last executing test programs: 1m45.019090777s ago: executing program 0 (id=2654): unshare(0x2c020400) syz_usb_connect(0x0, 0x36, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0xfffffffffffffffc, {0x0, 0xf0}, 0x1}, 0x18) sendmsg$can_j1939(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x1}}, 0x18, &(0x7f0000000180)={0x0}, 0xc7}, 0x200440ee) 1m43.980746446s ago: executing program 0 (id=2657): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @desc3}, &(0x7f0000000740)={0x0, "3d80d8516735dab25665edc36620827794e952b841d8c443aef02b2927d66898851070a0b0c37c0b5b358c2d1ad856721421926896028fedd8917faa923964dc", 0x35}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344a2e3c35c2758f590ddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r0) r1 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x38, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x35, 0x30, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) keyctl$instantiate(0xc, r1, &(0x7f0000000340)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'user:', '-+#*^%@\''}, 0x1e, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x51, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x39, 0x65, 0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33, 0x63, 0x30, 0x30, 0x36, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x37, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x32, 0x30, 0x62, 0x67, 0x30, 0x30, 0x0, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3c}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x61, 0x30, 0x38, 0x30, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) r3 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYRES64], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r3) unshare(0x2a020480) ppoll(&(0x7f00000000c0)=[{r4, 0x4001}], 0x1, 0x0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x30, 0x35, 0x30, 0x65, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x32, 0x65, 0x30, 0x30, 0x51, 0x62, 0x30, 0x30, 0x30, 0x32, 0x30, 0x30, 0x30, 0x32, 0x31, 0x30]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x42}, 0x48, r0) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r0) 1m40.859687584s ago: executing program 0 (id=2665): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x42, 0x16021}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5}, @IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_COOKIE(r2, 0x1, 0x39, 0x0, &(0x7f0000000100)) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000280)=[{&(0x7f0000001340)="ff", 0x1}, {&(0x7f0000000400)="04", 0xfe44}], 0x2, 0x0) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000200)=ANY=[@ANYRES32=r3, @ANYRESDEC=r1, @ANYRESDEC=r2], 0x4c}}, 0x80) r5 = openat$vim2m(0xffffff9c, 0x0, 0x2, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc0f8565c, &(0x7f0000000000)={0x40000000, 0xbd5, 0x2, {0x2, @raw_data="f91fd2868ba3d9189024fc40809db9e19479c0b5fce2c721330d5771dbf9dbfa9e2ad24622489141b4803cfeb0b70909e75715a13fada32fef53473eb9ce014fbe3929ea41fdeb0ff177dfb9d3227f213a6451b667d35b03b25618d20cea1f072990b86d463a0de7513744a2bb3bf4fb6049e30f7c533837beba9566c9fd8721c48fad424a5fb17bc1419fb85e5e7dce382ba5a1ce182b419becd67c18f0ba055b8d72225df5a5e7917f8a87a52b8c2516745c462e944b0c22a7e71ecf492a0ef916598abba0e732"}}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc04c560f, &(0x7f0000000280)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x100000, 0x1, {}, {0x0, 0x8, 0x0, 0x4, 0x0, 0x0, '\x00\x00\x00\b'}, 0x5141, 0x1, {0x0}, 0x2, 0x20000000, r6}) unshare(0x40000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x100}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000005) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f0000000000)=0x5, 0x4) 1m40.692827056s ago: executing program 4 (id=2667): unshare(0x2c020400) syz_usb_connect(0x0, 0x36, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0xfffffffffffffffc, {0x0, 0xf0}, 0x1}, 0x18) sendmsg$can_j1939(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x1}}, 0x18, &(0x7f0000000180)={0x0}, 0xc7}, 0x200440ee) 1m40.522145991s ago: executing program 2 (id=2668): syz_usb_connect(0x5, 0x3f, &(0x7f0000001640)=ANY=[@ANYBLOB="12010000300f3508da040d391a990102030109022d00"], 0x0) socket$rxrpc(0x21, 0x2, 0x2) socket$netlink(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) inotify_add_watch(0xffffffffffffffff, 0x0, 0xa50003d1) socket(0x1, 0x803, 0x0) 1m39.623667931s ago: executing program 4 (id=2673): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0x6, 0xff, 0x7, 0x8}]}) ioctl$XFS_IOC_GETVERSION(r0, 0x80047601, &(0x7f0000000000)) r1 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b091c00000000000109022d000100006000090400800203000000092108040001220500"], 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0xc4) pwritev2(r2, &(0x7f0000000180)=[{&(0x7f0000000080)="15", 0x1}], 0x1, 0x5401, 0x0, 0x0) copy_file_range(r2, &(0x7f0000000400)=0x3ff, r2, 0x0, 0x6, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a00)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffd}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dvmrp1\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dvmrp1\x00'}]}]}]}], {0x14, 0x10}}, 0xc8}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect(0x2, 0x0, 0x0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r1, 0x2, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r1, 0x81, 0x0, &(0x7f0000000000)) socket$unix(0x1, 0x1, 0x0) r4 = syz_usb_connect(0x6, 0x11eb, &(0x7f0000000440)={{0x12, 0x1, 0x310, 0x80, 0x68, 0x95, 0x40, 0x8d1, 0x1, 0x11ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x11d9, 0x4, 0xf7, 0x4, 0x0, 0x8, "", [{{0x9, 0x4, 0xf, 0xc, 0xb, 0xf9, 0x2, 0x20, 0xa, [@hid_hid={0x9, 0x21, 0xd, 0x3, 0x1, {0x22, 0xa32}}, @generic={0x4, 0x22, "af50"}], [{{0x9, 0x5, 0xa, 0xc, 0x3ff, 0x0, 0xd, 0x3, [@generic={0x85, 0x5, "d79d2797449bec16aee4f6874bb84a41a23ee790d9150575b6c6fd3ee7b7dfc11670bbc7bf88621c8744b673abf5f314ab773d78affa0c3b7d1d1628efbdd5f9501f6d406e374819cf51bab259c62ad400d2bb48f8edc404511d70a54c4d0729c0b9f7b7a485e67cf9dad3047e0038a7036a4d6cfcfc1b0a970a7677168b75baf8ce1c"}]}}, {{0x9, 0x5, 0xf, 0x4, 0x0, 0x81, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x1}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x6, 0x63, 0x8, [@generic={0xff, 0xd, "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"}]}}, {{0x9, 0x5, 0xf, 0xb, 0x40, 0x7, 0x92, 0x4, [@generic={0x2d, 0x0, "768508713cdde907a6a65e5e619da8b2eb1be3a3800ffc0aca7932cc560b6c0fd751714227c878009ed125"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x2, 0x2, 0x1, [@generic={0xa2, 0x5, "d06d8d9a53a9e743c06456aaf2269757ef8a1139dadf9cbfb57d5e10bc794f4fd94b6470f73d84f2ac2dc93b5b3958fc63b58f58b09cad4dcab778daf5cf0ea4a437d53568ad5ff327af200679f9be87dd59f859a85e536351eee45d46c967624e726e1937ffa1300d5b643e82a7c3af4d50fc8778afae63ee87a68f9771ef1d2f0e8abdebc4f58d88b4ff9471a352115a418abbbbaada4064d8cb05e81e3a0d"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x4d, 0x2}]}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0x6, 0x0, 0x9, [@generic={0xa2, 0x22, "ecd1edf1b8b0239ab1be2928433272ece5afb5d08dcdd7c421b40569d0d861583ecc6b3a6a8e7308d1e662a6c77d1cf02d47eda0ec85d66ced592beae8e161903d87de517d1c567f6a08635682adafe1d67772534a9cfad215eba2b08b2de57ca1fc35680b1376f8d626a9d77ef787523bcc8af34ea39f60d3f2363fd398c74000f97c54a21d23fd07d0fe5549bf9e6b0557e4cefda642b84174d6dfd5f97b1b"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x40, 0x5}]}}, {{0x9, 0x5, 0x2, 0x8, 0x8, 0x6, 0x9, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x8}]}}, {{0x9, 0x5, 0x3, 0x4, 0x400, 0x8, 0x3, 0x2, [@generic={0xe6, 0x30, "50836e911ecc3edb3ff59f3eab728d33ee9f844f2c318c698210e8b10ca2cd9d1308323adc119630892796e876b8452d4f17f9411ee7b7fd350ad6ea60a16426f5f7124ad760d2914740c32ee539ca6c60c0d68f67132ecfb47a05ec43864aa5bcdf229a8eeb4182b0854d30a5cedd43f2ae8e8551429af06cc7a508982ad32bb273526326a9dd49de8098ae8e94cffe8961e4615d7af07ce1178ef61691bfae9966f8369f84935924485467e79475d27338617478cbc8954c3c879ef4e9acc02c4c46df6deb92849770009708117ec9f48c5ddf229fb5de650a1f8d5312860be565378e"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0x1, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x6}]}}, {{0x9, 0x5, 0x8, 0xc, 0x20, 0x1, 0xe, 0x6, [@generic={0xd1, 0x22, "ad8a691b4febde28ee757dc22779344b28637c3e33e40581a58c63f9bb5cf72c941bd6f27b90fb7294b88f576041a05fb4a21314177c8000d79ff7bb1ae409c3199cdf396bb7fb8074e8f709170c5cf5edf6391658011e61ab8f1192bfab6ebd208ce011ec5408ccedc4b4fc9e2bc2ee05696adc5ba96b7be3d85010c03ea1ea509c50a089486b0e881e4f49c01d9f775328e73750608d203816adbf2a4cd770f9145cb39bedf1932dde77e9747dd10f777221102d4e9da7ab64f93689e19f12725c10e6669c460c0d455c9dc1b7a0"}, @generic={0xfa, 0xd, "0186c4456ae848dc8eb3f78bcbdbbb3cdfa55e7659c02461ab09bf75f8301eae6408a7b74e45aa109ee9ca9cf41d5bf04065d93fff75b534ac8877d7b9c4d68bc87a73f10b00ce4d19c37e24938eb652969f72ca3e39b0fc35d807a90ae01a154a9ec544f9da7129526c576fb12720aebbdde8352845417af139d1e10c8983b03d9f5c9ff53e22e346558e5a5f0b4f1368380b61a3d9ff6e9ca359564d72ac2a983300f384b11830ae318cb40f983bcb0509cf19d3c1458bd18f1f7a939337d6f160cab840b688c2a7107efb13e9c3b3f147e2f3f69dabe486ff8ee45b3cfcd253f1a7cef3ca8c0bc7260831cfa99347d34630f7525bd236"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x40, 0x4, 0x81, 0x30, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xd, 0x4}, @generic={0x92, 0x4, "410f5bd2b744db8bbc0dbad4b7d14cb3595d91de885ba52f88f9c0a9a06cc2752752b0ac6b8a00ddfe3e35e1180f1e7266d1dfef9d6a7d0b0603475a23cc1b890fe93d1256dfcb287ba3ed31f868ab9eb31c1ec66e736d0caad2cc8e4311d0b9f49c051c00d12c03b8794cd2dd6d1ebf50c25853c55278e55044a1cc8c183ba2a5018b33b7ca09a56d6f59e54b8fb84b"}]}}]}}, {{0x9, 0x4, 0x66, 0x3, 0x4, 0x22, 0x1b, 0xdc, 0xf8, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "a20c6804"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x1, 0x53f2, 0xd}, [@mdlm_detail={0xe5, 0x24, 0x13, 0x5, "d422ce0f887692660fd75054bfaff81b1c318017d9c94288f3781142b1fb46fa782f88d190dbbb60212c72cf7a3d00a177a0c10072e66b4c2bc551203987e60f9dac1c89577992deef12fd4dddd3d2779ec7792764ea592714c49b65dd4b68d39dac71d0cc36099c733665ffc77426191e202599ad0966d6a2f864b6130d80634ee9b3c88b8c539f535cb10884302612a4281e95bc8c318ace665b4495a7702bbfda3ecdfc07040a61842decf2b8bd8595bb32c4efa5e43cc0f6c9ec3bd3198bda29d17432bb43764f7ce268fbcc57a7794d12f23059d33ef8a9a0a2286f5e6ae2"}, @mdlm_detail={0x1d, 0x24, 0x13, 0x7f, "7ddaddfbc00b2a56854f3bab9ee59f7dc8441b18fac56a01fe"}, @mbim={0xc, 0x24, 0x1b, 0x7, 0x8, 0x40, 0x6, 0x9, 0x3}, @call_mgmt={0x5, 0x24, 0x1, 0x4b940499c5e016cb, 0x1}]}], [{{0x9, 0x5, 0x8, 0x0, 0x8, 0x8, 0x7c, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x6}, @generic={0x61, 0xc, "f413fb5504f190513cf3f9929c2346c126ebdf8fdd4e8fbe21a1f8a31748615a27138354378983a383b07a3beb152a4b7806c8070bcfc3dc6b46c9cdda054340439c3d0b651e8e6484599d41fbabe8831b1a9507c4e202c9ed80b0405a36e6"}]}}, {{0x9, 0x5, 0x82, 0x10, 0x200, 0x5, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x401}]}}, {{0x9, 0x5, 0x80, 0x1, 0x400, 0xaa, 0x4, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xfc, 0x9b34}]}}, {{0x9, 0x5, 0x6, 0x10, 0x10, 0x3, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x800}]}}]}}, {{0x9, 0x4, 0xda, 0x10, 0x9, 0xcf, 0x42, 0x48, 0x0, [@uac_as={[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x9, 0x1, 0x5, 0x4}]}], [{{0x9, 0x5, 0x80, 0x8, 0x220, 0x6, 0xe2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x9576}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x18}]}}, {{0x9, 0x5, 0x80, 0x8, 0x10, 0x3, 0x4, 0x5, [@generic={0x1b, 0x2, "099d67691c729b44576d54874b388b39e36c2596a2f50ab237"}]}}, {{0x9, 0x5, 0x24e3cd9195db536e, 0x4, 0x200, 0x1, 0xe, 0x7f}}, {{0x9, 0x5, 0x3, 0xf, 0x400, 0x1, 0x5, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x1}]}}, {{0x9, 0x5, 0x9, 0x8, 0x200, 0x6, 0x9, 0x9, [@generic={0xec, 0x22, "9114f01aeee5b3af9373ea5bdd601ec45fdc8a50ce34fd586d8da29868a3c1d079a182b0a3caee9274ccc8610bf117e6528d74592385f554b15699de3005bd51a74d5f106327bc124a112fd28e29a8ea901a789ad22c265f06a615336358e88348d3e764dbf9cbf468009fa52b4c1f3b88c408aeafbe329c0cad2e80c01617bb4a6ebdb4cd494ccb4c66f8cc419c91421348bd53dbe6260b18e20356730790ad85ad92ba0e4e29cc205dbbeb95c748c3b9a83e583a045a663d321e588a2e101bc057a417f11de711140c917ba8e4832fd02a200f7d7610f30ac2489196567e46f3bd5d1190ddaa3dcdb1"}, @generic={0x15, 0xd, "27f631fbea8b809711a00ae65515f618f187cd"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0x9, 0xa, 0x4, [@generic={0xab, 0xd, "de2e086f5263c4a57651abfa27f543426c961838cc2d777249a5a006490bc764e295960d66d98e0cac48acdc3a2e422d527d0cb83ed04542a94875b296a6aaba6d3ab39f20e6cf46951b583218ea51b04fc066f1df41e437faa930e340e03cb092ca0af8a88ddf9d7f9a0fd6bec5250808638c1b27fdc6a4738f934aa958b5fa7f38c25314e8e9beb2e361576c6cc9127bf8cfce45f1a5b0dd52e776c59b21622b7d3c2faf971e4a1d"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x48, 0xd, 0x6, 0x7, [@generic={0x3f, 0xe, "7027478ebbf44f1d1d971801e2d5d28f58d2b6c52dbbb499d379070cf897744f3f208929e5221f937726a8200ca40b015726b87014f8f7ecda2291a71c"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0x4}]}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0x7f, 0x4, 0xe7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8}]}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0x2, 0x5, 0x74, [@generic={0xb2, 0x0, "744394981512dde00c68d9687303107563f0712743ec5123d5ac84d6109c41792a18cb113a833011c9b6320b7e30c84f38ae65a4bd0b188b99cc8cd7e86ac9791b0e28f3d903e9c269a66c73ea6d3a1ea0f6e3e51d5006a93c41f3eefe7327ffe55fdc5b1d05a272527a5e874afda5ccbf3f54d896b19a48570c32044328dfdfa99738541983152fc7560b66f167848e7629cf6f6ce1cd47805be10dab140f37492bf3f920f87018403ea0bd68ed30de"}]}}]}}, {{0x9, 0x4, 0x4e, 0x0, 0xd, 0xff, 0xff, 0xff, 0x7, [@generic={0x9c, 0x5, "19cd663de737c04f444983cf82771896c43ff2c60a72f5e5786cd572301099face2013260c89a1ab20143c79b5de802e3565c2d6bf48aea28d5fa52ee51170711daee1ec5eb5fe60f8e2c0d926292f2279b76e19142115503d3eb89043ef34fc2a21681755cc4bc232e823e48606c5daa416e0104b4e63b048b2a1e8fd260aafeb5a70d0c73507cbabaab6cba1f2fdd2ab76a106250783c02cff"}, @hid_hid={0x9, 0x21, 0x8, 0xe, 0x1, {0x22, 0xf77}}], [{{0x9, 0x5, 0x4, 0x0, 0x40, 0x7, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x6, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0xd9fd}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x1, 0x3, 0x91, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x8}, @generic={0x6c, 0x2, "b63820ed2514e69de91b8e9978797d3268c0b23f340b1df864c33cc830c7ea119e9e8ea2b76c2fe52ccc860f32488e160765353aab8d5c00c82c09da562bffda3868b29135c71454de8ff5d877ecd67cbfcd29c115344e54c7170da6bed35d45e9c7d8d560d713f3b3cd"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x220, 0x0, 0x7, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xf7, 0x8}]}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x4, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x2, 0x8000}]}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0x72, 0x5, 0x7, [@uac_iso={0x7}, @generic={0x22, 0x30, "385de3350588e3e78fc7cc7a118bafb38480a048072291b2f852d7c46b739d2a"}]}}, {{0x9, 0x5, 0xd, 0x4, 0x400, 0x81, 0x9, 0x1, [@generic={0x68, 0x2, "2db862102db2a9943af952cd362d82dec285f8147493d97f9221d1f49d85e948d1ee2033a4053e5de4c46306c1028752abe62c1d87b8f43c6562f38cdd805bbc63938bbd218127431b605f1fb0e79d9a5fe9d52b1cfc6f65f1ada279c2081ff17db766d9d46a"}, @generic={0x91, 0x30, "270b361997ff2cbd6913cf56a55eb7a7edab585191eacdb93fdd2224c8f17344c7db652f29cd2248061b21b33cb05b110a864f7c02c1e308db054c8d1c505f01f1263417decee587aecdff598bb818b0f8eeacfc8c11c7e8e5487c14de2049daf6af64d3671ffaf8b25a881994f86aba8962707fcd12c63a0680904e6ef08eafccf5990c40a98ae28e4195c663ba4d"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x200, 0x3, 0xfd, 0x3, [@generic={0xe3, 0x24, "3b705d3c3bb24db34a6f005593cc013a3b474b7f06772eaf283788bae008444f1e5201e2853a677b072249aac14fffd89e2e2e077a6fe1b82daa4ca8db1ffa5d3be19eede244ed39b8e61a9a096491d9b570da7e723ec9453302952645331fefb5c26e777a3532454cfa5e1e72d9c8329c5fddd13133d5dcd08f1b77a0b6deb765063e081c4af7118c01b6552ba67a6048c1c0f07e9d3d79ad6d9c2171023714dca2554a7946774ccb1d0cce1862f253115fa9a431690721ef82d30fa96bf2d76626f2c1a3081db6a3596f44dd18df6c67d68fac68bee65ac716d17b27529fdd7e"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x250, 0x1, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x3, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xc3, 0x7}]}}, {{0x9, 0x5, 0x3, 0x3, 0x20, 0x8, 0xff, 0x7f, [@generic={0x87, 0xe, "e3f8af0ca7826ff1630f3cee405630b719134524306aa8026b91f5dd04570cb96f135f6929424af639557736af8a1b21c36a85c04f9dab63f09372eba8e444134ac583ed33cd3d954fbfe4ec0e38d756951fa0ef2265bce3d8508f709aeca6553322db2844c511967dfc2cc1aa251814502ca19aac5055c948b2322bd50d41abdb36b71f98"}, @generic={0xaa, 0xd, "81151bf398eb7fbcc8a335f1c2f5d9745e298c35d8ef168323afd4c3b73ac7f7207d9534ce6044db6fabd890dcf3ca5d87654234a89b7d42c83274c3f82c2f5889726bf4a20863c8aec3ee6f60f2bd4aa074ba1a86e4d30a786f318f8beae6b25b2ec0238f2b766eba2a52a56a9e9c9e4c96be17aa69e2630ede46532927f93c4b522378d7fde6da8281ded0bf23375aa1dfb5467f58de04b96eb38aa97cfb857a3f35444ef2ecfd"}]}}, {{0x9, 0x5, 0xf, 0x1, 0x400, 0x0, 0x8, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x1}, @generic={0x42, 0x2, "0d754224e3688f93edbdb0fe6e791c394dc48f15bb85a1a9f7fe7667d2658e28a835439ef889313f0c0c97483c657e6f34fdd68dfd3c6e92756a1eea0fdd3148"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x20, 0x5, 0x1, 0x6, [@generic={0x34, 0x21, "161473f2f09f57612ac27ab32165d13bf134b4214bfb37cf6bb00e922368398e7f844ecf881c8e7f0fd6bfbe07363cc76757"}, @generic={0x4, 0x3, "8adb"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x7, 0x81, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x4}, @generic={0x2, 0x30}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3ef, 0x4, 0xf9, 0x2, [@generic={0x57, 0x2, "55af60c68b964a09b0418e96ddea0452a93eabaf13acd9c3dee1eb9fe2f476fe838c698906674ae0b2e8ada8bef15f646a5310962eb6930bad8f8a5c575f4a913edd99a552fea2aa5864693376279dd7be9d0b12e2"}]}}]}}]}}]}}, &(0x7f0000001b00)={0xa, &(0x7f0000001780)={0xa, 0x6, 0x310, 0x2, 0x0, 0x0, 0x20, 0x6}, 0xf, &(0x7f00000017c0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x6, 0x1, 0xe}]}, 0x9, [{0x4, &(0x7f0000001800)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0x2001}}, {0x17, &(0x7f0000001880)=ANY=[@ANYBLOB="1703b71bcb2f2255c259282c3d91dc581d389d156d4ab0"]}, {0x4, &(0x7f00000018c0)=@lang_id={0x4, 0x3, 0x42d}}, {0x4, &(0x7f0000001900)=@lang_id={0x4, 0x3, 0x404}}, {0x4, &(0x7f0000001940)=@lang_id={0x4, 0x3, 0x140a}}, {0x4, &(0x7f0000001980)=@lang_id={0x4, 0x3, 0x412}}, {0x4, &(0x7f00000019c0)=@lang_id={0x4, 0x3, 0x4c0a}}, {0xe2, &(0x7f0000001a00)=@string={0xe2, 0x3, "d3c0eee2912adfac50af18a856a41d99a999d4f594f3f96c5c24d43924e5efd9ce9cbd81c555b43e7f4d4e3a17c81df611e9f27b112d82e1d79a6bde280d7569e11c6d9b47ba4e42fb7d9bcfbfe856721c378fe10359b63465ceba1d4c942c3fe9307f5e3e5d7281308dd6e1b49208184a85ae28ddb6e5a54c3dee28e40ae75bbdc874259206f2529da638647e5e1e8e603003b3d93be2d37d5bb20d3e2fbec12280c9fc5cd8452382d6cc557c17c96136dee541f33e1617315a84ed9868b920450822f4a292435a931cb24d02c9998d36970a501878af3a396d38f1a6c3f046"}}]}) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x121000, 0x0) ioctl$KVM_GET_MSRS_sys(r6, 0xc008ae88, &(0x7f00000001c0)={0x1, 0x0, [{0x489, 0x0, 0x6}]}) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000000)={0x1e, 0x1, 0x7, "d30580c9042b7275077bafe6410c2087850000000000000000000080001500", 0x50565559}) syz_usb_control_io$uac3(r4, &(0x7f0000001cc0)={0xc, &(0x7f0000001b80)={0x40, 0x24, 0xc5, {0xc5, 0x21, "813b0d8b7dc57d8befb02b827b3ac02c5e538dfc7bbeb7617d76a1bd214029ea61ab3abf1c0dd5e7b5a8127f824e32ca3a67d6f9b817fe34feaf7897b9660e6262e43716f115be0b270cd3901cc2be01598b47e745ddbc2aa51ab78dc0cdf1e2b755d6e696bc36c16baf586cd43f49a35267a222f24af3e36efe632e645294989046ead5a77c31721b6cbf9e965bc288305d3b898fa9832d298d0ad981e6de4932fe2bf951d2048654e1236fbd83f9b4419ae290cfed810ce60f649e7a50ff001a6f4e"}}, &(0x7f0000001c80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2001}}}, &(0x7f0000002000)={0x24, &(0x7f0000001d00)={0x0, 0x16, 0xfe, "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"}, &(0x7f0000001e40)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000001e80)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000001ec0)={0x20, 0x81, 0x3, "ae0a1b"}, &(0x7f0000001f00)={0x20, 0x82, 0x1, "c8"}, &(0x7f0000001f40)={0x20, 0x83, 0x2, "85b6"}, &(0x7f0000001f80)={0x20, 0x84, 0x2, '\aD'}, &(0x7f0000001fc0)={0x20, 0x85, 0x3, "ff3b38"}}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000003c0)) 1m38.071878214s ago: executing program 3 (id=2677): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x2f, 0x6a, 0x9, 0x3, 0x16, @remote, @mcast2, 0x7, 0x40, 0x7, 0x9e}}) r1 = io_uring_setup(0xd71, &(0x7f0000000080)={0x0, 0x4, 0x80, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x0, 0x1}, 0x20) r2 = socket$inet6(0xa, 0x3, 0x3) r3 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\n\x8c0xffffffffffffffff}, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000080)=0x8) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000680)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xb}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4800) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in=@multicast1, @in=@multicast2, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d4, 0x6c}, @in=@broadcast, {0x0, 0x192, 0xffffffffffffff3a, 0x0, 0x8251c, 0x2, 0xfffffffffffffff8, 0xe2e237c}, {0x9, 0x0, 0x20000001f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0xfff}, 0x70bd2a, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x20, r8, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x20}}, 0x80) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x4) open_by_handle_at(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="1000006c7f48e7965fa26a1400000000600003040000"], 0x521b00) sendmmsg(r2, &(0x7f0000007bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0c0000000e010000890000000c0000001301000001800000"], 0x18}}], 0x1, 0xffe0) 1m37.939151701s ago: executing program 3 (id=2678): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x4, 0x0, 0x37, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000480)={0x0, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x88) symlinkat(&(0x7f0000002000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r1, 0x0, 0x18, 0x0, &(0x7f00000000c0)) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r3 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2b, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102}, {0x11, 0x0, 0x0, @multicast1, '\x00'}}}}}, 0x0) sendmsg(r3, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c", 0xb}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x3, 0x0, 0x10}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x26088888) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, 0x0, 0x0) close(r2) keyctl$instantiate(0xc, 0x0, &(0x7f0000000300)=@encrypted_new={'new ', 'default', 0x20, 'user:', ')-(', 0x20, 0xffffffff}, 0x2a, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000640)={@fallback, 0xffffffffffffffff, 0x2b, 0x4000}, 0x20) clock_adjtime(0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f000905", @ANYBLOB="01265f"], 0x0) r6 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r6, &(0x7f0000000240)=""/112, 0x349b7f55) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000280)=[0xee00]) 1m36.777980928s ago: executing program 2 (id=2679): socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001580)=""/179, 0xb3}], 0x1, 0x0, 0x0, 0x5000000}, 0x7}], 0x1, 0x100, 0x0) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 1m33.620786773s ago: executing program 0 (id=2680): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) get_mempolicy(&(0x7f0000000000), &(0x7f0000000100), 0x5, &(0x7f00003ba000/0x2000)=nil, 0x3) ftruncate(r0, 0x4a8e) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r2 = dup(r1) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_targets\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f00000014c0)=""/223, 0xdf}, {&(0x7f0000000080)=""/146, 0x92}], 0x2, 0x5, 0x0) mmap(&(0x7f00005fe000/0x2000)=nil, 0x2000, 0x100000d, 0x28011, r2, 0x0) (async) syz_usb_connect(0x2, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x8c, 0xf0, 0x16, 0x10, 0x4b4, 0x861f, 0xdb82, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2b, 0x90, 0xd0, 0x40, "", [{{0x9, 0x4, 0x0, 0xc1, 0x0, 0xfe, 0x54, 0x2d, 0x7}}]}}]}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async, rerun: 64) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f00000000c0)={0x600, 0x80600}) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f00000000c0)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x541b, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0000006c0001002abd7000ffdbdf250000ff7a", @ANYRES32=0x0, @ANYBLOB="91400100408200001400030064756d6d793000070000000000000000180034801400350070696d3680656730f0ffffffffffffff0bf9bb061f3d1d6f673db326a6faa0b0968b584d54ffb3945b8491d8b272ab0a9cf5cf60d6874967abfaec6d7edf075252eb0ae0329703b4f0b4bd23088c41d3d468df8a10db17ae0278170ad5d88b609cd2ab7e57434b4d7145a5657d1c4f6bbeba4beaef4f139739ff15"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 1m32.637383058s ago: executing program 4 (id=2681): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0xc008006) 1m28.799781495s ago: executing program 2 (id=2683): unshare(0x2c020400) openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0xfffffffffffffffc, {0x0, 0xf0}, 0x1}, 0x18) sendmsg$can_j1939(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x1}}, 0x18, &(0x7f0000000180)={0x0}, 0xc7}, 0x200440ee) 1m28.649961484s ago: executing program 3 (id=2684): socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300020c00000025bd70000000000003000600330000000200100077b5000000000000000000000200010000000000000005fc00000000030005000000000002000000ac1e0001000000000000000002000800080000003400000000000000"], 0x60}, 0x1, 0x7}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) r4 = dup(r3) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RREADDIR(r4, &(0x7f0000000600)={0xb, 0x29, 0x2}, 0xb) 1m28.320946983s ago: executing program 1 (id=2685): syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) memfd_create(&(0x7f0000000a80)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x187\xc2:}\xa3\x9bO\xdd\xdf\xdf\xaf\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\xa0\x9d\xb0rYP\x1b\x9fWI\x17\x1eq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xbdc\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\x1b\xed\xfd\x0e\xc8\x89W\x847\x98\x82\x94\x14\xe33\xb7H\xd4b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wL\x00\x00\x00\x00\x00\xd0\x00\x00\x85\x9d\xcb\xc8\xf0\xca\xe1\xf2\xd0\xaeM\xbcM\xd3\xab\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfd\xf9\xa6\xdd\xf0\x1f\xed\xb3Q\x03\x03}Sb\x1b\x89\n?