last executing test programs: 8.353375108s ago: executing program 2 (id=886): socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x2, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$packet(0x11, 0x3, 0x300) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000108000000000000000000000000fd8b53ceffe73030a856795da482262ee7464214a5ff738fe1dd88961b9e2b3df04940ee20f7916846ed8018d26adafdaa4e01e575", @ANYRES32=0x0, @ANYBLOB="312000000000000014002b8008000100", @ANYRES32, @ANYBLOB="080003000200000008001b0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x4}]}, 0x10) r4 = socket(0x200000000000011, 0x4000000000080002, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) bind$packet(r4, &(0x7f0000001100)={0x11, 0x3, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) r7 = dup2(r4, r4) sendmmsg$unix(r7, &(0x7f0000008380), 0x400000000000174, 0x4008890) syz_open_procfs(0x0, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000240)) setsockopt$inet_msfilter(r9, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f000001000000001c346d2425ef26c6"], 0x10) setsockopt$inet_tcp_int(r8, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r10 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r10, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_S_FMT(r10, 0xc0d05605, &(0x7f0000000340)={0x2, @vbi={0x4, 0x5, 0x6, 0x32344d59, [0x8000, 0x8], [0xffffffff, 0x1], 0x13a}}) 6.401936785s ago: executing program 2 (id=892): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 32) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)=r2}, 0x20) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x14) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) (async, rerun: 64) socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 64) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffc000/0x1000)=nil) (async, rerun: 32) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) (async, rerun: 32) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000c80)={'syz1\x00', {0x4, 0x6e2f, 0x11f9, 0xfff8}, 0x4c, [0x8, 0x8, 0xfffffff7, 0x7f, 0x5, 0x9, 0x7fffffff, 0x0, 0x46, 0x838, 0xffffff0c, 0x3, 0x101, 0x9, 0x2, 0x4, 0x3, 0x4, 0x3, 0x2, 0x0, 0x800, 0x6, 0x6, 0x5, 0x10001, 0x9, 0x4, 0x77, 0x9, 0x7, 0xd, 0x401, 0x7, 0x8, 0xc687, 0xf, 0xff, 0x1, 0x0, 0xfffffe01, 0x0, 0x59e6, 0x101, 0x2, 0xdb, 0x1, 0xe, 0x9, 0xf, 0x4, 0x1, 0xffffffff, 0x800, 0x7f, 0x9, 0x6, 0x23c2, 0x0, 0xc10d, 0x7, 0x8, 0x2, 0x3], [0x2, 0xc, 0xff, 0x7, 0xa, 0x9, 0x1000, 0x100, 0x3, 0x6, 0x9, 0x2, 0x4, 0x7, 0x2c85, 0xf77, 0x60, 0xb, 0x1, 0x8, 0x71e4, 0x1, 0x10000, 0x3, 0x9f3, 0x800, 0x0, 0xe842, 0xff6, 0xca, 0x9, 0x7, 0x7, 0x6, 0x9, 0x6, 0xc7, 0x2ff, 0xf, 0x1, 0x550, 0x2, 0x3, 0x8, 0x80000001, 0x0, 0x3d, 0x13d, 0x101, 0x9, 0x10001, 0x9f, 0xe2d9, 0x783, 0x5, 0x0, 0x4, 0x8, 0x3460, 0xffff, 0x8a42, 0x4000, 0x100, 0x1], [0x62e2adfb, 0x9f57, 0x4, 0x3, 0x9e, 0x8, 0x1, 0xfffffff7, 0xffffffff, 0x2, 0x4, 0x4, 0x6, 0x4800000, 0x0, 0x9, 0x7, 0x9, 0x5, 0x5, 0x1, 0x7, 0xffff8000, 0x8, 0x3, 0x6, 0x10001, 0xfff, 0x0, 0x8, 0xffff2f9e, 0x9, 0x6, 0x3, 0x8, 0x3ff, 0x3, 0x5, 0x3, 0x690bd85f, 0x7, 0x3, 0x9, 0x200, 0xb3, 0xcf, 0x2, 0x6, 0x0, 0x7fff, 0xc8, 0x8, 0x2, 0x5, 0x100, 0x7ff, 0x2, 0x8005, 0x6, 0x4, 0x5, 0xa0, 0x1, 0x7825], [0x3, 0x0, 0x4, 0x6, 0x2, 0xf, 0x5, 0xfffffffd, 0x10001, 0x2, 0x2, 0x2, 0x2, 0x100009, 0x7fffffff, 0x3, 0x6, 0x7, 0x9, 0x5, 0x5, 0x2, 0xffffff7f, 0x0, 0x1, 0x5, 0x8, 0xc6d9, 0x631, 0x200, 0x4, 0x1, 0x4, 0x5, 0xe, 0xffff, 0x5, 0x7ff, 0x6, 0x10, 0x6, 0x1, 0x6, 0x5, 0x3, 0x3, 0x10000, 0x9, 0x2, 0x2, 0x4, 0x4, 0x3, 0x2, 0x8001, 0x0, 0x5, 0xb9, 0xfff, 0x400, 0x22, 0x2, 0x75, 0x9]}, 0x45c) (async) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) (async) restart_syscall() (async) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)) (async) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000140)}], 0x1) 5.751097906s ago: executing program 2 (id=893): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x2a, 0x2, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x23c}}, 0x20000091) write$dsp(r5, &(0x7f00000001c0)='\\', 0x1) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) (async) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r5, 0x80045017, &(0x7f0000000280)) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_ACT={0x38, 0x3, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x6c}}, 0x24000000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_ACT={0x38, 0x3, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x6c}}, 0x24000000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e22, 0x59d, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x10}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x2, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) (async) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef00090599"], 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000076000d0b00400000000000000300000000000000080001"], 0x20}}, 0x0) 4.546652974s ago: executing program 3 (id=900): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000000)={0x0, 0xea60}, 0x4) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key(&(0x7f0000000140)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000380)=[@decrefs={0x40046307, 0x1}], 0x0, 0x0, 0x0}) keyctl$read(0xb, r3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x4, 0x8, 0x8001, 0x0, 0x5, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffdf}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x448, 0x190, 0x0, 0xffffffff, 0x238, 0x0, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e20}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x64}, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x78}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @remote, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'veth1_to_hsr\x00', 'batadv_slave_1\x00', {}, {}, 0x6e, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xff000000, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x2, 0x20}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xffb2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x44240, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010002000020ffdbdf252500000008000300", @ANYRES32=r11, @ANYBLOB="0a000600ffffffffffff1d000800090001ac0f0008003500000000000a0034000202020202020000"], 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="64010000", @ANYRES16=r9, @ANYBLOB="000426bd7000fec376cf253a00000008000300", @ANYRES32=r11, @ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) r12 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20043, 0xb2) fallocate(r12, 0x11, 0x7fffe, 0x7000000) clock_gettime(0x0, 0x0) 4.506473157s ago: executing program 0 (id=902): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) (async) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (rerun: 64) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x1000, 0x9, 0x0, 0x400, 0x80, 0x3, 0x0, 0x8, 0x8d], 0x100000, 0x80}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async, rerun: 32) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xffff, 0x4, 0x2}, {0x0, 0x8000}, 0x0, 0x6e6bb9, 0x1}, {{@in=@local, 0xfffffffc, 0x3c}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) (rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) write(r1, &(0x7f00000006c0)="3604336fcd2305259f70b11e01a38ce7fa97250c4606731f48f2e8c608939e8a29f0b0c60d30afc92d325e1405fc71a5f6b0f4f411d2fb44552505b249a5530305de5b1dcb87a5ff548d0170fdaf6dbbf20603e7707d650d674ebdaa43c8845003ea8810010d40d7a50262ec3f57634eddd72a8b2ef53c5c5d197c92e87ac06403903f0317db1e7392bdd592b709c3a00da2e9534dbcfdae16eca030af5ff864f3501873faab502acf", 0xa9) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r5) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0x34, r6, 0x1, 0x70bd26, 0x25dfdc00, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x5}]}, 0x34}}, 0x4044094) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000140)={@multicast1, @loopback, 0x0}, &(0x7f0000000180)=0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'syztnl2\x00', &(0x7f00000002c0)={'gre0\x00', 0x0, 0x700, 0x8, 0xe28, 0xaba, {{0x17, 0x4, 0x2, 0x4, 0x5c, 0x68, 0x0, 0x0, 0x56, 0x0, @private=0xa010102, @private=0xa010100, {[@timestamp_prespec={0x44, 0x44, 0xab, 0x3, 0x3, [{@loopback}, {@multicast2, 0x9a4}, {@multicast2, 0xfffffffd}, {@remote, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xebdb}, {@multicast1, 0x9}, {@private=0xa010102, 0x6}, {@loopback, 0x80000000}]}, @end]}}}}}) (async) getsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000480)={@mcast1, 0x0}, &(0x7f00000004c0)=0x14) sendmsg$ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f0000000640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xf0, r6, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 4.014496722s ago: executing program 0 (id=906): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001000)={'ip_vti0\x00', &(0x7f0000000fc0)={'gre0\x00', 0x0, 0x40, 0x80, 0x7, 0x2, {{0x6, 0x4, 0x2, 0x4, 0x18, 0x64, 0x0, 0x6, 0x29, 0x0, @empty, @multicast2, {[@end]}}}}}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'macsec0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000)=0x2073f, 0x4) sendto$packet(r3, &(0x7f00000001c0)="3f031c0003021400060017c9167c", 0xe, 0x44040, &(0x7f0000000040)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r1, &(0x7f00000012c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001300)=0x14) sendmmsg$inet(r1, &(0x7f00000013c0)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000700)=[{&(0x7f00000004c0)="b0ce63a922988a4d5ae4d03d43af907b7a88b968e60204d34be3e62e37d98db60b0b932346ea8d73c29986a5e1393b3ab3e8cd87b2cd2ef50d9569f116f26e854065047ff57a3d0e584ed74414e0dd6d337c81771c24e28121f84f5c4ec0bee3773d38dd8deece22fb1124085122257887deeb8b5b0983d86f451ea70467bd20", 0x80}, {&(0x7f0000000540)="bb1e8658dadb0fa2e5ff77acc2e37766be7e8399dd3029ada767d03be32de2094fc6e2953aa5d74718151268c860937a7992c12791489feb22151c7a6bcbdf7e55156d3ef1348c54914ffaa63792c9de55fa293e62a9", 0x56}, {&(0x7f0000000600)="0fa996401356434c742496d3e7b8190bde2ee3bda82f976e57513e2a62e6e04bcde76af2258a382a368c851d85628672ebfe294b32d7f5d1ffaa2e4a4792169b8999f6b2ad47156ca2b9365e8ecc95c55f87f53f5497a5f04d654f1c7c122dc4ac2b9dbddcc3257f646139fc4354c3170aa8ef7db6cfcdaa41626363600437e68d411a78fea2b97fe55868c14a2cadfb4c1138d40e5c987d853298516d3a58911333e40c65525755e3f30954c33316186590106b7a9006a26343c184932335b958904c9285278c990d67ac9c225e32a2f530", 0xd2}], 0x3, &(0x7f0000000740)=[@ip_retopts={{0xa4, 0x0, 0x7, {[@end, @cipso={0x86, 0x52, 0x3, [{0x7, 0x11, "f2abc082a12556286b46ade379ead2"}, {0x7, 0xa, "f25ccb0343ad3fa0"}, {0x5, 0xb, "54d6921405f065e634"}, {0x1, 0xc, "9f9b6727ad707b0eb342"}, {0x5, 0x3, "1d"}, {0x2, 0xb, "7e8a53695613a4252b"}, {0x7, 0xc, "5ace951fc8a84d7909fe"}]}, @cipso={0x86, 0x3f, 0x1, [{0x1, 0x5, "b7680e"}, {0x2, 0x6, "81c73823"}, {0x5, 0x2}, {0x7, 0xe, "ab2cfc70e511a23679e239aa"}, {0x6, 0xc, "ccafbd4831417a951ebd"}, {0x1, 0x12, "2bb4a5315be4d4dac744e0a27fdf6713"}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x100}}], 0xc0}}, {{&(0x7f0000000800)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000d80)=[{&(0x7f0000000840)="d31650d17f10fb1da0521a", 0xb}, {&(0x7f0000000880)="4a9a35fd800e079ea8bdefe9cd9472ba8162b3137fd156c1c32b0b4eacb9ee1f204084c299d5567d06c9057a949c46134b14a099868da82ca865404b4701ffb003bb59028326baa7c211c08985ff3fbb6dc0a1c96290bad3eb7a0fce4573af40c383e3d614d5a0", 0x67}, {&(0x7f0000000900)="ca7075bcc78495bfd282475e08a97fc3519659b8330ed5430bc70423aceb19f2e7af233b4951519f470f577f88802eb2a6519e2128b2a21f05d2f9ef18358f743082ecbbebe47d39e626cb76d8f0e2b8828e6b7428a864e163f55b7640ec789a7117f74f5e", 0x65}, {&(0x7f0000000980)="8cd06bdb1524ad5ab848b9813bf6ba6cca191cdc", 0x14}, {&(0x7f00000009c0)="44b72f226c17b78c66690c4a5a1ab23d6b5c0e2d6bad442fd5fb50cd1f9f2a525d8004b21e0b51f58cb4aefb23c887840126b134fa416d07929b8822db69d447f6c35cbce612803354249128eb2dab60fad2593ec8b25f78db240b1416944b8fec26c5df6b37b8099308ec87aab253b429be5dabe332e2b19dc834e846c6f610172bb6995d42cd9f0d94da4106816120328a2198e10374670ea9a4d5b8e9e792f02f43f225bb77bc15e4bb1aed673a13c546bd42374139b738d3f6c0dba51ffac25242b9c6ce982db0d348f91e", 0xcd}, {&(0x7f0000000ac0)="6da24d5e4f3b8e3c94b465b01fe02f0386ddae6ee8fa720df453bec3f1960895c5147b167691547d9a58b5149e95a3342b11205660452c18cfbc8a9ae314a98524cf8c3bbc1d6933bf0b55ac100646afae516eb063e58f7dd9fe9a9be8998f6d1f0d3d4ce45f86e7134949aeb22e69096e2cdb5765552642e15adf69c45b483c5a9c1d47afc64c4c82c1bc865bc538ce72e3ea436aede06a4bf275dd93279068303e41994ad381533f9189fb8f495b11a3138bf11e9eb34565b147063e088a221c66d76f877d630d24cf2db09884872a26ad1fbedff44e89", 0xd8}, {&(0x7f0000000bc0)="327de5914dd33b7745f1d5bf33161767e1d4942a4bd44eccbd82f3aefa580236877baf919a099198b56806921b1187", 0x2f}, {&(0x7f0000000c00)="bc7f21a3dd170a25d3d14d0e17fbc4b8c85ff2541c3766a1f7d0b619bc57e270ddb0fb7d7537b75fc8e3f3c5a9b0349d1ec355da7cb0427f12e74c1ea1b57ab318a41eb5a7bc4726a19aa219e5d7cb8501e8ff323dbce2d90b4a71e1ce5a11dcd51129df36048daab02a9a73e4b525c4d6dbc3c1b6e65c925c10930cfb77bcee57288df38abf8a5e6653b2b58e0c17a00e02a42a801056f0ae1c", 0x9a}, {&(0x7f0000000cc0)="bf957cbe79eee834f15fa49bc80d08ed8cacc317ce5c37554886338ba646e0edd4226f134f80e57922be8108b0b832b5f819de43e581fd7febe8713e6c2aae14bd46c6c9747e73991ae37caadf533b029f12942849530a31fab0ef64a44cc28dea7c4d72c0a9c5c02af5f835a69fafecc9ef9ffbdcb2acc476f80d9a3be0f7b2ecb4ad9f5b4f22980e5c2219b3e59ad4d7444aaaf076423ab76ef898", 0x9c}], 0x9}}, {{&(0x7f0000000e40)={0x2, 0x4e20, @private=0xa010100}, 0x10, &(0x7f0000000f80)=[{&(0x7f0000000e80)="6ff111c003050b82b5dd2f577f96f6abb4046edce1aba4dd4b193fc49f924ba7e56ad73e5b4c7b1ffe2dc5f228f853bb670a06d4e20d47a1bf75e04f97965bd097dd4d5d7fc57ba8c89a12be0a3b1d1de7bdb1f59830733b802cf5b40038a82e0c2c98fb2680d5bf2b", 0x69}, {&(0x7f0000000f00)="519c3fda2d203c8912acaddc5ace88a1c056987eb84fa91c03c1d285ce543379ee3c54de16115765e8c356d551a9b81c23f1516e5631a5bcb53264b6fefd1fe4c4fe2e5cf03aec679522184fa2a909fe09932984d794dd", 0x57}], 0x2, &(0x7f0000001040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @rand_addr=0x7, @multicast2}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], 0x40}}, {{&(0x7f0000001080)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000001280)=[{&(0x7f00000010c0)="5b05ec799763b852615a12fd828df537a84ebd1a29e3fb8c6c57869eb2f984519036e55a1ec206f06690cbbb31f07c3671ef433b97a1f1118551c816e02e866f7dfb442e348bb93e335ac8afbf010b7d100a69934b4603901534df3b26cb072278ae473c0039cfbe80c9af279492f93e4a2904bb8d77bc6264c0c6546e8f0e258aa290e04f6f887efe538c187c8fd421338ccd4bb76b45578e2a415607515d9dfb09e49f153ba7c58ddcf9ab3809", 0xae}, {&(0x7f0000001180)="3ad15d2cdc0c1a68330b14c600dc358a3357", 0x12}, {&(0x7f00000011c0)="e63643290fad7f84fed1155ddd1d52f9873a34528904e81318c4206e345aa77d23b5fb8177883adec328e8689a543141700d186ea55adc2eee92701db2f8f06608c039f24ad832aa6ca80142835e112534db41110dc7c5f136b6f7f600ebd172f8395294c94b0eac7a7c485a952957eac231ecb7320ad78704097f2f743d7a5a4e58afb86db977484b1372a6bc78ab54cac1bbc1bd981b7847fd60c525b60ed3aa6ee23b8c7bda5df090a2f886449e0211133d76f6c180b91dd15e501b6f", 0xbe}], 0x3, &(0x7f0000001340)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x68}}], 0x4, 0x20000000) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) 3.593680126s ago: executing program 0 (id=908): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000e40)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) flock(0xffffffffffffffff, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480), 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0xfffffffffffffcaf, &(0x7f0000002100)={&(0x7f0000001040)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x48d0}, 0x24040001) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x400, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000540)="a22caaffe37d4620d1a9427c00787b63b26c5b83ef8ce8f8fe823d77c642dd73361c1f115fdce55de92bede6e812191b9780a257fa4fb3bba896dc1a01fcc30adb201f2ee3a5c8676d6b812ec2342bd0723b7db488a027513df1870c31ffba527c5dfb132cb48cbc2e0f", 0x6a}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95be3176d26e449b7ad2d1c9471c13851aba1592ac", 0x9e}, {&(0x7f00000006c0)="138b9f129daf1d79da8ee1c8c74f2040f7892fe9", 0x14}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f6a0efb65359c6a8e5ede789aa995461e91d2", 0x24}], 0x5}}], 0x2, 0x810) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x3000, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x1, 0x1, 0x81, 0x0, 0x6, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x3, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"373ab6e870bf64ef25ad87deef94c3b7350df627ea76a6efbd6c33a19e5dde0b3718dac0c2b8e833beb9e0347000fc7332c43a3128856f23df4628fb1e54b1745094c19bc88c190192f58dda884b3296f7cd6373842bff61047e0697c9af6e9f62b88fd21621b527902efdae6efd3516c7e5a36f4aaa12cd1b3ac0686db46783f45fe6aa2515ab6996b4807b0d9575a9061a775ef515a40b97c34035e8e412b9200000001000000062a07ab97f50ff5deb8a5978611317016887694245b363252230bbe17ed0f591f935d8e4ae7563eeff2fdfad8a775f0a4b15f63f5c4851df9aef747ace240cec55ce1659c08d38714245835e15291c4973ade3b2006d8870a1d739eb8e7a284e23f660b2061e31a70627be4acb16ecbe8a4edde1c5397c761a2fe0690f5d580ebf35b8640441ddf47d1f67a5e2d892f14a4f88412ce3cc8ec4d0580729c8638502410837253d6ac316ee9c6a24eb5d83463ff9bdf81f31c12b04adec97fe1377d2f29067e5f6f48cc123f2c4c02afe60d224c7d974a63c1aa9b110d2187f18de3753b57c630eab26238e8201501a007da99f1d07f76c4da113859ab55792049a15c5d83051f41ae951912eb81154f2398a729b6d6c51d6850bddcd4b35b24996e4ec707d1a744dff58ea5030fcd6b46a468ac029f86be30c7c3d5708e3871fed2e63b9c3ad265350e87e9fc44696eadeecc1ff67e30b64be27f480180d26218d031380149bcc31bd712063e9c09ed5329a530800000025d79eb9d4491d82d2b7a3d7d0cf9286396fcb8c2ccf1655b3ba420c36c3fb88d788308e947cc15e0957a98a843911c954c2a2feccd60d0000da8330cd1de951bcd767cf211a241c882b8d5e608fc0e796afead2a7b05018b4ae6c034c4c4997868343a5d064838dd0aca0d21b429665a0a1b4fd17cd34e711cee01d2348dc5871cca7ab4e4924f6f4bc29e7dbfae6788549e600000000271cd7ddfabd45803a6d1145734a82b2b9a6a87c8e118629840a027fd3f8e5a6a5dccee1a480d6cd0402a64db2263b1a9de61848b1eb31b51189f4caa2fdf0c3a38275386522137fe573ec27693a337c324952480c9ae476a694010aa22095c6d8bfceb5e024cbc21d6c1d1b17fae63dc627a948c4eca7dfa3f8a5e628531472e00ed28f2d2b7fcf03b5ba1975fcc010482a08c7800b3c87587a9fea37402ffafcc9cabc16a123164765d10dafe323ce33f197af8a3cf57332dbbee3f263a16cb565b61690b5804341630437ad2277be4ff82d1aa32c15b0cf99c88c7bca0ecf47a3be490bf6079f19acdf9a71f636fff612167c849b5c149cb32d8dd98d2aa8bb0606a1214fc1f0da04476cd8c3c056ec88eefca4d331ecbd5416c356466202cb97ddfc320b7594d5ab2e9102d549ffa72300"}) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000086dd0003110004000000a62c6eec00be00442ffffe8000000000000000000000000000aaff020000000000000000000000000001042088be000000030c000800050086dd88a888be0000000216096605010000000000dd7bdaf2276239020000200cf0080200000000000002000494030800655800000002"], 0x7a) 3.274862829s ago: executing program 1 (id=909): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000024c0)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x4600}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x31, 0x7}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bridge0\x00'}]}, 0x50}}, 0x4000000) (fail_nth: 2) 2.759712356s ago: executing program 3 (id=912): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x4003ff4, 0x0, 0x100000, 0x20000004}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000100)=""/222, 0x0) 2.654884171s ago: executing program 1 (id=913): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c) connect$inet6(r0, 0x0, 0x0) 2.654317222s ago: executing program 2 (id=914): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$unix(r2, &(0x7f00000086c0)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000880)="387e4d301d823e0c31ab45e1d4ff88be781a5b4a3df0d181e4d0fe8a93ec787c259ce484b961615905c459662f38161ba822b00da5859c7dfa1056cc183c805e3e51f82e035d4cf3f59053300824f0a8e66d2c773292563a8270f6247563883148cbd26f24ee639c193c2d767e65f2573583701a2cb84a243f8c7a635f5941c5c5a685986d0483ad6df1c3e70c405487b9f78c4c2dafcbc1983f456c4f8c0b1cf0", 0xa1}, {&(0x7f0000000940)="221f84fed1fb96bdb6814772760ce347f583224553197c59254d0a851c3282e5b88279a81fb9c413313d32f818d3cffcba1536c1b896f2d556f77dc362ac6d5cb0ab0bf969da4eca40754b938dba9a41a8890b37a176d050ea684ca7d374d3ca8668ca595cf6e64b559ecc29618df525e4c9ca6efa513858645f51051fc4ac1e79ed5cff7705ba00a5c84e66d0d8e64d627ea17e654cf3ac10c6efe1c97b3a5266a100da919809e5a12b42ff3fb181cb1b90c122d2ddf7a4322b3bdb59cc084ce9872ca42a202f", 0xc7}, {&(0x7f0000000a40)="29f32c6f82015c74ae013be779553e7cca48325267ac388230e4bc79c6ce8b53e4e6d8a6ed6350588a6448c0fd1fa4747a8fe6db921321531cd96fa25a5a05bfd246902dab4a0e4a6da588d32b99285dacad880a773aa48f18bd6763e608ad8e8e90cf82ca4f766a498b24225d5e98294328b39743726226a49ca07274d0861c6673ca4998cb887c90892714b8e4bdf7a66d", 