last executing test programs: 8.763786732s ago: executing program 0 (id=1471): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x84, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x80000}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x84}}, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, 0x0, &(0x7f00000023c0)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000000c0)="3b76210fb6150f209e440f20c0663503000000440f22c00fa2660fc7b2d42af30fa7d0440f20c066350d000000440f22c06767f2caab12bad004ec", 0x3b}], 0x1, 0xd, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f0000000080)={0x10000, 0x14000, 0x8}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x12c, 0x9, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_USERDATA={0xfc, 0xd, 0x1, 0x0, "c6ca9a175afda02c6be0b2db3158a2d6634da781cd1e91d88d0ee092263c44a27a1a7fdc051fc6cf3f8f59dbe6334f8c02c2a698820596e3a8b450d34c63e98c1bde214e2225d61777a9178d194049fe4e55a7c2e3703f3116652fb5be196a491344a158529f3bcd3b039d120c72ca29cc7f0a506958b618c2efa01585b9869f5a522cccbcf7c7bbac4dff07f8491bc6ee544963f9c219214dc5ec30dfe8db3d451b1a4c7ff6c9edf442f1a3f075ab8d8547d7ccc761fa94a64e7c5ca33a8e7f5d6512551cfdc5ac6e6ce123c2f1703559565ebfe6e5cb75921f4f23b0d3bdd7d838d474a0db44184a0b848c556a455f60f7c56d7706b724"}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xe8}]}, @NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6007}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x73}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x75a67c8f9af4e011}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2c}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELCHAIN={0x38, 0x5, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x100000001}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x208}}, 0x800) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x10583a, 0x5, 0xa, 0x4000000000, 0x6, 0x2, 0x1041, 0x4, 0x7, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x9, 0x800005, 0x6a], 0xeeee8000, 0x1000d6}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 8.38997737s ago: executing program 0 (id=1472): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0x23, 0x6, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000040), 0x8) close_range(r0, r3, 0x2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknod(&(0x7f00000000c0)='./file1/file3\x00', 0xc000, 0x81b) r4 = landlock_create_ruleset(&(0x7f0000000440)={0x6621, 0x2}, 0x18, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac1(0x2, 0x0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000b00)={0x44, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000240)={&(0x7f0000000080)=[{0x81, 0x1000, 0x0, 0x0}], 0x1}) landlock_restrict_self(r4, 0x0) 8.387798054s ago: executing program 3 (id=1474): syz_usb_connect(0x3, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) syz_usb_connect$uac1(0x1, 0x93, &(0x7f0000000200)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0xe2, 0x60, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0xcd}, [@mixer_unit={0x5, 0x24, 0x4, 0x3, 0x40}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x5, 0x5, 0x0, {0x7, 0x25, 0x1, 0x80, 0x7, 0x800}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x11, 0x4, 0x3, 0x7, "4dca2738b5"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x1, 0x1, 0x5, 0x2, "212a690ce2610b10"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x80, 0x2, 0x2, {0x7, 0x25, 0x1, 0x2, 0x0, 0xb5ec}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x310, 0x9, 0xe, 0x4, 0x28, 0x8}, 0xbd, &(0x7f0000000300)={0x5, 0xf, 0xbd, 0x4, [@generic={0x83, 0x10, 0x0, "ef9f2a6cc4c0f5df174405b79b61c59012d649cc1b59a7143096d5b7d050eceb253d4d90ec96c7665774756c2ab4b55d3573b0a07be8954f95c62c2464255d1802645e3c892eec0e22bbcc05c6d9c2138083426b48e80fa7646084c0a725efc49a72406a0cdb179be060b20f27275dfbc2e865dfa072b843939782b848dd4851"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2a26282d63c81e8c, 0x2, 0x5, 0xf}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x3, 0x1, 0x0, 0x10}, @ssp_cap={0x20, 0x10, 0xa, 0x4, 0x5, 0x3, 0x0, 0x1ff, [0xc0f0, 0x1800f, 