last executing test programs: 37.641462565s ago: executing program 1 (id=164): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000700)=0x6bf8, 0x4) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c40)=ANY=[], 0x18}}, 0x4020) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r1, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x98, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x0, 0x3000000000000000}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 37.310452568s ago: executing program 1 (id=166): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000004500)={0x14, 0x0, &(0x7f0000004400)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00031200000012035018"], 0x0, 0x0}, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x8000000004) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0xfffffffe, 0x0, 0x20000, 0x1}) (async) writev(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c10000000010000000000", 0x58}], 0x1) 36.275410358s ago: executing program 1 (id=174): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) setpgid(r2, r2) setpgid(0x0, r2) wait4(0x0, 0x0, 0x2, 0x0) ioctl$KVM_CAP_VM_TYPES(r1, 0x4068aea3, &(0x7f0000000300)={0xeb, 0x0, 0x2}) process_vm_writev(r2, &(0x7f0000005d40)=[{&(0x7f0000000680)=""/116, 0x74}], 0x1, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/49, 0x31}], 0x1, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001680)="89", 0x1}], 0x1}}], 0x1, 0x20000000) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r5, 0x20) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='illinois', 0x8) r6 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x1000]}, 0x8) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x8}, 0x18) r8 = syz_usb_connect$lan78xx(0x2, 0x3f, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r8, &(0x7f0000000500)={0x14, &(0x7f00000009c0)=ANY=[@ANYRESOCT=r6], &(0x7f0000000880)={0x0, 0x3, 0xb6, @string={0xb6, 0x3, "20501f0e9d81938a876642304a4cc053e167a3ada833089f713d8280fbb9eb9fc91403af357efec0435a1a46cfa39ab9c5ea10c9c33795aa3338739519c3bb25c3f15796b3ad4613b7426fb84b7ee43a33d5af36dc0db9d184ae41c5eb5754eba60bc604ced035c0e4fb295611c1efb2b31104048875d1003202b36c8cf635a70aaf29424020c9a8ed3d152951fe32ab93ecc91d48be59ff6633b15176f8683128de8afcf65e68cae29a5a4add5298b2d12195d3"}}}, &(0x7f0000000840)={0x34, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000700)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000780)={0xc0, 0xa1, 0x4, 0x8f5d}, &(0x7f0000000080)={0x40, 0xa0, 0x4, 0x8001}, &(0x7f0000000800)={0xc0, 0xa2, 0x2f, "74369da12801ab040095eca606aa4e0147ee0db99ad9ebb4fcbfbad7a65bfd22052c62d1c569620e86be6481590c29"}}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r7, {r0}}, './file0\x00'}) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_proto_private(r4, 0x89e1, &(0x7f0000001080)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x51}], 0x1, 0x44, 0x0, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f0000000380)=""/77) r9 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x4e21, 0x803, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, 0x1c) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 35.436790101s ago: executing program 4 (id=180): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) write$tun(r4, &(0x7f00000000c0)={@void, @void, @mpls={[], @ipv6=@tipc_packet={0x3, 0x6, 'Z\vB', 0x54, 0x6, 0x0, @empty, @mcast1, {[@routing={0x3c, 0x0, 0x1, 0xe}, @hopopts={0x2c, 0x2, '\x00', [@hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}]}], @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x0, 0x0, 0xb, 0x0, 0x2, 0x5, 0x0, 0x57082eceb02ffff2, 0x4, 0x1, 0x1, 0x8, 0x4, 0xa, 0x4e22, 0x4e24}, 0x3, 0x2}, 0x4, 0x4}, 0x1}}}}}}}, 0x7c) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)={{0x0, 0x2, 0x80, 0x2, 0x3ff}}) 34.636690294s ago: executing program 1 (id=189): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) r2 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xd) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r5, 0x0, 0x2000fb) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000300)=0x3) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x10}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, 0x2}]}) r7 = msgget$private(0x0, 0x4a0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c000280060001000000"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) msgctl$IPC_STAT(r7, 0x2, 0x0) msgsnd(r7, &(0x7f00000001c0)=ANY=[@ANYRES8=r4], 0xe3, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0x4, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0x8000000000000000, 0xffffffffffffffff, 0x3, 0xd0b, 0xfffffffffffffff9, 0x2000000000000003, 0x5], 0x80a0000, 0x4284}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 33.070804642s ago: executing program 4 (id=196): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x2, 0x8, 0x40, @local, @mcast1, 0x8000, 0x7800, 0x9, 0x3}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = dup2(r1, r1) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb010018000000000000007800000078000000040000000600000004000084080000000d00000001000000020000000f000000040000000a0000000e0000000500baebf27ed358c965999b966f0af83f0000faffffff0800361907db2f7cdea4f000000100000000000000040000000000000b050000000100000001000004feffffff0700000005000000010100000a000000000000000200000009"], &(0x7f00000003c0)=""/95, 0x94, 0x5f, 0x0, 0x6, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xd, 0x0, 0x0, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', r0, @fallback=0x1d, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) (async) syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x42000) (async) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r5, 0x0, 0x8, &(0x7f0000000000)=0x1ff, 0x4) (async) getsockopt$inet_opts(r5, 0x0, 0x9, &(0x7f0000000340)=""/38, &(0x7f0000000280)=0x26) preadv2(r4, &(0x7f0000000480)=[{&(0x7f0000000500)=""/137, 0x89}], 0x1, 0xffffffff, 0xffffffff, 0x12) r6 = socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="30000000200025a729bd7000fddbdf250a0000cdfe0000010200010008000600fe7f00000c00140065bc7a222a"], 0x30}, 0x1, 0x0, 0x0, 0x20008005}, 0x44) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000700)={0x38, 0x5, 0x43, 0x8001, 0x0, 0xf, 0x0, 0xfffffe0000000001, 0xfa11, 0x1}, 0x0) (async) r9 = syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file0\x00', 0x100809, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',g\x00\x00\x00\x00_id=', @ANYRESDEC, @ANYBLOB="2c6d61785f726561643d3078303030303030303030303030303030342c616c6c6f775f6f746865722c64656661756c745f7065726d697373696f6e732c7375626a5f747970653d2c6673757569643d63373537323566002d376238372d3163641c2d646239382d36313739006230312c6f626a5f747970653d2f6465762f617564696f23002c00"], 0x1, 0x0, &(0x7f0000000300)="11eb7621eb5dc4b38a4b818d1aab099259038740c7eda50af7c05c61fa8a838a") mkdirat(r9, 0x0, 0x29) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000480), &(0x7f00000004c0)=0x4) (async) syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) 32.970708926s ago: executing program 4 (id=198): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="fc0100001900010025bd700001000000fe8800000000000000000000003c0101e000000200000000000000000000000000040000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1fc}, 0x1, 0x0, 0x0, 0x1}, 0x4080) 32.802426431s ago: executing program 4 (id=199): r0 = socket$inet6(0xa, 0x80002, 0x0) prctl$PR_GET_NAME(0x10, 0xfffffffffffffffc) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000003c0)=0x6572, 0x4) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x6, @mcast2, 0x4}, 0x1c, 0x0}}], 0x1, 0x40000d5) 32.73256615s ago: executing program 3 (id=201): r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x1) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001340)={0x53, 0xfffffffffffffffd, 0x6, 0x7, @buffer={0x0, 0x0, 0x0}, &(0x7f00000000c0)="a60000000000", 0x0, 0x1, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff0f}) 32.614218147s ago: executing program 4 (id=202): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000023c0)=@newtfilter={0x2cc, 0x2c, 0x10, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xfff3}, {0xd, 0x4}, {0xffff, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x7}, @filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xb, 0xffe0}}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x5}}, @TCA_RATE={0x6, 0x5, {0x4}}, @filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'bond_slave_0\x00'}]}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_RATE={0x6, 0x5, {0xc2, 0x3}}, @filter_kind_options=@f_flow={{0x9}, {0x234, 0x2, [@TCA_FLOW_ACT={0x228, 0x9, 0x0, 0x1, [@m_ife={0x224, 0x4, 0x0, 0x0, {{0x8}, {0xd0, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x7c78b50, 0x6, 0x0, 0x6, 0x8}, 0x1}}, @TCA_IFE_METALST={0x48, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x80000001}, @IFE_META_PRIO={0x8, 0x3, @val=0x6}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x9625}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xd9a}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xf9}, @IFE_META_SKBMARK={0x8}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x3ff}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_SMAC={0xa, 0x4, @random="4209baa51469"}, @TCA_IFE_METALST={0x38, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x4}, @IFE_META_SKBMARK={0x8}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xcf5f}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x9}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x8}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_METALST={0x1c, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x2}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x44}, @IFE_META_PRIO={0x8, 0x3, @val=0x8}]}]}, {0x130, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x3}}}}]}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xc, 0x1}}]}}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) (async) r0 = socket(0x10, 0x803, 0x0) (async) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40300, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r3, 0x4018aee3, &(0x7f0000000300)=@attr_set_pmu={0x0, 0x1, 0x1, 0x0}) sendmsg$sock(r0, &(0x7f0000000340)={&(0x7f0000000000)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)="b796ccbf3c359cf536e81bfc2e6496a6337be58a6e3e39b63db57e3ca1367cd8286c5c24f988566fb8efdb917a32cd0f2f95deb604eaecc223617a", 0x3b}], 0x1}, 0x8080) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) (async) prctl$PR_SET_IO_FLUSHER(0x34, 0xffffbffffffffdfd) (async) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) getgroups(0x2, &(0x7f0000001140)=[0xee00, 0x0]) setresgid(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x31c000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) (async) bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x0, r8, 0x2000000}, 0x10) (async) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x6040850}, 0x20040040) (async) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000001fc0)) 32.483376854s ago: executing program 3 (id=203): r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x1) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001340)={0x53, 0xfffffffffffffffd, 0x6, 0x7, @buffer={0x0, 0x0, 0x0}, &(0x7f00000000c0)="a60000000000", 0x0, 0x1, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00}) 32.479279631s ago: executing program 0 (id=204): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000005ec0)=[{{&(0x7f0000000280)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x6}, 0x1c, 0x0, 0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="180000000000000029000000360000007300000004000000180000000000000029"], 0x30}}], 0x1, 0x0) 32.346334254s ago: executing program 2 (id=205): syz_emit_ethernet(0xda, &(0x7f0000000500)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x2b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev={0xac, 0x14, 0x14, 0x42}, @multicast1, @empty, @multicast2]}, @cipso={0x86, 0x58, 0x0, [{0x0, 0x7, "4b6cefc500"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x0, 0x12, "2100505c09a000000000000300000000"}, {0x0, 0x12, "ffd11634eea26b0faffa0dea2e903528"}, {0x6, 0x9, "02a20948fd7406"}, {0x7, 0x12, "ccf0301f78d89b5d6afffb2a29a7b56d"}]}]}}, "a815a23d"}}}}}, 0x0) 32.329747049s ago: executing program 4 (id=206): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) write$tun(r4, &(0x7f00000000c0)={@void, @void, @mpls={[], @ipv6=@tipc_packet={0x3, 0x6, 'Z\vB', 0x54, 0x6, 0x0, @empty, @mcast1, {[@routing={0x3c, 0x0, 0x1, 0xe}, @hopopts={0x2c, 0x2, '\x00', [@hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}]}], @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x0, 0x0, 0xb, 0x0, 0x2, 0x5, 0x0, 0x57082eceb02ffff2, 0x4, 0x1, 0x1, 0x8, 0x4, 0xa, 0x4e22, 0x4e24}, 0x3, 0x2}, 0x4, 0x4}, 0x1}}}}}}}, 0x7c) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)={{0x0, 0x2, 0x80, 0x2, 0x3ff}}) 32.29668394s ago: executing program 0 (id=207): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r0, &(0x7f0000000080)=@other={'decodes', ' ', 'mem'}, 0xc) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x17) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000200)=0x0) sendmsg$nl_generic(r2, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x1d0, 0x17, 0x2, 0x70bd26, 0x25dfdbfb, {0x3}, [@generic="5fad76914cf680d421ecc915d895ad94e3", @generic="502c74831cce08aed1ec0379c6b619aa129df05fcd37feda799a0c2954fcf77a18cebaf9673a03", @generic="311a70444826639525d99cba91eac6569fef44c269d10f42bfdbea6ce64a4a6722f4b70b44fdcbf6f58a93f1632e02af3682554cf716f3391b3fe808b94f02275378d761988da6a3bc", @typed={0x8, 0x122, 0x0, 0x0, @fd=r1}, @generic="040d6eac36ccfa5a581a04cb59625ae093951740e8f6acb6b98c286685081f6239bd151cd5bc54ca752ef5eeafbe0719a59b984aeecff489326b541e37", @nested={0xf2, 0x68, 0x0, 0x1, [@typed={0x14, 0xfb, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x19}}, @typed={0x8, 0x6e, 0x0, 0x0, @pid=r3}, @generic="e5e8840ccc52b0a2d740b7a3ec91ba238055947845a9c1150f3d58bbe3d7c795a06549daf4124c377f44c2a537f628c5c5a36c9f38e0a473ea152d2fa6ceca9109968949d92620a01075588fb2bd91649fae201532dc9ebf1c6b58176d72d5f337be50cb66a4b2a1b385e4ae0a790e373275f527ef9a8ec2e35cd40a991776ee52960e2143e569325d75b324e102050449544943b6dc749f5a5bcec8f1ef4cb504a6adf4ecb67fcf4ed093b459db5f2b27e61eb30e42564f21e984385c04e01c905243633590c1d6ff448b10f317d91e1b3e"]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x94}, 0x20000800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x9}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x480c5}, 0x40000) 32.242039513s ago: executing program 3 (id=208): syz_emit_ethernet(0x4f, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa00400000000086dd6c2d01000019840100000000000000000002000000010102fe8000000000000000000000000007aaa5ba94e385673ccfd3fe184ab0643975bcc85fbf438632261b"], 0x0) 32.241722844s ago: executing program 1 (id=209): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2508007a0000000000030700000008000300", @ANYRES32=r2, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f016400000005005300010000000800050004"], 0x54}}, 0x4000000000000) 32.187296598s ago: executing program 2 (id=210): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x40003, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x10}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x320}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008040}, 0x2) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x4) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000314000e00002fb96dffff1144ee163cddcb00000000000000fffffffffff10000", 