last executing test programs: 2m35.448914748s ago: executing program 1 (id=573): r0 = openat$userio(0xffffff9c, &(0x7f0000000080), 0x80900, 0x0) preadv(r0, &(0x7f0000000640)=[{0x0}], 0x1, 0x3, 0x40) 2m35.441588427s ago: executing program 1 (id=574): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000700)={0x1c, &(0x7f0000000640)={0x20, 0xa, 0x2, "9cf3"}, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f00000000c0)=ANY=[]) syz_usb_connect$uac1(0x6, 0xaf, &(0x7f00000001c0)=ANY=[@ANYRES32=r0], 0x0) 2m33.097092469s ago: executing program 1 (id=589): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000002700)=""/4136, 0x1028}, {&(0x7f0000000780)=""/82, 0x52}], 0x2, 0x0, 0xbf8}, 0x42) 2m33.058077856s ago: executing program 1 (id=591): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000005e0001002dbd7000fddbdb2500000000", @ANYRES32=r1, @ANYBLOB="9e59"], 0x1c}, 0x1, 0x0, 0x0, 0xa911}, 0x0) (fail_nth: 4) 2m32.908370494s ago: executing program 1 (id=592): ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) r0 = add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, r1, &(0x7f0000000380), 0x0, r0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2m32.728567155s ago: executing program 1 (id=593): fsopen(&(0x7f00000002c0)='ocfs2\x00', 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001800ef0100000000000000000a0010000000fd000000"], 0x30}, 0x1, 0x11}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000680)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) timerfd_create(0x1, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) memfd_secret(0x0) r4 = syz_open_dev$vbi(&(0x7f0000000100), 0x2, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r4, 0xc0745645, &(0x7f0000000500)={0xe, [0x6, 0x1d, 0xe64, 0x81, 0x1, 0x75, 0x2, 0x7, 0x1, 0xffff, 0x0, 0x0, 0x2, 0x6649, 0x0, 0xf835, 0x6, 0x5, 0x800, 0x7f, 0x0, 0x2005, 0x7a0, 0x3, 0x5, 0xffff, 0x6, 0xc5, 0xffff, 0x8, 0x4, 0x1, 0x0, 0x1, 0x5, 0x200, 0x9, 0xa51b, 0xfffe, 0x5, 0x6, 0x35, 0x9c, 0x2, 0x0, 0x5, 0x0, 0x1], 0xe}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) r6 = dup(r5) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x13, r3, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000002}, 0x801) ioctl$KVM_RUN(r3, 0xae80, 0x300) 2m17.466383511s ago: executing program 32 (id=593): fsopen(&(0x7f00000002c0)='ocfs2\x00', 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001800ef0100000000000000000a0010000000fd000000"], 0x30}, 0x1, 0x11}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000680)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) timerfd_create(0x1, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) memfd_secret(0x0) r4 = syz_open_dev$vbi(&(0x7f0000000100), 0x2, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r4, 0xc0745645, &(0x7f0000000500)={0xe, [0x6, 0x1d, 0xe64, 0x81, 0x1, 0x75, 0x2, 0x7, 0x1, 0xffff, 0x0, 0x0, 0x2, 0x6649, 0x0, 0xf835, 0x6, 0x5, 0x800, 0x7f, 0x0, 0x2005, 0x7a0, 0x3, 0x5, 0xffff, 0x6, 0xc5, 0xffff, 0x8, 0x4, 0x1, 0x0, 0x1, 0x5, 0x200, 0x9, 0xa51b, 0xfffe, 0x5, 0x6, 0x35, 0x9c, 0x2, 0x0, 0x5, 0x0, 0x1], 0xe}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) r6 = dup(r5) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x13, r3, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000002}, 0x801) ioctl$KVM_RUN(r3, 0xae80, 0x300) 50.357074238s ago: executing program 3 (id=1203): r0 = gettid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_ORIG={0x4}, @CTA_MARK={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000814}, 0x40c0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r2 = socket(0x27, 0x2, 0x5) r3 = openat$autofs(0xffffff9c, &(0x7f0000000080), 0xc0280, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) sendmmsg(r2, &(0x7f0000000000), 0x400000000000047, 0x3f00) fcntl$lock(r2, 0x6, &(0x7f0000000040)={0x1, 0x0, 0x10001, 0x5, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$LINK_DETACH(0x22, &(0x7f00000001c0)=r5, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setresuid(0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') exit(0xffff) preadv(r7, &(0x7f0000001a00)=[{&(0x7f0000000040)=""/129, 0x81}], 0x1, 0x2, 0x7) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r6, 0x541b, 0x0) ioctl$TIOCSRS485(r5, 0x542f, &(0x7f0000000180)={0x76e4, 0x1, 0x7e}) 49.495992175s ago: executing program 3 (id=1204): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x121400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl(r1, 0x4020ae46, &(0x7f0000000040)="000000000000000000000000000000000010000000000000001000000000007f") 49.352959538s ago: executing program 3 (id=1205): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0xfb}}, './file0\x00'}) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000380)={0x3, 0xffffffff, 0x26b8, 0x7, 0x82cf, 0x6}) openat$ppp(0xffffff9c, &(0x7f0000000300), 0x400c01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e1f, 0x84, @empty, 0x8001}, {0xa, 0x4e21, 0x7, @empty, 0x3}, 0xffffffffffffffff, 0x7}}, 0x48) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000540)=0x189d, 0x1a) recvmmsg(r4, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=""/26, 0x1a}, 0x5}], 0x1, 0x0, 0x0) openat$sndtimer(0xffffff9c, &(0x7f0000000280), 0x40080) r5 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x13, r5, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r6, 0x0, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef", 0x11) write$RDMA_USER_CM_CMD_BIND_IP(r6, &(0x7f0000000140)={0x2, 0xfffffffffffffe02, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @remote, 0x3}, r7}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r7, 0x7}}, 0x10) r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) write$binfmt_elf64(r9, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460e02f9b7ff7f00000000000002000300fffeffffdf02000000000000400000000000000003030000000000000000000008003a00011d040004000d0003000000008000000000000000000000070000000000000008000000000000000500000000000000020400"], 0x78) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x2, &(0x7f0000000440)=[{0x4, 0x4}, {0x6, 0xff, 0x0, 0x7fff0000}]}) getdents64(0xffffffffffffffff, 0x0, 0x59) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0040003c06010100000000000000000000000005000500000000000902020073797a3000000000100003006269746d61703a706f727400240005400000000006000440000000000800084000800dcd2900a81208000640000003ff05000100070000511c00050000000000"], 0x6c}}, 0x40) 49.180698576s ago: executing program 3 (id=1207): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x81, &(0x7f0000000280)={0xffffffffffffffff}, 0x2, 0xd}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x2000000000001005, 0x19dff}}}, 0x90) 49.083979244s ago: executing program 3 (id=1208): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@local, 0x4d4}, @in=@remote, {@in6=@mcast2, @in6=@local, 0x0, 0x0, 0x0, 0xfff8, 0x2}, {{@in6=@rand_addr=' \x01\x00', @in6=@ipv4={'\x00', '\xff\xff', @private=0xa0100ff}, 0x0, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x2}, 0x4}, 0xfdfffffe}, [@tmpl={0x44, 0x8, [{{@in=@private=0xa010101, 0x10000004, 0x33}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0xfc, 0x6}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4c010) add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000640)={'fscrypt:', @desc1}, &(0x7f0000000740)={0x0, "df22554d4bd697d3b71dc97e79138e96dbcbc52c409800c99f3a9f47290000bbfd12bd472aba817ec68a73a0fe9244ecffb25b4e7fef00", 0x2080034}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x38, 0x65, 0x38, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778803000000dfeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000680), &(0x7f0000000200)={'fscrypt:', @auto=[0x64, 0x30, 0x30, 0x61, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x66, 0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x37, 0x61, 0x30, 0x64, 0x30, 0x30, 0x63, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x66, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x39, 0x51, 0x64, 0x62, 0x30, 0x64, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff000000000000000000003500", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000380), &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x32, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x62, 0x30, 0x36, 0x31, 0x30, 0x0, 0x30, 0x33, 0x30, 0x30, 0x30, 0x62, 0x38, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x66, 0x33, 0x62, 0x30, 0x6e, 0x35, 0x30, 0x30, 0x38, 0x30, 0x35, 0x30, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aa8fccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbffffffff00000000445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x64, 0x30, 0x30, 0x38, 0x30, 0x32, 0x30, 0x32, 0x30, 0x30, 0x0, 0x66, 0x30, 0x30, 0x38, 0xf]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbecddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233449e32778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x34, 0x64, 0x61, 0x30, 0x30, 0x31, 0x30]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x39, 0x35, 0x30, 0x32, 0x30, 0x30, 0x2e, 0x65, 0x62, 0x30, 0x39, 0x65, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbcc5deeff00112233445566778899aabbccddeeff001157a1000066778899aa00000000ff00112233445566578899aabbccddeeff", 0x40}, 0x48, r0) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1202) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r0) 49.05899924s ago: executing program 3 (id=1209): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@getqdisc={0x3c, 0x26, 0x10, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xc, 0x7}, {0xfff2, 0x1}, {0x1, 0x5}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc004841}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a400014020", 0x39}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000400), 0x1ff, 0x402) r2 = dup(r1) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x10, 0x1, 0x0, 0x4, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffa, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1705, 0x204ee9f}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x4, 0x7ffc0001}]}) r5 = syz_open_procfs(0x0, &(0x7f0000000340)='pagemap\x00') pread64(r5, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f0000000c80)=[{{&(0x7f0000000980)={0xa, 0x4e21, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000240)='t', 0x1}], 0x1}}, {{&(0x7f0000000440)={0xa, 0x4e23, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x18}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000004c0)="af", 0x1}], 0x1}}], 0x2, 0x40800) shutdown(r6, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x0, 0x20, 0xff8, 0x7}, &(0x7f0000000100)=0x18) r7 = syz_usb_connect(0x5, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="d7b8db21d223af0b5d567a427460513dc09396aa50db7860e50f0fc673bd3dc78dc2d9609c4bab0f163b1384f862fc54d308da3f290829ddf84b002e0cedc00cbfc6c9015caa09a4ddcf4761852937a5bf3c2ba368adaf2284c5715bde83317a073be3bc98bbd4cb5be6e8ff57b28d23e9afbd9e8099e40a7d7d1de5caf480a4dee2e2c7de169493955468443615d8cec22bd258db981e02e06a6304b8f7d5b384eda631", @ANYRES32=0x0], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000240)={0x0, 0x30, 0x6, "a4b1e110b6e9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$uac3(r7, 0x0, &(0x7f0000000540)={0x24, &(0x7f0000000480)={0x60, 0x0, 0xb, "273d56b5e1ff97e020c02b"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000001c0)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0x3d, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x3c, 0x26, 0x4, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x2, 0x2}, {0xa, 0xffe0}, {0xfff0, 0xb}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c881}, 0x40000) r9 = socket(0x40000000015, 0x5, 0x0) r10 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r10, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r11, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900"}) setsockopt$sock_int(r9, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000380)=0xb, 0x4) 33.835475181s ago: executing program 33 (id=1209): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@getqdisc={0x3c, 0x26, 0x10, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xc, 0x7}, {0xfff2, 0x1}, {0x1, 0x5}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc004841}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a400014020", 0x39}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000400), 0x1ff, 0x402) r2 = dup(r1) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x10, 0x1, 0x0, 0x4, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffa, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1705, 0x204ee9f}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x4, 0x7ffc0001}]}) r5 = syz_open_procfs(0x0, &(0x7f0000000340)='pagemap\x00') pread64(r5, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f0000000c80)=[{{&(0x7f0000000980)={0xa, 0x4e21, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000240)='t', 0x1}], 0x1}}, {{&(0x7f0000000440)={0xa, 0x4e23, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x18}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000004c0)="af", 0x1}], 0x1}}], 0x2, 0x40800) shutdown(r6, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x0, 0x20, 0xff8, 0x7}, &(0x7f0000000100)=0x18) r7 = syz_usb_connect(0x5, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="d7b8db21d223af0b5d567a427460513dc09396aa50db7860e50f0fc673bd3dc78dc2d9609c4bab0f163b1384f862fc54d308da3f290829ddf84b002e0cedc00cbfc6c9015caa09a4ddcf4761852937a5bf3c2ba368adaf2284c5715bde83317a073be3bc98bbd4cb5be6e8ff57b28d23e9afbd9e8099e40a7d7d1de5caf480a4dee2e2c7de169493955468443615d8cec22bd258db981e02e06a6304b8f7d5b384eda631", @ANYRES32=0x0], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000240)={0x0, 0x30, 0x6, "a4b1e110b6e9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$uac3(r7, 0x0, &(0x7f0000000540)={0x24, &(0x7f0000000480)={0x60, 0x0, 0xb, "273d56b5e1ff97e020c02b"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000001c0)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0x3d, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x3c, 0x26, 0x4, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x2, 0x2}, {0xa, 0xffe0}, {0xfff0, 0xb}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c881}, 0x40000) r9 = socket(0x40000000015, 0x5, 0x0) r10 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r10, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r11, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900"}) setsockopt$sock_int(r9, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000380)=0xb, 0x4) 7.040005286s ago: executing program 5 (id=1419): socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_usb_connect(0x2, 0x43, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000a3233910eba658744d2d010203010902310001080010000904df0003080662ff09250c0220000606030905071000020102070424"], 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x38044153}, 0x10) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x104, 0x0, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@CTA_SEQ_ADJ_REPLY={0x34, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5d3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x400}, @CTA_TUPLE_ORIG={0x90, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3a}}, {0x8, 0x2, @empty}}}]}, @CTA_LABELS={0x4}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x4}, @CTA_LABELS_MASK={0x18, 0x17, [0x3, 0x2, 0x671b, 0xffff, 0x7]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040400) r1 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket(0x400000000010, 0x3, 0x0) unshare(0x20000400) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0) socket(0x27, 0xa, 0x8) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x80000, {0x7, 0x0, 0x0, r3, 0x80, 0x72}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x20000000) 6.115094189s ago: executing program 6 (id=1422): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)={0x98, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x43, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x6b, 0xe, {{{}, {}, @device_a, @device_a, @from_mac}, 0x8, @default, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @val={0x4, 0x6, {0xb3, 0x2, 0xd, 0x1ff}}, @void, @val={0x5, 0x3, {0x7, 0xc7, 0x6}}, @void, @void, @void, @val={0x2d, 0x1a, {0x2ff, 0x1, 0x7, 0x0, {0xa600000000000002, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0xe5, 0x2, 0x2a, 0x7}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1644}], @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008851}, 0x20000014) 4.450292933s ago: executing program 6 (id=1423): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fsopen(&(0x7f0000000000)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='fd', &(0x7f00000000c0)='1', 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r2, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000000200)='.\x02\x00', 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000120005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="ebffffffffffffff"], 0x20}}, 0x0) read(r3, &(0x7f0000000140)=""/166, 0xa6) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="7800000010000305000000000000000000cf0100", @ANYRES32=0x0, @ANYBLOB="83000000000000002000128008000100677265"], 0x78}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/protocols\x00') fstat64(r4, &(0x7f0000000300)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000000, 0x8031, 0xffffffffffffffff, 0x80000000) sendto$inet6(r6, &(0x7f0000000140)="d0", 0x1, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffff9c, 0x0, r2, &(0x7f0000000000)='./file0\x00', 0x2) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000000)={0x4, 0x7f, {0x0}, {0xee01}, 0x8, 0x5}) ioctl$SG_BLKTRACESETUP(r2, 0xc0401273, &(0x7f0000000040)={'\x00', 0x6, 0x12000000, 0x6, 0x1876, 0xfffffffffffffffe, r7}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r8 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303}, "e400a0ee061000", "19b766c932c05dc4ae5c56bc48624d0aaca57fb0042b97e6a427205b1df98609", "bf7e3d3a", "fc99e624f0f6de7d"}, 0x38) recvfrom$inet(r8, 0x0, 0x0, 0x12143, 0x0, 0x0) 4.32881257s ago: executing program 0 (id=1425): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x10000800, 0x0, 0xff, 0x1}, 0x20) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="050000007d0000004300000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600), &(0x7f00000001c0), 0x71, r4}, 0x38) recvmmsg(r3, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)=""/173, 0xad}, {&(0x7f0000000040)=""/185, 0xb9}, {&(0x7f0000000340)=""/122, 0x7a}, {&(0x7f0000003800)=""/4100, 0x1004}, {&(0x7f0000000200)=""/65, 0x41}, {&(0x7f0000000300)=""/22, 0x16}], 0x6}, 0xd}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x38000000}], 0x3, 0x40000102, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x4}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = socket$netlink(0x10, 0x3, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000 00000100000,user_id', @ANYRESDEC=0x0]) io_setup(0x66, &(0x7f0000000400)=0x0) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_submit(r6, 0x1, &(0x7f0000000100)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xe, r7, &(0x7f00000000c0)='-5', 0x12, 0x0, 0x0, 0x4}]) sendmsg$nl_route(r5, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) 4.252433273s ago: executing program 2 (id=1427): socket$nl_generic(0x11, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x2f}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x31, 0x300, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x5, 0x0, 0x4, 0x0, 0x18}, {"ec03110a900ac361a4"}}}}}, 0x3f) 4.18670684s ago: executing program 6 (id=1428): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix_mp={0x500, 0xb, 0x3432564e, 0x5, 0x4000, [{0xc000}, {0x1, 0x2}, {0x0, 0x5}, {0x0, 0x7}, {0x1, 0x10001}, {0xfffffffe, 0x7f}, {0x0, 0x2}, {0x9, 0xfffffffe}], 0x5, 0x4, 0x4, 0x0, 0x5}}) r2 = syz_open_dev$video4linux(&(0x7f0000000400), 0x7, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r2, 0xc0305615, &(0x7f0000000000)={0x0, {0xee, 0xfffffcbb}}) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3df], [0xffff, 0x4, 0x145a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904"], 0x0) syz_usb_control_io$sierra_net(r5, 0x0, &(0x7f00000008c0)={0x10, &(0x7f0000000140)={0x20, 0xe, 0x3, "73ff68"}, 0x0, 0x0}) 3.944239794s ago: executing program 2 (id=1429): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f0000000100)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x2}}, 0x80, 0x0, 0x0, 0x0, 0x5}, 0x54) bind$inet(r0, 0x0, 0x0) openat$tcp_mem(0xffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) pselect6(0x40, &(0x7f0000000080)={0x4, 0x0, 0x6, 0x5, 0x6, 0x4b2ea588, 0x868d, 0x6}, &(0x7f0000000100)={0x9, 0x3, 0x3, 0x6, 0x8, 0x8001, 0x2, 0xee6a}, &(0x7f0000000140)={0x6, 0x8000000000000000, 0x7, 0x7, 0x6, 0x100000001, 0x4, 0x1932c907}, &(0x7f0000000180), &(0x7f0000000200)={&(0x7f00000001c0)={[0x0, 0x9]}, 0x8}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x700}) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb4, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x4e22, 0x0, 0x0, 0xffff, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x6}, {0x0, 0x7fffffff, 0xfffffffffffffffd}, 0x400000, 0x0, 0x1}}, 0xb4}, 0x1, 0x0, 0x0, 0x44840}, 0x2000801a) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003200)={0x2018, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f001500", @typed={0x12, 0x1, 0x0, 0x0, @binary="00112233445566778899aabb8847"}, @nested={0x4, 0x8002}, @nested={0x1fe8, 0x8003, 0x0, 0x1, [@typed={0x8, 0x8a, 0x0, 0x0, @ipv4=@private=0xa010102}, @nested={0x1fd9, 0x48, 0x0, 0x1, [@typed={0xc, 0x128, 0x0, 0x0, @u64=0x1}, @typed={0x14, 0x23, 0x0, 0x0, @ipv6=@private2}, @generic="0e6f8d86ba0930ec152a7e7a357615ff604266377edf40a9f31a88a0d6052a16386493672af5b607760c144269c397adf62a3dba56df93fd303fda40dcb17903f33b032f3ea403b014c15c2f44e5fc35937dc289dd0111cdb226ff0cc19687d07c924895cbcd331935dc7d446af9439551a0d8d44a8c729dcbaff36e3993e061ab9470f452", @nested={0x1f2d, 0x12, 0x0, 0x1, [@typed={0x4, 0x134}, @generic="4bfe0e5f48155c21f3fe7ae36cd043912d26aae692eb1a433b5529133b195e6ba6ea774683cf51e937cfe5b84855822237891f5805e92669540c71998abba32d81a2db037f2ee56818fadb33f8882c75f1ba6c2498", @typed={0x61, 0x13a, 0x0, 