last executing test programs: 2m43.359301224s ago: executing program 3 (id=2523): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000001000050400f000"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e31"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 2m43.041798038s ago: executing program 3 (id=2525): userfaultfd(0x801) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = timerfd_create(0x0, 0x0) timerfd_gettime(r0, &(0x7f0000000000)) 2m42.913129998s ago: executing program 3 (id=2526): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r1) 2m42.595804112s ago: executing program 3 (id=2530): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) io_setup(0x6, &(0x7f0000001380)=0x0) syz_open_dev$dvb_frontend(&(0x7f0000000200), 0x0, 0xc1) (async) syz_open_dev$dvb_frontend(&(0x7f0000000200), 0x0, 0xc1) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r4, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, r5}]) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x0, r3}) close_range(r0, 0xffffffffffffffff, 0x0) 2m42.132892174s ago: executing program 3 (id=2532): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x67a, 0x6, 0xf3b8, 0x0, 0x1000, 0x400, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x0, 0x3, 0x4], 0xeeee8000, 0x400}) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$PTP_EXTTS_REQUEST(r1, 0x40103d02, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)={{0xeeee8000, 0x25d800, 0xc, 0x6, 0x4, 0xa, 0x3, 0xa, 0x0, 0x1, 0x3, 0x3}, {0xa000, 0x1000, 0xe, 0x17, 0x1, 0x8, 0x3, 0x8, 0x0, 0x46, 0x6}, {0x1, 0x315a4c100da1da58, 0xb, 0xf1, 0x5, 0xff, 0xc3, 0x6, 0x3, 0x6, 0x4c, 0x3}, {0x3000, 0x4000, 0x1a, 0xc, 0x7f, 0x6, 0x8, 0x7f, 0x9, 0x2, 0xf, 0x6}, {0x9000, 0x8000000, 0x8, 0xd, 0x59, 0x2d, 0x5, 0xc, 0xfc, 0x0, 0x3, 0xe5}, {0x2, 0x8092000, 0x8, 0xbd, 0x6, 0x7, 0x12, 0x1, 0xbf, 0x18, 0x2, 0x4}, {0x1, 0x1, 0xc, 0x9, 0x0, 0xf, 0x10, 0x3, 0x4, 0x0, 0x80, 0x9}, {0x26000, 0xffff, 0x10, 0x4, 0x3, 0x3, 0x0, 0xf9, 0x1, 0xfc, 0x0, 0xfe}, {0x4, 0xedd8}, {0xffff1000, 0x17}, 0x4004000f, 0x0, 0xd000, 0x100, 0x100000002, 0x0, 0xdddd1000, [0x5, 0x3, 0x4000000000000009, 0x7]}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a120000140000006c07010033d43afffe800000000040000000000000000010ff02000000000000000000000000000189"], 0x340a) 2m41.849089342s ago: executing program 3 (id=2533): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000405a04105201010102030109022000010100803209040000020806f50007058102000200070502020002"], 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0xfffffffffffffffe, 0x101301) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000000)={0xa0, 0x6, 0x321, 0x3, 0x0, 0x101, 0x0}) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$can_bcm(0x1d, 0x2, 0x2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x10, 0x80000, 0x7c) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd26, 0x8000007, {0x0, 0x0, 0x0, r8, {0x0, 0xe}, {}, {0x1, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7f, 0x1, 0x8001}, {0x4, 0x6a6, 0xffff, 0x5, 0x3, 0x2}}}, @TCF_EM_CONTAINER={0x10, 0x2, 0x0, 0x0, {{0xffff, 0x0, 0x7540}, '\"'}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) connect$can_bcm(r4, &(0x7f0000000080)={0x1d, r8}, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x80) sendmsg$can_bcm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYRESOCT=r9, @ANYRES64=0x77359400, @ANYRES16=r9, @ANYRES64=r0, @ANYRESOCT=r2, @ANYRESOCT], 0x48}}, 0x40040) sendmsg$can_bcm(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r9}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r4], 0x48}}, 0x0) syz_usb_ep_read(r0, 0x2, 0x28, &(0x7f0000000100)=""/8) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r6) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000700)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="88000000", @ANYRES16=r10, @ANYBLOB="20002dbd7000ffdbdf250c0000002400028006000f00ff01000008000600400000000800050006000000080006000300000038000000000000010800010000000000080003000200000008000500ffffffff08000500e0000002080005000900000008000500005816c9e27ba38b3a49f32f8cf800e61b0800040003000000"], 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x14) r11 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r11, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r12, &(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r12, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) connect$inet(r12, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r12, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) 2m26.693723166s ago: executing program 32 (id=2533): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000405a04105201010102030109022000010100803209040000020806f50007058102000200070502020002"], 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0xfffffffffffffffe, 0x101301) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000000)={0xa0, 0x6, 0x321, 0x3, 0x0, 0x101, 0x0}) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$can_bcm(0x1d, 0x2, 0x2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x10, 0x80000, 0x7c) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd26, 0x8000007, {0x0, 0x0, 0x0, r8, {0x0, 0xe}, {}, {0x1, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7f, 0x1, 0x8001}, {0x4, 0x6a6, 0xffff, 0x5, 0x3, 0x2}}}, @TCF_EM_CONTAINER={0x10, 0x2, 0x0, 0x0, {{0xffff, 0x0, 0x7540}, '\"'}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) connect$can_bcm(r4, &(0x7f0000000080)={0x1d, r8}, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x80) sendmsg$can_bcm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYRESOCT=r9, @ANYRES64=0x77359400, @ANYRES16=r9, @ANYRES64=r0, @ANYRESOCT=r2, @ANYRESOCT], 0x48}}, 0x40040) sendmsg$can_bcm(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r9}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r4], 0x48}}, 0x0) syz_usb_ep_read(r0, 0x2, 0x28, &(0x7f0000000100)=""/8) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r6) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000700)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="88000000", @ANYRES16=r10, @ANYBLOB="20002dbd7000ffdbdf250c0000002400028006000f00ff01000008000600400000000800050006000000080006000300000038000000000000010800010000000000080003000200000008000500ffffffff08000500e0000002080005000900000008000500005816c9e27ba38b3a49f32f8cf800e61b0800040003000000"], 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x14) r11 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r11, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r12, &(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r12, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) connect$inet(r12, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r12, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) 17.612391924s ago: executing program 4 (id=3118): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f00000009c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000980)={&(0x7f0000000740)={0x210, 0x13, 0x1, 0x5, 0x70bd2c, 0x25dfdbff, {0xa, 0x0, 0x9}, [@generic="1e4843c3038b5f6aa2ff0ac81975861a9e463df8bc30975eefa565258af10814db29503b00eeaa4bcf1b126e0674a8daef531faa8a779a8949d2b03591607ba6580eca87eefef79e3bdad1a5084783f0c5c7f3ef9ea267a48374537b72fd86e8cf2983aa527c7ffda7894d69", @typed={0x8, 0x38, 0x0, 0x0, @ipv4=@empty}, @generic="abb8f5f5c052fcb7fb0b803b85a480c367dc98e3d055e82142e38ffc13304a824c24819ae6b79151a8a874e04dd4c2d7fea87fc5afa685a9e40e96e5e0f8c8ff5d838289583fa9e501f8b8ff9ac3cb3d5c8e7d111f3d3e96c77061fbf5674d0ca962930241c5b4747aaea23139df498dcde345643c22538bff6e038b90537e3e149109c2930e628f2118d223cf341ccaf1f78588aaa0c55398867e96e7217c524122704c5c7ac393875114fea6a9a9c580f6684ab1f8e8e2b1e5dddae49cefd4eda37cac2c86e2450810e01049f2dc1b0aecc5a64d502ab4af03a3b83e6eb32d10fc2e1cab57f1fbd63ac21ab9bf3bb05ba9c1fcb5ee3f54", @nested={0x20, 0xef, 0x0, 0x1, [@nested={0x4, 0x23}, @nested={0x4, 0x61}, @typed={0x14, 0x56, 0x0, 0x0, @ipv6=@mcast1}]}, @generic="a66657b8a847890f28bdc9028febb3dbfb2cdaef021ff0f153b51678e0aedf0be46b7890411ea629257aee35a1d73242c029b2937ac11d80a776f1dc217d962becce9b190cce5182af783fec6b2814a1c0d312c5ffb1e1421fd458c1f87c30f28514c7df7cae908bc51f143a0adc"]}, 0x210}, 0x1, 0x0, 0x0, 0x4004080}, 0x20000000) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8002) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[], 0xc8}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0xfffffffc, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r4, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast2}}}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}}, 0x800) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f00000000c0)='./file2\x00', 0x8000, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'pim6reg1\x00', &(0x7f0000000540)=@ethtool_modinfo={0x42, 0x101, 0x9}}) removexattr(&(0x7f0000000280)='./file2\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="74c3eaf56b8957fe42990945b79ab1108023af03ede4eed4b81e0166e43ea55e64053b6f035594d4c4e222238eea47a2f148ea975b92a14619ad6eb04b319bfab69ed6da1e423378be0f5d8601575bb8072aec5aba6156542f29"]) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x8008800) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000007, 0x12, r6, 0x5a83e000) 11.264542139s ago: executing program 4 (id=3123): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aa", 0x21}], 0x1}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) 11.043785233s ago: executing program 4 (id=3124): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b24d, 0x11a20}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_to_hsr\x00'}, @IFLA_VFINFO_LIST={0x4}, @IFLA_LINKMODE={0x5, 0x11, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0xc1}, 0x60) 10.840418257s ago: executing program 4 (id=3126): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'lo\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100003040300000000000007fff85500", @ANYRES32=r1, @ANYBLOB="000000006f0018000500100002000020080040"], 0x30}, 0x1, 0x0, 0x0, 0x2000c000}, 0x40000) 10.65206473s ago: executing program 4 (id=3128): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0xa, 0x4000000000000ffc, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "6752370e00000000ffff00", [0x1f43b3c2, 0x9]}}) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa"], 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x10c000) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x7) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) ioctl$EVIOCGMASK(r1, 0x80104592, 0x0) ioctl$PPPIOCGIDLE64(r0, 0x8010743f, &(0x7f0000000140)) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x510, 0x1f0, 0x0, 0x148, 0x1f0, 0x148, 0x478, 0x240, 0x240, 0x478, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0xff000000, 'ip6tnl0\x00', 'wlan1\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0x190, 0x1f0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xffffff00, 0xffffff00, 0x0, 0xffffff00], 0x4e22, 0x4e22, 0x4e20, 0x4e23, 0x1d, 0x2, 0x5f4a, 0x100, 0x2}}}, {{@ip={@remote, @multicast1, 0xff000000, 0xffffff00, 'wlan0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x260, 0x288, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x9, 0x1, 0x1, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x8000000, 0x1, 0x1, 'syz1\x00', 0x5}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(0xffffffffffffffff, 0x1) r2 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, 0x0, 0x2}) 10.32084033s ago: executing program 4 (id=3130): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) lsm_get_self_attr(0x64, 0x0, 0x0, 0x0) r0 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newsa={0x14c, 0x10, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@empty}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x100}, {}, 0x0, 0x0, 0xa, 0x1}, [@coaddr={0x14, 0xe, @in=@empty}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x14c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$lan78xx(r0, &(0x7f0000000400)={0x14, &(0x7f0000000080)={0x20, 0x8, 0xd0, {0xd0, 0xf, "168133f9b99327e2ce7b99bb6facbdcb3c2f290634c40a0cadd67afa1369904c715705b8b92f9a16b94108b07da7288f435125917029a0c471581793e750bd0be4c22a03d0a7b1712aa90483f6f3a7380ec48249a5f65e6401fcd8cfe49727b4c40cc82157145dfaaab8bdf1248630a672e32e28b266ae50758b1d72ea145dadbec1843f468f541812daff511748f918f460fe9d171d277532fa11a76b9ce4ae2fdf34f2b8e748d68f875a0d5bf06b8d641bf17f57db8042d3160d68f048706561743863ec4ee8e1aa6fd3fc56c2"}}, 0x0}, &(0x7f0000000680)={0x34, &(0x7f0000000440)={0x40, 0x14, 0xd7, "d8f1404fc363e3661a5f530f43ae6a456fbed2c09aaf3759cce1ea203efccf82ce2bc500574b27799d8089637fa104e7750e139275fc410b9423df68055c45ee3e377b752ce611608629cb9fad6d7a319050c12bfb9f0d07a527b7c42d443aee6b1b8fa8079574a92f89ec4cea32bf515b436a582d3250aedf33537287ce8f980790eb30511f8969d5a866204a22de4c9817d4379c3477630e00cf3bc000da9e5abece0e3e52ef47759a664f31dcf9d00a9b5b5342b14dedb4048210f1d6d6f82d417f70228d3fe580b1ab57d5609fd76517d533909bf2"}, 0x0, &(0x7f0000000580)={0x0, 0x8, 0x1, 0xfe}, &(0x7f00000005c0)={0xc0, 0xa1, 0x4, 0x1}, &(0x7f0000000600)={0x40, 0xa0, 0x4, 0x7}, &(0x7f0000000640)={0xc0, 0xa2, 0x2f, "bd0f8801effd9f279179f9686369a28e407eae4b840124308f3dfcadef229736ad2765e03eea43eb37f772770e9016"}}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, r3, 0x1, 0x0, 0x0, {0x27}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x20000040) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000180)=ANY=[@ANYRESOCT=r2, @ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$can_bcm(0x1d, 0x2, 0x2) r6 = socket$inet6_udp(0xa, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prlimit64(0x0, 0x7, 0x0, &(0x7f0000000140)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000700)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000800)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', r7, 0x29, 0x0, 0xb, 0x0, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x7, 0x9, 0xd}}) ioctl$XFS_IOC_START_COMMIT(r5, 0x80585882, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x101}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r8, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r9, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f00000007c0)={0x28, 0x2, r9, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x9}) getsockopt$sock_buf(r4, 0x1, 0x3c, &(0x7f0000001440)=""/132, &(0x7f0000001500)=0x84) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.740515572s ago: executing program 2 (id=3134): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 8.286457963s ago: executing program 2 (id=3136): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = fsopen(&(0x7f00000029c0)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000025000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x268, 0x18, 0xa01, 0xfffffffc, 0x0, {0x8a}, [@typed={0x5, 0x10a, 0x0, 0x0, @str='\x00'}, @generic="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", @typed={0x4, 0xcf}, @nested={0x11d, 0x8f, 0x0, 0x1, [@nested={0xc, 0xba, 0x0, 0x1, [@typed={0x7, 0xfd, 0x0, 0x0, @str='\x00\x00\x00'}]}, @generic="d843ef9ad865604bf3bbeb86af9a2178fc637b", @generic="09f5ca3b5cc38f257a15cc10833fb47c887544e27f511a088e848e5fe31fe73e450ba61635e82a5b3cd1c8ef670182043894e0b881d0", @generic="1b783da7d6fae62307372e38ea0abe8ca1a820ca392116899a297438f8ecef985928229b180f5191783fd75bb882238bb034308e3ae9c4f51d5f0c78bb01526020ba39c006489ac39b3a58e522ea9ffc807adbf04084b8494dc5b25e0c1dab4eba6d7b7370597986967244df35ee30f9d4b6d52df6a6a36461c0e036e69bfa00bc5c1718e0051d4a563f1ad507ca70be9e01593489640f8a97e4a7626547fd59cf4146", @typed={0x8, 0xee, 0x0, 0x0, @fd}, @generic="8339f1485269d76c25260027b8463bc9af906f7255f4d326a9"]}, @generic="eef114bde6497f1594d0a1f7bf8402d89911beed41"]}, 0x268}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7.586675338s ago: executing program 2 (id=3138): socket(0x2b, 0x1, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f2e, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0xe) close_range(r0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000380)=@base={0x14, 0x4, 0x8, 0x6, 0x414, 0x1}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) sched_setattr(r5, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x52, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xfff, 0x3ff, 0x3, 0x19, 0x6, 0x1f, 0x2}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x803}, 0x20004004) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 6.641369923s ago: executing program 1 (id=3140): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba12", 0x11}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/89, 0x59}], 0x1}, 0x0) 6.421141241s ago: executing program 1 (id=3141): openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xffffffffffffff1d) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) 6.018802699s ago: executing program 0 (id=3144): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="011d9b8c2d3cd583197847c4660000000300"/32], 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={0xffffffffffffffff, r0}, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000280)={r0, &(0x7f0000000180)='\x00', 0x440100, &(0x7f00000001c0)={@align=0x6, {0xff, 0x5, 0x7fffffff, 0x10000}}, 0xc, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0x5}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x101002, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) signalfd4(0xffffffffffffffff, &(0x7f0000001740)={[0x6]}, 0x8, 0x800) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r5, @ANYBLOB="10007d8005", @ANYRES8=0x0, @ANYRES32=r3], 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) socket$nl_route(0x10, 0x3, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r6 = landlock_create_ruleset(&(0x7f0000000080)={0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) r7 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r7, 0x40405514, &(0x7f00000003c0)={0x9, 0x2, 0xfff, 0x5, '\x00', 0x13}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000680)={{0x9, 0x5, 0xf8, 0x5, 'syz1\x00'}, 0x0, [0x7f, 0x4, 0x400, 0x2, 0x9, 0x3, 0x3, 0x5, 0x3, 0x7fff, 0x0, 0x7, 0xd11c, 0x0, 0x29, 0x1eff400000000000, 0xc127, 0x10000000003, 0x400, 0xa7e7, 0x0, 0x28, 0x22, 0x4, 0x2b, 0x0, 0x100000000, 0x10, 0x5, 0x3, 0x2, 0x3, 0xffffffff, 0xe6, 0x90, 0x7fffffff, 0x3, 0xa, 0x5, 0x6, 0xb5a, 0x0, 0x2, 0x0, 0x80, 0xf, 0x8000000000000001, 0x0, 0xa, 0x5, 0xb40, 0x2, 0x3, 0x3, 0x71, 0x8, 0x1, 0x200000000, 0x0, 0xdc, 0x9, 0x3, 0x7fe, 0x4, 0x0, 0x8c, 0x1, 0x2, 0x7f, 0x2, 0x6, 0x3, 0x9, 0x1, 0x9, 0x3, 0x800, 0x5, 0x3, 0x4d9c, 0x2, 0xb, 0x80000001, 0x2, 0x54, 0x3c, 0x5, 0x4, 0x3, 0x7fffffff, 0x26c9, 0x9, 0x10001, 0x8, 0x400, 0xf, 0xfffffffffffffff6, 0x10001, 0x14, 0xffffffffffffffff, 0x6, 0x6, 0xcb26, 0xa, 0x100000001, 0x3, 0x7fffffffffffffff, 0x5, 0x0, 0xf2, 0x9, 0xffff, 0x5, 0x76, 0x8, 0x5, 0x1ff, 0x6, 0xffff, 0xbe6, 0x9, 0x3, 0x4, 0x5, 0x2, 0x401, 0x6, 0x5]}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 5.642639345s ago: executing program 5 (id=3145): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000024c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100f5000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000038000000030a01040000000000000000010000010900030073797a32000000000c00024000000000000000010900010073797a300000000054000000060a01040000000000000000010000000900010073797a310000000008000b40000000030c000640000000000000000314000480100001800b0001007470726f787900000900010073797a30"], 0x7904}, 0x1, 0x0, 0x0, 0x4041}, 0x0) 5.445861739s ago: executing program 5 (id=3146): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r1) (fail_nth: 2) 5.403565656s ago: executing program 0 (id=3147): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={r5, @in6={{0xa, 0x4e22, 0x6, @empty, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000000)={r5, @in6={{0xa, 0x4e23, 0x400, @private2, 0x4}}, 0x5b, 0x8002}, 0x90) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={r5}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000280)={0x3}, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x34, r7, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) sendmsg$L2TP_CMD_TUNNEL_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, r7, 0x325, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 4.959360189s ago: executing program 1 (id=3148): r0 = add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x1d8, 0xfffffffffffffffd) keyctl$get_keyring_id(0x0, r0, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r2, 0x1, 0x38, 0x0, &(0x7f0000000140)) r3 = socket$inet6(0xa, 0x3, 0xff) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000001740)={0x3, 