&\x11q^\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe3\x1b\x9f\xcf\x9e\xdf\x82)\xc7P\xa4\xcdi\xde\xb0\x14\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xeb\xc3p@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)>`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafTk\"\xfa\xc37\\8\xa7g\x0f!Y\x8e\\\xac\x01\x11R\x05p\x1a\"\r\xe9\x05\x00&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xeb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x95\xf4b:\x80^\xb7\x17@.\x91\xf1\xd2\v\x8dn6\x1a\xa3\x12\xbf$\x11\'B\xec\xebC%\x86\xa2Q\xc3\x8e(\x00\x00\x00\x00', 0x0) r0 = openat$full(0xffffff9c, &(0x7f00000000c0), 0xa00, 0x0) r1 = syz_ublk_setup_io_uring(0x5d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000000300)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) socket$inet6(0xa, 0x3, 0x5) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r5, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) recvfrom$inet(r5, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)={0x18, 0x56, 0x601, 0x2, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\v\x00'}]}, 0x18}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000f00)={&(0x7f0000000440)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000ec0)=[{&(0x7f0000000500)}, {&(0x7f0000000540)="bc987d3cda9d45a7ad8da1746f1b48c216f90cb092acd97cb229ee1d645dc545955cb57081b78f01c0c3ab589880a83ff5b758e681ebaa4c460e13e3dcb175236c4ef0b5c7edc86864bb7f550d2f7d8ea4f95a5316a8a4a76b6eceaa67ba6bdfeaa5d88967df", 0x66}, {&(0x7f0000000600)="0162d45bc42b482b13fb9c6bed9237e7b5", 0x11}, {&(0x7f0000000700)}, {&(0x7f0000000e00)="d48370a701292262d9b7e1134102b381653cc1d0c022cc510cb154efb6e352a5665f18ab4b63939f7aaa56aff6b88ed06b25096f3ffc32a59d5d7aacf9e2c052fa95bfa41e102af0751c754f904d257e7924c0a73d78a2a6c290b9edd7673a9afc2815af1a7dc1d824fb5cf28a51575054f632eb6b75b88c6fcda5b9bac97e129df2a542b173a173ede0891ac4c72e789d4d", 0x92}], 0x5}, 0x20000010) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x68, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60b3c35900323a00fe8000000000000000000000000000e5e71725e36b8933ddaab0cf97c3bbff020000000000000000000000000001010090780000000060f84bd700002c00fc010000000000000000000000000000fc020000"], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8923, &(0x7f0000000000)={'team_slave_1\x00', @random="013701329eff"}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) 1m28.307430572s ago: executing program 2 (id=2686): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0xffde, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) sendmmsg$inet(r1, &(0x7f0000003f40)=[{{&(0x7f0000000380)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000015c0)=[{0x0}, {&(0x7f0000000e00)='>`', 0x2}], 0x2}}], 0x2, 0x2000c044) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv4_delrule={0x34, 0x21, 0x200, 0x70bd26, 0x25dfdbfe, {0x2, 0x80, 0x10, 0x2, 0x10, 0x0, 0x0, 0x6, 0xc}, [@FRA_DST={0x8, 0x1, @loopback}, @FRA_SRC={0x8, 0x2, @multicast2}, @FRA_SRC={0x8, 0x2, @multicast2}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x80) r3 = socket(0xa, 0x3, 0x3a) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x6, 0xc7, 0x2, 0x480, 0xbe9, 0x9, 0x8001}, 0x1c) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000080)=0x1, 0x4) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8982, &(0x7f00000001c0)={0x6, 'bridge_slave_0\x00', {0x40}, 0x56cf}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) syz_usb_control_io$uac2(0xffffffffffffffff, &(0x7f0000000400)={0xc, &(0x7f0000000280)={0x0, 0x21, 0xf5, {0xf5, 0x9, "29bd43d974723d6b2da64a09ab402e5b2d1e2d9ce7b0615fe189797513065cc5f921fcc477d434fd33688d27174194423841a220043badcde8d5f4af7a6035877238f2a00d484c48c36156a2778086a8f196a767faa1ad19a9aee76325e16f9713116614c7c689688d16687d5a284336bcf176e7aa59f671ab17450fe8c16fa4b434d48786beb5b689d26c55eac584c184c44bef6694bb770c85787e7057aa061c3c81635efee5ed98843d06721258a5c76428dc0a7373627be0448ac346ac7b8f4cd375375be006b31b0de45889414f7f12c3c59d55a41db7e9ac6e8d7dc07048d36773468ebfda6d4250008a0a740796441b"}}, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc40}}}, &(0x7f0000000680)={0x24, &(0x7f0000000440)={0x20, 0x18, 0x76, "4a1cbd16656474092a11b708eefebf835992c198a79147e1451431c7a857a310c85ac22417af1367346380dd95b6b91b0e347747e54d75351f65c3f25e22d6b6153b191159fa5c92c670385c48fab307ec44e0645650ea6e572ba58fb17f06c19fbca623035b5b3a50f8d949992d182d0c5fb6c1926c"}, &(0x7f00000004c0)={0x0, 0xa, 0x1}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000540)={0x20, 0x81, 0x1, 'G'}, &(0x7f0000000580)={0x20, 0x82, 0x2, "9468"}, &(0x7f00000005c0)={0x20, 0x83, 0x3, "235b80"}, &(0x7f0000000600)={0x20, 0x84, 0x4, "5bad7b6a"}, &(0x7f0000000640)={0x20, 0x85, 0x3, "213298"}}) 1m28.146336371s ago: executing program 4 (id=2687): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x7fffffff, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90b24fc60", 0x8c0}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000100)=""/184, 0xb8}, {&(0x7f0000002b80)=""/191, 0xbf}, {&(0x7f00000001c0)=""/124, 0x7c}, {&(0x7f0000000740)=""/195, 0xc3}, {&(0x7f0000003cc0)=""/4077, 0xfed}, {&(0x7f0000000840)=""/193, 0xc1}, {&(0x7f00000003c0)=""/139, 0x8b}, {&(0x7f0000000480)=""/81, 0x51}, {&(0x7f00000070c0)=""/4096, 0x1000}], 0x9}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x10}, 0x4e20, 0xb, 'lblc\x00', 0x1a, 0x40c, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000200)={{0x84, @loopback, 0x4e21, 0x3, 'lc\x00', 0x15, 0xb, 0x64}, {@private=0xa010102, 0x4623, 0x4, 0x100000cd, 0x12d5f, 0x3}}, 0x44) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}}], 0x1, 0x20000000) ioctl$int_in(r3, 0x5421, &(0x7f0000000140)=0x1) pwritev(0xffffffffffffffff, &(0x7f0000001b80)=[{&(0x7f0000000600)="e0ecd8446734d3acf34c617cbbcb5f34ad64fd19143ddf8e0942a0e03fb08ea76e6230021da938f56c2752700f2bde2dcd8818b460be718eae03310ceacb22a285e6f21f0828469e894b95366b89170e6f4b263b468fd1b2352ed23bc4e8ec07c68430c21bdb9212847753c401feeef2c60b410577dc071c531f22874ac6ced3d40f6eba073798ab5fdd617d0e1fc97102ed107ebe8647a7e9633edcb703eed8c01b63df34055e3377c9cffde6c4b3d571a22116caddc2b5bebf8fb788f200800e34", 0xc2}, {&(0x7f0000000980)="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", 0x800}, {&(0x7f0000001980)="b78427ab062b20b7f321d00fe793d6084d884f6bc83ecc15cfeb5c1151379e62baba993f650897d2b63ad6233ae5669cabd683508e0c48ddecbc80d27fa9c62aa64e83caa9f13cccf0a553f05d80f89ef8809a5175f7fcf791f603bc4a50c6e8911ccf91e19e2174f3a396d5f580fbabdc53ec6892bc7ae3245616ab89e9e630b893c20ae81bb88422f0b72dec573a653bddd8c49dd92e4a00bbd98b83d1dd373115c0c504453347", 0xa8}, {&(0x7f0000001ac0)="946f6a063dd7a7323d42d22db1432cbf92e94a715a92beb97ee23a17f02884bf012cdac69aa7575c26783511e6441bf14dc1771fb0604fd17b13e894616eacdf07635ca3063c8daac9485a7ed84deec30d3df9131edd2665a508d02e7165aaf2d8798a6b1d727df6de45867d0bc12c159492ddd9c6e53c0c3459febdf1c057c4e65b29cec6166bb56c46d02a455f2c544da640e69eb4", 0x96}], 0x4, 0x4, 0x0) writev(r3, &(0x7f0000000080), 0x0) close(r3) mbind(&(0x7f00001ae000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000200)=0x2001000000000004, 0x9, 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100005ff00", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012000106d5e924c7"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20008080) 1m27.500223518s ago: executing program 3 (id=2688): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x2f, 0x6a, 0x9, 0x3, 0x16, @remote, @mcast2, 0x7, 0x40, 0x7, 0x9e}}) r1 = io_uring_setup(0xd71, &(0x7f0000000080)={0x0, 0x4, 0x80, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x0, 0x1}, 0x20) r2 = socket$inet6(0xa, 0x3, 0x3) r3 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\n\x8c0xffffffffffffffff}, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000080)=0x8) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000680)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xb}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4800) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in=@multicast1, @in=@multicast2, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d4, 0x6c}, @in=@broadcast, {0x0, 0x192, 0xffffffffffffff3a, 0x0, 0x8251c, 0x2, 0xfffffffffffffff8, 0xe2e237c}, {0x9, 0x0, 0x20000001f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0xfff}, 0x70bd2a, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x2c, r8, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}]}]}, 0x2c}}, 0x80) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x4) open_by_handle_at(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="1000006c7f48e7965fa26a1400000000600003040000"], 0x521b00) sendmmsg(r2, &(0x7f0000007bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0c0000000e010000890000000c0000001301000001800000"], 0x18}}], 0x1, 0xffe0) 1m27.386349319s ago: executing program 2 (id=2689): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000007500)=[{{0x0, 0x0, &(0x7f00000074c0)=[{&(0x7f0000007380)='q', 0x1}], 0x1}}], 0x1, 0x4040080) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)=@newtfilter={0xc4, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4}, {}, {0x6, 0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x0, 0x6, 0x8, 0x101, 0x4, 0xe, 0x7, 0x4, [{0x3, 0x8b39, 0x3a, 0x3d}, {0x8, 0x3, 0x9, 0x2d}, {0xffffff8a, 0x9d2, 0x2, 0x10000}, {0x9, 0xc, 0x8, 0x8}, {0x0, 0x5, 0x3b7, 0x3}, {0x553e3387, 0x3, 0x8000, 0x2}, {0x8001, 0x4, 0x1}, {0x1000, 0xa8c, 0xfffffff8, 0xd}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r5, {0xc, 0xc}, {0x0, 0xfff1}, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x40000) splice(r0, 0x0, r2, 0x0, 0x80008000f29, 0xc) splice(r1, 0x0, r0, 0x0, 0x3, 0x4) syz_io_uring_setup(0x1000f00, &(0x7f00000001c0)={0x0, 0xf4f6, 0x0, 0x0, 0x2eb, 0x0, r1}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r9, &(0x7f0000000680)={0xa, 0x4e22, 0xfffff2cd, @local, 0xb}, 0x1c) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x4}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x11c}}, 0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_WAITID={0x32, 0x64, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, {0x0, 0x0, 0x5}}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x1c, 0x20, 0x1, 0x70bd2d, 0x25dfdbfc, {0xa, 0x10, 0x14, 0x0, 0x8, 0x0, 0x0, 0x3, 0x19}}, 0x1c}, 0x1, 0x0, 0x0, 0x10000050}, 0x20048800) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) r12 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x13f283, 0x0) ioctl$SNDCTL_DSP_SETFMT(r12, 0xc0045005, &(0x7f00000000c0)=0x20) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r2) socket(0x2, 0x80805, 0x0) vmsplice(r0, &(0x7f0000000600)=[{&(0x7f00000003c0)="70888b91dac1", 0x6}, {&(0x7f0000000400)="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", 0xfe}, {&(0x7f0000000500)="2575923d6a7c5cd7d952bf8c50540ea9ee3c15439f66af05a235511cdf732129430d7ea54511942b6f0097375451d9be866a11840ca610ecb34991f7171aa90858fe288a97af7a44660accc2371f754c2ed31f6472f5491c4060b86451fa316622bcf211a37a16ca4e5f66510414f2bd20869ca2a4d389f82d6404d8c36cf56587f46daea22fae5899ef856cc8fd2134ec70af878ebe5e701e6c5bf1a3603451de1e823bac0dbfa612e948f6bdc046fa129e4a721980b72e62c6cd933210e0352195624fbfe8051b2384091f7afb8b0e56c39f4699b3dba5", 0xd8}], 0x3, 0x1) sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r13, 0x1, 0x70bd2d, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0xc001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000740)={'syztnl1\x00', &(0x7f00000006c0)={'syztnl1\x00', 0x0, 0x29, 0xc8, 0x8, 0xc9a, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, 0x80, 0x7, 0x8, 0x5}}) 1m27.254981223s ago: executing program 1 (id=2690): syz_usb_connect(0x5, 0x3f, &(0x7f0000001640)=ANY=[@ANYBLOB="12010000300f3508da040d391a990102030109022d00"], 0x0) socket$rxrpc(0x21, 0x2, 0x2) socket$netlink(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) inotify_add_watch(0xffffffffffffffff, 0x0, 0xa50003d1) socket(0x1, 0x803, 0x0) 1m27.23958639s ago: executing program 3 (id=2691): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0x6, 0xff, 0x7, 0x8}]}) ioctl$XFS_IOC_GETVERSION(r0, 0x80047601, &(0x7f0000000000)) r1 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b091c00000000000109022d000100006000090400800203000000092108040001220500"], 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0xc4) pwritev2(r2, &(0x7f0000000180)=[{&(0x7f0000000080)="15", 0x1}], 0x1, 0x5401, 0x0, 0x0) copy_file_range(r2, &(0x7f0000000400)=0x3ff, r2, 0x0, 0x6, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a00)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffd}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dvmrp1\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dvmrp1\x00'}]}]}]}], {0x14, 0x10}}, 0xc8}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect(0x2, 0x0, 0x0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r1, 0x2, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r1, 0x81, 0x0, &(0x7f0000000000)) socket$unix(0x1, 0x1, 0x0) r4 = syz_usb_connect(0x6, 0x11da, &(0x7f0000000440)={{0x12, 0x1, 0x310, 0x80, 0x68, 0x95, 0x40, 0x8d1, 0x1, 0x11ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x11c8, 0x4, 0xf7, 0x4, 0x0, 0x8, "", [{{0x9, 0x4, 0xf, 0xc, 0xb, 0xf9, 0x2, 0x20, 0xa, [@hid_hid={0x9, 0x21, 0xd, 0x3, 0x1, {0x22, 0xa32}}, @generic={0x4, 0x22, "af50"}], [{{0x9, 0x5, 0xa, 0xc, 0x3ff, 0x0, 0xd, 0x3, [@generic={0x85, 0x5, "d79d2797449bec16aee4f6874bb84a41a23ee790d9150575b6c6fd3ee7b7dfc11670bbc7bf88621c8744b673abf5f314ab773d78affa0c3b7d1d1628efbdd5f9501f6d406e374819cf51bab259c62ad400d2bb48f8edc404511d70a54c4d0729c0b9f7b7a485e67cf9dad3047e0038a7036a4d6cfcfc1b0a970a7677168b75baf8ce1c"}]}}, {{0x9, 0x5, 0xf, 0x4, 0x0, 0x81, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x1}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x6, 0x63, 0x8, [@generic={0xff, 0xd, "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"}]}}, {{0x9, 0x5, 0xf, 0xb, 0x40, 0x7, 0x92, 0x4, [@generic={0x2d, 0x0, "768508713cdde907a6a65e5e619da8b2eb1be3a3800ffc0aca7932cc560b6c0fd751714227c878009ed125"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x2, 0x2, 0x1, [@generic={0xa2, 0x5, "d06d8d9a53a9e743c06456aaf2269757ef8a1139dadf9cbfb57d5e10bc794f4fd94b6470f73d84f2ac2dc93b5b3958fc63b58f58b09cad4dcab778daf5cf0ea4a437d53568ad5ff327af200679f9be87dd59f859a85e536351eee45d46c967624e726e1937ffa1300d5b643e82a7c3af4d50fc8778afae63ee87a68f9771ef1d2f0e8abdebc4f58d88b4ff9471a352115a418abbbbaada4064d8cb05e81e3a0d"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x4d, 0x2}]}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0x6, 0x0, 0x9, [@generic={0xa2, 0x22, "ecd1edf1b8b0239ab1be2928433272ece5afb5d08dcdd7c421b40569d0d861583ecc6b3a6a8e7308d1e662a6c77d1cf02d47eda0ec85d66ced592beae8e161903d87de517d1c567f6a08635682adafe1d67772534a9cfad215eba2b08b2de57ca1fc35680b1376f8d626a9d77ef787523bcc8af34ea39f60d3f2363fd398c74000f97c54a21d23fd07d0fe5549bf9e6b0557e4cefda642b84174d6dfd5f97b1b"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x40, 0x5}]}}, {{0x9, 0x5, 0x2, 0x8, 0x8, 0x6, 0x9, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x8}]}}, {{0x9, 0x5, 0x3, 0x4, 0x400, 0x8, 0x3, 0x2, [@generic={0xe6, 0x30, "50836e911ecc3edb3ff59f3eab728d33ee9f844f2c318c698210e8b10ca2cd9d1308323adc119630892796e876b8452d4f17f9411ee7b7fd350ad6ea60a16426f5f7124ad760d2914740c32ee539ca6c60c0d68f67132ecfb47a05ec43864aa5bcdf229a8eeb4182b0854d30a5cedd43f2ae8e8551429af06cc7a508982ad32bb273526326a9dd49de8098ae8e94cffe8961e4615d7af07ce1178ef61691bfae9966f8369f84935924485467e79475d27338617478cbc8954c3c879ef4e9acc02c4c46df6deb92849770009708117ec9f48c5ddf229fb5de650a1f8d5312860be565378e"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0x1, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x6}]}}, {{0x9, 0x5, 0x8, 0xc, 0x20, 0x1, 0xe, 0x6, [@generic={0xd1, 0x22, "ad8a691b4febde28ee757dc22779344b28637c3e33e40581a58c63f9bb5cf72c941bd6f27b90fb7294b88f576041a05fb4a21314177c8000d79ff7bb1ae409c3199cdf396bb7fb8074e8f709170c5cf5edf6391658011e61ab8f1192bfab6ebd208ce011ec5408ccedc4b4fc9e2bc2ee05696adc5ba96b7be3d85010c03ea1ea509c50a089486b0e881e4f49c01d9f775328e73750608d203816adbf2a4cd770f9145cb39bedf1932dde77e9747dd10f777221102d4e9da7ab64f93689e19f12725c10e6669c460c0d455c9dc1b7a0"}, @generic={0xfa, 0xd, "0186c4456ae848dc8eb3f78bcbdbbb3cdfa55e7659c02461ab09bf75f8301eae6408a7b74e45aa109ee9ca9cf41d5bf04065d93fff75b534ac8877d7b9c4d68bc87a73f10b00ce4d19c37e24938eb652969f72ca3e39b0fc35d807a90ae01a154a9ec544f9da7129526c576fb12720aebbdde8352845417af139d1e10c8983b03d9f5c9ff53e22e346558e5a5f0b4f1368380b61a3d9ff6e9ca359564d72ac2a983300f384b11830ae318cb40f983bcb0509cf19d3c1458bd18f1f7a939337d6f160cab840b688c2a7107efb13e9c3b3f147e2f3f69dabe486ff8ee45b3cfcd253f1a7cef3ca8c0bc7260831cfa99347d34630f7525bd236"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x40, 0x4, 0x81, 0x30, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xd, 0x4}, @generic={0x92, 0x4, "410f5bd2b744db8bbc0dbad4b7d14cb3595d91de885ba52f88f9c0a9a06cc2752752b0ac6b8a00ddfe3e35e1180f1e7266d1dfef9d6a7d0b0603475a23cc1b890fe93d1256dfcb287ba3ed31f868ab9eb31c1ec66e736d0caad2cc8e4311d0b9f49c051c00d12c03b8794cd2dd6d1ebf50c25853c55278e55044a1cc8c183ba2a5018b33b7ca09a56d6f59e54b8fb84b"}]}}]}}, {{0x9, 0x4, 0x66, 0x3, 0x4, 0x22, 0x1b, 0xdc, 0xf8, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "a20c6804"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x1, 0x53f2, 0xd}, [@mdlm_detail={0xe5, 0x24, 0x13, 0x5, "d422ce0f887692660fd75054bfaff81b1c318017d9c94288f3781142b1fb46fa782f88d190dbbb60212c72cf7a3d00a177a0c10072e66b4c2bc551203987e60f9dac1c89577992deef12fd4dddd3d2779ec7792764ea592714c49b65dd4b68d39dac71d0cc36099c733665ffc77426191e202599ad0966d6a2f864b6130d80634ee9b3c88b8c539f535cb10884302612a4281e95bc8c318ace665b4495a7702bbfda3ecdfc07040a61842decf2b8bd8595bb32c4efa5e43cc0f6c9ec3bd3198bda29d17432bb43764f7ce268fbcc57a7794d12f23059d33ef8a9a0a2286f5e6ae2"}, @mbim={0xc, 0x24, 0x1b, 0x5, 0x8, 0xe, 0x1, 0x9, 0xea}, @mbim={0xc, 0x24, 0x1b, 0x7, 0x8, 0x40, 0x6, 0x9, 0x3}, @call_mgmt={0x5, 0x24, 0x1, 0x4b940499c5e016cb, 0x1}]}], [{{0x9, 0x5, 0x8, 0x0, 0x8, 0x8, 0x7c, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x6}, @generic={0x61, 0xc, "f413fb5504f190513cf3f9929c2346c126ebdf8fdd4e8fbe21a1f8a31748615a27138354378983a383b07a3beb152a4b7806c8070bcfc3dc6b46c9cdda054340439c3d0b651e8e6484599d41fbabe8831b1a9507c4e202c9ed80b0405a36e6"}]}}, {{0x9, 0x5, 0x82, 0x10, 0x200, 0x5, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x401}]}}, {{0x9, 0x5, 0x80, 0x1, 0x400, 0xaa, 0x4, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xfc, 0x9b34}]}}, {{0x9, 0x5, 0x6, 0x10, 0x10, 0x3, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x800}]}}]}}, {{0x9, 0x4, 0xda, 0x10, 0x9, 0xcf, 0x42, 0x48, 0x0, [@uac_as={[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x9, 0x1, 0x5, 0x4}]}], [{{0x9, 0x5, 0x80, 0x8, 0x220, 0x6, 0xe2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x9576}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x18}]}}, {{0x9, 0x5, 0x80, 0x8, 0x10, 0x3, 0x4, 0x5, [@generic={0x1b, 0x2, "099d67691c729b44576d54874b388b39e36c2596a2f50ab237"}]}}, {{0x9, 0x5, 0x24e3cd9195db536e, 0x4, 0x200, 0x1, 0xe, 0x7f}}, {{0x9, 0x5, 0x3, 0xf, 0x400, 0x1, 0x5, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x1}]}}, {{0x9, 0x5, 0x9, 0x8, 0x200, 0x6, 0x9, 0x9, [@generic={0xec, 0x22, "9114f01aeee5b3af9373ea5bdd601ec45fdc8a50ce34fd586d8da29868a3c1d079a182b0a3caee9274ccc8610bf117e6528d74592385f554b15699de3005bd51a74d5f106327bc124a112fd28e29a8ea901a789ad22c265f06a615336358e88348d3e764dbf9cbf468009fa52b4c1f3b88c408aeafbe329c0cad2e80c01617bb4a6ebdb4cd494ccb4c66f8cc419c91421348bd53dbe6260b18e20356730790ad85ad92ba0e4e29cc205dbbeb95c748c3b9a83e583a045a663d321e588a2e101bc057a417f11de711140c917ba8e4832fd02a200f7d7610f30ac2489196567e46f3bd5d1190ddaa3dcdb1"}, @generic={0x15, 0xd, "27f631fbea8b809711a00ae65515f618f187cd"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0x9, 0xa, 0x4, [@generic={0xab, 0xd, "de2e086f5263c4a57651abfa27f543426c961838cc2d777249a5a006490bc764e295960d66d98e0cac48acdc3a2e422d527d0cb83ed04542a94875b296a6aaba6d3ab39f20e6cf46951b583218ea51b04fc066f1df41e437faa930e340e03cb092ca0af8a88ddf9d7f9a0fd6bec5250808638c1b27fdc6a4738f934aa958b5fa7f38c25314e8e9beb2e361576c6cc9127bf8cfce45f1a5b0dd52e776c59b21622b7d3c2faf971e4a1d"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x48, 0xd, 0x6, 0x7, [@generic={0x3f, 0xe, "7027478ebbf44f1d1d971801e2d5d28f58d2b6c52dbbb499d379070cf897744f3f208929e5221f937726a8200ca40b015726b87014f8f7ecda2291a71c"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0x4}]}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0x7f, 0x4, 0xe7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8}]}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0x2, 0x5, 0x74, [@generic={0xb2, 0x0, "744394981512dde00c68d9687303107563f0712743ec5123d5ac84d6109c41792a18cb113a833011c9b6320b7e30c84f38ae65a4bd0b188b99cc8cd7e86ac9791b0e28f3d903e9c269a66c73ea6d3a1ea0f6e3e51d5006a93c41f3eefe7327ffe55fdc5b1d05a272527a5e874afda5ccbf3f54d896b19a48570c32044328dfdfa99738541983152fc7560b66f167848e7629cf6f6ce1cd47805be10dab140f37492bf3f920f87018403ea0bd68ed30de"}]}}]}}, {{0x9, 0x4, 0x4e, 0x0, 0xd, 0xff, 0xff, 0xff, 0x7, [@generic={0x9c, 0x5, "19cd663de737c04f444983cf82771896c43ff2c60a72f5e5786cd572301099face2013260c89a1ab20143c79b5de802e3565c2d6bf48aea28d5fa52ee51170711daee1ec5eb5fe60f8e2c0d926292f2279b76e19142115503d3eb89043ef34fc2a21681755cc4bc232e823e48606c5daa416e0104b4e63b048b2a1e8fd260aafeb5a70d0c73507cbabaab6cba1f2fdd2ab76a106250783c02cff"}, @hid_hid={0x9, 0x21, 0x8, 0xe, 0x1, {0x22, 0xf77}}], [{{0x9, 0x5, 0x4, 0x0, 0x40, 0x7, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x6, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0xd9fd}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x1, 0x3, 0x91, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x8}, @generic={0x6c, 0x2, "b63820ed2514e69de91b8e9978797d3268c0b23f340b1df864c33cc830c7ea119e9e8ea2b76c2fe52ccc860f32488e160765353aab8d5c00c82c09da562bffda3868b29135c71454de8ff5d877ecd67cbfcd29c115344e54c7170da6bed35d45e9c7d8d560d713f3b3cd"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x220, 0x0, 0x7, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xf7, 0x8}]}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x4, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x2, 0x8000}]}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0x72, 0x5, 0x7, [@uac_iso={0x7}, @generic={0x22, 0x30, "385de3350588e3e78fc7cc7a118bafb38480a048072291b2f852d7c46b739d2a"}]}}, {{0x9, 0x5, 0xd, 0x4, 