last executing test programs: 37m7.764088243s ago: executing program 3 (id=22): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x3af7912e, 0xffffffff}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f00000001c0)='X', 0x1, 0x20000880, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x6, 0xfe, 0xfd, 0xfe, 0x9, 0x5, 0x1, 0x0, 0x0, 0x20, 0xff, 0x0, 0x2}, 0xe) shutdown(r3, 0x1) recvmmsg(r3, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 37m4.820718982s ago: executing program 3 (id=31): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) memfd_create(&(0x7f0000000440)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x187\xc2:}\xa3\x9bO\xdd\xdf\xdf\xaf\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9fWI\x17\x1eq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xbdc\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x98\x82\x94\x14\xe33\xb7H\xd4b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wL;\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfd\xf9\xa6\xdd\xf0\x1f\xed\xb3Q\x03\x03}Sb\x1b\x89\n?&\x11q^\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe3\x1b\x9f\xcf\x9e\xdf\x82)\xc7P\xa4\xcdi\xde\xb0\x14\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xc3p@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafTk\"\xfa\xc37\\8\xa7g\x0f!Y\x8e\\\xac\x01\x11R\x05p\x1a\"\r\xe9\x05\x00&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xeb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x95\xf4b:\x80^\xb7\x17@.\x91\xf1\xd2\v\x8dn6\x1a\xa3\x12\xbf$\x11\'B\xec\xebC%\x86\xa2Q\xc3\x8e(\x00'/890, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fsopen(&(0x7f0000000280)='ramfs\x00', 0x1) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x20080, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c7182, 0x0) sendfile(r3, r3, 0x0, 0x2000fb) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setstatus(r4, 0x4, 0x7c00) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x16f}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x9, 0x20fe, 0x10000004, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x2, 0x200148}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x2b060a919de89952, 0x0, 0x1f0, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd9b4, 0x2000, 0x2, 0x363}}], 0x1, &(0x7f0000000340)={0x2e, 0x26, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 37m3.264377013s ago: executing program 3 (id=35): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x5, 0x7fff7ffc}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x3af7912e, 0xffffffff}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f00000001c0)='X', 0x1, 0x20000880, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x6, 0xfe, 0xfd, 0xfe, 0x9, 0x5, 0x1, 0x0, 0x0, 0x20, 0xff, 0x0, 0x2}, 0xe) shutdown(r3, 0x1) recvmmsg(r3, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 37m1.412588303s ago: executing program 3 (id=42): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0xfffffffffffffff8, 0x0) socket(0xa, 0x3, 0x3a) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0/../file0/../file0/../file0\x00') syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500200000008fd07040040000102030109026e0003010640080904000000010100000a240104001800020102092403020001050508052404050809040101010101"], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) 37m0.474368779s ago: executing program 3 (id=45): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) socket$inet(0xa, 0x801, 0x84) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000008a023b1cc319c3e4150000000a0000070400038004000263f3cb2ebb4d04130bbe42cbfa24669c076828cc4a7d468701ee82f9f3d3e5ee2c2b3a04faef4c60712741a4c4d000ecdef34539fda1f8592675d7a4e5b41ccab026524d328ef94bedffd971a3f17c738aa676f2a735f2ac2d4371a8960e54061b63119fbd4590e1d93c03163652ccbd6eafdcba0b73e9e3c762c5cffb80985e2dbb4929840d352871e9c916fc47f5d052353a5ad62dbe0117a08b7a24662116bf3bce"], 0x1c}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) semget$private(0x0, 0x4000000009, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x439, 0xffffffff, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKMODE={0x5, 0x11, 0x6}, @IFLA_GROUP={0x8, 0x1b, 0xb}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4044000) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa, 0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xfff3}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "7c1afa6b76001fe2156a0a7c8e9c7397"}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000200), 0xfffffd9d) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) 37m0.125603996s ago: executing program 3 (id=47): r0 = socket(0x10, 0x6, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xb) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x1000000) sendto(r3, 0x0, 0x0, 0xbf30ccbe47c3e0ec, &(0x7f00000000c0)=@ll={0x11, 0xc, 0x0, 0x1, 0x6, 0x6, @random="31d861384527"}, 0x80) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f0000000140)) r4 = fsmount(0xffffffffffffffff, 0x0, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1e1900, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x25) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x27) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000040)={0x10003, 0x2, 0x50000, 0x1000, &(0x7f000041e000/0x1000)=nil}) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) mknod(&(0x7f0000000240)='./file3\x00', 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', &(0x7f0000000040)={{0x0, 0x3ffffffe}, {0x0, 0x3fffffff}}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x40012ee4, 0x2) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000300)={{0xffffffff, 0xdddd1000, 0x0, 0x3, 0x8, 0x0, 0x0, 0x2, 0xf9, 0xa, 0x9, 0x10}, {0xf000, 0xd000, 0x8, 0x8, 0x0, 0x4, 0x0, 0xb2, 0x8, 0x3, 0x0, 0xff}, {0x3000, 0x0, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfd}, {0xa000, 0xd000, 0x0, 0xe2, 0x0, 0x0, 0xfd, 0x0, 0xfe, 0x0, 0x4, 0x3}, {0x3337a000, 0x10000, 0x9, 0x0, 0xff, 0x1, 0x2, 0xe, 0x0, 0x3c}, {0xffff1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x3e, 0x0, 0x90}, {0xdddd1000, 0x0, 0x3, 0x6, 0x0, 0x0, 0x3}, {0xdddd0000, 0x8000000, 0x0, 0x6, 0x0, 0x1, 0x83, 0x6, 0x26, 0x5}, {0x4000}, {0xdddd1000, 0xff}, 0xddf8ffdb, 0x0, 0x0, 0x70, 0xfffffffffffffffe, 0x0, 0x0, [0x4, 0x0, 0x4]}) 36m59.60197788s ago: executing program 32 (id=47): r0 = socket(0x10, 0x6, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xb) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x1000000) sendto(r3, 0x0, 0x0, 0xbf30ccbe47c3e0ec, &(0x7f00000000c0)=@ll={0x11, 0xc, 0x0, 0x1, 0x6, 0x6, @random="31d861384527"}, 0x80) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f0000000140)) r4 = fsmount(0xffffffffffffffff, 0x0, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1e1900, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x25) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x27) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000040)={0x10003, 0x2, 0x50000, 0x1000, &(0x7f000041e000/0x1000)=nil}) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) mknod(&(0x7f0000000240)='./file3\x00', 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', &(0x7f0000000040)={{0x0, 0x3ffffffe}, {0x0, 0x3fffffff}}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x40012ee4, 0x2) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000300)={{0xffffffff, 0xdddd1000, 0x0, 0x3, 0x8, 0x0, 0x0, 0x2, 0xf9, 0xa, 0x9, 0x10}, {0xf000, 0xd000, 0x8, 0x8, 0x0, 0x4, 0x0, 0xb2, 0x8, 0x3, 0x0, 0xff}, {0x3000, 0x0, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfd}, {0xa000, 0xd000, 0x0, 0xe2, 0x0, 0x0, 0xfd, 0x0, 0xfe, 0x0, 0x4, 0x3}, {0x3337a000, 0x10000, 0x9, 0x0, 0xff, 0x1, 0x2, 0xe, 0x0, 0x3c}, {0xffff1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x3e, 0x0, 0x90}, {0xdddd1000, 0x0, 0x3, 0x6, 0x0, 0x0, 0x3}, {0xdddd0000, 0x8000000, 0x0, 0x6, 0x0, 0x1, 0x83, 0x6, 0x26, 0x5}, {0x4000}, {0xdddd1000, 0xff}, 0xddf8ffdb, 0x0, 0x0, 0x70, 0xfffffffffffffffe, 0x0, 0x0, [0x4, 0x0, 0x4]}) 36m20.000446358s ago: executing program 1 (id=191): r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x12c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x800000, 0x200, 0x1006, 0x15a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5f90, 0x10, 0x10000000, 0x2000146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0x2f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4bc5, 0x2000, 0x82, 0xbd}}], 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="34000000020601020000000000000000000000000900020073797a4a540000000c0007800800120000000000050005000a000000"], 0x34}, 0x1, 0x0, 0x0, 0x4011}, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) socket(0x1e, 0x4, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, 0x0, 0x2, {}, 0xfd}, 0x18) 36m19.69252021s ago: executing program 1 (id=202): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x5, 0x7fff7ffc}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x3af7912e, 0xffffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f00000001c0)='X', 0x1, 0x20000880, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x6, 0xfe, 0xfd, 0xfe, 0x9, 0x5, 0x1, 0x0, 0x0, 0x20, 0xff, 0x0, 0x2}, 0xe) shutdown(r3, 0x1) recvmmsg(r3, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 36m16.884817551s ago: executing program 1 (id=204): r0 = syz_clone(0x8228800, &(0x7f0000000000)="230fae7af5ed301b8f6ef7a72044203c175ab8eec9d97e1a4c73dc513566e34c6688ee8eceb59be7ca081ade5bf364e335101725f3541a3065d2a4da46fd5f9e4a633b240b491239f0d26046025740778ba0d28f73e1258b64f23e8c45207e276a406bc91c76fc578e9cb4e74b85cb9332221a568f0b6e93abbcaccca2871eab2bbb3fda03b31ce14c029e36558d99fe972c12623e50db87e4d3c127f419b3e1d566e22d7dc6f0b6d5a87122835338b853bb3cd8df92a0bbe5f13fbe9001eee24ac84c27063da16e108357eb94ae0ec9843c1c37e410a40ad94f6c08e3358a65d6d60bf66019fb57f85c8ef61c3cae548bbb5f5fd3240194fd9ea4778855c954bf1839bac2ad44f8280f7c856b7bbb948b7243d3a99dddcb5c8a65111d6e8ed554770ced31b36985b73cf395381ec0cdb7b2171b5a2836b539a245f78b01075654d08745912f7ccb8737c6fc85af3e0c2f709d3f11c71b58c85cce0f73427aa001f0cbffb14f374196f39b3a2dc581b4ac1e7a7c82861d73c9c56b8dfb4a1b4e0fccbe2ecbe873bd6ef041298b6473d7d0a3de3a87f5564e693733715d3d3e7f2018049fb0bb0293c1b1251e25412c7485e939d9cc2fc3365dec306efd41c6284ffbbac9613972982502dfc529f215b817b5ecd7d7bd34371a54c378757f10b1861ec7e337845064e09c909894a1caa5e749a411601007a32e417b6d9231b60a90298ea719247fbae58f2e1208bb1ea6e168c9f221e95e3f9aef644c3d7a2654acd088ba3f3bd3f887f1d0d421e8a717110e2778c3de63b0d6b2f212d4b74d720aa5735c1a1e0a9e728cc43df5ce35e31ac4f44ea667042b39af1fe6d240e4611bddea932c42e2aac6c003ee54947e92fab9df94d9306a84b57244d0a11011e73c9bac48321e6de87ce4a4c780602d515f27f1b282e518d88f13cb8727ea02bd3b0cc7e983992f4720ca7e36c89db4c920f3a77880d6476685003e6b3fa36897b4f1b25550c98652d211d47cf3c8d4f94a6a5249d4cfcd1d54d1cf824c479d41745790ef8af39f8039b88b18060e7da8de99810533130b3537a2c384b148839f0bc97721d750c7dd4b9f64ffc0cae909c5cc026d39b9df65ac244dbf14f69d696e2e8fd02fc3576ec2f1dbf8fb4b43aa91c9086ccae446ac48f4fab40aab4d7eee1c048791bf355c0c64a80e4f820bd92e6a0546801bb3083d16034c92bf22f4fc537fb7fbea5f2c3bb6348b618dd570d35fb194310a0d3f352cd1205de26ad20907a6114843b521c1a9077def62dec89a54b7077169d4a78ac1db2fc888b78121e76c83e1ffb09f105610503765f7322ed94bd9b19ef2f7a3eed9f178433db5baecf259c7b818de59213b6b30c05715b52f6e34dc6d3c4f173e9fd0c60e17e4c509991d32488d3b0e96fb5ae6c01f6ee4529117e5e14209b86d2ae855448e9ec1e33832c136a7cde75dc1e9c6debc098844a344519a8625ca7c0d624087f33905809664a6ac5205678be977b129afb51f5b06678d63fa72c3856a50770cfdcac958ac40f11b482748d88c8e56d45034c8922d64989862639d88d23b3f058c9c02bc111f6b00d598976b280b07b165045dc646a0a05a2afa1ca003720588e281415c19f0cf050395310501f20904fa7be1307f6aefabf38cd4b3bcdc343dd5e86e0db0d1267c0746344ffed1fefe6cd146153512eae62bea4e303ce2911cc7120f186d781b9449b8b8a7dd2d86f7d6386f9981cb89313ccd509ef2dc7c42a894b06278a0534a55b934bb052031f45f770bb7bb1b024a211d4ed91e2345e97d5b7aab3c15b1142963d336a3f3850a0daf91685bb808099c2ccd26c8008c2f7670fb3b9af30dd7ed59379ef9002a14803ea457ca6b3474caa6d6370e36be4f6a230caf4b915b2de4332b4e9e705ff5b5dc634a5ee054fc5180c90c5c3ed6d9745bfe3fb405b56076ae0302879206290e526805294ad84b6581bce52b3d02a51ad433ed967663f8c9ececf898febd4932734b4ac8e3d516b14b892bba0b9e5683e898e5b81129250700f07cc10b5e3f160352745430ecd984445d379b919021f36925c5cc31fd4a1267a083bb9e6f668c9b72c1ac9e8229d47ee58ac73a10f0cadf4015abc90f3f53fd77581be13e5b0a42e86869e90927f1e07a0febcea9e875815e773a9d1bb3ea31735f2a55893c1bac34c685edb4a30ccc52ad281c36c3c0c79b84c2237121e7f64e0892f9c1e4442c9f696f76614a270497d66ec00f42f946473d75fcb3c1afd83cd291f4f7ddbd4e759ec731739e369da05536f3b5ee9476bf9b7d1f16fbca38dd8bf5231c92e3fda0a18405a03c85402b1064c719f96314d3ff6ad0f72a50cc0da65cdc66b15a3a303a5524da5d6a8d725748100bbb13fbccf78bbafe1d3dfa2316ba11dfef8b4b7ac64a51aa8c89a588c2b80110ebdb19bf6393bf30c2711bb08643a343f626512f6b656d8b27442f07a4f5c12651e8cef78bb27ca385be0584e67dd13f0a6cab10c0809a7502cb27b033354f1f1343795099399066116e253079e1eacc15b9bc97948a2583479e3961b041bb71504f2bc4a23ea082fd5cc5732fdbaf140dfc2f611d504c54adee389440e50e3b6a78f58e170ac3c0b7035bc09cf69fb46fb904fe03597847d4defeb25bf6d6dd753837fab2b378459c010ad44448bcfec29d26df1b548529b228975ea68b82529203de383a9491dd8d95bdde24118fdc9a37076c9d6a9e44c1d127031bdd1a2cd1d467e97bcbb152bf9096db11c7a705c09776462ad8dfb6509d0606805491eb544b898b2fcb00b1203b8ca81055be2b1f3e441fe9ae6c0a95442e01dcc345495dcb593ec6e1c866551431279fa2b30b59c53418c06e879255d048313ff11b27c2f20491c9d1a9bf7d03bca4713e938f351796eda4c92569ea56cb5dcc0b710bbf7fde8164c5886f96ae3ebd1d4fb022feecc1ec7141c1c9567c414f3b6aeb9fdeed3c450ce65f8ba8aa6691b022246946ac615df80114eab2987e6bab6b9f882af1187c38a0742b3106515ddcb07f13f9216dfd80a0671c526854b8fd617f80be8a39aaa13fc5a711a977a0f0a04d6697bea348a8b1f6dc05912d934de421d1d6e17f44e1991e5ff49a0efa9510d4f8e9204a05b0ac3e4f895c31eb12047d969a365712c34aeedb81887b91fca37024ce51eb2a0f346b3c3761669c0dd86fb78e33114489baa5965b6251d55db92af7a398fb9394eabb25d0e2878870b0ae6e1e54912ba37a6da5cf4ff45eec50d10ab20e6dcadc1a7b3648238c7f5c724f7f6b4ed7fa8164fae7db060752a16f4e683110ae49e6d151b0b4c6b6e3b3df76020bcce34c9feee547885c0028cc0caaf60b8afdfcc6a65c6257cf5a99c6004138adbffcfa9788672659d8c8f84c9537b541e688ac075d24bbc96b68029f9722d06224e5103c2022657918dc8394ac758d7deeeb56faee947295493db886ffdcb7df8d4dba526b72ade06152ca8aed99908bdbdf839d59e0f33df34c69f06cee4931201bfcb929f2db5193317634cf033f33c01572674973a10319e7221d7ef50327ac8a26bfa111f8d2f43f8bae9cb40aef959faeae27ff666882666db378e5fbcc0b81765f463d7ab667be985018b66e06959bbb048331be43d65674b27d3b25553c999c96dccc9c71d5cc9dd41a9d6ebdb06ec0a8ed6f902b0907e315e6b9ac338b4f742baf37a6c4e5ee568667eacfc73fe5a3bb26813a18d08d3f19e8346de9101bc6ce7066da651374ccd75a8f774f43aca1c4bcf1527c24369404bea1f6341f67ec7290ccbb6a0828865150ba21bc23105751feea79e1bb6717ee7f4c547aba34f83d59793c1dfcdbeddaaa69226441eb45bc675624455fccfd352a75c381a4571824128512f98f51281a707fe76a9f1e9b9d21464544a54c2ed7b450c2ca6d6ab7b22cf0844b7bb9d8c36be58dc2caf432d7b57d168a00888d70cf6e8beb6fda8147cc86f301767cfc7d8771ce1b161132239e96c6d7e853d09dcdae50a45da75e06f35eb246be68531723a109774166a8d1011904fdd872d97544d22ca2cef4f77b4e83caf37ddf659c3fde5c442f1fe45fe7d408884b6d5e0634d50924596b891d29cb518a0c2f7a90eaf2e77b56daf7e149a6affdf293d13f26d9fbc6263d2d05bfa4cd598477d7045227d207e3694ebec440818120ebdb65c852c5ee9f70af45364672d5e2e33424997557de78b7fa9f9abcd10c7795a2ee1ce217e1613c82ce248daffc0d5719936ce0b6a90a505f7548ce4f7d6291f0c03c40e20b50af5bbbbf86bf5d2029e0da4d41cdb0b5c464a5469f86ce88333fd89f23c41a0f85479e49635e77dcca127b095ffa66cbf278db28bfc4e64de06c686bd1a2ef3613ca5b1579e759085e87a0a00ce210bacf0fa8799562cb2ee186d10d26c9b60167264ae3faebf83d6320752a4ec2c1427da21e7ab4ec4c5aea92de823aaa68c6a57e2a9c628b6f46e3bd77bca2db9ebf146f0c4ee70e27e180e1f7cb10482315f371d4ade61784c98f68ebdd9596ab34e7e61b754fd0d761678cbebdff5a5d565895fdf66a04666f76714250971a04d3432cd6c6715e436322fd1c58065e68fa3f856a057422e580446dfc7d94325a8e02003ec0770ad432a25bd8346314d610f7c3ef42033957a5e8e3407a5dfd061ca80159a639677bc438186027a2bc87e5ae01be1f82bc82aa760dea41c18806055542aff46ea8bd44daff3cf0cce19ebee3168b603ab9533876fadde8533c420ed1b0eba15abd8da637363cf062d74f7a71813b99fee0dd8507a4f2b79ae994ab333fdcc7f985eb81cad4efe4b53a329cc3c56fa56db662c856681a4f5056c179f8c91dc0623973c217808b250c4738461e1b626a012ecd9034980599d587898abec573edb1e3eff6a304acbe093765a02b62349f3f424db6c604cc9c1a44897c3bb77cd1fff350d4ce7ca51859bb736f5c6155a217fc6b72ddb2e70f3f82b543f120cf11b5721478518393d6795a5998bc08bfe38dd08e4b09a6aeff076bf8405eb58730c4855943814dac93404b9d76cced38a0180e4a5ff95cb1d67f80343ee04d9b7af08f34174c642acd58a3e9428723673ca46ab6155e6e6c1ca775ebee1d595f59afb71be52837361dca5e8df2698d707261b8deb78611847ebe138d14df17c8db1fcd6910c5df44167cb4f81af3d1893f257162b69345dd4fde1b0524149eed2f6954034335bfd4ebf2408cd44454de97a8bc42d24ab82198081d010856c695f7cdcd5daf1706a52b628b88f1b008a86ed8aa205317182ffa81cb79e2434adce98b8c9c3848a4860746820a2ffb6554de5d6f3a3492453948f4f87b88de69b03db03fdeeb54d57ef7586297a9b4c5ceb5293a3ca4e03d60286c258f417fd77d0fb36431f5d8c864ae5a65c150d55bacf2342af4d0b5c49e43ae441fe0a3a2b4aafe5c726c5c16b5b835e77b73c44a530f9dd610788449e2be00b331eb43c6e4de46789d587137a2d0317e86e3b20d9c6292075d03c968b2941bd17b35f3c333a9dadd7d16cfe738263a46f93b159e374b98a277df1eaf20059e82ba4e5ca2c6f7e7e3b63db5d036aa317cd9e93b9fff27e8bd8c7a3d12a82728344e5e852ff539553663790987a9846f5898738a915f93d7aa52645409be3f14f637bb308cd0a2f3c42beb2706fde434b3673da8b2ef4a9fee55f3a062f4d75d07fb02f81826b718d13252b41d6a458f2d3f99a441d4b16c7ed01383596e537fe1ec556e27b37f991931dfa98cfc6960d2c5bba4", 0x1000, &(0x7f0000001000), &(0x7f0000001040), &(0x7f0000001080)="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") sched_getattr(r0, &(0x7f0000002080)={0x38}, 0x38, 0x0) sched_setattr(r0, &(0x7f00000020c0)={0x38, 0x3, 0x2, 0x100, 0x10001, 0x52, 0x8, 0x2, 0x560, 0xfffffff0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000002100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000002140)={0xfb, 0x6, 0x0, 0x3c, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @local, @mcast1]}, 0x38) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2) r3 = msgget$private(0x0, 0xa0) msgsnd(r3, &(0x7f0000002180)={0x0, "0096656da3838579d56f4e44b11f989e0eb338209b007b6cb518fad7cb0d7cc0f4e5b8d4de79f7e55294662a165bbb3d641b1c43f04488e1445bb0d7bc13554559376c913a0fc5d5527a4f2aa4"}, 0x51, 0x800) stat(&(0x7f0000002200)='./file0\x00', &(0x7f0000002240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getpriority(0x2, 0xffffffffffffffff) msgget$private(0x0, 0x4c) recvmsg$can_j1939(r1, &(0x7f0000003740)={&(0x7f00000022c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002340)=""/213, 0xd5}, {&(0x7f0000002440)=""/34, 0x22}, {&(0x7f0000002480)=""/253, 0xfd}, {&(0x7f0000002580)=""/9, 0x9}, {&(0x7f00000025c0)=""/9, 0x9}, {&(0x7f0000002600)=""/109, 0x6d}, {&(0x7f0000002680)=""/120, 0x78}], 0x7, &(0x7f0000002740)=""/4096, 0x1000}, 0x105) msgget$private(0x0, 0x8) stat64(&(0x7f0000003780)='./file0\x00', &(0x7f00000037c0)) sched_setattr(r0, &(0x7f0000003840)={0x38, 0x6, 0x50, 0x1, 0x17b, 0x4, 0x0, 0x2, 0xffffffff, 0x7}, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000003880)='./file0\x00', &(0x7f00000038c0), &(0x7f0000003900)='./file0\x00', 0x8, 0x1) r7 = openat$ttyS3(0xffffff9c, &(0x7f0000003940), 0xc0000, 0x0) openat$adsp1(0xffffff9c, &(0x7f0000003980), 0x200, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f00000039c0)) r8 = syz_mount_image$fuse(&(0x7f0000003a00), &(0x7f0000003a40)='./file1\x00', 0x20, &(0x7f0000003a80)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xe00}}, {@blksize={'blksize', 0x3d, 0x1800}}], [{@fowner_gt={'fowner>', r4}}, {@fsmagic={'fsmagic', 0x3d, 0xe}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/ttyS3\x00'}}]}}, 0x1, 0x0, &(0x7f0000003b80)="e90f9992f053e6020de72b410702a9ebb8484b4c9be648dd3bb49bb6cbafe4243cb68f3982364f48c4ec1113c95355974685e50f6e519a36a4c5e5ce6a2085dcf34b648c7102a2f57f72d763d5f705c1da8f26ea0f4aa60710730c6ee31e99e7f43dd882356bb1d4c00c400e1fc5ec27ad5490b687dee131f2417d7fe47bce318c944bae3e52d70f338b7a912b9219e1b5f52bb58226225717e04bbc01c2b48b358330da2c3a688a33ce6c00919cfc6f7e46d0dcba6d642d6d910170d5") linkat(r8, &(0x7f0000003c40)='./file0\x00', r2, &(0x7f0000003c80)='./file0\x00', 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000003cc0)=@nullb, r4, &(0x7f0000003d00)='./file1\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000003d40)={'netdevsim0\x00'}) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000003d80)={0xffffffffffff2b63, 0x9, 0xfffffffffffffffb, 0x3, 0x5, 0x4b9}) openat(0xffffffffffffffff, &(0x7f0000003dc0)='./file0\x00', 0x10000, 0x180) ptrace$ARCH_SHSTK_DISABLE(0x1e, r0, 0x1, 0x5002) ioctl$XFS_IOC_OPEN_BY_HANDLE(r7, 0xc01c586b, &(0x7f0000003f00)={r6, &(0x7f0000003e00)='\x00', 0x129101, &(0x7f0000003e40)={@_ha_fsid={[0x8, 0x1e3]}, {0x2, 0x5, 0x9, 0x7fffffff}}, 0x1, &(0x7f0000003e80), &(0x7f0000003ec0)=0x9}) clock_gettime(0x0, &(0x7f0000003f80)={0x0, 0x0}) futimesat(r1, &(0x7f0000003f40)='./file1\x00', &(0x7f0000003fc0)={{r9, r10/1000+10000}, {0x0, 0xea60}}) ptrace$setregset(0x4205, r0, 0x202, &(0x7f0000004080)={&(0x7f0000004000)="f3ce83a02dc7eae9f20bb82aa744776e35992be85b63312bfbd7b5beebb09baede88c54a5966b09009ad5e8332d421e0f85ce0962ccf69bf5ff61f456ebbfbcfb16a877fca52f1a3759ff8f897959dd704d64db6ea4cdfd9a98fddccef2bba13e8ab05cf833235a77351e32d735c521cdb31b8920ebb2c4c", 0x78}) 36m15.916410422s ago: executing program 1 (id=207): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0xfffffffffffffff8, 0x0) socket(0xa, 0x3, 0x3a) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0/../file0/../file0/../file0\x00') syz_usb_connect$uac1(0x0, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500200000008fd07040040000102030109026e0003010640080904000000010100000a240104001800020102092403020001050508052404050809040101010101"], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) 36m14.674876001s ago: executing program 1 (id=215): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) memfd_create(&(0x7f0000000440)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x187\xc2:}\xa3\x9bO\xdd\xdf\xdf\xaf\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9fWI\x17\x1eq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xbdc\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x98\x82\x94\x14\xe33\xb7H\xd4b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wL;\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfd\xf9\xa6\xdd\xf0\x1f\xed\xb3Q\x03\x03}Sb\x1b\x89\n?