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) 32.164999486s ago: executing program 3 (id=211): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000400)={0x4, &(0x7f0000000580)=[{0x36, '\x00', @st={0x4, [{0x1, @uvalue=0x1}, {0x1, @svalue=0x3}, {0x0, @uvalue=0x4}, {0x1, @uvalue=0x6}]}, 0x87}, {0x15, '\x00', @buffer={"7a0ac8abf9bbd2c52490cde90750303f213f089963eb532a235131fd3e61eed6", 0x20}, 0x6}, {0x1a, '\x00', @buffer={"ae2ea93f39e9d72df9e1079b55913355f933502c0a9975e7de66b90754f408ec", 0x20}, 0x6}, {0x3, '\x00', @data=0x6, 0x2b1d}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwrite64(r1, &(0x7f0000000000)="d5", 0x1, 0x10) 32.107024372s ago: executing program 0 (id=212): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000700)=0x6bf8, 0x4) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c40)=ANY=[], 0x18}}, 0x4020) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r1, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x98, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x0, 0x6000000000000000}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 32.048197069s ago: executing program 3 (id=213): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a0080ff00000020fc01000000000000000000000000000000000000ffffff8005000500000000000a000000000000000000000000000000000000000000000000000000000000000800120002000200000000000000000030002b", @ANYRESDEC=r0], 0xa0}}, 0x0) 31.964549389s ago: executing program 1 (id=214): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x181440) (async) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80) (async) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000001340)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100100000040b804020240000102030109022400010100f0fa0904000902070002"], 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) (async) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0, 0x0, 0xffffffff}) 31.878982623s ago: executing program 0 (id=215): r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x1) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001340)={0x53, 0xfffffffffffffffd, 0x6, 0x7, @buffer={0x0, 0x0, 0x0}, &(0x7f00000000c0)="a60000000000", 0x0, 0x1, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}) 31.863154004s ago: executing program 3 (id=216): r0 = io_uring_setup(0x6abc, &(0x7f0000000080)={0x0, 0x2001e37d, 0x2000, 0x80000, 0x126}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b000000000000137b702a22466fa471e9f3c400"/35, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]}) pipe2$watch_queue(0x0, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setrlimit(0x8, 0x0) sendto$inet(r3, 0x0, 0x2c, 0x24044000, &(0x7f0000000380)={0x2, 0x4e22, @remote}, 0x10) shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4050000ffe0f50571103f00000000006700000000800080950000fffd00000072c2f98cb7333011f1cf97f165ac0dc8c84c1ed04a84f6243cec3706bd2d671c2c28c7a0bd13871d815bbc06c2fa221f1a91d63e4bdbf3cbdd4ff4738d969857122ea180b8b25ad6c006c3e4e86dd319c92d683f6d593cb860187c7640045af58adcfc943a215f12b50493e62b5a127771fc659f39d1470e7d85"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) socket(0x2d, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x20, &(0x7f0000000000), 0x0) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r4, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28182, 0x0) ioctl$AUTOFS_IOC_FAIL(r5, 0x4c80, 0xffffffffffffffb6) 31.825886923s ago: executing program 2 (id=217): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(r0, 0x0, 0x4040140) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x2, 0x0, {{@in6=@empty, @in6=@mcast2, 0x1, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0x400, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020020000000000000000000000001"], 0xfdef) 31.722535572s ago: executing program 0 (id=218): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000041010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) 31.593591305s ago: executing program 0 (id=219): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x200}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}}, 0x0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0x81) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) r4 = syz_clone(0x40000000, &(0x7f0000000180)="5fadb261810f3ad8e14628de82a589fc3300a37eaf133548c8310607b13a4fec0439550942558d0b1f6314fc68e53a6ba02544ec55e7df4e0f0f84fbdc137b7523261e3e43c79a1e54942d0a838a06a6f7e54051ebb5ad38433ae53a665599fb0d046adf152899b2b15a011ebce3ffa55e08645f133bb2197d02c31e161a9f7f0547f035457c5fad8a5918cc59ee17ed307b3cc4661e63e3883c4b0a5a55c716700e2d236d7a70e2997af02f6a878a3e8efef223275f", 0xb6, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="dfd06e7a0137052b87bfcc9819b69bbf9e10510b189cb8300b709418083f6d17e94692e6addce79b7ad98819507793b8e496eb3d13f4ebc38b75e346a3e16d96574c8ef0e9aca8309e0ca58b759c6fe48b93") ptrace$getregset(0x4204, r4, 0x200, &(0x7f0000000400)={&(0x7f0000000380)=""/104, 0x68}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYRESOCT=r5, @ANYRES32=0x0, @ANYBLOB="dd002000c8c9f0cbb71aecd3ca"], 0x28}}, 0x0) sendmmsg(r3, 0x0, 0x0, 0x80) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, 0x0, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 31.558461532s ago: executing program 2 (id=220): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000005ec0)=[{{&(0x7f0000000280)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x6}, 0x1c, 0x0, 0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="180000000000000029000000360000007300000000010000180000000000000029"], 0x30}}], 0x1, 0x0) 31.435078443s ago: executing program 2 (id=221): r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x1) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001340)={0x53, 0xfffffffffffffffd, 0x6, 0x7, @buffer={0x0, 0x0, 0x0}, &(0x7f00000000c0)="a60000000000", 0x0, 0x1, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}) 30.641833348s ago: executing program 2 (id=222): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x123802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000026c0), 0x2) r4 = getpid() sendmmsg$unix(r2, &(0x7f000000bb40)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000340)}, {&(0x7f00000005c0)="e88b344a9476fa7765b4b6d1c80f764732b6779122fad6dc48540e6fa10629faf1ba8eec89644f2b22b435eef921653239e8daa615c342737b55815629d72c80f9a54171f5f14c0f11d51bb96c23614f52c4ec167291b502ab3a2512f10baf653e608959add9dfd3e8ca4adfe23f943f56fed780f9931111d70348f462651a5ae0ee8a50360289c1a80d22f5dc29bc8aa60e9090ffa6414086ef72c8e04df53b9c4873923499fbf807d972d835624854fb556eedfde27e9729838d8ca53e8be8654e72ca98e89f2380a646bc725bc05bd4c8161e7218ba37564d6470155514b5d54442ef81af14fda77c6159daf2", 0xee}, {&(0x7f00000006c0)="5b4d701ebe2e1e5df381be99159c2d05960f2fc5bcce99af0fa4b3df62eed80a0e4067f37514a39a966978abf4d58c8fc118cd74ff74dc073b85e7a542a0fb5b0f04db0bd9516bd1571472964528d83ff7037601acccc23a98a3f415da3ee462c04e301c", 0x64}], 0x3, &(0x7f0000000780), 0x0, 0x1}}, {{&(0x7f00000007c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002680)=[{&(0x7f0000000840)="cd66e1f6a0483b45fd6c51d4e8375083e66351e2ee7c23807e5d0c66009f05c7fcbb58baa367ee10cf2e36aec2c077c04c2c09d59ff2f4606751990d2b7eb435c653ce9decc1bfb26d2b4ab9c9c40a756c92cf225dfc7286d0692e7b8fb941f4b93dbc3d09866ff2f893f6af0ad46df491bac5e0f820587d32d49ea46034ee8b7df1a2ca7e484ff4fb49e31a4645bd7dda0d0b8225c747b0a50cd87a58d7590c72704e036bd63619c39c02db1c8853e97e3d01e2f3886159e53e2d1168579b3b2574e0a0d3f483b4558e9d1711022d526c4c599b5fdcf84b335fe54ffe2325fb7b83be9d9c78438c3989", 0xea}, {&(0x7f0000000940)="d7a44ca3c92670970ae3a616a1e91e72a03065a307fb2342c5f8ffa425bd4e5ba6fdc813c7579c848cd2a095288e050ad63171e8189d3abc9492e6c3f1d862e756c9ddf37db5fdfb155de05dde3f0cc97c2d9b219c7ecec1b56585166afdd3323d6fbfe42c912e26466f989241131503a9a74a0aace9cef9ddf60697e24131c3841ca60f131dabc759bc717bba3c03d1ffb197b11c61d471881ffebe735b8e1629153b80b98deb3d117ce9eff450bd8d1f7a1fc62f0861f012c42a2e3d355c08e57c97975bd59d76366e1fb8e71ca922d9faafaada11c9f912fb7a141d947a75", 0xe0}, {&(0x7f0000001640)="4fda4924e2c37533c9533519786bdd1f0214b0b5e9cffbb77952bcd9d1bcbc3b98a88954accc3d005ad2389a8f94b7063a7bd335b1fefd58bbba3c8087ea4c243b2f97bc3c0f39f774812df8d4434b40690e2367a06097abf100fae51a7c6d769ac158943e33953eb3862c7105dc6ba31cd8df754c2c318763c69b0f7420a8ed648e66b3a4c684affa10b83530f4283d25c6223277628c6c05e315fb4d542c8dad5b8ed74b1d5e7463a44841d1c94b186268cec112b6698ba0b169fec448bffec3baf100c765e987505880860ccb5edb8e4f567aacfcc3e9143aad1a829794e7b29551665d639895935db8c51649da36d55498de23e52867b2af97277d8fcd8c6970bb0ae9518f2d4eb3c1f5af6364eae2f2a4c86d32b8707cac6e7c5f35e9b72c0d97d57d3180a0c352cc15b12ac82fabe6acf42ae3e5019c5dae5523e27d36443b5ec7bd1258e396e8cba4d7232571991bd06ab0c0c48e8511983ffb0196b78cc3aa834399abcb0ad74ff8084078e8fa585ff50c82bfcfc73e700c49aa290e6c4248777f2fd348294ce50dafa4854cf55fb2a8789cc528d4b85f14db2dbc3c047d62a6be4903219593e91fd27ec615a54b964a6cdd0322653c0630979aa73f961766cad66f96c66ae0be337af1e3e09a4288b3b62ceb00f14e2bb3c47c8a4307207e7dc11c95562a284fb1c329e19e949b644b4454693077d58e7c4932f0ea49f2ff6037df57a322eeb368272f267fa9ca442c92094f4ea0a941d81ec49fe5a370dde2d9e91ba764cd69fb9bda55afe6356f87e8415baeddf9aed5fa2dc2608a8083222b99029ee9b906d12e1d912710550457dab88c6c002b63417d4314754ce33fb22d25f38de1bb2b10abd82198cc3d7893533e50251dc7b120b5c57b109183ad0cc14a821aa200d9ffa000b1638a4078f9767d888e0365cc6cf8fcc9c07b8c1ceeb8b19339aa02b13457266e254a28e5030756f5f5219079049c3ff460d6fde0d47e021bb6a892ad0c0c033dc317768cb2f708f6f98d05ef325323de486f01f52c793adbe511a9835ba7ecb9b00a2a53f5e04d899b3a40249d06f0b68ffa2273b068a3c8cdd4c0165f45954b525218b41116a16bf8558bec77b1e62dea399acb0b927c909fa620304ea37da02d34faeb8adf9dd330e212e7ec922fc10745389ccdea81d7ef0c96bec51ed46397b5235ea6085401b54e80e08460fcaafb98cb5feea96ae6da20c12013a5e22df768f1abade5e6966f3950378a4695904ea66313f5c5d3df1377eadc624b7df426f73d78d8f0a74c1f785055fce21d36f59fe808360cce601f77cf0aa48f1e6e62db4cf6cdae7d40194b4242ac36eeddfae8f5ab289cb22200cd718882441428efb836f2ed563dd1e3f5199ef6b63512aa0660ed0ce2cb511f4672139fd7d86fd3a821aa6ec93f63b09d71bd5e896328be2e6dd1123fe36e1f2e235ff71bcc055bdb916ddf8d6cc52e09dbf0aef9ecd4e169b8e38a81ac67d5d814be666995c7c72dc24e81387d7c82edd2d3f4ca2ec1a84eb277aca774f3fd5932c4ab1574ce55a3aa84e02154b24fc49a1208f70fbead8ab484968660f824a301e908b3877b53c6dcf8f2f7f8b9878461993fd744c7d06745d38496018dfb3da34bd2649c45768415eafc372082bd0c26bfd6900ede7fa67a60a471f34636d97f21831a7345474ba440e2ef983b604adb1088e7a494ba461bff24f3a20a22d57653ed855786a9376189fe67ecd83fc77e923d47c025b9726642b438d95873e3ce193ff767999ceb7e5a63896a59548513de0b9ba199eb60c410621f5d790db34fa51584f78973e61370d86835d88fafa828fc36102cdc59bb65ebe1a9236ec0b7e7fcb237b0ec57f66bda9377a6f4dbc746118947dd37c922efc8bb14628d2b702e7be184dfcbd2a1a858f9300f2d3d7dcfca9bcc04c978165aec84ea21870fdbfa589e436111c53ec69a37f1584eaf8f799aeee172b5ee91e88a6f88985fa7b4b03dbc7872fccb52d0b2226a31700e2490dd0226a38aaf20e2d57d0f0f8e54cbebdeabf4a593a2042168f873a894b7b903827fc46fde13aa92ea4dd5735b226aeeb66a159bfcacf1c8e40a891244720c009a8315a62c0d4b564ed247005029a4e1ddbb3be61cf7eb3e325c84f8d0c439cafb5d2e5c3885f3b46632ea8ad1238fb76e29090374375792bfe06076c450f5fbdb0362f27169923c0c8b8a36a501372a6c115fffe5124ca8bc29b28c18875fae9e32c4e2b64d45024ea5e497ed66ee661eeaf81b85587390b8071fc500fee9ceb8de0a420d38a3b3e83c674f3e519d74ea96a128df5ae5f5e85949182a62ff89f4447324cac9a9c947479ec630626ef6e22fb6a99f773c122108eb0a85327ba87b6b7d20c1af42fe772715678aa2d2cfa552d17b47353301042a2f5ed42866d4e3ed69a13048269ba8c9f0974b96a0c1b70afb1735ba0c9d8ae2065cf7bdbca9c6fb32e602427f765fe598854fe8bedf6536c88c2a42f8478e6e54050d77e97a71eb9aba8c97588fb025a2bbd14fe6bde46fa376a7ddc6d6a4fe6e4ad4ac34179f12bdc44a90367c8561ea834b3aa3e381338a0c2ad2f291a4f963cafe249375712c3719724b5500e095812670e7a19ea505cc61cd35a7a98cb9ff381d0145f902bf83e37b4a68d6b015802c784fa4ff53af677e2921a87c1c1d14f7ffe7799aabfac37e819ac0d1d6917db8d9e24afc3b2bf55f7cc135835dbfee93a1f8a9807f2a0ced72c26705ce356b7936f660f78aff4a49f363579bf8a83743a508719c6b71569af45d902085ee4bb66eaf23be72264e7a676f0ec1d299213f47db0f3ab0997cb006c6a3960c127b6604ab6df9663e6d2fb155133299c917089373789be18bda533b4b25cec49e7ee359d862c72565912d5d91b9c18723cd37728b53683da9de8189526fb0247971c96d3f9aea82b4aeba703c591b870f732ef5583b3d6696d9b71975294063ebf9b4f4a2057131ac1353115d8a885d658e52eaaab29cfcd46205e6c1e90ddc7643d05cacb8b3230bc3f81bd2dc28b6118c457d6e4b7f02b6a1d9e7bb5eb507a754baf83711e6ab0bfaa991cd427dfb891e96403990e82fff0eabacc1c383294157dcf98f5ec86b78459146e552200cedfa6b781fc518d594425881961740d75ff87594437d5c330d9a35f5da53787acf0776196e381703e54b194410385609706051a1b6d1f16967421c2842d8c49ef81c00988054e865e45f2fdef4548a59ae31a2ab66431deeb30721886f4c29f8f4fd530cbfad46b58f07c176832c618a78bb19cd124d0b7338c1133c95f0fa932ad6688729e961e5b49ab0fdf0b2b9011f95c217b338a0742f2303f912bcb8afb7f1062bdd1c775dcb67a0eb69ec3aad002060a1d067970b9f4a0ae2ad988d0c4ac1177d90c458c6e1cf0d89514f6289a094d87f2052ccb28cc2cbacd94c02ae6b7252df8bac8212e2246cf4e6ce23137caf8e7de1d836edfb60dce0536b503c297a74dd3e896187ee5cc1dcafbb03358d1a73bb1c1e19c83d126b7a2a13335eec56f75c0edd2957f68b1bcfb5ab2a09f787e158636a7443f844c8da7a949616f803024a4b36511c7555b4de8f47a7fa097253f7f877dee8b02d5292368f4c3291f2d7ab1c03af8f444dfb7f188fd21743ab6b022f7e1f6d030a6e318445fffaabb803f4dd4cfea4f0e9c7dadf2cfd0c0e90db14f5234f9f53e34b0610224b82192828368f4f1a2c4e825e4e1ee081562e9a4adf8ea542ddeef8c431a42a745e7b3792ebf539a440ea20d45d515ebd077d142f57187b460c749b4049e26dd671fdcf8a31bb5eb8638c44dc41d61aafeea81f66f4e5fcdd2f263635c97e6f2b88a1cf9a38307dd40a5000479eca6147c780fad62195f2ac6c4be77794b8d77214c2d297e2079b21cf6a17f927d8df1adbb2a74f2e6ef48934519f1de91232a6b3278dc71be94b9a7451a3f18a9efebdd76dd4fd92a913a1c961079b9a31af5495f575ea72bc114d722a08aee9a97666ac2b07871b297836bc2a7942d5d29109a11fbac4d93b468104b81d4f7f69db4e6f5afd59b9c5cfb665e60c1109b3a3cbf6290f295b68de8833fe83c13f5a9a7cfab4bbd38e7aad3dcd336f0bce9b48d8755382a60a8cd45ad2e4b06e485e05b4ed199505a53900addd01fe5c6a4d4cf1e7dee69b58407960fba6259830fc9b6ef506bfe63e695bd2e8868f3deefd8fca67dfaf4a44115d59a997c6219fb6b91d2ba901716ba0c78973555ae3f537586d9189977767e5edb88d3c5970c9e31a6012a99b52b834d44eae9236c4d374da8e854d0486dadbf1076c59bd9403b835452363b60ba9f31f3996d52e8445f5ef3ae652e1b13c1b0a9b902623e34b5535e5e2b068310691d5d98b859682d9fcddd45202226495f852d02d484549f881fc9a002900132844b0897a4981f8c913fff146735c47a5f016eb2bba9aeba1515a9ed5687c0621d347c638605115f8cfa6cd0ded8c67f0912a3d821a2eee235d6d601c21bf85d689ac415edc53e1f38d5e0060a51d89e3f137a49dc6c8d83b974b580078b9fb917c8f18b4def22ba852481e871e2ff6768e8388216ae5de5cce7ee5f902298ed8e9543a48a15bf8c6c92b1798633bed66a54508739429b83453f45feaa6b8ee8fe22cfa2d297ca25336b98c5de233cc0d17ed37daf26e779aee24c936a5b4f86bd7b9212da38f871372e3bee7f2fdef3b27c82a89971dcc4fa63db6bbe02902472ec877e6789eb89c22c84aa8b5484a39a2b3a544a27fbd5bb917b886f95251d28a828721cd652f5b2b28afc28ef01bfc73df24db1e3b0b97c7d1d75e1a70eef0b891e04d3356351c51a6f0934b52efc33320baf1410f3abf6e3552f81474a79069c8e667fc5d04c1b5670f7fd6e699c01c0bb0fa7c2cd24bcfdccd5b5dffd64fb2a79d8aaad8d28bdf62418210a215636f04c31737a0328643ce43d343f2be7123cc50bb9175b37aa4a7f4397ba9341bac44261ff910a357cb7e19312e69e1266652220972f094058045dc3ed141112f084327a152c1ac9feea5af931dc9723669ead5be6a305d7529b98ca8e5eff80ac93162b8f4c52e3ecc8f0f67e963688f02b03c7fe47a1203a713ce3f525890e835e755b33fe8679cb783daf34307007f0df161377a66533236479c068b802d2cc392efe1df6269e791714b1378999a0f1cad75fa09a380008602b72a40ccad0afb5322067117a18a523788a0fb7d5981990dab3f87c4e9369c4388551b780aa0e339f52fad455685bd4f683880ea0ede71a685fa7b75f6e64bc02241b7a5a4c6669dd35825957a24e67e38a9ff17c4e8aa353d24684d99012c11dc305faae34f9b604e6bea809911e805c316f8007fbdc7eea30372db0431b5ccdebf4eb74cd35e0befe9d24a2c2b51d94655f7ccd38dbf21f706947e6affe80d2dcec2143f00b9f10b3fa4498d2cf40fb28ed274c7e25e037a0413ec8bf86ae42873a3d6ca0ed50b24d0a99caf66f807fe74f741e772152f157f30e23c9e5643e1bd271015186c45cb54a6f1014156ff7e42bb83ec04e6e4c092716775dccb4f583e1067d5c1d746360c17d6f2273d3cbd98534313dcd272399aa429b3c4539ce03ee846b6fc343f514ebf451fa24d55ca82a86c4b94226b5ac394dca182ad6d11f6299ce682bd9581a336870cbdb7231f3db2a6965d5846ea07ae5ab2cccbd61184fcefdbf70964267e34a20c07377f0af0a5063b4c1882c84ac9ee414e78f7859afc91c19cc878e91f2f4526d4", 