0x600f, 0x3f00, 0xff003f]}]}, 0x1, [{0xc, &(0x7f00000003c0)=@string={0xc, 0x3, "dcf01f8a3a4989cdc091"}}]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80000) connect$unix(r0, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0xfffffffffffffffd, 0x183003) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40100000000000071108b000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = socket$qrtr(0x2a, 0x2, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000b00)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000c00)=0xe4) r10 = getpid() sendmmsg$unix(r8, &(0x7f0000001a80)=[{{&(0x7f0000000480)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000840)=[{&(0x7f0000000500)="c62dc9e75de6fdce9a12f0eb693de3fb876e32c29afd16852d32dda9754930bcc514692ad81edff891d6c1de3824b6bdcc167d2d9d982c8c975ba5d0aff8544c97dd7a704705994bdd28a49ba4e47d02fa743020efc77891ab8be66606801efebd81846d2577cf0ef378d8d06fbdd2cad9c0864fa25e7cb99b3c5eb8dd1906e2a3602fb4391ffcdeb2de73e039076dba6b98da600cbeb0ae3cb6c3c5928edc72", 0xa0}, {&(0x7f00000005c0)="5f6cf1bd6e300b846d991198b11f295d807c9e0c091a43808d", 0x19}, {&(0x7f0000000600)="ffdbe8f5465f0689783c2be6f150a1c84e1b7097c6342050e033fc91182831cb8b14f48fa7a90d8a159da3b693883d100013034fea83e5628887cdc8fef80ba52964ba089eefd60c9f6da764c2c0f8fc7eedc5c17895154df7a6df837f4d8bf81185946f588259615a21d85fe4da47dc72ac643fd6ee9913bf0fd5db797a99ea47cfa25f4a48f74041bc2d305da1ffe43f71d52b0b5ddeccffa3529e11c6589ada376d25d09bd85dc82771b70bca2cdd360021dfc1f65364dd31af", 0xbb}, {&(0x7f00000006c0)="487fe54b5d02f2978a6e231dfbc11e5f0209ca7c16a199c1153798bf139183076165687c53fdba007e77f342d4397c0e6fd62d7c463d37cf9a48a1b8b40b74fc1510ec3e3bb8840ac5d4b84f96a7d3c4b0920cf9da002932de699c8ad7e80e0e8c70ae45f4c2bff4173c7fd81ad32f8a8cc171fcc5017e94fc11dfa15e61558da12c8ae047b6c7bed7c47152e0ba77451ba4e691eb3325", 0x97}, {&(0x7f0000000780)="95709373e83f6cf242aca71680bd65f833383aa126ec417e2f2651715f780c93aae3ee98f1a897bc2ca4688a90e06688a0e61d645a3195e9abee95854a3d73aa30cb6ac393ca8d9fab6c3bbd89f25aac6612933d074ea95421486930bfceb25e8afa041a2c54fae8a34b6a4bb8dfd64cf5b4f38e7d014d064bfcc98aa08ac416057ec3cc7116b34ea0a8f787e89e5a6115c163ae356885635fddac74", 0x9c}], 0x5, 0x0, 0x0, 0x84}}, {{&(0x7f0000000880)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000ac0)=[{&(0x7f0000000900)="c58b5ae2867f6ff5ad4f84edca92366d288e3a492ebd1c7afeb822167b46db462055cf7ea4c578359cdf65bd66fedec615256d6f526b42ea25ccfa6625524cb33ec73265cbe0deb5d36e098f011a7fcf8632932b8cadd9c05685c48a07bb0db2446e4ba00d452b30c953c958b8cd9224b5f91b6d0322314e9982202eb898d02ff4530d7543ef106dae1c5c66d7bf4e65f73475214a1217d82f2d848cc70b8d702eb3529e3f52534596128b92", 0xac}, {&(0x7f00000009c0)="b6b7c2b219300c7f6259e8f474306d94078b403a51f3965bcb8f6d0817ec95d6ee5b13d397cb05d333af206d70faf3bf76d403e4c76a5a04675f74748e025f9bcd027d10c4e04038933534046ddb636eb48fc2aab6137cdaeb5e6e1cc3b0b52b47afb723e451aa9c6bb7cbaf86f6950f4c0ec14f4f80c67c2f0b82bf847ce4c22f43db554ef598074d6f19edd494947b24034cf507b8f323f6f59ac80f761190876bc2d2f8398430755ca733b9210d1359cfb06471942838b0a8659350fab5010175046262dd8d1e4603f9de551929c95825348d177ee2c390", 0xd9}], 0x2, &(0x7f0000000c40)=[@cred={{0x18, 0x1, 0x2, {0x0, r9, 0xee01}}}, @rights={{0x24, 0x1, 0x1, [r7, r0, r8, r8, r8, r0]}}], 0x3c, 0x20000804}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000c80)="fdc24bc322", 0x5}, {&(0x7f0000000cc0)="ae6288ff567eaed80047a281020930ce79db706ac9fcb1f4d24f42e7fb5729603728e263d5973e06d3f660aab19587dfde41ea45e8dbc16fa3305ece", 0x3c}], 0x2, &(0x7f0000000dc0)=[@cred={{0x18, 0x1, 0x2, {r10, r9}}}], 0x18, 0x4044880}}, {{&(0x7f0000000e00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000ec0)=[{&(0x7f0000000e80)="3af30ac3707026c935e6d975d46b13eea54759968f3a1e94aa25fdcc1d23", 0x1e}], 0x1, 0x0, 0x0, 0x10}}, {{&(0x7f0000000f00)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001000)=[{&(0x7f0000000f80)="713e1b31cc7621949c2ad8ed38193dd9450d182aedc44f649ad749400fbe07aad1a3dabbaa8745639a033df46f10805acd3eb275b3cb856bf0bdb9e3416ba5b98b9041059bfacb49a82162fff68a6da4eb0baea961e3711b4fe3b4dc", 