last executing test programs: 12m27.278911687s ago: executing program 32 (id=1306): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x10, 0x5, 0x0, 0x1, @payload={{0xc}, @void}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x82}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x9c}, 0x1, 0x0, 0x0, 0x48890}, 0x24048081) 8m28.818104236s ago: executing program 33 (id=2554): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x40182, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x5, 0x8, 0x8005, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0x6}, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x10, r0, 0x4000) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) close(r4) (async) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) r5 = openat$binfmt(0xffffffffffffff9c, r3, 0x2, 0x0) close(r5) (async) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) (async) execveat$binfmt(0xffffffffffffff9c, r3, &(0x7f0000000440)={[&(0x7f00000001c0)='\xff\xa2P\x00\xfa(fG\xc3\x91\xf9\xf9\x90\x98s\x1c6?\x0f\x02\x9a\x18\xf9$\x1dl\xd0T\xdeW\xd3!\xf5\x97,b\x1f\xa9f\x8d\x9f\x1f\xc9(\xcc\xd2\xa3\xb4\xcb\x87\xeb\xc1Emy\x1a\xdb\x89\xac\xff\xd9p\xd1\x12\xd4^\x1f\xc2\b\x18\f\xd2\xfe\x19=\'!K\xee\x04\xd9\x14y\x02\xf5\\a)\xeak\xec\x13\xa3\x98\x8f\vb(\xceJ;\xee:\xd2\x05\xd5J\x92\xf5\xbf\xd8\b\xf2\x18\xca\x88\bmJ\x02\x1c\x0f\x95\x0f\x96\xce\tFc\x9fB{-\n\xc2i\xc5\xe0\xcf\xdfJ&+i\xc2\a\xb8G\xa2\xdb\xf0\xce\xd3\xb3#\xb7?\xeb\xae\x96\xb7\x8c\xaa\xc2\x12\n\xd49\xd8\x9d{o66\v\xe4\x192F3\'\xa2\xa0\xa8\xfb+\xb7\x82\xec\x94']}, 0x0, 0x1000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000002e00090027bd700000000000040000003aacef339abe4fa497f46024d2405090790f6190d3811fc006d9220822a1a86aec7664552db212f157d83e33b2ac8570db0fc406203911ab65145f6283a22793b10a5eca53828c7eea68f94bbb610f67280aa17001e46d5d6ebe06f470e3ee2c7d24a765c6ffc07d10d7b04fae9882193c4761b407063a391b338af81f96bb4a943e9473407f"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, 0xffffffffffffffff, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) (async) gettid() (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) socket$tipc(0x1e, 0x2, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 8m12.962320799s ago: executing program 2 (id=2573): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001500010000000000000000000b000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000038000000090a010400000000000000000100000008000a40000000000900e4ff72797a3200000000080007400000003f0800054000000002380000000e0a01020000000000000000010000000900020073797a32000000000c000380080000fc5e3e519680040001800900010073797a3000000000140000001000010000000000000000000000000a"], 0xb8}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4081}, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000280)="650f340f35506666b8420042b8050000000f01c33e0f070fde460b0f0130670f01c2f2360f21af7e9afd6b00002b01", 0x2f}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000002c0)={0x38, r0, 0x801, 0x0, 0x3, {{}, {@void, @void}}, [@NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "02ebaed137"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}, @NL80211_KEY_SEQ={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x1004c000) 8m11.231232038s ago: executing program 2 (id=2577): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x6, 0xd21, 0x101, 0x6, 0x5, 0xbd, 0x100, 0x4}}}}]}, 0x58}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x88, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x200, 0x5, 0x1000, 0x7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r9, 0x15}, 0x80, &(0x7f0000000500)=[{&(0x7f00000002c0)="f2", 0x14}], 0x1}, 0x44) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_getaddr={0x20, 0x16, 0x1, 0xffffffff, 0x27dfdffd, {}, [@IFA_FLAGS={0x8, 0x8, 0x20}]}, 0x20}, 0x1, 0x0, 0x0, 0x620080d4}, 0x24080) 8m9.802970303s ago: executing program 2 (id=2581): ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x68, r1, 0x1, 0x70bd26, 0x25dfdbff, {{}, {0x0, 0x4109}, {0x4c, 0x18, {0xd, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r2) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x54, 0x0, 0x1, 0x0, 0x0, 0x20000810}, 0x8001) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x5e2a, 0x1, 0x40005, 0x200000c0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) fchdir(r8) write$P9_RUNLINKAT(r8, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r5) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010800000000030000000b00000008000300", @ANYRES32=r6, @ANYRES32=r5], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x1004c000) 8m1.93270553s ago: executing program 2 (id=2591): r0 = socket(0x400000000010, 0x3, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x585481, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}}) 8m1.391607297s ago: executing program 2 (id=2593): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) fsopen(&(0x7f0000000100)='esdfs\x00', 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) read$FUSE(r3, &(0x7f000000c200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x2b, 0x4, 0x14480620, 0x0, 0x61c6, 0x7, 0xa15, 0x0, 0x0, 0x1, 0x7}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0xfffffffffffffffc, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0xffffffffffffff28, 0x3, 0x0, 0x0, 0x0, 0x100000, 0xc000, 0x1, r5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f000000a200)="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", 0x2000, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x3, {0xfffffffffffffffd, 0x1000000000000000, 0x975a, 0x40000000000305, 0x6, 0xd, {0x5, 0x4, 0x4, 0xfe2b25e, 0x3, 0x2, 0x6, 0x4, 0x3, 0x6000, 0x3, r5, r6, 0x8, 0x1417}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2000, 0x40, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x3, &(0x7f0000000340)=[r6, r7, r8]) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000027c0)='/proc/asound/timers\x00', 0x0, 0x0) r10 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x1d, r11}, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40004) 8m0.072484704s ago: executing program 2 (id=2596): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000001c0)={0x0, 0x14, 0x55, "47a1f879dd29ad2ecb7027a8b404a6e5562d76bbe32568f9865c4456630270e1fc918d5117c8cc1c51eb59d559ff4c75161e86a2a0899b0829ebb720b7594a961b0f54cf32dcc741e761ae89e41ebc2f33d5327b63"}, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) socket(0x40000000015, 0x805, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) pipe(&(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) pipe(&(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 7m50.729912005s ago: executing program 34 (id=2589): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0xfffffe8c}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000000)=""/59}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3d0) syz_emit_ethernet(0x5e, &(0x7f0000000200)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "431600", 0x28, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @remote}, @loopback}}}}}}, 0x0) 7m44.410094697s ago: executing program 35 (id=2596): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000001c0)={0x0, 0x14, 0x55, "47a1f879dd29ad2ecb7027a8b404a6e5562d76bbe32568f9865c4456630270e1fc918d5117c8cc1c51eb59d559ff4c75161e86a2a0899b0829ebb720b7594a961b0f54cf32dcc741e761ae89e41ebc2f33d5327b63"}, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) socket(0x40000000015, 0x805, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) pipe(&(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) pipe(&(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 7m25.307880825s ago: executing program 3 (id=2617): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) fcntl$setflags(r0, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)=0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps\x00') shutdown(r3, 0x1) r4 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x14b000) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0) close(r4) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000000)=0x1) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x80489439, &(0x7f0000000200)) close(0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) fcntl$setflags(r0, 0x2, 0x1) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) (async) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)=0x3) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) syz_open_procfs(0x0, &(0x7f0000000100)='smaps\x00') (async) shutdown(r3, 0x1) (async) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x14b000) (async) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0) (async) close(r4) (async) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000000)=0x1) (async) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x80489439, &(0x7f0000000200)) (async) close(0x3) (async) 7m24.918113496s ago: executing program 3 (id=2618): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) fchmodat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0xfffffed3) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x100) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@getchain={0x2c, 0x66, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x1, 0xffe0}, {0x1a8c7a8ccd84165e, 0x10}, {0x5, 0x6}}, [{0x8, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010040}, 0x4000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r10 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r11 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r11, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg$unix(r10, &(0x7f0000004c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000027c0)=""/4097, 0x1001}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r10, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/37, 0x25}], 0x1}, 0x7}, {{&(0x7f0000000480)=@phonet, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000500)=""/144, 0x90}, {&(0x7f00000006c0)=""/210, 0xd2}, {&(0x7f00000007c0)=""/221, 0xdd}, {&(0x7f00000008c0)=""/136, 0x88}, {&(0x7f0000000980)=""/221, 0xdd}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000000300)}, {&(0x7f0000001bc0)=""/198, 0xc6}], 0x9, &(0x7f0000001d80)=""/93, 0x5d}, 0x1}, {{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000001e00)=""/36, 0x24}, {&(0x7f0000001e40)=""/39, 0x27}, {&(0x7f0000001e80)=""/116, 0x74}, {&(0x7f0000001f00)}], 0x4, &(0x7f0000001f80)=""/146, 0x92}, 0x1}], 0x3, 0x400001a2, 0x0) 7m23.487867828s ago: executing program 3 (id=2619): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001180)={0xffffffffffffffff, 0x58, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmmsg$inet6(r2, &(0x7f0000001380)=[{{&(0x7f0000000280)={0xa, 0x4e20, 0xa, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x9}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000880)="76c504eb1df46601e06b8d78164744f0b8038b594a3c5494ef27c239e955f9986a2aa48afa7bdfb8c8bbdcc2c6068db0565b921e1fd64870390dc5c956981afb6c2b8d927a35407f34d2641439d50c4a3755a3d588dbc89f0878581113887aa4e44984d513e35224f15ff86d6ef5e31d72d0f9d9f92efd2729701d39450846ea491891a1e4a46b3dae7b7d0dce5135b7975eec962c84027090094248855d5f04179a0f000ab6bc6822fa73a1dac1826a92c25a21d03d1c5c45c043f192cb6940a5e8147d414808639e2a5783b1dbed40eb7d04e2f050c74b30be1025dd5c39cc6f62f1", 0xe3}, {&(0x7f0000000980)="d3ec0b3957e54ad3143905bc7a0e1111851eb508dc8ccf41676cbd37f1034f341dfa60d310321c07a82e933a00bf4ad66484628e0810bc8194587922677f5f316a944087e67a21121d456960052ee06b0891704ec624feaa312b72bd", 0x5c}, {&(0x7f0000000a00)="9d560df2ab461d579dc0dd88538aacbc71156bb188023e63711546fba08a6c2c05b26b831ca708b4a3397078d507f7fd6aa5cc1b06b1166764286bd9b2639b1072bedc39a842143531366a5e741808a05fc3309b9c85a969ff021b5c80fc8b2b611409e559b2496116883142ed7c54c411ff354fc3f990d64531b3ad8e21a93853b31569d3fa93fd7051dd2eeb7bf5a86ab7d79ab613c0e09b6f687841e511aa5ef86873b9a95756fa5e129e8c152df2d8e22be317143e609ab34617cca26a21f40d688b136aa5288e270b092e48cd6633dd1f505110", 0xd6}, {&(0x7f0000000b40)="01e6959535e1c099e142b20b4c39e4fa5c22287662639d7f51f9cf207374034231332c5b9798b211701c5483b4bc13c0eed91c6fd0af03", 0x37}, {&(0x7f0000000b80)="fc", 0x1}, {&(0x7f0000000bc0)="f3098137a28d3fa8a12373f5d63e001885a861ce4a87fad4a9809aa1934555915dad3ba49b1c600173dd226e88f7c8771df5147fc66bd0837159e3f8e9fe7299ac4f2da395ec0692", 0x48}, {&(0x7f0000000e00)="f70300b1be7e764a3a7100568467f3011c823e6ac5d1dcbb6d7bc6c390381736f19447306785b962a384a7671bd7357bdd85870c3f9b445a9af5c08d5f9a13a7665217c4e212155206c665d71195acce8971b5022fb5b5ff75acae8c20e3af41052657b8efffe205460872ed72a83d505228cf05fd7191cfccf31eac89156e967c49a8d5c2057778ec639a77263287e41101c23129951dc7cc8419dfd6c0706b5d322605bd47177b37f0a66aa8a9382f2524301083fe7b2dac100d7220e4214e3bd40db8d6509b381471a24c897e05a7d683de4fbc9a1a01daf1b106590613", 0xdf}], 0x7, &(0x7f00000011c0)=[@pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r3}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x2f, 0x4, 0x0, 0x8c, 0x0, [@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}}, @rthdr={{0x48, 0x29, 0x39, {0x3b, 0x6, 0x1, 0x63, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1]}}}, @rthdr={{0x48, 0x29, 0x39, {0x73, 0x6, 0x0, 0x1, 0x0, [@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2e}}, @hopopts_2292={{0x38, 0x29, 0x36, {0x1d, 0x3, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @hao={0xc9, 0x10, @local}, @ra={0x5, 0x2, 0x1}]}}}, @rthdr={{0x48, 0x29, 0x39, {0x88, 0x6, 0x0, 0x4, 0x0, [@loopback, @mcast1, @mcast2]}}}], 0x188}}], 0x1, 0x2400c815) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r7 = accept4(r6, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d0ccf1cd422fcfd87e848c94a", 0x88}, {0x0}, {&(0x7f0000000540)="b4e007f06d056aa0367c7356f83c", 0xe}, {&(0x7f0000000580)}, {&(0x7f0000000700)="741f5b18fef5626f948b1919860417488e3e5141e17a3031271340b8ac67e4f5f7a2", 0x22}, {&(0x7f0000000a80)}, {&(0x7f0000000d00)="7cedc13b1cbf2308b2000d3d62b333c7c3b9f321ef7bd8e0e1e323da70d8d5", 0x1f}], 0x7, 0x4d9e, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0xd4}}, 0x0) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r10 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x8880) sendmsg$unix(r10, &(0x7f0000000180)={&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000100)="c86ea7a02789eb46301d02d9", 0xc}], 0x1, 0x0, 0x0, 0x2000c000}, 0x20000000) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x40, r0, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x1004c000) 7m23.389142411s ago: executing program 0 (id=2620): syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x10040) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x4, 0xca, 0x0, 0x1000, {[@window={0x3, 0x3, 0x5}, @sack={0x5, 0x6, [0x1]}]}}}}}}}, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r4, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff00000800"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x20000) 7m22.904174196s ago: executing program 0 (id=2621): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0xc3, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x401, 0x70bd25, 0x3, {0x0, 0x0, 0x0, 0x0, 0x14cc0, 0x58380}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8}, @IFLA_HSR_SEQ_NR={0x6, 0x5, 0x1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 7m22.606785118s ago: executing program 3 (id=2622): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x88182, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) write$UHID_INPUT(r1, &(0x7f00000003c0)={0x8, {"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", 0x1000}}, 0x1006) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) ioctl$BTRFS_IOC_ENCODED_READ(r0, 0x80809440, &(0x7f0000000280)={&(0x7f0000000240)=[{&(0x7f0000000100)="4832487640e4d9d618cf0a77dfa9ba765be83876a669bc7a704e379f8b3da23a201b9002d23e0d8f0f1a3e535fb448f6a390e1db9b63c0e0cd7d62bbab94131579419ba7c56bbbde4eb5c30d431621363d86d09865b877e689dc03f308f5aec6f8bbbf93012ac9cf4cd202", 0x6b}, {&(0x7f0000000200)="09f732a3e2952ffce84b5ce19efe5bb529a8c5b921dcce3bb40d88ce26721a1a4f8402e84a3b017d66434bd894aa8f1df9ae3bc6f51d66cdc37a15de", 0x3c}], 0x2, 0x80000000, 0x0, 0x2, 0x8, 0x8, 0x6, 0x6}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) unshare(0x2a020400) clock_gettime(0x0, &(0x7f0000001400)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x8, 0x100000001, 0x2, 0x8, 0x3, 0x80000001, 0x3, 0x7}, &(0x7f0000000340)={0x5e5, 0x4, 0x2, 0xa, 0x3, 0x0, 0xf}, &(0x7f0000000380)={0x1ff, 0x8, 0x5, 0x3, 0x7, 0xffffffffffffffff, 0x100000001, 0x6}, &(0x7f0000001440)={r3, r4+60000000}, &(0x7f00000014c0)={&(0x7f0000001480)={[0x8e55]}, 0x8}) r5 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x65, &(0x7f0000000080)=0x2, 0x4) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000c40)=[@rdma_args={0x48, 0x114, 0x1, {{0x4, 0x5}, {&(0x7f0000000680)=""/131, 0x83}, &(0x7f0000000a80)=[{&(0x7f0000000740)=""/161, 0xa1}, {&(0x7f0000000800)=""/177, 0xfffffecf}, {&(0x7f00000008c0)=""/196, 0xc4}, {&(0x7f00000009c0)=""/92, 0x5c}, {&(0x7f0000000a40)=""/12, 0xc}], 0x5, 0x43, 0xbfa}}], 0x48, 0x4044004}, 0x0) sendmmsg$inet6(r6, &(0x7f0000001780)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x38}}, 0x1c, 0x0}}], 0x1, 0xc040) sendto$inet6(r6, 0x0, 0x0, 0x4000000, 0x0, 0x0) r8 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000086a050703000000000001090224000100000000090400000203000000092100000701110700090581"], 0x0) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b00"], 0x0) syz_usb_disconnect(r8) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0xa0, 0xc0, 0x68}}]}}, 0x0) mprotect(&(0x7f0000163000/0x2000)=nil, 0x2000, 0x2000001) ioctl$SNDCTL_MIDI_INFO(r0, 0xc074510c, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000004, 0x20010, r0, 0x8f8d8000) 7m22.332396486s ago: executing program 0 (id=2623): socket$kcm(0xa, 0x3, 0x87) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) socket$nl_route(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000001500), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x10) fsopen(&(0x7f00000000c0)='adfs\x00', 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f0000001280)=ANY=[@ANYBLOB="3c0000000002000700000000f7ffffff01000003080005400000000113000b0063616c6c666f7277617264696e6700000a000b00512e393331000000ac8eaa0fbc49dc6133dc8db5499c0b752981523dfb4e0195b6f695b537b585"], 0x3c}, 0x1, 0x0, 0x0, 0x20040080}, 0x8800) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000040)=0x7ff) ppoll(&(0x7f0000000000)=[{r3}], 0x1, 0x0, 0x0, 0x0) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x282a2, 0x0) fsopen(&(0x7f0000000040)='efs\x00', 0x0) write$dsp(r4, &(0x7f0000000280)="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", 0x100000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000030400000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20000000100000001c001280090001006970697027d6fc6015b652eea28f3b"], 0x3c}}, 0x20000000) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 7m19.318473136s ago: executing program 3 (id=2624): unshare(0x22020400) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x39d}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) io_uring_enter(r0, 0x129, 0x14, 0x17, 0x0, 0xfffffd9a) r1 = fsopen(&(0x7f0000000540)='pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff6b, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x200, 0xfa11, 0xffffffff}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x1, @remote, 0x7}, 0x1c) ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, &(0x7f0000000600)={0x3, "a055babd9b8c29abbdd772a44c5518bc1661222efc50f8f5555dcf4617da81d7", 0x5, 0x80, 0x3, 0x6, 0x4, 0x1, 0xff7ffffa, 0x5}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0xda4f1000) socket$inet6_udplite(0xa, 0x2, 0x88) mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x162041, 0x1b34, 0x8, 0x2, 0x2, 0x0, 0x0, 0x3, 0x1}) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000180), 0xe8, 0x90102) ioctl$FE_SET_PROPERTY(r4, 0x40106f52, &(0x7f0000000100)={0x3, 0x0}) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101701) 7m18.775485065s ago: executing program 0 (id=2625): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000140)=""/4078, 0xfee}], 0x1, 0xf2, 0x207fff) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r7 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002080), 0x284e83, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x1b, &(0x7f0000000100)={@remote, 0x0, 0x2, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0xa, 0x1}, 0x20) r10 = syz_open_procfs(0x0, &(0x7f0000000080)='projid_map\x00') r11 = dup3(r10, r8, 0x0) read$FUSE(r11, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r7, 0x40146f2c, &(0x7f00000000c0)={0x100, 0x0, 