0x400, 0x81, 0x9, 0x1, [@generic={0x68, 0x2, "2db862102db2a9943af952cd362d82dec285f8147493d97f9221d1f49d85e948d1ee2033a4053e5de4c46306c1028752abe62c1d87b8f43c6562f38cdd805bbc63938bbd218127431b605f1fb0e79d9a5fe9d52b1cfc6f65f1ada279c2081ff17db766d9d46a"}, @generic={0x91, 0x30, "270b361997ff2cbd6913cf56a55eb7a7edab585191eacdb93fdd2224c8f17344c7db652f29cd2248061b21b33cb05b110a864f7c02c1e308db054c8d1c505f01f1263417decee587aecdff598bb818b0f8eeacfc8c11c7e8e5487c14de2049daf6af64d3671ffaf8b25a881994f86aba8962707fcd12c63a0680904e6ef08eafccf5990c40a98ae28e4195c663ba4d"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x200, 0x3, 0xfd, 0x3, [@generic={0xe3, 0x24, "3b705d3c3bb24db34a6f005593cc013a3b474b7f06772eaf283788bae008444f1e5201e2853a677b072249aac14fffd89e2e2e077a6fe1b82daa4ca8db1ffa5d3be19eede244ed39b8e61a9a096491d9b570da7e723ec9453302952645331fefb5c26e777a3532454cfa5e1e72d9c8329c5fddd13133d5dcd08f1b77a0b6deb765063e081c4af7118c01b6552ba67a6048c1c0f07e9d3d79ad6d9c2171023714dca2554a7946774ccb1d0cce1862f253115fa9a431690721ef82d30fa96bf2d76626f2c1a3081db6a3596f44dd18df6c67d68fac68bee65ac716d17b27529fdd7e"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x250, 0x1, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x3, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xc3, 0x7}]}}, {{0x9, 0x5, 0x3, 0x3, 0x20, 0x8, 0xff, 0x7f, [@generic={0x87, 0xe, "e3f8af0ca7826ff1630f3cee405630b719134524306aa8026b91f5dd04570cb96f135f6929424af639557736af8a1b21c36a85c04f9dab63f09372eba8e444134ac583ed33cd3d954fbfe4ec0e38d756951fa0ef2265bce3d8508f709aeca6553322db2844c511967dfc2cc1aa251814502ca19aac5055c948b2322bd50d41abdb36b71f98"}, @generic={0xaa, 0xd, "81151bf398eb7fbcc8a335f1c2f5d9745e298c35d8ef168323afd4c3b73ac7f7207d9534ce6044db6fabd890dcf3ca5d87654234a89b7d42c83274c3f82c2f5889726bf4a20863c8aec3ee6f60f2bd4aa074ba1a86e4d30a786f318f8beae6b25b2ec0238f2b766eba2a52a56a9e9c9e4c96be17aa69e2630ede46532927f93c4b522378d7fde6da8281ded0bf23375aa1dfb5467f58de04b96eb38aa97cfb857a3f35444ef2ecfd"}]}}, {{0x9, 0x5, 0xf, 0x1, 0x400, 0x0, 0x8, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x1}, @generic={0x42, 0x2, "0d754224e3688f93edbdb0fe6e791c394dc48f15bb85a1a9f7fe7667d2658e28a835439ef889313f0c0c97483c657e6f34fdd68dfd3c6e92756a1eea0fdd3148"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x20, 0x5, 0x1, 0x6, [@generic={0x34, 0x21, "161473f2f09f57612ac27ab32165d13bf134b4214bfb37cf6bb00e922368398e7f844ecf881c8e7f0fd6bfbe07363cc76757"}, @generic={0x4, 0x3, "8adb"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x7, 0x81, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x4}, @generic={0x2, 0x30}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3ef, 0x4, 0xf9, 0x2, [@generic={0x57, 0x2, "55af60c68b964a09b0418e96ddea0452a93eabaf13acd9c3dee1eb9fe2f476fe838c698906674ae0b2e8ada8bef15f646a5310962eb6930bad8f8a5c575f4a913edd99a552fea2aa5864693376279dd7be9d0b12e2"}]}}]}}]}}]}}, &(0x7f0000001b00)={0xa, &(0x7f0000001780)={0xa, 0x6, 0x310, 0x2, 0x0, 0x0, 0x20, 0x6}, 0xf, &(0x7f00000017c0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x6, 0x1, 0xe}]}, 0x9, [{0x4, &(0x7f0000001800)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0x2001}}, {0x17, &(0x7f0000001880)=ANY=[@ANYBLOB="1703b71bcb2f2255c259282c3d91dc581d389d156d4ab0"]}, {0x4, &(0x7f00000018c0)=@lang_id={0x4, 0x3, 0x42d}}, {0x4, &(0x7f0000001900)=@lang_id={0x4, 0x3, 0x404}}, {0x4, &(0x7f0000001940)=@lang_id={0x4, 0x3, 0x140a}}, {0x4, &(0x7f0000001980)=@lang_id={0x4, 0x3, 0x412}}, {0x4, &(0x7f00000019c0)=@lang_id={0x4, 0x3, 0x4c0a}}, {0xe2, &(0x7f0000001a00)=@string={0xe2, 0x3, "d3c0eee2912adfac50af18a856a41d99a999d4f594f3f96c5c24d43924e5efd9ce9cbd81c555b43e7f4d4e3a17c81df611e9f27b112d82e1d79a6bde280d7569e11c6d9b47ba4e42fb7d9bcfbfe856721c378fe10359b63465ceba1d4c942c3fe9307f5e3e5d7281308dd6e1b49208184a85ae28ddb6e5a54c3dee28e40ae75bbdc874259206f2529da638647e5e1e8e603003b3d93be2d37d5bb20d3e2fbec12280c9fc5cd8452382d6cc557c17c96136dee541f33e1617315a84ed9868b920450822f4a292435a931cb24d02c9998d36970a501878af3a396d38f1a6c3f046"}}]}) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x121000, 0x0) ioctl$KVM_GET_MSRS_sys(r6, 0xc008ae88, &(0x7f00000001c0)={0x1, 0x0, [{0x489, 0x0, 0x6}]}) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000000)={0x1e, 0x1, 0x7, "d30580c9042b7275077bafe6410c2087850000000000000000000080001500", 0x50565559}) syz_usb_control_io$uac3(r4, &(0x7f0000001cc0)={0xc, &(0x7f0000001b80)={0x40, 0x24, 0xc5, {0xc5, 0x21, "813b0d8b7dc57d8befb02b827b3ac02c5e538dfc7bbeb7617d76a1bd214029ea61ab3abf1c0dd5e7b5a8127f824e32ca3a67d6f9b817fe34feaf7897b9660e6262e43716f115be0b270cd3901cc2be01598b47e745ddbc2aa51ab78dc0cdf1e2b755d6e696bc36c16baf586cd43f49a35267a222f24af3e36efe632e645294989046ead5a77c31721b6cbf9e965bc288305d3b898fa9832d298d0ad981e6de4932fe2bf951d2048654e1236fbd83f9b4419ae290cfed810ce60f649e7a50ff001a6f4e"}}, &(0x7f0000001c80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2001}}}, &(0x7f0000002000)={0x24, &(0x7f0000001d00)={0x0, 0x16, 0xfe, "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"}, &(0x7f0000001e40)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000001e80)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000001ec0)={0x20, 0x81, 0x3, "ae0a1b"}, &(0x7f0000001f00)={0x20, 0x82, 0x1, "c8"}, &(0x7f0000001f40)={0x20, 0x83, 0x2, "85b6"}, &(0x7f0000001f80)={0x20, 0x84, 0x2, '\aD'}, &(0x7f0000001fc0)={0x20, 0x85, 0x3, "ff3b38"}}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000003c0)) 1m26.056732933s ago: executing program 4 (id=2692): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x42, 0x16021}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5}, @IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_COOKIE(r2, 0x1, 0x39, 0x0, &(0x7f0000000100)) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000280)=[{&(0x7f0000001340)="ff", 0x1}, {&(0x7f0000000400)="04", 0xfe44}], 0x2, 0x0) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000200)=ANY=[@ANYRES32=r3, @ANYRESDEC=r1, @ANYRESDEC=r2], 0x4c}}, 0x80) r5 = openat$vim2m(0xffffff9c, 0x0, 0x2, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc0f8565c, &(0x7f0000000000)={0x40000000, 0xbd5, 0x2, {0x2, @raw_data="f91fd2868ba3d9189024fc40809db9e19479c0b5fce2c721330d5771dbf9dbfa9e2ad24622489141b4803cfeb0b70909e75715a13fada32fef53473eb9ce014fbe3929ea41fdeb0ff177dfb9d3227f213a6451b667d35b03b25618d20cea1f072990b86d463a0de7513744a2bb3bf4fb6049e30f7c533837beba9566c9fd8721c48fad424a5fb17bc1419fb85e5e7dce382ba5a1ce182b419becd67c18f0ba055b8d72225df5a5e7917f8a87a52b8c2516745c462e944b0c22a7e71ecf492a0ef916598abba0e732"}}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc04c560f, &(0x7f0000000280)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x100000, 0x1, {}, {0x0, 0x8, 0x0, 0x4, 0x0, 0x0, '\x00\x00\x00\b'}, 0x5141, 0x1, {0x0}, 0x2, 0x20000000, r6}) unshare(0x40000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="580000000206010200000000000000670000000000000000000000000900020073797a30000000000500010007000000050005000a000000140007800800114000000001080012400000ffff0c000300686173683a6970009c6cc155c463d6ab6a4be8a6b2984017a631913fb22740f6caee541ea418079dcb1b1ba1e96d4897c79a5f46c57218b37f55058a01934cb7000000000000000000000000000000bc9288380389db2bde5184217242cd1d9e1d804e413aa00c220c13a6432d2e1d65ccee3dc185bdee6b6bf8776c50dca26b8fad238769b5a016b2a789c1f519e5b713c77c56f958de30548c646a6fef0bdf1d72000000000000000000000000d38e5e89c4ba246aabf42f939bc92d5fa82c32d5d9738dcef29f234965c6eba6dd4603dd113c1fbcc4f440c60f26326f27ed6ed6912b9801db918baa78c6273befae78ab0eb0475fc4d86bcfd813d6bdbe227bb8dbcef9a1d7daf7385c982e820b0f4fce35c9694581148b68d75b2ba9d411b174fd75382c0b10c808fda33ddec4f0b8102c2a60f9224636705c48514df91f2a16d01ba3bc44ea57f648ba7c98fd8123ba6f3f54f1357385253fc9967702bad50b82a23bc1bb24b5fa29c2a6ed673221758619ba9c85b43c"], 0x58}, 0x1, 0x0, 0x0, 0x100}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000005) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f0000000000)=0x5, 0x4) 1m25.692032685s ago: executing program 0 (id=2693): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x1, 0x73696fcba228125b}, 0x20) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x1}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0x7fff}, {0x400000b1, 0x0, 0x89}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9c0000711166b8a35f80c90000003b03184f6861dc9e01008700"], 0x1c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x2, 0x1234, @loopback}, 0x10) 1m24.020515064s ago: executing program 1 (id=2694): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x4, 0x0, 0x37, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000480)={0x0, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x88) symlinkat(&(0x7f0000002000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r1, 0x0, 0x18, 0x0, &(0x7f00000000c0)) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r3 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2b, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102}, {0x11, 0x0, 0x0, @multicast1, '\x00'}}}}}, 0x0) sendmsg(r3, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c", 0xb}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x3, 0x0, 0x10}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x26088888) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, 0x0, 0x0) close(r2) keyctl$instantiate(0xc, 0x0, &(0x7f0000000300)=@encrypted_new={'new ', 'default', 0x20, 'user:', ')-(', 0x20, 0xffffffff}, 0x2a, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000640)={@fallback, 0xffffffffffffffff, 0x2b, 0x4000}, 0x20) clock_adjtime(0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f000905", @ANYBLOB="01265f"], 0x0) r6 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r6, &(0x7f0000000240)=""/112, 0x349b7f55) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000280)=[0xee00]) 1m22.546543478s ago: executing program 3 (id=2695): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000540)=[@in6={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x1ff}]}, &(0x7f0000000140)=0x10) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000000)) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) openat$make_it_fail(0xffffff9c, 0x0, 0x1, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000100), 0x82, 0x602) write$hidraw(r2, &(0x7f0000001380)='\x00+', 0x2) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/reserved_size', 0x121081, 0x100) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, 0x1, 0x4, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_MODE={0xa, 0x2, {0xb35, 0x2}}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x4040001) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 1m20.546243999s ago: executing program 1 (id=2696): openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket(0x1d, 0x2, 0x6) r0 = syz_io_uring_setup(0x1010, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, 0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r1, r2, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 1m20.425631098s ago: executing program 1 (id=2697): openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0xfffffffffffffffc, {0x0, 0xf0}, 0x1}, 0x18) sendmsg$can_j1939(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x1}}, 0x18, &(0x7f0000000180)={0x0}, 0xc7}, 0x200440ee) 1m20.404867925s ago: executing program 1 (id=2698): socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300020c00000025bd70000000000003000600330000000200100077b5000000000000000000000200010000000000000005fc00000000030005000000000002000000ac1e0001000000000000000002000800080000003400000000000000"], 0x60}, 0x1, 0x7}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) r4 = dup(r3) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RREADDIR(r4, &(0x7f0000000600)={0xb, 0x29, 0x2}, 0xb) 1m19.684917933s ago: executing program 4 (id=2699): syz_usb_connect(0x2, 0x847, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000b77f1b60101400244d27010203010902350803000000000904fe09011907a402090508020800b201010725010c0706000904e5050fe9c27e0c09050010400002060e0725010cff04007c0f0167b754095846a68ffa4a2ddbe1daef6225d23b4edd2ffdbd0ad408c0c4133e88e402e9a3fa53fbfc48cae6ac32dae86ccdd7f9b63bb24259a1c01f88de6fc2c453af94ddb4bc9f0d411746199c7c2b0578ab287c3a8f068e75c744697c06d8ac1eedee7386585256fa42e4c70510f31a3da143fefcbe13d19d09050e031000cf0b071420c0cb51ec24972781313e5078435995b798180725010c4004000905000c20001201070725010c0710000725010801060009050d0008000706bf0725010805060009050908000480f93c0e21ddb28cda2b25ad32bb28744d0905060300020f0694072501040803000905050010007500075b2288990c767697a5b3b831b7acf656ea5c7ed46f08b31bfec0eab72ac202e1ca9324d836417cca36424c41b84f4ffe51442f90db4cc3949fc4b6de90bd3ebe72da0ec68558d7ee43de6cebcff037d1e4d7c0b63a124b2a39a521f82e352bd84107e9999bb58ba97e82b30b0c953eaae1396e2f73629fb88c7354a1026b557f087341fcaa367dc11223ac1503fec4c1d276579fbf37d8c1d4b7a0c999a2708398a2c6ca630f2897d5b67c704a647cad0e506fdd75d4623da2c8193726293ddac8babd1ed7238aa61af93800deb8d059864624620748919deeeaf2c91351f27a2316982c05fa50980a31c047211e3b2875e75f232bc83739d127b4e30a185f6ef6def264baf5fd04fa7d8675a35136e97bd926fe1643dcb20474afd49263a719a3de8f6b7a612a86e89b4f2c19746cf807bf7a7a773ba784812f7de2d6e6f30b4c16fe9b3183fb7785051e07413f9b135d5f4509050503080006040097218133d45c13b48ab3c3bd28bd86c4000fb50e033ff99fbed62602ef8e669ae7b05ae3c67e372664234f54ae42c69baf36942566e2beae82114177bb31d9948bcfc99bc234aa79076d865c715ad7c6fa88761ba1aa8f86032384a703663142628de4452c550b896d3c7a73af65d536a335678dcf6b0eb9c68a658e2ad02daff1c451b22c0bc17f7fdbf9e87f59bd6af166ae6eb4c4a009050704400002060207250108b9010007250100fffeff09058003000206ee0909050f10100009160a0725010804030007250100020c0009050410ff030609010725010c060700bc0607529446f66deb15d32d1de327058eda260cd9723f0dc361063f79b79f703a3f3582db2dd6626c3f4ea423ae82602dd612c273f37954d3794902c13df0c93f76958eaa2d47673a10ac578dbafd1a659c9f21f67a70c9e5c8724c3cb85c2db5fe0f4426b614edd6fe83a27607910cdef344415844223d651dbd0307ae24889161869836a65bfcce46a7defa2e347211390e656b0a26478b3de837aab4a79ec627873949a96429a315572c523f63e94ee745d01cfc81a8d75eeb4d09050e0808000604080725010c870e0e09050503000405fc0307250108fb07000725010c020c000905040040000901240904aefd0dca3832eb09050a0c08000304020725010c0c000e0905060200020600250725010c080300c90f4bcb63b36c28f0c754684fcdd034d92a13e5da4bc8c8a6575b8c053259ce45bd4b638c699ea5c2da93d7bbb1ae7a3932efa1e2b78cc69285196feb7178eff35fa8dd10b55b63bd3638dd54a2aea7fea937d45a39564caafcd3c5cbf6450c9e28e98b35e79c1bc46db384a83ff6dd63b7a46b754bca2431068dd30d9af586c79856039c080f403d1f38bc2adc6db1939e01fb073029e640af8626479734d7655102ddae3b2d0465b24b11a0d35609d91f05966c5ce875dc42a365cbb515519735741a2f17d6e83e09058008ff0309f80409050f02000400090e0725010cfa0000090503034000075b040905000c00000106068d0501c9a44233c2922cf7fb2b7fb9b8e1b4b28efb54705e2479d39875d630f29811c6c1b1ee09dbb2bb4e92b42105e97ff6f64bf7d190a9bd3acc5be92a3fba58241efec6d7b969df30c358304aa4407505c0b78d1336ecd33a88cea96df5273681a0488bcda7624baedabcbb1bfa08f78d8e2823d6b5d9539eeac5751c9d653e56559553b6761063df1898d309050b0000020503030725010c5cff0709050a00000404860209050d0408000863f3b20742bb6e9866ee217902791d9fafe3eb1258b233dc31f86ba236988eff26459820ebf2d42207ae85e7672568563970429c3fcc32bcf8cb6a95076f396d671c5af3548eb4dda530a5718429c1318b74c792ee6f44afa5ca9c0df2257f9779958b27156683819417b468b5374a0a460c90d578a541bbf22dc7ade7b4b73298334bf58129ce7eb137836c8bdb7b204f9f680ff67ca97073d84cdb5dec0d79ad6bef59d5f23e86a09921dd706908a6acd49e8f09050810ff03040706072501087f008009050d1020000281040725010cc0ff030725010c04000009050b100002030100cc075923ef7403cc7543a29a8c80891745a5a35e7c61f7e22d945e0420908f409eca8b9572034f9996b38da22a5987c2a793415025e811c37190b7a7cf1e643547a6afbd26956f841aa505aca997d9ccb9ee799bf18f69eee7c5ff1687124e75a8827a3d1c84385b1bfa523a3636029591d712b21755ecaa70c41fa47933b38c6151aff1a655dce035a347fd0c70dfdf108d4e18a7e35f3ef1e15f9ac62e37a856038b02644c115e374729cbac50d1806dc69fcd5a49b85f5c7872bb40d352d74213fdab4da0da67701e3aa05a21895567841b64b0b4c7c3ae2e701b06a58deaea755a68d45ecc10e1780b9c37310dd3ba92f739e52eafad8debbd0eb29ad95b97a5e56b5f3aea500a43afe600e00f536c5a05c1e63e4cf59dc880175ce7edc267d71a73b9f7090509140800077d03"], 0x0) 1m19.684004367s ago: executing program 2 (id=2700): syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) memfd_create(&(0x7f0000000a80)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x187\xc2:}\xa3\x9bO\xdd\xdf\xdf\xaf\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\xa0\x9d\xb0rYP\x1b\x9fWI\x17\x1eq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xbdc\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\x1b\xed\xfd\x0e\xc8\x89W\x847\x98\x82\x94\x14\xe33\xb7H\xd4b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wL\x00\x00\x00\x00\x00\xd0\x00\x00\x85\x9d\xcb\xc8\xf0\xca\xe1\xf2\xd0\xaeM\xbcM\xd3\xab\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfd\xf9\xa6\xdd\xf0\x1f\xed\xb3Q\x03\x03}Sb\x1b\x89\n?&\x11q^\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe3\x1b\x9f\xcf\x9e\xdf\x82)\xc7P\xa4\xcdi\xde\xb0\x14\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xeb\xc3p@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)>`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafTk\"\xfa\xc37\\8\xa7g\x0f!Y\x8e\\\xac\x01\x11R\x05p\x1a\"\r\xe9\x05\x00&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xeb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x95\xf4b:\x80^\xb7\x17@.\x91\xf1\xd2\v\x8dn6\x1a\xa3\x12\xbf$\x11\'B\xec\xebC%\x86\xa2Q\xc3\x8e(\x00\x00\x00\x00', 0x0) r0 = openat$full(0xffffff9c, &(0x7f00000000c0), 0xa00, 0x0) r1 = syz_ublk_setup_io_uring(0x5d, &(0x7f0000000040)={0x0, 0x30b5, 0x1, 0x2, 0x158}, &(0x7f0000000300)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) socket$inet6(0xa, 0x3, 0x5) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r5, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) recvfrom$inet(r5, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)={0x18, 0x56, 0x601, 0x2, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\v\x00'}]}, 0x18}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000f00)={&(0x7f0000000440)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000ec0)=[{&(0x7f0000000500)}, {&(0x7f0000000540)="bc987d3cda9d45a7ad8da1746f1b48c216f90cb092acd97cb229ee1d645dc545955cb57081b78f01c0c3ab589880a83ff5b758e681ebaa4c460e13e3dcb175236c4ef0b5c7edc86864bb7f550d2f7d8ea4f95a5316a8a4a76b6eceaa67ba6bdfeaa5d88967df", 0x66}, {&(0x7f0000000600)="0162d45bc42b482b13fb9c6bed9237e7b5", 0x11}, {&(0x7f0000000700)}, {&(0x7f0000000e00)="d48370a701292262d9b7e1134102b381653cc1d0c022cc510cb154efb6e352a5665f18ab4b63939f7aaa56aff6b88ed06b25096f3ffc32a59d5d7aacf9e2c052fa95bfa41e102af0751c754f904d257e7924c0a73d78a2a6c290b9edd7673a9afc2815af1a7dc1d824fb5cf28a51575054f632eb6b75b88c6fcda5b9bac97e129df2a542b173a173ede0891ac4c72e789d4d", 0x92}], 0x5}, 0x20000010) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x68, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60b3c35900323a00fe8000000000000000000000000000e5e71725e36b8933ddaab0cf97c3bbff020000000000000000000000000001010090780000000060f84bd700002c00fc010000000000000000000000000000fc020000"], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8923, &(0x7f0000000000)={'team_slave_1\x00', @random="013701329eff"}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) 1m19.667017551s ago: executing program 0 (id=2701): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x2f, 0x6a, 0x9, 0x3, 0x16, @remote, @mcast2, 0x7, 0x40, 0x7, 0x9e}}) r1 = io_uring_setup(0xd71, &(0x7f0000000080)={0x0, 0x4, 0x80, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x0, 0x1}, 0x20) r2 = socket$inet6(0xa, 0x3, 0x3) r3 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\n\x8c0xffffffffffffffff}, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000080)=0x8) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000680)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xb}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4800) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in=@multicast1, @in=@multicast2, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d4, 0x6c}, @in=@broadcast, {0x0, 0x192, 0xffffffffffffff3a, 0x0, 0x8251c, 0x2, 0xfffffffffffffff8, 0xe2e237c}, {0x9, 0x0, 0x20000001f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0xfff}, 0x70bd2a, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x2c, r8, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}]}]}, 0x2c}}, 0x80) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x4) open_by_handle_at(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="1000006c7f48e7965fa26a1400000000600003040000"], 0x521b00) sendmmsg(r2, &(0x7f0000007bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0c0000000e010000890000000c0000001301000001800000"], 0x18}}], 0x1, 0xffe0) 0s ago: executing program 32 (id=2698): socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300020c00000025bd70000000000003000600330000000200100077b5000000000000000000000200010000000000000005fc00000000030005000000000002000000ac1e0001000000000000000002000800080000003400000000000000"], 0x60}, 0x1, 0x7}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) r4 = dup(r3) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RREADDIR(r4, &(0x7f0000000600)={0xb, 0x29, 0x2}, 0xb) kernel console output (not intermixed with test programs): 87382][T13616] netlink_ack+0x136/0xb30 [ 592.387397][T13616] ? __pfx_genl_rcv_msg+0x10/0x10 [ 592.387420][T13616] ? __pfx_ref_tracker_free+0x10/0x10 [ 592.387452][T13616] netlink_rcv_skb+0x2a4/0x4a0 [ 592.387470][T13616] ? __pfx_genl_rcv_msg+0x10/0x10 [ 592.387492][T13616] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 592.387520][T13616] ? down_read+0x2be/0x330 [ 592.387545][T13616] genl_rcv+0x28/0x40 [ 592.387564][T13616] netlink_unicast+0x7bb/0x940 [ 592.387587][T13616] netlink_sendmsg+0x813/0xb40 [ 592.387611][T13616] ? __pfx_netlink_sendmsg+0x10/0x10 [ 592.387632][T13616] ? aa_sock_msg_perm+0xf1/0x1b0 [ 592.387659][T13616] ? __pfx_netlink_sendmsg+0x10/0x10 [ 592.387675][T13616] sock_sendmsg_nosec+0x13a/0x180 [ 592.387698][T13616] ____sys_sendmsg+0x54e/0x850 [ 592.387719][T13616] ? __pfx_____sys_sendmsg+0x10/0x10 [ 592.387746][T13616] ___sys_sendmsg+0x2a5/0x360 [ 592.387762][T13616] ? __lock_acquire+0x683/0x2cf0 [ 592.387785][T13616] ? __pfx____sys_sendmsg+0x10/0x10 [ 592.387801][T13616] ? get_pid_task+0x20/0x1f0 [ 592.387820][T13616] ? get_pid_task+0x20/0x1f0 [ 592.387838][T13616] ? get_pid_task+0x20/0x1f0 [ 592.387879][T13616] ? __fget_files+0x2a/0x420 [ 592.387901][T13616] ? __fget_files+0x3a2/0x420 [ 592.387927][T13616] __sys_sendmsg+0x177/0x240 [ 592.387947][T13616] ? __pfx___sys_sendmsg+0x10/0x10 [ 592.387977][T13616] __do_fast_syscall_32+0x23e/0x6f0 [ 592.387999][T13616] ? do_fast_syscall_32+0x33/0x70 [ 592.388019][T13616] ? lockdep_hardirqs_on+0x7a/0x110 [ 592.388038][T13616] ? asm_int80_emulation+0x1a/0x20 [ 592.388052][T13616] ? do_int80_emulation+0x29f/0x550 [ 592.388072][T13616] ? trace_irq_disable+0x3b/0x140 [ 592.388093][T13616] do_fast_syscall_32+0x33/0x70 [ 592.388114][T13616] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 592.388132][T13616] RIP: 0023:0xf7f980ec [ 592.388146][T13616] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 592.388159][T13616] RSP: 002b:00000000f545650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 592.388174][T13616] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 592.388184][T13616] RDX: 000000000000c0d4 RSI: 0000000000000000 RDI: 0000000000000000 [ 592.388193][T13616] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 592.388202][T13616] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 592.388210][T13616] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 592.388232][T13616] [ 592.460127][ T5693] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 592.750445][ T5693] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 593.017163][T13626] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2216'. [ 593.044734][T13626] netlink: 428 bytes leftover after parsing attributes in process `syz.0.2216'. [ 593.676679][ T5693] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 593.685752][ T5693] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.741473][ T5693] usb 2-1: config 0 descriptor?? [ 593.787194][ T5693] usb 2-1: can't set config #0, error -71 [ 593.795071][ T5693] usb 2-1: USB disconnect, device number 103 [ 593.835623][T13642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2221'. [ 594.227296][T13651] sg_write: data in/out 417792/136 bytes for SCSI command 0x0-- guessing data in; [ 594.227296][T13651] program syz.2.2223 not setting count and/or reply_len properly [ 594.497661][T13657] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 