0x0, @binary="6d6a6f195826a6b7bc72c07792abca291233670c9e52a3bb30259dddf11535bef226c0e70e381fd8812b276911343810b14ce242afe974cbbd1c5795e27514d4d8cf6c67a0c067c42cb30bb97f392bda1aea8ad9e2a03b54e6f7e7715e"}, @generic="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", @generic="566cf652575b161f44e8be31c16a65ff28449b73adc3e33501b23c827c51d1eaf9a041b57460a7542203cf02587c4853ffaa157f08db76fb1e6c5e7bee70bf4a607173640febfc192b9c50b65c2d8172287ede9694e7f9fa26d592fe37e16283e073faf7ff04084399a6e601758d62582a805f28e96de02eaaec835782e716283debb420e0ef14e04217c706331dc1ca60deae9c00661c92524d444221859dbab22bb5cf0e4b4027464d68861c06bde8297b115218a42d803cdaf415cde9214ae196df14516fbcb055f3f7284e6e3dff2afc475abe6a1d99cb07536c905df271523be9948379a7371d1f6652b2515b1a2d96ceeddece07ffa0f5f37273b35b9e6de299f19795c3428872f5daf3558f41fb924f10477aeb18695d6e11782e837b84348b3e41f267c59921f680a3cd4e4a5a99baa142237f50dedd5bbd2703a2924e772a1037f3610c7b5031317f9669436e9bbb801ef281300cbac41760d8f8f0fd6148fe66288436b1e97383c401c3a1e059a64a2bfb7007daa0fbaab28b3c2e214d40069f90895a62364367a601d9aec48a60930ff1f40715a475dd469bde4fba494b0c5be97bf88b272c368cac8fc6d002a38d694b37cbc6160172babae91a5ffcba66bb110f2924edf60e1c8be9fd1dcf33fc54b1b058dadc3551f0d3e1e38b3a17c61048442d05d6dc9b3d3404d8e04aa118e9e228594f80bfce73b301c136185924c737f864858ffbc9e2679adac25d58a3026d45d4840296619e2b0113e8cc4633af9a2d29dd31a3c7676dece1c8810e3b930c50db3b7c10f10ac7bfb08acdd3a86389b6ecdf280a999b798eb082d7242f64cb2284e958489cb9fce3bfaf64ed12dc3511c519caeb8581c5d7203599d5f5c1495e85e9ed6cefd496ecbc41220f1baad34f930aaaa25327fbdf3bd936cc49e1168ba7c7c0b231d7654b3a2038ef707e0b0a1fa3655bd10bc80d07ce99e0dff454e3a1ce1e256417ee2f703acbfaa292718ed172ad1876ff1d13149abf24a4d39b40ba15a84478f532b327e9d2f013ec6891f270a2e2696eb19e42c139d6172d2cdb977a4919fd20daefb603951ab06329096fa7b806dbd4319b2b3c486a71c9f4b7353f79a5c8b203b27b71a172a912be1d9bc77b2ae5cfdb2a2c0f3027049dcd33f831309d342459de3f1db21592b43a446efba1cec34366e1ed4658bbb2776b8957e1d29a7d4cf717fc921cc8bcc4280dabf7df333cf1493ddf51ff75348cc84e7a2388dc64b305415b54c0d817e7280ff7a7e06d0fbc23e14755fcc3523f2a232e706667ca57ca8d2eb20346033d432207f8f8f131c740a9bad5dbb90d62ff3b17d9687dbba903b80b6816984708788b958b42a1e965db8f10cae115259d037968716d57ca023b4c3461dbc5c4355df6a2f0580fea7acfe178b24965ff05e06fa797e58029044d01588b0d453200a82466bea780a6a9b0a1c0b9a72384fb9bf5d086a82ac196be4bfb28f7ae2683d81ddb223588c1549c01d04ba49dc75ac216f877fdcd1ab8b0bfb56626f7374ce1fb38cf0eccda682831bf8abfcafe74dd9393eeba704276452818059f7c82e970d00ee7dd9c7ce5e6d2da5aebbfcb290afc91ad8d40d267f35c26ac973225cfb9f22babc64f43d2a0e70add63fc6b2338044a73b8d278d77bd36b1529a427dcf61603577bff0343e57a0f06d732abcf60c80c604095ab2dab00581ec3ed954373c554e1c4edfe818123eda53e0c599166fe7482f73176805197d132dafcc0f9ed96831314c07fc5e176256b2d24a7dac104be62a289e650c60a01b0a1bae40a10ff130cf2b78bf11254d0f26cec3987e44af384e40b9895d921dc8bb349b5f6896d677e9e1e29dfa9d2e6ba4c9c82c1c393328367ae7ef407c4eaa33bb88a2fecb5879b5a663bcc56f281ee3d3e246327787682e80cedb458df3555a46f2e287e4c3b4bf5954473127065606f114676a0a50f878ca64f809762437bcd94d18947a5c40dd77210ae911f6c57d39ccff202b1235c48fb749cb1df04bcf3f5b1a567a6ffec417b15dfb8681ac3d0dc1c92654ef8d6f1f84cfa5be10d2cce93f7d3dc0bbfec937c86f46b8b525894f87a5d91eee8dcbd29a104c2dd78ae7d55f382a05da655f007ee996198edcdf62c3cea1d1c07e97adf1849520f2828b23162eafdc9fcb754d45127f980dfdd69af1de44627d87b89ae618eaa1ebce68ab4f5b21279d63525ce717325e9ebbda0d9e7b86ff2dfd4d66920642bde34c18010d1dfb866838b9352294dd6807634093bbd6a9f934d6c1b846b88ceaf7e8e346f3ecd888d371e038fb69e561898dc78296ac91d4fd3e375b72c03be0e985c0f96951e947cc7440f4efaeb8168ade81994ef94a0401dc1daf22bc16d4785924e0be8b0ee3b81322922649cce7069c387f26a8e39fb95b95c83f25a07d16db94052c58c627335d6726edd32cc353cf8eb9abd01d06eb84c2c65e479509237ea8ab9c7334fbc9aaf2c01fb41ebcdbadbaae8782c86ebd05e2768de6a6dccad17721d083201207382e97e22fdc36215005b5e00c2b209293d4cff02fd28529fa2cafff291a99b099d698830e2b298c3fbf2e3455bb187fcce679c4ec30bf61cc6ba61d2d54ff205f395552e01db504a62e627eb93e376c8261579a2f057d83018eeed45ce69b3a03f24a7757edc9ea1eb7b6ef723187c111b2a9b248fbf32a34b262e1ff33684cd71019f96d5d5a5c9e5f8915759b1c6002ff38d4202b06c0be9a1a3c4dc4a27db782815bf82b4ee36c2d1726f0f2964bd6a3e16d7bc7b03c50d33b51ae9db74468b4fa0f705cb6c32ddcb86c9663171fbc27cc1ee759510b1098dbd2305a7947c90bf3d147698bde90b8659accae57319e2aaa09dac20f089aed15b8ee0d386d712d93d4797d287907df38eb06d80faf6647b35787edfd08ee4935232ddcd72f5bdbad2f36d887aaa349b445d837f9278c6c60a8df2c02a464150e666e6b857dcecd55536af5bf8c312f2f64ceff157dc80d3ad9e81110479fc934912e85ce02d1cfa67a19c7037b59ac70cd28cf5412f29ee8535209d99852ba07021099deeb137e99b0e4979abf044250ee78ee61658a3da2204c1b4096649f6ca7010bf355293811ddb188227a014245f0d64709794f7fd949e8d31337d6b321040f79d6082c0f9f5b42ed414e03e369d7e3738ae58bc427ba3b51364c9417460a55de3f8b60a1177ad6fdd43f9ca9d7d52c445c5565683eafe81bd1e5037166e0a9a0566a642050e3d6b1c89b310a03ceac7dc69403396cc974e694041d0d0b81a12e1b6d069d2586844b41bc97a7e5154024c86be22239e4c44ffc06435ed6278ad401941a4c8c14c78bf7a06f129c913edd289b60455b4bfa37c090f3530fb284d1064d9c5fef5ab62e42604d45a940bc4f2851e791cfd64c9ef10da7f99ba9d7c27fedf98b21e68e7b86194770fe6cbd39199bc19d3375e193f9571aaa5f7e33781eb09eef90924df11fe6c4d71e15d5486885b670d240d33f0b33f8f026a2d771710d7b99e72127b2bd31ef9d929335873ae7cac5c1d8474617760066d5591b5bb05205a5cd851795bdd49c2d2ccb95724e328aa9854795edbe92c9a6e61599cec213e7e6c426cb270f4e021aa857e34fec3d1e558ddcab96fe197e6c5ba25c63c23f48fd48dd163bb9b1e0c57991e4b84dc794c2bc0cefe5465245638a256fb96c8177e5f3714e501e8cbeb8f992c5e2059fcec45656d6c684928d74db8aae673a99c8f419c4c922b0d8702c3e068a94806c855fb76748b33720b98268c72d937e742d84c106aed44994475c4f63d1c0e9fc5a5a33f112812ffa2e55e76cc842b6e86926f09e7ba1203a864a0f1e7d48e5d6bdc9c978a35e48bfbff9683cab934b3a556ceafc07e6ba64d079bd4f623b9463ac53ed393b014b0febf69fb33d14725e665476b67fe2051bb851454e477cb14a9fa7c60990683c126408c42dc798c7677a9c7746dfc857cfe51f97bc5c93480183b130bcf9ee5ee5f1331ea7d1b958184cada0d0b9fcd4f20ce8444f15d7594df360b7843e4c784dc926dfcf702443be78ac4d830ab414e2fc2d48a669cc1ed1f9a685db8d2035120e25a9a3431c5c79b02fb82d189f61c59c913387f864fb4dd335cd9ebb5d36dde58bbdef34a5f18709bad64bb28a7fced89e97a8fbe60f60a667798546aada9ce32d83da47e3650438d67efb8d1a318f0ccaf72639f0ee172db472fad64c32238d85fc93ff739682369d248fa6e5ce85f5694a248bc3f532dc1543278af8e4525e7c138501d2198dfece3a7bb4c11a9280ea535cec46a033fba9da685a79491fc617df78c6562d503a204a040ab05ef0e9822ea966201e8dd85cdd5a75eafc40c00bb27f2ddda0b39b6ae2586fb7104e7393c6443f1ca112de0e85f816c162d568d2416faad6395ee3c0e5df19ec11147ae5e26531be56ce57fde3d360c956ee89e232d2753bdff6b8bdcd51029c7e473ca68d8ce32f596acf4dfc63b406b8e031f8338febca94443b1c12d3ca750f27a35f1da297826d9659b5c7b62108dcc53252c3f76268677746a9d8c7e565379945ecc049bc4d8333c89f3d45c211accef3e845958d748aa71b37893c1d9714b24fcb8c87287fe01bd1ee047d32de1678185e3077c7fa4822c79d1be1fbd49d3bbeadeff555fbce73e822cf5d0ce4bb38e878472bafa33f196aec4856097aa3cf69d5264cc1ac2ceb29f3a8fd6243600efa51beca3cb16a63fab348d531204fdcba7d4b24aab2314d0788a41d59aab6fc351356f358a16b077754b505da1bed2b36ae2088ec6c20d906b9ca8637560e851d4f13b9fdf915d15adf34b3abc8993bfe219e9f75bd3d53a7f97ac73f51726f7a4b5e6f364b379618602eb6509908c5c886475967451897a4f290512032c2d85e731e9dc6eb30d6329738d27a35ebd8e27b093dc3713a612ddc7565f82a8745beef80036618b7335370bc45e533d7495037604dfa88b25ddcd8c644895474fa3e0daab12d29f6e9d6a839b6f7b29cff16a0072c5dc75aee8a3122629cd6618059328827d8caf0074a572e4c673e63c7f3df9e811c8dba5ccdddd72e924b9e2145566925c0582e63785e834fd320d9556844764a8e31f436793dead3de25829e58de025d06c440301b41f468de744d47e69870434a08e556b151bd1f7f233ba3330626e6ef19bc5b0950cdd53"]}]}]}]}, 0x2018}}, 0x4008010) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @multicast2}, 0x10) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) 3.882866736s ago: executing program 5 (id=1430): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB="143c17a2dc08ecfe99bdf00affdbdf2506"], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={r2, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0xfffffffb, @loopback, 0xaa}]}, &(0x7f0000000180)=0xc) 3.752842677s ago: executing program 2 (id=1431): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f000015f000/0x3000)=nil, 0x3000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x10002, 0x0, 0x0) fstat64(0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, r1, 0x0) msync(&(0x7f0000acb000/0x3000)=nil, 0x3000, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r2 = syz_usb_connect$sierra_net(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x2, 0x2, 0x200, 0x6, 0xe6, 0x1}, {0x9, 0x5, 0xc, 0x2, 0x40, 0x6, 0x3}, {0x9, 0x5, 0x5, 0x3, 0x200, 0x0, 0x7, 0x8}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r2, &(0x7f0000000180)={0xc, &(0x7f0000000100)={0x0, 0x1, 0x10, {0x10, 0xd, "4adab8214b129f08698ff0fc03fd"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}}, &(0x7f00000007c0)={0x10, &(0x7f00000001c0)={0x0, 0x15, 0x78, "00a784ce297753e79d24445a16a091ca6c430c06bceb13a2db254ff20239d186ebf553b020168c8d5db63fa7d9f526783eb4912c77bfa4973295f93022b5b288f1c5e38a81361104697848b72a8de6b3fdeaf1c25ae6e1972481fc691e954637b0c46540bf9c476a79cf438711bd11cdbe87449f51a2cf07"}, &(0x7f0000000340)={0xa1, 0x1, 0x400, "a618078b4be2a2fb37f066260087228d3e03821a0e95720ea43d67425131aa959bb38d2a9a9951c8048339a100a0cf38338cbab5a05384abb755d1eabeff91101f9db2accd14a54471b1f08235d3126899d645ee71aff59865d41823e3d85610ca6c8ac7b82d49632fad305071656af187a8a0e00177a69c2bfa264ffb2f900696bdccd81fe6d996db8c6f32dd99d3022f065074471e4b72329f914e9c2d307f91093de5741f02e17fb60a7d4486464315d9c7c2f0f194471d10a9ead97ba7624479aa1eea95ac701a8c0342b1b7c3a39e5f58e49aa1589684ffad55cb28ab6cdc4bb51cd61d4f32cc66ebda4e2049021e1b0f31ce9112e09ea1404b0077228bc01f4577c1d2e60c1676a70a3bdbaecb19a84c168210de326c7e1b3fee896ca81ae92e5ef48c759d07ef043d1f00db901f9ffdcb8e0c8cd8f35330470e75ffddbbe1f9cbedb371b4d2d9bdbd607d047212d71664d04120e00e0af9339a3a92d2d69dd80a6be722d86320ad0f721b162e10902ac34423ef03d4e2c12a49682daa453031fbf3a9f37624f14c2cbb90e0738cdcc82e5a9621258950e58bcd3e0f0d15c30aa1e1322a98d0d4ee086aa0b3976f1be84f6cf40bd20fd6e340dc24001b7ece55ba0ccaaab6922fb0b153696ca46542fab9a05013d682b0783519cddc4e0da767598c1e70810ed8e74b7a0f83c10d6d162260e2240c1ddf09c6009e124b3befa2fb26224232f72a2f9d013f1ffb81e798842c52fe5eccba0ed99f340bd181cc303ddc669a5f697e8284b737419635019d2c48e54fcf83e88628bf1c6afa2566d6ae90f44c4b743bbeaa1652fc119acdaeb7523253c356a1e0a28e86a4aa8b1a636146723c57d07531fabbbdc7d1d659b7e79fddf5c715ca62ff411db0b2e19ebbc45d96ebf4870e84c2cb19a06036ffe6d14f7754abcbf5dc0a2b4ca100103f89954300da92d679d21b5fe0a7a9e35ab17b50d7cb906ce9f7d1e0c1b07d04f9e3a07db6583b803f2654a6461688c41eaf5631b366d6b0b97fabe1e36f0261321a199f79e6ee62f2e255cfedcf0b545d1cae77d891a2219f268479aa8f15cb4a528a4162c4a3c2285c4d4d46e1282502b192edbb695f43a1150819a9a263752c068219d8c318ead0fcbf9163d7a930d9b1cadf34fd1f5f17d44dad63a41de2eb1d744a98171b366fc3d548081e89153597a540a3d5eaedb486be2139debd30e0456f89383f6a39fdac1b7d3c51be52d730e67225a5a9d5ebb420842765e2bb05b7ac74147bfcb6190882001dadd051df6a49d0e96fdf48b8569237cbf75c422fcad385c12b268488b23d8830bfb4d727a359d763e0e99dd0ad6d55f1b27d46bc651d6273af2eb01af969edf7efc10e2fbc28c46dba2c1d426a70bcd3f05bb8f51aa20025298ac8fde53b3cc257fcdf2a6175b0c09f703f487eaf93defae5"}, &(0x7f0000000780)={0x21, 0x0, 0x1, "e1"}}) 3.446469225s ago: executing program 4 (id=1434): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x210800, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x210800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x28a}]}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x24001, 0x0) read(r5, &(0x7f0000000040)=""/148, 0xffffff96) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$EVIOCGNAME(r5, 0x80404506, &(0x7f0000000000)=""/49) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 3.360854367s ago: executing program 0 (id=1435): madvise(&(0x7f0000cfd000/0x3000)=nil, 0x3000, 0x4) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9rust\xe3c*s\xb8dn::e\x00\x00', 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) sendmsg$rds(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x10540, 0x0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="c85b7ab2bfa590ec4b1396b93f188bbb1ae7e7760c7825797b47c9a8a502ea524be084501e2567733195e223eb2822274b8a7adabee2a7f6e50c310cb86f6e4b3b8fd4ab2592e96988d82c383f198b981fd0d240a3c8166244dce1c2aadbe27ebe2ea50d3b6f7f252be80586b38abae25fbb71336d", 0x75, 0xfffffffffffffffa) ioctl$RTC_UIE_ON(r1, 0x7003) 3.243626536s ago: executing program 0 (id=1436): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x8, 0x101002) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) openat$proc_mixer(0xffffff9c, &(0x7f0000000000)='/proc/asound/card1/oss_mixer\x00', 0x107d00, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0xfffffffe, {0x2a00, 0x80010000, 0x0, 0x4, 0x6, 0x0, 0x0, 0x20000, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac100875397bdb22d0000b420a1a93c9e01177d3d058dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x1]}}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000400)={{r2}, r3, 0x0, @inherit={0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000000700000000000000ae07000000000000980d00000000000001000000000000000a000000000000000100000000000000e6050000a716392e68148743cbe3229cb041000000008100000000009a0e0000000000000100000000000000455000000000000000000000000000000600"/128]}, @name="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"}) 3.069246209s ago: executing program 0 (id=1437): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c0000001a0001ff80000000000000000a000000000000000000000008000400", @ANYRES32=0x0, @ANYBLOB="080017"], 0x2c}}, 0x0) (fail_nth: 2) 2.680712336s ago: executing program 5 (id=1438): r0 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000340)=0x95ba, 0x4) unshare(0x28040680) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000440)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000000d9401002861a700ffdbdf25080081000100000047000300010000000800030003000000"], 0x28}, 0x1, 0x0, 0x0, 0x20008011}, 0x4010140) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c0000001a0001ff80000000000000000a000000000000000000000008000400", @ANYRES32=0x0, @ANYBLOB="080017"], 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0x403, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90446}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000ac0)={'syztnl0\x00', &(0x7f0000000a00)={'tunl0\x00', 0x0, 0x20, 0x7, 0x9, 0x5, {{0x24, 0x4, 0x1, 0x1, 0x90, 0x67, 0x0, 0x2, 0x29, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010100, {[@cipso={0x86, 0x1d, 0x3, [{0x2, 0x2}, {0x7, 0x5, "d8fb2a"}, {0x4, 0x5, "841b0a"}, {0x5, 0x6, "3826d40c"}, {0x7, 0x5, "c03faa"}]}, @timestamp_addr={0x44, 0x14, 0x9f, 0x1, 0x9, [{@empty, 0x9}, {@local, 0x8000}]}, @cipso={0x86, 0x4b, 0x3, [{0x5, 0x6, "89b8abec"}, {0x0, 0x7, "a006116dd1"}, {0x1, 0x2}, {0x6, 0x2}, {0x0, 0x10, "c44302649d8b410082f2eb05f89b"}, {0x5, 0x3, "f7"}, {0x7, 0x8, "af80bf45023c"}, {0x5, 0x11, "16012725425358dba979632e65b5ed"}, {0x1, 0x8, "126ce76199c8"}]}]}}}}}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000008c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff3, 0x7}, {}, {0xfff3, 0xfff2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_EMATCHES={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000080}, 0x40010) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000b80)={0xffffffffffffffff, 0x58, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000bc0)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000c80)={'gretap0\x00', &(0x7f0000000c00)={'tunl0\x00', 0x0, 0x20, 0x7, 0x4, 0x3, {{0xf, 0x4, 0x0, 0x5, 0x3c, 0x66, 0x0, 0xd5, 0x29, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x31}, {[@lsrr={0x83, 0x7, 0xec, [@multicast2]}, @noop, @ra={0x94, 0x4}, @ssrr={0x89, 0x1b, 0x7f, [@rand_addr=0x64010102, @private=0xa010102, @multicast1, @remote, @multicast1, @local]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000d40)={'syztnl2\x00', &(0x7f0000000cc0)={'ip6tnl0\x00', 0x0, 0x29, 0x5, 0x0, 0x7, 0x4f, @mcast2, @empty, 0x8, 0x10, 0x2, 0x7}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000dc0)={'erspan0\x00', &(0x7f0000000d80)={'gre0\x00', 0x0, 0x8, 0x40056d4179a4998, 0xffff, 0x800000, {{0x7, 0x4, 0x2, 0x11, 0x1c, 0x66, 0x0, 0x9, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x7, 0x52, [@multicast2]}]}}}}}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000e80)={'gre0\x00', &(0x7f0000000e00)={'syztnl1\x00', 0x0, 0x20, 0x10, 0x7, 0x9, {{0xe, 0x4, 0x2, 0x16, 0x38, 0x66, 0x0, 0x65, 0x4, 0x0, @remote, @empty, {[@end, @ssrr={0x89, 0x23, 0x55, [@local, @multicast1, @multicast1, @loopback, @multicast2, @private=0xa010102, @multicast1, @remote]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001080)={'gretap0\x00', &(0x7f0000000ec0)={'syztnl2\x00', 0x0, 0x20, 0x20, 0x8, 0x5, {{0x5b, 0x4, 0x2, 0x3, 0x16c, 0x68, 0x0, 0x81, 0x2f, 0x0, @remote, @private=0xa010101, {[@ssrr={0x89, 0xf, 0xb3, [@multicast1, @multicast1, @broadcast]}, @timestamp_prespec={0x44, 0x54, 0x81, 0x3, 0xf, [{@remote, 0x3}, {@private=0xa010100, 0x80000000}, {@loopback, 0x6}, {@broadcast, 0x200}, {@remote, 0x5}, {@empty, 0x1b3}, {@multicast2, 0x27}, {@broadcast, 0x5}, {@empty, 0x7}, {@broadcast, 0x69}]}, @timestamp_addr={0x44, 0x4c, 0xb5, 0x1, 0x8, [{@multicast2, 0x5}, {@empty, 0x5}, {@loopback, 0x7}, {@multicast1, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb7}, {@loopback, 0x16acaee9}, {@loopback, 0x7}, {@multicast1, 0x8}, {@loopback, 0x1}]}, @timestamp_addr={0x44, 0x2c, 0x39, 0x1, 0x2, [{@local, 0x401}, {@local, 0x935}, {@loopback, 0x6}, {@local, 0x9}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x7fffffff}]}, @cipso={0x86, 0x5b, 0x1, [{0x6, 0x12, "67ac27906983c02b0a5a073eca33b4e9"}, {0x0, 0x9, "335be4daf064da"}, {0x5, 0x5, "a59c1e"}, {0x7, 0x3, '2'}, {0x6, 0x10, "04ee25550b807939eda930835aab"}, {0x2, 0x9, "8a3c33520206c2"}, {0x0, 0xf, "86f4276fef004c0ca3c6f3438c"}, {0x2, 0x7, "f104dbe829"}, {0x7, 0x3, '.'}]}, @rr={0x7, 0xf, 0xb5, [@empty, @dev={0xac, 0x14, 0x14, 0x3e}, @dev={0xac, 0x14, 0x14, 0x11}]}, @ra={0x94, 0x4}, @end, @generic={0x83, 0x6, "d37b51ca"}, @generic={0x94, 0x5, "a8a411"}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001900)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000018c0)={&(0x7f00000010c0)={0x7fc, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0x4}}, {{0x8}, {0x244, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x7, 0x9, 0x41}, {0x7363, 0x60, 0x88, 0x5962c407}, {0x6, 0x1, 0x68, 0x6}, {0xc, 0x8, 0x10, 0x3}]}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xd0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x29}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}]}}, {{0x8, 0x1, r11}, {0x210, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xbec}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x4, 0x0, 0x0, 0xffffffff}, {0x5, 0x10, 0x0, 0x70}, {0x3, 0x0, 0x9, 0x2}, {0x1000, 0x56, 0x0, 0x800}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r16}}}]}}]}, 0x7fc}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 2.645622314s ago: executing program 0 (id=1439): r0 = socket$inet(0x2, 0x3, 0x6) sendmmsg$inet(r0, &(0x7f0000007900)=[{{&(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10, 0x0}}], 0x1, 0x14) 2.532221147s ago: executing program 0 (id=1440): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) (async) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000100), 0x4) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000100), 0x4) eventfd(0x0) (async) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000300)=r2) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_targets\x00') read$FUSE(r3, &(0x7f0000004840)={0x2020}, 0x2020) pread64(r3, &(0x7f0000000000)=""/2, 0x7, 0x200004) read$FUSE(0xffffffffffffffff, &(0x7f0000002800)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000002800)={0x2020}, 0x2020) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000180)=""/64, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000180)=""/64, 0x0}) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) (async) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) (async) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$rtl8150(r4, 0x0, &(0x7f0000001200)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="43178400000008"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) (async) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) (async) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$sierra_net(r4, 0x0, 0xffffffffffffffff) syz_usb_control_io$uac1(r4, 0x0, 0x0) 2.440831248s ago: executing program 5 (id=1441): socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_usb_connect(0x2, 0x43, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000a3233910eba658744d2d010203010902310001080010000904df0003080662ff09250c0220000606030905071000020102070424"], 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x38044153}, 0x10) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x108, 0x0, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@CTA_SEQ_ADJ_REPLY={0x34, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5d3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x400}, @CTA_TUPLE_ORIG={0x94, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3a}}, {0x8, 0x2, @empty}}}]}, @CTA_LABELS={0x4}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x4}, @CTA_LABELS_MASK={0x18, 0x17, [0x3, 0x2, 0x671b, 0xffff, 0x7]}]}, 0x108}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040400) r1 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket(0x400000000010, 0x3, 0x0) unshare(0x20000400) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0) socket(0x27, 0xa, 0x8) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x80000, {0x7, 0x0, 0x0, r3, 0x80, 0x72}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x20000000) 2.430054915s ago: executing program 4 (id=1442): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) unshare(0x2040400) r1 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81[\xa9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x174, 0x0) mq_timedsend(r1, 0x0, 0x2000, 0x6, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000004540)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="a4000600400004001c001280a3ff01006d6163766c616e000c00028008000300030000001400350076657468315f746f5f62617461647600"], 0x50}, 0x1, 0x0, 0x0, 0x8840}, 0x8000) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000080)=0x2, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) statx(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x100, 0x88c, 0x0) write$FUSE_INIT(r3, &(0x7f0000004300)={0x50, 0x0, r4, {0x7, 0x29, 0x0, 0x1400001, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0x0, 0x5, {0x3, 0x0, 0x7fffffff, 0x1ffffffffffff, 0xe5, 0xc, {0x1, 0x9, 0x1, 0x1, 0x5, 0x4, 0x8, 0x123, 0x3, 0xa000, 0x0, 0x0, r6, 0x5, 0x2000fffb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r3, 0x0, 0x0) read$FUSE(r3, &(0x7f0000002240)={0x2020, 0x0, 0x0}, 0x2020) stat(&(0x7f00000065c0)='./file0/file0\x00', &(0x7f0000006600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r3, &(0x7f0000006680)={0x3e8, 0x0, r7, [{{0x4, 0x2, 0x10, 0x6, 0x9, 0x4, {0x7, 0x2, 0xf97a, 0x9, 0x59, 0x8, 0x5, 0x7f, 0x2, 0xa000, 0xbd47, 0x0, 0x0, 0x200, 0x100}}, {0x4, 0x7fffffffffffffff, 0x3, 0xff, '[/.'