0x1000}, {&(0x7f0000002640)="3cbf2507fe7bfb9699c2a5d60c8e935c56f70c30429282392fa7c604aece2ce070c1818563cc0a", 0x27}], 0x4, &(0x7f00000048c0)=[@rights={{0x18, 0x1, 0x1, [r3, r0]}}, @cred={{0x1c, 0x1, 0x2, {r4, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x90, 0x40}}, {{&(0x7f000000a400)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000000a800)=[{&(0x7f000000a480)="020d36dc4d6d9aab2860c7a5e39d5479e6289a0e93cb1662ea503dee9de64ad50eb031b43644ce4da78e78ca30c198ea69b3a017315cfa6cd1083025b427567db26446f05aa821c848ec7bac548cf70fcd9df859407566f0d010c9a580ed6cd241057926dbe8b7e816886f27c9e853cd23f7015a167a9a012c0084cc3740f04be2c7f8e54a62b8c5f4d90df0d6622843491627f191b896aa7565e3b284ecefb14db34733a67db67f7c3a63681563e1c772c896e96aa1a768f0d1822faba306ccc8667465ab0f00c3fffc583428c1110913d8c442bd6e0738b932990b72fdc3172ca46a0d", 0xe4}, {&(0x7f000000a580)="1ac3790e8a3d4f1dd6d8cd81156eb19dd872f72c039113edd9a3a956fe4777473e4ce63f29bbb8346d6227f60ca9ee998596809f1b2b8f9b3d3ba3648ff84128da24ca8a022cb7bf8123336bd48d7ac6d27169465b0bca52834f089b9265d2c105493b4c4ce8ef0f9c9e1a94c9e903c6e2684fdf6321bce0e530e1aa85a6d44363931e50841530b510bb0b801d1822e809883b65a2ccefc7ad485adb3ad085251f8bf657974a51dd92bca0053cef54f2cd3dbc6e4b3a9f216602eb6af76ede280b04b80234cd16527ef9e8be0ba1f36b89307c0d31d04602c981dbf29b3828bfbfd1c67e70452f67bb70", 0xea}, {&(0x7f000000a680)='G', 0x1}, {&(0x7f000000a6c0)="5c146517fc1848c694ad14b6b8bb2871a0c56327d6846cacf1cb0acf67e6b659f2a8f1bca2268b04bd3b5d664e46d8b9b68ce24ef5de6e39dbd44eed806d6506fdaa6206620099c115916652e110bcd00e3c6e7a1cee00581d3b3c9f3ab302e2c854a7824fba0523e121ca2cff08135709cf246dbc6108eb737bdde8c483872236917887d389d312a9d4f7e23784aeef432ff5c2007536c70ecb", 0x9a}, {&(0x7f000000a780)="bc372eb4d10ded6a5f06c3c0edc0b661e7708f980106966364d93061e8720d97cbf1f628bb1c0bbfa0cf8ff703915fe5111d3bbab868c2d732afef04fa44ab6dd5cff81ccd5e832139e89383720f9af4", 0x50}], 0x5, &(0x7f000000a940)=[@cred={{0x1c}}], 0x20, 0x4000000}}, {{&(0x7f000000a980)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f000000ae40)=[{&(0x7f000000aa00)="4d1d6533945510062084edfdcd5324c707f6aec88b39bc8df1fcaa36a04f3af9fc8131640355df8ac87309ac9ad9d323c0e9497603a848e178e0062dfd8748933d25cdc55cd7dfe4d26d91def1623738dd9ce0864e36d3b581a93bac94c97a255f0cc1d30875ba344007f636399fe1a0d0d109456fe24a21529bb2716a725ae87f79975cf83fd43aa429e029f62bc14d3028b9e1f8de5c1160b6e82939fc7bd7df58d03b32740804fbce3d6daa8ccc7b63", 0xb1}, {&(0x7f0000000a40)="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", 0x10f}, {&(0x7f000000ab80)="5aaf908bdfe85be93b66d01e65e58cf8f90757b079f47fbf6d4d94820a5d724e194ec9857eb55696133084c894efe31680e2b7fa93c413be7e6b7c1c34d9c90cc79ff1c3b18da11881de5d660f53f4cfaca611959b815b60b19fc123f4a94dc24ac157c0564480c3b01d4c197368a15ba416e5405a667a06ccabfcdb8ecfe1e642a26e04ff119a37b4805c1dffb58026aac0edd0a7b7deed342459bcd2ba", 0x9e}, {&(0x7f000000ac40)="5ebaf10f2d6bfb66c20da5d49f123345f3a955d27f321a71fe21ac7ed61ec03b7de88a5dad9287356da68d718b8a9058c1f320e454907638b55dda7fe7f9c7a1b1b938fa8039b8355378a20461490ff310c8042f1ab274d622be5a3738a43b8309ccb481b39990f87da5e801ffa2165afa55ffda4586326db34ee4e39b9fec31f8b8a5cdde2713157d53b506f85b3fa23e", 0x91}, {&(0x7f000000ad00)="2d7ee1cfcfbe76c53f268366bbdbb47bc52916145df645903e8664e69bc3b2acfa04a4c1cabfd6471580f157f5394fba6947b7389084949186883e2581f9355d36cbcef984d2cdc3af1535251f3c444c1b3a837c87df3ce385051a8623423fd509570a19fea1aeb8b127ea9805a86c493e13d62c085efde6b3e391", 0x7b}, {&(0x7f000000ad80)="eb1ac90e64dac2d46e5bbcc94c2fc1ca89ada3ba648f79031d7bbb44c94c07f84b3552331d2052f72546896b5b3fd8ac72d11db8a7e38a2812b1ca8b97cb31d976145de5f63077c23f84d6bdcaabb117564022cf948ac300c5e9007090c428555c0b4e2f9f73aebc82848d5d1f5e0e08da9734b1dd0c25f94c4a27ca410b76995d5d7475d7b59d5ea1d8556835ff919b069730ad0eea79d17bcf7d5ad315b63c4f059753a28082399956cadc", 0xac}], 0x6, &(0x7f000000afc0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r2, r0]}}, @rights={{0x10}}], 0x50, 0x1090}}, {{&(0x7f000000b040)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f000000b4c0)=[{&(0x7f000000b0c0)="970902be5506ead5723c4093ac707f9b08c0ab0dacb2b30a9dd5650d1a3c2e0e0f1eb6e1512fec2e27abe9926aff793443ee6bf3c4af93dd962daa2a2e40630222645b45c795cb204aa58430a8d408b374b8dddde16bbe029f284c20266a3b98f8e136db687601e9213a51f45a76ccc05ac13f72b25473916b4c3f32588119884d4276dfa3be82a66a949dadbdf312a6e22b2c51f49195943376ef16e53d35529c1178687e2a93eed11ce3a3a84cadc7829ed8c9cbf955ae355cd754fb83bed92f719baf4cc47138fb69854354f49ff8ec323d8d9e594e402aac270feec9", 0xde}, {&(0x7f000000b1c0)="7728aaaefbe201b4dba3e6402b27a802b1481bc599f2923d8637f62b3a2dafafdd0b70a2713db2b1e5340e8dac7853a7e339c488deb48d90d7ccba97c9eb3ae0d10cb305f7e8053dbbf6b7043f82b7796a5d8e8dc30009e7cf8e74ba7cb043bfdbba9dcc3ac4f1c28d5e22ed6dc439bfec100c5c1dd6edefde2f48316ebe0823047c06333e760c323e9cfbdca8eec9f6173f45e3420d359afe4776eda7c0f38a9bcdb60b0fb1e8074301dc90fa5a6ef08241087ba956b354787e177f38c38f00b640e38e43972de8d5f771507f93ff2e7d24ef8f21c49ad21127758bcc0881d5fc97876e7e3d8fd7e961a4678a75c1add1fe", 0xf2}, {&(0x7f000000b2c0)="af2406d9680390bbb147be824b1aa66e63ae1be39b20b302dfe6aac031a091a2c859238dc31a4cf12dd528d642f3b60987983201fd26237ee26124dd309a84a4a1d83e71665bead583756b15464ec5adcfdd3817e7580f2ab648dd663cc7bffd54b98e255a7326fb1b49678f868a37e1edb015d49bcbbbb649fc18dcd140bfb5de444a0e459c3e844b5c42c2ab661247f3492a3072dcb8b00ac6c9cf1129b9e64914e2974bb6370ab7fde7acf99074d07135e08390b17667db04e2f68e91659eec4815b16e", 0xc5}, {&(0x7f000000b3c0)="fc7cd34bc8099d46c9a058d8a927eb88ec3748dd94214e4c46365534f51ddc8b188ce065598d65900ae5d5230582eb578c6242156e49dce110a9dc161cba268112c20424b0a148386c19b9a38726f6a2619472ebd43fac3c0396250afa815ee8547cf72328afca24909a7506306b67fab9af73009f0eed0cb7bdf40956f8a9e15712d3bf8c7d5ef5dd9c41c4b5bb4f8acd70a7a9a2e5a814eefa895f26d6214842a9bf0511ebc2a1fe0894310c9a9e4ea41efaafab4b232a742b374dcac606e965f8da244d74b2fd688f297f1cd249b7d8f33f7b873345c7d48320f6ea0aa6a4ebea98d5821620a1ec87cfd84f50f6bac23068", 0xf3}], 0x4, &(0x7f000000b540)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60, 0x8000}}, {{&(0x7f000000b5c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000000b840)=[{&(0x7f000000b640)="73111f6be959759ddebfc574b59b13e70cde718b788030bfda11340b38d3a00426017b0370b49362309d0d519b562b62c50ce45d3756d6251c7580ebf0ddc8a3911a7fc0c74f6348809694fd569e7cd9d56511e65611c79389a1c13e6b58e28834c6e8a7ae9b12445713e1dbb88cc2c398d7731afc5620c1a8e14da3562986ab3b0818641be6694bc26ff00092b4919435e56a707c395afbd3932bcee5c9997ee72256c244bfe2ee78b441a3b3622873b60f474f57981f3e1379f4d5d4f59f47c9f2c70b1d7d6c5b", 0xc8}, {&(0x7f000000b740)="5bfa1417ecbf9337965a5c05caafbb839e7b7fc12fc8e0ca8632ebfb69963aa526eadda67ac877c6d1d7887cdded0a90d7101b9fe9ae85222b2239ed75e459064af294fcab61ec388ea7e2451e7775407e0b306c6892492c8816b211a0bd0625379154e624eb37a91f20dd4b1ef2ef3a505949d20066160ca9678211240679b8a1d0b5fc304d3b96de31ff90", 0x8c}, {&(0x7f000000b800)="a8ca246d6726e154e15595", 0xb}], 0x3, &(0x7f000000ba40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, r1]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8, 0x80}}], 0x6, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001600)={0x40, 0x43, 0x1, 0xfffffffe, 0x25dfdbf8, {0x2, 0x7c}, [@nested={0x4, 0x145}, @nested={0x28, 0x1, 0x0, 0x1, [@typed={0x14, 0xd3, 0x0, 0x0, @ipv6=@loopback}, @typed={0x8, 0xde, 0x0, 0x0, @fd}, @typed={0x8, 0x62, 0x0, 0x0, @pid}]}]}, 0x40}, 0x1, 0x0, 0x0, 0xc044}, 0xc000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r7 = dup(r0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x39) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000003, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000b80)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="00023cbd7000fddbdf2545000000a7314b81cee2f661642bb09b66e05c7afa4e627dc514e508c78b8ed2a0e7bd30dbf60ce765aa73c903d57c8e2a5ec0f4e2d3ac90d2c03615a3"], 0x14}, 0x1, 0x0, 0x0, 0x44000880}, 0x10000881) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1886c301}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xb0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x926, 0x0, r13, 0x3, '\x00', 0x0, r7, 0x1, 0x0, 0x3}, 0x50) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'ip_vti0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x80, 0x8000, 0x1, 0x3, {{0x29, 0x4, 0x2, 0x1e, 0xa4, 0x64, 0x0, 0xf, 0x29, 0x0, @rand_addr=0x64010100, @private=0xa010100, {[@generic={0x94, 0x8, "59aacb633e2d"}, @cipso={0x86, 0x4e, 0x3, [{0x1, 0x5, "8e7641"}, {0x0, 0xa, "a3a85cd912173925"}, {0x6, 0xa, "f7022d98457df22d"}, {0x1, 0x10, "6408bddf392959791f2602a7e16c"}, {0x6, 0xe, "c5b97f4b3789ca07efb457c7"}, {0x1, 0xd, "267705db21563a94195f01"}, {0x5, 0x4, "bba5"}]}, @noop, @generic={0x94, 0x12, "9010407b87d47b6669a193d45a22d95c"}, @noop, @ssrr={0x89, 0x23, 0x91, [@rand_addr=0x64010101, @broadcast, @empty, @loopback, @rand_addr=0x64010101, @empty, @rand_addr=0x64010102, @local]}]}}}}}) 0s ago: executing program 32 (id=219): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x200}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}}, 0x0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0x81) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) r4 = syz_clone(0x40000000, &(0x7f0000000180)="5fadb261810f3ad8e14628de82a589fc3300a37eaf133548c8310607b13a4fec0439550942558d0b1f6314fc68e53a6ba02544ec55e7df4e0f0f84fbdc137b7523261e3e43c79a1e54942d0a838a06a6f7e54051ebb5ad38433ae53a665599fb0d046adf152899b2b15a011ebce3ffa55e08645f133bb2197d02c31e161a9f7f0547f035457c5fad8a5918cc59ee17ed307b3cc4661e63e3883c4b0a5a55c716700e2d236d7a70e2997af02f6a878a3e8efef223275f", 0xb6, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="dfd06e7a0137052b87bfcc9819b69bbf9e10510b189cb8300b709418083f6d17e94692e6addce79b7ad98819507793b8e496eb3d13f4ebc38b75e346a3e16d96574c8ef0e9aca8309e0ca58b759c6fe48b93") ptrace$getregset(0x4204, r4, 0x200, &(0x7f0000000400)={&(0x7f0000000380)=""/104, 0x68}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYRESOCT=r5, @ANYRES32=0x0, @ANYBLOB="dd002000c8c9f0cbb71aecd3ca"], 0x28}}, 0x0) sendmmsg(r3, 0x0, 0x0, 0x80) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, 0x0, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.54' (ED25519) to the list of known hosts. [ 64.552699][ T5606] cgroup: Unknown subsys name 'net' [ 64.696061][ T5606] cgroup: Unknown subsys name 'cpuset' [ 64.704099][ T5606] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.028862][ T5606] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.104332][ T4942] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.116912][ T4942] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.125670][ T4942] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.136680][ T4942] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.149324][ T5623] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.158492][ T5622] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.165760][ T5622] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.183806][ T5623] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.197605][ T5623] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.208386][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.263805][ T4942] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.273460][ T4942] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.281762][ T4942] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.290382][ T4942] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.300601][ T4942] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.354951][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.363750][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.371531][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.383269][ T5623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.390569][ T5622] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.400010][ T5623] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.407478][ T5622] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.417581][ T5622] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.426530][ T5622] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.434168][ T5622] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.193485][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.201423][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.210278][ T5631] bridge_slave_0: entered allmulticast mode [ 69.218577][ T5631] bridge_slave_0: entered promiscuous mode [ 69.258294][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.265480][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.272559][ T5631] bridge_slave_1: entered allmulticast mode [ 69.279564][ T5631] bridge_slave_1: entered promiscuous mode [ 69.303529][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.310606][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.317762][ T5628] bridge_slave_0: entered allmulticast mode [ 69.324560][ T5628] bridge_slave_0: entered promiscuous mode [ 69.357059][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.364233][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.371338][ T5628] bridge_slave_1: entered allmulticast mode [ 69.378485][ T5628] bridge_slave_1: entered promiscuous mode [ 69.421273][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.460007][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.492217][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.517119][ T5635] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.524297][ T5635] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.531374][ T5635] bridge_slave_0: entered allmulticast mode [ 69.538367][ T5635] bridge_slave_0: entered promiscuous mode [ 69.551633][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.579583][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.587018][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.594466][ T5633] bridge_slave_0: entered allmulticast mode [ 69.601224][ T5633] bridge_slave_0: entered promiscuous mode [ 69.608331][ T5635] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.615665][ T5635] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.622748][ T5635] bridge_slave_1: entered allmulticast mode [ 69.629861][ T5635] bridge_slave_1: entered promiscuous mode [ 69.655040][ T5631] team0: Port device team_slave_0 added [ 69.660729][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.668020][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.675275][ T5633] bridge_slave_1: entered allmulticast mode [ 69.682299][ T5633] bridge_slave_1: entered promiscuous mode [ 69.717770][ T5628] team0: Port device team_slave_0 added [ 69.724962][ T5631] team0: Port device team_slave_1 added [ 69.758427][ T5636] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.765717][ T5636] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.772795][ T5636] bridge_slave_0: entered allmulticast mode [ 