0x92}, {&(0x7f0000001880)="4e581767226c294479e6e8df3352cf54a2c302d3407f0437163390e49470158790aa7366a427616e4fba6b7e0a27ce188b45cb2c2eed6919d8a7aefb9d3fbb9cb246bf8b0f753e95a88074683cbefad2fd1a63536f65f8d41332a8cd7a7e8ce29e4d5a9df2ce18bfcba4bbe9b4f6b517453dba08117428aac389790f4e8f10f43b62bdcdb4c5954da98e5597726be25f0d31d5002bf51246de0b0bb22338d1d5f0c19c4b80f49cf10543941d60fd1252c5a5778e9e4a65c6d0be8df01b11639cd03971e787e2b54aa9fe1bb5e131f825a3f3efb4584ae2c74661ef545437551b3853f917b67de8096a9fecb1fd1f3fe371222de73ddbe5dfc45c923856bb8610bbeb0d7a6184bed16e66046a1c799feabdd17b5dbb3ce88269c7f16efb65d4b50c253daaf2f9441768536588fc68401241a5e1341f3a1937c546372fe1b7942bc83650c495083c345a4df3428857dafd453b52f72d85458f8011cc1c3bb091c45865e4bcb0664b432ab1ffd12e0773b2c66718c897430670242bf5c00879a2d390339ab980172f29508bd7dfdf26755d56b9033b3301b8425e707e3761eea535c6af31af92c4fff8e70a4d0bf1d4b99cf18082bf1e5dec4123317f70762d055f3c4cd21cb8be7902c763e7801c8a9464f944e772226e5b0b8926c863e83498a45d2624d370d210b1539a46d62dfb24b86c90dd5d60767b07adde197b97d8b25204c53e0756df363fe4832fd9c98366d01f0659b30235b057facb12b1f226f1da8f4dea38c41f22f030f855813e7e30242b776ec9ce1557a2b092978e3b94abb374684a7dd591afe9bee2acaaf92b505fb344c6daeba9c120f151f461fe2c1f28555ca3746356c9bf7569f0ff6f0b0534885a39253cb49d6277ba969342448f035c39cebdeff9b2552b90aa00e8d7912d185b60c8a7ea3007d1ff87741e9bc328a3164512b1719661c2d3d8baf55bc0a34f2a02a1148a98122a8fd7c8897eb657ea4b1e758d361db8e5de1a33662c444b9df655e391e1693c8b417235102d7ecfc6b6119c38b8bc0499dfbe3bcfca94a5d532274fc98318eebc5f4c690ffed0147a09dc5e52fd67804b42fc7a79a92b77f87c53dc51bca606fd71744aea2c20360991ede095b88059551681f4e2ea4b94cd7e024282a7e66952204da9b893996877258e2446b61ec1419c4394ad7b771dd5a24f8758bb717346501b03657f3c0b4bc1bf285ea97b2f87f6bb11da9d16ddfad0ba5fb04cd8338666d7ec6544c11159c5042c1e80cc06b5dd4292fc8256d1a93d6eedf80931779c63c08bb77c025a64691ff5d1e31f8a55c4410fccf9980864f50e7298f70117728eef146b871f190934e7b20760cdc2c4296106d0fc307dbf0314b5b893a741e3db9f23ac09ffd57f37b0d6fac00ab9c86321515c868ad589caf2449df0fa1b7418161f2a74005b5407e2b913c87bfff90a6a3e3ec89bc295fdc8fbbc3e3e8bb2cab372a77e0967c3ca980c9bcbbf6e6ae5f290d47e91197bf104104ff0c309801e7969287b8fa9bbf152731493583a0398f67aa5dd4c05f85583ef9bc1becca05a18db6d5fcd7ce213a9a5678efb55f77529e487cc505c11a474c25e0e0175fb99a7ae38cc77a52be4097e7ed33c092bdce8156b9568ed88c78ed34175237c984d6b7e26a736cb39f4bb437fa7f3ef5a490dbab707dcb69f2b430b9f920411dc49253f3bec21ee65076a71c861b67680638e5f1f70bba77343592367a5c2447d5abda34a5f008db68ec004af6ae9d2d18ddb88fa3d371830df0057c02bc7dcb84fd840ed1fae2eeccfdda4b63452bcee4dd20b7aeb184f8556a8f644acdaa68ed0d2f4bcf420850eb3725631d9f7246accfd199eecc9a65e19ae29ee04074aafdc1a02bd534e57d08c8e3cc80cf55de83e594934bd2065dce3411bf62c8214995002057976f1c60ed5b3d5ec0342090f9cd4918499d7c6f936f0fa620d95f9c66bbf1411a7035aedff84097ade68568b7c8e8a98846045232d268b25653c8f297986a1a904fde01217ecd48a60376519dce119f99ec50b6d887b13fef01b393f754c733af31327785e54a2b51ac18b07985a00dd52ca1cbe1f671bbda1943ddd584ff3a3e082146d776f78a433ab7821c0edb926a131a9cb247bb80de0e2853592199304fd979b8250d4d13ae0b61ca0fa5fa43985271324fa41759bb74bc44bde613d939a0421846d09b057116f9fd0f0d7a3f1ed72e08822692ae9d91bdaff0aefaa229ec149dd0eefa9eaf8bdcfaed02e76884829d721c3d12b2dc3276a75fe5d84bd3418746cbe9d55e3722c7b1f048e40ce143887c3d7d06f142a8ff4d3c20f7c108d019a9191438bc5217bffdeb8fc9493a2c07e4cf20fd4fa3de8e97405e6b705282d1c3776a03b1e7e9f402820f32b7ef50af63595068896482dd8c031b74f78c71aa81f162ee2a2fa4512ae695ad3408a4f25cbec20b3b1b690bd25af4692cc55f7f500c79de5effaabc01ac56ebb880cce0bdcfb4bb1eec8b044c58d3e14615d6d6a9d8668fb6000cf3cce434cd09ae1b436c7c65c74643ef19266c6399b915a738c1b8f6c0ad7522ecc27d93d81ae4e427764de9170561956ecf98d942202f17a296e49271895d2aced68db92eae859b7f128dd66b0d5b1d5761f86101b95377715a6fe67885f7f8015b7480ad86fd6849ecb15b5e102be18bb4bf1f94b35ef9a463a362d02490c4ffac1d1dcae68d9345fb43fbb318fcd6c2bdcf8bbbae7e1fa910bda2fd8e0f09bd027ce4e1a74268d0a0079919768a19239902a266ca270bc18cbe96bf38cd9513c7495c33ce8508d13de0f1190f038f30c7d6e7e6b7b44e53d2450f69a911a0d1b3ab33adf172d9b1b222753c34a2c89d539a16717bf86ece022c9d0d511252dc920a7a638b22768dbf3199a67eb7b3a0fb21bb786c3ae082c951b69118f25caf92bc1c617ed5b7632ab82aa29ac6c8f0c2477cde1623062afefd45636a4029178ade647bbc3349b454dea0235f87858e27f826e97e880f53a42fcafa1908bce76707e2b49a1bc4b9b0fe8740240ab44ccf418859d7374f8080bd5c60cf3715de9ab2294ea38a7cf2369a46016db64e64e04b17bff4c2a23116ea3e9a52a4d9d1afc0a6f440211b91b54dd065c9c085a11cf85530c4f8c9bfac99dce7509951cb13e1e6af581daf780ef9c59801e1bcd25ff8311d3c9e9eb1ea5219bd7b26c37d1c57a02110e3cc332303424f1d87a038221206a4007444ad291c2637241ea6cb1f52dcde50dc97c21762952671d3ffeedfbd7f61f00cdcf88f222fc3c61318de8780ceef81113d3d419b5ce1bc81fe3efa97153936ce55177fa49679924572daad1923256ed303b3fab3a8544fe54475705ecfaa918319e39cbb6e56235c7b52626cb5209789db7bc009e7113e0821e343caa19bca41549662a7cf34b556e776ba5329933ecb5eb5ce79c451c26495e56763f4497dcb3d03e6c90bcf6e988524f2a979c6459041c4befd453be57ffc3bca10c25047c7a26601abc6566dc1c1e1159d95dc2e2d32a660f7e7fd133225067a33769a0e41b2132b61c9ea28c6d168ff6db317aadfe499f5e61532aa51f9714c98034eaf308cdcf0c5f0c05e1744a2b51703bdf66954f4a4b2359cb13d423fcdc1c9a6f56c9e2480ae11cde406f7b7282be13df6f8de1ae9803b3ec75543d0b57f6786a3cf651f82510506035d53b1da3e4516bc00701739e4e0db2c6ae2d674b39a9f2dcd9105e087b10976a2b1d67feac24add0810c9252661dd0dd6fd66741dd5216b781ca4cd86aaf0039aa7c49f502c106181b47f4e9d5a69fb8e47a9be37313fb644f65db313dd2e91fb7c10c3dbefa08cb77f81e286ec5b46e426ad1d1982f84e44e3e5e479e75e4492575343bcc56c6c1c71536498fbfa51120e8122adf77d136dbdc363cd68b7242900bfb8a3822a247b43e8ad617337a0773bc1b4072da7ea4d00fb74247077d774239941e39c437fbac2422ac12bca80d3b8519b0a47c8a6b018f18e81a9863602f86611b47111b494d4ad2e464613bfa0d957af69391ddc95aac86d033db6558ad2502855a0786a60028812c490128da39585c3d0e2458af0ada933602c04f9c32602394181eb6bc59fa86875ae22dd66818193ff4cb257a9f09feb44ea37f016a584f7330d6632a8b56e301a785781f1c9a25bb49962dec6993423e506fcaf7e58e4c2e16c9002c9f8e1015b682d13e660ec7f83767133a6ab1c4d50dd0fb7c2368919d24a1a8229b0b3ffcb9b25567685ab1de5489fbdc0b2e40b23cdb1414898c8e44c41263862237c3d381f2b1bca1e7823bcfd0fe5518f2ab1b920d1d0259c2e6b2dcd73383c11bff8c96065e7c3bffdba0433d40b1210d3fde117899c52b4ddef30e665f5d96689f9667ebcb85b1972a9984e7f6376a8000ef8307eda8109c8c56280e3edb12f90ae8235e8084f0c1ef82ba44fb8f74cf35e1394fe29c2564a9cc78ed8aeeff5525b68fcdd423bf2e3c3f2f8774809ea10568a439239d52db9ad753d43ab25b4da102673b18d33f76b046ec9b13597b847bf45208bb4d5a393d090cb45635eddc32904b033578244cda85d708a5da3cfd978c254eedfc5cce0d731de5379446fc032bf3dead6b538aaa6fef3a592aece7e3a9acb9eb00e3b14fb49f5ba1162400171658dc93f88e25700257c076b2ecfd6901a66b12697dad244036d89b764e371a19e1477c5f6d2b947fe261bb82c11f639e027b5084f16f3aa7f70aff07c75856ce9db68ab9ae3e78bd6bdf9d3a3acda47522da2e5c91ad2262bb272faa75f5561823fd0e60642bddff30a7b30febca3c52efa0d5c3be84df2847f13fa7b4967b489de25c1e223f154d4903598b7d173d404ff32e04aa214983514bd0c2ca71856acadf333033cdd22e69319d955fe21ed5ddcc94c5f942fc0a4d73421382fcb0c5f57be2f4a5b7764b2e6564610f801334519b9f67d848e1f2a48ec5fed5c385f26f53255614750d023e425fd79d45b052ce72e018c4a2fedb455264e480d0e98b2f24d8089a096c994acd480ba9663e678523d47887db5387cb58ec1641fd13208477a9787844a65ca849120627130c28eaddc49fc8fec8b8208a83568d011c1c5058e2b8dea34d8f30f2e70a35070a92a9b1ca13463d823cd0ce66bf72fea02668d396d04313e8f232b97d479c2011e925400068234bdeb9d6632a742aeb56d3584e1c11c29925236687a361b4f3758dc036a8886c003223b4a861f0f31caea52c1a78df9bd4bace6b48823b42cb600971b88844cdbf23fa3ca80db08f6aca41335d518586e9c4b64e4802b6e3b8ddea14d81808594e84ef38b85363b63537a20226be5f9615871079190f63a0da2c2a2b92f17731af4d61d679f5bb253f47188de646208f74e8eb7658ace068fbc43b93ea723341d813794da10235e8dbf78a6bba9bf9c461612b9071322914d889386e7173054685b8c341e0dd59022a3eff079849172a736db7f37ab4703e71abc9d53c58c56a2e58edebd1090b0a4c1d636f3daa5939b73fdafc478152bddbff47917a3d137e68541fcace2fcc7eb73af331a1a06e93b8cac01a91e5ec938d89584ea8d30e80fd401c2e668f6aba0bc113444bf057c6e4be9d0351e39bbd9891d07f5b77098dbe3775f69af2f83199e383067f19ed6fabbe53a1efb7f97acbbdbae10920100965120ba88ef0b64d5f007bcd70f63a476f9ccdf29244d07af3758695302a6980e099d95b4adbdad42645f60a5fc3244403ddb692730f549d4314", 0x1000}], 0x4, &(0x7f0000000f00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="046a61c1bf00000000"], 0x48, 0x4891}}, {{&(0x7f0000000b80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001000)=[{&(0x7f0000000c00)="ba1109f06ea34e", 0x7}, {&(0x7f0000000c40)="e762a648de15adc09b0ca039ff1f77558eeb47b79890cd8c1401150d8082b74864bf6a5dd347b30ca8157bfd86a4fb098005c53b8f79f041d70fcef416cc80a92bf43fc351c379828b506bff08f27e1ae92061cb57d92d68ab171c4280fbe0cd4cf7538d4f3078b3336419324f4ac638be510fa30718d9c1b833d122dd903e210c6a2e6a6b79cb74", 0x88}, {&(0x7f0000000d00)="12fb0da00e9f9110a0924c117a6dad814b6477ebcf4ac8b22c979d2bd3f78f3bdb057ccf1e168ecce7c570590815eb0f07e9d9fd90f905b4e525a390b150e6e5f1959ec5d71c50ab683834317e98b8eb9fd4c129582fc644f95486d0e925c6a5a4ff80560d8f35929e2cd79780c33badbab559484f545c8afb4e2dc9e3b26e6dd73c2fe4822ad5124b207450aee36866b80e1bdfa04707989bedcbaf", 0x9c}, {&(0x7f0000000dc0)="1da6e07f5ecd2badf81b91350c72747c8cd5ae81327400102539a7366d199de882863345976c0a20eee33dc79a072c923471c29f74a6995e16d4821741842875070f53e8db402b5782dfe7140539fb324d2762c85ef129a0852dc9a94ec6a97b560b0c00c1d676f7e5b81e67659532014cd3", 0x72}, {&(0x7f0000000e40)="76b04a406fb1c2bc68eea72a743b61e3", 0x10}, {&(0x7f0000000e80)="bcf13e17525883b7b695b5dae775f494fd7cca5e63e651b277f0d434cbe8903b7b0a07bbb5f034ef", 0x28}, {&(0x7f0000000ec0)="5decc9c6befefec3788bf0539d84eb1ef3b61330be05de5ba09138d327aed787bd30532dd9", 0x25}], 0x7, &(0x7f00000010c0)=[@cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [r2, 0xffffffffffffffff, r3, r1, 0xffffffffffffffff, 0xffffffffffffffff, r4, r1, r3, r1]}}, @rights={{0x14, 0x1, 0x1, [r3]}}], 0x70, 0x1}}, {{&(0x7f0000001140)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001380)=[{&(0x7f00000011c0)="86bc9de906df7c13a6c604380495a31f1c1923d554801255d852bfa5e784d32f2efdd00137bfc66b8b5bd65e914ad4f3f89dd4e9e8620ac301dbe2eb9d7b867388c80f02b45456db46e1fac1ae5d79a6cd4d5da5fe1e2531a93abf738e71e189e9d5a1ef7a1c78454b0c67ca5aa64e102cb92cbd7d0076ccd70d150ae1cb882052b7b12f6e666f3990370101c5c9aaf16ed86c9a4fdd94d2ec92df5ecc380945fae577e3c90062e3f854e0fc89414a9a6b9e7a85da5070da3c0a2a7d037a142b1fc7a3e36207f1d75bedf9", 0xcb}, {&(0x7f00000012c0)="330d952adb4cde55fed2d3ef1c28824a14d3880f59fea3b26ff9b40dba99f8fe16a016841a0fc2f539df5559ade698af8a6453dd871b3d934a5d5a8742cd9e2027f0c6b90ac54cce3d6d3c464b3201aee46ac998702fe15442e8cccf3777c44eea6861304aa3bbd8d03c1cd69b461053063ce2a0c848244a45d25d2a98d42ab4cedef7407ea4b78e3bcbd0", 0x8b}], 0x2, &(0x7f00000015c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r4, 0xffffffffffffffff, 0xffffffffffffffff, r0, r4]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [r3, r0, r3, 0xffffffffffffffff, r4, 0xffffffffffffffff, r3, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, r2, r1, r2, r1, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}], 0x180, 0x8041}}, {{&(0x7f0000001740)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000065c0)=[{&(0x7f0000006300)="bd8820ac0f013a8ce5d8506be19c78dbf6d34b1f3b12224c8f64fa08ac850fb4d1d868b77596f664c02f4b3dd1fe9ad4db65ab3ecdffe0b55487826d4263b7d4337a9dc8745532371f1490f3f5f8c5c14ff9e71904c0bc8daa2018dff93704477fe041e57ae901f1be629ec8ada41260c7add46b93451a9cf99882883788e69ebd5baba002d4335aeeff087f2ce081738bdf621f91008c43ff1df6399e5229a67800eef3a62618401934be20478f6ec954756744d6bceca3ef34a1f493a74baeec1444fd7f793af922f3a1be1d2b5c68497c843a96bb66aff9a5323870850a4c258ec11a3a49", 0xe6}, {&(0x7f0000006400)="f504079cca89b0a015664359da6fda886feb8c2fb2e3bc7744e7c88f0894ec22ea107af9553bf6412083cab1573b6f7a5756e51307272cecf50072f627f81ed19bf1bedfa48a6f9a77234a12cda93b4472280d46ec03cb1c42f6fbfa0eda202784ecebe6a911abcd823569c1923ca06c9a350fcb5ba5827ca59f2044fd84311df4d705af20d9893555377f8bfaeff8474c83e577992ccbc75abe15bc3dcaa4143ddb811c3810348d7083e913af6fd9d2b4c5bf93b609a7eef1aff7a295043854245f886b1cfdbbe967f3c54abc806a01a88ed25e76f0f308fad782f501a6dc56838024cebb", 0xe5}, {&(0x7f0000006500)="c7e4d6690e66594aca109ba267bdd7e8bbf568080c1cf981198755ca6e49f220d268b91f5f7fd813dbb19b5ac453f5a37bd2fc74e927dbe8e70cce94cf10d8a5425a59038aba1bf890dd7bdc9ae0a3341d3853a1e6babd59ebe10535c914d90f7c632d6b", 0x64}, {&(0x7f0000006580)="46684ed62c772da02d8c656b44e82817", 0x10}], 0x4, &(0x7f0000006680)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0, 0x40000050}}, {{0x0, 0x0, &(0x7f0000006b40)=[{&(0x7f0000006740)="8ebaa92f27c4a6c529552ded8fabf7776511203c8554de10e0d932c72716e8998f6a15458809ececac6c8fdc457e20a8034c5679529e00791f0399f550b68124eac2e615e6f2f3435b5574d58050d849a9ce80f1b805adcdb1956d06158610dae5c523acc8798072aef88678afd0347c464b1e", 0x73}, {&(0x7f00000067c0)="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", 0xfe}, {&(0x7f00000068c0)="1a166fac6218690737f11d832f3a51a8667764d6b3adc6729616353e288bf4b7eedc7e0b208afdc0cae3dd03fab6313a6ea4424062d591845880a8a8dad62a93fb19d5af4d43ef75dd7cd8a3ed39d8dca667f3325c47151297e7c74f2edb47b225f85306c8b4d09396b60f381aeb9f85fc", 0x71}, {&(0x7f0000006940)="ef297db139298f8df900ec86fca6197d7e8e6644095be34a93d3e793ae4dfefb381e6986989ae5cd73cf21cf35f88ec1378b076fcbcd13d9d2f873eab3c5a8e95628c1dd7149f4e862378d33690712d4ef58feb5777c46ad3b61b8b0cea9fec3caab5f90de34b33c6ae4533c99e75d44937a4cc0177e570c9476e952aa8e915ebb28d0b1b24d959cdb6eaee6bea372f6ad8198bc872abed4628a6a301d87a54bf2e038120b83", 0xa6}, {&(0x7f0000006a00)="cd3acbc86a115a276a2feb5c58fc4b241b7e38124350538c716246699863cebcff63feeb03124956e9e56c6a1ea4547053579d41f3a04e5e1d786bbc289bc133ebf983dacf074e2a3f632e0d0dde80c76ffff316b4c796bf953c711ec40748e81494842ac0e5a11e23f76fd0d3235d16c32eb7b9675d5bfb7f95b12d952b4868fa8f680d2c1867cf6f7a50e7ead07661ff5ebf92022b9c83a81bca4eef308a6d77afdbe99b6743e18e3f47501aa72ca3edf392f9af4dbbd61062eb00304a75700d5592069e44c34d1fb768297f57ddf01474f56bd6", 0xd5}, {&(0x7f0000006b00)="a79350553e9f7c55839c3808", 0xc}], 0x6, 0x0, 0x0, 0xc090}}, {{&(0x7f0000006bc0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000006d40)=[{&(0x7f0000006c40)="0d1b0cbeaf6845371c50064cd60b7554a6de33ff94bf17a65b74f3f29939c5ae8eb29cb79c836fcd2bc6bd9ebbcaef7d9e92dd2d3e1a8a7df978e1a515f8f825d2b4c572b3b1a00266c825af5cd9accbfc85945ffb3ea6bbfcf0b1f944434b070bbc26edcf94c0e720bc550754fcc701fe194e03296d004876b0a850f0787bfd34415729d08e16aa9febf4722e0638188141d735d0005e74afe5821138af39ff52a8b283b8e509f450543bb2805d274a750cfdac690141566c5f407871dfa8a12c9074ef39132dcc4a3c546b46e37bdd4858a104df05997ce2b6a54f030f4ccaad12e4aaeefa", 0xe6}], 0x1, &(0x7f00000013c0)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="000000e3b90ff8b830f4e689e9f97a3ee8e2c86a48258fc2580a8cb8def6d4513050a4ad40807c694b2320dbf748181a6fd16b19cab567cfafd9b957da013a9b0418da490368f172ab55c65e9fa3bf9136801b67572ba2071e"], 0xa0, 0x4000840}}, {{&(0x7f0000006e40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000008040)=[{&(0x7f0000006ec0)="073bb756315c1c126e94ccec518bde991d70dc75c71856b09bcac76c047bc4b105d84f88b412148f1f1730016e529bc8387f7cc9898dc55a76", 0x39}, {&(0x7f0000006f00)="5f0a91276c4fa2607a64ce104b943dbf", 0x10}, {&(0x7f0000006f40)="2d57966e284bdfee8101722ce3d8d7c1ae30f76c69ec5c078d39d386aeca0cd176ac1a961c13bede654e4ff286e924a356eb65f49334ee5b76e336c8d35912b179c7112069c4c4d3", 0x48}, {&(0x7f0000006fc0)}, {&(0x7f0000007000)="9d57d279ab71792f9ae40a64d86638f4adf085a31a091051b4", 0x19}, {&(0x7f0000007040)="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", 0x1000}], 0x6, &(0x7f00000081c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa8, 0x4000001}}, {{&(0x7f0000008380)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000085c0)=[{&(0x7f0000008400)="22e4e8486125264742d003f923b93620b145b9f2e13327cec2543cd0bb7db4600b980ef5a71350d16194894599385392ff87dd0c9470572f51b64a39c9d6ad1a1138e1b85239f554f2e3c3dd68c3706075056493c9c20f8746397f12cf440b463291cf67b2fc41809a50ff39c2d3d2ceb3be54a83551412b52a6d09c356788818eb595480cd360e50ec4cfdb402c5fc15d436af21b5069182028db4c2828dfddaa65e1ba9967a04f2f9969", 0xab}, {&(0x7f0000000500)="e53c824ad30120356376a662a06a714c359ec111dea7157dde9611555923081d9f64b7a5f8c2d1d8f92c19a74cd474018acbda296a0b39e16c2ffe26a7cc862ec144a4a2782f1debe0d10d35c8484be68d5d8b566cd7853adc26c5a4b47e550ac563f09f3abb1d11c26b90", 0x6b}, {&(0x7f0000008540)="d4d2a8b34fc7449d3470aca8dd9b86af5ed688a342c50dec8b81e9796d2f14bc162cc05d5d546007a2d4bf4990ab38ff4ebbd5f0375f33451b00c32da865330fee4cb67971accac6", 0x48}], 0x3, &(0x7f0000008640)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60, 0x40000}}], 0x8, 0x4c091) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f00000003c0)=ANY=[], 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) socket(0x1000000010, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'gretap0\x00'}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0xb2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001a80)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a300000000038000380340000802800018023000100118c7457ff8f99b8233ba7d81496e1da69279e989c73000065399ef6cd8d8000080003400000"], 0xf0}}, 0x0) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r5, 0x2) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r7, 0x4008af21, &(0x7f0000000440)) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000040)={0xf0f01e, 0x1}) ioctl$VFAT_IOCTL_READDIR_BOTH(r8, 0x82307201, &(0x7f0000000640)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 2.625376665s ago: executing program 1 (id=915): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0xa8e81) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4e02) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400), 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e1e, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) sendto$inet6(r1, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) socket$unix(0x1, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x10, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000fe8000000000000000000000000000bb"], 0x190) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) quotactl$Q_GETFMT(0xffffffff80000401, &(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, r3, &(0x7f00000001c0)) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000280)=@nullb, r3, 0x0) r4 = syz_io_uring_setup(0x694c, &(0x7f0000000500)={0x0, 0x0, 0x10100, 0xfffffffd, 0x36e}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r7 = syz_open_dev$audion(&(0x7f0000000300), 0x9, 0x101002) ioctl$VT_OPENQRY(r7, 0x5600, &(0x7f0000000340)) syz_io_uring_submit(r5, r6, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r4, 0x7a98, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000200)={@multicast, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x8, 0x3a, 0xff, @remote, @mcast2, {[], @mlv2_report={0x8f, 0x0, 0x0, 0xfff7}}}}}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vlan0\x00', 0x0}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x101000, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004c061}, 0x4008000) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 2.514811601s ago: executing program 3 (id=916): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x22400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="410f2092b994000040b800000000ba000000800f30c461d25c971a32000066b86c000f00d866410f382a11360f01c3c7442400d86a7e6cc7442402e89e0000c7442406000000000f01142426f3400f1ef9c4e31d7de20066ba4100b082ee", 0x5e}], 0x1, 0x0, 0x0, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000140)={0xbc, 0x0, 0x1}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x83, &(0x7f0000000080), 0x8) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.410772633s ago: executing program 2 (id=917): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r4, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0x17da, 0x0, 0x1, 0xb3}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000140)) (async) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000140)) syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r2, 0x0, 0x0, 0x0, 0x12141}) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r2, 0x0, 0x0, 0x0, 0x12141}) io_uring_enter(r5, 0x75fa, 0xe475, 0x0, 0x0, 0x0) 2.397466058s ago: executing program 0 (id=919): socket$unix(0x1, 0x5, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) r3 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x84, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b24d, 0x11a20}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x48, 0x16, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x40, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x3fe, 0x6fb, 0xffffffff, 0x88a8}}, {0x14, 0x1, {0xe39, 0x3f, 0xd, 0x8100}}, {0x14, 0x1, {0x6, 0x6ab, 0x7, 0x88a8}}]}]}]}, @IFLA_LINKMODE={0x5, 0x11, 0x6}]}, 0x84}, 0x1, 0x0, 0x0, 0xc1}, 0x0) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)) syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}]}) r6 = msgget$private(0x0, 0x4a0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000030000001c0012800b0001006970766c616e00000c0002800600010000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) msgctl$IPC_STAT(r6, 0x2, 0x0) msgsnd(r6, &(0x7f0000000440)=ANY=[@ANYBLOB], 0xe3, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0x4, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0xd0b, 0xfffffffffffffff9, 0x2000000000000003, 0x5], 0x80a0000, 0x4284}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x4, 0x0, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x795d}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) 2.301383397s ago: executing program 4 (id=920): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x5b0f, &(0x7f0000000000)={0x0, 0xfffffffc, 0x80, 0x0, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000)) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) close_range(r0, r0, 0x0) 2.252105641s ago: executing program 1 (id=921): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000bc0)=[{{&(0x7f00000008c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000940)="809d2a40ef376011cafc2dbbb5", 0xd}], 0x1, &(0x7f0000000a40)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40, 0x4}}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x9f7, &(0x7f0000000180)={0x0, 0x992a, 0x10, 0x4, 0x1a6}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) syz_io_uring_submit(r4, r5, 0x0) io_uring_enter(r3, 0x3517, 0x9141, 0x52, 0x0, 0xa) openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000100)=ANY=[@ANYBLOB="28000000451c6cf89a6477ec338fff", @ANYRES32=0x0, @ANYBLOB="137c0300671a050008000f0008000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x8004014) unshare(0x6a040000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x101441) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r7, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_io_uring_setup(0x1a9, &(0x7f0000000440)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r8, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r11, 0x5411, &(0x7f0000000740)) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000006800e97800000000020000000a7100000000000000040004008334c1fa1af9e63a5a70d854d556f3eaf674b9dada1cd54c8d407c2779bc0ca2e8fb3a1692bd4136b59414e32a4b8513c8cd9aacf20570410b033568b642acb43ef857e9ee6383b1a1ef25862df495c07679f84f025703e7330b9e1efb08d8c6097f7ee6ebe5c0c37eecb2c2eb2894cc688f096d6f23c4e3e7d05a83bec150"], 0x1c}, 0x1, 0x0, 0x0, 