&\x11q^\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe3\x1b\x9f\xcf\x9e\xdf\x82)\xc7P\xa4\xcdi\xde\xb0\x14\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xc3p@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafTk\"\xfa\xc37\\8\xa7g\x0f!Y\x8e\\\xac\x01\x11R\x05p\x1a\"\r\xe9\x05\x00&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xeb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x95\xf4b:\x80^\xb7\x17@.\x91\xf1\xd2\v\x8dn6\x1a\xa3\x12\xbf$\x11\'B\xec\xebC%\x86\xa2Q\xc3\x8e(\x00'/890, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fsopen(&(0x7f0000000280)='ramfs\x00', 0x1) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x20080, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c7182, 0x0) sendfile(r3, r3, 0x0, 0x2000fb) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setstatus(r4, 0x4, 0x7c00) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x16f}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x9, 0x20fe, 0x10000004, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x2, 0x200148}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x2b060a919de89952, 0x0, 0x1f0, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd9b4, 0x2000, 0x2, 0x363}}], 0x1, &(0x7f0000000340)={0x2e, 0x26, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 36m14.30664341s ago: executing program 1 (id=217): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setattr(r2, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f00000001c0)='X', 0x1, 0x20000880, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x6, 0xfe, 0xfd, 0xfe, 0x9, 0x5, 0x1, 0x0, 0x0, 0x20, 0xff, 0x0, 0x2}, 0xe) shutdown(r3, 0x1) recvmmsg(r3, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 36m13.960051729s ago: executing program 33 (id=217): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setattr(r2, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f00000001c0)='X', 0x1, 0x20000880, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x6, 0xfe, 0xfd, 0xfe, 0x9, 0x5, 0x1, 0x0, 0x0, 0x20, 0xff, 0x0, 0x2}, 0xe) shutdown(r3, 0x1) recvmmsg(r3, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 24m42.495516992s ago: executing program 4 (id=3826): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="64000000090603000000000000000000020000003c0007800c000180080001407f0000010c001480080001400a0101000600044013880000060005403a9800000500070006000000080006400000000105000100060000000900020073797a3100000000421b211f6cdffaa7c8ec2255bab0013c8b691dcac75fea9077145128cff65a23abc9"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 24m41.035724413s ago: executing program 4 (id=3838): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x1924, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x18f4, 0x2, [@TCA_FLOW_DIVISOR={0x8, 0x8, 0x8001}, @TCA_FLOW_KEYS={0x8, 0x1, 0x17c00}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x9, 0x8, 0xfffffffd, 0x526}, 0xd7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x6}, @TCA_FLOW_EMATCHES={0x34c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x2, 0x8, 0x84}, {0xffffffffffffffff, 0x4, 0x7}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xc34}}, @TCA_EMATCH_TREE_LIST={0xb4, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xc, 0x3, 0x82a}, {0x0, 0x2, 0x8, 0x8000000}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x901c}, {0x7, 0x6, 0x1, "8652c41d345f"}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xffc3, 0x3, 0xfff7}, {0x8, 0x4c, 0x8, 0x6}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x3, 0x3, 0x8}, {0x3, 0x6, 0x101, 0x200}}}, @TCF_EM_CONTAINER={0x44, 0x1, 0x0, 0x0, {{0x9678, 0x0, 0x7e}, "8f462fea7c7f1cbd9dd96e43617c5952adbd13a1bcd52fce3aed513ca66ae8c654252f74d09167844fff89b03548fef915af17ee89309851"}}]}, @TCA_EMATCH_TREE_LIST={0xb4, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x7ac, 0x3, 0x2}, {0xf3, 0x8, 0x1, 0x81}}}, @TCF_EM_CONTAINER={0x94, 0x2, 0x0, 0x0, {{0x0, 0x0, 0x8}, "90a7bd157ac9649bd44e7396a3ab6f980cd2a32e2199c86136a92341bb7699fef3b0a1c34c98495d0879e27eedc01ffdb620d38819244b987083d42e117e9986f6ac88715a20831b1b30955ac92fe31eae7b2cd8a0160b495b4130556ad2069a88398bf3eb5119a78c1492b9598ac396980e88eb4194064a96f4106cbb84b2395f94335cbfd458"}}]}, @TCA_EMATCH_TREE_LIST={0x1c4, 0x2, 0x0, 0x1, [@TCF_EM_META={0x8c, 0x3, 0x0, 0x0, {{0xa, 0x4, 0x101}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7ff, 0x9}, {0x1, 0xa, 0x2}}}, @TCA_EM_META_RVALUE={0x17, 0x3, [@TCF_META_TYPE_VAR="fd05", @TCF_META_TYPE_VAR="f7264adfc71f4d", @TCF_META_TYPE_VAR="7c84", @TCF_META_TYPE_VAR="ca8b5022cb5a5f3d"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x8, 0x1}, {0xf, 0x4, 0x2}}}, @TCA_EM_META_LVALUE={0x27, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="88cbda543079fa", @TCF_META_TYPE_VAR="8b22d0ee1368e9cd6a", @TCF_META_TYPE_VAR="7aac04", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_LVALUE={0xf, 0x2, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="9057be345c37b9"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x2, 0x1}, {0x3, 0x8}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0x40}, {0x2, 0x7, 0x1}}}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x8, 0x8, 0xc}, {0xffffffffffffffff, 0x3, 0x4}}}, @TCF_EM_IPT={0x108, 0x2, 0x0, 0x0, {{0x4, 0x9, 0x8000}, [@TCA_EM_IPT_MATCH_DATA={0xe1, 0x5, "eb9cca96ecf9dd888c7ed96c4826519a954d8fc917c74ed6b762bfa4a7975325cc1b9f0969f347b724e7f64cd6c39b9a0381d8c26c192b3a14f20fad598368b11105313b557eb5de3c7a950604b81a4314e3d18d879ae095539456e8464222cb24552460339d2b749aad416d367bf1a709a330ce49e24cad3d056051151eec50946618c11daf6b6dac9f193385e0ce2599f03cbf611adb4e4e09aac0c9b8eee46e5c58ae88819c0286b8cb5e35d7ad2db70f04ce3e552dc8e03f94f5dd9238274d67950a446762caebde7c2b9eb19aec17755fb6bc155a2caa4438166c"}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xd, 0x3, 0x9}, {0x8, 0x3f, 0xf478, 0x1}}}]}]}, @TCA_FLOW_ACT={0x1478, 0x9, 0x0, 0x1, [@m_gact={0x1090, 0x11, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1cfb, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0xfff, 0x4, 0x3, 0xffffff34}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0xff, 0x10000003, 0x1, 0xaca}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x3b0, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x13d2, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x934, 0x6}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mpls={0x104, 0x1b, 0x0, 0x0, {{0x9}, {0x48, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x1, 0x0, 0x8, 0x9988, 0x9}, 0x3}}, @TCA_MPLS_TTL={0x5, 0x7, 0x5}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_LABEL={0x8, 0x5, 0x6}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_TTL={0x5, 0x7, 0x7}]}, {0x92, 0x6, "4d9b37aba70755bb2273b8c63c2be7574e45864d81db10831e55e7303bfd72520b6e8ed4ec1604f91cdc9f565bda66ce0e394216bfe4da4d3635ad5bcb7d69129f43ef321254d2c5ed8c3629392ee5ae8c694423e9a31395ec2e252937104d27733774c31d285ae2ad0a19fc0affff463331de1b8124cfc75f5753cc8f32d58d1b34c100223ede09de7381919773"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0x78, 0x1c, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x6}]}, {0x44, 0x6, "ee36f4b3e59068d068156f40fe16c21894810c97b2077ff181fdcb117aa423bc2501ef43a267f3795c557636c3b0fe40910aed19ebed159aa52bc5ea9c960334"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_ctinfo={0x64, 0x1c, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x2}]}, {0x2f, 0x6, "9c132568a7dc37a27649ac9c6691eb57f119e7b5ea84ea23f147f6ee0a82571010a2cd517452b97bd9466e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbedit={0xa4, 0xd, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3ff, 0xffff, 0x0, 0x15c4000, 0x34}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0x8, 0x10000000, 0xc441, 0x8}}]}, {0x3f, 0x6, "9fef29919ea4ee615af8b9fc27a71734bb49a16384b574a7eea3d8682cad104583362fffa1e9467d55625861f062569643cdee9086b5b90e06a991"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_vlan={0x160, 0x1c, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x80000000, 0x9, 0x5, 0x968e, 0x8}, 0x3}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x9, 0x0, 0x10000000, 0x9, 0x100}, 0x2}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x9eb2, 0x9, 0x8, 0x6, 0xfffffffc}, 0x1}}]}, {0xdf, 0x6, "32499fcb01d7dc8c9422c6c03286784b0f940eae65e44959193a3ed168a8bf052a541f1d6fc8a8f22aa342a7155bdcabde665cd254668fb73ed8bd8be94c767e1e750b8196095833f0c72547f60a8c2834526f506141ebb243c9911c9b958fef817683bb2584399a4a76d712a69e68e48857c69c4e5a46201ac5c444b63f31ada7a08f7f115d3578bc18d2c12afffb7096e7fd1cf7fc8cfbf91b9d31862684248dc2772711fc5f4c21616671df0229d090270118ebf04ebee4fdc768c781cc56efe1bbc9815dc93a46a6f26407b6d4ee2e10cfdba8acbb29c00fec"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x5}, @TCA_FLOW_EMATCHES={0xbc, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xe400}}, @TCA_EMATCH_TREE_LIST={0x48, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xe, 0x3, 0x2}, {0x4, 0x3, 0x42f1, 0x10000}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x10, 0x8, 0x1}, {0x1, 0x1}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x3f92, 0x1, 0xff}, {0x9b, 0x9, 0xb, 0x1, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0x60, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xfffe, 0x8, 0xe}, {0x3, 0x6, 0x5}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x80, 0x8, 0x3}, {0x1, 0x5, 0x4}}}, @TCF_EM_META={0x3c, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_LVALUE={0xe, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="f118"]}, @TCA_EM_META_LVALUE={0x1d, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="af3fb797daf0daf3a6", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x6]}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x1924}, 0x1, 0x0, 0x0, 0x4894}, 0x42) 24m40.782526045s ago: executing program 4 (id=3843): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xa74a, 0x80000000, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) sched_setattr(r5, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) map_shadow_stack(&(0x7f00003fd000/0x2000)=nil, 0x2000, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) r6 = syz_open_dev$vim2m(0x0, 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000280)={0xffffe8d3, 0x1, 0x83, "ac9b94aaad0b79ae3a00000000000000dcfa577900", 0x31324d59}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="64000000090603000000000000000000020000003c0007800c000180080001407f0000010c001480080001400a0101000600044013880000060005403a9800000500070006000000080006400000000105000100060000000900020073797a3100000000421b211f6cdffaa7c8ec2255bab0013c8b691dcac75fea9077145128cff65a23abc9"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 24m37.262975211s ago: executing program 4 (id=3859): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_newrule={0x30, 0x20, 0x1, 0x70bd2d, 0x25dfdbfc, {0xa, 0x0, 0x80, 0x0, 0x9, 0x0, 0x0, 0x3, 0x2801e}, [@FRA_SRC={0x14, 0x2, @private2}]}, 0x30}}, 0x480d0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c00028014000300200100000000faffffffffffffff000114000200fc02"], 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x0) (fail_nth: 8) 24m36.474545911s ago: executing program 4 (id=3863): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) close(0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0xc0) 24m36.279230477s ago: executing program 4 (id=3867): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x34, 0x18, 0x229, 0x0, 0x0, {0x2}, [@typed={0x69, 0x800, 0x0, 0x0, @u32}, @nested={0x15, 0x9, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x9, 0x0, 0x0, 0x0, @u32}, @generic='`']}]}, 0x34}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001880)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c000180080001400a0101010c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x8880) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r4, r4, &(0x7f0000000000)=0x2eb4, 0x2000007ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x30}, [@alu={0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}]}, 0x0, 0xf, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="14010000", @ANYRES16=0x0, @ANYBLOB="00082dbd7000fbdbdf25"], 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0xa4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000810}, 0x20004000) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$XFS_IOC_SET_RESBLKS(0xffffffffffffffff, 0xc0105872, &(0x7f0000000040)={0x1, 0x15}) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x3, 0x2, 0x7, 0xc5, 0x19, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x7f, 0x7}}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000e80)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010800040000000000000b01000008000300", @ANYRES32=r11, @ANYBLOB="28005080140001004abee33957edf8aaae14574df40000000500020007000000080003000bac0f"], 0x44}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x9, 0x2e}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8020}, 0x880) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r7, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x88, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x24}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x24}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x22}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}]}, 0x88}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) 24m20.60756488s ago: executing program 34 (id=3867): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x34, 0x18, 0x229, 0x0, 0x0, {0x2}, [@typed={0x69, 0x800, 0x0, 0x0, @u32}, @nested={0x15, 0x9, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x9, 0x0, 0x0, 0x0, @u32}, @generic='`']}]}, 0x34}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001880)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c000180080001400a0101010c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x8880) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r4, r4, &(0x7f0000000000)=0x2eb4, 0x2000007ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x30}, [@alu={0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}]}, 0x0, 0xf, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="14010000", @ANYRES16=0x0, @ANYBLOB="00082dbd7000fbdbdf25"], 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0xa4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000810}, 0x20004000) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$XFS_IOC_SET_RESBLKS(0xffffffffffffffff, 0xc0105872, &(0x7f0000000040)={0x1, 0x15}) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x3, 0x2, 0x7, 0xc5, 0x19, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x7f, 0x7}}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000e80)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010800040000000000000b01000008000300", @ANYRES32=r11, @ANYBLOB="28005080140001004abee33957edf8aaae14574df40000000500020007000000080003000bac0f"], 0x44}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x9, 0x2e}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8020}, 0x880) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r7, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x88, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x24}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x24}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x22}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}]}, 0x88}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) 16.078428555s ago: executing program 0 (id=11833): setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x8) r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', r2}, 0x18) 15.880573182s ago: executing program 0 (id=11835): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c402000008000140000000080900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x8084) 15.749192667s ago: executing program 0 (id=11836): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 14.690075249s ago: executing program 0 (id=11845): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0x0}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000080)={0x17, 0x88, 0xfa00, {0x0, 0x10, 0x0, @in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0x14}}}}, 0x90) 14.588399648s ago: executing program 0 (id=11848): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x14) r2 = openat$cgroup_int(r1, &(0x7f0000000100)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000140)=0xd28, 0x12) 14.329863382s ago: executing program 0 (id=11852): openat$hwrng(0xffffff9c, &(0x7f0000000240), 0x40, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x8}, 0x1c) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x294}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.902726033s ago: executing program 6 (id=12026): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x1, 0x1000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400}, [@RTA_NH_ID={0x8, 0x1e, 0x7ff}]}, 0x24}}, 0x44890) 1.704912298s ago: executing program 6 (id=12029): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x8000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfff7fff7}], 0x1c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r0, 0x2000, 0x0) 1.456187382s ago: executing program 5 (id=12033): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, 0x0) setpgid(0x0, r3) openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) 1.406060092s ago: executing program 6 (id=12034): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x8, &(0x7f0000000800)="ba9871f857824c899ccaab7ffe605770fa93d17e57931d70f53b6356") 1.238050382s ago: executing program 7 (id=12035): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x4a88, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffbffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0xf, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x28, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x40}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x62}]}]}]}}, @TCA_RATE={0x6, 0x5, {0xc4, 0xd7}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40001}, 0x4004080) 1.237804464s ago: executing program 2 (id=12036): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c402000008000140000000080900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x8084) 1.132206375s ago: executing program 5 (id=12037): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r1, 0xa, 0x21) fcntl$setlease(r1, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.066488549s ago: executing program 7 (id=12038): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, 0x0, 0x0) 1.014966551s ago: executing program 6 (id=12039): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="6c0000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002"], 