0x5c}], 0x1, &(0x7f0000001040)=[@cred={{0x18, 0x1, 0x2, {r10, r9}}}], 0x18, 0x4008000}}, {{&(0x7f0000001080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001100)="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", 0xfa}, {&(0x7f0000001200)="bf2851f99e2abf9cbf5b133fc1d6cdc4319c1739b554371b5089e0ff57c9145d49ed9f3cf28be9afa1e21ca9778b6cd960b3bf7baac9a7f25c5e660cfc5328206d4cd8f8265cd1266a42a198c1740600f6166ddc075561e69b6276ddba2c286339d8b395ccbf025231a2cd9b72dca480c96c", 0x72}, {&(0x7f0000001280)="ce4510d9217cc57b4c20e047ce43ac0504a27d45bc2d9c21c1d698e2c2b6698bcd19fc01d3f38c6979b773633cf25f0f992854e49b861a8c452e9627f1e652ccbc3a386d33f32232a9aed296108a4173ce86b0628ab1b7ffd6de670aceb42cdd62c294a5b7f55ac0b02fec1f1d653bed481be35175550538e8aadb91e6d66e11d70dbf5a936c0806e4a1846b9488588d", 0x90}, {&(0x7f0000001340)}, {&(0x7f0000001380)="409ab3d5a91b200cc214ed0d74799f05f64612670c6492c85474c774e17de590a16194f390adc274b48c638cfc03a72521e77b552b6b83002a2b87d14734e440fc77015e2917c92810040d83123ee47fc988792a88c8f07ae70a1fedd16ea22d1a8fbc3c9b0b1bd22c77c3847df43ca8eafa79d4a5b0d43d4b30245dd4315bbcf0df21ecf016ecd1cc829976d9b009b00a135ceda209e763d881b396a8a6", 0x9e}], 0x5, 0x0, 0x0, 0x80}}, {{&(0x7f0000001480)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001880)=[{&(0x7f0000001500)="b2ff2a9371c1549bc4e902b00e4c504bdf70a9fe097f6d8f85a858b2e02b49084693a0920a00f8f602da660e169fc15aad14b3677af4c82c596229b24f2228b02375ab70d5cef50f69a379bd49e6988b73b9b565d1bd3b17962f11e993b69af899d4ad5f52b6accbb5e4825975d9ea5a1c766c1b257a2602c4ac0c8bb0269b97675c0491d9defe66f47e322ae14db8f8c7b3746c244a5a07da08c672731d5168c2c63bc3aa426d", 0xa7}, {&(0x7f00000015c0)="a0553e5c25e0292f3c413b3d5a4ea184e4a41a8689ab58c5b86172266011e62075675334586f50e714d717b9329867b84308425a3deee5f82854c0e01b52a1717f", 0x41}, {&(0x7f0000001640)="b876c36b2ee299320b1d491d49584c4fe7eb9e7735a2ebf8e0c06f11a6256848fc39de43cd70a34be3d0613f362290551b93f8e5744c7c4e3c9a2ca66a2e4ac3edff71d260ba8f0bd4eb826b541e827adcb3b9bcaedcbc5e8f4f47e5a8574876130f03f032e5a84202e832db4d288fe0f622cce7873c163447ecce9606f0519d844f24763770f4f76ea2267694b14694f64f950abf87fe76ef7b07fd95b667410c72067833115134726a6ffa62d4af4ce140505410e010c1b9f94875bb9c1c8f3e5e2ad7b4493823e272486a530761a3eeee349ef7b022b823ebef0319d734c848fe5f", 0xe3}, {&(0x7f0000001740)="5e75cd8533ce9bca92beb858997b6ee51f4b9e7294debaa131592366ffea05ac67fec59b1c29ebaaa226d4325dcd8b1bb308d43837d9da86f4576bba18163ab920e03588", 0x44}, {&(0x7f00000017c0)="7bca181d39840e682b44d5a69fc040612213a742ec5f7a7eeb252d58eca53f0357d054aa51d7f385f76335783709b2536b2cba8487295a55761aae322e1ac7ce27e6191dc60e2d83a3a7fddec6d2344c5b74df2bd69276e591bc83c3cc952648e61c9aa5cae2c5094171eced707d8c85ab5107efa46448713a7cc7a349de30afe4d88ff22fe8b1e909e046", 0x8b}], 0x5, &(0x7f0000001980)=[@rights={{0x20, 0x1, 0x1, [r0, r2, r8, 0xffffffffffffffff, r6]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff, r8, 0xffffffffffffffff]}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {r10}}}, @cred={{0x18, 0x1, 0x2, {0x0, r9}}}, @cred={{0x18, 0x1, 0x2, {r10}}}, @rights={{0x18, 0x1, 0x1, [r1, r3, r2]}}, @cred={{0x18, 0x1, 0x2, {0x0, r9}}}], 0xcc, 0x84}}], 0x7, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000340)={0x0}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000003c0)={r11, @in6={{0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x7}}}, 0x84) recvmmsg(r7, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r12 = syz_io_uring_setup(0x8d2, &(0x7f0000000240)={0x0, 0x0, 0x1000, 0x6}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r13, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f00000001c0)) syz_io_uring_submit(r13, r14, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044}) io_uring_enter(r12, 0x2afd, 0x308b, 0xc, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xa000000}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) setitimer(0x2, &(0x7f0000000200)={{0x77359400}, {r4, r5/1000+10000}}, 0x0) ioctl$FIOCLEX(r8, 0x5451) prlimit64(0x0, 0x0, &(0x7f0000000140)={0xb4, 