last executing test programs: 30m56.672926508s ago: executing program 3 (id=5096): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0xfcffffff, 0x0, 0x68, 0xf98, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x80000, 0x0, 0xf0, 0x1, 0x11}, @ptr={0x66642a85, 0x5, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0x68, 0x18, 0x40}}, 0x2000}], 0x0, 0x0, 0x0}) 30m56.278798772s ago: executing program 3 (id=5097): openat(0xffffffffffffff9c, 0x0, 0x28042, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000240)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@ack={0x1e, 0xc, 0x1f, 0x4, "753212e605dc9e58"}]}}}}}}}}, 0x0) 30m56.115290277s ago: executing program 3 (id=5098): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880), 0x0, 0x4000000) syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8101, 0x0, 0x9, 0x0, 0x4, 0x24, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$getownex(r0, 0x10, 0x0) ptrace$cont(0x1f, 0x0, 0x100, 0x4) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000003000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff00000000800000000035000002"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 30m54.185729477s ago: executing program 3 (id=5105): socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={r5, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="70000000100001002abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="ad21000000000000140003006e657464657673696d30000000000000080004000e04000034001680300001802c000c80140001"], 0x70}, 0x1, 0x0, 0x0, 0x4048000}, 0x800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e24, 0x5, @empty, 0x2800}}, 0x3, 0x0, 0x20000, 0x81, 0x8c, 0xfffffffc, 0x4}, 0x9c) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) r9 = syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4bb, 0x0, 0xfffffffd}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0x10000, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r9, 0x3517, 0xc2de, 0x9, 0x0, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r12, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) 30m52.507352348s ago: executing program 3 (id=5112): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$printer(0x1, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$packet(r3, &(0x7f00000002c0)="48357e0287af48ffa745b497a54e0eec1bf2c69011f35b48339d15afaef1bd7efe075ff441b16e244b8b05fe09e29583ad142567826dfa5cbc6f979b050015bde8c4441cd0fa6be03213181bfe84743015ec12ced8b1aa8f44e5c30afac6f9fd2ab1303be0d1b2c02533bcc97cce7da9b507b053b11821323590d379e9e350a3291fbedb6382de878b7a56e4e38c7f746d0424029f5d49b04697a4", 0xfffffffffffffe20, 0x500000000000000, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) accept$packet(r4, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x48801}, 0x0) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000003c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000010c240000e9fffff5ffffffff092403f3ff00", @ANYRES8=r9, @ANYBLOB="05", @ANYRES16=r9], 0x0) ioctl$RTC_AIE_OFF(r9, 0x7002) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000005e0001002abd"], 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x0) recvmsg(r4, &(0x7f0000000380)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000500)=""/230, 0xe6}, 0x40010122) 30m48.728920851s ago: executing program 3 (id=5128): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) sendmsg$NL80211_CMD_GET_KEY(r1, 0x0, 0xc045) (async) madvise(&(0x7f0000529000/0x2000)=nil, 0x2000, 0x16) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x20100) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000080)={0x0, 0x5}) r3 = syz_open_dev$ndb(&(0x7f0000000640), 0x0, 0xa001) (async) r4 = gettid() ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000100)={'\x00', 0x0, 0x200081, 0x405, 0x80000000, 0x2, r4}) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, &(0x7f0000000000)=0x6) 30m33.22340578s ago: executing program 32 (id=5128): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) sendmsg$NL80211_CMD_GET_KEY(r1, 0x0, 0xc045) (async) madvise(&(0x7f0000529000/0x2000)=nil, 0x2000, 0x16) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x20100) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000080)={0x0, 0x5}) r3 = syz_open_dev$ndb(&(0x7f0000000640), 0x0, 0xa001) (async) r4 = gettid() ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000100)={'\x00', 0x0, 0x200081, 0x405, 0x80000000, 0x2, r4}) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, &(0x7f0000000000)=0x6) 13.325185697s ago: executing program 4 (id=11156): socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000000d2100000008000300", @ANYRES32=r2, @ANYBLOB="10007d8005", @ANYRES8=0x0, @ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 11.50009815s ago: executing program 4 (id=11163): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe4, 0xc5, 0xad, 0x10, 0x61d, 0xc020, 0x9c15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x10, 0x2d, 0xb0}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r2 = inotify_init() fcntl$setstatus(r1, 0x4, 0x6400) inotify_add_watch(r2, &(0x7f00000000c0)='./file0\x00', 0xe400000e) vmsplice(r1, &(0x7f0000000380)=[{&(0x7f0000000000)="9b", 0x1}], 0x1, 0x7) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0xc, 0xfa00, {{0xa, 0xfffb, 0x82, @private2, 0x6}, {0xa, 0x4e24, 0x4, @mcast1}, r4, 0x8}}, 0x48) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r4}}, 0x18) syz_usb_ep_write(r0, 0x3, 0xf0, &(0x7f0000000340)="ba0a24bf8ecf499705267096625c8c4f4f7ad98bcb8b0173b605c592720bf1d4da27b69b66a7596970b5a2ffed1dab823190ae48a6ef84b34128e7ce0e67227529987a41c25221c4274d5875e87122f812cfe02344deb2d8ab81e294e1c5fb92b43cb8fc6f980398812d17fc75f9fc4a0d973e5b56ff8b684f19f7304b0c97d587ae93c446d96be31595cfdc56332e25ea11c72fee4f576c79b1b24bdbe7175ed588ac539fec29e0c2f49dfa837b1e6c94f48ab13e03f4e9818f4636624e95ceef3126412fefcc469db2d163eba5fd3946f42d0e386fa7d1135cd8d0f0ba20d49b3543cb4168d08649046e40a7f12f63") syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000f80)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="20300500000001979e511d646ba728546cffc505dd6c2ed320f5419f8c582ed41d3882d586dc5f9269e25e4ee93a96c1da433b074843f6c695c2505292ce407bdc6522be95f6a3f634ba6cb95f42cd7823cb0c48f0df87816393855c8d26f5a9d725421484de2eeaac26b04fd9a521990300712cfdba10be0d8774e2322c053dd90bfec544e7e8545a5e4ed276d15d29835a2b53665ef5f4c01b706dea8a306114d609e9fddb16e1bd09f94519"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 9.840136854s ago: executing program 0 (id=11164): openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) epoll_create1(0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x10, 0xfff3}, {}, {0xa, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @mcast1}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x40040) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r8 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000600), 0x8080, 0x0) ioctl$TCSETSW(r8, 0x5403, &(0x7f00000027c0)={0xab6, 0x3, 0xffffffc0, 0x80, 0x1, "e625b7fcf9fe176d572f93d8e16b493ad3f282"}) add_key$keyring(&(0x7f0000000380), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x331002, 0x0) fspick(0xffffffffffffff9c, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x6f8100, 0x0) 8.726907111s ago: executing program 0 (id=11168): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r0, 0x0, 0x0) r1 = request_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)='}%\\\x00', 0xfffffffffffffffc) add_key(&(0x7f0000000100)='blacklist\x00', &(0x7f00000013c0)={'syz', 0x3}, &(0x7f0000001400)="777529ae624922369f6b9d062e79bd38e857d3652187ed1d8faafeb3fc8c991d70410bea461d5395d736a5fce244c5e0b252f3e97d736f6648360a4f3210fd4ca3886cd2e7249e88a2f425bc6e19ae82e0aa48d7260129fb4e0fcdf2058b9c6c481b4865518c8978c5d18d2d419f6d5f8949c41e9e063afc462ad1c052d078a7b73c211f25fb3f23b72f5c70e9df3a8b8867559dd728cfcf3f59651bd7830d9c1d8e4ff3d3daa0514272487e54b9ed15fc8081906bda68336b38e1c71395b5c999f4ab0b02", 0xc5, r1) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c01}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = add_key$user(&(0x7f0000003bc0), &(0x7f0000003c00)={'syz', 0x1}, &(0x7f0000003c40)="04c24550", 0x4, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, 0x0) keyctl$instantiate_iov(0x14, r1, &(0x7f0000001340)=[{&(0x7f0000000100)}, {&(0x7f0000000140)="3412c4224975b2819537fe3fc298f24cf340432e144f3480738b2295912634febcbd561b42509079bdf2f59826980575ca71b07308340eb2a87f781aa81115f82be9285e88147a49c2a4eb4af5dbb30e00490e837d830b26ba6b1e9bd587d3d459921f03a074364985ecb89726af0d32cbbc21cf8bbe33b5c85eabc32014b14ff9b77eca039762a565753d08a8435c3ea95296af460802c5fa371d29cf19d379523d314768b8656e3add0b0d0f617980e32ef08493d43b74491f0fa18000dd6ff77e9b98aaf082e98dfd5e7f0854e1d7265a89d1c3fad44af4a25dda18938962a2e6a4cffa37", 0xe6}, {&(0x7f0000000240)="0779dbdb7030f1e35b27715d2e554f884b29a4381cc5ba828a4b90f1490d320141d263653382a345eabf60ae0486f548f9aec19e04a2b3e88a334760ec42c896d4c0f51b18c8ba4aa664a7131b6a5bd19d15ccf3c939100dcec042a423cdfee954f64bcc4c176c3a27ef1b4c678a7723d73f1d52153076ae87fe346a67a72564f1b611d1bacd0d7ef53a9c83c17b223ba0683bc34f6f7d6f4f2fa9eed6473b9ee18a5e9e7181e298e056ab99c0255b8c9e8ef53f92abbeee0bd1aa8ba96619fa625a3e8069300d2038782029460249e3564d09cd397332871fe1f6d941487744e95165d593b5a204948f7e588368374d5c323dd7d6010d950847a348f92ef61d92a7c410bd05aae4207cb5030784c9f8fdec2a84dbc1590adb04cee81b5a18d76c605f60c85178f0ec5a52929b25a7c432893cc6a28af929a66cd6462c8cfea5129c7950dbb59f2e766678ef49c1f449eb00779e70ce714f3ad54409b3c81034ec981eac2e2885514c3d616e3ab353c2158cbb329e334c7fff493891fee81faf211601b6446224b7f2b513839ee81bb08686483805b98acbd5117dec143a381531388ed3c9c53aee20c238ddfd88f0bb16fc3270b469acccc03fdec0140ae80078e884d0f3a1ac07fc8f4e2d96d0218519fe2fc5543d89a0403c1894608f88369cee73b8db6c3eeea9ef6cb50cf711d5f0ac727a87e3af59835f9315ba29cdac8b65da813315ab5f2bb88eac4abf292d3abc77dde43757e81667e56d6976bfa7030bfc8cfd5ba588fa6098a3248fa338e60ee05f3d3849f68c8405421485b3a422b19290a779b054b37730d01a7680a002ecb50cd93e5785d24661afe7a6a7fcc2c6dce7ce62b2cd77ac33725f02515b5e90d13b72e8ab0f9cdc2faa7b6cb5949479f1efb44178373e5ff73d18f431195ee3b50558f74aaeeb3a15ffc6677ef0707ca16001c00430307d2598576f0cd62afd2c580dd9d208ae62675baafc7145b162c87f8820a4d4bbdc8b454a8c2dc040953b9a006a50340630f9b6d5bb34133c2bcfea9362bc7fdadcbfda0f82cb289ed7b1c32858db8d1e52de43fd4895f3604f4ae4fc6a7b8fb02ef9543b16b56c3b80a56d2df103b731d543381264ba8b87793ce00df157906036902c6fb35a16f50dd935ff30e3c569f139d9ec9bd48c894ce47415e03ddd860adc89aa4bd210d65f886992b50fb99c56c02afe10941348c7fd721184227802874a6834b19ea5e8ed4ab8a9286c8ed245954ecc78dabdbbbef09a8cead9976aee6ecbd02230e71ed1409379ae6b1ea414a524c9169943b6d73390bbf826c115632a5fc0bab169f1e71a122f72103e067586d86067a4f96f49aa5a81922a1e460fd0a10efebe87d16d9466b2d4a0a31df36d892e6a3b4fd7424b80fc242243e919b4989ef06bbb998463d5a31d2e919058c8d3144898fd612dab7b886246fb505630dbcbed03acef92c0fe4da9363bce8fef0d5e23172e55bf50980fd9f9ff467f03d90834ead389b73f901e979198cc78cbf0bbf7e9f60568c6b4a13d1e8cb4d6a745d1fd71c439fcc76c57c53ac03d192097b278f75e75b0e1bc7e3d153b712a020be9273ececfbfa4e1aa696c38dfe8f5b3dff358a2b0e57948144eb066ee6ae8b9dd70b0c1cc9c1d2ed2d5e1651b6f31835083c75398b162e70d2a031e95d4e5c09b4ab69b306be30dce137ef9077613110567b67430cdcfe974e14087eb39e7e5dbb1c2038a40841c432ca2c7fb76ba4c0ec3935300c35c49a82a0cde021530867d608499328c48a47847d30d7dff187bff1ce1dc373be56495a74e5e0eb6f02043211ec2fb8d85b9545b6bf55eb7b2dad73c33b50eb811481ff17df1185ad439998be357c3905951025f0dff304035d9953d4726fe58a1d2f2da176c758b52db73872088cdb72cef0d7dcb3ddf9219a48d67f1d21383e0c3d6d255eaef366d5bad68e433de1b1d0eae81f44611b562156fa3b2c6480ba0b2d302facc6f70146567390a4daf8a1a7878f7141a572744d455b1fd390db010330e0fb3676ff8f8dbce23939db3211af49d1de39f7456fee3d02f5dfe622ddef591f18b818151de47c3a30d9f617b867812e17012cd8087b45db56f7ec17adb10061cc40cb56a418a6f3fabb1244156d5f81349b0f3a839f99c17a33a70651c039d9e08e871a85ed835b186d2c4524e15d7a5e554d3948e5087e71a8d0ba5e8064c7f7ab2042f59c1d995c40422a31fc31dbf959be586e303a4d4dabb990f11557525a3f719e5d8d4ca01f9e1ab612e45f0206ba8c43e5f67230b8481b57932b55154791b940f6de5929113e064d3822e6d0c0e2479de44cb7fc5963af22fb32ce7a7813bc6158f6b4959763c7e879cbe4a649ac6453a61d05d513010b6763ebcb69784c8f1fe6d15d2c7763636d51c68f948d0f080908fab54c681094e94dd9932b25855ca7761e80b0ffe2cbe070e885ffd2a6b697605be3b1c45bd85dbc39ac7c3475e7cb53a65240d763b1adfa9ade6e781e07be6ed920d3692436286286400fb31de85d868d44353b3d4a65472eb161b970f5e84b96340ec25b7a0933cc3f7172dd18dbb7a6a0249eaa4ce90c12c33ee467528be7c68846ce8c5c87eedc7ee299e98b0150c6163296e0c47e1b4899c483220f63260d8f0abdd301c91c5c3ec3e7f7a5eb55ea28941ce800f3b328710bd49d8d346ea4522c5462299761ca120ebfe277e4e18dd56621c5acb4b80b68cf5a7b17bfbee24a9918075941f5a8e9861d10f529815d5577dd9fec7e3654c3a82d4635b0ba3fb7cc3998aba1699f23a4e33bf27edec3d1339f95f246ca28b1b27f9690a2d8cd08cbed546385ebae28b59ca99dc7ddc6cf8466af5479f543c92dbdd9f86c08a8f16224784ec2b12b8bd994ef1d874c2bcb5a0d445657d7bc681e39ba63584bc3903a1511601854904dca19d19613dcc7d074d8c8732260c4fa46729fa511470d81f71c7ac1fa9a0c848f7fafce06a48eca7301e0d061f54e5db37da9240e90fa8790764de7264e45227a530a3c8550b9589777da1836ba69d69d293530fed05e58aa4cfda25f7427e068a6f4e072c07c3dbe6ca68c5b83a3961b586e3ad6251bdb2301eb669dca1f5db2fecc19653d0b825a2722cd6c3654baf0409964eb20038e1dcff8e77fa98b7a0b49d6872c8f0368c90a4fe5e3c4506ff4972ac9d6bb86b02a973eb8ed7998a339c62bf7f9998d52a03fa53ced41c044625200fd33d4d39bd2856206b865c0ad316a4cf9ef3d65c578d587d5a09930c018e8acf82681f168237a923da4216ad78da39651d966cc74901cd101d100ea901070c069066fb07994d0b1163f6c0d312ebc5a6af8b7994e596ade28bc95787b0cad776e2cdfc56223a7481932f8354e00d165f6aa9be52fb2cdb0a33e450fb6ebfb48e2882b94b82af2e1d35c02e9db496a3200e8a57082f75489d6ae723756d4d00980c83948c2fc3ab92e7b2802963004d36f8b9c4b5e6203d65971e653e3e0e50e3f3f62cc16402d28ebd9c86518a2e7f684bac54897ab05c0ecaaa81a974e98c71ae5c0e12fbd3b23d757ade65f1fe70f1fab6490fce1f043e370f8e257fdb4eddbb6dbe4166ab788f732963b566183573a8e913a5b697261d03d1d3978da879ffda41ee5220f1171394f3fcce5a344db2bc6ea6334f7c97cd8f7cce32d471444493a967f8861e48066ed8f29902cba0e9836cd3f44d034353b1b73252aff08b4c663a1b90b72d1b990d9e811421ffbbb0eba489b2f6f780d9fe0ff505387bb34be326e3c2f44d42dd907ce82d9c0bd916ccf400c0990f376043410fd204de90f4357e62777af72168470baf6c6d6749e002556f3cbc4ed1b1b13b985b603d928e2007623dbd4affafc97c708de36eb21938fe8cb638e1a456f9643af0231d818e555191de2d4a8a82060c298833e438949db620e9f8c63c78f6afb4401a77e11e544c73fb40ecd56d1bd9046a556c9ce5318b26e3e4d9d84f52d97412ba70ae8325a822f581b5269e179c88734b2b10ecc8cb787be2c4ef7550d9f9fb17cde0eb1d75d9a9ddc36826a5280702ce3730c3de2c7f91fb807216da8bdd39bf23db7427d0a5911ca424afda0ec2066953bf293f3d97731d10ab75a2a0aa82a2abce3d190abb0ce9a01a5a1c15bc6ddf71e1d0e150ee2cc3c15e60ee9e26ea34a911697dc7fc990ea4219a57041421beca844080af13480e27d9ac319e92603645de2caeffab927730cf65e035907868769cfc37de5a5e6a995532941977de4c98fdda9cf24a0f6566fed9172801ee86c73e9018ad59c15376e8f5692a8296d5347c441832424fada359232b77d8174068aedad71802591c7d516d8c80174278a6508fdb5e4c8ae6b76796ecd92aff4039d8f92f7a329da5dec4f0489945fc5dd89cbf49d6dd734f950265f02e3febf988bedba26684a7c9e1029f35344e87dd1d15eb309c6ee63d7410e63f3d414452f497845d3a755c2943c22880ada64faee2529a6b2e8fb864352340689e6e05b7f05d8babbf3e0b88806ea9d7ea4791df23b6747a4849744b0bc8cc39e03829b6d49395d550bb4a9d51f8d3518a56c3124a16eb7b9b3fcb752ac1e74bb3b3b35ff2f5c9d138b1a28af709ce74d53ac8f41cc280231aa14eacac76e5af7d4614e926aec9cf9cb3e31f9dc7421a26fa06cc17bc730f7a24d3b874de2f011996f0fe1f147f9a886fff9e7e550b5fc3d23954d2f6cfe23a56c0a41c2d1beafc0efbb12bbf898e6814846b8a0d61fa26c94e1cc2c72d4ac15860e73060cafd722179e1956c3a7669bfd63a8b0df914a46e5a63dba613281562c4939e4f1d79399fa3f37a024777567f52bf15c363bfb450fbb40078bc2d7f2ff7124fe1dac40821f27abfcf1a66e3aa727c54aa731a629a86d298dc7b0085691bcff0a613d2deed16c910e694a1f9da45f5bd22a258161af74c9248ba667be2d8eec100d2e11490bf17d2745628120e5ddb219f6488f536565f2e2f0ed48d449b42a55226e430431a3ad6eca3d0114664100a0d6484d5677abefa8f2b91cc36c18840371f472f48b9d050583c2222c333fa922110cd9379cd35dc4cc27f461be72f6ee33540ef3b3bb0f1cf2ead3c99c059f94ec13462db5b93af055b7bd8787aeb6a632489fc1450155a52e0daa483acd7cf25caf58008f7ae5eda846db8b96c7a93af3870edbcaec211b67e2b2a6f7f41e50cdb9e907c174a440adea5c3e0650927abaf3ceab391348cfaa836601dd5d5d73f2a730a057fca167f18f04457f9077fb99ba2594e940e91747ee2842c32fcd190db482066ca33defc17300fe018b905a461e09a5a6cece316a6f4dcd80b1bb0e9818087633fa2696ce084b7cb7392fe610803f7faed46bdb9dbce1298cd1bb14f2a102cc2233df04b67ec1a859170d8d74645bcfe1d4f5190657c4d16d313801389a99df35a03e73bd3d862ed385dbc7a6cc38047d9bf2ba51dfa30e8a5de393c570b7bb830587271f2494f8b456dd0defe3e7b77c4814179d5f82ebb9717b3ad7e4b8402e168d1ce615bff773c20b5ff26e38b700617c2dd750cdcb757ebcf9e0efb43271181b9e098b882ea139b6f00f7d8ac8b2e4309cd9846b9484cf01689a6d50638cf53fcba456a8fc0040536a23d9c9484e6153650f581b01a92841578ce3f10b3b170b4a49c934548c0d14bef0915e7c45a453525736db0619f2e7c68641531950e6c64a0432624d3eb5bfc8aae89a279ddff7284d2c32f2a48c73d727b6b9e7dcd862239b960372d67bec2c521", 0x1000}, {&(0x7f0000001240)="8b332485ec61c65f7a4f927b305c5fb34baf980cf6e15f2505951453f59d3a5d0a2c773d64e6e6bfc95afd200262f9d6a707ef3a7aab3fcb2b4a315f20884f95f207", 0x42}, {&(0x7f00000012c0)="0390b39c507a3562d4a6f635bf106d0aa12ef043d74fd2f4ad933ed332c00ef1841e3372cf42c6ccba5d59a6e363855dbb27c3e7c5ce05dffe377fd70250e88ed552", 0x42}], 0x5, r3) 8.338346992s ago: executing program 4 (id=11171): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x203) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000080)={&(0x7f0000000240)=[{0xff00, 0xa210, 0x0, 0x0}], 0x1}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000001c0)=ANY=[@ANYRES16=r1, @ANYRES32=r0, @ANYRES16=r1, @ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0x0, 0x0) syz_usb_connect(0x5, 0x2d, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000008, 0x200000005c831, 0xffffffffffffffff, 0xffffd000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e24, @private=0xa010102}], 0x10) sendto$inet6(r6, &(0x7f0000000080)="b0", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x1c) mmap(&(0x7f0000417000/0x3000)=nil, 0x3000, 0x5, 0x40010, r2, 0x0) 6.181292098s ago: executing program 2 (id=11180): socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000200000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="10007d8005", @ANYRES8=0x0, @ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 5.608412241s ago: executing program 0 (id=11181): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001ac0)=[{{&(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}}], 0x1, 0x2404c0c0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x4, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x342056}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xfff2) 5.521906283s ago: executing program 0 (id=11182): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000480)=[@nested_amd_vmload={0x182, 0x18, 0x3}, @nested_amd_vmsave={0x183, 0x18}, @wr_drn={0x68, 0x20, {0x3, 0xc4}}, @nested_amd_invlpga={0x17d, 0x20, {0x0, 0xdaae}}, @out_dx={0x6a, 0x28, {0x1581, 0x0, 0x1}}, @code={0xa, 0x56, {"f20f108100680000470f0966b808018ed80f2043410f01d166ba400066ed66baa100b000eec744240051000000c74424020d000000ff1c242ef30fc7b680ffffff410f01f8"}}, @nested_create_vm={0x12d, 0x18, 0x8}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x457, 0x1, 0xffff, 0x2}}, @uexit={0x0, 0x18, 0x2}, @enable_nested={0x12c, 0x18}, @nested_amd_vmload={0x182, 0x18, 0x1}], 0x186}) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x8}, @exit], &(0x7f00000000c0)='GPL\x00', 0x9}, 0x94) syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r7 = accept4$alg(r6, 0x0, 0x0, 0x80800) sendmmsg$alg(r7, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x3, 0x880}], 0x1, 0x80001) recvmmsg(r7, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000200)=""/23, 0x17}], 0x1}, 0x10000}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0x10001}], 0x2, 0x102, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000340)="f20f2338650f405a00f20f32670f2169f30f099a7c0000001e010fc79b060000000f01cf673e0f47d7c166bafbacac40", 0x30}], 0x1, 0x11, 0x0, 0x0) 5.199699174s ago: executing program 5 (id=11184): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, 0x0, 0x0) sendmsg$key(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x21, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5}, @IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 5.170720978s ago: executing program 4 (id=11185): r0 = socket$kcm(0x10, 0x2, 0x0) add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) (async) r1 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff) (async) r2 = add_key$user(&(0x7f0000000040), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000400)={r1, r2, r1}, &(0x7f0000000440)=""/183, 0xb7, &(0x7f00000003c0)={&(0x7f0000000340)={'rmd160-generic\x00'}}) syslog(0x3, 0xffffffffffffffff, 0x1000000) syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000002040), 0x82401, 0x0) syz_mount_image$fuse(&(0x7f0000002d00), &(0x7f0000000140)='./file0\x00', 0x97, &(0x7f0000000200)=ANY=[@ANYRESDEC=r3, @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=r0, @ANYRESDEC=0x0, @ANYBLOB="b2ba"], 0x0, 0x0, 0x0) (async) syz_mount_image$fuse(&(0x7f0000002d00), &(0x7f0000000140)='./file0\x00', 0x97, &(0x7f0000000200)=ANY=[@ANYRESDEC=r3, @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=r0, @ANYRESDEC=0x0, @ANYBLOB="b2ba"], 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x80000001, 0x540) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x1c54, &(0x7f0000000300)={0x0, 0xd610, 0x0, 0x2, 0x3f, 0x0, r5}, &(0x7f0000000180), &(0x7f0000000040)) (async) r6 = syz_io_uring_setup(0x1c54, &(0x7f0000000300)={0x0, 0xd610, 0x0, 0x2, 0x3f, 0x0, r5}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}) io_uring_enter(r6, 0x2def, 0x4000, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 4.940800587s ago: executing program 2 (id=11186): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0xffffffff) openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x1, 0x103000) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000480)={{0x3, 0x3, 0x24000000, 0x3ff, '\x00', 0x6}, 0x1, [0x9, 0x11, 0xfffffffffffffff9, 0x5, 0x12, 0x1, 0x0, 0xff, 0xffffffffffffffff, 0x9, 0x1, 0x8, 0xfffffffffffffff7, 0x4, 0x3ff, 0x1, 0x36, 0x482, 0xc0010, 0x9, 0x1, 0x3ff, 0x5, 0x5, 0x80, 0x0, 0x4, 0x6, 0xffffffff, 0x9, 0x1, 0x71, 0xa, 0x2, 0x1ff, 0x7fffffff, 0x9, 0x4, 0x5, 0x10, 0xfffffffffffffff7, 0x16, 0x9db6, 0x7f, 0xfffffffffffffff2, 0x2, 0x5, 0x7, 0x0, 0x8, 0x3, 0x303, 0xa2, 0x8000, 0x3, 0x400, 0x9, 0x1fd, 0x80000001, 0x2, 0xc9a8, 0xffffffff, 0x3, 0x8, 0xffff, 0x0, 0x10000, 0xffffffffffffffff, 0x5, 0x3, 0x5, 0x9, 0xec, 0x7f, 0xffffffffffffffff, 0x100000000, 0x9f1a, 0xffffffffffffffff, 0xffffffff, 0x8, 0x0, 0x9, 0x3, 0x9, 0x1, 0x4, 0x3, 0xa, 0x8, 0x8, 0x1, 0x2, 0x4, 0x8, 0xe70, 0xfffffffffffffff7, 0xb, 0x8000000000000000, 0x6, 0x9, 0x5, 0x639, 0x8000000000000000, 0x4, 0x400, 0x9a06, 0x9, 0xffffffff00000000, 0x3, 0xb3, 0x200080000001, 0x5, 0xd30, 0x7, 0x4, 0x256, 0x6ff, 0x3, 0x7, 0x202, 0x6, 0x9, 0x0, 0x1b485fe1, 0x7, 0x7, 0x7, 0x9]}) socket(0xa, 0x800, 0x400) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf250000000000000000000000000000000000000000000000000000ffffe000000200000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000040000000000000000000000000000000900000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000b86b6e0001000000000000004400050000000000000000000000000000000000000000022b00000000000000fe8000000000000000000000000000aa000000080100"/172], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000810) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000001000010000000000000000000084000a00"/40], 