0xfffffffd, 0x1, {0x0, @pix={0x3, 0x200, 0x7d7dc5a3, 0x9, 0x9, 0x7, 0x6, 0x4d, 0x1, 0x7, 0x1, 0x1}}, 0xff}) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r4 = socket(0xa, 0x3, 0xff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff, 0x0, 0x7, 0x2, 0x3f2}}) sendmsg$inet6(r4, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x2, 0x3, @mcast2}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000000)="6797f04cdb6f3395f1c922adb0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6c56d3c24", 0x5dc}], 0x1}, 0x30008b08) r5 = socket(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000014c0)={'batadv_slave_1\x00', 0x0}) r8 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r8, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x4, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xfffffdff, 0xffffffff, 0xffffffff, 0xfffffbff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x7, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4241, 0x0, 0x0, 0x1}]}) r9 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018105704da0700000000000109022400010000ba0009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022220000009523b31ce93ee907000000002990370900be0083000000000b09307a"], 0x0}, 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x14e040) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000001880)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001840)={&(0x7f0000001500)={0x50, r6, 0x248, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1c}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x44881}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70}, 0x94) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0xffe, 0x9}, 0x10) write(r5, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) futimesat(r1, 0x0, &(0x7f0000000100)={{0x0, 0x2710}, {0x77359400}}) r10 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_CONTROL(r10, 0xc0185500, &(0x7f0000000040)={0x40, 0x17, 0x4, 0x4, 0xecff, 0x5ff2, 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0x4c, 0x10, 0xd03, 0x70bc2d, 0x25dfdbfb, {0x0, 0x0, 0xff00, 0x0, 0x20, 0x203}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x1}, @IFLA_BOND_ARP_ALL_TARGETS={0x8}, @IFLA_BOND_PRIMARY={0x8}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24008011}, 0x16c3035550932880) 4.817783196s ago: executing program 0 (id=3149): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec000000210001000400000000000000fc020000000000000000000000000a01fe80000000000000000000000000003a00000000000000020a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100fc0000000000000000000400000000017f000001000000000000000000000000fc020000000000000000000000000001000000000000000000"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 4.702639579s ago: executing program 5 (id=3150): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000a00), 0x40, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xdfe5) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2c, r3, 0x301, 0x70bd29, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40006) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x73}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0xaf}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@rand_addr=0x64010101, 0x0, 0x32}, 0x0, @in=@private=0xa0100fe, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x1c) setsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f0000000140)=0x4, 0x4) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0xd4}}, 0x40880) 4.662738611s ago: executing program 2 (id=3151): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x2d, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsopen(0x0, 0x0) gettid() r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x3}}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, &(0x7f0000000140)={&(0x7f0000000780)=[0x447, 0x89b1, 0x9, 0x5, 0x7, 0x7, 0x5, 0x4, 0x990, 0x1000, 0x3, 0x8000, 0x7, 0x1, 0x0, 0x1, 0x46f4, 0x5, 0x5, 0x4, 0x5, 0x4b, 0x1, 0x1, 0xa6ff, 0xffffffff, 0x1ff, 0xcdf9, 0x9, 0x7, 0x2, 0x3, 0x1, 0x1, 0x3, 0x1000, 0xfffffffc, 0x7, 0xc96, 0xb92, 0x3, 0x9, 0x9, 0x5, 0x9, 0x2, 0x9, 0x9, 0x2, 0xcab, 0x7, 0xfffff111, 0x7, 0x9, 0x3ff, 0x2, 0x8001, 0x7, 0x8, 0x7, 0xb32, 0x3, 0x5, 0x0, 0x58b7, 0x2, 0x5, 0xe4, 0x5, 0x10000, 0x8, 0xfffffffc, 0x6, 0xbc4, 0x9, 0x2, 0x8000, 0x101, 0x8, 0xb714, 0x6, 0x8, 0x101, 0x92a, 0x4, 0x0, 0xfff, 0x32b, 0x3, 0x9, 0x8, 0x0, 0x0, 0x0, 0x7fffffff, 0x8, 0x5, 0x4, 0x3, 0x7, 0x401, 0x9, 0x6, 0x8, 0x4, 0x38, 0x0, 0x4, 0xac0, 0xd3, 0xff, 0x0, 0xfff, 0x0, 0x2, 0x4f, 0x3, 0x3, 0xfffffffe, 0xffffffff, 0x6, 0x4, 0x755, 0x3, 0x5, 0x65f5, 0xfffff801, 0x4, 0x0, 0x3, 0x8, 0xd86, 0xffffffff, 0x7fffffff, 0xff, 0x0, 0x8, 0x3, 0x3, 0x8, 0x8, 0x8, 0x3d, 0x8, 0xf, 0x6, 0x7, 0xa1, 0x5, 0x5ef5, 0x5, 0x7, 0x6, 0x0, 0xe, 0x63, 0x0, 0x1, 0xa7, 0x3, 0x40, 0x2, 0x3, 0x1, 0xffff0001, 0x40800000, 0x95, 0x8000, 0x0, 0x4c0, 0x5, 0xdfd, 0x4, 0x5, 0x9, 0x51eb, 0x9, 0x7, 0x1e38, 0x8, 0xffff047c, 0xd, 0x0, 0x2, 0x7b, 0x6, 0xffff, 0x5, 0xfffffffe, 0x2, 0x9, 0x3d, 0x4, 0x8, 0xd, 0x7fffffff, 0x4, 0xffff, 0x22, 0x6, 0x8001, 0x6, 0x5, 0x0, 0x7, 0x400, 0x6, 0x5, 0x401, 0x8, 0x9, 0x7, 0x7, 0x9, 0x1, 0x9350, 0x66, 0x9, 0x4c3, 0x1, 0x2, 0x6, 0x5, 0x5, 0x0, 0x5, 0xffffffff, 0x174, 0x8e, 0x9, 0x9, 0x9fe3, 0xbc99, 0x7, 0xd700, 0x401, 0x7, 0x4, 0x9, 0xa, 0x101, 0x800, 0xfffffffc, 0x4f49, 0x2, 0x1, 0x6, 0x1, 0xb, 0x4, 0x5, 0x1000, 0x7, 0x400, 0x6, 0x100, 0x3ff, 0x0, 0x6, 0xffffffe6, 0x3, 0x7, 0x383, 0x40, 0x9, 0x6, 0x101, 0x9, 0x7, 0xf, 0x340000, 0x8c6, 0x62, 0x0, 0x3, 0x5, 0x2, 0x9, 0x9, 0xfffffffc, 0x7fff, 0x0, 0x7, 0x5, 0xff, 0x4, 0x5, 0x2b, 0xb32d, 0xfffffdab, 0x8, 0x9, 0x80000000, 0xf, 0x0, 0x8, 0x8, 0x1, 0xe3, 0xbcf6, 0x7, 0x8b9, 0x6b6, 0x7, 0x5, 0x3, 0x6, 0x1, 0x3ff, 0x401, 0xa40, 0xb, 0xfffffc01, 0x9, 0x2, 0x80, 0x9, 0x5, 0x4, 0x3ff, 0x7fffffff, 0x4, 0x6, 0x9, 0xc58, 0xc, 0x3, 0x10000, 0x4, 0x2, 0x7, 0x2, 0x6, 0xffff, 0x7, 0x5, 0xd, 0x5, 0x379, 0x6e9f, 0xe0fa, 0x1000, 0x7, 0x5, 0x8000, 0x4, 0x0, 0x7, 0xffffffff, 0x4, 0x5, 0x0, 0xfffff100, 0x7, 0x80000000, 0x491, 0x3, 0xd, 0x4, 0x101, 0x1, 0x613d, 0x101, 0xd, 0x1, 0x3ff, 0x0, 0xc, 0xfffffffc, 0x4, 0x198, 0x61, 0x1, 0x5, 0x0, 0x9, 0xf911, 0xb, 0xffffffff, 0x6, 0x5, 0x8, 0x3, 0x4, 0xffffffb5, 0x91c9, 0x4, 0x1, 0x200, 0xff, 0x1, 0x7, 0x3ff, 0xcb2a, 0x8001, 0x3, 0x700000, 0x3, 0x8, 0x9, 0x7fffffff, 0x7d17, 0x400, 0x9, 0xfffffffa, 0x8, 0x9, 0x8008, 0x2, 0x2, 0x5, 0x4, 0x595, 0x0, 0x9, 0x6, 0xfffffffd, 0x6, 0x5, 0x8, 0xc1d, 0x3, 0x3000, 0x7, 0xffffffff, 0x1, 0x30000000, 0xfffffff3, 0x7, 0x800, 0x10000, 0xfffffffd, 0xfffff816, 0x401, 0x7, 0x3, 0x388, 0x2, 0x7, 0xca1b, 0xf, 0x0, 0x7, 0x4, 0x8, 0x7, 0x80000000, 0x1, 0x3, 0x9, 0x9, 0x9, 0x747, 0xffffff61, 0x0, 0x8, 0x3, 0x2, 0x8, 0x1, 0xffffff11, 0x2, 0x1, 0x6, 0x9, 0x7ff, 0x2, 0x9, 0x4, 0x2, 0x8, 0x4, 0x2a8c, 0x3, 0x525d, 0x8, 0x4, 0x9, 0x2, 0xa, 0x2, 0x2, 0x15c, 0x1, 0xe34b, 0x7, 0x3, 0x150, 0x6, 0x101, 0x4, 0x0, 0x2c, 0xb, 0x4, 0x8, 0xfff, 0x56a, 0x4, 0xffffffff, 0xa4, 0x80000001, 0x8, 0x4, 0x676d, 0x81, 0x7, 0x4, 0x1, 0x3, 0x1, 0xed90, 0x0, 0x7, 0x100, 0x1, 0x4, 0xb, 0xf2, 0x0, 0x7, 0x80, 0xfffffff1, 0xfffff65b, 0x40, 0x400, 0x81, 0x5, 0x8000000, 0x3ff, 0x3ff, 0xe1, 0x7009, 0xfff, 0x0, 0xf0cf, 0xf8ab, 0x8, 0xb, 0x9, 0xfffffb54, 0x8, 0x8, 0x80000001, 0xfff, 0x7, 0x2, 0x7fffffff, 0xffffffff, 0x8, 0xfffffada, 0x40, 0x7d0, 0x5, 0x20000007, 0x7ff, 0x7ff, 0x5b5, 0x8, 0x1, 0x10000, 0x9, 0x3, 0x5, 0xfffffff8, 0x5, 0x3, 0x2, 0x3, 0x7, 0x5f3, 0x400, 0x1c00, 0x1, 0xfffffffb, 0x80200000, 0x9, 0x80, 0x3, 0x910, 0x8e8, 0x8, 0xf7b, 0x5, 0x79, 0x1, 0x7ff, 0x9, 0x8, 0x9, 0x401, 0x2, 0x7f, 0x2, 0x80000001, 0x1, 0x6, 0xd47, 0xca, 0x2, 0x100, 0x9, 0x0, 0x9, 0x5c1fc33e, 0x4, 0x0, 0xe, 0x8, 0x80000001, 0x2a1, 0x0, 0x106, 0xfffffff9, 0x4, 0x6, 0x3, 0x0, 0x20003200, 0x5, 0x892, 0x80000001, 0x4, 0x4, 0x40, 0xffffffff, 0x9, 0x887, 0xffffffff, 0x3, 0x1, 0x8, 0x18b348da, 0x1, 0x8, 0x9, 0x1, 0x2, 0x9, 0x5f05d22c, 0x9, 0x0, 0x2, 0x6, 0x8fe, 0x7ff, 0x7, 0x843f, 0x2, 0x7, 0xd575, 0x6, 0x8, 0x4, 0x6, 0x81, 0x7, 0x50000000, 0x6, 0x15, 0x8, 0xffd, 0x6, 0x10000, 0x3, 0x6, 0x749f4463, 0x4, 0x7c20c2c4, 0x2, 0x5, 0x4, 0xfffffffc, 0x5, 0x8, 0x2, 0x8, 0x7, 0x9, 0x8, 0x1, 0x8, 0x9, 0xfff, 0x1000, 0x8, 0x401, 0x1ecd, 0x4, 0x2, 0x3, 0x7b, 0x1, 0x4, 0x200, 0xff, 0x0, 0x3, 0x5, 0xa314, 0x3, 0x10001, 0x9, 0x3, 0x6, 0x7, 0x4, 0xbfb, 0x10000, 0x6, 0x6, 0x1ff, 0x3, 0x7, 0x0, 0x4, 0xff, 0x3, 0x80000000, 0x7, 0xff, 0xbe, 0x4, 0xfffffffe, 0xfffffffc, 0x9, 0x34, 0x3ff, 0x8, 0x5, 0x8, 0x3, 0x10000, 0x0, 0x4, 0x3, 0x9, 0x7, 0x46, 0x9, 0xffff, 0x81, 0x7, 0x2, 0x0, 0x73d, 0xd485, 0xff, 0x9, 0x3, 0x9, 0x6, 0x2, 0xdcc, 0x5e9a, 0xffff, 0x2, 0x9, 0xfffffffd, 0x7, 0xf, 0xfff, 0x4, 0x8, 0x4, 0x3cb, 0x4, 0x418, 0x10000, 0x7, 0x3, 0xa, 0x3b, 0x6, 0x47a, 0x1, 0x7fffffff, 0x7, 0x40, 0x6, 0x81, 0x7, 0x1ff, 0x8, 0x10, 0x9, 0x1, 0x9c, 0xf, 0x6, 0x101, 0x3, 0x9, 0x6, 0x8, 0x7fff, 0x4, 0x8, 0x1, 0xffff7fff, 0x1, 0x3, 0x38, 0xb2, 0x8, 0x2, 0x7, 0x2, 0x5, 0x166, 0x3, 0xe14a, 0x7, 0x4, 0x8, 0x7, 0x9, 0xffffffff, 0x6, 0x8, 0x2, 0xb6, 0x53c, 0x5, 0x5, 0xfffffff9, 0x3, 0x5, 0x8, 0x5, 0x1, 0x9, 0xffffff7f, 0x80000001, 0x5, 0x9, 0x2, 0x0, 0x9, 0x5, 0x4, 0xe4, 0x1, 0x0, 0x5, 0x0, 0xe7d7, 0x7f, 0x101, 0x10000, 0x5, 0xffffffff, 0x9, 0x8, 0xe44e, 0x2, 0x80000000, 0x4, 0x2, 0x1c0460d3, 0xfffffffe, 0x800, 0x8001, 0x1, 0x2, 0x9, 0xfffffff9, 0xa190, 0x81, 0x2, 0x8, 0x0, 0x86, 0x7, 0xb90, 0xcf, 0xf8e4, 0x0, 0xd, 0x7, 0x100, 0x8000, 0x478, 0x6, 0x1, 0xb57, 0x80000005, 0x7, 0x9655, 0x2, 0x0, 0xfffff5d7, 0x3, 0x9, 0x7, 0x6, 0x9, 0xe, 0x4, 0x7, 0x8000, 0x3, 0x2, 0x6, 0x6, 0xae86, 0x4, 0x7, 0x401, 0x8, 0xffffffff, 0x60b, 0x3, 0x2, 0xb, 0x1, 0x2aa, 0xffffbeff, 0x18, 0x2, 0x100, 0x7, 0xfffffffa, 0x6, 0x1, 0x4, 0x0, 0x3, 0x9, 0x401, 0x8, 0xffffffe0, 0x7fffffff, 0x0, 0x100, 0x8, 0x101, 0x10001, 0xfffffffc, 0x8, 0x7, 0x10001, 0x5a1, 0x4, 0x1, 0x4, 0x8, 0x7f, 0x3, 0x7, 0x7, 0xc8, 0xfff, 0x149, 0x0, 0x0, 0x717e17b5, 0x2, 0x5da47ea8, 0x4, 0x400, 0x6, 0x7, 0x25, 0xd, 0x788f, 0x6, 0x7f, 0x71, 0x1, 0x0, 0x6ccb, 0x6, 0x5, 0x9, 0xfffffa99, 0x1000, 0xffffffff, 0xb4, 0x9900000, 0xd, 0xfffffffb, 0x7, 0xc, 0xf55, 0x6d14e279, 0x6, 0x200005, 0x1, 0x3, 0x152358f9, 0x6, 0xf43, 0x81, 0x9da1, 0x0, 0x6, 0x7f, 0x8, 0x6, 0xa1f, 0x9, 0xfffffff7, 0x4, 0xf77f, 0x5, 0x3, 0xc2a, 0xffffffff, 0x6, 0x80c, 0x2, 0x13c, 0xae, 0x2, 0x3, 0xfffffff8, 0xa, 0x3, 0xffffffff, 0x7, 0x8, 0x6, 0x1b04e], 0x6, 0x400, 0x8}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="940100001e00ff0225bd700000000000010000007c0106"], 0x194}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'xfrm0\x00', 0x0}) r9 = socket(0x1e, 0x1, 0x0) connect$tipc(r9, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r10, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0x1}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x20000004) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f00000001c0)=ANY=[@ANYRES16=r6, @ANYRES64=r2], 0x3a) 4.50470269s ago: executing program 0 (id=3152): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f00000009c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000980)={&(0x7f0000000740)={0x210, 0x13, 0x1, 0x5, 0x70bd2c, 0x25dfdbff, {0xa, 0x0, 0x9}, [@generic="1e4843c3038b5f6aa2ff0ac81975861a9e463df8bc30975eefa565258af10814db29503b00eeaa4bcf1b126e0674a8daef531faa8a779a8949d2b03591607ba6580eca87eefef79e3bdad1a5084783f0c5c7f3ef9ea267a48374537b72fd86e8cf2983aa527c7ffda7894d69", @typed={0x8, 0x38, 0x0, 0x0, @ipv4=@empty}, @generic="abb8f5f5c052fcb7fb0b803b85a480c367dc98e3d055e82142e38ffc13304a824c24819ae6b79151a8a874e04dd4c2d7fea87fc5afa685a9e40e96e5e0f8c8ff5d838289583fa9e501f8b8ff9ac3cb3d5c8e7d111f3d3e96c77061fbf5674d0ca962930241c5b4747aaea23139df498dcde345643c22538bff6e038b90537e3e149109c2930e628f2118d223cf341ccaf1f78588aaa0c55398867e96e7217c524122704c5c7ac393875114fea6a9a9c580f6684ab1f8e8e2b1e5dddae49cefd4eda37cac2c86e2450810e01049f2dc1b0aecc5a64d502ab4af03a3b83e6eb32d10fc2e1cab57f1fbd63ac21ab9bf3bb05ba9c1fcb5ee3f54", @nested={0x20, 0xef, 0x0, 0x1, [@nested={0x4, 0x23}, @nested={0x4, 0x61}, @typed={0x14, 0x56, 0x0, 0x0, @ipv6=@mcast1}]}, @generic="a66657b8a847890f28bdc9028febb3dbfb2cdaef021ff0f153b51678e0aedf0be46b7890411ea629257aee35a1d73242c029b2937ac11d80a776f1dc217d962becce9b190cce5182af783fec6b2814a1c0d312c5ffb1e1421fd458c1f87c30f28514c7df7cae908bc51f143a0adc"]}, 0x210}, 0x1, 0x0, 0x0, 0x4004080}, 0x20000000) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8002) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[], 0xc8}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0xfffffffc, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r4, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast2}}}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}}, 0x800) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f00000000c0)='./file2\x00', 0x8000, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'pim6reg1\x00', &(0x7f0000000540)=@ethtool_modinfo={0x42, 0x101, 0x9}}) removexattr(&(0x7f0000000280)='./file2\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="74c3eaf56b8957fe42990945b79ab1108023af03ede4eed4b81e0166e43ea55e64053b6f035594d4c4e222238eea47a2f148ea975b92a14619ad6eb04b319bfab69ed6da1e423378be0f5d8601575bb8072aec5aba6156542f29"]) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x8008800) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000007, 0x12, r6, 0x5a83e000) 4.394171574s ago: executing program 5 (id=3153): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aa", 0x21}], 0x1}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) 3.866411178s ago: executing program 5 (id=3154): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0xa}, {}, {0xd, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r9 = dup(r7) syz_ublk_setup_queues(r9, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) syz_usb_connect(0x2, 0x24, &(0x7f0000000500)={{0x12, 0x1, 0x300, 0xb3, 0x7f, 0x37, 0x10, 0x4971, 0x8024, 0x7c2d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0xb, 0xc0, 0x5, "", [{{0x9, 0x4, 0x94, 0x3, 0x0, 0xff, 0x36, 0xb1, 0xa}}]}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) r10 = epoll_create(0x7ff40000) epoll_wait(r10, 0x0, 0x14e, 0xfffffffd) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = geteuid() r14 = socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB], 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008100)="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", 0x2000, &(0x7f0000000340)={&(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x5040a, 0x7fff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0x839352b8218490eb) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0xfffffffffffffc25, {0x3, 0x5, 0x0, {0xfffffffffffffffc, 0x8e, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4009, 0x6, r15, r16, 0x0, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000180)='./file0\x00', r15, r16) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20021, &(0x7f0000000680)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r13}, 0x2c, {'group_id', 0x3d, r16}, 0x2c, {[{@allow_other}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x400}}, {@blksize={'blksize', 0x3d, 0x600}}, {@default_permissions}], [{@fowner_gt={'fowner>', r17}}]}}) sendmsg$nl_route(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd2d, 0x25dfdbfc, {0xa, 0x0, 0x80, 0x0, 0x9, 0x0, 0x0, 0x3, 0x2801e}, [@FRA_SRC={0x14, 0x2, @private2}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e20, 0x4e23}}]}, 0x38}}, 0x480d0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5c000000100039040000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c0002"], 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r11, &(0x7f0000000000)={0x1}) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000000040)={0xf, 0x400000000000, 0x1000000, 0x1, 0x0, r0, &(0x7f0000000000)="0d32818e", 0x4}]) 1.720792302s ago: executing program 0 (id=3155): syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00003e4000/0x2000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000125000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f00000d6000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f00002d7000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1862, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000380)) socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000180)={0x12}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) splice(r4, 0x0, r3, &(0x7f0000000140)=0x8006, 0x4, 0x4) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000100)={0x28, 0x5, r2, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xc073}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r2, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa}) ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f0000000200)={0x28, 0x3, 0x0, r2, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000000)={0x28, 0x2, r2, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x100}) 1.65817423s ago: executing program 1 (id=3156): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x5, 0x5, 0x0, 0x7, 0x5, 0x0, 0x2, 0x100}, 0x20) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00040006"], 0x48}, 0x1, 0x1000000000000000, 0x0, 0x2c048040}, 0xe800) 1.125907557s ago: executing program 2 (id=3157): openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xffffffffffffff1d) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) 827.750414ms ago: executing program 5 (id=3158): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs2/custom0\x00', 0x2, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r1, 0x28) socket(0x10, 0x3, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000001, 0x4, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0xffffffffffffbb71, 0x420002) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0xfffffeaf, &(0x7f0000000340)}, 0x10) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) io_uring_enter(r2, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r3 = socket(0xa, 0x80805, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000002300)={'sit0\x00', &(0x7f00000021c0)={'syztnl2\x00', 0x0, 0x80, 0x7, 0xffffffff, 0x2, {{0x6, 0x4, 0x0, 0x3d, 0x18, 0x68, 0x0, 0x0, 0x29, 0x0, @local, @loopback, {[@timestamp_prespec={0x44, 0x4, 0xbd, 0x3, 0xe}]}}}}}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)="273eebfecb7c0e923301b61c42cb1d11f41d00bdab2a3d983b065a56", 0x1c}, {&(0x7f00000003c0)="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", 0x117}], 0x2) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1ff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1880762622185341, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r4, 0xc0045520, &(0x7f0000000040)=0x1) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000001c0)="07a2b0cebf5e75786f6d0e3c29d0d5432c3fb21e12bbca742e59b53c03da203a64bc722b81b93b9f", 0x28}], 0x1}}], 0x1, 0x4008004) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000000)={0x6}) 652.917232ms ago: executing program 0 (id=3159): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(r2, 0x5, &(0x7f0000000000)={0x0, 0x3, 0x4, 0x8000000000000001}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @local}}}], 0x20}, 0x8840) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="010000004c5050f18e0000000080ec6c", @ANYRES64=0x0, @ANYRES8=r3, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES32=r7, @ANYRESHEX=r1, @ANYRES64=r4, @ANYRESHEX=0x0], 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x800) r8 = getpgid(0x0) r9 = syz_pidfd_open(r8, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r9, 0xff04, 0x0) ioctl$EXT4_IOC_GETSTATE(r9, 0x40046629, &(0x7f0000000200)) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010329bd7000fbdbdf251c00000018000180140002006c6f00"/38], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40006) r11 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) syz_usb_control_io$hid(r11, 0x0, 0x0) syz_usb_control_io$hid(r11, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002222000000962313927b7c070c0000007e24591de11d47eadb132a76009b01f6216683"], 0x0}, 0x0) 442.712045ms ago: executing program 1 (id=3160): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="18010000", @ANYRES16=r1, @ANYBLOB="0100230100003402000014000000180007800c0003000001020304050607080002"], 0x118}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000240)={r4, 0x7, 0x3}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{0x0, 0x1}, [@TCA_NETEM_RATE={0x14, 0xe}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}]}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 94.244708ms ago: executing program 1 (id=3161): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0xc24f4000) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) mbind(&(0x7f000072d000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x7, 0x1) (async, rerun: 32) mbind(&(0x7f000058a000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x6, 0x3) (async, rerun: 32) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000567000/0x2000)=nil) (async) mbind(&(0x7f00000bd000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x400, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0xfefffffe, 0x2) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000fbc000/0x4000)=nil, 0x4000000004, &(0x7f0000000340)=[{0x10, 0x6, 0xfffffffffffffffc}], 0x1, 0xbff, 0x1a, 0x0, 0x8, 0x5f}) 0s ago: executing program 2 (id=3162): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000a00), 0x40, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xdfe5) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2c, r3, 0x301, 0x70bd29, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40006) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x73}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0xaf}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@rand_addr=0x64010101, 0x0, 0x32}, 0x0, @in=@private=0xa0100fe, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x1c) setsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f0000000140)=0x4, 0x4) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0xd4}}, 0x40880) kernel console output (not intermixed with test programs): usb 2-1: SerialNumber: syz [ 664.438142][ T5275] 8021q: adding VLAN 0 to HW filter on device eth1 [ 664.899924][T15378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.910443][T15378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.981351][T15381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 665.002203][T15381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 665.015159][T15381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 665.024355][ T5683] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 665.034867][T15381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 665.052557][ T6218] IPVS: stop unused estimator thread 0... [ 665.100340][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 665.200465][ T5683] usb 6-1: Using ep0 maxpacket: 16 [ 665.224088][ T5683] usb 6-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 665.265384][ T5683] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 665.299981][ T5683] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 665.323958][ T5683] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 665.364186][ T5683] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.388723][ T5683] usb 6-1: Product: syz [ 665.400072][ T5683] usb 6-1: Manufacturer: syz [ 665.416602][ T5683] usb 6-1: SerialNumber: syz [ 665.442706][ T5683] usb 6-1: config 0 descriptor?? [ 665.460431][ T5683] mcba_usb 6-1:0.0: Can't find endpoints [ 665.710053][T15371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 665.762049][T15371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 665.801024][ T5683] usb 6-1: USB disconnect, device number 16 [ 666.048193][T15402] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2951'. [ 666.061742][T14367] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 666.127570][T14367] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 666.140484][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 666.163238][T14367] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 666.202796][T14367] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 666.245947][T14367] usb 2-1: USB disconnect, device number 30 [ 666.446866][T15214] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 666.495928][T15214] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 666.528543][T15214] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 666.622706][T15214] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 666.652365][T15214] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 666.737993][T15214] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 666.773883][T15214] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 666.835639][T15214] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 667.170040][T15214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 667.180334][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 667.234091][T15214] 8021q: adding VLAN 0 to HW filter on device team0 [ 667.277720][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.284932][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 667.398468][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.405779][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 667.607879][ T5683] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 667.650782][ T5683] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 667.696840][ T5683] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 667.738622][T15214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 667.746756][ T5683] hid-generic 0000:0000:0000.0066: unknown main item tag 0x0 [ 667.796729][ T5683] hid-generic 0000:0000:0000.0066: hidraw0: HID v0.00 Device [] on [ 667.973636][T15444] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2957'. [ 668.005349][T15442] fido_id[15442]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 668.114354][T15214] veth0_vlan: entered promiscuous mode [ 668.155954][T15214] veth1_vlan: entered promiscuous mode [ 668.223152][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 668.233654][T15214] veth0_macvtap: entered promiscuous mode [ 668.283713][T15214] veth1_macvtap: entered promiscuous mode [ 668.358272][T15454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 668.388965][T15454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.407009][T15214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 668.475645][T15214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 668.911333][ T48] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.931845][ T6215] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.010808][ T6209] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.037436][ T6209] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.260300][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 669.280341][ T24] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 669.385090][ T6209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 669.413252][ T6209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 669.450650][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 669.473204][ T24] usb 6-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 669.518331][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 669.551124][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 669.578877][ T6209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 669.581927][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 669.604964][ T6209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 669.681634][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.721432][ T24] usb 6-1: Product: syz [ 669.738530][ T24] usb 6-1: Manufacturer: syz [ 669.753977][ T24] usb 6-1: SerialNumber: syz [ 669.774584][ T30] kauditd_printk_skb: 109 callbacks suppressed [ 669.774601][ T30] audit: type=1326 audit(1787227144.623:3028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15476 comm="syz.4.2962" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa2899e0d9 code=0x7ffc0000 [ 669.813464][ T24] usb 6-1: config 0 descriptor?? [ 669.836807][ T24] mcba_usb 6-1:0.0: Can't find endpoints [ 669.874559][ T30] audit: type=1326 audit(1787227144.623:3029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15476 comm="syz.4.2962" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa2899e0d9 code=0x7ffc0000 [ 669.949751][ T30] audit: type=1326 audit(1787227144.683:3030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15476 comm="syz.4.2962" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7ffa2899e0d9 code=0x7ffc0000 [ 670.026504][ T30] audit: type=1326 audit(1787227144.683:3031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15476 comm="syz.4.2962" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa2899e0d9 code=0x7ffc0000 [ 670.057443][T15467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 670.085058][T15467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 670.101675][ T5675] usb 6-1: USB disconnect, device number 17 [ 670.123790][ T30] audit: type=1326 audit(1787227144.683:3032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15476 comm="syz.4.2962" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa2899e0d9 code=0x7ffc0000 [ 670.148641][ T29] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 670.177367][ T30] audit: type=1326 audit(1787227144.693:3033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15476 comm="syz.4.2962" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffa2895e90e code=0x7ffc0000 [ 670.207050][ T30] audit: type=1326 audit(1787227144.693:3034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15476 comm="syz.4.2962" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffa2899dd6b code=0x7ffc0000 [ 670.236871][ T30] audit: type=1326 audit(1787227144.693:3035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15476 comm="syz.4.2962" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffa2899dd6b code=0x7ffc0000 [ 670.264049][ T30] audit: type=1326 audit(1787227144.693:3036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15476 comm="syz.4.2962" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffa2899dd6b code=0x7ffc0000 [ 670.290069][ T30] audit: type=1326 audit(1787227144.693:3037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15476 comm="syz.4.2962" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffa2899dd6b code=0x7ffc0000 [ 670.300436][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 670.331480][ T29] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 670.348912][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.358772][ T29] usb 5-1: Product: syz [ 670.370997][ T29] usb 5-1: Manufacturer: syz [ 670.383671][ T29] usb 5-1: SerialNumber: syz [ 670.802085][ T24] hid_parser_main: 2 callbacks suppressed [ 670.802108][ T24] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 670.892360][ T24] hid-generic 0000:0000:0000.0067: hidraw0: HID v0.00 Device [syz1] on syz0 [ 671.090415][ T8323] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 671.312092][ T8323] usb 6-1: Using ep0 maxpacket: 8 [ 671.340277][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 671.353510][ T8323] usb 6-1: unable to get BOS descriptor or descriptor too short [ 671.396654][ T8323] usb 6-1: New USB device found, idVendor=0421, idProduct=04c9, bcdDevice=e9.22 [ 671.436216][ T8323] usb 6-1: config 252 has an invalid interface number: 57 but max is 0 [ 671.480789][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 671.482521][ T8323] usb 6-1: config 252 has no interface number 0 [ 671.540359][ T8323] usb 6-1: config 252 interface 57 altsetting 64 bulk endpoint 0x5 has invalid maxpacket 16 [ 671.571693][ T8323] usb 6-1: config 252 interface 57 altsetting 64 bulk endpoint 0x8 has invalid maxpacket 64 [ 671.643103][ T8323] usb 6-1: config 252 interface 57 altsetting 64 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 671.670479][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 671.675537][ T8323] usb 6-1: config 252 interface 57 has no altsetting 0 [ 671.694777][ T8323] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.712045][ T8323] usb 6-1: Product: syz [ 671.738372][ T8323] usb 6-1: Manufacturer: syz [ 671.750935][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 671.760685][ T8323] usb 6-1: SerialNumber: syz [ 671.769192][T15518] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 671.785563][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 671.804837][T15518] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 671.833372][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 671.841801][T15494] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 671.853458][T15494] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 671.904713][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.936184][ T9] usb 3-1: config 0 descriptor?? [ 671.967620][ T9] hub 3-1:0.0: USB hub found [ 672.078463][ T8323] rndis_host 6-1:252.57: ACM capabilities 03, not really RNDIS? [ 672.147485][ T8323] usb 6-1: USB disconnect, device number 18 [ 672.164381][ T9] hub 3-1:0.0: 1 port detected [ 672.218163][T15530] fuse: Unknown parameter '0x00000000000000030x0000000000000003' [ 672.239621][ T29] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 672.254166][T15530] netlink: 'syz.0.2969': attribute type 7 has an invalid length. [ 672.261835][ T29] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 672.289562][ T29] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 672.322897][ T29] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 672.339073][ T29] usb 5-1: USB disconnect, device number 5 [ 672.380463][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 672.837199][T15538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 672.866214][T15538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 672.895741][T15538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 672.925175][T15538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 673.420318][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 673.464163][ T29] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 673.488458][ T29] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 673.526693][ T29] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 673.561640][ T29] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 673.598964][ T29] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 673.646965][ T29] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 673.661321][ T5611] Bluetooth: hci0: command 0x0406 tx timeout [ 673.694646][ T29] hid-generic 0000:0000:0000.0068: hidraw0: HID v0.00 Device [] on [ 673.743759][ T9] hub 3-1:0.0: hub_ext_port_status failed (err = -32) [ 673.790507][ T24] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 673.893007][T15567] fido_id[15567]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 673.970944][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 673.989002][ T24] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 674.005146][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 674.027476][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 674.062290][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 674.110390][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.127754][ T24] usb 2-1: Product: syz [ 674.136916][ T24] usb 2-1: Manufacturer: syz [ 674.148736][ T24] usb 2-1: SerialNumber: syz [ 674.161566][T15572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.179053][ T24] usb 2-1: config 0 descriptor?? [ 674.197760][ T24] mcba_usb 2-1:0.0: Can't find endpoints [ 674.205394][T15572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 674.397484][T15576] x_tables: duplicate underflow at hook 2 [ 674.421249][ T5683] usb 3-1: USB disconnect, device number 17 [ 674.426694][T15553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.453197][T15553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 674.460464][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 674.473291][ T24] usb 2-1: USB disconnect, device number 31 [ 674.564143][T15578] syzkaller0: entered promiscuous mode [ 674.569664][T15578] syzkaller0: entered allmulticast mode [ 674.816875][ T30] kauditd_printk_skb: 97 callbacks suppressed [ 674.816902][ T30] audit: type=1326 audit(1787227149.663:3135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15583 comm="syz.0.2983" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7cdd9e0d9 code=0x7ffc0000 [ 674.833337][T15584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.851436][ T30] audit: type=1326 audit(1787227149.663:3136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15583 comm="syz.0.2983" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7cdd9e0d9 code=0x7ffc0000 [ 674.879025][T15584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 674.894773][ T30] audit: type=1326 audit(1787227149.673:3137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15583 comm="syz.0.2983" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7fd7cdd9e0d9 code=0x7ffc0000 [ 675.018547][ T30] audit: type=1326 audit(1787227149.673:3138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15583 comm="syz.0.2983" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7cdd9e0d9 code=0x7ffc0000 [ 675.053842][ T5683] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 675.124030][ T30] audit: type=1326 audit(1787227149.673:3139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15583 comm="syz.0.2983" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7cdd9e0d9 code=0x7ffc0000 [ 675.211514][ T30] audit: type=1326 audit(1787227149.673:3140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15583 comm="syz.0.2983" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd7cdd5e90e code=0x7ffc0000 [ 675.307125][ T5683] usb 3-1: Using ep0 maxpacket: 32 [ 675.315446][ T5683] usb 3-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 675.325922][ T30] audit: type=1326 audit(1787227149.673:3141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15583 comm="syz.0.2983" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd7cdd9dd6b code=0x7ffc0000 [ 675.390930][ T5683] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 675.413735][ T30] audit: type=1326 audit(1787227149.673:3142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15583 comm="syz.0.2983" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd7cdd9dd6b code=0x7ffc0000 [ 675.450286][ T5683] usb 3-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 675.471934][ T30] audit: type=1326 audit(1787227149.743:3143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15583 comm="syz.0.2983" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7cdd9e0d9 code=0x7ffc0000 [ 675.494842][ T5683] usb 3-1: config 0 interface 0 has no altsetting 0 [ 675.501534][ T30] audit: type=1326 audit(1787227149.743:3144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15583 comm="syz.0.2983" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7cdd9e0d9 code=0x7ffc0000 [ 675.503266][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 675.533247][ T29] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 675.562133][ T5683] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.576947][T15597] loop7: detected capacity change from 0 to 16384 [ 675.605635][ T5683] usb 3-1: config 0 descriptor?? [ 675.698202][T15595] can: request_module (can-proto-0) failed. [ 675.710751][ T29] usb 2-1: unable to get BOS descriptor or descriptor too short [ 675.732471][ T29] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 675.741965][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 675.787057][ T29] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 675.810388][ T6215] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 675.812922][ T29] usb 2-1: can't read configurations, error -71 [ 675.834550][T15597] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 675.910663][ T24] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 676.054155][T15582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 676.063301][T15582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 676.080869][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 676.092260][ T5683] usbhid 3-1:0.0: can't add hid device: -71 [ 676.096027][ T24] usb 6-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 676.109924][ T5683] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 676.126448][ T5683] usb 3-1: USB disconnect, device number 18 [ 676.133271][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 676.154189][ T24] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 676.173667][ T24] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 676.190759][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.199117][ T24] usb 6-1: Product: syz [ 676.205857][ T24] usb 6-1: Manufacturer: syz [ 676.210814][ T24] usb 6-1: SerialNumber: syz [ 676.540283][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 676.690466][ T29] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 676.890638][ T29] usb 2-1: Using ep0 maxpacket: 32 [ 676.907311][ T29] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 676.941929][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 