0x6c}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.012788406s ago: executing program 2 (id=12040): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trylock m'], 0xf) 770.064563ms ago: executing program 7 (id=12041): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="380100001000130700000000fcdbdf250000000000000000000000000000000020010000020000000000000000000000000080024e210002020000001d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000000000fe320000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff080000000000000001000000000000000900000000000000000000000000000043050000200000000400000000000000ffffffffffffff7f000000000000000000000000000000000300000000000000000000002cbd70000035000002000400500000000000000048000300"], 0x138}, 0x1, 0x0, 0x0, 0x4010}, 0x48080) 769.669451ms ago: executing program 6 (id=12042): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000dc0)="5c00000014006b02c84e21000af32c6e0a0601000100000044000100fec00e000000004e0033df090e8497b1ed90d3d376bd5f6ffe5aa677b1c6f99b214460bc24f65ee2f308ff9d4f5a60eab556a705251e618294010000003b48df", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x80000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x1, 0x70bd31, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xaac}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x3c000005}, 0x20cc0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 769.505033ms ago: executing program 2 (id=12043): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000000)=@newtaction={0x44c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x438, 0x1, [@m_police={0x434, 0x1, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xffffffff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x44c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001800090000000000000000001c140000fe000001000000000c"], 0x28}}, 0x0) 756.246859ms ago: executing program 5 (id=12044): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xc2000, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x3c) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x2, 0x6, 0x1ff, 0xbb7, 0xe, "5c56f5ad3d31d3f269701f265cbc0877b0a701"}) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x8, 0xee6, 0x4, 0x489e000, 0xe, "99212c0155b6056ee613657266ec62b016d5a9"}) 598.145111ms ago: executing program 2 (id=12045): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=@newlink={0x4c, 0x10, 0x401, 0x70bd2d, 0xb83, {0x0, 0x0, 0x0, 0x0, 0x18488}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @rand_addr=' \x01\x00'}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c830}, 0x4080) 501.881472ms ago: executing program 5 (id=12046): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, r2) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r3, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) 501.66215ms ago: executing program 7 (id=12047): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000080)={0x17, 0x88, 0xfa00, {0x0, 0x10, 0x0, @in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0x14}}}}, 0x90) 343.230117ms ago: executing program 7 (id=12048): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f00000004c0)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xe, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 331.061444ms ago: executing program 2 (id=12049): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x40, 0x4, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x84}, 0x20000800) 266.037172ms ago: executing program 6 (id=12050): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb6cb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2, 0x20}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 265.876894ms ago: executing program 5 (id=12051): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) r1 = fsmount(r0, 0x0, 0x82) fchdir(r1) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4) readlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)=""/79, 0x4f) 117.618754ms ago: executing program 7 (id=12052): prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000300), 0x4) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'virt_wifi0\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x47, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb66, 0xc1, 0x4, 0x1, 0x3, 0x4, 0xfe, 0x1000, 0x9, 0x3, 0x3, 0x80000006, 0xfffffffa, 0x5d, 0xa, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x763, 0xfffffffc, 0x1, 0xe, 0x2b12, 0x1100, 0x6, 0x1c00, 0xb, 0x40, 0x4, 0x1, 0x3, 0xffffad37, 0x0, 0x40, 0x8, 0x7, 0x79b, 0x2, 0x5, 0x7f, 0x7, 0xa, 0xefaf, 0xf, 0x102, 0x4, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x9, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x400, 0x9, 0x4, 0x7, 0x2, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0x8, 0x6, 0x6, 0x9, 0x80000002, 0xfdffffff, 0x10002, 0xfffffffe, 0x84, 0x100, 0x5, 0xc, 0x81, 0xb, 0x5, 0x20006, 0x7, 0x2, 0xb, 0x4, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x80003b, 0x2, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x5, 0xc59, 0xffffffff]}}) 11.285881ms ago: executing program 2 (id=12053): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) unshare(0x40000000) 0s ago: executing program 5 (id=12054): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4009}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x8084) kernel console output (not intermixed with test programs): 0000ffffff9c RCX: 0000000080000200 [ 2212.051385][T10500] RDX: 0000000000000400 RSI: 0000000000000000 RDI: 0000000000000000 [ 2212.051391][T10500] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2212.051397][T10500] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2212.051402][T10500] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2212.051416][T10500] [ 2212.308823][T10502] tipc: Enabled bearer , priority 0 [ 2212.334578][T10502] syzkaller0: MTU too low for tipc bearer [ 2212.354004][T10502] tipc: Disabling bearer [ 2212.663427][T10512] binder: 10511:10512 ioctl c018937b 80000940 returned -22 [ 2212.684994][T10512] binder_alloc: 10511: binder_alloc_buf, no vma [ 2212.748765][T10513] binder_alloc: 10511: binder_alloc_buf, no vma [ 2212.756812][T10512] syz.6.11223 (10512): drop_caches: 2 [ 2212.808332][T15819] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 2212.873529][T10515] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2212.880103][T10515] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2212.886195][T10515] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2212.893064][T10515] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2212.899331][T10515] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2212.960461][T15819] usb 1-1: Using ep0 maxpacket: 8 [ 2212.971767][T15819] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2212.984440][T15819] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 2213.000173][T15819] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 2213.028674][T15819] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2213.043283][T15819] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 2213.066087][T15819] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2213.077613][T15819] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2213.091200][T15819] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2213.305897][T15819] usb 1-1: GET_CAPABILITIES returned 0 [ 2213.313358][T15819] usbtmc 1-1:16.0: can't read capabilities [ 2213.355875][T10527] netlink: 32 bytes leftover after parsing attributes in process `syz.6.11228'. [ 2213.468353][ T5675] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 2213.510331][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 2213.519746][T10510] usbtmc 1-1:16.0: Unable to send data, error -71 [ 2213.528796][T15819] usb 1-1: USB disconnect, device number 125 [ 2213.618285][ T5675] usb 6-1: Using ep0 maxpacket: 32 [ 2213.625512][ T5675] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 2213.635995][ T5675] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 2213.647786][ T5675] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2213.654823][ T5675] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2213.671725][ T5675] usb 6-1: config 0 descriptor?? [ 2213.739146][T27314] usb 3-1: USB disconnect, device number 88 [ 2214.318420][T27314] usb 1-1: new full-speed USB device number 126 using dummy_hcd [ 2214.431751][T10535] tipc: Enabled bearer , priority 0 [ 2214.442863][T10535] syzkaller0: MTU too low for tipc bearer [ 2214.450586][T10535] tipc: Disabling bearer [ 2214.469041][T27314] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 2214.480400][T27314] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2214.493516][T27314] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2214.500846][T27314] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2214.519921][T27314] usb 1-1: config 0 descriptor?? [ 2214.918345][ T5612] Bluetooth: hci0: command 0x0406 tx timeout [ 2214.929051][ T5612] Bluetooth: hci4: command 0x0c1a tx timeout [ 2214.929222][T19957] Bluetooth: hci5: command 0x0406 tx timeout [ 2214.935278][ T5612] Bluetooth: hci1: command 0x0406 tx timeout [ 2214.941852][T19957] Bluetooth: hci3: command 0x0406 tx timeout [ 2214.953876][T15481] usb 3-1: new low-speed USB device number 89 using dummy_hcd [ 2215.129268][T15481] usb 3-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 2215.140048][T15481] usb 3-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 2215.151297][T15481] usb 3-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2215.165017][T15481] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2215.172108][T15481] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2215.186057][T15481] usb 3-1: config 0 descriptor?? [ 2215.192452][T10543] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 2215.508897][T27314] usbhid 1-1:0.0: can't add hid device: -71 [ 2215.527371][T27314] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2215.541926][T27314] usb 1-1: USB disconnect, device number 126 [ 2215.612792][T15481] pantherlord 0003:0F30:0111.00CE: reserved main item tag 0xd [ 2215.620857][T15481] pantherlord 0003:0F30:0111.00CE: unknown main item tag 0x7 [ 2215.634733][T15481] pantherlord 0003:0F30:0111.00CE: unknown main item tag 0x0 [ 2215.644467][T15481] pantherlord 0003:0F30:0111.00CE: unknown main item tag 0x1 [ 2215.653148][T15481] pantherlord 0003:0F30:0111.00CE: reserved main item tag 0xd [ 2215.666357][T15481] pantherlord 0003:0F30:0111.00CE: hidraw0: USB HID v0.77 Device [HID 0f30:0111] on usb-dummy_hcd.2-1/input0 [ 2215.693471][T15481] pantherlord 0003:0F30:0111.00CE: no output reports found [ 2215.835105][ T187] usb 3-1: USB disconnect, device number 89 [ 2216.324213][ T5675] usbhid 6-1:0.0: can't add hid device: -71 [ 2216.333071][ T5675] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2216.350490][ T5675] usb 6-1: USB disconnect, device number 60 [ 2216.658344][T15481] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 2216.758993][ T187] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 2216.815092][T15481] usb 1-1: Using ep0 maxpacket: 32 [ 2216.837108][T15481] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 2216.866096][T15481] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 2216.891857][T10569] tipc: Enabled bearer , priority 0 [ 2216.899658][T15481] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2216.902727][T10569] syzkaller0: MTU too low for tipc bearer [ 2216.912378][T15481] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2216.913228][T10569] tipc: Disabling bearer [ 2216.929064][ T187] usb 3-1: Using ep0 maxpacket: 8 [ 2216.935467][T15481] usb 1-1: config 0 descriptor?? [ 2216.935514][ T187] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2216.962812][ T187] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 2216.972457][ T187] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 2216.984776][ T187] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2217.004347][ T187] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 2217.017486][ T187] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2217.033290][ T187] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2217.068374][ T187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2217.098951][T15819] usb 6-1: new full-speed USB device number 61 using dummy_hcd [ 2217.259250][T15819] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 2217.283146][T15819] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2217.302906][T15819] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2217.314879][T15819] usb 6-1: Product: syz [ 2217.322358][ T187] usb 3-1: GET_CAPABILITIES returned 0 [ 2217.329625][ T187] usbtmc 3-1:16.0: can't read capabilities [ 2217.336260][T15819] usb 6-1: Manufacturer: syz [ 2217.347748][T15819] usb 6-1: SerialNumber: syz [ 2217.359629][T15819] usb 6-1: config 0 descriptor?? [ 2217.376510][T15819] asix 6-1:0.0: probe with driver asix failed with error -22 [ 2217.471163][T10578] netlink: 'syz.7.11247': attribute type 1 has an invalid length. [ 2217.526625][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 2217.536279][T10560] usbtmc 3-1:16.0: Unable to send data, error -71 [ 2217.552952][ T5675] usb 3-1: USB disconnect, device number 90 [ 2217.574933][T10578] bond1: entered promiscuous mode [ 2217.585683][T10578] bond1: entered allmulticast mode [ 2217.604983][T10578] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2217.640432][T10567] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11242'. [ 2217.771931][T27314] usb 6-1: USB disconnect, device number 61 [ 2218.132523][T10586] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11251'. [ 2218.378570][T27314] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 2218.529324][T27314] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 2218.540074][T27314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2218.551332][ T5675] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 2218.559418][T27314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2218.570022][T27314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2218.583811][T27314] usb 3-1: config 0 descriptor?? [ 2218.728627][ T5675] usb 6-1: Using ep0 maxpacket: 32 [ 2218.734632][ T5675] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 2218.747809][ T5675] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2218.755981][ T5675] usb 6-1: Product: syz [ 2218.760458][ T5675] usb 6-1: Manufacturer: syz [ 2218.765156][ T5675] usb 6-1: SerialNumber: syz [ 2218.772808][ T5675] usb 6-1: config 0 descriptor?? [ 2218.784793][ T5675] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 2218.792810][ T5675] dvb-usb: bulk message failed: -22 (4/0) [ 2218.799236][ T5675] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2218.809757][ T5675] dvb-usb: bulk message failed: -22 (5/0) [ 2218.815602][ T5675] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2218.830873][ T5675] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2218.843029][ T5675] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 2218.852931][ T5675] usb 6-1: media controller created [ 2218.862109][T27314] usbhid 3-1:0.0: can't add hid device: -71 [ 2218.875058][ T5675] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2218.884885][T27314] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2218.898979][T27314] usb 3-1: USB disconnect, device number 91 [ 2218.916672][ T5675] usb 6-1: selecting invalid altsetting 3 [ 2218.924875][ T5675] ttusb2: set interface to alts=3 failed [ 2218.954969][ T5675] DVB: Unable to find symbol tda10086_attach() [ 2218.961497][ T5675] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 2218.974067][ T5675] dvb-usb: bulk message failed: -22 (4/0) [ 2218.980355][ T5675] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2218.991208][ T5675] dvb-usb: bulk message failed: -22 (5/0) [ 2218.998810][ T5675] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2219.009382][ T5675] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 2219.022575][ T5675] usb 6-1: USB disconnect, device number 62 [ 2219.063025][ T5675] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 2219.522703][T15481] usbhid 1-1:0.0: can't add hid device: -71 [ 2219.551009][T15481] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2219.586280][T15481] usb 1-1: USB disconnect, device number 127 [ 2219.630754][T10594] tipc: Enabled bearer , priority 0 [ 2219.650064][T10594] syzkaller0: MTU too low for tipc bearer [ 2219.662499][T10594] tipc: Disabling bearer [ 2219.686788][T10602] netlink: 'syz.0.11258': attribute type 1 has an invalid length. [ 2219.713633][T10602] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2219.746621][T10602] bond4: (slave ip6erspan1): making interface the new active one [ 2219.757355][T10602] bond4: (slave ip6erspan1): Enslaving as an active interface with an up link [ 2219.768014][T10605] netlink: 'syz.6.11259': attribute type 1 has an invalid length. [ 2219.823701][T10605] bond1: entered promiscuous mode [ 2219.832379][T10605] bond1: entered allmulticast mode [ 2219.842341][ T5675] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 2219.852248][T10605] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2219.918745][T27314] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 2220.010999][ T5675] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 2220.024267][ T5675] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 2220.035139][ T5675] usb 3-1: config 0 has no interface number 0 [ 2220.042371][ T5675] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2220.061768][ T5675] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2220.072105][ T5675] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2220.085353][ T5675] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2220.094805][T27314] usb 6-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 2220.105427][T27314] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2220.118169][T27314] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2220.132655][ T5675] usb 3-1: config 0 descriptor?? [ 2220.139203][ T187] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 2220.298861][ T187] usb 1-1: Using ep0 maxpacket: 8 [ 2220.304751][ T187] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2220.317324][ T187] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 2220.325811][ T187] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 2220.337856][ T187] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2220.348325][ T187] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 2220.361662][ T187] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2220.376570][ T187] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2220.397508][ T187] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2220.397967][T27314] qmi_wwan 6-1:1.0: cdc-wdm0: USB WDM device [ 2220.464077][T27314] wwan wwan0: port wwan0qmi0 attached [ 2220.639826][ T187] usb 1-1: GET_CAPABILITIES returned 0 [ 2220.645695][ T187] usbtmc 1-1:16.0: can't read capabilities [ 2220.656654][T27314] qmi_wwan 6-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.5-1, WWAN/QMI device, ee:15:4b:ee:d9:39 [ 2220.724697][T27314] usb 6-1: USB disconnect, device number 63 [ 2220.789678][T27314] qmi_wwan 6-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.5-1, WWAN/QMI device [ 2220.853128][T10608] qmi_wwan 6-1:1.0: Error submitting int urb - -19 [ 2220.888061][ T187] usb 1-1: USB disconnect, device number 2 [ 2220.962465][T10620] netlink: 32 bytes leftover after parsing attributes in process `syz.7.11263'. [ 2220.979873][T27314] wwan wwan0: port wwan0qmi0 disconnected [ 2221.079256][T20170] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2221.156013][ T5675] usbhid 3-1:0.1: can't add hid device: -71 [ 2221.176820][ T5675] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 2221.203933][ T5675] usb 3-1: USB disconnect, device number 92 [ 2221.731047][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.739886][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 2221.828602][ T5675] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 2222.018603][ T5675] usb 6-1: Using ep0 maxpacket: 32 [ 2222.029518][ T5675] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 2222.040576][ T5675] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 2222.068604][ T5675] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2222.083405][ T5675] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2222.104877][ T5675] usb 6-1: config 0 descriptor?? [ 2222.685860][T10662] tipc: Enabled bearer , priority 0 [ 2222.695998][T10662] syzkaller0: MTU too low for tipc bearer [ 2222.702095][T10662] tipc: Disabling bearer [ 2222.836725][T10668] macvlan2: entered allmulticast mode [ 2222.856325][T10668] bridge0: entered allmulticast mode [ 2222.874184][T10668] bridge0: entered promiscuous mode [ 2222.887742][T10668] bridge0: port 1(macvlan2) entered blocking state [ 2222.903134][T10670] nvme_fabrics: missing parameter 'transport=%s' [ 2222.913165][T10668] bridge0: port 1(macvlan2) entered disabled state [ 2222.937208][T10668] bridge0: left allmulticast mode [ 2223.009024][ T187] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 2223.031434][T15819] bridge0: left promiscuous mode [ 2223.167785][T10679] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11273'. [ 2223.225890][ T187] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2223.265345][ T187] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2223.289191][ T187] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2223.317116][ T187] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 2223.341326][ T187] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2223.370417][ T187] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2223.446222][ T187] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 2223.463813][ T187] usb 1-1: invalid MIDI out EP 0 [ 2223.706111][ T187] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2223.838495][T10666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2223.938686][T10666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2224.319500][ T187] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 2224.478985][ T187] usb 3-1: Using ep0 maxpacket: 8 [ 2224.492026][ T187] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2224.516719][ T187] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 2224.529793][ T187] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 2224.542625][ T187] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2224.563581][ T187] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 2224.585976][ T187] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2224.603510][ T187] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2224.617063][ T187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2224.690076][ T5675] usbhid 6-1:0.0: can't add hid device: -71 [ 2224.709719][ T5675] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2224.747929][ T5675] usb 6-1: USB disconnect, device number 64 [ 2224.845673][ T187] usb 3-1: GET_CAPABILITIES returned 0 [ 2224.856061][ T187] usbtmc 3-1:16.0: can't read capabilities [ 2225.052488][ C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 2225.071922][T10683] usbtmc 3-1:16.0: Unable to send data, error -71 [ 2225.087335][ T187] usb 3-1: USB disconnect, device number 93 [ 2225.198718][ T5675] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 2225.361156][ T5675] usb 6-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 2225.388932][ T5675] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2225.401188][ T5675] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 2225.415622][ T5675] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2225.437259][ T5675] cxacru 6-1:1.0: usbatm_usb_probe: bind failed: -19! [ 2225.894126][T10704] tipc: Enabling of bearer rejected, failed to enable media [ 2225.908465][ T4641] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2225.918942][ T4641] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2225.932119][ T4641] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2225.971861][ T4641] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2226.021922][ T187] usb 1-1: USB disconnect, device number 3 [ 2226.212329][T10721] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11285'. [ 2226.239982][T10723] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11286'. [ 2226.521013][ T187] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 2226.719357][ T187] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 2226.744602][ T187] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2226.758843][ T187] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2226.789023][ T187] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2226.825845][ T187] usb 1-1: config 0 descriptor?? [ 2226.849804][ T4641] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2227.099420][ T187] usbhid 1-1:0.0: can't add hid device: -71 [ 2227.116975][ T187] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2227.153165][ T187] usb 1-1: USB disconnect, device number 4 [ 2227.508501][T27314] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 2227.644765][T10733] netlink: 'syz.0.11290': attribute type 1 has an invalid length. [ 2227.659141][T27314] usb 3-1: Using ep0 maxpacket: 32 [ 2227.671016][T27314] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 2227.685952][T10733] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2227.701216][T27314] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 2227.713753][T27314] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2227.724099][T27314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2227.745655][T27314] usb 3-1: config 0 descriptor?? [ 2227.802345][T15481] usb 6-1: USB disconnect, device number 65 [ 2227.944354][T10741] tipc: Enabling of bearer rejected, failed to enable media [ 2228.188771][T15481] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 2228.339746][T15481] usb 6-1: Using ep0 maxpacket: 8 [ 2228.346217][T15481] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2228.357056][T15481] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 2228.365475][T15481] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 2228.376974][T15481] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2228.387280][T15481] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 2228.398875][T15481] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2228.409367][T15481] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2228.422454][T15481] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2228.636559][T15481] usb 6-1: GET_CAPABILITIES returned 0 [ 2228.642498][T15481] usbtmc 6-1:16.0: can't read capabilities [ 2228.843112][ C1] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 2228.853118][T10739] usbtmc 6-1:16.0: Unable to send data, error -71 [ 2228.864148][ T187] usb 6-1: USB disconnect, device number 66 [ 2229.678465][T15820] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 2229.758324][ T187] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 2229.839365][T15820] usb 1-1: Using ep0 maxpacket: 8 [ 2229.845309][T15820] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2229.861451][T15820] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 2229.872870][T15820] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 2229.897626][T15820] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2229.915948][T15820] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 2229.937187][T15820] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2229.949989][ T187] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2229.966875][T15820] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2229.980476][T15820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2229.991426][ T187] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2230.013064][ T187] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2230.043812][ T187] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 2230.062893][ T187] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2230.087679][ T187] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2230.136741][ T187] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2230.151559][ T187] usb 6-1: invalid MIDI out EP 0 [ 2230.209274][T15820] usb 1-1: GET_CAPABILITIES returned 0 [ 2230.226208][T15820] usbtmc 1-1:16.0: can't read capabilities [ 2230.332983][ T187] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2230.385989][T27314] usbhid 3-1:0.0: can't add hid device: -71 [ 2230.407766][T27314] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2230.431512][ C1] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 2230.466813][T10748] usbtmc 1-1:16.0: Unable to send data, error -71 [ 2230.478948][T27314] usb 3-1: USB disconnect, device number 94 [ 2230.510744][ T5675] usb 1-1: USB disconnect, device number 5 [ 2230.609889][T10750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2230.637849][T10750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2230.679476][ T1144] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2230.708961][T10761] netlink: 48 bytes leftover after parsing attributes in process `syz.7.11298'. [ 2230.858599][T27314] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 2231.025900][T27314] usb 3-1: Using ep0 maxpacket: 32 [ 2231.036785][T27314] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 2231.051880][T27314] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 2231.076654][T27314] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2231.100371][T27314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2231.120809][T27314] usb 3-1: config 0 descriptor?? [ 2231.131615][T10768] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11300'. [ 2231.408862][ T187] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 2231.579077][ T187] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 2231.592966][ T187] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2231.604288][ T187] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2231.614535][ T187] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2231.626369][ T187] usb 1-1: config 0 descriptor?? [ 2231.855038][ T187] usbhid 1-1:0.0: can't add hid device: -71 [ 2231.865499][ T187] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2231.876274][ T187] usb 1-1: USB disconnect, device number 6 [ 2231.970685][T20170] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2232.434746][ T187] usb 6-1: USB disconnect, device number 67 [ 2232.536481][T10775] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11313'. [ 2232.603545][T10781] tipc: Enabling of bearer rejected, failed to enable media [ 2232.800568][ T5675] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 2232.960107][ T5675] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 2232.973067][ T5675] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2232.985865][ T5675] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2233.011952][ T5675] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2233.053358][ T5675] usb 1-1: config 0 descriptor?? [ 2233.116360][T10789] macvlan2: entered allmulticast mode [ 2233.124313][T10789] bridge0: entered allmulticast mode [ 2233.130558][T10789] bridge0: entered promiscuous mode [ 2233.139809][T10789] bridge0: port 1(macvlan2) entered blocking state [ 2233.151699][T10789] bridge0: port 1(macvlan2) entered disabled state [ 2233.174342][T10789] bridge0: left allmulticast mode [ 2233.201117][T15820] bridge0: left promiscuous mode [ 2233.303498][ T5675] usbhid 1-1:0.0: can't add hid device: -71 [ 2233.325976][ T5675] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2233.354312][ T5675] usb 1-1: USB disconnect, device number 7 [ 2233.616018][T27314] usbhid 3-1:0.0: can't add hid device: -71 [ 2233.637843][T27314] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2233.666105][T27314] usb 3-1: USB disconnect, device number 95 [ 2234.128342][ T187] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 2234.135947][T15820] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 2234.308606][ T187] usb 1-1: Using ep0 maxpacket: 32 [ 2234.315730][T15820] usb 6-1: Using ep0 maxpacket: 8 [ 2234.350189][T15820] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2234.360981][ T187] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 2234.389537][T15820] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 2234.404029][T15820] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 2234.422180][ T187] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2234.432513][ T187] usb 1-1: Product: syz [ 2234.447963][T15820] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2234.462935][ T187] usb 1-1: Manufacturer: syz [ 2234.469221][ T187] usb 1-1: SerialNumber: syz [ 2234.497251][T15820] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 2234.514721][ T187] usb 1-1: config 0 descriptor?? [ 2234.528821][T15820] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2234.544281][ T187] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 2234.562957][T15820] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2234.578328][ T187] dvb-usb: bulk message failed: -22 (4/0) [ 2234.595571][ T187] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2234.611103][T15820] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2234.622578][ T187] dvb-usb: bulk message failed: -22 (5/0) [ 2234.639079][ T187] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2234.676536][ T187] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2234.716341][ T187] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 2234.731236][ T187] usb 1-1: media controller created [ 2234.775721][ T187] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2234.821103][ T187] usb 1-1: selecting invalid altsetting 3 [ 2234.826927][ T187] ttusb2: set interface to alts=3 failed [ 2234.862493][T15820] usb 6-1: GET_CAPABILITIES returned 0 [ 2234.868074][T15820] usbtmc 6-1:16.0: can't read capabilities [ 2234.892465][ T187] DVB: Unable to find symbol tda10086_attach() [ 2234.909250][ T187] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 2234.924440][ T187] dvb-usb: bulk message failed: -22 (4/0) [ 2234.938041][ T187] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2234.952988][ T187] dvb-usb: bulk message failed: -22 (5/0) [ 2234.959742][ T187] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 2234.975996][ T187] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 2235.020968][ T187] usb 1-1: USB disconnect, device number 8 [ 2235.089549][ T187] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 2235.109306][ C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 2235.131792][T10799] usbtmc 6-1:16.0: Unable to send data, error -71 [ 2235.152620][T27314] usb 6-1: USB disconnect, device number 68 [ 2235.286515][T10815] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11317'. [ 2235.418641][ T4201] usb 3-1: new full-speed USB device number 96 using dummy_hcd [ 2235.432612][T10818] tipc: Enabling of bearer rejected, failed to enable media [ 2235.575817][ T4201] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2235.587035][ T4201] usb 3-1: not running at top speed; connect to a high speed hub [ 2235.595262][ T4201] usb 3-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 2235.605643][ T4201] usb 3-1: config 1 interface 0 altsetting 248 endpoint 0x81 has invalid maxpacket 6821, setting to 64 [ 2235.617131][ T4201] usb 3-1: config 1 interface 0 altsetting 248 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2235.630464][ T4201] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2235.639989][ T4201] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2235.648170][ T4201] usb 3-1: Product: syz [ 2235.652502][ T4201] usb 3-1: Manufacturer: syz [ 2235.657376][ T4201] usb 3-1: SerialNumber: syz [ 2235.666131][T10813] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2235.899375][ T4201] usbhid 3-1:1.0: can't add hid device: -71 [ 2235.908772][ T4201] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 2235.934066][ T4201] usb 3-1: USB disconnect, device number 96 [ 2236.088556][T27314] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 2236.161999][T15819] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 2236.183641][T10838] netlink: 32 bytes leftover after parsing attributes in process `syz.6.11323'. [ 2236.258900][T27314] usb 1-1: Using ep0 maxpacket: 32 [ 2236.269953][T27314] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 2236.285493][T27314] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 2236.304535][T27314] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2236.322201][T27314] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2236.338789][T15819] usb 6-1: Using ep0 maxpacket: 16 [ 2236.348934][T15819] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2236.362812][T15819] usb 6-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 2236.363455][T27314] usb 1-1: config 0 descriptor?? [ 2236.399830][T15819] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 2236.439808][ T68] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2236.462230][T15819] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2236.481567][T15819] usb 6-1: Product: syz [ 2236.503884][T15819] usb 6-1: Manufacturer: syz [ 2236.519821][T15819] usb 6-1: SerialNumber: syz [ 2236.772718][T15819] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 2236.789131][T15819] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2236.809019][ T5675] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 2236.968511][ T5675] usb 3-1: Using ep0 maxpacket: 8 [ 2236.976480][ T5675] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2237.000373][ T5675] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 2237.018633][ T5675] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 2237.048676][ T5675] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2237.096435][ T5675] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 2237.141983][ T5675] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2237.175135][ T5675] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2237.210895][ T5675] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2237.272603][T15819] usb 6-1: USB disconnect, device number 69 [ 2237.326510][ T9634] udevd[9634]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2237.441101][ T5675] usb 3-1: GET_CAPABILITIES returned 0 [ 2237.458661][ T5675] usbtmc 3-1:16.0: can't read capabilities [ 2237.657059][ C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 2237.667129][T10840] usbtmc 3-1:16.0: Unable to send data, error -71 [ 2237.677829][ T4201] usb 3-1: USB disconnect, device number 97 [ 2237.719229][ T7912] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2238.468373][ T4201] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 2238.618371][ T4201] usb 6-1: Using ep0 maxpacket: 32 [ 2238.624365][ T4201] usb 6-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 2238.635542][ T4201] usb 6-1: config 0 has an invalid descriptor of length 107, skipping remainder of the config [ 2238.646762][ T4201] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2238.660070][ T4201] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2238.673082][ T4201] usb 6-1: config 0 descriptor?? [ 2238.686860][ T4201] rndis_host 6-1:0.0: ACM capabilities 2f, not really RNDIS? [ 2238.907268][ T187] usb 6-1: USB disconnect, device number 70 [ 2238.946616][T27314] usbhid 1-1:0.0: can't add hid device: -71 [ 2238.976114][T27314] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2239.013235][T27314] usb 1-1: USB disconnect, device number 9 [ 2239.019025][T10849] tipc: Enabling of bearer rejected, failed to enable media [ 2239.358780][ T4201] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 2239.518708][ T4201] usb 3-1: Using ep0 maxpacket: 8 [ 2239.540888][ T4201] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2239.566711][ T4201] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 2239.585322][ T4201] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 2239.634721][ T4201] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2239.698504][ T4201] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 2239.769313][T10873] macvlan2: entered allmulticast mode [ 2239.797547][ T4201] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2239.808739][ T4201] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2239.821839][ T4201] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2239.868674][T10873] bridge0: entered allmulticast mode [ 2239.994193][T10873] bridge0: port 1(macvlan2) entered blocking state [ 2240.012231][T10873] bridge0: port 1(macvlan2) entered disabled state [ 2240.039591][ T4201] usb 3-1: GET_CAPABILITIES returned 0 [ 2240.046705][ T4201] usbtmc 3-1:16.0: can't read capabilities [ 2240.084791][T10873] bridge0: left allmulticast mode [ 2240.260903][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 2240.286529][T10854] usbtmc 