594.534176][T13657] bond1 (unregistering): Released all slaves [ 594.576466][T13658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.614086][T13658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.657567][T13658] trusted_key: encrypted_key: insufficient parameters specified [ 596.023511][T13695] FAULT_INJECTION: forcing a failure. [ 596.023511][T13695] name failslab, interval 1, probability 0, space 0, times 0 [ 596.036289][T13695] CPU: 0 UID: 0 PID: 13695 Comm: syz.1.2237 Tainted: G L syzkaller #0 PREEMPT(full) [ 596.036320][T13695] Tainted: [L]=SOFTLOCKUP [ 596.036328][T13695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 596.036341][T13695] Call Trace: [ 596.036351][T13695] [ 596.036362][T13695] dump_stack_lvl+0xe8/0x150 [ 596.036399][T13695] should_fail_ex+0x40c/0x560 [ 596.036421][T13695] should_failslab+0xa8/0x100 [ 596.036444][T13695] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 596.036463][T13695] ? skb_clone+0x212/0x3a0 [ 596.036479][T13695] ? skb_clone+0x212/0x3a0 [ 596.036499][T13695] skb_clone+0x212/0x3a0 [ 596.036515][T13695] ? nfnetlink_rcv+0x4b0/0x28c0 [ 596.036531][T13695] nfnetlink_rcv+0x4de/0x28c0 [ 596.036548][T13695] ? __dev_queue_xmit+0x29b/0x3820 [ 596.036568][T13695] ? __local_bh_enable_ip+0xd0/0x130 [ 596.036587][T13695] ? lockdep_hardirqs_on+0x7a/0x110 [ 596.036607][T13695] ? __dev_queue_xmit+0x29b/0x3820 [ 596.036624][T13695] ? __local_bh_enable_ip+0xd0/0x130 [ 596.036639][T13695] ? __dev_queue_xmit+0x29b/0x3820 [ 596.036655][T13695] ? __dev_queue_xmit+0x1edc/0x3820 [ 596.036672][T13695] ? __do_fast_syscall_32+0x23e/0x6f0 [ 596.036692][T13695] ? do_fast_syscall_32+0x33/0x70 [ 596.036721][T13695] ? __dev_queue_xmit+0x29b/0x3820 [ 596.036739][T13695] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 596.036765][T13695] ? ref_tracker_free+0x689/0x830 [ 596.036785][T13695] ? __pfx_ref_tracker_free+0x10/0x10 [ 596.036810][T13695] ? __skb_clone+0x449/0x6c0 [ 596.036830][T13695] ? skb_clone+0x246/0x3a0 [ 596.036849][T13695] ? __netlink_deliver_tap+0x811/0x860 [ 596.036866][T13695] ? netlink_deliver_tap+0x2e/0x1b0 [ 596.036887][T13695] ? netlink_deliver_tap+0x2e/0x1b0 [ 596.036903][T13695] ? netlink_deliver_tap+0x2e/0x1b0 [ 596.036923][T13695] netlink_unicast+0x7bb/0x940 [ 596.036946][T13695] netlink_sendmsg+0x813/0xb40 [ 596.036969][T13695] ? __pfx_netlink_sendmsg+0x10/0x10 [ 596.036989][T13695] ? aa_sock_msg_perm+0xf1/0x1b0 [ 596.037017][T13695] ? __pfx_netlink_sendmsg+0x10/0x10 [ 596.037033][T13695] sock_sendmsg_nosec+0x13a/0x180 [ 596.037056][T13695] ____sys_sendmsg+0x54e/0x850 [ 596.037081][T13695] ? __pfx_____sys_sendmsg+0x10/0x10 [ 596.037109][T13695] ___sys_sendmsg+0x2a5/0x360 [ 596.037124][T13695] ? __lock_acquire+0x683/0x2cf0 [ 596.037147][T13695] ? __pfx____sys_sendmsg+0x10/0x10 [ 596.037163][T13695] ? get_pid_task+0x20/0x1f0 [ 596.037183][T13695] ? get_pid_task+0x20/0x1f0 [ 596.037201][T13695] ? get_pid_task+0x20/0x1f0 [ 596.037240][T13695] ? __fget_files+0x2a/0x420 [ 596.037259][T13695] ? __fget_files+0x3a2/0x420 [ 596.037285][T13695] __sys_sendmsg+0x177/0x240 [ 596.037302][T13695] ? __pfx___sys_sendmsg+0x10/0x10 [ 596.037331][T13695] __do_fast_syscall_32+0x23e/0x6f0 [ 596.037353][T13695] ? do_fast_syscall_32+0x33/0x70 [ 596.037373][T13695] ? lockdep_hardirqs_on+0x7a/0x110 [ 596.037391][T13695] ? asm_int80_emulation+0x1a/0x20 [ 596.037405][T13695] ? do_int80_emulation+0x29f/0x550 [ 596.037425][T13695] ? trace_irq_disable+0x3b/0x140 [ 596.037446][T13695] do_fast_syscall_32+0x33/0x70 [ 596.037467][T13695] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 596.037486][T13695] RIP: 0023:0xf707f0ec [ 596.037500][T13695] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 596.037513][T13695] RSP: 002b:00000000f546d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 596.037528][T13695] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 596.037539][T13695] RDX: 0000000000008084 RSI: 0000000000000000 RDI: 0000000000000000 [ 596.037548][T13695] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 596.037557][T13695] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 596.037566][T13695] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 596.037588][T13695] [ 596.765275][T13706] bond5: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 596.779923][T13706] bond5 (unregistering): Released all slaves [ 596.841639][ T5692] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 596.855897][T13709] __nla_validate_parse: 5 callbacks suppressed [ 596.855911][T13709] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2240'. [ 597.212731][T13716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.223386][T13716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.268869][ T5692] usb 2-1: device descriptor read/64, error -71 [ 597.574364][T13721] FAULT_INJECTION: forcing a failure. [ 597.574364][T13721] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 597.596790][ T5692] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 597.605714][T13721] CPU: 1 UID: 0 PID: 13721 Comm: syz.3.2244 Tainted: G L syzkaller #0 PREEMPT(full) [ 597.605745][T13721] Tainted: [L]=SOFTLOCKUP [ 597.605754][T13721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 597.605766][T13721] Call Trace: [ 597.605775][T13721] [ 597.605784][T13721] dump_stack_lvl+0xe8/0x150 [ 597.605819][T13721] should_fail_ex+0x40c/0x560 [ 597.605849][T13721] _copy_to_user+0x31/0xb0 [ 597.605877][T13721] simple_read_from_buffer+0xe1/0x170 [ 597.605904][T13721] proc_fail_nth_read+0x1bb/0x230 [ 597.605931][T13721] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 597.605957][T13721] ? rw_verify_area+0x24a/0x4c0 [ 597.605982][T13721] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 597.606020][T13721] vfs_read+0x213/0xa80 [ 597.606051][T13721] ? __pfx_vfs_read+0x10/0x10 [ 597.606079][T13721] ? mntput+0x65/0xc0 [ 597.606096][T13721] ? do_handle_open+0x2aa/0xae0 [ 597.606123][T13721] ksys_read+0x150/0x270 [ 597.606149][T13721] ? __pfx_ksys_read+0x10/0x10 [ 597.606177][T13721] ? asm_int80_emulation+0x1a/0x20 [ 597.606198][T13721] do_int80_emulation+0x19a/0x550 [ 597.606222][T13721] ? trace_irq_disable+0x3b/0x140 [ 597.606242][T13721] ? asm_int80_emulation+0x1a/0x20 [ 597.606258][T13721] ? clear_bhb_loop+0x70/0xc0 [ 597.606275][T13721] ? clear_bhb_loop+0x70/0xc0 [ 597.606295][T13721] asm_int80_emulation+0x1a/0x20 [ 597.606312][T13721] RIP: 0023:0xf71474eb [ 597.606327][T13721] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 597.606342][T13721] RSP: 002b:00000000f53fd4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 597.606360][T13721] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53fd5d0 [ 597.606373][T13721] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 597.606383][T13721] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 597.606392][T13721] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 597.606403][T13721] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 597.606426][T13721] [ 597.660360][ T5738] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 598.078122][ T5738] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 598.098052][ T5738] usb 5-1: config 0 has no interface number 0 [ 598.109956][ T5738] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 598.123099][ T5738] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 598.132491][ T5738] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.142048][ T5738] usb 5-1: Product: syz [ 598.146728][ T5738] usb 5-1: Manufacturer: syz [ 598.151368][ T5738] usb 5-1: SerialNumber: syz [ 598.158636][ T5738] usb 5-1: config 0 descriptor?? [ 598.172331][ T5738] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 598.203184][ T5692] usb 2-1: device descriptor read/64, error -71 [ 598.316398][ T5692] usb usb2-port1: attempt power cycle [ 598.379639][ T5738] usb 5-1: USB disconnect, device number 98 [ 598.393048][ T5738] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 598.657920][T13730] FAULT_INJECTION: forcing a failure. [ 598.657920][T13730] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 598.671186][T13730] CPU: 0 UID: 0 PID: 13730 Comm: syz.3.2247 Tainted: G L syzkaller #0 PREEMPT(full) [ 598.671220][T13730] Tainted: [L]=SOFTLOCKUP [ 598.671228][T13730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 598.671241][T13730] Call Trace: [ 598.671250][T13730] [ 598.671259][T13730] dump_stack_lvl+0xe8/0x150 [ 598.671294][T13730] should_fail_ex+0x40c/0x560 [ 598.671324][T13730] _copy_from_user+0x2d/0xb0 [ 598.671356][T13730] get_compat_msghdr+0xb3/0x4c0 [ 598.671386][T13730] ? __pfx_get_compat_msghdr+0x10/0x10 [ 598.671415][T13730] ? kfree+0x4d/0x640 [ 598.671444][T13730] ___sys_recvmsg+0x1db/0x5a0 [ 598.671475][T13730] ? __pfx____sys_recvmsg+0x10/0x10 [ 598.671504][T13730] ? __fget_files+0x2a/0x420 [ 598.671562][T13730] do_recvmmsg+0x38b/0x7f0 [ 598.671596][T13730] ? __pfx_do_recvmmsg+0x10/0x10 [ 598.671633][T13730] ? __mutex_unlock_slowpath+0x731/0x900 [ 598.671676][T13730] __sys_recvmmsg+0x1a5/0x290 [ 598.671702][T13730] ? __pfx___sys_recvmmsg+0x10/0x10 [ 598.671725][T13730] ? ksys_write+0x242/0x270 [ 598.671762][T13730] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 598.671792][T13730] __do_fast_syscall_32+0x23e/0x6f0 [ 598.671821][T13730] ? do_fast_syscall_32+0x33/0x70 [ 598.671847][T13730] ? lockdep_hardirqs_on+0x7a/0x110 [ 598.671873][T13730] ? asm_int80_emulation+0x1a/0x20 [ 598.671899][T13730] ? do_int80_emulation+0x29f/0x550 [ 598.671925][T13730] ? trace_irq_disable+0x3b/0x140 [ 598.671953][T13730] do_fast_syscall_32+0x33/0x70 [ 598.671982][T13730] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 598.672006][T13730] RIP: 0023:0xf700f0ec [ 598.672025][T13730] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 598.672042][T13730] RSP: 002b:00000000f53dc50c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 598.672064][T13730] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080004c00 [ 598.672079][T13730] RDX: 00000000080000b7 RSI: 0000000040000023 RDI: 0000000000000000 [ 598.672091][T13730] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 598.672104][T13730] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 598.672116][T13730] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 598.672145][T13730] [ 598.798713][ T5692] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 599.164448][T13733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.173224][T13733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.332443][ T5692] usb 2-1: device descriptor read/8, error -71 [ 599.655925][ T5692] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 599.959631][T13751] futex_wake_op: syz.2.2253 tries to shift op by 144; fix this program [ 599.976501][ T5692] usb 2-1: device not accepting address 107, error -71 [ 599.983726][ T5692] usb usb2-port1: unable to enumerate USB device [ 599.990708][T13751] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2253'. [ 600.280176][T13753] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2254'. [ 600.637855][ T5692] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 600.943850][T13784] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc [ 601.017765][T13786] netlink: Conntrack attr has 8 unknown bytes [ 601.023920][T13786] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 601.308056][ T5692] usb 2-1: Using ep0 maxpacket: 32 [ 601.375684][T13795] netlink: 'syz.3.2269': attribute type 12 has an invalid length. [ 601.383688][T13795] netlink: 'syz.3.2269': attribute type 29 has an invalid length. [ 601.391540][T13795] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2269'. [ 601.578638][T13801] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2272'. [ 601.593387][T13801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2272'. [ 601.942535][T13811] usb usb8: usbfs: process 13811 (syz.3.2272) did not claim interface 0 before use [ 601.974454][ T5692] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 601.985391][ T5692] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 602.868114][ T5692] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 602.877244][ T5692] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 602.885630][ T5692] usb 2-1: Product: syz [ 602.984865][ T5692] usb 2-1: can't set config #4, error -71 [ 602.992474][ T5692] usb 2-1: USB disconnect, device number 108 [ 603.540653][ T1133] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 603.649109][ T5692] usb 2-1: new full-speed USB device number 109 using dummy_hcd [ 604.204714][ T1133] usb 5-1: Using ep0 maxpacket: 16 [ 604.560702][T13845] netlink: 'syz.2.2285': attribute type 1 has an invalid length. [ 604.599927][T13845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.634003][T13845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.850938][T13849] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2286'. [ 604.875071][ T1133] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 604.885210][ T1133] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 605.357807][T13858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2290'. [ 605.739050][ T1133] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 605.748137][ T1133] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.756139][ T1133] usb 5-1: Product: syz [ 605.760312][ T1133] usb 5-1: Manufacturer: syz [ 605.764927][ T1133] usb 5-1: SerialNumber: syz [ 605.847812][ T5692] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 605.856896][ T5692] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.864936][ T5692] usb 2-1: Product: syz [ 605.869176][ T5692] usb 2-1: Manufacturer: syz [ 605.873780][ T5692] usb 2-1: SerialNumber: syz [ 605.888284][ T5692] usb 2-1: config 0 descriptor?? [ 605.960695][ T5692] usb 2-1: can't set config #0, error -71 [ 605.970534][ T5692] usb 2-1: USB disconnect, device number 109 [ 605.978257][ T1133] usb 5-1: 0:2 : does not exist [ 607.044295][ T5692] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 607.259783][ T1133] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 607.478674][ T5692] usb 2-1: device descriptor read/64, error -71 [ 607.594838][T13875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2297'. [ 607.809248][ T5692] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 608.248188][ T5692] usb 2-1: device descriptor read/64, error -71 [ 608.362623][ T5692] usb usb2-port1: attempt power cycle [ 608.409873][ T1133] usb 5-1: USB disconnect, device number 99 [ 608.452945][ T5757] udevd[5757]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 608.537368][ T5738] usb 4-1: new full-speed USB device number 117 using dummy_hcd [ 608.754277][ T5738] usb 4-1: device descriptor read/64, error -71 [ 608.807130][ T5692] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 608.921689][T13895] FAULT_INJECTION: forcing a failure. [ 608.921689][T13895] name failslab, interval 1, probability 0, space 0, times 0 [ 608.934339][T13895] CPU: 1 UID: 0 PID: 13895 Comm: syz.2.2304 Tainted: G L syzkaller #0 PREEMPT(full) [ 608.934371][T13895] Tainted: [L]=SOFTLOCKUP [ 608.934379][T13895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 608.934391][T13895] Call Trace: [ 608.934399][T13895] [ 608.934407][T13895] dump_stack_lvl+0xe8/0x150 [ 608.934439][T13895] should_fail_ex+0x40c/0x560 [ 608.934467][T13895] should_failslab+0xa8/0x100 [ 608.934499][T13895] __kmalloc_cache_noprof+0xa8/0x660 [ 608.934524][T13895] ? __do_fast_syscall_32+0x23e/0x6f0 [ 608.934552][T13895] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 608.934578][T13895] ? fuse_direct_io+0x2ed/0x2970 [ 608.934604][T13895] ? fuse_direct_io+0x2ed/0x2970 [ 608.934637][T13895] fuse_direct_io+0x2ed/0x2970 [ 608.934700][T13895] ? __pfx_fuse_direct_io+0x10/0x10 [ 608.934727][T13895] ? __kmalloc_cache_noprof+0x32d/0x660 [ 608.934754][T13895] ? __pfx_sb_init_dio_done_wq+0x10/0x10 [ 608.934768][T13895] ? __kmalloc_cache_noprof+0x150/0x660 [ 608.934789][T13895] ? __raw_spin_lock_init+0x45/0x100 [ 608.934806][T13895] fuse_direct_IO+0x963/0x12d0 [ 608.934845][T13895] ? __pfx_fuse_direct_IO+0x10/0x10 [ 608.934867][T13895] ? fuse_file_write_iter+0x793/0x11a0 [ 608.934936][T13895] ? generic_write_checks+0xc8/0x110 [ 608.934956][T13895] fuse_file_write_iter+0x816/0x11a0 [ 608.934978][T13895] ? __lock_acquire+0x683/0x2cf0 [ 608.935000][T13895] ? __pfx_stack_trace_save+0x10/0x10 [ 608.935023][T13895] ? __pfx_fuse_file_write_iter+0x10/0x10 [ 608.935055][T13895] ? io_submit_one+0x798/0x13d0 [ 608.935078][T13895] ? aio_write+0x547/0x870 [ 608.935095][T13895] aio_write+0x5cd/0x870 [ 608.935113][T13895] ? __pfx_aio_write+0x10/0x10 [ 608.935136][T13895] ? __might_fault+0xaf/0x130 [ 608.935166][T13895] io_submit_one+0x798/0x13d0 [ 608.935184][T13895] ? lockdep_hardirqs_on+0x7a/0x110 [ 608.935204][T13895] ? irqentry_exit+0x218/0x8f0 [ 608.935226][T13895] ? __pfx_io_submit_one+0x10/0x10 [ 608.935241][T13895] ? __might_fault+0xaf/0x130 [ 608.935266][T13895] ? __might_fault+0xaf/0x130 [ 608.935284][T13895] __ia32_compat_sys_io_submit+0x1e1/0x390 [ 608.935309][T13895] ? __pfx___ia32_compat_sys_io_submit+0x10/0x10 [ 608.935343][T13895] __do_fast_syscall_32+0x23e/0x6f0 [ 608.935364][T13895] ? do_fast_syscall_32+0x33/0x70 [ 608.935384][T13895] ? lockdep_hardirqs_on+0x7a/0x110 [ 608.935402][T13895] ? asm_int80_emulation+0x1a/0x20 [ 608.935416][T13895] ? do_int80_emulation+0x29f/0x550 [ 608.935436][T13895] ? trace_irq_disable+0x3b/0x140 [ 608.935457][T13895] do_fast_syscall_32+0x33/0x70 [ 608.935478][T13895] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 608.935496][T13895] RIP: 0023:0xf7f980ec [ 608.935511][T13895] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 608.935525][T13895] RSP: 002b:00000000f543550c EFLAGS: 00000206 ORIG_RAX: 00000000000000f8 [ 608.935541][T13895] RAX: ffffffffffffffda RBX: 00000000f540c000 RCX: 0000000000000001 [ 608.935552][T13895] RDX: 00000000800003c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 608.935562][T13895] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 608.935571][T13895] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 608.935580][T13895] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 608.935602][T13895] [ 609.315040][ T5738] usb 4-1: new full-speed USB device number 118 using dummy_hcd [ 609.361613][ T1133] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 609.470104][T13900] FAULT_INJECTION: forcing a failure. [ 609.470104][T13900] name failslab, interval 1, probability 0, space 0, times 0 [ 609.472502][ T5692] usb 2-1: device descriptor read/8, error -71 [ 609.524545][ T5738] usb 4-1: device descriptor read/64, error -71 [ 609.534157][T13900] CPU: 0 UID: 0 PID: 13900 Comm: syz.1.2306 Tainted: G L syzkaller #0 PREEMPT(full) [ 609.534190][T13900] Tainted: [L]=SOFTLOCKUP [ 609.534199][T13900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 609.534212][T13900] Call Trace: [ 609.534221][T13900] [ 609.534230][T13900] dump_stack_lvl+0xe8/0x150 [ 609.534265][T13900] should_fail_ex+0x40c/0x560 [ 609.534294][T13900] should_failslab+0xa8/0x100 [ 609.534328][T13900] __kmalloc_cache_noprof+0xa8/0x660 [ 609.534357][T13900] ? tcf_block_get_ext+0x14f/0x17d0 [ 609.534378][T13900] ? tcf_block_get_ext+0x14f/0x17d0 [ 609.534406][T13900] tcf_block_get_ext+0x14f/0x17d0 [ 609.534436][T13900] ? __pfx_prio_init+0x10/0x10 [ 609.534474][T13900] tcf_block_get+0x67/0xa0 [ 609.534495][T13900] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 609.534523][T13900] prio_init+0x36/0x80 [ 609.534555][T13900] qdisc_create+0x7b5/0xf00 [ 609.534595][T13900] tc_modify_qdisc+0x17af/0x2390 [ 609.534638][T13900] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 609.534669][T13900] ? __dev_queue_xmit+0x29b/0x3820 [ 609.534729][T13900] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 609.534764][T13900] rtnetlink_rcv_msg+0x7b9/0xc00 [ 609.534803][T13900] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 609.534863][T13900] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 609.534894][T13900] ? ref_tracker_free+0x689/0x830 [ 609.534924][T13900] ? __pfx_ref_tracker_free+0x10/0x10 [ 609.534964][T13900] netlink_rcv_skb+0x226/0x4a0 [ 609.534992][T13900] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 609.535027][T13900] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 609.535066][T13900] ? netlink_deliver_tap+0x2e/0x1b0 [ 609.535089][T13900] ? netlink_deliver_tap+0x2e/0x1b0 [ 609.535118][T13900] netlink_unicast+0x7bb/0x940 [ 609.535151][T13900] netlink_sendmsg+0x813/0xb40 [ 609.535185][T13900] ? __pfx_netlink_sendmsg+0x10/0x10 [ 609.535213][T13900] ? aa_sock_msg_perm+0xf1/0x1b0 [ 609.535252][T13900] ? __pfx_netlink_sendmsg+0x10/0x10 [ 609.535276][T13900] sock_sendmsg_nosec+0x13a/0x180 [ 609.535307][T13900] ____sys_sendmsg+0x54e/0x850 [ 609.535335][T13900] ? __pfx_____sys_sendmsg+0x10/0x10 [ 609.535376][T13900] ___sys_sendmsg+0x2a5/0x360 [ 609.535397][T13900] ? __lock_acquire+0x683/0x2cf0 [ 609.535430][T13900] ? __pfx____sys_sendmsg+0x10/0x10 [ 609.535452][T13900] ? get_pid_task+0x20/0x1f0 [ 609.535488][T13900] ? get_pid_task+0x20/0x1f0 [ 609.535512][T13900] ? get_pid_task+0x20/0x1f0 [ 609.535571][T13900] ? __fget_files+0x2a/0x420 [ 609.535598][T13900] ? __fget_files+0x3a2/0x420 [ 609.535636][T13900] __sys_sendmsg+0x177/0x240 [ 609.535662][T13900] ? __pfx___sys_sendmsg+0x10/0x10 [ 609.535705][T13900] __do_fast_syscall_32+0x23e/0x6f0 [ 609.535736][T13900] ? do_fast_syscall_32+0x33/0x70 [ 609.535764][T13900] ? lockdep_hardirqs_on+0x7a/0x110 [ 609.535791][T13900] ? asm_int80_emulation+0x1a/0x20 [ 609.535812][T13900] ? do_int80_emulation+0x29f/0x550 [ 609.535841][T13900] ? trace_irq_disable+0x3b/0x140 [ 609.535868][T13900] do_fast_syscall_32+0x33/0x70 [ 609.535898][T13900] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 609.535922][T13900] RIP: 0023:0xf707f0ec [ 609.535941][T13900] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 609.535958][T13900] RSP: 002b:00000000f546d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 609.535980][T13900] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800012c0 [ 609.535994][T13900] RDX: 0000000000040000 RSI: 0000000000000000 RDI: 0000000000000000 [ 609.536007][T13900] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 609.536018][T13900] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 609.536031][T13900] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 609.536062][T13900] [ 609.927050][ T5738] usb usb4-port1: attempt power cycle [ 610.107512][T13917] netlink: 57 bytes leftover after parsing attributes in process `syz.0.2312'. [ 610.264629][ T5738] usb 4-1: new full-speed USB device number 119 using dummy_hcd [ 610.314738][ T5738] usb 4-1: device descriptor read/8, error -71 [ 610.602145][ T5738] usb 4-1: new full-speed USB device number 120 using dummy_hcd [ 610.654903][ T5738] usb 4-1: device descriptor read/8, error -71 [ 610.770902][ T5738] usb usb4-port1: unable to enumerate USB device [ 610.781984][T13940] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 610.858772][ T5706] hid_parser_main: 88 callbacks suppressed [ 610.858795][ T5706] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 610.899564][ T5706] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 611.295236][ T29] kauditd_printk_skb: 147 callbacks suppressed [ 611.295254][ T29] audit: type=1804 audit(1786242683.280:1648): pid=13942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2320" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=57784 res=1 errno=0 [ 611.964657][ T5679] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 612.215614][ T5679] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 612.227750][ T5679] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.241221][ T5679] usb 2-1: config 0 descriptor?? [ 612.257203][ T5679] cp210x 2-1:0.0: cp210x converter detected [ 612.459369][ T5679] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 612.467472][ T5679] cp210x 2-1:0.0: querying part number failed [ 612.489616][ T5679] usb 2-1: cp210x converter now attached to ttyUSB0 [ 612.501024][ T5679] usb 2-1: USB disconnect, device number 114 [ 612.511659][ T5679] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 612.521210][ T5679] cp210x 2-1:0.0: device disconnected [ 612.625624][T13961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 612.634370][T13961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.646307][T13961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 612.656736][T13961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.723230][T13966] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2327'. [ 612.732288][T13966] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2327'. [ 612.741312][T13966] netlink: 39 bytes