0x28}}, 0x0) sendmsg$inet(r4, &(0x7f0000002c80)={&(0x7f0000000180)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000002bc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @remote}}}], 0x20}, 0x20000004) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40044) r7 = socket$inet6(0xa, 0x3, 0x7b) socket(0x2b, 0x1, 0x1) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r8 = landlock_create_ruleset(0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) landlock_restrict_self(r8, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xeeef0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 4.853075075s ago: executing program 5 (id=11187): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x70bf27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x805}, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0xfe, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xfffd}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x78, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x36}, 0x8}, @in={0x2, 0xf, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e20, 0x9, @mcast1, 0xfffffffe}, @in={0x2, 0x4e22, @rand_addr=0x64010100}, @in={0x2, 0x4e20, @multicast2}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x790, 0x80000000002, 0x180, 0x400000004, 0xffffffffffffffff, 0xf1, 0x3, 0xfffffffffffffd7e, 0x45, 0x0, 0x3b9, 0xfffffffffffffffe, 0x0, 0x0, 0x8], 0x8000000, 0x3c4210}) ioctl$KVM_RUN(r6, 0xae80, 0x0) getdents(r3, &(0x7f0000000140)=""/72, 0x48) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000002040)=0x4, 0x4) syz_usb_connect$cdc_ecm(0x1, 0x62, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x50, 0x1, 0x1, 0x5, 0x30, 0x9, [{{0x9, 0x4, 0x0, 0x1, 0x3, 0x2, 0x6, 0x0, 0xfd, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x0, 0x200, 0x3}, [@mdlm={0x15, 0x24, 0x12, 0x3}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x5, 0x0, 0x67}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x80, 0x3, 0x9}}}}}]}}]}}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 4.219632804s ago: executing program 0 (id=11188): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9f, 0x18, 0x76, 0x20, 0x17ef, 0x7203, 0x2e36, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xbc, 0x0, 0x2, 0x9e, 0x88, 0x33, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0x3}}]}}]}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)={0x20, 0x3, 0x2, '~K'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000002400)={0x20, 0xe, 0x2, "02cf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000027c0)={0x2c, &(0x7f0000002600)=ANY=[@ANYBLOB="201814"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0x495, 0x2, 0x6, 0x5}, {0x3, 0xa0, 0x4, 0xf1}, {0x1a5, 0x5, 0x80, 0x7}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 3.394503813s ago: executing program 2 (id=11189): socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x103040, 0x0) fcntl$setlease(r2, 0x400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2240, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x6c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x380, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2b0, 0xffffffff, 0xffffffff, 0x2b0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {0xff}, {0x101}, 0x11, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@set2={{0x28}, {{0x0, 0x2, 0x1}}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) r4 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0xfac7}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xb80a7000) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$UI_DEV_DESTROY(r6, 0x5502) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="28000000020300000000000000000000050000002509170200000000050108000055dd62efa8982863e96a56bbdab8b1fb71f2b8893b23bec4a18edfbcdbf15997cc1dbe1b459a651f36ab4e98eaa0b67245ec376a51e873909526740c1a8d07e77eb56b2cc73617c7cea66240c9169a6c84529a72f5018410039ca1a256d855a7479f3c191cb48fd785b8d10be101382eab76f0ce11167d015be181838892e9f00c70bc31a97f461c3d109638aaf48e4dc80ec667a6ba2b7673e210c39aaa"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x10) 3.252385436s ago: executing program 1 (id=11190): openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @remote}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e23, 0x6, @empty}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r4 = epoll_create1(0x0) syz_emit_ethernet(0x2a, &(0x7f0000000400)=ANY=[], 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0x2}) 3.115586852s ago: executing program 1 (id=11191): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000040000100fcff070004000000010000000800cb8004000880100001800c00108006000b8004000c800c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) write$6lowpan_control(r0, 0x0, 0x0) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@generic={&(0x7f00000000c0)='./file0\x00'}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x2f, 0x1, 0x8, 0x10001, 0x21, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x30}, 0x7, 0x8, 0x2, 0xf0}}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@const={0x7, 0x0, 0x0, 0xa, 0x5}, @float={0xc, 0x0, 0x0, 0x10, 0xc}]}, {0x0, [0x5f, 0x3e, 0x61, 0x30]}}, &(0x7f0000000480)=""/174, 0x36, 0xae, 0x0, 0xffffffff}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x9, '\x00', r3, r4, 0x3, 0x1, 0x2}, 0x50) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r6, 0x40000000af01, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000740)) r8 = dup(r7) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000040)={0x0, r8}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000400)={0x2, 0x0, [{0x1, 0x35, &(0x7f00000001c0)=""/45}, {0x1, 0xffffffffffffff29, &(0x7f0000000380)=""/99}]}) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r5, 0x8008ae9d, &(0x7f0000000080)) close_range(r4, r7, 0x2) 3.102769052s ago: executing program 1 (id=11192): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001ac0)=[{{&(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}}], 0x1, 0x2404c0c0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x4, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x342056}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xfff3) 2.842355134s ago: executing program 5 (id=11193): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x101, 0x15, 0x6, 0x4, 0x1, 0x5, 0x3ff, 0xfffffffffffffff8, 0x0, 0x3, 0x7, 0x8, 0x10, 0x4, 0x6, 0x80000001], 0xa000, 0xa00}) (async) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000000c0), 0x4) (async) sendmmsg$inet6(r0, &(0x7f00000038c0)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x0, @mcast1, 0x4}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000140)="26ee4e1f852d6d26b46750dd0b6ba496742ed27a50fce6a4befa17f36badaf92dda509f4664c951a042b8e763d9687c2bd5ac66b31a7774eda24d7", 0x3b}, {&(0x7f0000000180)="4e5394022c5b0c671640a84730ba4a28d641469957952ff19aaea5bebd43051ed6cffdcd28676ff14f66cbdc0d30d12d551fe3dec23987faa843f74e25108b31b67c1c23f38d33ffe97e25b9f079cfd440f4d95669d3ada686ea39f19c7c946f5160aafb62131ec60d260c15", 0x6c}, {&(0x7f0000000200)="da83a3e2b16b9a741e636a0b9aa9a7d6a2f339a3b5fa6b9c1b87a4c94de2341b98e159e1061471db3f0a5caa75dbb5b55a7fda38718d78de1761bffce90bf5c79a0fed4473cb14f39169765bc3783bebe90414a24fbfe808a9437139d0", 0x5d}, {&(0x7f0000000280)="418c4d11ce1f3b3620655435737500b12304bffce257a772580cfb02e8f2a725b8f1a2abfeb620c8a9ba5f5ffd42e4c3d995fed179cdb1c5c87602557f62eb8d765ea2e68a4c43c9763024e9667a29cb8de2eb1a3ec813a9f6512f2b7e79aabf6c6f2761c7753c608b88b7cfbe9f1edd5b866865917abf7ef23feb82b81024cef906ad1eda78d1a6e4647985c5882c9b1b453f3f726687419078d0c684725a4b818e2b903169", 0xa6}, {&(0x7f0000000340)="25c98224b647a73d166b702a86783c343685ac93ce16415f5effa92719329a8299e88d02c3bf0c2458233e9d10369419fce40f0d477b4475b1eee033ad224622914a981f725e3835a1815ef10dc2d6ffc49151c2b1c7e84aa45834be08414e556ebeae1b3a8cf9e633e3565177d4c0b91479cfe551394994523b7113c41a0ac525b5b655", 0x84}, {&(0x7f0000000400)="ac1d2103f63bec02b37a595e4cd28e5deb1775be7ab86487b59c69d2e0d76474deb2859035a9d171369ce48c3a43869470235719ecb8190f8f9b0f2a4271e4586ffe4ccc6abbdc89f6a58ce25e34dcb5641e44c32bfcac66f5411a105938d3901d4c9aaf4b368538bd250cc0b67fd255715d8b", 0x73}, {&(0x7f0000000480)="9578db3e1d8e83", 0x7}, {&(0x7f00000004c0)="22508cf9b898d9d93debf0a58f558875fc5cf94a32630e72e5782dd3d1a35948f7dc7a239cb54d318301bea27d7b92944c193179a770bddd1a0435d6ab8adceb95d55bea4246cbe853489d609e7ecf38bcd98433c98c82e13a69d02cfb6a8769dc84480d2f29a55cd5fa380c90505525da4014ea6bc25313cb", 0x79}, {&(0x7f0000000540)="ab9b0794c96e8badfe8ba3316c85229ec14abf09829a6195cf0b2e7e6c2ad51cd687bd7862ffb9c47d62c00eca27d63acf4e7da5002cc454b071e0f2d78bd257013bf4a99930203a71932b721b8b9df81dea979d4a11aa4a828a84854355058a2543f8b64a63efbd90ddc175ddf796997245c64aefbf3224fc8f00fb69e10f723bdf4b5f385c77c9a2aab08cca0b6a9b072e87e4e849b1536ef5f96461f4bbaf45ae32e4fc65c28bc5f1e201b1d0fae5e4f672524ea4fb559c6d5b3195fc87832aaa16add98c58a3e02fb24d55eacab94806d55d79c1668d542934500e1ccbc116e6250d4e2749afba41c9b618bf", 0xee}], 0x9, &(0x7f0000000700)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}], 0x18}}, {{&(0x7f0000000740)={0xa, 0x4e20, 0x4, @private0, 0x100}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000780)="be5b20d1c5c2b71d41111f83f5ab04f952a292e22e42fd7c98cd9e70081cba3478cdbeb1167d89d5f2745b4864d8e48215cc84329906505ab8a93b8588fcd4a133fe8b9ef098d141f2f08c5e44bb", 0x4e}, {&(0x7f0000000800)="866f8d38ff9cb4525db3a1e3cec0226a75f564771246ca7670d7b9a4fc755067cecd0036984d6e49b6c274bb838f766482bcb94027d935ac0dec87f6e334151c0f4b7eef0aeed719e4216397024128ed877258d742cbe0531eb8878f9fe954468c21a61956a2bd3d02fd00880b6465efab76a88d8c72794e81c180f7ad05ba1e262d02713cfec25b179e5b226a48717c12c8b4ae2e4693e706545aa3c34300ca", 0xa0}, {&(0x7f00000008c0)="4829b36004b562e4a993ae772522b87e70714686d15611117551a1a290052709240d5f17bbc0e15840ce2f37c2de25731c97132a770255084d8d65c864a2731b8610b5966642c98022a4edcfedd71f98fdafc53f0553b0cf4ef78782a0bea1bd0b75ba70033db096e1de1c01e4acb5eef962d5b88ad91a2c03e388859fcd36042f9fe88099c5ee7dbad0c0c901d8afc0d7c26b", 0x93}, {&(0x7f0000000980)="ab6b0deba3c9e7f8ad2ed5cbc5d25297a48ad1088d7f98a793d0c2451079fc5ddcd8aefbf2feb9cb49e735cfd9645398e402774fd20e50d58c1c0ffb6515f91d4d5c38e4822e08995c037299f60e817d09a568405f5929141f926465f7ae0709498358872cd3376ef5ca657e282c78de79a7a948bf999c3881a52845b0378bafcc10be35", 0x84}], 0x4, &(0x7f0000000a80)=[@rthdr_2292={{0x38, 0x29, 0x39, {0x67, 0x4, 0x0, 0x6, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00']}}}, @hopopts={{0x58, 0x29, 0x36, {0x33, 0x7, '\x00', [@enc_lim={0x4, 0x1, 0x6}, @enc_lim={0x4, 0x1, 0x33}, @calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x8, [0x5]}}, @hao={0xc9, 0x10, @local}, @calipso={0x7, 0x10, {0x1, 0x2, 0xbd, 0xfff9, [0x9]}}]}}}, @rthdr_2292={{0x98, 0x29, 0x39, {0x67, 0x10, 0xb3742576f34b17db, 0x4, 0x0, [@dev={0xfe, 0x80, '\x00', 0x27}, @dev={0xfe, 0x80, '\x00', 0x44}, @empty, @private1, @mcast1, @private0, @dev={0xfe, 0x80, '\x00', 0xf}, @local]}}}, @tclass={{0x14, 0x29, 0x43, 0x3}}, @flowinfo={{0x14}}], 0x158}}, {{&(0x7f0000000c00)={0xa, 0x4e21, 0x6, @loopback, 0xffff}, 0x1c, &(0x7f0000001c40)=[{&(0x7f0000000c40)="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", 0x1000}], 0x1}}, {{&(0x7f0000001c80)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, 0x2}, 0x1c, &(0x7f0000002180)=[{&(0x7f0000001cc0)="3f5a0d0f61ef42cfd8fbf1dade0dce0a1bedeaaad67251c890a2e1e51aa92c4743cbce7882171666117f1106da4f7ff7fc192f7a2bceda2088b5f965911ff673780a5b83140175fb1829766321ca2ff83082b212e40d8da50011f7035aaec06f5fe434bc2b878f8742e70184e7eddfc4fb655e281593f3908f69d633be9c1253d47f52f311dbd048e8cb69987419f67916bd57bd0c56980e49876fd40aea049d3f44f2cff0f38a59829570225fa72f2d7e237cb7a4c186ac906aa69418978a1c869f3234b2c02b217c1b4c7fb4a8007f563ee290a023c7eb1e6ee701290e804ee5cf126d4a3b0d321436e2bf", 0xec}, {&(0x7f0000001dc0)="e0c5b0177e3a1ae677a95603b43ddc0d4b3302ba0386568a71bfff2993259d9c14ec9d1ec75c329a7ec6f366593c72abfd74ae6107e0ede75df336478252cd785807ef7239f52fdf55380729996d86aae1b71b0b8a4942606d79f3de0bcea60e2a1268fe672cc84170b4e41e142fd8f5a58dede984eafd3b04f34609c14970059f158856a249d88244d8285a27ad692abfa8eecf91b80b5b2abc371132e34e985a565b2126016857a9c5c74c9fb35002aa1f1b1decb6725bca587c9b092beed27a883f93fce13c0fbc80c710a48f180696ceeadee846d6bb3f7715121da176a3ab1ab7a7e752ac3862097fb2855535", 0xef}, {&(0x7f0000001ec0)="b5b695571e15874a5436ee9ceff3cc66a26a86fea72ef063727e3bda4f5968fa6e28451c0252ff5f9eb2d6a3793130dacb31e86302dcb72380f940ae49551a9442e702c8e8ecdf01e1f6167017e46f7853fefc71ad1a80a025e159d51389909d5ace53beee81b647f19114170aa11c5b3fcd503b359be5a39bff05cb09924e8520785f566f981a6ba6bffc", 0x8b}, {&(0x7f0000001f80)="10927797c0f73bc5cca7d42b246a75b8486be300d8b9603e93c4e92f34772d6127d8d868fb5f932be4e0b69ca352dac11165b2df362876646fd23b2b6e69e348322dd22e01f944185cdc4f80f5b8eb5e325ebdfbbe8371c451a4814cf8916fdd02fb2c12f37b39664ba94d48d0bab4c9772a6daab8c222f4212e7318279e4caf0267e272c2ebef2d5f0eba2941d9a08d331058725a798801b185d395dee3097dd78b7725cd06a2afe3690533cb6e2e95b7cf0dffe4a88e2358d370ffade9afc8ac5876d288268fd40a4ee9e21f25f165ca3f8ac048387fdf2fb682e425a5c4f34e40", 0xe2}, {&(0x7f0000002080)="6ea5662a0d4ba6cf", 0x8}, {&(0x7f00000020c0)="d41e164354a6c5a75ae5cc2f25a3671e7feba3e8d592f0ed5e0ed2fffb6fcefb56bff37f78addf99b902ee577ef1e2cdc038de1df50899b5779bed839dbb210e1842e463b23dc000a5d8bec26a496004d479641a0cfe", 0x56}, {&(0x7f0000002140)="53f1505a465e88d520175618fe35480ba2e611c966be8b74ba", 0x19}], 0x7, &(0x7f0000002200)=[@flowinfo={{0x14, 0x29, 0xb, 0xfffffffd}}, @dontfrag={{0x14, 0x29, 0x3e, 0x6c}}, @hopopts_2292={{0x1d0, 0x29, 0x36, {0x2f, 0x36, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x6, 0x94, "ac2119ccbae87b12cc78a0f7ce1e84ce293547ba85dbaac45530ab1b1672a454539689458178967825f6e9a04bc269606ca3c2e226f87b22d44111d9b06f77f45290e1f12dd886f555e3d55854610e0c2aa63b161e5f85d77f0f18bdcb6ca911beef666f43a135bdbe74ff2deebd69faf40bc0a4c6c9bf224a48225431a050fea656827dcbdade0ddd6ff981b3c2d3a6b0be7ed0"}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @calipso={0x7, 0x18, {0x0, 0x4, 0xe, 0x1, [0x7, 0xfffffffffffffff8]}}, @generic={0x2, 0xe8, "d8a5a341d7c48d74dcaf8af4f2c3717b968352bf13ee7358286f1a4db8d74d54c401f0e0ce0a7c3e1f06f657bb8e19a5d5997a86a9332027c2e3075e59c71d5e2bbc44da1e5fd206e06374d3b282bd2285899ff613e97bafc0d324a04c85c86d4da396d55ca07c408ede7ad36d63d8c45adae903c48e0995d4eb9c77d45ddba60a0e8c74404cdd880b89041d1a30b67585021fa0f1ad94a193d8c037d3d1f819d39b25d889c6b1209c4bcd24de048b47f117f4173713a1c8f2d7b866e3360097bba40ecbfc8b9078ddda243ea034a6357adb503bda8cf68c37a5da2a955bcc4092891fd722240e61"}]}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x4}}}, @dstopts_2292={{0x60, 0x29, 0x4, {0x2c, 0x8, '\x00', [@calipso={0x7, 0x40, {0x3, 0xe, 0x6, 0xff65, [0x4, 0x3, 0x2, 0x6, 0x1000, 0x6, 0x1]}}]}}}], 0x278}}, {{0x0, 0x0, &(0x7f0000003840)=[{&(0x7f0000002480)="0ecc30852ded7d04df374cfc5f0cdf3ed575b097b25b4d34670946ee4235db25ebc20b04de5ed194039c89a9330ab4", 0x2f}, {&(0x7f00000024c0)="be8126099fdc90466d2fda3896f33cf76584fdb658467ce625063acb02983033b2fadd7af755e8adbeefc5c35adc68359f5db30a2d9047f46c6b2f972c5c51b2c651d04140ea9bb2bd25349961f64406fc063fd35977d09ddef75d3bb2be7278329b148d73908a8f5c0a8a693d9921c64fd9c379e29d8aeed1cca2528d499c32f2c58726a8b4d6312f6fcbe58c06e936bf020857b1e9a4afa134261e448b271029f58ee048994b79817fec1f74871d19e81a6025107e1c6a5a4315142fd1ad7e42bb5ee15b0e697d4e6c6177461e6dd38d86d4335634960e2e21b17fc828ecfebd564d8c265be82765de77d277", 0xed}, {&(0x7f00000025c0)="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", 0x1000}, {&(0x7f00000035c0)="712c9e6775705cf90908b5329481fccece38120ae9a5d1d373cf7af6949ae85ae301ceef", 0x24}, {&(0x7f0000003600)="025d", 0x2}, {&(0x7f0000003640)="b98e8bc11d7147383c460709b3bbbbd314c25d8d81aacef248095f1b77c698401a14034233b5f92964bd3cf062e66e463f5e6c5c8a0e7dd81cc7cb4d8012401a59d53bc80dc4581c2ccd3ff1fcf1e5e6ad26b4385a33f742fa6a6a8585cb87f57fb96ac8f3c62da0e656f7e6c7ba603f9806bb9a1428fe01ab838e626ce5e3bc5cb00edfe859950a07144d8281e90fa88dc56c2607d975ec7d3250cde104606eeb22ec1c43fe8f316de192119325458448967eceec00abb92736680496cccfa89ed7dfa6deef9d226a4570ba120bf5217941a3e535a42c56b07e8fb4d43839be13c144033b1894859d38040e6863a7ea9eca57465f53fc2d44", 0xf9}, {&(0x7f0000003740)="0ec420e196d5d662352c28fe4f44a4c8b9b97e4a62d26d31c90f6e0a73887115abc1a4a8a788cded85177b0362fc7176a62126e02e819145fbcb0575124dcb87f666400558bc2432b5641aa50657d52011aa9b77a37b387f605df4742cae7e1801e27c4f258f7a4c98bd6fc10def51b1f35e9fc8744054bfea751c65d64516ec47e1b137053b1527c2342a5745e16437f8c35e66e25c2e2c9268fd09344b758705c753e215fba2b67b0851b1dde32966347c4dcf70a10770dbd68619cc", 0xbd}, {&(0x7f0000003800)="49412c431d818e79ed234da79a38947c16f83d7d2c0362c1c32ad6f3b9c942fddfd6c2ea571ddaf03caed2e114e86ac43aa783a0d2683d0fb4", 0x39}], 0x8}}], 0x5, 0x40084) (async) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000003a40)={0x4, &(0x7f0000003a00)=[{0xd, 0x10, 0x8, 0x473}, {0x100, 0x6, 0x5f, 0xfff}, {0x5, 0x2, 0x9, 0x8}, {0xa6, 0x2, 0x67, 0x7}]}) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r1, &(0x7f0000003c80)={&(0x7f0000003a80)=@caif=@util, 0x80, &(0x7f0000003bc0)=[{&(0x7f0000003b00)=""/139, 0x8b}], 0x1, &(0x7f0000003c00)=""/119, 0x77}, 0x162) (async) ioctl$KVM_SET_GUEST_DEBUG_x86(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000003cc0)={0x100000, 0x0, {[0x8, 0x40, 0x5, 0x8, 0x5, 0x4, 0xce, 0x101]}}) r2 = syz_open_dev$usbfs(&(0x7f0000003d40), 0x400000000000, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000003d80)='fdinfo\x00') ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003e00), r3) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000003ec0)={r3, 0x58, &(0x7f0000003e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f0000003f80)={&(0x7f0000003dc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000003f40)={&(0x7f0000003f00)={0x20, r4, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4001) (async) pipe(&(0x7f0000003fc0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$EVIOCSABS2F(r3, 0x401845ef, &(0x7f0000004000)={0x6, 0x3, 0x3fe0, 0x555, 0x1, 0x3}) r8 = openat(r7, &(0x7f0000004040)='.\x00', 0x0, 0x2) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000004080)=r8, 0x4) r9 = openat$audio1(0xffffffffffffff9c, &(0x7f00000040c0), 0x400, 0x0) write$dsp(r9, &(0x7f0000004100)="d38f8316ccba5a35583b6df95b0ed184e50ddd9a5471536e4eb286b06515a5e186005e00ded7cc4369db8f6093c3c15f98f65b6874b317626929", 0x3a) r10 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r10, &(0x7f0000004200)={&(0x7f0000004140)={0x1d, r5, 0x2, {0x2, 0xff, 0x2}, 0xfe}, 0x18, &(0x7f00000041c0)={&(0x7f0000004180)="5ace740d205f099c2a9676eeb0b1bff58cb73e1eb3619b38a46fba7a", 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x90) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004280), r8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000042c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r3, &(0x7f0000004380)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000004340)={&(0x7f0000004300)={0x28, r11, 0x300, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x6, 0x29}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040804}, 0x0) (async) fcntl$addseals(r2, 0x409, 0x15) (async) read$FUSE(r6, &(0x7f00000043c0)={0x2020}, 0x2020) (async) syz_open_dev$sg(&(0x7f0000006400), 0x3, 0x301) (async) setsockopt$packet_int(r8, 0x107, 0x11, &(0x7f0000006440)=0x8, 0x4) pwritev(r6, &(0x7f0000006780)=[{&(0x7f0000006480)="66e93fbfcedf651108b6f0b3dfcd756b85dd49d0412e2f6a844abd8eb1e6796c60f07a066203227181bf499f9a03fecc080a9398f49713f14383819d0ac719dd08e57b43", 0x44}, {&(0x7f0000006500)="4c75071df213f222af773a6fae8e589d0a9689512fdd", 0x16}, {&(0x7f0000006540)="84b3c946ada037202f68f13095d46510f63655fa3908ec0c132f1f38622711772feede38cf452df37ad860689f2bc64e92809c7bc63ca9f6200f52", 0x3b}, {&(0x7f0000006580)="1a0eba8892c2a37ffb15e098d8bc45329de5028705f7b257ab4a038f7b23ad0f549f303ebee81a8e69a345fc760dca5f754b09bf698da3ecbaf5fbcf2b1ef1cffcce36b9d61db2540bab6fdd66b20a4d69f798f8461b77f8e7a3e8b975a85efdb1775d3b57c89efc824d01e1b7a053405db82e824cb7f10bab4fda1f2077c2a9fcd5c3193adff968730a15c9ef4d8bcf6f91fa012dd77a86983ecc4f3357bff90c9bf69e818149a557087efac2a0516c625181789ff6f35d553227b9242ce3fe6abb2f54c1914b8fc48656a9a9287ee092", 0xd1}, {&(0x7f0000006680)="86b562bd90ff89b105ad56611ced6fa6bc2af774551bc51cb23c554a921e8dab2a7a6ee7f9b9d5e33deaa76649511424e57c4b72f30c025d67207252a1549be5f1065894abedb41e81357d0af376", 0x4e}, {&(0x7f0000006700)="aa13ab7e9c5535ca30d41ed9e2cc5f54d7ccaa15c99e5082c26376de827d72d16953e9232bdca85a8d", 0x29}, {&(0x7f0000006740)="0b07478e677e9a558fc7ac75deaaa24ca0177d0ba995816c916f8a33115e79940bd6947d90a503ed898a3b1c92fed28fc2ed63eacb", 0x35}], 0x7, 0xfffffffb, 0x7) 2.74441391s ago: executing program 1 (id=11194): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffb}, {}, 0x0, 0x6e6bb8, 0x0, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0x7000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x410200, 0x101) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x10640, 0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x1c5882, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) io_submit(0x0, 0x0, 0x0) 2.02025638s ago: executing program 4 (id=11195): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000040)=0x9) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000080)=0x7) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socket(0x2, 0x80805, 0x0) r5 = socket$inet6(0xa, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000019100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYRESHEX=r5], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x5000, 0x3, @mcast2, 0x3}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000190c0)={0x0}}, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176, 0x0, 0xfff5}}], 0x400000000000172, 0x4000000) fcntl$lock(r3, 0x6, &(0x7f0000019080)={0x1, 0x1, 0x1}) 1.807513472s ago: executing program 5 (id=11196): socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000d00000000002100000008000300", @ANYRES32=r2, @ANYBLOB="10007d8005", @ANYRES8=0x0, @ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 1.572594419s ago: executing program 1 (id=11197): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000180)=0x4c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000140)={0x1, "03ff0000000000000000f51f000400"}) (async, rerun: 64) r4 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) (async) setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000040)=0x3ff, 0x4) (async) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) (async, rerun: 64) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) pselect6(0x40, &(0x7f0000000100)={0x3, 0x5, 0xf, 0x5, 0x3ff, 0x7, 0x0, 0x80}, &(0x7f00000000c0)={0x38, 0x400000000d, 0xffff, 0x7, 0x3ff, 0x9, 0x9, 0x1}, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r5, @ANYBLOB="e0005a80dc0000801400030020380000080003000600000003000800040002004a000200061c3b1a0d053f1439153d033318121b1d000a0636263c1621212b47262508200b305632153c21011a4c3d00050130552848521734200f51173f4909191551325431312e535600002f0002003a08103d26463b1b484f1b1956522349004904143e084536281533353f4b2b001a464457233c195255002c000500040000000000270002"], 0xfc}, 0x1, 0x0, 0x0, 0x4008821}, 0x8840) 1.554159688s ago: executing program 2 (id=11198): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0xfffffff5}}, 0x74}}, 0x0) 1.355623703s ago: executing program 2 (id=11199): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) syz_open_procfs(0x0, &(0x7f0000000040)='net/sockstat6\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) keyctl$session_to_parent(0x12) socket$nl_generic(0x10, 0x3, 