0x0, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r7, 0x40146f2c, &(0x7f0000000040)={0x4, 0x0, 0x3, 0xb, 0x4}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="9a", 0x1, 0x800, &(0x7f0000000480)={0xa, 0x4e23, 0x20000000, @loopback}, 0x1c) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, 0x0, &(0x7f0000002100)) 7m16.433108414s ago: executing program 0 (id=2626): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) readv(r2, &(0x7f0000000a80)=[{0x0}], 0x1) 7m16.229106872s ago: executing program 3 (id=2627): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0xfffffe8c}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000000)=""/59}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4e0) syz_emit_ethernet(0x5e, &(0x7f0000000200)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "431600", 0x28, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @remote}, @loopback}}}}}}, 0x0) 7m16.147565445s ago: executing program 0 (id=2628): syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x10040) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x4, 0xca, 0x0, 0x1000, {[@window={0x3, 0x3, 0x5}, @sack={0x5, 0x6, [0x1]}]}}}}}}}, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r4, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff00000800"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x20000) 6m52.61919196s ago: executing program 36 (id=2628): syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x10040) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x4, 0xca, 0x0, 0x1000, {[@window={0x3, 0x3, 0x5}, @sack={0x5, 0x6, [0x1]}]}}}}}}}, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r4, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff00000800"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x20000) 6m10.762762501s ago: executing program 37 (id=2627): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0xfffffe8c}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000000)=""/59}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4e0) syz_emit_ethernet(0x5e, &(0x7f0000000200)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "431600", 0x28, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @remote}, @loopback}}}}}}, 0x0) 4m32.819862591s ago: executing program 7 (id=2988): unshare(0x22020400) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x39d}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) io_uring_enter(r0, 0x129, 0x14, 0x17, 0x0, 0xfffffd9a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x1, @remote, 0x7}, 0x1c) ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, &(0x7f0000000600)={0x3, "a055babd9b8c29abbdd772a44c5518bc1661222efc50f8f5555dcf4617da81d7", 0x5, 0x80, 0x3, 0x6, 0x4, 0x1, 0xff7ffffa, 0x5}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0xda4f1000) socket$inet6_udplite(0xa, 0x2, 0x88) mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x162041, 0x1b34, 0x8, 0x2, 0x2, 0x0, 0x0, 0x3, 0x1}) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000180), 0xe8, 0x90102) ioctl$FE_SET_PROPERTY(r3, 0x40106f52, &(0x7f0000000100)={0x3, 0x0}) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101701) 4m31.815740453s ago: executing program 7 (id=2992): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a78000000060a0b040000000000000000020000004c000480480001800a0001006d61746368000000380002800e0001007374617469737469630000001c000300000000000200000258c2052fade1bc2c62cdeb7521cf85ee08000240000000000900010073797a30000000000900020073797a32"], 0xa0}}, 0x0) 4m31.642401887s ago: executing program 7 (id=2993): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000000000)) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200504, 0x0) close(r5) r6 = socket$unix(0x1, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x5}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7ff, 0x100000000, 0x6eb, 0x5, 0x7, 0x2c0b}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0x3, 0xb}, {0xfff3, 0x6}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xb, 0x8, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x6008000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4m28.219522316s ago: executing program 7 (id=2999): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r3, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x80000}, 0x20) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000700)='ns/time_for_children\x00') fchown(r6, 0x0, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000040)={0x9, 0x3, 0x80, "11010000001413ff0300", 0x47425247}) socket(0x1d, 0x2, 0x6) r8 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x1, 0x10000}, 0x52) socket$netlink(0x10, 0x3, 0x4) 4m27.264959313s ago: executing program 7 (id=3005): r0 = syz_clone3(0x0, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b40)=ANY=[@ANYBLOB="12010000000000105804135000000000000109"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x1b5}) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2105"], 0x14}}, 0x0) io_uring_enter(r3, 0x80002219, 0x7721, 0x16, 0x0, 0xf2) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xcc}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) pipe2$9p(&(0x7f0000000140), 0x0) epoll_create1(0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xb8}}, 0x4004) syz_usb_control_io(r1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1400"], 0x28}}, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000040)=""/185) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000480)=r0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r4, &(0x7f0000000040)=ANY=[], 0x66) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) 4m26.75734357s ago: executing program 7 (id=3011): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000180)=ANY=[], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) set_mempolicy(0x4005, &(0x7f0000000000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0xffef}]}, 0x10) 4m26.138612678s ago: executing program 38 (id=3011): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000180)=ANY=[], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) set_mempolicy(0x4005, &(0x7f0000000000)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0xffef}]}, 0x10) 2m54.174391783s ago: executing program 8 (id=3483): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x5, 0x3000000, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xf}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000050) 2m54.000688926s ago: executing program 8 (id=3484): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {0x0}}, 0x18) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x1000000000000}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) shutdown(r0, 0x0) 2m52.978212858s ago: executing program 8 (id=3486): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, &(0x7f00000003c0)={0x1, 0x0, [{0x8b, 0x0, 0x8}]}) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) name_to_handle_at(r0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000140)=@reiserfs_4={0x10, 0x4, {0x8, 0x9487, 0x0, 0x5}}, &(0x7f0000000180), 0x600) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) readv(0xffffffffffffffff, 0x0, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0xa7e, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) (async, rerun: 64) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4814) (rerun: 64) ioprio_set$pid(0x2, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000000)=0x1) (async) getdents64(r0, &(0x7f0000001f00)=""/4093, 0xffd) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 2m51.646761805s ago: executing program 8 (id=3497): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x4) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x89901) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x2c, r5, 0x2cb3b0415539fbbb, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x0) (async) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x2c, r5, 0x2cb3b0415539fbbb, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x0) 2m51.439889413s ago: executing program 8 (id=3500): r0 = socket(0x15, 0x5, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x6, 0x2}, 0x10) (async) write(r0, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c) 2m51.168144441s ago: executing program 8 (id=3504): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0xfffffffc, 0x10, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0xf7fb, 0x2000, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x80ff, 0x8000, 0x9, 0x8, 0x0, 0x0, 0x20000000000000}, {0x1, 0x9, 0x80}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x3}, [@tmpl={0xc4, 0x5, [{{@in=@rand_addr=0x64010102, 0x4d4, 0x32}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3506, 0x0, 0x0, 0x2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xe}, 0x4d4, 0x32}, 0xa, @in6=@local, 0x800000, 0x3}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x0, 0x0, 0x1, 0x0, 0xabf}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 2m50.622554415s ago: executing program 39 (id=3504): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0xfffffffc, 0x10, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0xf7fb, 0x2000, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x80ff, 0x8000, 0x9, 0x8, 0x0, 0x0, 0x20000000000000}, {0x1, 0x9, 0x80}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x3}, [@tmpl={0xc4, 0x5, [{{@in=@rand_addr=0x64010102, 0x4d4, 0x32}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3506, 0x0, 0x0, 0x2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xe}, 0x4d4, 0x32}, 0xa, @in6=@local, 0x800000, 0x3}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x0, 0x0, 0x1, 0x0, 0xabf}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 1m27.711730223s ago: executing program 4 (id=3876): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4$alg(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000007280)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}], 0x1, 0x20000001) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r2, 0x2000000000000225, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0xfffffdff, 0x0, 0xfffb, r1, &(0x7f0000000340), 0x2d}]) 1m24.712699126s ago: executing program 1 (id=3879): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, 0x715}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0xe, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 1m24.436687543s ago: executing program 4 (id=3880): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) r3 = openat$urandom(0xffffffffffffff9c, 0x0, 0x103902, 0x0) r4 = fanotify_init(0x200, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r4, 0x101, 0x48001051, r5, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x7a) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) writev(r3, &(0x7f0000000380)=[{0x0}, {&(0x7f00000004c0)}], 0x2) r6 = syz_open_procfs(0x0, 0x0) read$FUSE(r6, &(0x7f00000051c0)={0x2020}, 0x2020) pread64(r6, 0x0, 0x0, 0xadc) r7 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb", 0xd}, {&(0x7f0000001700)="0c74c7536cf4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r8, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x80045505, &(0x7f0000000000)=0x1) bind$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) r9 = dup(r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000580)={'ip_vti0\x00', 0x0, 0x8, 0x10, 0x7fff, 0x7fff, {{0x5, 0x4, 0x1, 0x30, 0x14, 0x64, 0x0, 0xff, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x33}, @remote}}}}) munmap(&(0x7f0000004000/0x2000)=nil, 0x2000) modify_ldt$write2(0x11, &(0x7f0000000100)={0x5, 0x20001000, 0xffffffffffffffff, 0x1}, 0x10) 1m21.431695556s ago: executing program 6 (id=3886): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c7000000f5ffffff000000000000000000"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x200400c0) 1m21.385029128s ago: executing program 5 (id=3887): openat$kvm(0x0, &(0x7f0000000040), 0x88202, 0x0) socket$kcm(0x11, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000002c0), 0x0, 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20004890) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000200)={0x0, &(0x7f0000000880)=[@uexit={0x0, 0x18, 0x8001}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest64=0x2808, 0x6, 0x26f4ca85, 0x80000000}}, @nested_amd_invlpga={0x17d, 0x20, {0x0, 0xdaae}}, @out_dx={0x6a, 0x28, {0x1581, 0x0, 0x2000001}}, @rdmsr={0x66, 0x18, {0xbce}}, @rdmsr={0x66, 0x18, {0x3f9}}, @uexit={0x0, 0x18, 0x1}, @nested_load_code={0x12e, 0x82, {0x3, "c744240000800000c7442402fd1a0000c7442406000000000f011c2466b875000f00d0470f22060f07f4653e65f046815d0e0080000066660f38814d81b98e0a0000b800000000ba008000000f3048b8accb365a000000000f23d00f21f835100000020f23f8450f2284"}}, @set_irq_handler={0xc8, 0x20, {0x6, 0x2}}], 0x182}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x44005}, 0x4000000) syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x1, 0x2, &(0x7f00000001c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, r2}, 0x94) syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x10000, 0x4, &(0x7f0000000100)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r8, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="b9800000c00f3235000400000f20e3e30f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x68}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x8004) 1m20.792413143s ago: executing program 4 (id=3888): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x17b, 0x44801}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040000}, 0x4018800) (async) r1 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0xfffffffe, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xf0f041, 0x2, '\x00', @value=0x1}}) 1m20.604673462s ago: executing program 6 (id=3890): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014640000000c0a010100000001000000000a0000060900020073797a31000000000900010073797a31000000003800038034000080040001800c000540000000000000004914000b8010009eac4fd901006f626a72656600000c0004"], 0xd0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1m14.70325501s ago: executing program 4 (id=3891): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x5, 0x0, 0x1000000, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xf}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000050) 1m14.466828148s ago: executing program 5 (id=3892): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r1, 0x8010aebb, &(0x7f00000000c0)={0x58000, 0xa000}) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000340)={'veth0_to_batadv\x00', 0x400006}) 1m14.466562414s ago: executing program 1 (id=3893): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x70bd25, 0x3, {0x0, 0x0, 0x0, 0x0, 0x14cc0, 0x58380}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m14.147456922s ago: executing program 6 (id=3894): syz_usb_connect(0x17aff7a88c855ce9, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x6, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x2, &(0x7f00000001c0)=ANY=[]}]}) syz_usb_connect$uac1(0x0, 0xb5, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x2a39, 0x3fd3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3, 0x3, 0x1, 0x9, 0xe0, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xad, 0x33}, [@input_terminal={0xc, 0x24, 0x2, 0x2, 0x206, 0x4, 0x18, 0x6, 0x8, 0x7}, @mixer_unit={0xb, 0x24, 0x4, 0x4, 0x6, "df50ca739b93"}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x305, 0x6, 0x1, 0x4}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x306, 0x5, 0x1, 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x40, 0x9}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x9, 0x8, 0x3, 0x7}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0x101, 0x5, 0x6}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xd, 0x1, 0xc5, {0x7, 0x25, 0x1, 0xc, 0x1, 0x1ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x0, 0x86, 0x80, {0x7, 0x25, 0x1, 0x4, 0x0, 0x1}}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x250, 0xe7, 0xaf, 0x7, 0x20, 0x4}, 0x0, 0x0, 0x8, [{0x0, 0x0}, {0x64, &(0x7f0000000440)=@string={0x64, 0x3, "1ac3b1dc9ef01b47458047f0d412760703769ad1b6cfad13dc7237e7b1b5068d506c870c97b260fa2972a84e571aa85ee63a82f4588eedaaa76f74722908a53980a13b655fee1e0b12109fd1524efcce6102ffba11b7e4484f8a8408b6cd6b864671"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x140c}}, {0x23, &(0x7f0000000080)=@string={0x23, 0x3, "387a141aff098907b86f376e025180e1ebc9fd9a0c6f3116fcf0f2b0b1cafb64bd"}}, {0x7d, &(0x7f0000000540)=@string={0xaf, 0x3, "502af8d7514a7071e8b34dcaabef5a27a019f69780f5022aa287bebf6822b6e1a01d9b6569096d5d64625b09d3dd14d3b4b699e522661d0af648addb7f80cbc9241d82bc4598bdf3d77022c61ddbec20bff55f431809cee3d7a374b6a34b656bdf401a4f8d3494e8aaf43700a7d2a2fd08637a922213db1063cfed"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x44d}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40f}}, {0x7e, &(0x7f0000000340)=@string={0x7e, 0x3, "69e709b1c52512a35d92be8807177dd7d34b116f3bcdce6ebf3425457e7186ea2e117d1da3d618f860999d9f98042b558c98e0694dce714ff43a629c60f1479eec56a9565f67360d5317e52cea4d3a689a60d4a3b7e08e19fe91980184e340563c26323d2a39100ae24395f19e4250654cf093b7d3bd88ad02fbbbde"}}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xb83}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m14.031577688s ago: executing program 9 (id=3895): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="0a00180003030303030300001800"], 0x40}}, 0x0) 1m13.729943788s ago: executing program 4 (id=3896): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') getdents64(r3, &(0x7f0000002f40)=""/4097, 0x1001) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) recvmsg$can_bcm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/122, 0x7a}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0xad8, 0x0, 0x7fffffffffffffff}, {0x400009f2, 0x0, 0x10000}]}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) 1m13.535683653s ago: executing program 1 (id=3897): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x0, 0x268, 0x300, 0x2a0, 0x268, 0x3b0, 0x460, 0x460, 0x3b0, 0x460, 0x9, 0x0, {[{{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xff000000, 0xffffffff], [0xff, 0x0, 0xff, 0xffffffff], 'nicvf0\x00', 'batadv_slave_1\x00', {0xff}, {0xff}, 0xff80, 0xa, 0x1, 0x10}, 0x0, 0x240, 0x2a0, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x80000000, 0xb, 0x0, 0x3, 0x0, 0x5, 0x9}}}, @common=@unspec=@limit={{0x48}, {0xfff, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x2e}, [0xffffff00, 0xffffff00, 0xffffff00, 0xffffffff], 0x4e20, 0x4e23, 0x4e22, 0x4e20, 0xfffff801, 0x883, 0x4, 0x0, 0x10001}}}, {{@ipv6={@private2, @remote, [0x0, 0xffffff00], [], 'ip6gretap0\x00', 'ip6_vti0\x00', {0xff}}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) 1m13.523203468s ago: executing program 9 (id=3898): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="e4010000100001000000000000000000fc420000000000000000000000000000000000000000000000000000000000000000ecdf000000000a00000000000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1e4}}, 0x44840) 1m12.930330139s ago: executing program 9 (id=3899): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200504, 0x0) close(r4) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x5}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7ff, 0x100000000, 0x6eb, 0x5, 0x7, 0x2c0b}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x3, 0xb}, {0xfff3, 0x6}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xb, 0x8, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x6008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m12.877965846s ago: executing program 5 (id=3900): socket(0x40000000015, 0x5, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0xd, 0xfffff034}, {0x50, 0x0, 0x5, 0xfffffffd}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x60000) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000100)=0xfffffffd) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, 0x0, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000040)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x12}, @mpls={[], @ipv4=@igmp={{0xb, 0x4, 0x0, 0x8, 0x34, 0x66, 0x0, 0x7, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}, @broadcast, {[@noop, @timestamp_prespec={0x44, 0x14, 0xb9, 0x3, 0x9, [{@multicast2, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}]}]}}, {0x12, 0xaf, 0x0, @empty}}}}, 0x42) 1m12.769459912s ago: executing program 1 (id=3901): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008030}, 0x24040084) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000080000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x8}], 0x2}, 0x5) 1m10.899901503s ago: executing program 5 (id=3902): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0xfffe}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}, 