676.983820][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 677.017845][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.050336][ T8323] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 677.058530][ T24] usb 6-1: 1:1: cannot get freq (v2/v3): err -71 [ 677.071350][ T29] usb 2-1: config 0 descriptor?? [ 677.083609][ T24] usb 6-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 677.108198][ T29] hub 2-1:0.0: USB hub found [ 677.252503][ T8323] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 677.294742][ T8323] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 677.315387][ T29] hub 2-1:0.0: 1 port detected [ 677.342566][ T24] usb 6-1: USB disconnect, device number 19 [ 677.348665][ T8323] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 677.381846][ T8323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.412660][ T8323] usb 3-1: config 0 descriptor?? [ 677.450649][ T9050] udevd[9050]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 677.504175][ T8323] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 677.524283][ T8323] dvb-usb: bulk message failed: -22 (3/0) [ 677.570766][ T8323] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 677.580999][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 677.608098][ T8323] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 677.647152][ T8323] usb 3-1: media controller created [ 677.679378][ T8323] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 677.707461][T15620] dibusb: i2c wr: len=1116 is too big! [ 677.707461][T15620] [ 677.748390][ T8323] dvb-usb: bulk message failed: -22 (6/0) [ 677.787124][T15623] xt_HMARK: spi-set and port-set can't be combined [ 677.787872][ T8323] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 677.845611][ T8323] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input63 [ 677.904679][T15626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.919057][ T8323] dvb-usb: schedule remote query interval to 150 msecs. [ 677.947601][ T8323] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 677.961996][T15626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.001890][ T8323] usb 3-1: USB disconnect, device number 19 [ 678.019859][T15625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.061714][T15625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.062273][T15629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.128735][T15629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.185857][T15629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.226120][ T8323] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 678.233801][T15629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.620297][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 678.810391][ T5675] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 678.863536][ T29] hub 2-1:0.0: hub_ext_port_status failed (err = -32) [ 678.998477][ T5675] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 679.076926][ T5675] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.121676][T15646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.135608][ T5675] usb 3-1: Product: syz [ 679.159760][ T5675] usb 3-1: Manufacturer: syz [ 679.183892][T15646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.199299][ T5675] usb 3-1: SerialNumber: syz [ 679.376533][ T9] hid-generic 0000:0000:0000.0069: unknown main item tag 0x0 [ 679.454283][ T9] hid-generic 0000:0000:0000.0069: unknown main item tag 0x0 [ 679.516342][ T9] hid-generic 0000:0000:0000.0069: unknown main item tag 0x0 [ 679.566060][ T9] hid-generic 0000:0000:0000.0069: unknown main item tag 0x0 [ 679.602064][ T5683] usb 2-1: USB disconnect, device number 33 [ 679.612405][ T9] hid-generic 0000:0000:0000.0069: unknown main item tag 0x0 [ 679.642940][T15657] FAULT_INJECTION: forcing a failure. [ 679.642940][T15657] name failslab, interval 1, probability 0, space 0, times 0 [ 679.658526][ T9] hid-generic 0000:0000:0000.0069: unknown main item tag 0x0 [ 679.666142][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 679.715487][T15657] CPU: 0 UID: 0 PID: 15657 Comm: syz.4.3002 Tainted: G L syzkaller #0 PREEMPT(full) [ 679.715520][T15657] Tainted: [L]=SOFTLOCKUP [ 679.715529][T15657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 679.715545][T15657] Call Trace: [ 679.715554][T15657] [ 679.715563][T15657] dump_stack_lvl+0xe8/0x150 [ 679.715597][T15657] should_fail_ex+0x410/0x560 [ 679.715627][T15657] should_failslab+0xa8/0x100 [ 679.715652][T15657] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 679.715683][T15657] ? security_file_alloc+0x34/0x310 [ 679.715713][T15657] ? security_file_alloc+0x34/0x310 [ 679.715750][T15657] security_file_alloc+0x34/0x310 [ 679.715776][T15657] init_file+0x90/0x2b0 [ 679.715822][T15657] alloc_empty_file+0x74/0x1d0 [ 679.715854][T15657] alloc_file_pseudo+0x115/0x1e0 [ 679.715886][T15657] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 679.715914][T15657] ? security_inode_alloc+0xd5/0x310 [ 679.715934][T15657] ? inode_init_always_gfp+0x994/0xd30 [ 679.715986][T15657] sock_alloc_file+0xb8/0x2e0 [ 679.716014][T15657] do_accept+0x3a0/0x750 [ 679.716048][T15657] ? __pfx_do_accept+0x10/0x10 [ 679.716090][T15657] __sys_accept4+0x139/0x230 [ 679.716129][T15657] ? __pfx___sys_accept4+0x10/0x10 [ 679.716159][T15657] ? __pfx_ksys_write+0x10/0x10 [ 679.716188][T15657] __x64_sys_accept4+0x9a/0xb0 [ 679.716222][T15657] do_syscall_64+0x166/0x520 [ 679.716237][T15657] ? trace_irq_disable+0x3b/0x140 [ 679.716258][T15657] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.716293][T15657] ? clear_bhb_loop+0x70/0xc0 [ 679.716320][T15657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.716341][T15657] RIP: 0033:0x7ffa2899e0d9 [ 679.716359][T15657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 679.716382][T15657] RSP: 002b:00007ffa298e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 679.716398][T15657] RAX: ffffffffffffffda RBX: 00007ffa28c25fa0 RCX: 00007ffa2899e0d9 [ 679.716411][T15657] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 679.716421][T15657] RBP: 00007ffa298e8090 R08: 0000000000000000 R09: 0000000000000000 [ 679.716448][T15657] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 679.716468][T15657] R13: 00007ffa28c26038 R14: 00007ffa28c25fa0 R15: 00007ffa28d4fa48 [ 679.716499][T15657] [ 680.031969][ T30] kauditd_printk_skb: 115 callbacks suppressed [ 680.032007][ T30] audit: type=1326 audit(1787227154.873:3260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15637 comm="syz.2.2998" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bfb39e0d9 code=0x7ffc0000 [ 680.233211][ T9] hid-generic 0000:0000:0000.0069: hidraw0: HID v0.00 Device [] on [ 680.355321][ T30] audit: type=1326 audit(1787227154.873:3261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15637 comm="syz.2.2998" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bfb39e0d9 code=0x7ffc0000 [ 680.479085][ T30] audit: type=1326 audit(1787227155.093:3262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15637 comm="syz.2.2998" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2bfb39f947 code=0x7ffc0000 [ 680.578533][T15660] fido_id[15660]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 680.592487][ T30] audit: type=1326 audit(1787227155.093:3263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15637 comm="syz.2.2998" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f2bfb35e90e code=0x7ffc0000 [ 680.691453][ T30] audit: type=1326 audit(1787227155.093:3264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15637 comm="syz.2.2998" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f2bfb35e90e code=0x7ffc0000 [ 680.704809][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 680.824282][ T30] audit: type=1326 audit(1787227155.093:3265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15637 comm="syz.2.2998" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f2bfb35e90e code=0x7ffc0000 [ 680.944274][ T30] audit: type=1326 audit(1787227155.093:3266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15637 comm="syz.2.2998" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2bfb35e90e code=0x7ffc0000 [ 680.999628][ T5683] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 681.047197][ T30] audit: type=1326 audit(1787227155.093:3267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15637 comm="syz.2.2998" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bfb39e0d9 code=0x7ffc0000 [ 681.140548][ T30] audit: type=1326 audit(1787227155.093:3268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15637 comm="syz.2.2998" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bfb39e0d9 code=0x7ffc0000 [ 681.183728][ T5683] usb 2-1: device descriptor read/64, error -71 [ 681.203982][ T30] audit: type=1326 audit(1787227155.093:3269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15637 comm="syz.2.2998" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2bfb39e0d9 code=0x7ffc0000 [ 681.440366][ T5683] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 681.459188][T15668] xt_HMARK: spi-set and port-set can't be combined [ 681.600317][ T5683] usb 2-1: device descriptor read/64, error -71 [ 681.730798][ T5683] usb usb2-port1: attempt power cycle [ 681.740484][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 681.770016][ T5675] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 681.820963][ T5675] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 681.837550][ T5675] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 681.877030][ T5675] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 681.911562][ T5675] usb 3-1: USB disconnect, device number 20 [ 682.100363][ T5683] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 682.130545][ T8323] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 682.161133][ T5683] usb 2-1: device descriptor read/8, error -71 [ 682.206210][T15678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3011'. [ 682.290388][ T8323] usb 5-1: Using ep0 maxpacket: 32 [ 682.303944][ T8323] usb 5-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 682.332053][ T8323] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 682.332100][ T8323] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 682.332131][ T8323] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 682.332178][ T8323] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.354708][ T8323] usb 5-1: config 0 descriptor?? [ 682.431436][ T5683] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 682.521925][ T5683] usb 2-1: device descriptor read/8, error -71 [ 682.631697][ T5683] usb usb2-port1: unable to enumerate USB device [ 682.723849][T15672] nvme nvme0: rdma connection establishment failed (-104) [ 682.739004][T15689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 682.759967][T15689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 682.780295][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 682.812313][ T5683] hid-generic 0000:0000:0000.006A: unknown main item tag 0x0 [ 682.820659][T15689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 682.835808][ T5683] hid-generic 0000:0000:0000.006A: unknown main item tag 0x0 [ 682.844143][T15689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 682.852923][ T5683] hid-generic 0000:0000:0000.006A: unknown main item tag 0x0 [ 682.864288][T15689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 682.874482][ T5683] hid-generic 0000:0000:0000.006A: unknown main item tag 0x0 [ 682.883902][T15689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 682.896140][ T5683] hid-generic 0000:0000:0000.006A: hidraw0: HID v0.00 Device [] on [ 682.951776][ T8323] usbhid 5-1:0.0: can't add hid device: -71 [ 682.982689][ T8323] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 683.023761][T15693] fido_id[15693]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 683.048446][ T8323] usb 5-1: USB disconnect, device number 6 [ 683.528668][T15704] xt_HMARK: spi-set and port-set can't be combined [ 683.632172][ T8308] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 683.641074][ T8323] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 683.800959][ T8308] usb 6-1: Using ep0 maxpacket: 32 [ 683.801971][ T8323] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 683.816943][ T8323] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 683.820442][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 683.831410][ T8323] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 683.847946][ T8323] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 683.864807][ T8308] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 683.880087][ T8323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.890898][ T8308] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 683.904352][ T8308] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 683.918272][ T8323] usb 3-1: config 0 descriptor?? [ 683.923196][ T8308] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 683.923255][ T8308] usb 6-1: Product: syz [ 683.923295][ T8308] usb 6-1: Manufacturer: syz [ 683.953350][ T8308] hub 6-1:4.0: USB hub found [ 684.150340][ T5683] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 684.174497][T15700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 684.195957][T15700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 684.213352][ T8308] hub 6-1:4.0: config failed, can't read hub descriptor (err -22) [ 684.288167][ T8308] usb 6-1: USB disconnect, device number 20 [ 684.341019][ T5683] usb 2-1: Using ep0 maxpacket: 32 [ 684.363437][ T5683] usb 2-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 684.399192][ T8323] hid_parser_main: 2 callbacks suppressed [ 684.399212][ T8323] plantronics 0003:047F:FFFF.006B: unknown main item tag 0x0 [ 684.416049][ T8323] plantronics 0003:047F:FFFF.006B: unknown main item tag 0x0 [ 684.425274][ T5683] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 684.465496][ T5683] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 684.497174][ T8323] plantronics 0003:047F:FFFF.006B: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 684.522582][ T5683] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 684.570580][ T5683] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.635607][ T5683] usb 2-1: config 0 descriptor?? [ 684.860391][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 684.946141][ T8323] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 684.969700][ T8323] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 684.989785][ T8323] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 685.008674][ T8323] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 685.028865][ T8323] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 685.056575][ T8323] hid-generic 0000:0000:0000.006C: unknown main item tag 0x0 [ 685.093872][ T8323] hid-generic 0000:0000:0000.006C: hidraw1: HID v0.00 Device [] on [ 685.145588][ T5683] usbhid 2-1:0.0: can't add hid device: -71 [ 685.161591][ T5683] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 685.207027][ T5683] usb 2-1: USB disconnect, device number 38 [ 685.290739][ T8308] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 685.342334][T15721] fido_id[15721]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 685.461297][ T8308] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 685.492196][ T8308] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 685.504980][ T8308] usb 6-1: config 0 interface 0 has no altsetting 0 [ 685.519643][ T8308] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 685.529471][ T30] kauditd_printk_skb: 73 callbacks suppressed [ 685.529506][ T30] audit: type=1326 audit(1787227160.383:3343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15722 comm="syz.4.3024" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa2899e0d9 code=0x7ffc0000 [ 685.531718][ T8308] usb 6-1: Product: syz [ 685.560130][ T30] audit: type=1326 audit(1787227160.383:3344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15722 comm="syz.4.3024" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa2899e0d9 code=0x7ffc0000 [ 685.567803][ T8308] usb 6-1: Manufacturer: syz [ 685.622761][ T8308] usb 6-1: SerialNumber: syz [ 685.643901][ T8308] usb 6-1: config 0 descriptor?? [ 685.651679][ T30] audit: type=1326 audit(1787227160.413:3345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15722 comm="syz.4.3024" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7ffa2899e0d9 code=0x7ffc0000 [ 685.677796][ T8308] usb 6-1: selecting invalid altsetting 0 [ 685.725281][ T30] audit: type=1326 audit(1787227160.413:3346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15722 comm="syz.4.3024" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa2899e0d9 code=0x7ffc0000 [ 685.781570][ T30] audit: type=1326 audit(1787227160.413:3347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15722 comm="syz.4.3024" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa2899e0d9 code=0x7ffc0000 [ 685.822360][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.830938][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.860451][ T5683] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 685.879444][ T30] audit: type=1326 audit(1787227160.443:3348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15722 comm="syz.4.3024" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffa2895e90e code=0x7ffc0000 [ 685.904809][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 685.954408][ T30] audit: type=1326 audit(1787227160.443:3349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15722 comm="syz.4.3024" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffa2899dd6b code=0x7ffc0000 [ 686.051390][ T8323] usb 6-1: USB disconnect, device number 21 [ 686.070035][T15724] usb 6-1: cannot submit urb 0, error -19: no device [ 686.081031][ T30] audit: type=1326 audit(1787227160.443:3350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15722 comm="syz.4.3024" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffa2899dd6b code=0x7ffc0000 [ 686.087695][ T5683] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 686.107151][ T30] audit: type=1326 audit(1787227160.463:3351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15722 comm="syz.4.3024" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffa2899dd6b code=0x7ffc0000 [ 686.151119][ T30] audit: type=1326 audit(1787227160.463:3352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15722 comm="syz.4.3024" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffa2899dd6b code=0x7ffc0000 [ 686.186438][ T5683] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.194790][ T5683] usb 5-1: Product: syz [ 686.199588][ T5683] usb 5-1: Manufacturer: syz [ 686.208402][ T5683] usb 5-1: SerialNumber: syz [ 686.401977][ T9] usb 3-1: USB disconnect, device number 21 [ 686.672364][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 686.687061][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 686.695362][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 686.713954][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 686.727520][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 686.940282][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 687.173657][T15740] xt_HMARK: spi-set and port-set can't be combined [ 687.310477][ T9] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 687.435524][T15747] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 687.445108][T15746] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 687.480509][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 687.501751][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 687.542342][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 687.575828][T12887] raw-gadget.2 gadget.0: failed to queue disconnect event [ 687.588217][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 687.618813][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.659683][ T9] usb 6-1: config 0 descriptor?? [ 687.727938][ T9] hub 6-1:0.0: USB hub found [ 687.881336][T15504] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 687.893217][T15504] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.906111][ T5683] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 687.922776][ T9] hub 6-1:0.0: 1 port detected [ 687.939461][ T5683] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 687.953355][ T5683] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 687.967771][ T5683] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 687.980290][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 687.998024][ T5683] usb 5-1: USB