leftover after parsing attributes in process `syz.2.2327'. [ 613.091878][T13976] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2329'. [ 613.958173][T13983] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2333'. [ 614.041853][T13988] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2335'. [ 614.053453][T13988] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2335'. [ 614.082254][T13990] netlink: Conntrack attr has 8 unknown bytes [ 614.088436][T13990] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 614.097417][T13990] FAULT_INJECTION: forcing a failure. [ 614.097417][T13990] name failslab, interval 1, probability 0, space 0, times 0 [ 614.137710][T13990] CPU: 1 UID: 0 PID: 13990 Comm: syz.0.2336 Tainted: G L syzkaller #0 PREEMPT(full) [ 614.137744][T13990] Tainted: [L]=SOFTLOCKUP [ 614.137752][T13990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 614.137764][T13990] Call Trace: [ 614.137772][T13990] [ 614.137781][T13990] dump_stack_lvl+0xe8/0x150 [ 614.137812][T13990] should_fail_ex+0x40c/0x560 [ 614.137837][T13990] should_failslab+0xa8/0x100 [ 614.137866][T13990] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 614.137889][T13990] ? local_lock_release+0x9c/0x160 [ 614.137928][T13990] ? __alloc_skb+0x1d7/0x7a0 [ 614.137957][T13990] ? __alloc_skb+0x1d7/0x7a0 [ 614.137994][T13990] __alloc_skb+0x1d7/0x7a0 [ 614.138028][T13990] netlink_ack+0x136/0xb30 [ 614.138045][T13990] ? __pfx_genl_rcv_msg+0x10/0x10 [ 614.138083][T13990] netlink_rcv_skb+0x2a4/0x4a0 [ 614.138106][T13990] ? __pfx_genl_rcv_msg+0x10/0x10 [ 614.138134][T13990] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 614.138172][T13990] ? down_read+0x2be/0x330 [ 614.138202][T13990] genl_rcv+0x28/0x40 [ 614.138223][T13990] netlink_unicast+0x7bb/0x940 [ 614.138251][T13990] netlink_sendmsg+0x813/0xb40 [ 614.138280][T13990] ? __pfx_netlink_sendmsg+0x10/0x10 [ 614.138305][T13990] ? aa_sock_msg_perm+0xf1/0x1b0 [ 614.138339][T13990] ? __pfx_netlink_sendmsg+0x10/0x10 [ 614.138360][T13990] sock_sendmsg_nosec+0x13a/0x180 [ 614.138390][T13990] ____sys_sendmsg+0x54e/0x850 [ 614.138417][T13990] ? __pfx_____sys_sendmsg+0x10/0x10 [ 614.138453][T13990] ___sys_sendmsg+0x2a5/0x360 [ 614.138473][T13990] ? __lock_acquire+0x683/0x2cf0 [ 614.138504][T13990] ? __pfx____sys_sendmsg+0x10/0x10 [ 614.138527][T13990] ? get_pid_task+0x20/0x1f0 [ 614.138548][T13990] ? get_pid_task+0x20/0x1f0 [ 614.138579][T13990] ? get_pid_task+0x20/0x1f0 [ 614.138626][T13990] ? __fget_files+0x2a/0x420 [ 614.138649][T13990] ? __fget_files+0x3a2/0x420 [ 614.138678][T13990] __sys_sendmsg+0x177/0x240 [ 614.138700][T13990] ? __pfx___sys_sendmsg+0x10/0x10 [ 614.138739][T13990] __do_fast_syscall_32+0x23e/0x6f0 [ 614.138767][T13990] ? do_fast_syscall_32+0x33/0x70 [ 614.138794][T13990] ? lockdep_hardirqs_on+0x7a/0x110 [ 614.138817][T13990] ? asm_int80_emulation+0x1a/0x20 [ 614.138835][T13990] ? do_int80_emulation+0x29f/0x550 [ 614.138859][T13990] ? trace_irq_disable+0x3b/0x140 [ 614.138885][T13990] do_fast_syscall_32+0x33/0x70 [ 614.138911][T13990] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 614.138935][T13990] RIP: 0023:0xf701f0ec [ 614.138955][T13990] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 614.138971][T13990] RSP: 002b:00000000f540d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 614.138993][T13990] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000100 [ 614.139005][T13990] RDX: 000000000000e800 RSI: 0000000000000000 RDI: 0000000000000000 [ 614.139015][T13990] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 614.139025][T13990] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 614.139036][T13990] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 614.139061][T13990] [ 614.143483][T13988] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 614.528211][T13988] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 614.632811][T13999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.641687][T13999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.656254][T13999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2338'. [ 614.667440][T13999] fuse: Bad value for 'fd' [ 614.826858][T14003] FAULT_INJECTION: forcing a failure. [ 614.826858][T14003] name failslab, interval 1, probability 0, space 0, times 0 [ 614.839787][T14003] CPU: 0 UID: 0 PID: 14003 Comm: syz.0.2339 Tainted: G L syzkaller #0 PREEMPT(full) [ 614.839821][T14003] Tainted: [L]=SOFTLOCKUP [ 614.839829][T14003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 614.839842][T14003] Call Trace: [ 614.839850][T14003] [ 614.839860][T14003] dump_stack_lvl+0xe8/0x150 [ 614.839896][T14003] should_fail_ex+0x40c/0x560 [ 614.839926][T14003] should_failslab+0xa8/0x100 [ 614.839960][T14003] __kmalloc_noprof+0xfe/0x720 [ 614.839988][T14003] ? tomoyo_encode+0x2ad/0x570 [ 614.840010][T14003] ? tomoyo_encode+0x2ad/0x570 [ 614.840039][T14003] tomoyo_encode+0x2ad/0x570 [ 614.840068][T14003] tomoyo_realpath_from_path+0x5fa/0x640 [ 614.840109][T14003] ? tomoyo_path_number_perm+0x219/0x5f0 [ 614.840142][T14003] tomoyo_path_number_perm+0x246/0x5f0 [ 614.840176][T14003] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 614.840207][T14003] ? __lock_acquire+0x683/0x2cf0 [ 614.840238][T14003] ? fpu__restore_sig+0xc25/0x1200 [ 614.840265][T14003] ? __local_bh_enable_ip+0xd0/0x130 [ 614.840298][T14003] ? hook_file_ioctl_compat+0x1f0/0x5f0 [ 614.840352][T14003] ? __fget_files+0x2a/0x420 [ 614.840384][T14003] ? __fget_files+0x3a2/0x420 [ 614.840410][T14003] ? __fget_files+0x2a/0x420 [ 614.840441][T14003] security_file_ioctl_compat+0xc3/0x2a0 [ 614.840474][T14003] __ia32_compat_sys_ioctl+0x139/0x950 [ 614.840501][T14003] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 614.840532][T14003] ? _raw_spin_unlock_irq+0x23/0x50 [ 614.840562][T14003] ? __ia32_compat_sys_rt_sigreturn+0x237/0x270 [ 614.840594][T14003] ? __task_pid_nr_ns+0x28/0x470 [ 614.840625][T14003] ? __pfx___ia32_compat_sys_rt_sigreturn+0x10/0x10 [ 614.840663][T14003] ? asm_int80_emulation+0x1a/0x20 [ 614.840691][T14003] do_int80_emulation+0x19a/0x550 [ 614.840720][T14003] ? trace_irq_disable+0x3b/0x140 [ 614.840748][T14003] ? asm_int80_emulation+0x1a/0x20 [ 614.840769][T14003] ? clear_bhb_loop+0x70/0xc0 [ 614.840790][T14003] ? clear_bhb_loop+0x70/0xc0 [ 614.840817][T14003] asm_int80_emulation+0x1a/0x20 [ 614.840838][T14003] RIP: 0023:0xf701f0ec [ 614.840858][T14003] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 614.840876][T14003] RSP: 002b:00000000f53ec50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 614.840899][T14003] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040026f33 [ 614.840914][T14003] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 614.840927][T14003] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 614.840939][T14003] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 614.840952][T14003] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 614.840984][T14003] [ 614.841102][T14003] ERROR: Out of memory at tomoyo_realpath_from_path. [ 615.783159][T14017] netlink: zone id is out of range [ 615.800361][T14017] netlink: zone id is out of range [ 615.805538][T14017] netlink: zone id is out of range [ 615.810678][T14017] netlink: zone id is out of range [ 615.815809][T14017] netlink: zone id is out of range [ 615.820939][T14017] netlink: zone id is out of range [ 615.826074][T14017] netlink: zone id is out of range [ 615.831201][T14017] netlink: zone id is out of range [ 615.836333][T14017] netlink: zone id is out of range [ 615.841465][T14017] netlink: zone id is out of range [ 615.887276][T14017] netlink: zone id is out of range [ 615.892979][T14017] netlink: zone id is out of range [ 615.905516][T14021] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2346'. [ 616.334654][T14037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 616.343407][T14037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.351401][ T9] usb 5-1: new full-speed USB device number 101 using dummy_hcd [ 616.616400][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 616.626692][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 616.635606][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 616.645934][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 616.655938][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 616.670635][ T9] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 616.680645][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.688751][ T9] usb 5-1: Product: syz [ 616.692950][ T9] usb 5-1: Manufacturer: syz [ 616.697628][ T9] usb 5-1: SerialNumber: syz [ 616.911042][T14024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 616.921228][T14024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.940225][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 617.202417][ T9] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -12 [ 617.232966][ T9] usb 5-1: USB disconnect, device number 101 [ 617.273163][ T9599] udevd[9599]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 617.675581][T14056] FAULT_INJECTION: forcing a failure. [ 617.675581][T14056] name failslab, interval 1, probability 0, space 0, times 0 [ 617.696366][T14056] CPU: 0 UID: 0 PID: 14056 Comm: syz.3.2360 Tainted: G L syzkaller #0 PREEMPT(full) [ 617.696398][T14056] Tainted: [L]=SOFTLOCKUP [ 617.696407][T14056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 617.696420][T14056] Call Trace: [ 617.696429][T14056] [ 617.696438][T14056] dump_stack_lvl+0xe8/0x150 [ 617.696473][T14056] should_fail_ex+0x40c/0x560 [ 617.696501][T14056] should_failslab+0xa8/0x100 [ 617.696538][T14056] __kmalloc_noprof+0xfe/0x720 [ 617.696564][T14056] ? rcu_is_watching+0x15/0xb0 [ 617.696595][T14056] ? tomoyo_realpath_from_path+0xef/0x640 [ 617.696617][T14056] ? tomoyo_realpath_from_path+0xef/0x640 [ 617.696647][T14056] tomoyo_realpath_from_path+0xef/0x640 [ 617.696680][T14056] ? tomoyo_path_number_perm+0x219/0x5f0 [ 617.696710][T14056] tomoyo_path_number_perm+0x246/0x5f0 [ 617.696743][T14056] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 617.696773][T14056] ? __lock_acquire+0x683/0x2cf0 [ 617.696814][T14056] ? hook_file_ioctl_compat+0x1f0/0x5f0 [ 617.696867][T14056] ? __fget_files+0x2a/0x420 [ 617.696899][T14056] ? __fget_files+0x3a2/0x420 [ 617.696924][T14056] ? __fget_files+0x2a/0x420 [ 617.696954][T14056] security_file_ioctl_compat+0xc3/0x2a0 [ 617.696987][T14056] __ia32_compat_sys_ioctl+0x139/0x950 [ 617.697012][T14056] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 617.697034][T14056] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 617.697064][T14056] ? __fget_files+0x3a2/0x420 [ 617.697097][T14056] ? fput+0xa0/0xd0 [ 617.697122][T14056] ? ksys_write+0x242/0x270 [ 617.697165][T14056] __do_fast_syscall_32+0x23e/0x6f0 [ 617.697195][T14056] ? do_fast_syscall_32+0x33/0x70 [ 617.697232][T14056] ? lockdep_hardirqs_on+0x7a/0x110 [ 617.697258][T14056] ? asm_int80_emulation+0x1a/0x20 [ 617.697278][T14056] ? do_int80_emulation+0x29f/0x550 [ 617.697305][T14056] ? trace_irq_disable+0x3b/0x140 [ 617.697333][T14056] do_fast_syscall_32+0x33/0x70 [ 617.697362][T14056] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 617.697388][T14056] RIP: 0023:0xf700f0ec [ 617.697407][T14056] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 617.697424][T14056] RSP: 002b:00000000f53fd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 617.697447][T14056] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c0185500 [ 617.697461][T14056] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 617.697473][T14056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 617.697485][T14056] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 617.697497][T14056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 617.697526][T14056] [ 617.777516][ T5692] usb 2-1: new full-speed USB device number 115 using dummy_hcd [ 617.783503][T14056] ERROR: Out of memory at tomoyo_realpath_from_path. [ 618.268526][T14066] netlink: 'syz.2.2365': attribute type 13 has an invalid length. [ 618.276462][T14066] netlink: 'syz.2.2365': attribute type 17 has an invalid length. [ 618.394448][ T5738] usb 5-1: new low-speed USB device number 102 using dummy_hcd [ 618.570993][T14071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2364'. [ 618.598415][T14066] 8021q: adding VLAN 0 to HW filter on device bond2 [ 618.625664][T14066] bond2: entered promiscuous mode [ 618.633568][T14066] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 618.664203][ T5738] usb 5-1: Invalid ep0 maxpacket: 16 [ 618.686637][T14066] 8021q: adding VLAN 0 to HW filter on device bond5 [ 618.701899][ T48] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 618.710806][T10162] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.717911][T10162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 618.730122][ T48] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 618.738445][ T48] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 618.835028][ T5738] usb 5-1: new low-speed USB device number 103 using dummy_hcd [ 619.108838][ T5738] usb 5-1: Invalid ep0 maxpacket: 16 [ 619.119624][ T5738] usb usb5-port1: attempt power cycle [ 619.125985][T14077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2366'. [ 619.486633][ T5738] usb 5-1: new low-speed USB device number 104 using dummy_hcd [ 619.547257][ T5738] usb 5-1: Invalid ep0 maxpacket: 16 [ 619.675551][T14082] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.685614][T14082] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.709148][ T5738] usb 5-1: new low-speed USB device number 105 using dummy_hcd [ 619.763065][ T5738] usb 5-1: Invalid ep0 maxpacket: 16 [ 619.774173][ T5738] usb usb5-port1: unable to enumerate USB device [ 619.983610][ T5692] usb 2-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 619.992733][ T5692] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.000773][ T5692] usb 2-1: Product: syz [ 620.004975][ T5692] usb 2-1: Manufacturer: syz [ 620.009600][ T5692] usb 2-1: SerialNumber: syz [ 620.029467][ T5692] usb 2-1: config 0 descriptor?? [ 620.203982][ T5692] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 620.265493][T14082] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 620.364264][T14096] usb 4-1: new full-speed USB device number 121 using dummy_hcd [ 620.621917][T14101] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2371'. [ 620.650485][T14096] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x6 has an invalid bInterval 0, changing to 4 [ 620.671930][T14096] usb 4-1: config 0 interface 0 has no altsetting 0 [ 620.690098][T14096] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 620.733712][T14096] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 620.767740][T14096] usb 4-1: Product: syz [ 620.772875][T14096] usb 4-1: Manufacturer: syz [ 620.778261][T14096] usb 4-1: SerialNumber: syz [ 620.811249][T14096] usb 4-1: config 0 descriptor?? [ 620.883191][T14096] usb 4-1: selecting invalid altsetting 0 [ 621.085573][T14089] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 621.093473][T14089] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 621.101359][T14089] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 621.109211][T14089] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 621.117061][T14089] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 621.126718][T14111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.148012][T14089] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 621.179602][T14111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.202932][T14089] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 621.245773][T14096] usb 4-1: USB disconnect, device number 121 [ 621.258896][T14089] usb 4-1: cannot submit urb 0, error -19: no device [ 621.302485][ T5692] gspca_m5602: Failed to find a sensor [ 621.307990][ T5692] ALi m5602 2-1:0.0: ALi m5602 webcam failed [ 621.320978][ T5692] usb 2-1: USB disconnect, device number 115 [ 621.540862][ T9599] udevd[9599]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 621.599553][T14082] bond2: left promiscuous mode [ 621.656954][T14099] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 621.793728][T11098] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 621.816983][T11098] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.830471][T11098] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 621.839413][T11098] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.867764][T14126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.876693][T14126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.912452][T11098] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 621.973075][T11098] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.024056][T14109] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 622.076162][T11096] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 622.086057][T11096] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.235076][T14129] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 622.301634][T14109] usb 5-1: descriptor type invalid, skip [ 622.309495][T14109] usb 5-1: config 1 has an invalid descriptor of length 215, skipping remainder of the config [ 622.328301][T14133] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2375'. [ 622.333274][T14109] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 622.368110][T14109] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 622.383630][T14109] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.401942][T14109] usb 5-1: Product: syz [ 622.407008][T14109] usb 5-1: Manufacturer: syz [ 622.418868][T14109] usb 5-1: SerialNumber: syz [ 622.794187][T14117] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.2372'. [ 622.805310][T14117] tipc: Enabling of bearer rejected, failed to enable media [ 623.067610][T14140] netlink: 'syz.1.2377': attribute type 30 has an invalid length. [ 623.217372][T14140] bond1: option arp_missed_max: invalid value (0) [ 623.223866][T14140] bond1: option arp_missed_max: allowed values 1 - 255 [ 623.233604][T14140] bond1 (unregistering): Released all slaves [ 623.317632][ T5692] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 624.309608][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.317542][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.456191][T14150] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2380'. [ 624.470891][T14150] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2380'. [ 624.483381][T14150] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2380'. [ 624.860520][ T5692] usb 4-1: unable to get BOS descriptor or descriptor too short [ 624.973934][ T29] audit: type=1326 audit(1786242696.980:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14151 comm="syz.4.2382" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6fef0ec code=0x0 [ 625.030571][T14154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.040541][T14154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 625.093920][T14158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.103796][T14158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 625.303625][ T5692] usb 4-1: config 0 has an invalid interface number: 59 but max is 2 [ 625.311785][ T5692] usb 4-1: config 0 has an invalid interface number: 59 but max is 2 [ 625.320296][ T5692] usb 4-1: config 0 has an invalid interface number: 56 but max is 2 [ 625.328419][ T5692] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 625.337455][ T5692] usb 4-1: config 0 has no interface number 0 [ 625.343568][ T5692] usb 4-1: config 0 has no interface number 1 [ 625.349734][ T5692] usb 4-1: config 0 interface 56 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 625.355077][T14121] usb 2-1: new full-speed USB device number 116 using dummy_hcd [ 625.360552][ T5692] usb 4-1: config 0 interface 59 has no altsetting 0 [ 625.374913][ T5692] usb 4-1: config 0 interface 59 has no altsetting 1 [ 625.381639][ T5692] usb 4-1: config 0 interface 56 has no altsetting 0 [ 625.456768][T14160] bond5: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 625.472147][T14160] bond5 (unregistering): Released all slaves [ 625.650849][T14162] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2384'. [ 625.660628][T14121] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 351, setting to 64 [ 625.671773][T14121] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 625.683139][T14121] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.698175][T14121] usb 2-1: config 0 descriptor?? [ 625.704984][T14156] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 625.787533][T14167] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2385'. [ 625.919483][T14156] trusted_key: encrypted_key: insufficient parameters specified [ 625.924220][T14171] bond6: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 625.940879][T14121] ath6kl: Failed to submit usb control message: -71 [ 625.952188][T14121] ath6kl: unable to send the bmi data to the device: -71 [ 625.956124][T14171] bond6 (unregistering): Released all slaves [ 625.964069][T14121] ath6kl: Unable to send get target info: -71 [ 625.965174][T14121] ath6kl: Failed to init ath6kl core: -71 [ 625.967794][T14121] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 625.987002][T14121] usb 2-1: USB disconnect, device number 116 [ 626.205374][T14176] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2387'. [ 626.305803][ T5692] usb 4-1: New USB device found, idVendor=0421, idProduct=02e3, bcdDevice=43.b7 [ 626.315006][ T5692] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.323030][ T5692] usb 4-1: Product: syz [ 626.327229][ T5692] usb 4-1: Manufacturer: syz [ 626.344808][ T5692] usb 4-1: config 0 descriptor?? [ 626.428771][ T5692] usb 4-1: can't set config #0, error -71 [ 626.453704][ T5692] usb 4-1: USB disconnect, device number 122 [ 626.758397][T14188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2391'. [ 626.768724][T14188] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2391'. [ 627.642270][T14201] trusted_key: encrypted_key: master key parameter is missing [ 627.745727][T14106] usb 4-1: new full-speed USB device number 123 using dummy_hcd [ 628.188319][T14113] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 628.539658][T14216] binder_alloc: 14215: binder_alloc_buf, no vma [ 628.616124][T14113] usb 2-1: device descriptor read/64, error -71 [ 628.646131][T14220] __nla_validate_parse: 1 callbacks suppressed [ 628.646145][T14220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2403'. [ 628.662455][T14220] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2403'. [ 628.671443][T14220] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2403'. [ 628.740551][T14222] bond6: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 628.752151][T14222] bond6 (unregistering): Released all slaves [ 628.926957][T14222] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2404'. [ 629.060415][T14106] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 629.070251][T14106] usb 4-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 629.081178][T14113] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 629.090178][T14106] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.102717][T14106] usb 4-1: config 0 descriptor?? [ 629.288556][T14106] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 629.484540][T14193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 629.493491][T14193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 629.509345][T14113] usb 2-1: device descriptor read/64, error -71 [ 629.620336][T14113] usb usb2-port1: attempt power cycle [ 629.951549][ T29] audit: type=1326 audit(1786242701.950:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14235 comm="syz.4.2409" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6fef0ec code=0x0 [ 629.978195][T14234] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 630.061817][T14113] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 630.102325][T14241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.111155][T14241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.489798][T14113] usb 2-1: device descriptor read/8, error -71 [ 630.751140][T14248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.767207][T14248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.781281][ T29] audit: type=1326 audit(1786242702.770:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14247 comm="syz.2.2412" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f980ec code=0x7ffc0000 [ 630.806991][ T29] audit: type=1326 audit(1786242702.770:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14247 comm="syz.2.2412" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f980ec code=0x7ffc0000 [ 