}}, {{0x5, 0x3, 0x7ff, 0x715, 0x8d, 0x9, {0x5, 0x2, 0x1, 0x7e6f, 0xfffffffffffffffe, 0x10000, 0x8, 0x6e, 0x4, 0x5b80dc8d89f818b0, 0x1ff, r5, 0x0, 0x10000, 0x1}}, {0x3, 0x4, 0x8, 0x1, 'group_id'}}, {{0x2, 0x1, 0x80000000, 0x8, 0x9, 0x4, {0x5, 0x5, 0x8, 0x9, 0x4, 0x7ff, 0x1000, 0x3, 0x2, 0xa000, 0xd, r5, r6, 0x0, 0x4}}, {0x3, 0x9, 0xa, 0x5, '/dev/fuse\x00'}}, {{0x1, 0x2, 0x10000, 0x8000000000000001, 0x800, 0x1, {0x1, 0x7, 0x8, 0x0, 0x80000000, 0x3, 0x2, 0x5, 0xffffff2c, 0x1000, 0x47, 0x0, r6, 0x9, 0x1}}, {0x3, 0x74dd, 0xb, 0x10001, '.&#()\xab+}[#-'}}, {{0x2, 0x2, 0x101, 0x0, 0x9, 0x7fffffff, {0x2, 0x1, 0x2cb, 0x4, 0x4, 0x7, 0x9, 0x7013f55f, 0x6, 0xa000, 0x8, r5, r8, 0xfffffc9e, 0xb3fd}}, {0x6, 0x100000001, 0x1, 0xffffffff, '\x00'}}, {{0x4, 0x1, 0x4, 0x200, 0x5, 0x80000000, {0x3, 0x6, 0x8000000000000000, 0x80000001, 0x4, 0x7, 0xc4, 0x7ff, 0x2, 0x1000, 0xec7d, r5, r6, 0x8, 0x5}}, {0x4, 0x2, 0xa, 0x7, '/dev/fuse\x00'}}]}, 0x3e8) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x44, &(0x7f0000000000)={0x4d, 0x0}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="98000000", @ANYRES16=r10, @ANYBLOB="01000000000000000000030000008400018044000400200001000a00000000000000fe800000000000000000000000000013f8000000200002000a00000000000000ff020000000000000000000000000001000000003c0002800800030008000000080004002900000028000300ff01000008000300030000000800550e46f264dc18190d2548c6ba4444e4010017000000"], 0x98}}, 0x0) r11 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000340)={0x3f, 0x3, 0x9}, 0x10) write(r11, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000a600000000000000080008001d000000", 0x24) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'netpci0\x00'}}) r12 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r12, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000240)=0x2c) 2.343524496s ago: executing program 6 (id=1443): r0 = socket$nl_route(0x10, 0x3, 0x0) eventfd2(0x0, 0x80000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000500)=[{&(0x7f0000000400)=""/205, 0xcd}], 0x1, 0x113, 0x2) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000040)={0x4, 0x8, 0xfff8, 0x800, 0x71, 0xa}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x4a5e94aef5dd53e7, {0x42, 0x0, 0x5}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x4, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x7, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25cf, 0x800000, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa99, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x6, 0x0, 0xfffffffe, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0xd3, 0x0, 0x0, 0xfffffff7, 0x1ff, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x7, 0x9, 0x10, 0x0, 0x400, 0x0, 0x6, 0x0, 0xffffffff, 0x101, 0x0, 0x80, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x10002, 0x0, 0xd5a9, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x7b2, 0x0, 0x0, 0x1, 0x10, 0x0, 0x9, 0xfffffeff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x4, 0x100000, 0x1002, 0x0, 0x0, 0x0, 0x7fff25c8, 0x0, 0x0, 0x7, 0xd4, 0x8000c, 0x5, 0x0, 0xffffffff, 0xffffffff, 0x302e, 0x0, 0x1, 0x0, 0x6, 0x8, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0x1, 0x20000000, 0x4, 0x0, 0x0, 0x3, 0x3, 0x9, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3ff, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0xffffffff, 0xfffffffc, 0x0, 0x0, 0x9, 0x0, 0x4, 0x3ffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0xb]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2}, {0x2, 0x0, 0x5, 0x0, 0x0, 0x40}}}]}}]}, 0x45c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003200)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004000000"], 0x48) 2.228910001s ago: executing program 6 (id=1444): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="f800000019000100000000000000000020010000000000000000000000000000ac14141500000000000000000000000000000005000000030a00a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f000000000000ffffffffffffffff0000000000000000ff06000000ffffffffffff7f0000000000000100000000000200000000000000000a000000000000000000000080400000000000000000080000000000000000010000034400050000000000000000000000000000000000000004d23c00000000000000ffffffff0000000000000000000000000000000000030000490000000000000000000000e7d2198486123512dfcd14186e578e90e219fc7b329e06c66ae3eeee741bfb5d3ed052c41559dd86cf22e299551ef69e7f75e5ac086dea0c2fd343806b10d0288be7d8685b74e9b20be8ca188b196d42a559e56a3779cfd51530a1d80949df5de2f2b6eb929687d16f4c41d19000adb0febeba8974ae09c38a0fbc86023d77a9ac593b4fe37adcea5949c5216fa5"], 0xf8}}, 0x4000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000080)={{@hyper, 0x2}, @any, 0x0, 0x0, 0x2, 0x6, 0x9a6, 0x10001, 0x8}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r3, 0x7a9, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000100)) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) sendmsg$key(r2, &(0x7f0000000040)={0x40000000, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x10}}, 0x20040800) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000140)=0x1) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) fsopen(&(0x7f0000000040)='afs\x00', 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0x18, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x34, 0x24, 0x1, 0x200000, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xa, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x24008004) 1.51603462s ago: executing program 4 (id=1445): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x401, 0xfffffff5, 0x0, {0x2}}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x2401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x34, 0x3, "64000000746573745f6c6162656c000000000000050000000000000000000000000100"/48}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xcc}}, 0x0) 1.421725391s ago: executing program 4 (id=1446): r0 = socket(0x1e, 0x5, 0x0) (async) r1 = socket(0x21, 0x2, 0xa) (async) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) (async) r2 = io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0xfffffffe, 0x1000, 0x0, 0x42b4}) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000009968810524711004f320102030109021b0001000000000904000001ff01320009050d0353"], 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000440)={0xd702, 0x80000000, 0x78e7, 0x60, 0x6}) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x1, 0x0) (async) syz_extract_tcp_res$synack(&(0x7f00000000c0)={0x41424344}, 0x1, 0x0) write$tun(r3, &(0x7f00000002c0)={@val={0x0, 0xf8}, @void, @ipv4=@tcp={{0xa, 0x4, 0x1, 0x3, 0xe5, 0x68, 0x0, 0x18, 0x6, 0x0, @broadcast, @multicast2, {[@rr={0x7, 0x13, 0x67, [@broadcast, @local, @broadcast, @broadcast]}]}}, {{0x4e23, 0x4e23, r4, r5, 0x0, 0x0, 0xf, 0x1, 0xffff, 0x0, 0x6, {[@md5sig={0x13, 0x12, "dd68c13155f00ded92cfa6dd4cc3a12d"}, @exp_fastopen={0xfe, 0x12, 0xf989, "46735283eac680fa09977d006df3"}, @window={0x3, 0x3, 0xf0}]}}, {"a0e9e3f5446b9dcbba11ac5abc1491a34c3a6a755168365f6644e4861fcb7a371aef23c6cb8a57b95d6707a704b307f3758175ef3d8c2f4972a7564843a97e650817a8f7a9f593da04e24fb2ce0e3c968aa523b2636c6c71ca2b3be0cfaab823de3f53185c289994065040f68577465e17083a63d9b8d0798e88bc181a6004b271"}}}}, 0xe9) close_range(r1, r2, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) (async) recvmmsg(r0, &(0x7f0000006bc0)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000540)=""/117, 0x75}], 0x1, &(0x7f0000001340)=""/186, 0xba}}], 0x1, 0x20b0, 0x0) sendmmsg$inet(r0, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="93", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)='3', 0x1}], 0x1}}], 0x2, 0x4044810) 1.301819611s ago: executing program 6 (id=1447): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x80000) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f7", 0x1d}, {&(0x7f0000000080)="5b5c65ab", 0x4}], 0x2}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000000180)=""/89, 0x59}], 0x1}, 0x12040) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000140)={0x10000042, 0x0, 0x2}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r7, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0xfe}}}, 0x10, 0x0}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, 0x0, 0x0) syz_usb_connect(0x6, 0x24, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x12, 0x3, "91abc12404cf378042f26c43f91f"}]}], {0x14}}, 0x7c}}, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x6f, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0x1, 0x2, 0xb0, 0x7, "", [{{0x9, 0x4, 0x0, 0x2, 0x3, 0x2, 0x6, 0x0, 0x8, {{0xb, 0x24, 0x6, 0x0, 0x0, "9f963efa7474"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x2, 0xd, 0x75}, [@network_terminal={0x7, 0x24, 0xa, 0xfb, 0x5, 0xa, 0x6}, @obex={0x5, 0x24, 0x15, 0x7}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x4, 0x5, 0x1}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0xd, 0x5, 0x82}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x6, 0x3b, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x3, 0x8, 0x2}}}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x2, 0x3, 0x6, 0x40, 0x16}, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="c0cb670457935b9272e9050f050000"], 0x4, [{0x1c, &(0x7f0000000000)=ANY=[@ANYRESOCT=r3]}, {0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="2903c5d5bfdd94647f598b61848e7d7f7031069a10e66e361a5037c92adab19c21bfe8946452fa01ab9c6ebe07ad7bc111936446bad0cb5905938f72c3044e259a8ada2d2931923e0ea40e283c5288261a49966a01ded5c5173487a9f5d689272cf88b28ab36eec186eba5e0822f3ee705da61eb2579a938264ad1cd80cce9069b7018eb058a44a50f"]}, {0x9d, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x81d}}]}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, 0x0, 0x0) r10 = syz_open_dev$video(&(0x7f0000000040), 0x10001, 0x8000) ioctl$VIDIOC_S_PARM(r10, 0xc0cc5616, &(0x7f0000000180)={0x1, @capture={0x0, 0x0, {0x4}, 0x100, 0x8000002}}) sendmsg$inet(r9, 0x0, 0x0) 1.297456135s ago: executing program 4 (id=1448): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r2, &(0x7f0000000100)='`', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(r1, &(0x7f0000000040)='attr/sockcreate\x00') fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_MPATH(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r4, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x90}, 0x40000) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380100001000010028bc705cfb00fdff00000001ac14140d0000000000000000000000000000ecdf000000000a00"/66, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f00000100000000000000000000000000000000320000000a010102000000000000000000000000fefffffffffffffffeffffffffffffff030000000000000000000000800000000000000000000000fcffffffffffffff000000000000000009000000000000000300000000000000040c400000000000090000000000000092020000000000000000b01c020000000000000000000000000000000a0001002c0000004c001400626c616b6532622d3136302d67656e657269630000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000"], 0x138}}, 0x44050) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x4, 0x0, 0x80000001, 0x3}, 0x0) r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205647, &(0x7f0000000340)={0x9b0000, 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x0}) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x82}], 0x1, 0x0, 0x0, 0x0) 1.121349687s ago: executing program 5 (id=1449): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) close(0x3) (async, rerun: 64) r1 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f000000000000000001080000", 0x1c) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) (async) sendmmsg$inet6(r2, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) (async, rerun: 64) sendto$inet6(r2, 0x0, 0x0, 0x8000, 0x0, 0x0) (async, rerun: 64) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), 0x8) (async) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00000001c0)=0x7f, 0x4) 848.287111ms ago: executing program 5 (id=1450): syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050202000200070582020002"], 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0300000004020000040000000a0000", @ANYRES32=0x1, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRESHEX], 0x48) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x8}]}) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000300)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x65, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x101, 0x7], 0x100000, 0x240046}) ioctl$KVM_RUN(r3, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, &(0x7f00000000c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='hybla', 0x5) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0800000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendto$inet(r0, &(0x7f0000000240)="c927", 0x2, 0x4044880, 0x0, 0x0) 684.623954ms ago: executing program 2 (id=1451): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = epoll_create1(0x80000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000002fc0), r3) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003000)={0x24, r4, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x24000804) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0x80000004}) r5 = openat$cgroup_ro(r1, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) pread64(r5, 0x0, 0x0, 0xcd32) unshare(0x62040200) unshare(0x2020200) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x10, 0x20, 0x0, 0x6, 0x0, 0x0, 0x3}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e1d, 0x4e24}}]}, 0x4c}}, 0x40000) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x20100) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r8, 0xc0145401, &(0x7f00000000c0)={0x1, 0x3, 0x6d7, 0x604f39d8888a9b0d, 0x9}) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_FLUSH(r9, 0x0, 0x485, 0x0, 0x0) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r11 = syz_io_uring_setup(0xefd, &(0x7f0000000600)={0x0, 0x4, 0xc00, 0x2, 0x1, 0x0, 0x0}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r12, r13, r14, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r15, 0x0, 0x0, 0x0, 0x4004, 0x1, {0x0, 0x0, 0x2}}) io_uring_enter(r11, 0x1, 0x1, 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r10, @ANYBLOB="31a225bd7000000000001900000004000180"], 0x18}}, 0x0) r16 = socket$key(0xf, 0x3, 0x2) socket$kcm(0x29, 0x2, 0x0) sendmsg$key(r16, &(0x7f0000000380)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x2, 0x18, 0x0, 0x0, 0x1b, 0x0, 0x70bd28, 0xfffffffd, [@sadb_address={0x5, 0x6, 0x6c, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@loopback}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x0, @private1}}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e20, 0x0, @empty, 0x8}, @in={0x2, 0x0, @multicast1}}]}, 0xd8}}, 0x0) 406.058067ms ago: executing program 2 (id=1452): set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4c850) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x24000806) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) memfd_create(0x0, 0x5) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, 0x0) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0186404, &(0x7f0000000000)={&(0x7f00008cc000/0x4000)=nil}) landlock_create_ruleset(&(0x7f0000000240)={0x2001}, 0x18, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x80108906, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x2b}, 0x0, @in=@broadcast}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@local, 0x4000}]}]}, 0x13c}}, 0x4040000) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r4, 0xa4ff, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) 265.657094ms ago: executing program 4 (id=1453): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) unshare(0x22020400) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000)=0x25, 0x4) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="9d0c20000000f0be48e1cf7da6d83faa"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x689) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000840)={0x1c, &(0x7f0000000680)={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000001740)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x15, 0x4, 0x0, 0x5, 0x5c, 0x65, 0x0, 0x6, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x34}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x1b, 0xf7, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x24, 0xed, 0x1, 0x0, [{@private=0xa010102, 0x40}, {@loopback, 0x1}, {@rand_addr=0x64010102, 0x6}, {@loopback, 0x1}]}]}}, {0x4e21, 0x4e22, 0x8}}}}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000c40)={0x24, &(0x7f0000000c80)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES16=r0, @ANYRESDEC=0x0, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 0s ago: executing program 2 (id=1454): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000490001ee09537e42a7f690000a000000", @ANYRES32=0x0, @ANYRES64=r2], 0x38}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4d53fdfffffffddbdf256b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000200000052000000"], 0x28}}, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r5 = memfd_create(&(0x7f0000000340)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x99\xb8 [ 309.653990][ T9536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1195'. [ 309.735871][ T9540] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1197'. [ 309.746734][ T9540] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1197'. [ 309.794632][ T9542] netlink: 292 bytes leftover after parsing attributes in process `syz.5.1198'. [ 309.851357][ T9544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.862161][ T9544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.889733][ T10] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 309.937978][ T188] usb 3-1: USB disconnect, device number 61 [ 309.986387][ T9548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1201'. [ 310.002239][ T9548] netlink: 'syz.2.1201': attribute type 1 has an invalid length. [ 310.040577][ T10] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 310.052931][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 310.065312][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 310.077682][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.099489][ T5730] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 310.113327][ T10] usb 5-1: config 0 descriptor?? [ 310.239730][ T5730] usb 6-1: device descriptor read/64, error -71 [ 310.385445][ T9553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.394249][ T9553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.449614][ T188] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 310.479607][ T5730] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 310.609506][ T5730] usb 6-1: device descriptor read/64, error -71 [ 310.630235][ T188] usb 3-1: New USB device found, idVendor=15a4, idProduct=9035, bcdDevice= 2.00 [ 310.640819][ T188] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 310.651310][ T188] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 310.664387][ T188] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.720081][ T5730] usb usb6-port1: attempt power cycle [ 311.059765][ T5730] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 311.079966][ T5730] usb 6-1: device descriptor read/8, error -71 [ 311.189768][ T10] ath6kl: Failed to submit usb control message: -110 [ 311.196708][ T10] ath6kl: unable to send the bmi data to the device: -110 [ 311.204026][ T10] ath6kl: Unable to send get target info: -110 [ 311.211271][ T10] ath6kl: Failed to init ath6kl core: -110 [ 311.218719][ T10] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 311.319553][ T5730] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 311.341876][ T5730] usb 6-1: device descriptor read/8, error -71 [ 311.449907][ T5730] usb usb6-port1: unable to enumerate USB device [ 311.630842][ T188] dvb_usb_af9035 3-1:1.0: command=00 checksum mismatch (0102 != feff) [ 311.646296][ T188] dvb_usb_af9035 3-1:1.0: probe with driver dvb_usb_af9035 failed with error -5 [ 311.656491][ T9564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1206'. [ 311.673734][ T9564] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1206'. [ 311.841835][ T5691] usb 3-1: USB disconnect, device number 62 [ 311.962273][ T9577] macsec1: entered allmulticast mode [ 311.967935][ T9577] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 311.977289][ T9577] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 312.085328][ T9578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.111490][ T9578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.439082][ T9580] __nla_validate_parse: 1 callbacks suppressed [ 312.445878][ T9580] netlink: 292 bytes leftover after parsing attributes in process `syz.2.1210'. [ 312.623135][ T9584] fuse: Unknown parameter 'rootmu00000000000000000000' [ 312.683097][ T5678] usb 5-1: USB disconnect, device number 65 [ 312.759730][ T10] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 312.921951][ T10] usb 3-1: New USB device found, idVendor=a6eb, idProduct=7458, bcdDevice=2d.4d [ 312.935965][ T10] usb 3-1: config 8 has an invalid interface number: 223 but max is 0 [ 312.947517][ T10] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 312.963249][ T10] usb 3-1: config 8 has no interface number 0 [ 312.972270][ T10] usb 