disconnect, device number 7 [ 688.096256][T15504] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 688.108062][T15504] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.134125][T15734] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.143487][T15734] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.152376][T15734] bridge_slave_0: entered allmulticast mode [ 688.161662][T15734] bridge_slave_0: entered promiscuous mode [ 688.207024][T15504] bond0: (slave netdevsim1): Releasing backup interface [ 688.223794][T15504] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 688.236991][T15504] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.256573][T15734] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.264431][T15734] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.272690][T15734] bridge_slave_1: entered allmulticast mode [ 688.287238][T15734] bridge_slave_1: entered promiscuous mode [ 688.308416][T15762] fuse: Unknown parameter 'rootmo*œ¤®!eë‚ide' [ 688.316023][T15762] fuse: Bad value for 'user_id' [ 688.321394][T15762] fuse: Bad value for 'user_id' [ 688.422575][T15734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 688.459588][T15734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 688.541870][T15738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 688.568526][T15765] tc action pedit offset 34448 out of bounds [ 688.575607][T15765] tc action pedit offset 34448 out of bounds [ 688.581755][T15765] tc action pedit offset 34448 out of bounds [ 688.582574][T15738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.587902][T15765] tc action pedit offset 34448 out of bounds [ 688.601627][T15765] tc action pedit offset 34448 out of bounds [ 688.607672][T15765] tc action pedit offset 34448 out of bounds [ 688.613739][T15765] tc action pedit offset 34448 out of bounds [ 688.619780][T15765] tc action pedit offset 34448 out of bounds [ 688.625881][T15765] tc action pedit offset 34448 out of bounds [ 688.631935][T15765] tc action pedit offset 34448 out of bounds [ 688.637994][T15765] 0: reclassify loop, rule prio 0, protocol 800 [ 688.658228][T15738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 688.698808][T15738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.708066][T15734] team0: Port device team_slave_0 added [ 688.742425][T15734] team0: Port device team_slave_1 added [ 688.750043][ T5675] usb 6-1: USB disconnect, device number 22 [ 688.785456][ T9] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 688.789252][ T5611] Bluetooth: hci2: command tx timeout [ 688.938839][T15734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 688.954466][T15734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 688.982774][T15734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 689.020316][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 689.075173][T15734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 689.096808][T15734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 689.141107][T15734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 689.263730][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 689.311454][T15787] xt_HMARK: spi-set and port-set can't be combined [ 689.431438][ T9] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 689.469611][ T9] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 689.490728][ T9] usb 5-1: config 0 has no interface number 0 [ 689.522460][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.547220][ T9] usb 5-1: Product: syz [ 689.558125][ T9] usb 5-1: Manufacturer: syz [ 689.563489][T15734] hsr_slave_0: entered promiscuous mode [ 689.578163][ T9] usb 5-1: SerialNumber: syz [ 689.597248][T15734] hsr_slave_1: entered promiscuous mode [ 689.615638][ T9] usb 5-1: config 0 descriptor?? [ 689.625396][T15734] debugfs: 'hsr0' already exists in 'hsr' [ 689.646228][T15734] Cannot create hsr debugfs directory [ 689.705228][T15504] batadv1: left allmulticast mode [ 689.723087][T15504] batadv1: left promiscuous mode [ 689.730553][T15504] bridge0: port 3(batadv1) entered disabled state [ 689.760792][ T5675] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 689.769932][T15794] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3041'. [ 689.922556][T15504] bond1 (unregistering): (slave ip6gre1): Releasing backup interface [ 689.932398][ T5675] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 689.943603][ T5675] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.967744][ T5675] usb 6-1: config 0 descriptor?? [ 690.068589][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 690.183517][T15504] bond0 (unregistering): Released all slaves [ 690.198662][T15504] bond1 (unregistering): Released all slaves [ 690.234281][T15504] bond2 (unregistering): Released all slaves [ 690.256672][T15504] bond3 (unregistering): Released all slaves [ 690.289185][T15794] bridge0: port 3(batadv1) entered blocking state [ 690.296294][T15794] bridge0: port 3(batadv1) entered disabled state [ 690.305260][T15794] batadv1: entered allmulticast mode [ 690.314453][T15794] batadv1: entered promiscuous mode [ 690.408824][T15792] syzkaller0: entered promiscuous mode [ 690.435691][T15792] syzkaller0: entered allmulticast mode [ 690.518357][T15803] xt_nfacct: accounting object `syz0' does not exist [ 690.594478][ T5675] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 690.627988][ T5675] [drm:udl_init] *ERROR* Selecting channel failed [ 690.693583][ T5675] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 1 [ 690.730613][ T5675] [drm] Initialized udl on minor 1 [ 690.745218][ T5675] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 690.779807][ T5675] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 690.788472][ T8323] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 690.799527][ T36] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 690.809294][ T36] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 690.831187][ T8323] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 690.854662][ T5675] usb 6-1: USB disconnect, device number 23 [ 690.860998][ T5611] Bluetooth: hci2: command tx timeout [ 690.881928][ T8323] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 691.100278][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 691.325505][ T30] kauditd_printk_skb: 118 callbacks suppressed [ 691.325524][ T30] audit: type=1326 audit(1787227166.163:3471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15816 comm="syz.5.3046" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe214d9e0d9 code=0x7ffc0000 [ 691.367650][ T30] audit: type=1326 audit(1787227166.173:3472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15816 comm="syz.5.3046" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe214d9e0d9 code=0x7ffc0000 [ 691.396219][ T30] audit: type=1326 audit(1787227166.213:3473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15816 comm="syz.5.3046" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7fe214d9e0d9 code=0x7ffc0000 [ 691.422126][ T30] audit: type=1326 audit(1787227166.213:3474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15816 comm="syz.5.3046" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe214d9e0d9 code=0x7ffc0000 [ 691.469066][ T30] audit: type=1326 audit(1787227166.213:3475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15816 comm="syz.5.3046" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe214d9e0d9 code=0x7ffc0000 [ 691.496492][ T30] audit: type=1326 audit(1787227166.213:3476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15816 comm="syz.5.3046" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe214d5e90e code=0x7ffc0000 [ 691.557143][ T30] audit: type=1326 audit(1787227166.213:3477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15816 comm="syz.5.3046" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe214d9dd6b code=0x7ffc0000 [ 691.607294][ T30] audit: type=1326 audit(1787227166.213:3478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15816 comm="syz.5.3046" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe214d9dd6b code=0x7ffc0000 [ 691.635034][ T30] audit: type=1326 audit(1787227166.213:3479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15816 comm="syz.5.3046" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe214d9dd6b code=0x7ffc0000 [ 691.661112][ T5675] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 691.673723][ T30] audit: type=1326 audit(1787227166.213:3480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15816 comm="syz.5.3046" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe214d9dd6b code=0x7ffc0000 [ 691.841268][ T5675] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 691.882362][ T5675] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.903993][ T5675] usb 6-1: Product: syz [ 691.934237][ T5675] usb 6-1: Manufacturer: syz [ 691.952518][ T5675] usb 6-1: SerialNumber: syz [ 692.017420][T15775] ALSA: mixer_oss: invalid OSS volume 'u' [ 692.062168][ T8308] usb 5-1: USB disconnect, device number 8 [ 692.140283][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 692.312108][T15504] hsr_slave_0: left promiscuous mode [ 692.336652][T15504] hsr_slave_1: left promiscuous mode [ 692.432668][T15504] veth1_macvtap: left promiscuous mode [ 692.453455][T15504] veth0_macvtap: left promiscuous mode [ 692.483374][T15504] veth1_vlan: left promiscuous mode [ 692.503639][T15504] veth0_vlan: left promiscuous mode [ 692.695251][T15840] xt_HMARK: spi-set and port-set can't be combined [ 692.950827][ T5611] Bluetooth: hci2: command tx timeout [ 693.180316][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 693.573077][T15855] loop9: detected capacity change from 0 to 7 [ 693.583415][T15855] Dev loop9: unable to read RDB block 7 [ 693.589151][T15855] loop9: AHDI p1 p2 p3 [ 693.594080][T15855] loop9: partition table partially beyond EOD, truncated [ 693.603126][T15855] loop9: p1 start 1920169572 is beyond EOD, truncated [ 693.612424][T15855] loop9: p2 start 1851744889 is beyond EOD, truncated [ 693.690358][ T5675] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 693.703106][ T5675] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 693.718572][ T5675] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 693.744672][ T5675] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 693.767585][T15857] FAULT_INJECTION: forcing a failure. [ 693.767585][T15857] name failslab, interval 1, probability 0, space 0, times 0 [ 693.780865][T15857] CPU: 0 UID: 0 PID: 15857 Comm: syz.2.3056 Tainted: G L syzkaller #0 PREEMPT(full) [ 693.780899][T15857] Tainted: [L]=SOFTLOCKUP [ 693.780907][T15857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 693.780919][T15857] Call Trace: [ 693.780934][T15857] [ 693.780942][T15857] dump_stack_lvl+0xe8/0x150 [ 693.780992][T15857] should_fail_ex+0x410/0x560 [ 693.781021][T15857] should_failslab+0xa8/0x100 [ 693.781045][T15857] __kmalloc_noprof+0xfe/0x720 [ 693.781073][T15857] ? lock_sock_nested+0x6a/0x100 [ 693.781100][T15857] ? sock_kmalloc+0xd6/0x160 [ 693.781118][T15857] ? sock_kmalloc+0xd6/0x160 [ 693.781145][T15857] sock_kmalloc+0xd6/0x160 [ 693.781174][T15857] af_alg_alloc_areq+0x8c/0x200 [ 693.781314][T15857] skcipher_recvmsg+0x31e/0xe10 [ 693.781416][T15857] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 693.781437][T15857] ? __lock_acquire+0x683/0x2cf0 [ 693.781471][T15857] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 693.781496][T15857] ? security_socket_recvmsg+0x7e/0x2c0 [ 693.781562][T15857] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 693.781586][T15857] sock_recvmsg+0x196/0x1e0 [ 693.781615][T15857] ____sys_recvmsg+0x1e6/0x4a0 [ 693.781644][T15857] ? __pfx_____sys_recvmsg+0x10/0x10 [ 693.781681][T15857] ? import_iovec+0x73/0xa0 [ 693.781711][T15857] ___sys_recvmsg+0x213/0x5a0 [ 693.781751][T15857] ? __pfx____sys_recvmsg+0x10/0x10 [ 693.781778][T15857] ? __fget_files+0x2a/0x420 [ 693.781817][T15857] ? __fget_files+0x3a2/0x420 [ 693.781848][T15857] __x64_sys_recvmsg+0x1ae/0x290 [ 693.781874][T15857] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 693.781917][T15857] do_syscall_64+0x166/0x520 [ 693.781939][T15857] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.781962][T15857] ? clear_bhb_loop+0x70/0xc0 [ 693.781989][T15857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.782011][T15857] RIP: 0033:0x7f2bfb39e0d9 [ 693.782031][T15857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 693.782051][T15857] RSP: 002b:00007f2bfc2b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 693.782074][T15857] RAX: ffffffffffffffda RBX: 00007f2bfb625fa0 RCX: 00007f2bfb39e0d9 [ 693.782090][T15857] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 693.782105][T15857] RBP: 00007f2bfc2b5090 R08: 0000000000000000 R09: 0000000000000000 [ 693.782118][T15857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 693.782130][T15857] R13: 00007f2bfb626038 R14: 00007f2bfb625fa0 R15: 00007f2bfb74fa48 [ 693.782164][T15857] [ 694.106821][T15859] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 694.171601][ T5275] 8021q: adding VLAN 0 to HW filter on device eth1 [ 694.186999][ T8323] usb 6-1: USB disconnect, device number 24 [ 694.220456][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 694.387567][ T29] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 694.578572][ T29] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 694.598476][T15869] xt_HMARK: spi-set and port-set can't be combined [ 694.607841][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 694.633087][ T29] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 694.649121][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.676723][ T29] usb 3-1: config 0 descriptor?? [ 694.740392][ T5683] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 694.907092][T15504] IPVS: stop unused estimator thread 0... [ 694.931429][ T5683] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 694.985267][ T5683] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 695.016541][ T5683] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 695.030485][ T5611] Bluetooth: hci2: command tx timeout [ 695.055246][ T5683] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.116407][ T5683] usb 5-1: config 0 descriptor?? [ 695.132415][ T29] hid-multitouch 0003:0457:07DA.006D: unknown main item tag 0x0 [ 695.146256][ T5683] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 695.166893][ T29] hid-multitouch 0003:0457:07DA.006D: unknown main item tag 0x0 [ 695.200514][ T29] hid-multitouch 0003:0457:07DA.006D: unknown main item tag 0x0 [ 695.204575][ T5683] dvb-usb: bulk message failed: -22 (3/0) [ 695.225164][ T29] hid-multitouch 0003:0457:07DA.006D: unknown main item tag 0x0 [ 695.242465][ T29] hid-multitouch 0003:0457:07DA.006D: unknown main item tag 0x0 [ 695.252826][ T5683] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 695.261397][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 695.287535][ T29] hid-multitouch 0003:0457:07DA.006D: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.2-1/input0 [ 695.301347][ T5683] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 695.312879][ T8308] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 695.330419][ T5683] usb 5-1: media controller created [ 695.341976][ T5683] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 695.355245][T15867] dibusb: i2c wr: len=1116 is too big! [ 695.355245][T15867] [ 695.395336][ T5683] dvb-usb: bulk message failed: -22 (6/0) [ 695.418407][ T5683] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 695.441517][ T5683] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input64 [ 695.466982][ T5683] dvb-usb: schedule remote query interval to 150 msecs. [ 695.476862][ T5683] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 695.481553][ T8323] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 695.490072][ T8308] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 695.507189][ T5683] usb 5-1: USB disconnect, device number 9 [ 695.513688][ T8308] usb 2-1: config 0 has no interfaces? [ 695.519867][ T8308] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.538577][ T8308] usb 2-1: config 0 descriptor?? [ 695.560539][T15859] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 695.592806][T15859] bond1 (unregistering): Released all slaves [ 695.627398][ T5683] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 695.691916][ T8323] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 695.714826][ T8323] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.741618][T15734] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 695.754031][T15876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 695.769531][ T29] usb 3-1: USB disconnect, device number 22 [ 695.770161][T15734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 695.786629][ T8323] usb 6-1: config 0 descriptor?? [ 695.792612][T15734] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 695.794684][T15876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 695.833994][ T5675] usb 2-1: USB disconnect, device number 39 [ 695.843125][T15734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 695.852918][T15734] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 695.875527][T15734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 695.894603][T15734] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 695.922986][T15734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 696.091044][T15880] syzkaller0: entered promiscuous mode [ 696.106961][T15880] syzkaller0: entered allmulticast mode [ 696.242452][T15900] lo: entered promiscuous mode [ 696.247869][T15900] tunl0: entered promiscuous mode [ 696.254670][T15900] gre0: entered promiscuous mode [ 696.260737][T15900] gretap0: entered promiscuous mode [ 696.266381][T15900] erspan0: entered promiscuous mode [ 696.273189][T15900] ip_vti0: entered promiscuous mode [ 696.279305][ T8323] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 696.283276][T15900] ip6_vti0: entered promiscuous mode [ 696.293167][T15900] sit0: entered promiscuous mode [ 696.299319][T15900] ip6tnl0: entered promiscuous mode [ 696.301702][ T8323] [drm:udl_init] *ERROR* Selecting channel failed [ 696.305282][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 696.316529][ T24] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 696.325248][T15900] ip6gre0: entered promiscuous mode [ 696.334857][T15900] syz_tun: entered promiscuous mode [ 696.351065][T15900] ip6gretap0: entered promiscuous mode [ 696.357665][ T8323] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 1 [ 696.363202][T15900] bridge0: entered promiscuous mode [ 696.373763][ T8323] [drm] Initialized udl on minor 1 [ 696.381253][T15900] vcan0: entered promiscuous mode [ 696.394299][ T8323] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 696.404806][T15900] bond0: entered promiscuous mode [ 696.411999][ T8323] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 696.421609][T15900] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 696.432843][ T29] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 696.441244][T15900] dummy0: entered promiscuous mode [ 696.447790][ T8323] usb 6-1: USB disconnect, device number 25 [ 696.456306][T15900] nlmon0: entered promiscuous mode [ 696.462791][ T29] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 696.472146][T15900] batadv0: entered promiscuous mode [ 696.480011][T15900] vxcan0: entered promiscuous mode [ 696.491996][ T24] usb 2-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 696.502449][T15900] vxcan1: entered promiscuous mode [ 696.517439][T15900] veth0: entered promiscuous mode [ 696.523826][ T24] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 696.538047][T15900] veth1: entered promiscuous mode [ 696.553141][ T24] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 696.562702][T15900] wg0: entered promiscuous mode [ 696.573469][T15900] wg1: entered promiscuous mode [ 696.575894][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 696.585879][T15900] wg2: entered promiscuous mode [ 696.590155][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.602248][T15900] veth0_to_bridge: entered promiscuous mode [ 696.608821][T15900] bridge_slave_0: entered promiscuous mode [ 696.614700][ T24] usb 2-1: config 0 descriptor?? [ 696.621909][T15900] veth1_to_bridge: entered promiscuous mode [ 696.629221][T15900] bridge_slave_1: entered promiscuous mode [ 696.635838][T15900] veth0_to_bond: entered promiscuous mode [ 696.642318][T15900] bond_slave_0: entered promiscuous mode [ 696.648734][T15900] veth1_to_bond: entered promiscuous mode [ 696.655344][T15900] bond_slave_1: entered promiscuous mode [ 696.661982][T15900] veth0_to_team: entered promiscuous mode [ 696.668326][T15900] team_slave_0: entered promiscuous mode [ 696.675268][T15900] veth1_to_team: entered promiscuous mode [ 696.682308][T15900] team_slave_1: entered promiscuous mode [ 696.688646][T15900] veth0_to_batadv: entered promiscuous mode [ 696.695861][T15900] batadv_slave_0: entered promiscuous mode [ 696.703629][T15900] veth1_to_batadv: entered promiscuous mode [ 696.710140][T15900] batadv_slave_1: entered promiscuous mode [ 696.716459][T15900] batadv_slave_1: left allmulticast mode [ 696.724514][T15900] xfrm0: entered promiscuous mode [ 696.730487][T15900] veth0_to_hsr: entered promiscuous mode [ 696.737316][T15900] veth1_to_hsr: entered promiscuous mode [ 696.806135][T15734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 696.849736][T15734] 8021q: adding VLAN 0 to HW filter on device team0 [ 696.922046][T15504] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.929277][T15504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 696.996037][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.003246][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 697.224099][T15876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.257363][T15876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 697.335744][ T24] sony 0003:054C:0268.006E: failed to retrieve feature report 0xf2 with the Sixaxis MAC address [ 697.342314][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 697.384549][T15920] xt_HMARK: spi-set and port-set can't be combined [ 697.449670][ T24] sony 0003:054C:0268.006E: hiddev0,hidraw0: USB HID v80.00 Joystick [HID 054c:0268] on usb-dummy_hcd.1-1/input0 [ 697.507932][T15734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 697.539673][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 697.539709][ T30] audit: type=1326 audit(1787227172.383:3532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15926 comm="syz.5.3071" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe214d9e0d9 code=0x7ffc0000 [ 697.616270][ T24] sony 0003:054C:0268.006E: failed to claim input [ 697.716557][ T24] usb 2-1: USB disconnect, device number 40 [ 697.789142][ T30] audit: type=1326 audit(1787227172.383:3533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15926 comm="syz.5.3071" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe214d9e0d9 code=0x7ffc0000 [ 697.900508][ T5683] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 697.946246][T15734] veth0_vlan: entered promiscuous mode [ 697.953479][ T30] audit: type=1326 audit(1787227172.473:3534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15926 comm="syz.5.3071" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7fe214d9e0d9 code=0x7ffc0000 [ 698.048296][T15928] fido_id[15928]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 698.068654][T15734] veth1_vlan: entered promiscuous mode [ 698.096811][ T30] audit: type=1326 audit(1787227172.473:3535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15926 comm="syz.5.3071" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe214d9e0d9 code=0x7ffc0000 [ 698.127779][ T5683] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 698.182102][ T5691] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 698.208643][ T5683] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.250113][ T30] audit: type=1326 audit(1787227172.473:3536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15926 comm="syz.5.3071" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe214d9e0d9 code=0x7ffc0000 [ 698.253196][ T5683] usb 6-1: Product: syz [ 698.370353][ T5691] usb 5-1: Using ep0 maxpacket: 32 [ 698.380743][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 698.397390][ T5683] usb 6-1: Manufacturer: syz [ 698.440392][T15734] veth0_macvtap: entered promiscuous mode [ 698.447618][ T5683] usb 6-1: SerialNumber: syz [ 698.556401][T15734] veth1_macvtap: entered promiscuous mode [ 698.615368][ T5691] usb 5-1: unable to get BOS descriptor or descriptor too short [ 698.644934][ T5691] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 698.655940][ T5691] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 698.707933][ T5691] usb 5-1: can't read configurations, error -71 [ 698.722295][ T30] audit: type=1326 audit(1787227173.573:3537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15926 comm="syz.5.3071" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe214d9e0d9 code=0x7ffc0000 [ 698.755090][T15734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 698.786626][T15734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 698.826137][ T30] audit: type=1326 audit(1787227173.573:3538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15926 comm="syz.5.3071" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe214d9e0d9 code=0x7ffc0000 [ 698.923726][ T6215] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.934172][ T30] audit: type=1326 audit(1787227173.573:3539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15926 comm="syz.5.3071" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe214d9e0d9 code=0x7ffc0000 [ 698.996995][ T30] audit: type=1326 audit(1787227173.573:3540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15926 comm="syz.5.3071" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe214d9e0d9 code=0x7ffc0000 [ 699.047166][ T6215] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.082538][ T30] audit: type=1326 audit(1787227173.633:3541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15926 comm="syz.5.3071" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe214d9e0d9 code=0x7ffc0000 [ 699.210846][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.252273][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.420350][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 699.553483][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 699.562321][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 699.686041][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 699.705162][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 699.784884][T15963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3078'. [ 700.461354][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 700.497545][ T5683] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 700.600445][T15978] xt_HMARK: spi-set and port-set can't be combined [ 700.640697][ T5683] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 700.713559][ T5683] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 700.796505][ T5683] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 700.913519][ T5683] usb 6-1: USB disconnect, device number 26 [ 701.200685][ T5691] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 701.380545][ T5691] usb 3-1: Using ep0 maxpacket: 32 [ 701.428309][T15983] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3082'. [ 701.471696][ T5675] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 701.500689][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 701.523907][ T29] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 701.554397][ T5691] usb 3-1: unable to get BOS descriptor or descriptor too short [ 701.572590][ T5691] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 701.625324][ T5691] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 701.657799][ T5691] usb 3-1: can't read configurations, error -71 [ 701.693940][ T5675] usb 5-1: Using ep0 maxpacket: 32 [ 701.721421][ T29] usb 1-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 701.735349][ T5675] usb 5-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 701.775956][ T29] usb 1-1: config 14 has an invalid interface number: 128 but max is 0 [ 701.790278][ T5675] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 701.807479][ T29] usb 1-1: config 14 has no interface number 0 [ 701.821793][ T5675] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 701.832972][ T29] usb 1-1: config 14 interface 128 has no altsetting 0 [ 701.840005][ T5675] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 701.862514][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.886643][ T29] usb 1-1: Product: syz [ 701.904128][ T29] usb 1-1: Manufacturer: syz [ 701.908837][ T5675] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.927901][ T29] usb 1-1: SerialNumber: syz [ 701.941862][ T5675] usb 5-1: config 0 descriptor?? [ 702.130397][ T24] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 702.180074][T15987] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 702.266571][ T29] radioshark2 1-1:14.128: Invalid radioSHARK2 device [ 702.287960][ T24] usb 6-1: device descriptor read/64, error -71 [ 702.322938][ T29] radioshark2 1-1:14.128: probe with driver radioshark2 failed with error -22 [ 702.384384][ T29] usbhid 1-1:14.128: couldn't find an input interrupt endpoint [ 702.422666][ T5730] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 702.457195][ T5730] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 702.481784][ T29] usb 1-1: USB disconnect, device number 120 [ 702.506430][T15991] nvme nvme0: rdma connection establishment failed (-104) [ 702.521545][ T5691] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 702.540422][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 702.564616][ T5730] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 702.603356][ T24] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 702.634839][ T5730] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 702.682024][ T5730] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 702.715849][ T5730] hid-generic 0000:0000:0000.006F: unknown main item tag 0x0 [ 702.755640][T16012] FAULT_INJECTION: forcing a failure. [ 702.755640][T16012] name failslab, interval 1, probability 0, space 0, times 0 [ 702.786594][ T5730] hid-generic 0000:0000:0000.006F: hidraw0: HID v0.00 Device [] on [ 702.795924][ T24] usb 6-1: device descriptor read/64, error -71 [ 702.816827][T16012] CPU: 1 UID: 0 PID: 16012 Comm: syz.2.3089 Tainted: G L syzkaller #0 PREEMPT(full) [ 702.816861][T16012] Tainted: [L]=SOFTLOCKUP [ 702.816870][T16012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 702.816883][T16012] Call Trace: [ 702.816892][T16012] [ 702.816902][T16012] dump_stack_lvl+0xe8/0x150 [ 702.816938][T16012] should_fail_ex+0x410/0x560 [ 702.816969][T16012] should_failslab+0xa8/0x100 [ 702.816994][T16012] __kmalloc_noprof+0xfe/0x720 [ 702.817027][T16012] ? security_inode_alloc+0xd5/0x310 [ 702.817054][T16012] ? hash_accept+0xab/0x280 [ 702.817074][T16012] ? hash_accept+0xab/0x280 [ 702.817102][T16012] hash_accept+0xab/0x280 [ 702.817129][T16012] do_accept+0x521/0x750 [ 702.817167][T16012] ? __pfx_do_accept+0x10/0x10 [ 702.817219][T16012] __sys_accept4+0x139/0x230 [ 702.817252][T16012] ? __pfx___sys_accept4+0x10/0x10 [ 702.817283][T16012] ? __pfx_ksys_write+0x10/0x10 [ 702.817316][T16012] __x64_sys_accept4+0x9a/0xb0 [ 702.817348][T16012] do_syscall_64+0x166/0x520 [ 702.817371][T16012] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.817394][T16012] ? clear_bhb_loop+0x70/0xc0 [ 702.817422][T16012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.817446][T16012] RIP: 0033:0x7f2bfb39e0d9 [ 702.817467][T16012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 702.817495][T16012] RSP: 002b:00007f2bfc2b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 702.817519][T16012] RAX: ffffffffffffffda RBX: 00007f2bfb625fa0 RCX: 00007f2bfb39e0d9 [ 702.817536][T16012] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 702.817550][T16012] RBP: 00007f2bfc2b5090 R08: 0000000000000000 R09: 0000000000000000 [ 702.817565][T16012] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 702.817579][T16012] R13: 00007f2bfb626038 R14: 00007f2bfb625fa0 R15: 00007f2bfb74fa48 [ 702.817613][T16012] [ 703.241518][ T24] usb usb6-port1: attempt power cycle [ 703.354875][T16013] fido_id[16013]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 703.369588][ T5675] usbhid 5-1:0.0: can't add hid device: -71 [ 703.391046][T16021] 8021q: adding VLAN 0 to HW filter on device bond2 [ 703.423017][ T5675] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 703.483738][ T5675] usb 5-1: USB disconnect, device number 12 [ 703.500754][T16030] xt_HMARK: spi-set and port-set can't be combined [ 703.580463][ T24] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 703.582707][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 703.610787][T16033] fuse: Unknown parameter 'group_i00000000000000000000' [ 703.651405][ T24] usb 6-1: device descriptor read/8, error -71 [ 703.816219][T16036] binder: 16035:16036 unknown command 0 [ 703.838827][T16036] binder: 16035:16036 ioctl c0306201 2000000001c0 returned -22 [ 703.930296][ T24] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 703.996057][ T24] usb 6-1: device descriptor read/8, error -71 [ 704.111495][ T30] kauditd_printk_skb: 271 callbacks suppressed [ 704.111526][ T30] audit: type=1326 audit(1787227178.963:3813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16038 comm="syz.0.3096" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f823479e0d9 code=0x7ffc0000 [ 704.168976][ T24] usb usb6-port1: unable to enumerate USB device [ 704.219738][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 704.233866][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 704.243046][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 704.260529][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 704.278082][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 704.342968][ T30] audit: type=1326 audit(1787227178.963:3814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16038 comm="syz.0.3096" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f823479e0d9 code=0x7ffc0000 [ 704.440645][ T24] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 704.463981][ T30] audit: type=1326 audit(1787227179.033:3815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16038 comm="syz.0.3096" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f823479e0d9 code=0x7ffc0000 [ 704.578314][ T30] audit: type=1326 audit(1787227179.033:3816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16038 comm="syz.0.3096" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f823479e0d9 code=0x7ffc0000 [ 704.620281][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 704.668017][ T24] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 704.697997][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.716155][ T24] usb 1-1: Product: syz [ 704.728380][ T24] usb 1-1: Manufacturer: syz [ 704.745253][ T30] audit: type=1326 audit(1787227179.033:3817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16038 comm="syz.0.3096" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f823479e0d9 code=0x7ffc0000 [ 704.800557][ T30] audit: type=1326 audit(1787227179.033:3818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16038 comm="syz.0.3096" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f823475e90e code=0x7ffc0000 [ 704.826014][ T30] audit: type=1326 audit(1787227179.033:3819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16038 comm="syz.0.3096" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f823479dd6b code=0x7ffc0000 [ 704.913691][ T24] usb 1-1: SerialNumber: syz [ 704.974331][ T30] audit: type=1326 audit(1787227179.043:3820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16038 comm="syz.0.3096" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f823479dd6b code=0x7ffc0000 [ 705.152355][ T30] audit: type=1326 audit(1787227179.043:3821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16038 comm="syz.0.3096" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f823479dd6b code=0x7ffc0000 [ 705.225556][ T30] audit: type=1326 audit(1787227179.043:3822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16038 comm="syz.0.3096" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f823479dd6b code=0x7ffc0000 [ 705.618351][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.660400][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 705.710749][ T5691] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 705.902151][ T5691] usb 5-1: New USB device found, idVendor=17cc, idProduct=4711, bcdDevice=37.4c [ 705.953771][ T5691] usb 5-1: config 0 has an invalid interface number: 146 but max is 0 [ 705.994394][ T5691] usb 5-1: config 0 has no interface number 0 [ 706.032162][ T5691] usb 5-1: config 0 interface 146 has no altsetting 0 [ 706.082314][ T5691] usb 5-1: string descriptor 0 read error: -22 [ 706.093080][ T5691] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.111635][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.147174][ T5691] usb 5-1: config 0 descriptor?? [ 706.222196][ T5691] snd-usb-caiaq 5-1:0.146: can't set alt interface. [ 706.283497][ T5691] usb 5-1: unable to init card! (ret=-5) [ 706.330066][ T5691] snd-usb-caiaq 5-1:0.146: probe with driver snd-usb-caiaq failed with error -5 [ 706.380387][ T5611] Bluetooth: hci3: command tx timeout [ 706.389689][T16046] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3098'. [ 706.516128][ T36] bond0: (slave netdevsim1): Releasing backup interface [ 706.652541][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.700330][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 706.813387][ T5683] usb 5-1: USB disconnect, device number 13 [ 706.876849][ T24] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 706.923553][ T24] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 706.947729][ T24] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 706.979505][ T24] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 707.004833][ T24] usb 1-1: USB disconnect, device number 121 [ 707.075854][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.178569][T16041] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.189806][T16041] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.199084][T16041] bridge_slave_0: entered allmulticast mode [ 707.218547][T16041] bridge_slave_0: entered promiscuous mode [ 707.243026][T16041] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.260335][T16041] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.269110][T16041] bridge_slave_1: entered allmulticast mode [ 707.279060][T16041] bridge_slave_1: entered promiscuous mode [ 707.322234][T16041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 707.335005][T16041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 707.403326][T16041] team0: Port device team_slave_0 added [ 707.421027][T16041] team0: Port device team_slave_1 added [ 707.715406][T16072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3102'. [ 707.740271][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 707.942787][ T24] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 708.105993][T16041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 708.128281][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 708.139797][T16041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 708.218352][ T24] usb 5-1: not running at top speed; connect to a high speed hub [ 708.247044][T16041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 708.258891][T16088] FAULT_INJECTION: forcing a failure. [ 708.258891][T16088] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 708.277388][T16041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 708.285381][T16088] CPU: 0 UID: 0 PID: 16088 Comm: syz.5.3106 Tainted: G L syzkaller #0 PREEMPT(full) [ 708.285389][ T24] usb 5-1: New USB device found, idVendor=4971, idProduct=8024, bcdDevice=7c.2d [ 708.285413][T16088] Tainted: [L]=SOFTLOCKUP [ 708.285422][T16088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 708.285434][T16088] Call Trace: [ 708.285475][T16088] [ 708.285529][T16088] dump_stack_lvl+0xe8/0x150 [ 708.285683][T16088] should_fail_ex+0x410/0x560 [ 708.285755][T16088] prepare_alloc_pages+0x230/0x650 [ 708.285863][T16088] __alloc_frozen_pages_noprof+0x12f/0x380 [ 708.285972][T16088] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 708.286076][T16088] ? __pfx_policy_nodemask+0x10/0x10 [ 708.286141][T16088] ? __lock_acquire+0x683/0x2cf0 [ 708.286213][T16088] alloc_pages_mpol+0x212/0x390 [ 708.286279][T16088] folio_alloc_mpol_noprof+0x39/0x160 [ 708.286336][T16088] vma_alloc_folio_noprof+0xe1/0x1e0 [ 708.286395][T16088] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 708.286452][T16088] ? __pte_offset_map+0x29/0x240 [ 708.286525][T16088] ? __pte_offset_map+0x29/0x240 [ 708.286603][T16088] do_pte_missing+0x173a/0x34b0 [ 708.286763][T16088] handle_mm_fault+0x1b36/0x3080 [ 