 2645.587852][ T7779] tun_get_user+0x1d4b/0x3dd0 [ 2645.587864][ T7779] ? tun_get_user+0x6ff/0x3dd0 [ 2645.587883][ T7779] ? aa_file_perm+0x50e/0x15e0 [ 2645.587894][ T7779] ? __pfx_tun_get_user+0x10/0x10 [ 2645.587905][ T7779] ? aa_file_perm+0x192/0x15e0 [ 2645.587923][ T7779] ? ref_tracker_alloc+0x35c/0x4c0 [ 2645.587935][ T7779] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 2645.587948][ T7779] ? tun_get+0x1c/0x2f0 [ 2645.587962][ T7779] ? tun_get+0x1c/0x2f0 [ 2645.587973][ T7779] ? tun_get+0x1c/0x2f0 [ 2645.587986][ T7779] tun_chr_write_iter+0x113/0x200 [ 2645.587999][ T7779] vfs_write+0x61d/0xb90 [ 2645.588015][ T7779] ? __pfx_vfs_write+0x10/0x10 [ 2645.588031][ T7779] ? __fget_files+0x2a/0x420 [ 2645.588044][ T7779] ksys_write+0x150/0x270 [ 2645.588057][ T7779] ? __pfx_ksys_write+0x10/0x10 [ 2645.588071][ T7779] ? asm_int80_emulation+0x1a/0x20 [ 2645.588083][ T7779] do_int80_emulation+0x173/0x4d0 [ 2645.588098][ T7779] ? trace_irq_disable+0x3b/0x150 [ 2645.588107][ T7779] ? asm_int80_emulation+0x1a/0x20 [ 2645.588117][ T7779] ? clear_bhb_loop+0x40/0x90 [ 2645.588128][ T7779] ? clear_bhb_loop+0x40/0x90 [ 2645.588140][ T7779] asm_int80_emulation+0x1a/0x20 [ 2645.588149][ T7779] RIP: 0023:0xf7115cab [ 2645.588160][ T7779] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 2645.588170][ T7779] RSP: 002b:00000000f53cd44c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 2645.588182][ T7779] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000000 [ 2645.588190][ T7779] RDX: 0000000000000046 RSI: 0000000000000000 RDI: 0000000000000000 [ 2645.588196][ T7779] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2645.588202][ T7779] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2645.588208][ T7779] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2645.588222][ T7779] [ 2646.167122][ T7780] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2646.196420][ T29] audit: type=1326 audit(1775777577.049:8853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7782 comm="syz.0.8760" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 2646.261744][ T29] audit: type=1326 audit(1775777577.049:8854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7782 comm="syz.0.8760" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 2646.314143][ T7721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2646.370572][ T7721] team0: Port device team_slave_0 added [ 2646.442147][ T29] audit: type=1326 audit(1775777577.059:8855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7782 comm="syz.0.8760" exe="/root/syz-executor" sig=0 arch=40000003 syscall=300 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 2646.442190][ T29] audit: type=1326 audit(1775777577.059:8856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7782 comm="syz.0.8760" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 2646.442225][ T29] audit: type=1326 audit(1775777577.059:8857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7782 comm="syz.0.8760" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 2646.442258][ T29] audit: type=1326 audit(1775777577.059:8858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7782 comm="syz.0.8760" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 2646.442294][ T29] audit: type=1326 audit(1775777577.059:8859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7782 comm="syz.0.8760" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 2646.442328][ T29] audit: type=1326 audit(1775777577.059:8860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7782 comm="syz.0.8760" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 2646.463325][ T7721] team0: Port device team_slave_1 added [ 2646.746912][T28601] Bluetooth: hci4: command tx timeout [ 2646.806834][ T7721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2646.806850][ T7721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2646.806865][ T7721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2646.837610][ T7721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2646.837627][ T7721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2646.837642][ T7721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2647.067285][ T7721] hsr_slave_0: entered promiscuous mode [ 2647.068027][ T7721] hsr_slave_1: entered promiscuous mode [ 2647.068421][ T7721] debugfs: 'hsr0' already exists in 'hsr' [ 2647.068435][ T7721] Cannot create hsr debugfs directory [ 2647.613997][ T7721] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2647.623167][ T7721] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2647.645796][ T7721] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2647.663090][ T7721] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2648.157505][ T7721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2648.209445][ T7721] 8021q: adding VLAN 0 to HW filter on device team0 [ 2648.231008][T28741] bridge0: port 1(bridge_slave_0) entered blocking state [ 2648.231072][T28741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2648.234201][T28741] bridge0: port 2(bridge_slave_1) entered blocking state [ 2648.234270][T28741] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2648.433362][ T7721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2648.576340][ T7721] veth0_vlan: entered promiscuous mode [ 2648.617626][ T7721] veth1_vlan: entered promiscuous mode [ 2648.710445][ T7721] veth0_macvtap: entered promiscuous mode [ 2648.721608][ T7721] veth1_macvtap: entered promiscuous mode [ 2648.771443][ T7721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2648.785767][ T7721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2648.802418][T28601] Bluetooth: hci4: command tx timeout [ 2648.918672][T28741] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2648.918744][T28741] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2648.918787][T28741] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2648.918815][T28741] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2649.491157][ T7815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8765'. [ 2649.594626][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2649.594655][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2649.984651][ T29] kauditd_printk_skb: 106 callbacks suppressed [ 2649.984670][ T29] audit: type=1326 audit(1775777580.849:8967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7807 comm="syz.3.8764" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 