69.779791][ T5636] bridge_slave_0: entered promiscuous mode [ 69.789477][ T5628] team0: Port device team_slave_1 added [ 69.805354][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.816543][ T5635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.830670][ T5636] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.837878][ T5636] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.845126][ T5636] bridge_slave_1: entered allmulticast mode [ 69.851882][ T5636] bridge_slave_1: entered promiscuous mode [ 69.866967][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.873973][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.899910][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.913317][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.924337][ T5635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.949934][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.956928][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.983099][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.019042][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.026004][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.051901][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.087918][ T5636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.097585][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.106655][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.133460][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.150836][ T5633] team0: Port device team_slave_0 added [ 70.158637][ T5635] team0: Port device team_slave_0 added [ 70.166149][ T5636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.198191][ T5633] team0: Port device team_slave_1 added [ 70.205346][ T5635] team0: Port device team_slave_1 added [ 70.236384][ T5631] hsr_slave_0: entered promiscuous mode [ 70.242622][ T5631] hsr_slave_1: entered promiscuous mode [ 70.263481][ T5622] Bluetooth: hci1: command tx timeout [ 70.272992][ T5622] Bluetooth: hci0: command tx timeout [ 70.279758][ T5636] team0: Port device team_slave_0 added [ 70.287832][ T5636] team0: Port device team_slave_1 added [ 70.324591][ T5628] hsr_slave_0: entered promiscuous mode [ 70.330903][ T5628] hsr_slave_1: entered promiscuous mode [ 70.337272][ T5628] debugfs: 'hsr0' already exists in 'hsr' [ 70.343383][ T5622] Bluetooth: hci2: command tx timeout [ 70.343479][ T5628] Cannot create hsr debugfs directory [ 70.363804][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.370799][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.396716][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.408518][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.415481][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.441728][ T5635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.477786][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.485004][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.502960][ T5622] Bluetooth: hci4: command tx timeout [ 70.511030][ T50] Bluetooth: hci3: command tx timeout [ 70.517102][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.533484][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.540427][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.566726][ T5635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.591241][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.598205][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.624430][ T5636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.643338][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.650296][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.676325][ T5636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.808334][ T5635] hsr_slave_0: entered promiscuous mode [ 70.814507][ T5635] hsr_slave_1: entered promiscuous mode [ 70.820440][ T5635] debugfs: 'hsr0' already exists in 'hsr' [ 70.826197][ T5635] Cannot create hsr debugfs directory [ 70.876119][ T5633] hsr_slave_0: entered promiscuous mode [ 70.882197][ T5633] hsr_slave_1: entered promiscuous mode [ 70.888322][ T5633] debugfs: 'hsr0' already exists in 'hsr' [ 70.894393][ T5633] Cannot create hsr debugfs directory [ 70.946688][ T5636] hsr_slave_0: entered promiscuous mode [ 70.952798][ T5636] hsr_slave_1: entered promiscuous mode [ 70.959491][ T5636] debugfs: 'hsr0' already exists in 'hsr' [ 70.965398][ T5636] Cannot create hsr debugfs directory [ 71.226326][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.233050][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.282067][ T5631] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.293858][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.301826][ T5631] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.311029][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.335748][ T5631] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.345849][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.353955][ T5631] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.363217][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.451339][ T5628] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.465328][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.474529][ T5628] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.483768][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.491335][ T5628] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.501376][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.510320][ T5628] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.519533][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.601689][ T5635] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.612004][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.620656][ T5635] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.630121][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.638260][ T5635] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.647846][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.659450][ T5635] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.669115][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.751558][ T5636] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.761470][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.779216][ T5636] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.789254][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.798268][ T5636] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.807205][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.818625][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.830097][ T5636] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.839055][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.929596][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.949138][ T5633] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.959066][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.967948][ T5633] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.976879][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.991416][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.998556][ T5633] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.008133][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.016134][ T5633] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.026084][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.052562][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.059965][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.101239][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.108326][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.122384][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.161912][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.169001][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.178378][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.185562][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.226060][ T5635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.286117][ T5636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.311236][ T5635] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.343066][ T50] Bluetooth: hci0: command tx timeout [ 72.343080][ T5622] Bluetooth: hci1: command tx timeout [ 72.354081][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.361181][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.372718][ T5636] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.394602][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.401685][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.419904][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.427098][ T5622] Bluetooth: hci2: command tx timeout [ 72.442523][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.449619][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.474793][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.481860][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.507575][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.518256][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.547825][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.554964][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.583146][ T5622] Bluetooth: hci3: command tx timeout [ 72.583156][ T50] Bluetooth: hci4: command tx timeout [ 72.600039][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.607221][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.641712][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.691511][ T5631] veth0_vlan: entered promiscuous mode [ 72.722808][ T5631] veth1_vlan: entered promiscuous mode [ 72.759780][ T5633] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.789156][ T5635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.809169][ T5636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.836732][ T5631] veth0_macvtap: entered promiscuous mode [ 72.847121][ T5631] veth1_macvtap: entered promiscuous mode [ 72.868087][ T5628] veth0_vlan: entered promiscuous mode [ 72.894458][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.913831][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.924762][ T5628] veth1_vlan: entered promiscuous mode [ 72.937020][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.951342][ T3343] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.976902][ T3343] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.986717][ T3343] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.004058][ T3343] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.019733][ T5635] veth0_vlan: entered promiscuous mode [ 73.044939][ T5635] veth1_vlan: entered promiscuous mode [ 73.070049][ T5636] veth0_vlan: entered promiscuous mode [ 73.109361][ T5628] veth0_macvtap: entered promiscuous mode [ 73.132228][ T5636] veth1_vlan: entered promiscuous mode [ 73.141602][ T5628] veth1_macvtap: entered promiscuous mode [ 73.180126][ T5633] veth0_vlan: entered promiscuous mode [ 73.200381][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.210336][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.229978][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.244044][ T5633] veth1_vlan: entered promiscuous mode [ 73.271370][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.281335][ T3343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.290397][ T3343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.306445][ T5635] veth0_macvtap: entered promiscuous mode [ 73.327849][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.337112][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.354409][ T5636] veth0_macvtap: entered promiscuous mode [ 73.361917][ T5635] veth1_macvtap: entered promiscuous mode [ 73.371855][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.381301][ T5631] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 73.383351][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.416854][ T5636] veth1_macvtap: entered promiscuous mode [ 73.444307][ T5633] veth0_macvtap: entered promiscuous mode [ 73.477856][ T5633] veth1_macvtap: entered promiscuous mode [ 73.528341][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.550377][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.560789][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.587282][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.605553][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.622824][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.632219][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.640270][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.660112][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.669109][ T30] audit: type=1326 audit(1777695313.264:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5710 comm="syz.2.3" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25dbb9cdd9 code=0x7ffc0000 [ 73.695283][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.720282][ T30] audit: type=1326 audit(1777695313.314:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5710 comm="syz.2.3" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f25dbb9cdd9 code=0x7ffc0000 [ 73.767237][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.774845][ T30] audit: type=1326 audit(1777695313.314:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5710 comm="syz.2.3" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25dbb9cdd9 code=0x7ffc0000 [ 73.809480][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.811300][ T30] audit: type=1326 audit(1777695313.344:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5710 comm="syz.2.3" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f25dbb9cdd9 code=0x7ffc0000 [ 73.875040][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.885837][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.897569][ T30] audit: type=1326 audit(1777695313.344:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5710 comm="syz.2.3" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25dbb9cdd9 code=0x7ffc0000 [ 73.905140][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.952417][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.952706][ T48] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.961354][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.981567][ T30] audit: type=1326 audit(1777695313.344:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5710 comm="syz.2.3" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f25dbb9cdd9 code=0x7ffc0000 [ 73.994266][ T48] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.030989][ T30] audit: type=1326 audit(1777695313.354:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5710 comm="syz.2.3" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25dbb9cdd9 code=0x7ffc0000 [ 74.080531][ T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.094475][ T30] audit: type=1326 audit(1777695313.354:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5710 comm="syz.2.3" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25dbb9cdd9 code=0x7ffc0000 [ 74.125768][ T30] audit: type=1326 audit(1777695313.404:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5710 comm="syz.2.3" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f25dbb9cdd9 code=0x7ffc0000 [ 74.170267][ T30] audit: type=1326 audit(1777695313.404:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5710 comm="syz.2.3" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25dbb9cdd9 code=0x7ffc0000 [ 74.238523][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.256699][ T48] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.423269][ T5622] Bluetooth: hci0: command tx timeout [ 74.423451][ T50] Bluetooth: hci1: command tx timeout [ 74.447841][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.479805][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.513103][ T50] Bluetooth: hci2: command tx timeout [ 74.515966][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.552129][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.607447][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.631780][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.663310][ T50] Bluetooth: hci3: command tx timeout [ 74.664478][ T5622] Bluetooth: hci4: command tx timeout [ 74.694345][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.726178][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.776952][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.806068][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.895605][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.929737][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.320022][ T5724] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 75.536001][ T5731] sg_write: data in/out 414684/82 bytes for SCSI command 0x0-- guessing data in; [ 75.536001][ T5731] program syz.0.1 not setting count and/or reply_len properly [ 75.568751][ T5679] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 75.739014][ T5679] usb 4-1: config 171 has an invalid interface number: 109 but max is 0 [ 75.751354][ T5679] usb 4-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 75.775556][ T5679] usb 4-1: config 171 has no interface number 0 [ 75.796329][ T5679] usb 4-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 75.816964][ T5679] usb 4-1: config 171 interface 109 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 75.841940][ T5679] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 75.854719][ T5679] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.868629][ T5679] usb 4-1: Product: syz [ 75.885159][ T5679] usb 4-1: Manufacturer: syz [ 75.893884][ T5679] usb 4-1: SerialNumber: syz [ 75.967244][ T5723] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 76.053211][ T5726] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 76.223960][ T5726] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 76.248327][ T5726] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 76.316055][ T5726] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 76.359737][ T5726] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.507836][ T5622] Bluetooth: hci0: command tx timeout [ 76.507848][ T50] Bluetooth: hci1: command tx timeout [ 76.583113][ T5622] Bluetooth: hci2: command tx timeout [ 76.637238][ T5726] usb 3-1: GET_CAPABILITIES returned 0 [ 76.660762][ T5726] usbtmc 3-1:16.0: can't read capabilities [ 76.743058][ T5622] Bluetooth: hci3: command tx timeout [ 76.753047][ T5622] Bluetooth: hci4: command tx timeout [ 77.066423][ T5679] ath6kl: Failed to submit usb control message: -110 [ 77.087479][ T5679] ath6kl: unable to send the bmi data to the device: -110 [ 77.107015][ T5679] ath6kl: Unable to send get target info: -110 [ 77.136931][ T5679] ath6kl: Failed to init ath6kl core: -110 [ 77.165432][ T5679] ath6kl_usb 4-1:171.109: probe with driver ath6kl_usb failed with error -110 [ 77.268007][ T5749] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 77.611239][ T5742] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.619374][ T5742] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.631340][ T5742] bridge0: entered allmulticast mode [ 78.715940][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 78.715951][ T30] audit: type=1326 audit(1777695318.314:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5766 comm="syz.0.15" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ffb9cdd9 code=0x7ffc0000 [ 78.805788][ T5679] usb 3-1: USB disconnect, device number 2 [ 78.887037][ T30] audit: type=1326 audit(1777695318.354:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5766 comm="syz.0.15" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fb6ffb9cdd9 code=0x7ffc0000 [ 78.991264][ T30] audit: type=1326 audit(1777695318.354:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5766 comm="syz.0.15" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ffb9cdd9 code=0x7ffc0000 [ 79.017360][ T5780] netlink: 'syz.2.19': attribute type 11 has an invalid length. [ 79.065852][ T30] audit: type=1326 audit(1777695318.354:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5766 comm="syz.0.15" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb6ffb9cdd9 code=0x7ffc0000 [ 79.238993][ T30] audit: type=1326 audit(1777695318.354:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5766 comm="syz.0.15" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ffb9cdd9 code=0x7ffc0000 [ 79.310043][ T30] audit: type=1326 audit(1777695318.354:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5766 comm="syz.0.15" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb6ffb9cdd9 code=0x7ffc0000 [ 79.458197][ T5777] netlink: 224 bytes leftover after parsing attributes in process `syz.1.17'. [ 79.475445][ T30] audit: type=1326 audit(1777695318.354:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5766 comm="syz.0.15" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ffb9cdd9 code=0x7ffc0000 [ 79.571334][ T30] audit: type=1326 audit(1777695318.364:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5766 comm="syz.0.15" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7fb6ffb9cdd9 code=0x7ffc0000 [ 79.683014][ T30] audit: type=1326 audit(1777695318.364:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5766 comm="syz.0.15" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ffb9cdd9 code=0x7ffc0000 [ 79.734436][ T30] audit: type=1326 audit(1777695318.364:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5766 comm="syz.0.15" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fb6ffb9cdd9 code=0x7ffc0000 [ 79.835178][ T5796] sg_write: data in/out 414684/82 bytes for SCSI command 0x0-- guessing data in; [ 79.835178][ T5796] program syz.4.21 not setting count and/or reply_len properly [ 79.957996][ T9] usb 4-1: USB disconnect, device number 2 [ 80.561540][ T5810] syz.2.26 uses obsolete (PF_INET,SOCK_PACKET) [ 80.940741][ T5815] syzkaller0: entered promiscuous mode [ 80.961058][ T5815] syzkaller0: entered allmulticast mode [ 81.073373][ T5822] tipc: Started in network mode [ 81.113297][ T5822] tipc: Node identity 00000000000000000040ffffe0000001, cluster identity 4711 [ 81.166493][ T5822] tipc: Enabling of bearer rejected, failed to enable media [ 81.495804][ T5833] syzkaller0: entered promiscuous mode [ 81.517832][ T5833] syzkaller0: entered allmulticast mode [ 81.610100][ T5837] geneve2: entered promiscuous mode [ 81.619033][ T5695] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 81.620999][ T5837] geneve2: entered allmulticast mode [ 81.765700][ T5845] xt_hashlimit: size too large, truncated to 1048576 [ 81.772663][ T5845] xt_hashlimit: invalid rate [ 81.785391][ T5695] usb 3-1: device descriptor read/64, error -71 [ 81.842977][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 81.923364][ T5849] netlink: 'syz.1.43': attribute type 11 has an invalid length. [ 81.968240][ T5850] ip6gre1: entered promiscuous mode [ 81.980277][ T5850] ip6gre1: entered allmulticast mode [ 82.023219][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 82.043281][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 82.054486][ T5695] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 82.073796][ T9] usb 4-1: config 1 has an invalid descriptor of length 250, skipping remainder of the config [ 82.094301][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 82.117174][ T9] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 82.136086][ T5857] netlink: 16 bytes leftover after parsing attributes in process `syz.4.45'. [ 82.136684][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.185890][ T9] usb 4-1: Product: syz [ 82.203232][ T9] usb 4-1: Manufacturer: syz [ 82.209097][ T9] usb 4-1: SerialNumber: syz [ 82.216740][ T5695] usb 3-1: device descriptor read/64, error -71 [ 82.273055][ T5726] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 82.344353][ T5695] usb usb3-port1: attempt power cycle [ 82.408353][ T5870] syzkaller1: entered promiscuous mode [ 82.414155][ T5870] syzkaller1: entered allmulticast mode [ 82.434495][ T5726] usb 1-1: Using ep0 maxpacket: 32 [ 82.448076][ T5726] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.453969][ T9] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 82.468112][ T5726] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.479712][ T5726] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 82.490945][ T5872] sg_write: data in/out 414684/82 bytes for SCSI command 0x0-- guessing data in; [ 82.490945][ T5872] program syz.4.50 not setting count and/or reply_len properly [ 82.509233][ T5726] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.534041][ T5726] usb 1-1: config 0 descriptor?? [ 82.604112][ T5726] hub 1-1:0.0: USB hub found [ 82.655191][ T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 82.673759][ T5874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.52'. [ 82.702952][ T5695] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 82.725466][ T5778] udevd[5778]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 82.747777][ T5695] usb 3-1: device descriptor read/8, error -71 [ 82.795989][ T5726] hub 1-1:0.0: 1 port detected [ 82.996036][ T5695] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 83.006736][ T5880] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 83.044031][ T5695] usb 3-1: device descriptor read/8, error -71 [ 83.165605][ T5695] usb usb3-port1: unable to enumerate USB device [ 83.825838][ T5887] syzkaller0: entered promiscuous mode [ 83.833935][ T5887] syzkaller0: entered allmulticast mode [ 84.027318][ T5726] hub 1-1:0.0: hub_hub_status failed (err = -32) [ 84.041521][ T5726] hub 1-1:0.0: config failed, can't get hub status (err -32) [ 84.041663][ T5889] tipc: Started in network mode [ 84.060038][ T5889] tipc: Node identity 00000000000000000040ffffe0000001, cluster identity 4711 [ 84.069781][ T5889] tipc: Enabling of bearer rejected, failed to enable media [ 84.083249][ T5726] usbhid 1-1:0.0: can't add hid device: -32 [ 84.089492][ T5726] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 84.141887][ T5726] usb 1-1: USB disconnect, device number 2 [ 84.223875][ T5891] syz.1.58: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 84.240683][ T5891] CPU: 0 UID: 0 PID: 5891 Comm: syz.1.58 Tainted: G L syzkaller #0 PREEMPT(full) [ 84.240707][ T5891] Tainted: [L]=SOFTLOCKUP [ 84.240713][ T5891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 84.240730][ T5891] Call Trace: [ 84.240739][ T5891] [ 84.240745][ T5891] dump_stack_lvl+0xe8/0x150 [ 84.240770][ T5891] warn_alloc+0x249/0x340 [ 84.240795][ T5891] ? __pfx_warn_alloc+0x10/0x10 [ 84.240825][ T5891] __vmalloc_node_range_noprof+0x132/0x1750 [ 84.240844][ T5891] ? __mutex_trylock_common+0x158/0x260 [ 84.240863][ T5891] ? __pfx___mutex_trylock_common+0x10/0x10 [ 84.240882][ T5891] ? trace_contention_end+0x3d/0x140 [ 84.240906][ T5891] ? __mutex_lock+0x319/0x1550 [ 84.240929][ T5891] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 84.240945][ T5891] ? tomoyo_path_number_perm+0x219/0x630 [ 84.240960][ T5891] ? dvb_demux_do_ioctl+0x320/0x540 [ 84.240977][ T5891] ? __pfx___mutex_lock+0x10/0x10 [ 84.240993][ T5891] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 84.241010][ T5891] vmalloc_noprof+0xb2/0xe0 [ 84.241024][ T5891] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 84.241041][ T5891] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 84.241061][ T5891] dvb_demux_do_ioctl+0x45d/0x540 [ 84.241079][ T5891] dvb_usercopy+0x199/0x2e0 [ 84.241093][ T5891] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 84.241108][ T5891] ? __pfx_dvb_usercopy+0x10/0x10 [ 84.241130][ T5891] ? __fget_files+0x3a0/0x420 [ 84.241144][ T5891] ? __fget_files+0x2a/0x420 [ 84.241160][ T5891] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 84.241179][ T5891] dvb_demux_ioctl+0x29/0x40 [ 84.241194][ T5891] __se_sys_ioctl+0xfc/0x170 [ 84.241211][ T5891] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.241224][ T5891] do_syscall_64+0x15f/0xf80 [ 84.241238][ T5891] ? trace_irq_disable+0x3b/0x140 [ 84.241255][ T5891] ? clear_bhb_loop+0x40/0x90 [ 84.241270][ T5891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.241282][ T5891] RIP: 0033:0x7f74dff9cdd9 [ 84.241297][ T5891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.241307][ T5891] RSP: 002b:00007f74de1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 84.241320][ T5891] RAX: ffffffffffffffda RBX: 00007f74e0215fa0 RCX: 00007f74dff9cdd9 [ 84.241328][ T5891] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000006 [ 84.241335][ T5891] RBP: 00007f74e0032d69 R08: 0000000000000000 R09: 0000000000000000 [ 84.241343][ T5891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.241350][ T5891] R13: 00007f74e0216038 R14: 00007f74e0215fa0 R15: 00007f74e033fa48 [ 84.241371][ T5891] [ 84.241688][ T5891] Mem-Info: [ 84.471718][ T992] usb 4-1: USB disconnect, device number 3 [ 84.551346][ T5891] active_anon:7029 inactive_anon:0 isolated_anon:0 [ 84.551346][ T5891] active_file:3336 inactive_file:39932 isolated_file:0 [ 84.551346][ T5891] unevictable:768 dirty:1841 writeback:0 [ 84.551346][ T5891] slab_reclaimable:10157 slab_unreclaimable:93541 [ 84.551346][ T5891] mapped:30845 shmem:2421 pagetables:1216 [ 84.551346][ T5891] sec_pagetables:2 bounce:0 [ 84.551346][ T5891] kernel_misc_reclaimable:0 [ 84.551346][ T5891] free:1326293 free_pcp:13457 free_cma:0 [ 84.641356][ T5891] Node 0 active_anon:29416kB inactive_anon:0kB active_file:13344kB inactive_file:159520kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124480kB dirty:7356kB writeback:0kB shmem:9248kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11936kB pagetables:4436kB sec_pagetables:8kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 84.725171][ T5891] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 84.834563][ T5891] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 84.952623][ T5915] xt_hashlimit: size too large, truncated to 1048576 [ 84.974900][ T5915] xt_hashlimit: invalid rate [ 85.005662][ T5891] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 85.041634][ T5891] Node 0 DMA32 free:1338200kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32356kB inactive_anon:0kB active_file:13344kB inactive_file:159520kB unevictable:1536kB writepending:7364kB zspages:0kB present:3129332kB managed:2552668kB mlocked:0kB bounce:0kB free_pcp:54392kB local_pcp:23176kB free_cma:0kB [ 85.092474][ T5891] lowmem_reserve[]: 0 0 0 0 0 [ 85.098043][ T5891] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 85.163437][ T5919] geneve2: entered promiscuous mode [ 85.168691][ T5891] lowmem_reserve[]: 0 0 0 0 0 [ 85.176241][ T5919] geneve2: entered allmulticast mode [ 85.181626][ T5891] Node 1 Normal free:3948692kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:8kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 85.229578][ T5891] lowmem_reserve[]: 0 0 0 0 0 [ 85.247579][ T5891] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 85.269142][ T5891] Node 0 DMA32: 1135*4kB (UM) 454*8kB (UME) 143*16kB (UM) 7*32kB (UME) 5*64kB (UME) 1*128kB (M) 1*256kB (M) 3*512kB (ME) 9*1024kB (UM) 2*2048kB (UE) 320*4096kB (M) = 1336956kB [ 85.296471][ T5891] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 85.310631][ T5891] Node 1 Normal: 1*4kB (M) 8*8kB (UM) 7*16kB (UM) 9*32kB (UM) 3*64kB (UM) [ 85.310739][ T5917] tipc: Enabling of bearer rejected, failed to enable media [ 85.310744][ T5891] 6*128kB [ 85.315512][ T5932] netlink: 'syz.2.72': attribute type 11 has an invalid length. [ 85.327672][ T5891] (UM) 3*256kB (UM) 2*512kB (M) 1*1024kB (M) 0*2048kB 963*4096kB (UM) = 3948692kB [ 85.360655][ T5891] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 85.372148][ T5891] Node 0 hugepages_total=6 hugepages_free=6 hugepages_surp=4 hugepages_size=2048kB [ 85.444263][ T5891] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 85.484675][ T5891] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 85.514142][ T5891] 47426 total pagecache pages [ 85.524098][ T5891] 0 pages in swap cache [ 85.528788][ T5891] Free swap = 124996kB [ 85.538492][ T5891] Total swap = 124996kB [ 85.543417][ T992] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 85.554115][ T5891] 2097051 pages RAM [ 85.564239][ T5891] 0 pages HighMem/MovableOnly [ 85.583984][ T5891] 427101 pages reserved [ 85.592372][ T5891] 0 pages cma reserved [ 85.593886][ T5937] netlink: 64 bytes leftover after parsing attributes in process `syz.3.74'. [ 85.704636][ T992] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 85.717715][ T992] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.749158][ T992] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 85.769302][ T992] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 85.780859][ T992] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.812395][ T992] usb 1-1: config 0 descriptor?? [ 85.820800][ T5947] syzkaller1: entered promiscuous mode [ 85.827000][ T5947] syzkaller1: entered allmulticast mode [ 85.933011][ T5679] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 85.975443][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 85.975455][ T30] audit: type=1326 audit(1777695325.564:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5950 comm="syz.1.81" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74dff9cdd9 code=0x7ffc0000 [ 86.021046][ T5951] ipvlan2: entered promiscuous mode [ 86.025910][ T30] audit: type=1326 audit(1777695325.574:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5950 comm="syz.1.81" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74dff9cdd9 code=0x7ffc0000 [ 86.051924][ T30] audit: type=1326 audit(1777695325.574:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5950 comm="syz.1.81" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f74dff9cdd9 code=0x7ffc0000 [ 86.076399][ T30] audit: type=1326 audit(1777695325.574:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5950 comm="syz.1.81" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74dff9cdd9 code=0x7ffc0000 [ 86.105794][ T30] audit: type=1326 audit(1777695325.574:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5950 comm="syz.1.81" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f74dff9cdd9 code=0x7ffc0000 [ 86.133013][ T5679] usb 5-1: Using ep0 maxpacket: 32 [ 86.136431][ T30] audit: type=1326 audit(1777695325.574:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5950 comm="syz.1.81" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74dff9cdd9 code=0x7ffc0000 [ 86.147126][ T5679] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.162346][ T30] audit: type=1326 audit(1777695325.574:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5950 comm="syz.1.81" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f74dff9cdd9 code=0x7ffc0000 [ 86.198669][ T5679] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.240608][ T5953] syzkaller0: entered promiscuous mode [ 86.256200][ T5953] syzkaller0: entered allmulticast mode [ 86.306842][ T5679] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 86.324750][ T992] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 86.340297][ T5679] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 86.357973][ T5679] usb 5-1: Product: syz [ 86.365814][ T5679] usb 5-1: Manufacturer: syz [ 86.379889][ T30] audit: type=1326 audit(1777695325.574:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5950 comm="syz.1.81" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74dff9cdd9 code=0x7ffc0000 [ 86.400841][ T5679] hub 5-1:4.0: USB hub found [ 86.432230][ T30] audit: type=1326 audit(1777695325.574:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5950 comm="syz.1.81" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f74dff9cdd9 code=0x7ffc0000 [ 86.599563][ T5679] hub 5-1:4.0: 2 ports detected [ 86.599804][ T30] audit: type=1326 audit(1777695325.574:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5950 comm="syz.1.81" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74dff9cdd9 code=0x7ffc0000 [ 86.703315][ T10] cfg80211: failed to load regulatory.db [ 87.675466][ T992] usb 1-1: reset high-speed USB device number 3 using dummy_hcd [ 87.815502][ T992] usb 1-1: device descriptor read/64, error -32 [ 87.857917][ T5679] hub 5-1:4.0: activate --> -90 [ 88.041266][ T5961] batman_adv: batadv0: Adding interface: vlan2 [ 88.048447][ T5961] batman_adv: batadv0: The MTU of interface vlan2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.074232][ T992] usb 1-1: reset high-speed USB device number 3 using dummy_hcd [ 88.082554][ T5961] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 88.082763][ T24] usb 5-1-port2: config error [ 88.122727][ T5966] tipc: Started in network mode [ 88.128087][ T5966] tipc: Node identity 00000000000000000040ffffe0000001, cluster identity 4711 [ 88.137975][ T5966] tipc: Enabling of bearer rejected, failed to enable media [ 88.493719][ T5709] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 88.514889][ T24] hub 5-1:4.0: hub_ext_port_status failed (err = -71) [ 88.527944][ T10] usb 5-1: USB disconnect, device number 2 [ 88.531391][ T24] usb 5-1-port2: attempt power cycle [ 88.612959][ T5726] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 88.663014][ T5709] usb 3-1: Using ep0 maxpacket: 32 [ 88.670050][ T5709] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.692221][ T5709] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x6 has invalid wMaxPacketSize 0 [ 88.713121][ T5709] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 0 [ 88.732184][ T5709] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 88.758574][ T5726] usb 2-1: device descriptor read/64, error -71 [ 88.761783][ T5709] usb 3-1: config 0 interface 0 has no altsetting 0 [ 88.778644][ T5709] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 88.788073][ T5709] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.797094][ T5709] usb 3-1: Product: syz [ 88.816513][ T5709] usb 3-1: Manufacturer: syz [ 88.821193][ T5709] usb 3-1: SerialNumber: syz [ 88.831878][ T5709] usb 3-1: config 0 descriptor?? [ 88.844446][ T5709] gs_usb 3-1:0.0: Required endpoints not found [ 88.852736][ T5686] usb 1-1: USB disconnect, device number 3 [ 88.901283][ T5989] geneve2: entered promiscuous mode [ 88.914507][ T5989] geneve2: entered allmulticast mode [ 89.013029][ T5726] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 89.049458][ T5709] usb 3-1: USB disconnect, device number 7 [ 89.108390][ T5993] netlink: 'syz.4.98': attribute type 11 has an invalid length. [ 89.163133][ T5726] usb 2-1: device descriptor read/64, error -71 [ 89.285793][ T5726] usb usb2-port1: attempt power cycle [ 89.383207][ T5686] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 89.530576][ T6010] sg_write: data in/out 414684/82 bytes for SCSI command 0x0-- guessing data in; [ 89.530576][ T6010] program syz.4.102 not setting count and/or reply_len properly [ 89.577189][ T5686] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 89.585791][ T5686] usb 1-1: can't read configurations, error -61 [ 89.643995][ T5726] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 89.684923][ T5726] usb 2-1: device descriptor read/8, error -71 [ 89.704108][ T5709] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 89.736013][ T5686] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 89.761857][ T6014] syzkaller1: entered promiscuous mode [ 89.775920][ T6014] syzkaller1: entered allmulticast mode [ 89.863126][ T5709] usb 4-1: Using ep0 maxpacket: 8 [ 89.877183][ T5709] usb 4-1: config 0 has no interfaces? [ 89.895778][ T5686] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 89.895966][ T5709] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 89.935689][ T5686] usb 1-1: can't read configurations, error -61 [ 89.942132][ T5709] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 89.950616][ T5709] usb 4-1: Product: syz [ 89.960223][ T5726] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 89.972623][ T5709] usb 4-1: Manufacturer: syz [ 89.977650][ T5686] usb usb1-port1: attempt power cycle [ 89.992992][ T5709] usb 4-1: SerialNumber: syz [ 90.013792][ T5726] usb 2-1: device descriptor read/8, error -71 [ 90.014159][ T5709] usb 4-1: config 0 descriptor?? [ 90.123389][ T5726] usb usb2-port1: unable to enumerate USB device [ 90.243024][ T24] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 90.261960][ T5726] usb 4-1: USB disconnect, device number 4 [ 90.323178][ T5686] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 90.358746][ T5686] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 90.369408][ T5686] usb 1-1: can't read configurations, error -61 [ 90.430234][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.457728][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.479257][ T6025] syzkaller0: entered promiscuous mode [ 90.485563][ T24] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 90.498280][ T6025] syzkaller0: entered allmulticast mode [ 90.508514][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.518193][ T5686] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 90.546707][ T5686] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 90.554946][ T24] usb 3-1: config 0 descriptor?? [ 90.561709][ T5686] usb 1-1: can't read configurations, error -61 [ 90.583288][ T5686] usb usb1-port1: unable to enumerate USB device [ 90.707607][ T6027] loop3: detected capacity change from 0 to 7 [ 90.725074][ T6027] Dev loop3: unable to read RDB block 7 [ 90.731108][ T6027] loop3: unable to read partition table [ 90.738144][ T6027] loop3: partition table beyond EOD, truncated [ 90.748997][ T6027] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 90.792679][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 90.820953][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 90.862691][ T24] usb 3-1: USB disconnect, device number 8 [ 90.870671][ T6029] tipc: Enabling of bearer rejected, failed to enable media [ 91.001331][ T6016] netlink: 84 bytes leftover after parsing attributes in process `syz.2.107'. [ 91.115561][ T6034] xt_hashlimit: size too large, truncated to 1048576 [ 91.352976][ T24] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 91.504310][ T24] usb 3-1: device descriptor read/64, error -71 [ 91.774174][ T24] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 91.813767][ T6056] binder: 6054:6056 ioctl 400c620e 200000000000 returned -22 [ 91.898742][ T6060] geneve2: entered promiscuous mode [ 91.904775][ T6061] sg_write: data in/out 414684/82 bytes for SCSI command 0x0-- guessing data in; [ 91.904775][ T6061] program syz.1.119 not setting count and/or reply_len properly [ 91.921790][ T6060] geneve2: entered allmulticast mode [ 91.924035][ T24] usb 3-1: device descriptor read/64, error -71 [ 92.063051][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 92.070713][ T24] usb usb3-port1: attempt power cycle [ 92.112414][ T6065] netlink: 'syz.0.124': attribute type 11 has an invalid length. [ 92.213455][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 92.229716][ T9] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 92.256608][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 92.282240][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 92.293238][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 92.318101][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 92.350466][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 92.375878][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.423931][ T24] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 92.463658][ T24] usb 3-1: device descriptor read/8, error -71 [ 92.544105][ T5709] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 92.601253][ T9] usb 4-1: usb_control_msg returned -32 [ 92.610947][ T9] usbtmc 4-1:16.0: can't read capabilities [ 92.712986][ T5709] usb 5-1: Using ep0 maxpacket: 16 [ 92.713545][ T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 92.719867][ T5709] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.743449][ T5709] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.754794][ T5709] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 92.764634][ T5709] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 92.774451][ T5739] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 92.792124][ T5709] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 92.803717][ T24] usb 3-1: device descriptor read/8, error -71 [ 92.812857][ T5709] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 92.835789][ T6071] netlink: 16 bytes leftover after parsing attributes in process `syz.4.126'. [ 92.846829][ T6071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.867121][ T6071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.876605][ T5709] usb 5-1: string descriptor 0 read error: -71 [ 92.893030][ T5709] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 92.904300][ T5709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.914090][ T5739] usb 1-1: device descriptor read/64, error -71 [ 92.920928][ T24] usb usb3-port1: unable to enumerate USB device [ 92.921699][ T5709] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 92.946638][ T5709] usb 5-1: no configuration chosen from 1 choice [ 92.976833][ T5709] usb 5-1: USB disconnect, device number 7 [ 93.102555][ T6082] syzkaller1: entered promiscuous mode [ 93.110129][ T6082] syzkaller1: entered allmulticast mode [ 93.149166][ T6084] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4074932015 (16299728060 ns) > initial count (9282681480 ns). Using initial count to start timer. [ 93.175322][ T5739] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 93.227688][ T6086] syzkaller0: entered promiscuous mode [ 93.237243][ T6086] syzkaller0: entered allmulticast mode [ 93.289609][ T6088] tipc: Started in network mode [ 93.294957][ T6088] tipc: Node identity 00000000000000000040ffffe0000001, cluster identity 4711 [ 93.313425][ T5739] usb 1-1: device descriptor read/64, error -71 [ 93.313706][ T6088] tipc: Enabling of bearer rejected, failed to enable media [ 93.381675][ T6078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.396533][ T6078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.405807][ T6091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.135'. [ 93.434221][ T5739] usb usb1-port1: attempt power cycle [ 93.724145][ T6111] netlink: 12 bytes leftover after parsing attributes in process `syz.4.142'. [ 93.751013][ T6111] netlink: 8 bytes leftover after parsing attributes in process `syz.4.142'. [ 93.761169][ T6113] sg_write: data in/out 414684/82 bytes for SCSI command 0x0-- guessing data in; [ 93.761169][ T6113] program syz.2.140 not setting count and/or reply_len properly [ 93.783363][ T6115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.142'. [ 93.805828][ T5739] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 93.867303][ T5739] usb 1-1: device descriptor