0x44020}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x80000, 0x3) 2.014704791s ago: executing program 3 (id=922): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000000)={0x0, 0xea60}, 0x4) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key(&(0x7f0000000140)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000380)=[@decrefs={0x40046307, 0x1}], 0x0, 0x0, 0x0}) keyctl$read(0xb, r3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x4, 0x8, 0x8001, 0x0, 0x5, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffdf}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x448, 0x190, 0x0, 0xffffffff, 0x238, 0x0, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e20}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x64}, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x78}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @remote, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'veth1_to_hsr\x00', 'batadv_slave_1\x00', {}, {}, 0x6e, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xff000000, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x2, 0x20}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xffb2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x44240, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010002000020ffdbdf252500000008000300", @ANYRES32=r11, @ANYBLOB="0a000600ffffffffffff1d000800090001ac0f0008003500000000000a0034000202020202020000"], 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="64010000", @ANYRES16=r9, @ANYBLOB="000426bd7000fec376cf253a00000008000300", @ANYRES32=r11, @ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r12 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) r13 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20043, 0xb2) clock_gettime(0x0, 0x0) ioctl$VIDIOC_DQBUF(r12, 0xc0585611, &(0x7f0000000240)=@multiplanar_userptr={0xfffffe7f, 0x1, 0x4, 0x800, 0x2, {}, {0x1, 0xc, 0x8, 0x0, 0x70, 0x1, "453d9d78"}, 0x3, 0x2, {&(0x7f00000002c0)=[{0x3, 0x8, {&(0x7f0000000140)}, 0x4}, {0x2, 0x168, {&(0x7f0000000180)}, 0x170}]}, 0x80, 0x0, r13}) 2.014447602s ago: executing program 4 (id=923): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x88}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.550034042s ago: executing program 4 (id=924): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000024c0)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x4600}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x31, 0x7}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bridge0\x00'}]}, 0x50}}, 0x4000000) (fail_nth: 3) 1.280187683s ago: executing program 4 (id=925): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c) connect$inet6(r0, 0x0, 0x0) 1.158741231s ago: executing program 1 (id=926): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0xcd3, &(0x7f0000000400)={0x0, 0x5889, 0x1000, 0x0, 0xffeffc03}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r1, 0x80, &(0x7f00000000c0)=@un=@file={0x0, './mnt\x00'}}) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) syz_open_dev$evdev(&(0x7f0000000b80), 0x0, 0x0) io_uring_enter(r2, 0x3516, 0x483, 0x0, 0x0, 0x0) 1.156501747s ago: executing program 4 (id=927): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x4003ff4, 0x0, 0x100000, 0x20000004}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) 870.327982ms ago: executing program 4 (id=928): ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="64000000100001002cbd700000000000000000002fd567380da9133e1e5d1efb43db675a634590e1d8b1c6667aee99788ce23db010db7fc38e2fad8a247d6f2003e359b3321b05221223f7509975972cb3d74079b83f93f9695eaf80d91760218da3b090f2f8bbdf5ce19b45", @ANYRES32=0x0, @ANYBLOB="a821000000000000140003007663616e300000000000000000000000140014006e657464657673696d300000000000001c0016801800018014000b00feffffff000000000200000000000000"], 0x64}}, 0x0) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000340)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x38) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2b9c33e4f36dbcc) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000000c0)=[{0x800000000, 0x2000000}], 0x1, 0x100000c01, 0x38, 0x0, 0x70, 0x6e}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYRESOCT=r4, @ANYRES32=0x0, @ANYBLOB="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", @ANYRESDEC=r1, @ANYRES16=r2], 0x40}, 0x1, 0x0, 0x0, 0x34045043}, 0x8000) r5 = socket$kcm(0x10, 0x2, 0x4) close(r5) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800060009000c00040005c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000540)=0x1c9d, 0x4) setsockopt$sock_int(r6, 0x1, 0x29, &(0x7f0000000040)=0x92c, 0x4) recvmmsg(r6, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}, 0xb393}], 0x1, 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-aesni\x00'}, 0x58) r8 = accept$alg(r7, 0x0, 0x0) readv(r8, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/122, 0x7a}, {&(0x7f0000000600)=""/217, 0xd9}], 0x2) sendmmsg$alg(r8, &(0x7f0000000300)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002980)="9c98d425afe56f214f063263de94ff93031f06039ddcb1d9cf89e039a97c89ebd9f53cd1607b7a923f9aa93c3630080d6969b1c91da10113cd2657fdee548019656f33a2aa9cdcad710a2d49b2b408db67acd1f838b73b2318b84a67cbd14eae3991d81b76a0efaeb76f06000000000000dd54736ba29b46a8bebc251f84f1016dcb4fea5efc22d1b356fbaadc7717057202282c2c2580baef19401a133fde1ad10840175244e912b498385039e1afb6cf99240e4ad65d6fcb8b8527e422ff8d7ef9a2ddf5c1af09893b6324effc649a3e0022ae73406d63fcab22ae0a95b2898c92ab106ea0068f0d8d261f83f0343a68eb1000532db67100ac98d499141eb7c5e86700c46aa30820686785bacba24db94af10a676122fc30ce4408cb58a329ea3c30382f7e8f64ff86f7795b1c0a931c28ced7aa2747945ab089eeabf06293e51f5906b93db9fa160d73ea332818b86ee19b02", 0x154}], 0x1, &(0x7f0000002b00)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @iv={0x70, 0x117, 0x2, 0x58, "24c2843122aa0d60963655b2fc85b0efe319f45926a09b0b09403850a13ca371640cedd5e0385dfaad8cfe8f361fd14f579a83beac3327d2a1c49717e8680b758ff68c61668556b47ced07eba29f01ec6a16bf081374c3bd"}, @iv={0x50, 0x117, 0x2, 0x36, "9ed30062bded808a8c1a7ab3318256ed98516b27c8d5f682f1dea771fa6d55ec2cbba20e6d36943fe52b2170e77ab8448adb4b952e3b"}, @assoc={0x18, 0x117, 0x4, 0x2}, @op={0x18, 0x117, 0x3, 0x3575f17347f82787}, @iv={0x70, 0x117, 0x2, 0x5b, "6ee8b5e6fe9ab344d85f6d608b60b98593e224f188a0f7281dafabff715f0cda6e24fb310072211aaeda564d610b87734a19816d107f30db955b99bab92731589974c1c679673eacdd64ed70494312b8a18299f942c8598f5e5ffc"}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}], 0x1208, 0x4}], 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x880) syz_open_dev$ptys(0xc, 0x3, 0x1) socket(0x10, 0x3, 0x0) 363.174696ms ago: executing program 0 (id=929): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl0\x00', &(0x7f00000005c0)={'ip6gre0\x00', 0x0, 0x4, 0x0, 0x7, 0x7d, 0xa, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x700, 0x10, 0xfffffff8, 0xfffffffc}}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000500)=@nat={'nat\x00', 0x670, 0x5, 0x4b0, 0x338, 0x338, 0xffffffff, 0x290, 0x0, 0x418, 0x418, 0xffffffff, 0x418, 0x418, 0x5, 0x0, {[{{@uncond, 0x0, 0x198, 0x1e0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xf, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@rateest={{0x68}, {'wlan1\x00', 'ip6tnl0\x00', 0x12, 0x2, 0x9, 0x2004, 0x5, 0x3, {0xc35}, {0x1ff}}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x12, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@rand_addr=' \x01\x00', @port=0x4e21, @icmp_id=0x68}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xa, 0x4, "ed481ca2c99b76ccda2879f6a12da5725ea2669d62d23b45710a851be124"}}}, {{@ip={@local, @remote, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @local, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x2, @ipv4=@broadcast, @ipv4=@empty, @gre_key=0x3, @icmp_id=0x64}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x510) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', r0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x4003ff4, 0x5, 0x100000, 0x20000004}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) r3 = add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000200)={0x2, 0x0, @a}, 0x48, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000000c0)={r3, 0xd8, 0xaf}, &(0x7f0000000280)={'enc=', 'raw', ' hash=', {'blake2s-224-generic\x00'}}, &(0x7f0000000400)="eed4906c540fee5bb8d42d15492f7739b89203dc18be276da7624f3e32c24be18d0f18ad5d661ff52b9158787f57d5205e76b88ff7d30344f363e7cb0ae3816210c5156dc8aafe4fb95aea852303073acd90edeff885e8afc43a0e560310e000f75ecc7d0214092c8bb35bf93fea09e524ba889de28b90f79da5cefe57b8f2738792e072312275f3f2c12a0d059e641703c1effa035a942297e1456c9b5e0aa9ef1e71f4b247ad98aa7de508570ad92c1e4f7dba2c4cd44647a7205e18545b616f82240d4df0ef25d34525e8dd065ebd22309e5edb92a573", &(0x7f0000000500)="749a70e3c1e2c903c3999e06a2c8a72536687366ad844a4eabedbd1458a80cec7a8ac4741226fd0110586786241912b076c8e4e358c2a832209f67e97f7a1640eaac5d5311d9819789ba818517fab882d207bdbbafa9c45a7d4def5e1e26619d8cd382cc5169c4667c710536f7ff9143588afcf470eaba8a2e7c53871070114f1f71ebcc042256cf2805f6fa63ff14155bb19b1090e6db445919a84c2c694ac68aefec4a45bf690c57b3eb0a5cb50a") 230.507934ms ago: executing program 2 (id=930): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x4a7c0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000080)=@generic={0x3, 0x8, 0x104}) r3 = syz_kvm_add_vcpu$x86(0x0, 0x0) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000380)={0x1, 0x0, [{0x99d, 0x0, 0x3}]}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f00000030c0)={0xc, {"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", 0x1016}}, 0x1006) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x5) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r7 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x880e) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 229.500356ms ago: executing program 3 (id=931): socket$packet(0x11, 0x3, 0x300) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xa4f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) write$FUSE_BMAP(r1, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5, 0x0, {0x8000000000000001}}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1, 0x0, 0xfffffffffffffffb}, 0x75) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000000000000000000000000000000000002200", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}}) 142.622275ms ago: executing program 0 (id=932): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socket$key(0xf, 0x3, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)=ANY=[], 0x1c}], 0x1}, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2040, 0x0) socket$igmp(0x2, 0x3, 0x2) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000280)={0x6, @pix={0x4, 0x9, 0xa0363159, 0x5, 0x5, 0x9, 0x5, 0x7, 0x1, 0x8, 0x0, 0x7}}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r5, 0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000080ffffff000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50005008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 54.777572ms ago: executing program 1 (id=933): ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0xa, 0x3, 0x3a) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) close(0x4) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1, 0x0, 0x7ff}) r5 = syz_io_uring_setup(0x49b, &(0x7f0000000200)={0x0, 0x104661, 0x400, 0x2, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x40f6, 0x4f7c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000240)={0x4, 0x0, 0x0, r8}, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000040)={'gretap0\x00', &(0x7f0000000100)={'syztnl2\x00', r9, 0x1, 0x8000, 0x6, 0x0, {{0x26, 0x4, 0x2, 0x1f, 0x98, 0x64, 0x0, 0x8, 0x4, 0x0, @local, @empty, {[@end, @end, @timestamp_addr={0x44, 0x1c, 0x9c, 0x1, 0x9, [{@rand_addr=0x64010102}, {@empty, 0xa75}, {@loopback, 0x5}]}, @lsrr={0x83, 0xb, 0xd7, [@loopback, @dev={0xac, 0x14, 0x14, 0x23}]}, @timestamp_prespec={0x44, 0x34, 0x5c, 0x3, 0x7, [{@local, 0xa903}, {@private=0xa010100, 0x2c98}, {@rand_addr=0x64010101}, {@multicast1, 0x7}, {@multicast2, 0x80000001}, {@multicast1, 0x10001}]}, @noop, @rr={0x7, 0x13, 0xe, [@dev={0xac, 0x14, 0x14, 0x26}, @broadcast, @multicast2, @multicast1]}, @rr={0x7, 0x7, 0x6, [@loopback]}, @lsrr={0x83, 0xb, 0x6a, [@dev={0xac, 0x14, 0x14, 0x40}, @dev={0xac, 0x14, 0x14, 0x1d}]}]}}}}}) 0s ago: executing program 3 (id=934): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000810087406d040e0a759400000001090212000100000000090400200003", @ANYRES64, @ANYBLOB="08c091a888e6b90d3f2280348758378957f0b8ae7423ad864397aceedf428bc9ee3c5c45b41561133d152d7667a9c41ccb2d70d25ce52deb31e14b2acb0231155b2aef77b0c2be51c6be3d3682b0e559576af517d1a8e02d88a0e7f47a33429d30e0a74be2a96630db4e1e50261ff680279f6d420c3ebd1ef7837f2d6442ac83"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): cturer: syz [ 196.061726][ T5918] usb 2-1: SerialNumber: syz [ 196.068702][ T7880] tipc: Resetting bearer [ 196.123727][ T7880] tipc: Disabling bearer [ 196.300802][ T5918] usb 2-1: unknown interface protocol 0x55, assuming v1 [ 196.345240][ T5150] Bluetooth: hci0: command 0x0406 tx timeout [ 196.351468][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 196.359078][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 196.366829][ T5150] Bluetooth: hci3: command 0x0406 tx timeout [ 196.373418][ T5842] Bluetooth: hci4: command 0x0406 tx timeout [ 196.380572][ T5918] usb 2-1: cannot find UAC_HEADER [ 196.496522][ T5918] snd-usb-audio 2-1:1.74: probe with driver snd-usb-audio failed with error -22 [ 196.523844][ T5918] usb 2-1: USB disconnect, device number 42 [ 196.633311][ T5833] udevd[5833]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.74/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 196.782910][ T7891] netlink: 76 bytes leftover after parsing attributes in process `syz.4.501'. [ 196.895241][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 197.044983][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 197.047310][ T5910] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 197.057923][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 197.057986][ T9] usb 3-1: no configurations [ 197.058000][ T9] usb 3-1: can't read configurations, error -22 [ 197.264857][ T5910] usb 5-1: Using ep0 maxpacket: 32 [ 197.276756][ T5910] usb 5-1: unable to get BOS descriptor or descriptor too short [ 197.284639][ T5910] usb 5-1: no configurations [ 197.295952][ T5910] usb 5-1: can't read configurations, error -22 [ 197.533204][ T7909] netlink: 'syz.1.506': attribute type 9 has an invalid length. [ 197.542382][ T7909] netlink: 12 bytes leftover after parsing attributes in process `syz.1.506'. [ 198.200551][ T7925] fuse: Bad value for 'fd' [ 198.530295][ T7904] imon:send_packet: task interrupted [ 198.535964][ T7904] imon:send_packet: packet tx failed (-512) [ 198.614949][ T7904] imon:vfd_write: send packet #5 failed [ 198.688746][ T5829] usb 1-1: USB disconnect, device number 22 [ 198.695002][ T5838] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 198.846095][ T5910] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 198.863407][ T5838] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 198.893027][ T5838] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 198.935319][ T5838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 198.941151][ T7947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.516'. [ 198.963586][ T5838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 199.002370][ T5838] usb 4-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 199.012248][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.020819][ T5838] usb 4-1: Product: syz [ 199.025469][ T5910] usb 5-1: Using ep0 maxpacket: 32 [ 199.035234][ T1210] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 199.044933][ T5838] usb 4-1: Manufacturer: syz [ 199.049561][ T5838] usb 4-1: SerialNumber: syz [ 199.059100][ T5910] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 199.084825][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.097187][ T5838] usb 4-1: config 0 descriptor?? [ 199.105658][ T7931] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 199.122490][ T5910] usb 5-1: config 0 descriptor?? [ 199.151825][ T5910] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 199.234534][ T7961] capability: warning: `syz.2.519' uses deprecated v2 capabilities in a way that may be insecure [ 199.238279][ T1210] usb 2-1: Using ep0 maxpacket: 32 [ 199.252914][ T1210] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 199.262202][ T1210] usb 2-1: config 0 has no interface number 0 [ 199.270827][ T1210] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 199.280110][ T1210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.288730][ T1210] usb 2-1: Product: syz [ 199.292954][ T1210] usb 2-1: Manufacturer: syz [ 199.297988][ T1210] usb 2-1: SerialNumber: syz [ 199.307676][ T1210] usb 2-1: config 0 descriptor?? [ 199.315455][ T1210] smsc95xx v2.0.0 [ 199.415517][ T5918] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 199.519295][ T7942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.528141][ T7942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.537027][ T7942] netlink: 44 bytes leftover after parsing attributes in process `syz.1.514'. [ 199.546229][ T7942] netlink: 'syz.1.514': attribute type 6 has an invalid length. [ 199.555179][ T7942] netlink: 'syz.1.514': attribute type 5 has an invalid length. [ 199.562840][ T7942] netlink: 'syz.1.514': attribute type 4 has an invalid length. [ 199.576835][ T5918] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.587039][ T5918] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 199.597414][ T5918] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 199.606582][ T5918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 199.614593][ T5918] usb 1-1: SerialNumber: syz [ 199.834234][ T7963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.843857][ T5918] usb 1-1: 0:2 : does not exist [ 199.848522][ T7963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.848968][ T5918] usb 1-1: unit 5: unexpected type 0x09 [ 199.869798][ T7963] warning: `syz.1.514' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 199.881760][ T5918] usb 1-1: USB disconnect, device number 23 [ 199.908207][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 199.958047][ T5838] powermate: Expected payload of 3--6 bytes, found 64 bytes! [ 199.977986][ T5838] input: Griffin SoundKnob as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input40 [ 200.002319][ C1] powermate: config urb returned -71 [ 200.008067][ C1] powermate: config urb returned -71 [ 200.013877][ C1] powermate: config urb returned -71 [ 200.020088][ C1] powermate: config urb returned -71 [ 200.049931][ T5838] usb 4-1: USB disconnect, device number 29 [ 200.049988][ C1] powermate 4-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 200.524877][ T5918] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 200.534796][ T5838] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 200.744789][ T5918] usb 3-1: Using ep0 maxpacket: 32 [ 200.758939][ T5918] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 200.769502][ T5918] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 200.774848][ T5838] usb 4-1: Using ep0 maxpacket: 32 [ 200.808912][ T5918] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 200.820657][ T5918] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 200.839437][ T5838] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 200.840643][ T5918] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 200.858983][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.914396][ T5838] usb 4-1: config 0 has no interface number 0 [ 200.921247][ T5918] usb 3-1: Product: syz [ 200.925512][ T5838] usb 4-1: config 0 interface 12 has no altsetting 0 [ 200.928008][ T5918] usb 3-1: Manufacturer: syz [ 200.942665][ T5918] usb 3-1: SerialNumber: syz [ 200.952548][ T5838] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 200.962150][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.970587][ T5838] usb 4-1: Product: syz [ 200.976196][ T5838] usb 4-1: Manufacturer: syz [ 200.983179][ T5838] usb 4-1: SerialNumber: syz [ 201.007226][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 201.012581][ T5838] usb 4-1: config 0 descriptor?? [ 201.029703][ T5918] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input41 [ 201.044637][ T5910] gspca_vc032x: reg_w err -71 [ 201.054631][ T5910] gspca_vc032x: I2c Bus Busy Wait 00 [ 201.067797][ T5910] gspca_vc032x: I2c Bus Busy Wait 00 [ 201.073382][ T5910] gspca_vc032x: I2c Bus Busy Wait 00 [ 201.079858][ T5910] gspca_vc032x: I2c Bus Busy Wait 00 [ 201.088327][ T5910] gspca_vc032x: I2c Bus Busy Wait 00 [ 201.094686][ T5910] gspca_vc032x: I2c Bus Busy Wait 00 [ 201.106123][ T5910] gspca_vc032x: I2c Bus Busy Wait 00 [ 201.111724][ T5910] gspca_vc032x: I2c Bus Busy Wait 00 [ 201.117799][ T5910] gspca_vc032x: I2c Bus Busy Wait 00 [ 201.123943][ T5910] gspca_vc032x: I2c Bus Busy Wait 00 [ 201.130139][ T5910] gspca_vc032x: I2c Bus Busy Wait 00 [ 201.136328][ T5910] gspca_vc032x: I2c Bus Busy Wait 00 [ 201.142192][ T5910] gspca_vc032x: I2c Bus Busy Wait 00 [ 201.153303][ T5910] gspca_vc032x: I2c Bus Busy Wait 00 [ 201.159545][ T5910] gspca_vc032x: I2c Bus Busy Wait 00 [ 201.165701][ T5910] gspca_vc032x: I2c Bus Busy Wait 00 [ 201.171279][ T5910] gspca_vc032x: I2c Bus Busy Wait 00 [ 201.179809][ T5910] gspca_vc032x: I2c Bus Busy Wait 00 [ 201.186820][ T5910] gspca_vc032x: Unknown sensor... [ 201.193085][ T5910] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 201.221729][ T5910] usb 5-1: USB disconnect, device number 26 [ 201.344959][ T5918] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 201.355031][ T5918] (id 0x00) [ 201.454852][ T5918] rc_core: IR keymap rc-imon-pad not found [ 201.460745][ T5918] Registered IR keymap rc-empty [ 201.466467][ T5918] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 201.485198][ T5918] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 201.516102][ T5918] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 201.529774][ T5918] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input42 [ 201.578054][ T7987] fuse: Bad value for 'fd' [ 201.627990][ T5918] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:19> initialized [ 202.059209][ T1210] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 202.077967][ T1210] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 202.105593][ T1210] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 202.159625][ T1210] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 202.195723][ T1210] usb 2-1: USB disconnect, device number 43 [ 202.498227][ T5838] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 202.507848][ T5838] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 202.517577][ T5838] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 202.558152][ T5838] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 202.575932][ T5838] usb 4-1: USB disconnect, device number 30 [ 202.694317][ T8003] loop9: detected capacity change from 0 to 7 [ 202.711162][ T8003] Dev loop9: unable to read RDB block 7 [ 202.719200][ T8003] loop9: AHDI p4 [ 202.723104][ T8003] loop9: partition table partially beyond EOD, truncated [ 202.995845][ T8008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.532'. [ 203.026409][ T8008] : entered promiscuous mode [ 203.095278][ T5838] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 203.254911][ T5838] usb 5-1: Using ep0 maxpacket: 16 [ 203.271794][ T5838] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.285051][ T5829] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 203.295596][ T5838] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 203.314933][ T5838] usb 5-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 203.324182][ T5838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.344561][ T5838] usb 5-1: config 0 descriptor?? [ 203.371530][ T5838] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 203.425132][ T5829] usb 1-1: device descriptor read/64, error -71 [ 203.494826][ T1210] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 203.654866][ T1210] usb 4-1: Using ep0 maxpacket: 16 [ 203.664420][ T1210] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.676770][ T1210] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.686468][ T5829] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 203.686659][ T1210] usb 4-1: config 0 interface 0 has no altsetting 0 [ 203.701048][ T1210] usb 4-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 203.710342][ T1210] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.732095][ T1210] usb 4-1: config 0 descriptor?? [ 203.844877][ T5829] usb 1-1: device descriptor read/64, error -71 [ 203.925258][ T8024] use of bytesused == 0 is deprecated and will be removed in the future, [ 203.937058][ T8024] use the actual size instead. [ 203.975239][ T5829] usb usb1-port1: attempt power cycle [ 204.404826][ T5829] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 204.425610][ T5829] usb 1-1: device descriptor read/8, error -71 [ 204.476784][ T8015] imon:send_packet: task interrupted [ 204.485262][ T8015] imon:send_packet: packet tx failed (-512) [ 204.502756][ T8015] imon:vfd_write: send packet #5 failed [ 204.591922][ T5918] usb 3-1: USB disconnect, device number 19 [ 204.735748][ T5829] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 204.765870][ T5829] usb 1-1: device descriptor read/8, error -71 [ 204.909775][ T5829] usb usb1-port1: unable to enumerate USB device [ 206.043176][ T8041] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 206.057802][ T5918] usb 5-1: USB disconnect, device number 27 [ 206.232321][ T8048] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 206.541531][ T1210] usbhid 4-1:0.0: can't add hid device: -71 [ 206.561174][ T1210] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 206.620921][ T1210] usb 4-1: USB disconnect, device number 31 [ 206.796101][ T5918] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 206.865193][ T9] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 206.979097][ T5918] usb 2-1: New USB device found, idVendor=0c45, idProduct=62a0, bcdDevice=a8.22 [ 207.017164][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.035590][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.076499][ T5918] usb 2-1: config 0 descriptor?? [ 207.081507][ T9] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 207.091419][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.101149][ T5918] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:62a0 [ 207.115982][ T9] usb 1-1: config 0 descriptor?? [ 207.285127][ T1210] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 207.300581][ T5918] gspca_sn9c20x: Write register 1000 failed -71 [ 207.324832][ T5918] gspca_sn9c20x: Device initialization failed [ 207.330992][ T5918] gspca_sn9c20x 2-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 207.359410][ T5918] usb 2-1: USB disconnect, device number 44 [ 207.370372][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 207.384606][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 207.415221][ T9] usb 1-1: USB disconnect, device number 28 [ 207.477497][ T1210] usb 4-1: Using ep0 maxpacket: 32 [ 207.485836][ T1210] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 207.505316][ T1210] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 207.524823][ T1210] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 207.538367][ T1210] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 207.567296][ T1210] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 207.583364][ T1210] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.601263][ T1210] usb 4-1: Product: syz [ 207.612353][ T1210] usb 4-1: Manufacturer: syz [ 207.619802][ T1210] usb 4-1: SerialNumber: syz [ 207.637726][ C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 207.648129][ T1210] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input43 [ 207.754833][ T5910] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 207.845394][ T1210] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 207.869250][ T1210] (id 0x00) [ 207.894985][ T9] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 207.908082][ T8081] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 207.970730][ T5910] usb 3-1: config 0 has no interfaces? [ 207.976363][ T5910] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 208.013784][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.044856][ T1210] rc_core: IR keymap rc-imon-pad not found [ 208.050717][ T1210] Registered IR keymap rc-empty [ 208.075905][ T5910] usb 3-1: config 0 descriptor?? [ 208.091343][ T1210] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 208.095377][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 208.112207][ T1210] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 208.129059][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.145942][ T1210] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 208.177278][ T9] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 208.182249][ T1210] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input44 [ 208.198176][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.209146][ T9] usb 1-1: config 0 descriptor?? [ 208.217854][ T9] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 208.235354][ T1210] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:32> initialized [ 208.237150][ T9] ldusb 1-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 208.348334][ T5910] usb 3-1: USB disconnect, device number 20 [ 208.363140][ T8090] syzkaller0: entered promiscuous mode [ 208.368773][ T8090] syzkaller0: entered allmulticast mode [ 208.641820][ T5910] usb 1-1: USB disconnect, device number 29 [ 208.650062][ T5910] ldusb 1-1:0.0: LD USB Device #1 now disconnected [ 209.404810][ T9] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 209.587350][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 209.606476][ T9] usb 2-1: config 5 has an invalid interface number: 187 but max is 1 [ 209.614691][ T9] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 209.650943][ T9] usb 2-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 209.663563][ T9] usb 2-1: config 5 has no interface number 0 [ 209.670965][ T9] usb 2-1: config 5 interface 187 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 209.689951][ T9] usb 2-1: config 5 interface 187 has no altsetting 0 [ 209.700296][ T9] usb 2-1: New USB device found, idVendor=0af0, idProduct=6721, bcdDevice=8d.c0 [ 209.720214][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.728450][ T9] usb 2-1: Product: င [ 209.732831][ T9] usb 2-1: Manufacturer: 쁖ᄅ珏쬺붎⍑뉫婕ꀅ䕀빶檋ۼ灭㈝튂ꍳ玦ࠒ䭱뽊븓Ꮂ齬첲乊杷斳霓짃➉캴쒖牷费ﭙ䢐ꦡ蔌䎛垻汶׋ദ뾒⌹㴐踝®ㇺ瀇捌 [ 209.754264][ T9] usb 2-1: SerialNumber: ﲏ䊍䃸鲽엩ᡨ㐱쩑።햋 [ 209.944924][ T43] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 209.986113][ T9] option 2-1:5.187: GSM modem (1-port) converter detected [ 210.026238][ T9] usb 2-1: USB disconnect, device number 45 [ 210.041484][ T9] option 2-1:5.187: device disconnected [ 210.097098][ T43] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.122030][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 210.130226][ T43] usb 1-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 210.140194][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.152575][ T43] usb 1-1: config 0 descriptor?? [ 210.936648][ T8135] netlink: 'syz.1.568': attribute type 10 has an invalid length. [ 210.961000][ T8135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.060966][ T8135] batadv0: entered promiscuous mode [ 211.094559][ T8115] imon:send_packet: task interrupted [ 211.107586][ T8135] batadv0: entered allmulticast mode [ 211.114544][ T8115] imon:send_packet: packet tx failed (-512) [ 211.126201][ T43] usbhid 1-1:0.0: can't add hid device: -71 [ 211.130932][ T8115] imon:vfd_write: send packet #5 failed [ 211.132215][ T43] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 211.170667][ T5918] usb 4-1: USB disconnect, device number 32 [ 211.202682][ T8135] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 211.257722][ T43] usb 1-1: USB disconnect, device number 30 [ 211.618230][ T8139] netlink: 268 bytes leftover after parsing attributes in process `syz.3.570'. [ 211.722299][ T8142] loop2: detected capacity change from 0 to 7 [ 211.744872][ T8142] Dev loop2: unable to read RDB block 7 [ 211.754876][ T8142] loop2: unable to read partition table [ 211.806203][ T30] audit: type=1326 audit(1764489889.532:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8143 comm="syz.4.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308298f749 code=0x7ffc0000 [ 211.814059][ T8142] loop2: partition table beyond EOD, [ 211.935074][ T30] audit: type=1326 audit(1764489889.552:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8143 comm="syz.4.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308298f749 code=0x7ffc0000 [ 211.995310][ T8142] truncated [ 212.007312][ T8142] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 212.024229][ T30] audit: type=1326 audit(1764489889.552:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8143 comm="syz.4.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f308298f749 code=0x7ffc0000 [ 212.104889][ T30] audit: type=1326 audit(1764489889.552:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8143 comm="syz.4.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308298f749 code=0x7ffc0000 [ 212.193425][ T30] audit: type=1326 audit(1764489889.552:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8143 comm="syz.4.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308298f749 code=0x7ffc0000 [ 212.364815][ T30] audit: type=1326 audit(1764489889.572:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8143 comm="syz.4.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f308298f749 code=0x7ffc0000 [ 212.447535][ T8163] netlink: 'syz.3.575': attribute type 4 has an invalid length. [ 212.478356][ T30] audit: type=1326 audit(1764489889.572:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8143 comm="syz.4.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308298f749 code=0x7ffc0000 [ 212.513165][ T8164] netlink: 100 bytes leftover after parsing attributes in process `syz.2.577'. [ 212.571682][ T8166] netlink: 16 bytes leftover after parsing attributes in process `syz.0.578'. [ 212.583677][ T8166] netlink: 16 bytes leftover after parsing attributes in process `syz.0.578'. [ 212.674393][ T30] audit: type=1326 audit(1764489889.572:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8143 comm="syz.4.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f308298f749 code=0x7ffc0000 [ 212.736472][ T8166] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 212.784577][ T30] audit: type=1326 audit(1764489889.592:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8143 comm="syz.4.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308298f749 code=0x7ffc0000 [ 212.838640][ T30] audit: type=1326 audit(1764489889.622:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8143 comm="syz.4.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f308298f749 code=0x7ffc0000 [ 213.175740][ T8186] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 213.286510][ T5910] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 213.472039][ T5910] usb 1-1: Using ep0 maxpacket: 8 [ 213.480934][ T5910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 213.504906][ T5910] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 213.565275][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.577404][ T5910] usb 1-1: config 0 descriptor?? [ 213.848920][ T5910] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 213.913142][ T8193] FAULT_INJECTION: forcing a failure. [ 213.913142][ T8193] name failslab, interval 1, probability 0, space 0, times 0 [ 213.945754][ T8193] CPU: 1 UID: 0 PID: 8193 Comm: syz.1.585 Not tainted syzkaller #0 PREEMPT(full) [ 213.945780][ T8193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 213.945791][ T8193] Call Trace: [ 213.945798][ T8193] [ 213.945806][ T8193] dump_stack_lvl+0x189/0x250 [ 213.945833][ T8193] ? __pfx____ratelimit+0x10/0x10 [ 213.945855][ T8193] ? __pfx_dump_stack_lvl+0x10/0x10 [ 213.945875][ T8193] ? __pfx__printk+0x10/0x10 [ 213.945897][ T8193] ? __pfx___might_resched+0x10/0x10 [ 213.945920][ T8193] should_fail_ex+0x414/0x560 [ 213.945948][ T8193] should_failslab+0xa8/0x100 [ 213.945968][ T8193] __kmalloc_noprof+0xcb/0x7f0 [ 213.945990][ T8193] ? kfree+0x4d/0x6d0 [ 213.946008][ T8193] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 213.946040][ T8193] tomoyo_realpath_from_path+0xe3/0x5d0 [ 213.946065][ T8193] ? tomoyo_domain+0xd9/0x130 [ 213.946088][ T8193] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 213.946110][ T8193] tomoyo_path_number_perm+0x1e8/0x5a0 [ 213.946132][ T8193] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 213.946194][ T8193] ? __fget_files+0x2a/0x420 [ 213.946216][ T8193] ? __fget_files+0x3a0/0x420 [ 213.946231][ T8193] ? __fget_files+0x2a/0x420 [ 213.946252][ T8193] security_file_ioctl+0xcb/0x2d0 [ 213.946275][ T8193] __se_sys_ioctl+0x47/0x170 [ 213.946306][ T8193] do_syscall_64+0xfa/0xfa0 [ 213.946328][ T8193] ? lockdep_hardirqs_on+0x9c/0x150 [ 213.946351][ T8193] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.946368][ T8193] ? clear_bhb_loop+0x60/0xb0 [ 213.946390][ T8193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.946406][ T8193] RIP: 0033:0x7fead058f749 [ 213.946423][ T8193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.946438][ T8193] RSP: 002b:00007fead1438038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 213.946459][ T8193] RAX: ffffffffffffffda RBX: 00007fead07e5fa0 RCX: 00007fead058f749 [ 213.946472][ T8193] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 213.946484][ T8193] RBP: 00007fead1438090 R08: 0000000000000000 R09: 0000000000000000 [ 213.946495][ T8193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.946505][ T8193] R13: 00007fead07e6038 R14: 00007fead07e5fa0 R15: 00007fead090fa28 [ 213.946537][ T8193] [ 213.947139][ T8193] ERROR: Out of memory at tomoyo_realpath_from_path. [ 214.980934][ T8211] loop9: detected capacity change from 0 to 7 [ 214.999443][ T8211] Dev loop9: unable to read RDB block 7 [ 215.006093][ T8211] loop9: unable to read partition table [ 215.012240][ T8211] loop9: partition table beyond EOD, truncated [ 215.023526][ T8211] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 215.209466][ T8215] netlink: 60 bytes leftover after parsing attributes in process `syz.4.592'. [ 215.244899][ T5910] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 215.406800][ T5910] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 215.421006][ T5910] usb 4-1: config 0 has no interface number 0 [ 215.430716][ T5910] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 215.461352][ T5910] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 215.475119][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.497128][ T5910] usb 4-1: Product: syz [ 215.501495][ T5910] usb 4-1: Manufacturer: syz [ 215.512225][ T5910] usb 4-1: SerialNumber: syz [ 215.527481][ T5910] usb 4-1: config 0 descriptor?? [ 215.545690][ T5910] yurex 4-1:0.50: USB YUREX device now attached to Yurex #1 [ 215.556071][ T8223] ptm ptm3: ldisc open failed (-12), clearing slot 3 [ 215.671931][ T8228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.595'. [ 215.797283][ T8228] bridge2: entered promiscuous mode [ 215.802760][ T8228] bridge2: entered allmulticast mode [ 216.000207][ T8231] netlink: 2 bytes leftover after parsing attributes in process `syz.1.596'. [ 216.047394][ T5838] usb 1-1: USB disconnect, device number 31 [ 216.086359][ T8234] FAULT_INJECTION: forcing a failure. [ 216.086359][ T8234] name failslab, interval 1, probability 0, space 0, times 0 [ 216.108893][ T8234] CPU: 0 UID: 0 PID: 8234 Comm: syz.2.597 Not tainted syzkaller #0 PREEMPT(full) [ 216.108919][ T8234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 216.108930][ T8234] Call Trace: [ 216.108937][ T8234] [ 216.108945][ T8234] dump_stack_lvl+0x189/0x250 [ 216.108972][ T8234] ? __pfx____ratelimit+0x10/0x10 [ 216.108995][ T8234] ? __pfx_dump_stack_lvl+0x10/0x10 [ 216.109026][ T8234] ? __pfx__printk+0x10/0x10 [ 216.109050][ T8234] ? __pfx___might_resched+0x10/0x10 [ 216.109068][ T8234] ? fs_reclaim_acquire+0x7d/0x100 [ 216.109090][ T8234] should_fail_ex+0x414/0x560 [ 216.109118][ T8234] should_failslab+0xa8/0x100 [ 216.109139][ T8234] __kmalloc_noprof+0xcb/0x7f0 [ 216.109160][ T8234] ? tomoyo_encode+0x28b/0x550 [ 216.109190][ T8234] tomoyo_encode+0x28b/0x550 [ 216.109220][ T8234] tomoyo_realpath_from_path+0x58d/0x5d0 [ 216.109246][ T8234] ? tomoyo_domain+0xd9/0x130 [ 216.109268][ T8234] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 216.109290][ T8234] tomoyo_path_number_perm+0x1e8/0x5a0 [ 216.109314][ T8234] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 216.109378][ T8234] ? __fget_files+0x2a/0x420 [ 216.109400][ T8234] ? __fget_files+0x3a0/0x420 [ 216.109415][ T8234] ? __fget_files+0x2a/0x420 [ 216.109436][ T8234] security_file_ioctl+0xcb/0x2d0 [ 216.109458][ T8234] __se_sys_ioctl+0x47/0x170 [ 216.109483][ T8234] do_syscall_64+0xfa/0xfa0 [ 216.109507][ T8234] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.109523][ T8234] ? asm_sysvec_call_function_single+0x1a/0x20 [ 216.109540][ T8234] ? clear_bhb_loop+0x60/0xb0 [ 216.109561][ T8234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.109578][ T8234] RIP: 0033:0x7fef5a38f749 [ 216.109593][ T8234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.109608][ T8234] RSP: 002b:00007fef5b272038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 216.109627][ T8234] RAX: ffffffffffffffda RBX: 00007fef5a5e5fa0 RCX: 00007fef5a38f749 [ 216.109641][ T8234] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 216.109652][ T8234] RBP: 00007fef5b272090 R08: 0000000000000000 R09: 0000000000000000 [ 216.109663][ T8234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.109673][ T8234] R13: 00007fef5a5e6038 R14: 00007fef5a5e5fa0 R15: 00007fef5a70fa28 [ 216.109704][ T8234] [ 216.109797][ T8234] ERROR: Out of memory at tomoyo_realpath_from_path. [ 216.209710][ T5910] usb 4-1: USB disconnect, device number 33 [ 216.375442][ T5910] yurex 4-1:0.50: USB YUREX #1 now disconnected [ 216.725541][ T8257] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 216.733894][ T8257] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 216.778841][ T8257] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 216.826562][ T5910] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 216.981324][ T8265] batman_adv: batadv0: Adding interface: dummy0 [ 216.990846][ T8265] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.034899][ T5910] usb 5-1: Using ep0 maxpacket: 16 [ 217.047993][ T8265] batman_adv: batadv0: Interface activated: dummy0 [ 217.058387][ T5910] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.092471][ T5910] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 217.123445][ T5910] usb 5-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 217.174924][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.219089][ T5910] usb 5-1: config 0 descriptor?? [ 217.232318][ T8270] netlink: 'syz.3.609': attribute type 8 has an invalid length. [ 217.242135][ T8270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.609'. [ 217.298281][ T8270] bond0: entered promiscuous mode [ 217.301253][ T8273] netlink: 'syz.3.609': attribute type 8 has an invalid length. [ 217.312841][ T8273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.609'. [ 217.315259][ T8270] bond_slave_0: entered promiscuous mode [ 217.393307][ T8270] bond_slave_1: entered promiscuous mode [ 217.444884][ T5838] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 217.466251][ T8270] bond0: left promiscuous mode [ 217.484975][ T8270] bond_slave_0: left promiscuous mode [ 217.499330][ T8270] bond_slave_1: left promiscuous mode [ 217.540627][ T8273] bond0: entered promiscuous mode [ 217.549533][ T8273] bond_slave_0: entered promiscuous mode [ 217.555700][ T8273] bond_slave_1: entered promiscuous mode [ 217.571640][ T8273] bond0: left promiscuous mode [ 217.580042][ T8273] bond_slave_0: left promiscuous