0x516f}, &(0x7f0000000180)) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000000000)=""/230) 7.034969575s ago: executing program 1 (id=1477): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000180), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {}, {0x1, 0xc, 0x9, 0xc, 0x6, 0x8, "bf240fef"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x28, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xc2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400}, 0x20000881) close_range(r3, 0xffffffffffffffff, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x4dc8aa39}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe0b5bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) 6.306628664s ago: executing program 3 (id=1478): r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) write(r1, &(0x7f0000000040)="1c0000001a009b", 0x7) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) r2 = syz_io_uring_setup(0x4e80, &(0x7f0000000640)={0x0, 0xec25, 0xff6374a9cf2a3a6f, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001880)={0x10001b, 0xfa}, 0x2c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) sendto$inet6(r4, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 5.810436087s ago: executing program 2 (id=1480): io_setup(0x6, &(0x7f0000001380)=0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c00000000020104000000000000000002000005300002802900012a30375fe3f0f0730000000000000000000000000014000400fe880000000000000000000000000101040003800400018016420cba678669b3"], 0x4c}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x358, 0xffffffff, 0x398, 0xe8, 0x398, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xff000000, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa4, 0xe4}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0xa4, 0xe4}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x1, {0x2000010}}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3b4) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000000c0)={0x28, 0x5, 0x0, 0x0, &(0x7f00008c0000/0x2000)=nil, 0x2000}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x3, &(0x7f00000000c0)=""/156, &(0x7f0000000040)=0x28) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r2, &(0x7f0000000140), &(0x7f0000000240)=""/154}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f00000006c0)='net/dev_mcast\x00') r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000401e04012800000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, r4, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, r4}]) 5.619811761s ago: executing program 4 (id=1481): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4104aec6, &(0x7f0000000c00)={0x812ae1569e331002, [{0x0, 0x0, 0xfffffffe, 0x0}, {0x3, 0x0, 0xfed, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x0, 0x0, 0x802, 0x0}, {0x1, 0x0, 0x2, 0x0}, {0x1, 0x0, 0xffff, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x2, 0x0, 0x40, 0x0}, {0x7, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x1, 0x0}, {0x0, 0x0, 0x8, 0x0}, {0x2, 0x0, 0x100, 0x0}, {0x3, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x0, 0x0, 0x42c0, 0x0}, {0x3, 0x0, 0x7, 0x0}]}) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0) 5.509441933s ago: executing program 1 (id=1482): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0xfff2, &(0x7f0000000000)={&(0x7f0000000380)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xf2ff}, {}, {0xffe0, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850) 5.459647568s ago: executing program 3 (id=1483): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x84, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x80000}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x84}}, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, 0x0, &(0x7f00000023c0)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000000c0)="3b76210fb6150f209e440f20c0663503000000440f22c00fa2660fc7b2d42af30fa7d0440f20c066350d000000440f22c06767f2caab12bad004ec", 0x3b}], 0x1, 0xd, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f0000000080)={0x10000, 0x14000, 0x8}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x12c, 