3-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 312.986568][ T10] usb 3-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 313.002085][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.011247][ T10] usb 3-1: Product: syz [ 313.015649][ T10] usb 3-1: Manufacturer: syz [ 313.020513][ T10] usb 3-1: SerialNumber: syz [ 313.100106][ T5678] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 313.272558][ T5678] usb 5-1: Using ep0 maxpacket: 16 [ 313.278444][ T5678] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 313.294365][ T5678] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 52, changing to 7 [ 313.306457][ T5678] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 9272, setting to 1024 [ 313.321062][ T5678] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.329897][ T5678] usb 5-1: Product: syz [ 313.334210][ T5678] usb 5-1: Manufacturer: syz [ 313.339061][ T5678] usb 5-1: SerialNumber: syz [ 313.349723][ T5678] usb 5-1: config 0 descriptor?? [ 313.380619][ T5678] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 313.549526][ T29] kauditd_printk_skb: 1461 callbacks suppressed [ 313.549538][ T29] audit: type=1326 audit(1787309436.202:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9575 comm="syz.3.1209" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71374eb code=0x7ffc0000 [ 313.582037][ T29] audit: type=1326 audit(1787309436.212:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9575 comm="syz.3.1209" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71374eb code=0x7ffc0000 [ 313.609267][ T29] audit: type=1326 audit(1787309436.212:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9575 comm="syz.3.1209" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71374eb code=0x7ffc0000 [ 313.634041][ T29] audit: type=1326 audit(1787309436.212:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9575 comm="syz.3.1209" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71374eb code=0x7ffc0000 [ 313.658707][ T9] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 313.667940][ T29] audit: type=1326 audit(1787309436.212:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9575 comm="syz.3.1209" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71374eb code=0x7ffc0000 [ 313.694522][ T29] audit: type=1326 audit(1787309436.212:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9575 comm="syz.3.1209" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71374eb code=0x7ffc0000 [ 313.719175][ T29] audit: type=1326 audit(1787309436.212:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9575 comm="syz.3.1209" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71374eb code=0x7ffc0000 [ 313.744612][ T29] audit: type=1326 audit(1787309436.212:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9575 comm="syz.3.1209" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71374eb code=0x7ffc0000 [ 313.789504][ T29] audit: type=1326 audit(1787309436.212:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9575 comm="syz.3.1209" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71374eb code=0x7ffc0000 [ 313.830745][ T10] usb 3-1: USB disconnect, device number 63 [ 313.840261][ T9] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 313.850433][ T9] usb 6-1: config 0 has no interfaces? [ 313.858033][ T29] audit: type=1326 audit(1787309436.222:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9575 comm="syz.3.1209" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71374eb code=0x7ffc0000 [ 313.891412][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.901829][ T9] usb 6-1: Product: syz [ 313.908552][ T9] usb 6-1: Manufacturer: syz [ 313.914177][ T9] usb 6-1: SerialNumber: syz [ 313.938033][ T9] usb 6-1: config 0 descriptor?? [ 314.132857][ T9588] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 314.249257][ T9595] veth1_macvtap: left promiscuous mode [ 314.315809][ T9595] veth1_macvtap: entered promiscuous mode [ 314.354329][ T5691] usb 6-1: USB disconnect, device number 32 [ 314.462684][ T24] usb 5-1: USB disconnect, device number 66 [ 314.464537][ T114] usb 5-1: Failed to submit usb control message: -71 [ 314.477770][ T114] usb 5-1: unable to send the bmi data to the device: -71 [ 314.486773][ T114] usb 5-1: unable to get target info from device [ 314.495597][ T114] usb 5-1: could not get target info (-71) [ 314.504090][ T114] usb 5-1: could not probe fw (-71) [ 314.643527][ T9618] netlink: 292 bytes leftover after parsing attributes in process `syz.2.1221'. [ 315.050710][ T9632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1226'. [ 315.077775][ T9632] FAULT_INJECTION: forcing a failure. [ 315.077775][ T9632] name failslab, interval 1, probability 0, space 9, times 0 [ 315.092148][ T9632] CPU: 0 UID: 0 PID: 9632 Comm: syz.2.1226 Tainted: G L syzkaller #0 PREEMPT(full) [ 315.092178][ T9632] Tainted: [L]=SOFTLOCKUP [ 315.092185][ T9632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 315.092197][ T9632] Call Trace: [ 315.092205][ T9632] [ 315.092213][ T9632] dump_stack_lvl+0xe8/0x150 [ 315.092249][ T9632] should_fail_ex+0x410/0x560 [ 315.092279][ T9632] should_failslab+0xa8/0x100 [ 315.092309][ T9632] kmem_cache_alloc_node_noprof+0xb3/0x620 [ 315.092331][ T9632] ? local_lock_release+0x9c/0x160 [ 315.092354][ T9632] ? __alloc_skb+0x1db/0x7a0 [ 315.092374][ T9632] ? __alloc_skb+0x1db/0x7a0 [ 315.092403][ T9632] __alloc_skb+0x1db/0x7a0 [ 315.092429][ T9632] xfrm_send_policy_notify+0x2a0/0x1c00 [ 315.092473][ T9632] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 315.092501][ T9632] ? km_policy_notify+0x28/0x200 [ 315.092522][ T9632] ? km_policy_notify+0x28/0x200 [ 315.092541][ T9632] ? __local_bh_enable_ip+0xd6/0x140 [ 315.092563][ T9632] ? lockdep_hardirqs_on+0x7b/0x110 [ 315.092582][ T9632] ? __local_bh_enable_ip+0xd6/0x140 [ 315.092604][ T9632] ? km_policy_notify+0x28/0x200 [ 315.092622][ T9632] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 315.092652][ T9632] km_policy_notify+0x121/0x200 [ 315.092669][ T9632] ? km_policy_notify+0x28/0x200 [ 315.092690][ T9632] xfrm_add_policy+0x4a1/0x690 [ 315.092716][ T9632] ? __pfx_xfrm_add_policy+0x10/0x10 [ 315.092742][ T9632] ? __nla_parse+0x40/0x60 [ 315.092773][ T9632] xfrm_user_rcv_msg+0x7a8/0xf30 [ 315.092799][ T9632] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 315.092850][ T9632] ? __mutex_trylock_common+0x15f/0x270 [ 315.092896][ T9632] ? __pfx___mutex_trylock_common+0x10/0x10 [ 315.092920][ T9632] ? rcu_is_watching+0x16/0xb0 [ 315.092940][ T9632] ? trace_contention_end+0x3d/0x140 [ 315.092970][ T9632] netlink_rcv_skb+0x226/0x4a0 [ 315.093000][ T9632] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 315.093021][ T9632] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 315.093070][ T9632] ? netlink_deliver_tap+0x2e/0x1b0 [ 315.093097][ T9632] ? netlink_deliver_tap+0x2e/0x1b0 [ 315.093126][ T9632] xfrm_netlink_rcv+0x79/0x90 [ 315.093145][ T9632] netlink_unicast+0x7bd/0x940 [ 315.093181][ T9632] netlink_sendmsg+0x813/0xb40 [ 315.093215][ T9632] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.093244][ T9632] ? aa_sock_msg_perm+0xf6/0x1c0 [ 315.093272][ T9632] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.093296][ T9632] sock_sendmsg_nosec+0x13a/0x180 [ 315.093318][ T9632] ____sys_sendmsg+0x54e/0x850 [ 315.093347][ T9632] ? __pfx_____sys_sendmsg+0x10/0x10 [ 315.093388][ T9632] ___sys_sendmsg+0x2a5/0x360 [ 315.093411][ T9632] ? __lock_acquire+0x683/0x2cf0 [ 315.093441][ T9632] ? __pfx____sys_sendmsg+0x10/0x10 [ 315.093465][ T9632] ? get_pid_task+0x20/0x1f0 [ 315.093491][ T9632] ? get_pid_task+0x20/0x1f0 [ 315.093515][ T9632] ? get_pid_task+0x20/0x1f0 [ 315.093567][ T9632] ? __fget_files+0x2a/0x420 [ 315.093591][ T9632] ? __fget_files+0x3a2/0x420 [ 315.093627][ T9632] __sys_sendmsg+0x177/0x240 [ 315.093656][ T9632] ? __pfx___sys_sendmsg+0x10/0x10 [ 315.093700][ T9632] __do_fast_syscall_32+0x27a/0x6a0 [ 315.093724][ T9632] ? do_fast_syscall_32+0x33/0x70 [ 315.093744][ T9632] ? asm_int80_emulation+0x1a/0x20 [ 315.093762][ T9632] ? do_int80_emulation+0x299/0x500 [ 315.093780][ T9632] ? trace_irq_disable+0x3b/0x140 [ 315.093807][ T9632] do_fast_syscall_32+0x33/0x70 [ 315.093827][ T9632] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 315.093848][ T9632] RIP: 0023:0xf7f540ec [ 315.093866][ T9632] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 315.093882][ T9632] RSP: 002b:00000000f541650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 315.093902][ T9632] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 315.093914][ T9632] RDX: 000000002c000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 315.093925][ T9632] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 315.093936][ T9632] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 315.093946][ T9632] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 315.093970][ T9632] [ 315.103739][ T12] veth1_macvtap: left promiscuous mode [ 315.167979][ T9634] sctp: [Deprecated]: syz.5.1227 (pid 9634) Use of int in max_burst socket option. [ 315.167979][ T9634] Use struct sctp_assoc_value instead [ 315.242655][ T9636] netlink: 264 bytes leftover after parsing attributes in process `syz.4.1229'. [ 315.243380][ T9636] netlink: 264 bytes leftover after parsing attributes in process `syz.4.1229'. [ 315.600786][ T9] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 315.761817][ T9] usb 6-1: not running at top speed; connect to a high speed hub [ 315.776097][ T9] usb 6-1: New USB device found, idVendor=03f0, idProduct=2a76, bcdDevice=b8.a5 [ 315.787755][ T9] usb 6-1: config 11 has an invalid interface number: 31 but max is 2 [ 315.814024][ T9] usb 6-1: config 11 contains an unexpected descriptor of type 0x1, skipping [ 315.845496][ T9] usb 6-1: config 11 has an invalid interface number: 188 but max is 2 [ 315.857938][ T9] usb 6-1: config 11 contains an unexpected descriptor of type 0x2, skipping [ 315.859515][ T5730] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 315.875184][ T9] usb 6-1: config 11 contains an unexpected descriptor of type 0x2, skipping [ 315.884733][ T9] usb 6-1: config 11 contains an unexpected descriptor of type 0x2, skipping [ 315.893807][ T9] usb 6-1: config 11 has an invalid descriptor of length 1, skipping remainder of the config [ 315.904350][ T9] usb 6-1: config 11 has 2 interfaces, different from the descriptor's value: 3 [ 315.922333][ T9] usb 6-1: config 11 has no interface number 0 [ 315.933259][ T9] usb 6-1: config 11 has no interface number 1 [ 315.935810][ T9654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1233'. [ 315.951905][ T9] usb 6-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0x1, skipping [ 315.964280][ T9654] netlink: 'syz.0.1233': attribute type 1 has an invalid length. [ 315.964278][ T9] usb 6-1: config 11 interface 31 altsetting 10 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 315.964309][ T9] usb 6-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0x5, skipping [ 315.994301][ T9] usb 6-1: config 11 interface 31 altsetting 10 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 316.005554][ T9] usb 6-1: config 11 interface 31 altsetting 10 has an invalid descriptor for endpoint zero, skipping [ 316.016787][ T9] usb 6-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0xB, skipping [ 316.028786][ T9] usb 6-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0xE, skipping [ 316.030563][ T5730] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 316.041310][ T9] usb 6-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x1, skipping [ 316.064384][ T9] usb 6-1: config 11 interface 188 altsetting 27 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 316.066059][ T5730] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 316.076122][ T9] usb 6-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x5, skipping [ 316.097497][ T5730] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 316.097493][ T9] usb 6-1: config 11 interface 188 altsetting 27 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 316.097529][ T9] usb 6-1: config 11 interface 188 altsetting 27 has an invalid descriptor for endpoint zero, skipping [ 316.108418][ T5730] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 316.118896][ T9] usb 6-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0xA, skipping [ 316.162038][ T5730] usb 5-1: SerialNumber: syz [ 316.164501][ T9] usb 6-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0xB, skipping [ 316.179549][ T9] usb 6-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x6, skipping [ 316.190644][ T9] usb 6-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0xC, skipping [ 316.203313][ T9] usb 6-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x6, skipping [ 316.214574][ T9] usb 6-1: config 11 interface 31 has no altsetting 0 [ 316.223335][ T9] usb 6-1: config 11 interface 188 has no altsetting 0 [ 316.233866][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.249126][ T9] usb 6-1: Product: 㰁 [ 316.257808][ T9] usb 6-1: Manufacturer: Ч [ 316.264655][ T9] usb 6-1: SerialNumber: Ў [ 316.437548][ T9647] FAULT_INJECTION: forcing a failure. [ 316.437548][ T9647] name failslab, interval 1, probability 0, space 9, times 0 [ 316.451796][ T9647] CPU: 1 UID: 0 PID: 9647 Comm: syz.4.1230 Tainted: G L syzkaller #0 PREEMPT(full) [ 316.451815][ T9647] Tainted: [L]=SOFTLOCKUP [ 316.451819][ T9647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 316.451827][ T9647] Call Trace: [ 316.451832][ T9647] [ 316.451838][ T9647] dump_stack_lvl+0xe8/0x150 [ 316.451861][ T9647] should_fail_ex+0x410/0x560 [ 316.451891][ T9647] should_failslab+0xa8/0x100 [ 316.451921][ T9647] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 316.451946][ T9647] ? dst_alloc+0x105/0x170 [ 316.451957][ T9647] ? dst_alloc+0x105/0x170 [ 316.451970][ T9647] dst_alloc+0x105/0x170 [ 316.451983][ T9647] ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 316.452005][ T9647] ? ip_route_output_key_hash+0xd8/0x2a0 [ 316.452034][ T9647] ip_route_output_key_hash+0x18d/0x2a0 [ 316.452070][ T9647] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 316.452104][ T9647] ? inet_csk_route_req+0x57/0xe00 [ 316.452123][ T9647] ip_route_output_flow+0x2a/0x150 [ 316.452136][ T9647] ? security_req_classify_flow+0x6d/0x140 [ 316.452155][ T9647] inet_csk_route_req+0x63a/0xe00 [ 316.452180][ T9647] ? get_random_u32+0x13a/0x8b0 [ 316.452206][ T9647] ? inet_csk_route_req+0x57/0xe00 [ 316.452239][ T9647] tcp_v4_send_synack+0x10d/0xb60 [ 316.452260][ T9647] ? lockdep_hardirqs_on+0x7b/0x110 [ 316.452271][ T9647] ? get_random_u32+0x13a/0x8b0 [ 316.452282][ T9647] ? get_random_u32+0x4ce/0x8b0 [ 316.452295][ T9647] ? __pfx_tcp_v4_send_synack+0x10/0x10 [ 316.452309][ T9647] ? __pfx_get_random_u32+0x10/0x10 [ 316.452344][ T9647] ? __lock_acquire+0x683/0x2cf0 [ 316.452380][ T9647] tcp_rtx_synack+0x19d/0x660 [ 316.452408][ T9647] ? __pfx_tcp_rtx_synack+0x10/0x10 [ 316.452427][ T9647] ? tcp_parse_options+0x12e5/0x13a0 [ 316.452453][ T9647] ? tcp_oow_rate_limited+0x22d/0x390 [ 316.452482][ T9647] tcp_check_req+0xb17/0x1fa0 [ 316.452530][ T9647] ? __pfx_tcp_check_req+0x10/0x10 [ 316.452553][ T9647] ? sk_filter_trim_cap+0x192/0xd70 [ 316.452570][ T9647] ? tcp_v4_fill_cb+0x3d/0x4b0 [ 316.452583][ T9647] ? __asan_memmove+0x40/0x70 [ 316.452596][ T9647] ? tcp_v4_fill_cb+0x25c/0x4b0 [ 316.452612][ T9647] tcp_v4_rcv+0x183c/0x3170 [ 316.452676][ T9647] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 316.452698][ T9647] ? raw_local_deliver+0x345/0x1010 [ 316.452714][ T9647] ? ip_local_deliver_finish+0x2ae/0x6f0 [ 316.452729][ T9647] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 316.452742][ T9647] ip_protocol_deliver_rcu+0x21d/0x440 [ 316.452779][ T9647] ? ip_local_deliver_finish+0x2ae/0x6f0 [ 316.452806][ T9647] ip_local_deliver_finish+0x3bb/0x6f0 [ 316.452838][ T9647] NF_HOOK+0x336/0x3c0 [ 316.452857][ T9647] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 316.452870][ T9647] ? NF_HOOK+0x9e/0x3c0 [ 316.452881][ T9647] ? __pfx_NF_HOOK+0x10/0x10 [ 316.452894][ T9647] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 316.452912][ T9647] ? ip_local_deliver+0x113/0x190 [ 316.452937][ T9647] NF_HOOK+0x336/0x3c0 [ 316.452963][ T9647] ? __pfx_ip_rcv_finish+0x10/0x10 [ 316.452986][ T9647] ? NF_HOOK+0x9e/0x3c0 [ 316.453006][ T9647] ? __pfx_NF_HOOK+0x10/0x10 [ 316.453019][ T9647] ? __pfx_ip_rcv_finish+0x10/0x10 [ 316.453035][ T9647] ? netif_receive_skb+0x102/0xbf0 [ 316.453046][ T9647] ? __pfx_ip_rcv+0x10/0x10 [ 316.453057][ T9647] netif_receive_skb+0x45b/0xbf0 [ 316.453079][ T9647] ? __pfx_netif_receive_skb+0x10/0x10 [ 316.453106][ T9647] ? rcu_is_watching+0x16/0xb0 [ 316.453124][ T9647] ? tun_rx_batched+0x185/0x790 [ 316.453151][ T9647] tun_rx_batched+0x1de/0x790 [ 316.453168][ T9647] ? __pfx_tun_rx_batched+0x10/0x10 [ 316.453180][ T9647] ? tun_get_user+0x27b0/0x44d0 [ 316.453193][ T9647] ? tun_get_user+0x27b0/0x44d0 [ 316.453205][ T9647] ? tun_get_user+0x23ba/0x44d0 [ 316.453223][ T9647] ? tun_get_user+0x23ba/0x44d0 [ 316.453246][ T9647] ? __local_bh_enable_ip+0xd6/0x140 [ 316.453269][ T9647] ? tun_get_user+0x27b0/0x44d0 [ 316.453295][ T9647] tun_get_user+0x2be0/0x44d0 [ 316.453319][ T9647] ? tun_get_user+0x27b0/0x44d0 [ 316.453334][ T9647] ? aa_file_perm+0x4ed/0x15f0 [ 316.453347][ T9647] ? __pfx_tun_get_user+0x10/0x10 [ 316.453361][ T9647] ? __lock_acquire+0x683/0x2cf0 [ 316.453404][ T9647] ? ref_tracker_alloc+0x341/0x4b0 [ 316.453434][ T9647] ? get_pid_task+0x20/0x1f0 [ 316.453458][ T9647] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 316.453473][ T9647] ? tun_get+0x1c/0x2f0 [ 316.453485][ T9647] ? tun_get+0x1c/0x2f0 [ 316.453500][ T9647] ? tun_get+0x1c/0x2f0 [ 316.453512][ T9647] ? tun_get+0x1c/0x2f0 [ 316.453540][ T9647] tun_chr_write_iter+0x113/0x200 [ 316.453568][ T9647] vfs_write+0x612/0xba0 [ 316.453604][ T9647] ? __pfx_vfs_write+0x10/0x10 [ 316.453624][ T9647] ? __fget_files+0x2a/0x420 [ 316.453644][ T9647] ksys_write+0x150/0x270 [ 316.453661][ T9647] ? __pfx_ksys_write+0x10/0x10 [ 316.453694][ T9647] ? asm_int80_emulation+0x1a/0x20 [ 316.453719][ T9647] do_int80_emulation+0x198/0x500 [ 316.453741][ T9647] ? trace_irq_disable+0x3b/0x140 [ 316.453760][ T9647] ? asm_int80_emulation+0x1a/0x20 [ 316.453769][ T9647] ? clear_bhb_loop+0x70/0xc0 [ 316.453779][ T9647] ? clear_bhb_loop+0x70/0xc0 [ 316.453791][ T9647] asm_int80_emulation+0x1a/0x20 [ 316.453802][ T9647] RIP: 0023:0xf71c74eb [ 316.453815][ T9647] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 316.453831][ T9647] RSP: 002b:00000000f547d44c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 316.453852][ T9647] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000140 [ 316.453866][ T9647] RDX: 0000000000000046 RSI: 0000000000000000 RDI: 0000000000000000 [ 316.453879][ T9647] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 316.453890][ T9647] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 316.453901][ T9647] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 316.453917][ T9647] [ 317.033701][ T9634] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1227'. [ 317.034471][ T5730] usb 5-1: cannot find UAC_HEADER [ 317.065729][ T9634] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1227'. [ 317.093579][ T9637] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1227'. [ 317.094810][ T5730] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 317.111471][ T9637] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1227'. [ 317.119036][ T5730] usb 5-1: USB disconnect, device number 67 [ 317.130250][ T12] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.131008][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.145462][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.146020][ T12] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.179305][ T5731] udevd[5731]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 317.212091][ T12] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.272962][ T12] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.303456][ T9] usb 6-1: USB disconnect, device number 33 [ 317.570096][ T188] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 317.586610][ T9663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1236'. [ 317.733002][ T188] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 317.756013][ T188] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 317.786382][ T188] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 317.836188][ T188] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 317.859523][ T188] usb 3-1: SerialNumber: syz [ 318.124189][ T188] usb 3-1: cannot find UAC_HEADER [ 318.283479][ T188] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 318.316977][ T188] usb 3-1: USB disconnect, device number 64 [ 318.364479][ T5630] udevd[5630]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 318.814829][ T9681] binder: 9680:9681 ioctl c0306201 80000140 returned -14 [ 318.828509][ T9681] fuse: Bad value for 'group_id' [ 318.835455][ T9681] fuse: Bad value for 'group_id' [ 318.955570][ T29] kauditd_printk_skb: 545 callbacks suppressed [ 318.955605][ T29] audit: type=1326 audit(1787309441.612:2491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9684 comm="syz.5.1243" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x0 [ 319.292944][ T9692] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1246'. [ 319.310027][ T188] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 319.337644][ T9692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1246'. [ 319.348176][ T9692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1246'. [ 319.480385][ T188] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 319.504957][ T9694] xt_socket: unknown flags 0x50 [ 319.509032][ T188] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.546435][ T188] usb 6-1: config 0 descriptor?? [ 319.572382][ T188] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 319.829627][ T5730] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 319.943432][ T9716] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1253'. [ 319.955079][ T9716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1253'. [ 319.967183][ T9716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1253'. [ 319.976631][ T9716] FAULT_INJECTION: forcing a failure. [ 319.976631][ T9716] name failslab, interval 