2650.183542][ T29] audit: type=1326 audit(1775777580.849:8968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7807 comm="syz.3.8764" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 2650.385336][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2650.416186][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2650.427336][ T7822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8766'. [ 2650.458279][ T7823] xt_TCPMSS: Only works on TCP SYN packets [ 2650.883798][T28601] Bluetooth: hci4: command tx timeout [ 2650.972899][ T7830] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8769'. [ 2651.645198][ T7842] FAULT_INJECTION: forcing a failure. [ 2651.645198][ T7842] name failslab, interval 1, probability 0, space 0, times 0 [ 2651.652279][T22137] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 2652.005833][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2652.013573][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2652.030100][ T7842] CPU: 1 UID: 0 PID: 7842 Comm: syz.3.8772 Tainted: G L syzkaller #0 PREEMPT(full) [ 2652.030132][ T7842] Tainted: [L]=SOFTLOCKUP [ 2652.030138][ T7842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2652.030148][ T7842] Call Trace: [ 2652.030156][ T7842] [ 2652.030163][ T7842] dump_stack_lvl+0xe8/0x150 [ 2652.030188][ T7842] should_fail_ex+0x412/0x560 [ 2652.030217][ T7842] should_failslab+0xa8/0x100 [ 2652.030241][ T7842] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 2652.030262][ T7842] ? __alloc_skb+0x186/0x7d0 [ 2652.030286][ T7842] ? __alloc_skb+0x1d0/0x7d0 [ 2652.030304][ T7842] ? __local_bh_enable_ip+0xd0/0x130 [ 2652.030331][ T7842] __alloc_skb+0x1d0/0x7d0 [ 2652.030350][ T7842] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 2652.030376][ T7842] netlink_sendmsg+0x5d4/0xb40 [ 2652.030404][ T7842] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2652.030426][ T7842] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2652.030451][ T7842] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2652.030474][ T7842] ____sys_sendmsg+0x972/0x9f0 [ 2652.030503][ T7842] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2652.030530][ T7842] ? kstrtoull+0x12f/0x1d0 [ 2652.030562][ T7842] ___sys_sendmsg+0x2a5/0x360 [ 2652.030590][ T7842] ? __pfx____sys_sendmsg+0x10/0x10 [ 2652.030615][ T7842] ? get_pid_task+0x20/0x1f0 [ 2652.030633][ T7842] ? get_pid_task+0x20/0x1f0 [ 2652.030648][ T7842] ? get_pid_task+0x20/0x1f0 [ 2652.030690][ T7842] ? __fget_files+0x2a/0x420 [ 2652.030707][ T7842] ? __fget_files+0x3a0/0x420 [ 2652.030733][ T7842] __sys_sendmsg+0x183/0x260 [ 2652.030759][ T7842] ? __pfx___sys_sendmsg+0x10/0x10 [ 2652.030801][ T7842] __do_fast_syscall_32+0x20d/0x640 [ 2652.030828][ T7842] ? do_fast_syscall_32+0x33/0x70 [ 2652.030848][ T7842] ? asm_int80_emulation+0x1a/0x20 [ 2652.030865][ T7842] ? do_int80_emulation+0x274/0x4d0 [ 2652.030888][ T7842] ? trace_irq_disable+0x3b/0x150 [ 2652.030915][ T7842] do_fast_syscall_32+0x33/0x70 [ 2652.030938][ T7842] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2652.030960][ T7842] RIP: 0023:0xf6ffef6c [ 2652.030976][ T7842] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2652.030992][ T7842] RSP: 002b:00000000f53ed50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2652.031012][ T7842] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800003c0 [ 2652.031024][ T7842] RDX: 0000000000004890 RSI: 0000000000000000 RDI: 0000000000000000 [ 2652.031035][ T7842] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2652.031046][ T7842] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2652.031057][ T7842] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2652.031083][ T7842] [ 2652.031755][T22137] usb 2-1: Using ep0 maxpacket: 16 [ 2652.479368][T22137] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2652.490828][T22137] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2652.501820][T22137] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2652.508484][T22137] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 2652.528052][T22137] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2652.543973][T22137] usb 2-1: config 0 descriptor?? [ 2653.639537][ T29] audit: type=1326 audit(1775777584.469:8969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7862 comm="syz.4.8776" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 2653.639614][ T29] audit: type=1326 audit(1775777584.469:8970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7862 comm="syz.4.8776" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 2653.639653][ T29] audit: type=1326 audit(1775777584.469:8971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7862 comm="syz.4.8776" exe="/root/syz-executor" sig=0 arch=40000003 syscall=300 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 2653.639689][ T29] audit: type=1326 audit(1775777584.469:8972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7862 comm="syz.4.8776" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 2653.639745][ T29] audit: type=1326 audit(1775777584.469:8973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7862 comm="syz.4.8776" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 2653.639784][ T29] audit: type=1326 audit(1775777584.469:8974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7862 comm="syz.4.8776" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 2653.639822][ T29] audit: type=1326 audit(1775777584.469:8975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7862 comm="syz.4.8776" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 2653.639881][ T29] audit: type=1326 audit(1775777584.469:8976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7862 comm="syz.4.8776" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 2655.593940][T22137] usbhid 2-1:0.0: can't add hid device: -71 [ 2655.600056][T22137] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2655.782702][T22137] usb 2-1: USB disconnect, device number 32 [ 2656.036680][ T7881] ip6tnl1: entered promiscuous mode [ 2656.059131][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 2656.059149][ T29] audit: type=1326 audit(1775777586.919:8981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.0.8782" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 2656.078088][ T7886] xt_TCPMSS: Only works on TCP SYN packets [ 2656.117058][ T7887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8783'. [ 