0x10) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r3, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) unshare(0x2040400) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = eventfd2(0xe5a, 0x1) ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000000)={r8, 0xba, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x82, @loopback, 0x3}, {0xa, 0x6e24, 0x4, @mcast1}, r9, 0x8}}, 0x48) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r5, &(0x7f0000000340)={0x16, 0x98, 0xfa00, {&(0x7f0000000180), 0x0, r10, 0x10, 0x1, @in6={0xa, 0x4e24, 0x24806063, @mcast2, 0x7}}}, 0xa0) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r9}}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000080010000060a01040000000000000000010000000900020073797a310000000038000480340001800c00010062697477697365002400028008000340000000040800024000000000080006400000000008000140000000000900010073797a30000000005e000740"], 0x1f4}}, 0x0) 1.115200621s ago: executing program 0 (id=11200): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x120}, 0x1, 0x0, 0x0, 0x20004081}, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f0000623000/0x4000)=nil, 0x4000) r2 = syz_open_dev$vbi(&(0x7f0000000880), 0x0, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f0000000100)={0x98f905, 0xb335}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8010, 0xffffffffffffffff, 0x0) r3 = mq_open(&(0x7f0000000040)='\xeb\xac\xa5\x03\x00\x00\x00\x00', 0x842, 0x0, 0x0) mq_timedsend(r3, &(0x7f0000000080)="52da77ddf8d87f68151c0adf4098b8ea19b20b882001f9f1d326b73b10630cd85a4ec45d40c42cf6abed48d064877f9b3cd4a0df64d6583e06b91e42eecc3a0ab94f45d8828ab04cd51cbdb03c268973e931ccd53a79bfc47f6c2de0151679cdfbf097b3a1384d99f075abffa89430f3d3e2802878452c066617d5f2238fd5d22286976044233cb9e3dacbcf8c7fe1df2063810a3a1472f29dc3d8fc65959c5af4bada54c04b63164bc4df1589a92afa71b151a7438cb1b9ee15e4f91d51c5c6fb8e022c312f27c85919817d8c5bba65a4f447bb5220e010da7dd448ffc0d3da09c00560e68259d2615d3c45168d2a87c73f7b0673b0f427332b29cb52a607acebde2ccf711dba62ee31a413a7f7ebf47836c369fa58ca8113f3c8cbbe8da84d6d30d885bd74907af6de9fa6c96c312ae1d7f8886053455c32fd07c13661f58f9fda9cb4bd504aa1d67d7aeb6e0d1025b466d61e8d694a17f9735932fa5bce08522f18c3b5373b2f5a08ae615aae66622dc23f2229080a0c75490fd0d526da37ea131d9126da2411d834989f0a0ab8670df4cc2d8388251416dc285f4ed225205bb48d225e7906dfc0eac421e95542d776021877c51cbd751fefd4c3ee54a35830d27876b9533646cbb38f5829800f83204c19d9f5f43698d7be74cc22bb8de2fd8f58dd24f40e32ae032b236161b4c4fc5f2bffcb6e406ed29a6e20c269dcef3e872ccd5da966b9abec4e7d6573670d0d8ac897c914bc2d7870238ad6c1c394eac8f3a3880630441e50a3607c484556e178efcc066363b3a1a2e63abe8660b7085ffcce779eb70cbfd0e163ff2b44cef60dd15f33035399cab24d6fa22ca0fb6c17edd06c92e9167568a663a0f37604796332db01517ec5e22e019f01631e86ff6048122e6751bfa260e4f13958f613b08a70e6f5f148db31932c513fc1a167fd47e99483090874654cf21b4b4b41c396c79fcf3695c4ca7e8535aa598240f00b48c4dc37c4c7e67d29767bb76ad8badc8fef2aa67f5f80000000a383ce24130a6729359a977131b858e7d6b86aac9e6f57257e73e341ad0b059e35aeb0d306571ffa5de77f673e532ea2eacd8a58ff8cd12f12c46dcc09c02dcdb202d283e9e9f4cd07f6446b8a96959d9ec7ce54892da21af4e0c54b46d148d86aa0f84fb806d59f23f72f2fb55aa84ed219eb55d1d5c3c1eb001bb15e03abc45a99c3953f26c08ee553fccf11277200baa07bb15e6ffc91e4af0c38b382a792873b987cd757bec064d94f12b526d7bea07a9e17dbd64a021f8fa953bfccb28599580f77837cfaa16a5a4f24433e87834d69192cbf64fa8ec442881b64426d9e21330e0178ffc621a87e97f07330e1b2f8e97bac49fb17be0eeb089aedc1b5148a994890b2deee6823c3458a699e106ee370b052ad381f7d055df9e64456d8b39c87dac826a44e18104395cd97f0e37ca04d2675ef00cd3fea32ab6dbce26c5f75624343ac35d39de3a21d964c19444d1accdbc7771f81cc8c7cc2662717070000000000000060511e200427adfa964537969fc3bdf975a83a9118f1989149e7d6ffe649ff388f6eae3a7d8124c611b84e22308ca9fb5439fe09ddd391d5bb5dc8ae4345faa503801aeadf50560325080fd080ef5e4f478bc6c73c03b4570d127d27da56203bd31979bd46b51290ad1685c49cde6e914e5ad56eaee9eef58cf62679091498d651cbfb562c9e90cce9d13f15a9137adc31a269f9fd5dd2a13180b45b0701aca94429ec763dc73c4da5a64ee28f5c403d4fd45e150b20bbfdcb62ada411184ff521b3010f666e4b9048f3fee8a59e5eee441e4ea5075f4c1c258dd5238e16d505e127178c8038c4a976aef992eae658e716df3bfe1f3c25fd436202023eae07e7d0e8f0efd1df48b76623edf31e80fe504b98a34362a0bddfc50162b233b399cbf3e769e21bddf4d28fb9f85604c63434b46057e62ca60507c0a6fb2842511467e940a519769dc85b2f4374676927735a249702cd739dc0f761e03625229fdb90a8072039f633ef6a83f5f7f25d5ca6df2b687dac2be3fdbe19956fa5b9bd5408af4959db052f2033add23dbf1060f54697a12a67849567367a078fdf20385f710cd891816a399c967bb80cb284a960d2fa5273e3d7f6ac63b896c9fd93efd33ffe5e5a13d93adeba2fad394f5f428118cbc7d0d07d4983e6f5892acab0b92e6a270de91e9d250fec9de6957b902dcf1d7750cfd71298f6d3957e49e6539ffae2815f6feedd0da549c088ec6ca14e1cea57813a9e26f05c4e1560093149f7339bb42660cae8b1b9ce235acff9a2162f3919195d58e3e91cdf043b27b5387126a9b7f8a3041ba96e4b4450b253a0869fae8f96e81d39f76a55d8f1aa9c7fe3baa051c98a4b87d3efde176608e420b8e5122648cbde336bdc29fc9ce78f84a6437cde12b17de4ba51abf89716936bca76a22ae0d603d659681e3c8ba5cf95ccbebef5dbe7250d871682205958e6e346406e418cc7efd0b2c5625eb7bcc00991bbddf9d4a8931eab102521ff4bdb8d410659049a3cc8a42795b428dd972844eb39a791d4dc69a7ce147e3c2128bb979a8a6d7fd12063facfc779e69a44681dc1ad83797f517b8156c1e349d3458634f94649c510bcb02b2de2035ecca9a8696cb0ca8e699a899448a35d5d7bcf55c292ea32835ac4bfb82ccf07732bba1b15c8a4055da730de91a893938efdcd129b90593d89d2f7c34040a6b1ae4753f101a86d6f968085b9fc82afd078c6e5c91c7e330638f50ceceb23b3b4d8ff902be7bb283e6ce3f5f2ec56b8dbf8dd36f8874e4c5c84c7ff1e59e5ff8d31c3d0fa4ca09fb59862b1f30ff60826e256f7a85ac3cd7f7762577f7b86bed6e87662c6be23bf1d495855a9191daf70e7467780d4771b6929bb90a40598e149b5a25d7541f7c45b4387669da7893a32d049bc3b61fe0e048e86cc0149f3f60b964511528b9c96654232f34cc8127d94a7d6ed6229722db97a7912d0d975073844a71f2395eb0ae712b1981b08eaeb857c925f3a17d2152e99e788467f0ef1fd12406c7862e5c8196cee09a64a48e4e51c552c7e4276877b2811d7e420b19673da9cf8c1d4d1e68a67399ab3f4401e92c5f1d11eacaa59d1c43182f82fc05019e72c99bff59da5f1d60faf73bb52c8f39df258e90ed0d80743a70aaa2a5d7c6272f1813a1430bc98a1d57952bedf84ad1cc8abed33440af58d8a0c4e72f2b1a877abe0420e2eb2ab97de6a3c9f336bd1fd314140fa2affe919e53fe52ec0612c4ff9f7f4658fc8c762c0d1240fcf0e84749679604c9b5fe398ce2c35327347f927ac31e248e9149125e7deb2e48f34644c230d01233d62f9c3faeeb4565acd5a8d7c7f8181d48352da79c5ed5d1a7c613cdee4e7c8bc80be0ff049c160f4239217506fc8e1e6e7966bbb1044dd1a8d5e7de460d07232ac4100073271c30cf6685f9ba7a8ff98376bc4fc575d181af8df38ea59a9ec01b3e9e833e3431d61f0e9212e8c5ab2f54db72f4000d7bac2ab839c41f15977226dac6401c9cb8883f7cd504422367ab7646b9541741c45bbb6b9eb45e8447b55d76d46e8286a54664df4449c4e65eab6f3db6d536fd56bf025b7e16db8cd2e31e2668c11f7a6d459b844cc8d5c29fc22686bcd0ed72c3be69b590985f17f42b2eb4d8e61de2a0a0f5c40484490c501ec50f8454ac23b2c3b9a294f1e548ba515688cf47d665938a3661ddaafeacb25e35aab5119a407d206cbb5a105fd53f89d3eac0d6b1dca863f6331039a5426de8d18c346758df14a9a27f4dcd38bd0c7f0eb751c37bc5937d32530a48f36eb6d0997ef73f454fb8340a09d3f4cfe02000000b1e5d7cc30d320523c87570eee94f6e8c69b814fec2d08e66d7b8168a32dca23e79fb78780e6abbfbdc309ba533e3f2dda9b6ea813136d6913237dc365ac02328d7c6c2595cedc2e9056e406bc1561df3ea7e19b1daa72f912e615bbfa0f4487b80df04b9e95bb0a0de47b2cae6bd323b9753b84b2f99c4c553624766bfad429ac13d8b80289b8480e4b8bc006affe4a8d2207b49d0a8ebd7909f432c40a0ce1de825298342edde312d5306162ba57c1006a5fb9068da474644e1cefe4f62506749091fed2c833321aae98f962e2c064a06ddf8f2d9a95c3d7c87cfba0c13e70b19272abc06491944ea00db6d4badc81115dfbeaa1e96b387253b2915a29cf025be961a9aa55519b2e1abecd80a69e7f2d2babc42a4a4f818f1b6b3ed7ab15b5f8b6e542afe1509afdbdeb494a8914608fa2affb659a7f0a3da124d92c85ea813ce2cee06b1f09d6c9afca26c2fee46df789d4c93eafc6bc677bb08df2bdc94bc8728a24b87e9b5b1b41726f6def5dfbb6f90dc806616d403fa64ed5d4a4d0d88088ba3f070d32f06a9d99595bf1225e3fbfed87f5febe4072335333cf3c5b876b90754b7208035783011557591c7afee84f31f12803255395c57f8efd90949dbe4d1161058e5f45e841f1aa46ec065f919a8268bd3ab9638d3ca0a0183c14ce0ef3024c0a993df6d50c1c5842fd8d1136b6fb54aed8fbffbbe36df5995bea2368768ec3552344508813213d7eb63d847a54758e697bb121073c331712c51de44b8d9849764a69ae8185296f911d64c4d8fb6d44d68d4a084576d149bc113a758a7dc65f083339bfb0afccd80f46361ddaf43136ca63acc0a71515ae9c41ef519653ce55049d5f020343be8a9e22e9a68fe749c27751c06508d79caa159d3813449a6e808eaeb14e4f31f8092913e30cb31cf662531a7aa0048d1a5cbf07f355ebbc2b131dc4dbedd1c9185af0e59d3ac6137111681c7afc6a6916d052696102b6f53f7d90bdbf2f607941ab3c6864b75634899614fe2bac9a1f65681640c0300b61f2e641e51c46d9d8c761a7c83a5e5b30fbb6e91528fa70df004e1d4c096ef0b8099488dcb6df119113cf5854b3ab23d2d548cae2c7b9b4d730112274dc0af80be6736131aee33bb6d52d7af4868285b96d277610e02d8649022510535bd5756a6e19053b1fde56e583871d76edbc86e779b100f19f713103615d3239163979c356daff50e91d129be7de2f43e06e7ec2fe937f4eece1921eaffd614a379e9e45cc8c7258c43131a0537f9acc85e50f16d518a25b62c5c2e6f49fb198a2e64969e5292ebb5da0278935affe654995ead6ce7324516ab458411fbdec614d7491f552cd8a97544c79a53ddd8bf683da4ef3804daeafe902389e95cae7b8d617abdb863e41c65cb8af030784f1feffd6af4f164f0d41e53f117490a34aef95493479c059389e00eff92c683929876535c60b979d024fa6efd17b6dbeed6cabfb85365a6b984af2be22aa3198ae304ba59120115fecf172f93534dad72928b0faa68176fd28d36da57b73a4ae1a953c20dc57ed698fc39575870678c1b307b639a2a244229d65918c70be1cf1013adac2c4db1de30899553214abced4454128855341df1470bd918dee52c0559240bc8421dae6a94c282cfc160b74dee9fd6d67bc8e411bc60e0f9a0c89a21abc60e7d2340f7ff72f143b166945519d1ee8de6b2a7837d06bcdd85a7accb43a7a33cc667f63f4820e0f83b41cca9592b1d08eda13d718c736543ed04cfb15e68b4cc0adb455f12476550af7263092b63512fd0286b878293319f4013573c7ab1eecf322649139c84d8e817512bea0a27d44bd8dd7", 0xfd1, 0x0, 0x0) mq_timedreceive(r3, 0x0, 0x0, 0x200000000000003, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) userfaultfd(0x800) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7ff, 0x2) r6 = syz_io_uring_setup(0xd5, &(0x7f0000000480)={0x0, 0x3, 0x8, 0x1}, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x8000) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r7, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000001080)=ANY=[@ANYRESDEC=r0, @ANYRES64=r6, @ANYRESOCT], 0x34}, 0x1, 0x0, 0x0, 0x20004003}, 0x4010) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000280)={0x1, @pix_mp={0xfffffff8, 0x93cf, 0x41565559, 0x0, 0x8, [{0x6, 0x1}, {0x9, 0x5}, {0x8, 0x3}, {0x4, 0x9}, {0x2, 0xb68a}, {0x6, 0x7ff}, {0x3, 0x2}, {0x50ad0a9a}], 0x9, 0x7f, 0x2, 0x2}}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r11 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r4, @ANYRES32=r10, @ANYRESOCT=r11], 0x44}}, 0x2000800) r12 = gettid() syz_open_procfs(r12, &(0x7f0000000040)='loginuid\x00') pread64(r9, &(0x7f0000000500)=""/201, 0xc9, 0x35) 522.485326ms ago: executing program 2 (id=11201): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) (async) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) (async) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) syz_io_uring_setup(0x3aec, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000100)) (async) r2 = syz_io_uring_setup(0x3aec, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x3d}) io_uring_enter(r2, 0x7a98, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r2, 0x7a98, 0x0, 0x0, 0x0, 0x0) r5 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x7, 0x20, 0x5, 0x3, {{0x5, 0x4, 0x2, 0x26, 0x14, 0x68, 0x0, 0x9, 0x4, 0x0, @multicast1, @remote}}}}) sendmsg$nl_xfrm(r5, 0x0, 0x20040000) connect$tipc(r5, 0x0, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000002c0)={&(0x7f00000000c0)="ad2ac30bde3f541ac075121414", &(0x7f00000005c0)=""/135, &(0x7f0000000680)="a3dd6664c0a19535d578fe6c2165b36f81729bc51d9659e7e95b6d447704d0f092388c671c03eba82fd1217b158fed1508ef7b509dc355417a125717e23a2ed57d13d9b44bb6c448def92f8c0f7a5fe313e4bd6e3c1cdc41bb5064022d7390cc06542385487d24492e39bed57ffd1dc3e73ff298eab14b502395aeada03cd66b2fe5e69648967cec12abb6f86620c8322a44d47984", &(0x7f0000001840)="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", 0xfffffffc, r5, 0x4}, 0x38) writev(r1, &(0x7f0000000540)=[{&(0x7f0000000200)="1f18b78592462ee0e66936b341dd595bf29d0cf4f0f32b7668a4cc8ac18db21efd6657c86e1bbd14bf371166bf5142279050c991d3bff077a6fd8cf9e30da7c3a9e2aaa033af822ff7a85336dc56583f958c3845d1336553871376535ea573880392532fae7205c76e93522d84f2b51615e31f12c1322536253e77f26f81fe0a95ef", 0x82}, {&(0x7f0000000140)="a4d9a9fb961fefd02c6dbbd818391a61de04b8a304a2fbb0052ae183cf2013783579e4e26a7099f07867455a624cc8af0cfa50903ba1906b2404993286e0833d15ea510231966d4b959b5de2ad0f", 0x4e}, {&(0x7f0000000300)="3ef3e1d09939dd7e073b2eb8ed106b63e4710ca8cd053ed662f72dfa62920f97379746cf86bd7c51a0b278ac41f746e4695359f9c4276db1eea695766cb2405825fd8e09efc0550a775692ea520d654b8adc9590d34d65879c59c2afc2f26f7faedbd55f8c050eb08fc6d940addd06ca25228b636bd7da83fb4d8361650501bb2549840e643ab6879816e203fbcd32d05fd42e5e65f9", 0x96}, {&(0x7f00000003c0)="23648afc2d94ce1302f0fa839eea8e40cf0ed6570cc0a6adeadf8c339c3bb3a509c35e4e20061f86536ad7f3776d3f877c162100cbecc64d08fe0b5f3cf7030c32ae6768", 0x44}, {&(0x7f0000000440)="362ce0b1355742b067bd4b234b8980032e623d7f131c410e5c9c0ce54975873d7fea61dc134915b8917ae112eb98992b99b6fb37a6d27fffdf1d5ef7bad23c365e7695bab85f3fedee62391116ca12858cd3b772866a354105389936ff07b8ce4fc6695b211bee9c2d1667d2a3c359400aace8", 0x73}, {&(0x7f00000004c0)="200670cba708f2bf3bb013f289e4f301921659b485b569f2da8bd294cc3fd3d33cc454ba698029f9f0ce0255eb9dfb0d19", 0x31}, {&(0x7f0000000a80)="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", 0xdb2}], 0x7) ioctl$SNDCTL_DSP_RESET(r1, 0x5000, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, 0x0, &(0x7f0000000040)=0x5a) (async) getsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, 0x0, &(0x7f0000000040)=0x5a) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e00)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @random="9f2ef61969d5"}]}}}]}, 0xfffffffffffffe9c}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000002) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x6}) (async) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x6}) 456.122864ms ago: executing program 5 (id=11202): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) (async) accept4(r0, 0x0, 0x0, 0x800) madvise(&(0x7f0000003000/0x2000)=nil, 0x2000, 0xc) madvise(&(0x7f0000003000/0x2000)=nil, 0x2000, 0xc) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) (async) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) (async) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f00000000c0)=0x10000) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, 0x0, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_open_dev$mouse(&(0x7f0000000000), 0x3, 0x40100) 291.557254ms ago: executing program 5 (id=11203): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8008}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x4}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0x1}]}}}]}, 0x44}}, 0x8000) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @multicast1}}}], 0x20}}], 0x1, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff08000400ffffffffffffff", 0x39}], 0x1) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'veth0_macvtap\x00', &(0x7f00000000c0)=@ethtool_ringparam={0x10, 0x4, 0x3, 0x3118, 0x3, 0xe, 0xfffffffe, 0x8, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x0, 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 110.178407ms ago: executing program 4 (id=11204): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) openat$kvm(0xffffffffffffff9c, 0x0, 0x83, 0x0) syz_open_procfs(0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000100)={0x1, 'syzkaller0\x00', {}, 0x4}) accept4(r1, 0x0, 0x0, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r2 = syz_io_uring_setup(0x10d2, &(0x7f0000000340)={0x0, 0x63f6, 0x100, 0x5, 0x12}, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 0s ago: executing program 1 (id=11205): socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_emit_ethernet(0x66, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @time_exceed={0x2, 0x1, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x3a, 0x0, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}}}}}}}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x60000, 0x0) read$alg(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x14, r6, 0x601}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000880)={0x1e4, r6, 0xae19aca1e9061694, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb1a}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}]}, @TIPC_NLA_MEDIA={0x108, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x69f}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9e16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ef}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd7b}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'netpci0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x9, @empty, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e21, @private=0xa010102}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x4000080}, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="080086dd00011100"], 0xfdef) kernel console output (not intermixed with test programs): :syzkaller0> [ 3217.530940][ T7913] usb 3-1: config 0 descriptor?? [ 3217.543573][T15231] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 3217.559561][T15224] FAULT_INJECTION: forcing a failure. [ 3217.559561][T15224] name failslab, interval 1, probability 0, space 0, times 0 [ 3217.594240][ T7913] s2255 3-1:0.32: Could not find bulk-in endpoint [ 3217.607102][T15224] CPU: 0 UID: 0 PID: 15224 Comm: syz.5.10519 Tainted: G L syzkaller #0 PREEMPT(full) [ 3217.607138][T15224] Tainted: [L]=SOFTLOCKUP [ 3217.607147][T15224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 3217.607161][T15224] Call Trace: [ 3217.607170][T15224] [ 3217.607180][T15224] dump_stack_lvl+0xe8/0x150 [ 3217.607212][T15224] should_fail_ex+0x412/0x560 [ 3217.607244][T15224] should_failslab+0xa8/0x100 [ 3217.607271][T15224] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 3217.607312][T15224] ? __alloc_skb+0x1d7/0x390 [ 3217.607335][T15224] ? __local_bh_enable_ip+0xd0/0x130 [ 3217.607357][T15224] ? __alloc_skb+0x193/0x390 [ 3217.607382][T15224] __alloc_skb+0x1d7/0x390 [ 3217.607411][T15224] netlink_ack+0x146/0xa50 [ 3217.607430][T15224] ? __pfx_genl_rcv_msg+0x10/0x10 [ 3217.607460][T15224] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 3217.607489][T15224] ? __pfx_nl80211_post_doit+0x10/0x10 [ 3217.607522][T15224] ? __pfx_ref_tracker_free+0x10/0x10 [ 3217.607557][T15224] netlink_rcv_skb+0x2b6/0x4b0 [ 3217.607581][T15224] ? __pfx_genl_rcv_msg+0x10/0x10 [ 3217.607611][T15224] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 3217.607630][T15224] ? genl_rcv+0x19/0x40 [ 3217.607674][T15224] ? down_read+0x272/0x2e0 [ 3217.607698][T15224] ? genl_rcv+0xd/0x40 [ 3217.607726][T15224] genl_rcv+0x28/0x40 [ 3217.607752][T15224] netlink_unicast+0x80f/0x9b0 [ 3217.607794][T15224] ? __pfx_netlink_unicast+0x10/0x10 [ 3217.607825][T15224] ? __alloc_skb+0x193/0x390 [ 3217.607849][T15224] ? netlink_sendmsg+0x650/0xb40 [ 3217.607870][T15224] ? skb_put+0x11b/0x210 [ 3217.607900][T15224] netlink_sendmsg+0x813/0xb40 [ 3217.607933][T15224] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3217.607959][T15224] ? aa_sock_msg_perm+0xf1/0x1b0 [ 3217.607987][T15224] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3217.608011][T15224] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3217.608033][T15224] ____sys_sendmsg+0xa68/0xad0 [ 3217.608061][T15224] ? __might_fault+0xaf/0x130 [ 3217.608099][T15224] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3217.608137][T15224] ? import_iovec+0x73/0xa0 [ 3217.608174][T15224] ___sys_sendmsg+0x2a5/0x360 [ 3217.608201][T15224] ? __lock_acquire+0x6b5/0x2cf0 [ 3217.608236][T15224] ? __pfx____sys_sendmsg+0x10/0x10 [ 3217.608311][T15224] ? __fget_files+0x2a/0x420 [ 3217.608333][T15224] ? __fget_files+0x3a0/0x420 [ 3217.608368][T15224] __x64_sys_sendmsg+0x1bd/0x2a0 [ 3217.608400][T15224] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 3217.608439][T15224] ? __pfx_ksys_write+0x10/0x10 [ 3217.608489][T15224] do_syscall_64+0xe2/0xf80 [ 3217.608512][T15224] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3217.608533][T15224] ? trace_irq_disable+0x37/0x100 [ 3217.608554][T15224] ? clear_bhb_loop+0x60/0xb0 [ 3217.608579][T15224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3217.608600][T15224] RIP: 0033:0x7fce8239aeb9 [ 3217.608619][T15224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3217.608638][T15224] RSP: 002b:00007fce83173028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3217.608661][T15224] RAX: ffffffffffffffda RBX: 00007fce82615fa0 RCX: 00007fce8239aeb9 [ 3217.608677][T15224] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000006 [ 3217.608691][T15224] RBP: 00007fce83173090 R08: 0000000000000000 R09: 0000000000000000 [ 3217.608704][T15224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3217.608723][T15224] R13: 00007fce82616038 R14: 00007fce82615fa0 R15: 00007fce8273fa48 [ 3217.608758][T15224] [ 3217.620933][ T7913] Sensoray 2255 driver load failed: 0xfffffff4 [ 3217.637920][ T7894] usb 5-1: USB disconnect, device number 7 [ 3217.677207][ T7913] s2255 3-1:0.32: probe with driver s2255 failed with error -12 [ 3217.687810][ T7904] usb 6-1: USB disconnect, device number 83 [ 3218.095208][ T7913] usb 3-1: USB disconnect, device number 13 [ 3218.261339][T15294] netlink: 72 bytes leftover after parsing attributes in process `syz.0.10524'. [ 3218.288068][T15294] netlink: 64 bytes leftover after parsing attributes in process `syz.0.10524'. [ 3218.716933][T15305] netlink: 72 bytes leftover after parsing attributes in process `syz.2.10525'. [ 3218.920493][T15308] netlink: 'syz.4.10527': attribute type 6 has an invalid length. [ 3218.996673][T15308] netlink: 'syz.4.10527': attribute type 7 has an invalid length. [ 3219.018766][T15305] netlink: 64 bytes leftover after parsing attributes in process `syz.2.10525'. [ 3219.137032][T15308] netlink: 'syz.4.10527': attribute type 8 has an invalid length. [ 3219.843051][T15312] bridge0: port 3(erspan0) entered blocking state [ 3219.851231][T15312] bridge0: port 3(erspan0) entered disabled state [ 3219.860175][T15312] erspan0: entered allmulticast mode [ 3219.867570][T15312] erspan0: entered promiscuous mode [ 3219.967493][T15312] bridge0: port 3(erspan0) entered blocking state [ 3219.974795][T15312] bridge0: port 3(erspan0) entered forwarding state [ 3221.219469][T15315] xt_TPROXY: Can be used only with -p tcp or -p udp [ 3225.411613][T15386] netlink: 72 bytes leftover after parsing attributes in process `syz.1.10539'. [ 3225.422487][T15386] netlink: 64 bytes leftover after parsing attributes in process `syz.1.10539'. [ 3225.752846][T15393] netlink: 52 bytes leftover after parsing attributes in process `syz.0.10543'. [ 3227.750636][T15421] ipt_ECN: cannot use operation on non-tcp rule [ 3227.770107][T15428] FAULT_INJECTION: forcing a failure. [ 3227.770107][T15428] name failslab, interval 1, probability 0, space 0, times 0 [ 3227.787159][T15428] CPU: 1 UID: 0 PID: 15428 Comm: syz.5.10549 Tainted: G L syzkaller #0 PREEMPT(full) [ 3227.787194][T15428] Tainted: [L]=SOFTLOCKUP [ 3227.787202][T15428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 3227.787214][T15428] Call Trace: [ 3227.787223][T15428] [ 3227.787231][T15428] dump_stack_lvl+0xe8/0x150 [ 3227.787263][T15428] should_fail_ex+0x412/0x560 [ 3227.787295][T15428] should_failslab+0xa8/0x100 [ 3227.787320][T15428] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 3227.787351][T15428] ? __alloc_skb+0x193/0x390 [ 3227.787376][T15428] ? __alloc_skb+0x1d7/0x390 [ 3227.787397][T15428] ? __local_bh_enable_ip+0xd0/0x130 [ 3227.787417][T15428] ? __alloc_skb+0x193/0x390 [ 3227.787440][T15428] __alloc_skb+0x1d7/0x390 [ 