3-1:16.0: Unable to send data, error -71 [ 2240.312473][ T4201] usb 3-1: USB disconnect, device number 98 [ 2240.672219][T10889] netlink: 48 bytes leftover after parsing attributes in process `syz.5.11339'. [ 2240.808969][ T187] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 2240.862126][T10893] tipc: Enabling of bearer rejected, failed to enable media [ 2240.979008][ T187] usb 1-1: Using ep0 maxpacket: 32 [ 2240.984457][T10895] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11342'. [ 2240.995343][ T187] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 2241.023331][ T187] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 2241.057804][ T187] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2241.074053][ T187] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2241.108902][ T187] usb 1-1: config 0 descriptor?? [ 2241.278655][ T4201] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 2241.440132][ T4201] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 2241.467639][ T4201] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2241.516357][ T4201] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2241.567472][ T4201] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2241.577951][ T5746] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2241.602897][ T4201] usb 3-1: config 0 descriptor?? [ 2241.849009][ T4201] usbhid 3-1:0.0: can't add hid device: -71 [ 2241.865817][ T4201] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2241.870099][T10911] netlink: 20 bytes leftover after parsing attributes in process `syz.7.11349'. [ 2241.887344][T10911] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11349'. [ 2241.891374][ T4201] usb 3-1: USB disconnect, device number 99 [ 2242.177695][T10921] syzkaller0: MTU too low for tipc bearer [ 2242.183985][T10921] tipc: Enabling of bearer rejected, failed to enable media [ 2242.198427][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2242.747115][T10934] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11357'. [ 2242.768935][ T5746] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2243.656687][ T187] usbhid 1-1:0.0: can't add hid device: -71 [ 2243.664539][ T187] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2243.687058][ T187] usb 1-1: USB disconnect, device number 10 [ 2243.978303][ T4201] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 2244.138578][ T4201] usb 3-1: Using ep0 maxpacket: 32 [ 2244.153823][ T4201] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 2244.176218][ T4201] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 2244.196035][ T4201] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2244.213216][ T4201] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2244.236919][ T4201] usb 3-1: config 0 descriptor?? [ 2244.518629][ T187] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 2244.678441][ T187] usb 6-1: Using ep0 maxpacket: 8 [ 2244.686673][ T187] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2244.700444][ T187] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 2244.717174][ T187] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 2244.741203][ T187] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2244.768499][ T187] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 2244.793715][ T187] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2244.823725][ T187] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2244.837089][ T187] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2245.057671][ T187] usb 6-1: GET_CAPABILITIES returned 0 [ 2245.068948][ T187] usbtmc 6-1:16.0: can't read capabilities [ 2245.260977][T10961] tipc: Enabling of bearer rejected, failed to enable media [ 2245.306486][ C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 2245.316723][T10950] usbtmc 6-1:16.0: Unable to send data, error -71 [ 2245.331951][ T187] usb 6-1: USB disconnect, device number 71 [ 2245.440259][T10964] netlink: 32 bytes leftover after parsing attributes in process `syz.7.11365'. [ 2245.937754][T10969] netlink: 'syz.5.11367': attribute type 9 has an invalid length. [ 2246.092952][T10974] netlink: 48 bytes leftover after parsing attributes in process `syz.5.11370'. [ 2246.258793][T15819] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 2246.418828][T15819] usb 1-1: Using ep0 maxpacket: 16 [ 2246.425073][T15819] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2246.439296][T15819] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2246.451244][T15819] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2246.462143][T15819] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2246.475460][T15819] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2246.488668][T15819] usb 1-1: config 0 descriptor?? [ 2246.840683][ T4201] usbhid 3-1:0.0: can't add hid device: -71 [ 2246.850833][ T4201] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2246.883326][ T4201] usb 3-1: USB disconnect, device number 100 [ 2246.945611][T15819] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.00CF/input/input127 [ 2247.012948][T10979] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11372'. [ 2247.023026][T10979] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11372'. [ 2247.047320][T15819] microsoft 0003:045E:07DA.00CF: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 2247.140160][T10971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2247.171522][T10971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2247.191233][T15819] usb 1-1: USB disconnect, device number 11 [ 2247.320690][ T7912] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2247.418553][ T4201] usb 6-1: new low-speed USB device number 72 using dummy_hcd [ 2247.508632][T27314] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 2247.569024][ T4201] usb 6-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 2247.579617][ T4201] usb 6-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 2247.590788][ T4201] usb 6-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2247.603851][ T4201] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2247.610571][ T4201] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2247.624115][ T4201] usb 6-1: config 0 descriptor?? [ 2247.630121][T10982] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 2247.658377][T27314] usb 3-1: Using ep0 maxpacket: 8 [ 2247.664112][T27314] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2247.674444][T27314] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 2247.683038][T27314] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 2247.694334][T27314] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2247.704661][T27314] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 2247.716562][T27314] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2247.727604][T27314] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2247.742013][T27314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2247.759103][T10988] tipc: Enabling of bearer rejected, failed to enable media [ 2247.956304][T27314] usb 3-1: GET_CAPABILITIES returned 0 [ 2247.962440][T27314] usbtmc 3-1:16.0: can't read capabilities [ 2248.042664][ T4201] usbhid 6-1:0.0: can't add hid device: -71 [ 2248.058482][ T4201] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2248.072809][ T4201] usb 6-1: USB disconnect, device number 72 [ 2248.165207][ C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 2248.176278][T10986] usbtmc 3-1:16.0: Unable to send data, error -71 [ 2248.186325][ T187] usb 3-1: USB disconnect, device number 101 [ 2248.598728][ T5746] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2248.640653][T11004] netlink: 48 bytes leftover after parsing attributes in process `syz.5.11382'. [ 2248.764817][T11008] netlink: 20 bytes leftover after parsing attributes in process `syz.6.11384'. [ 2248.776492][T11008] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11384'. [ 2249.128038][T11015] tipc: Enabling of bearer rejected, failed to enable media [ 2249.683167][T11026] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11400'. [ 2249.765124][T11029] netlink: 32 bytes leftover after parsing attributes in process `syz.5.11391'. [ 2249.807330][T11026] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11400'. [ 2250.029250][ T4201] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 2250.158731][T15819] usb 3-1: new low-speed USB device number 102 using dummy_hcd [ 2250.188991][ T4201] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 2250.207030][ T4201] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2250.223342][ T4201] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2250.246593][ T4201] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2250.265737][ T4201] usb 6-1: config 0 descriptor?? [ 2250.319161][T15819] usb 3-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 2250.341373][T15819] usb 3-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 2250.351828][T11033] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11393'. [ 2250.363280][T11033] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 2250.368060][T15819] usb 3-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2250.398533][T15819] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2250.405805][T15819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2250.425311][T15819] usb 3-1: config 0 descriptor?? [ 2250.431490][T11031] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 2250.521221][ T4201] usbhid 6-1:0.0: can't add hid device: -71 [ 2250.547849][ T4201] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2250.571678][ T4201] usb 6-1: USB disconnect, device number 73 [ 2250.849038][T15819] usbhid 3-1:0.0: can't add hid device: -71 [ 2250.856238][T15819] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2250.867296][T15819] usb 3-1: USB disconnect, device number 102 [ 2251.298431][T15819] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 2251.469931][T15819] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 2251.500702][T15819] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2251.513840][T15819] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2251.524020][T15819] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2251.537018][T15819] usb 1-1: config 0 descriptor?? [ 2251.673728][T11051] tipc: Enabling of bearer rejected, failed to enable media [ 2251.801277][T15819] usbhid 1-1:0.0: can't add hid device: -71 [ 2251.824285][T15819] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2251.841066][T15819] usb 1-1: USB disconnect, device number 12 [ 2252.417634][T11066] __nla_validate_parse: 1 callbacks suppressed [ 2252.417651][T11066] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11405'. [ 2252.440254][ T689] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2252.530882][T11066] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11405'. [ 2252.543645][ T4201] usb 6-1: new low-speed USB device number 74 using dummy_hcd [ 2252.699974][ T4201] usb 6-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 2252.730429][ T4201] usb 6-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 2252.753207][ T4201] usb 6-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2252.804447][ T4201] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2252.820920][ T4201] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2252.848667][ T4201] usb 6-1: config 0 descriptor?? [ 2252.854956][T11062] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2252.986304][T11080] tipc: Enabling of bearer rejected, failed to enable media [ 2253.028808][ T187] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 2253.076327][T11082] netlink: 'syz.7.11413': attribute type 4 has an invalid length. [ 2253.095874][T11082] netlink: 'syz.7.11413': attribute type 4 has an invalid length. [ 2253.209072][ T187] usb 3-1: Using ep0 maxpacket: 8 [ 2253.238965][ T187] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2253.259542][ T187] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 2253.270336][ T187] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 2253.282280][ T4201] usbhid 6-1:0.0: can't add hid device: -71 [ 2253.282437][ T187] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2253.299855][ T187] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 2253.307445][ T4201] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2253.312044][ T187] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2253.330069][ T187] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2253.344591][ T187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2253.349484][ T4201] usb 6-1: USB disconnect, device number 74 [ 2253.430494][T11088] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11416'. [ 2253.581352][ T187] usb 3-1: GET_CAPABILITIES returned 0 [ 2253.587091][ T187] usbtmc 3-1:16.0: can't read capabilities [ 2253.698754][T15819] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 2253.859124][T15819] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 2253.882848][ C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 2253.909991][T11074] usbtmc 3-1:16.0: Unable to send data, error -71 [ 2253.921687][T15819] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2253.939904][T15819] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2253.941155][ T4201] usb 3-1: USB disconnect, device number 103 [ 2253.975775][T15819] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2254.013608][T15819] usb 1-1: config 0 descriptor?? [ 2254.120343][T11097] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11419'. [ 2254.139823][T11097] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 2254.268868][T15819] usbhid 1-1:0.0: can't add hid device: -71 [ 2254.278139][T15819] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2254.301939][T15819] usb 1-1: USB disconnect, device number 13 [ 2254.359281][ T68] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2255.253973][T11115] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11426'. [ 2255.286631][T11115] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11426'. [ 2255.439309][T15819] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 2255.618282][T15819] usb 6-1: Using ep0 maxpacket: 8 [ 2255.625265][T15819] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2255.637519][T15819] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 2255.646517][T15819] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 2255.663807][T15819] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2255.674817][T15819] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 2255.687791][T15819] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2255.701213][T15819] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2255.715504][T15819] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2255.937385][T15819] usb 6-1: GET_CAPABILITIES returned 0 [ 2255.946174][T15819] usbtmc 6-1:16.0: can't read capabilities [ 2256.062229][T11125] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11431'. [ 2256.074092][T11125] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 2256.131701][T11127] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11433'. [ 2256.152409][ C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 2256.158777][ T4201] usb 3-1: new low-speed USB device number 104 using dummy_hcd [ 2256.178640][T11113] usbtmc 6-1:16.0: Unable to send data, error -71 [ 2256.190754][ T5675] usb 6-1: USB disconnect, device number 75 [ 2256.319941][ T4201] usb 3-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 2256.336793][ T4201] usb 3-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 2256.352767][ T4201] usb 3-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2256.372134][ T4201] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2256.380357][ T4201] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2256.389398][T27314] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 2256.403229][ T4201] usb 3-1: config 0 descriptor?? [ 2256.410062][T11119] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2256.549847][T27314] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 2256.563497][T27314] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2256.579019][T27314] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2256.591378][T27314] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2256.604731][T11138] netlink: 24 bytes leftover after parsing attributes in process `syz.7.11437'. [ 2256.614486][T11138] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 2256.615364][T27314] usb 1-1: config 0 descriptor?? [ 2256.848074][ T4201] usbhid 3-1:0.0: can't add hid device: -71 [ 2256.870494][ T4201] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2256.898995][ T4201] usb 3-1: USB disconnect, device number 104 [ 2256.956758][T27314] usbhid 1-1:0.0: can't add hid device: -71 [ 2256.977356][T27314] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2257.016469][T27314] usb 1-1: USB disconnect, device number 14 [ 2257.516811][T11152] netlink: 48 bytes leftover after parsing attributes in process `syz.7.11441'. [ 2257.818834][T27314] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 2257.899099][T15820] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 2257.978288][T27314] usb 1-1: Using ep0 maxpacket: 16 [ 2257.994441][T27314] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 2258.019941][T27314] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2258.044627][T27314] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2258.058799][T15820] usb 3-1: Using ep0 maxpacket: 8 [ 2258.067059][T27314] usb 1-1: config 0 descriptor?? [ 2258.070169][T15820] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2258.108123][T27314] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input128 [ 2258.142094][T15820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2258.200406][ T689] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2258.219923][T15820] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2258.244174][T15820] pvrusb2: ********** [ 2258.256476][T15820] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2258.273716][T15820] pvrusb2: Important functionality might not be entirely working. [ 2258.284497][T15820] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2258.296351][T15820] pvrusb2: ********** [ 2258.410105][T11158] binder: 11153:11158 ioctl 40045532 80000040 returned -22 [ 2258.415736][ T2357] pvrusb2: Invalid write control endpoint [ 2258.533728][ T2357] pvrusb2: Invalid write control endpoint [ 2258.549566][ T2357] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2258.571869][ T4963] bcm5974 1-1:0.0: could not read from device [ 2258.585492][ T2357] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2258.607118][ T2357] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2258.622925][ T4963] bcm5974 1-1:0.0: could not read from device [ 2258.633308][ T4963] bcm5974 1-1:0.0: could not read from device [ 2258.647372][ T2357] pvrusb2: Device being rendered inoperable [ 2258.654374][T27314] usb 1-1: USB disconnect, device number 15 [ 2258.675223][ T2357] cx25840 3-0044: Unable to detect h/w, assuming cx23887 [ 2258.675305][T15820] usb 3-1: USB disconnect, device number 105 [ 2258.687296][ T2357] cx25840 3-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 2258.698100][ T2357] pvrusb2: Attached sub-driver cx25840 [ 2258.710559][ T2357] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2258.755841][ T2357] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2258.774814][T11166] netlink: 32 bytes leftover after parsing attributes in process `syz.7.11445'. [ 2258.829048][T11168] netlink: 48 bytes leftover after parsing attributes in process `syz.6.11455'. [ 2259.216246][T11176] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2259.259936][T27314] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 2259.400967][ T689] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2259.428334][T27314] usb 6-1: Using ep0 maxpacket: 8 [ 2259.434746][T27314] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2259.453825][T27314] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 2259.470753][T27314] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 2259.497498][T27314] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2259.520431][T27314] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 2259.534148][T27314] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2259.555063][T27314] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2259.559405][T11186] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11453'. [ 