0x1, 0x2000000}, 0x0) 1m10.829510666s ago: executing program 6 (id=3903): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000030006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 1m10.316523787s ago: executing program 5 (id=3904): unshare(0x22020600) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, 0x715}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0xe, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 1m10.300766077s ago: executing program 9 (id=3905): unshare(0x22020400) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x39d}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) io_uring_enter(r0, 0x129, 0x14, 0x17, 0x0, 0xfffffd9a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, &(0x7f0000000600)={0x3, "a055babd9b8c29abbdd772a44c5518bc1661222efc50f8f5555dcf4617da81d7", 0x5, 0x80, 0x3, 0x6, 0x4, 0x1, 0xff7ffffa, 0x5}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0xda4f1000) socket$inet6_udplite(0xa, 0x2, 0x88) mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000180), 0xe8, 0x90102) ioctl$FE_SET_PROPERTY(r3, 0x40106f52, &(0x7f0000000100)={0x3, 0x0}) syz_open_dev$usbfs(0x0, 0x76, 0x101701) 1m9.629315474s ago: executing program 1 (id=3906): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a00d0000", 0x17}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 1m9.518941561s ago: executing program 6 (id=3907): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d41400000000000000010000000c000007", 0xfe60) 1m9.023554575s ago: executing program 1 (id=3908): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f00000000c0)={0x1, "3372a2cda7a78a43ea7b1653e93bcc46381d04f257acb5aceb0c0200f800", 0x2}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2020) r1 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0xb4) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000005c0)=r1, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x1, 0x12) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x80) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$packet(0x11, 0x3, 0x300) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r7, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="84f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e0000ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000dc0)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24a13cb604000000000000000000000000000000c7aa5035897b20a6c23f1fc4af2990c07f784b985a3de7740bd33848702930c247f16a8767c95607f82c8d34b74b9ad9cb4dcb192f1b5e9f7047d3a9f37055fdee478ef7568e4ef9d64789f06f367b8b9387a04c", 0x157}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab4", 0x15}, {&(0x7f0000001000)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb89780f947153fd1f3c787a347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c", 0x74}], 0x4}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="31fd", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000009c0)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c919408807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc958652d3649fb5533b717fdb6a57f85ad1f12807a34d1f525d379cba46534256914bacef59f10b95230231b6f4a846d07c8a94fd32a0813c510c97a4e8320467c78eeb85a7636360892a4bf65312c6c7724d3a49c2941d765ccd06ab987f5d1c4a58861b0d6b1b590bcd31bc2e9e95939f3", 0x123}], 0x1}}], 0x3, 0x2090) r8 = openat$cgroup_ro(r4, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x1, 0x12) 1m8.312328175s ago: executing program 6 (id=3909): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) io_setup(0x9, &(0x7f0000000000)=0x0) r2 = socket$pptp(0x18, 0x1, 0x2) io_submit(r1, 0x1, &(0x7f0000001200)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1ff, r2, 0x0}]) io_getevents(r1, 0x0, 0x3c, 0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3938700}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0x2, 0xb}, {0xfff3, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0xcbf, 0x41b5, 0x2, 0x9, 0x9, 0x44a0, 0x8, 0x5}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x200c000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) io_setup(0x9, &(0x7f0000000000)) (async) socket$pptp(0x18, 0x1, 0x2) (async) io_submit(r1, 0x1, &(0x7f0000001200)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1ff, r2, 0x0}]) (async) io_getevents(r1, 0x0, 0x3c, 0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3938700}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) close(r3) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) socket$unix(0x1, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0x2, 0xb}, {0xfff3, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0xcbf, 0x41b5, 0x2, 0x9, 0x9, 0x44a0, 0x8, 0x5}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x200c000) (async) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) 1m8.181059056s ago: executing program 9 (id=3910): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000040000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) 1m7.495075975s ago: executing program 4 (id=3911): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0xe8, 0xc8, 0xffffffff, 0xffffffff, 0xe8, 0x288, 0xe8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x800000000000000}}, {0x28}}}}, 0x3b8) 1m7.365904965s ago: executing program 9 (id=3912): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x6, 0xd21, 0x101, 0x6, 0x5, 0xbd, 0x100, 0x4}}}}]}, 0x58}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0x42, 0x4, 0x358, 0xffffffff, 0x1c0, 0x1c0, 0x0, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd8, 0x100, 0x0, {0x100000000000000}, [@common=@unspec=@time={{0x38}, {0x101, 0x4, 0x14b8b, 0xc476, 0x9, 0x8, 0x7}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xc0, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x5, 0x5]}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x88, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x200, 0x5, 0x1000, 0x7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r11, 0x15}, 0x80, &(0x7f0000000500)=[{&(0x7f00000002c0)="f2", 0x14}], 0x1}, 0x44) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24080) 1m0.154643545s ago: executing program 5 (id=3913): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) listen(r0, 0x2000005) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x1ff, 0x200, 0x5, 0x9, 0x1}, 0x14) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (fail_nth: 70) 0s ago: executing program 40 (id=3912): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x6, 0xd21, 0x101, 0x6, 0x5, 0xbd, 0x100, 0x4}}}}]}, 0x58}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0x42, 0x4, 0x358, 0xffffffff, 0x1c0, 0x1c0, 0x0, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd8, 0x100, 0x0, {0x100000000000000}, [@common=@unspec=@time={{0x38}, {0x101, 0x4, 0x14b8b, 0xc476, 0x9, 0x8, 0x7}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xc0, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x5, 0x5]}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x88, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x200, 0x5, 0x1000, 0x7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r11, 0x15}, 0x80, &(0x7f0000000500)=[{&(0x7f00000002c0)="f2", 0x14}], 0x1}, 0x44) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24080) kernel console output (not intermixed with test programs): 826.769000][T17478] binder: BINDER_SET_CONTEXT_MGR already set [ 826.775047][T17478] binder: 17470:17478 ioctl 4018620d 200000004a80 returned -16 [ 827.027086][ T5907] usb 7-1: Using ep0 maxpacket: 16 [ 827.034273][ T5907] usb 7-1: config 0 has no interfaces? [ 827.061148][ T5907] usb 7-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 827.144921][ T5907] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.192363][ T5907] usb 7-1: config 0 descriptor?? [ 827.306980][ T5893] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 827.467179][ T5893] usb 9-1: Using ep0 maxpacket: 8 [ 827.474586][ T5893] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 827.495336][ T5893] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 827.517790][ T5893] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 827.528489][ T5893] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 827.542361][ T5893] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 827.552256][ T5893] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.799700][ T5893] usb 9-1: GET_CAPABILITIES returned 0 [ 827.806864][ T5893] usbtmc 9-1:16.0: can't read capabilities [ 828.075024][T17493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 828.115899][T17493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 829.612458][T17489] netlink: 'syz.4.3277': attribute type 12 has an invalid length. [ 829.621245][T17489] netlink: 'syz.4.3277': attribute type 29 has an invalid length. [ 829.629159][T17489] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3277'. [ 829.640072][T17489] netlink: 'syz.4.3277': attribute type 2 has an invalid length. [ 829.671477][T17489] netlink: 23 bytes leftover after parsing attributes in process `syz.4.3277'. [ 829.760407][ T5893] usb 7-1: USB disconnect, device number 29 [ 829.915222][T17505] x_tables: duplicate entry at hook 2 [ 829.926807][T17499] syzkaller0: entered promiscuous mode [ 829.942327][T17499] syzkaller0: entered allmulticast mode [ 830.054227][T17496] tipc: Enabled bearer , priority 0 [ 830.082991][T17494] tipc: Resetting bearer [ 830.163914][T17494] tipc: Disabling bearer [ 830.294541][ T5893] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 830.393531][T17526] fuse: Unknown parameter 'fsmagic' [ 830.446806][ T5893] usb 7-1: device descriptor read/64, error -71 [ 830.522742][T14296] usb 9-1: USB disconnect, device number 35 [ 830.678372][ T5907] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 830.706758][ T5893] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 830.790178][T17536] syzkaller0: entered promiscuous mode [ 830.796146][T17536] syzkaller0: entered allmulticast mode [ 830.860824][T17541] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3290'. [ 830.861209][ T5907] usb 10-1: Using ep0 maxpacket: 32 [ 830.875366][ T5893] usb 7-1: device descriptor read/64, error -71 [ 830.912178][ T5907] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 830.932388][ T5907] usb 10-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 830.970465][ T5907] usb 10-1: config 0 interface 0 has no altsetting 0 [ 830.974705][T17545] FAULT_INJECTION: forcing a failure. [ 830.974705][T17545] name failslab, interval 1, probability 0, space 0, times 0 [ 830.994014][ T5893] usb usb7-port1: attempt power cycle [ 831.000285][ T5907] usb 10-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 831.026725][ T5907] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.034862][ T5907] usb 10-1: Product: syz [ 831.047097][T17545] CPU: 0 UID: 0 PID: 17545 Comm: syz.1.3291 Tainted: G L syzkaller #0 PREEMPT(full) [ 831.047132][T17545] Tainted: [L]=SOFTLOCKUP [ 831.047150][T17545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 831.047162][T17545] Call Trace: [ 831.047171][T17545] [ 831.047180][T17545] dump_stack_lvl+0xe8/0x150 [ 831.047213][T17545] should_fail_ex+0x412/0x560 [ 831.047250][T17545] should_failslab+0xa8/0x100 [ 831.047279][T17545] __kmalloc_cache_noprof+0x88/0x660 [ 831.047311][T17545] ? sctp_add_bind_addr+0x8c/0x370 [ 831.047344][T17545] sctp_add_bind_addr+0x8c/0x370 [ 831.047370][T17545] sctp_copy_local_addr_list+0x314/0x4f0 [ 831.047397][T17545] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 831.047419][T17545] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 831.047444][T17545] ? sctp_v6_is_any+0x64/0x80 [ 831.047469][T17545] ? sctp_copy_one_addr+0x93/0x360 [ 831.047494][T17545] sctp_bind_addr_copy+0xb3/0x3c0 [ 831.047517][T17545] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 831.047551][T17545] sctp_connect_new_asoc+0x2ff/0x6b0 [ 831.047581][T17545] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 831.047615][T17545] ? __local_bh_enable_ip+0xd0/0x130 [ 831.047640][T17545] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 831.047664][T17545] ? security_sctp_bind_connect+0x7e/0x2c0 [ 831.047702][T17545] sctp_sendmsg+0x1528/0x2c10 [ 831.047745][T17545] ? __pfx_sctp_sendmsg+0x10/0x10 [ 831.047773][T17545] ? aa_sk_perm+0x6d5/0x900 [ 831.047807][T17545] ? __pfx_aa_sk_perm+0x10/0x10 [ 831.047839][T17545] ? sock_rps_record_flow+0x19/0x400 [ 831.047866][T17545] ? __pfx_inet_sendmsg+0x10/0x10 [ 831.047904][T17545] ? inet_sendmsg+0x2f4/0x370 [ 831.047936][T17545] ? __pfx_inet_sendmsg+0x10/0x10 [ 831.047965][T17545] __sys_sendto+0x5de/0x710 [ 831.047993][T17545] ? __pfx___sys_sendto+0x10/0x10 [ 831.048014][T17545] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 831.048055][T17545] ? __fget_files+0x3a0/0x420 [ 831.048087][T17545] ? ksys_write+0x242/0x270 [ 831.048112][T17545] ? __pfx_ksys_write+0x10/0x10 [ 831.048148][T17545] __x64_sys_sendto+0xde/0x100 [ 831.048176][T17545] do_syscall_64+0x14d/0xf80 [ 831.048202][T17545] ? trace_irq_disable+0x3b/0x150 [ 831.048219][T17545] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.048240][T17545] ? clear_bhb_loop+0x40/0x90 [ 831.048265][T17545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.048285][T17545] RIP: 0033:0x7f6224b9c819 [ 831.048304][T17545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 831.048326][T17545] RSP: 002b:00007f6225b2b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 831.048349][T17545] RAX: ffffffffffffffda RBX: 00007f6224e15fa0 RCX: 00007f6224b9c819 [ 831.048363][T17545] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000004 [ 831.048376][T17545] RBP: 00007f6225b2b090 R08: 000020000005ffe4 R09: 000000000000001c [ 831.048389][T17545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 831.048402][T17545] R13: 00007f6224e16038 R14: 00007f6224e15fa0 R15: 00007f6224f3fa48 [ 831.048436][T17545] [ 831.049630][ T5907] usb 10-1: Manufacturer: syz [ 831.376279][ T5907] usb 10-1: SerialNumber: syz [ 831.389658][ T5907] usb 10-1: config 0 descriptor?? [ 831.396498][ T5893] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 831.452319][ T5893] usb 7-1: device descriptor read/8, error -71 [ 831.596095][T16447] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 831.708295][ T5893] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 831.757011][T16447] usb 2-1: device descriptor read/64, error -71 [ 831.765603][ T5893] usb 7-1: device descriptor read/8, error -71 [ 831.796801][ T5942] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 831.816302][ T5907] gs_usb 10-1:0.0: Configuring for 159 interfaces [ 831.888951][ T5893] usb usb7-port1: unable to enumerate USB device [ 831.970685][ T5942] usb 9-1: Using ep0 maxpacket: 16 [ 831.990804][ T5942] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 832.007173][ T5942] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 832.017115][T16447] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 832.042044][ T5942] usb 9-1: New USB device found, idVendor=046d, idProduct=0921, bcdDevice=ab.34 [ 832.056523][ T5942] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.064918][ T5942] usb 9-1: Product: syz [ 832.074195][ T5942] usb 9-1: Manufacturer: syz [ 832.078932][ T5942] usb 9-1: SerialNumber: syz [ 832.096523][ T5942] usb 9-1: config 0 descriptor?? [ 832.159624][T16447] usb 2-1: device descriptor read/64, error -71 [ 832.235236][ T5907] gs_usb 10-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 832.245393][ T5907] gs_usb 10-1:0.0: probe with driver gs_usb failed with error -71 [ 832.266944][ T5907] usb 10-1: USB disconnect, device number 33 [ 832.286168][T16447] usb usb2-port1: attempt power cycle [ 832.346262][ T5942] gspca_main: tv8532-2.14.0 probing 046d:0921 [ 832.417059][ T5942] usb 9-1: USB disconnect, device number 36 [ 832.636706][T16447] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 832.668515][T16447] usb 2-1: device descriptor read/8, error -71 [ 832.967532][T16447] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 833.020958][T16447] usb 2-1: device descriptor read/8, error -71 [ 833.026801][T17569] kernel profiling enabled (shift: 9) [ 833.063438][T17569] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3298'. [ 833.144061][T16447] usb usb2-port1: unable to enumerate USB device [ 834.198018][T17571] netlink: 'syz.6.3297': attribute type 29 has an invalid length. [ 834.210750][T17571] netlink: 148 bytes leftover after parsing attributes in process `syz.6.3297'. [ 834.251233][T17569] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 834.446481][T17582] syzkaller0: entered promiscuous mode [ 834.498599][T17584] xt_CT: No such helper "syz1" [ 834.499835][T17582] syzkaller0: entered allmulticast mode [ 835.217031][T17622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3309'. [ 835.225975][T17622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3309'. [ 835.340066][T17621] syzkaller0: entered promiscuous mode [ 835.352632][T17621] syzkaller0: entered allmulticast mode [ 835.812069][T14296] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 836.009013][T14296] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 836.046839][T14296] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 836.060905][T14296] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.114853][T14296] usb 2-1: config 0 descriptor?? [ 836.274746][T17641] netlink: 'syz.8.3316': attribute type 3 has an invalid length. [ 836.296594][T17641] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3316'. [ 836.307175][T17641] netlink: 'syz.8.3316': attribute type 3 has an invalid length. [ 836.315110][T17641] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3316'. [ 836.339111][T17641] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3316'. [ 836.556499][T14296] keytouch 0003:0926:3333.0023: fixing up Keytouch IEC report descriptor [ 836.620030][T14296] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0023/input/input46 [ 836.861913][T14296] keytouch 0003:0926:3333.0023: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 837.006710][T14296] usb 2-1: USB disconnect, device number 46 [ 837.246429][T17655] fido_id[17655]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 838.666500][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 838.666520][ T29] audit: type=1800 audit(1775990531.700:903): pid=17676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3327" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=70071 res=0 errno=0 [ 839.634588][T17654] netlink: 'syz.8.3321': attribute type 12 has an invalid length. [ 839.643958][T17654] netlink: 'syz.8.3321': attribute type 29 has an invalid length. [ 839.652118][T17654] netlink: 148 bytes leftover after parsing attributes in process `syz.8.3321'. [ 839.661338][T17654] netlink: 'syz.8.3321': attribute type 2 has an invalid length. [ 839.670606][T17654] netlink: 23 bytes leftover after parsing attributes in process `syz.8.3321'. [ 839.752536][T17664] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 839.821652][T17682] tipc: Enabling of bearer rejected, failed to enable media [ 839.990566][T17691] FAULT_INJECTION: forcing a failure. [ 839.990566][T17691] name failslab, interval 1, probability 0, space 0, times 0 [ 840.024389][T17691] CPU: 1 UID: 0 PID: 17691 Comm: syz.9.3332 Tainted: G L syzkaller #0 PREEMPT(full) [ 840.024423][T17691] Tainted: [L]=SOFTLOCKUP [ 840.024431][T17691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 840.024443][T17691] Call Trace: [ 840.024452][T17691] [ 840.024461][T17691] dump_stack_lvl+0xe8/0x150 [ 840.024495][T17691] should_fail_ex+0x412/0x560 [ 840.024532][T17691] should_failslab+0xa8/0x100 [ 840.024561][T17691] __kmalloc_cache_noprof+0x88/0x660 [ 840.024583][T17691] ? __sctp_v6_cmp_addr+0x1dc/0x510 [ 840.024605][T17691] ? sctp_v6_cmp_addr+0x15/0xd0 [ 840.024625][T17691] ? sctp_add_bind_addr+0x8c/0x370 [ 840.024652][T17691] sctp_add_bind_addr+0x8c/0x370 [ 840.024677][T17691] sctp_copy_local_addr_list+0x314/0x4f0 [ 840.024704][T17691] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 840.024726][T17691] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 840.024750][T17691] ? sctp_v6_is_any+0x64/0x80 [ 840.024774][T17691] ? sctp_copy_one_addr+0x93/0x360 [ 840.024799][T17691] sctp_bind_addr_copy+0xb3/0x3c0 [ 840.024822][T17691] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 840.024865][T17691] sctp_connect_new_asoc+0x2ff/0x6b0 [ 840.024896][T17691] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 840.024929][T17691] ? __local_bh_enable_ip+0xd0/0x130 [ 840.024953][T17691] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 840.024978][T17691] ? security_sctp_bind_connect+0x7e/0x2c0 [ 840.025007][T17691] sctp_sendmsg+0x1528/0x2c10 [ 840.025050][T17691] ? __pfx_sctp_sendmsg+0x10/0x10 [ 840.025079][T17691] ? aa_sk_perm+0x6d5/0x900 [ 840.025116][T17691] ? __pfx_aa_sk_perm+0x10/0x10 [ 840.025148][T17691] ? sock_rps_record_flow+0x19/0x400 [ 840.025174][T17691] ? __pfx_inet_sendmsg+0x10/0x10 [ 840.025202][T17691] ? inet_sendmsg+0x2f4/0x370 [ 840.025228][T17691] ? __pfx_inet_sendmsg+0x10/0x10 [ 840.025256][T17691] __sys_sendto+0x5de/0x710 [ 840.025284][T17691] ? __pfx___sys_sendto+0x10/0x10 [ 840.025305][T17691] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 840.025347][T17691] ? __fget_files+0x3a0/0x420 [ 840.025378][T17691] ? ksys_write+0x242/0x270 [ 840.025404][T17691] ? __pfx_ksys_write+0x10/0x10 [ 840.025432][T17691] __x64_sys_sendto+0xde/0x100 [ 840.025460][T17691] do_syscall_64+0x14d/0xf80 [ 840.025486][T17691] ? trace_irq_disable+0x3b/0x150 [ 840.025504][T17691] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.025524][T17691] ? clear_bhb_loop+0x40/0x90 [ 840.025549][T17691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.025568][T17691] RIP: 0033:0x7fe4fd79c819 [ 840.025588][T17691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 840.025604][T17691] RSP: 002b:00007fe4fe5e9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 840.025628][T17691] RAX: ffffffffffffffda RBX: 00007fe4fda15fa0 RCX: 00007fe4fd79c819 [ 840.025642][T17691] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000004 [ 840.025656][T17691] RBP: 00007fe4fe5e9090 R08: 000020000005ffe4 R09: 000000000000001c [ 840.025669][T17691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 840.025681][T17691] R13: 00007fe4fda16038 R14: 00007fe4fda15fa0 R15: 00007fe4fdb3fa48 [ 840.025715][T17691] [ 840.086992][ T5942] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 840.196251][T17694] : left promiscuous mode [ 840.540283][ T5942] usb 9-1: Using ep0 maxpacket: 32 [ 840.545606][T17713] syzkaller0: entered promiscuous mode [ 840.551255][T17713] syzkaller0: entered allmulticast mode [ 840.558826][ T5942] usb 9-1: unable to get BOS descriptor or descriptor too short [ 840.582251][ T5942] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 840.622125][ T5942] usb 9-1: New USB device found, idVendor=09e8, idProduct=0021, bcdDevice= 0.40 [ 840.631888][ T5942] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.650882][ T5942] usb 9-1: Product: syz [ 840.665634][ T5942] usb 9-1: Manufacturer: syz [ 840.672324][ T5942] usb 9-1: SerialNumber: syz [ 840.771356][T17716] syzkaller0: entered promiscuous mode [ 840.786052][ T29] audit: type=1326 audit(1775990533.820:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17717 comm="syz.6.3340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1892b9c819 code=0x7ffc0000 [ 840.789889][T17716] syzkaller0: entered allmulticast mode [ 840.838166][ T29] audit: type=1326 audit(1775990533.820:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17717 comm="syz.6.3340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1892b9c819 code=0x7ffc0000 [ 840.873859][ T29] audit: type=1326 audit(1775990533.820:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17717 comm="syz.6.3340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1892b9c819 code=0x7ffc0000 [ 840.904189][ T29] audit: type=1326 audit(1775990533.830:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17717 comm="syz.6.3340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1892b9c819 code=0x7ffc0000 [ 840.938234][ T29] audit: type=1326 audit(1775990533.830:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17717 comm="syz.6.3340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1892b9c819 code=0x7ffc0000 [ 840.977287][ T29] audit: type=1326 audit(1775990533.830:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17717 comm="syz.6.3340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1892b9c819 code=0x7ffc0000 [ 841.004915][ T29] audit: type=1326 audit(1775990533.820:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17717 comm="syz.6.3340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1892b9c819 code=0x7ffc0000 [ 841.031576][ T29] audit: type=1326 audit(1775990533.850:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17717 comm="syz.6.3340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1892b9c819 code=0x7ffc0000 [ 841.112922][ T29] audit: type=1326 audit(1775990533.850:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17717 comm="syz.6.3340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1892b9c819 code=0x7ffc0000 [ 841.157545][T17725] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3341'. [ 841.412631][T17729] xt_CT: No such helper "syz1" [ 841.496100][ T5942] usb 9-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 841.519063][ T5942] usb 9-1: MIDIStreaming interface descriptor not found [ 841.780125][ T5942] usb 9-1: USB disconnect, device number 37 [ 841.898321][T16776] udevd[16776]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 842.308912][ T5942] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 842.480760][ T5942] usb 9-1: Using ep0 maxpacket: 16 [ 842.514994][ T5942] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 842.525580][ T5942] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 842.538691][ T5942] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 842.548085][ T5942] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.556224][ T5942] usb 9-1: Product: syz [ 842.567296][ T5942] usb 9-1: Manufacturer: syz [ 842.571950][ T5942] usb 9-1: SerialNumber: syz [ 844.422052][T17756] syzkaller0: entered promiscuous mode [ 844.436737][T17756] syzkaller0: entered allmulticast mode [ 844.941587][ T5907] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 845.096781][ T5907] usb 5-1: Using ep0 maxpacket: 16 [ 845.103826][ T5907] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 845.126718][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.138160][ T5907] usb 5-1: config 0 descriptor?? [ 845.202432][T17282] Bluetooth: hci1: unexpected event for opcode 0x0c22 [ 845.327612][T17788] syzkaller0: entered promiscuous mode [ 845.333178][T17788] syzkaller0: entered allmulticast mode [ 845.584880][ T5907] konepure 0003:1E7D:2DB4.0024: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.4-1/input0 [ 845.869440][T14296] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 845.904991][T17770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 845.915582][T17770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 846.113764][T14296] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 846.128203][T14296] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 846.137912][T14296] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.182721][T14296] usb 10-1: config 0 descriptor?? [ 846.200411][T17811] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3366'. [ 846.214187][T14296] pwc: Askey VC010 type 2 USB webcam detected. [ 846.451502][ T5893] usb 5-1: USB disconnect, device number 70 [ 846.465127][T17800] netlink: 'syz.9.3363': attribute type 3 has an invalid length. [ 846.733458][T14296] pwc: recv_control_msg error -32 req 02 val 2b00 [ 846.754809][T14296] pwc: recv_control_msg error -32 req 02 val 2700 [ 846.762991][T14296] pwc: recv_control_msg error -32 req 02 val 2c00 [ 846.781562][T14296] pwc: recv_control_msg error -32 req 04 val 1000 [ 846.805400][T14296] pwc: recv_control_msg error -32 req 04 val 1300 [ 846.814954][T14296] pwc: recv_control_msg error -32 req 04 val 1400 [ 846.835408][T14296] pwc: recv_control_msg error -32 req 02 val 2000 [ 847.062911][T14296] pwc: recv_control_msg error -32 req 04 val 1500 [ 847.072051][T17819] netlink: 'syz.4.3369': attribute type 1 has an invalid length. [ 847.086593][T14296] pwc: recv_control_msg error -32 req 02 val 2500 [ 847.104567][T14296] pwc: recv_control_msg error -32 req 02 val 2400 [ 847.120608][T14296] pwc: recv_control_msg error -32 req 02 val 2600 [ 847.143612][T14296] pwc: recv_control_msg error -32 req 02 val 2900 [ 847.151979][T14296] pwc: recv_control_msg error -32 req 02 val 2800 [ 847.175269][T14296] pwc: recv_control_msg error -32 req 04 val 1100 [ 847.208809][T14296] pwc: Registered as video103. [ 847.291330][T14296] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input47 [ 847.657374][ T5942] usb 9-1: 0:2 : does not exist [ 847.671235][ T5942] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 847.861826][ T5942] usb 9-1: USB disconnect, device number 38 [ 849.271580][T17810] ip6gretap0: entered promiscuous mode [ 849.279121][T17810] macvtap1: entered promiscuous mode [ 849.286530][T17810] ip6gretap0: left promiscuous mode [ 849.336553][T17811] bridge_slave_1: left allmulticast mode [ 849.343131][T17811] bridge_slave_1: left promiscuous mode [ 849.349900][T17811] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.359365][T17811] bridge_slave_0: left allmulticast mode [ 849.365053][T17811] bridge_slave_0: left promiscuous mode [ 849.371754][T17811] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.485127][T17825] netlink: 'syz.8.3370': attribute type 12 has an invalid length. [ 849.498875][T14296] usb 10-1: USB disconnect, device number 34 [ 849.502446][T17825] netlink: 'syz.8.3370': attribute type 29 has an invalid length. [ 849.515248][T17825] netlink: 148 bytes leftover after parsing attributes in process `syz.8.3370'. [ 849.524885][T17825] netlink: 'syz.8.3370': attribute type 2 has an invalid length. [ 849.539542][T17825] netlink: 23 bytes leftover after parsing attributes in process `syz.8.3370'. [ 849.661443][T17829] program syz.9.3372 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 849.767658][T17834] syzkaller0: entered promiscuous mode [ 849.775550][T17834] syzkaller0: entered allmulticast mode [ 849.898669][T17834] tipc: Enabled bearer , priority 0 [ 849.930708][T17830] tipc: Resetting bearer [ 849.984370][T17830] tipc: Disabling bearer [ 850.115728][T17853] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 850.131023][T17853] netlink: 'syz.1.3378': attribute type 10 has an invalid length. [ 850.335649][T17864] x_tables: duplicate entry at hook 2 [ 850.340117][T17853] team0 (unregistering): Port device team_slave_0 removed [ 850.462344][T17853] team0 (unregistering): Port device team_slave_1 removed [ 850.543033][T17865] syzkaller0: entered promiscuous mode [ 850.552577][T17865] syzkaller0: entered allmulticast mode [ 850.745197][T17868] syzkaller0: entered promiscuous mode [ 850.764777][T17868] syzkaller0: entered allmulticast mode [ 850.772727][T17872] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3386'. [ 850.983870][T17877] xt_CT: No such helper "syz1" [ 851.126798][ T796] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 851.299795][ T796] usb 5-1: Using ep0 maxpacket: 16 [ 851.328418][ T796] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 851.370825][ T796] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 851.409823][ T796] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 851.436747][ T796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.455700][ T796] usb 5-1: Product: syz [ 851.466766][ T796] usb 5-1: Manufacturer: syz [ 851.482254][ T796] usb 5-1: SerialNumber: syz [ 851.506988][ T9] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 851.696970][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 851.711324][ T9] usb 10-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 851.722173][ T9] usb 10-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 851.752806][ T9] usb 10-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 851.766802][ T9] usb 10-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 851.821393][ T9] usb 10-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 851.852161][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.861219][ T9] usb 10-1: Product: syz [ 851.865604][ T9] usb 10-1: Manufacturer: syz [ 851.871400][ T9] usb 10-1: SerialNumber: syz [ 851.916002][ C0] imon 10-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 851.926694][ T9] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:155.0/input/input48 [ 852.220341][ T9] imon 10-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 852.229047][ T9] (id 0x00) [ 852.450188][ T9] rc_core: IR keymap rc-imon-pad not found [ 852.456207][ T9] Registered IR keymap rc-empty [ 852.468274][ T9] imon 10-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 852.479581][ T9] imon 10-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 852.495505][ T9] imon:send_packet: packet tx failed (-71) [ 852.534028][ T9] imon 10-1:155.0: remote input dev register failed [ 852.541219][ T9] imon 10-1:155.0: imon_init_intf0: rc device setup failed [ 852.626004][ T9] imon 10-1:155.0: unable to initialize intf0, err 0 [ 852.634172][ T9] imon:imon_probe: failed to initialize context! [ 852.674819][ T9] imon 10-1:155.0: unable to register, err -19 [ 852.705193][ T9] usb 10-1: USB disconnect, device number 35 [ 853.183501][T17897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3392'. [ 853.781075][ T796] usb 5-1: 0:2 : does not exist [ 853.791915][ T796] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 853.831767][ T796] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 853.849938][ T796] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 853.931602][ T796] usb 5-1: USB disconnect, device number 71 [ 854.021701][T15089] udevd[15089]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 854.920332][T17912] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3395'. [ 855.262911][ T796] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 855.416819][ T796] usb 10-1: Using ep0 maxpacket: 16 [ 855.431837][ T796] usb 10-1: config 0 has no interfaces? [ 855.440703][ T796] usb 10-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 855.450824][ T796] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.464837][ T796] usb 10-1: config 0 descriptor?? [ 857.911012][T17935] syzkaller0: entered promiscuous mode [ 857.921418][T17935] syzkaller0: entered allmulticast mode [ 857.947271][T17935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3404'. [ 858.079839][ T796] usb 10-1: USB disconnect, device number 36 [ 858.495945][T17946] syzkaller0: entered promiscuous mode [ 858.502068][T17946] syzkaller0: entered allmulticast mode [ 858.629499][T17954] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3409'. [ 859.816908][T14792] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 859.980334][T14792] usb 10-1: config 127 has an invalid interface number: 135 but max is 0 [ 859.988980][T14792] usb 10-1: config 127 has no interface number 0 [ 859.995454][T14792] usb 10-1: too many endpoints for config 127 interface 135 altsetting 235: 105, using maximum allowed: 30 [ 860.008698][T14792] usb 10-1: config 127 interface 135 altsetting 235 has 0 endpoint descriptors, different from the interface descriptor's value: 105 [ 860.022785][T14792] usb 10-1: config 127 interface 135 has no altsetting 0 [ 860.032681][T14792] usb 10-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e [ 860.054268][T14792] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.156771][ T796] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 860.317633][T17968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 860.327815][T17968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 860.345109][T17968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 860.375859][T17968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 860.386803][ T796] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 860.419532][ T796] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 2863, setting to 1024 [ 860.447984][ T796] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 860.467584][ T796] usb 2-1: New USB device found, idVendor=0582, idProduct=1014, bcdDevice=bb.9d [ 860.479443][ T796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.524966][T17976] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 860.803558][ T796] usb 2-1: USB disconnect, device number 47 [ 862.004981][T17965] vxlan0: entered promiscuous mode [ 862.010610][T17965] vxlan0: entered allmulticast mode [ 862.061764][ T1046] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 862.078735][T14792] usb 10-1: string descriptor 0 read error: -71 [ 862.096370][ T1046] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 862.110684][T14792] usb 10-1: USB disconnect, device number 37 [ 862.120590][ T1046] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 862.150750][ T1046] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 862.184311][T17983] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3420'. [ 862.272440][T17985] netlink: 'syz.8.3421': attribute type 12 has an invalid length. [ 862.281684][T17985] netlink: 'syz.8.3421': attribute type 29 has an invalid length. [ 862.289822][T17985] netlink: 148 bytes leftover after parsing attributes in process `syz.8.3421'. [ 862.304433][T17985] netlink: 'syz.8.3421': attribute type 2 has an invalid length. [ 862.314378][T17985] netlink: 23 bytes leftover after parsing attributes in process `syz.8.3421'. [ 862.509028][T17992] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3422'. [ 862.868144][ T9] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 862.964445][T18009] syzkaller0: entered promiscuous mode [ 862.976923][T18009] syzkaller0: entered allmulticast mode [ 863.000759][T18011] xt_CT: No such helper "syz1" [ 863.049135][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 863.075551][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 863.096965][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 863.122888][T18019] xt_TCPMSS: Only works on TCP SYN packets [ 863.132375][T18019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3433'. [ 863.193449][ T9] usb 7-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 863.209852][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.443155][ T9] usb 7-1: config 0 descriptor?? [ 863.902885][T18004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 863.932687][T18004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 864.441339][ T9] apple 0003:05AC:024B.0025: fixing up MacBook JIS keyboard report descriptor [ 864.454249][ T9] apple 0003:05AC:024B.0025: unknown global tag 0xe [ 864.461008][ T9] apple 0003:05AC:024B.0025: item 0 1 1 14 parsing failed [ 864.474225][ T9] apple 0003:05AC:024B.0025: parse failed [ 864.480696][ T9] apple 0003:05AC:024B.0025: probe with driver apple failed with error -22 [ 864.504552][ T9] usb 7-1: USB disconnect, device number 34 [ 865.054480][T18034] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3438'. [ 865.253285][T18037] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3439'. [ 865.267621][T18037] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3439'. [ 866.742540][T18020] sit1: entered allmulticast mode [ 866.999298][T18049] netlink: 'syz.8.3442': attribute type 3 has an invalid length. [ 867.041051][T18049] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3442'. [ 867.052211][T18053] x_tables: unsorted entry at hook 2 [ 867.095061][T18049] netlink: 'syz.8.3442': attribute type 3 has an invalid length. [ 867.135006][T18049] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3442'. [ 867.168904][T18049] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3442'. [ 867.183708][T18059] syzkaller0: entered promiscuous mode [ 867.189892][T18059] syzkaller0: entered allmulticast mode [ 867.258604][T18062] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3445'. [ 867.523031][T18066] syzkaller0: entered promiscuous mode [ 867.528858][T18066] syzkaller0: entered allmulticast mode [ 867.543329][T18068] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3449'. [ 867.553190][T18068] netlink: 'syz.9.3449': attribute type 30 has an invalid length. [ 867.556736][T14792] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 867.604929][T18069] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3449'. [ 867.614106][T18069] netlink: 'syz.9.3449': attribute type 30 has an invalid length. [ 867.747296][T14792] usb 9-1: Using ep0 maxpacket: 16 [ 867.754360][T14792] usb 9-1: config 0 has an invalid interface number: 104 but max is 1 [ 867.762936][T14792] usb 9-1: config 0 has an invalid interface number: 104 but max is 1 [ 867.774540][T14792] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 867.784883][T14792] usb 9-1: config 0 has no interface number 0 [ 867.791439][T14792] usb 9-1: config 0 interface 104 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 867.802907][T14792] usb 9-1: config 0 interface 104 has no altsetting 1 [ 867.829161][T14792] usb 