630.861633][ T29] audit: type=1326 audit(1786242702.770:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14247 comm="syz.2.2412" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f980ec code=0x7ffc0000 [ 630.886246][ T29] audit: type=1326 audit(1786242702.770:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14247 comm="syz.2.2412" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f980ec code=0x7ffc0000 [ 630.910775][ T29] audit: type=1326 audit(1786242702.770:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14247 comm="syz.2.2412" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=144 compat=1 ip=0xf7f980ec code=0x7ffc0000 [ 630.935158][ T29] audit: type=1326 audit(1786242702.770:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14247 comm="syz.2.2412" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f980ec code=0x7ffc0000 [ 630.964537][T14252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2414'. [ 630.965885][T14252] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2414'. [ 630.965907][T14252] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2414'. [ 631.003891][ T29] audit: type=1326 audit(1786242702.770:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14247 comm="syz.2.2412" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f980ec code=0x7ffc0000 [ 631.028375][ T29] audit: type=1326 audit(1786242702.770:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14247 comm="syz.2.2412" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7f980ec code=0x7ffc0000 [ 631.053248][ T29] audit: type=1326 audit(1786242702.770:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14247 comm="syz.2.2412" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71974eb code=0x7ffc0000 [ 631.105357][ T29] audit: type=1326 audit(1786242702.970:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14247 comm="syz.2.2412" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71974eb code=0x7ffc0000 [ 631.239386][T14256] bond5: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 631.253684][T14256] bond5 (unregistering): Released all slaves [ 631.449785][T14256] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2416'. [ 631.760929][T14095] usb 4-1: USB disconnect, device number 123 [ 632.440364][T14276] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 632.597277][T14282] binder_alloc: 14281: binder_alloc_buf, no vma [ 632.624607][T14095] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 632.663893][T14284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2425'. [ 632.674005][T14284] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2425'. [ 632.938253][T14293] bond6: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 632.958163][T14293] bond6 (unregistering): Released all slaves [ 633.298154][T14095] usb 4-1: Using ep0 maxpacket: 8 [ 633.673940][T14109] usb 2-1: new full-speed USB device number 121 using dummy_hcd [ 633.945045][T14109] usb 2-1: no configurations [ 633.953888][T14109] usb 2-1: can't read configurations, error -22 [ 633.954960][T14095] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 633.970330][T14095] usb 4-1: config 0 has no interfaces? [ 634.124167][T14109] usb 2-1: new full-speed USB device number 122 using dummy_hcd [ 634.238809][T14317] __nla_validate_parse: 2 callbacks suppressed [ 634.238831][T14317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2436'. [ 634.256974][T14317] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2436'. [ 634.266365][T14317] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2436'. [ 634.339879][T14321] syzkaller1: entered promiscuous mode [ 634.346631][T14321] syzkaller1: entered allmulticast mode [ 634.394817][T14109] usb 2-1: no configurations [ 634.399678][T14109] usb 2-1: can't read configurations, error -22 [ 634.411460][T14109] usb usb2-port1: attempt power cycle [ 634.786299][T14109] usb 2-1: new full-speed USB device number 123 using dummy_hcd [ 634.835588][T14109] usb 2-1: no configurations [ 634.840466][T14109] usb 2-1: can't read configurations, error -22 [ 634.851884][T14095] usb 4-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 634.861143][T14095] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.869157][T14095] usb 4-1: Product: syz [ 634.876354][T14095] usb 4-1: Manufacturer: syz [ 634.881389][T14095] usb 4-1: SerialNumber: syz [ 634.884601][T14333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 634.894357][T14095] usb 4-1: config 0 descriptor?? [ 634.929268][T14333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 635.014295][T14109] usb 2-1: new full-speed USB device number 124 using dummy_hcd [ 635.125419][T14109] usb 2-1: no configurations [ 635.130343][T14109] usb 2-1: can't read configurations, error -22 [ 635.137260][T14109] usb usb2-port1: unable to enumerate USB device [ 635.239189][T14336] bond6: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 635.252460][T14336] bond6 (unregistering): Released all slaves [ 635.304449][T14109] usb 4-1: USB disconnect, device number 124 [ 635.395608][T14340] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2442'. [ 636.452882][T14359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2448'. [ 637.098563][T14374] bond5: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 637.109794][T14374] bond5 (unregistering): Released all slaves [ 637.291745][T14381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 637.304792][T14376] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2454'. [ 637.307151][T14121] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 637.322083][T14381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 637.564489][T14388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2459'. [ 637.574023][T14121] usb 4-1: Using ep0 maxpacket: 32 [ 637.590776][T14121] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 637.604757][T14121] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 637.614393][T14121] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 637.629948][T14121] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 637.639216][T14121] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.647923][T14121] usb 4-1: Product: syz [ 637.652329][T14121] usb 4-1: Manufacturer: syz [ 637.657015][T14121] usb 4-1: SerialNumber: syz [ 637.667961][T14121] cdc_ncm 4-1:1.0: invalid descriptor buffer length [ 637.687514][T14121] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 637.699187][T14121] cdc_ncm 4-1:1.0: bind() failure [ 637.879345][T14121] usb 4-1: USB disconnect, device number 125 [ 638.136120][T14391] netlink: 'syz.1.2460': attribute type 1 has an invalid length. [ 638.288891][T14391] bond1: entered promiscuous mode [ 638.294352][T14391] 8021q: adding VLAN 0 to HW filter on device bond1 [ 638.310520][T14404] 8021q: adding VLAN 0 to HW filter on device bond1 [ 638.321845][T14404] bond1: (slave ipip1): The slave device specified does not support setting the MAC address [ 638.332736][T14404] bond1: (slave ipip1): Setting fail_over_mac to active for active-backup mode [ 638.346679][T14404] bond1: (slave ipip1): making interface the new active one [ 638.354107][T14404] ipip1: entered promiscuous mode [ 638.360650][T14404] bond1: (slave ipip1): Enslaving as an active interface with an up link [ 638.597958][T14411] bond9: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 638.634417][T14411] bond9 (unregistering): Released all slaves [ 638.732015][T14417] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2467'. [ 639.203908][T14426] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2470'. [ 639.333229][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 639.333248][ T29] audit: type=1326 audit(1786242711.330:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14431 comm="syz.2.2472" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f980ec code=0x0 [ 639.601540][T14435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 639.612091][T14435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.654140][T14121] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 639.923987][T14121] usb 4-1: Using ep0 maxpacket: 8 [ 639.930892][T14121] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 639.941289][T14121] usb 4-1: config 0 has no interfaces? [ 639.955793][T14121] usb 4-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 639.966010][T14121] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.974389][T14121] usb 4-1: Product: syz [ 639.978898][T14121] usb 4-1: Manufacturer: syz [ 639.983561][T14121] usb 4-1: SerialNumber: syz [ 639.991218][T14121] usb 4-1: config 0 descriptor?? [ 640.236805][T14121] usb 4-1: USB disconnect, device number 126 [ 640.249262][ T29] audit: type=1326 audit(1786242712.230:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14440 comm="syz.4.2476" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef0ec code=0x7ffc0000 [ 640.277293][ T29] audit: type=1326 audit(1786242712.230:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14440 comm="syz.4.2476" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef0ec code=0x7ffc0000 [ 640.319228][ T29] audit: type=1326 audit(1786242712.300:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14440 comm="syz.4.2476" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=258 compat=1 ip=0xf6fef0ec code=0x7ffc0000 [ 640.346450][ T29] audit: type=1326 audit(1786242712.300:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14440 comm="syz.4.2476" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef0ec code=0x7ffc0000 [ 640.385456][ T29] audit: type=1326 audit(1786242712.300:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14440 comm="syz.4.2476" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef0ec code=0x7ffc0000 [ 640.443534][ T29] audit: type=1326 audit(1786242712.300:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14440 comm="syz.4.2476" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf6fef0ec code=0x7ffc0000 [ 640.468528][ T29] audit: type=1326 audit(1786242712.300:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14440 comm="syz.4.2476" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef0ec code=0x7ffc0000 [ 640.493379][ T29] audit: type=1326 audit(1786242712.300:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14440 comm="syz.4.2476" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef0ec code=0x7ffc0000 [ 640.531009][ T29] audit: type=1326 audit(1786242712.300:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14440 comm="syz.4.2476" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=289 compat=1 ip=0xf6fef0ec code=0x7ffc0000 [ 640.760973][T14446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.769838][T14446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.782532][T14446] trusted_key: encrypted_key: insufficient parameters specified [ 641.547779][T14459] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 641.567110][T14459] bond1 (unregistering): Released all slaves [ 641.696418][T14461] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2480'. [ 642.046085][T14470] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2484'. [ 642.634094][T14483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 642.665246][T14483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.103362][T14494] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2495'. [ 643.115006][T14121] usb 4-1: new full-speed USB device number 127 using dummy_hcd [ 643.212020][T14498] bond5: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 643.224519][T14498] bond5 (unregistering): Released all slaves [ 643.337072][T14507] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2496'. [ 643.376138][T14121] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 351, setting to 64 [ 643.400062][T14508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 643.423609][T14121] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 643.432876][T14506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 643.441234][T14506] 8021q: adding VLAN 0 to HW filter on device team0 [ 643.450721][T14121] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.461158][T14508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.475139][T14121] usb 4-1: config 0 descriptor?? [ 643.482251][T14486] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 643.505042][T14506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 643.519003][T14509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 643.543359][T14509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.574670][T14506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 643.587752][T14506] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 643.599198][T14506] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 643.618268][T14506] veth1_vlan: left promiscuous mode [ 643.645448][T14506] veth0_vlan: left promiscuous mode [ 643.657500][T14506] veth0_vlan: entered promiscuous mode [ 643.667279][T14506] veth1_vlan: entered promiscuous mode [ 643.701529][T14506] veth1_macvtap: left promiscuous mode [ 643.710654][T14506] veth0_macvtap: left promiscuous mode [ 643.730117][T14506] veth0_macvtap: entered promiscuous mode [ 643.742818][T14506] veth1_macvtap: entered promiscuous mode [ 643.765914][T14506] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 643.787168][T14506] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 643.803331][T14506] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 643.811754][T14514] FAULT_INJECTION: forcing a failure. [ 643.811754][T14514] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 643.826148][T14506] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 643.843521][T14514] CPU: 0 UID: 0 PID: 14514 Comm: syz.1.2500 Tainted: G L syzkaller #0 PREEMPT(full) [ 643.843552][T14514] Tainted: [L]=SOFTLOCKUP [ 643.843561][T14514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 643.843573][T14514] Call Trace: [ 643.843581][T14514] [ 643.843590][T14514] dump_stack_lvl+0xe8/0x150 [ 643.843624][T14514] should_fail_ex+0x40c/0x560 [ 643.843653][T14514] _copy_from_user+0x2d/0xb0 [ 643.843684][T14514] get_compat_msghdr+0xb3/0x4c0 [ 643.843712][T14514] ? __pfx_get_compat_msghdr+0x10/0x10 [ 643.843750][T14514] ___sys_sendmsg+0x201/0x360 [ 643.843771][T14514] ? __lock_acquire+0x683/0x2cf0 [ 643.843803][T14514] ? __pfx____sys_sendmsg+0x10/0x10 [ 643.843830][T14514] ? kstrtoull+0x12f/0x1d0 [ 643.843878][T14514] ? __fget_files+0x2a/0x420 [ 643.843912][T14514] ? __fget_files+0x3a2/0x420 [ 643.843948][T14514] __sys_sendmmsg+0x2de/0x4d0 [ 643.843976][T14514] ? __pfx___sys_sendmmsg+0x10/0x10 [ 643.844025][T14514] ? fput+0xa0/0xd0 [ 643.844050][T14514] ? ksys_write+0x242/0x270 [ 643.844088][T14514] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 643.844116][T14514] __do_fast_syscall_32+0x23e/0x6f0 [ 643.844146][T14514] ? do_fast_syscall_32+0x33/0x70 [ 643.844172][T14514] ? lockdep_hardirqs_on+0x7a/0x110 [ 643.844197][T14514] ? asm_int80_emulation+0x1a/0x20 [ 643.844217][T14514] ? do_int80_emulation+0x29f/0x550 [ 643.844244][T14514] ? trace_irq_disable+0x3b/0x140 [ 643.844273][T14514] do_fast_syscall_32+0x33/0x70 [ 643.844301][T14514] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 643.844334][T14514] RIP: 0023:0xf707f0ec [ 643.844352][T14514] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 643.844369][T14514] RSP: 002b:00000000f546d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 643.844391][T14514] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080004800 [ 643.844405][T14514] RDX: 0000000000000002 RSI: 0000000004004800 RDI: 0000000000000000 [ 643.844418][T14514] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 643.844430][T14514] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 643.844441][T14514] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 643.844470][T14514] [ 643.879792][T14486] trusted_key: encrypted_key: insufficient parameters specified [ 644.146880][T14506] 8021q: adding VLAN 0 to HW filter on device bond1 [ 644.158771][T14506] 8021q: adding VLAN 0 to HW filter on device bond2 [ 644.185196][T14506] bond2: entered promiscuous mode [ 644.190631][T14506] macvlan2: left promiscuous mode [ 644.196703][T14506] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 644.209434][T14121] ath6kl: Failed to submit usb control message: -71 [ 644.227303][T14121] ath6kl: unable to send the bmi data to the device: -71 [ 644.243907][T14506] 8021q: adding VLAN 0 to HW filter on device bond3 [ 644.247571][T14121] ath6kl: Unable to send get target info: -71 [ 644.253895][T14506] 8021q: adding VLAN 0 to HW filter on device bond4 [ 644.267571][T14506] 8021q: adding VLAN 0 to HW filter on device bond5 [ 644.300812][T14121] ath6kl: Failed to init ath6kl core: -71 [ 644.324559][T14121] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 644.338510][T14121] usb 4-1: USB disconnect, device number 127 [ 644.354360][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.361490][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 644.372050][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.379165][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 644.447830][T14518] syzkaller0: entered promiscuous mode [ 644.453487][T14518] syzkaller0: entered allmulticast mode [ 644.488942][ T3291] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 644.496919][ T3291] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 644.520682][T14106] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 644.534933][ T3291] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 644.542618][ T3291] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 644.551523][ T3291] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 644.559204][ T3291] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 644.573736][ T3291] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 644.582629][ T3291] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.591348][ T3291] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 644.600039][ T3291] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.608782][ T3291] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 644.642098][T14105] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 644.650250][T14105] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 644.661662][ T3291] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.670481][ T3291] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 644.679634][ T3291] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.735956][ T5692] usb 2-1: new full-speed USB device number 125 using dummy_hcd [ 645.063354][T14113] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 645.534380][T14532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 645.543207][T14532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 645.988379][T14534] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2507'. [ 646.269226][T14540] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 646.288735][T14541] FAULT_INJECTION: forcing a failure. [ 646.288735][T14541] name failslab, interval 1, probability 0, space 0, times 0 [ 646.301385][T14541] CPU: 1 UID: 0 PID: 14541 Comm: syz.2.2510 Tainted: G L syzkaller #0 PREEMPT(full) [ 646.301418][T14541] Tainted: [L]=SOFTLOCKUP [ 646.301426][T14541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 646.301439][T14541] Call Trace: [ 646.301448][T14541] [ 646.301458][T14541] dump_stack_lvl+0xe8/0x150 [ 646.301494][T14541] should_fail_ex+0x40c/0x560 [ 646.301524][T14541] should_failslab+0xa8/0x100 [ 646.301557][T14541] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 646.301582][T14541] ? __kernfs_new_node+0xe6/0x980 [ 646.301612][T14541] ? __kernfs_new_node+0xe6/0x980 [ 646.301640][T14541] ? __kernfs_new_node+0xe6/0x980 [ 646.301678][T14541] __kernfs_new_node+0xe6/0x980 [ 646.301719][T14541] ? __pfx___kernfs_new_node+0x10/0x10 [ 646.301751][T14541] ? kernfs_root+0x1c/0x230 [ 646.301786][T14541] ? kernfs_root+0x1c/0x230 [ 646.301814][T14541] ? kernfs_root+0x1c/0x230 [ 646.301840][T14541] ? kernfs_root+0x1c/0x230 [ 646.301874][T14541] kernfs_new_node+0xea/0x140 [ 646.301910][T14541] __kernfs_create_file+0x4b/0x2e0 [ 646.301938][T14541] sysfs_add_file_mode_ns+0x237/0x300 [ 646.301972][T14541] internal_create_group+0x679/0x1180 [ 646.302018][T14541] ? __pfx_internal_create_group+0x10/0x10 [ 646.302052][T14541] ? up_write+0x19f/0x4a0 [ 646.302078][T14541] sysfs_create_groups+0x59/0x120 [ 646.302111][T14541] device_add_attrs+0x12c/0x600 [ 646.302137][T14541] ? __pfx_device_add_attrs+0x10/0x10 [ 646.302157][T14541] ? kobject_put+0x50f/0x550 [ 646.302202][T14541] ? device_add_class_symlinks+0x21f/0x240 [ 646.302228][T14541] device_add+0x488/0xb80 [ 646.302253][T14541] input_register_device+0x9d7/0x1150 [ 646.302288][T14541] uinput_create_device+0x53e/0x690 [ 646.302330][T14541] uinput_ioctl_handler+0x433/0x15a0 [ 646.302370][T14541] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 646.302418][T14541] ? __fget_files+0x2a/0x420 [ 646.302455][T14541] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 646.302481][T14541] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 646.302504][T14541] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 646.302536][T14541] ? __fget_files+0x3a2/0x420 [ 646.302570][T14541] ? fput+0xa0/0xd0 [ 646.302596][T14541] ? ksys_write+0x242/0x270 [ 646.302640][T14541] __do_fast_syscall_32+0x23e/0x6f0 [ 646.302672][T14541] ? do_fast_syscall_32+0x33/0x70 [ 646.302701][T14541] ? lockdep_hardirqs_on+0x7a/0x110 [ 646.302727][T14541] ? asm_int80_emulation+0x1a/0x20 [ 646.302747][T14541] ? do_int80_emulation+0x29f/0x550 [ 646.302776][T14541] ? trace_irq_disable+0x3b/0x140 [ 646.302804][T14541] do_fast_syscall_32+0x33/0x70 [ 646.302834][T14541] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 646.302860][T14541] RIP: 0023:0xf7f980ec [ 646.302880][T14541] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 646.302898][T14541] RSP: 002b:00000000f543550c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 646.302921][T14541] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005501 [ 646.302935][T14541] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 646.302948][T14541] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 646.302961][T14541] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 646.302974][T14541] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 646.303005][T14541] [ 646.314298][T14093] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 646.706554][T14544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 646.717145][T14544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 646.874260][T14093] usb 4-1: Using ep0 maxpacket: 8 [ 646.887599][T14093] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 646.900605][T14093] usb 4-1: config 0 has no interfaces? [ 646.916157][T14093] usb 4-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 646.925576][T14093] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.936080][T14093] usb 4-1: Product: syz [ 646.940373][T14093] usb 4-1: Manufacturer: syz [ 646.945372][T14093] usb 4-1: SerialNumber: syz [ 646.952585][T14093] usb 4-1: config 0 descriptor?? [ 647.098403][ T5692] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 647.107526][ T5692] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.115562][ T5692] usb 2-1: Product: syz [ 647.119763][ T5692] usb 2-1: Manufacturer: syz [ 647.124395][ T5692] usb 2-1: SerialNumber: syz [ 647.132832][ T5692] usb 2-1: config 0 descriptor?? [ 647.419166][T14553] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 647.438877][ T5692] dvb_usb_rtl28xxu 2-1:0.0: chip type detection failed -71 [ 647.446221][ T5692] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 647.460206][ T5692] usb 2-1: USB disconnect, device number 125 [ 647.475500][T14553] bond1 (unregistering): Released all slaves [ 647.558725][T14556] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2514'. [ 647.893953][ T5692] usb 4-1: USB disconnect, device number 2 [ 648.492265][T14567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2518'. [ 648.829227][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 648.829247][ T29] audit: type=1326 audit(1786242720.820:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14575 comm="syz.4.2521" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6fef0ec code=0x0 [ 648.935814][T14578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.945930][T14578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 649.649923][T14582] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 649.997394][T14589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2524'. [ 650.214256][T14594] bond2: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 650.241236][T14597] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2525'. [ 