0x9, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_USERDATA={0xfc, 0xd, 0x1, 0x0, "c6ca9a175afda02c6be0b2db3158a2d6634da781cd1e91d88d0ee092263c44a27a1a7fdc051fc6cf3f8f59dbe6334f8c02c2a698820596e3a8b450d34c63e98c1bde214e2225d61777a9178d194049fe4e55a7c2e3703f3116652fb5be196a491344a158529f3bcd3b039d120c72ca29cc7f0a506958b618c2efa01585b9869f5a522cccbcf7c7bbac4dff07f8491bc6ee544963f9c219214dc5ec30dfe8db3d451b1a4c7ff6c9edf442f1a3f075ab8d8547d7ccc761fa94a64e7c5ca33a8e7f5d6512551cfdc5ac6e6ce123c2f1703559565ebfe6e5cb75921f4f23b0d3bdd7d838d474a0db44184a0b848c556a455f60f7c56d7706b724"}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xe8}]}, @NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6007}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x73}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x75a67c8f9af4e011}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2c}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELCHAIN={0x38, 0x5, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x100000001}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x208}}, 0x800) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x10583a, 0x5, 0xa, 0x4000000000, 0x6, 0x2, 0x1041, 0x4, 0x7, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x9, 0x800005, 0x6a], 0xeeee8000, 0x1000d6}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.404665437s ago: executing program 4 (id=1484): socket$inet6_sctp(0xa, 0x5, 0x84) socket$igmp(0x2, 0x3, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x3c93, &(0x7f0000000900)={0x0, 0x1246, 0x80, 0x1, 0x60}) r5 = syz_io_uring_setup(0x892, &(0x7f0000000140)={0x0, 0x6de6, 0x1000, 0x7, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c80980000000080000000003000000d600", 0xffffffffffffffff}) r10 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r10, 0xc0285700, &(0x7f0000000200)={0x40000002, "fa02791d2a69a2610f02000000000000001100010000000800", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r11, 0xc0303e03, &(0x7f0000000080)={"6739a34dd06472f036ebf314e262816800", r9}) r12 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x28d00, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r10, 0xc0285700, &(0x7f0000000240)={0x1b, "8a6035ceeae3ecc42317afad010000000000000400", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r12, 0xc0285700, &(0x7f00000004c0)={0x9, "34e6498c270e0000b56a000005000000000000000000000000000100"}) socket$nl_generic(0x10, 0x3, 0x10) close(0x3) ioctl$SYNC_IOC_MERGE(r13, 0xc0303e03, &(0x7f0000000040)={"130f2672af9ee0452321864922cd3bebd7f9cec5064e58445f1268334b4900"}) io_uring_enter(r5, 0x47f6, 0x0, 0x2, 0x0, 0x300) 5.316243715s ago: executing program 1 (id=1485): mknod(&(0x7f00000000c0)='./file0\x00', 0x10, 0xa96c) lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)=@known='security.apparmor\x00', 0x0, 0x0, 0x1) socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000640)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0xe39b}, 0x0) chdir(&(0x7f0000000480)='./cgroup\x00') mkdir(0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000140)=0x8) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x8012, r2, 0x0) open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a94020000060a0b040000000000000000020000004c020480600101800a0001006d617463680000005001028008000240000000000b000100706f6c696379000838010300ebae551382395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad51f6d123a616cf3eb44b275fe6bc6bf402a3f9335458bb7a92f23fc0aa88f2495ff70157ea6b29f7fab11ec362920cab3350208c749f342b38e0df9334cea6fe1e331d76beb7094102d5d409992dcd236e3fd7a8785f97ae9d01b0822c161a491bef0501f8e81ddd66d1b676e8c9f0b2159c2cc0b069669b5af546f644c39bedd627181d27d9c185aae5d910550f08822c6fec60302779b9e812403a2ff826781b4c761bd14eb7515ae224260c9534891afdd05d18b2ffe91f4052766a0b9fe3955bfb1866142e7c1caceb88de7d6e8a5c08ce052bb461f0c7ee914ca5c98c19442d0262a6d04a8e3e29360a9b5871812e08542d54775f5843d70b15871bc247e30d66b83560c014f5000000e80001800c0001006269747769736500d8000280cc0005809d000100c1a42566412347c8ddbbd3a43fbe0a700b783e1fce7fb3f2cfbd502c93250db1355674f6eb79bc5dd64d6828a3d02edf646b1cc3e497dfebea0f20aacc74d9950c2eb683f67146d6b194a0803abf5993c0d604562ebd6d85c65e594e42383000e827d7bff6ff65b8519e6b65af30ecf78d2d59b039155d2be20a0bd0656b627a7e68260846bbcdcaac83276d6e25f7f79cada83930e713b4060000002800028008000180fffffffb0900020073797a310000000008000180fffffffc08000180fffffffc08000640000000010900010073797a30000000000900020073797a320000000008000b400000000208000a40000000000c0006400000000600000001140000001100200000000000000000000000000a"], 