read/8, error -71 [ 93.898791][ T30] kauditd_printk_skb: 76 callbacks suppressed [ 93.898802][ T30] audit: type=1326 audit(1777695333.494:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6102 comm="syz.1.139" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74dff9cdd9 code=0x7ffc0000 [ 93.929548][ T30] audit: type=1326 audit(1777695333.524:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6102 comm="syz.1.139" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74dff9cdd9 code=0x7ffc0000 [ 94.007981][ T30] audit: type=1326 audit(1777695333.604:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6102 comm="syz.1.139" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f74dff9cdd9 code=0x7ffc0000 [ 94.111244][ T30] audit: type=1326 audit(1777695333.634:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6102 comm="syz.1.139" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74dff9cdd9 code=0x7ffc0000 [ 94.140382][ T30] audit: type=1326 audit(1777695333.644:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6102 comm="syz.1.139" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f74dff9cdd9 code=0x7ffc0000 [ 94.173977][ T5739] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 94.213407][ T30] audit: type=1326 audit(1777695333.644:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6102 comm="syz.1.139" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74dff9cdd9 code=0x7ffc0000 [ 94.248683][ T5739] usb 1-1: device descriptor read/8, error -71 [ 94.274933][ T30] audit: type=1326 audit(1777695333.644:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6102 comm="syz.1.139" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f74dff9cdd9 code=0x7ffc0000 [ 94.307004][ T30] audit: type=1326 audit(1777695333.644:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6102 comm="syz.1.139" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74dff9cdd9 code=0x7ffc0000 [ 94.334034][ T30] audit: type=1326 audit(1777695333.644:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6102 comm="syz.1.139" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f74dff9cdd9 code=0x7ffc0000 [ 94.369165][ T30] audit: type=1326 audit(1777695333.644:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6102 comm="syz.1.139" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74dff9cdd9 code=0x7ffc0000 [ 94.418686][ T5739] usb usb1-port1: unable to enumerate USB device [ 94.669376][ T6129] geneve2: entered promiscuous mode [ 94.674716][ T6129] geneve2: entered allmulticast mode [ 95.086390][ T6133] netlink: 'syz.1.148': attribute type 11 has an invalid length. [ 95.203137][ T5686] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 95.380366][ T6149] syzkaller0: entered promiscuous mode [ 95.385958][ T5686] usb 5-1: Using ep0 maxpacket: 8 [ 95.386004][ T6149] syzkaller0: entered allmulticast mode [ 95.393998][ T5686] usb 5-1: unable to get BOS descriptor or descriptor too short [ 95.408371][ T5686] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 95.425060][ T5686] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 95.434151][ T5686] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.442167][ T5686] usb 5-1: Product: syz [ 95.447564][ T5686] usb 5-1: Manufacturer: syz [ 95.452210][ T5686] usb 5-1: SerialNumber: syz [ 95.520553][ T6151] tipc: Started in network mode [ 95.528191][ T6151] tipc: Node identity 00000000000000000040ffffe0000001, cluster identity 4711 [ 95.537303][ T6151] tipc: Enabling of bearer rejected, failed to enable media [ 95.668257][ T6131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.680583][ T6131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.775037][ T6159] netlink: 'syz.0.156': attribute type 39 has an invalid length. [ 95.858503][ T6165] sg_write: data in/out 414684/82 bytes for SCSI command 0x0-- guessing data in; [ 95.858503][ T6165] program syz.2.159 not setting count and/or reply_len properly [ 95.905897][ T5686] usb 5-1: USB disconnect, device number 8 [ 96.930866][ T6185] geneve2: entered promiscuous mode [ 96.936147][ T6185] geneve2: entered allmulticast mode [ 97.232986][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 97.344507][ T6193] netlink: 'syz.0.168': attribute type 11 has an invalid length. [ 97.435614][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.534011][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.572657][ T24] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 97.604878][ T24] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 97.623248][ T24] usb 2-1: Manufacturer: syz [ 97.645720][ T24] usb 2-1: config 0 descriptor?? [ 97.834946][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 97.897439][ T24] uclogic 0003:256C:006D.0002: failed retrieving Huion firmware version: -71 [ 97.922974][ T24] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 97.945124][ T24] uclogic 0003:256C:006D.0002: probe with driver uclogic failed with error -71 [ 97.971771][ T24] usb 2-1: USB disconnect, device number 6 [ 98.015453][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.050758][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.111540][ T9] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 98.138506][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.145462][ T6214] Zero length message leads to an empty skb [ 98.164518][ T9] usb 3-1: config 0 descriptor?? [ 98.354009][ T6089] usbtmc 4-1:16.0: usb_control_msg returned -110 [ 98.391807][ T5709] usb 4-1: USB disconnect, device number 5 [ 98.564854][ T6228] geneve2: entered promiscuous mode [ 98.592072][ T6228] geneve2: entered allmulticast mode [ 98.615767][ T9] steelseries 0003:1038:12B6.0003: unknown main item tag 0x2 [ 98.648088][ T9] steelseries 0003:1038:12B6.0003: unknown main item tag 0x4 [ 98.663021][ T24] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 98.678070][ T9] steelseries 0003:1038:12B6.0003: item fetching failed at offset 6/7 [ 98.701519][ T9] steelseries 0003:1038:12B6.0003: probe with driver steelseries failed with error -22 [ 98.791601][ T5686] usb 3-1: USB disconnect, device number 13 [ 98.931041][ T24] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 98.959057][ T24] usb 2-1: can't read configurations, error -71 [ 98.962697][ T6237] sg_write: data in/out 414684/82 bytes for SCSI command 0x0-- guessing data in; [ 98.962697][ T6237] program syz.4.180 not setting count and/or reply_len properly [ 98.988204][ T6239] netlink: 'syz.3.182': attribute type 11 has an invalid length. [ 99.286110][ T6242] netlink: 12 bytes leftover after parsing attributes in process `syz.3.183'. [ 99.411796][ T6246] syzkaller1: entered promiscuous mode [ 99.431772][ T6246] syzkaller1: entered allmulticast mode [ 99.666306][ T9] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 99.852130][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 99.852144][ T30] audit: type=1326 audit(1777695339.444:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6260 comm="syz.0.191" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ffb9cdd9 code=0x7ffc0000 [ 99.898387][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 99.918886][ T6267] geneve2: entered promiscuous mode [ 99.936026][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.946837][ T6267] geneve2: entered allmulticast mode [ 99.960727][ T6262] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 99.971559][ T9] usb 3-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 99.981304][ T30] audit: type=1326 audit(1777695339.494:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6260 comm="syz.0.191" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fb6ffb9cdd9 code=0x7ffc0000 [ 100.010916][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.054782][ T9] usb 3-1: config 0 descriptor?? [ 100.118652][ T30] audit: type=1326 audit(1777695339.494:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6260 comm="syz.0.191" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ffb9cdd9 code=0x7ffc0000 [ 100.279798][ T30] audit: type=1326 audit(1777695339.504:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6260 comm="syz.0.191" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb6ffb9cdd9 code=0x7ffc0000 [ 100.421515][ T30] audit: type=1326 audit(1777695339.504:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6260 comm="syz.0.191" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ffb9cdd9 code=0x7ffc0000 [ 100.476748][ T6248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.185'. [ 100.566802][ T30] audit: type=1326 audit(1777695339.504:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6260 comm="syz.0.191" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb6ffb9cdd9 code=0x7ffc0000 [ 100.618132][ T9] cypress 0003:04B4:DE64.0004: hidraw0: USB HID vff.ff Device [HID 04b4:de64] on usb-dummy_hcd.2-1/input0 [ 100.722689][ T30] audit: type=1326 audit(1777695339.504:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6260 comm="syz.0.191" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ffb9cdd9 code=0x7ffc0000 [ 100.792627][ T30] audit: type=1326 audit(1777695339.524:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6260 comm="syz.0.191" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7fb6ffb9cdd9 code=0x7ffc0000 [ 100.817606][ T30] audit: type=1326 audit(1777695339.524:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6260 comm="syz.0.191" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ffb9cdd9 code=0x7ffc0000 [ 100.852396][ T5709] usb 3-1: USB disconnect, device number 14 [ 100.933358][ T30] audit: type=1326 audit(1777695339.524:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6260 comm="syz.0.191" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fb6ffb9cdd9 code=0x7ffc0000 [ 101.060668][ T6277] netlink: 'syz.3.195': attribute type 11 has an invalid length. [ 101.558844][ T6290] syzkaller1: entered promiscuous mode [ 101.580077][ T6290] syzkaller1: entered allmulticast mode [ 101.980488][ T6307] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 102.056542][ T6311] netlink: 'syz.1.209': attribute type 11 has an invalid length. [ 102.150849][ T6319] sg_write: data in/out 414684/82 bytes for SCSI command 0x0-- guessing data in; [ 102.150849][ T6319] program syz.4.206 not setting count and/or reply_len properly [ 102.168004][ T6315] syzkaller0: entered promiscuous mode [ 102.179534][ T6315] syzkaller0: entered allmulticast mode [ 102.486965][ T6331] syzkaller1: entered promiscuous mode [ 102.493245][ T6331] syzkaller1: entered allmulticast mode [ 102.493334][ T5686] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 102.703097][ T5686] usb 2-1: Using ep0 maxpacket: 8 [ 102.948541][ T5686] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 102.984722][ T5686] usb 2-1: config 179 has no interface number 0 [ 103.174433][ T5686] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 103.208542][ T5686] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 103.514712][ T5686] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 103.627181][ T5686] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 103.733345][ T5686] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 103.836335][ T5686] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 103.944584][ T5686] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.985540][ T6345] netlink: zone id is out of range [ 104.016220][ T6325] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 106.013960][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 106.050048][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 106.071735][ T0] NOHZ tick-stop error: local softirq work is pending, handler #188!!! [ 106.094056][ T0] NOHZ tick-stop error: local softirq work is pending, handler #ca!!! [ 106.134180][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 106.173342][ T0] NOHZ tick-stop error: local softirq work is pending, handler #188!!! [ 106.215253][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 106.250492][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 106.287188][ T0] NOHZ tick-stop error: local softirq work is pending, handler #ca!!! [ 106.364984][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 119.449672][ C0] sched: DL replenish lagged too much [ 141.070111][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 141.155527][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 142.904341][ T6323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.500667][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.518679][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 288.442914][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 288.449898][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6345/1:b..l P5360/1:b..l [ 288.459181][ C1] rcu: (detected by 1, t=10503 jiffies, g=17925, q=1451998 ncpus=2) [ 288.467263][ C1] task:crond state:R running task stack:24104 pid:5360 tgid:5360 ppid:1 task_flags:0x400000 flags:0x00080000 [ 288.481400][ C1] Call Trace: [ 288.484683][ C1] [ 288.487614][ C1] __schedule+0x17b4/0x5680 [ 288.492138][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 288.497087][ C1] ? __pfx___schedule+0x10/0x10 [ 288.501962][ C1] preempt_schedule_irq+0x4d/0xa0 [ 288.507007][ C1] irqentry_exit+0x14f/0x730 [ 288.511596][ C1] ? trace_irq_disable+0x3b/0x140 [ 288.516612][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 288.522600][ C1] RIP: 0010:lock_acquire+0x221/0x350 [ 288.527887][ C1] Code: ff ff ff e8 f1 94 06 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 db 5f 97 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 40 87 09 0a cc 48 8d 3d e8 5c 92 [ 288.547495][ C1] RSP: 0018:ffffc90003537298 EFLAGS: 00000282 [ 288.553561][ C1] RAX: 933588a224144d00 RBX: 0000000000000000 RCX: 0000000000000046 [ 288.561530][ C1] RDX: 00000000702e1042 RSI: ffffffff8e21895e RDI: ffffffff8c28ac60 [ 288.569495][ C1] RBP: ffffffff8176e256 R08: ffffffff8176e256 R09: ffffffff8e95cd60 [ 288.577456][ C1] R10: ffffc900035373f8 R11: ffffffff81b0d870 R12: 0000000000000002 [ 288.585427][ C1] R13: ffffffff8e95cd60 R14: 0000000000000000 R15: 0000000000000246 [ 288.593401][ C1] ? unwind_next_frame+0xa6/0x2550 [ 288.598522][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 288.604686][ C1] ? unwind_next_frame+0xa6/0x2550 [ 288.609802][ C1] ? __kasan_slab_alloc+0x22/0x80 [ 288.614821][ C1] ? unwind_next_frame+0xa6/0x2550 [ 288.619947][ C1] unwind_next_frame+0xc3/0x2550 [ 288.624895][ C1] ? unwind_next_frame+0xa6/0x2550 [ 288.630009][ C1] ? unwind_next_frame+0xa6/0x2550 [ 288.635111][ C1] ? kasan_quarantine_reduce+0x148/0x160 [ 288.640752][ C1] ? __kasan_slab_alloc+0x22/0x80 [ 288.645787][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 288.651944][ C1] arch_stack_walk+0x11b/0x150 [ 288.656700][ C1] ? __kasan_slab_alloc+0x22/0x80 [ 288.661738][ C1] stack_trace_save+0xa9/0x100 [ 288.666514][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 288.671897][ C1] save_stack+0x122/0x230 [ 288.676230][ C1] ? __pfx_save_stack+0x10/0x10 [ 288.681096][ C1] ? __free_frozen_pages+0xbc7/0xd30 [ 288.686391][ C1] ? __slab_free+0x274/0x2c0 [ 288.690987][ C1] ? qlist_free_all+0x99/0x100 [ 288.695738][ C1] ? kasan_quarantine_reduce+0x148/0x160 [ 288.701376][ C1] ? __kasan_slab_alloc+0x22/0x80 [ 288.706420][ C1] ? page_ext_put+0x97/0xc0 [ 288.710926][ C1] __reset_page_owner+0x71/0x1f0 [ 288.715855][ C1] __free_frozen_pages+0xbc7/0xd30 [ 288.720985][ C1] __slab_free+0x274/0x2c0 [ 288.725418][ C1] qlist_free_all+0x99/0x100 [ 288.730013][ C1] kasan_quarantine_reduce+0x148/0x160 [ 288.735460][ C1] __kasan_slab_alloc+0x22/0x80 [ 288.740322][ C1] __kmalloc_noprof+0x316/0x760 [ 288.745182][ C1] ? tomoyo_encode+0x28b/0x550 [ 288.749965][ C1] ? __kmalloc_noprof+0x1b8/0x760 [ 288.754992][ C1] tomoyo_encode+0x28b/0x550 [ 288.759598][ C1] tomoyo_realpath_from_path+0x58d/0x5d0 [ 288.765251][ C1] tomoyo_path_perm+0x283/0x560 [ 288.770105][ C1] ? tomoyo_path_perm+0x251/0x560 [ 288.775117][ C1] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 288.780543][ C1] security_inode_getattr+0x12b/0x310 [ 288.785930][ C1] vfs_getattr+0x23/0x70 [ 288.790178][ C1] vfs_statx_path+0x2b/0x230 [ 288.794760][ C1] ? vfs_statx+0x107/0x200 [ 288.799184][ C1] vfs_statx+0x12e/0x200 [ 288.803432][ C1] ? __pfx_vfs_statx+0x10/0x10 [ 288.808193][ C1] ? strncpy_from_user+0x150/0x2b0 [ 288.813298][ C1] ? do_getname+0x151/0x250 [ 288.817810][ C1] vfs_fstatat+0x11b/0x170 [ 288.822231][ C1] __x64_sys_newfstatat+0x151/0x200 [ 288.827435][ C1] ? __pfx___x64_sys_newfstatat+0x10/0x10 [ 288.833176][ C1] ? rcu_is_watching+0x15/0xb0 [ 288.837963][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.844033][ C1] do_syscall_64+0x15f/0xf80 [ 288.848625][ C1] ? trace_irq_disable+0x3b/0x140 [ 288.853639][ C1] ? clear_bhb_loop+0x40/0x90 [ 288.858318][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.864211][ C1] RIP: 0033:0x7f3179415b0a [ 288.868629][ C1] RSP: 002b:00007ffe835dea18 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 288.877025][ C1] RAX: ffffffffffffffda RBX: 00007f31795c5490 RCX: 00007f3179415b0a [ 288.884994][ C1] RDX: 00007ffe835dea38 RSI: 00007f317959e7e8 RDI: 00000000ffffff9c [ 288.892967][ C1] RBP: 0000000069f57a82 R08: 0000000000000000 R09: 0000000000000000 [ 288.900934][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 288.908903][ C1] R13: 000000000000003c R14: 0000000000000000 R15: 000000000000003b [ 288.916873][ C1] [ 288.919901][ C1] task:syz.2.222 state:R running task stack:25952 pid:6345 tgid:6344 ppid:5631 task_flags:0x40054c flags:0x00080002 [ 288.933397][ C1] Call Trace: [ 288.936672][ C1] [ 288.939607][ C1] __schedule+0x17b4/0x5680 [ 288.944142][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 288.949170][ C1] ? __pfx___schedule+0x10/0x10 [ 288.954026][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 288.959416][ C1] preempt_schedule_common+0x82/0xd0 [ 288.964707][ C1] preempt_schedule_thunk+0x16/0x30 [ 288.969910][ C1] _raw_spin_unlock+0x3f/0x50 [ 288.974576][ C1] __zap_vma_range+0x3d17/0x4b40 [ 288.979571][ C1] ? __pfx___zap_vma_range+0x10/0x10 [ 288.984875][ C1] ? mas_find+0xb0e/0xd30 [ 288.989206][ C1] ? unmap_vmas+0x1bd/0x530 [ 288.993701][ C1] unmap_vmas+0x379/0x530 [ 288.998051][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 289.002928][ C1] exit_mmap+0x280/0x9e0 [ 289.007184][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 289.011954][ C1] ? uprobe_clear_state+0x53/0x3f0 [ 289.017065][ C1] ? __pfx_exit_aio+0x10/0x10 [ 289.021756][ C1] ? uprobe_clear_state+0x2bc/0x3f0 [ 289.026968][ C1] __mmput+0x118/0x430 [ 289.031033][ C1] exit_mm+0x18e/0x250 [ 289.035091][ C1] do_exit+0x6a2/0x22c0 [ 289.039261][ C1] ? __pfx_do_exit+0x10/0x10 [ 289.043858][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 289.048900][ C1] do_group_exit+0x21b/0x2d0 [ 289.053501][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 289.058706][ C1] get_signal+0x1284/0x1330 [ 289.063226][ C1] arch_do_signal_or_restart+0xbc/0x830 [ 289.068774][ C1] ? __x64_sys_sendmsg+0x26f/0x2a0 [ 289.073869][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 289.080055][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.086125][ C1] exit_to_user_mode_loop+0x86/0x480 [ 289.091405][ C1] ? rcu_is_watching+0x15/0xb0 [ 289.096155][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.102222][ C1] do_syscall_64+0x33e/0xf80 [ 289.106822][ C1] ? trace_irq_disable+0x3b/0x140 [ 289.111849][ C1] ? clear_bhb_loop+0x40/0x90 [ 289.116511][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.122411][ C1] RIP: 0033:0x7f25dbb9cdd9 [ 289.126825][ C1] RSP: 002b:00007f25dca14028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 289.135237][ C1] RAX: 0000000000000040 RBX: 00007f25dbe15fa0 RCX: 00007f25dbb9cdd9 [ 289.143209][ C1] RDX: 000000000000c000 RSI: 00002000000000c0 RDI: 0000000000000007 [ 289.151176][ C1] RBP: 00007f25dbc32d69 R08: 0000000000000000 R09: 0000000000000000 [ 289.159144][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 289.167108][ C1] R13: 00007f25dbe16038 R14: 00007f25dbe15fa0 R15: 00007f25dbf3fa48 [ 289.175084][ C1] [ 289.178100][ C1] rcu: rcu_preempt kthread starved for 2721 jiffies! g17925 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 289.189198][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 289.199151][ C1] rcu: RCU grace-period kthread stack dump: [ 289.205033][ C1] task:rcu_preempt state:R running task stack:27544 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 289.218522][ C1] Call Trace: [ 289.221797][ C1] [ 289.224726][ C1] __schedule+0x17b4/0x5680 [ 289.229227][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 289.234175][ C1] ? __pfx___schedule+0x10/0x10 [ 289.239038][ C1] ? schedule+0x90/0x360 [ 289.243284][ C1] schedule+0x164/0x360 [ 289.247449][ C1] schedule_timeout+0x158/0x2c0 [ 289.252291][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 289.257643][ C1] ? __pfx_process_timeout+0x10/0x10 [ 289.262944][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 289.268746][ C1] ? prepare_to_swait_event+0x340/0x370 [ 289.274282][ C1] rcu_gp_fqs_loop+0x312/0x11d0 [ 289.279151][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 289.285305][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 289.290587][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 289.295782][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 289.300377][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 289.305573][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 289.311376][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 289.316301][ C1] ? __kthread_parkme+0x19c/0x1f0 [ 289.321333][ C1] kthread+0x388/0x470 [ 289.325407][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 289.330597][ C1] ? __pfx_kthread+0x10/0x10 [ 289.335177][ C1] ret_from_fork+0x514/0xb70 [ 289.339771][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 289.344883][ C1] ? __switch_to+0xc79/0x1410 [ 289.349569][ C1] ? __pfx_kthread+0x10/0x10 [ 289.354148][ C1] ret_from_fork_asm+0x1a/0x30 [ 289.358932][ C1] [ 289.361948][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 289.368268][ C1] Sending NMI from CPU 1 to CPUs 0: [ 289.373457][ C0] NMI backtrace for cpu 0 [ 289.373481][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 289.373502][ C0] Tainted: [L]=SOFTLOCKUP [ 289.373507][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 289.373516][ C0] RIP: 0010:unwind_next_frame+0xdaf/0x2550 [ 289.373538][ C0] Code: 00 4d 8b 7e 08 49 8d 5e 10 49 89 dd 49 c1 ed 03 48 b8 00 00 00 00 00 fc ff df 41 80 7c 05 00 00 74 08 48 89 df e8 31 f8 b9 00 <48> 89 5c 24 60 4c 89 64 24 18 49 8d 5c 24 f8 4d 8b 66 10 48 b8 00 [ 289.373551][ C0] RSP: 0018:ffffc900000067b8 EFLAGS: 00000246 [ 289.373564][ C0] RAX: dffffc0000000000 RBX: ffffc90000006898 RCX: ffffffff90b8c5ec [ 289.373575][ C0] RDX: ffffffff916c5ae4 RSI: 0000000000000002 RDI: ffffffff8c28ac00 [ 289.373586][ C0] RBP: 1ffff92000000d12 R08: 000000000000000b R09: ffffffff8e95cd60 [ 289.373596][ C0] R10: ffffc900000068d8 R11: ffffffff81b0d870 R12: ffffffff8e607dc8 [ 289.373607][ C0] R13: 1ffff92000000d13 R14: ffffc90000006888 R15: ffffffff8e600000 [ 289.373618][ C0] FS: 0000000000000000(0000) GS:ffff888125290000(0000) knlGS:0000000000000000 [ 289.373630][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 289.373640][ C0] CR2: 000055556aecf4e8 CR3: 0000000078366000 CR4: 00000000003526f0 [ 289.373653][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 289.373661][ C0] DR3: 3a810b1eb6134bdc DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 289.373671][ C0] Call Trace: [ 289.373677][ C0] [ 289.373686][ C0] ? unwind_next_frame+0xa6/0x2550 [ 289.373704][ C0] ? pv_native_safe_halt+0xf/0x20 [ 289.373724][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 289.373747][ C0] arch_stack_walk+0x11b/0x150 [ 289.373767][ C0] ? pv_native_safe_halt+0xf/0x20 [ 289.373787][ C0] stack_trace_save+0xa9/0x100 [ 289.373808][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 289.373833][ C0] ? unwind_next_frame+0xa6/0x2550 [ 289.373851][ C0] kasan_save_track+0x3e/0x80 [ 289.373871][ C0] ? kasan_save_track+0x3e/0x80 [ 289.373889][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 289.373908][ C0] ? __kmalloc_cache_noprof+0x31c/0x660 [ 289.373927][ C0] ? ref_tracker_alloc+0x15a/0x4c0 [ 289.373947][ C0] ? dst_init+0xd9/0x480 [ 289.373967][ C0] ? dst_alloc+0x12a/0x170 [ 289.373988][ C0] ? ip_route_output_key_hash_rcu+0x14d0/0x25d0 [ 289.374010][ C0] ? ip_route_output_key_hash+0x18d/0x2a0 [ 289.374031][ C0] ? ip_route_output_flow+0x2a/0x150 [ 289.374050][ C0] ? ip_route_me_harder+0x742/0xf90 [ 289.374069][ C0] ? synproxy_send_tcp+0x34c/0x670 [ 289.374090][ C0] ? synproxy_send_client_synack+0x8c1/0xe30 [ 289.374111][ C0] ? nft_synproxy_eval_v4+0x34a/0x4e0 [ 289.374134][ C0] ? nft_synproxy_do_eval+0x305/0x580 [ 289.374162][ C0] ? nft_do_chain+0x467/0x19f0 [ 289.374175][ C0] ? nft_do_chain_inet+0x360/0x4b0 [ 289.374189][ C0] ? nf_hook_slow+0xc5/0x220 [ 289.374208][ C0] ? NF_HOOK+0x21f/0x3c0 [ 289.374224][ C0] ? NF_HOOK+0x336/0x3c0 [ 289.374239][ C0] ? process_backlog+0xaa3/0x1950 [ 289.374255][ C0] ? __napi_poll+0xae/0x340 [ 289.374268][ C0] ? net_rx_action+0x627/0xf70 [ 289.374283][ C0] ? handle_softirqs+0x22a/0x840 [ 289.374298][ C0] ? __irq_exit_rcu+0xca/0x220 [ 289.374311][ C0] ? irq_exit_rcu+0x9/0x30 [ 289.374324][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 289.374341][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 289.374357][ C0] ? pv_native_safe_halt+0xf/0x20 [ 289.374387][ C0] __kasan_kmalloc+0x93/0xb0 [ 289.374408][ C0] __kmalloc_cache_noprof+0x31c/0x660 [ 289.374428][ C0] ? default_idle_call+0x72/0xb0 [ 289.374448][ C0] ? ref_tracker_alloc+0x15a/0x4c0 [ 289.374466][ C0] ? __kmalloc_cache_noprof+0x15b/0x660 [ 289.374488][ C0] ref_tracker_alloc+0x15a/0x4c0 [ 289.374508][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 289.374533][ C0] ? rcu_is_watching+0x15/0xb0 [ 289.374550][ C0] ? trace_kmem_cache_alloc+0x29/0xe0 [ 289.374568][ C0] ? dst_alloc+0x105/0x170 [ 289.374592][ C0] dst_init+0xd9/0x480 [ 289.374615][ C0] dst_alloc+0x12a/0x170 [ 289.374638][ C0] ip_route_output_key_hash_rcu+0x14d0/0x25d0 [ 289.374664][ C0] ? ip_route_output_key_hash+0xd8/0x2a0 [ 289.374686][ C0] ip_route_output_key_hash+0x18d/0x2a0 [ 289.374709][ C0] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 289.374733][ C0] ? lock_acquire+0x106/0x350 [ 289.374753][ C0] ip_route_output_flow+0x2a/0x150 [ 289.374772][ C0] ? ip_route_me_harder+0x730/0xf90 [ 289.374793][ C0] ip_route_me_harder+0x742/0xf90 [ 289.374818][ C0] ? __pfx_ip_route_me_harder+0x10/0x10 [ 289.374845][ C0] ? __cookie_v4_init_sequence+0x25d/0x500 [ 289.374865][ C0] synproxy_send_tcp+0x34c/0x670 [ 289.374889][ C0] synproxy_send_client_synack+0x8c1/0xe30 [ 289.374917][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 289.374940][ C0] ? nft_socket_init+0xb8/0x3c0 [ 289.374960][ C0] ? synproxy_pernet+0x45/0x270 [ 289.374984][ C0] nft_synproxy_eval_v4+0x34a/0x4e0 [ 289.375009][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 289.375031][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 289.375047][ C0] ? nf_ip_checksum+0x13c/0x510 [ 289.375064][ C0] nft_synproxy_do_eval+0x305/0x580 [ 289.375089][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 289.375114][ C0] ? queue_work_on+0x159/0x1d0 [ 289.375128][ C0] ? wiphy_work_queue+0x1d2/0x380 [ 289.375149][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 289.375175][ C0] nft_do_chain+0x467/0x19f0 [ 289.375190][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 289.375208][ C0] ? ieee80211_rx_handlers+0xc876/0xc8e0 [ 289.375222][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 289.375240][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 289.375258][ C0] ? ipt_do_table+0x2b2/0x1630 [ 289.375278][ C0] ? nf_nat_inet_fn+0x95b/0xbf0 [ 289.375300][ C0] nft_do_chain_inet+0x360/0x4b0 [ 289.375315][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 289.375329][ C0] ? ipt_do_table+0x2b2/0x1630 [ 289.375345][ C0] ? nf_nat_ipv4_local_in+0x223/0x720 [ 289.375366][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 289.375381][ C0] nf_hook_slow+0xc5/0x220 [ 289.375404][ C0] NF_HOOK+0x21f/0x3c0 [ 289.375421][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 289.375438][ C0] ? NF_HOOK+0x9e/0x3c0 [ 289.375454][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 289.375469][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 289.375488][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 289.375508][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 289.375526][ C0] NF_HOOK+0x336/0x3c0 [ 289.375542][ C0] ? get_jiffies_update+0x44/0x140 [ 289.375556][ C0] ? lock_acquire+0x106/0x350 [ 289.375571][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 289.375587][ C0] ? NF_HOOK+0x9e/0x3c0 [ 289.375603][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 289.375620][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 289.375639][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 289.375656][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 289.375671][ C0] ? process_backlog+0x3eb/0x1950 [ 289.375687][ C0] process_backlog+0xaa3/0x1950 [ 289.375713][ C0] __napi_poll+0xae/0x340 [ 289.375727][ C0] ? skb_defer_free_flush+0x233/0x260 [ 289.375743][ C0] net_rx_action+0x627/0xf70 [ 289.375766][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 289.375782][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 289.375803][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 289.375820][ C0] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 289.375850][ C0] handle_softirqs+0x22a/0x840 [ 289.375866][ C0] ? __irq_exit_rcu+0xca/0x220 [ 289.375884][ C0] __irq_exit_rcu+0xca/0x220 [ 289.375899][ C0] irq_exit_rcu+0x9/0x30 [ 289.375912][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 289.375930][ C0] [ 289.375935][ C0] [ 289.375940][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 289.375956][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 289.375974][ C0] Code: 1b 7e 02 e9 93 f6 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 31 21 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 289.375986][ C0] RSP: 0018:ffffffff8e607dc0 EFLAGS: 00000242 [ 289.375998][ C0] RAX: 00000000012ffc43 RBX: ffffffff819a814a RCX: 0000000080000001 [ 289.376009][ C0] RDX: 0000000000000001 RSI: ffffffff8dfa5a9b RDI: ffffffff8c28ac60 [ 289.376019][ C0] RBP: ffffffff8e607eb0 R08: ffff8880b86339db R09: 1ffff110170c673b [ 289.376029][ C0] R10: dffffc0000000000 R11: ffffed10170c673c R12: 0000000000000000 [ 289.376040][ C0] R13: 1ffffffff1cd25d8 R14: 0000000000000000 R15: 1ffffffff1cd25d8 [ 289.376052][ C0] ? do_idle+0x36a/0x5f0 [ 289.376072][ C0] default_idle+0x9/0x20 [ 289.376092][ C0] default_idle_call+0x72/0xb0 [ 289.376112][ C0] do_idle+0x36a/0x5f0 [ 289.376131][ C0] ? __pfx_do_idle+0x10/0x10 [ 289.376152][ C0] cpu_startup_entry+0x43/0x60 [ 289.376173][ C0] rest_init+0x2de/0x300 [ 289.376187][ C0] start_kernel+0x38a/0x3e0 [ 289.376208][ C0] x86_64_start_reservations+0x24/0x30 [ 289.376224][ C0] x86_64_start_kernel+0x143/0x1c0 [ 289.376240][ C0] common_startup_64+0x13e/0x147 [ 289.376266][ C0]