650.295073][T14594] bond2 (unregistering): Released all slaves [ 650.403526][T14598] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2527'. [ 650.745124][T14603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.775421][T14603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 651.184177][T14608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2531'. [ 651.254327][ T9] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 651.527740][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 651.541067][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 651.561820][ T9] usb 2-1: config 0 has no interfaces? [ 651.571218][ T9] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 651.581012][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.590497][ T9] usb 2-1: Product: syz [ 651.597310][ T9] usb 2-1: Manufacturer: syz [ 651.601992][ T9] usb 2-1: SerialNumber: syz [ 651.610868][ T9] usb 2-1: config 0 descriptor?? [ 651.693998][T14121] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 651.976737][T14121] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 351, setting to 64 [ 652.000424][T14121] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 652.015789][T14121] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.034964][T14121] usb 4-1: config 0 descriptor?? [ 652.043914][T14616] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 652.052636][T14627] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2539'. [ 652.091850][T14627] net_ratelimit: 378 callbacks suppressed [ 652.091871][T14627] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 652.273771][T14630] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 652.285872][T14630] bond1 (unregistering): Released all slaves [ 652.324192][T14616] trusted_key: encrypted_key: insufficient parameters specified [ 652.352974][T14634] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc [ 652.365945][T14121] ath6kl: Failed to submit usb control message: -71 [ 652.374382][T14121] ath6kl: unable to send the bmi data to the device: -71 [ 652.387269][T14121] ath6kl: Unable to send get target info: -71 [ 652.427886][T14637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2542'. [ 652.429359][T14638] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2540'. [ 652.437228][T14121] ath6kl: Failed to init ath6kl core: -71 [ 652.467083][T14121] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 652.497968][T14121] usb 4-1: USB disconnect, device number 3 [ 652.607087][T14640] syz.0.2543 (14640): drop_caches: 2 [ 652.655381][T14105] usb 2-1: USB disconnect, device number 126 [ 652.845774][T14649] FAULT_INJECTION: forcing a failure. [ 652.845774][T14649] name failslab, interval 1, probability 0, space 0, times 0 [ 652.907880][T14649] CPU: 1 UID: 0 PID: 14649 Comm: syz.4.2547 Tainted: G L syzkaller #0 PREEMPT(full) [ 652.907916][T14649] Tainted: [L]=SOFTLOCKUP [ 652.907925][T14649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 652.907938][T14649] Call Trace: [ 652.907946][T14649] [ 652.907956][T14649] dump_stack_lvl+0xe8/0x150 [ 652.907991][T14649] should_fail_ex+0x40c/0x560 [ 652.908021][T14649] should_failslab+0xa8/0x100 [ 652.908054][T14649] __kmalloc_noprof+0xfe/0x720 [ 652.908080][T14649] ? rcu_is_watching+0x15/0xb0 [ 652.908112][T14649] ? tomoyo_realpath_from_path+0xef/0x640 [ 652.908134][T14649] ? tomoyo_realpath_from_path+0xef/0x640 [ 652.908164][T14649] tomoyo_realpath_from_path+0xef/0x640 [ 652.908198][T14649] ? tomoyo_path_number_perm+0x219/0x5f0 [ 652.908229][T14649] tomoyo_path_number_perm+0x246/0x5f0 [ 652.908270][T14649] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 652.908300][T14649] ? __lock_acquire+0x683/0x2cf0 [ 652.908343][T14649] ? hook_file_ioctl_compat+0x1f0/0x5f0 [ 652.908397][T14649] ? __fget_files+0x2a/0x420 [ 652.908429][T14649] ? __fget_files+0x3a2/0x420 [ 652.908455][T14649] ? __fget_files+0x2a/0x420 [ 652.908486][T14649] security_file_ioctl_compat+0xc3/0x2a0 [ 652.908518][T14649] __ia32_compat_sys_ioctl+0x139/0x950 [ 652.908543][T14649] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 652.908566][T14649] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 652.908603][T14649] ? __fget_files+0x3a2/0x420 [ 652.908636][T14649] ? fput+0xa0/0xd0 [ 652.908662][T14649] ? ksys_write+0x242/0x270 [ 652.908706][T14649] __do_fast_syscall_32+0x23e/0x6f0 [ 652.908737][T14649] ? do_fast_syscall_32+0x33/0x70 [ 652.908765][T14649] ? lockdep_hardirqs_on+0x7a/0x110 [ 652.908792][T14649] ? asm_int80_emulation+0x1a/0x20 [ 652.908811][T14649] ? do_int80_emulation+0x29f/0x550 [ 652.908838][T14649] ? trace_irq_disable+0x3b/0x140 [ 652.908867][T14649] do_fast_syscall_32+0x33/0x70 [ 652.908897][T14649] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 652.908922][T14649] RIP: 0023:0xf6fef0ec [ 652.908942][T14649] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 652.908959][T14649] RSP: 002b:00000000f53dd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 652.908982][T14649] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c040563d [ 652.908998][T14649] RDX: 0000000080000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 652.909011][T14649] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 652.909023][T14649] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 652.909035][T14649] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 652.909064][T14649] [ 652.909074][T14649] ERROR: Out of memory at tomoyo_realpath_from_path. [ 652.998894][ T29] audit: type=1326 audit(1786242724.990:1712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14650 comm="syz.0.2548" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf701f0ec code=0x0 [ 653.381786][T14662] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2553'. [ 653.396532][T14658] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 653.504453][T14665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 653.513424][T14665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.014702][T14670] input: syz0 as /devices/virtual/input/input67 [ 654.139867][T14673] bond9: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 654.152507][T14673] bond9 (unregistering): Released all slaves [ 654.161913][T14676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.177347][T14676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.188585][T14676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.221875][T14676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.298995][T14679] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc [ 654.334661][T14681] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2557'. [ 654.871893][T14105] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 655.982044][T14696] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2563'. [ 656.024293][T14698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2564'. [ 656.191851][T14105] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 351, setting to 64 [ 656.202652][T14105] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 656.211731][T14105] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.226496][T14105] usb 4-1: config 0 descriptor?? [ 656.297878][ C1] ip6_tnl_xmit_ctl: 8 callbacks suppressed [ 656.297900][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 656.314408][T14687] raw-gadget.5 gadget.3: fail, usb_ep_enable returned -22 [ 656.607472][T14687] trusted_key: encrypted_key: insufficient parameters specified [ 656.748008][T14105] ath6kl: Failed to submit usb control message: -71 [ 656.754714][T14105] ath6kl: unable to send the bmi data to the device: -71 [ 656.761782][T14105] ath6kl: Unable to send get target info: -71 [ 656.769679][T14105] ath6kl: Failed to init ath6kl core: -71 [ 656.776644][T14105] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 656.789981][T14105] usb 4-1: USB disconnect, device number 4 [ 656.825943][T14704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 656.860364][T14704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 657.291069][T14713] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 657.615724][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 657.623505][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 657.976733][T14719] bond6: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 657.988700][T14719] bond6 (unregistering): Released all slaves [ 658.193454][T14723] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2570'. [ 658.327114][ T29] audit: type=1326 audit(1786242730.290:1713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14729 comm="syz.2.2574" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f980ec code=0x0 [ 658.441013][T14732] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2575'. [ 658.508880][T14735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 658.522350][T14735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 658.564009][ T9] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 658.598419][T14739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 658.622611][T14739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 658.650619][T14739] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 658.664864][T14739] loop5: detected capacity change from 0 to 7 [ 658.679407][T14739] Dev loop5: unable to read RDB block 7 [ 658.685103][T14739] loop5: unable to read partition table [ 658.690919][T14739] loop5: partition table beyond EOD, truncated [ 658.697108][T14739] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 658.774233][ T9] usb 4-1: device descriptor read/64, error -71 [ 659.034114][T14121] usb 2-1: new full-speed USB device number 127 using dummy_hcd [ 659.041926][ T9] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 659.122674][T14743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2580'. [ 659.136070][T14743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2580'. [ 659.224260][ T9] usb 4-1: device descriptor read/64, error -71 [ 659.275858][T14121] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 351, setting to 64 [ 659.287483][T14121] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 659.296615][T14121] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.307838][T14121] usb 2-1: config 0 descriptor?? [ 659.313866][T14741] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 659.374589][ T9] usb usb4-port1: attempt power cycle [ 659.523232][T14741] trusted_key: encrypted_key: insufficient parameters specified [ 659.533847][T14121] ath6kl: Failed to submit usb control message: -71 [ 659.540816][T14121] ath6kl: unable to send the bmi data to the device: -71 [ 659.548273][T14121] ath6kl: Unable to send get target info: -71 [ 659.561101][T14121] ath6kl: Failed to init ath6kl core: -71 [ 659.578090][T14121] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 659.600299][T14121] usb 2-1: USB disconnect, device number 127 [ 659.743716][ T9] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 659.794561][ T9] usb 4-1: device descriptor read/8, error -71 [ 660.024015][ T9] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 660.054389][ T9] usb 4-1: device descriptor read/8, error -71 [ 660.164172][ T9] usb usb4-port1: unable to enumerate USB device [ 660.338821][T14754] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 660.350219][T14754] bond1 (unregistering): Released all slaves [ 660.457587][T14756] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2584'. [ 660.679065][T14761] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2586'. [ 660.829116][T14763] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 661.705803][T14105] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 661.894785][T14785] bond6: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 661.907042][T14785] bond6 (unregistering): Released all slaves [ 662.052956][T14785] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2595'. [ 662.205454][T14792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2597'. [ 662.448503][T14805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2602'. [ 662.457399][T14805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2602'. [ 662.566590][ T29] audit: type=1326 audit(1786242734.540:1714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14804 comm="syz.2.2602" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f980ec code=0x7ffc0000 [ 662.592512][ T29] audit: type=1326 audit(1786242734.540:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14804 comm="syz.2.2602" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f980ec code=0x7ffc0000 [ 662.621942][ T29] audit: type=1326 audit(1786242734.610:1716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14804 comm="syz.2.2602" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=333 compat=1 ip=0xf7f980ec code=0x7ffc0000 [ 662.650620][ T29] audit: type=1326 audit(1786242734.610:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14804 comm="syz.2.2602" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f980ec code=0x7ffc0000 [ 662.675222][ T29] audit: type=1326 audit(1786242734.610:1718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14804 comm="syz.2.2602" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f980ec code=0x7ffc0000 [ 662.699793][ T29] audit: type=1326 audit(1786242734.610:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14804 comm="syz.2.2602" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=164 compat=1 ip=0xf7f980ec code=0x7ffc0000 [ 662.744452][ T29] audit: type=1326 audit(1786242734.610:1720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14804 comm="syz.2.2602" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f980ec code=0x7ffc0000 [ 662.769313][ T29] audit: type=1326 audit(1786242734.610:1721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14804 comm="syz.2.2602" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f980ec code=0x7ffc0000 [ 662.796959][ T29] audit: type=1326 audit(1786242734.610:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14804 comm="syz.2.2602" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f980ec code=0x7ffc0000 [ 662.824100][T14805] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 663.067867][T14105] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 351, setting to 64 [ 663.078679][T14105] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 663.087813][T14105] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.112728][T14105] usb 4-1: config 0 descriptor?? [ 663.177401][T14777] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 663.327036][T14817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.340987][T14817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.520174][T14777] trusted_key: encrypted_key: insufficient parameters specified [ 663.557412][T14121] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 663.612094][T14105] ath6kl: Failed to submit usb control message: -71 [ 663.624334][T14105] ath6kl: unable to send the bmi data to the device: -71 [ 663.631421][T14105] ath6kl: Unable to send get target info: -71 [ 663.643767][T14105] ath6kl: Failed to init ath6kl core: -71 [ 663.650762][T14105] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 663.678789][T14105] usb 4-1: USB disconnect, device number 9 [ 663.742188][T14822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.755247][T14822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.829617][T14121] usb 2-1: Using ep0 maxpacket: 8 [ 663.847418][T14121] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 663.862827][T14121] usb 2-1: config 0 has no interface number 0 [ 663.869097][T14121] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 663.880066][T14121] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 663.889237][T14121] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.900358][T14121] usb 2-1: config 0 descriptor?? [ 663.916480][T14121] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 664.117638][ C0] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 664.126870][T14121] usb 2-1: USB disconnect, device number 2 [ 664.437600][T14827] bond6: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 664.450532][T14827] bond6 (unregistering): Released all slaves [ 664.579454][T14829] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2608'. [ 664.858502][T14834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2609'. [ 664.913897][T14836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.925378][T14836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 666.330375][T14857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 666.371798][T14857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 666.382096][T14857] trusted_key: encrypted_key: insufficient parameters specified [ 666.450565][T14861] bond2: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 666.462623][T14861] bond2 (unregistering): Released all slaves [ 666.581314][T14866] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2619'. [ 666.880901][T14869] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2620'. [ 667.155749][T14879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 667.164660][T14879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 667.526055][T14887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 667.535124][T14887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 667.643672][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 667.643690][ T29] audit: type=1326 audit(1786242739.610:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14889 comm="syz.3.2629" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x0 [ 667.699277][T14890] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 667.921722][T14896] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2631'. [ 668.114170][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 668.245168][T14901] bond2: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 668.256634][T14901] bond2 (unregistering): Released all slaves [ 668.384034][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 668.405204][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 668.415717][T14903] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2633'. [ 668.424983][ T9] usb 4-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 668.438741][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 668.445939][ T9] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 668.455960][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.469499][ T9] usb 4-1: config 0 descriptor?? [ 668.483015][ T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 668.684545][T14914] FAULT_INJECTION: forcing a failure. [ 668.684545][T14914] name failslab, interval 1, probability 0, space 0, times 0 [ 668.697175][T14914] CPU: 1 UID: 0 PID: 14914 Comm: syz.1.2637 Tainted: G L syzkaller #0 PREEMPT(full) [ 668.697200][T14914] Tainted: [L]=SOFTLOCKUP [ 668.697206][T14914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 668.697215][T14914] Call Trace: [ 668.697222][T14914] [ 668.697228][T14914] dump_stack_lvl+0xe8/0x150 [ 668.697254][T14914] should_fail_ex+0x40c/0x560 [ 668.697280][T14914] should_failslab+0xa8/0x100 [ 668.697303][T14914] __kmalloc_cache_noprof+0xa8/0x660 [ 668.697324][T14914] ? rtnl_newlink+0x136/0x1bd0 [ 668.697337][T14914] ? rtnl_newlink+0x136/0x1bd0 [ 668.697355][T14914] rtnl_newlink+0x136/0x1bd0 [ 668.697369][T14914] ? kasan_save_track+0x4f/0x80 [ 668.697386][T14914] ? kasan_save_track+0x3e/0x80 [ 668.697403][T14914] ? kasan_save_free_info+0x40/0x50 [ 668.697417][T14914] ? __kasan_slab_free+0x5c/0x80 [ 668.697435][T14914] ? kmem_cache_free+0x182/0x650 [ 668.697453][T14914] ? dev_hard_start_xmit+0x2cd/0x830 [ 668.697470][T14914] ? __netlink_deliver_tap+0x5b4/0x860 [ 668.697486][T14914] ? netlink_deliver_tap+0x19c/0x1b0 [ 668.697501][T14914] ? netlink_unicast+0x77f/0x940 [ 668.697513][T14914] ? netlink_sendmsg+0x813/0xb40 [ 668.697530][T14914] ? __pfx_rtnl_newlink+0x10/0x10 [ 668.697543][T14914] ? __do_fast_syscall_32+0x23e/0x6f0 [ 668.697564][T14914] ? do_fast_syscall_32+0x33/0x70 [ 668.697583][T14914] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 668.697625][T14914] ? kasan_quarantine_put+0xbb/0x1f0 [ 668.697643][T14914] ? lockdep_hardirqs_on+0x7a/0x110 [ 668.697664][T14914] ? nlmon_xmit+0xb0/0x100 [ 668.697683][T14914] ? kmem_cache_free+0x182/0x650 [ 668.697710][T14914] ? __lock_acquire+0x683/0x2cf0 [ 668.697732][T14914] ? __dev_queue_xmit+0x29b/0x3820 [ 668.697752][T14914] ? __local_bh_enable_ip+0xd0/0x130 [ 668.697768][T14914] ? lockdep_hardirqs_on+0x7a/0x110 [ 668.697788][T14914] ? __dev_queue_xmit+0x29b/0x3820 [ 668.697805][T14914] ? __local_bh_enable_ip+0xd0/0x130 [ 668.697820][T14914] ? __dev_queue_xmit+0x29b/0x3820 [ 668.697842][T14914] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 668.697866][T14914] ? __pfx_rtnl_newlink+0x10/0x10 [ 668.697888][T14914] ? __pfx_rtnl_newlink+0x10/0x10 [ 668.697900][T14914] rtnetlink_rcv_msg+0x802/0xc00 [ 668.697927][T14914] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 668.697951][T14914] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 668.697973][T14914] ? ref_tracker_free+0x689/0x830 [ 668.697993][T14914] ? __pfx_ref_tracker_free+0x10/0x10 [ 668.698018][T14914] netlink_rcv_skb+0x226/0x4a0 [ 668.698036][T14914] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 668.698060][T14914] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 668.698085][T14914] ? netlink_deliver_tap+0x2e/0x1b0 [ 668.698102][T14914] ? netlink_deliver_tap+0x2e/0x1b0 [ 668.698127][T14914] netlink_unicast+0x7bb/0x940 [ 668.698150][T14914] netlink_sendmsg+0x813/0xb40 [ 668.698173][T14914] ? __pfx_netlink_sendmsg+0x10/0x10 [ 668.698194][T14914] ? aa_sock_msg_perm+0xf1/0x1b0 [ 668.698221][T14914] ? __pfx_netlink_sendmsg+0x10/0x10 [ 668.698238][T14914] sock_sendmsg_nosec+0x13a/0x180 [ 668.698260][T14914] ____sys_sendmsg+0x54e/0x850 [ 668.698284][T14914] ? __pfx_____sys_sendmsg+0x10/0x10 [ 668.698312][T14914] ___sys_sendmsg+0x2a5/0x360 [ 668.698327][T14914] ? __lock_acquire+0x683/0x2cf0 [ 668.698349][T14914] ? __pfx____sys_sendmsg+0x10/0x10 [ 668.698365][T14914] ? get_pid_task+0x20/0x1f0 [ 668.698385][T14914] ? get_pid_task+0x20/0x1f0 [ 668.698402][T14914] ? get_pid_task+0x20/0x1f0 [ 668.698442][T14914] ? __fget_files+0x2a/0x420 [ 668.698461][T14914] ? __fget_files+0x3a2/0x420 [ 668.698487][T14914] __sys_sendmsg+0x177/0x240 [ 668.698504][T14914] ? __pfx___sys_sendmsg+0x10/0x10 [ 668.698533][T14914] __do_fast_syscall_32+0x23e/0x6f0 [ 668.698555][T14914] ? do_fast_syscall_32+0x33/0x70 [ 668.698575][T14914] ? lockdep_hardirqs_on+0x7a/0x110 [ 668.698593][T14914] ? asm_int80_emulation+0x1a/0x20 [ 668.698607][T14914] ? do_int80_emulation+0x29f/0x550 [ 668.698627][T14914] ? trace_irq_disable+0x3b/0x140 [ 668.698648][T14914] do_fast_syscall_32+0x33/0x70 [ 668.698669][T14914] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 668.698687][T14914] RIP: 0023:0xf707f0ec [ 668.698702][T14914] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 668.698714][T14914] RSP: 002b:00000000f546d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 668.698730][T14914] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 668.698741][T14914] RDX: 000000000c008006 RSI: 0000000000000000 RDI: 0000000000000000 [ 668.698750][T14914] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 668.698759][T14914] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 668.698768][T14914] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 668.698791][T14914] [ 669.954003][T14924] vlan3: entered promiscuous mode [ 669.959138][T14924] bridge0: entered promiscuous mode [ 670.134928][T14929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2642'. [ 671.054045][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 671.148643][T14934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2644'. [ 671.231027][T14937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2644'. [ 671.266772][T14934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2644'. [ 671.326356][T14105] usb 4-1: USB disconnect, device number 10 [ 671.418515][T14937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2644'. [ 671.435177][T14939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2644'. [ 671.971210][T14113] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 671.986561][T14949] bond9: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 672.023236][T14949] bond9 (unregistering): Released all slaves [ 672.083450][T14954] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2648'. [ 672.642107][T14113] usb 2-1: Using ep0 maxpacket: 8 [ 673.251861][T14963] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2653'. [ 673.310077][T14113] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 673.320230][T14113] usb 