2656.131118][ T7889] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8780'. [ 2656.158475][ T7879] fuse: Invalid uid '00000000000000001025' [ 2656.180079][ T7881] ip6tnl1: entered allmulticast mode [ 2656.240565][ T29] audit: type=1326 audit(1775777586.919:8982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.0.8782" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 2656.332994][ T29] audit: type=1326 audit(1775777586.919:8983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.0.8782" exe="/root/syz-executor" sig=0 arch=40000003 syscall=300 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 2656.475040][ T29] audit: type=1326 audit(1775777586.919:8984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.0.8782" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 2656.577522][ T29] audit: type=1326 audit(1775777586.919:8985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.0.8782" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 2656.639906][ T29] audit: type=1326 audit(1775777586.919:8986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.0.8782" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 2656.688821][ T29] audit: type=1326 audit(1775777586.919:8987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.0.8782" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 2656.713066][ T29] audit: type=1326 audit(1775777586.919:8988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.0.8782" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 2656.741806][ T29] audit: type=1326 audit(1775777586.929:8989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.0.8782" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 2656.772985][ T29] audit: type=1326 audit(1775777586.929:8990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.0.8782" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf7fa8f6c code=0x7ffc0000 [ 2657.055734][ T7912] netlink: 152 bytes leftover after parsing attributes in process `syz.6.8789'. [ 2657.247325][ T7911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8788'. [ 2658.475099][ T7925] FAULT_INJECTION: forcing a failure. [ 2658.475099][ T7925] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2658.528332][ T7925] CPU: 0 UID: 0 PID: 7925 Comm: syz.3.8793 Tainted: G L syzkaller #0 PREEMPT(full) [ 2658.528354][ T7925] Tainted: [L]=SOFTLOCKUP [ 2658.528359][ T7925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2658.528366][ T7925] Call Trace: [ 2658.528371][ T7925] [ 2658.528376][ T7925] dump_stack_lvl+0xe8/0x150 [ 2658.528397][ T7925] should_fail_ex+0x412/0x560 [ 2658.528417][ T7925] _copy_to_user+0x31/0xb0 [ 2658.528431][ T7925] simple_read_from_buffer+0xe1/0x170 [ 2658.528450][ T7925] proc_fail_nth_read+0x1bb/0x230 [ 2658.528467][ T7925] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2658.528485][ T7925] ? rw_verify_area+0x2a6/0x4d0 [ 2658.528497][ T7925] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2658.528512][ T7925] vfs_read+0x20c/0xa70 [ 2658.528522][ T7925] ? fdget_pos+0x246/0x320 [ 2658.528534][ T7925] ? __pfx___mutex_lock+0x10/0x10 [ 2658.528550][ T7925] ? __pfx_vfs_read+0x10/0x10 [ 2658.528562][ T7925] ? __fget_files+0x2a/0x420 [ 2658.528573][ T7925] ? __fget_files+0x3a0/0x420 [ 2658.528581][ T7925] ? __fget_files+0x2a/0x420 [ 2658.528598][ T7925] ksys_read+0x150/0x270 [ 2658.528611][ T7925] ? __pfx_ksys_read+0x10/0x10 [ 2658.528624][ T7925] ? asm_int80_emulation+0x1a/0x20 [ 2658.528638][ T7925] do_int80_emulation+0x173/0x4d0 [ 2658.528652][ T7925] ? trace_irq_disable+0x3b/0x150 [ 2658.528661][ T7925] ? asm_int80_emulation+0x1a/0x20 [ 2658.528670][ T7925] ? clear_bhb_loop+0x40/0x90 [ 2658.528681][ T7925] ? clear_bhb_loop+0x40/0x90 [ 2658.528694][ T7925] asm_int80_emulation+0x1a/0x20 [ 2658.528704][ T7925] RIP: 0023:0xf7135cab [ 2658.528716][ T7925] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 2658.528725][ T7925] RSP: 002b:00000000f53cc4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 2658.528737][ T7925] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53cc5d0 [ 2658.528744][ T7925] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 2658.528750][ T7925] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2658.528756][ T7925] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2658.528761][ T7925] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2658.528776][ T7925] [ 2658.981837][T30384] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 2659.131772][T30384] usb 7-1: Using ep0 maxpacket: 16 [ 2659.139020][T30384] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2659.170962][T30384] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2659.220590][T30384] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2659.237730][T30384] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 2659.257197][T30384] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2659.471204][T30384] usb 7-1: config 0 descriptor?? [ 2660.145468][ T7944] xt_TCPMSS: Only works on TCP SYN packets [ 2661.284487][ T7957] binder: 7956:7957 ioctl c0306201 0 returned -14 [ 2661.326619][ T7957] binder: 7956:7957 ioctl c0306201 0 returned -14 [ 2662.182049][ T7967] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2662.401956][T22122] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 2662.604504][T22122] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 2662.715417][ T7975] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8804'. [ 2662.828365][T22122] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 2662.953778][T22122] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 2663.021733][T22122] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2663.036945][T22122] usb 5-1: Product: syz [ 2663.051721][T22122] usb 5-1: Manufacturer: syz [ 2663.063671][T22122] usb 5-1: SerialNumber: syz [ 2663.079317][T22122] usb 5-1: config 0 descriptor?? [ 2663.193868][T30384] usbhid 7-1:0.0: can't add hid device: -71 [ 2663.218489][T30384] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 2663.286154][T30384] usb 7-1: USB disconnect, device number 2 [ 2663.570549][T22122] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 2664.538596][ T7990] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8807'. [ 2664.591920][T22122] gspca_sunplus: reg_r err -71 [ 2664.774573][T22122] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 2664.883490][T22122] usb 5-1: USB disconnect, device number 105 [ 