mode [ 217.585883][ T8273] bond_slave_1: left promiscuous mode [ 217.595635][ T5838] usb 1-1: Using ep0 maxpacket: 8 [ 217.613564][ T5838] usb 1-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a [ 217.634923][ T5838] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.643878][ T5838] usb 1-1: Product: syz [ 217.653184][ T5838] usb 1-1: Manufacturer: syz [ 217.658731][ T5838] usb 1-1: SerialNumber: syz [ 217.692620][ T5838] usb 1-1: config 0 descriptor?? [ 217.705317][ T5838] gspca_main: xirlink-cit-2.14.0 probing 0545:800c [ 217.716202][ T5838] input: xirlink-cit as /devices/platform/dummy_hcd.0/usb1/1-1/input/input45 [ 217.920617][ T5838] usb 1-1: USB disconnect, device number 32 [ 218.717587][ T8297] netlink: 4 bytes leftover after parsing attributes in process `syz.0.614'. [ 218.933627][ T8302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.616'. [ 219.816882][ T5910] usb 5-1: USB disconnect, device number 29 [ 220.019477][ T5918] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 220.040197][ T8327] loop6: detected capacity change from 0 to 2560 [ 220.054454][ T8327] Buffer I/O error on dev loop6, logical block 0, async page read [ 220.081644][ T8327] Buffer I/O error on dev loop6, logical block 0, async page read [ 220.092943][ T8327] Buffer I/O error on dev loop6, logical block 0, async page read [ 220.102819][ T8327] Buffer I/O error on dev loop6, logical block 0, async page read [ 220.254403][ T8327] Buffer I/O error on dev loop6, logical block 0, async page read [ 220.273132][ T5918] usb 3-1: Using ep0 maxpacket: 32 [ 220.336233][ T8327] Buffer I/O error on dev loop6, logical block 0, async page read [ 220.344178][ T5918] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.389779][ T8329] netlink: 48 bytes leftover after parsing attributes in process `syz.4.623'. [ 220.409207][ T8327] Buffer I/O error on dev loop6, logical block 0, async page read [ 220.449613][ T5918] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid maxpacket 1824, setting to 1024 [ 220.464889][ T8327] Buffer I/O error on dev loop6, logical block 0, async page read [ 220.483341][ T5918] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 220.509023][ T5918] usb 3-1: config 0 interface 0 has no altsetting 0 [ 220.533783][ T5918] usb 3-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.00 [ 220.534507][ T8327] ldm_validate_partition_table(): Disk read failed. [ 220.543486][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.563763][ T8333] FAULT_INJECTION: forcing a failure. [ 220.563763][ T8333] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.580200][ T8333] CPU: 0 UID: 0 PID: 8333 Comm: syz.0.624 Not tainted syzkaller #0 PREEMPT(full) [ 220.580216][ T8333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 220.580223][ T8333] Call Trace: [ 220.580228][ T8333] [ 220.580233][ T8333] dump_stack_lvl+0x189/0x250 [ 220.580251][ T8333] ? __pfx____ratelimit+0x10/0x10 [ 220.580265][ T8333] ? __pfx_dump_stack_lvl+0x10/0x10 [ 220.580278][ T8333] ? __pfx__printk+0x10/0x10 [ 220.580295][ T8333] should_fail_ex+0x414/0x560 [ 220.580313][ T8333] __kvm_read_guest_page+0x18d/0x240 [ 220.580334][ T8333] kvm_fetch_guest_virt+0x12b/0x170 [ 220.580349][ T8333] ? __pfx_kvm_fetch_guest_virt+0x10/0x10 [ 220.580360][ T8333] __do_insn_fetch_bytes+0x2fc/0x6d0 [ 220.580377][ T8333] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 220.580399][ T8333] x86_decode_insn+0x31d/0x5470 [ 220.580414][ T8333] ? kvm_is_mmio_pfn+0x169/0x730 [ 220.580429][ T8333] ? kvm_is_mmio_pfn+0x169/0x730 [ 220.580444][ T8333] ? rcu_is_watching+0x15/0xb0 [ 220.580456][ T8333] ? handle_changed_spte+0x1cd/0x10a0 [ 220.580468][ T8333] ? handle_changed_spte+0x3f5/0x10a0 [ 220.580477][ T8333] ? __pfx_x86_decode_insn+0x10/0x10 [ 220.580495][ T8333] ? kvm_tdp_mmu_map+0x308/0x1d30 [ 220.580513][ T8333] ? __asan_memset+0x22/0x50 [ 220.580526][ T8333] ? init_decode_cache+0x78/0x90 [ 220.580540][ T8333] ? init_emulate_ctxt+0x4d6/0x660 [ 220.580554][ T8333] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 220.580568][ T8333] ? trace_rcu_utilization+0x47/0x1d0 [ 220.580581][ T8333] x86_emulate_instruction+0x61b/0x1f90 [ 220.580603][ T8333] ? _raw_read_unlock+0x28/0x50 [ 220.580616][ T8333] ? __pfx_x86_emulate_instruction+0x10/0x10 [ 220.580633][ T8333] ? __get_current_cr3_fast+0x90/0x150 [ 220.580647][ T8333] ? clear_bhb_loop+0x60/0xb0 [ 220.580657][ T8333] ? clear_bhb_loop+0x60/0xb0 [ 220.580666][ T8333] ? vmx_vcpu_run+0xe92/0x2b70 [ 220.580676][ T8333] ? __vmx_complete_interrupts+0xe7/0x690 [ 220.580694][ T8333] handle_ud+0x142/0x590 [ 220.580707][ T8333] ? __pfx_handle_ud+0x10/0x10 [ 220.580717][ T8333] ? vmx_handle_exit_irqoff+0x61e/0x940 [ 220.580727][ T8333] ? __pfx_current_save_fsgs+0x10/0x10 [ 220.580744][ T8333] ? __lock_acquire+0xab9/0xd20 [ 220.580756][ T8333] ? __pfx_handle_exception_nmi+0x10/0x10 [ 220.580768][ T8333] vmx_handle_exit+0x10a4/0x18c0 [ 220.580779][ T8333] ? vcpu_run+0x361b/0x7040 [ 220.580796][ T8333] vcpu_run+0x43aa/0x7040 [ 220.580812][ T8333] ? vcpu_run+0x361b/0x7040 [ 220.580849][ T8333] ? __pfx_vcpu_run+0x10/0x10 [ 220.580861][ T8333] ? kvm_arch_vcpu_ioctl_run+0x293/0x1cb0 [ 220.580879][ T8333] ? rcu_is_watching+0x15/0xb0 [ 220.580892][ T8333] kvm_arch_vcpu_ioctl_run+0x116c/0x1cb0 [ 220.580915][ T8333] ? __mutex_trylock_common+0x153/0x260 [ 220.580929][ T8333] ? kvm_arch_vcpu_ioctl_run+0x293/0x1cb0 [ 220.580943][ T8333] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 220.580957][ T8333] ? rcu_is_watching+0x15/0xb0 [ 220.580968][ T8333] ? trace_contention_end+0x39/0x120 [ 220.580980][ T8333] ? __mutex_lock+0x335/0x1350 [ 220.580992][ T8333] ? kasan_quarantine_put+0xdd/0x220 [ 220.581005][ T8333] ? lockdep_hardirqs_on+0x9c/0x150 [ 220.581019][ T8333] ? kvm_vcpu_ioctl+0x22e/0xe90 [ 220.581033][ T8333] ? __pfx___mutex_lock+0x10/0x10 [ 220.581042][ T8333] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 220.581058][ T8333] ? do_vfs_ioctl+0xbe8/0x1430 [ 220.581070][ T8333] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 220.581082][ T8333] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 220.581096][ T8333] kvm_vcpu_ioctl+0x95c/0xe90 [ 220.581112][ T8333] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 220.581138][ T8333] ? __fget_files+0x2a/0x420 [ 220.581149][ T8333] ? __fget_files+0x3a0/0x420 [ 220.581158][ T8333] ? __fget_files+0x2a/0x420 [ 220.581168][ T8333] ? bpf_lsm_file_ioctl+0x9/0x20 [ 220.581180][ T8333] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 220.581192][ T8333] __se_sys_ioctl+0xfc/0x170 [ 220.581205][ T8333] do_syscall_64+0xfa/0xfa0 [ 220.581218][ T8333] ? lockdep_hardirqs_on+0x9c/0x150 [ 220.581231][ T8333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.581240][ T8333] ? clear_bhb_loop+0x60/0xb0 [ 220.581251][ T8333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.581261][ T8333] RIP: 0033:0x7f5a21d8f749 [ 220.581271][ T8333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.581279][ T8333] RSP: 002b:00007f5a22c5c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 220.581291][ T8333] RAX: ffffffffffffffda RBX: 00007f5a21fe5fa0 RCX: 00007f5a21d8f749 [ 220.581299][ T8333] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 220.581305][ T8333] RBP: 00007f5a22c5c090 R08: 0000000000000000 R09: 0000000000000000 [ 220.581311][ T8333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.581316][ T8333] R13: 00007f5a21fe6038 R14: 00007f5a21fe5fa0 R15: 00007f5a2210fa28 [ 220.581333][ T8333] [ 221.072046][ T5918] usb 3-1: config 0 descriptor?? [ 221.095599][ T8327] Buffer I/O error on dev loop6, logical block 0, async page read [ 221.103596][ T8327] Buffer I/O error on dev loop6, logical block 0, async page read [ 221.113303][ T8315] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 221.195682][ T8327] Dev loop6: unable to read RDB block 0 [ 221.202524][ T5918] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input46 [ 221.218843][ T8327] loop6: unable to read partition table [ 221.271413][ T8327] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 222.249550][ T5185] bcm5974 3-1:0.0: could not read from device [ 222.253820][ T9] usb 3-1: USB disconnect, device number 21 [ 222.294190][ T5185] bcm5974 3-1:0.0: could not read from device [ 222.365347][ T5831] bcm5974 3-1:0.0: could not read from device [ 222.459789][ T5831] udevd[5831]: Error opening device "/dev/input/event4": No such file or directory [ 222.523607][ T5831] udevd[5831]: Unable to EVIOCGABS device "/dev/input/event4" [ 222.576881][ T5831] udevd[5831]: Unable to EVIOCGABS device "/dev/input/event4" [ 222.597116][ T8366] loop9: detected capacity change from 0 to 7 [ 222.608450][ T8366] Dev loop9: unable to read RDB block 7 [ 222.617529][ T8366] loop9: AHDI p4 [ 222.624471][ T8366] loop9: partition table partially beyond EOD, truncated [ 222.635040][ T5831] udevd[5831]: Unable to EVIOCGABS device "/dev/input/event4" [ 222.669124][ T5831] udevd[5831]: Unable to EVIOCGABS device "/dev/input/event4" [ 222.687767][ T5910] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 222.847040][ T5910] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 222.863146][ T5910] usb 2-1: config 0 has no interface number 0 [ 222.897359][ T5910] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.952193][ T5910] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.045851][ T9] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 223.119460][ T5910] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 223.142596][ T5910] usb 2-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 223.160949][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.205480][ T5918] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 223.217106][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 223.240564][ T5910] usb 2-1: config 0 descriptor?? [ 223.293987][ T9] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 223.345299][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.386669][ T9] usb 4-1: Product: syz [ 223.391103][ T9] usb 4-1: Manufacturer: syz [ 223.412515][ T9] usb 4-1: SerialNumber: syz [ 223.426594][ T9] usb 4-1: config 0 descriptor?? [ 223.447683][ T9] hub 4-1:0.0: bad descriptor, ignoring hub [ 223.453399][ T8362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.468171][ T9] hub 4-1:0.0: probe with driver hub failed with error -5 [ 223.476534][ T8362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.508583][ T9] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input47 [ 223.541322][ T8389] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 224.394944][ T5918] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 224.451889][ T8405] netlink: 'syz.1.630': attribute type 10 has an invalid length. [ 224.613322][ T5918] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 224.650891][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.679921][ T5918] usb 3-1: Product: syz [ 224.689776][ T5918] usb 3-1: Manufacturer: syz [ 224.704886][ T5918] usb 3-1: SerialNumber: syz [ 224.792551][ T5918] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 224.880951][ T5889] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 224.982702][ T8411] loop9: detected capacity change from 0 to 7 [ 224.999750][ T8411] Dev loop9: unable to read RDB block 7 [ 225.014966][ T8411] loop9: AHDI p4 [ 225.030709][ T8411] loop9: partition table partially beyond EOD, truncated [ 225.157239][ T8399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.193440][ T8399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.272818][ T8399] netlink: 6 bytes leftover after parsing attributes in process `syz.2.641'. [ 225.294837][ T8399] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 225.707605][ T5910] usbhid 2-1:0.1: can't add hid device: -71 [ 225.713690][ T5910] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 225.785614][ T5910] usb 2-1: USB disconnect, device number 46 [ 225.956936][ T43] usb 4-1: USB disconnect, device number 34 [ 226.015584][ T5889] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 226.035586][ T5889] ath9k_htc: Failed to initialize the device [ 226.077850][ T8443] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 226.121422][ T5889] usb 3-1: ath9k_htc: USB layer deinitialized [ 226.154882][ T43] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 226.324853][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 226.333127][ T43] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 226.342026][ T43] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 226.360879][ T43] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 226.381245][ T43] usb 4-1: config 250 has no interface number 0 [ 226.397407][ T43] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 226.424523][ T43] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 226.510188][ T43] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 226.565521][ T43] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 226.582496][ T43] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 226.613554][ T43] usb 4-1: config 250 interface 228 has no altsetting 0 [ 226.635197][ T43] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 226.646037][ T43] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 226.654563][ T43] usb 4-1: Product: syz [ 226.660067][ T43] usb 4-1: SerialNumber: syz [ 226.692914][ T43] hub 4-1:250.228: bad descriptor, ignoring hub [ 226.699901][ T5910] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 226.716116][ T43] hub 4-1:250.228: probe with driver hub failed with error -5 [ 226.914003][ T8433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.936772][ T8433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.982750][ T5902] usb 3-1: USB disconnect, device number 23 [ 227.004066][ T8433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.023633][ T5910] usb 2-1: config 9 has an invalid interface number: 3 but max is 0 [ 227.031931][ T5910] usb 2-1: config 9 has no interface number 0 [ 227.038963][ T5910] usb 2-1: config 9 interface 3 has no altsetting 0 [ 227.057986][ T5910] usb 2-1: New USB device found, idVendor=0fcf, idProduct=1003, bcdDevice=87.04 [ 227.058354][ T8433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.105203][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.147379][ T5910] usb 2-1: Product: syz [ 227.151580][ T5910] usb 2-1: Manufacturer: syz [ 227.177580][ T5910] usb 2-1: SerialNumber: syz [ 227.186117][ T8433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.246200][ T8433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.287324][ T8433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.324617][ T8433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.415894][ T43] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 35 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 227.438803][ T5910] hub 2-1:9.3: bad descriptor, ignoring hub [ 227.484783][ T5910] hub 2-1:9.3: probe with driver hub failed with error -5 [ 227.524640][ T5910] cp210x 2-1:9.3: cp210x converter detected [ 227.569797][ T5910] cp210x 2-1:9.3: failed to get vendor val 0x370b size 1: -71 [ 227.614964][ T5910] cp210x 2-1:9.3: querying part number failed [ 227.665931][ T5910] usb 2-1: cp210x converter now attached to ttyUSB0 [ 227.699097][ T5918] usb 4-1: USB disconnect, device number 35 [ 227.720550][ T8461] loop9: detected capacity change from 0 to 7 [ 227.735938][ T5910] usb 2-1: USB disconnect, device number 47 [ 227.739478][ T5918] usblp0: removed [ 227.766617][ T8461] Dev loop9: unable to read RDB block 7 [ 227.777726][ T8461] loop9: AHDI p4 [ 227.782717][ T8461] loop9: partition table partially beyond EOD, truncated [ 227.861819][ T5910] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 227.870139][ C1] hrtimer: interrupt took 67679 ns [ 227.909981][ T5910] cp210x 2-1:9.3: device disconnected [ 227.964890][ T5889] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 228.055458][ T8466] vlan2: entered promiscuous mode [ 228.077395][ T8466] bond0: entered promiscuous mode [ 228.115250][ T8466] bond_slave_0: entered promiscuous mode [ 228.135144][ T8466] bond_slave_1: entered promiscuous mode [ 228.141431][ T5889] usb 1-1: Using ep0 maxpacket: 32 [ 228.170775][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.211107][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.248860][ T5889] usb 1-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 228.275815][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.305396][ T5889] usb 1-1: config 0 descriptor?? [ 228.445594][ T9] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 228.490901][ T8477] batman_adv: batadv0: Interface deactivated: dummy0 [ 228.586512][ T5889] usbhid 1-1:0.0: can't add hid device: -71 [ 228.613444][ T5889] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 228.621436][ T5918] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 228.638196][ T9] usb 2-1: config 220 has an invalid descriptor of length 245, skipping remainder of the config [ 228.653539][ T5889] usb 1-1: USB disconnect, device number 33 [ 228.663642][ T9] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 228.675221][ T5910] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 228.680489][ T9] usb 2-1: config 220 interface 0 has no altsetting 0 [ 228.710611][ T9] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 228.721577][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.730784][ T9] usb 2-1: Product: syz [ 228.737306][ T9] usb 2-1: Manufacturer: syz [ 228.741990][ T9] usb 2-1: SerialNumber: syz [ 228.748092][ T8477] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.764417][ T8477] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.825681][ T5918] usb 4-1: Using ep0 maxpacket: 16 [ 228.834333][ T5918] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 228.847720][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 228.855443][ T5910] usb 3-1: Using ep0 maxpacket: 32 [ 228.867631][ T5918] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 228.870867][ T5910] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 228.877522][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.888086][ T5910] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 228.900814][ T5918] usb 4-1: Product: syz [ 228.908734][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 228.912771][ T5918] usb 4-1: Manufacturer: syz [ 228.928392][ T5910] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 228.928979][ T5918] usb 4-1: SerialNumber: syz [ 228.944003][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 228.944029][ T5910] usb 3-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 228.946703][ T5910] usb 3-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=3f.bf [ 228.966717][ T9] uvcvideo 2-1:220.0: Found UVC 0.00 device syz (8086:0b07) [ 228.977045][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.986671][ T9] uvcvideo 2-1:220.0: No valid video chain found. [ 228.992715][ T5910] usb 3-1: Product: syz [ 228.999939][ T5918] usb 4-1: config 0 descriptor?? [ 229.002906][ T5910] usb 3-1: Manufacturer: syz [ 229.013388][ T8477] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 229.015128][ T9] usb 2-1: USB disconnect, device number 48 [ 229.026988][ T5889] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 229.029203][ T5910] usb 3-1: SerialNumber: syz [ 229.038121][ T5918] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 229.049748][ T5918] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 229.073386][ T5910] usb 3-1: config 0 descriptor?? [ 229.085240][ T8480] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 229.099315][ T5910] pn533_usb 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 229.126579][ T8477] bridge1: left allmulticast mode [ 229.131957][ T8477] vti0: left promiscuous mode [ 229.137575][ T8477] ipip0: left promiscuous mode [ 229.142399][ T8477] ipip0: left allmulticast mode [ 229.150883][ T8477] bridge2: left promiscuous mode [ 229.156377][ T8477] bridge2: left allmulticast mode [ 229.163358][ T7658] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.173200][ T7658] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.192934][ T7656] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.202328][ T7656] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.215304][ T5889] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 229.224521][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.234920][ T5889] usb 1-1: Product: syz [ 229.239144][ T5889] usb 1-1: Manufacturer: syz [ 229.243796][ T5889] usb 1-1: SerialNumber: syz [ 229.251962][ T5889] usb 1-1: config 0 descriptor?? [ 229.260017][ T5889] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 229.325905][ T8477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.346560][ T8477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.447277][ T8496] sctp: Trying to GSO but underlying device doesn't support it. [ 229.471163][ T5910] hid_parser_main: 149 callbacks suppressed [ 229.471187][ T5910] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 229.528591][ T5910] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 229.542118][ T5910] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 229.554146][ T5910] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 229.561848][ T5910] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 229.572670][ T5910] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 229.580762][ T5910] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 229.590815][ T5910] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 229.598511][ T5910] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 229.600592][ T8502] loop9: detected capacity change from 0 to 7 [ 229.606162][ T5910] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 229.618235][ T5910] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz0 [ 229.635384][ T5918] em28xx 4-1:0.0: chip ID is em2710 [ 229.665305][ T8502] Dev loop9: unable to read RDB block 7 [ 229.670949][ T8502] loop9: AHDI p4 [ 229.710486][ T8502] loop9: partition table partially beyond EOD, truncated [ 229.728204][ T8503] fido_id[8503]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 