3227.787473][T15428] netlink_sendmsg+0x5d4/0xb40 [ 3227.787503][T15428] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3227.787525][T15428] ? aa_sock_msg_perm+0xf1/0x1b0 [ 3227.787550][T15428] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3227.787572][T15428] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3227.787591][T15428] ____sys_sendmsg+0xa68/0xad0 [ 3227.787615][T15428] ? __might_fault+0xaf/0x130 [ 3227.787648][T15428] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3227.787686][T15428] ? import_iovec+0x73/0xa0 [ 3227.787718][T15428] ___sys_sendmsg+0x2a5/0x360 [ 3227.787743][T15428] ? __lock_acquire+0x6b5/0x2cf0 [ 3227.787775][T15428] ? __pfx____sys_sendmsg+0x10/0x10 [ 3227.787835][T15428] ? __fget_files+0x2a/0x420 [ 3227.787857][T15428] ? __fget_files+0x3a0/0x420 [ 3227.787894][T15428] __x64_sys_sendmsg+0x1bd/0x2a0 [ 3227.787925][T15428] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 3227.787965][T15428] ? __pfx_ksys_write+0x10/0x10 [ 3227.788009][T15428] do_syscall_64+0xe2/0xf80 [ 3227.788032][T15428] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3227.788053][T15428] ? trace_irq_disable+0x37/0x100 [ 3227.788073][T15428] ? clear_bhb_loop+0x60/0xb0 [ 3227.788098][T15428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3227.788119][T15428] RIP: 0033:0x7fce8239aeb9 [ 3227.788139][T15428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3227.788156][T15428] RSP: 002b:00007fce83173028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3227.788179][T15428] RAX: ffffffffffffffda RBX: 00007fce82615fa0 RCX: 00007fce8239aeb9 [ 3227.788195][T15428] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 3227.788209][T15428] RBP: 00007fce83173090 R08: 0000000000000000 R09: 0000000000000000 [ 3227.788223][T15428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3227.788236][T15428] R13: 00007fce82616038 R14: 00007fce82615fa0 R15: 00007fce8273fa48 [ 3227.788271][T15428] [ 3229.589023][ T7904] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 3229.729019][ T7904] usb 3-1: device descriptor read/64, error -71 [ 3229.837350][T15506] netlink: 72 bytes leftover after parsing attributes in process `syz.4.10562'. [ 3229.862289][T15506] netlink: 64 bytes leftover after parsing attributes in process `syz.4.10562'. [ 3230.002800][ T7904] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 3230.089484][ T7889] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 3230.149013][ T7904] usb 3-1: device descriptor read/64, error -71 [ 3230.218999][ T7889] usb 6-1: device descriptor read/64, error -71 [ 3230.259356][ T7904] usb usb3-port1: attempt power cycle [ 3230.550902][ T7889] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 3230.619282][ T7904] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 3230.640644][ T7904] usb 3-1: device descriptor read/8, error -71 [ 3230.689023][ T7889] usb 6-1: device descriptor read/64, error -71 [ 3230.800400][ T7889] usb usb6-port1: attempt power cycle [ 3230.889291][ T7904] usb 3-1: new low-speed USB device number 17 using dummy_hcd [ 3230.910604][ T7904] usb 3-1: device descriptor read/8, error -71 [ 3231.040742][ T7904] usb usb3-port1: unable to enumerate USB device [ 3231.140554][ T7889] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 3231.179763][ T7889] usb 6-1: device descriptor read/8, error -71 [ 3231.429114][ T7889] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 3231.460166][ T7889] usb 6-1: device descriptor read/8, error -71 [ 3231.569547][ T7889] usb usb6-port1: unable to enumerate USB device [ 3232.242521][T15542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10569'. [ 3232.599112][ T7889] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 3232.712688][T15559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10572'. [ 3233.019906][ T7889] usb 5-1: Using ep0 maxpacket: 16 [ 3233.030949][ T7889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 3233.057664][ T7889] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 3233.105996][ T7889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3233.133885][ T7889] usb 5-1: Product: syz [ 3233.144903][ T7889] usb 5-1: Manufacturer: syz [ 3233.153960][ T7889] usb 5-1: SerialNumber: syz [ 3233.158707][T15608] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 3233.165268][T15608] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3233.175977][ T7889] usb 5-1: config 0 descriptor?? [ 3233.229571][T15608] vhci_hcd vhci_hcd.0: Device attached [ 3233.314583][T15608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10570'. [ 3233.539712][ T7889] usb 34-1: SetAddress Request (2) to port 0 [ 3233.546572][ T7889] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 3233.661383][T15609] vhci_hcd: connection closed [ 3233.669496][T32470] vhci_hcd vhci_hcd.0: stop threads [ 3233.681593][T32470] vhci_hcd vhci_hcd.0: release socket [ 3233.693916][T32470] vhci_hcd vhci_hcd.0: disconnect device [ 3235.224809][ T7894] usb 5-1: USB disconnect, device number 8 [ 3236.219082][ T7907] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 3236.391688][ T7907] usb 2-1: config 1 has an invalid interface number: 23 but max is 3 [ 3236.400641][ T7907] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3236.434432][ T7907] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 4 [ 3236.462201][ T7907] usb 2-1: config 1 has no interface number 0 [ 3236.478304][ T7907] usb 2-1: config 1 interface 23 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 3236.525460][ T7907] usb 2-1: config 1 interface 23 has no altsetting 0 [ 3236.547488][ T7907] usb 2-1: New USB device found, idVendor=0421, idProduct=0508, bcdDevice=b4.ef [ 3236.557608][ T7907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3236.566363][ T7907] usb 2-1: Product: syz [ 3236.571187][ T7907] usb 2-1: Manufacturer: syz [ 3236.592839][ T7907] usb 2-1: SerialNumber: syz [ 3236.827668][T15656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3236.837254][T15656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3236.840047][ T7904] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 3236.925311][ T7907] usb 2-1: bad CDC descriptors [ 3236.961747][ T7907] usb 2-1: USB disconnect, device number 108 [ 3237.009464][T15687] dummy0: mtu less than device minimum [ 3237.059376][ T7904] usb 6-1: Using ep0 maxpacket: 16 [ 3237.066719][ T7904] usb 6-1: config 0 has no interfaces? [ 3237.073944][ T7904] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3237.092224][ T7904] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3237.121548][ T7904] usb 6-1: Manufacturer: syz [ 3237.205458][ T7904] usb 6-1: config 0 descriptor?? [ 3237.898110][ T7904] IPVS: starting estimator thread 0... [ 3238.000136][T15701] IPVS: using max 36 ests per chain, 86400 per kthread [ 3238.080610][ T7913] usb 6-1: USB disconnect, device number 88 [ 3238.749677][ T7889] usb 34-1: device descriptor read/8, error -110 [ 3239.192845][ T7889] usb usb34-port1: attempt power cycle [ 3239.769894][ T7889] usb usb34-port1: unable to enumerate USB device [ 3240.714642][T15745] syzkaller0: entered allmulticast mode [ 3241.056952][T15756] FAULT_INJECTION: forcing a failure. [ 3241.056952][T15756] name failslab, interval 1, probability 0, space 0, times 0 [ 3241.129353][T15756] CPU: 1 UID: 0 PID: 15756 Comm: syz.1.10598 Tainted: G L syzkaller #0 PREEMPT(full) [ 3241.129389][T15756] Tainted: [L]=SOFTLOCKUP [ 3241.129399][T15756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 3241.129412][T15756] Call Trace: [ 3241.129421][T15756] [ 3241.129431][T15756] dump_stack_lvl+0xe8/0x150 [ 3241.129464][T15756] should_fail_ex+0x412/0x560 [ 3241.129496][T15756] should_failslab+0xa8/0x100 [ 3241.129522][T15756] __kmalloc_cache_noprof+0x83/0x6e0 [ 3241.129543][T15756] ? nft_pernet+0x23/0x240 [ 3241.129569][T15756] ? nft_pernet+0x23/0x240 [ 3241.129594][T15756] ? nf_tables_newtable+0x435/0x1910 [ 3241.129627][T15756] nf_tables_newtable+0x435/0x1910 [ 3241.129651][T15756] ? nfnetlink_subsys_unregister+0x191/0x1b0 [ 3241.129702][T15756] nfnetlink_rcv+0x1240/0x27b0 [ 3241.129768][T15756] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 3241.129817][T15756] ? ref_tracker_free+0x693/0x840 [ 3241.129873][T15756] ? __netlink_deliver_tap+0x807/0x850 [ 3241.129895][T15756] ? netlink_deliver_tap+0x2e/0x1b0 [ 3241.129936][T15756] netlink_unicast+0x80f/0x9b0 [ 3241.129977][T15756] ? __pfx_netlink_unicast+0x10/0x10 [ 3241.130007][T15756] ? __alloc_skb+0x193/0x390 [ 3241.130033][T15756] ? netlink_sendmsg+0x650/0xb40 [ 3241.130053][T15756] ? skb_put+0x11b/0x210 [ 3241.130082][T15756] netlink_sendmsg+0x813/0xb40 [ 3241.130115][T15756] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3241.130150][T15756] ? aa_sock_msg_perm+0xf1/0x1b0 [ 3241.130178][T15756] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3241.130204][T15756] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3241.130226][T15756] ____sys_sendmsg+0xa68/0xad0 [ 3241.130254][T15756] ? __might_fault+0xaf/0x130 [ 3241.130291][T15756] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3241.130330][T15756] ? import_iovec+0x73/0xa0 [ 3241.130363][T15756] ___sys_sendmsg+0x2a5/0x360 [ 3241.130394][T15756] ? __lock_acquire+0x6b5/0x2cf0 [ 3241.130427][T15756] ? __pfx____sys_sendmsg+0x10/0x10 [ 3241.130494][T15756] ? __fget_files+0x2a/0x420 [ 3241.130516][T15756] ? __fget_files+0x3a0/0x420 [ 3241.130551][T15756] __x64_sys_sendmsg+0x1bd/0x2a0 [ 3241.130583][T15756] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 3241.130621][T15756] ? __pfx_ksys_write+0x10/0x10 [ 3241.130665][T15756] do_syscall_64+0xe2/0xf80 [ 3241.130689][T15756] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3241.130709][T15756] ? trace_irq_disable+0x37/0x100 [ 3241.130729][T15756] ? clear_bhb_loop+0x60/0xb0 [ 3241.130755][T15756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3241.130776][T15756] RIP: 0033:0x7f0b8c59aeb9 [ 3241.130796][T15756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3241.130815][T15756] RSP: 002b:00007f0b8a7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3241.130838][T15756] RAX: ffffffffffffffda RBX: 00007f0b8c815fa0 RCX: 00007f0b8c59aeb9 [ 3241.130854][T15756] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 3241.130869][T15756] RBP: 00007f0b8a7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 3241.130882][T15756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3241.130895][T15756] R13: 00007f0b8c816038 R14: 00007f0b8c815fa0 R15: 00007f0b8c93fa48 [ 3241.130930][T15756] [ 3242.991776][ T7913] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 3243.587104][T15820] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10608'. [ 3245.891875][ T7907] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 3246.129551][ T7907] usb 6-1: Using ep0 maxpacket: 16 [ 3246.153873][ T7907] usb 6-1: config 0 has no interfaces? [ 3246.171406][ T7907] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3246.206131][ T7907] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3246.340532][ T7907] usb 6-1: Manufacturer: syz [ 3246.410239][ T7907] usb 6-1: config 0 descriptor?? [ 3246.675041][ T7904] usb 6-1: USB disconnect, device number 89 [ 3246.757620][T15875] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 3246.757620][T15875] The task syz.4.10617 (15875) triggered the difference, watch for misbehavior. [ 3247.265209][T15882] No such timeout policy "syz1" [ 3247.273890][T15882] fuse: Unknown parameter '' [ 3247.454314][T15886] netlink: 72 bytes leftover after parsing attributes in process `syz.2.10619'. [ 3247.535290][T15886] netlink: 64 bytes leftover after parsing attributes in process `syz.2.10619'. [ 3247.895125][T15892] bond2: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 3247.967208][T15892] bond2 (unregistering): Released all slaves [ 3247.979130][T15928] netlink: 'syz.1.10623': attribute type 1 has an invalid length. [ 3248.564188][T15889] fuse: Bad value for 'fd' [ 3248.895500][T15979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3248.924905][T15979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3249.119126][ T7895] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 3249.279840][ T7895] usb 5-1: Using ep0 maxpacket: 32 [ 3249.288264][ T7895] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 3249.298920][ T7895] usb 5-1: config 0 has no interface number 0 [ 3249.313300][ T7895] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3249.343145][ T7895] usb 5-1: config 0 interface 85 has no altsetting 0 [ 3249.367061][ T7895] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 3249.383142][ T7895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3249.399852][ T7895] usb 5-1: Product: syz [ 3249.404325][ T7895] usb 5-1: Manufacturer: syz [ 3249.410395][ T7895] usb 5-1: SerialNumber: syz [ 3249.420276][ T7895] usb 5-1: config 0 descriptor?? [ 3249.478422][T16003] fuse: Bad value for 'fd' [ 3249.489513][ T7907] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 3249.649902][ T7907] usb 2-1: Using ep0 maxpacket: 8 [ 3249.665359][ T7907] usb 2-1: unable to get BOS descriptor or descriptor too short [ 3249.675346][ T7895] appletouch 5-1:0.85: Failed to read mode from device. [ 3249.683796][ T7907] usb 2-1: config 127 has an invalid interface number: 181 but max is 0 [ 3249.705519][ T7907] usb 2-1: config 127 has no interface number 0 [ 3249.707842][ T7895] appletouch 5-1:0.85: probe with driver appletouch failed with error -5 [ 3249.725089][T16012] loop4: detected capacity change from 0 to 524287936 [ 3249.750548][ T7907] usb 2-1: config 127 interface 181 altsetting 249 bulk endpoint 0xC has invalid maxpacket 64 [ 3249.774186][ T7895] usb 5-1: USB disconnect, device number 10 [ 3249.789476][ T7907] usb 2-1: config 127 interface 181 altsetting 249 bulk endpoint 0x6 has invalid maxpacket 64 [ 3249.808480][ T7907] usb 2-1: config 127 interface 181 has no altsetting 0 [ 3249.856220][ T7907] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0123, bcdDevice=12.8b [ 3249.876034][ T7907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3249.895021][ T7907] usb 2-1: Product: syz [ 3249.905193][ T7907] usb 2-1: Manufacturer: syz [ 3249.922761][ T7907] usb 2-1: SerialNumber: syz [ 3249.944941][T15992] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 3249.969604][T15992] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 3250.394357][ T7907] kvaser_usb 2-1:127.181: error -ENODEV: Cannot get usb endpoint(s) [ 3250.597546][ T7907] usb 2-1: USB disconnect, device number 109 [ 3250.709018][ T7913] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 3250.887001][ T7913] usb 3-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 3250.917337][ T7913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3250.935347][ T7913] usb 3-1: Product: syz [ 3250.942212][ T7913] usb 3-1: Manufacturer: syz [ 3250.948420][ T7913] usb 3-1: SerialNumber: syz [ 3250.987200][ T7913] usb 3-1: config 0 descriptor?? [ 3251.006206][ T7913] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 3251.519989][ T7913] sonixb 3-1:0.0: Error reading register 00: -110 [ 3252.178515][T16069] fuse: Bad value for 'fd' [ 3252.935887][T16089] gtp1: entered promiscuous mode [ 3252.955902][T16089] gtp1: entered allmulticast mode [ 3253.013314][T16097] fuse: Bad value for 'fd' [ 3253.309208][ T7895] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 3253.349080][ T7904] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 3253.452734][ T7889] usb 3-1: USB disconnect, device number 18 [ 3253.470701][ T7895] usb 5-1: Using ep0 maxpacket: 8 [ 3253.485352][ T7895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 3253.504220][ T7895] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 3253.519083][ T7895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 3253.530182][ T7904] usb 2-1: Using ep0 maxpacket: 16 [ 3253.535853][ T7895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 3253.548108][ T7895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 3253.559834][ T7904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3253.571712][ T7904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3253.581943][ T7904] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 3253.596319][ T7904] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 3253.606131][ T7904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3253.614502][ T7895] usb 5-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.7f [ 3253.629825][ T7895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3253.649416][ T7904] usb 2-1: config 0 descriptor?? [ 3253.656938][ T7895] usb 5-1: Product: syz [ 3253.856141][ T7895] usb 5-1: Manufacturer: syz [ 3253.861725][ T7895] usb 5-1: SerialNumber: syz [ 3253.887486][ T7895] usb 5-1: config 0 descriptor?? [ 3253.911747][ T7895] usbtouchscreen 5-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 3254.074932][ T7904] hid_parser_main: 815 callbacks suppressed [ 3254.074951][ T7904] microsoft 0003:045E:07DA.00C8: unknown main item tag 0x0 [ 3254.090598][ T7904] microsoft 0003:045E:07DA.00C8: ignoring exceeding usage max [ 3254.107360][ T7907] usb 5-1: USB disconnect, device number 11 [ 3254.296030][T16106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3254.333880][T16106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3254.357987][ T7904] microsoft 0003:045E:07DA.00C8: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 3254.427407][ T7904] microsoft 0003:045E:07DA.00C8: no inputs found [ 3254.436326][ T7904] microsoft 0003:045E:07DA.00C8: could not initialize ff, continuing anyway [ 3254.452709][ T7904] usb 2-1: USB disconnect, device number 110 [ 3254.938662][T16153] fido_id[16153]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 3255.229692][ T7895] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 3255.407627][ T7895] usb 3-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3255.432606][ T7895] usb 3-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 3255.467070][ T7895] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3255.486880][ T7895] usb 3-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.00 [ 3255.504564][ T7895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3255.531079][ T7895] usb 3-1: config 0 descriptor?? [ 3255.631791][T16171] fuse: Bad value for 'fd' [ 3255.767835][ T7895] usb 3-1: string descriptor 0 read error: -71 [ 3255.849603][ T7895] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input198 [ 3255.938641][ T5181] bcm5974 3-1:0.0: could not read from device [ 3255.958620][ T5181] bcm5974 3-1:0.0: could not read from device [ 3255.992556][ T5181] bcm5974 3-1:0.0: could not read from device [ 3256.000404][ T7895] usb 3-1: USB disconnect, device number 19 [ 3256.056260][T15448] udevd[15448]: Error opening device "/dev/input/event4": No such file or directory [ 3256.066386][T15448] udevd[15448]: Unable to EVIOCGABS device "/dev/input/event4" [ 3256.076758][T15448] udevd[15448]: Unable to EVIOCGABS device "/dev/input/event4" [ 3256.145180][T15448] udevd[15448]: Unable to EVIOCGABS device "/dev/input/event4" [ 3256.153400][T15448] udevd[15448]: Unable to EVIOCGABS device "/dev/input/event4" [ 3256.801728][T16225] FAULT_INJECTION: forcing a failure. [ 3256.801728][T16225] name failslab, interval 1, probability 0, space 0, times 0 [ 3256.837815][T16225] CPU: 0 UID: 0 PID: 16225 Comm: syz.4.10658 Tainted: G L syzkaller #0 PREEMPT(full) [ 3256.837851][T16225] Tainted: [L]=SOFTLOCKUP [ 3256.837859][T16225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 3256.837871][T16225] Call Trace: [ 3256.837880][T16225] [ 3256.837889][T16225] dump_stack_lvl+0xe8/0x150 [ 3256.837922][T16225] should_fail_ex+0x412/0x560 [ 3256.837953][T16225] should_failslab+0xa8/0x100 [ 3256.837980][T16225] __kmalloc_noprof+0xde/0x7e0 [ 3256.838000][T16225] ? trace_kmalloc+0x1f/0xb0 [ 3256.838016][T16225] ? nla_strdup+0x9d/0x140 [ 3256.838049][T16225] nla_strdup+0x9d/0x140 [ 3256.838075][T16225] ? nft_rhash_privsize+0x1f/0x20 [ 3256.838099][T16225] nf_tables_newset+0x1393/0x2580 [ 3256.838139][T16225] ? __pfx_nf_tables_newset+0x10/0x10 [ 3256.838189][T16225] ? __nla_parse+0x40/0x60 [ 3256.838222][T16225] nfnetlink_rcv+0x1240/0x27b0 [ 3256.838286][T16225] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 3256.838335][T16225] ? ref_tracker_free+0x693/0x840 [ 3256.838389][T16225] ? __netlink_deliver_tap+0x807/0x850 [ 3256.838412][T16225] ? netlink_deliver_tap+0x2e/0x1b0 [ 3256.838452][T16225] netlink_unicast+0x80f/0x9b0 [ 3256.838502][T16225] ? __pfx_netlink_unicast+0x10/0x10 [ 3256.838533][T16225] ? __alloc_skb+0x193/0x390 [ 3256.838559][T16225] ? netlink_sendmsg+0x650/0xb40 [ 3256.838580][T16225] ? skb_put+0x11b/0x210 [ 3256.838611][T16225] netlink_sendmsg+0x813/0xb40 [ 3256.838652][T16225] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3256.838680][T16225] ? aa_sock_msg_perm+0xf1/0x1b0 [ 3256.838708][T16225] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3256.838732][T16225] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3256.838754][T16225] ____sys_sendmsg+0xa68/0xad0 [ 3256.838782][T16225] ? __might_fault+0xaf/0x130 [ 3256.838828][T16225] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3256.838868][T16225] ? import_iovec+0x73/0xa0 [ 3256.838903][T16225] ___sys_sendmsg+0x2a5/0x360 [ 3256.838930][T16225] ? __lock_acquire+0x6b5/0x2cf0 [ 3256.838961][T16225] ? __pfx____sys_sendmsg+0x10/0x10 [ 3256.839026][T16225] ? __fget_files+0x2a/0x420 [ 3256.839047][T16225] ? __fget_files+0x3a0/0x420 [ 3256.839081][T16225] __x64_sys_sendmsg+0x1bd/0x2a0 [ 3256.839113][T16225] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 3256.839151][T16225] ? __pfx_ksys_write+0x10/0x10 [ 3256.839192][T16225] do_syscall_64+0xe2/0xf80 [ 3256.839212][T16225] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3256.839231][T16225] ? trace_irq_disable+0x37/0x100 [ 3256.839248][T16225] ? clear_bhb_loop+0x60/0xb0 [ 3256.839269][T16225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3256.839287][T16225] RIP: 0033:0x7ff63799aeb9 [ 3256.839305][T16225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3256.839321][T16225] RSP: 002b:00007ff63881b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3256.839341][T16225] RAX: ffffffffffffffda RBX: 00007ff637c15fa0 RCX: 00007ff63799aeb9 [ 3256.839354][T16225] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 3256.839366][T16225] RBP: 00007ff63881b090 R08: 0000000000000000 R09: 0000000000000000 [ 3256.839377][T16225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3256.839388][T16225] R13: 00007ff637c16038 R14: 00007ff637c15fa0 R15: 00007ff637d3fa48 [ 3256.839416][T16225] [ 3257.643315][T16239] xt_hashlimit: max too large, truncated to 1048576 [ 3260.008103][T16276] input: syz0 as /devices/virtual/input/input199 [ 3260.171185][T16285] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10670'. [ 3260.214048][T16285] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10670'. [ 3260.294076][T16266] fuse: Unknown parameter '0x0000000000000004' [ 3260.300964][T16285] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10670'. [ 3260.329187][ T7907] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 3260.611147][ T7907] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3260.622297][ T7907] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3260.633861][ T7907] usb 3-1: New USB device found, idVendor=08b7, idProduct=8000, bcdDevice= 0.00 [ 3260.647453][ T7907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 3260.664184][ T7907] usb 3-1: SerialNumber: syz [ 3260.685198][T16291] FAULT_INJECTION: forcing a failure. [ 3260.685198][T16291] name failslab, interval 1, probability 0, space 0, times 0 [ 3260.713668][T16291] CPU: 0 UID: 0 PID: 16291 Comm: syz.0.10672 Tainted: G L syzkaller #0 PREEMPT(full) [ 3260.713704][T16291] Tainted: [L]=SOFTLOCKUP [ 3260.713713][T16291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 3260.713726][T16291] Call Trace: [ 3260.713735][T16291] [ 3260.713745][T16291] dump_stack_lvl+0xe8/0x150 [ 3260.713778][T16291] should_fail_ex+0x412/0x560 [ 3260.713811][T16291] should_failslab+0xa8/0x100 [ 3260.713838][T16291] __kmalloc_noprof+0xde/0x7e0 [ 3260.713859][T16291] ? trace_kmalloc+0x1f/0xb0 [ 3260.713875][T16291] ? nla_strdup+0x9d/0x140 [ 3260.713908][T16291] nla_strdup+0x9d/0x140 [ 3260.713934][T16291] ? nft_rhash_privsize+0x1f/0x20 [ 3260.713960][T16291] nf_tables_newset+0x1393/0x2580 [ 3260.713998][T16291] ? __pfx_nf_tables_newset+0x10/0x10 [ 3260.714045][T16291] ? __nla_parse+0x40/0x60 [ 3260.714079][T16291] nfnetlink_rcv+0x1240/0x27b0 [ 3260.714146][T16291] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 3260.714194][T16291] ? ref_tracker_free+0x693/0x840 [ 3260.714246][T16291] ? lockdep_hardirqs_on+0x7a/0x110 [ 3260.714285][T16291] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 3260.714318][T16291] ? rcu_preempt_deferred_qs_irqrestore+0x7b9/0xbc0 [ 3260.714370][T16291] netlink_unicast+0x80f/0x9b0 [ 3260.714410][T16291] ? __pfx_netlink_unicast+0x10/0x10 [ 3260.714440][T16291] ? __alloc_skb+0x193/0x390 [ 3260.714466][T16291] ? netlink_sendmsg+0x650/0xb40 [ 3260.714487][T16291] ? skb_put+0x11b/0x210 [ 3260.714517][T16291] netlink_sendmsg+0x813/0xb40 [ 3260.714549][T16291] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3260.714577][T16291] ? aa_sock_msg_perm+0xf1/0x1b0 [ 3260.714613][T16291] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3260.714639][T16291] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3260.714661][T16291] ____sys_sendmsg+0xa68/0xad0 [ 3260.714691][T16291] ? __might_fault+0xaf/0x130 [ 3260.714750][T16291] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3260.714788][T16291] ? import_iovec+0x73/0xa0 [ 3260.714825][T16291] ___sys_sendmsg+0x2a5/0x360 [ 3260.714852][T16291] ? __lock_acquire+0x6b5/0x2cf0 [ 3260.714887][T16291] ? __pfx____sys_sendmsg+0x10/0x10 [ 3260.714954][T16291] ? __fget_files+0x2a/0x420 [ 3260.714975][T16291] ? __fget_files+0x3a0/0x420 [ 3260.715009][T16291] __x64_sys_sendmsg+0x1bd/0x2a0 [ 3260.715040][T16291] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 3260.715081][T16291] ? __pfx_ksys_write+0x10/0x10 [ 3260.715126][T16291] do_syscall_64+0xe2/0xf80 [ 3260.715149][T16291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3260.715170][T16291] ? trace_irq_disable+0x37/0x100 [ 3260.715190][T16291] ? clear_bhb_loop+0x60/0xb0 [ 3260.715217][T16291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3260.715237][T16291] RIP: 0033:0x7fb127b9aeb9 [ 3260.715257][T16291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3260.715276][T16291] RSP: 002b:00007fb128b30028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3260.715299][T16291] RAX: ffffffffffffffda RBX: 00007fb127e15fa0 RCX: 00007fb127b9aeb9 [ 3260.715314][T16291] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 3260.715328][T16291] RBP: 00007fb128b30090 R08: 0000000000000000 R09: 0000000000000000 [ 3260.715341][T16291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3260.715355][T16291] R13: 00007fb127e16038 R14: 00007fb127e15fa0 R15: 00007fb127f3fa48 [ 3260.715390][T16291] [ 3261.269666][ T7904] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 3261.489903][ T7904] usb 2-1: Using ep0 maxpacket: 32 [ 3261.518964][ T7904] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 3261.538697][ T7904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3261.630216][ T7904] usb 2-1: Product: syz [ 3261.713893][ T7904] usb 2-1: Manufacturer: syz [ 3261.743950][ T7904] usb 2-1: SerialNumber: syz [ 3261.785215][ T7904] usb 2-1: config 0 descriptor?? [ 3261.899331][ T7889] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 3262.030508][ T7904] snd-usb-6fire 2-1:0.0: unknown device firmware state received from device: [ 3262.040242][ T7904] 23 46 85 2e 41 85 9a 99 [ 3262.045135][ T7904] snd-usb-6fire 2-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 3262.105043][ T7889] usb 5-1: not running at top speed; connect to a high speed hub [ 3262.116436][ T7889] usb 5-1: config 1 has an invalid interface number: 54 but max is 0 [ 3262.126713][ T7889] usb 5-1: config 1 has no interface number 0 [ 3262.158651][ T7889] usb 5-1: config 1 interface 54 has no altsetting 0 [ 3262.234200][T16290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3262.257150][ T7889] usb 5-1: New USB device found, idVendor=1114, idProduct=0001, bcdDevice=f4.a7 [ 3262.269763][ T7889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3262.271725][T16290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3262.277897][ T7889] usb 5-1: Product: syz [ 3262.293216][ T5905] usb 2-1: USB disconnect, device number 111 [ 3262.305758][ T7889] usb 5-1: Manufacturer: syz [ 3262.319489][ T7889] usb 5-1: SerialNumber: syz [ 3262.560491][ T7889] usb 5-1: USB disconnect, device number 12 [ 3262.947820][T16348] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10677'. [ 3263.943325][ T7907] usb 3-1: 0:2 : does not exist [ 3264.024585][ T7907] usb 3-1: USB disconnect, device number 20 [ 3264.175380][T15491] udevd[15491]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3264.610092][T16377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10680'. [ 3264.639081][T16377] netem: unknown loss type 0 [ 3264.679173][T16377] netem: change failed [ 3264.710652][T16377] mac80211_hwsim hwsim84 wlan0: entered promiscuous mode [ 3264.718147][T16377] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 3265.719921][T16403] tipc: Started in network mode [ 3265.737068][T16403] tipc: Node identity 2a278659292, cluster identity 4711 [ 3265.830033][T16403] tipc: Enabled bearer , priority 0 [ 3265.849444][T16407] syzkaller0: entered promiscuous mode [ 3265.874207][T16407] syzkaller0: entered allmulticast mode [ 3266.321934][T16403] tipc: Resetting bearer [ 3266.644110][T16398] tipc: Resetting bearer [ 3266.667360][T16392] fuse: Unknown parameter '0x0000000000000004' [ 3266.740102][T16398] tipc: Disabling bearer [ 3267.030476][T16414] vimc link validate: Scaler:src:16x16 (0x33424752, 0, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 3267.812894][T16442] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 3268.156160][T16445] RDS: rds_bind could not find a transport for ::ffff:172.20.20.50, load rds_tcp or rds_rdma? [ 3268.195881][T16445] binfmt_misc: register: failed to install interpreter file ./file0/file0 [ 3269.839073][ T5905] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 3269.922574][T16463] fuse: Unknown parameter '0x0000000000000004' [ 3269.978988][ T5905] usb 6-1: device descriptor read/64, error -71 [ 3270.240895][ T5905] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 3270.380202][ T5905] usb 6-1: device descriptor read/64, error -71 [ 3270.490399][ T5905] usb usb6-port1: attempt power cycle [ 3270.980563][ T5905] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 3271.040803][ T5905] usb 6-1: device descriptor read/8, error -71 [ 3271.279057][ T5905] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 3271.394541][ T5905] usb 6-1: device descriptor read/8, error -71 [ 3271.500502][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 3271.507129][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 3271.514003][ T5905] usb usb6-port1: unable to enumerate USB device [ 3272.069134][ T7904] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 3272.290090][ T7904] usb 2-1: Using ep0 maxpacket: 16 [ 3272.390159][ T7904] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 3272.398333][ T7904] usb 2-1: config 0 has no interface number 0 [ 3272.427794][ T7904] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 3272.443198][ T7904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3272.464180][ T7904] usb 2-1: Product: syz [ 3272.477559][ T7904] usb 2-1: Manufacturer: syz [ 3272.501771][ T7904] usb 2-1: SerialNumber: syz [ 3272.583757][ T7904] usb 2-1: config 0 descriptor?? [ 3272.594124][ T7904] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 3273.044122][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 3273.044149][ T30] audit: type=1326 audit(1770138534.560:3574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16552 comm="syz.5.10712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8239aeb9 code=0x7ffc0000 [ 3273.097123][T16554] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10712'. [ 3273.122131][ T30] audit: type=1326 audit(1770138534.590:3575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16552 comm="syz.5.10712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8239aeb9 code=0x7ffc0000 [ 3273.252881][ T30] audit: type=1326 audit(1770138534.590:3576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16552 comm="syz.5.10712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fce8239aeb9 code=0x7ffc0000 [ 3273.294388][ T30] audit: type=1326 audit(1770138534.590:3577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16552 comm="syz.5.10712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8239aeb9 code=0x7ffc0000 [ 3273.317776][ T30] audit: type=1326 audit(1770138534.590:3578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16552 comm="syz.5.10712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8239aeb9 code=0x7ffc0000 [ 3273.365593][ T30] audit: type=1326 audit(1770138534.600:3579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16552 comm="syz.5.10712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fce8239aeb9 code=0x7ffc0000 [ 3273.446435][ T30] audit: type=1326 audit(1770138534.600:3580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16552 comm="syz.5.10712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8239aeb9 code=0x7ffc0000 [ 3273.489046][ T30] audit: type=1326 audit(1770138534.600:3581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16552 comm="syz.5.10712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fce8239aeb9 code=0x7ffc0000 [ 3273.537822][ T30] audit: type=1326 audit(1770138534.600:3582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16552 comm="syz.5.10712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8239aeb9 code=0x7ffc0000 [ 3273.567400][ T30] audit: type=1326 audit(1770138534.600:3583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16552 comm="syz.5.10712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fce8239aeb9 code=0x7ffc0000 [ 3273.644686][T16572] tipc: Enabled bearer , priority 0 [ 3273.654177][T16571] syzkaller0: entered promiscuous mode [ 3273.663459][T16571] syzkaller0: entered allmulticast mode [ 3273.723810][T16576] tipc: Resetting bearer [ 3273.755927][T16570] tipc: Resetting bearer [ 3273.820836][T16570] tipc: Disabling bearer [ 3274.000733][ T7904] gspca_spca1528: reg_w err -110 [ 3274.005801][ T7904] spca1528 2-1:0.1: probe with driver spca1528 failed with error -110 [ 3274.744713][ T7904] usb 2-1: USB disconnect, device number 112 [ 3275.215571][T16620] fuse: Invalid gid '00000000000000000015' [ 3275.227585][T16620] loop5: detected capacity change from 0 to 3 [ 3275.247578][T16620] Dev loop5: unable to read RDB block 3 [ 3275.314175][T16620] loop5: unable to read partition table [ 3275.395564][T16620] loop5: partition table beyond EOD, truncated [ 3275.411092][T16620] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 3275.439122][ T5905] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 3275.605413][ T5905] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3275.646614][ T5905] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 3275.698989][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 3275.720478][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 3275.749321][ T5905] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 3275.779874][ T5905] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 3275.806787][T16635] loop4: detected capacity change from 0 to 7 [ 3275.814528][T16635] Dev loop4: unable to read RDB block 7 [ 3275.820410][T16635] loop4: unable to read partition table [ 3275.829195][T16635] loop4: partition table beyond EOD, truncated [ 3275.835442][T16635] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 3275.888773][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 3275.918956][ T5905] usb 3-1: Product: syz [ 3275.923204][ T5905] usb 3-1: Manufacturer: syz [ 3275.950611][ T5905] usb 3-1: SerialNumber: syz [ 3275.970599][ T5905] usb 3-1: config 0 descriptor?? [ 3276.204424][ T5905] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 3276.218982][ T5905] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 3276.407245][ T5905] radio-si470x 3-1:0.0: software version 0, hardware version 0 [ 3276.431965][ T5905] radio-si470x 3-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 3276.486593][ T5905] radio-si470x 3-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 3276.539107][ T5905] radio-si470x 3-1:0.0: submitting int urb failed (-90) [ 3276.695286][T16662] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 3276.883375][ T5905] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 3276.953987][ T5905] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22 [ 3277.025046][ T5905] usb 3-1: USB disconnect, device number 21 [ 3277.234111][ T7895] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 3277.399122][ T7895] usb 6-1: Using ep0 maxpacket: 16 [ 3277.409935][ T7895] usb 6-1: config 0 has no interfaces? [ 3277.416904][ T7895] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3277.427082][ T7895] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3277.445645][ T7895] usb 6-1: Manufacturer: syz [ 3277.475789][ T7895] usb 6-1: config 0 descriptor?? [ 3277.549072][ T5905] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 3277.706893][ T7913] usb 6-1: USB disconnect, device number 94 [ 3277.724237][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3277.737722][ T5905] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0a30, bcdDevice= 0.00 [ 3277.749537][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3277.783263][ T5905] usb 3-1: config 0 descriptor?? [ 3277.804856][ T5905] usbhid 3-1:0.0: can't add hid device: -22 [ 3277.814574][ T5905] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 3278.449210][T16712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3278.506143][T16712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3278.799832][T16679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3278.808786][T16679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3280.089360][ T7904] usb 3-1: USB disconnect, device number 22 [ 3280.115619][ T5905] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 3280.303449][ T5905] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3280.324268][ T5905] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 3280.399641][ T5905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3280.431877][ T5905] usb 6-1: config 0 descriptor?? [ 3280.456259][ T5905] pwc: Askey VC010 type 2 USB webcam detected. [ 3280.779929][T16761] netlink: 72 bytes leftover after parsing attributes in process `syz.1.10744'. [ 3280.790785][T16761] netlink: 64 bytes leftover after parsing attributes in process `syz.1.10744'. [ 3280.867409][T16732] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10739'. [ 3280.882848][ T5905] pwc: recv_control_msg error -32 req 02 val 2b00 [ 3281.084828][ T5905] pwc: recv_control_msg error -32 req 02 val 2700 [ 3281.110100][ T5905] pwc: recv_control_msg error -32 req 02 val 2c00 [ 3281.136828][ T5905] pwc: recv_control_msg error -32 req 04 val 1000 [ 3281.162587][ T5905] pwc: recv_control_msg error -32 req 04 val 1300 [ 3281.182976][ T5905] pwc: recv_control_msg error -32 req 04 val 1400 [ 3281.458974][ T7895] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 3281.488945][ T7904] usb 3-1: new low-speed USB device number 23 using dummy_hcd [ 3281.609468][ T7895] usb 5-1: Using ep0 maxpacket: 32 [ 3281.622951][ T7895] usb 5-1: config 1 interface 0 has no altsetting 0 [ 3281.636400][ T7895] usb 5-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.40 [ 3281.647800][ T7904] usb 3-1: Invalid ep0 maxpacket: 64 [ 3281.664689][ T7895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3281.673225][ T7895] usb 5-1: Product: 낭燉鏯珛诞胪ᵝ娓苾䗝暲犯ꐯ꛰㴃 [ 3281.682078][ T7895] usb 5-1: Manufacturer: 㰁 [ 3281.687012][ T7895] usb 5-1: SerialNumber: syz [ 3281.789545][ T7904] usb 3-1: new low-speed USB device number 24 using dummy_hcd [ 3281.903757][T16770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3281.918761][T16770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3281.942064][T16787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3281.969229][ T7904] usb 3-1: Invalid ep0 maxpacket: 64 [ 3281.975359][ T7904] usb usb3-port1: attempt power cycle [ 3281.982917][T16787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3281.984869][T16770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3282.011086][T16770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3282.073801][ T7895] usbhid 5-1:1.0: can't add hid device: -71 [ 3282.095763][ T7895] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 3282.132040][ T7895] usb 5-1: USB disconnect, device number 13 [ 3282.339004][ T7904] usb 3-1: new low-speed USB device number 25 using dummy_hcd [ 3282.370371][ T7904] usb 3-1: Invalid ep0 maxpacket: 64 [ 3282.519329][ T7904] usb 3-1: new low-speed USB device number 26 using dummy_hcd [ 3282.540461][ T7904] usb 3-1: Invalid ep0 maxpacket: 64 [ 3282.553635][ T7904] usb usb3-port1: unable to enumerate USB device [ 3282.961261][ T5905] pwc: recv_control_msg error -71 req 02 val 2000 [ 3282.986284][ T5905] pwc: recv_control_msg error -71 req 02 val 2100 [ 3283.010877][ T5905] pwc: recv_control_msg error -71 req 04 val 1500 [ 3283.018313][ T5905] pwc: recv_control_msg error -71 req 02 val 2500 [ 3283.040254][ T5905] pwc: recv_control_msg error -71 req 02 val 2400 [ 3283.065485][ T5905] pwc: recv_control_msg error -71 req 02 val 2600 [ 3283.236451][ T5905] pwc: recv_control_msg error -71 req 02 val 2900 [ 3283.243823][ T5905] pwc: recv_control_msg error -71 req 02 val 2800 [ 3283.262980][ T5905] pwc: recv_control_msg error -71 req 04 val 1100 [ 3283.271728][ T5905] pwc: recv_control_msg error -71 req 04 val 1200 [ 3283.429165][ T5905] pwc: Registered as video103. [ 3283.458491][ T5905] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input203 [ 3283.515689][ T5905] usb 6-1: USB disconnect, device number 95 [ 3283.559305][ T7904] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 3283.653682][T16847] netlink: 'syz.5.10756': attribute type 10 has an invalid length. [ 3283.730171][ T7904] usb 2-1: Using ep0 maxpacket: 16 [ 3283.740749][ T7904] usb 2-1: config index 0 descriptor too short (expected 25973, got 56) [ 3283.753546][ T7904] usb 2-1: config 111 has too many interfaces: 116, using maximum allowed: 32 [ 3283.784004][ T7904] usb 2-1: config 111 has 0 interfaces, different from the descriptor's value: 116 [ 3283.814366][ T7904] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3283.824825][ T7904] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3283.886988][ T7904] usb 2-1: Manufacturer: syz [ 3284.112573][T16821] rtc_cmos 00:00: Alarms can be up to one day in the future [ 3284.131970][ T7907] rtc_cmos 00:00: Alarms can be up to one day in the future [ 3284.140895][ T7907] rtc_cmos 00:00: Alarms can be up to one day in the future [ 3284.149097][ T7907] rtc_cmos 00:00: Alarms can be up to one day in the future [ 3284.159506][ T7907] rtc_cmos 00:00: Alarms can be up to one day in the future [ 3284.167128][ T7907] rtc rtc0: __rtc_set_alarm: err=-22 [ 3284.255958][T16874] random: crng reseeded on system resumption [ 3284.399930][T16874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3284.462919][T16874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3284.557573][T16830] fuse: Unknown parameter 'NUgroUp00000000000000000000' [ 3284.577762][T16885] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10758'. [ 3285.601385][T16909] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3286.192238][T16919] netlink: 72 bytes leftover after parsing attributes in process `syz.5.10763'. [ 3286.204050][T16919] netlink: 64 bytes leftover after parsing attributes in process `syz.5.10763'. [ 3287.819262][ T7889] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 3287.833104][T16937] syzkaller0: entered promiscuous mode [ 3287.856567][T16937] syzkaller0: entered allmulticast mode [ 3287.979186][ T7889] usb 5-1: Using ep0 maxpacket: 16 [ 3287.986857][ T7889] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 3287.996446][ T7889] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3288.043314][ T7889] usb 5-1: config 0 has no interface number 0 [ 3288.095582][ T7889] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 3288.114932][ T7889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3288.180201][ T7904] usb 2-1: USB disconnect, device number 113 [ 3288.189716][ T7889] usb 5-1: Product: syz [ 3288.193955][ T7889] usb 5-1: Manufacturer: syz [ 3288.237189][ T7889] usb 5-1: SerialNumber: syz [ 3288.343573][ T7889] usb 5-1: config 0 descriptor?? [ 3288.405643][ T7889] uvcvideo 5-1:0.105: Found Unit with invalid ID 0 [ 3288.606832][ T7889] uvcvideo 5-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 3288.693538][T16966] netlink: 72 bytes leftover after parsing attributes in process `syz.0.10768'. [ 3288.705973][T16966] netlink: 64 bytes leftover after parsing attributes in process `syz.0.10768'. [ 3288.787140][ T7889] uvcvideo 5-1:0.105: No valid video chain found. [ 3288.829292][ T7911] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 3288.852215][ T7889] usb 5-1: USB disconnect, device number 14 [ 3288.994726][ T7911] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3289.007875][ T7911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3289.034696][ T7911] usb 2-1: Product: syz [ 3289.043737][ T7911] usb 2-1: Manufacturer: syz [ 3289.054257][ T7911] usb 2-1: SerialNumber: syz [ 3289.081686][ T7911] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3289.099972][ T7907] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3289.321739][ T7911] usb 2-1: USB disconnect, device number 114 [ 3289.889038][ T7889] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 3290.048975][ T7889] usb 6-1: Using ep0 maxpacket: 32 [ 3290.061603][ T7889] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 3290.086710][ T7889] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 3290.113492][ T7889] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3290.135315][ T7889] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 3290.179567][ T7889] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 3290.195241][ T7907] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 3290.202441][ T7889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3290.217371][ T7907] ath9k_htc: Failed to initialize the device [ 3290.234053][ T7889] usb 6-1: Product: syz [ 3290.279628][ T7889] usb 6-1: Manufacturer: syz [ 3290.284872][ T7889] usb 6-1: SerialNumber: syz [ 3290.310035][ T7911] usb 2-1: ath9k_htc: USB layer deinitialized [ 3290.584116][ C0] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 3290.602173][ T7889] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input205 [ 3290.839602][ T7889] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 3290.851174][ T7889] (id 0x00) [ 3291.079048][ T7889] rc_core: IR keymap rc-imon-pad not found [ 3291.093680][ T7889] Registered IR keymap rc-empty [ 3291.098718][ T7889] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 