0x2bc}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000060a0b040000000000000000"], 0x60}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000000008010800000000000000000a00000805000300060000000900010073797a3100000000060002406558000014000480080005400000000508000440000000f9ebdec2c35b5216168b86"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x80) lsetxattr$security_capability(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000000), 0x0, 0x0, 0x1) 5.112316661s ago: executing program 0 (id=1486): r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x0, 0x0, 'none\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0xfffffffc}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 4.613420896s ago: executing program 0 (id=1487): pipe(&(0x7f0000000040)={0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000180)) read$FUSE(r0, &(0x7f0000001740)={0x2020}, 0x2020) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000280)={r4, 0x2}, 0x8) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) recvmsg(0xffffffffffffffff, &(0x7f0000002240)={0x0, 0x0, 0x0}, 0x0) 3.649690139s ago: executing program 4 (id=1488): r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x0, 0x0, 'none\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0xfffffffc}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 3.415817484s ago: executing program 4 (id=1489): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x1d, r2}, 0x10, &(0x7f00000005c0)={&(0x7f0000000200)=@canfd={{0x3, 0x0, 0x1}, 0x2a, 0x0, 0x0, 0x0, "5f706bf4795cbdd63859bab6265740b2f0389a302aaa9710c6dd938b74b441e64d12261ed10f056c968112ebeabe89f0baa1c6960ca22838380ed595b967dd9d"}, 0x48}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="f80000002600010021bd700000000000ffffffff000000000000000000000000ff01000000000000000000000000000100"/64, @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="0000000000000000a8000700e00000020000000000001400000000000000000000000000000000000000000000000000000000000000008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010002"], 0xf8}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) 3.311847703s ago: executing program 2 (id=1490): r0 = socket$inet6_udp(0xa, 0x2, 0x0) listen(r0, 0x6) 3.287904505s ago: executing program 0 (id=1491): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000000000fbdbdf25e000000100"/32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000008000000000000000000000000000000000000000000000000000000084010500e0000002000000000000000000000000000000003c00000000000000ffffffff000000000000000000000000ff34000000020000480500000000000000000000ac1414aa000000000000000000000000000000003c0000000a000000fc01000000000000000000000000000102000000000000000008000000080000fcffffff000000000000000000000000000000000000000032000000000000007f0000010000000000000000000000000335000003000000040000000002000000000000fe80000000000000000000000000002f0000000033"], 0x23c}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 3.22009838s ago: executing program 4 (id=1492): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x84, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x80000}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x84}}, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, 0x0, &(0x7f00000023c0)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000000c0)="3b76210fb6150f209e440f20c0663503000000440f22c00fa2660fc7b2d42af30fa7d0440f20c066350d000000440f22c06767f2caab12bad004ec", 0x3b}], 0x1, 0xd, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f0000000080)={0x10000, 0x14000, 