2259.588731][T27314] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2259.814768][T27314] usb 6-1: GET_CAPABILITIES returned 0 [ 2259.823395][T27314] usbtmc 6-1:16.0: can't read capabilities [ 2259.858559][T15820] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 2260.021742][ C1] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 2260.021899][T11174] usbtmc 6-1:16.0: Unable to send data, error -71 [ 2260.023543][T27314] usb 6-1: USB disconnect, device number 76 [ 2260.039991][T15820] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 2260.043442][T15820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2260.043486][T15820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2260.043523][T15820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2260.056414][T15820] usb 1-1: config 0 descriptor?? [ 2260.322235][T15820] usbhid 1-1:0.0: can't add hid device: -71 [ 2260.336973][T15820] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2260.357573][T15820] usb 1-1: USB disconnect, device number 16 [ 2260.664067][T11212] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2260.928075][T11220] netlink: 48 bytes leftover after parsing attributes in process `syz.5.11465'. [ 2262.278828][T15819] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 2262.448345][T15819] usb 1-1: Using ep0 maxpacket: 8 [ 2262.459865][T15819] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2262.479321][T15819] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 2262.495684][T15819] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 2262.527041][T15819] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2262.554664][T15819] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 2262.578428][T15819] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2262.590122][T15819] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2262.604000][T15819] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2262.721765][T11247] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2262.817684][T15819] usb 1-1: GET_CAPABILITIES returned 0 [ 2262.824261][T15819] usbtmc 1-1:16.0: can't read capabilities [ 2262.879253][T11252] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11478'. [ 2262.971566][T11255] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11479'. [ 2263.028337][ C1] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 2263.037680][T11241] usbtmc 1-1:16.0: Unable to send data, error -71 [ 2263.046955][T27314] usb 1-1: USB disconnect, device number 17 [ 2263.138832][T15819] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 2263.299936][T15819] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 2263.311091][T15819] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2263.322255][T15819] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2263.332153][T15819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2263.342831][T15819] usb 3-1: config 0 descriptor?? [ 2263.570468][T15819] usbhid 3-1:0.0: can't add hid device: -71 [ 2263.583632][T15819] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2263.598812][T15819] usb 3-1: USB disconnect, device number 106 [ 2263.710669][T11260] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11481'. [ 2263.740630][T11260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11481'. [ 2263.963094][ T5746] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2264.254434][T11275] syzkaller1: entered promiscuous mode [ 2264.261001][T11275] syzkaller1: entered allmulticast mode [ 2264.411008][T11284] FAULT_INJECTION: forcing a failure. [ 2264.411008][T11284] name failslab, interval 1, probability 0, space 0, times 0 [ 2264.427080][T11284] CPU: 1 UID: 0 PID: 11284 Comm: syz.6.11491 Tainted: G L syzkaller #0 PREEMPT(full) [ 2264.427108][T11284] Tainted: [L]=SOFTLOCKUP [ 2264.427114][T11284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2264.427124][T11284] Call Trace: [ 2264.427132][T11284] [ 2264.427139][T11284] dump_stack_lvl+0xe8/0x150 [ 2264.427166][T11284] should_fail_ex+0x40c/0x560 [ 2264.427193][T11284] should_failslab+0xa8/0x100 [ 2264.427219][T11284] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 2264.427239][T11284] ? security_inode_alloc+0x39/0x310 [ 2264.427257][T11284] ? security_inode_alloc+0x39/0x310 [ 2264.427279][T11284] security_inode_alloc+0x39/0x310 [ 2264.427298][T11284] inode_init_always_gfp+0x97e/0xd30 [ 2264.427324][T11284] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 2264.427360][T11284] alloc_inode+0x82/0x1b0 [ 2264.427381][T11284] new_inode+0x1f/0x170 [ 2264.427405][T11284] __debugfs_create_file+0xb8/0x400 [ 2264.427431][T11284] debugfs_create_file_full+0x3f/0x60 [ 2264.427457][T11284] ref_tracker_dir_debugfs+0x197/0x360 [ 2264.427480][T11284] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 2264.427523][T11284] ? __kvmalloc_node_noprof+0x55a/0x860 [ 2264.427547][T11284] ? __kvmalloc_node_noprof+0x35c/0x860 [ 2264.427570][T11284] ? __raw_spin_lock_init+0x45/0x100 [ 2264.427592][T11284] alloc_netdev_mqs+0x275/0x12b0 [ 2264.427613][T11284] ? __pfx_snprintf+0x10/0x10 [ 2264.427636][T11284] ? __pfx_ip6erspan_tap_setup+0x10/0x10 [ 2264.427664][T11284] rtnl_create_link+0x321/0xd70 [ 2264.427694][T11284] rtnl_newlink_create+0x25f/0xb00 [ 2264.427724][T11284] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 2264.427747][T11284] ? __pfx___mutex_lock+0x10/0x10 [ 2264.427776][T11284] ? ns_capable+0x89/0xe0 [ 2264.427800][T11284] rtnl_newlink+0x167f/0x1bd0 [ 2264.427832][T11284] ? __pfx_rtnl_newlink+0x10/0x10 [ 2264.427846][T11284] ? __do_fast_syscall_32+0x23e/0x6f0 [ 2264.427866][T11284] ? do_fast_syscall_32+0x33/0x70 [ 2264.427883][T11284] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2264.427939][T11284] ? kasan_quarantine_put+0xbb/0x1f0 [ 2264.427959][T11284] ? lockdep_hardirqs_on+0x7a/0x110 [ 2264.427980][T11284] ? nlmon_xmit+0xb0/0x100 [ 2264.428003][T11284] ? kmem_cache_free+0x182/0x650 [ 2264.428033][T11284] ? __lock_acquire+0x683/0x2cf0 [ 2264.428058][T11284] ? __dev_queue_xmit+0x29b/0x3820 [ 2264.428082][T11284] ? __local_bh_enable_ip+0xd0/0x130 [ 2264.428101][T11284] ? lockdep_hardirqs_on+0x7a/0x110 [ 2264.428118][T11284] ? __dev_queue_xmit+0x29b/0x3820 [ 2264.428135][T11284] ? __local_bh_enable_ip+0xd0/0x130 [ 2264.428151][T11284] ? __dev_queue_xmit+0x29b/0x3820 [ 2264.428177][T11284] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 2264.428210][T11284] ? __pfx_rtnl_newlink+0x10/0x10 [ 2264.428224][T11284] rtnetlink_rcv_msg+0x802/0xc00 [ 2264.428243][T11284] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 2264.428258][T11284] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2264.428273][T11284] ? ref_tracker_free+0x689/0x830 [ 2264.428295][T11284] ? __pfx_ref_tracker_free+0x10/0x10 [ 2264.428325][T11284] netlink_rcv_skb+0x226/0x4a0 [ 2264.428345][T11284] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2264.428405][T11284] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2264.428436][T11284] ? netlink_deliver_tap+0x2e/0x1b0 [ 2264.428455][T11284] ? netlink_deliver_tap+0x2e/0x1b0 [ 2264.428479][T11284] netlink_unicast+0x7bb/0x940 [ 2264.428508][T11284] netlink_sendmsg+0x813/0xb40 [ 2264.428536][T11284] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2264.428561][T11284] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2264.428584][T11284] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2264.428602][T11284] sock_sendmsg_nosec+0x13a/0x180 [ 2264.428629][T11284] ____sys_sendmsg+0x54e/0x850 [ 2264.428653][T11284] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2264.428686][T11284] ___sys_sendmsg+0x2a5/0x360 [ 2264.428704][T11284] ? __lock_acquire+0x683/0x2cf0 [ 2264.428728][T11284] ? __pfx____sys_sendmsg+0x10/0x10 [ 2264.428746][T11284] ? get_pid_task+0x20/0x1f0 [ 2264.428766][T11284] ? get_pid_task+0x20/0x1f0 [ 2264.428784][T11284] ? get_pid_task+0x20/0x1f0 [ 2264.428832][T11284] ? __fget_files+0x2a/0x420 [ 2264.428851][T11284] ? __fget_files+0x3a2/0x420 [ 2264.428880][T11284] __sys_sendmsg+0x177/0x240 [ 2264.428901][T11284] ? __pfx___sys_sendmsg+0x10/0x10 [ 2264.428938][T11284] __do_fast_syscall_32+0x23e/0x6f0 [ 2264.428958][T11284] ? do_fast_syscall_32+0x33/0x70 [ 2264.428976][T11284] ? lockdep_hardirqs_on+0x7a/0x110 [ 2264.428993][T11284] ? asm_int80_emulation+0x1a/0x20 [ 2264.429009][T11284] ? do_int80_emulation+0x29f/0x550 [ 2264.429032][T11284] do_fast_syscall_32+0x33/0x70 [ 2264.429052][T11284] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2264.429072][T11284] RIP: 0023:0xf7fa30ec [ 2264.429089][T11284] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2264.429103][T11284] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2264.429122][T11284] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000380 [ 2264.429133][T11284] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2264.429143][T11284] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2264.429153][T11284] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2264.429162][T11284] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2264.429189][T11284] [ 2264.943745][ T5746] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2264.980438][T11284] debugfs: out of free dentries, can not create file 'netdev@ffff88807cc62700' [ 2265.085337][T11288] netlink: 'syz.7.11493': attribute type 4 has an invalid length. [ 2265.096709][T11288] netlink: 'syz.7.11493': attribute type 4 has an invalid length. [ 2265.208358][T27314] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 2265.236627][T11298] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11498'. [ 2265.285612][T11301] netlink: 32 bytes leftover after parsing attributes in process `syz.5.11499'. [ 2265.358363][T27314] usb 3-1: Using ep0 maxpacket: 8 [ 2265.364722][T27314] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2265.377192][T27314] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 2265.385970][T27314] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 2265.397396][T27314] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2265.407655][T27314] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 2265.419713][T27314] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2265.432673][T27314] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2265.446478][T27314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2265.578378][ T5675] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 2265.586036][ T4201] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 2265.661732][T27314] usb 3-1: GET_CAPABILITIES returned 0 [ 2265.667418][T27314] usbtmc 3-1:16.0: can't read capabilities [ 2265.739734][ T5675] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 2265.749494][ T4201] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 2265.760255][ T5675] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2265.771602][ T5675] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2265.782115][ T5675] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2265.790405][ T4201] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2265.801958][ T4201] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 2265.814470][ T5675] usb 6-1: config 0 descriptor?? [ 2265.820976][ T4201] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 2265.836063][ T4201] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 2265.846221][ T4201] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2265.861100][ T4201] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 2265.870119][ T4201] usb 1-1: Product: syz [ 2265.873415][ C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 2265.878603][ T4201] usb 1-1: Manufacturer: syz [ 2265.888571][ T4201] usb 1-1: SerialNumber: syz [ 2265.893029][T11283] usbtmc 3-1:16.0: Unable to send data, error -71 [ 2265.901095][ T4201] usb 1-1: config 0 descriptor?? [ 2265.910190][ T187] usb 3-1: USB disconnect, device number 107 [ 2266.045022][ T5675] usbhid 6-1:0.0: can't add hid device: -71 [ 2266.053882][ T5675] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2266.069942][ T5675] usb 6-1: USB disconnect, device number 77 [ 2266.114680][ T4201] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 2266.131436][ T4201] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5 [ 2266.542464][ T4201] usb 1-1: USB disconnect, device number 18 [ 2267.148667][T11321] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11506'. [ 2267.223837][T11321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11506'. [ 2267.289727][ T187] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 2267.469120][ T187] usb 6-1: Using ep0 maxpacket: 32 [ 2267.479670][ T187] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 2267.500906][ T187] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 2267.519861][ T187] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2267.538963][ T187] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2267.555046][ T187] usb 6-1: config 0 descriptor?? [ 2268.371134][T11341] bond0: option packets_per_slave: invalid value (65536) [ 2268.392471][T11341] bond0: option packets_per_slave: allowed values 0 - 65535 [ 2268.444521][T11341] bridge0: port 1(syz_tun) entered blocking state [ 2268.453085][T11341] bridge0: port 1(syz_tun) entered disabled state [ 2268.461993][T11341] syz_tun: entered allmulticast mode [ 2268.468439][T15819] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 2268.506189][T11341] syz_tun: entered promiscuous mode [ 2268.520186][T11341] bridge0: port 1(syz_tun) entered blocking state [ 2268.526775][T11341] bridge0: port 1(syz_tun) entered forwarding state [ 2268.638511][T15819] usb 1-1: Using ep0 maxpacket: 8 [ 2268.645380][T11344] FAULT_INJECTION: forcing a failure. [ 2268.645380][T11344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2268.645525][T15819] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2268.670394][T15819] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 2268.688877][T15819] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 2268.701810][T15819] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2268.701828][T11344] CPU: 1 UID: 0 PID: 11344 Comm: syz.6.11516 Tainted: G L syzkaller #0 PREEMPT(full) [ 2268.701852][T11344] Tainted: [L]=SOFTLOCKUP [ 2268.701857][T11344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2268.701865][T11344] Call Trace: [ 2268.701872][T11344] [ 2268.701879][T11344] dump_stack_lvl+0xe8/0x150 [ 2268.701908][T11344] should_fail_ex+0x40c/0x560 [ 2268.701932][T11344] _copy_from_user+0x2d/0xb0 [ 2268.701956][T11344] get_compat_msghdr+0xb3/0x4c0 [ 2268.701979][T11344] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2268.702009][T11344] ___sys_sendmsg+0x201/0x360 [ 2268.702028][T11344] ? __lock_acquire+0x683/0x2cf0 [ 2268.702051][T11344] ? __pfx____sys_sendmsg+0x10/0x10 [ 2268.702068][T11344] ? get_pid_task+0x20/0x1f0 [ 2268.702089][T11344] ? get_pid_task+0x20/0x1f0 [ 2268.702107][T11344] ? get_pid_task+0x20/0x1f0 [ 2268.702152][T11344] ? __fget_files+0x2a/0x420 [ 2268.702171][T11344] ? __fget_files+0x3a2/0x420 [ 2268.702202][T11344] __sys_sendmsg+0x177/0x240 [ 2268.702222][T11344] ? __pfx___sys_sendmsg+0x10/0x10 [ 2268.702255][T11344] __do_fast_syscall_32+0x23e/0x6f0 [ 2268.702276][T11344] ? do_fast_syscall_32+0x33/0x70 [ 2268.702293][T11344] ? lockdep_hardirqs_on+0x7a/0x110 [ 2268.702310][T11344] ? asm_int80_emulation+0x1a/0x20 [ 2268.702326][T11344] ? do_int80_emulation+0x29f/0x550 [ 2268.702344][T11344] ? trace_irq_disable+0x3b/0x140 [ 2268.702366][T11344] do_fast_syscall_32+0x33/0x70 [ 2268.702385][T11344] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2268.702413][T11344] RIP: 0023:0xf7fa30ec [ 2268.702428][T11344] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2268.702443][T11344] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2268.702460][T11344] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 2268.702472][T11344] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2268.702482][T11344] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2268.702492][T11344] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2268.702502][T11344] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2268.702527][T11344] [ 2268.939815][T15819] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 2268.953045][T15819] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2268.967051][T15819] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2268.981119][T15819] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2269.083286][ T689] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2269.199099][T15819] usb 1-1: GET_CAPABILITIES returned 0 [ 2269.204709][T15819] usbtmc 1-1:16.0: can't read capabilities [ 2269.576931][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 2269.587870][T11330] usbtmc 1-1:16.0: Unable to send data, error -71 [ 2269.604933][T24244] usb 1-1: USB disconnect, device number 19 [ 2269.911032][T11358] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11522'. [ 2269.932116][T11358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11522'. [ 2270.122839][ T187] usbhid 6-1:0.0: can't add hid device: -71 [ 2270.129427][ T187] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2270.160525][ T187] usb 6-1: USB disconnect, device number 78 [ 2270.369820][ T689] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2270.433159][T11370] bond0: option packets_per_slave: invalid value (65536) [ 2270.456478][T11370] bond0: option packets_per_slave: allowed values 0 - 65535 [ 2270.751154][T11383] netlink: 64 bytes leftover after parsing attributes in process `syz.5.11533'. [ 2270.770476][T11383] netlink: 60 bytes leftover after parsing attributes in process `syz.5.11533'. [ 2271.098742][T24244] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 2271.268855][T24244] usb 3-1: Using ep0 maxpacket: 32 [ 2271.275096][T24244] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2271.286397][T24244] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2271.301425][T24244] usb 3-1: config 0 descriptor?? [ 2271.580724][T24244] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2271.596428][T24244] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2271.623189][T24244] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2271.641576][T24244] usb 3-1: media controller created [ 2271.684291][T24244] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2271.832581][T11401] fuse: Unknown parameter '' [ 2271.892311][T24244] az6027: usb out operation failed. (-71) [ 2271.909737][T24244] az6027: usb out operation failed. (-71) [ 2271.926080][T24244] stb0899_attach: Driver disabled by Kconfig [ 2271.941442][T24244] az6027: no front-end attached [ 2271.941442][T24244] [ 2271.953738][T24244] az6027: usb out operation failed. (-71) [ 2271.968140][T24244] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2271.977926][T24244] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input129 [ 2271.994827][T24244] dvb-usb: schedule remote query interval to 400 msecs. [ 2272.011533][T24244] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2272.047154][T24244] usb 3-1: USB disconnect, device number 108 [ 2272.199304][T24244] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2272.436033][T11410] bond0: option packets_per_slave: invalid value (65536) [ 2272.446477][T11410] bond0: option packets_per_slave: allowed values 0 - 65535 [ 2272.484841][T11410] bridge0: port 1(syz_tun) entered blocking state [ 2272.493495][T11410] bridge0: port 1(syz_tun) entered disabled state [ 2272.502527][T11410] syz_tun: entered allmulticast mode [ 2272.513436][T11410] syz_tun: entered promiscuous mode [ 2272.561934][T11414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11544'. [ 2272.683506][T11417] netlink: 48 bytes leftover after parsing attributes in process `syz.5.11545'. [ 2272.838379][ T5675] usb 3-1: new full-speed USB device number 109 using dummy_hcd [ 2273.009792][ T5675] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 2273.026479][ T5675] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2273.040839][ T5675] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 2273.053228][ T5675] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 2273.089998][ T5675] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 2273.111430][ T5675] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2273.133055][ T5675] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 2273.144457][ T5675] usb 3-1: Product: syz [ 2273.155324][ T5675] usb 3-1: Manufacturer: syz [ 2273.169069][ T4201] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 