1, probability 0, space 9, times 0 [ 319.990254][ T5730] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 319.990757][ T9716] CPU: 0 UID: 0 PID: 9716 Comm: syz.0.1253 Tainted: G L syzkaller #0 PREEMPT(full) [ 319.990785][ T9716] Tainted: [L]=SOFTLOCKUP [ 319.990793][ T9716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 319.990804][ T9716] Call Trace: [ 319.990812][ T9716] [ 319.990821][ T9716] dump_stack_lvl+0xe8/0x150 [ 319.990854][ T9716] should_fail_ex+0x410/0x560 [ 319.990886][ T9716] should_failslab+0xa8/0x100 [ 319.990914][ T9716] __kmalloc_cache_noprof+0xa8/0x660 [ 319.990940][ T9716] ? xfrm_policy_alloc+0x78/0x2b0 [ 319.990965][ T9716] ? xfrm_policy_alloc+0x78/0x2b0 [ 319.990997][ T9716] xfrm_policy_alloc+0x78/0x2b0 [ 319.991032][ T9716] xfrm_policy_construct+0x39/0x6b0 [ 319.991063][ T9716] xfrm_add_policy+0x273/0x690 [ 319.991089][ T9716] ? __pfx_xfrm_add_policy+0x10/0x10 [ 319.991114][ T9716] ? __nla_parse+0x40/0x60 [ 319.991144][ T9716] xfrm_user_rcv_msg+0x7a8/0xf30 [ 319.991168][ T9716] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 319.991218][ T9716] ? __mutex_trylock_common+0x15f/0x270 [ 319.991243][ T9716] ? __pfx___mutex_trylock_common+0x10/0x10 [ 319.991266][ T9716] ? rcu_is_watching+0x16/0xb0 [ 319.991286][ T9716] ? trace_contention_end+0x3d/0x140 [ 319.991314][ T9716] netlink_rcv_skb+0x226/0x4a0 [ 319.991343][ T9716] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 319.991363][ T9716] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 319.991405][ T9716] ? netlink_deliver_tap+0x2e/0x1b0 [ 319.991432][ T9716] ? netlink_deliver_tap+0x2e/0x1b0 [ 319.991461][ T9716] xfrm_netlink_rcv+0x79/0x90 [ 319.991479][ T9716] netlink_unicast+0x7bd/0x940 [ 319.991514][ T9716] netlink_sendmsg+0x813/0xb40 [ 319.991551][ T9716] ? __pfx_netlink_sendmsg+0x10/0x10 [ 319.991581][ T9716] ? aa_sock_msg_perm+0xf6/0x1c0 [ 319.991611][ T9716] ? __pfx_netlink_sendmsg+0x10/0x10 [ 319.991638][ T9716] sock_sendmsg_nosec+0x13a/0x180 [ 319.991662][ T9716] ____sys_sendmsg+0x54e/0x850 [ 319.991692][ T9716] ? __pfx_____sys_sendmsg+0x10/0x10 [ 319.991732][ T9716] ___sys_sendmsg+0x2a5/0x360 [ 319.991757][ T9716] ? __lock_acquire+0x683/0x2cf0 [ 319.991786][ T9716] ? __pfx____sys_sendmsg+0x10/0x10 [ 319.991812][ T9716] ? get_pid_task+0x20/0x1f0 [ 319.991838][ T9716] ? get_pid_task+0x20/0x1f0 [ 319.991862][ T9716] ? get_pid_task+0x20/0x1f0 [ 319.991915][ T9716] ? __fget_files+0x2a/0x420 [ 319.991944][ T9716] ? __fget_files+0x3a2/0x420 [ 319.991978][ T9716] __sys_sendmsg+0x177/0x240 [ 319.992006][ T9716] ? __pfx___sys_sendmsg+0x10/0x10 [ 319.992055][ T9716] __do_fast_syscall_32+0x27a/0x6a0 [ 319.992077][ T9716] ? do_fast_syscall_32+0x33/0x70 [ 319.992097][ T9716] ? asm_int80_emulation+0x1a/0x20 [ 319.992116][ T9716] ? do_int80_emulation+0x299/0x500 [ 319.992136][ T9716] ? trace_irq_disable+0x3b/0x140 [ 319.992166][ T9716] do_fast_syscall_32+0x33/0x70 [ 319.992186][ T9716] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 319.992209][ T9716] RIP: 0023:0xf7ff70ec [ 319.992227][ T9716] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 319.992243][ T9716] RSP: 002b:00000000f54b650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 319.992264][ T9716] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000000 [ 319.992277][ T9716] RDX: 000000002c000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 319.992289][ T9716] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 319.992300][ T9716] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 319.992311][ T9716] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 319.992340][ T9716] [ 320.059560][ T9] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 320.064325][ T5730] usb 5-1: config 0 has an invalid interface number: 180 but max is 1 [ 320.163625][ T9718] kvm: apic: phys broadcast and lowest prio [ 320.185164][ T5730] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 320.229585][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 320.233321][ T5730] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 320.233346][ T5730] usb 5-1: config 0 has no interface number 0 [ 320.239631][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 320.243741][ T5730] usb 5-1: too many endpoints for config 0 interface 180 altsetting 139: 217, using maximum allowed: 30 [ 320.256801][ T9] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 320.259680][ T5730] usb 5-1: config 0 interface 180 altsetting 139 has 0 endpoint descriptors, different from the interface descriptor's value: 217 [ 320.259712][ T5730] usb 5-1: config 0 interface 180 has no altsetting 0 [ 320.259746][ T5730] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.280777][ T5730] usb 5-1: config 0 descriptor?? [ 320.291564][ T9] usb 3-1: config 0 has no interface number 0 [ 320.480642][ T9] usb 3-1: config 0 interface 184 has no altsetting 0 [ 320.489948][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.498164][ T9] usb 3-1: Product: syz [ 320.502473][ T9] usb 3-1: Manufacturer: syz [ 320.507114][ T9] usb 3-1: SerialNumber: syz [ 320.515612][ T9] usb 3-1: config 0 descriptor?? [ 320.737929][ T9713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.748312][ T9713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.057986][ T5730] usb 5-1: string descriptor 0 read error: -71 [ 321.067644][ T5730] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 321.075039][ T5730] dvb-usb: bulk message failed: -22 (3/0) [ 321.091125][ T5730] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 321.102723][ T5730] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 321.112639][ T5730] usb 5-1: media controller created [ 321.120193][ T5730] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 321.155418][ T5730] dvb-usb: bulk message failed: -22 (6/0) [ 321.165375][ T5730] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 321.177718][ T5730] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input31 [ 321.202774][ T5730] dvb-usb: schedule remote query interval to 150 msecs. [ 321.209982][ T5730] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 321.226061][ T5730] usb 5-1: USB disconnect, device number 68 [ 321.274285][ T5730] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 321.583788][ T5730] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 321.751636][ T5730] usb 5-1: not running at top speed; connect to a high speed hub [ 321.760279][ T5730] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 321.770508][ T5730] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 321.782404][ T5730] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.797851][ T5730] uvcvideo 5-1:1.0: Found UVC 1.00 device (046d:0825) [ 321.823051][ T188] gp8psk: usb in 128 operation failed. [ 321.829694][ T188] gp8psk: usb in 137 operation failed. [ 321.835494][ T188] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 321.846746][ T188] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 321.963836][ T5691] usb 6-1: USB disconnect, device number 34 [ 322.237395][ T988] dvb-usb: did not find the firmware file 'dvb-usb-dw2104.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 322.268158][ T988] dvb-usb: found a 'DVBWorld DW2104 USB2.0' in cold state, will try to load a firmware [ 322.280180][ T988] usb 1-1: Direct firmware load for dvb-usb-dw2104.fw failed with error -2 [ 322.290658][ T988] usb 1-1: Falling back to sysfs fallback for: dvb-usb-dw2104.fw [ 322.666242][ T5730] uvcvideo 5-1:1.1: Failed to query (GET_CUR) UVC probe control : -32 (exp. 26). [ 322.675833][ T5730] uvcvideo 5-1:1.1: Failed to initialize the device (-5). [ 322.683724][ T5730] uvcvideo 5-1:1.0: probe with driver uvcvideo failed with error -5 [ 322.844237][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 322.856744][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 322.867189][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 322.878425][ T9] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 322.898504][ T9] usb 3-1: USB disconnect, device number 65 [ 323.032453][ T9746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.047672][ T9746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.142207][ T9748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1261'. [ 323.153430][ T9748] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1261'. [ 323.165943][ T9748] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1261'. [ 323.206507][ T9751] FAULT_INJECTION: forcing a failure. [ 323.206507][ T9751] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 323.222879][ T9751] CPU: 0 UID: 0 PID: 9751 Comm: syz.0.1262 Tainted: G L syzkaller #0 PREEMPT(full) [ 323.222899][ T9751] Tainted: [L]=SOFTLOCKUP [ 323.222911][ T9751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 323.222918][ T9751] Call Trace: [ 323.222923][ T9751] [ 323.222928][ T9751] dump_stack_lvl+0xe8/0x150 [ 323.222948][ T9751] should_fail_ex+0x410/0x560 [ 323.222965][ T9751] _copy_to_iter+0x59c/0x1810 [ 323.222991][ T9751] ? __pfx__copy_to_iter+0x10/0x10 [ 323.223014][ T9751] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 323.223044][ T9751] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 323.223069][ T9751] ? __skb_try_recv_datagram+0x3de/0x4e0 [ 323.223099][ T9751] __skb_datagram_iter+0xf8/0x980 [ 323.223125][ T9751] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 323.223146][ T9751] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 323.223178][ T9751] skb_copy_datagram_iter+0xb5/0x240 [ 323.223212][ T9751] netlink_recvmsg+0x2b9/0xa50 [ 323.223248][ T9751] ? __pfx_netlink_recvmsg+0x10/0x10 [ 323.223274][ T9751] ? aa_file_perm+0x18b/0x15f0 [ 323.223301][ T9751] ? aa_sock_msg_perm+0xf6/0x1c0 [ 323.223327][ T9751] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 323.223345][ T9751] ? security_socket_recvmsg+0x7e/0x2c0 [ 323.223370][ T9751] ? __pfx_netlink_recvmsg+0x10/0x10 [ 323.223396][ T9751] sock_recvmsg+0x196/0x1e0 [ 323.223416][ T9751] ____sys_recvmsg+0x1e6/0x4a0 [ 323.223448][ T9751] ? __pfx_____sys_recvmsg+0x10/0x10 [ 323.223483][ T9751] ? __lock_acquire+0x683/0x2cf0 [ 323.223515][ T9751] ___sys_recvmsg+0x213/0x5a0 [ 323.223539][ T9751] ? get_pid_task+0x20/0x1f0 [ 323.223563][ T9751] ? get_pid_task+0x20/0x1f0 [ 323.223579][ T9751] ? __pfx____sys_recvmsg+0x10/0x10 [ 323.223596][ T9751] ? __fget_files+0x2a/0x420 [ 323.223618][ T9751] ? __fget_files+0x3a2/0x420 [ 323.223637][ T9751] __sys_recvmsg+0x174/0x240 [ 323.223652][ T9751] ? __pfx___sys_recvmsg+0x10/0x10 [ 323.223675][ T9751] __do_fast_syscall_32+0x27a/0x6a0 [ 323.223687][ T9751] ? do_fast_syscall_32+0x33/0x70 [ 323.223698][ T9751] ? asm_int80_emulation+0x1a/0x20 [ 323.223709][ T9751] ? do_int80_emulation+0x299/0x500 [ 323.223719][ T9751] ? trace_irq_disable+0x3b/0x140 [ 323.223736][ T9751] do_fast_syscall_32+0x33/0x70 [ 323.223747][ T9751] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 323.223760][ T9751] RIP: 0023:0xf7ff70ec [ 323.223772][ T9751] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 323.223781][ T9751] RSP: 002b:00000000f54b650c EFLAGS: 00000206 ORIG_RAX: 0000000000000174 [ 323.223793][ T9751] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001d00 [ 323.223801][ T9751] RDX: 0000000000002020 RSI: 0000000000000000 RDI: 0000000000000000 [ 323.223807][ T9751] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 323.223813][ T9751] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 323.223820][ T9751] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 323.223834][ T9751] [ 323.606782][ T9755] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1264'. [ 323.654683][ T188] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 323.816633][ T188] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 323.828134][ T188] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 323.840267][ T188] usb 3-1: can't read configurations, error -71 [ 324.187447][ T5730] usb 5-1: USB disconnect, device number 69 [ 324.419482][ T24] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 324.600260][ T24] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 324.640072][ T24] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 324.663056][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 324.694805][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.722568][ T24] usb 6-1: config 0 descriptor?? [ 324.978709][ T9777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.038205][ T9777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.154129][ T24] ath6kl: Failed to submit usb control message: -71 [ 325.164813][ T24] ath6kl: unable to send the bmi data to the device: -71 [ 325.179485][ T24] ath6kl: Unable to send get target info: -71 [ 325.190518][ T24] ath6kl: Failed to init ath6kl core: -71 [ 325.221325][ T24] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 325.255039][ T24] usb 6-1: USB disconnect, device number 35 [ 325.315532][ T9788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1277'. [ 325.405453][ T9790] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1278'. [ 325.769488][ T5678] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 325.951472][ T5678] usb 3-1: unable to get BOS descriptor or descriptor too short [ 325.968354][ T5678] usb 3-1: not running at top speed; connect to a high speed hub [ 325.984426][ T5678] usb 3-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 326.005417][ T5678] usb 3-1: config 1 has an invalid interface number: 8 but max is 2 [ 326.020437][ T5678] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 326.043996][ T5678] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 326.063585][ T5678] usb 3-1: config 1 has no interface number 0 [ 326.080388][ T5678] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 326.123189][ T5678] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.141905][ T5678] usb 3-1: Product: syz [ 326.149520][ T5678] usb 3-1: Manufacturer: syz [ 326.164450][ T5678] usb 3-1: SerialNumber: syz [ 326.356455][ T5630] udevd[5630]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 326.494350][ T9795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1279'. [ 327.169734][ T188] usb 3-1: USB disconnect, device number 68 [ 327.362800][ T9853] sctp: [Deprecated]: syz.2.1287 (pid 9853) Use of int in max_burst socket option. [ 327.362800][ T9853] Use struct sctp_assoc_value instead [ 327.385882][ T8969] raw-gadget.4 gadget.3: failed to queue disconnect event [ 327.646028][ T5607] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 327.663671][ T5607] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 327.672666][ T5607] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 327.680734][ T5607] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 327.690432][ T5607] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 327.855300][ T9858] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1288'. [ 327.893256][ T188] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 327.908310][ T9858] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1288'. [ 328.013551][ T9858] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1288'. [ 328.107654][ T188] usb 3-1: not running at top speed; connect to a high speed hub [ 328.148589][ T188] usb 3-1: New USB device found, idVendor=03f0, idProduct=2a76, bcdDevice=b8.a5 [ 328.189196][ T9867] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1289'. [ 328.208278][ T188] usb 3-1: config 11 has an invalid interface number: 31 but max is 2 [ 328.258514][ T188] usb 3-1: config 11 contains an unexpected descriptor of type 0x1, skipping [ 328.275096][ T9858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1288'. [ 328.298088][ T188] usb 3-1: config 11 has an invalid interface number: 188 but max is 2 [ 328.335048][ T188] usb 3-1: config 11 contains an unexpected descriptor of type 0x2, skipping [ 328.365351][ T188] usb 3-1: config 11 contains an unexpected descriptor of type 0x2, skipping [ 328.411451][ T188] usb 3-1: config 11 contains an unexpected descriptor of type 0x2, skipping [ 328.426224][ T188] usb 3-1: config 11 has an invalid descriptor of length 1, skipping remainder of the config [ 328.437873][ T188] usb 3-1: config 11 has 2 interfaces, different from the descriptor's value: 3 [ 328.447070][ T188] usb 3-1: config 11 has no interface number 0 [ 328.453425][ T188] usb 3-1: config 11 has no interface number 1 [ 328.460094][ T188] usb 3-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0x1, skipping [ 328.471195][ T188] usb 3-1: config 11 interface 31 altsetting 10 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 328.482346][ T188] usb 3-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0x5, skipping [ 328.500434][ T188] usb 3-1: config 11 interface 31 altsetting 10 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 328.526415][ T188] usb 3-1: config 11 interface 31 altsetting 10 has an invalid descriptor for endpoint zero, skipping [ 328.557465][ T188] usb 3-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0xB, skipping [ 328.574316][ T188] usb 3-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0xE, skipping [ 328.589557][ T188] usb 3-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x1, skipping [ 328.611482][ T188] usb 3-1: config 11 interface 188 altsetting 27 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 328.650837][ T5607] Bluetooth: unknown link type 128 [ 328.658303][ T188] usb 3-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x5, skipping [ 328.723800][ T188] usb 3-1: config 11 interface 188 altsetting 27 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 328.771210][ T188] usb 3-1: config 11 interface 188 altsetting 27 has an invalid descriptor for endpoint zero, skipping [ 328.816040][ T188] usb 3-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0xA, skipping [ 328.867788][ T188] usb 3-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0xB, skipping [ 328.908267][ T188] usb 3-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x6, skipping [ 328.947025][ T188] usb 3-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0xC, skipping [ 328.959650][ T9889] tipc: Enabling of bearer rejected, failed to enable media [ 329.018816][ T188] usb 3-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x6, skipping [ 329.087303][ T188] usb 3-1: config 11 interface 31 has no altsetting 0 [ 329.129905][ T188] usb 3-1: config 11 interface 188 has no altsetting 0 [ 329.150294][ T9898] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3905104562 (31240836496 ns) > initial count (25326494960 ns). Using initial count to start timer. [ 329.171814][ T188] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.181968][ T188] usb 3-1: Product: 㰁 [ 329.187553][ T188] usb 3-1: Manufacturer: Ч [ 329.194316][ T188] usb 3-1: SerialNumber: Ў [ 329.257139][ T9861] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.282288][ T9861] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.299713][ T9861] bridge_slave_0: entered allmulticast mode [ 329.314205][ T9861] bridge_slave_0: entered promiscuous mode [ 329.335418][ T9861] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.342956][ T9861] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.353458][ T9861] bridge_slave_1: entered allmulticast mode [ 329.361979][ T9861] bridge_slave_1: entered promiscuous mode [ 329.414119][ T9861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.435034][ T9861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.454588][ T9853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1287'. [ 329.478054][ T9853] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1287'. [ 329.505487][ T9854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1287'. [ 329.526443][ T9854] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1287'. [ 329.549034][ T9861] team0: Port device team_slave_0 added [ 329.592098][ T9861] team0: Port device team_slave_1 added [ 329.651649][ T188] usb 3-1: USB disconnect, device number 69 [ 329.753057][ T5607] Bluetooth: hci6: command tx timeout [ 329.761416][ T9861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.778069][ T9861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 329.869214][ T9861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.945557][ T9861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.962650][ T9861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 330.000121][ T9861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.101695][ T9928] sctp: [Deprecated]: syz.5.1299 (pid 9928) Use of int in max_burst socket option. [ 330.101695][ T9928] Use struct sctp_assoc_value instead [ 330.144495][ T9861] hsr_slave_0: entered promiscuous mode [ 330.151451][ T9861] hsr_slave_1: entered promiscuous mode [ 330.157956][ T9861] debugfs: 'hsr0' already exists in 'hsr' [ 330.164755][ T9861] Cannot create hsr debugfs directory [ 330.419598][ T5717] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 330.625438][ T9941] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1300'. [ 330.640203][ T5717] usb 6-1: not running at top speed; connect to a high speed hub [ 330.677136][ T5717] usb 6-1: New USB device found, idVendor=03f0, idProduct=2a76, bcdDevice=b8.a5 [ 330.701878][ T5607] Bluetooth: hci5: command tx timeout [ 330.761002][ T5717] usb 6-1: config 11 has an invalid interface number: 31 but max is 2 [ 330.810838][ T5717] usb 6-1: config 11 contains an unexpected descriptor of type 0x1, skipping [ 330.842855][ T5717] usb 6-1: config 11 has an invalid interface number: 188 but max is 2 [ 330.851537][ T5691] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 330.889825][ T5717] usb 6-1: config 11 contains an unexpected descriptor of type 0x2, skipping [ 330.901773][ T5717] usb 6-1: config 11 contains an unexpected descriptor of type 0x2, skipping [ 330.912478][ T5717] usb 6-1: config 11 contains an unexpected descriptor of type 0x2, skipping [ 330.952871][ T5717] usb 6-1: config 11 has an invalid descriptor of length 1, skipping remainder of the config [ 330.986571][ T5717] usb 6-1: config 11 has 2 interfaces, different from the descriptor's value: 3 [ 331.017975][ T9861] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 331.018307][ T5717] usb 6-1: config 11 has no interface number 0 [ 331.045368][ T9861] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 331.055825][ T5691] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 