0x8}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x12c, 0x9, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_USERDATA={0xfc, 0xd, 0x1, 0x0, "c6ca9a175afda02c6be0b2db3158a2d6634da781cd1e91d88d0ee092263c44a27a1a7fdc051fc6cf3f8f59dbe6334f8c02c2a698820596e3a8b450d34c63e98c1bde214e2225d61777a9178d194049fe4e55a7c2e3703f3116652fb5be196a491344a158529f3bcd3b039d120c72ca29cc7f0a506958b618c2efa01585b9869f5a522cccbcf7c7bbac4dff07f8491bc6ee544963f9c219214dc5ec30dfe8db3d451b1a4c7ff6c9edf442f1a3f075ab8d8547d7ccc761fa94a64e7c5ca33a8e7f5d6512551cfdc5ac6e6ce123c2f1703559565ebfe6e5cb75921f4f23b0d3bdd7d838d474a0db44184a0b848c556a455f60f7c56d7706b724"}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xe8}]}, @NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6007}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x75a67c8f9af4e011}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2c}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELCHAIN={0x38, 0x5, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x100000001}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x208}}, 0x800) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x10583a, 0x5, 0xa, 0x4000000000, 0x6, 0x2, 0x1041, 0x4, 0x7, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x9, 0x800005, 0x6a], 0xeeee8000, 0x1000d6}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.116213867s ago: executing program 3 (id=1493): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000180), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {}, {0x1, 0xc, 0x9, 0xc, 0x6, 0x8, "bf240fef"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x34, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x54}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xc2}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x400}, 0x20000881) close_range(r3, 0xffffffffffffffff, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x4dc8aa39}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe0b5bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) 3.035195589s ago: executing program 2 (id=1494): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000000000fbdbdf25e0000001000000000000000000000000ac1414bb00"/48, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000008000000000000000000000000000000000000000000000000000000084010500e0000002000000000000000000000000000000003c00000000000000ffffffff000000000000000000000000ff34000000020000480500000000000000000000ac1414aa000000000000000000000000000000003c0000000a000000fc01000000000000000000000000000102000000000000000008000000080000fcffffff000000000000000000000000000000000000000032000000000000007f0000010000000000000000000000000335000003000000040000000002000000000000fe80000000000000000000000000002f0000000033"], 0x23c}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 2.997047199s ago: executing program 0 (id=1495): syz_usb_connect(0x3, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) syz_usb_connect$uac1(0x1, 0x93, &(0x7f0000000200)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0xe2, 0x60, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0xcd}, [@mixer_unit={0x5, 0x24, 0x4, 0x3, 0x40}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x5, 0x5, 0x0, {0x7, 0x25, 0x1, 0x80, 0x7, 0x800}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x11, 0x4, 0x3, 0x7, "4dca2738b5"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x1, 0x1, 0x5, 0x2, "212a690ce2610b10"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x80, 0x2, 0x2, {0x7, 0x25, 0x1, 0x2, 0x0, 0xb5ec}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x310, 0x9, 0xe, 0x4, 0x28, 0x8}, 0xbd, &(0x7f0000000300)={0x5, 0xf, 0xbd, 0x4, [@generic={0x83, 0x10, 0x0, "ef9f2a6cc4c0f5df174405b79b61c59012d649cc1b59a7143096d5b7d050eceb253d4d90ec96c7665774756c2ab4b55d3573b0a07be8954f95c62c2464255d1802645e3c892eec0e22bbcc05c6d9c2138083426b48e80fa7646084c0a725efc49a72406a0cdb179be060b20f27275dfbc2e865dfa072b843939782b848dd4851"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2a26282d63c81e8c, 0x2, 0x5, 0xf}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x3, 