9-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 867.839007][T14792] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.848765][T14792] usb 9-1: Product: syz [ 867.857120][T14792] usb 9-1: Manufacturer: syz [ 867.861953][T14792] usb 9-1: SerialNumber: syz [ 867.889678][T14792] usb 9-1: config 0 descriptor?? [ 867.901739][T14792] asix 9-1:0.104: probe with driver asix failed with error -22 [ 868.018940][T18080] can: request_module (can-proto-0) failed. [ 868.157702][ T5893] usb 9-1: USB disconnect, device number 39 [ 868.209123][T14792] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 868.366782][T14792] usb 7-1: Using ep0 maxpacket: 16 [ 868.374072][T14792] usb 7-1: config 0 has no interfaces? [ 868.380687][T14792] usb 7-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 868.405946][T14792] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.437321][ T796] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 868.447520][T14792] usb 7-1: config 0 descriptor?? [ 868.589571][ T796] usb 5-1: device descriptor read/64, error -71 [ 868.831714][ T796] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 868.918987][T18111] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3466'. [ 868.995462][ T796] usb 5-1: device descriptor read/64, error -71 [ 869.147339][ T796] usb usb5-port1: attempt power cycle [ 869.179477][T18121] netlink: 'syz.9.3470': attribute type 12 has an invalid length. [ 869.202779][T18121] netlink: 'syz.9.3470': attribute type 29 has an invalid length. [ 869.243536][T18121] netlink: 'syz.9.3470': attribute type 2 has an invalid length. [ 869.506732][ T796] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 869.587508][ T796] usb 5-1: device descriptor read/8, error -71 [ 869.846724][ T796] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 869.892334][ T796] usb 5-1: device descriptor read/8, error -71 [ 870.027811][ T796] usb usb5-port1: unable to enumerate USB device [ 870.276943][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.284331][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.390786][T18151] __nla_validate_parse: 2 callbacks suppressed [ 870.390800][T18151] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3482'. [ 870.396908][ T9] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 870.495313][T18151] libceph: resolve '0..' (ret=-3): failed [ 870.649056][ T9] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 870.660763][ T9] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 870.677101][ T9] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 870.687829][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.021043][T14792] usb 7-1: USB disconnect, device number 35 [ 871.153080][T18148] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 871.174974][ T9] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 871.422089][T18144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 871.603394][T18144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 872.225739][T18173] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3489'. [ 872.865238][T18190] netlink: 'syz.1.3496': attribute type 3 has an invalid length. [ 872.913543][T18190] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3496'. [ 872.996754][T18190] netlink: 'syz.1.3496': attribute type 3 has an invalid length. [ 873.042047][T18190] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3496'. [ 873.084763][T18190] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3496'. [ 873.106584][ T5908] usb 10-1: USB disconnect, device number 38 [ 873.418185][T18207] syzkaller0: entered promiscuous mode [ 873.432451][T18207] syzkaller0: entered allmulticast mode [ 873.594846][ T35] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.790779][ T35] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.940026][ T35] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.105763][ T35] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.176270][T18227] netlink: 80 bytes leftover after parsing attributes in process `syz.9.3507'. [ 874.252213][T16380] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 874.272548][T16380] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 874.284687][T16380] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 874.296947][T16380] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 874.327546][T16380] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 874.423770][T18232] geneve2: entered promiscuous mode [ 874.424507][T18228] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 875.026713][T18245] sit2: entered promiscuous mode [ 875.298763][T18254] FAULT_INJECTION: forcing a failure. [ 875.298763][T18254] name failslab, interval 1, probability 0, space 0, times 0 [ 875.315733][T18254] CPU: 0 UID: 0 PID: 18254 Comm: syz.6.3518 Tainted: G L syzkaller #0 PREEMPT(full) [ 875.315767][T18254] Tainted: [L]=SOFTLOCKUP [ 875.315782][T18254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 875.315794][T18254] Call Trace: [ 875.315802][T18254] [ 875.315811][T18254] dump_stack_lvl+0xe8/0x150 [ 875.315845][T18254] should_fail_ex+0x412/0x560 [ 875.315885][T18254] should_failslab+0xa8/0x100 [ 875.315913][T18254] __kmalloc_cache_noprof+0x88/0x660 [ 875.315935][T18254] ? __sctp_v6_cmp_addr+0x1dc/0x510 [ 875.315956][T18254] ? sctp_v6_cmp_addr+0x15/0xd0 [ 875.315978][T18254] ? sctp_add_bind_addr+0x8c/0x370 [ 875.316004][T18254] sctp_add_bind_addr+0x8c/0x370 [ 875.316029][T18254] sctp_copy_local_addr_list+0x314/0x4f0 [ 875.316053][T18254] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 875.316073][T18254] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 875.316095][T18254] ? sctp_v6_is_any+0x64/0x80 [ 875.316117][T18254] ? sctp_copy_one_addr+0x93/0x360 [ 875.316141][T18254] sctp_bind_addr_copy+0xb3/0x3c0 [ 875.316162][T18254] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 875.316191][T18254] sctp_connect_new_asoc+0x2ff/0x6b0 [ 875.316218][T18254] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 875.316247][T18254] ? __local_bh_enable_ip+0xd0/0x130 [ 875.316270][T18254] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 875.316294][T18254] ? security_sctp_bind_connect+0x7e/0x2c0 [ 875.316322][T18254] sctp_sendmsg+0x1528/0x2c10 [ 875.316360][T18254] ? __pfx_sctp_sendmsg+0x10/0x10 [ 875.316386][T18254] ? aa_sk_perm+0x6d5/0x900 [ 875.316422][T18254] ? __pfx_aa_sk_perm+0x10/0x10 [ 875.316453][T18254] ? sock_rps_record_flow+0x19/0x400 [ 875.316478][T18254] ? __pfx_inet_sendmsg+0x10/0x10 [ 875.316506][T18254] ? inet_sendmsg+0x2f4/0x370 [ 875.316531][T18254] ? __pfx_inet_sendmsg+0x10/0x10 [ 875.316559][T18254] __sys_sendto+0x5de/0x710 [ 875.316586][T18254] ? __pfx___sys_sendto+0x10/0x10 [ 875.316605][T18254] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 875.316644][T18254] ? __fget_files+0x3a0/0x420 [ 875.316673][T18254] ? ksys_write+0x242/0x270 [ 875.316706][T18254] ? __pfx_ksys_write+0x10/0x10 [ 875.316735][T18254] __x64_sys_sendto+0xde/0x100 [ 875.316763][T18254] do_syscall_64+0x14d/0xf80 [ 875.316798][T18254] ? trace_irq_disable+0x3b/0x150 [ 875.316816][T18254] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.316834][T18254] ? clear_bhb_loop+0x40/0x90 [ 875.316859][T18254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.316888][T18254] RIP: 0033:0x7f1892b9c819 [ 875.316908][T18254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 875.316925][T18254] RSP: 002b:00007f1893ae4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 875.316948][T18254] RAX: ffffffffffffffda RBX: 00007f1892e15fa0 RCX: 00007f1892b9c819 [ 875.316963][T18254] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000004 [ 875.316976][T18254] RBP: 00007f1893ae4090 R08: 000020000005ffe4 R09: 000000000000001c [ 875.316989][T18254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 875.317000][T18254] R13: 00007f1892e16038 R14: 00007f1892e15fa0 R15: 00007f1892f3fa48 [ 875.317031][T18254] [ 875.793291][ T35] bridge_slave_1: left allmulticast mode [ 875.799048][ T35] bridge_slave_1: left promiscuous mode [ 875.804917][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 875.830711][ T35] bridge_slave_0: left allmulticast mode [ 875.836401][ T35] bridge_slave_0: left promiscuous mode [ 875.842161][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 876.232584][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 876.267530][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 876.291170][ T35] bond0 (unregistering): Released all slaves [ 876.391207][ T35] : left promiscuous mode [ 876.436809][T16380] Bluetooth: hci3: command tx timeout [ 876.525463][T18233] chnl_net:caif_netlink_parms(): no params data found [ 876.608045][ T35] tipc: Left network mode [ 876.721974][T18281] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3527'. [ 876.986209][T18233] bridge0: port 1(bridge_slave_0) entered blocking state [ 877.022648][T18233] bridge0: port 1(bridge_slave_0) entered disabled state [ 877.045474][T18233] bridge_slave_0: entered allmulticast mode [ 877.072369][T18233] bridge_slave_0: entered promiscuous mode [ 877.135475][T18233] bridge0: port 2(bridge_slave_1) entered blocking state [ 877.142696][ T9] usb 7-1: new low-speed USB device number 36 using dummy_hcd [ 877.163514][T18233] bridge0: port 2(bridge_slave_1) entered disabled state [ 877.237742][T18233] bridge_slave_1: entered allmulticast mode [ 877.277281][T18233] bridge_slave_1: entered promiscuous mode [ 877.336957][ T9] usb 7-1: Invalid ep0 maxpacket: 64 [ 877.699030][ T9] usb 7-1: new low-speed USB device number 37 using dummy_hcd [ 878.064307][ T35] hsr_slave_0: left promiscuous mode [ 878.127170][ T35] hsr_slave_1: left promiscuous mode [ 878.139448][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 878.172185][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 878.188893][ T9] usb 7-1: Invalid ep0 maxpacket: 64 [ 878.196420][ T9] usb usb7-port1: attempt power cycle [ 878.218949][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 878.253342][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 878.280931][ T35] veth1_macvtap: left promiscuous mode [ 878.302726][ T35] veth0_macvtap: left promiscuous mode [ 878.322929][ T35] veth1_vlan: left promiscuous mode [ 878.339858][ T35] veth0_vlan: left promiscuous mode [ 878.507353][T16380] Bluetooth: hci3: command tx timeout [ 878.536312][ T35] pim6reg (unregistering): left allmulticast mode [ 878.548460][ T5886] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 878.556714][ T9] usb 7-1: new low-speed USB device number 38 using dummy_hcd [ 878.593420][ T9] usb 7-1: Invalid ep0 maxpacket: 64 [ 878.686715][ T5886] usb 10-1: device descriptor read/64, error -71 [ 878.727422][ T9] usb 7-1: new low-speed USB device number 39 using dummy_hcd [ 878.767465][ T9] usb 7-1: Invalid ep0 maxpacket: 64 [ 878.773399][ T9] usb usb7-port1: unable to enumerate USB device [ 878.827709][ T35] team0 (unregistering): Port device team_slave_1 removed [ 878.854052][ T35] team0 (unregistering): Port device team_slave_0 removed [ 878.936714][ T5886] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 879.070434][ T5886] usb 10-1: device descriptor read/64, error -71 [ 879.102350][T18233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 879.133507][T18233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 879.187879][ T5886] usb usb10-port1: attempt power cycle [ 879.230850][T18233] team0: Port device team_slave_0 added [ 879.249948][T18233] team0: Port device team_slave_1 added [ 879.384543][T18233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 879.402193][T18233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 879.456723][T18233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 879.508348][T18233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 879.535185][T18233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 879.575642][ T5886] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 879.607861][ T5886] usb 10-1: device descriptor read/8, error -71 [ 879.614296][T18233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 879.802076][T18338] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3537'. [ 879.832183][T18233] hsr_slave_0: entered promiscuous mode [ 879.876802][ T5886] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 879.895611][T18233] hsr_slave_1: entered promiscuous mode [ 879.920169][ T5886] usb 10-1: device descriptor read/8, error -71 [ 879.927869][T18233] debugfs: 'hsr0' already exists in 'hsr' [ 879.933650][T18233] Cannot create hsr debugfs directory [ 880.038296][ T5886] usb usb10-port1: unable to enumerate USB device [ 880.065326][T18352] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3540'. [ 880.373997][T18354] syzkaller0: entered promiscuous mode [ 880.379739][T18354] syzkaller0: entered allmulticast mode [ 880.594210][T16380] Bluetooth: hci3: command tx timeout [ 881.153263][ T5942] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 881.321786][ T5942] usb 5-1: Using ep0 maxpacket: 32 [ 881.353078][ T5942] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 881.364161][ T5942] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 881.407523][ T5942] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 881.426434][ T5942] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 881.434985][ T5942] usb 5-1: Product: syz [ 881.449649][ T5942] usb 5-1: Manufacturer: syz [ 881.487499][ T5942] hub 5-1:4.0: USB hub found [ 881.534170][ T5908] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 881.692075][T18369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 881.703525][T18369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 881.725568][T18369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 881.735763][ T5908] usb 10-1: Using ep0 maxpacket: 8 [ 881.747249][T18369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 881.768533][ T5908] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 881.778563][ T5908] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 881.790022][ T5908] usb 10-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 881.801433][ T5908] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 881.816381][ T5908] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 881.830134][ T5908] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.865080][ T5908] usbtmc 10-1:16.0: bulk endpoints not found [ 882.016451][ T5942] hub 5-1:4.0: 7 ports detected [ 882.022044][ T5942] hub 5-1:4.0: insufficient power available to use all downstream ports [ 882.677040][T16380] Bluetooth: hci3: command tx timeout [ 883.080893][ T5942] hub 5-1:4.0: hub_hub_status failed (err = -32) [ 883.099163][ T5942] hub 5-1:4.0: config failed, can't get hub status (err -32) [ 883.547299][ T5908] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 883.727785][ T5908] usb 7-1: Using ep0 maxpacket: 8 [ 883.746369][ T5908] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 883.766694][ T5908] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 883.787288][ T5908] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 883.813686][ T5908] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 883.846719][ T5908] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 883.866313][ T5908] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.068205][ T5886] usb 5-1: USB disconnect, device number 76 [ 884.117110][ T5908] usb 7-1: GET_CAPABILITIES returned 0 [ 884.126054][ T5908] usbtmc 7-1:16.0: can't read capabilities [ 884.159637][T18233] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 884.180467][T18233] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 884.201903][T18233] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 884.211129][T14792] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 884.244076][T18233] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 884.284300][ T5886] usb 10-1: USB disconnect, device number 43 [ 884.357186][T14792] usb 2-1: device descriptor read/64, error -71 [ 884.389789][T18414] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3552'. [ 884.460132][T18233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 884.502270][T18233] 8021q: adding VLAN 0 to HW filter on device team0 [ 884.514308][T18416] syzkaller0: entered promiscuous mode [ 884.524023][T18416] syzkaller0: entered allmulticast mode [ 884.542369][T14785] bridge0: port 1(bridge_slave_0) entered blocking state [ 884.549646][T14785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 884.570340][T14785] bridge0: port 2(bridge_slave_1) entered blocking state [ 884.577608][T14785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 884.617335][T14792] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 884.758752][T14792] usb 2-1: device descriptor read/64, error -71 [ 884.803443][T18233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 884.861671][ T5893] usb 7-1: USB disconnect, device number 40 [ 884.877243][T14792] usb usb2-port1: attempt power cycle [ 884.952808][T18233] veth0_vlan: entered promiscuous mode [ 885.004718][T18233] veth1_vlan: entered promiscuous mode [ 885.163058][T18233] veth0_macvtap: entered promiscuous mode [ 885.200504][T18233] veth1_macvtap: entered promiscuous mode [ 885.247792][T14792] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 885.281180][T18233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 885.308362][T14792] usb 2-1: device descriptor read/8, error -71 [ 885.331032][T18233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 885.385437][ T1046] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.425687][ T1046] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.490261][ T1046] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.529280][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.557916][T14792] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 885.585108][T18455] FAULT_INJECTION: forcing a failure. [ 885.585108][T18455] name failslab, interval 1, probability 0, space 0, times 0 [ 885.613861][T14792] usb 2-1: device descriptor read/8, error -71 [ 885.627282][T18455] CPU: 0 UID: 0 PID: 18455 Comm: syz.9.3563 Tainted: G L syzkaller #0 PREEMPT(full) [ 885.627317][T18455] Tainted: [L]=SOFTLOCKUP [ 885.627325][T18455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 885.627344][T18455] Call Trace: [ 885.627352][T18455] [ 885.627361][T18455] dump_stack_lvl+0xe8/0x150 [ 885.627395][T18455] should_fail_ex+0x412/0x560 [ 885.627433][T18455] should_failslab+0xa8/0x100 [ 885.627460][T18455] __kmalloc_cache_noprof+0x88/0x660 [ 885.627483][T18455] ? __sctp_v6_cmp_addr+0x1dc/0x510 [ 885.627503][T18455] ? sctp_v6_cmp_addr+0x15/0xd0 [ 885.627524][T18455] ? sctp_add_bind_addr+0x8c/0x370 [ 885.627551][T18455] sctp_add_bind_addr+0x8c/0x370 [ 885.627578][T18455] sctp_copy_local_addr_list+0x314/0x4f0 [ 885.627604][T18455] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 885.627626][T18455] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 885.627650][T18455] ? sctp_v6_is_any+0x64/0x80 [ 885.627674][T18455] ? sctp_copy_one_addr+0x93/0x360 [ 885.627699][T18455] sctp_bind_addr_copy+0xb3/0x3c0 [ 885.627722][T18455] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 885.627755][T18455] sctp_connect_new_asoc+0x2ff/0x6b0 [ 885.627785][T18455] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 885.627819][T18455] ? __local_bh_enable_ip+0xd0/0x130 [ 885.627843][T18455] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 885.627869][T18455] ? security_sctp_bind_connect+0x7e/0x2c0 [ 885.627898][T18455] sctp_sendmsg+0x1528/0x2c10 [ 885.627940][T18455] ? __pfx_sctp_sendmsg+0x10/0x10 [ 885.627969][T18455] ? aa_sk_perm+0x6d5/0x900 [ 885.628016][T18455] ? __pfx_aa_sk_perm+0x10/0x10 [ 885.628047][T18455] ? sock_rps_record_flow+0x19/0x400 [ 885.628072][T18455] ? __pfx_inet_sendmsg+0x10/0x10 [ 885.628100][T18455] ? inet_sendmsg+0x2f4/0x370 [ 885.628125][T18455] ? __pfx_inet_sendmsg+0x10/0x10 [ 885.628151][T18455] __sys_sendto+0x5de/0x710 [ 885.628178][T18455] ? __pfx___sys_sendto+0x10/0x10 [ 885.628199][T18455] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 885.628242][T18455] ? __fget_files+0x3a0/0x420 [ 885.628272][T18455] ? ksys_write+0x242/0x270 [ 885.628297][T18455] ? __pfx_ksys_write+0x10/0x10 [ 885.628327][T18455] __x64_sys_sendto+0xde/0x100 [ 885.628363][T18455] do_syscall_64+0x14d/0xf80 [ 885.628388][T18455] ? trace_irq_disable+0x3b/0x150 [ 885.628405][T18455] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.628425][T18455] ? clear_bhb_loop+0x40/0x90 [ 885.628450][T18455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.628470][T18455] RIP: 0033:0x7fe4fd79c819 [ 885.628490][T18455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 885.628506][T18455] RSP: 