331.066921][ T9861] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 331.081315][ T5717] usb 6-1: config 11 has no interface number 1 [ 331.091428][ T5691] usb 3-1: config 0 has an invalid interface number: 180 but max is 1 [ 331.104006][ T5717] usb 6-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0x1, skipping [ 331.116339][ T9861] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 331.125353][ T5691] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.137512][ T9861] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 331.149600][ T5717] usb 6-1: config 11 interface 31 altsetting 10 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 331.165307][ T5691] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 331.183703][ T5691] usb 3-1: config 0 has no interface number 0 [ 331.184900][ T9861] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 331.190235][ T5717] usb 6-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0x5, skipping [ 331.220602][ T5691] usb 3-1: too many endpoints for config 0 interface 180 altsetting 139: 217, using maximum allowed: 30 [ 331.234219][ T9861] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 331.244578][ T5691] usb 3-1: config 0 interface 180 altsetting 139 has 0 endpoint descriptors, different from the interface descriptor's value: 217 [ 331.258505][ T5717] usb 6-1: config 11 interface 31 altsetting 10 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 331.293976][ T9861] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 331.294944][ T5717] usb 6-1: config 11 interface 31 altsetting 10 has an invalid descriptor for endpoint zero, skipping [ 331.319469][ T5691] usb 3-1: config 0 interface 180 has no altsetting 0 [ 331.344433][ T5691] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.379256][ T5717] usb 6-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0xB, skipping [ 331.398985][ T5691] usb 3-1: config 0 descriptor?? [ 331.449554][ T5717] usb 6-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0xE, skipping [ 331.490225][ T5717] usb 6-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x1, skipping [ 331.529670][ T5717] usb 6-1: config 11 interface 188 altsetting 27 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 331.567746][ T5717] usb 6-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x5, skipping [ 331.614975][ T5717] usb 6-1: config 11 interface 188 altsetting 27 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 331.664695][ T9861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.668653][ T5717] usb 6-1: config 11 interface 188 altsetting 27 has an invalid descriptor for endpoint zero, skipping [ 331.715769][ T5717] usb 6-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0xA, skipping [ 331.743768][ T9861] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.776420][ T5717] usb 6-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0xB, skipping [ 331.782893][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.794478][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.820423][ T5607] Bluetooth: hci6: command tx timeout [ 331.829647][ T5717] usb 6-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x6, skipping [ 331.842667][ T5717] usb 6-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0xC, skipping [ 331.854174][ T5717] usb 6-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x6, skipping [ 331.865641][ T5717] usb 6-1: config 11 interface 31 has no altsetting 0 [ 331.872839][ T5717] usb 6-1: config 11 interface 188 has no altsetting 0 [ 331.885068][ T5717] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.893697][ T5717] usb 6-1: Product: 㰁 [ 331.894131][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.897923][ T5717] usb 6-1: Manufacturer: Ч [ 331.905093][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.910384][ T5717] usb 6-1: SerialNumber: Ў [ 332.191193][ T9861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.206584][ T5691] usb 3-1: string descriptor 0 read error: -71 [ 332.229203][ T9928] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1299'. [ 332.251720][ T9907] syz.0.1295 (9907) used greatest stack depth: 18480 bytes left [ 332.267858][ T5691] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 332.291895][ T9930] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1299'. [ 332.301019][ T9928] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1299'. [ 332.322754][ T5691] dvb-usb: bulk message failed: -22 (3/0) [ 332.333620][ T5691] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 332.355078][ T5691] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 332.364776][ T5691] usb 3-1: media controller created [ 332.372212][ T5691] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 332.372454][ T9966] sctp: [Deprecated]: syz.2.1303 (pid 9966) Use of int in max_burst socket option. [ 332.372454][ T9966] Use struct sctp_assoc_value instead [ 332.397189][ T5691] dvb-usb: bulk message failed: -22 (6/0) [ 332.406002][ T9861] veth0_vlan: entered promiscuous mode [ 332.408997][ T5691] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 332.458857][ T9861] veth1_vlan: entered promiscuous mode [ 332.485905][ T5691] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input32 [ 332.540712][ T5717] usb 6-1: USB disconnect, device number 36 [ 332.567617][ T5691] dvb-usb: schedule remote query interval to 150 msecs. [ 332.576949][ T5691] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 332.619169][ T5691] usb 3-1: USB disconnect, device number 70 [ 332.678842][ T9861] veth0_macvtap: entered promiscuous mode [ 332.752138][ T9861] veth1_macvtap: entered promiscuous mode [ 332.770138][ T5607] Bluetooth: hci2: unexpected event for opcode 0x1004 [ 332.787120][ T5691] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 332.797083][ T9861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.828782][ T9861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.870185][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.950612][ T3357] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.982692][ T3357] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.015385][ T3357] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.110753][ T5691] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 333.184071][ T3357] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.200686][ T3357] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.248477][ T3357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.273566][ T3357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.298242][ T5691] usb 3-1: not running at top speed; connect to a high speed hub [ 333.334865][ T5691] usb 3-1: New USB device found, idVendor=03f0, idProduct=2a76, bcdDevice=b8.a5 [ 333.362943][ T5691] usb 3-1: config 11 has an invalid interface number: 31 but max is 2 [ 333.387942][ T5691] usb 3-1: config 11 contains an unexpected descriptor of type 0x1, skipping [ 333.419691][ T5691] usb 3-1: config 11 has an invalid interface number: 188 but max is 2 [ 333.443416][ T5691] usb 3-1: config 11 contains an unexpected descriptor of type 0x2, skipping [ 333.463391][ T5691] usb 3-1: config 11 contains an unexpected descriptor of type 0x2, skipping [ 333.491408][ T5691] usb 3-1: config 11 contains an unexpected descriptor of type 0x2, skipping [ 333.509873][ T5691] usb 3-1: config 11 has an invalid descriptor of length 1, skipping remainder of the config [ 333.526422][ T5691] usb 3-1: config 11 has 2 interfaces, different from the descriptor's value: 3 [ 333.547674][ T5691] usb 3-1: config 11 has no interface number 0 [ 333.561389][ T5691] usb 3-1: config 11 has no interface number 1 [ 333.574988][ T5691] usb 3-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0x1, skipping [ 333.595142][ T5691] usb 3-1: config 11 interface 31 altsetting 10 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 333.618390][ T5691] usb 3-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0x5, skipping [ 333.651976][ T5691] usb 3-1: config 11 interface 31 altsetting 10 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 333.679875][ T5691] usb 3-1: config 11 interface 31 altsetting 10 has an invalid descriptor for endpoint zero, skipping [ 333.693396][ T5691] usb 3-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0xB, skipping [ 333.704867][ T5691] usb 3-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0xE, skipping [ 333.720482][ T5691] usb 3-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x1, skipping [ 333.739129][ T5691] usb 3-1: config 11 interface 188 altsetting 27 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 333.766824][ T5691] usb 3-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x5, skipping [ 333.782230][ T5691] usb 3-1: config 11 interface 188 altsetting 27 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 333.794566][ T5691] usb 3-1: config 11 interface 188 altsetting 27 has an invalid descriptor for endpoint zero, skipping [ 333.832199][ T5691] usb 3-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0xA, skipping [ 333.865205][ T5691] usb 3-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0xB, skipping [ 333.900054][ T5607] Bluetooth: hci6: command tx timeout [ 333.904816][ T5691] usb 3-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x6, skipping [ 333.928523][ T5691] usb 3-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0xC, skipping [ 333.960065][ T5691] usb 3-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x6, skipping [ 334.006465][ T5691] usb 3-1: config 11 interface 31 has no altsetting 0 [ 334.038427][ T5691] usb 3-1: config 11 interface 188 has no altsetting 0 [ 334.074905][ T5691] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.103336][ T5691] usb 3-1: Product: 㰁 [ 334.120874][ T5691] usb 3-1: Manufacturer: Ч [ 334.135075][ T5691] usb 3-1: SerialNumber: Ў [ 334.401438][ T188] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 334.459118][ T9966] __nla_validate_parse: 3 callbacks suppressed [ 334.459137][ T9966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1303'. [ 334.491823][ T9966] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1303'. [ 334.506109][ T9966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1303'. [ 334.522504][ T9] hid_parser_main: 27 callbacks suppressed [ 334.522524][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 334.544761][ T9966] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1303'. [ 334.558813][ T9] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 334.582437][ T188] usb 7-1: unable to get BOS descriptor or descriptor too short [ 334.591751][ T188] usb 7-1: not running at top speed; connect to a high speed hub [ 334.601030][ T188] usb 7-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 334.622044][ T188] usb 7-1: config 1 has an invalid interface number: 8 but max is 2 [ 334.631495][ T188] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 334.661372][ T188] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 334.679696][ T188] usb 7-1: config 1 has no interface number 0 [ 334.693780][ T188] usb 7-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 334.724499][ T5691] usb 3-1: USB disconnect, device number 71 [ 334.731670][ T188] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.749887][ T188] usb 7-1: Product: syz [ 334.764734][ T188] usb 7-1: Manufacturer: syz [ 334.779104][ T188] usb 7-1: SerialNumber: syz [ 335.013176][ T5630] udevd[5630]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 335.137356][ T9999] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1313'. [ 335.229730][T10023] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1320'. [ 335.485433][T10029] macsec1: entered promiscuous mode [ 335.491341][T10029] macsec1: entered allmulticast mode [ 335.500636][T10029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1323'. [ 335.511244][T10029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1323'. [ 335.521271][T10029] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1323'. [ 335.530684][ T5724] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 335.681866][ T188] usb 7-1: USB disconnect, device number 2 [ 335.690430][ T5724] usb 6-1: Using ep0 maxpacket: 16 [ 335.704747][ T5724] usb 6-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 335.733225][ T5724] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 335.746339][ T5724] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 335.759943][ T5724] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.771819][ T5724] usb 6-1: config 0 descriptor?? [ 335.802662][ T5724] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 335.901362][ T5698] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 335.980230][ T5607] Bluetooth: hci6: command tx timeout [ 336.005222][ T5730] usb 6-1: USB disconnect, device number 37 [ 336.099738][ T5698] usb 3-1: Using ep0 maxpacket: 8 [ 336.111370][T10043] [U] IG"[\ETȍƈoG 3,& [ 336.117350][T10043] [U] x/D+:}Yu)GX˚īG.^ [ 336.119172][ T5698] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 336.123354][T10043] [U] I3:4a{.Iq!'hัF1k̇3M\Ee7z6NGX05S~Jbj4,^Ｑad=?K\LZ6%I%!8.M{t*g}#jd#B>B 7,R5҃CflʿN(fq zw%2ONUt݂7}DV=\ZSαbBuUE2(9TNM=`ZWJ)|hi$-5S [ 336.123407][T10043] [U] DV8[B:;3d_) [ 336.123418][T10043] [U] qJKhiWHF,4E&KX^ ^V7Gc( [ 336.123429][T10043] [U] M8x]bY_v-; |O)qKVt [ 336.123440][T10043] [U] _v$p|^&=],M/!av+;2hX-> [ 336.135650][ T5698] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.158660][T10043] [U] 2G\}-F ׍3ڎC?<9gڱgyqТc~,vym`9O^S0vT`c87{bI<ʸ^2lՏP)%$ [ 336.158684][T10043] [U] %P [ 336.158693][T10043] [U] >hmbdZE%?Nj?lvS!HUiC%h#^gycD-9Y [ 336.158712][T10043] [U] eRR}@}h'0&S -rcN?dC:),d9܂~/f|(LŮH۬ѡO H--EQ֊$}9AɁVuй?'Q2r [ 344.192555][T10175] dump_stack_lvl+0xe8/0x150 [ 344.192587][T10175] should_fail_ex+0x410/0x560 [ 344.192616][T10175] _copy_from_iter+0x1d3/0x1660 [ 344.192639][T10175] ? kmem_cache_alloc_node_noprof+0x101/0x620 [ 344.192663][T10175] ? rcu_is_watching+0x16/0xb0 [ 344.192683][T10175] ? trace_kmem_cache_alloc+0x29/0xe0 [ 344.192707][T10175] ? kmem_cache_alloc_node_noprof+0x3bc/0x620 [ 344.192729][T10175] ? __pfx__copy_from_iter+0x10/0x10 [ 344.192753][T10175] ? __alloc_skb+0x27a/0x7a0 [ 344.192774][T10175] ? __alloc_skb+0x27a/0x7a0 [ 344.192801][T10175] ? netlink_sendmsg+0x650/0xb40 [ 344.192828][T10175] ? skb_put+0x112/0x210 [ 344.192854][T10175] netlink_sendmsg+0x6c0/0xb40 [ 344.192890][T10175] ? __pfx_netlink_sendmsg+0x10/0x10 [ 344.192920][T10175] ? aa_sock_msg_perm+0xf6/0x1c0 [ 344.192951][T10175] ? __pfx_netlink_sendmsg+0x10/0x10 [ 344.192977][T10175] sock_sendmsg_nosec+0x13a/0x180 [ 344.192999][T10175] ____sys_sendmsg+0x54e/0x850 [ 344.193030][T10175] ? __pfx_____sys_sendmsg+0x10/0x10 [ 344.193071][T10175] ___sys_sendmsg+0x2a5/0x360 [ 344.193095][T10175] ? __lock_acquire+0x683/0x2cf0 [ 344.193126][T10175] ? __pfx____sys_sendmsg+0x10/0x10 [ 344.193151][T10175] ? get_pid_task+0x20/0x1f0 [ 344.193177][T10175] ? get_pid_task+0x20/0x1f0 [ 344.193200][T10175] ? get_pid_task+0x20/0x1f0 [ 344.193252][T10175] ? __fget_files+0x2a/0x420 [ 344.193277][T10175] ? __fget_files+0x3a2/0x420 [ 344.193317][T10175] __sys_sendmsg+0x177/0x240 [ 344.193345][T10175] ? __pfx___sys_sendmsg+0x10/0x10 [ 344.193388][T10175] __do_fast_syscall_32+0x27a/0x6a0 [ 344.193410][T10175] ? do_fast_syscall_32+0x33/0x70 [ 344.193430][T10175] ? asm_int80_emulation+0x1a/0x20 [ 344.193449][T10175] ? do_int80_emulation+0x299/0x500 [ 344.193468][T10175] ? trace_irq_disable+0x3b/0x140 [ 344.193498][T10175] do_fast_syscall_32+0x33/0x70 [ 344.193519][T10175] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 344.193541][T10175] RIP: 0023:0xf702f0ec [ 344.193559][T10175] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 344.193577][T10175] RSP: 002b:00000000f541d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 344.193598][T10175] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080009b40 [ 344.193612][T10175] RDX: 00000000200400d0 RSI: 0000000000000000 RDI: 0000000000000000 [ 344.193624][T10175] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 344.193636][T10175] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 344.193648][T10175] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 344.193675][T10175] [ 344.491511][ T5730] usb 3-1: config 11 interface 188 altsetting 27 has an invalid descriptor for endpoint zero, skipping [ 344.504203][ T5730] usb 3-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0xA, skipping [ 344.531136][ T5730] usb 3-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0xB, skipping [ 344.568279][ T5730] usb 3-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x6, skipping [ 344.640430][ T5730] usb 3-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0xC, skipping [ 344.694333][ T5730] usb 3-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x6, skipping [ 344.707490][T10187] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1373'. [ 344.750283][ T5730] usb 3-1: config 11 interface 31 has no altsetting 0 [ 344.799059][ T5730] usb 3-1: config 11 interface 188 has no altsetting 0 [ 344.827684][ T5730] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.837446][ T5730] usb 3-1: Product: 㰁 [ 344.845831][ T5730] usb 3-1: Manufacturer: Ч [ 344.857833][ T5730] usb 3-1: SerialNumber: Ў [ 345.047909][T10190] netlink: 288 bytes leftover after parsing attributes in process `syz.4.1375'. [ 345.114290][T10152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1365'. [ 345.203094][T10153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1365'. [ 345.236963][T10152] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1365'. [ 345.250342][T10194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1377'. [ 345.269320][T10153] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1365'. [ 345.302624][T10194] netlink: 'syz.4.1377': attribute type 30 has an invalid length. [ 345.360754][ T5730] usb 3-1: USB disconnect, device number 77 [ 345.539481][ T5698] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 345.655275][T10201] FAULT_INJECTION: forcing a failure. [ 345.655275][T10201] name failslab, interval 1, probability 0, space 9, times 0 [ 345.670455][T10200] netlink: 'syz.0.1379': attribute type 1 has an invalid length. [ 345.681747][T10201] CPU: 0 UID: 0 PID: 10201 Comm: syz.4.1378 Tainted: G L syzkaller #0 PREEMPT(full) [ 345.681780][T10201] Tainted: [L]=SOFTLOCKUP [ 345.681787][T10201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 345.681798][T10201] Call Trace: [ 345.681807][T10201] [ 345.681815][T10201] dump_stack_lvl+0xe8/0x150 [ 345.681848][T10201] should_fail_ex+0x410/0x560 [ 345.681877][T10201] should_failslab+0xa8/0x100 [ 345.681904][T10201] kmem_cache_alloc_node_noprof+0xb3/0x620 [ 345.681927][T10201] ? local_lock_release+0x9c/0x160 [ 345.681951][T10201] ? __alloc_skb+0x1db/0x7a0 [ 345.681972][T10201] ? __alloc_skb+0x1db/0x7a0 [ 345.682000][T10201] __alloc_skb+0x1db/0x7a0 [ 345.682026][T10201] netlink_ack+0x136/0xb30 [ 345.682070][T10201] netlink_rcv_skb+0x2a4/0x4a0 [ 345.682099][T10201] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 345.682128][T10201] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 345.682164][T10201] ? bpf_lsm_capable+0x9/0x20 [ 345.682187][T10201] ? security_capable+0x7e/0x2c0 [ 345.682217][T10201] nfnetlink_rcv+0x2b9/0x28c0 [ 345.682245][T10201] ? __dev_queue_xmit+0x29b/0x3820 [ 345.682275][T10201] ? __local_bh_enable_ip+0xd6/0x140 [ 345.682295][T10201] ? lockdep_hardirqs_on+0x7b/0x110 [ 345.682313][T10201] ? __dev_queue_xmit+0x29b/0x3820 [ 345.682338][T10201] ? __local_bh_enable_ip+0xd6/0x140 [ 345.682355][T10201] ? __dev_queue_xmit+0x29b/0x3820 [ 345.682379][T10201] ? __dev_queue_xmit+0x1edc/0x3820 [ 345.682403][T10201] ? __do_fast_syscall_32+0x27a/0x6a0 [ 345.682424][T10201] ? do_fast_syscall_32+0x33/0x70 [ 345.682460][T10201] ? __dev_queue_xmit+0x29b/0x3820 [ 345.682487][T10201] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 345.682518][T10201] ? __pfx___dev_queue_xmit+0x10/0x10 [ 345.682551][T10201] ? ref_tracker_free+0x689/0x830 [ 345.682580][T10201] ? __pfx_ref_tracker_free+0x10/0x10 [ 345.682614][T10201] ? __skb_clone+0x449/0x6c0 [ 345.682644][T10201] ? skb_clone+0x246/0x3a0 [ 345.682683][T10201] ? __netlink_deliver_tap+0x811/0x860 [ 345.682709][T10201] ? netlink_deliver_tap+0x2e/0x1b0 [ 345.682739][T10201] ? netlink_deliver_tap+0x2e/0x1b0 [ 345.682765][T10201] ? netlink_deliver_tap+0x2e/0x1b0 [ 345.682796][T10201] netlink_unicast+0x7bd/0x940 [ 345.682831][T10201] netlink_sendmsg+0x813/0xb40 [ 345.682868][T10201] ? __pfx_netlink_sendmsg+0x10/0x10 [ 345.682899][T10201] ? aa_sock_msg_perm+0xf6/0x1c0 [ 345.682926][T10201] ? __pfx_netlink_sendmsg+0x10/0x10 [ 345.682952][T10201] sock_sendmsg_nosec+0x13a/0x180 [ 345.682975][T10201] ____sys_sendmsg+0x54e/0x850 [ 345.683005][T10201] ? __pfx_____sys_sendmsg+0x10/0x10 [ 345.683047][T10201] ___sys_sendmsg+0x2a5/0x360 [ 345.683072][T10201] ? __lock_acquire+0x683/0x2cf0 [ 345.683105][T10201] ? __pfx____sys_sendmsg+0x10/0x10 [ 345.683131][T10201] ? get_pid_task+0x20/0x1f0 [ 345.683157][T10201] ? get_pid_task+0x20/0x1f0 [ 345.683181][T10201] ? get_pid_task+0x20/0x1f0 [ 345.683234][T10201] ? __fget_files+0x2a/0x420 [ 345.683259][T10201] ? __fget_files+0x3a2/0x420 [ 345.683294][T10201] __sys_sendmsg+0x177/0x240 [ 345.683322][T10201] ? __pfx___sys_sendmsg+0x10/0x10 [ 345.683363][T10201] __do_fast_syscall_32+0x27a/0x6a0 [ 345.683386][T10201] ? do_fast_syscall_32+0x33/0x70 [ 345.683406][T10201] ? asm_int80_emulation+0x1a/0x20 [ 345.683425][T10201] ? do_int80_emulation+0x299/0x500 [ 345.683444][T10201] ? trace_irq_disable+0x3b/0x140 [ 345.683473][T10201] do_fast_syscall_32+0x33/0x70 [ 345.683494][T10201] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 345.683517][T10201] RIP: 0023:0xf708f0ec [ 345.683535][T10201] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 345.683551][T10201] RSP: 002b:00000000f545c50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 345.683572][T10201] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080001f80 [ 345.683586][T10201] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 0000000000000000 [ 345.683598][T10201] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 345.683610][T10201] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 345.683621][T10201] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 345.683655][T10201] [ 