2273.176879][ T5675] usb 3-1: SerialNumber: syz [ 2273.194853][ T5675] usb 3-1: config 0 descriptor?? [ 2273.348355][ T4201] usb 1-1: Using ep0 maxpacket: 8 [ 2273.355236][ T4201] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2273.372054][ T4201] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 2273.380542][ T4201] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 2273.400440][ T4201] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2273.411194][ T4201] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 2273.425021][ T5675] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 2273.435342][ T4201] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2273.465639][ T5675] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 2273.474720][ T4201] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2273.502856][ T4201] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2273.734520][ T4201] usb 1-1: GET_CAPABILITIES returned 0 [ 2273.751572][ T4201] usbtmc 1-1:16.0: can't read capabilities [ 2273.805344][T11414] netlink: 173 bytes leftover after parsing attributes in process `syz.2.11544'. [ 2273.837760][T11414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2273.870695][T11414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2273.941846][ C1] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 2273.951687][T11419] usbtmc 1-1:16.0: Unable to send data, error -71 [ 2273.961647][ T4201] usb 1-1: USB disconnect, device number 20 [ 2274.200095][ T4641] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2274.474625][T11441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2274.493887][T11441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2274.510647][ T29] kauditd_printk_skb: 106 callbacks suppressed [ 2274.510663][ T29] audit: type=1326 audit(1786763600.888:2076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11440 comm="syz.2.11556" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f0ec code=0x7ffc0000 [ 2274.543196][ T29] audit: type=1326 audit(1786763600.888:2077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11440 comm="syz.2.11556" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f0ec code=0x7ffc0000 [ 2274.568002][ T29] audit: type=1326 audit(1786763600.908:2078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11440 comm="syz.2.11556" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f0ec code=0x7ffc0000 [ 2274.594187][ T29] audit: type=1326 audit(1786763600.908:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11440 comm="syz.2.11556" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f0ec code=0x7ffc0000 [ 2274.619562][ T29] audit: type=1326 audit(1786763600.908:2080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11440 comm="syz.2.11556" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=399 compat=1 ip=0xf701f0ec code=0x7ffc0000 [ 2274.644443][ T29] audit: type=1326 audit(1786763600.908:2081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11440 comm="syz.2.11556" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f0ec code=0x7ffc0000 [ 2274.670426][ T29] audit: type=1326 audit(1786763600.908:2082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11440 comm="syz.2.11556" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f0ec code=0x7ffc0000 [ 2274.695977][ T29] audit: type=1326 audit(1786763600.908:2083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11440 comm="syz.2.11556" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f0ec code=0x7ffc0000 [ 2274.721307][ T29] audit: type=1326 audit(1786763600.908:2084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11440 comm="syz.2.11556" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=402 compat=1 ip=0xf701f0ec code=0x7ffc0000 [ 2274.746588][ T29] audit: type=1326 audit(1786763600.908:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11440 comm="syz.2.11556" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f0ec code=0x7ffc0000 [ 2274.961861][T11449] bond0: option packets_per_slave: invalid value (65536) [ 2274.980004][T11449] bond0: option packets_per_slave: allowed values 0 - 65535 [ 2274.994716][T11449] bridge0: port 1(syz_tun) entered blocking state [ 2275.002681][T11449] bridge0: port 1(syz_tun) entered disabled state [ 2275.011197][T11449] syz_tun: entered allmulticast mode [ 2275.020581][T11450] netlink: 48 bytes leftover after parsing attributes in process `syz.5.11558'. [ 2275.034116][T11449] syz_tun: entered promiscuous mode [ 2275.047455][T11449] bridge0: port 1(syz_tun) entered blocking state [ 2275.056461][T11449] bridge0: port 1(syz_tun) entered forwarding state [ 2275.479436][ T7912] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2276.551428][T11472] syz_tun: left allmulticast mode [ 2276.579982][T11472] syz_tun: left promiscuous mode [ 2276.585452][T11472] bridge0: port 1(syz_tun) entered disabled state [ 2276.626816][T11472] tipc: Resetting bearer [ 2276.640648][T11472] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2276.976162][T11482] syzkaller0: entered promiscuous mode [ 2276.986853][T11482] syzkaller0: entered allmulticast mode [ 2277.635764][T11493] netlink: 48 bytes leftover after parsing attributes in process `syz.6.11572'. [ 2277.913485][T11501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2277.944243][T11501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2277.992862][T11501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2278.047295][T11501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2278.226785][T11501] syz_tun: left promiscuous mode [ 2278.838850][ T5746] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2278.857514][ T5746] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2278.910941][ T5746] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2278.932300][ T5746] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2278.997971][T11519] syzkaller0: entered promiscuous mode [ 2279.034053][T11519] syzkaller0: entered allmulticast mode [ 2279.599042][T11530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11584'. [ 2279.656386][T11530] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11584'. [ 2279.836412][T11524] netlink: 'syz.6.11583': attribute type 1 has an invalid length. [ 2280.102550][T11555] netlink: 48 bytes leftover after parsing attributes in process `syz.5.11591'. [ 2280.120516][T11557] FAULT_INJECTION: forcing a failure. [ 2280.120516][T11557] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2280.165883][T11557] CPU: 1 UID: 0 PID: 11557 Comm: syz.2.11592 Tainted: G L syzkaller #0 PREEMPT(full) [ 2280.165912][T11557] Tainted: [L]=SOFTLOCKUP [ 2280.165918][T11557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2280.165927][T11557] Call Trace: [ 2280.165935][T11557] [ 2280.165942][T11557] dump_stack_lvl+0xe8/0x150 [ 2280.165969][T11557] should_fail_ex+0x40c/0x560 [ 2280.165996][T11557] strncpy_from_user+0x36/0x2c0 [ 2280.166018][T11557] do_getname+0x77/0x250 [ 2280.166039][T11557] do_sys_openat2+0xcc/0x200 [ 2280.166058][T11557] ? __fget_files+0x3a2/0x420 [ 2280.166078][T11557] ? __pfx_do_sys_openat2+0x10/0x10 [ 2280.166100][T11557] ? fput+0xa0/0xd0 [ 2280.166118][T11557] ? ksys_write+0x242/0x270 [ 2280.166143][T11557] __ia32_compat_sys_openat+0x131/0x160 [ 2280.166168][T11557] __do_fast_syscall_32+0x23e/0x6f0 [ 2280.166188][T11557] ? do_fast_syscall_32+0x33/0x70 [ 2280.166205][T11557] ? lockdep_hardirqs_on+0x7a/0x110 [ 2280.166223][T11557] ? asm_int80_emulation+0x1a/0x20 [ 2280.166237][T11557] ? do_int80_emulation+0x29f/0x550 [ 2280.166255][T11557] ? trace_irq_disable+0x3b/0x140 [ 2280.166277][T11557] do_fast_syscall_32+0x33/0x70 [ 2280.166296][T11557] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2280.166315][T11557] RIP: 0023:0xf701f0ec [ 2280.166330][T11557] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2280.166344][T11557] RSP: 002b:00000000f540d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 2280.166362][T11557] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000000 [ 2280.166373][T11557] RDX: 0000000000000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 2280.166383][T11557] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2280.166393][T11557] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2280.166402][T11557] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2280.166427][T11557] [ 2280.628866][ T5675] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 2280.856890][ T5675] usb 1-1: Using ep0 maxpacket: 8 [ 2280.870898][ T5675] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2280.899867][ T5675] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2280.978965][ T5675] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2281.026003][ T5675] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2281.043019][ T5675] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2281.057120][ T5675] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2281.091293][T11571] netlink: 52 bytes leftover after parsing attributes in process `syz.2.11594'. [ 2281.271495][ T5675] usb 1-1: GET_CAPABILITIES returned 0 [ 2281.277153][ T5675] usbtmc 1-1:16.0: can't read capabilities [ 2281.495516][ C1] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 2281.504828][ C1] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 2281.514101][ C1] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 2281.523379][ C1] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 2281.532651][ C1] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 2281.636650][ T5675] usb 1-1: USB disconnect, device number 21 [ 2282.552978][T11589] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11602'. [ 2282.872883][T24244] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 2283.106301][T24244] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2283.116030][T24244] usb 1-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 2283.152749][T24244] usb 1-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config [ 2283.164296][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.164352][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.179525][T24244] usb 1-1: config 66 has 1 interface, different from the descriptor's value: 2 [ 2283.219338][T24244] usb 1-1: config 66 interface 0 altsetting 16 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2283.229511][T24244] usb 1-1: config 66 interface 0 has no altsetting 0 [ 2283.286943][T24244] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2283.295449][T24244] usb 1-1: Product: syz [ 2283.299709][T24244] usb 1-1: Manufacturer: syz [ 2283.304301][T24244] usb 1-1: SerialNumber: syz [ 2283.607100][T11602] vivid-004: disconnect [ 2283.662139][T11603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11600'. [ 2284.105731][T11596] vivid-004: reconnect [ 2287.885747][T11610] netlink: 32 bytes leftover after parsing attributes in process `syz.7.11607'. [ 2287.917367][T11613] netlink: 48 bytes leftover after parsing attributes in process `syz.5.11606'. [ 2288.378594][T24244] ati_remote2 1-1:66.0: ati_remote2_probe(): need 2 interfaces, found 1 [ 2288.529968][ T4137] usb 1-1: USB disconnect, device number 22 [ 2288.888642][T11635] FAULT_INJECTION: forcing a failure. [ 2288.888642][T11635] name failslab, interval 1, probability 0, space 0, times 0 [ 2288.901388][T11635] CPU: 0 UID: 0 PID: 11635 Comm: syz.5.11615 Tainted: G L syzkaller #0 PREEMPT(full) [ 2288.901415][T11635] Tainted: [L]=SOFTLOCKUP [ 2288.901421][T11635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2288.901430][T11635] Call Trace: [ 2288.901437][T11635] [ 2288.901444][T11635] dump_stack_lvl+0xe8/0x150 [ 2288.901472][T11635] should_fail_ex+0x40c/0x560 [ 2288.901496][T11635] should_failslab+0xa8/0x100 [ 2288.901518][T11635] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 2288.901535][T11635] ? local_lock_release+0x9c/0x160 [ 2288.901549][T11635] ? __alloc_skb+0x1d7/0x7a0 [ 2288.901560][T11635] ? __alloc_skb+0x1d7/0x7a0 [ 2288.901576][T11635] __alloc_skb+0x1d7/0x7a0 [ 2288.901592][T11635] sock_wmalloc+0xb2/0x130 [ 2288.901609][T11635] pppol2tp_sendmsg+0x17d/0x610 [ 2288.901630][T11635] ? __pfx_pppol2tp_sendmsg+0x10/0x10 [ 2288.901645][T11635] sock_sendmsg_nosec+0x13a/0x180 [ 2288.901663][T11635] ____sys_sendmsg+0x54e/0x850 [ 2288.901681][T11635] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2288.901705][T11635] ___sys_sendmsg+0x2a5/0x360 [ 2288.901718][T11635] ? __lock_acquire+0x683/0x2cf0 [ 2288.901738][T11635] ? __pfx____sys_sendmsg+0x10/0x10 [ 2288.901755][T11635] ? kstrtoull+0x12f/0x1d0 [ 2288.901799][T11635] ? __fget_files+0x2a/0x420 [ 2288.901814][T11635] ? __fget_files+0x3a2/0x420 [ 2288.901835][T11635] __sys_sendmmsg+0x2de/0x4d0 [ 2288.901853][T11635] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2288.901884][T11635] ? fput+0xa0/0xd0 [ 2288.901899][T11635] ? ksys_write+0x242/0x270 [ 2288.901921][T11635] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 2288.901940][T11635] __do_fast_syscall_32+0x23e/0x6f0 [ 2288.901956][T11635] ? do_fast_syscall_32+0x33/0x70 [ 2288.901980][T11635] ? lockdep_hardirqs_on+0x7a/0x110 [ 2288.901994][T11635] ? asm_int80_emulation+0x1a/0x20 [ 2288.902006][T11635] ? do_int80_emulation+0x29f/0x550 [ 2288.902020][T11635] ? trace_irq_disable+0x3b/0x140 [ 2288.902037][T11635] do_fast_syscall_32+0x33/0x70 [ 2288.902052][T11635] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2288.902067][T11635] RIP: 0023:0xf7f590ec [ 2288.902080][T11635] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2288.902092][T11635] RSP: 002b:00000000f541650c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 2288.902107][T11635] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080004380 [ 2288.902115][T11635] RDX: 0000000000034000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2288.902123][T11635] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2288.902130][T11635] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2288.902138][T11635] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2288.902156][T11635] [ 2289.701519][T11651] netlink: 164 bytes leftover after parsing attributes in process `syz.2.11620'. [ 2289.813730][T11655] netlink: 'syz.2.11622': attribute type 34 has an invalid length. [ 2289.818134][T11656] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11621'. [ 2289.822189][T11655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11622'. [ 2289.870987][T11655] bond2: option lacp_strict: invalid value (92) [ 2289.881837][T11655] bond2 (unregistering): Released all slaves [ 2289.931011][T11659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11623'. [ 2290.626016][T11702] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11644'. [ 2290.709464][T11708] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11647'. [ 2291.456465][T11758] pim6reg: entered allmulticast mode [ 2291.464281][T11758] pim6reg: left allmulticast mode [ 2291.563494][T11769] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11677'. [ 2291.575952][T11769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11677'. [ 2291.677780][T11777] netlink: 'syz.5.11681': attribute type 9 has an invalid length. [ 2291.783904][T11783] program syz.5.11684 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2292.070435][T10544] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2292.094517][T10544] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2292.111370][T10544] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2292.121658][T10544] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2292.129641][T10544] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2292.591688][T10263] syz_tun (unregistering): left allmulticast mode [ 2292.599488][T10263] syz_tun (unregistering): left promiscuous mode [ 2292.611813][T10263] bridge0: port 1(syz_tun) entered disabled state [ 2293.370743][T11803] bridge0: port 1(bridge_slave_0) entered blocking state [ 2293.387110][T11803] bridge0: port 1(bridge_slave_0) entered disabled state [ 2293.417020][T11803] bridge_slave_0: entered allmulticast mode [ 2293.444517][T11803] bridge_slave_0: entered promiscuous mode [ 2293.570790][T11803] bridge0: port 2(bridge_slave_1) entered blocking state [ 2293.595829][T11803] bridge0: port 2(bridge_slave_1) entered disabled state [ 2293.612097][T11803] bridge_slave_1: entered allmulticast mode [ 2293.630661][T11803] bridge_slave_1: entered promiscuous mode [ 2293.763845][T11803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2293.815120][T11803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2293.929856][T11803] team0: Port device team_slave_0 added [ 2293.953989][T11803] team0: Port device team_slave_1 added [ 2294.091577][T11885] __nla_validate_parse: 2 callbacks suppressed [ 2294.091594][T11885] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11728'. [ 2294.129062][T11803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2294.137224][T11803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2294.177656][T11803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2294.194162][T11803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2294.201483][T19957] Bluetooth: hci2: command tx timeout [ 2294.206959][T11803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2294.206982][T11803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2294.350434][T11894] netlink: 'syz.0.11731': attribute type 1 has an invalid length. [ 2294.581634][T11803] hsr_slave_0: entered promiscuous mode [ 2294.592307][T11803] hsr_slave_1: entered promiscuous mode [ 2294.602961][T11803] debugfs: 'hsr0' already exists in 'hsr' [ 2294.616205][T11803] Cannot create hsr debugfs directory [ 2294.627850][T11907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11737'. [ 2295.179205][T11940] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11747'. [ 2295.296617][T11944] netlink: 84 bytes leftover after parsing attributes in process `syz.0.11749'. [ 2295.419573][ T5746] bond0 (unregistering): Released all slaves [ 2295.451425][ T5746] bond1 (unregistering): Released all slaves [ 2295.486668][ T5746] bond2 (unregistering): Released all slaves [ 2295.533435][T11908] syzkaller0: entered promiscuous mode [ 2295.545116][T11908] syzkaller0: entered allmulticast mode [ 2295.723451][ T5273] 8021q: adding VLAN 0 to HW filter on device eth13 [ 2295.732752][ T5746] tipc: Left network mode [ 2295.893526][T11968] netlink: 40 bytes leftover after parsing attributes in process `syz.7.11757'. [ 2295.905662][T11968] netlink: 40 bytes leftover after parsing attributes in process `syz.7.11757'. [ 2295.921602][T11966] hub 8-0:1.0: USB hub found [ 2295.964609][T11972] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11759'. [ 2295.973484][T11966] hub 8-0:1.0: 1 port detected [ 2296.278312][T19957] Bluetooth: hci2: command tx timeout [ 2297.721214][ T5273] 8021q: adding VLAN 0 to HW filter on device eth14 [ 2298.016920][ T29] kauditd_printk_skb: 1504 callbacks suppressed [ 2298.016937][ T29] audit: type=1326 audit(1786763624.388:3590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12058 comm="syz.2.11793" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf701f0ec code=0x0 [ 2298.358941][T19957] Bluetooth: hci2: command tx timeout [ 2298.381682][T12074] random: crng reseeded on system resumption [ 2298.676628][ T5746] IPVS: stop unused estimator thread 0... [ 2298.990465][T12093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11806'. [ 2299.016499][T12093] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11806'. [ 2299.229550][T12104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11819'. [ 2299.606431][T11803] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2299.662626][T11803] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2299.687432][T11803] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2299.724093][T11803] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2299.743147][T11803] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2299.777691][T11803] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2299.816072][T11803] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2299.824651][T12131] program syz.2.11820 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2299.872254][T11803] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2300.104010][T11803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2300.188963][T11803] 8021q: adding VLAN 0 to HW filter on device team0 [ 2300.251771][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 2300.259141][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2300.287240][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 