229.820152][ T8509] fuse: Unknown parameter 'rootcontext' [ 229.826197][ T8508] netlink: 40 bytes leftover after parsing attributes in process `syz.4.671'. [ 229.845357][ T5918] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 229.865336][ T5918] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 229.883282][ T5918] em28xx 4-1:0.0: No AC97 audio processor [ 229.919201][ T5918] usb 4-1: USB disconnect, device number 36 [ 229.946665][ T5918] em28xx 4-1:0.0: Disconnecting em28xx [ 229.956620][ T5918] em28xx 4-1:0.0: Freeing device [ 230.100055][ T8517] syzkaller0: entered promiscuous mode [ 230.106390][ T8517] syzkaller0: entered allmulticast mode [ 230.157838][ T5910] usb 3-1: USB disconnect, device number 24 [ 230.364894][ T5902] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 230.524889][ T5902] usb 2-1: Using ep0 maxpacket: 16 [ 230.552833][ T5902] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 7.00 [ 230.572285][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.592274][ T5902] usb 2-1: Product: syz [ 230.606279][ T5902] usb 2-1: Manufacturer: syz [ 230.616338][ T5902] usb 2-1: SerialNumber: syz [ 230.634219][ T5902] usb 2-1: config 0 descriptor?? [ 230.653235][ T5902] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 230.672484][ T5902] usb 2-1: Detected FT2232H [ 230.863893][ T5902] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 230.897678][ T5902] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 230.932680][ T5902] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 230.965356][ T5902] usb 2-1: USB disconnect, device number 49 [ 230.987263][ T5910] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 231.080681][ T5902] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 231.091483][ T5902] ftdi_sio 2-1:0.0: device disconnected [ 231.266021][ T5910] usb 4-1: Using ep0 maxpacket: 32 [ 231.472363][ T8534] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 231.587074][ T5838] usb 1-1: USB disconnect, device number 34 [ 231.674353][ T5910] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 231.721754][ T5910] usb 4-1: config 0 interface 0 has no altsetting 0 [ 231.743625][ T5910] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 231.897893][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.921208][ T5910] usb 4-1: config 0 descriptor?? [ 232.210029][ T8544] loop9: detected capacity change from 0 to 7 [ 232.322469][ T8544] Dev loop9: unable to read RDB block 7 [ 232.357131][ T8544] loop9: AHDI p4 [ 232.381601][ T8544] loop9: partition table partially beyond EOD, truncated [ 232.454957][ T5889] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 232.638121][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 232.725747][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 35, changing to 7 [ 232.744954][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 41963, setting to 1024 [ 232.823500][ T8556] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 233.004666][ T5889] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 233.060485][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.087745][ T5889] usb 2-1: Product: syz [ 233.144065][ T5889] usb 2-1: Manufacturer: syz [ 233.240548][ T5889] usb 2-1: SerialNumber: syz [ 233.869426][ T5889] usb 2-1: config 0 descriptor?? [ 234.026740][ T5889] usb 2-1: 0:0 : invalid sync pipe. bmAttributes 01, bLength 9, bSynchAddress 7f [ 234.039772][ T5910] usbhid 4-1:0.0: can't add hid device: -71 [ 234.053264][ T5910] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 234.123353][ T5910] usb 4-1: USB disconnect, device number 37 [ 234.140339][ T8567] netlink: 52 bytes leftover after parsing attributes in process `syz.4.685'. [ 234.265154][ T5889] usb 2-1: USB disconnect, device number 50 [ 234.754851][ T5910] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 234.936180][ T5910] usb 5-1: Using ep0 maxpacket: 16 [ 234.943454][ T5910] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 234.955617][ T5910] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 234.969801][ T5910] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 234.985498][ T5910] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 234.994832][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.003507][ T5910] usb 5-1: Product: syz [ 235.008091][ T5910] usb 5-1: Manufacturer: syz [ 235.012718][ T5910] usb 5-1: SerialNumber: syz [ 235.440977][ T8570] syzkaller0: entered promiscuous mode [ 235.449177][ T8570] syzkaller0: entered allmulticast mode [ 235.707852][ T8612] netlink: 28 bytes leftover after parsing attributes in process `syz.3.694'. [ 235.716962][ T5838] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 235.886191][ T5838] usb 3-1: Using ep0 maxpacket: 32 [ 235.928839][ T5838] usb 3-1: unable to get BOS descriptor or descriptor too short [ 235.945428][ T5838] usb 3-1: no configurations [ 235.950064][ T5838] usb 3-1: can't read configurations, error -22 [ 236.988064][ T8630] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 237.419437][ T8628] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.445893][ T8628] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.727878][ T5910] usb-storage 5-1:1.2: USB Mass Storage device detected [ 237.857279][ T5910] usb 5-1: USB disconnect, device number 30 [ 237.921232][ T5833] udevd[5833]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 238.020087][ T7669] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.056830][ T7669] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.117855][ T7669] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.170008][ T7669] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.362130][ T8660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.703'. [ 238.394864][ T43] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 238.589265][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 238.620696][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.647996][ T43] usb 1-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 238.668846][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.694780][ T43] usb 1-1: Product: syz [ 238.709190][ T43] usb 1-1: Manufacturer: syz [ 238.713826][ T43] usb 1-1: SerialNumber: syz [ 238.752510][ T43] usb 1-1: config 0 descriptor?? [ 238.768864][ T43] cdc_phonet 1-1:0.0: probe with driver cdc_phonet failed with error -22 [ 239.044950][ T5889] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 239.089382][ T8683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.101160][ T8683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.118089][ T8683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.140780][ T8683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.228475][ T8684] netlink: 28 bytes leftover after parsing attributes in process `syz.0.702'. [ 239.348344][ T5889] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 239.378020][ T5889] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 239.401392][ T5889] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 239.489552][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.538453][ T8669] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 239.546107][ T8669] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 239.567266][ T5889] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 239.825257][ T8669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.855221][ T8669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.874486][ T8669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.885094][ T8669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.920845][ T5910] usb 2-1: USB disconnect, device number 51 [ 240.391212][ T8697] sock: sock_set_timeout: `syz.2.708' (pid 8697) tries to set negative timeout [ 240.770270][ T8704] fuse: Unknown parameter 'group?m\u [ 240.770270][ T8704] edw>vLVB.[h<*8!Hgd_˗"Ǖ]nˊ̏ [ 240.770270][ T8704] ԬSrwH' Pg' [ 240.873151][ T8706] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 240.882413][ T8706] PKCS7: Only support pkcs7_signedData type [ 240.937190][ T8706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.710'. [ 240.955027][ T8706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.710'. [ 241.143694][ T43] usb 1-1: USB disconnect, device number 35 [ 241.401248][ T8711] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 241.408044][ T8711] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 241.538566][ T8711] vhci_hcd vhci_hcd.0: Device attached [ 241.698753][ T8714] vhci_hcd: connection closed [ 241.700894][ T7658] vhci_hcd: stop threads [ 241.714947][ T5889] vhci_hcd: vhci_device speed not set [ 241.739062][ T7658] vhci_hcd: release socket [ 241.745450][ T7658] vhci_hcd: disconnect device [ 241.794867][ T5889] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 241.825233][ T5889] usb 33-1: enqueue for inactive port 0 [ 241.917072][ T5889] vhci_hcd: vhci_device speed not set [ 242.385316][ T8753] tunl0: Caught tx_queue_len zero misconfig [ 242.625258][ T8747] batadv_slave_1: entered promiscuous mode [ 243.013130][ T8774] netlink: 24 bytes leftover after parsing attributes in process `syz.3.720'. [ 243.104853][ T8736] batadv_slave_1: left promiscuous mode [ 243.564830][ T5910] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 243.634837][ T5829] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 243.774821][ T5910] usb 1-1: Using ep0 maxpacket: 16 [ 243.800661][ T5910] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 243.824849][ T5910] usb 1-1: config 0 has no interface number 0 [ 243.919107][ T5829] usb 5-1: Using ep0 maxpacket: 16 [ 243.934839][ T5910] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 243.950472][ T5829] usb 5-1: unable to get BOS descriptor or descriptor too short [ 243.973849][ T5910] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 244.005370][ T5829] usb 5-1: config 159 has an invalid interface number: 195 but max is 0 [ 244.032831][ T5829] usb 5-1: config 159 has no interface number 0 [ 244.046416][ T5910] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 244.144214][ T5829] usb 5-1: config 159 interface 195 altsetting 5 endpoint 0x1 has invalid maxpacket 288, setting to 64 [ 244.204634][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.220875][ T5829] usb 5-1: config 159 interface 195 has no altsetting 0 [ 244.233112][ T5910] usb 1-1: Product: syz [ 244.243623][ T5829] usb 5-1: New USB device found, idVendor=17e9, idProduct=b889, bcdDevice=ec.5c [ 244.252968][ T5829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.261454][ T5829] usb 5-1: Product: syz [ 244.273718][ T5829] usb 5-1: Manufacturer: syz [ 244.287661][ T5910] usb 1-1: Manufacturer: syz [ 244.310139][ T5829] usb 5-1: SerialNumber: syz [ 244.325135][ T5910] usb 1-1: SerialNumber: syz [ 244.366334][ T5910] usb 1-1: config 0 descriptor?? [ 244.413153][ T8780] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 244.425888][ T8780] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 244.615366][ T5829] udl 5-1:159.195: [drm] Unrecognized vendor firmware descriptor [ 244.634418][ T5829] [drm:udl_init] *ERROR* Selecting channel failed [ 244.647715][ T8796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.727'. [ 244.649430][ T8780] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 244.691292][ T8795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.727'. [ 244.705218][ T8780] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 244.758964][ T5829] [drm] Initialized udl 0.0.1 for 5-1:159.195 on minor 2 [ 244.812502][ T5829] [drm] Initialized udl on minor 2 [ 244.831255][ T5829] udl 5-1:159.195: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 244.858158][ T5829] udl 5-1:159.195: [drm] Cannot find any crtc or sizes [ 244.891347][ T5918] udl 5-1:159.195: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 244.917935][ T5829] usb 5-1: USB disconnect, device number 31 [ 244.928530][ T5918] udl 5-1:159.195: [drm] Cannot find any crtc or sizes [ 244.999182][ T8780] syzkaller0: entered promiscuous mode [ 245.019196][ T8780] syzkaller0: entered allmulticast mode [ 245.194470][ T8812] syzkaller1: entered promiscuous mode [ 245.225046][ T8812] syzkaller1: entered allmulticast mode [ 245.720660][ T8834] netlink: 24 bytes leftover after parsing attributes in process `syz.4.734'. [ 245.733214][ T8834] netlink: 52 bytes leftover after parsing attributes in process `syz.4.734'. [ 246.538086][ T5910] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 246.553333][ T5910] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 246.573098][ T5910] asix 1-1:0.251: probe with driver asix failed with error -5 [ 246.600140][ T5910] usb 1-1: USB disconnect, device number 36 [ 247.346449][ T8859] netlink: 116 bytes leftover after parsing attributes in process `syz.2.741'. [ 247.605959][ T43] usb 3-1: new low-speed USB device number 27 using dummy_hcd [ 247.734851][ T5838] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 247.776802][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.792163][ T43] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 247.826309][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.876677][ T43] usb 3-1: config 0 descriptor?? [ 247.884820][ T5838] usb 5-1: Using ep0 maxpacket: 32 [ 247.945058][ T5838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 247.954873][ T5829] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 247.956810][ T5838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 247.973633][ T5838] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 247.993563][ T5838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 248.005117][ T5838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 248.022277][ T5838] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 248.031856][ T5838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.040168][ T5838] usb 5-1: Product: syz [ 248.044910][ T5838] usb 5-1: Manufacturer: syz [ 248.049631][ T5838] usb 5-1: SerialNumber: syz [ 248.060443][ T5838] usb 5-1: config 0 descriptor?? [ 248.074876][ T5838] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input48 [ 248.114948][ T5829] usb 4-1: device descriptor read/64, error -71 [ 248.357360][ T43] prodikeys 0003:041E:2801.0008: hidraw0: USB HID v0.02 Device [HID 041e:2801] on usb-dummy_hcd.2-1/input0 [ 248.365799][ T5829] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 248.457839][ T5838] usb 5-1: USB disconnect, device number 32 [ 248.543612][ T43] usb 3-1: USB disconnect, device number 27 [ 248.555047][ T5829] usb 4-1: device descriptor read/64, error -71 [ 248.572696][ T8874] fido_id[8874]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 248.665225][ T5829] usb usb4-port1: attempt power cycle [ 248.953719][ T8879] netlink: 'syz.1.746': attribute type 1 has an invalid length. [ 249.084811][ T5829] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 249.086774][ T8879] bond1: entered promiscuous mode [ 249.098160][ T8879] 8021q: adding VLAN 0 to HW filter on device bond1 [ 249.140400][ T5829] usb 4-1: device descriptor read/8, error -71 [ 249.354239][ T8889] netlink: 156 bytes leftover after parsing attributes in process `syz.2.748'. [ 249.379797][ T8889] IPVS: set_ctl: invalid protocol: 44 172.30.4.3:20001 [ 249.395495][ T5829] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 249.471326][ T5829] usb 4-1: device descriptor read/8, error -71 [ 249.597396][ T5829] usb usb4-port1: unable to enumerate USB device [ 250.209945][ T8909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.754'. [ 250.970897][ T8919] netlink: 48 bytes leftover after parsing attributes in process `syz.0.758'. [ 250.985345][ T8919] netlink: 48 bytes leftover after parsing attributes in process `syz.0.758'. [ 251.244895][ T43] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 251.406988][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.419519][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.437309][ T43] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 251.547995][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.595867][ T43] usb 2-1: config 0 descriptor?? [ 252.094840][ T8930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.155319][ T8930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.361797][ T8960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.371087][ T8960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.387614][ T8960] kAFS: unable to lookup cell '(,cL' [ 252.537126][ T8965] netlink: 52 bytes leftover after parsing attributes in process `syz.0.771'. [ 252.552080][ T8965] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.559678][ T8965] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.834836][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 252.834854][ T30] audit: type=1326 audit(1764489930.542:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8970 comm="syz.0.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a21d8f749 code=0x7ffc0000 [ 252.942978][ T30] audit: type=1326 audit(1764489930.542:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8970 comm="syz.0.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f5a21d8f749 code=0x7ffc0000 [ 252.943029][ T30] audit: type=1326 audit(1764489930.542:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8970 comm="syz.0.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a21d8f749 code=0x7ffc0000 [ 252.943067][ T30] audit: type=1326 audit(1764489930.542:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8970 comm="syz.0.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f5a21d8f749 code=0x7ffc0000 [ 252.943105][ T30] audit: type=1326 audit(1764489930.542:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8970 comm="syz.0.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a21d8f749 code=0x7ffc0000 [ 252.943145][ T30] audit: type=1326 audit(1764489930.542:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8970 comm="syz.0.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f5a21d8f749 code=0x7ffc0000 [ 252.943183][ T30] audit: type=1326 audit(1764489930.542:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8970 comm="syz.0.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a21d8f749 code=0x7ffc0000 [ 252.943222][ T30] audit: type=1326 audit(1764489930.542:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8970 comm="syz.0.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5a21d8f749 code=0x7ffc0000 [ 252.943269][ T30] audit: type=1326 audit(1764489930.542:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8970 comm="syz.0.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a21d8f749 code=0x7ffc0000 [ 252.943308][ T30] audit: type=1326 audit(1764489930.542:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8970 comm="syz.0.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5a21d8f749 code=0x7ffc0000 [ 252.983811][ C1] vkms_vblank_simulate: vblank timer overrun [ 253.052179][ C1] vkms_vblank_simulate: vblank timer overrun [ 253.406488][ T5889] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 253.580280][ T5889] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 253.588598][ T5889] usb 3-1: config 0 has no interface number 0 [ 253.597129][ T5889] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 253.606646][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.614665][ T5889] usb 3-1: Product: syz [ 253.620435][ T5889] usb 3-1: Manufacturer: syz [ 253.625136][ T5889] usb 3-1: SerialNumber: syz [ 253.632799][ T5889] usb 3-1: config 0 descriptor?? [ 254.024674][ T43] usbhid 2-1:0.0: can't add hid device: -71 [ 254.036095][ T5889] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 254.039652][ T43] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 254.080845][ T43] usb 2-1: USB disconnect, device number 52 [ 254.138617][ T5889] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 254.165174][ T5889] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 254.196989][ T5889] usb 3-1: media controller created [ 254.285704][ T5889] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 254.567798][ T5889] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 254.686677][ T5889] usb 3-1: USB disconnect, device number 28 [ 254.933608][ T9005] netlink: 52 bytes leftover after parsing attributes in process `syz.3.783'. [ 254.953388][ T9005] netlink: 76 bytes leftover after parsing attributes in process `syz.3.783'. [ 254.966574][ T9005] netlink: 52 bytes leftover after parsing attributes in process `syz.3.783'. [ 255.273596][ T9012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.303842][ T9012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.398393][ T9017] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 255.495163][ T43] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 255.505147][ T5838] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 255.522701][ T9022] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 255.536483][ T9022] bond1 (unregistering): Released all slaves [ 255.664860][ T43] usb 2-1: device descriptor read/64, error -71 [ 255.695010][ T5838] usb 3-1: Using ep0 maxpacket: 16 [ 255.699349][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.704647][ T5838] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 255.707055][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.727509][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.767053][ T5838] usb 3-1: Product: syz [ 255.796827][ T5838] usb 3-1: Manufacturer: syz [ 255.830863][ T5838] usb 3-1: SerialNumber: syz [ 255.878524][ T5838] r8152-cfgselector 3-1: Unknown version 0x0000 [ 255.903925][ T5838] r8152-cfgselector 3-1: config 0 descriptor?? [ 255.910346][ T43] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 256.076965][ T9043] kAFS: unable to lookup cell '(,c' [ 256.234821][ T43] usb 2-1: device descriptor read/64, error -71 [ 256.270329][ T5838] r8152-cfgselector 3-1: Unknown version 0x0000 [ 256.281922][ T5838] r8152-cfgselector 3-1: bad CDC descriptors [ 256.336404][ T5838] r8152-cfgselector 3-1: USB disconnect, device number 29 [ 256.352773][ T43] usb usb2-port1: attempt power cycle [ 256.694798][ T43] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 256.716185][ T43] usb 2-1: device descriptor read/8, error -71 [ 256.938189][ T9046] netlink: 52 bytes leftover after parsing attributes in process `syz.2.794'. [ 256.956127][ T43] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 257.005736][ T43] usb 2-1: device descriptor read/8, error -71 [ 257.019461][ T9046] netlink: 76 bytes leftover after parsing attributes in process `syz.2.794'. [ 257.065184][ T9046] netlink: 52 bytes leftover after parsing attributes in process `syz.2.794'. [ 257.125602][ T43] usb usb2-port1: unable to enumerate USB device [ 257.481393][ T9059] netlink: 'syz.3.800': attribute type 2 has an invalid length. [ 257.494179][ T9059] : entered promiscuous mode [ 257.495039][ T5829] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 257.654849][ T5829] usb 5-1: Using ep0 maxpacket: 32 [ 257.661779][ T5829] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 257.670926][ T5829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.684438][ T5829] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 257.754863][ T5918] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 257.764959][ T5889] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 257.902853][ T5829] gspca_nw80x: reg_r err -71 [ 257.911571][ T5829] nw80x 5-1:3.0: probe with driver nw80x failed with error -71 [ 257.919697][ T5918] usb 4-1: Using ep0 maxpacket: 32 [ 257.927760][ T5889] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.946975][ T5918] usb 4-1: config index 0 descriptor too short (expected 12580, got 36) [ 257.963598][ T5829] usb 5-1: USB disconnect, device number 33 [ 257.971562][ T5889] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 257.981481][ T5918] usb 4-1: config 85 has too many interfaces: 125, using maximum allowed: 32 [ 257.995095][ T5918] usb 4-1: config 85 contains an unexpected descriptor of type 0x2, skipping [ 258.004548][ T5918] usb 4-1: config 85 has an invalid descriptor of length 0, skipping remainder of the config [ 258.015693][ T5918] usb 4-1: config 85 has 0 interfaces, different from the descriptor's value: 125 [ 258.025916][ T5889] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 258.036861][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 258.045427][ T5889] usb 1-1: SerialNumber: syz [ 258.052602][ T5918] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 258.072363][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.080624][ T9069] loop9: detected capacity change from 0 to 7 [ 258.081055][ T5918] usb 4-1: Product: syz [ 258.089214][ T9069] Dev loop9: unable to read RDB block 7 [ 258.091377][ T5918] usb 4-1: Manufacturer: syz [ 258.101883][ T5918] usb 4-1: SerialNumber: syz [ 258.105432][ T9069] loop9: unable to read partition table [ 258.115720][ T9069] loop9: partition table beyond EOD, truncated [ 258.122009][ T9069] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 258.369869][ T43] usb 4-1: USB disconnect, device number 42 [ 258.386442][ T9078] ip6tnl0: Caught tx_queue_len zero misconfig [ 258.766523][ T5829] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 258.954886][ T5829] usb 3-1: Using ep0 maxpacket: 16 [ 258.962643][ T5829] usb 3-1: config index 0 descriptor too short (expected 1316, got 36) [ 258.995055][ T5829] usb 3-1: config 0 has an invalid interface number: 157 but max is -1 [ 259.018214][ T9086] loop9: detected capacity change from 0 to 7 [ 259.047281][ T9086] Dev loop9: unable to read RDB block 7 [ 259.068522][ T9086] loop9: AHDI p4 [ 259.072440][ T5829] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 259.076708][ T9086] loop9: partition table partially beyond EOD, truncated [ 259.137499][ T5829] usb 3-1: config 0 has no interface number 0 [ 259.176918][ T5829] usb 3-1: config 0 interface 157 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 16 [ 259.253912][ T5829] usb 3-1: config 0 interface 157 altsetting 0 endpoint 0x82 has invalid maxpacket 62587, setting to 1024 [ 259.291974][ T5829] usb 3-1: config 0 interface 157 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 259.333274][ T5829] usb 3-1: New USB device found, idVendor=0483, idProduct=3746, bcdDevice=94.86 [ 259.342925][ T5829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.351409][ T5829] usb 3-1: Product: syz [ 259.365371][ T5829] usb 3-1: Manufacturer: syz [ 259.394575][ T5829] usb 3-1: SerialNumber: syz [ 259.408318][ T5829] usb 3-1: config 0 descriptor?? [ 259.423274][ T9081] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 259.431292][ T9081] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 259.761917][ T5829] ftdi_sio 3-1:0.157: FTDI USB Serial Device converter detected [ 259.788381][ T5829] ftdi_sio ttyUSB0: unknown device type: 0x9486 [ 259.840435][ T5829] usb 3-1: USB disconnect, device number 30 [ 259.875781][ T5829] ftdi_sio 3-1:0.157: device disconnected [ 260.486416][ T5889] usb 1-1: 0:2 : does not exist [ 260.530336][ T5889] usb 1-1: 0:0: failed to get current value for ch 0 (-22) [ 260.602102][ T5889] usb 1-1: USB disconnect, device number 37 [ 260.637562][ T9106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.814'. [ 260.655637][ T9106] netlink: 64 bytes leftover after parsing attributes in process `syz.0.814'. [ 260.678117][ T9106] netlink: 'syz.0.814': attribute type 1 has an invalid length. [ 260.694638][ T5833] udevd[5833]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 260.732124][ T9106] netlink: 'syz.0.814': attribute type 1 has an invalid length. [ 260.740643][ T9106] netlink: 'syz.0.814': attribute type 1 has an invalid length. [ 261.028012][ T9116] netlink: 24 bytes leftover after parsing attributes in process `syz.2.818'. [ 261.101552][ T9117] loop5: detected capacity change from 0 to 7 [ 261.146713][ T9117] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 261.165995][ T9117] buffer_io_error: 11 callbacks suppressed [ 261.166014][ T9117] Buffer I/O error on dev loop5, logical block 0, async page read [ 261.252675][ T9117] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 261.314822][ T9117] Buffer I/O error on dev loop5, logical block 0, async page read [ 261.347944][ T9117] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 261.357379][ T9117] Buffer I/O error on dev loop5, logical block 0, async page read [ 261.379222][ T9117] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 261.537528][ T9117] Buffer I/O error on dev loop5, logical block 0, async page read [ 261.555063][ T9117] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 261.634947][ T9117] Buffer I/O error on dev loop5, logical block 0, async page read [ 261.725264][ T9117] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 261.764862][ T5829] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 261.772619][ T9117] Buffer I/O error on dev loop5, logical block 0, async page read [ 261.807079][ T9117] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 261.944912][ T9117] Buffer I/O error on dev loop5, logical block 0, async page read [ 261.981989][ T5829] usb 2-1: config 0 interface 0 altsetting 12 bulk endpoint 0x6 has invalid maxpacket 1023 [ 261.998607][ T5829] usb 2-1: config 0 interface 0 altsetting 12 endpoint 0x82 has invalid wMaxPacketSize 0 [ 262.018986][ T9117] ldm_validate_partition_table(): Disk read failed. [ 262.054814][ T5829] usb 2-1: config 0 interface 0 altsetting 12 bulk endpoint 0x82 has invalid maxpacket 0 [ 262.083449][ T9117] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 262.092799][ T5829] usb 2-1: config 0 interface 0 has no altsetting 0 [ 262.161921][ T5829] usb 2-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 262.180454][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.194759][ T9117] Buffer I/O error on dev loop5, logical block 0, async page read [ 262.202864][ T5829] usb 2-1: Product: syz [ 262.212931][ T5829] usb 2-1: Manufacturer: syz [ 262.244842][ T5829] usb 2-1: SerialNumber: syz [ 262.255541][ T9117] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 262.268873][ T5829] usb 2-1: config 0 descriptor?? [ 262.275279][ T9129] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 262.296357][ T9117] Buffer I/O error on dev loop5, logical block 0, async page read [ 262.343825][ T9117] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 262.365216][ T9117] Buffer I/O error on dev loop5, logical block 0, async page read [ 262.373423][ T9117] Dev loop5: unable to read RDB block 0 [ 262.411815][ T9117] loop5: unable to read partition table [ 262.516354][ T9117] loop5: partition table beyond EOD, truncated [ 262.524224][ T9117] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 262.909751][ T9140] input: syz1 as /devices/virtual/input/input50 [ 262.951882][ T9140] blkio.reset_stats is deprecated [ 262.963524][ T9140] binder: 9137:9140 ioctl c0306201 0 returned -14 [ 264.383324][ T9145] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0) [ 264.417857][ T9145] fuse: Unknown parameter 'f0x0000000000000009' [ 264.425676][ T9149] binder: 9147:9149 ioctl c018620c 0 returned -14 [ 264.716769][ T9140] syz.3.823 (9140): drop_caches: 2 [ 264.907126][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 264.907142][ T30] audit: type=1800 audit(1764489942.632:195): pid=9152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.827" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 264.975922][ T9154] netlink: 48 bytes leftover after parsing attributes in process `syz.4.826'. [ 264.990100][ T43] usb 2-1: USB disconnect, device number 57 [ 266.444832][ T5889] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 267.152103][ T5889] usb 1-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 267.181987][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.221268][ T5889] usb 1-1: config 0 descriptor?? [ 267.508882][ T9196] netlink: 4 bytes leftover after parsing attributes in process `syz.4.832'. [ 267.517844][ T9] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 267.646522][ T5889] hid_parser_main: 73 callbacks suppressed [ 267.646537][ T5889] gembird 0003:11FF:3331.0009: unknown main item tag 0x0 [ 267.668485][ T9204] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.834'. [ 267.695824][ T9196] block device autoloading is deprecated and will be removed. [ 267.715286][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 267.728095][ T9] usb 4-1: config 3 has an invalid interface number: 171 but max is 29 [ 267.736809][ T9] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 267.749830][ T9205] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 267.776290][ T9204] netlink: 24 bytes leftover after parsing attributes in process `syz.1.834'. [ 267.806028][ T5889] gembird 0003:11FF:3331.0009: item fetching failed at offset 3/5 [ 267.817711][ T9] usb 4-1: config 3 has 1 interface, different from the descriptor's value: 30 [ 267.828003][ T5889] gembird 0003:11FF:3331.0009: probe with driver gembird failed with error -22 [ 267.837372][ T9] usb 4-1: config 3 has no interface number 0 [ 267.860901][ T9] usb 4-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice= c.e5 [ 267.875346][ T9] usb 4-1: New USB device strings: Mfr=1, Product=10, SerialNumber=3 [ 267.888036][ T9] usb 4-1: Product: syz [ 267.916586][ T9] usb 4-1: Manufacturer: syz [ 267.932910][ T9] usb 4-1: SerialNumber: syz [ 268.226513][ T9] as10x_usb: device has been detected [ 268.239178][ T9] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 268.280391][ T9] usb 4-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 268.351562][ T9] as10x_usb: error during firmware upload part1 [ 268.376763][ T9] Registered device Sky IT Digital Key (green led) [ 268.436259][ T9] usb 4-1: USB disconnect, device number 43 [ 268.621427][ T5831] udevd[5831]: setting mode of /dev/dvb/adapter1/frontend0 to 020660 failed: No such file or directory [ 268.631741][ T9] Unregistered device Sky IT Digital Key (green led) [ 268.676106][ T9] as10x_usb: device has been disconnected [ 268.700462][ T5831] udevd[5831]: setting owner of /dev/dvb/adapter1/frontend0 to uid=0, gid=28 failed: No such file or directory [ 268.774887][ T43] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 268.929969][ T5838] usb 1-1: USB disconnect, device number 38 [ 268.958366][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 268.967203][ T43] usb 5-1: config 127 has an invalid interface number: 171 but max is 1 [ 268.982435][ T43] usb 5-1: config 127 has no interface number 1 [ 269.002744][ T43] usb 5-1: config 127 interface 171 has no altsetting 0 [ 269.045332][ T43] usb 5-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 269.061900][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.075154][ T9220] kvm: pic: single mode not supported [ 269.075243][ T9220] kvm: pic: level sensitive irq not supported [ 269.104590][ T43] usb 5-1: Product: syz [ 269.155894][ T43] usb 5-1: Manufacturer: syz [ 269.160747][ T43] usb 5-1: SerialNumber: syz [ 269.558264][ T5838] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 270.172703][ T5838] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 270.342417][ T5838] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.444531][ T5838] usb 4-1: config 0 has no interface number 0 [ 270.476071][ T5838] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 270.498760][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.527875][ T5838] usb 4-1: Product: syz [ 270.542142][ T5838] usb 4-1: Manufacturer: syz [ 270.566058][ T5838] usb 4-1: SerialNumber: syz [ 270.743321][ T5838] usb 4-1: config 0 descriptor?? [ 271.012413][ T5838] uvcvideo 4-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 271.035052][ T5838] uvcvideo 4-1:0.64: No valid video chain found. [ 271.217030][ T5838] usb 4-1: USB disconnect, device number 44 [ 271.334688][ T9245] netlink: 52 bytes leftover after parsing attributes in process `syz.0.845'. [ 271.394450][ T9245] netlink: 76 bytes leftover after parsing attributes in process `syz.0.845'. [ 271.445058][ T9245] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.452272][ T9245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.459868][ T9245] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.467013][ T9245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.606524][ T9245] netlink: 52 bytes leftover after parsing attributes in process `syz.0.845'. [ 271.606537][ T9247] ip6gretap0: entered promiscuous mode [ 271.646790][ T43] xr_serial 5-1:127.171: xr_serial converter detected [ 271.678921][ T43] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 271.693878][ T9245] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.701084][ T9245] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.721602][ T43] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 271.763197][ T9253] netlink: 12 bytes leftover after parsing attributes in process `syz.4.848'. [ 271.794324][ T43] usb 5-1: USB disconnect, device number 34 [ 271.830062][ T9257] netlink: 4 bytes leftover after parsing attributes in process `syz.1.846'. [ 271.845017][ T43] xr_serial 5-1:127.171: device disconnected [ 272.057083][ T9262] loop9: detected capacity change from 0 to 7 [ 272.076421][ T9262] Dev loop9: unable to read RDB block 7 [ 272.117688][ T9262] loop9: AHDI p4 [ 272.134417][ T9262] loop9: partition table partially beyond EOD, truncated [ 272.349489][ T9] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 272.510805][ T9] usb 1-1: device descriptor read/64, error -71 [ 272.709374][ T9285] netlink: 'syz.3.854': attribute type 27 has an invalid length. [ 272.731056][ T9285] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 272.739680][ T9285] ipip0: left promiscuous mode [ 272.744524][ T9285] ipip0: left allmulticast mode [ 272.750409][ T9285] ip6gretap1: left promiscuous mode [ 272.755729][ T9285] ip6gretap1: left allmulticast mode [ 272.761260][ T9285] vlan2: left promiscuous mode [ 272.766128][ T9285] bond0: left promiscuous mode [ 272.770927][ T9285] bond_slave_0: left promiscuous mode [ 272.776858][ T9285] bond_slave_1: left promiscuous mode [ 272.795832][ T9] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 272.929307][ T9285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.945284][ T9] usb 1-1: device descriptor read/64, error -71 [ 272.951869][ T5829] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 272.962506][ T9285] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.012146][ T9285] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 273.065586][ T9] usb usb1-port1: attempt power cycle [ 273.125829][ T5829] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 273.136381][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.155438][ T5829] usb 2-1: Product: syz [ 273.175110][ T5889] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 273.194792][ T5829] usb 2-1: Manufacturer: syz [ 273.210497][ T5829] usb 2-1: SerialNumber: syz [ 273.244912][ T10] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 273.334851][ T5889] usb 4-1: Using ep0 maxpacket: 16 [ 273.342539][ T5889] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 273.405054][ T9] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 273.426892][ T5889] usb 4-1: config 0 has no interface number 0 [ 273.436565][ T9] usb 1-1: device descriptor read/8, error -71 [ 273.444837][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 273.502053][ T9284] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0 [ 273.515008][ T9284] PKCS7: Only support pkcs7_signedData type [ 273.537220][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 273.552545][ T5889] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 273.584895][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.593004][ T10] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 273.636619][ T5889] usb 4-1: Product: syz [ 273.640880][ T5889] usb 4-1: Manufacturer: syz [ 273.646862][ T10] usb 5-1: Product: syz [ 273.651075][ T10] usb 5-1: Manufacturer: syz [ 273.665575][ T5889] usb 4-1: SerialNumber: syz [ 273.672292][ T10] usb 5-1: SerialNumber: syz [ 273.685409][ T5889] usb 4-1: config 0 descriptor?? [ 273.694128][ T10] usb 5-1: config 0 descriptor?? [ 273.710640][ T5889] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 273.724807][ T5902] usb 3-1: new low-speed USB device number 31 using dummy_hcd [ 273.725587][ T10] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 273.739173][ T9] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 273.747386][ T5829] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 273.760292][ T5829] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 273.785869][ T9] usb 1-1: device descriptor read/8, error -71 [ 273.878422][ T5902] usb 3-1: No LPM exit latency info found, disabling LPM. [ 273.889409][ T5902] usb 3-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 273.895283][ T9] usb usb1-port1: unable to enumerate USB device [ 273.922121][ T5902] usb 3-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 273.979312][ T5902] usb 3-1: config 1 interface 0 has no altsetting 0 [ 274.009557][ T5902] usb 3-1: New USB device found, idVendor=1b96, idProduct=0014, bcdDevice= 0.40 [ 274.021470][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.047141][ T5902] usb 3-1: Product: Ѝ [ 274.061938][ T5902] usb 3-1: Manufacturer: 鐞￟鴠뢈疣䟁ꡗ국ᆊ둑琧⑧ʐ්딆袮ꀅꟑ㚱䠓薨钥;䴮⪔䆼塕ꆿ檼剪䓏Ꚍ汸怱ꎋ彙驖㋮엸큪቞서鉅뜢ۓତ뗳߸謸竨旌⨖㑯偅엝㙾㭈耖緷圩漺⅀필誸铡ꄢ鿘鐐䩇唞ꔬ泖ꮋ뙧ぁ㙲㺚劤ェ揆燇陛䐆澬摤瀁‐᦯蹡閉䤷١컙鼬⦯ꏊ抓䦬⽣䛤펙ෲឭ耭 [ 274.189072][ T5902] usb 3-1: SerialNumber: 㰊 [ 274.211759][ T9290] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 274.222779][ T9290] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 274.266393][ T5889] gspca_spca1528: reg_w err -110 [ 274.285034][ T5889] spca1528 4-1:0.1: probe with driver spca1528 failed with error -110 [ 274.399934][ T10] input: gspca_zc3xx as /devices/platform/dummy_hcd.4/usb5/5-1/input/input51 [ 274.608080][ T10] usb 5-1: USB disconnect, device number 35 [ 274.844400][ T5902] usbhid 3-1:1.0: can't add hid device: -71 [ 274.850638][ T5902] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 274.865304][ T5902] usb 3-1: USB disconnect, device number 31 [ 275.106800][ T9294] program syz.0.858 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 275.178999][ T5829] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPIPE [ 275.354076][ T9298] vlan2: entered promiscuous mode [ 275.365993][ T9298] erspan0: entered promiscuous mode [ 275.442910][ T5829] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -EPROTO [ 275.469829][ T9303] loop9: detected capacity change from 0 to 7 [ 275.487140][ T9303] Dev loop9: unable to read RDB block 7 [ 275.502151][ T9303] loop9: unable to read partition table [ 275.523686][ T9303] loop9: partition table beyond EOD, truncated [ 275.540376][ T5829] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 275.584940][ T9303] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 275.595954][ T5829] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 275.703167][ T5829] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 275.744397][ T30] audit: type=1326 audit(1764489953.462:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9306 comm="syz.4.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308298f749 code=0x7ffc0000 [ 275.769099][ T5829] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 275.786796][ T9307] netlink: 16 bytes leftover after parsing attributes in process `syz.4.863'. [ 275.806026][ T30] audit: type=1326 audit(1764489953.462:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9306 comm="syz.4.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308298f749 code=0x7ffc0000 [ 275.849456][ T30] audit: type=1326 audit(1764489953.462:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9306 comm="syz.4.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f308298f749 code=0x7ffc0000 [ 275.858030][ T5829] usb 2-1: USB disconnect, device number 58 [ 275.876291][ T30] audit: type=1326 audit(1764489953.462:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9306 comm="syz.4.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308298f749 code=0x7ffc0000 [ 275.903260][ T30] audit: type=1326 audit(1764489953.462:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9306 comm="syz.4.