345.750912][ T5698] usb 7-1: New USB device found, idVendor=0b05, idProduct=1866, bcdDevice= 0.00 [ 346.123291][ T5698] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.134975][ T5698] usb 7-1: config 0 descriptor?? [ 346.334861][T10209] FAULT_INJECTION: forcing a failure. [ 346.334861][T10209] name failslab, interval 1, probability 0, space 9, times 0 [ 346.365429][T10209] CPU: 0 UID: 0 PID: 10209 Comm: syz.4.1382 Tainted: G L syzkaller #0 PREEMPT(full) [ 346.365469][T10209] Tainted: [L]=SOFTLOCKUP [ 346.365476][T10209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 346.365489][T10209] Call Trace: [ 346.365497][T10209] [ 346.365505][T10209] dump_stack_lvl+0xe8/0x150 [ 346.365537][T10209] should_fail_ex+0x410/0x560 [ 346.365567][T10209] should_failslab+0xa8/0x100 [ 346.365597][T10209] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 346.365621][T10209] ? __kernfs_new_node+0xe6/0x980 [ 346.365641][T10209] ? __kernfs_new_node+0xe6/0x980 [ 346.365667][T10209] __kernfs_new_node+0xe6/0x980 [ 346.365697][T10209] ? __pfx___kernfs_new_node+0x10/0x10 [ 346.365718][T10209] ? kernfs_root+0x1c/0x230 [ 346.365743][T10209] ? kernfs_root+0x1c/0x230 [ 346.365760][T10209] ? kernfs_root+0x1c/0x230 [ 346.365776][T10209] ? kernfs_root+0x1c/0x230 [ 346.365800][T10209] kernfs_new_node+0xea/0x140 [ 346.365825][T10209] __kernfs_create_file+0x4b/0x2e0 [ 346.365852][T10209] sysfs_add_file_mode_ns+0x237/0x300 [ 346.365887][T10209] internal_create_group+0x679/0x1180 [ 346.365921][T10209] ? __pfx_internal_create_group+0x10/0x10 [ 346.365945][T10209] ? up_write+0x19d/0x4a0 [ 346.365970][T10209] sysfs_create_groups+0x59/0x120 [ 346.365992][T10209] device_add_attrs+0x12c/0x600 [ 346.366019][T10209] ? __pfx_device_add_attrs+0x10/0x10 [ 346.366040][T10209] ? kobject_put+0x50f/0x550 [ 346.366069][T10209] ? device_add_class_symlinks+0x21f/0x240 [ 346.366095][T10209] device_add+0x488/0xb80 [ 346.366121][T10209] input_register_device+0x9d7/0x1150 [ 346.366151][T10209] uinput_create_device+0x53e/0x690 [ 346.366185][T10209] uinput_ioctl_handler+0x433/0x15a0 [ 346.366219][T10209] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 346.366260][T10209] ? __fget_files+0x2a/0x420 [ 346.366295][T10209] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 346.366323][T10209] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 346.366346][T10209] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 346.366369][T10209] ? __fget_files+0x3a2/0x420 [ 346.366402][T10209] ? fput+0xa0/0xd0 [ 346.366426][T10209] ? ksys_write+0x242/0x270 [ 346.366477][T10209] __do_fast_syscall_32+0x27a/0x6a0 [ 346.366501][T10209] ? do_fast_syscall_32+0x33/0x70 [ 346.366522][T10209] ? asm_int80_emulation+0x1a/0x20 [ 346.366541][T10209] ? do_int80_emulation+0x299/0x500 [ 346.366561][T10209] ? trace_irq_disable+0x3b/0x140 [ 346.366591][T10209] do_fast_syscall_32+0x33/0x70 [ 346.366612][T10209] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 346.366635][T10209] RIP: 0023:0xf708f0ec [ 346.366651][T10209] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 346.366667][T10209] RSP: 002b:00000000f547d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 346.366686][T10209] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005501 [ 346.366698][T10209] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 346.366709][T10209] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 346.366719][T10209] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 346.366731][T10209] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 346.366757][T10209] [ 346.714774][ T5698] asus 0003:0B05:1866.0012: unknown main item tag 0x0 [ 346.722195][ T5698] asus 0003:0B05:1866.0012: unknown main item tag 0x0 [ 346.729538][ T5698] asus 0003:0B05:1866.0012: unknown main item tag 0x0 [ 346.738580][T10216] IPVS: set_ctl: invalid protocol: 189 172.20.20.16:19998 [ 346.746258][ T5698] asus 0003:0B05:1866.0012: unknown main item tag 0x0 [ 346.757817][ T5698] asus 0003:0B05:1866.0012: unknown main item tag 0x0 [ 346.770765][ T5698] asus 0003:0B05:1866.0012: unknown main item tag 0x0 [ 346.778287][ T5698] asus 0003:0B05:1866.0012: unknown main item tag 0x0 [ 346.786267][ T5698] asus 0003:0B05:1866.0012: unknown main item tag 0x0 [ 346.798616][ T5698] asus 0003:0B05:1866.0012: hidraw0: USB HID vef.fd Device [HID 0b05:1866] on usb-dummy_hcd.6-1/input0 [ 346.921693][ T5698] usb 7-1: USB disconnect, device number 4 [ 347.178836][T10223] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 347.363419][T10229] FAULT_INJECTION: forcing a failure. [ 347.363419][T10229] name failslab, interval 1, probability 0, space 9, times 0 [ 347.404123][T10229] CPU: 0 UID: 0 PID: 10229 Comm: syz.2.1389 Tainted: G L syzkaller #0 PREEMPT(full) [ 347.404156][T10229] Tainted: [L]=SOFTLOCKUP [ 347.404163][T10229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 347.404175][T10229] Call Trace: [ 347.404182][T10229] [ 347.404191][T10229] dump_stack_lvl+0xe8/0x150 [ 347.404224][T10229] should_fail_ex+0x410/0x560 [ 347.404254][T10229] should_failslab+0xa8/0x100 [ 347.404282][T10229] __kmalloc_cache_noprof+0xa8/0x660 [ 347.404307][T10229] ? nsim_fib_event_nb+0x185/0x11d0 [ 347.404326][T10229] ? nsim_fib_event_nb+0x185/0x11d0 [ 347.404352][T10229] nsim_fib_event_nb+0x185/0x11d0 [ 347.404374][T10229] ? atomic_notifier_call_chain+0x26/0x180 [ 347.404407][T10229] notifier_call_chain+0x1a5/0x3d0 [ 347.404435][T10229] ? atomic_notifier_call_chain+0x26/0x180 [ 347.404463][T10229] atomic_notifier_call_chain+0xda/0x180 [ 347.404491][T10229] call_fib_notifiers+0x31/0x60 [ 347.404518][T10229] call_fib_entry_notifiers+0x158/0x200 [ 347.404547][T10229] ? __pfx_call_fib_entry_notifiers+0x10/0x10 [ 347.404579][T10229] ? lockdep_rtnl_is_held+0x26/0x40 [ 347.404606][T10229] ? fib_find_node+0x2b0/0x2f0 [ 347.404632][T10229] fib_table_insert+0xc9a/0x1b10 [ 347.404667][T10229] ? fib_new_table+0x14b/0x3f0 [ 347.404698][T10229] inet_rtm_newroute+0x14f/0x250 [ 347.404728][T10229] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 347.404779][T10229] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 347.404806][T10229] rtnetlink_rcv_msg+0x802/0xc00 [ 347.404828][T10229] ? netlink_sendmsg+0x5d4/0xb40 [ 347.404859][T10229] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 347.404883][T10229] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 347.404908][T10229] ? __lock_acquire+0x683/0x2cf0 [ 347.404955][T10229] netlink_rcv_skb+0x226/0x4a0 [ 347.404985][T10229] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 347.405010][T10229] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 347.405049][T10229] ? netlink_deliver_tap+0x2e/0x1b0 [ 347.405073][T10229] ? netlink_deliver_tap+0x2e/0x1b0 [ 347.405102][T10229] netlink_unicast+0x7bd/0x940 [ 347.405134][T10229] netlink_sendmsg+0x813/0xb40 [ 347.405168][T10229] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.405196][T10229] ? aa_sock_msg_perm+0xf6/0x1c0 [ 347.405231][T10229] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.405256][T10229] sock_sendmsg_nosec+0x13a/0x180 [ 347.405277][T10229] ____sys_sendmsg+0x54e/0x850 [ 347.405309][T10229] ? __pfx_____sys_sendmsg+0x10/0x10 [ 347.405349][T10229] ___sys_sendmsg+0x2a5/0x360 [ 347.405374][T10229] ? __lock_acquire+0x683/0x2cf0 [ 347.405403][T10229] ? __pfx____sys_sendmsg+0x10/0x10 [ 347.405427][T10229] ? get_pid_task+0x20/0x1f0 [ 347.405453][T10229] ? get_pid_task+0x20/0x1f0 [ 347.405477][T10229] ? get_pid_task+0x20/0x1f0 [ 347.405532][T10229] ? __fget_files+0x2a/0x420 [ 347.405557][T10229] ? __fget_files+0x3a2/0x420 [ 347.405593][T10229] __sys_sendmsg+0x177/0x240 [ 347.405622][T10229] ? __pfx___sys_sendmsg+0x10/0x10 [ 347.405667][T10229] __do_fast_syscall_32+0x27a/0x6a0 [ 347.405690][T10229] ? do_fast_syscall_32+0x33/0x70 [ 347.405710][T10229] ? asm_int80_emulation+0x1a/0x20 [ 347.405728][T10229] ? do_int80_emulation+0x299/0x500 [ 347.405748][T10229] ? trace_irq_disable+0x3b/0x140 [ 347.405774][T10229] do_fast_syscall_32+0x33/0x70 [ 347.405796][T10229] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 347.405819][T10229] RIP: 0023:0xf7f540ec [ 347.405837][T10229] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 347.405853][T10229] RSP: 002b:00000000f541650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 347.405873][T10229] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 347.405887][T10229] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 347.405897][T10229] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 347.405908][T10229] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 347.405927][T10229] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 347.405954][T10229] [ 347.469624][ T24] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 347.655113][T10237] sctp: [Deprecated]: syz.2.1391 (pid 10237) Use of int in max_burst socket option. [ 347.655113][T10237] Use struct sctp_assoc_value instead [ 347.670064][T10235] __nla_validate_parse: 1 callbacks suppressed [ 347.670082][T10235] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1392'. [ 347.919700][ T10] usb 3-1: new full-speed USB device number 78 using dummy_hcd [ 347.952389][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 347.960703][ T24] usb 5-1: not running at top speed; connect to a high speed hub [ 347.968475][ T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.40 [ 347.969563][ T188] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 347.986655][ T24] usb 5-1: config 1 interface 0 has no altsetting 0 [ 347.996220][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.004398][ T24] usb 5-1: Product: syz [ 348.008606][ T24] usb 5-1: Manufacturer: syz [ 348.013339][ T24] usb 5-1: SerialNumber: syz [ 348.071739][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 348.079891][ T10] usb 3-1: New USB device found, idVendor=03f0, idProduct=2a76, bcdDevice=b8.a5 [ 348.091024][ T10] usb 3-1: config 11 has an invalid interface number: 31 but max is 2 [ 348.099891][ T10] usb 3-1: config 11 contains an unexpected descriptor of type 0x1, skipping [ 348.108880][ T10] usb 3-1: config 11 has an invalid interface number: 188 but max is 2 [ 348.117464][ T10] usb 3-1: config 11 contains an unexpected descriptor of type 0x2, skipping [ 348.126653][ T10] usb 3-1: config 11 contains an unexpected descriptor of type 0x2, skipping [ 348.135755][ T10] usb 3-1: config 11 contains an unexpected descriptor of type 0x2, skipping [ 348.144863][ T10] usb 3-1: config 11 has an invalid descriptor of length 1, skipping remainder of the config [ 348.155348][ T10] usb 3-1: config 11 has 2 interfaces, different from the descriptor's value: 3 [ 348.165135][ T188] usb 7-1: New USB device found, idVendor=0b05, idProduct=1866, bcdDevice= 0.00 [ 348.174845][ T10] usb 3-1: config 11 has no interface number 0 [ 348.181322][ T10] usb 3-1: config 11 has no interface number 1 [ 348.187699][ T10] usb 3-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0x1, skipping [ 348.199003][ T10] usb 3-1: config 11 interface 31 altsetting 10 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 348.210771][ T188] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.218822][ T10] usb 3-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0x5, skipping [ 348.232713][ T188] usb 7-1: config 0 descriptor?? [ 348.246458][ T10] usb 3-1: config 11 interface 31 altsetting 10 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 348.256600][ T24] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input35 [ 348.261442][ T10] usb 3-1: config 11 interface 31 altsetting 10 has an invalid descriptor for endpoint zero, skipping [ 348.284848][ T10] usb 3-1: config 11 interface 31 altsetting 10 has a duplicate endpoint with address 0xB, skipping [ 348.297888][ T10] usb 3-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x1, skipping [ 348.310210][ T10] usb 3-1: config 11 interface 188 altsetting 27 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 348.321978][ T24] usb 5-1: USB disconnect, device number 72 [ 348.331095][ T10] usb 3-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x5, skipping [ 348.342107][ T10] usb 3-1: config 11 interface 188 altsetting 27 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 348.353800][ T10] usb 3-1: config 11 interface 188 altsetting 27 has an invalid descriptor for endpoint zero, skipping [ 348.365022][ T10] usb 3-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0xA, skipping [ 348.370520][ T24] appletouch 5-1:1.0: input: appletouch disconnected [ 348.376077][ T10] usb 3-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0xB, skipping [ 348.394427][ T10] usb 3-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x6, skipping [ 348.405806][ T10] usb 3-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0xC, skipping [ 348.417597][ T10] usb 3-1: config 11 interface 188 altsetting 27 has a duplicate endpoint with address 0x6, skipping [ 348.428816][ T10] usb 3-1: config 11 interface 31 has no altsetting 0 [ 348.440020][ T10] usb 3-1: config 11 interface 188 has no altsetting 0 [ 348.451324][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.460308][ T10] usb 3-1: Product: 㰁 [ 348.464556][ T10] usb 3-1: Manufacturer: Ч [ 348.469107][ T10] usb 3-1: SerialNumber: Ў [ 348.685757][T10237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1391'. [ 348.694948][T10237] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1391'. [ 348.706214][T10237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1391'. [ 348.716217][T10237] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1391'. [ 348.716217][ T188] asus 0003:0B05:1866.0013: unknown main item tag 0x0 [ 348.733287][ T188] asus 0003:0B05:1866.0013: unknown main item tag 0x0 [ 348.752779][ T188] asus 0003:0B05:1866.0013: hidraw0: USB HID vef.fd Device [HID 0b05:1866] on usb-dummy_hcd.6-1/input0 [ 348.768724][ T10] usb 3-1: USB disconnect, device number 78 [ 348.958955][ T5698] usb 7-1: USB disconnect, device number 5 [ 349.112778][T10241] IPVS: You probably need to specify IP address on multicast interface. [ 349.122778][T10241] IPVS: Error connecting to the multicast addr [ 349.288719][ T29] audit: type=1326 audit(1787309471.942:2492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10245 comm="syz.0.1394" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7ff70ec code=0x7ffc0000 [ 349.338346][ T29] audit: type=1326 audit(1787309471.972:2493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10245 comm="syz.0.1394" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7ff7117 code=0x7ffc0000 [ 349.365623][ T29] audit: type=1326 audit(1787309471.972:2494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10245 comm="syz.0.1394" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7ff70ec code=0x7ffc0000 [ 349.400397][ T29] audit: type=1326 audit(1787309471.972:2495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10245 comm="syz.0.1394" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7ff7117 code=0x7ffc0000 [ 349.426179][ T29] audit: type=1326 audit(1787309471.972:2496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10245 comm="syz.0.1394" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7ff70ec code=0x7ffc0000 [ 349.456118][ T29] audit: type=1326 audit(1787309471.972:2497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10245 comm="syz.0.1394" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7ff7117 code=0x7ffc0000 [ 349.481389][ T29] audit: type=1326 audit(1787309471.972:2498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10245 comm="syz.0.1394" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7ff70ec code=0x7ffc0000 [ 349.526641][ T29] audit: type=1326 audit(1787309471.972:2499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10245 comm="syz.0.1394" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7ff7117 code=0x7ffc0000 [ 349.557393][ T29] audit: type=1326 audit(1787309471.972:2500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10245 comm="syz.0.1394" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7ff70ec code=0x7ffc0000 [ 349.594326][ T29] audit: type=1326 audit(1787309471.972:2501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10245 comm="syz.0.1394" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7ff7117 code=0x7ffc0000 [ 349.782589][T10241] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1393'. [ 349.899721][ T5698] usb 3-1: new full-speed USB device number 79 using dummy_hcd [ 349.903542][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 350.050370][ T5698] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 350.070566][ T5698] usb 3-1: config index 0 descriptor too short (expected 63186, got 210) [ 350.093672][ T5698] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 350.118929][ T5698] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 350.155701][ T5698] usb 3-1: config 0 has no interface number 0 [ 350.164576][ T5698] usb 3-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 350.176994][ T5698] usb 3-1: config 0 interface 106 altsetting 0 has an endpoint descriptor with address 0x22, changing to 0x2 [ 350.196642][ T5698] usb 3-1: config 0 interface 106 altsetting 0 endpoint 0x2 has invalid maxpacket 70, setting to 64 [ 350.220057][ T5698] usb 3-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 350.275029][ T5698] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.309847][T10266] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1398'. [ 350.335114][ T5698] usb 3-1: config 0 descriptor?? [ 350.391187][ T5698] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 350.423237][T10268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1400'. [ 350.480566][T10268] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1400'. [ 350.566662][ T10] usb 3-1: USB disconnect, device number 79 [ 350.580993][ T3357] usb 3-1: Failed to submit usb control message: -71 [ 350.614105][ T3357] usb 3-1: unable to send the bmi data to the device: -71 [ 350.634859][ T3357] usb 3-1: unable to get target info from device [ 350.642247][ T3357] usb 3-1: could not get target info (-71) [ 350.649295][ T3357] usb 3-1: could not probe fw (-71) [ 350.800663][ T5698] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 350.992403][ T5698] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 351.019190][ T5698] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 351.039538][ T5698] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 351.049831][ T5698] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 351.063799][ T5698] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 351.092301][ T5698] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.239978][ T10] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 351.331852][ T188] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 351.510782][ T188] usb 6-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 351.540209][ T188] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.550532][T10277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1402'. [ 351.558310][ T188] usb 6-1: Product: syz [ 351.574508][ T188] usb 6-1: Manufacturer: syz [ 351.586507][ T188] usb 6-1: SerialNumber: syz [ 351.601637][ T5698] gud 5-1:1.0: probe with driver gud failed with error -71 [ 351.606288][ T188] usb 6-1: config 0 descriptor?? [ 351.666496][ T5698] usb 5-1: USB disconnect, device number 73 [ 351.833486][ T188] usb 6-1: ignoring: probably an ADSL modem [ 351.870144][T10287] input: syz1 as /devices/virtual/input/input36 [ 351.906634][T10296] input: syz0 as /devices/virtual/input/input37 [ 351.920194][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 352.069851][ T9] usb 7-1: device descriptor read/64, error -71 [ 352.252804][T10285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.280975][T10285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.311704][ T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 352.323658][ T188] cxacru 6-1:0.0: usbatm_usb_probe: bind failed: -19! [ 352.352476][ T188] usb 6-1: USB disconnect, device number 39 [ 352.469540][ T9] usb 7-1: device descriptor read/64, error -71 [ 352.580237][ T9] usb usb7-port1: attempt power cycle [ 352.770693][T10303] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 352.777486][T10303] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 352.792601][T10303] vhci_hcd vhci_hcd.0: Device attached [ 352.827059][T10303] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 352.929689][ T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 352.957378][ T9] usb 7-1: device descriptor read/8, error -71 [ 353.079707][ T5698] usb 38-1: SetAddress Request (2) to port 0 [ 353.098386][ T5698] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 353.201053][ T9] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 353.230337][ T9] usb 7-1: device descriptor read/8, error -71 [ 353.351044][ T9] usb usb7-port1: unable to enumerate USB device [ 353.368049][T10305] vhci_hcd: connection reset by peer [ 353.419219][ T3357] vhci_hcd vhci_hcd.2: stop threads [ 353.426524][ T3357] vhci_hcd vhci_hcd.2: release socket [ 353.434171][ T3357] vhci_hcd vhci_hcd.2: disconnect device [ 354.060953][ T5724] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 354.222599][ T5724] usb 6-1: New USB device found, idVendor=a6eb, idProduct=7458, bcdDevice=2d.4d [ 354.247570][ T5724] usb 6-1: config 8 has an invalid interface number: 223 but max is 0 [ 354.266561][ T5724] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 354.280841][ T5724] usb 6-1: config 8 has no interface number 0 [ 354.287023][ T5724] usb 6-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 354.307234][ T5724] usb 6-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 354.345855][ T5724] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.374077][ T5724] usb 6-1: Product: syz [ 354.378448][ T5724] usb 6-1: Manufacturer: syz [ 354.384099][ T5724] usb 6-1: SerialNumber: syz [ 354.791264][T10345] netlink: 'syz.6.1422': attribute type 3 has an invalid length. [ 354.800744][T10345] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1422'. [ 356.394809][T10332] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1418'. [ 356.538435][T10347] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1423'. [ 356.565955][T10347] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1423'. [ 