3291.152778][ T7889] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 3291.214136][ T7889] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0 [ 3291.279354][ T7889] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0/input206 [ 3291.299186][ T7907] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 3291.345733][ T7889] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:96> initialized [ 3291.474713][ T7907] usb 2-1: Using ep0 maxpacket: 32 [ 3291.486290][T17029] tipc: Enabled bearer , priority 0 [ 3291.494753][T17029] mac80211_hwsim hwsim96 syzkaller0: entered promiscuous mode [ 3291.514186][T17029] mac80211_hwsim hwsim96 syzkaller0: entered allmulticast mode [ 3291.531585][ T7907] usb 2-1: config 1 has an invalid interface number: 79 but max is 0 [ 3291.543537][ T7907] usb 2-1: config 1 has an invalid interface number: 22 but max is 0 [ 3291.573292][ T7907] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 3291.599950][ T7907] usb 2-1: config 1 has no interface number 0 [ 3291.618393][ T7907] usb 2-1: config 1 has no interface number 1 [ 3291.622970][T17029] tipc: Resetting bearer [ 3291.651175][ T7907] usb 2-1: config 1 interface 79 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 3291.688736][ T7907] usb 2-1: config 1 interface 79 altsetting 4 has 3 endpoint descriptors, different from the interface descriptor's value: 7 [ 3291.732488][ T7907] usb 2-1: too many endpoints for config 1 interface 22 altsetting 165: 33, using maximum allowed: 30 [ 3291.759290][ T7907] usb 2-1: config 1 interface 22 altsetting 165 has an invalid descriptor for endpoint zero, skipping [ 3291.799058][ T7907] usb 2-1: config 1 interface 22 altsetting 165 bulk endpoint 0xB has invalid maxpacket 8 [ 3291.987020][ T7907] usb 2-1: config 1 interface 22 altsetting 165 has a duplicate endpoint with address 0xB, skipping [ 3292.028384][ T7907] usb 2-1: config 1 interface 22 altsetting 165 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 3292.065718][ T7907] usb 2-1: config 1 interface 22 altsetting 165 has 4 endpoint descriptors, different from the interface descriptor's value: 33 [ 3292.148535][ T7907] usb 2-1: config 1 interface 79 has no altsetting 0 [ 3292.186221][ T7907] usb 2-1: config 1 interface 22 has no altsetting 0 [ 3292.223103][ T7907] usb 2-1: New USB device found, idVendor=14aa, idProduct=0001, bcdDevice=f3.41 [ 3292.270278][ T7907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3292.305385][ T7907] usb 2-1: Product: syz [ 3292.315906][ T7907] usb 2-1: Manufacturer: syz [ 3292.359825][ T7907] usb 2-1: SerialNumber: syz [ 3292.459898][ T7889] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 3292.520826][ T5930] tipc: Node number set to 1034256601 [ 3292.661141][ T7889] usb 3-1: too many configurations: 13, using maximum allowed: 8 [ 3292.811110][ T7889] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 3292.830201][ T7889] usb 3-1: can't read configurations, error -61 [ 3293.131467][ T7889] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 3293.411053][ T7889] usb 3-1: too many configurations: 13, using maximum allowed: 8 [ 3293.430652][ T7889] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 3293.452201][ T7889] usb 3-1: can't read configurations, error -61 [ 3293.499424][ T7889] usb usb3-port1: attempt power cycle [ 3293.766068][T17062] netlink: 'syz.4.10782': attribute type 39 has an invalid length. [ 3293.879344][ T7889] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 3293.922018][ T7889] usb 3-1: too many configurations: 13, using maximum allowed: 8 [ 3293.942953][ T7889] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 3293.952692][ T7889] usb 3-1: can't read configurations, error -61 [ 3294.003108][ T5930] usb 6-1: USB disconnect, device number 96 [ 3294.099191][ T7889] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 3294.135681][ T7907] dvb-usb: found a 'AVerMedia AverTV DVBT USB1.1' in cold state, will try to load a firmware [ 3294.172655][ T7889] usb 3-1: too many configurations: 13, using maximum allowed: 8 [ 3294.183809][ T7907] usb 2-1: Direct firmware load for dvb-usb-dibusb-5.0.0.11.fw failed with error -2 [ 3294.223663][ T7889] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 3294.223743][ T7907] usb 2-1: Falling back to sysfs fallback for: dvb-usb-dibusb-5.0.0.11.fw [ 3294.247345][ T7889] usb 3-1: can't read configurations, error -61 [ 3294.285325][ T7889] usb usb3-port1: unable to enumerate USB device [ 3295.897790][T17144] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10793'. [ 3295.909789][T17144] netlink: 84 bytes leftover after parsing attributes in process `syz.5.10793'. [ 3296.240082][ T5905] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 3296.619024][ T5905] usb 3-1: Using ep0 maxpacket: 8 [ 3296.634193][ T5905] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 3296.673686][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3296.715589][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3296.755071][ T5905] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 3296.799206][ T5905] usb 3-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 3296.813133][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3296.919888][ T5905] usb 3-1: config 0 descriptor?? [ 3297.224930][T17155] netlink: 72 bytes leftover after parsing attributes in process `syz.1.10796'. [ 3297.276983][T17155] netlink: 64 bytes leftover after parsing attributes in process `syz.1.10796'. [ 3297.343451][ T5905] hid (null): report_id 0 is invalid [ 3297.395540][ T5905] redragon 0003:0C45:760B.00C9: report_id 0 is invalid [ 3297.433721][ T5905] redragon 0003:0C45:760B.00C9: item 0 1 1 8 parsing failed [ 3297.460675][ T5905] redragon 0003:0C45:760B.00C9: probe with driver redragon failed with error -22 [ 3297.552370][ T5905] usb 3-1: USB disconnect, device number 31 [ 3298.207881][T17187] tipc: Enabling of bearer rejected, already enabled [ 3298.906817][T17211] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10804'. [ 3298.916171][T17211] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10804'. [ 3298.970320][T17211] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10804'. [ 3299.373820][T17224] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 3301.715501][T17263] tipc: Enabled bearer , priority 0 [ 3301.742959][T17263] syzkaller0: entered promiscuous mode [ 3301.781259][T17263] syzkaller0: entered allmulticast mode [ 3301.796833][T17263] tipc: Resetting bearer [ 3301.828227][T17262] tipc: Resetting bearer [ 3301.890026][T17262] tipc: Disabling bearer [ 3302.757980][T17307] xt_hashlimit: max too large, truncated to 1048576 [ 3302.812703][T17308] syzkaller0: entered promiscuous mode [ 3302.818511][T17308] syzkaller0: entered allmulticast mode [ 3304.410959][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 3304.410977][ T30] audit: type=1326 audit(1770138565.890:3617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17337 comm="syz.0.10832" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb127b9aeb9 code=0x0 [ 3304.954285][T17352] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10836'. [ 3304.970463][T17352] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10836'. [ 3305.322377][T17366] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10839'. [ 3306.584269][T14588] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 3308.009012][ T7911] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 3308.184979][ T7911] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3308.239117][ T7911] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 3308.252666][ T7911] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3308.262304][ T7911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3308.359370][T17417] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 3308.382977][ T7911] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 3308.830866][ T7911] usb 3-1: USB disconnect, device number 32 [ 3309.657774][T17482] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10864'. [ 3309.669868][ T5905] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 3309.838917][ T5905] usb 6-1: Using ep0 maxpacket: 8 [ 3310.093181][ T5905] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 3310.109603][ T5905] usb 6-1: config 0 has no interface number 0 [ 3310.115998][ T5905] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3310.147642][ T5905] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 3310.184933][ T5905] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3310.227618][ T5905] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 3310.287759][ T5905] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 3310.327722][ T5905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3310.370314][ T5905] usb 6-1: config 0 descriptor?? [ 3310.423528][ T5905] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 3310.647219][ T5905] usb 6-1: USB disconnect, device number 97 [ 3310.653418][ C1] ldusb 6-1:0.55: usb_submit_urb failed (-19) [ 3310.670218][T17471] ldusb 6-1:0.55: Couldn't submit interrupt_out_urb -19 [ 3310.717390][ T5905] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 3313.238123][T17557] netlink: 'syz.4.10881': attribute type 13 has an invalid length. [ 3313.558662][T17557] bridge0: port 2(bridge_slave_1) entered disabled state [ 3313.566451][T17557] bridge0: port 1(bridge_slave_0) entered disabled state [ 3313.914007][T17557] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3313.990708][T17557] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3315.103814][T17557] hsr0: left allmulticast mode [ 3315.108723][T17557] hsr_slave_0: left allmulticast mode [ 3315.138912][T17557] hsr_slave_1: left allmulticast mode [ 3315.299231][ T30] audit: type=1326 audit(1770138576.790:3618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17586 comm="syz.0.10888" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb127b9aeb9 code=0x0 [ 3315.502787][ T6523] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3315.530090][ T6523] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3315.560686][ T6523] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3315.599516][ T6523] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3316.784851][T17603] syz_tun: entered allmulticast mode [ 3316.827540][T17603] dvmrp6: entered allmulticast mode [ 3321.045606][ T7911] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 3321.275472][ T7911] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3321.327097][ T7911] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 3321.352530][ T7911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3321.377178][ T7911] usb 5-1: Product: syz [ 3321.388317][ T7911] usb 5-1: Manufacturer: syz [ 3321.396903][ T7911] usb 5-1: SerialNumber: syz [ 3321.424730][ T7911] usb 5-1: config 0 descriptor?? [ 3321.471187][ T7911] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 3321.688019][ T30] audit: type=1326 audit(1770138583.180:3619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17707 comm="syz.1.10911" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0b8c59aeb9 code=0x0 [ 3321.901711][T15448] udevd[15448]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3322.453414][T17718] xt_TPROXY: Can be used only with -p tcp or -p udp [ 3324.379419][T17744] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10918'. [ 3324.410044][T17744] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10918'. [ 3324.428581][ T5905] usb 5-1: USB disconnect, device number 15 [ 3324.469624][T17744] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10918'. [ 3324.500888][ T5930] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 3324.661617][ T5930] usb 3-1: device descriptor read/64, error -71 [ 3324.947168][ T5930] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 3325.090136][ T5930] usb 3-1: device descriptor read/64, error -71 [ 3325.186636][T17775] xt_hashlimit: max too large, truncated to 1048576 [ 3325.249663][ T5930] usb usb3-port1: attempt power cycle [ 3325.370538][T17777] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10923'. [ 3325.598967][ T5930] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 3325.623293][ T5930] usb 3-1: device descriptor read/8, error -71 [ 3326.062081][ T5930] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 3326.130017][ T5930] usb 3-1: device descriptor read/8, error -71 [ 3326.239474][ T5930] usb usb3-port1: unable to enumerate USB device [ 3326.929310][ T5930] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 3327.133167][ T5930] usb 6-1: Using ep0 maxpacket: 32 [ 3327.163207][ T5930] usb 6-1: config 2 has an invalid interface number: 88 but max is 0 [ 3327.172952][ T5930] usb 6-1: config 2 has no interface number 0 [ 3327.179657][ T5930] usb 6-1: config 2 interface 88 has no altsetting 0 [ 3327.230435][ T5930] usb 6-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 3327.260404][ T5930] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3327.277374][ T5930] usb 6-1: Product: syz [ 3327.287504][ T5930] usb 6-1: Manufacturer: syz [ 3327.319405][ T5930] usb 6-1: SerialNumber: syz [ 3327.388976][ T5905] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 3327.597665][T17816] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10930'. [ 3327.617842][T17816] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10930'. [ 3327.648951][ T5905] usb 5-1: device descriptor read/64, error -71 [ 3327.779109][ T7895] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 3327.852096][T17818] loop9: detected capacity change from 0 to 7 [ 3327.897450][ T5905] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 3327.905197][T17818] Dev loop9: unable to read RDB block 7 [ 3327.905275][T17818] loop9: AHDI p1 p2 p3 [ 3327.905308][T17818] loop9: partition table partially beyond EOD, truncated [ 3327.985960][T17818] loop9: p1 start 1601398130 is beyond EOD, truncated [ 3327.993342][ T7895] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3328.004889][T17818] loop9: p2 start 1702059890 is beyond EOD, truncated [ 3328.060193][ T7895] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 3328.079347][ T5905] usb 5-1: device descriptor read/64, error -71 [ 3328.127179][ T7895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3328.175254][ T7895] usb 3-1: Product: syz [ 3328.190822][ T5905] usb usb5-port1: attempt power cycle [ 3328.208260][ T7895] usb 3-1: Manufacturer: syz [ 3328.222188][ T7895] usb 3-1: SerialNumber: syz [ 3328.259694][ T7895] usb 3-1: config 0 descriptor?? [ 3328.461370][ T7895] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 3328.530479][T16309] udevd[16309]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3328.549279][ T5905] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 3328.560111][ T5930] asix 6-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 3328.596192][ T5930] asix 6-1:2.88: probe with driver asix failed with error -71 [ 3328.608127][ T5905] usb 5-1: device descriptor read/8, error -71 [ 3328.657951][ T5930] usb 6-1: USB disconnect, device number 98 [ 3328.859960][ T5905] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 3328.887552][T17849] xt_TPROXY: Can be used only with -p tcp or -p udp [ 3328.902440][ T5905] usb 5-1: device descriptor read/8, error -71 [ 3329.019770][ T5905] usb usb5-port1: unable to enumerate USB device [ 3330.333986][T17875] xt_hashlimit: max too large, truncated to 1048576 [ 3330.451213][ T7889] usb 3-1: USB disconnect, device number 37 [ 3331.626742][T17899] netlink: 72 bytes leftover after parsing attributes in process `syz.4.10940'. [ 3332.919460][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 3332.926202][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 3335.143802][T17957] mac80211_hwsim hwsim96 syzkaller0: left promiscuous mode [ 3335.151413][T17957] mac80211_hwsim hwsim96 syzkaller0: left allmulticast mode [ 3335.500731][T17960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10951'. [ 3335.532516][T17960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10951'. [ 3335.558704][T17960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10951'. [ 3335.720564][T17964] bond5: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 3335.851182][T17964] bond5 (unregistering): Released all slaves [ 3336.086673][T18031] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 3336.477600][T18038] netlink: 'syz.1.10955': attribute type 6 has an invalid length. [ 3336.749601][ T7895] usb 6-1: new full-speed USB device number 99 using dummy_hcd [ 3336.925300][ T7895] usb 6-1: config 1 has an invalid descriptor of length 84, skipping remainder of the config [ 3336.946755][ T7895] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3336.966825][ T7895] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3336.987685][ T7895] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3337.007369][ T7895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3337.021098][ T7895] usb 6-1: Product: syz [ 3337.036453][ T7895] usb 6-1: Manufacturer: syz [ 3337.048806][ T7895] usb 6-1: SerialNumber: syz [ 3337.082650][ T7895] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 3337.108220][ T7895] cdc_ncm 6-1:1.0: bind() failure [ 3337.756356][T18075] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 3339.217430][T18122] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10966'. [ 3339.263095][T18122] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10966'. [ 3339.970902][ T5905] usb 6-1: USB disconnect, device number 99 [ 3340.158940][ T7889] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 3340.288949][ T7889] usb 3-1: device descriptor read/64, error -71 [ 3340.539296][T18176] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 3340.659799][ T7889] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 3340.949025][ T7889] usb 3-1: device descriptor read/64, error -71 [ 3341.060054][ T7889] usb usb3-port1: attempt power cycle [ 3341.630545][ T7889] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 3341.690949][ T7889] usb 3-1: device descriptor read/8, error -71 [ 3342.018973][ T7889] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 3342.039728][ T7889] usb 3-1: device descriptor read/8, error -71 [ 3342.139075][ T5930] usb 6-1: new low-speed USB device number 100 using dummy_hcd [ 3342.159368][ T7889] usb usb3-port1: unable to enumerate USB device [ 3342.308677][T18210] netlink: 72 bytes leftover after parsing attributes in process `syz.4.10980'. [ 3342.321372][ T5930] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 3342.330375][ T5930] usb 6-1: config 0 has no interface number 0 [ 3342.336562][ T5930] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3342.397799][ T5930] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 3342.416976][ T5930] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 3342.674579][ T5930] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 3342.686065][ T5930] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 3342.736220][ T5930] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 3342.796910][ T5930] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 3342.824648][ T5930] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3342.854838][ T5930] usb 6-1: config 0 descriptor?? [ 3342.864782][T18193] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 3342.884186][T18193] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 3342.944399][ T5930] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 3343.183979][ T5905] usb 6-1: USB disconnect, device number 100 [ 3343.192831][ C1] ldusb 6-1:0.55: usb_submit_urb failed (-19) [ 3343.231184][ T5905] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 3343.386002][T18193] binder: BINDER_SET_CONTEXT_MGR already set [ 3343.399515][T18193] binder: 18190:18193 ioctl 4018620d 200000004a80 returned -16 [ 3343.429253][ T30] audit: type=1326 audit(1770138604.940:3620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18190 comm="syz.5.10978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8239aeb9 code=0x7ffc0000 [ 3343.498953][ T30] audit: type=1326 audit(1770138604.940:3621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18190 comm="syz.5.10978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8239aeb9 code=0x7ffc0000 [ 3343.539067][ T7909] usb 3-1: new low-speed USB device number 42 using dummy_hcd [ 3343.539603][ T30] audit: type=1326 audit(1770138604.940:3622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18190 comm="syz.5.10978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7fce8239aeb9 code=0x7ffc0000 [ 3343.609191][ T30] audit: type=1326 audit(1770138604.940:3623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18190 comm="syz.5.10978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8239aeb9 code=0x7ffc0000 [ 3343.649125][ T30] audit: type=1326 audit(1770138604.940:3624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18190 comm="syz.5.10978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8239aeb9 code=0x7ffc0000 [ 3343.714922][ T30] audit: type=1326 audit(1770138604.940:3625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18190 comm="syz.5.10978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fce8239aeb9 code=0x7ffc0000 [ 3343.726549][ T7909] usb 3-1: Invalid ep0 maxpacket: 32 [ 3343.781570][ T30] audit: type=1326 audit(1770138604.940:3626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18190 comm="syz.5.10978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8239aeb9 code=0x7ffc0000 [ 3343.836320][ T30] audit: type=1326 audit(1770138604.940:3627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18190 comm="syz.5.10978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8239aeb9 code=0x7ffc0000 [ 3343.920986][ T7909] usb 3-1: new low-speed USB device number 43 using dummy_hcd [ 3344.039086][ T5905] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 3344.089103][ T7909] usb 3-1: Invalid ep0 maxpacket: 32 [ 3344.098040][ T7909] usb usb3-port1: attempt power cycle [ 3344.127655][T18257] openvswitch: netlink: IP tunnel dst address not specified [ 3344.169574][ T5905] usb 5-1: device descriptor read/64, error -71 [ 3344.299615][ T7911] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 3344.409056][ T5905] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 3344.449170][ T7911] usb 6-1: Using ep0 maxpacket: 32 [ 3344.454525][ T7909] usb 3-1: new low-speed USB device number 44 using dummy_hcd [ 3344.464030][ T7911] usb 6-1: config 0 has an invalid interface number: 114 but max is 0 [ 3344.472613][ T7911] usb 6-1: config 0 has no interface number 0 [ 3344.478753][ T7911] usb 6-1: config 0 interface 114 has no altsetting 0 [ 3344.486515][ T7911] usb 6-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=a0.86 [ 3344.496189][ T7909] usb 3-1: Invalid ep0 maxpacket: 32 [ 3344.502269][ T7911] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3344.513759][ T7911] usb 6-1: config 0 descriptor?? [ 3344.559072][ T5905] usb 5-1: device descriptor read/64, error -71 [ 3344.629024][ T7909] usb 3-1: new low-speed USB device number 45 using dummy_hcd [ 3344.649900][ T7909] usb 3-1: Invalid ep0 maxpacket: 32 [ 3344.655749][ T7909] usb usb3-port1: unable to enumerate USB device [ 3344.669368][ T5905] usb usb5-port1: attempt power cycle [ 3344.727540][ T7911] usb 6-1: string descriptor 0 read error: -71 [ 3344.753433][ T7911] usb_ehset_test 6-1:0.114: probe with driver usb_ehset_test failed with error -32 [ 3344.768350][ T7911] usb 6-1: USB disconnect, device number 101 [ 3345.008930][ T5905] usb 5-1: new low-speed USB device number 22 using dummy_hcd [ 3345.029756][ T5905] usb 5-1: device descriptor read/8, error -71 [ 3345.269167][ T5905] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 3345.460611][ T5905] usb 5-1: device descriptor read/8, error -71 [ 3345.533743][T18284] bridge0: port 3(erspan0) entered disabled state [ 3345.569250][ T5905] usb usb5-port1: unable to enumerate USB device [ 3345.622938][T18284] bridge0: port 2(bridge_slave_1) entered disabled state [ 3345.630499][T18284] bridge0: port 1(bridge_slave_0) entered disabled state [ 3345.904206][T18284] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3345.919626][T18284] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3346.116874][ T6534] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3346.126614][ T6534] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3346.139036][ T6534] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3346.152483][ T6534] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3346.428105][T18302] hma224): entered promiscuous mode [ 3347.845683][T18348] netlink: 72 bytes leftover after parsing attributes in process `syz.4.10998'. [ 3348.044762][T18343] netlink: 64 bytes leftover after parsing attributes in process `syz.4.10998'. [ 3348.179862][T18357] netlink: 169980 bytes leftover after parsing attributes in process `syz.5.11000'. [ 3348.870662][ T7895] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 3349.108219][ T7895] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 3349.126955][ T7895] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 3349.147815][ T7895] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 3349.179057][ T7895] usb 6-1: config 220 has no interface number 2 [ 3349.195796][ T7895] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 3349.224463][ T7895] usb 6-1: config 220 interface 0 has no altsetting 0 [ 3349.242493][ T7895] usb 6-1: config 220 interface 76 has no altsetting 0 [ 3349.287164][ T7895] usb 6-1: config 220 interface 1 has no altsetting 0 [ 3349.323670][ T7895] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 3349.333903][ T7895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3349.360130][ T7895] usb 6-1: Product: syz [ 3349.364356][ T7895] usb 6-1: Manufacturer: syz [ 3349.385854][ T7895] usb 6-1: SerialNumber: syz [ 3349.636160][ T7895] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 3349.657161][ T7895] uvcvideo 6-1:220.0: No valid video chain found. [ 3349.685984][ T7895] usb 6-1: selecting invalid altsetting 0 [ 3349.732654][ T7895] usb 6-1: selecting invalid altsetting 0 [ 3349.738572][ T7895] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 3349.800699][ T7895] usb 6-1: USB disconnect, device number 102 [ 3350.259369][T18394] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11005'. [ 3350.471809][T18402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3350.501224][T18402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3350.545645][T18409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3350.576043][T18409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3350.779036][ T5930] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 3350.798990][ T7904] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 3350.970511][ T5930] usb 6-1: Using ep0 maxpacket: 16 [ 3350.980486][ T5930] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 3350.992663][ T7904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3351.005595][ T7904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3351.015805][ T5930] usb 6-1: config 1 has an invalid descriptor of length 249, skipping remainder of the config [ 3351.026941][ T7904] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3351.041296][ T5930] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3351.056887][ T5930] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3351.066562][ T5930] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3351.123216][ T7904] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3351.134382][ T5930] usb 6-1: Product: syz [ 3351.144565][ T7904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3351.153304][ T5930] usb 6-1: Manufacturer: syz [ 3351.162663][ T5930] usb 6-1: SerialNumber: syz [ 3351.179273][ T7904] usb 5-1: config 0 descriptor?? [ 3351.403706][ T5930] usb 6-1: 0:2 : does not exist [ 3351.523914][ T5930] usb 6-1: USB disconnect, device number 103 [ 3351.679254][ T7904] plantronics 0003:047F:FFFF.00CA: unbalanced delimiter at end of report description [ 3351.708802][ T7904] plantronics 0003:047F:FFFF.00CA: parse failed [ 3351.738648][ T7904] plantronics 0003:047F:FFFF.00CA: probe with driver plantronics failed with error -22 [ 3351.834406][ T7904] usb 5-1: USB disconnect, device number 24 [ 3351.975046][T15448] udevd[15448]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3352.607900][T18487] veth1_to_bond: entered allmulticast mode [ 3352.879043][ T5930] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 3353.122057][ T5930] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 3353.137321][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3353.154637][ T5930] usb 5-1: config 0 descriptor?? [ 3353.519016][ T7895] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 3353.590009][T18489] openvswitch: netlink: IP tunnel dst address not specified [ 3353.689091][ T7895] usb 3-1: Using ep0 maxpacket: 32 [ 3353.695439][ T7895] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 3353.711107][ T7895] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 3353.719513][ T7895] usb 3-1: config 0 has no interface number 0 [ 3353.727193][ T7895] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 3353.735561][ T7895] usb 3-1: config 0 has no interface number 0 [ 3353.744631][ T7895] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 3353.753832][ T7895] usb 3-1: config 0 has no interface number 0 [ 3353.772020][ T7895] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 3353.780773][ T7895] usb 3-1: config 0 has no interface number 0 [ 3353.788570][ T7895] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 3353.797610][ T7895] usb 3-1: config 0 has no interface number 0 [ 3353.808293][ T7895] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 3353.818140][ T7895] usb 3-1: config 0 has no interface number 0 [ 3353.826638][ T7895] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 3353.835721][ T7895] usb 3-1: config 0 has no interface number 0 [ 3353.844787][ T7895] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 3353.853874][ T7895] usb 3-1: config 0 has no interface number 0 [ 3353.865237][ T7895] usb 3-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 3353.882377][ T7895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3353.896028][ T7895] usb 3-1: Product: syz [ 3353.901103][ T7895] usb 3-1: Manufacturer: syz [ 3353.905987][ T7895] usb 3-1: SerialNumber: syz [ 3353.915240][ T7895] usb 3-1: config 0 descriptor?? [ 3353.927289][ T7895] etas_es58x 3-1:0.2: Starting syz syz (Serial Number syz) [ 3354.127840][ T7895] etas_es58x 3-1:0.2: could not parse product info: '424242424242' [ 3354.255540][ T7895] usb 3-1: USB disconnect, device number 47 [ 3354.281129][ T7895] etas_es58x 3-1:0.2: Disconnecting syz syz [ 3354.350615][T18538] netlink: 'syz.0.11023': attribute type 2 has an invalid length. [ 3354.363686][T18538] netlink: 'syz.0.11023': attribute type 4 has an invalid length. [ 3354.373059][T18538] netlink: 84 bytes leftover after parsing attributes in process `syz.0.11023'. [ 3354.454505][ T5930] usb 5-1: Cannot set autoneg [ 3354.479318][ T5930] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 3354.504355][ T5930] usb 5-1: USB disconnect, device number 25 [ 3355.495170][T18487] veth1_to_bond: left allmulticast mode [ 3355.869037][ T5930] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 3356.079125][ T5930] usb 6-1: Using ep0 maxpacket: 32 [ 3356.090869][ T5930] usb 6-1: config 1 interface 0 has no altsetting 0 [ 3356.106503][ T5930] usb 6-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.40 [ 3356.294657][ T5930] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3356.344179][ T5930] usb 6-1: Product: Ꭷ뗀贓燤餠蒓䔳ꮰȁ蜈췳먪᪸牺哖䓠涗ݱ麊炮嬦岥瀪ᠵ뛲슏᧸拥詍廛펄졾枟剕賹ᎊ䗼皴㞩遢ᇢ樝ḕ㮊嬕藑긖쵹檦掔൸ૹ笎ᵆಂ [ 3356.370127][ T5930] usb 6-1: Manufacturer: 쎗艉栮흏㔀饢榦ﲹ [ 3356.388706][ T5930] usb 6-1: SerialNumber: ᐇ [ 3357.175598][ T5930] usbhid 6-1:1.0: can't add hid device: -71 [ 3357.181892][ T5930] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 3357.220751][ T5930] usb 6-1: USB disconnect, device number 104 [ 3357.724368][T18607] bond5: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 3357.993880][T18607] bond5 (unregistering): Released all slaves [ 3358.141320][ T5905] hid-generic 00A0:0006:0003.00CB: unknown main item tag 0x0 [ 3358.150053][ T5905] hid-generic 00A0:0006:0003.00CB: unknown main item tag 0x0 [ 3358.215537][ T5905] hid-generic 00A0:0006:0003.00CB: unknown main item tag 0x0 [ 3358.318587][ T5905] hid-generic 00A0:0006:0003.00CB: unknown main item tag 0x0 [ 3358.330070][ T5905] hid-generic 00A0:0006:0003.00CB: unknown main item tag 0x0 [ 3358.360596][ T5905] hid-generic 00A0:0006:0003.00CB: unknown main item tag 0x0 [ 3358.373348][ T5905] hid-generic 00A0:0006:0003.00CB: unknown main item tag 0x0 [ 3358.382006][ T5905] hid-generic 00A0:0006:0003.00CB: unknown main item tag 0x0 [ 3358.443894][ T5905] hid-generic 00A0:0006:0003.00CB: unknown main item tag 0x7 [ 3358.465171][ T5905] hid-generic 00A0:0006:0003.00CB: hidraw0: HID v0.05 Device [syz0] on syz0 [ 3358.559292][ T7911] usb 6-1: new full-speed USB device number 105 using dummy_hcd [ 3358.580654][ T7907] dvb-usb: did not find the firmware file 'dvb-usb-dibusb-5.0.0.11.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 3358.607244][ T7907] dvb_usb_dibusb_mb 2-1:1.79: probe with driver dvb_usb_dibusb_mb failed with error -22 [ 3358.675632][ T7907] dvb-usb: found a 'AVerMedia AverTV DVBT USB1.1' in cold state, will try to load a firmware [ 3358.721216][ T7907] usb 2-1: Direct firmware load for dvb-usb-dibusb-5.0.0.11.fw failed with error -2 [ 3358.731870][ T7911] usb 6-1: device descriptor read/64, error -71 [ 3358.767399][ T7907] usb 2-1: Falling back to sysfs fallback for: dvb-usb-dibusb-5.0.0.11.fw [ 3358.978992][ T7911] usb 6-1: new full-speed USB device number 106 using dummy_hcd [ 3359.037752][T18701] sg_read: process 1384 (syz.4.11035) changed security contexts after opening file descriptor, this is not allowed. [ 3359.166910][T18698] bond6: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 3359.201592][T18698] bond6 (unregistering): Released all slaves [ 3359.240051][ T7911] usb 6-1: device descriptor read/64, error -71 [ 3359.361364][ T7911] usb usb6-port1: attempt power cycle [ 3359.603591][T18768] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11037'. [ 3359.718941][ T7911] usb 6-1: new full-speed USB device number 107 using dummy_hcd [ 3359.739866][ T7911] usb 6-1: device descriptor read/8, error -71 [ 3359.783556][T18773] trusted_key: encrypted_key: insufficient parameters specified [ 3360.015369][T18780] : renamed from bond_slave_0 [ 3360.060324][ T7911] usb 6-1: new full-speed USB device number 108 using dummy_hcd [ 3360.124060][ T7911] usb 6-1: device descriptor read/8, error -71 [ 3360.259648][ T7911] usb usb6-port1: unable to enumerate USB device [ 3360.417815][T18791] bond2: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 3360.598668][T18791] bond2 (unregistering): Released all slaves [ 3363.828142][T18903] input: syz0 as /devices/virtual/input/input211 [ 3364.939291][T18929] FAULT_INJECTION: forcing a failure. [ 3364.939291][T18929] name failslab, interval 1, probability 0, space 0, times 0 [ 3364.998680][T18929] CPU: 1 UID: 0 PID: 18929 Comm: syz.5.11054 Tainted: G L syzkaller #0 PREEMPT(full) [ 3364.998715][T18929] Tainted: [L]=SOFTLOCKUP [ 3364.998724][T18929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 3364.998736][T18929] Call Trace: [ 3364.998745][T18929] [ 3364.998754][T18929] dump_stack_lvl+0xe8/0x150 [ 3364.998790][T18929] should_fail_ex+0x412/0x560 [ 3364.998826][T18929] should_failslab+0xa8/0x100 [ 3364.998853][T18929] __kvmalloc_node_noprof+0x166/0x8d0 [ 3364.998877][T18929] ? alloc_netdev_mqs+0xa6/0x11b0 [ 3364.998914][T18929] alloc_netdev_mqs+0xa6/0x11b0 [ 3364.998942][T18929] ? __pfx_ip6gre_tap_setup+0x10/0x10 [ 3364.998971][T18929] rtnl_create_link+0x31f/0xd70 [ 3364.999010][T18929] rtnl_newlink_create+0x277/0xb70 [ 3364.999039][T18929] ? __pfx___nla_validate_parse+0x10/0x10 [ 3364.999079][T18929] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 3364.999109][T18929] ? __pfx___mutex_lock+0x10/0x10 [ 3364.999144][T18929] ? ns_capable+0x89/0xe0 [ 3364.999177][T18929] rtnl_newlink+0x1666/0x1be0 [ 3364.999214][T18929] ? __pfx_rtnl_newlink+0x10/0x10 [ 3364.999241][T18929] ? __lock_acquire+0x6b5/0x2cf0 [ 3364.999276][T18929] ? __lock_acquire+0x6b5/0x2cf0 [ 3364.999311][T18929] ? __lock_acquire+0x6b5/0x2cf0 [ 3364.999338][T18929] ? unwind_next_frame+0xa5/0x23c0 [ 3364.999360][T18929] ? unwind_next_frame+0xa5/0x23c0 [ 3364.999379][T18929] ? is_bpf_text_address+0x26/0x2b0 [ 3364.999406][T18929] ? __lock_acquire+0x6b5/0x2cf0 [ 3364.999429][T18929] ? is_bpf_text_address+0x292/0x2b0 [ 3364.999445][T18929] ? is_bpf_text_address+0x26/0x2b0 [ 3364.999464][T18929] ? kernel_text_address+0xa5/0xe0 [ 3364.999484][T18929] ? __kernel_text_address+0xd/0x30 [ 3364.999502][T18929] ? unwind_get_return_address+0x4d/0x90 [ 3364.999524][T18929] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 3364.999559][T18929] ? __pfx_rtnl_newlink+0x10/0x10 [ 3364.999576][T18929] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 3364.999597][T18929] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 3364.999613][T18929] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3364.999630][T18929] ? __lock_acquire+0x6b5/0x2cf0 [ 3364.999661][T18929] netlink_rcv_skb+0x232/0x4b0 [ 3364.999679][T18929] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3364.999698][T18929] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 3364.999722][T18929] ? netlink_deliver_tap+0x2e/0x1b0 [ 3364.999743][T18929] netlink_unicast+0x80f/0x9b0 [ 3364.999772][T18929] ? __pfx_netlink_unicast+0x10/0x10 [ 3364.999795][T18929] ? __alloc_skb+0x193/0x390 [ 3364.999815][T18929] ? netlink_sendmsg+0x650/0xb40 [ 3364.999829][T18929] ? skb_put+0x11b/0x210 [ 3364.999850][T18929] netlink_sendmsg+0x813/0xb40 [ 3364.999873][T18929] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3364.999891][T18929] ? aa_sock_msg_perm+0xf1/0x1b0 [ 3364.999911][T18929] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3364.999929][T18929] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3364.999944][T18929] ____sys_sendmsg+0xa68/0xad0 [ 3364.999964][T18929] ? __might_fault+0xaf/0x130 [ 3364.999990][T18929] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3365.000017][T18929] ? import_iovec+0x73/0xa0 [ 3365.000041][T18929] ___sys_sendmsg+0x2a5/0x360 [ 3365.000060][T18929] ? __lock_acquire+0x6b5/0x2cf0 [ 3365.000084][T18929] ? __pfx____sys_sendmsg+0x10/0x10 [ 3365.000130][T18929] ? __fget_files+0x2a/0x420 [ 3365.000145][T18929] ? __fget_files+0x3a0/0x420 [ 3365.000169][T18929] __x64_sys_sendmsg+0x1bd/0x2a0 [ 3365.000191][T18929] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 3365.000218][T18929] ? __pfx_ksys_write+0x10/0x10 [ 3365.000248][T18929] do_syscall_64+0xe2/0xf80 [ 3365.000264][T18929] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3365.000278][T18929] ? trace_irq_disable+0x37/0x100 [ 3365.000292][T18929] ? clear_bhb_loop+0x60/0xb0 [ 3365.000310][T18929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3365.000325][T18929] RIP: 0033:0x7fce8239aeb9 [ 3365.000339][T18929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3365.000353][T18929] RSP: 002b:00007fce83173028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3365.000399][T18929] RAX: ffffffffffffffda RBX: 00007fce82615fa0 RCX: 00007fce8239aeb9 [ 3365.000414][T18929] RDX: 0000000008000014 RSI: 0000200000000000 RDI: 0000000000000003 [ 3365.000429][T18929] RBP: 00007fce83173090 R08: 0000000000000000 R09: 0000000000000000 [ 3365.000448][T18929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3365.000457][T18929] R13: 00007fce82616038 R14: 00007fce82615fa0 R15: 00007fce8273fa48 [ 3365.000482][T18929] [ 3365.004789][T18935] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11053'. [ 3365.869336][T14588] Bluetooth: hci2: command 0x0c1a tx timeout [ 3365.878489][ T7911] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 3365.886016][ T7911] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 3367.949558][ T7911] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 3367.949771][T14588] Bluetooth: hci4: command 0x0406 tx timeout [ 3367.966084][ T7911] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 3369.021461][T18996] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3343437945 (53495007120 ns) > initial count (52285443328 ns). Using initial count to start timer. [ 3370.110936][ T7911] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 3370.122361][T14588] Bluetooth: hci5: command 0x0406 tx timeout [ 3370.139434][ T7911] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 3371.670670][T19076] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11079'. [ 3372.349036][T14588] Bluetooth: hci0: command 0x0406 tx timeout [ 3372.355490][ T7911] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 3372.372847][ T7911] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 3374.588990][ T7911] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 3374.596004][T14588] Bluetooth: hci3: command 0x0406 tx timeout [ 3374.607113][ T7911] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 3374.861464][T19130] xt_hashlimit: max too large, truncated to 1048576 [ 3374.952395][ T5930] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 3374.960377][ T7895] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 3375.150652][ T7895] usb 6-1: Using ep0 maxpacket: 32 [ 3375.170735][ T5930] usb 3-1: config 0 has an invalid interface number: 37 but max is 0 [ 3375.189318][ T5930] usb 3-1: config 0 has no interface number 0 [ 3375.201768][ T7895] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 3375.218965][ T7895] usb 6-1: config 0 has no interface number 0 [ 3375.225511][ T7895] usb 6-1: config 0 interface 184 has no altsetting 0 [ 3375.260904][ T5930] usb 3-1: New USB device found, idVendor=2639, idProduct=0003, bcdDevice=fd.62 [ 3375.271034][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3375.279618][ T5930] usb 3-1: Product: syz [ 3375.284324][ T5930] usb 3-1: Manufacturer: syz [ 3375.291758][ T7895] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 3375.306213][ T7895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3375.318700][ T5930] usb 3-1: SerialNumber: syz [ 3375.339589][ T7895] usb 6-1: Product: syz [ 3375.356938][ T5930] usb 3-1: config 0 descriptor?? [ 3375.362470][ T7895] usb 6-1: Manufacturer: syz [ 3375.423343][ T7895] usb 6-1: SerialNumber: syz [ 3375.432471][ T5930] usb 3-1: can't set config #0, error -71 [ 3375.456906][ T7895] usb 6-1: config 0 descriptor?? [ 3375.471809][ T5930] usb 3-1: USB disconnect, device number 48 [ 3375.497215][ T7895] smsc75xx v1.0.0 [ 3376.045978][ T7895] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 3376.167938][ T7895] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 3376.201891][ T7895] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 3376.228490][ T7895] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 3376.274145][ T7895] usb 6-1: USB disconnect, device number 109 [ 3378.328954][ T7895] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 3378.459083][ T7895] usb 6-1: device descriptor read/64, error -71 [ 3378.749581][ T7895] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 3378.888941][ T7895] usb 6-1: device descriptor read/64, error -71 [ 3378.948948][ T7911] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 3378.999258][ T7895] usb usb6-port1: attempt power cycle [ 3379.109011][ T7911] usb 5-1: Using ep0 maxpacket: 8 [ 3379.116893][ T7911] usb 5-1: config 16 has an invalid interface number: 35 but max is 0 [ 3379.134118][ T7911] usb 5-1: config 16 has no interface number 0 [ 3379.144383][ T7911] usb 5-1: config 16 interface 35 has no altsetting 0 [ 3379.156397][ T7911] usb 5-1: New USB device found, idVendor=0af0, idProduct=d033, bcdDevice=10.3b [ 3379.172158][ T7911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3379.339032][ T7895] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 3379.370277][ T7895] usb 6-1: device descriptor read/8, error -71 [ 3379.405718][ T7911] usb 5-1: string descriptor 0 read error: -71 [ 3379.426815][ T7911] hso 5-1:16.35: Not our interface [ 3379.459613][ T7911] usb 5-1: USB disconnect, device number 26 [ 3379.556305][T19236] syzkaller0: entered promiscuous mode [ 3379.563371][T19236] syzkaller0: entered allmulticast mode [ 3379.627665][ T7895] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 3379.651603][ T7895] usb 6-1: device descriptor read/8, error -71 [ 3379.759568][ T7895] usb usb6-port1: unable to enumerate USB device [ 3379.798121][T19244] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11104'. [ 3380.418940][ T7895] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 3380.578997][ T7895] usb 5-1: Using ep0 maxpacket: 32 [ 3380.587630][ T7895] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 3380.598496][ T7895] usb 5-1: config 0 has no interface number 0 [ 3380.605792][ T7895] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 3380.621968][ T7895] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 3380.635966][ T7895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3380.666771][ T7895] usb 5-1: Product: syz [ 3380.677006][ T7895] usb 5-1: Manufacturer: syz [ 3380.687332][ T7895] usb 5-1: SerialNumber: syz [ 3380.704305][ T7895] usb 5-1: config 0 descriptor?? [ 3380.712457][T19252] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 3381.045252][T19252] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 3381.268317][T19252] bridge1: entered promiscuous mode [ 3381.274171][T19252] bridge1: entered allmulticast mode [ 3381.393792][T19276] netlink: 'syz.0.11109': attribute type 32 has an invalid length. [ 3381.413438][T19276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11109'. [ 3381.463461][T19276] bond6: Setting coupled_control to off (0) [ 3381.521473][T19252] netlink: 207416 bytes leftover after parsing attributes in process `syz.4.11106'. [ 3381.677488][T19319] Cannot find add_set index 0 as target [ 3381.773349][ T7895] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 3381.789560][ T7895] asix 5-1:0.188: probe with driver asix failed with error -61 [ 3382.253044][T19329] syzkaller0: entered promiscuous mode [ 3382.269042][T19329] syzkaller0: entered allmulticast mode [ 3382.457954][T19335] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11114'. [ 3382.773464][ T7911] usb 6-1: new full-speed USB device number 114 using dummy_hcd [ 3383.309123][ T7895] usb 5-1: USB disconnect, device number 27 [ 3383.517076][ T7911] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 3383.526310][ T7911] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3383.537914][ T7911] usb 6-1: config 0 has no interface number 0 [ 3383.546799][ T7911] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 3383.556763][ T7911] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3383.565216][ T7911] usb 6-1: Product: syz [ 3383.570359][ T7911] usb 6-1: Manufacturer: syz [ 3383.575021][ T7911] usb 6-1: SerialNumber: syz [ 3383.623519][ T7911] usb 6-1: config 0 descriptor?? [ 3383.636534][ T7911] hub 6-1:0.31: bad descriptor, ignoring hub [ 3383.643794][ T7911] hub 6-1:0.31: probe with driver hub failed with error -5 [ 3383.654749][ T7911] uvcvideo 6-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 3383.662653][ T7911] uvcvideo 6-1:0.31: Entity type for entity Output 6 was not initialized! [ 3383.674784][ T7911] uvcvideo 6-1:0.31: Failed to create links for entity 6 [ 3383.688953][ T7911] uvcvideo 6-1:0.31: Failed to register entities (-22). [ 3383.758190][T19370] netlink: 'syz.4.11118': attribute type 12 has an invalid length. [ 3383.771211][T19370] netlink: 'syz.4.11118': attribute type 29 has an invalid length. [ 3383.785589][T19370] netlink: 148 bytes leftover after parsing attributes in process `syz.4.11118'. [ 3383.795596][T19370] netlink: 43 bytes leftover after parsing attributes in process `syz.4.11118'. [ 3383.979304][ T7904] usb 6-1: USB disconnect, device number 114 [ 3384.118205][T19387] netlink: 64 bytes leftover after parsing attributes in process `syz.1.11121'. [ 3384.719530][T19398] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 3384.963970][T19402] netlink: 72 bytes leftover after parsing attributes in process `syz.5.11125'. [ 3384.976646][T19402] netlink: 64 bytes leftover after parsing attributes in process `syz.5.11125'. [ 3385.916341][T19415] netlink: 72 bytes leftover after parsing attributes in process `syz.4.11128'. [ 3386.795610][T19417] bond7: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 3386.847473][T19417] bond7 (unregistering): Released all slaves [ 3387.369842][T19484] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11130'. [ 3387.404821][T19486] netlink: 76 bytes leftover after parsing attributes in process `syz.2.11131'. [ 3388.204797][T19500] netlink: 112 bytes leftover after parsing attributes in process `syz.5.11133'. [ 3388.319151][T19499] syzkaller0: entered promiscuous mode [ 3388.325262][T19499] syzkaller0: entered allmulticast mode [ 3388.414687][T19510] netlink: 64 bytes leftover after parsing attributes in process `syz.2.11135'. [ 3388.462056][T19513] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11137'. [ 3388.910781][T19525] xt_hashlimit: max too large, truncated to 1048576 [ 3389.643476][T19533] netlink: 'syz.0.11142': attribute type 11 has an invalid length. [ 3391.829703][ T7895] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 3392.012202][ T7895] usb 3-1: Using ep0 maxpacket: 16 [ 3392.021118][ T7895] usb 3-1: unable to get BOS descriptor or descriptor too short [ 3392.030725][ T7895] usb 3-1: config 4 has an invalid interface number: 108 but max is 2 [ 3392.039727][ T7895] usb 3-1: config 4 has 1 interface, different from the descriptor's value: 3 [ 3392.048737][ T7895] usb 3-1: config 4 has no interface number 0 [ 3392.055886][ T7904] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 3392.068528][ T7895] usb 3-1: config 4 interface 108 has no altsetting 0 [ 3392.079875][ T7895] usb 3-1: New USB device found, idVendor=04e8, idProduct=8001, bcdDevice=68.01 [ 3392.089742][ T7895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3392.098945][ T7895] usb 3-1: Product: syz [ 3392.103873][ T7895] usb 3-1: Manufacturer: syz [ 3392.108671][ T7895] usb 3-1: SerialNumber: syz [ 3392.211680][ T7904] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3392.222529][ T7904] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3392.252016][ T7904] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 3392.262202][ T7904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 3392.270927][ T7904] usb 5-1: SerialNumber: syz [ 3394.370975][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 3394.377361][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 3394.452396][ T7895] usb 3-1: active config #4 != 1 ?? [ 3394.495603][ T7895] usb 3-1: USB disconnect, device number 49 [ 3394.884287][ T7904] usb 5-1: 0:2 : does not exist [ 3394.896746][ T7904] usb 5-1: unit 5 not found! [ 3394.939681][ T7904] usb 5-1: USB disconnect, device number 28 [ 3394.945980][ T7895] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 3394.987184][T15448] udevd[15448]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3395.122229][ T7895] usb 3-1: Using ep0 maxpacket: 8 [ 3395.132761][ T7895] usb 3-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 3395.142739][ T7895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3395.151145][ T7895] usb 3-1: Product: syz [ 3395.155928][ T7895] usb 3-1: Manufacturer: syz [ 3395.160976][ T7895] usb 3-1: SerialNumber: syz [ 3395.187985][ T7895] usb 3-1: config 0 descriptor?? [ 3395.214713][ T7895] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 3396.038779][T19652] gtp0: entered promiscuous mode [ 3396.044226][T19652] gtp0: entered allmulticast mode [ 3396.489050][T19584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3396.539119][T19584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3396.789497][ T7895] gspca_sonixj: reg_w1 err -110 [ 3396.802951][ T7895] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 3397.000195][ T7895] usb 3-1: USB disconnect, device number 50 [ 3397.679154][T19716] Cannot find set identified by id 0 to match [ 3397.718959][ T7895] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 3398.139196][ T7895] usb 5-1: Using ep0 maxpacket: 16 [ 3398.150480][ T7895] usb 5-1: config 0 has no interfaces? [ 3398.173023][ T7895] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3398.208258][ T7895] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3398.242799][ T7895] usb 5-1: Manufacturer: syz [ 3398.271522][ T7895] usb 5-1: config 0 descriptor?? [ 3398.517721][ T7895] usb 5-1: USB disconnect, device number 29 [ 3398.969676][ T7909] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 3399.145963][ T7909] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3399.199006][ T7909] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 3399.236667][ T7909] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3399.331293][ T7909] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3399.360179][T19732] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3399.430467][ T7909] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 3399.497377][ T7895] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 3399.698976][ T7895] usb 5-1: Using ep0 maxpacket: 16 [ 3399.713051][T19732] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11159'. [ 3399.888979][ T7895] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 3399.918536][ T7895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3399.963432][ T7895] usb 5-1: Product: syz [ 3399.973099][ T7895] usb 5-1: Manufacturer: syz [ 3399.978312][ T7895] usb 5-1: SerialNumber: syz [ 3400.017364][ T7895] usb 5-1: config 0 descriptor?? [ 3400.043969][ T7895] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 3400.156036][ T7911] usb 6-1: USB disconnect, device number 115 [ 3400.876551][T19794] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11164'. [ 3401.376844][ T7895] usb 5-1: Quatech SSU-100 USB to Serial Driver converter now attached to ttyUSB0 [ 3401.579500][ T7911] usb 5-1: USB disconnect, device number 30 [ 3401.595289][ T7911] ssu100 ttyUSB0: Quatech SSU-100 USB to Serial Driver converter now disconnected from ttyUSB0 [ 3401.614759][ T7911] ssu100 5-1:0.0: device disconnected [ 3402.144429][T19861] netlink: 'syz.2.11169': attribute type 4 has an invalid length. [ 3402.598928][ T5930] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 3402.702772][T19871] tipc: Enabled bearer , priority 0 [ 3402.735486][T19871] tipc: Resetting bearer [ 3402.838764][ T5930] usb 5-1: device descriptor read/64, error -71 [ 3402.964457][T19870] tipc: Disabling bearer [ 3403.098964][ T5930] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 3403.279086][ T5930] usb 5-1: device descriptor read/64, error -71 [ 3403.390434][ T5930] usb usb5-port1: attempt power cycle [ 3403.415003][ T30] audit: type=1326 audit(1770138664.930:3628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19886 comm="syz.2.11174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4d7d9aeb9 code=0x7ffc0000 [ 3403.455370][ T30] audit: type=1326 audit(1770138664.930:3629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19886 comm="syz.2.11174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4d7d9aeb9 code=0x7ffc0000 [ 3403.487452][ T30] audit: type=1326 audit(1770138664.960:3630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19886 comm="syz.2.11174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fb4d7d9aeb9 code=0x7ffc0000 [ 3403.532377][ T30] audit: type=1326 audit(1770138664.960:3631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19886 comm="syz.2.11174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4d7d9aeb9 code=0x7ffc0000 [ 3403.580461][ T30] audit: type=1326 audit(1770138664.960:3632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19886 comm="syz.2.11174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4d7d9aeb9 code=0x7ffc0000 [ 3403.646348][ T30] audit: type=1326 audit(1770138664.960:3633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19886 comm="syz.2.11174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7fb4d7d9aeb9 code=0x7ffc0000 [ 3403.704096][ T30] audit: type=1326 audit(1770138664.960:3634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19886 comm="syz.2.11174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4d7d9aeb9 code=0x7ffc0000 [ 3403.759023][ T5930] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 3403.783692][ T30] audit: type=1326 audit(1770138664.960:3635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19886 comm="syz.2.11174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4d7d9aeb9 code=0x7ffc0000 [ 3403.808902][ T5930] usb 5-1: device descriptor read/8, error -71 [ 3403.881902][ T30] audit: type=1326 audit(1770138664.960:3636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19886 comm="syz.2.11174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb4d7d9aeb9 code=0x7ffc0000 [ 3403.934901][ T30] audit: type=1326 audit(1770138664.960:3637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19886 comm="syz.2.11174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4d7d9aeb9 code=0x7ffc0000 [ 3404.119397][ T5930] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 3404.173951][ T5930] usb 5-1: device descriptor read/8, error -71 [ 3404.309738][ T5930] usb usb5-port1: unable to enumerate USB device [ 3404.648930][ T7911] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 3404.810232][ T7911] usb 3-1: Using ep0 maxpacket: 16 [ 3404.818663][ T7911] usb 3-1: config 0 has no interfaces? [ 3404.831543][ T7911] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3404.841634][ T7911] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3404.850222][ T7911] usb 3-1: Manufacturer: syz [ 3404.857968][ T7911] usb 3-1: config 0 descriptor?? [ 3405.072387][ T5930] usb 3-1: USB disconnect, device number 51 [ 3405.503345][T19945] bond8: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 3405.535282][T19945] bond8 (unregistering): Released all slaves [ 3405.769874][ T5930] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 3405.877569][T20024] picdev_read: 77 callbacks suppressed [ 3405.877585][T20024] kvm: pic: non byte read [ 3405.888567][T20025] netlink: 68 bytes leftover after parsing attributes in process `syz.2.11186'. [ 3405.911742][T20024] kvm: pic: non byte read [ 3405.916203][T20024] kvm: pic: non byte read [ 3405.931703][ T5930] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 3405.950569][T20024] kvm: pic: non byte read [ 3405.959399][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3405.972088][T20024] kvm: pic: non byte read [ 3405.976528][T20024] kvm: pic: non byte read [ 3405.991761][T20024] kvm: pic: non byte read [ 3406.022291][ T5930] usb 5-1: config 0 descriptor?? [ 3406.056389][T20024] kvm: pic: non byte read [ 3406.061922][ T5930] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 3406.103682][T20024] kvm: pic: non byte read [ 3406.122758][T20024] kvm: pic: non byte read [ 3406.173071][ T7911] usb 6-1: new low-speed USB device number 116 using dummy_hcd [ 3406.231094][T19980] fuse: Unknown parameter '000000000000000000060xffffffffffffffff' [ 3406.256558][T19982] fuse: Unknown parameter '000000000000000000060xffffffffffffffff' [ 3406.371201][ T7911] usb 6-1: unable to get BOS descriptor or descriptor too short [ 3406.381117][ T7911] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 3406.392612][ T7911] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 3406.406648][ T7911] usb 6-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3406.435211][ T7911] usb 6-1: config 1 interface 0 has no altsetting 0 [ 3406.450247][ T7911] usb 6-1: string descriptor 0 read error: -22 [ 3406.463821][ T7911] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3406.478222][ T7911] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3406.504624][T20031] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 3406.515332][T20031] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 3406.673092][ T7911] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 3406.869141][ T7911] usb 6-1: USB disconnect, device number 116 [ 3407.069255][ T5930] gspca_cpia1: usb_control_msg 05, error -110 [ 3407.077330][ T5930] gspca_cpia1: usb_control_msg 01, error -32 [ 3407.085263][ T5930] gspca_cpia1: usb_control_msg 01, error -32 [ 3407.099914][ T5930] gspca_cpia1: usb_control_msg 01, error -32 [ 3407.107797][ T5930] gspca_cpia1: usb_control_msg 01, error -32 [ 3407.119116][ T5930] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 3408.520625][T18264] usb 5-1: USB disconnect, device number 35 [ 3409.120547][ T7911] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 3409.279037][ T7911] usb 6-1: Using ep0 maxpacket: 16 [ 3409.281326][ T7911] usb 6-1: config 0 has no interfaces? [ 3409.282723][ T7911] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3409.282755][ T7911] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3409.282777][ T7911] usb 6-1: Manufacturer: syz [ 3409.285865][ T7911] usb 6-1: config 0 descriptor?? [ 3409.386692][T20119] netlink: 188 bytes leftover after parsing attributes in process `syz.2.11199'. [ 3409.497878][ T5930] usb 6-1: USB disconnect, device number 117 [ 3409.576191][ T30] audit: type=1326 audit(1770138671.090:3638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20129 comm="syz.0.11200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb127b9aeb9 code=0x7ffc0000 [ 3409.576235][ T30] audit: type=1326 audit(1770138671.090:3639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20129 comm="syz.0.11200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb127b9aeb9 code=0x7ffc0000 [ 3409.576267][ T30] audit: type=1326 audit(1770138671.090:3640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20129 comm="syz.0.11200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fb127b9aeb9 code=0x7ffc0000 [ 3409.578168][ T30] audit: type=1326 audit(1770138671.090:3641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20129 comm="syz.0.11200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb127b9aeb9 code=0x7ffc0000 [ 3409.583958][ T30] audit: type=1326 audit(1770138671.100:3642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20129 comm="syz.0.11200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb127b9aeb9 code=0x7ffc0000 [ 3409.610632][ T30] audit: type=1326 audit(1770138671.130:3643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20129 comm="syz.0.11200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7fb127b9aeb9 code=0x7ffc0000 [ 3409.617635][ T30] audit: type=1326 audit(1770138671.130:3644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20129 comm="syz.0.11200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb127b9aeb9 code=0x7ffc0000 [ 3409.680942][ T30] audit: type=1326 audit(1770138671.190:3645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20129 comm="syz.0.11200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb127b9aeb9 code=0x7ffc0000 [ 3409.924492][ T30] audit: type=1326 audit(1770138671.260:3646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20129 comm="syz.0.11200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb127b5b78e code=0x7ffc0000 [ 3409.963448][ T30] audit: type=1326 audit(1770138671.260:3647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20129 comm="syz.0.11200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb127b9aeb9 code=0x7ffc0000 [ 3410.527483][T20152] netlink: 'syz.5.11203': attribute type 4 has an invalid length. [ 3410.540566][T20152] netlink: 'syz.5.11203': attribute type 4 has an invalid length. [ 3410.779432][T32475] ================================================================== [ 3410.787653][T32475] BUG: KASAN: use-after-free in __linkwatch_run_queue+0x6a0/0x7f0 [ 3410.795526][T32475] Read of size 1 at addr ffff888090ad4cc9 by task kworker/u8:7/32475 [ 3410.803788][T32475] [ 3410.806133][T32475] CPU: 0 UID: 0 PID: 32475 Comm: kworker/u8:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 3410.806158][T32475] Tainted: [L]=SOFTLOCKUP [ 3410.806165][T32475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 3410.806177][T32475] Workqueue: events_unbound linkwatch_event [ 3410.806206][T32475] Call Trace: [ 3410.806215][T32475] [ 3410.806223][T32475] dump_stack_lvl+0xe8/0x150 [ 3410.806247][T32475] print_report+0xba/0x230 [ 3410.806264][T32475] ? __linkwatch_run_queue+0x6a0/0x7f0 [ 3410.806288][T32475] kasan_report+0x117/0x150 [ 3410.806308][T32475] ? __linkwatch_run_queue+0x6a0/0x7f0 [ 3410.806336][T32475] __linkwatch_run_queue+0x6a0/0x7f0 [ 3410.806377][T32475] ? __pfx___linkwatch_run_queue+0x10/0x10 [ 3410.806404][T32475] ? process_scheduled_works+0xa0f/0x17a0 [ 3410.806429][T32475] ? process_scheduled_works+0xa0f/0x17a0 [ 3410.806453][T32475] linkwatch_event+0x4c/0x60 [ 3410.806476][T32475] process_scheduled_works+0xaec/0x17a0 [ 3410.806512][T32475] ? __pfx_process_scheduled_works+0x10/0x10 [ 3410.806536][T32475] ? do_raw_spin_lock+0x12b/0x2f0 [ 3410.806556][T32475] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 3410.806574][T32475] ? schedule+0x90/0x360 [ 3410.806593][T32475] worker_thread+0xda6/0x1360 [ 3410.806627][T32475] ? __kthread_parkme+0x19c/0x1f0 [ 3410.806647][T32475] kthread+0x726/0x8b0 [ 3410.806666][T32475] ? __pfx_worker_thread+0x10/0x10 [ 3410.806692][T32475] ? __pfx_kthread+0x10/0x10 [ 3410.806711][T32475] ? _raw_spin_unlock_irq+0x23/0x50 [ 3410.806736][T32475] ? __pfx_kthread+0x10/0x10 [ 3410.806755][T32475] ret_from_fork+0x51b/0xa40 [ 3410.806782][T32475] ? __pfx_ret_from_fork+0x10/0x10 [ 3410.806807][T32475] ? __switch_to+0xc82/0x1410 [ 3410.806830][T32475] ? __pfx_kthread+0x10/0x10 [ 3410.806848][T32475] ret_from_fork_asm+0x1a/0x30 [ 3410.806878][T32475] [ 3410.806884][T32475] [ 3410.985844][T32475] The buggy address belongs to the physical page: [ 3410.992354][T32475] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888090ad5e00 pfn:0x90ad4 [ 3411.002787][T32475] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 3411.009922][T32475] raw: 00fff00000000000 ffffea0001927608 ffff8880b8740c00 0000000000000000 [ 3411.018524][T32475] raw: ffff888090ad5e00 0000000000000000 00000000ffffffff 0000000000000000 [ 3411.027552][T32475] page dumped because: kasan: bad access detected [ 3411.034011][T32475] page_owner tracks the page as freed [ 3411.039395][T32475] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x446dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP), pid 20155, tgid 20154 (syz.1.11205), ts 3410676036710, free_ts 3410775146753 [ 3411.061488][T32475] post_alloc_hook+0x228/0x280 [ 3411.066278][T32475] get_page_from_freelist+0x24dc/0x2580 [ 3411.071934][T32475] __alloc_frozen_pages_noprof+0x18d/0x380 [ 3411.077881][T32475] alloc_pages_mpol+0x232/0x4a0 [ 3411.082752][T32475] ___kmalloc_large_node+0x4e/0x150 [ 3411.087989][T32475] __kmalloc_large_node_noprof+0x18/0x90 [ 3411.093703][T32475] __kvmalloc_node_noprof+0x6e/0x8d0 [ 3411.099047][T32475] alloc_netdev_mqs+0xa6/0x11b0 [ 3411.103935][T32475] tun_set_iff+0x532/0xf00 [ 3411.108395][T32475] __tun_chr_ioctl+0x7bb/0x1e10 [ 3411.113375][T32475] __se_sys_ioctl+0xfc/0x170 [ 3411.118220][T32475] do_syscall_64+0xe2/0xf80 [ 3411.122741][T32475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3411.128674][T32475] page last free pid 20154 tgid 20154 stack trace: [ 3411.135364][T32475] __free_frozen_pages+0xbf8/0xd70 [ 3411.140502][T32475] device_release+0x9e/0x1d0 [ 3411.145205][T32475] kobject_put+0x228/0x560 [ 3411.149733][T32475] netdev_run_todo+0xc75/0xde0 [ 3411.154631][T32475] tun_chr_close+0x13c/0x1c0 [ 3411.159370][T32475] __fput+0x44f/0xa70 [ 3411.163735][T32475] task_work_run+0x1d9/0x270 [ 3411.168356][T32475] exit_to_user_mode_loop+0xed/0x480 [ 3411.173700][T32475] do_syscall_64+0x2b7/0xf80 [ 3411.178575][T32475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3411.184593][T32475] [ 3411.186943][T32475] Memory state around the buggy address: [ 3411.192800][T32475] ffff888090ad4b80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 3411.200974][T32475] ffff888090ad4c00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 3411.209075][T32475] >ffff888090ad4c80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 3411.217256][T32475] ^ [ 3411.223869][T32475] ffff888090ad4d00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 3411.232474][T32475] ffff888090ad4d80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 3411.240558][T32475] ================================================================== [ 3411.299723][T32475] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 3411.306995][T32475] CPU: 0 UID: 0 PID: 32475 Comm: kworker/u8:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 3411.318464][T32475] Tainted: [L]=SOFTLOCKUP [ 3411.323126][T32475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 3411.333664][T32475] Workqueue: events_unbound linkwatch_event [ 3411.339620][T32475] Call Trace: [ 3411.342946][T32475] [ 3411.345908][T32475] vpanic+0x1e0/0x670 [ 3411.350018][T32475] panic+0xc5/0xd0 [ 3411.353782][T32475] ? __pfx_panic+0x10/0x10 [ 3411.358231][T32475] ? preempt_schedule_thunk+0x16/0x30 [ 3411.363689][T32475] ? __linkwatch_run_queue+0x6a0/0x7f0 [ 3411.369286][T32475] check_panic_on_warn+0x89/0xb0 [ 3411.374295][T32475] ? __linkwatch_run_queue+0x6a0/0x7f0 [ 3411.379803][T32475] end_report+0x6f/0x140 [ 3411.384111][T32475] kasan_report+0x128/0x150 [ 3411.388679][T32475] ? __linkwatch_run_queue+0x6a0/0x7f0 [ 3411.394193][T32475] __linkwatch_run_queue+0x6a0/0x7f0 [ 3411.399529][T32475] ? __pfx___linkwatch_run_queue+0x10/0x10 [ 3411.405378][T32475] ? process_scheduled_works+0xa0f/0x17a0 [ 3411.411166][T32475] ? process_scheduled_works+0xa0f/0x17a0 [ 3411.416933][T32475] linkwatch_event+0x4c/0x60 [ 3411.421561][T32475] process_scheduled_works+0xaec/0x17a0 [ 3411.427158][T32475] ? __pfx_process_scheduled_works+0x10/0x10 [ 3411.433177][T32475] ? do_raw_spin_lock+0x12b/0x2f0 [ 3411.438259][T32475] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 3411.443666][T32475] ? schedule+0x90/0x360 [ 3411.447949][T32475] worker_thread+0xda6/0x1360 [ 3411.452713][T32475] ? __kthread_parkme+0x19c/0x1f0 [ 3411.457780][T32475] kthread+0x726/0x8b0 [ 3411.461893][T32475] ? __pfx_worker_thread+0x10/0x10 [ 3411.467049][T32475] ? __pfx_kthread+0x10/0x10 [ 3411.471683][T32475] ? _raw_spin_unlock_irq+0x23/0x50 [ 3411.476967][T32475] ? __pfx_kthread+0x10/0x10 [ 3411.481681][T32475] ret_from_fork+0x51b/0xa40 [ 3411.486498][T32475] ? __pfx_ret_from_fork+0x10/0x10 [ 3411.491647][T32475] ? __switch_to+0xc82/0x1410 [ 3411.496367][T32475] ? __pfx_kthread+0x10/0x10 [ 3411.500990][T32475] ret_from_fork_asm+0x1a/0x30 [ 3411.505802][T32475] [ 3411.509595][T32475] Kernel Offset: disabled [ 3411.513958][T32475] Rebooting in 86400 seconds..