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308298f749 code=0x7ffc0000 [ 275.926778][ T30] audit: type=1326 audit(1764489953.482:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9306 comm="syz.4.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f308298f749 code=0x7ffc0000 [ 275.950201][ T30] audit: type=1326 audit(1764489953.502:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9306 comm="syz.4.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308298f749 code=0x7ffc0000 [ 275.973104][ T30] audit: type=1326 audit(1764489953.512:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9306 comm="syz.4.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f308298f749 code=0x7ffc0000 [ 276.079304][ T30] audit: type=1326 audit(1764489953.512:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9306 comm="syz.4.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308298f749 code=0x7ffc0000 [ 276.095528][ T9307] bond1: option resend_igmp: invalid value (741343743) [ 276.377565][ T30] audit: type=1326 audit(1764489953.512:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9306 comm="syz.4.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f308298f749 code=0x7ffc0000 [ 276.483334][ T9307] bond1: option resend_igmp: allowed values 0 - 255 [ 276.487493][ T10] usb 4-1: USB disconnect, device number 45 [ 276.509259][ T9307] bond1 (unregistering): Released all slaves [ 276.688891][ T9316] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.866'. [ 276.964864][ T5829] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 276.974951][ T10] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 277.064889][ T5889] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 277.116716][ T5829] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 277.125744][ T5829] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 277.137910][ T5829] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.149155][ T5829] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 277.162206][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.172387][ T5829] usb 1-1: config 1 interface 1 has no altsetting 0 [ 277.179102][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 277.188672][ T10] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 277.199243][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.204973][ T43] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 277.211040][ T10] usb 4-1: config 0 descriptor?? [ 277.221564][ T5829] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 277.230909][ T5889] usb 3-1: Using ep0 maxpacket: 32 [ 277.238624][ T5829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.246934][ T5829] usb 1-1: Product: syz [ 277.251473][ T5829] usb 1-1: Manufacturer: syz [ 277.256219][ T5829] usb 1-1: SerialNumber: syz [ 277.270590][ T9327] vlan2: entered promiscuous mode [ 277.272675][ T5829] cdc_ncm 1-1:1.0: skipping garbage [ 277.278377][ T9327] bridge0: entered promiscuous mode [ 277.281008][ T5829] cdc_ncm 1-1:1.0: NCM or ECM functional descriptors missing [ 277.293842][ T5829] cdc_ncm 1-1:1.0: bind() failure [ 277.361141][ T5889] usb 3-1: unable to get BOS descriptor or descriptor too short [ 277.370483][ T5889] usb 3-1: no configurations [ 277.374800][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 277.375488][ T5889] usb 3-1: can't read configurations, error -22 [ 277.385099][ T43] usb 2-1: unable to get BOS descriptor or descriptor too short [ 277.397684][ T43] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 277.406965][ T43] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 277.418704][ T43] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 277.427911][ T43] usb 2-1: config 128 has no interface number 0 [ 277.434216][ T43] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 277.446005][ T43] usb 2-1: config 128 interface 127 has no altsetting 0 [ 277.447913][ T10] Bluetooth: Can't get state to change to load ram patch err [ 277.464559][ T10] Bluetooth: Loading patch file failed [ 277.469609][ T43] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 277.470843][ T10] ath3k 4-1:0.0: probe with driver ath3k failed with error -71 [ 277.494443][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.495695][ T10] usb 4-1: USB disconnect, device number 46 [ 277.503432][ T9323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.870'. [ 277.520653][ T43] usb 2-1: Product: syz [ 277.525256][ T43] usb 2-1: Manufacturer: syz [ 277.530667][ T43] usb 2-1: SerialNumber: syz [ 277.538961][ T9333] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 277.543743][ T5829] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 277.563451][ T5829] usb 1-1: USB disconnect, device number 43 [ 277.757300][ T43] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 277.785488][ T43] usb 2-1: USB disconnect, device number 59 [ 277.831345][ T5997] udevd[5997]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 278.060897][ T5838] IPVS: starting estimator thread 0... [ 278.184573][ T9345] IPVS: using max 32 ests per chain, 76800 per kthread [ 278.694925][ T5889] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 278.851346][ T9367] netlink: 28 bytes leftover after parsing attributes in process `syz.2.886'. [ 278.922665][ T9367] vim2m vim2m.0: vidioc_s_fmt queue busy [ 278.965110][ T5889] usb 5-1: Using ep0 maxpacket: 32 [ 278.973720][ T5889] usb 5-1: config 8 has an invalid interface number: 134 but max is 0 [ 278.982181][ T5889] usb 5-1: config 8 has no interface number 0 [ 278.996905][ T5889] usb 5-1: config 8 interface 134 has no altsetting 0 [ 279.041393][ T5889] usb 5-1: New USB device found, idVendor=04a5, idProduct=3035, bcdDevice= 4.15 [ 279.061444][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 279.072857][ T5889] usb 5-1: Manufacturer: syz [ 279.109494][ T5889] usb 5-1: SerialNumber: syz [ 279.957264][ T9383] loop8: detected capacity change from 0 to 7 [ 279.966555][ T9383] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 279.980673][ T9383] loop8: partition table partially beyond EOD, truncated [ 279.999358][ T9383] loop8: p1 size 3651402975 extends beyond EOD, truncated [ 280.034639][ T9383] loop8: p2 start 956478 is beyond EOD, truncated [ 280.424805][ T10] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 280.608608][ T9389] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 280.619428][ T10] usb 1-1: config 0 has an invalid interface number: 172 but max is 0 [ 280.630438][ T10] usb 1-1: config 0 has no interface number 0 [ 280.637966][ T9389] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 280.650383][ T10] usb 1-1: New USB device found, idVendor=2304, idProduct=020f, bcdDevice=3b.de [ 280.670258][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.697924][ T10] usb 1-1: Product: syz [ 280.717458][ T10] usb 1-1: Manufacturer: syz [ 280.729459][ T10] usb 1-1: SerialNumber: syz [ 280.748787][ T10] usb 1-1: config 0 descriptor?? [ 280.768387][ T10] dvb-usb: found a 'Pinnacle 400e DVB-S USB2.0' in warm state. [ 280.789526][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 280.803987][ T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 280.956957][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 280.981494][ T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 281.029568][ T10] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 281.129441][ T10] dvb-usb: Pinnacle 400e DVB-S USB2.0 error while loading driver (-19) [ 281.158627][ T10] usb 1-1: USB disconnect, device number 44 [ 281.453185][ T5889] gspca_main: benq-2.14.0 probing 04a5:3035 [ 281.566415][ T5889] usb 5-1: USB disconnect, device number 36 [ 281.756274][ T30] audit: type=1800 audit(1764489959.482:206): pid=9404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.894" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 282.024918][ T5889] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 282.219778][ T5889] usb 5-1: config index 0 descriptor too short (expected 2084, got 36) [ 282.254998][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.279285][ T9412] netlink: 40 bytes leftover after parsing attributes in process `syz.3.897'. [ 282.284769][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.288817][ T9412] netlink: 32 bytes leftover after parsing attributes in process `syz.3.897'. [ 282.312248][ T5889] usb 5-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 282.347566][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.404131][ T5889] usb 5-1: config 0 descriptor?? [ 282.543179][ T9428] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 282.699766][ T30] audit: type=1326 audit(1764489960.402:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9401 comm="syz.4.895" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f308298f749 code=0x0 [ 282.733364][ T5889] dragonrise 0003:0079:0006.000A: unknown main item tag 0x0 [ 282.752178][ T5889] dragonrise 0003:0079:0006.000A: unknown main item tag 0x0 [ 282.829003][ T5889] dragonrise 0003:0079:0006.000A: hidraw0: USB HID v0.00 Device [HID 0079:0006] on usb-dummy_hcd.4-1/input0 [ 282.919014][ T5889] dragonrise 0003:0079:0006.000A: no inputs found [ 282.952520][ T5889] dragonrise 0003:0079:0006.000A: force feedback init failed [ 283.011312][ T9440] netlink: 52 bytes leftover after parsing attributes in process `syz.1.905'. [ 283.028719][ T5889] usb 5-1: USB disconnect, device number 37 [ 283.046279][ T9440] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.053881][ T9440] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.204267][ T9437] fido_id[9437]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 283.344591][ T9440] netlink: 76 bytes leftover after parsing attributes in process `syz.1.905'. [ 283.381895][ T9440] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.389150][ T9440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.396727][ T9440] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.403912][ T9440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.462491][ T9440] netlink: 52 bytes leftover after parsing attributes in process `syz.1.905'. [ 283.494769][ T9449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.908'. [ 283.505174][ T9440] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.512426][ T9440] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.716536][ T9454] FAULT_INJECTION: forcing a failure. [ 283.716536][ T9454] name failslab, interval 1, probability 0, space 0, times 0 [ 283.729562][ T9454] CPU: 0 UID: 0 PID: 9454 Comm: syz.1.909 Not tainted syzkaller #0 PREEMPT(full) [ 283.729586][ T9454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 283.729607][ T9454] Call Trace: [ 283.729614][ T9454] [ 283.729623][ T9454] dump_stack_lvl+0x189/0x250 [ 283.729650][ T9454] ? __pfx____ratelimit+0x10/0x10 [ 283.729674][ T9454] ? __pfx_dump_stack_lvl+0x10/0x10 [ 283.729696][ T9454] ? __pfx__printk+0x10/0x10 [ 283.729720][ T9454] ? __pfx___might_resched+0x10/0x10 [ 283.729738][ T9454] ? fs_reclaim_acquire+0x7d/0x100 [ 283.729759][ T9454] should_fail_ex+0x414/0x560 [ 283.729789][ T9454] should_failslab+0xa8/0x100 [ 283.729810][ T9454] kmem_cache_alloc_node_noprof+0x77/0x710 [ 283.729833][ T9454] ? __alloc_skb+0x112/0x2d0 [ 283.729850][ T9454] ? netlink_autobind+0xdb/0x300 [ 283.729874][ T9454] __alloc_skb+0x112/0x2d0 [ 283.729895][ T9454] netlink_sendmsg+0x5c6/0xb30 [ 283.729923][ T9454] ? __pfx_netlink_sendmsg+0x10/0x10 [ 283.729945][ T9454] ? aa_sock_msg_perm+0xf1/0x1d0 [ 283.729971][ T9454] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 283.729989][ T9454] ? __pfx_netlink_sendmsg+0x10/0x10 [ 283.730008][ T9454] __sock_sendmsg+0x21c/0x270 [ 283.730035][ T9454] ____sys_sendmsg+0x505/0x830 [ 283.730060][ T9454] ? __pfx_____sys_sendmsg+0x10/0x10 [ 283.730087][ T9454] ? import_iovec+0x74/0xa0 [ 283.730119][ T9454] ___sys_sendmsg+0x21f/0x2a0 [ 283.730141][ T9454] ? __pfx____sys_sendmsg+0x10/0x10 [ 283.730196][ T9454] ? __fget_files+0x2a/0x420 [ 283.730212][ T9454] ? __fget_files+0x3a0/0x420 [ 283.730239][ T9454] __x64_sys_sendmsg+0x19b/0x260 [ 283.730261][ T9454] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 283.730290][ T9454] ? __pfx_ksys_write+0x10/0x10 [ 283.730317][ T9454] ? do_syscall_64+0xbe/0xfa0 [ 283.730348][ T9454] do_syscall_64+0xfa/0xfa0 [ 283.730369][ T9454] ? lockdep_hardirqs_on+0x9c/0x150 [ 283.730391][ T9454] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.730407][ T9454] ? clear_bhb_loop+0x60/0xb0 [ 283.730429][ T9454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.730446][ T9454] RIP: 0033:0x7fead058f749 [ 283.730462][ T9454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.730481][ T9454] RSP: 002b:00007fead1438038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 283.730501][ T9454] RAX: ffffffffffffffda RBX: 00007fead07e5fa0 RCX: 00007fead058f749 [ 283.730514][ T9454] RDX: 0000000004000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 283.730526][ T9454] RBP: 00007fead1438090 R08: 0000000000000000 R09: 0000000000000000 [ 283.730538][ T9454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.730548][ T9454] R13: 00007fead07e6038 R14: 00007fead07e5fa0 R15: 00007fead090fa28 [ 283.730578][ T9454] [ 284.003466][ C0] vkms_vblank_simulate: vblank timer overrun [ 284.252627][ T9458] loop9: detected capacity change from 0 to 7 [ 284.262937][ T9458] Dev loop9: unable to read RDB block 7 [ 284.285739][ T9458] loop9: unable to read partition table [ 284.306468][ T9458] loop9: partition table beyond EOD, truncated [ 284.362812][ T9458] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 284.772792][ T9484] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 285.014315][ T9494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.921'. [ 285.203633][ T9499] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 286.295808][ T9514] netlink: 68 bytes leftover after parsing attributes in process `syz.4.928'. [ 286.828650][ T9521] loop9: detected capacity change from 0 to 7 [ 286.845698][ T7119] Dev loop9: unable to read RDB block 7 [ 286.862312][ T7119] loop9: unable to read partition table [ 286.862468][ T7119] loop9: partition table beyond EOD, truncated [ 286.867922][ T9521] Dev loop9: unable to read RDB block 7 [ 286.867952][ T9521] loop9: unable to read partition table [ 286.868115][ T9521] loop9: partition table beyond EOD, truncated [ 286.868127][ T9521] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 287.265299][ T9534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.933'. [ 287.265371][ T9534] bridge_slave_1: left allmulticast mode [ 287.265390][ T9534] bridge_slave_1: left promiscuous mode [ 287.269847][ T9534] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.309918][ T9534] bridge_slave_0: left allmulticast mode [ 287.312180][ T9534] bridge_slave_0: left promiscuous mode [ 287.312408][ T9534] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.335434][ C1] ------------[ cut here ]------------ [ 287.335458][ C1] ODEBUG: free active (active state 0) object: ffff888028ed9278 object type: timer_list hint: br_ip6_multicast_port_query_expired+0x0/0x20 [ 287.336082][ C1] WARNING: CPU: 1 PID: 23 at lib/debugobjects.c:615 debug_print_object+0x16b/0x1e0 [ 287.336121][ C1] Modules linked in: [ 287.336151][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 287.336175][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 287.336188][ C1] RIP: 0010:debug_print_object+0x16b/0x1e0 [ 287.336218][ C1] Code: 4c 89 ff e8 b7 ca 92 fd 4d 8b 0f 48 c7 c7 00 13 bf 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 ba 22 f0 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 97 2a ea 0a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 287.336237][ C1] RSP: 0018:ffffc900001d7728 EFLAGS: 00010286 [ 287.336257][ C1] RAX: 09eb5d63fb660d00 RBX: dffffc0000000000 RCX: ffff88801ce85ac0 [ 287.336274][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 287.336289][ C1] RBP: 0000000000000000 R08: ffff8880b8924293 R09: 1ffff11017124852 [ 287.336303][ C1] R10: dffffc0000000000 R11: ffffed1017124853 R12: ffffffff8a2072f0 [ 287.336319][ C1] R13: ffffffff8bbf1480 R14: ffff888028ed9278 R15: ffffffff8b6cf7e0 [ 287.336337][ C1] FS: 0000000000000000(0000) GS:ffff888126238000(0000) knlGS:0000000000000000 [ 287.336355][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.336370][ C1] CR2: 00007fead13c2f98 CR3: 0000000057006000 CR4: 00000000003526f0 [ 287.336389][ C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 287.336405][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 287.336420][ C1] Call Trace: [ 287.336429][ C1] [ 287.336444][ C1] debug_check_no_obj_freed+0x3a2/0x470 [ 287.336491][ C1] ? kobject_put+0x22b/0x480 [ 287.336512][ C1] kfree+0x115/0x6d0 [ 287.336545][ C1] kobject_put+0x22b/0x480 [ 287.336567][ C1] ? __pfx_destroy_nbp_rcu+0x10/0x10 [ 287.336593][ C1] ? rcu_core+0xc37/0x1770 [ 287.336617][ C1] rcu_core+0xcab/0x1770 [ 287.336636][ C1] ? __lock_acquire+0xab9/0xd20 [ 287.336676][ C1] ? __pfx_rcu_core+0x10/0x10 [ 287.336701][ C1] ? rcu_qs+0xc4/0x170 [ 287.336722][ C1] ? __pfx_rcu_qs+0x10/0x10 [ 287.336741][ C1] ? sched_clock_cpu+0x74/0x430 [ 287.336773][ C1] ? rcu_softirq_qs+0xf2/0x350 [ 287.336796][ C1] ? __pfx_rcu_softirq_qs+0x10/0x10 [ 287.336828][ C1] handle_softirqs+0x286/0x870 [ 287.336856][ C1] ? run_ksoftirqd+0x9b/0x100 [ 287.336887][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 287.336914][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 287.336941][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 287.336964][ C1] run_ksoftirqd+0x9b/0x100 [ 287.336996][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 287.337030][ C1] smpboot_thread_fn+0x542/0xa60 [ 287.337055][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 287.337087][ C1] kthread+0x711/0x8a0 [ 287.337119][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 287.337143][ C1] ? __pfx_kthread+0x10/0x10 [ 287.337172][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 287.337200][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 287.337228][ C1] ? __pfx_kthread+0x10/0x10 [ 287.337257][ C1] ret_from_fork+0x4bc/0x870 [ 287.337283][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 287.337313][ C1] ? __switch_to_asm+0x39/0x70 [ 287.337331][ C1] ? __switch_to_asm+0x33/0x70 [ 287.337348][ C1] ? __pfx_kthread+0x10/0x10 [ 287.337376][ C1] ret_from_fork_asm+0x1a/0x30 [ 287.337413][ C1] [ 287.337425][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 287.337439][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 287.337461][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 287.337474][ C1] Call Trace: [ 287.337482][ C1] [ 287.337491][ C1] dump_stack_lvl+0x99/0x250 [ 287.337518][ C1] ? __asan_memcpy+0x40/0x70 [ 287.337546][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.337594][ C1] ? __pfx__printk+0x10/0x10 [ 287.337629][ C1] vpanic+0x237/0x6d0 [ 287.337655][ C1] ? __pfx_vpanic+0x10/0x10 [ 287.337692][ C1] panic+0xb9/0xc0 [ 287.337719][ C1] ? __pfx_panic+0x10/0x10 [ 287.337753][ C1] __warn+0x31b/0x4b0 [ 287.337773][ C1] ? debug_print_object+0x16b/0x1e0 [ 287.337804][ C1] ? debug_print_object+0x16b/0x1e0 [ 287.337832][ C1] report_bug+0x2be/0x4f0 [ 287.337859][ C1] ? debug_print_object+0x16b/0x1e0 [ 287.337887][ C1] ? debug_print_object+0x16b/0x1e0 [ 287.337914][ C1] ? debug_print_object+0x16d/0x1e0 [ 287.337941][ C1] handle_bug+0x84/0x160 [ 287.337964][ C1] exc_invalid_op+0x1a/0x50 [ 287.337991][ C1] asm_exc_invalid_op+0x1a/0x20 [ 287.338011][ C1] RIP: 0010:debug_print_object+0x16b/0x1e0 [ 287.338037][ C1] Code: 4c 89 ff e8 b7 ca 92 fd 4d 8b 0f 48 c7 c7 00 13 bf 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 ba 22 f0 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 97 2a ea 0a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 287.338053][ C1] RSP: 0018:ffffc900001d7728 EFLAGS: 00010286 [ 287.338070][ C1] RAX: 09eb5d63fb660d00 RBX: dffffc0000000000 RCX: ffff88801ce85ac0 [ 287.338086][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 287.338102][ C1] RBP: 0000000000000000 R08: ffff8880b8924293 R09: 1ffff11017124852 [ 287.338117][ C1] R10: dffffc0000000000 R11: ffffed1017124853 R12: ffffffff8a2072f0 [ 287.338132][ C1] R13: ffffffff8bbf1480 R14: ffff888028ed9278 R15: ffffffff8b6cf7e0 [ 287.338150][ C1] ? __pfx_br_ip6_multicast_port_query_expired+0x10/0x10 [ 287.338184][ C1] ? __pfx_br_ip6_multicast_port_query_expired+0x10/0x10 [ 287.338207][ C1] debug_check_no_obj_freed+0x3a2/0x470 [ 287.338242][ C1] ? kobject_put+0x22b/0x480 [ 287.338258][ C1] kfree+0x115/0x6d0 [ 287.338282][ C1] kobject_put+0x22b/0x480 [ 287.338299][ C1] ? __pfx_destroy_nbp_rcu+0x10/0x10 [ 287.338320][ C1] ? rcu_core+0xc37/0x1770 [ 287.338338][ C1] rcu_core+0xcab/0x1770 [ 287.338353][ C1] ? __lock_acquire+0xab9/0xd20 [ 287.338383][ C1] ? __pfx_rcu_core+0x10/0x10 [ 287.338402][ C1] ? rcu_qs+0xc4/0x170 [ 287.338418][ C1] ? __pfx_rcu_qs+0x10/0x10 [ 287.338433][ C1] ? sched_clock_cpu+0x74/0x430 [ 287.338458][ C1] ? rcu_softirq_qs+0xf2/0x350 [ 287.338475][ C1] ? __pfx_rcu_softirq_qs+0x10/0x10 [ 287.338501][ C1] handle_softirqs+0x286/0x870 [ 287.338522][ C1] ? run_ksoftirqd+0x9b/0x100 [ 287.338545][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 287.338565][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 287.338585][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 287.338602][ C1] run_ksoftirqd+0x9b/0x100 [ 287.338622][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 287.338646][ C1] smpboot_thread_fn+0x542/0xa60 [ 287.338665][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 287.338690][ C1] kthread+0x711/0x8a0 [ 287.338713][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 287.338732][ C1] ? __pfx_kthread+0x10/0x10 [ 287.338754][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 287.338775][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 287.338796][ C1] ? __pfx_kthread+0x10/0x10 [ 287.338818][ C1] ret_from_fork+0x4bc/0x870 [ 287.338837][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 287.338859][ C1] ? __switch_to_asm+0x39/0x70 [ 287.338872][ C1] ? __switch_to_asm+0x33/0x70 [ 287.338885][ C1] ? __pfx_kthread+0x10/0x10 [ 287.338907][ C1] ret_from_fork_asm+0x1a/0x30 [ 287.338934][ C1] [ 287.339300][ C1] Kernel Offset: disabled