708.286866][T16088] ? handle_mm_fault+0xec/0x3080 [ 708.286981][T16088] ? __pfx_handle_mm_fault+0x10/0x10 [ 708.287051][T16088] ? lock_vma_under_rcu+0x45a/0x500 [ 708.287123][T16088] ? __fget_files+0x2a/0x420 [ 708.287247][T16088] do_user_addr_fault+0xa4f/0x1340 [ 708.287358][T16088] ? trace_page_fault_user+0x84/0x1e0 [ 708.287443][T16088] exc_page_fault+0x6a/0xc0 [ 708.287569][T16088] asm_exc_page_fault+0x26/0x30 [ 708.287623][T16088] RIP: 0033:0x7fe214c5f6cb [ 708.287683][T16088] Code: 00 00 00 48 8d 3d 2d b1 1a 00 48 89 c1 31 c0 e8 0b 2e ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 61 b1 1a 00 48 89 34 24 48 8b 14 24 48 8b [ 708.287734][T16088] RSP: 002b:00007fe215b88fa0 EFLAGS: 00010206 [ 708.287787][T16088] RAX: 0000000000000000 RBX: 00007fe215025fa0 RCX: 0000000000000000 [ 708.287828][T16088] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 00002000000002c0 [ 708.287870][T16088] RBP: 00007fe215b8a090 R08: 0000000000000000 R09: 0000000000000000 [ 708.287903][T16088] R10: 00002000000002c0 R11: 0000000000000000 R12: 0000000000000001 [ 708.287943][T16088] R13: 00007fe215026038 R14: 00007fe215025fa0 R15: 00007fe21514fa48 [ 708.288035][T16088] [ 708.288961][T16088] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 708.530365][T16041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 708.561402][ T5611] Bluetooth: hci3: command tx timeout [ 708.581656][T16041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 708.640652][T16086] bond1: (slave vlan2): making interface the new active one [ 708.652284][T16086] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 708.681739][ T24] usb 5-1: config 127 has an invalid interface number: 148 but max is 0 [ 708.692441][ T24] usb 5-1: config 127 has no interface number 0 [ 708.716889][ T24] usb 5-1: config 127 interface 148 has no altsetting 0 [ 708.738701][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.752445][ T24] usb 5-1: Product: syz [ 708.767324][ T24] usb 5-1: Manufacturer: syz [ 708.780272][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 708.791584][ T24] usb 5-1: SerialNumber: syz [ 709.082449][T16096] fuse: Bad value for 'fd' [ 709.202232][T16099] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3103'. [ 709.247404][T16098] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3108'. [ 709.273741][T16041] hsr_slave_0: entered promiscuous mode [ 709.290356][ T5675] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 709.313955][T16041] hsr_slave_1: entered promiscuous mode [ 709.349991][T16041] debugfs: 'hsr0' already exists in 'hsr' [ 709.381963][T16041] Cannot create hsr debugfs directory [ 709.411367][ T36] batadv2: left allmulticast mode [ 709.427021][ T36] batadv2: left promiscuous mode [ 709.445929][ T36] bridge0: port 1(batadv2) entered disabled state [ 709.466029][ T5675] usb 6-1: device descriptor read/64, error -71 [ 709.525108][T16095] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3108'. [ 709.730880][ T5675] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 709.800379][ T29] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 709.826657][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 709.880634][ T5675] usb 6-1: device descriptor read/64, error -71 [ 709.964166][ T29] usb 1-1: Using ep0 maxpacket: 16 [ 709.979275][ T29] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 710.026466][ T5675] usb usb6-port1: attempt power cycle [ 710.044349][ T29] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 710.073799][ T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 710.114978][ T29] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 710.180139][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.205956][ T29] usb 1-1: Product: syz [ 710.226481][ T29] usb 1-1: Manufacturer: syz [ 710.238410][ T29] usb 1-1: SerialNumber: syz [ 710.272059][ T29] usb 1-1: config 0 descriptor?? [ 710.292889][ T29] mcba_usb 1-1:0.0: Can't find endpoints [ 710.321313][ T36] bond0 (unregistering): Released all slaves [ 710.369859][ T36] bond1 (unregistering): (slave veth3): Releasing active interface [ 710.378493][ T36] batadv1: entered promiscuous mode [ 710.393513][ T36] bond1 (unregistering): (slave batadv1): Releasing active interface [ 710.401411][ T5675] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 710.415135][ T36] bond1 (unregistering): Released all slaves [ 710.441762][ T5675] usb 6-1: device descriptor read/8, error -71 [ 710.448865][ T36] bond2 (unregistering): Released all slaves [ 710.485805][T16113] veth1_to_hsr: entered allmulticast mode [ 710.504508][ T24] usb-storage 5-1:127.148: USB Mass Storage device detected [ 710.537045][T16095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 710.547916][T16095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 710.558736][ T24] usb-storage 5-1:127.148: Quirks match for vid 4971 pid 8024: 20000000 [ 710.574543][ T29] usb 1-1: USB disconnect, device number 122 [ 710.622393][ T5611] Bluetooth: hci3: command tx timeout [ 710.691582][ T5675] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 710.717178][ T24] usb 5-1: USB disconnect, device number 14 [ 710.741616][ T5675] usb 6-1: device descriptor read/8, error -71 [ 710.870264][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 710.879964][ T5675] usb usb6-port1: unable to enumerate USB device [ 711.088386][ T5275] 8021q: adding VLAN 0 to HW filter on device eth1 [ 711.720449][ T5684] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 711.900325][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 711.940348][ T5684] usb 5-1: Using ep0 maxpacket: 32 [ 711.966467][ T5684] usb 5-1: unable to get BOS descriptor or descriptor too short [ 711.998925][ T5684] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 712.055293][ T5684] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 2080, setting to 1024 [ 712.107787][ T5684] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 712.161896][ T29] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 712.164931][ T5684] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.235383][ T5684] usb 5-1: Product: syz [ 712.257055][ T5684] usb 5-1: Manufacturer: syz [ 712.271181][ T30] kauditd_printk_skb: 96 callbacks suppressed [ 712.271197][ T30] audit: type=1326 audit(1787227187.123:3919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16142 comm="syz.5.3114" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe214d9e0d9 code=0x7ffc0000 [ 712.317940][ T5684] usb 5-1: SerialNumber: syz [ 712.375235][T16133] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 712.393090][ T29] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 712.425545][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.446147][ T30] audit: type=1326 audit(1787227187.153:3920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16142 comm="syz.5.3114" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe214d9e0d9 code=0x7ffc0000 [ 712.503136][ T29] usb 3-1: config 0 descriptor?? [ 712.514950][ T5684] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 712.540069][ T5684] usb 5-1: MIDIStreaming interface descriptor not found [ 712.610725][ T30] audit: type=1326 audit(1787227187.163:3921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16142 comm="syz.5.3114" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7fe214d9e0d9 code=0x7ffc0000 [ 712.635377][ T24] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 712.676736][T16127] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3111'. [ 712.702765][ T50] Bluetooth: hci3: command tx timeout [ 712.779859][ T30] audit: type=1326 audit(1787227187.163:3922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16142 comm="syz.5.3114" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe214d9e0d9 code=0x7ffc0000 [ 712.822158][ T24] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 712.837202][T16131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 712.898535][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.924350][T16131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 712.940367][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 712.954745][ T24] usb 6-1: Product: syz [ 712.975535][T16127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 712.994779][ T30] audit: type=1326 audit(1787227187.163:3923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16142 comm="syz.5.3114" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe214d9e0d9 code=0x7ffc0000 [ 713.021460][T16139] batman_adv: batadv0: Adding interface: macvtap1 [ 713.033909][ T24] usb 6-1: Manufacturer: syz [ 713.043679][T16127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.046895][ T24] usb 6-1: SerialNumber: syz [ 713.058357][T16139] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 713.127232][ T30] audit: type=1326 audit(1787227187.173:3924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16142 comm="syz.5.3114" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe214d5e90e code=0x7ffc0000 [ 713.168985][T16139] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 713.263545][ T30] audit: type=1326 audit(1787227187.173:3925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16142 comm="syz.5.3114" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe214d9dd6b code=0x7ffc0000 [ 713.387911][ T30] audit: type=1326 audit(1787227187.173:3926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16142 comm="syz.5.3114" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe214d9dd6b code=0x7ffc0000 [ 713.442160][T16139] syzkaller0: entered promiscuous mode [ 713.447928][ T30] audit: type=1326 audit(1787227187.173:3927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16142 comm="syz.5.3114" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe214d9dd6b code=0x7ffc0000 [ 713.473393][T16139] syzkaller0: entered allmulticast mode [ 713.501908][ T50] Bluetooth: hci5: command 0x0406 tx timeout [ 713.517179][ T30] audit: type=1326 audit(1787227187.173:3928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16142 comm="syz.5.3114" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe214d9dd6b code=0x7ffc0000 [ 713.740109][ T5684] usb 5-1: USB disconnect, device number 15 [ 713.875922][ T9050] udevd[9050]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 713.910443][T16148] batman_adv: batadv0: Removing interface: macvtap1 [ 713.980980][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 714.531483][ T5684] hid-generic 000A:FFFFFF1D:0002.0070: unknown main item tag 0x0 [ 714.542540][ T5684] hid-generic 000A:FFFFFF1D:0002.0070: unknown main item tag 0x0 [ 714.550892][ T5684] hid-generic 000A:FFFFFF1D:0002.0070: unknown main item tag 0x0 [ 714.559173][ T5684] hid-generic 000A:FFFFFF1D:0002.0070: unknown main item tag 0x0 [ 714.567661][ T5684] hid-generic 000A:FFFFFF1D:0002.0070: unknown main item tag 0x0 [ 714.575983][ T5684] hid-generic 000A:FFFFFF1D:0002.0070: unknown main item tag 0x0 [ 714.585864][ T5684] hid-generic 000A:FFFFFF1D:0002.0070: unknown main item tag 0x0 [ 714.614136][ T5684] hid-generic 000A:FFFFFF1D:0002.0070: unknown main item tag 0x0 [ 714.655685][ T5684] hid-generic 000A:FFFFFF1D:0002.0070: unknown main item tag 0x0 [ 714.689085][ T5684] hid-generic 000A:FFFFFF1D:0002.0070: unknown main item tag 0x0 [ 714.720860][ T5684] hid-generic 000A:FFFFFF1D:0002.0070: hidraw0: HID v0.04 Device [syz0] on syz1 [ 715.013873][ T8308] usb 1-1: new full-speed USB device number 123 using dummy_hcd [ 715.021696][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 715.130586][ T24] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 715.154602][ T24] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 715.172904][ T24] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 715.202821][ T8308] usb 1-1: not running at top speed; connect to a high speed hub [ 715.215441][ T8308] usb 1-1: New USB device found, idVendor=0bb4, idProduct=0a1b, bcdDevice=cb.45 [ 715.216503][ T24] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 715.253778][ T8308] usb 1-1: config 9 has an invalid interface number: 230 but max is 0 [ 715.291222][ T8308] usb 1-1: config 9 has no interface number 0 [ 715.324979][ T8308] usb 1-1: config 9 interface 230 has no altsetting 0 [ 715.352743][ T8308] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.367328][ T8308] usb 1-1: Product: syz [ 715.378691][ T8308] usb 1-1: Manufacturer: syz [ 715.388207][ T8308] usb 1-1: SerialNumber: syz [ 715.765278][T16173] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3118'. [ 716.060421][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 717.110276][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 717.829836][ T29] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 717.847388][ T29] [drm:udl_init] *ERROR* Selecting channel failed [ 717.892546][ T29] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 717.899320][ T29] [drm] Initialized udl on minor 1 [ 717.906114][ T29] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 717.925439][ T29] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 717.942451][ T5675] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 717.950587][ T5675] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 718.150267][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 718.263648][ T36] hsr_slave_0: left promiscuous mode [ 718.270630][ T36] hsr_slave_1: left promiscuous mode [ 718.306353][ T5684] usb 3-1: USB disconnect, device number 25 [ 718.314883][ T36] veth1_macvtap: left promiscuous mode [ 718.320967][ T36] veth0_macvtap: left promiscuous mode [ 718.326702][ T36] veth1_vlan: left promiscuous mode [ 718.334381][ T36] veth0_vlan: left promiscuous mode [ 718.454954][T16175] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3119'. [ 718.563663][T16179] RDS: rds_bind could not find a transport for ae0c:91e3:ccfb:11d2:0:5efe:150.125.240.108, load rds_tcp or rds_rdma? [ 718.580041][T16179] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3120'. [ 718.660570][T16181] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3120'. [ 719.190303][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 720.230298][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 721.236295][ T29] usb 6-1: USB disconnect, device number 35 [ 721.260455][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 721.405392][T16158] 8021q: adding VLAN 0 to HW filter on device bond1 [ 721.537381][ T5683] usb 1-1: USB disconnect, device number 123 [ 721.809878][T16041] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 721.862179][T16041] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 721.893843][T16041] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 721.931015][T16041] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 721.952664][T16041] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 722.007244][T16041] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 722.016156][T16196] veth1_to_hsr: entered allmulticast mode [ 722.033266][T16041] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 722.069982][T16041] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 722.300407][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 722.496773][T16213] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 722.512486][T16041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 722.523564][T16213] block device autoloading is deprecated and will be removed. [ 722.599699][T16041] 8021q: adding VLAN 0 to HW filter on device team0 [ 722.632650][T16217] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 722.655116][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.662346][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 722.673180][T16217] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 722.723868][T16217] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 722.739732][T16217] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 722.748247][ T6220] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.755474][ T6220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 722.790646][ T30] kauditd_printk_skb: 68 callbacks suppressed [ 722.790665][ T30] audit: type=1326 audit(1787227197.623:3997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16222 comm="syz.4.3130" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa2899e0d9 code=0x7ffc0000 [ 722.865045][ T30] audit: type=1326 audit(1787227197.633:3998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16222 comm="syz.4.3130" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7ffa2899e0d9 code=0x7ffc0000 [ 722.903451][T16217] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 722.912176][T16217] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 722.921160][ T30] audit: type=1326 audit(1787227197.633:3999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16222 comm="syz.4.3130" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa2899e0d9 code=0x7ffc0000 [ 722.996739][T16217] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 723.007583][T16217] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 723.032510][ T30] audit: type=1326 audit(1787227197.633:4000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16222 comm="syz.4.3130" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa2899e0d9 code=0x7ffc0000 [ 723.060298][ T29] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 723.091632][ T5684] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 723.123831][T16217] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 723.163246][T16041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 723.170148][T16217] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 723.178757][ T30] audit: type=1326 audit(1787227197.633:4001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16222 comm="syz.4.3130" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffa2895e90e code=0x7ffc0000 [ 723.242255][T16217] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 723.252791][ T29] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 723.264089][T16217] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 723.273979][ T30] audit: type=1326 audit(1787227197.633:4002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16222 comm="syz.4.3130" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffa2899dd6b code=0x7ffc0000 [ 723.309339][ T5684] usb 6-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 723.333391][ T5684] usb 6-1: config index 0 descriptor too short (expected 123, got 89) [ 723.341739][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 723.349403][ T30] audit: type=1326 audit(1787227197.633:4003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16222 comm="syz.4.3130" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffa2899dd6b code=0x7ffc0000 [ 723.370615][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.380368][ T5684] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 723.407224][ T29] usb 5-1: Product: syz [ 723.415476][ T29] usb 5-1: Manufacturer: syz [ 723.429706][ T29] usb 5-1: SerialNumber: syz [ 723.449017][ T5684] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.475160][T16041] veth0_vlan: entered promiscuous mode [ 723.494076][ T5684] usb 6-1: config 0 descriptor?? [ 723.509962][ T30] audit: type=1326 audit(1787227197.713:4004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16222 comm="syz.4.3130" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffa2899dd6b code=0x7ffc0000 [ 723.565289][T16041] veth1_vlan: entered promiscuous mode [ 723.617719][ T30] audit: type=1326 audit(1787227197.713:4005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16222 comm="syz.4.3130" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffa2899dd6b code=0x7ffc0000 [ 723.745968][ T30] audit: type=1326 audit(1787227197.783:4006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16222 comm="syz.4.3130" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffa2899dd6b code=0x7ffc0000 [ 723.794453][ T5684] usb 6-1: string descriptor 0 read error: -71 [ 723.820058][ T5684] rndis_host 6-1:0.0: rndis: master #0/ffff888054e5c000 slave #1/0000000000000000 [ 723.903614][ T5684] usb 6-1: USB disconnect, device number 36 [ 724.057554][T16041] veth0_macvtap: entered promiscuous mode [ 724.145246][T16041] veth1_macvtap: entered promiscuous mode [ 724.291972][T16041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 724.380311][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 724.417777][T16041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 724.575540][ T81] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.601811][T16249] veth1_to_hsr: entered allmulticast mode [ 724.692179][T15505] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.755076][T15505] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.871465][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.430506][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 725.555565][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 725.604944][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 725.639154][ T29] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 725.700601][ T29] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 725.736849][ T29] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 725.767347][T15505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 725.786533][T15505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 725.801400][ T29] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 725.873658][ T29] usb 5-1: USB disconnect, device number 16 [ 726.470483][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 727.206667][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 727.220713][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 727.231471][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 727.239912][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 727.248029][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 727.319745][T16292] socket: no more sockets [ 727.510255][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 727.649089][T16304] FAULT_INJECTION: forcing a failure. [ 727.649089][T16304] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 727.690704][T16304] CPU: 0 UID: 0 PID: 16304 Comm: syz.5.3146 Tainted: G L syzkaller #0 PREEMPT(full) [ 727.690741][T16304] Tainted: [L]=SOFTLOCKUP [ 727.690750][T16304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 727.690765][T16304] Call Trace: [ 727.690774][T16304] [ 727.690783][T16304] dump_stack_lvl+0xe8/0x150 [ 727.690820][T16304] should_fail_ex+0x410/0x560 [ 727.690851][T16304] _copy_from_user+0x2d/0xb0 [ 727.690881][T16304] __sys_sendto+0x2a9/0x5a0 [ 727.690919][T16304] ? __pfx___sys_sendto+0x10/0x10 [ 727.690978][T16304] ? do_user_addr_fault+0xc4c/0x1340 [ 727.691015][T16304] __x64_sys_sendto+0xde/0x100 [ 727.691052][T16304] do_syscall_64+0x166/0x520 [ 727.691074][T16304] ? trace_irq_disable+0x3b/0x140 [ 727.691103][T16304] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.691128][T16304] ? clear_bhb_loop+0x70/0xc0 [ 727.691156][T16304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.691179][T16304] RIP: 0033:0x7fe214d5e90e [ 727.691201][T16304] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 727.691221][T16304] RSP: 002b:00007fe215b88e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 727.691245][T16304] RAX: ffffffffffffffda RBX: 00007fe215b8a6c0 RCX: 00007fe214d5e90e [ 727.691263][T16304] RDX: 0000000000000020 RSI: 00007fe215b89000 RDI: 0000000000000004 [ 727.691278][T16304] RBP: 0000000000000000 R08: 00007fe215b88f04 R09: 000000000000000c [ 727.691297][T16304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 727.691311][T16304] R13: 00007fe215b88f58 R14: 00007fe215b89000 R15: 0000000000000000 [ 727.691344][T16304] [ 728.168520][T16314] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 728.500832][ T24] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 728.540441][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 728.664497][ T24] usb 2-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 728.739282][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 728.792648][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 728.841581][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.873449][ T24] usb 2-1: config 0 descriptor?? [ 729.055114][T16335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.341737][ T50] Bluetooth: hci0: command tx timeout [ 729.374520][ T24] hid_parser_main: 98 callbacks suppressed [ 729.374544][ T24] hid-multitouch 0003:0457:07DA.0071: unknown main item tag 0x0 [ 729.410373][ T24] hid-multitouch 0003:0457:07DA.0071: unknown main item tag 0x0 [ 729.431661][ T24] hid-multitouch 0003:0457:07DA.0071: unknown main item tag 0x0 [ 729.468665][ T24] hid-multitouch 0003:0457:07DA.0071: unknown main item tag 0x0 [ 729.519632][ T24] hid-multitouch 0003:0457:07DA.0071: unknown main item tag 0x0 [ 729.580447][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 729.621610][ T24] hid-multitouch 0003:0457:07DA.0071: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.1-1/input0 [ 729.820595][ T5683] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 730.064497][ T5683] usb 6-1: unable to get BOS descriptor or descriptor too short [ 730.088711][ T5683] usb 6-1: not running at top speed; connect to a high speed hub [ 730.140089][ T5683] usb 6-1: New USB device found, idVendor=4971, idProduct=8024, bcdDevice=7c.2d [ 730.175197][ T5683] usb 6-1: config 127 has an invalid interface number: 148 but max is 0 [ 730.221981][ T5683] usb 6-1: config 127 has no interface number 0 [ 730.263526][ T5683] usb 6-1: config 127 interface 148 has no altsetting 0 [ 730.271147][T16314] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 730.313785][T16314] bond1 (unregistering): Released all slaves [ 730.349724][ T5683] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.384633][ T5683] usb 6-1: Product: syz [ 730.400108][T16297] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.413340][ T5683] usb 6-1: Manufacturer: syz [ 730.413682][T16297] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.427205][T16297] bridge_slave_0: entered allmulticast mode [ 730.439171][ T5683] usb 6-1: SerialNumber: syz [ 730.462490][T16297] bridge_slave_0: entered promiscuous mode [ 730.531186][T16297] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.566951][T16297] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.594186][T16297] bridge_slave_1: entered allmulticast mode [ 730.608074][ T24] usb 2-1: USB disconnect, device number 41 [ 730.621171][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 730.675780][T16297] bridge_slave_1: entered promiscuous mode [ 730.761328][T16348] fuse: Bad value for 'fd' [ 730.864435][T16349] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3154'. [ 730.962439][ T6215] bond0: (slave netdevsim1): Releasing backup interface [ 731.043742][ T6215] netdevsim netdevsim4 netdevsim1 (unregistering): left promiscuous mode [ 731.336184][ T5683] usb-storage 6-1:127.148: USB Mass Storage device detected [ 731.354392][T16297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 731.389118][ T5683] usb-storage 6-1:127.148: Quirks match for vid 4971 pid 8024: 20000000 [ 731.402761][T16297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 731.423156][ T50] Bluetooth: hci0: command tx timeout [ 731.516624][ T5683] usb 6-1: USB disconnect, device number 37 [ 731.670500][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 731.693720][T16297] team0: Port device team_slave_0 added [ 731.739375][T16297] team0: Port device team_slave_1 added [ 731.784660][T16359] netlink: Failed to add helper -22 [ 731.805746][T16359] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 731.923213][T16297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 731.931255][T16297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 731.964189][T16297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 731.996566][T16297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 732.010843][T16297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 732.055866][T16297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 732.597108][T16297] hsr_slave_0: entered promiscuous mode [ 732.616094][T16385] netlink: 236 bytes leftover after parsing attributes in process `syz.1.3160'. [ 732.627371][T16297] hsr_slave_1: entered promiscuous mode [ 732.644989][T16297] debugfs: 'hsr0' already exists in 'hsr' [ 732.664475][T16297] Cannot create hsr debugfs directory [ 732.681566][T16385] netlink: 'syz.1.3160': attribute type 14 has an invalid length. [ 732.710327][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 732.800602][ T5683] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 732.975339][ T5683] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 732.988116][ T8308] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 733.039302][ T5683] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.057673][ T5683] usb 6-1: Product: syz [ 733.062621][ T5683] usb 6-1: Manufacturer: syz [ 733.078240][ T5683] usb 6-1: SerialNumber: syz [ 733.114810][ T5683] usb 6-1: config 0 descriptor?? [ 733.182053][ T31] INFO: task syz.3.2533:14005 blocked for more than 143 seconds. [ 733.182793][ T8308] usb 1-1: Using ep0 maxpacket: 16 [ 733.215189][ T31] Tainted: G L syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 733.230287][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 733.238271][ T8308] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 733.254784][ T31] task:syz.3.2533 state:D stack:27944 pid:14005 tgid:14004 ppid:5628 task_flags:0x400040 flags:0x00080002 [ 733.289535][ T8308] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 131, changing to 11 [ 733.299012][ T31] Call Trace: [ 733.327513][ T31] [ 733.343472][ T8308] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 49607, setting to 1024 [ 733.350014][ T31] __schedule+0x17d4/0x5630 [ 733.412493][ T8308] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 733.427556][ T31] ? __pfx___schedule+0x10/0x10 [ 733.470890][ T31] ? schedule+0x90/0x2b0 [ 733.494000][ T8308] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.500563][ T50] Bluetooth: hci0: command tx timeout [ 733.520536][ T31] schedule+0x164/0x2b0 [ 733.539886][ T31] schedule_preempt_disabled+0x13/0x30 [ 733.570138][ T31] __mutex_lock+0x7c1/0x1550 [ 733.576738][ T31] ? __mutex_lock+0x5d4/0x1550 [ 733.600348][ T31] ? usbdev_open+0x151/0x770 [ 733.626735][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 733.643336][ T8308] usb 1-1: config 0 descriptor?? [ 733.655877][ T31] ? bus_find_device+0x27d/0x2d0 [ 733.678561][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 733.701929][ T31] ? usbdev_open+0xa7/0x770 [ 733.721747][ T31] ? usbdev_open+0xa7/0x770 [ 733.745739][ T31] usbdev_open+0x151/0x770 [ 733.773346][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 733.803856][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 733.831145][ T31] ? do_raw_spin_unlock+0xf5/0x200 [ 733.845493][ T31] chrdev_open+0x4d9/0x600 [ 733.860252][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 733.866759][ T31] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 733.877867][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 733.883212][ T31] do_dentry_open+0x816/0x1380 [ 733.888083][ T31] vfs_open+0x3b/0x340 [ 733.894483][ T31] ? path_openat+0x1428/0x1d60 [ 733.910369][ T31] path_openat+0x1443/0x1d60 [ 733.915098][ T31] do_file_open+0x23e/0x4a0 [ 733.920792][ T31] ? __pfx_do_file_open+0x10/0x10 [ 733.932083][ T31] ? _raw_spin_unlock+0x28/0x50 [ 733.942226][ T31] ? alloc_fd+0x651/0x6c0 [ 733.952156][ T31] do_sys_openat2+0x115/0x200 [ 733.970335][ T31] ? __se_sys_futex+0x3a8/0x450 [ 733.975306][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 733.986069][ T31] ? rcu_is_watching+0x16/0xb0 [ 733.995499][ T31] __x64_sys_openat+0x138/0x170 [ 734.001326][ T31] do_syscall_64+0x166/0x520 [ 734.006025][ T31] ? trace_irq_disable+0x3b/0x140 [ 734.012404][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.018539][ T31] ? clear_bhb_loop+0x70/0xc0 [ 734.030460][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.040793][ T31] RIP: 0033:0x7fe27035e90e [ 734.050538][ T31] RSP: 002b:00007fe27133db28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 734.070478][ T31] RAX: ffffffffffffffda RBX: 00007fe27133e6c0 RCX: 00007fe27035e90e [ 734.090313][ T31] RDX: 0000000000101301 RSI: 00007fe27133dc00 RDI: ffffffffffffff9c [ 734.099796][ T31] RBP: 00007fe27133dc00 R08: 0000000000000000 R09: 0000000000000000 [ 734.120294][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 734.131653][ T31] R13: 00007fe270626038 R14: 00007fe270625fa0 R15: 00007fe27074fa48 [ 734.144467][ T31] [ 734.198673][ T31] [ 734.198673][ T31] Showing all locks held in the system: [ 734.220575][ T31] locks held by kworker/u8:0/12: 3, on CPU#1: [ 734.334203][ T31] #0: ffff88801b06c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 734.360337][ T31] #1: ffffc90000117c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 734.387432][ T31] #2: ffffffff9002df00 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 734.398082][ T31] locks held by khungtaskd/31: 1, last CPU#1: [ 734.404694][ T31] #0: ffffffff8eb5a120 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 734.414998][ T31] locks held by dhcpcd/5275: 1, on CPU#1: [ 734.431322][ T31] #0: ffffffff9002df00 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x2fb/0x1c50 [ 734.450335][ T31] locks held by getty/5370: 2, on CPU#1: [ 734.464616][ T31] #0: ffff888035f370a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 734.501350][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 734.530335][ T31] locks held by udevd/5740: 4, on CPU#1: [ 734.543024][ T31] #0: ffff88807bd59e18 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0 [ 734.574395][ T31] #1: ffff888055754880 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420 [ 734.606591][ T31] #2: ffff88804046ec38 (kn->active#26){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 734.648463][ T31] #3: ffff8880331f01d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 734.681744][ T31] locks held by kworker/0:8/5754: 5, on CPU#0: [ 734.702483][ T31] #0: ffff888022aeb140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 734.740233][ T31] #1: ffffc90004b97c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 734.776988][ T31] #2: ffff88802a1321d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 734.793662][ T31] #3: ffff8880331f01d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 734.803171][ T31] #4: ffff88807b4141a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 734.812823][ T31] locks held by kworker/u8:12/6215: 5, on CPU#1: [ 734.819448][ T31] #0: ffff88801c296140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 734.831743][ T31] #1: ffffc9000757fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 734.842877][ T31] #2: ffffffff9001f368 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 734.852503][ T31] #3: ffffffff9002df00 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x28e/0x8d0 [ 734.870201][ T31] #4: ffffffff8eb60428 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 734.902786][ T31] locks held by kworker/0:9/8308: 5, on CPU#0: [ 734.920339][ T31] #0: ffff888022aeb140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 734.940218][ T31] #1: ffffc90006f9fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 734.954007][ T31] #2: ffff88802a0a21d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 734.963109][ T31] #3: ffff8880237331d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 734.972478][ T31] #4: ffff888029eadb60 (hcd->bandwidth_mutex){+.+.}-{4:4}, at: usb_set_configuration+0x552/0x2180 [ 734.984454][ T31] locks held by syz.3.2533/14005: 1, on CPU#1: [ 734.991350][ T31] #0: ffff88802a1321d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x151/0x770 [ 735.000576][ T31] locks held by syz-executor/16297: 1, on CPU#1: [ 735.006965][ T31] #0: ffffffff9002df00 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 735.016344][ T31] locks held by syz.5.3158/16378: 1, on CPU#1: [ 735.022600][ T31] #0: ffff8880366d8ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0 [ 735.033199][ T31] locks held by syz.0.3159/16380: 2, on CPU#1: [ 735.039414][ T31] #0: ffff888049c58ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0 [ 735.049509][ T31] #1: ffffffff8eb60428 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 735.060621][ T31] locks held by syz.1.3161/16393: 1, on CPU#1: [ 735.066825][ T31] #0: ffff888053a78ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0 [ 735.077086][ T31] locks held by syz.2.3162/16399: 3, on CPU#0: [ 735.084043][ T31] #0: ffffffff9009e928 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 735.092517][ T31] #1: ffff8880371cd6e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 735.105326][ T31] #2: ffffffff9002df00 (rtnl_mutex){+.+.}-{4:4}, at: ethnl_tunnel_info_dumpit+0x71/0x480 [ 735.116505][ T31] [ 735.118906][ T31] ============================================= [ 735.118906][ T31] [ 735.130692][ T31] NMI backtrace for cpu 0 [ 735.130713][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 735.130742][ T31] Tainted: [L]=SOFTLOCKUP [ 735.130751][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 735.130764][ T31] Call Trace: [ 735.130773][ T31] [ 735.130782][ T31] dump_stack_lvl+0xe8/0x150 [ 735.130820][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 735.130924][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 735.130956][ T31] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 735.130985][ T31] sys_info+0x135/0x170 [ 735.131034][ T31] watchdog+0xfd7/0x1030 [ 735.131067][ T31] ? watchdog+0x1c7/0x1030 [ 735.131100][ T31] kthread+0x38b/0x480 [ 735.131128][ T31] ? __pfx_watchdog+0x10/0x10 [ 735.131153][ T31] ? __pfx_kthread+0x10/0x10 [ 735.131181][ T31] ret_from_fork+0x514/0xb70 [ 735.131206][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 735.131232][ T31] ? __switch_to+0xc89/0x1420 [ 735.131277][ T31] ? __pfx_kthread+0x10/0x10 [ 735.131307][ T31] ret_from_fork_asm+0x1a/0x30 [ 735.131360][ T31] [ 735.131399][ T31] Sending NMI from CPU 0 to CPUs 1: [ 735.253717][ C1] NMI backtrace for cpu 1 [ 735.253736][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 735.253759][ C1] Tainted: [L]=SOFTLOCKUP [ 735.253766][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 735.253776][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 735.253809][ C1] Code: 1c 7b 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 11 14 00 fb f4 4c 09 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 735.253825][ C1] RSP: 0018:ffffc90000197e40 EFLAGS: 00000242 [ 735.253846][ C1] RAX: 000000000091b8e3 RBX: ffffffff819b2060 RCX: 8000000000000001 [ 735.253860][ C1] RDX: 0000000000000001 RSI: ffffffff8e23923c RDI: ffffffff8c4bf780 [ 735.253872][ C1] RBP: ffffc90000197f10 R08: ffff8880b873389b R09: 1ffff110170e6713 [ 735.253886][ C1] R10: dffffc0000000000 R11: ffffed10170e6714 R12: 0000000000000000 [ 735.253899][ C1] R13: 1ffff11003c55000 R14: 1ffff92000032fd0 R15: dffffc0000000000 [ 735.253912][ C1] FS: 0000000000000000(0000) GS:ffff888125031000(0000) knlGS:0000000000000000 [ 735.253927][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 735.253939][ C1] CR2: 00007ffd3cfba038 CR3: 000000007f21c000 CR4: 00000000003526f0 [ 735.253955][ C1] Call Trace: [ 735.253962][ C1] [ 735.253968][ C1] default_idle+0x9/0x20 [ 735.253987][ C1] default_idle_call+0x72/0xb0 [ 735.254006][ C1] do_idle+0x2e0/0x540 [ 735.254031][ C1] ? __pfx_do_idle+0x10/0x10 [ 735.254058][ C1] cpu_startup_entry+0x43/0x60 [ 735.254080][ C1] start_secondary+0x101/0x110 [ 735.254103][ C1] common_startup_64+0x13e/0x157 [ 735.254131][ C1] [ 735.457908][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 735.464878][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 735.475578][ T31] Tainted: [L]=SOFTLOCKUP [ 735.479932][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 735.490021][ T31] Call Trace: [ 735.493334][ T31] [ 735.496297][ T31] vpanic+0x56d/0xa60 [ 735.500327][ T31] ? __pfx___schedule+0x10/0x10 [ 735.505230][ T31] ? __pfx_vpanic+0x10/0x10 [ 735.509782][ T31] ? nmi_trigger_cpumask_backtrace+0x20a/0x390 [ 735.515981][ T31] panic+0xc5/0xd0 [ 735.519746][ T31] ? __pfx_panic+0x10/0x10 [ 735.524220][ T31] ? preempt_schedule_common+0x7f/0xd0 [ 735.529748][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 735.535205][ T31] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 735.541401][ T31] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 735.547593][ T31] watchdog+0x1030/0x1030 [ 735.551960][ T31] ? watchdog+0x1c7/0x1030 [ 735.556437][ T31] kthread+0x38b/0x480 [ 735.560560][ T31] ? __pfx_watchdog+0x10/0x10 [ 735.565351][ T31] ? __pfx_kthread+0x10/0x10 [ 735.569981][ T31] ret_from_fork+0x514/0xb70 [ 735.574616][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 735.579781][ T31] ? __switch_to+0xc89/0x1420 [ 735.584498][ T31] ? __pfx_kthread+0x10/0x10 [ 735.589135][ T31] ret_from_fork_asm+0x1a/0x30 [ 735.593964][ T31] [ 735.597644][ T31] Kernel Offset: disabled [ 735.601981][ T31] Rebooting in 86400 seconds..