002b:00007fe4fe5e9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 885.628528][T18455] RAX: ffffffffffffffda RBX: 00007fe4fda15fa0 RCX: 00007fe4fd79c819 [ 885.628542][T18455] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000004 [ 885.628555][T18455] RBP: 00007fe4fe5e9090 R08: 000020000005ffe4 R09: 000000000000001c [ 885.628568][T18455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 885.628580][T18455] R13: 00007fe4fda16038 R14: 00007fe4fda15fa0 R15: 00007fe4fdb3fa48 [ 885.628613][T18455] [ 885.964683][ T5908] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 886.026850][T14792] usb usb2-port1: unable to enumerate USB device [ 886.060430][T18458] syzkaller0: entered promiscuous mode [ 886.066354][T18458] syzkaller0: entered allmulticast mode [ 886.206667][ T5908] usb 5-1: Using ep0 maxpacket: 8 [ 886.215643][ T5908] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 886.216684][T14296] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 886.231922][ T5908] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 886.260405][ T5908] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 886.280860][ T5908] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 886.301136][ T5908] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 886.326712][ T5908] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 886.349794][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.390650][T14296] usb 10-1: Using ep0 maxpacket: 8 [ 886.398264][T14296] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 886.400979][ T5908] usbtmc 5-1:16.0: probe with driver usbtmc failed with error -22 [ 886.416815][T14296] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 886.447819][T14296] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 886.479672][T14296] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 886.493308][T14296] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 886.504104][T14296] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.733631][T14296] usb 10-1: GET_CAPABILITIES returned 0 [ 886.739455][T14296] usbtmc 10-1:16.0: can't read capabilities [ 887.462483][T14296] usb 10-1: USB disconnect, device number 44 [ 887.726279][T18473] netlink: 80 bytes leftover after parsing attributes in process `syz.9.3568'. [ 888.432053][ T5942] usb 5-1: USB disconnect, device number 77 [ 888.932021][ T1046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 888.980269][ T1046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 889.088837][T18486] IPv6: sit3: Disabled Multicast RS [ 889.095841][T18486] sit3: entered allmulticast mode [ 889.108663][ T796] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 889.175307][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 889.208013][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 889.273032][ T796] usb 5-1: Using ep0 maxpacket: 16 [ 889.287284][ T796] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 889.318068][ T796] usb 5-1: config 0 interface 0 has no altsetting 0 [ 889.325242][ T796] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 889.336738][ T9] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 889.355849][ T796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.376888][ T5942] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 889.383566][ T796] usb 5-1: config 0 descriptor?? [ 889.491710][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 889.501225][ T9] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 889.513561][T18502] netdevsim0: mtu less than device minimum [ 889.514058][ T9] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 889.529485][ T5942] usb 2-1: Using ep0 maxpacket: 32 [ 889.583234][ T9] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 889.598935][ T5942] usb 2-1: unable to get BOS descriptor or descriptor too short [ 889.607433][ T9] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 889.622222][ T5942] usb 2-1: config 33 has an invalid interface number: 3 but max is 0 [ 889.631468][ T5942] usb 2-1: config 33 has no interface number 0 [ 889.642802][ T5942] usb 2-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice= 6.07 [ 889.728025][T18510] netlink: 'syz.6.3576': attribute type 10 has an invalid length. [ 889.730795][T18510] fuse: Unknown parameter 'gro_id' [ 889.735478][ T9] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 889.735508][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.742049][ T5942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.824681][ T796] mcp2221 0003:04D8:00DD.0026: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 889.972522][ T5942] usb 2-1: string descriptor 0 read error: -71 [ 889.974940][ T5942] ftdi_sio 2-1:33.3: FTDI USB Serial Device converter detected [ 889.977177][ T5942] ftdi_sio ttyUSB0: unknown device type: 0x607 [ 890.000824][ T9] usb 10-1: usb_control_msg returned -71 [ 890.000926][ T9] usbtmc 10-1:16.0: can't read capabilities [ 890.004045][ T5942] usb 2-1: USB disconnect, device number 52 [ 890.025841][ T5942] ftdi_sio 2-1:33.3: device disconnected [ 890.064887][ T9] usb 10-1: USB disconnect, device number 45 [ 890.248001][ T796] usb 5-1: USB disconnect, device number 78 [ 890.456905][ T5893] usb 6-1: new low-speed USB device number 50 using dummy_hcd [ 890.650704][ T5893] usb 6-1: config 0 has an invalid interface number: 244 but max is 0 [ 890.675043][ T5893] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 890.699673][ T5893] usb 6-1: config 0 has no interface number 0 [ 890.709264][ T5893] usb 6-1: config 0 interface 244 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 890.724155][ T5893] usb 6-1: config 0 interface 244 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 890.736343][ T5893] usb 6-1: config 0 interface 244 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 8 [ 890.794171][ T5893] usb 6-1: config 0 interface 244 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 8 [ 890.821183][ T5893] usb 6-1: config 0 interface 244 altsetting 0 endpoint 0x8 is Bulk; changing to Interrupt [ 890.853645][ T5893] usb 6-1: config 0 interface 244 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 890.886647][ T5893] usb 6-1: config 0 interface 244 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 15 [ 890.927443][T18530] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3580'. [ 890.936772][ T5893] usb 6-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32 [ 890.945844][ T5893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.992365][T18533] syzkaller0: entered promiscuous mode [ 890.998080][T18533] syzkaller0: entered allmulticast mode [ 891.009185][T18530] C: renamed from team_slave_0 (while UP) [ 891.016863][ T5893] usb 6-1: config 0 descriptor?? [ 891.023395][T18513] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 891.044750][T18530] netlink: 'syz.4.3580': attribute type 1 has an invalid length. [ 891.055776][T18530] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3580'. [ 891.069040][T18530] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 891.249583][T18513] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.3577'. [ 891.292560][ T5893] usb 6-1: string descriptor 0 read error: -71 [ 891.321544][ T5893] cypress_m8 6-1:0.244: DeLorme Earthmate USB converter detected [ 891.376018][ T5893] earthmate ttyUSB0: required endpoint is missing [ 891.468817][ T5893] usb 6-1: USB disconnect, device number 50 [ 891.496048][ T5893] cypress_m8 6-1:0.244: device disconnected [ 891.594033][T18550] 8021q: adding VLAN 0 to HW filter on device bond1 [ 891.610426][T18550] bond0: (slave bond1): Enslaving as an active interface with an up link [ 891.663400][T18555] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3585'. [ 891.691242][T18556] netlink: 14 bytes leftover after parsing attributes in process `syz.9.3584'. [ 891.901257][T18556] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 892.025203][T18556] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 892.086408][T18568] hub 9-0:1.0: USB hub found [ 892.100432][T18568] hub 9-0:1.0: 1 port detected [ 892.111334][T18556] bond0 (unregistering): (slave bond1): Releasing backup interface [ 892.172097][T18556] bond0 (unregistering): Released all slaves [ 892.739635][T18593] syzkaller0: entered promiscuous mode [ 892.751526][T18593] syzkaller0: entered allmulticast mode [ 892.821242][ T5886] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 892.908762][T18596] xt_CT: No such helper "syz1" [ 893.015943][ T5886] usb 5-1: Using ep0 maxpacket: 8 [ 893.025032][ T5886] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 893.045437][ T5886] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 893.069003][T18605] binder: 18604:18605 ioctl 4018f50b 2000000001c0 returned -22 [ 893.088176][T18605] binder: 18604:18605 ioctl 4b69 200000000100 returned -22 [ 893.101768][ T5886] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 893.114833][T18605] binder_alloc: 18604: binder_alloc_buf, no vma [ 893.124815][ T5886] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 893.190285][ T5886] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 893.216862][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.267457][T18610] syzkaller0: entered promiscuous mode [ 893.300286][T18610] syzkaller0: entered allmulticast mode [ 893.381717][T18620] x_tables: unsorted entry at hook 2 [ 893.400594][T18615] syzkaller0: entered promiscuous mode [ 893.412549][T18615] syzkaller0: entered allmulticast mode [ 893.432987][T18610] tipc: Enabled bearer , priority 0 [ 893.516432][ T5886] usb 5-1: usb_control_msg returned -71 [ 893.538943][ T5886] usbtmc 5-1:16.0: can't read capabilities [ 893.547874][T18609] tipc: Resetting bearer [ 893.575051][T18624] netlink: 'syz.9.3604': attribute type 1 has an invalid length. [ 893.580174][ T5886] usb 5-1: USB disconnect, device number 79 [ 893.624798][T18626] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3604'. [ 893.638039][ T5893] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 893.650665][T18609] tipc: Disabling bearer [ 893.669950][T18626] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3604'. [ 893.844730][ T5893] usb 7-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 893.859599][T18636] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3605'. [ 893.870364][ T5893] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.898043][T18636] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.898730][ T5893] usb 7-1: config 0 descriptor?? [ 893.905805][T18636] bridge0: port 1(bridge_slave_0) entered disabled state [ 894.131181][ T5893] hackrf 7-1:0.0: usb_control_msg() failed -71 request 0e [ 894.153143][ T5893] hackrf 7-1:0.0: Could not detect board [ 894.173167][ T5893] hackrf 7-1:0.0: probe with driver hackrf failed with error -71 [ 894.196493][ T5893] usb 7-1: USB disconnect, device number 41 [ 894.345247][T18654] syzkaller0: entered promiscuous mode [ 894.366277][T18654] syzkaller0: entered allmulticast mode [ 894.446021][T18656] tipc: Enabled bearer , priority 0 [ 894.488243][T18656] tipc: Resetting bearer [ 894.548417][T18655] tipc: Disabling bearer [ 894.892347][T18682] netlink: 1047 bytes leftover after parsing attributes in process `syz.9.3618'. [ 896.704075][T18706] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3624'. [ 896.784433][T18706] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3624'. [ 896.845860][T18708] syzkaller0: entered promiscuous mode [ 896.851711][T18708] syzkaller0: entered allmulticast mode [ 897.089099][T18716] syzkaller0: entered promiscuous mode [ 897.094655][T18716] syzkaller0: entered allmulticast mode [ 897.327136][T18728] netlink: 'syz.9.3629': attribute type 3 has an invalid length. [ 897.335030][T18728] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3629'. [ 897.354194][T18728] netlink: 'syz.9.3629': attribute type 3 has an invalid length. [ 897.362645][T18728] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3629'. [ 897.376961][T18730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3630'. [ 897.386450][T18728] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3629'. [ 897.426689][ T5893] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 897.571191][ T5893] usb 2-1: device descriptor read/64, error -71 [ 897.608853][ T29] kauditd_printk_skb: 158 callbacks suppressed [ 897.608873][ T29] audit: type=1326 audit(1775990590.650:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18733 comm="syz.4.3631" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5bcfb9c819 code=0x0 [ 897.846898][ T5893] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 898.000435][ T5893] usb 2-1: device descriptor read/64, error -71 [ 898.119393][ T5893] usb usb2-port1: attempt power cycle [ 898.159811][T18764] FAULT_INJECTION: forcing a failure. [ 898.159811][T18764] name failslab, interval 1, probability 0, space 0, times 0 [ 898.188851][T18764] CPU: 0 UID: 0 PID: 18764 Comm: syz.5.3641 Tainted: G L syzkaller #0 PREEMPT(full) [ 898.188885][T18764] Tainted: [L]=SOFTLOCKUP [ 898.188893][T18764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 898.188905][T18764] Call Trace: [ 898.188914][T18764] [ 898.188923][T18764] dump_stack_lvl+0xe8/0x150 [ 898.188957][T18764] should_fail_ex+0x412/0x560 [ 898.188994][T18764] should_failslab+0xa8/0x100 [ 898.189019][T18764] ? skb_clone+0x212/0x3a0 [ 898.189044][T18764] kmem_cache_alloc_noprof+0x87/0x650 [ 898.189076][T18764] skb_clone+0x212/0x3a0 [ 898.189106][T18764] __netlink_deliver_tap+0x404/0x850 [ 898.189144][T18764] ? netlink_deliver_tap+0x2e/0x1b0 [ 898.189167][T18764] netlink_deliver_tap+0x19c/0x1b0 [ 898.189191][T18764] netlink_sendskb+0x68/0x140 [ 898.189224][T18764] netlink_unicast+0x3a3/0x9b0 [ 898.189261][T18764] ? __pfx_netlink_unicast+0x10/0x10 [ 898.189298][T18764] netlink_rcv_skb+0x2b6/0x4b0 [ 898.189322][T18764] ? __pfx_genl_rcv_msg+0x10/0x10 [ 898.189351][T18764] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 898.189392][T18764] ? down_read+0x272/0x2e0 [ 898.189418][T18764] ? genl_rcv+0xd/0x40 [ 898.189445][T18764] genl_rcv+0x28/0x40 [ 898.189469][T18764] netlink_unicast+0x80f/0x9b0 [ 898.189509][T18764] ? __pfx_netlink_unicast+0x10/0x10 [ 898.189542][T18764] ? netlink_sendmsg+0x650/0xb40 [ 898.189568][T18764] ? skb_put+0x11b/0x210 [ 898.189596][T18764] netlink_sendmsg+0x813/0xb40 [ 898.189630][T18764] ? __pfx_netlink_sendmsg+0x10/0x10 [ 898.189654][T18764] ? aa_sock_msg_perm+0xf1/0x1b0 [ 898.189684][T18764] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 898.189710][T18764] ____sys_sendmsg+0x972/0x9f0 [ 898.189745][T18764] ? __pfx_____sys_sendmsg+0x10/0x10 [ 898.189789][T18764] ? import_iovec+0x73/0xa0 [ 898.189815][T18764] ___sys_sendmsg+0x2a5/0x360 [ 898.189845][T18764] ? __pfx____sys_sendmsg+0x10/0x10 [ 898.189908][T18764] ? __fget_files+0x2a/0x420 [ 898.189926][T18764] ? __fget_files+0x3a0/0x420 [ 898.189955][T18764] __x64_sys_sendmsg+0x1bd/0x2a0 [ 898.189984][T18764] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 898.190019][T18764] ? __pfx_ksys_write+0x10/0x10 [ 898.190055][T18764] do_syscall_64+0x14d/0xf80 [ 898.190081][T18764] ? trace_irq_disable+0x3b/0x150 [ 898.190099][T18764] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.190120][T18764] ? clear_bhb_loop+0x40/0x90 [ 898.190145][T18764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.190165][T18764] RIP: 0033:0x7f9730f9c819 [ 898.190185][T18764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 898.190201][T18764] RSP: 002b:00007f9731db7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 898.190223][T18764] RAX: ffffffffffffffda RBX: 00007f9731215fa0 RCX: 00007f9730f9c819 [ 898.190238][T18764] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 898.190250][T18764] RBP: 00007f9731db7090 R08: 0000000000000000 R09: 0000000000000000 [ 898.190262][T18764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 898.190274][T18764] R13: 00007f9731216038 R14: 00007f9731215fa0 R15: 00007f973133fa48 [ 898.190307][T18764] [ 898.819642][ T5893] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 898.847723][ T5893] usb 2-1: device descriptor read/8, error -71 [ 898.897023][T16447] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 899.048151][T16447] usb 5-1: Using ep0 maxpacket: 16 [ 899.077844][T16447] usb 5-1: config 0 has no interfaces? [ 899.083414][T16447] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 899.096704][ T5893] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 899.124860][T16447] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.148788][ T5893] usb 2-1: device descriptor read/8, error -71 [ 899.169397][T16447] usb 5-1: config 0 descriptor?? [ 899.263298][ T5893] usb usb2-port1: unable to enumerate USB device [ 899.270527][T18796] : entered promiscuous mode [ 899.726842][ T5907] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 899.916715][ T5907] usb 10-1: Using ep0 maxpacket: 32 [ 899.926452][ T5907] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 899.963552][ T5907] usb 10-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 899.983071][ T5907] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.001565][ T5907] usb 10-1: Product: syz [ 900.016083][ T5907] usb 10-1: Manufacturer: syz [ 900.032651][ T5907] usb 10-1: SerialNumber: syz [ 900.047568][ T5907] usb 10-1: config 0 descriptor?? [ 900.058296][ T5907] usb 10-1: bad CDC descriptors [ 900.065319][ T5907] usb 10-1: unsupported MDLM descriptors [ 900.275050][T16447] usb 10-1: USB disconnect, device number 46 [ 900.596711][ T5886] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 900.778509][ T5886] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 900.796742][ T5886] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 900.840575][ T5886] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 900.868004][ T5886] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.899483][ T5886] usb 7-1: config 0 descriptor?? [ 900.965980][T18856] syzkaller0: entered promiscuous mode [ 900.995667][T18856] syzkaller0: entered allmulticast mode [ 901.174312][T18862] syzkaller0: entered promiscuous mode [ 901.180054][T18862] syzkaller0: entered allmulticast mode [ 901.262232][T18862] tipc: Enabled bearer , priority 0 [ 901.292494][T18860] tipc: Resetting bearer [ 901.340715][T18845] loop3: detected capacity change from 0 to 7 [ 901.372232][T18845] Dev loop3: unable to read RDB block 7 [ 901.381091][T18845] loop3: unable to read partition table [ 901.407516][T18845] loop3: partition table beyond EOD, truncated [ 901.434835][ T5886] hid-steam 0003:28DE:1142.0027: item fetching failed at offset 4/5 [ 901.449590][T18860] tipc: Disabling bearer [ 901.456407][ T5886] hid-steam 0003:28DE:1142.0027: steam_probe:parse of hid interface failed [ 901.460371][T18845] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 901.473834][ T5886] hid-steam 0003:28DE:1142.0027: probe with driver hid-steam failed with error -22 [ 901.632850][ T5886] usb 7-1: USB disconnect, device number 42 [ 901.714930][T16447] usb 5-1: USB disconnect, device number 80 [ 903.071456][T16380] Bluetooth: hci0: command 0x0406 tx timeout [ 903.271392][T18905] sit1: entered promiscuous mode [ 903.415376][T18911] syzkaller0: entered promiscuous mode [ 903.430593][T18911] syzkaller0: entered allmulticast mode [ 903.637177][T14296] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 903.721665][T18923] syzkaller0: entered promiscuous mode [ 903.746479][T18923] syzkaller0: entered allmulticast mode [ 903.956864][T14296] usb 10-1: Using ep0 maxpacket: 8 [ 903.983416][T14296] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 904.006673][T14296] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 904.030322][T14296] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.131256][T14296] usb 10-1: config 0 descriptor?? [ 904.347375][T14296] iowarrior 10-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 904.599337][T18947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3683'. [ 904.991944][ T796] usb 10-1: USB disconnect, device number 47 [ 905.176654][T18956] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3684'. [ 905.185758][T18956] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3684'. [ 905.797562][ T9] usb 5-1: new low-speed USB device number 81 using dummy_hcd [ 905.956828][ T9] usb 5-1: Invalid ep0 maxpacket: 32 [ 906.111230][ T9] usb 5-1: new low-speed USB device number 82 using dummy_hcd [ 906.263528][T18984] syzkaller0: entered promiscuous mode [ 906.269362][T18984] syzkaller0: entered allmulticast mode [ 906.280470][ T9] usb 5-1: Invalid ep0 maxpacket: 32 [ 906.298020][ T9] usb usb5-port1: attempt power cycle [ 906.381064][T18986] tipc: Enabled bearer , priority 