2300.294471][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2300.439157][T19957] Bluetooth: hci2: command tx timeout [ 2300.486351][T11803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2300.562938][T11803] veth0_vlan: entered promiscuous mode [ 2300.604140][T11803] veth1_vlan: entered promiscuous mode [ 2300.701627][T11803] veth0_macvtap: entered promiscuous mode [ 2300.751779][T11803] veth1_macvtap: entered promiscuous mode [ 2300.829210][T11803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2300.900687][T11803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2300.959365][ T5746] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2300.985845][ T5746] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2301.100975][ T68] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2301.349395][ T5746] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2301.495354][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2301.522273][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2301.644176][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2301.681806][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2302.093770][T12212] bridge0: port 2(bond0) entered blocking state [ 2302.108699][T12212] bridge0: port 2(bond0) entered disabled state [ 2302.142705][T12212] bond0: entered promiscuous mode [ 2302.189204][T12217] bridge0: port 3(team0) entered blocking state [ 2302.204785][T12217] bridge0: port 3(team0) entered disabled state [ 2303.008011][T12244] tipc: Enabling of bearer rejected, failed to enable media [ 2303.228857][T10544] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2303.251247][T10544] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2303.261417][T10544] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2303.271018][T10544] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2303.281280][T10544] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2304.082187][T12272] usb usb7: usbfs: process 12272 (syz.5.11867) did not claim interface 0 before use [ 2304.240297][T12254] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2304.249319][T12254] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2304.255554][T12254] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2304.262673][T12254] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2304.269834][T12254] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2304.275909][T12254] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2304.286458][T12254] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2304.294227][T12254] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2304.300591][T12254] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2304.311092][T12254] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2304.395769][ T5482] bridge0: port 4(syz_tun) entered disabled state [ 2304.537539][ T5482] syz_tun (unregistering): left allmulticast mode [ 2304.559682][ T5482] syz_tun (unregistering): left promiscuous mode [ 2304.570245][ T5482] bridge0: port 4(syz_tun) entered disabled state [ 2304.745061][T12296] usb usb7: usbfs: process 12296 (syz.2.11879) did not claim interface 0 before use [ 2304.892231][ T689] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2304.932033][T12300] batman_adv: batadv0: Adding interface: dummy0 [ 2304.952684][T12300] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2304.997941][T12300] batman_adv: batadv0: Interface activated: dummy0 [ 2305.024280][T12303] batadv0: mtu less than device minimum [ 2305.033085][T12303] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2305.047686][T12303] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2305.059411][T12303] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2305.071085][T12303] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2305.083626][T12303] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2305.095658][T12303] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2305.107809][T12303] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2305.119592][T12303] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2305.131299][T12303] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2305.266106][ T689] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2305.572089][ T689] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2305.619098][T12335] netlink: 72 bytes leftover after parsing attributes in process `syz.2.11894'. [ 2305.669968][T12251] bridge0: port 1(bridge_slave_0) entered blocking state [ 2305.687555][T12251] bridge0: port 1(bridge_slave_0) entered disabled state [ 2305.699603][T12251] bridge_slave_0: entered allmulticast mode [ 2305.721175][T12251] bridge_slave_0: entered promiscuous mode [ 2305.787134][ T689] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2305.813926][T12251] bridge0: port 2(bridge_slave_1) entered blocking state [ 2305.827378][T12251] bridge0: port 2(bridge_slave_1) entered disabled state [ 2305.835419][T12251] bridge_slave_1: entered allmulticast mode [ 2305.845854][T12251] bridge_slave_1: entered promiscuous mode [ 2305.856077][T12341] tipc: Enabled bearer , priority 0 [ 2305.919127][T12251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2305.947774][T12251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2305.961827][T12339] tipc: Disabling bearer [ 2306.051504][T12251] team0: Port device team_slave_0 added [ 2306.074061][T12251] team0: Port device team_slave_1 added [ 2306.142746][T12358] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11900'. [ 2306.158141][T12251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2306.167679][T12251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2306.201739][T12251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2306.289014][T10544] Bluetooth: hci2: command 0x0c1a tx timeout [ 2306.290252][T19957] Bluetooth: hci4: command 0x0c1a tx timeout [ 2306.295797][ T4004] Bluetooth: hci5: command 0x0406 tx timeout [ 2306.308322][T19957] Bluetooth: hci1: command 0x0406 tx timeout [ 2306.359075][T19957] Bluetooth: hci3: command 0x041b tx timeout [ 2306.396916][T12251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2306.439997][T12251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2306.552120][T12251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2307.065195][T12251] hsr_slave_0: entered promiscuous mode [ 2307.097954][T12251] hsr_slave_1: entered promiscuous mode [ 2307.127063][T12251] debugfs: 'hsr0' already exists in 'hsr' [ 2307.145179][T12251] Cannot create hsr debugfs directory [ 2307.342781][T12413] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11922'. [ 2307.363432][ T689] dummy0: left promiscuous mode [ 2307.398124][ T689] bridge0: port 7(dummy0) entered disabled state [ 2307.454422][ T689] bond0: left allmulticast mode [ 2307.481956][ T689] bond_slave_0: left allmulticast mode [ 2307.516428][ T689] bond0: left promiscuous mode [ 2307.535018][ T689] bond_slave_0: left promiscuous mode [ 2307.555414][T12424] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11927'. [ 2307.585310][ T689] bridge0: port 6(bond0) entered disabled state [ 2307.609859][ T689] ip6gretap0: left allmulticast mode [ 2307.623206][ T689] ip6gretap0: left promiscuous mode [ 2307.637545][ T689] bridge0: port 5(ip6gretap0) entered disabled state [ 2307.667093][ T689] bridge_slave_1: left allmulticast mode [ 2307.682841][ T689] bridge_slave_1: left promiscuous mode [ 2307.690571][ T689] bridge0: port 2(bridge_slave_1) entered disabled state [ 2307.703950][ T689] bridge_slave_0: left allmulticast mode [ 2307.720627][ T689] bridge_slave_0: left promiscuous mode [ 2307.737625][ T689] bridge0: port 1(bridge_slave_0) entered disabled state [ 2308.254632][ T689] bond4 (unregistering): (slave ip6erspan1): Releasing active interface [ 2308.359113][T19957] Bluetooth: hci2: command 0x0c1a tx timeout [ 2308.370735][T12460] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11940'. [ 2308.450189][T19957] Bluetooth: hci3: command 0x041b tx timeout [ 2308.666313][ T689] bond2 (unregistering): (slave geneve2): Releasing active interface [ 2308.792941][ T689] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2308.810005][ T689] bond0 (unregistering): Released all slaves [ 2308.825964][ T689] bond1 (unregistering): Released all slaves [ 2308.857102][ T689] bond2 (unregistering): Released all slaves [ 2308.879717][ T689] bond3 (unregistering): Released all slaves [ 2308.915594][ T689] bond4 (unregistering): Released all slaves [ 2308.939012][ T689] bond5 (unregistering): Released all slaves [ 2309.179263][ T5273] 8021q: adding VLAN 0 to HW filter on device eth13 [ 2309.245145][ T689] tipc: Left network mode [ 2309.761717][T12502] netlink: 27 bytes leftover after parsing attributes in process `syz.2.11957'. [ 2309.880546][T12497] team0 (unregistering): Port device team_slave_0 removed [ 2309.950412][T12497] team0 (unregistering): Port device team_slave_1 removed [ 2310.240164][T12516] netlink: 392 bytes leftover after parsing attributes in process `syz.7.11962'. [ 2310.438408][T19957] Bluetooth: hci2: command 0x0c1a tx timeout [ 2310.520392][T19957] Bluetooth: hci3: command 0x041b tx timeout [ 2311.114632][T12553] hub 8-0:1.0: USB hub found [ 2311.132559][ T689] veth1_macvtap: left allmulticast mode [ 2311.155386][ T689] veth1_macvtap: left promiscuous mode [ 2311.162377][T12553] hub 8-0:1.0: 1 port detected [ 2311.168743][ T689] veth0_macvtap: left promiscuous mode [ 2311.182806][ T689] veth1_vlan: left promiscuous mode [ 2311.197352][ T689] veth0_vlan: left promiscuous mode [ 2312.311858][ T5273] 8021q: adding VLAN 0 to HW filter on device eth14 [ 2312.629994][T19957] Bluetooth: hci3: command 0x041b tx timeout [ 2312.697217][T12593] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11990'. [ 2312.761011][T12594] hsr0: entered promiscuous mode [ 2312.767731][T12594] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11989'. [ 2313.466717][ T689] IPVS: stop unused estimator thread 0... [ 2314.587742][T12251] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2314.646212][T12251] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2314.666140][T12251] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2314.689270][T19957] Bluetooth: hci3: command 0x041b tx timeout [ 2314.725676][T12251] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2314.751491][T12251] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2314.770626][T12251] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2314.791840][T12251] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2314.819854][T12251] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2314.871669][T12684] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12022'. [ 2315.156871][T12251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2315.231843][T12251] 8021q: adding VLAN 0 to HW filter on device team0 [ 2315.274569][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 2315.281825][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2315.345552][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 2315.352830][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2315.662373][T12251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2315.890010][T12251] veth0_vlan: entered promiscuous mode [ 2315.937830][T12251] veth1_vlan: entered promiscuous mode [ 2316.084495][T12251] veth0_macvtap: entered promiscuous mode [ 2316.137478][T12251] veth1_macvtap: entered promiscuous mode [ 2316.251018][T12251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2316.292528][T12738] netlink: 76 bytes leftover after parsing attributes in process `syz.7.12041'. [ 2316.316565][T12251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2316.461745][ T1144] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2316.500673][ T1144] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2316.569217][ T7912] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2316.624612][ T1144] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2316.769151][T19957] Bluetooth: hci3: command 0x041b tx timeout [ 2316.974680][T12766] ------------[ cut here ]------------ [ 2316.980949][T12766] do not call blocking ops when !TASK_RUNNING; state=2 set at [] prepare_to_wait_event+0x3dd/0x480 [ 2316.993759][T12766] WARNING: kernel/sched/core.c:9124 at __might_sleep+0x92/0xf0, CPU#1: syz.7.12052/12766 [ 2317.004724][T12766] Modules linked in: [ 2317.009285][T12766] CPU: 1 UID: 0 PID: 12766 Comm: syz.7.12052 Tainted: G L syzkaller #0 PREEMPT(full) [ 2317.020745][T12766] Tainted: [L]=SOFTLOCKUP [ 2317.025095][T12766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2317.035609][T12766] RIP: 0010:__might_sleep+0xac/0xf0 [ 2317.041628][T12766] Code: 00 00 48 89 3c 24 41 89 f5 4c 8d 35 9e d3 c4 0e 43 80 3c 3c 00 74 08 48 89 df e8 2f 8e 9e 00 48 8b 0b 4c 89 f7 89 ee 48 89 ca <67> 48 0f b9 3a 44 89 ee 48 8b 3c 24 eb b5 44 89 f1 80 e1 07 80 c1 [ 2317.061441][T12766] RSP: 0018:ffffc90005bdfac0 EFLAGS: 00010246 [ 2317.067544][T12766] RAX: 0000000000000000 RBX: ffff8880529ff570 RCX: ffffffff819fc8cd [ 2317.076292][T12766] RDX: ffffffff819fc8cd RSI: 0000000000000002 RDI: ffffffff905ae310 [ 2317.084872][T12766] RBP: 0000000000000002 R08: ffffc90005bdfc07 R09: 0000000000000000 [ 2317.093270][T12766] R10: ffffc90005bdfbe0 R11: fffff52000b7bf81 R12: 1ffff1100a53feae [ 2317.101598][T12766] R13: 000000000000026f R14: ffffffff905ae310 R15: dffffc0000000000 [ 2317.109683][T12766] FS: 0000000000000000(0000) GS:ffff888125049000(0063) knlGS:00000000f54a6b40 [ 2317.118710][T12766] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2317.125323][T12766] CR2: 00000000f72cea66 CR3: 000000007de46000 CR4: 00000000003526f0 [ 2317.133659][T12766] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 2317.141720][T12766] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2317.150166][T12766] Call Trace: [ 2317.153468][T12766] [ 2317.156410][T12766] __mutex_lock+0x118/0x1550 [ 2317.161345][T12766] ? do_raw_spin_lock+0x12b/0x2f0 [ 2317.166774][T12766] ? futex_hash_allocate+0x7fb/0xf00 [ 2317.172273][T12766] ? __pfx___mutex_lock+0x10/0x10 [ 2317.177353][T12766] ? lockdep_hardirqs_on+0x7a/0x110 [ 2317.182739][T12766] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2317.188862][T12766] ? prepare_to_wait_event+0x436/0x480 [ 2317.194369][T12766] futex_hash_allocate+0x7fb/0xf00 [ 2317.199707][T12766] ? __pfx_futex_hash_allocate+0x10/0x10 [ 2317.206152][T12766] ? __pfx_var_wake_function+0x10/0x10 [ 2317.211729][T12766] ? static_key_count+0x41/0x70 [ 2317.213948][ T689] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2317.216611][T12766] ? security_task_prctl+0x163/0x190 [ 2317.216645][T12766] __se_sys_prctl+0x78c/0x1910 [ 2317.216673][T12766] ? __pfx___ia32_compat_sys_rt_sigprocmask+0x10/0x10 [ 2317.216701][T12766] ? __pfx___se_sys_prctl+0x10/0x10 [ 2317.216731][T12766] ? __ia32_sys_prctl+0x20/0xc0 [ 2317.216764][T12766] __do_fast_syscall_32+0x23e/0x6f0 [ 2317.216788][T12766] ? do_fast_syscall_32+0x33/0x70 [ 2317.216809][T12766] ? lockdep_hardirqs_on+0x7a/0x110 [ 2317.216831][T12766] ? irqentry_exit+0x10f/0x8f0 [ 2317.216850][T12766] ? trace_irq_disable+0x3b/0x140 [ 2317.216875][T12766] do_fast_syscall_32+0x33/0x70 [ 2317.216897][T12766] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2317.216919][T12766] RIP: 0023:0xf7fe60ec [ 2317.295755][T12766] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2317.313803][ T689] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2317.315716][T12766] RSP: 002b:00000000f54a650c EFLAGS: 00000206 ORIG_RAX: 00000000000000ac [ 2317.331437][T12766] RAX: ffffffffffffffda RBX: 000000000000004e RCX: 0000000000000001 [ 2317.339750][T12766] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2317.347777][T12766] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2317.356238][T12766] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2317.364588][T12766] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2317.372932][T12766] [ 2317.376011][T12766] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2317.383310][T12766] CPU: 1 UID: 0 PID: 12766 Comm: syz.7.12052 Tainted: G L syzkaller #0 PREEMPT(full) [ 2317.394517][T12766] Tainted: [L]=SOFTLOCKUP [ 2317.398937][T12766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2317.409068][T12766] Call Trace: [ 2317.412350][T12766] [ 2317.415277][T12766] vpanic+0x56c/0xa60 [ 2317.419271][T12766] ? __pfx__printk+0x10/0x10 [ 2317.423873][T12766] ? __pfx_vpanic+0x10/0x10 [ 2317.428483][T12766] ? is_bpf_text_address+0x292/0x2b0 [ 2317.433786][T12766] ? is_bpf_text_address+0x26/0x2b0 [ 2317.439019][T12766] panic+0xc5/0xd0 [ 2317.442747][T12766] ? __pfx_panic+0x10/0x10 [ 2317.447173][T12766] __warn+0x315/0x4c0 [ 2317.451156][T12766] ? __might_sleep+0x92/0xf0 [ 2317.455745][T12766] ? __might_sleep+0x92/0xf0 [ 2317.460339][T12766] __report_bug+0x276/0x570 [ 2317.464859][T12766] ? __might_sleep+0x92/0xf0 [ 2317.469466][T12766] ? __pfx___report_bug+0x10/0x10 [ 2317.474506][T12766] ? prepare_to_wait_event+0x3dd/0x480 [ 2317.479965][T12766] ? prepare_to_wait_event+0x3dd/0x480 [ 2317.485428][T12766] ? __lock_acquire+0x683/0x2cf0 [ 2317.490455][T12766] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2317.496281][T12766] ? stack_depot_save_flags+0x3ec/0x800 [ 2317.501828][T12766] report_bug_entry+0x19a/0x290 [ 2317.506683][T12766] ? __might_sleep+0xac/0xf0 [ 2317.511290][T12766] ? __might_sleep+0xb1/0xf0 [ 2317.515877][T12766] handle_bug+0xce/0x200 [ 2317.520120][T12766] exc_invalid_op+0x1a/0x50 [ 2317.524706][T12766] asm_exc_invalid_op+0x1a/0x20 [ 2317.529638][T12766] RIP: 0010:__might_sleep+0xac/0xf0 [ 2317.534834][T12766] Code: 00 00 48 89 3c 24 41 89 f5 4c 8d 35 9e d3 c4 0e 43 80 3c 3c 00 74 08 48 89 df e8 2f 8e 9e 00 48 8b 0b 4c 89 f7 89 ee 48 89 ca <67> 48 0f b9 3a 44 89 ee 48 8b 3c 24 eb b5 44 89 f1 80 e1 07 80 c1 [ 2317.554433][T12766] RSP: 0018:ffffc90005bdfac0 EFLAGS: 00010246 [ 2317.560501][T12766] RAX: 0000000000000000 RBX: ffff8880529ff570 RCX: ffffffff819fc8cd [ 2317.568481][T12766] RDX: ffffffff819fc8cd RSI: 0000000000000002 RDI: ffffffff905ae310 [ 2317.576471][T12766] RBP: 0000000000000002 R08: ffffc90005bdfc07 R09: 0000000000000000 [ 2317.584614][T12766] R10: ffffc90005bdfbe0 R11: fffff52000b7bf81 R12: 1ffff1100a53feae [ 2317.592602][T12766] R13: 000000000000026f R14: ffffffff905ae310 R15: dffffc0000000000 [ 2317.600574][T12766] ? prepare_to_wait_event+0x3dd/0x480 [ 2317.606034][T12766] ? prepare_to_wait_event+0x3dd/0x480 [ 2317.611499][T12766] __mutex_lock+0x118/0x1550 [ 2317.616092][T12766] ? do_raw_spin_lock+0x12b/0x2f0 [ 2317.621113][T12766] ? futex_hash_allocate+0x7fb/0xf00 [ 2317.626400][T12766] ? __pfx___mutex_lock+0x10/0x10 [ 2317.631427][T12766] ? lockdep_hardirqs_on+0x7a/0x110 [ 2317.636631][T12766] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2317.642430][T12766] ? prepare_to_wait_event+0x436/0x480 [ 2317.647890][T12766] futex_hash_allocate+0x7fb/0xf00 [ 2317.653098][T12766] ? __pfx_futex_hash_allocate+0x10/0x10 [ 2317.658733][T12766] ? __pfx_var_wake_function+0x10/0x10 [ 2317.664188][T12766] ? static_key_count+0x41/0x70 [ 2317.669122][T12766] ? security_task_prctl+0x163/0x190 [ 2317.674411][T12766] __se_sys_prctl+0x78c/0x1910 [ 2317.679176][T12766] ? __pfx___ia32_compat_sys_rt_sigprocmask+0x10/0x10 [ 2317.685936][T12766] ? __pfx___se_sys_prctl+0x10/0x10 [ 2317.691152][T12766] ? __ia32_sys_prctl+0x20/0xc0 [ 2317.696025][T12766] __do_fast_syscall_32+0x23e/0x6f0 [ 2317.701234][T12766] ? do_fast_syscall_32+0x33/0x70 [ 2317.706262][T12766] ? lockdep_hardirqs_on+0x7a/0x110 [ 2317.711478][T12766] ? irqentry_exit+0x10f/0x8f0 [ 2317.716254][T12766] ? trace_irq_disable+0x3b/0x140 [ 2317.721281][T12766] do_fast_syscall_32+0x33/0x70 [ 2317.726148][T12766] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2317.732498][T12766] RIP: 0023:0xf7fe60ec [ 2317.736594][T12766] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2317.756619][T12766] RSP: 002b:00000000f54a650c EFLAGS: 00000206 ORIG_RAX: 00000000000000ac [ 2317.765039][T12766] RAX: ffffffffffffffda RBX: 000000000000004e RCX: 0000000000000001 [ 2317.773006][T12766] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2317.781176][T12766] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2317.789147][T12766] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2317.797126][T12766] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2317.805106][T12766] [ 2317.808414][T12766] Kernel Offset: disabled [ 2317.812739][T12766] Rebooting in 86400 seconds..