2-1: config 0 has no interfaces? [ 674.144245][ T29] audit: type=1326 audit(1786242746.090:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14967 comm="syz.2.2656" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f980ec code=0x0 [ 674.199989][T14113] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 674.209105][T14113] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.217130][T14113] usb 2-1: Product: syz [ 674.221330][T14113] usb 2-1: Manufacturer: syz [ 674.226046][T14113] usb 2-1: SerialNumber: syz [ 674.252089][T14113] usb 2-1: config 0 descriptor?? [ 674.321324][T14970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.330226][T14970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 674.540498][T14095] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 674.669247][T14113] usb 2-1: USB disconnect, device number 3 [ 674.742888][T14974] fuse: Unknown parameter '' [ 674.872202][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 674.879989][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 675.765326][T14113] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 675.879996][T14095] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 675.890944][T14095] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 675.900736][T14095] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 675.909950][T14095] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.938793][T14095] usb 4-1: config 0 descriptor?? [ 676.334082][T14969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2655'. [ 676.372814][T14969] 8021q: adding VLAN 0 to HW filter on device bond9 [ 676.436748][T14113] usb 2-1: Using ep0 maxpacket: 32 [ 676.729470][T14983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 676.740279][T14983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 676.749811][T14983] trusted_key: encrypted_key: insufficient parameters specified [ 677.109554][T14113] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 677.117712][T14113] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 677.127819][T14113] usb 2-1: config 0 has no interface number 0 [ 677.135114][T14113] usb 2-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 677.376335][T14987] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2664'. [ 677.572720][T14095] usbhid 4-1:0.0: can't add hid device: -32 [ 677.578830][T14095] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 677.819013][T14989] bond5: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 677.841129][T14989] bond5 (unregistering): Released all slaves [ 677.927859][T14998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.937946][T15000] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2665'. [ 677.949294][T14998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.145413][T14113] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 678.154535][T14113] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.162555][T14113] usb 2-1: Product: syz [ 678.166748][T14113] usb 2-1: Manufacturer: syz [ 678.255579][T14113] usb 2-1: config 0 descriptor?? [ 678.346896][T14113] usb 2-1: can't set config #0, error -71 [ 678.358866][T14113] usb 2-1: USB disconnect, device number 4 [ 678.485985][T14102] usb 4-1: USB disconnect, device number 11 [ 678.840391][ T29] audit: type=1326 audit(1786242750.800:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15013 comm="syz.4.2673" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6fef0ec code=0x0 [ 679.027795][T15018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.036696][T15018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.930828][T15022] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2675'. [ 679.957288][T15022] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2675'. [ 680.332353][T15028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2677'. [ 680.813360][T14113] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 683.488731][T14113] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 351, setting to 64 [ 683.499539][T14113] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 683.508632][T14113] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.830441][T15034] trusted_key: encrypted_key: insufficient parameters specified [ 684.593958][T14113] usb 4-1: config 0 descriptor?? [ 689.454661][T14113] usb 4-1: can't set config #0, error -71 [ 689.528085][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 689.534452][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 689.749146][T14113] usb 4-1: USB disconnect, device number 12 [ 690.383598][ C0] sched: DL replenish lagged too much [ 690.881244][T15061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2688'. [ 691.219514][ T29] audit: type=1326 audit(1786242763.210:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15064 comm="syz.3.2691" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x0 [ 691.603979][T14105] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 691.709560][T14113] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 692.272315][T14105] usb 2-1: Using ep0 maxpacket: 8 [ 692.322700][T15072] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 692.347850][T15072] bond1 (unregistering): Released all slaves [ 692.383832][T14113] usb 4-1: Using ep0 maxpacket: 32 [ 692.503466][T15075] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2692'. [ 692.940225][T14105] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 692.950366][T14105] usb 2-1: config 0 has no interfaces? [ 693.051701][T14113] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 693.061877][T14113] usb 4-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 693.074945][T14113] usb 4-1: config 0 interface 0 has no altsetting 0 [ 693.081593][T14113] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 693.090656][T14113] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.134490][T14113] usb 4-1: config 0 descriptor?? [ 693.288238][T14113] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 693.836179][T14105] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 693.845290][T14105] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.853328][T14105] usb 2-1: Product: syz [ 693.857543][T14105] usb 2-1: Manufacturer: syz [ 693.862211][T14105] usb 2-1: SerialNumber: syz [ 693.893498][T14105] usb 2-1: config 0 descriptor?? [ 694.304169][T14113] usb 2-1: USB disconnect, device number 5 [ 695.282710][T14113] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 695.775107][T14102] usb 4-1: USB disconnect, device number 13 [ 696.625497][T14113] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 351, setting to 64 [ 696.636282][T14113] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 696.645346][T14113] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.671076][T14113] usb 2-1: config 0 descriptor?? [ 696.739200][T15084] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 696.851718][T14102] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 697.083432][T15084] trusted_key: encrypted_key: insufficient parameters specified [ 697.193083][T14113] ath6kl: Failed to submit usb control message: -71 [ 697.199784][T14113] ath6kl: unable to send the bmi data to the device: -71 [ 697.206855][T14113] ath6kl: Unable to send get target info: -71 [ 697.227632][T14113] ath6kl: Failed to init ath6kl core: -71 [ 697.234814][T14113] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 697.255157][T14113] usb 2-1: USB disconnect, device number 6 [ 698.204527][T14102] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 698.215463][T14102] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 698.225339][T14102] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 698.234409][T14102] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.264297][T14102] usb 4-1: config 0 descriptor?? [ 698.724816][T15101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 698.778356][T15101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 699.888596][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 701.715619][T14102] playstation 0003:054C:0DF2.001D: unknown main item tag 0x0 [ 701.723101][T14102] playstation 0003:054C:0DF2.001D: unknown main item tag 0x0 [ 701.730532][T14102] playstation 0003:054C:0DF2.001D: unknown main item tag 0x0 [ 701.737954][T14102] playstation 0003:054C:0DF2.001D: unknown main item tag 0x0 [ 701.745378][T14102] playstation 0003:054C:0DF2.001D: unknown main item tag 0x0 [ 702.942058][T14102] playstation 0003:054C:0DF2.001D: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 708.771114][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 710.129256][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 731.612870][T15104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2701'. [ 751.096792][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 751.132611][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 762.543869][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 774.716896][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 774.829598][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 774.945849][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 775.057747][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 775.169664][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 775.281127][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 775.396507][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 777.971628][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 788.155357][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 806.969824][T14102] playstation 0003:054C:0DF2.001D: Failed to retrieve feature with reportID 9: -71 [ 806.979879][T14102] playstation 0003:054C:0DF2.001D: Failed to retrieve DualSense pairing info: -71 [ 806.989170][T14102] playstation 0003:054C:0DF2.001D: Failed to get MAC address from DualSense [ 806.997952][T14102] playstation 0003:054C:0DF2.001D: Failed to create dualsense. [ 814.831118][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.851430][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 820.979812][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 820.986804][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P15098/1:b..l [ 820.995450][ C1] rcu: (detected by 1, t=10502 jiffies, g=84821, q=899645 ncpus=2) [ 821.003457][ C1] task:syz.0.2701 state:R running task stack:25608 pid:15098 tgid:15098 ppid:8507 task_flags:0x400040 flags:0x08080002 [ 821.018444][ C1] Call Trace: [ 821.021776][ C1] [ 821.024780][ C1] __schedule+0x17d9/0x56c0 [ 821.029354][ C1] ? __pfx___schedule+0x10/0x10 [ 821.034274][ C1] preempt_schedule_irq+0x4d/0xa0 [ 821.039345][ C1] irqentry_exit+0x14f/0x8f0 [ 821.043974][ C1] ? trace_irq_disable+0x3b/0x140 [ 821.049063][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 821.055089][ C1] RIP: 0010:debug_lockdep_rcu_enabled+0xd/0x40 [ 821.061292][ C1] Code: 8e 67 48 0f b9 3a 90 eb ca cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 31 c0 83 3d 63 8c 86 04 00 <74> 1d 83 3d 3a be 86 04 00 74 14 65 48 8b 0d f8 f4 9b 07 31 c0 83 [ 821.080937][ C1] RSP: 0018:ffffc90003a3f158 EFLAGS: 00000202 [ 821.087044][ C1] RAX: 0000000000000000 RBX: ffffc90003a3f218 RCX: ffffc90003a3fac8 [ 821.095055][ C1] RDX: ffffc90003a3f201 RSI: dffffc0000000000 RDI: ffffc90003a3f210 [ 821.103056][ C1] RBP: 1ffffffff21f6a01 R08: ffffc90003a3fab0 R09: 0000000000000000 [ 821.111062][ C1] R10: ffffc90003a3f258 R11: fffff52000747e4d R12: ffffc90003a38000 [ 821.119071][ C1] R13: ffffffff8177827f R14: ffffc90003a3f208 R15: ffffc90003a3fac0 [ 821.127084][ C1] ? unwind_next_frame+0x8f/0x2550 [ 821.132258][ C1] unwind_next_frame+0x1b5d/0x2550 [ 821.137419][ C1] ? vma_modify_flags+0x24b/0x330 [ 821.142503][ C1] ? unwind_next_frame+0x8f/0x2550 [ 821.147662][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 821.153860][ C1] arch_stack_walk+0x11b/0x150 [ 821.158703][ C1] ? mprotect_fixup+0x624/0xb10 [ 821.163603][ C1] stack_trace_save+0xa9/0x100 [ 821.168408][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 821.173816][ C1] ? __lock_acquire+0x683/0x2cf0 [ 821.178801][ C1] save_stack+0x122/0x230 [ 821.183175][ C1] ? __pfx_save_stack+0x10/0x10 [ 821.188069][ C1] ? page_ext_get+0x22/0x2e0 [ 821.192716][ C1] ? __free_frozen_pages+0xc1e/0xd10 [ 821.198041][ C1] ? __slab_free+0x274/0x2c0 [ 821.202686][ C1] ? qlist_free_all+0x99/0x100 [ 821.207481][ C1] ? kasan_quarantine_reduce+0x148/0x160 [ 821.213239][ C1] ? __kasan_slab_alloc+0x22/0x80 [ 821.218336][ C1] ? kmem_cache_alloc_noprof+0x2a0/0x5f0 [ 821.224008][ C1] ? vm_area_dup+0x28/0x670 [ 821.228573][ C1] ? __split_vma+0x1dc/0xa50 [ 821.233197][ C1] ? vma_modify+0x93a/0x1c70 [ 821.237837][ C1] ? vma_modify_flags+0x24b/0x330 [ 821.242912][ C1] ? page_ext_put+0x97/0xc0 [ 821.247551][ C1] __reset_page_owner+0x71/0x1f0 [ 821.252544][ C1] __free_frozen_pages+0xc1e/0xd10 [ 821.257710][ C1] __slab_free+0x274/0x2c0 [ 821.262185][ C1] qlist_free_all+0x99/0x100 [ 821.266825][ C1] kasan_quarantine_reduce+0x148/0x160 [ 821.272326][ C1] __kasan_slab_alloc+0x22/0x80 [ 821.277229][ C1] kmem_cache_alloc_noprof+0x2a0/0x5f0 [ 821.282725][ C1] ? kmem_cache_alloc_noprof+0x150/0x5f0 [ 821.288395][ C1] ? vm_area_dup+0x28/0x670 [ 821.292936][ C1] ? vm_area_dup+0x28/0x670 [ 821.297592][ C1] vm_area_dup+0x28/0x670 [ 821.301978][ C1] ? __split_vma+0x1c6/0xa50 [ 821.306616][ C1] __split_vma+0x1dc/0xa50 [ 821.311075][ C1] ? __pfx___split_vma+0x10/0x10 [ 821.316063][ C1] vma_modify+0x93a/0x1c70 [ 821.320536][ C1] vma_modify_flags+0x24b/0x330 [ 821.325445][ C1] ? __pfx_vma_modify_flags+0x10/0x10 [ 821.330882][ C1] ? rcu_is_watching+0x15/0xb0 [ 821.335694][ C1] ? percpu_counter_add_batch+0xec/0x1d0 [ 821.341371][ C1] ? __vm_enough_memory+0x11a/0x380 [ 821.346615][ C1] mprotect_fixup+0x624/0xb10 [ 821.351341][ C1] ? __pfx_mprotect_fixup+0x10/0x10 [ 821.356616][ C1] ? mas_next_slot+0xc91/0xd70 [ 821.361434][ C1] ? apparmor_file_mprotect+0x1d0/0x400 [ 821.367020][ C1] ? security_file_mprotect+0x1a/0x290 [ 821.372523][ C1] do_mprotect_pkey+0x9d3/0xcd0 [ 821.377435][ C1] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 821.382847][ C1] ? vm_mmap_pgoff+0x31c/0x4e0 [ 821.387665][ C1] ? vm_mmap_pgoff+0x35a/0x4e0 [ 821.392479][ C1] ? __pfx___se_sys_futex_time32+0x10/0x10 [ 821.398318][ C1] ? rcu_is_watching+0x15/0xb0 [ 821.403131][ C1] __ia32_sys_mprotect+0x7f/0x90 [ 821.408112][ C1] __do_fast_syscall_32+0x23e/0x6f0 [ 821.413350][ C1] ? do_fast_syscall_32+0x33/0x70 [ 821.418413][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 821.423649][ C1] ? irqentry_exit+0x10f/0x8f0 [ 821.428454][ C1] ? trace_irq_disable+0x3b/0x140 [ 821.433519][ C1] do_fast_syscall_32+0x33/0x70 [ 821.438412][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 821.444782][ C1] RIP: 0023:0xf701f0ec [ 821.448882][ C1] RSP: 002b:00000000f753f9b8 EFLAGS: 00000206 ORIG_RAX: 000000000000007d [ 821.457357][ C1] RAX: ffffffffffffffda RBX: 00000000f53ac000 RCX: 0000000000020000 [ 821.465388][ C1] RDX: 0000000000000003 RSI: 0000000000001000 RDI: 0000000000021000 [ 821.473388][ C1] RBP: 00000000f53cbb40 R08: 0000000000000000 R09: 0000000000000000 [ 821.481392][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 821.489390][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 821.497412][ C1] [ 821.500476][ C1] rcu: rcu_preempt kthread starved for 2012 jiffies! g84821 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 821.511612][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 821.521610][ C1] rcu: RCU grace-period kthread stack dump: [ 821.527526][ C1] task:rcu_preempt state:R running task stack:27496 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 821.541069][ C1] Call Trace: [ 821.544380][ C1] [ 821.547346][ C1] __schedule+0x17d9/0x56c0 [ 821.551915][ C1] ? __pfx___schedule+0x10/0x10 [ 821.556811][ C1] ? schedule+0x90/0x2b0 [ 821.561090][ C1] schedule+0x164/0x2b0 [ 821.565288][ C1] schedule_timeout+0x152/0x2c0 [ 821.570170][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 821.575588][ C1] ? __pfx_process_timeout+0x10/0x10 [ 821.580912][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 821.586755][ C1] ? prepare_to_swait_event+0x322/0x350 [ 821.592371][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 821.597274][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 821.603473][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 821.608793][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 821.614046][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 821.618674][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 821.623911][ C1] ? __kthread_parkme+0x71/0x1f0 [ 821.628883][ C1] ? __kthread_parkme+0x196/0x1f0 [ 821.633947][ C1] kthread+0x388/0x470 [ 821.638317][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 821.643557][ C1] ? __pfx_kthread+0x10/0x10 [ 821.648193][ C1] ret_from_fork+0x514/0xb70 [ 821.652823][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 821.657973][ C1] ? __switch_to+0xc89/0x1420 [ 821.662690][ C1] ? __pfx_kthread+0x10/0x10 [ 821.667320][ C1] ret_from_fork_asm+0x1a/0x30 [ 821.672142][ C1] [ 821.675183][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 821.681525][ C1] Sending NMI from CPU 1 to CPUs 0: [ 821.686780][ C0] NMI backtrace for cpu 0 [ 821.686801][ C0] CPU: 0 UID: 0 PID: 8123 Comm: kworker/u8:10 Tainted: G L syzkaller #0 PREEMPT(full) [ 821.686838][ C0] Tainted: [L]=SOFTLOCKUP [ 821.686847][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 821.686864][ C0] Workqueue: wg-kex-wg0 wg_packet_handshake_send_worker [ 821.686903][ C0] RIP: 0010:unwind_get_return_address+0x63/0x90 [ 821.686934][ C0] Code: 37 00 74 08 48 89 df e8 1b 1d bd 00 48 8b 3b e8 e3 e2 18 00 85 c0 74 14 43 80 3c 37 00 74 08 48 89 df e8 00 1d bd 00 48 8b 03 02 31 c0 5b 41 5e 41 5f e9 cf 37 5c 0a cc 89 d9 80 e1 07 80 c1 [ 821.686950][ C0] RSP: 0018:ffffc90000006be8 EFLAGS: 00000246 [ 821.686965][ C0] RAX: ffffffff89a538fe RBX: ffffc90000006c50 RCX: 0000000000000100 [ 821.686978][ C0] RDX: 0000000000000001 RSI: ffffffff8e4ad94a RDI: ffffffff89a538fe [ 821.686991][ C0] RBP: ffffc90000006c90 R08: ffffc90000006e70 R09: 0000000000000000 [ 821.687004][ C0] R10: ffffc90000006c58 R11: fffff52000000d8d R12: ffff8880324c3e00 [ 821.687017][ C0] R13: dffffc0000000000 R14: dffffc0000000000 R15: 1ffff92000000d8a [ 821.687030][ C0] FS: 0000000000000000(0000) GS:ffff888124f55000(0000) knlGS:0000000000000000 [ 821.687051][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 821.687063][ C0] CR2: 00000000f2ffefff CR3: 00000000350fc000 CR4: 00000000003526f0 [ 821.687079][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 821.687090][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 821.687103][ C0] Call Trace: [ 821.687109][ C0] [ 821.687117][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 821.687139][ C0] arch_stack_walk+0xfb/0x150 [ 821.687169][ C0] ? dst_init+0xbe/0x470 [ 821.687192][ C0] stack_trace_save+0xa9/0x100 [ 821.687211][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 821.687231][ C0] ? ref_tracker_alloc+0x15b/0x4b0 [ 821.687256][ C0] ref_tracker_alloc+0x1b0/0x4b0 [ 821.687278][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 821.687307][ C0] ? kmem_cache_alloc_noprof+0x308/0x5f0 [ 821.687329][ C0] dst_init+0xbe/0x470 [ 821.687348][ C0] ? dst_alloc+0x112/0x170 [ 821.687369][ C0] dst_alloc+0x12a/0x170 [ 821.687392][ C0] ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 821.687417][ C0] ? ip_route_output_key_hash+0xd8/0x2a0 [ 821.687438][ C0] ip_route_output_key_hash+0x18d/0x2a0 [ 821.687458][ C0] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 821.687479][ C0] ? lock_acquire+0x106/0x350 [ 821.687507][ C0] ip_route_output_flow+0x2a/0x150 [ 821.687523][ C0] ? ip_route_me_harder+0x74b/0xfe0 [ 821.687542][ C0] ip_route_me_harder+0x762/0xfe0 [ 821.687572][ C0] ? __pfx_ip_route_me_harder+0x10/0x10 [ 821.687592][ C0] ? kmem_cache_alloc_node_noprof+0x181/0x610 [ 821.687618][ C0] ? __cookie_v4_init_sequence+0x273/0x510 [ 821.687641][ C0] ? local_lock_release+0x9c/0x160 [ 821.687671][ C0] synproxy_send_tcp+0x347/0x670 [ 821.687698][ C0] synproxy_send_client_synack+0x89b/0xde0 [ 821.687729][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 821.687752][ C0] ? nft_xfrm_get_dump+0xf8/0x2a0 [ 821.687777][ C0] ? synproxy_pernet+0x45/0x270 [ 821.687805][ C0] nft_synproxy_eval_v4+0x362/0x4e0 [ 821.687833][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 821.687860][ C0] ? nf_ip_checksum+0x13c/0x510 [ 821.687889][ C0] nft_synproxy_do_eval+0x335/0x550 [ 821.687915][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 821.687941][ C0] ? __ip_vs_conn_in_get+0xa6/0x10f0 [ 821.687962][ C0] ? __pfx___ip_vs_conn_in_get+0x10/0x10 [ 821.687985][ C0] nft_do_chain+0x48d/0x1b10 [ 821.688024][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 821.688058][ C0] ? __pfx_ip_vs_fill_iph_skb_off+0x10/0x10 [ 821.688097][ C0] nft_do_chain_inet+0x360/0x4b0 [ 821.688125][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 821.688154][ C0] ? NF_HOOK+0x9e/0x3c0 [ 821.688178][ C0] ? NF_HOOK+0x9e/0x3c0 [ 821.688201][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 821.688227][ C0] nf_hook_slow+0xc5/0x220 [ 821.688252][ C0] NF_HOOK+0x21f/0x3c0 [ 821.688276][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 821.688300][ C0] ? NF_HOOK+0x9e/0x3c0 [ 821.688323][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 821.688347][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 821.688375][ C0] ? ip_local_deliver+0x113/0x190 [ 821.688399][ C0] NF_HOOK+0x336/0x3c0 [ 821.688424][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 821.688447][ C0] ? NF_HOOK+0x9e/0x3c0 [ 821.688469][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 821.688494][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 821.688517][ C0] ? ip_rcv_core+0x88d/0xd50 [ 821.688542][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 821.688566][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 821.688590][ C0] process_backlog+0xa34/0x1860 [ 821.688618][ C0] ? process_backlog+0x3c3/0x1860 [ 821.688650][ C0] __napi_poll+0xaa/0x330 [ 821.688675][ C0] net_rx_action+0x61d/0xf50 [ 821.688707][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 821.688737][ C0] ? sched_balance_domains+0x770/0x880 [ 821.688765][ C0] handle_softirqs+0x225/0x840 [ 821.688785][ C0] ? do_softirq+0x76/0xd0 [ 821.688805][ C0] ? kernel_fpu_end+0x62/0x80 [ 821.688823][ C0] do_softirq+0x76/0xd0 [ 821.688840][ C0] [ 821.688846][ C0] [ 821.688852][ C0] __local_bh_enable_ip+0xf8/0x130 [ 821.688871][ C0] blake2s_compress+0xfa/0x1c00 [ 821.688897][ C0] ? __asan_memset+0x22/0x50 [ 821.688916][ C0] ? encode_point+0x8346/0x84b0 [ 821.688937][ C0] ? __pfx_encode_point+0x10/0x10 [ 821.688953][ C0] ? kernel_fpu_begin_mask+0x2b8/0x380 [ 821.688976][ C0] ? __pfx_blake2s_compress+0x10/0x10 [ 821.689001][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 821.689023][ C0] ? kernel_fpu_end+0x62/0x80 [ 821.689057][ C0] blake2s_update+0x140/0x450 [ 821.689085][ C0] hmac+0x1f4/0x3b0 [ 821.689107][ C0] ? __pfx_hmac+0x10/0x10 [ 821.689148][ C0] kdf+0x12d/0x290 [ 821.689171][ C0] ? __pfx_kdf+0x10/0x10 [ 821.689204][ C0] wg_noise_handshake_create_initiation+0x29e/0x810 [ 821.689230][ C0] ? __pfx_wg_noise_handshake_create_initiation+0x10/0x10 [ 821.689255][ C0] ? __lock_acquire+0x683/0x2cf0 [ 821.689279][ C0] ? __lock_acquire+0x683/0x2cf0 [ 821.689306][ C0] ? __lock_acquire+0x683/0x2cf0 [ 821.689331][ C0] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 821.689357][ C0] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 821.689382][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 821.689403][ C0] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 821.689425][ C0] ? ktime_get_coarse_with_offset+0x102/0x150 [ 821.689449][ C0] wg_packet_handshake_send_worker+0x18c/0x370 [ 821.689478][ C0] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 821.689505][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 821.689533][ C0] ? rcu_is_watching+0x15/0xb0 [ 821.689561][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 821.689580][ C0] process_scheduled_works+0xa8e/0x14e0 [ 821.689617][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 821.689639][ C0] ? assign_work+0x3cf/0x5d0 [ 821.689659][ C0] worker_thread+0xa47/0xfb0 [ 821.689685][ C0] ? __kthread_parkme+0x71/0x1f0 [ 821.689710][ C0] kthread+0x388/0x470 [ 821.689732][ C0] ? __pfx_worker_thread+0x10/0x10 [ 821.689750][ C0] ? __pfx_kthread+0x10/0x10 [ 821.689773][ C0] ret_from_fork+0x514/0xb70 [ 821.689798][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 821.689821][ C0] ? __switch_to+0xc89/0x1420 [ 821.689842][ C0] ? __pfx_kthread+0x10/0x10 [ 821.689866][ C0] ret_from_fork_asm+0x1a/0x30 [ 821.689899][ C0]