0 [ 906.401178][T18986] tipc: Resetting bearer [ 906.492675][T18983] tipc: Disabling bearer [ 906.527815][T18996] syzkaller0: entered promiscuous mode [ 906.535422][T18996] syzkaller0: entered allmulticast mode [ 906.658251][ T9] usb 5-1: new low-speed USB device number 83 using dummy_hcd [ 906.707497][ T9] usb 5-1: Invalid ep0 maxpacket: 32 [ 906.850466][ T9] usb 5-1: new low-speed USB device number 84 using dummy_hcd [ 906.877467][ T9] usb 5-1: Invalid ep0 maxpacket: 32 [ 906.883042][ T9] usb usb5-port1: unable to enumerate USB device [ 906.891246][T19009] syzkaller0: entered promiscuous mode [ 906.897160][T19009] syzkaller0: entered allmulticast mode [ 906.976739][T14296] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 907.086941][ T5907] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 907.116741][T14296] usb 7-1: device descriptor read/64, error -71 [ 907.246829][ T5907] usb 6-1: Using ep0 maxpacket: 32 [ 907.255334][ T5907] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 907.271203][ T5907] usb 6-1: config 0 has no interface number 0 [ 907.289312][ T5907] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 907.308790][ T5907] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.333006][ T5907] usb 6-1: Product: syz [ 907.339641][ T5907] usb 6-1: Manufacturer: syz [ 907.345240][ T5907] usb 6-1: SerialNumber: syz [ 907.363826][ T5907] usb 6-1: config 0 descriptor?? [ 907.371947][ T5907] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 907.376784][T14296] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 907.516750][T14296] usb 7-1: device descriptor read/64, error -71 [ 907.587564][ T5886] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 907.627853][T14296] usb usb7-port1: attempt power cycle [ 907.736701][ T5886] usb 10-1: Using ep0 maxpacket: 16 [ 907.743871][ T5886] usb 10-1: config 0 has no interfaces? [ 907.750230][ T5886] usb 10-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 907.760169][ T5886] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.773190][ T5886] usb 10-1: config 0 descriptor?? [ 907.976851][T14296] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 908.010151][T14296] usb 7-1: device descriptor read/8, error -71 [ 908.246765][T14296] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 908.267446][T14296] usb 7-1: device descriptor read/8, error -71 [ 908.387058][T14296] usb usb7-port1: unable to enumerate USB device [ 908.615814][T19025] syzkaller0: entered promiscuous mode [ 908.622610][T19025] syzkaller0: entered allmulticast mode [ 908.797316][T19029] tipc: Enabled bearer , priority 0 [ 908.818275][T19029] tipc: Resetting bearer [ 908.842973][T19028] tipc: Disabling bearer [ 909.017261][T19033] xt_CT: No such helper "syz1" [ 909.486693][ T5893] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 909.633626][T19050] x_tables: unsorted entry at hook 2 [ 909.779570][T19052] syzkaller0: entered promiscuous mode [ 909.785338][T19052] syzkaller0: entered allmulticast mode [ 909.874910][ T5907] usb 6-1: qt2_attach - failed to power on unit: -71 [ 909.882306][ T5907] quatech2 6-1:0.51: probe with driver quatech2 failed with error -71 [ 909.897438][ T5907] usb 6-1: USB disconnect, device number 51 [ 910.037826][T14296] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 910.187684][T14296] usb 5-1: device descriptor read/64, error -71 [ 910.205006][T19061] tipc: Enabled bearer , priority 0 [ 910.216015][T19061] tipc: Resetting bearer [ 910.240827][T19060] tipc: Disabling bearer [ 910.403450][ T24] usb 10-1: USB disconnect, device number 48 [ 910.436756][T14296] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 910.597574][T14296] usb 5-1: device descriptor read/64, error -71 [ 910.638406][ T9] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 910.707427][T14296] usb usb5-port1: attempt power cycle [ 910.807090][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 910.813740][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 910.824036][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 910.835397][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 910.846401][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 910.860600][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 910.869819][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.006835][ T5942] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 911.016878][T16447] usb 7-1: new full-speed USB device number 47 using dummy_hcd [ 911.046818][T14296] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 911.067423][T14296] usb 5-1: device descriptor read/8, error -71 [ 911.156756][ T5942] usb 10-1: Using ep0 maxpacket: 16 [ 911.164120][ T5942] usb 10-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 911.175606][ T5942] usb 10-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 911.187721][T16447] usb 7-1: not running at top speed; connect to a high speed hub [ 911.196469][ T5942] usb 10-1: config 0 interface 0 has no altsetting 0 [ 911.204180][ T5942] usb 10-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 911.213992][T16447] usb 7-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 55887, setting to 64 [ 911.228031][ T5942] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.248733][T16447] usb 7-1: config 1 interface 0 has no altsetting 0 [ 911.260838][ T5942] usb 10-1: config 0 descriptor?? [ 911.275633][T16447] usb 7-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 911.286020][T16447] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.300311][T16447] usb 7-1: Product: syz [ 911.304599][T16447] usb 7-1: Manufacturer: syz [ 911.316747][T14296] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 911.324947][T16447] usb 7-1: SerialNumber: syz [ 911.344352][T19081] raw-gadget.4 gadget.6: fail, usb_ep_enable returned -22 [ 911.358144][T14296] usb 5-1: device descriptor read/8, error -71 [ 911.477166][T14296] usb usb5-port1: unable to enumerate USB device [ 911.635997][ T9] usb 6-1: usb_control_msg returned -71 [ 911.657559][ T9] usbtmc 6-1:16.0: can't read capabilities [ 911.672927][T19080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 911.693317][T19080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 911.742711][ T9] usb 6-1: USB disconnect, device number 52 [ 912.004137][ T5942] usbhid 10-1:0.0: can't add hid device: -71 [ 912.010468][ T5942] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 912.155830][ T5942] usb 10-1: USB disconnect, device number 49 [ 913.014804][T19114] tipc: Enabling of bearer rejected, failed to enable media [ 913.089412][T19116] netlink: 'syz.9.3740': attribute type 12 has an invalid length. [ 913.099325][T19116] netlink: 'syz.9.3740': attribute type 29 has an invalid length. [ 913.108108][T19116] netlink: 148 bytes leftover after parsing attributes in process `syz.9.3740'. [ 913.117565][T19116] netlink: 'syz.9.3740': attribute type 2 has an invalid length. [ 913.125381][T19116] netlink: 23 bytes leftover after parsing attributes in process `syz.9.3740'. [ 913.156892][ T9] usb 5-1: new full-speed USB device number 89 using dummy_hcd [ 913.328241][T19120] FAULT_INJECTION: forcing a failure. [ 913.328241][T19120] name failslab, interval 1, probability 0, space 0, times 0 [ 913.341592][T19120] CPU: 1 UID: 0 PID: 19120 Comm: syz.9.3742 Tainted: G L syzkaller #0 PREEMPT(full) [ 913.341625][T19120] Tainted: [L]=SOFTLOCKUP [ 913.341633][T19120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 913.341654][T19120] Call Trace: [ 913.341666][T19120] [ 913.341676][T19120] dump_stack_lvl+0xe8/0x150 [ 913.341699][T19120] should_fail_ex+0x412/0x560 [ 913.341721][T19120] should_failslab+0xa8/0x100 [ 913.341744][T19120] __kmalloc_cache_noprof+0x88/0x660 [ 913.341769][T19120] ? sctp_add_bind_addr+0x8c/0x370 [ 913.341795][T19120] sctp_add_bind_addr+0x8c/0x370 [ 913.341820][T19120] sctp_copy_local_addr_list+0x314/0x4f0 [ 913.341838][T19120] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 913.341851][T19120] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 913.341873][T19120] ? sctp_v6_is_any+0x64/0x80 [ 913.341905][T19120] ? sctp_copy_one_addr+0x93/0x360 [ 913.341929][T19120] sctp_bind_addr_copy+0xb3/0x3c0 [ 913.341949][T19120] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 913.341981][T19120] sctp_connect_new_asoc+0x2ff/0x6b0 [ 913.342008][T19120] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 913.342039][T19120] ? __local_bh_enable_ip+0xd0/0x130 [ 913.342061][T19120] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 913.342085][T19120] ? security_sctp_bind_connect+0x7e/0x2c0 [ 913.342113][T19120] sctp_sendmsg+0x1528/0x2c10 [ 913.342145][T19120] ? __pfx_sctp_sendmsg+0x10/0x10 [ 913.342161][T19120] ? aa_sk_perm+0x6d5/0x900 [ 913.342183][T19120] ? __pfx_aa_sk_perm+0x10/0x10 [ 913.342208][T19120] ? sock_rps_record_flow+0x19/0x400 [ 913.342240][T19120] ? __pfx_inet_sendmsg+0x10/0x10 [ 913.342265][T19120] ? inet_sendmsg+0x2f4/0x370 [ 913.342289][T19120] ? __pfx_inet_sendmsg+0x10/0x10 [ 913.342306][T19120] __sys_sendto+0x5de/0x710 [ 913.342323][T19120] ? __pfx___sys_sendto+0x10/0x10 [ 913.342335][T19120] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 913.342367][T19120] ? __fget_files+0x3a0/0x420 [ 913.342397][T19120] ? ksys_write+0x242/0x270 [ 913.342421][T19120] ? __pfx_ksys_write+0x10/0x10 [ 913.342447][T19120] __x64_sys_sendto+0xde/0x100 [ 913.342463][T19120] do_syscall_64+0x14d/0xf80 [ 913.342478][T19120] ? trace_irq_disable+0x3b/0x150 [ 913.342488][T19120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.342500][T19120] ? clear_bhb_loop+0x40/0x90 [ 913.342523][T19120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.342548][T19120] RIP: 0033:0x7fe4fd79c819 [ 913.342567][T19120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 913.342581][T19120] RSP: 002b:00007fe4fe5e9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 913.342602][T19120] RAX: ffffffffffffffda RBX: 00007fe4fda15fa0 RCX: 00007fe4fd79c819 [ 913.342611][T19120] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000004 [ 913.342618][T19120] RBP: 00007fe4fe5e9090 R08: 000020000005ffe4 R09: 000000000000001c [ 913.342626][T19120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 913.342633][T19120] R13: 00007fe4fda16038 R14: 00007fe4fda15fa0 R15: 00007fe4fdb3fa48 [ 913.342663][T19120] [ 913.654706][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 913.784396][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 913.861337][ T9] usb 5-1: New USB device found, idVendor=154e, idProduct=500e, bcdDevice= 0.40 [ 913.878452][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.913538][T16447] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input51 [ 913.936234][ T9] usb 5-1: Product: syz [ 913.956841][ T9] usb 5-1: Manufacturer: syz [ 913.961534][ T9] usb 5-1: SerialNumber: syz [ 913.981820][ T5179] bcm5974 7-1:1.0: could not read from device [ 914.021907][T16447] usb 7-1: USB disconnect, device number 47 [ 914.044472][ T5179] bcm5974 7-1:1.0: could not read from device [ 914.186853][T15777] usb 10-1: new high-speed USB device number 50 using dummy_hcd [ 914.235497][T19131] [U]  [ 914.238710][T19131] [U] K{ [ 914.241748][T19131] [U] t 1ŠFfˊ`GJgo/mC [ 914.248860][T19131] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 914.264420][T19131] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 914.323461][T19131] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 914.367021][T15777] usb 10-1: Using ep0 maxpacket: 8 [ 914.380829][T15777] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 914.389361][T19131] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 914.434880][T19131] [U] ܾ4b`˗HT_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 914.447282][T19131] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 914.458863][T19131] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`Ʀ\ [ 914.862284][T19131] [U] MX"{; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 914.976282][T19131] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 914.990153][T19131] [U] 22Ʃx?0;3u [ 915.028734][T19131] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 915.055300][T19131] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 915.064604][T19131] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 915.073277][T19131] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 915.079460][T19131] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 915.091992][T19131] [U] ec [ 915.095119][T19131] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 915.208768][ T5886] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 915.353108][T19131] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 915.356809][ T5886] usb 5-1: device descriptor read/64, error -71 [ 915.448101][T15777] usb 10-1: usb_control_msg returned -71 [ 915.458337][T15777] usbtmc 10-1:16.0: can't read capabilities [ 915.508969][T15777] usb 10-1: USB disconnect, device number 50 [ 915.619366][T19138] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3748'. [ 915.641126][T19141] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3749'. [ 915.656808][ T5886] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 915.659030][T19142] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3749'. [ 915.682507][T19141] binder: 19139:19141 ioctl c0306201 200000000080 returned -14 [ 915.694704][T19140] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3749'. [ 915.704805][T19141] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3749'. [ 915.752175][T19140] ip6tnl1: entered allmulticast mode [ 915.864680][T19146] tipc: Enabling of bearer rejected, failed to enable media [ 915.886820][ T5886] usb 5-1: device descriptor read/64, error -71 [ 916.037010][ T5886] usb usb5-port1: attempt power cycle [ 916.417593][ T5886] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 916.448634][ T5893] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 916.479482][ T5886] usb 5-1: device descriptor read/8, error -71 [ 916.627039][ T5893] usb 2-1: Using ep0 maxpacket: 32 [ 916.648133][ T5893] usb 2-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 916.838223][ T5886] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 916.870120][ T5886] usb 5-1: device descriptor read/8, error -71 [ 916.870587][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.060589][ T5893] usb 2-1: Product: syz [ 917.071063][ T5886] usb usb5-port1: unable to enumerate USB device [ 917.076101][ T5893] usb 2-1: Manufacturer: syz [ 917.083455][ T24] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 917.122770][ T5893] usb 2-1: SerialNumber: syz [ 917.275103][ T24] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 917.332477][ T24] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 917.343148][T19181] syzkaller0: entered promiscuous mode [ 917.367396][ T5893] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 917.394035][ T5893] usb 2-1: MIDIStreaming interface descriptor not found [ 917.406852][T19181] syzkaller0: entered allmulticast mode [ 917.414142][ T24] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 917.444123][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.465586][T19177] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 917.773412][ T24] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 917.795103][ T5893] usb 2-1: USB disconnect, device number 58 [ 917.971684][T19176] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 918.139182][ T24] usb 10-1: USB disconnect, device number 51 [ 918.225693][T19197] tipc: Enabling of bearer rejected, failed to enable media [ 918.720665][T19210] syzkaller0: entered promiscuous mode [ 918.736373][T19210] syzkaller0: entered allmulticast mode [ 919.156544][T19217] netlink: 830 bytes leftover after parsing attributes in process `syz.5.3769'. [ 921.416750][ T24] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 921.674524][ T5907] usb 10-1: new high-speed USB device number 52 using dummy_hcd [ 921.743807][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 921.775707][ T24] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 922.636222][ T5907] usb 10-1: device descriptor read/64, error -71 [ 922.666838][ T24] usb 6-1: config 0 has no interface number 0 [ 922.854084][ T24] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 924.046720][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.138632][ T24] usb 6-1: Product: syz [ 924.176702][ T5907] usb 10-1: new high-speed USB device number 53 using dummy_hcd [ 924.205596][ T24] usb 6-1: Manufacturer: syz [ 924.242894][ T24] usb 6-1: SerialNumber: syz [ 924.321791][ T24] usb 6-1: config 0 descriptor?? [ 924.368931][ T5907] usb 10-1: device descriptor read/64, error -71 [ 924.377715][T19265] tipc: Enabling of bearer rejected, failed to enable media [ 924.389245][ T24] usb 6-1: can't set config #0, error -71 [ 924.466818][ T796] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 924.475300][ T24] usb 6-1: USB disconnect, device number 53 [ 924.547261][ T5907] usb usb10-port1: attempt power cycle [ 924.659003][ T796] usb 5-1: Using ep0 maxpacket: 32 [ 924.729921][ T796] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 924.833265][ T796] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 924.893679][ T796] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 924.977319][ T796] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 925.128391][ T796] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 925.172608][ T796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.248572][T19289] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3780'. [ 925.282913][ T796] usb 5-1: Product: syz [ 925.307625][ T796] usb 5-1: Manufacturer: syz [ 925.312343][ T796] usb 5-1: SerialNumber: syz [ 925.460684][ T796] usb 5-1: config 0 descriptor?? [ 925.638504][ T796] usb 5-1: no audio or video endpoints found [ 925.786768][T19256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 925.883868][T19256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 926.406769][T14558] usb 5-1: USB disconnect, device number 94 [ 928.342504][T14558] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 928.352023][ T796] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 928.736732][ T796] usb 5-1: device descriptor read/64, error -71 [ 928.746737][T14558] usb 6-1: device descriptor read/64, error -71 [ 928.824994][T19331] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 929.196721][T14558] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 929.204468][ T796] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 929.426729][T14558] usb 6-1: device descriptor read/64, error -71 [ 929.442765][ T796] usb 5-1: device descriptor read/64, error -71 [ 929.587520][ T796] usb usb5-port1: attempt power cycle [ 929.593132][T14558] usb usb6-port1: attempt power cycle [ 930.080609][ T796] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 930.167522][ T796] usb 5-1: device descriptor read/8, error -71 [ 930.686207][T19365] tipc: Enabling of bearer rejected, failed to enable media [ 930.700223][ T796] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 930.749365][ T796] usb 5-1: device descriptor read/8, error -71 [ 930.853566][ T5908] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 930.882108][T14558] usb usb6-port1: Cannot enable. Maybe the USB cable is bad? [ 930.908633][ T796] usb usb5-port1: unable to enumerate USB device [ 930.996862][ T5908] usb 2-1: device descriptor read/64, error -71 [ 931.041256][T19376] syzkaller0: entered promiscuous mode [ 931.046922][T14558] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 931.054674][T19376] syzkaller0: entered allmulticast mode [ 931.087537][T14558] usb 6-1: Using ep0 maxpacket: 8 [ 931.158910][T14558] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 931.189332][T14558] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 931.270370][T14558] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 931.297714][ T5908] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 931.352328][T14558] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 931.413826][T14558] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 931.433695][T19384] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3794'. [ 931.464333][T14558] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.506726][ T5908] usb 2-1: device descriptor read/64, error -71 [ 931.640779][ T5908] usb usb2-port1: attempt power cycle [ 931.715877][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.723830][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.744567][T14558] usb 6-1: usb_control_msg returned -32 [ 931.769712][T14558] usbtmc 6-1:16.0: can't read capabilities [ 