2665.877398][ T8006] xt_TCPMSS: Only works on TCP SYN packets [ 2665.911969][ T8004] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8809'. [ 2666.107995][ T8010] openvswitch: netlink: Message has 1 unknown bytes. [ 2666.115064][ T8010] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2666.435178][ T8009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8812'. [ 2666.914610][ T8020] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2666.925854][ T8020] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2667.032573][ T8023] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8813'. [ 2667.110120][ T8020] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(12) [ 2667.116784][ T8020] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2667.383620][ T8025] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2667.423389][ T8025] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2667.463035][ T8025] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2667.592676][ T8020] vhci_hcd vhci_hcd.0: Device attached [ 2667.825058][T22147] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 2667.836354][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 2667.942605][T22122] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 2667.981783][T22147] usb 5-1: device descriptor read/64, error -32 [ 2668.021933][T22122] usb 41-3: new full-speed USB device number 14 using vhci_hcd [ 2668.260142][T22147] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 2668.462521][T22147] usb 5-1: device descriptor read/64, error -71 [ 2668.612907][T22147] usb usb5-port1: attempt power cycle [ 2669.026876][ T8043] openvswitch: netlink: Message has 1 unknown bytes. [ 2669.040868][ T8043] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2669.077050][ T8046] ip6t_REJECT: ECHOREPLY is not supported [ 2669.097215][T22147] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 2669.156027][T22147] usb 5-1: device descriptor read/8, error -71 [ 2669.352042][T22118] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 2669.432564][T22147] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 2669.525454][T22118] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 2669.545968][T22118] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2669.562056][T22147] usb 5-1: device descriptor read/8, error -71 [ 2669.748980][T22147] usb usb5-port1: unable to enumerate USB device [ 2669.774740][T22118] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 2669.803416][T22118] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 2669.833390][T22118] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 2669.843636][T22118] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2669.862894][T22118] usb 7-1: Product: syz [ 2669.884803][T22118] usb 7-1: Manufacturer: syz [ 2669.940763][T22118] usb 7-1: SerialNumber: syz [ 2670.228978][T22118] usb 7-1: config 0 descriptor?? [ 2670.316298][ T8021] vhci_hcd: connection reset by peer [ 2670.324865][T24222] vhci_hcd vhci_hcd.4: stop threads [ 2670.332193][T24222] vhci_hcd vhci_hcd.4: release socket [ 2670.355052][T24222] vhci_hcd vhci_hcd.4: disconnect device [ 2670.858997][T22118] adutux 7-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 2671.074690][T22118] usb 7-1: USB disconnect, device number 3 [ 2671.121557][ T8050] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2673.114412][ T8066] xt_TCPMSS: Only works on TCP SYN packets [ 2673.191852][T22122] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 2673.630293][ T8074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8826'. [ 2674.028282][ T8079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8828'. [ 2674.217398][ T8083] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8827'. [ 2675.014101][ T8089] openvswitch: netlink: Message has 1 unknown bytes. [ 2675.020826][ T8089] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2676.210772][ T8096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8831'. [ 2676.311800][T22134] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 2676.472758][T22134] usb 4-1: Using ep0 maxpacket: 32 [ 2676.491360][T22134] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 2676.502566][T22134] usb 4-1: config 0 has no interface number 0 [ 2676.558955][T22134] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2676.574642][ T8100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8832'. [ 2676.591764][T22134] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2676.621750][T22134] usb 4-1: Product: syz [ 2676.626065][T22134] usb 4-1: Manufacturer: syz [ 2676.630650][T22134] usb 4-1: SerialNumber: syz [ 2676.703874][T22134] usb 4-1: config 0 descriptor?? [ 2676.732104][T22134] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2676.980152][T22134] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2677.054274][T22134] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2677.168666][ T8102] netlink: 116 bytes leftover after parsing attributes in process `syz.6.8833'. [ 2677.367100][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2677.375215][T22134] usb 4-1: USB disconnect, device number 4 [ 2677.387379][T22134] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2677.496455][T22134] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2677.544558][T22134] quatech2 4-1:0.51: device disconnected [ 2677.631778][T22118] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 2677.804856][T22118] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2677.832856][T22118] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2677.862703][T22118] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2677.936939][T22118] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 2677.960549][ T8102] netlink: 116 bytes leftover after parsing attributes in process `syz.6.8833'. [ 2677.980774][T22118] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 2678.021947][T22118] usb 7-1: Product: syz [ 2678.033485][T22118] usb 7-1: Manufacturer: syz [ 2678.121673][T22118] usb 7-1: SerialNumber: syz [ 2678.305228][ T8102] netlink: 116 bytes leftover after parsing attributes in process `syz.6.8833'. [ 2678.577694][ T8115] openvswitch: netlink: Message has 1 unknown bytes. [ 2678.670918][ T8115] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2678.698087][T22118] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2679.137746][ T8122] openvswitch: netlink: Message has 1 unknown bytes. [ 