356.664921][T10351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1426'. [ 356.681127][T10351] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1426'. [ 356.720462][ T29] kauditd_printk_skb: 1097 callbacks suppressed [ 356.720479][ T29] audit: type=1326 audit(1787309479.382:3599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10349 comm="syz.4.1426" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708f0ec code=0x7ffc0000 [ 356.768076][ T29] audit: type=1326 audit(1787309479.412:3600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10349 comm="syz.4.1426" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708f0ec code=0x7ffc0000 [ 356.798243][ T29] audit: type=1326 audit(1787309479.412:3601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10349 comm="syz.4.1426" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=327 compat=1 ip=0xf708f0ec code=0x7ffc0000 [ 356.831678][ T29] audit: type=1326 audit(1787309479.412:3602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10349 comm="syz.4.1426" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708f0ec code=0x7ffc0000 [ 356.861626][ T29] audit: type=1326 audit(1787309479.412:3603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10349 comm="syz.4.1426" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708f0ec code=0x7ffc0000 [ 356.887604][ T29] audit: type=1326 audit(1787309479.412:3604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10349 comm="syz.4.1426" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=439 compat=1 ip=0xf708f0ec code=0x7ffc0000 [ 356.914272][ T29] audit: type=1326 audit(1787309479.412:3605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10349 comm="syz.4.1426" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708f0ec code=0x7ffc0000 [ 356.941852][ T29] audit: type=1326 audit(1787309479.412:3606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10349 comm="syz.4.1426" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708f0ec code=0x7ffc0000 [ 356.966956][ T29] audit: type=1326 audit(1787309479.412:3607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10349 comm="syz.4.1426" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf708f0ec code=0x7ffc0000 [ 357.018125][ T5724] usb 6-1: USB disconnect, device number 40 [ 357.053607][ T29] audit: type=1326 audit(1787309479.412:3608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10349 comm="syz.4.1426" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708f0ec code=0x7ffc0000 [ 357.070473][T10362] binder: 10361:10362 ioctl c018620c 80000000 returned -22 [ 357.085470][ T5730] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 357.250059][ T5730] usb 7-1: Using ep0 maxpacket: 16 [ 357.257157][ T5730] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 357.280040][ T5730] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.290604][ T5730] usb 7-1: Product: syz [ 357.295095][ T5730] usb 7-1: Manufacturer: syz [ 357.301230][ T5730] usb 7-1: SerialNumber: syz [ 357.309067][ T5730] usb 7-1: config 0 descriptor?? [ 357.318631][ T5730] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 357.328611][ T5730] usb 7-1: Detected FT-X [ 357.479906][ T5724] usb 3-1: new full-speed USB device number 80 using dummy_hcd [ 357.722040][ T5730] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 357.740456][ T5730] ftdi_sio 7-1:0.0: GPIO initialisation failed: -71 [ 357.757874][ T5730] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 357.796100][ T5730] usb 7-1: USB disconnect, device number 10 [ 357.843517][ T5730] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 357.864429][ T5730] ftdi_sio 7-1:0.0: device disconnected [ 357.898673][T10382] FAULT_INJECTION: forcing a failure. [ 357.898673][T10382] name failslab, interval 1, probability 0, space 9, times 0 [ 357.922976][T10382] CPU: 1 UID: 0 PID: 10382 Comm: syz.0.1437 Tainted: G L syzkaller #0 PREEMPT(full) [ 357.923007][T10382] Tainted: [L]=SOFTLOCKUP [ 357.923015][T10382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 357.923026][T10382] Call Trace: [ 357.923115][T10382] [ 357.923186][T10382] dump_stack_lvl+0xe8/0x150 [ 357.923334][T10382] should_fail_ex+0x410/0x560 [ 357.923442][T10382] should_failslab+0xa8/0x100 [ 357.923491][T10382] kmem_cache_alloc_node_noprof+0xb3/0x620 [ 357.923520][T10382] ? local_lock_release+0x9c/0x160 [ 357.923639][T10382] ? __alloc_skb+0x1db/0x7a0 [ 357.923667][T10382] ? __alloc_skb+0x1db/0x7a0 [ 357.923694][T10382] __alloc_skb+0x1db/0x7a0 [ 357.923721][T10382] netlink_sendmsg+0x5d4/0xb40 [ 357.923824][T10382] ? __pfx_netlink_sendmsg+0x10/0x10 [ 357.923854][T10382] ? aa_sock_msg_perm+0xf6/0x1c0 [ 357.923947][T10382] ? __pfx_netlink_sendmsg+0x10/0x10 [ 357.923973][T10382] sock_sendmsg_nosec+0x13a/0x180 [ 357.924020][T10382] ____sys_sendmsg+0x54e/0x850 [ 357.924050][T10382] ? __pfx_____sys_sendmsg+0x10/0x10 [ 357.924087][T10382] ___sys_sendmsg+0x2a5/0x360 [ 357.924110][T10382] ? __lock_acquire+0x683/0x2cf0 [ 357.924161][T10382] ? __pfx____sys_sendmsg+0x10/0x10 [ 357.924183][T10382] ? get_pid_task+0x20/0x1f0 [ 357.924220][T10382] ? get_pid_task+0x20/0x1f0 [ 357.924244][T10382] ? get_pid_task+0x20/0x1f0 [ 357.924293][T10382] ? __fget_files+0x2a/0x420 [ 357.924329][T10382] ? __fget_files+0x3a2/0x420 [ 357.924362][T10382] __sys_sendmsg+0x177/0x240 [ 357.924387][T10382] ? __pfx___sys_sendmsg+0x10/0x10 [ 357.924425][T10382] __do_fast_syscall_32+0x27a/0x6a0 [ 357.924507][T10382] ? do_fast_syscall_32+0x33/0x70 [ 357.924526][T10382] ? asm_int80_emulation+0x1a/0x20 [ 357.924562][T10382] ? do_int80_emulation+0x299/0x500 [ 357.924580][T10382] ? trace_irq_disable+0x3b/0x140 [ 357.924623][T10382] do_fast_syscall_32+0x33/0x70 [ 357.924643][T10382] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 357.924672][T10382] RIP: 0023:0xf7ff70ec [ 357.924719][T10382] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 357.924735][T10382] RSP: 002b:00000000f54b650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 357.924788][T10382] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 357.924799][T10382] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 357.924811][T10382] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 357.924823][T10382] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 357.924834][T10382] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 357.924859][T10382] [ 358.220005][ T5698] usb 38-1: device descriptor read/8, error -110 [ 358.526424][T10393] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1442'. [ 358.571256][T10396] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 358.612053][ T5698] usb usb38-port1: attempt power cycle [ 358.666360][T10399] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1444'. [ 358.729520][ T5730] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 358.880285][ T5730] usb 6-1: New USB device found, idVendor=a6eb, idProduct=7458, bcdDevice=2d.4d [ 358.890950][ T5730] usb 6-1: config 8 has an invalid interface number: 223 but max is 0 [ 358.904253][ T5730] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 358.915711][ T5730] usb 6-1: config 8 has no interface number 0 [ 358.921988][ T5730] usb 6-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 358.933094][ T5730] usb 6-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 358.949478][ T5730] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.958051][ T5730] usb 6-1: Product: syz [ 358.964078][ T5730] usb 6-1: Manufacturer: syz [ 358.968862][ T5730] usb 6-1: SerialNumber: syz [ 359.180888][ T5698] usb usb38-port1: unable to enumerate USB device [ 359.780105][ T5730] usb 6-1: USB disconnect, device number 41 [ 359.881292][T10414] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1448'. [ 359.909591][ T5670] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 360.049517][ T5670] usb 7-1: device descriptor read/64, error -71 [ 360.290049][ T10] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 360.299846][ T5670] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 360.449468][ T5670] usb 7-1: device descriptor read/64, error -71 [ 360.456622][ T10] usb 6-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 360.489123][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.574192][ T5670] usb usb7-port1: attempt power cycle [ 360.746304][T10430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1452'. [ 360.888838][T10424] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.896437][T10424] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.919594][ T5670] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 360.927420][ T5698] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 360.950453][ T5670] usb 7-1: device descriptor read/8, error -71 [ 360.988473][T10424] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 361.013448][T10424] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 361.080201][ T5698] usb 5-1: Using ep0 maxpacket: 16 [ 361.087164][ T5698] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 361.089554][ T12] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.108075][ T12] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.118349][ T5698] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 361.134410][ T5698] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 361.140256][ T12] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.154917][ T12] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.165964][ T12] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.175911][ T12] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.176016][ T5698] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.185340][ T5698] usb 5-1: Product: syz [ 361.198919][ T281] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.208330][ T281] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.208853][ T5670] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 361.225388][ T5698] usb 5-1: Manufacturer: syz [ 361.231179][T10440] cxacru 6-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 361.240700][ T5698] usb 5-1: SerialNumber: syz [ 361.245343][ T10] usb 6-1: USB disconnect, device number 42 [ 361.247267][T10440] cxacru 6-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 361.259895][ T31] INFO: task syz.1.593:7769 blocked for more than 143 seconds. [ 361.268875][ T5670] usb 7-1: device descriptor read/8, error -71 [ 361.273755][ T31] Tainted: G L syzkaller #0 [ 361.277730][ T5698] usb 5-1: config 0 descriptor?? [ 361.283064][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 361.295984][ T31] task:syz.1.593 state:D stack:24008 pid:7769 tgid:7767 ppid:5628 task_flags:0x400140 flags:0x08080002 [ 361.312434][ T5698] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 361.322538][ T31] Call Trace: [ 361.323043][ T5698] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 361.325874][ T31] [ 361.325893][ T31] __schedule+0x17d4/0x5820 [ 361.341550][ T31] ? __pfx___schedule+0x10/0x10 [ 361.346473][ T31] ? schedule+0x90/0x2b0 [ 361.351406][ T31] schedule+0x164/0x2b0 [ 361.355819][ T31] schedule_preempt_disabled+0x13/0x30 [ 361.361951][ T31] __mutex_lock+0x7c1/0x1550 [ 361.366653][ T31] ? __mutex_lock+0x5d4/0x1550 [ 361.372320][ T31] ? usbdev_open+0x151/0x770 [ 361.377167][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 361.382901][ T31] ? bus_find_device+0x27d/0x2d0 [ 361.388209][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 361.394045][ T31] ? usbdev_open+0xa7/0x770 [ 361.398648][ T31] ? usbdev_open+0xa7/0x770 [ 361.404071][ T31] usbdev_open+0x151/0x770 [ 361.408515][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 361.409941][ T5670] usb usb7-port1: unable to enumerate USB device [ 361.418448][ T31] ? do_raw_spin_unlock+0xf5/0x200 [ 361.435341][ T31] chrdev_open+0x4d9/0x600 [ 361.440409][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 361.445447][ T31] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 361.452342][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 361.458937][ T31] do_dentry_open+0x816/0x1380 [ 361.464616][ T31] vfs_open+0x3b/0x340 [ 361.468790][ T31] ? path_openat+0x1428/0x1d60 [ 361.474190][ T31] path_openat+0x1443/0x1d60 [ 361.479004][ T31] do_file_open+0x23e/0x4a0 [ 361.484235][ T31] ? __pfx_do_file_open+0x10/0x10 [ 361.489925][ T31] ? _raw_spin_unlock+0x28/0x50 [ 361.494945][ T31] ? alloc_fd+0x651/0x6c0 [ 361.500026][ T31] do_sys_openat2+0x115/0x200 [ 361.504827][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 361.510649][ T31] ? rcu_is_watching+0x16/0xb0 [ 361.515815][ T31] __ia32_compat_sys_openat+0x131/0x160 [ 361.521984][ T31] do_int80_emulation+0x198/0x500 [ 361.527064][ T31] ? trace_irq_disable+0x3b/0x140 [ 361.532271][ T31] ? asm_int80_emulation+0x1a/0x20 [ 361.537593][ T31] ? clear_bhb_loop+0x70/0xc0 [ 361.542798][ T31] ? clear_bhb_loop+0x70/0xc0 [ 361.547540][ T31] asm_int80_emulation+0x1a/0x20 [ 361.553112][ T31] RIP: 0023:0xf71574eb [ 361.557219][ T31] RSP: 002b:00000000f541603c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 361.566154][ T31] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5416100 [ 361.574319][ T31] RDX: 0000000000000402 RSI: 0000000000000000 RDI: 0000000000000000 [ 361.583200][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 361.591616][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 361.599902][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 361.607941][ T31] [ 361.614297][ T31] [ 361.614297][ T31] Showing all locks held in the system: [ 361.623079][ T31] locks held by kworker/0:1/10: 5, on CPU#0: [ 361.629335][ T31] #0: ffff8880226e1540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 361.643266][ T31] #1: ffffc900000f7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 361.655262][ T31] #2: ffff88802a81f1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 361.665270][ T31] #3: ffff8880478e31d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xfc/0x9a0 [ 361.675352][ T31] #4: ffff88807d0ca1a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 361.686182][ T31] locks held by khungtaskd/31: 1, last CPU#0: [ 361.719513][ T31] #0: ffffffff8eb5a3a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 361.731637][ T31] locks held by kworker/1:2/988: 6, on CPU#1: [ 361.737737][ T31] #0: ffff8880226e1540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 361.749169][ T31] #1: ffffc90004e5fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 361.761543][ T31] #2: ffff8880296221d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 361.770562][ T31] #3: ffff8880515861d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 361.780292][ T31] #4: ffff888051cd91a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 361.790110][ T31] #5: ffffffff8e9f5a08 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xfc/0x2c0 [ 361.800694][ T31] locks held by klogd/4968: 2, last CPU#1: [ 361.806703][ T31] #0: ffff8880b873b520 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 361.816935][ T31] #1: ffffffff8eca24a0 (mmu_notifier_invalidate_range_start){+.+.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 361.829134][ T31] locks held by getty/5364: 2, on CPU#1: [ 361.834901][ T31] #0: ffff8880327b80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 361.844967][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 361.855495][ T31] locks held by udevd/5614: 4, on CPU#1: [ 361.861261][ T31] #0: ffff8880293043f8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0 [ 361.870163][ T31] #1: ffff88807b033080 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420 [ 361.879954][ T31] #2: ffff8880558de2d8 (kn->active#30){.+.+}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 361.889544][ T31] #3: ffff8880515861d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 361.898986][ T31] locks held by kworker/1:5/5698: 6, on CPU#1: [ 361.906895][ T31] #0: ffff8880226e1540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 361.918746][ T31] #1: ffffc900043d7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 361.923072][ T5698] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 361.931268][ T31] #2: ffff88802a7c71d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 361.944080][ T5698] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 361.946388][ T31] #3: ffff8880332e31d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 361.962129][ T31] #4: ffff88802b9811a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 361.971776][ T31] #5: ffff88804b73dd78 (&dev->ctrl_urb_lock){+.+.}-{4:4}, at: em28xx_write_regs_req+0x129/0x3c0 [ 361.982679][ T31] locks held by kworker/0:8/5724: 3, on CPU#0: [ 361.988854][ T31] #0: ffff88801b02f140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 362.000260][ T31] #1: ffffc90004527c40 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 362.011469][ T31] #2: ffffffff8eb60578 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 362.021590][ T31] locks held by kworker/1:8/5730: 3, on CPU#1: [ 362.028083][ T31] #0: ffff88801b02f140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 362.039690][ T31] #1: ffffc90004587c40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 362.052407][ T31] #2: ffff88807b2dd250 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1fd/0x3b0 [ 362.062922][ T31] locks held by udevd/5731: 4, on CPU#1: [ 362.068598][ T31] #0: ffff888075b3c098 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0 [ 362.077736][ T31] #1: ffff888053c37080 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420 [ 362.087415][ T31] #2: ffff88804837f008 (kn->active#30){.+.+}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 362.097037][ T31] #3: ffff8880332e31d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 362.106781][ T31] locks held by syz.1.593/7769: 1, on CPU#0: [ 362.112855][ T31] #0: ffff8880296221d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x151/0x770 [ 362.122117][ T31] locks held by syz.3.1209/9576: 1, on CPU#1: [ 362.128490][ T31] #0: ffff8880296221d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x151/0x770 [ 362.137817][ T31] locks held by cxacru/10440: 1, on CPU#0: [ 362.143799][ T31] #0: ffffffff8e9f5a08 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xfc/0x2c0 [ 362.154529][ T31] [ 362.156881][ T31] ============================================= [ 362.156881][ T31] [ 362.165648][ T31] NMI backtrace for cpu 0 [ 362.165668][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 362.165693][ T31] Tainted: [L]=SOFTLOCKUP [ 362.165700][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 362.165711][ T31] Call Trace: [ 362.165720][ T31] [ 362.165728][ T31] dump_stack_lvl+0xe8/0x150 [ 362.165761][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 362.165919][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 362.165959][ T31] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 362.165986][ T31] sys_info+0x135/0x170 [ 362.166010][ T31] watchdog+0xfd7/0x1030 [ 362.166048][ T31] ? watchdog+0x1c7/0x1030 [ 362.166080][ T31] kthread+0x38b/0x480 [ 362.166108][ T31] ? __pfx_watchdog+0x10/0x10 [ 362.166130][ T31] ? __pfx_kthread+0x10/0x10 [ 362.166157][ T31] ret_from_fork+0x514/0xb70 [ 362.166198][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 362.166224][ T31] ? __switch_to+0xc89/0x1420 [ 362.166271][ T31] ? __pfx_kthread+0x10/0x10 [ 362.166298][ T31] ret_from_fork_asm+0x1a/0x30 [ 362.166337][ T31] [ 362.166345][ T31] Sending NMI from CPU 0 to CPUs 1: [ 362.283353][ C1] NMI backtrace for cpu 1 [ 362.283381][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 362.283406][ C1] Tainted: [L]=SOFTLOCKUP [ 362.283413][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 362.283425][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 362.283450][ C1] Code: ac 77 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 51 0e 00 fb f4 0c 0b 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 362.283469][ C1] RSP: 0018:ffffc90000197e40 EFLAGS: 00000242 [ 362.283486][ C1] RAX: 00000000003bef61 RBX: ffffffff819b3260 RCX: 8000000000000001 [ 362.283501][ C1] RDX: 0000000000000001 RSI: ffffffff8e25cfdb RDI: ffffffff8c4cff80 [ 362.283515][ C1] RBP: ffffc90000197f10 R08: ffff8880b873389b R09: 1ffff110170e6713 [ 362.283529][ C1] R10: dffffc0000000000 R11: ffffed10170e6714 R12: 0000000000000000 [ 362.283542][ C1] R13: 1ffff11003c52000 R14: 1ffff92000032fd0 R15: dffffc0000000000 [ 362.283557][ C1] FS: 0000000000000000(0000) GS:ffff888125014000(0000) knlGS:0000000000000000 [ 362.283572][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 362.283586][ C1] CR2: 000000000c34bf77 CR3: 0000000032440000 CR4: 00000000003526f0 [ 362.283603][ C1] Call Trace: [ 362.283613][ C1] [ 362.283621][ C1] default_idle+0x9/0x20 [ 362.283642][ C1] default_idle_call+0x72/0xb0 [ 362.283663][ C1] do_idle+0x2e0/0x540 [ 362.283691][ C1] ? __pfx_do_idle+0x10/0x10 [ 362.283719][ C1] cpu_startup_entry+0x43/0x60 [ 362.283743][ C1] start_secondary+0x101/0x110 [ 362.283767][ C1] common_startup_64+0x13e/0x157 [ 362.283807][ C1] [ 362.452648][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 362.459534][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 362.470222][ T31] Tainted: [L]=SOFTLOCKUP [ 362.474546][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 362.484592][ T31] Call Trace: [ 362.487868][ T31] [ 362.490807][ T31] vpanic+0x56d/0xa60 [ 362.494808][ T31] ? __pfx___schedule+0x10/0x10 [ 362.499672][ T31] ? __pfx_vpanic+0x10/0x10 [ 362.504182][ T31] ? nmi_trigger_cpumask_backtrace+0x20a/0x390 [ 362.510353][ T31] panic+0xc5/0xd0 [ 362.514092][ T31] ? __pfx_panic+0x10/0x10 [ 362.518514][ T31] ? preempt_schedule_common+0x7f/0xd0 [ 362.523982][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 362.529358][ T31] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 362.535523][ T31] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 362.541693][ T31] watchdog+0x1030/0x1030 [ 362.546040][ T31] ? watchdog+0x1c7/0x1030 [ 362.550491][ T31] kthread+0x38b/0x480 [ 362.554571][ T31] ? __pfx_watchdog+0x10/0x10 [ 362.559270][ T31] ? __pfx_kthread+0x10/0x10 [ 362.563875][ T31] ret_from_fork+0x514/0xb70 [ 362.568488][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 362.573611][ T31] ? __switch_to+0xc89/0x1420 [ 362.578302][ T31] ? __pfx_kthread+0x10/0x10 [ 362.582911][ T31] ret_from_fork_asm+0x1a/0x30 [ 362.587694][ T31] [ 362.590993][ T31] Kernel Offset: disabled [ 362.595347][ T31] Rebooting in 86400 seconds..