931.857579][T14558] usb 6-1: USB disconnect, device number 57 [ 932.096938][ T5908] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 932.161276][T19413] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3796'. [ 932.376815][ T5908] usb 2-1: device descriptor read/8, error -71 [ 932.661517][ T5908] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 932.677471][ T5908] usb 2-1: device descriptor read/8, error -71 [ 932.797384][ T5908] usb usb2-port1: unable to enumerate USB device [ 935.560668][T19447] tipc: Enabling of bearer rejected, failed to enable media [ 936.119095][T19455] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3807'. [ 936.776769][ T5907] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 936.956746][ T5907] usb 6-1: Using ep0 maxpacket: 8 [ 936.974325][ T5907] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 936.985358][T14558] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 937.010217][ T5907] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 937.025220][ T5907] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 937.041467][ T5907] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 937.067218][T19483] syzkaller0: entered promiscuous mode [ 937.072738][T19483] syzkaller0: entered allmulticast mode [ 937.098516][T19482] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3813'. [ 937.114340][ T5907] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 937.153102][T14558] usb 5-1: device descriptor read/64, error -71 [ 937.176553][ T5907] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.238581][T19483] FAULT_INJECTION: forcing a failure. [ 937.238581][T19483] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 937.294160][T19483] CPU: 1 UID: 0 PID: 19483 Comm: syz.9.3815 Tainted: G L syzkaller #0 PREEMPT(full) [ 937.294195][T19483] Tainted: [L]=SOFTLOCKUP [ 937.294203][T19483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 937.294215][T19483] Call Trace: [ 937.294223][T19483] [ 937.294232][T19483] dump_stack_lvl+0xe8/0x150 [ 937.294266][T19483] should_fail_ex+0x412/0x560 [ 937.294302][T19483] _copy_from_user+0x2d/0xb0 [ 937.294328][T19483] __copy_msghdr+0x3c5/0x5b0 [ 937.294369][T19483] ___sys_sendmsg+0x213/0x360 [ 937.294401][T19483] ? __pfx____sys_sendmsg+0x10/0x10 [ 937.294464][T19483] ? __fget_files+0x2a/0x420 [ 937.294482][T19483] ? __fget_files+0x3a0/0x420 [ 937.294510][T19483] __x64_sys_sendmsg+0x1bd/0x2a0 [ 937.294538][T19483] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 937.294572][T19483] ? __pfx_ksys_write+0x10/0x10 [ 937.294608][T19483] do_syscall_64+0x14d/0xf80 [ 937.294633][T19483] ? trace_irq_disable+0x3b/0x150 [ 937.294651][T19483] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.294671][T19483] ? clear_bhb_loop+0x40/0x90 [ 937.294696][T19483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.294715][T19483] RIP: 0033:0x7fe4fd79c819 [ 937.294735][T19483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 937.294751][T19483] RSP: 002b:00007fe4fe5e9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 937.294773][T19483] RAX: ffffffffffffffda RBX: 00007fe4fda15fa0 RCX: 00007fe4fd79c819 [ 937.294788][T19483] RDX: 0000000000000044 RSI: 00002000000000c0 RDI: 0000000000000009 [ 937.294801][T19483] RBP: 00007fe4fe5e9090 R08: 0000000000000000 R09: 0000000000000000 [ 937.294814][T19483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 937.294826][T19483] R13: 00007fe4fda16038 R14: 00007fe4fda15fa0 R15: 00007fe4fdb3fa48 [ 937.294857][T19483] [ 937.533310][ T5907] usb 6-1: usb_control_msg returned -32 [ 937.539084][ T5907] usbtmc 6-1:16.0: can't read capabilities [ 937.555786][ T5907] usb 6-1: USB disconnect, device number 58 [ 937.566821][T14558] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 937.706719][T14558] usb 5-1: device descriptor read/64, error -71 [ 938.134045][T14558] usb usb5-port1: attempt power cycle [ 938.556929][T14558] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 939.085925][T14558] usb 5-1: device descriptor read/8, error -71 [ 939.550972][T14558] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 939.641583][T14558] usb 5-1: device descriptor read/8, error -71 [ 939.733463][T19517] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3816'. [ 939.803598][T14558] usb usb5-port1: unable to enumerate USB device [ 939.857820][ T24] usb 10-1: new high-speed USB device number 55 using dummy_hcd [ 939.986037][T19536] tipc: Enabling of bearer rejected, failed to enable media [ 940.027890][T19537] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3820'. [ 940.086815][ T24] usb 10-1: Using ep0 maxpacket: 32 [ 940.131904][ T24] usb 10-1: config 0 has an invalid interface number: 12 but max is 0 [ 940.193495][ T24] usb 10-1: config 0 has no interface number 0 [ 940.363160][ T24] usb 10-1: config 0 interface 12 has no altsetting 0 [ 940.398812][ T24] usb 10-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 940.608785][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.752437][ T24] usb 10-1: Product: syz [ 940.797748][ T24] usb 10-1: Manufacturer: syz [ 940.839049][ T24] usb 10-1: SerialNumber: syz [ 940.940364][ T24] usb 10-1: config 0 descriptor?? [ 941.317342][T19546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3821'. [ 941.330298][T19525] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3818'. [ 941.499719][T19525] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3818'. [ 943.176834][T14558] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 943.277171][T19566] x_tables: unsorted entry at hook 2 [ 943.397711][ T24] f81534 10-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 943.416766][T14558] usb 5-1: Using ep0 maxpacket: 8 [ 943.426341][ T24] f81534 10-1:0.12: f81534_find_config_idx: read failed: -71 [ 943.443470][T14558] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 943.455398][ T24] f81534 10-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 943.464437][T14558] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 943.534339][ T24] f81534 10-1:0.12: probe with driver f81534 failed with error -71 [ 943.557321][T14558] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 943.612450][ T24] usb 10-1: USB disconnect, device number 55 [ 943.634907][T14558] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 943.696665][T14558] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 943.775953][T14558] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.066852][T14558] usb 5-1: usb_control_msg returned -32 [ 944.120446][T14558] usbtmc 5-1:16.0: can't read capabilities [ 944.157224][ T5907] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 944.226510][T14558] usb 5-1: USB disconnect, device number 103 [ 944.300467][T19592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3831'. [ 944.333225][T19594] tipc: Enabling of bearer rejected, failed to enable media [ 944.356754][ T5907] usb 6-1: device descriptor read/64, error -71 [ 944.617005][ T5907] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 944.776713][ T5907] usb 6-1: device descriptor read/64, error -71 [ 944.826541][T19607] syzkaller0: entered promiscuous mode [ 944.873183][T19607] syzkaller0: entered allmulticast mode [ 944.918493][ T5907] usb usb6-port1: attempt power cycle [ 945.295949][ T5907] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 945.329501][ T5907] usb 6-1: device descriptor read/8, error -71 [ 945.419229][T16447] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 945.602118][ T5907] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 945.655615][ T5907] usb 6-1: device descriptor read/8, error -71 [ 945.703577][T16447] usb 5-1: Using ep0 maxpacket: 16 [ 945.784872][ T5907] usb usb6-port1: unable to enumerate USB device [ 945.933050][T16447] usb 5-1: config 0 has no interfaces? [ 945.948459][T16447] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 946.048485][T16447] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.441867][T16447] usb 5-1: config 0 descriptor?? [ 946.843050][T19647] tipc: Enabling of bearer rejected, failed to enable media [ 946.933774][T19649] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3845'. [ 947.129094][T19654] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3846'. [ 947.376833][T19654] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3846'. [ 948.341171][ T5907] usb 10-1: new high-speed USB device number 56 using dummy_hcd [ 948.496856][ T24] usb 5-1: USB disconnect, device number 104 [ 948.546718][ T5907] usb 10-1: Using ep0 maxpacket: 8 [ 948.605847][ T5907] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 948.740695][ T5907] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 948.808455][ T5907] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 948.888894][ T5907] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 949.076055][ T5907] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 949.136496][ T5907] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.670284][ T5907] usb 10-1: usb_control_msg returned -71 [ 949.676153][ T5907] usbtmc 10-1:16.0: can't read capabilities [ 950.006906][ T5907] usb 10-1: USB disconnect, device number 56 [ 951.780454][T14558] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 951.977915][T14558] usb 5-1: Using ep0 maxpacket: 8 [ 952.203984][T14558] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 952.255209][T14558] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 952.325657][T19719] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3858'. [ 952.342646][T14558] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.038363][T17282] Bluetooth: hci8: unexpected event for opcode 0x202f [ 953.056943][T19730] tipc: Enabling of bearer rejected, failed to enable media [ 953.072559][T19732] netlink: 'syz.5.3861': attribute type 12 has an invalid length. [ 953.085900][T19732] netlink: 'syz.5.3861': attribute type 29 has an invalid length. [ 953.099927][T19732] netlink: 148 bytes leftover after parsing attributes in process `syz.5.3861'. [ 953.111582][T19732] netlink: 'syz.5.3861': attribute type 2 has an invalid length. [ 953.127556][T19729] binder: 19727:19729 ioctl c0306201 2000000001c0 returned -14 [ 953.149618][T19732] netlink: 23 bytes leftover after parsing attributes in process `syz.5.3861'. [ 953.168115][T19729] binder: 19727:19729 ioctl c0306201 2000000001c0 returned -14 [ 953.235700][T19729] binder: 19727:19729 ioctl c0306201 2000000001c0 returned -14 [ 953.284598][T19729] binder: 19727:19729 ioctl c0306201 2000000001c0 returned -14 [ 953.369125][T19729] binder: 19727:19729 ioctl c0306201 2000000001c0 returned -14 [ 953.444119][T19729] binder: 19727:19729 ioctl c0306201 2000000001c0 returned -14 [ 953.476994][T19729] binder: 19727:19729 ioctl c0306201 2000000001c0 returned -14 [ 953.484736][T19729] binder: 19727:19729 ioctl c0306201 2000000001c0 returned -14 [ 953.511214][T19740] PKCS7: Unknown OID: [4] 1.1.0.0(bad) [ 953.564667][T19740] PKCS7: Only support pkcs7_signedData type [ 953.596848][T19729] binder: 19727:19729 ioctl c0306201 2000000001c0 returned -14 [ 953.619854][T19729] binder: 19727:19729 ioctl c0306201 2000000001c0 returned -14 [ 953.667034][T19729] binder: 19727:19729 ioctl c0306201 2000000001c0 returned -14 [ 953.724503][T19729] binder: 19727:19729 ioctl c0306201 2000000001c0 returned -14 [ 953.799350][T19729] binder: 19727:19729 ioctl c0306201 2000000001c0 returned -14 [ 953.869366][T19727] delete_channel: no stack [ 954.214330][T19762] x_tables: duplicate entry at hook 2 [ 954.440654][ T5907] usb 5-1: USB disconnect, device number 105 [ 954.630266][ T24] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 954.646150][T19773] netlink: 'syz.4.3869': attribute type 25 has an invalid length. [ 954.680454][T19773] netlink: 'syz.4.3869': attribute type 28 has an invalid length. [ 954.836759][ T24] usb 7-1: device descriptor read/64, error -71 [ 955.073198][T19779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3870'. [ 955.096710][ T24] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 955.323370][T19782] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3871'. [ 955.343139][ T24] usb 7-1: device descriptor read/64, error -71 [ 955.566033][ T24] usb usb7-port1: attempt power cycle [ 955.757805][T19786] tipc: Enabling of bearer rejected, failed to enable media [ 956.022864][ T24] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 956.199024][ T24] usb 7-1: device descriptor read/8, error -71 [ 956.458513][T19792] xt_CT: No such helper "syz1" [ 956.546997][ T24] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 956.628097][ T24] usb 7-1: device descriptor read/8, error -71 [ 956.737270][ T24] usb usb7-port1: unable to enumerate USB device [ 960.775486][T19835] hub 1-0:1.0: USB hub found [ 960.805684][T19835] hub 1-0:1.0: 1 port detected [ 960.867390][ T5942] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 961.538509][ T5942] usb 2-1: Using ep0 maxpacket: 8 [ 961.667694][ T5942] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 961.683287][ T5942] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 961.709752][ T5942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.124486][T19852] x_tables: unsorted entry at hook 2 [ 963.801529][T19866] tipc: Enabling of bearer rejected, failed to enable media [ 963.935436][T19870] vivid-004: disconnect [ 964.031166][T19867] vivid-004: reconnect [ 966.818497][T14558] usb 2-1: USB disconnect, device number 63 [ 970.930508][T19902] veth0_to_batadv: mtu greater than device maximum [ 971.009650][T14558] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 971.196663][T14558] usb 7-1: Using ep0 maxpacket: 16 [ 971.403850][T14558] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 971.497042][T14558] usb 7-1: string descriptor 0 read error: -22 [ 971.503401][T14558] usb 7-1: New USB device found, idVendor=2a39, idProduct=3fd3, bcdDevice= 0.40 [ 971.632258][T14558] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.671441][T14558] usb 7-1: 1:1 : format type 0 is detected, processed as PCM [ 971.716692][T14558] usb 7-1: 1:1 : unsupported sample bitwidth 8 in 9 bytes [ 972.902184][T19925] tipc: Enabled bearer , priority 0 [ 972.973544][T14558] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 973.015006][T14558] usb 7-1: unit 1 not found! [ 973.167141][T19946] syzkaller0: entered promiscuous mode [ 973.202674][T19946] syzkaller0: entered allmulticast mode [ 973.235757][T19947] tipc: Resetting bearer [ 973.773586][T19924] tipc: Disabling bearer [ 973.791200][T14558] usb 7-1: USB disconnect, device number 52 [ 974.532447][ T5907] tipc: Node number set to 2631759443 [ 974.599425][T19976] netlink: 1047 bytes leftover after parsing attributes in process `syz.6.3903'. [ 974.687105][T19976] bridge_slave_1: default FDB implementation only supports local addresses [ 975.281978][ T5893] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 975.571366][ T5893] usb 6-1: device descriptor read/64, error -71 [ 976.280840][ T5893] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 976.693787][ T5893] usb 6-1: device descriptor read/64, error -71 [ 976.782882][T20001] tipc: Enabled bearer , priority 0 [ 976.815025][T20001] syzkaller0: entered promiscuous mode [ 976.864706][ T5893] usb usb6-port1: attempt power cycle [ 976.892613][T20001] syzkaller0: entered allmulticast mode [ 977.444345][ T5893] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 977.708014][ T5893] usb 6-1: device descriptor read/8, error -71 [ 997.127228][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 997.147102][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1005.996764][T16380] Bluetooth: hci3: command 0x0406 tx timeout [ 1018.420025][T20009] tipc: Resetting bearer [ 1020.769895][T14558] tipc: Node number set to 2959396090 [ 1054.772702][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.796127][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.338911][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.358270][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.650904][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.703481][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1223.386467][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1223.393484][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5893/1:b..l [ 1223.402007][ C1] rcu: (detected by 1, t=10503 jiffies, g=133721, q=978100 ncpus=2) [ 1223.410217][ C1] task:kworker/0:3 state:R running task stack:21088 pid:5893 tgid:5893 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1223.425368][ C1] Workqueue: usb_hub_wq hub_event [ 1223.430460][ C1] Call Trace: [ 1223.433770][ C1] [ 1223.436748][ C1] __schedule+0x15dd/0x52d0 [ 1223.441296][ C1] ? update_load_avg+0x1b0/0x1ec0 [ 1223.446447][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1223.451421][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1223.456396][ C1] ? __pfx___schedule+0x10/0x10 [ 1223.461282][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1223.466273][ C1] preempt_schedule_irq+0x4d/0xa0 [ 1223.471779][ C1] irqentry_exit+0x599/0x620 [ 1223.477558][ C1] ? trace_irq_disable+0x3b/0x150 [ 1223.483072][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1223.489359][ C1] RIP: 0010:unwind_next_frame+0x513/0x23c0 [ 1223.495209][ C1] Code: c1 e8 3f 48 01 c8 48 83 e0 fe 4c 8d 3c 45 00 00 00 00 49 01 ef 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 <84> c0 75 27 49 63 07 4c 01 f8 49 8d 4f 04 4c 39 e0 48 0f 46 e9 49 [ 1223.514852][ C1] RSP: 0018:ffffc90004ab70b8 EFLAGS: 00000a03 [ 1223.521042][ C1] RAX: 0000000000000000 RBX: ffffffff90337628 RCX: dffffc0000000000 [ 1223.529128][ C1] RDX: ffffffff903375f0 RSI: ffffffff90b43fd6 RDI: ffffffff8c27d520 [ 1223.537212][ C1] RBP: ffffffff903375f0 R08: 000000000000000f R09: ffffffff8e75e5a0 [ 1223.545212][ C1] R10: ffffc90004ab71d8 R11: ffffffff81b0db30 R12: ffffffff82302396 [ 1223.553309][ C1] R13: ffffffff903375f0 R14: ffffc90004ab7188 R15: ffffffff9033760c [ 1223.561408][ C1] ? qlist_free_all+0x96/0x100 [ 1223.566225][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1223.572426][ C1] ? unwind_next_frame+0xd4/0x23c0 [ 1223.577583][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1223.582730][ C1] ? qlist_free_all+0x97/0x100 [ 1223.587534][ C1] ? qlist_free_all+0x97/0x100 [ 1223.592328][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1223.598512][ C1] arch_stack_walk+0x11b/0x150 [ 1223.603410][ C1] ? qlist_free_all+0x97/0x100 [ 1223.608302][ C1] stack_trace_save+0xa9/0x100 [ 1223.613095][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1223.618517][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1223.623502][ C1] save_stack+0x122/0x230 [ 1223.627870][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1223.632944][ C1] ? __pfx_save_stack+0x10/0x10 [ 1223.637830][ C1] ? __free_frozen_pages+0xc2b/0xdb0 [ 1223.643151][ C1] ? __slab_free+0x263/0x2b0 [ 1223.647776][ C1] ? qlist_free_all+0x97/0x100 [ 1223.652596][ C1] __reset_page_owner+0x71/0x1f0 [ 1223.657566][ C1] __free_frozen_pages+0xc2b/0xdb0 [ 1223.662723][ C1] __slab_free+0x263/0x2b0 [ 1223.667179][ C1] ? qlist_free_all+0x8c/0x100 [ 1223.671975][ C1] qlist_free_all+0x97/0x100 [ 1223.676596][ C1] kasan_quarantine_reduce+0x148/0x160 [ 1223.682089][ C1] __kasan_slab_alloc+0x22/0x80 [ 1223.686972][ C1] __kmalloc_noprof+0x316/0x760 [ 1223.691856][ C1] ? usb_alloc_urb+0x46/0x150 [ 1223.696575][ C1] ? __kmalloc_noprof+0x1b8/0x760 [ 1223.701653][ C1] usb_alloc_urb+0x46/0x150 [ 1223.706185][ C1] usb_control_msg+0x118/0x3e0 [ 1223.710978][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1223.716299][ C1] hub_ext_port_status+0x116/0x820 [ 1223.721456][ C1] hub_port_debounce+0x220/0x330 [ 1223.726437][ C1] hub_event+0x1d4e/0x4f30 [ 1223.730888][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 1223.736057][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1223.741059][ C1] ? __pfx_hub_event+0x10/0x10 [ 1223.745987][ C1] ? process_scheduled_works+0xa8d/0x18c0 [ 1223.751779][ C1] ? process_scheduled_works+0xa8d/0x18c0 [ 1223.757531][ C1] process_scheduled_works+0xb6e/0x18c0 [ 1223.763143][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1223.769171][ C1] ? assign_work+0x3d5/0x5e0 [ 1223.773809][ C1] worker_thread+0xa53/0xfc0 [ 1223.778463][ C1] kthread+0x388/0x470 [ 1223.782559][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1223.787701][ C1] ? __pfx_kthread+0x10/0x10 [ 1223.792319][ C1] ret_from_fork+0x51e/0xb90 [ 1223.796945][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1223.802173][ C1] ? __switch_to+0xc7d/0x1450 [ 1223.806883][ C1] ? __pfx_kthread+0x10/0x10 [ 1223.811677][ C1] ret_from_fork_asm+0x1a/0x30 [ 1223.816484][ C1]