2679.145718][ T8122] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2680.103349][ T8131] xt_TCPMSS: Only works on TCP SYN packets [ 2680.136526][T30384] usb 7-1: USB disconnect, device number 4 [ 2680.163340][T30384] usblp0: removed [ 2680.208410][ T8133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8838'. [ 2680.920018][ T8143] netlink: 'syz.3.8842': attribute type 10 has an invalid length. [ 2681.030748][ T8144] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8840'. [ 2681.283824][T30384] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 2681.541738][T30384] usb 4-1: Using ep0 maxpacket: 8 [ 2681.551529][T30384] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2681.587805][T30384] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2681.634870][T30384] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 2681.689779][T30384] usb 4-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 2681.752008][ T8145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8841'. [ 2681.828201][T30384] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2681.865294][T30384] usb 4-1: config 0 descriptor?? [ 2682.296861][T30384] hid_parser_main: 28 callbacks suppressed [ 2682.296886][T30384] elecom 0003:056E:00FE.0038: unknown main item tag 0x0 [ 2682.331743][T30384] elecom 0003:056E:00FE.0038: unknown main item tag 0x0 [ 2682.358376][T30384] elecom 0003:056E:00FE.0038: unknown main item tag 0x0 [ 2682.392352][T30384] elecom 0003:056E:00FE.0038: unknown main item tag 0x0 [ 2682.419752][T30384] elecom 0003:056E:00FE.0038: unknown main item tag 0x0 [ 2682.472977][T30384] elecom 0003:056E:00FE.0038: unknown main item tag 0x0 [ 2682.480171][T30384] elecom 0003:056E:00FE.0038: unknown main item tag 0x0 [ 2682.557505][T30384] elecom 0003:056E:00FE.0038: unknown main item tag 0x0 [ 2682.596480][T30384] elecom 0003:056E:00FE.0038: unknown main item tag 0x0 [ 2682.622333][T30384] elecom 0003:056E:00FE.0038: unknown main item tag 0x0 [ 2682.660983][T30384] elecom 0003:056E:00FE.0038: hidraw0: USB HID v0.00 Device [HID 056e:00fe] on usb-dummy_hcd.3-1/input0 [ 2682.693017][ T8148] FAULT_INJECTION: forcing a failure. [ 2682.693017][ T8148] name failslab, interval 1, probability 0, space 0, times 0 [ 2682.736730][T30384] usb 4-1: USB disconnect, device number 5 [ 2682.817507][ T8148] CPU: 0 UID: 0 PID: 8148 Comm: syz.6.8843 Tainted: G L syzkaller #0 PREEMPT(full) [ 2682.817537][ T8148] Tainted: [L]=SOFTLOCKUP [ 2682.817544][ T8148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2682.817555][ T8148] Call Trace: [ 2682.817563][ T8148] [ 2682.817571][ T8148] dump_stack_lvl+0xe8/0x150 [ 2682.817600][ T8148] should_fail_ex+0x412/0x560 [ 2682.817629][ T8148] should_failslab+0xa8/0x100 [ 2682.817653][ T8148] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 2682.817673][ T8148] ? __alloc_skb+0x186/0x7d0 [ 2682.817692][ T8148] ? __alloc_skb+0x1d0/0x7d0 [ 2682.817709][ T8148] ? __local_bh_enable_ip+0xd0/0x130 [ 2682.817735][ T8148] __alloc_skb+0x1d0/0x7d0 [ 2682.817753][ T8148] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 2682.817776][ T8148] netlink_sendmsg+0x5d4/0xb40 [ 2682.817804][ T8148] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2682.817827][ T8148] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2682.817854][ T8148] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2682.817877][ T8148] ____sys_sendmsg+0x972/0x9f0 [ 2682.817908][ T8148] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2682.817943][ T8148] ? kstrtoull+0x12f/0x1d0 [ 2682.817974][ T8148] ___sys_sendmsg+0x2a5/0x360 [ 2682.818000][ T8148] ? __pfx____sys_sendmsg+0x10/0x10 [ 2682.818025][ T8148] ? get_pid_task+0x20/0x1f0 [ 2682.818042][ T8148] ? get_pid_task+0x20/0x1f0 [ 2682.818058][ T8148] ? get_pid_task+0x20/0x1f0 [ 2682.818098][ T8148] ? __fget_files+0x2a/0x420 [ 2682.818114][ T8148] ? __fget_files+0x3a0/0x420 [ 2682.818139][ T8148] __sys_sendmsg+0x183/0x260 [ 2682.818163][ T8148] ? __pfx___sys_sendmsg+0x10/0x10 [ 2682.818203][ T8148] __do_fast_syscall_32+0x20d/0x640 [ 2682.818230][ T8148] ? do_fast_syscall_32+0x33/0x70 [ 2682.818252][ T8148] ? asm_int80_emulation+0x1a/0x20 [ 2682.818270][ T8148] ? do_int80_emulation+0x274/0x4d0 [ 2682.818292][ T8148] ? trace_irq_disable+0x3b/0x150 [ 2682.818312][ T8148] do_fast_syscall_32+0x33/0x70 [ 2682.818337][ T8148] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2682.818359][ T8148] RIP: 0023:0xf702ef6c [ 2682.818376][ T8148] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2682.818392][ T8148] RSP: 002b:00000000f541d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2682.818411][ T8148] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000340 [ 2682.818425][ T8148] RDX: 0000000024004804 RSI: 0000000000000000 RDI: 0000000000000000 [ 2682.818436][ T8148] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2682.818446][ T8148] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2682.818457][ T8148] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2682.818480][ T8148] [ 2683.740996][ T8162] binder: 8152:8162 ioctl c0306201 80000180 returned -14 [ 2683.818667][ T8164] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8848'. [ 2684.047129][ T8149] fido_id[8149]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 2684.117269][ T8167] tipc: Started in network mode [ 2684.201740][ T8167] tipc: Node identity ac1414aa, cluster identity 4711 [ 2684.278328][ T8167] tipc: Enabling of bearer rejected, failed to enable media [ 2684.316748][ T8170] openvswitch: netlink: Message has 1 unknown bytes. [ 2684.332660][ T8170] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2685.157038][ T8176] netlink: 116 bytes leftover after parsing attributes in process `syz.0.8851'. [ 2685.373526][ T8182] openvswitch: netlink: Message has 1 unknown bytes. [ 2685.380289][ T8182] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2685.515266][ T8176] netlink: 116 bytes leftover after parsing attributes in process `syz.0.8851'. [ 2685.633708][ T8187] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8853'. [ 2685.834610][ T8191] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8854'. [ 2685.910514][ T8176] netlink: 116 bytes leftover after parsing attributes in process `syz.0.8851'. [ 2686.404547][ T8197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8856'. [ 2686.415934][ T8197] FAULT_INJECTION: forcing a failure. [ 2686.415934][ T8197] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2686.492154][ T8197] CPU: 0 UID: 0 PID: 8197 Comm: syz.4.8856 Tainted: G L syzkaller #0 PREEMPT(full) [ 2686.492187][ T8197] Tainted: [L]=SOFTLOCKUP [ 2686.492194][ T8197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2686.492206][ T8197] Call Trace: [ 2686.492213][ T8197] [ 2686.492221][ T8197] dump_stack_lvl+0xe8/0x150 [ 2686.492250][ T8197] should_fail_ex+0x412/0x560 [ 2686.492281][ T8197] _copy_from_user+0x2d/0xb0 [ 2686.492305][ T8197] move_addr_to_kernel+0x7e/0x160 [ 2686.492332][ T8197] get_compat_msghdr+0x3d8/0x4c0 [ 2686.492354][ T8197] ? __lock_acquire+0x6b5/0x2cf0 [ 2686.492380][ T8197] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2686.492402][ T8197] ? kstrtoull+0x12f/0x1d0 [ 2686.492432][ T8197] ___sys_sendmsg+0x201/0x360 [ 2686.492459][ T8197] ? __pfx____sys_sendmsg+0x10/0x10 [ 2686.492483][ T8197] ? get_pid_task+0x20/0x1f0 [ 2686.492500][ T8197] ? get_pid_task+0x20/0x1f0 [ 2686.492514][ T8197] ? get_pid_task+0x20/0x1f0 [ 2686.492554][ T8197] ? __fget_files+0x2a/0x420 [ 2686.492571][ T8197] ? __fget_files+0x3a0/0x420 [ 2686.492596][ T8197] __sys_sendmsg+0x183/0x260 [ 2686.492620][ T8197] ? __pfx___sys_sendmsg+0x10/0x10 [ 2686.492662][ T8197] __do_fast_syscall_32+0x20d/0x640 [ 2686.492688][ T8197] ? do_fast_syscall_32+0x33/0x70 [ 2686.492710][ T8197] ? asm_int80_emulation+0x1a/0x20 [ 2686.492727][ T8197] ? do_int80_emulation+0x274/0x4d0 [ 2686.492749][ T8197] ? trace_irq_disable+0x3b/0x150 [ 2686.492776][ T8197] do_fast_syscall_32+0x33/0x70 [ 2686.492801][ T8197] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2686.492822][ T8197] RIP: 0023:0xf6fdef6c [ 2686.492839][ T8197] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2686.492855][ T8197] RSP: 002b:00000000f53cd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2686.492874][ T8197] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800003c0 [ 2686.492887][ T8197] RDX: 0000000000040040 RSI: 0000000000000000 RDI: 0000000000000000 [ 2686.492899][ T8197] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2686.492909][ T8197] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2686.492920][ T8197] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2686.492946][ T8197] [ 2686.758351][ T8199] fuse: blksize only supported for fuseblk [ 2686.893377][ T8204] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8858'. [ 2687.620492][ T8210] binder: 8205:8210 ioctl c0306201 80000180 returned -14 [ 2687.877100][ T8220] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8862'. [ 2688.624288][ T8229] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8865'. [ 2689.196707][ T8232] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8866'. [ 2689.982912][ T8238] openvswitch: netlink: Message has 1 unknown bytes. [ 2689.992484][ T8238] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2690.508727][ T8248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8877'. [ 2691.147186][ T8259] openvswitch: netlink: Message has 1 unknown bytes. [ 2691.154880][ T8259] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2692.196338][ T8271] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8876'. [ 2692.584365][ T8280] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8878'. [ 2693.534102][ T8286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8880'. [ 2694.426086][ T8295] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8891'. [ 2694.572891][ T8300] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8881'. [ 2696.685481][ T8316] openvswitch: netlink: Message has 1 unknown bytes. [ 2696.693096][ T8316] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2697.131569][ T8318] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2697.523732][T22147] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 2697.758578][ T8325] openvswitch: netlink: Message has 1 unknown bytes. [ 2697.773375][T22147] usb 7-1: Using ep0 maxpacket: 32 [ 2697.808505][ T8325] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2697.838219][T22147] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2697.860984][T22147] usb 7-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2697.891743][T22147] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2697.911048][T22147] usb 7-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.00 [ 2697.937951][T22147] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2697.999873][ T8330] FAULT_INJECTION: forcing a failure. [ 2697.999873][ T8330] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2698.028225][T22147] usb 7-1: config 0 descriptor?? [ 2698.033745][ T8330] CPU: 0 UID: 0 PID: 8330 Comm: syz.0.8892 Tainted: G L syzkaller #0 PREEMPT(full) [ 2698.033771][ T8330] Tainted: [L]=SOFTLOCKUP [ 2698.033775][ T8330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2698.033781][ T8330] Call Trace: [ 2698.033787][ T8330] [ 2698.033792][ T8330] dump_stack_lvl+0xe8/0x150 [ 2698.033815][ T8330] should_fail_ex+0x412/0x560 [ 2698.033835][ T8330] _copy_to_iter+0x1e4/0x17d0 [ 2698.033849][ T8330] ? __lock_acquire+0x6b5/0x2cf0 [ 2698.033866][ T8330] ? __pfx__copy_to_iter+0x10/0x10 [ 2698.033876][ T8330] ? ima_match_policy+0x112/0x21e0 [ 2698.033901][ T8330] __skb_datagram_iter+0x41a/0x980 [ 2698.033926][ T8330] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 2698.033956][ T8330] skb_copy_datagram_iter+0xb5/0x270 [ 2698.033982][ T8330] mptcp_recvmsg+0x521/0x1260 [ 2698.034021][ T8330] ? __pfx_mptcp_recvmsg+0x10/0x10 [ 2698.034052][ T8330] ? aa_sk_perm+0x6d5/0x900 [ 2698.034081][ T8330] ? __pfx_mptcp_recvmsg+0x10/0x10 [ 2698.034103][ T8330] inet6_recvmsg+0x247/0x6c0 [ 2698.034129][ T8330] ? __pfx_aa_sk_perm+0x10/0x10 [ 2698.034156][ T8330] ? __pfx_inet6_recvmsg+0x10/0x10 [ 2698.034180][ T8330] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2698.034208][ T8330] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 2698.034227][ T8330] ? security_socket_recvmsg+0x7e/0x2c0 [ 2698.034248][ T8330] ? __pfx_inet6_recvmsg+0x10/0x10 [ 2698.034273][ T8330] sock_recvmsg+0xfa/0x1b0 [ 2698.034294][ T8330] ____sys_recvmsg+0x1e6/0x4a0 [ 2698.034327][ T8330] ? __pfx_____sys_recvmsg+0x10/0x10 [ 2698.034348][ T8330] ? get_compat_msghdr+0x34b/0x4c0 [ 2698.034389][ T8330] ___sys_recvmsg+0x215/0x590 [ 2698.034415][ T8330] ? __lock_acquire+0x6b5/0x2cf0 [ 2698.034437][ T8330] ? __pfx____sys_recvmsg+0x10/0x10 [ 2698.034489][ T8330] ? __fget_files+0x3a0/0x420 [ 2698.034516][ T8330] do_recvmmsg+0x3a5/0x800 [ 2698.034548][ T8330] ? __pfx_do_recvmmsg+0x10/0x10 [ 2698.034583][ T8330] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 2698.034613][ T8330] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2698.034644][ T8330] __sys_recvmmsg+0x1a5/0x290 [ 2698.034669][ T8330] ? __pfx___sys_recvmmsg+0x10/0x10 [ 2698.034781][ T8330] ? ksys_write+0x242/0x270 [ 2698.034821][ T8330] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 2698.034848][ T8330] __do_fast_syscall_32+0x20d/0x640 [ 2698.034873][ T8330] ? do_fast_syscall_32+0x33/0x70 [ 2698.034893][ T8330] ? asm_int80_emulation+0x1a/0x20 [ 2698.034910][ T8330] ? do_int80_emulation+0x274/0x4d0 [ 2698.034934][ T8330] ? trace_irq_disable+0x3b/0x150 [ 2698.034952][ T8330] do_fast_syscall_32+0x33/0x70 [ 2698.034969][ T8330] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2698.034983][ T8330] RIP: 0023:0xf7fa8f6c [ 2698.034996][ T8330] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2698.035005][ T8330] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 2698.035017][ T8330] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080006280 [ 2698.035025][ T8330] RDX: 0000000000000002 RSI: 0000000040000140 RDI: 0000000000000000 [ 2698.035032][ T8330] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2698.035038][ T8330] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2698.035044][ T8330] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2698.035058][ T8330] [ 2698.757557][ T8332] FAULT_INJECTION: forcing a failure. [ 2698.757557][ T8332] name failslab, interval 1, probability 0, space 0, times 0 [ 2698.814906][T22147] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input225 [ 2698.859026][ T8332] CPU: 1 UID: 0 PID: 8332 Comm: syz.4.8893 Tainted: G L syzkaller #0 PREEMPT(full) [ 2698.859056][ T8332] Tainted: [L]=SOFTLOCKUP [ 2698.859063][ T8332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2698.859074][ T8332] Call Trace: [ 2698.859081][ T8332] [ 2698.859090][ T8332] dump_stack_lvl+0xe8/0x150 [ 2698.859118][ T8332] should_fail_ex+0x412/0x560 [ 2698.859150][ T8332] should_failslab+0xa8/0x100 [ 2698.859173][ T8332] ? skb_clone+0x212/0x3a0 [ 2698.859195][ T8332] kmem_cache_alloc_noprof+0x87/0x650 [ 2698.859214][ T8332] ? ipv6_chk_mcast_addr+0x2e/0x860 [ 2698.859241][ T8332] skb_clone+0x212/0x3a0 [ 2698.859263][ T8332] ? ip6_finish_output2+0xed4/0x13e0 [ 2698.859287][ T8332] ip6_finish_output2+0xee3/0x13e0 [ 2698.859317][ T8332] ? ip6_output+0x126/0x550 [ 2698.859335][ T8332] ip6_output+0x340/0x550 [ 2698.859357][ T8332] ? ip6_mr_output+0x1f3/0x11c0 [ 2698.859374][ T8332] ip6_mr_output+0x549/0x11c0 [ 2698.859399][ T8332] ? __flow_hash_from_keys+0x45b/0x6e0 [ 2698.859424][ T8332] ? ip6_mr_output+0x1f3/0x11c0 [ 2698.859443][ T8332] ? __pfx_ip6_mr_output+0x10/0x10 [ 2698.859467][ T8332] ? __ip6_local_out+0x15c/0x940 [ 2698.859497][ T8332] ? __ip6_local_out+0x8f8/0x940 [ 2698.859521][ T8332] ? ip6_cork_release+0x92/0x150 [ 2698.859542][ T8332] ? __ip6_local_out+0x15c/0x940 [ 2698.859570][ T8332] ? __pfx___ip6_local_out+0x10/0x10 [ 2698.859620][ T8332] ? ip6_local_out+0x16e/0x190 [ 2698.859641][ T8332] ? ip6_send_skb+0x10f/0x390 [ 2698.859662][ T8332] ip6_send_skb+0x1d5/0x390 [ 2698.859686][ T8332] udp_v6_send_skb+0xc17/0x1860 [ 2698.859724][ T8332] udp_v6_push_pending_frames+0xa2/0x140 [ 2698.859748][ T8332] udpv6_sendmsg+0xf36/0x2560 [ 2698.859777][ T8332] ? __pfx_udplite_getfrag+0x10/0x10 [ 2698.859796][ T8332] ? __lock_acquire+0x6b5/0x2cf0 [ 2698.859821][ T8332] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 2698.859879][ T8332] ? inet_send_prepare+0x5c/0x270 [ 2698.859904][ T8332] ? __pfx_inet6_sendmsg+0x10/0x10 [ 2698.859930][ T8332] ? inet6_sendmsg+0xe4/0x120 [ 2698.859953][ T8332] ? __pfx_inet6_sendmsg+0x10/0x10 [ 2698.859978][ T8332] __sys_sendto+0x4a3/0x710 [ 2698.860003][ T8332] ? __pfx___sys_sendto+0x10/0x10 [ 2698.860048][ T8332] ? fput+0xa0/0xd0 [ 2698.860074][ T8332] ? ksys_write+0x242/0x270 [ 2698.860099][ T8332] __ia32_sys_sendto+0xdd/0x100 [ 2698.860122][ T8332] __do_fast_syscall_32+0x20d/0x640 [ 2698.860148][ T8332] ? do_fast_syscall_32+0x33/0x70 [ 2698.860171][ T8332] ? asm_int80_emulation+0x1a/0x20 [ 2698.860187][ T8332] ? do_int80_emulation+0x274/0x4d0 [ 2698.860209][ T8332] ? trace_irq_disable+0x3b/0x150 [ 2698.860229][ T8332] do_fast_syscall_32+0x33/0x70 [ 2698.860252][ T8332] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2698.860274][ T8332] RIP: 0023:0xf6fdef6c [ 2698.860297][ T8332] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2698.860312][ T8332] RSP: 002b:00000000f53cd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 2698.860331][ T8332] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001380 [ 2698.860343][ T8332] RDX: 0000000000000001 RSI: 0000000000004800 RDI: 0000000000000000 [ 2698.860354][ T8332] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2698.860363][ T8332] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2698.860374][ T8332] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2698.860399][ T8332] [ 2699.232965][T22147] usb 7-1: USB disconnect, device number 5 [ 2699.239872][ T5178] bcm5974 7-1:0.0: could not read from device [ 2699.480988][ T8340] binder: 8334:8340 ioctl c0306201 0 returned -14 [ 2699.539057][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 2699.539076][ T29] audit: type=1326 audit(1775777630.399:9047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8345 comm="syz.4.8897" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 2699.573631][ T29] audit: type=1326 audit(1775777630.439:9048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8345 comm="syz.4.8897" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 2699.597886][ T29] audit: type=1326 audit(1775777630.439:9049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8345 comm="syz.4.8897" exe="/root/syz-executor" sig=0 arch=40000003 syscall=300 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 2699.598731][ T8344] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN PTI [ 2699.622638][ T7729] udevd[7729]: Error opening device "/dev/input/event4": No such file or directory [ 2699.632045][ T8344] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 2699.632074][ T8344] CPU: 0 UID: 0 PID: 8344 Comm: syz.0.8896 Tainted: G L syzkaller #0 PREEMPT(full) [ 2699.632097][ T8344] Tainted: [L]=SOFTLOCKUP [ 2699.632104][ T8344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2699.632117][ T8344] RIP: 0010:memcpy_sglist+0x420/0x730 [ 2699.632147][ T8344] Code: e8 55 b4 52 fd f6 c3 01 0f 85 0a 01 00 00 e8 67 af 52 fd 4c 89 f3 eb 07 e8 5d af 52 fd 31 db 4c 8d 7b 08 4c 89 f8 48 c1 e8 03 <0f> b6 04 28 84 c0 0f 85 1d 02 00 00 41 8b 07 89 44 24 04 49 8d 7d [ 2699.700863][ T8344] RSP: 0018:ffffc900034677d8 EFLAGS: 00010202 [ 2699.707018][ T8344] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000080000 [ 2699.715180][ T8344] RDX: ffffc9000e381000 RSI: 00000000000000ae RDI: 00000000000000af [ 2699.723330][ T8344] RBP: dffffc0000000000 R08: 00000000ff8fa39c R09: 1ffff1100dec0008 [ 2699.731310][ T8344] R10: dffffc0000000000 R11: ffffed100dec0009 R12: 0000000000000002 [ 2699.739321][ T8344] R13: ffff888032195cc0 R14: ffff88803a480020 R15: 0000000000000008 [ 2699.747479][ T8344] FS: 0000000000000000(0000) GS:ffff888125454000(0063) knlGS:00000000f5466b40 [ 2699.756444][ T8344] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 2699.763113][ T8344] CR2: 0000000080001700 CR3: 0000000082e88000 CR4: 00000000003526f0 [ 2699.771353][ T8344] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2699.779477][ T8344] DR3: 00000000000f000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2699.787488][ T8344] Call Trace: [ 2699.790798][ T8344] [ 2699.793760][ T8344] aead_recvmsg+0x719/0x1030 [ 2699.798415][ T8344] ? __pfx_aead_recvmsg+0x10/0x10 [ 2699.803469][ T8344] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2699.808406][ T8344] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 2699.813714][ T8344] ? security_socket_recvmsg+0x7e/0x2c0 [ 2699.819310][ T8344] ? __pfx_aead_recvmsg+0x10/0x10 [ 2699.824349][ T8344] sock_recvmsg+0x172/0x1b0 [ 2699.829487][ T8344] ____sys_recvmsg+0x1e6/0x4a0 [ 2699.834400][ T8344] ? __pfx_____sys_recvmsg+0x10/0x10 [ 2699.839730][ T8344] ? get_compat_msghdr+0x34b/0x4c0 [ 2699.844845][ T8344] ___sys_recvmsg+0x215/0x590 [ 2699.849518][ T8344] ? __pfx____sys_recvmsg+0x10/0x10 [ 2699.854730][ T8344] ? __pfx_futex_wait+0x10/0x10 [ 2699.859584][ T8344] ? __fget_files+0x3a0/0x420 [ 2699.864257][ T8344] __sys_recvmsg+0x180/0x250 [ 2699.868935][ T8344] ? __pfx___sys_recvmsg+0x10/0x10 [ 2699.874057][ T8344] __do_fast_syscall_32+0x20d/0x640 [ 2699.879474][ T8344] ? lockdep_hardirqs_on+0x7a/0x110 [ 2699.884725][ T8344] ? do_fast_syscall_32+0x33/0x70 [ 2699.889783][ T8344] ? irqentry_exit+0x10e/0x620 [ 2699.894581][ T8344] ? rcu_is_watching+0x15/0xb0 [ 2699.899441][ T8344] do_fast_syscall_32+0x33/0x70 [ 2699.904303][ T8344] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2699.910634][ T8344] RIP: 0023:0xf7fa8f6c [ 2699.914813][ T8344] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2699.935086][ T8344] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000174 [ 2699.943498][ T8344] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800005c0 [ 2699.951655][ T8344] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2699.959666][ T8344] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2699.967741][ T8344] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2699.975737][ T8344] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2699.983723][ T8344] [ 2699.986775][ T8344] Modules linked in: [ 2699.991697][ T8344] ---[ end trace 0000000000000000 ]--- [ 2700.051772][ T8344] RIP: 0010:memcpy_sglist+0x420/0x730 [ 2700.057423][ T8344] Code: e8 55 b4 52 fd f6 c3 01 0f 85 0a 01 00 00 e8 67 af 52 fd 4c 89 f3 eb 07 e8 5d af 52 fd 31 db 4c 8d 7b 08 4c 89 f8 48 c1 e8 03 <0f> b6 04 28 84 c0 0f 85 1d 02 00 00 41 8b 07 89 44 24 04 49 8d 7d [ 2700.176562][ T8344] RSP: 0018:ffffc900034677d8 EFLAGS: 00010202 [ 2700.185464][ T7729] udevd[7729]: Unable to EVIOCGABS device "/dev/input/event4" [ 2700.201685][ T29] audit: type=1326 audit(1775777630.439:9050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8345 comm="syz.4.8897" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 2700.232543][ T7729] udevd[7729]: Unable to EVIOCGABS device "/dev/input/event4" [ 2700.242455][ T8344] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000080000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 2700.283530][ T7729] udevd[7729]: Unable to EVIOCGABS device "/dev/input/event4" [ 2700.342735][ T8344] RDX: ffffc9000e381000 RSI: 00000000000000ae RDI: 00000000000000af [ 2700.350780][ T8344] RBP: dffffc0000000000 R08: 00000000ff8fa39c R09: 1ffff1100dec0008 [ 2700.359544][ T7729] udevd[7729]: Unable to EVIOCGABS device "/dev/input/event4" [ 2700.381754][ T29] audit: type=1326 audit(1775777630.959:9051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8345 comm="syz.4.8897" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 2700.473159][ T29] audit: type=1326 audit(1775777630.959:9052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8345 comm="syz.4.8897" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 2700.522534][ T8344] R10: dffffc0000000000 R11: ffffed100dec0009 R12: 0000000000000002 [ 2700.531553][ T8344] R13: ffff888032195cc0 R14: ffff88803a480020 R15: 0000000000000008 [ 2700.558376][ T29] audit: type=1326 audit(1775777630.959:9053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8345 comm="syz.4.8897" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 2700.613776][ T8344] FS: 0000000000000000(0000) GS:ffff888125454000(0063) knlGS:00000000f5466b40 [ 2700.623519][ T29] audit: type=1326 audit(1775777630.959:9054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8345 comm="syz.4.8897" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 2700.623556][ T29] audit: type=1326 audit(1775777630.959:9055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8345 comm="syz.4.8897" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 2700.623585][ T29] audit: type=1326 audit(1775777630.959:9056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8345 comm="syz.4.8897" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 2700.734969][ T8344] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 2700.741883][ T8344] CR2: 0000000031622ff8 CR3: 0000000082e88000 CR4: 00000000003526f0 [ 2700.872415][ T8344] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2700.881223][ T8344] DR3: 00000000000f000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2700.982408][ T8344] Kernel panic - not syncing: Fatal exception [ 2700.989227][ T8344] Kernel Offset: disabled [ 2700.993552][ T8344] Rebooting in 86400 seconds..