0x1, 0x0, 0x10}, @ssp_cap={0x20, 0x10, 0xa, 0x4, 0x5, 0x3, 0x0, 0x1ff, [0xc0f0, 0x1800f, 0x600f, 0x3f00, 0xff003f]}]}, 0x1, [{0xc, &(0x7f00000003c0)=@string={0xc, 0x3, "dcf01f8a3a4989cdc091"}}]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80000) connect$unix(r0, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0xfffffffffffffffd, 0x183003) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40100000000000071108b000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = socket$qrtr(0x2a, 0x2, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000b00)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000c00)=0xe4) r10 = getpid() sendmmsg$unix(r8, &(0x7f0000001a80)=[{{&(0x7f0000000480)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000840)=[{&(0x7f0000000500)="c62dc9e75de6fdce9a12f0eb693de3fb876e32c29afd16852d32dda9754930bcc514692ad81edff891d6c1de3824b6bdcc167d2d9d982c8c975ba5d0aff8544c97dd7a704705994bdd28a49ba4e47d02fa743020efc77891ab8be66606801efebd81846d2577cf0ef378d8d06fbdd2cad9c0864fa25e7cb99b3c5eb8dd1906e2a3602fb4391ffcdeb2de73e039076dba6b98da600cbeb0ae3cb6c3c5928edc72", 0xa0}, {&(0x7f00000005c0)="5f6cf1bd6e300b846d991198b11f295d807c9e0c091a43808d", 0x19}, {&(0x7f0000000600)="ffdbe8f5465f0689783c2be6f150a1c84e1b7097c6342050e033fc91182831cb8b14f48fa7a90d8a159da3b693883d100013034fea83e5628887cdc8fef80ba52964ba089eefd60c9f6da764c2c0f8fc7eedc5c17895154df7a6df837f4d8bf81185946f588259615a21d85fe4da47dc72ac643fd6ee9913bf0fd5db797a99ea47cfa25f4a48f74041bc2d305da1ffe43f71d52b0b5ddeccffa3529e11c6589ada376d25d09bd85dc82771b70bca2cdd360021dfc1f65364dd31af", 0xbb}, {&(0x7f00000006c0)="487fe54b5d02f2978a6e231dfbc11e5f0209ca7c16a199c1153798bf139183076165687c53fdba007e77f342d4397c0e6fd62d7c463d37cf9a48a1b8b40b74fc1510ec3e3bb8840ac5d4b84f96a7d3c4b0920cf9da002932de699c8ad7e80e0e8c70ae45f4c2bff4173c7fd81ad32f8a8cc171fcc5017e94fc11dfa15e61558da12c8ae047b6c7bed7c47152e0ba77451ba4e691eb3325", 0x97}, {&(0x7f0000000780)="95709373e83f6cf242aca71680bd65f833383aa126ec417e2f2651715f780c93aae3ee98f1a897bc2ca4688a90e06688a0e61d645a3195e9abee95854a3d73aa30cb6ac393ca8d9fab6c3bbd89f25aac6612933d074ea95421486930bfceb25e8afa041a2c54fae8a34b6a4bb8dfd64cf5b4f38e7d014d064bfcc98aa08ac416057ec3cc7116b34ea0a8f787e89e5a6115c163ae356885635fddac74", 0x9c}], 0x5, 0x0, 0x0, 0x84}}, {{&(0x7f0000000880)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000ac0)=[{&(0x7f0000000900)="c58b5ae2867f6ff5ad4f84edca92366d288e3a492ebd1c7afeb822167b46db462055cf7ea4c578359cdf65bd66fedec615256d6f526b42ea25ccfa6625524cb33ec73265cbe0deb5d36e098f011a7fcf8632932b8cadd9c05685c48a07bb0db2446e4ba00d452b30c953c958b8cd9224b5f91b6d0322314e9982202eb898d02ff4530d7543ef106dae1c5c66d7bf4e65f73475214a1217d82f2d848cc70b8d702eb3529e3f52534596128b92", 0xac}, {&(0x7f00000009c0)="b6b7c2b219300c7f6259e8f474306d94078b403a51f3965bcb8f6d0817ec95d6ee5b13d397cb05d333af206d70faf3bf76d403e4c76a5a04675f74748e025f9bcd027d10c4e04038933534046ddb636eb48fc2aab6137cdaeb5e6e1cc3b0b52b47afb723e451aa9c6bb7cbaf86f6950f4c0ec14f4f80c67c2f0b82bf847ce4c22f43db554ef598074d6f19edd494947b24034cf507b8f323f6f59ac80f761190876bc2d2f8398430755ca733b9210d1359cfb06471942838b0a8659350fab5010175046262dd8d1e4603f9de551929c95825348d177ee2c390", 0xd9}], 0x2, &(0x7f0000000c40)=[@cred={{0x18, 0x1, 0x2, {0x0, r9, 0xee01}}}, @rights={{0x24, 0x1, 0x1, [r7, r0, r8, r8, r8, r0]}}], 0x3c, 0x20000804}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000c80)="fdc24bc322", 0x5}, {&(0x7f0000000cc0)="ae6288ff567eaed80047a281020930ce79db706ac9fcb1f4d24f42e7fb5729603728e263d5973e06d3f660aab19587dfde41ea45e8dbc16fa3305ece", 0x3c}], 0x2, &(0x7f0000000dc0)=[@cred={{0x18, 0x1, 0x2, {r10, r9}}}], 0x18, 0x4044880}}, {{&(0x7f0000000e00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000ec0)=[{&(0x7f0000000e80)="3af30ac3707026c935e6d975d46b13eea54759968f3a1e94aa25fdcc1d23", 0x1e}], 0x1, 0x0, 0x0, 0x10}}, {{&(0x7f0000000f00)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001000)=[{&(0x7f0000000f80)="713e1b31cc7621949c2ad8ed38193dd9450d182aedc44f649ad749400fbe07aad1a3dabbaa8745639a033df46f10805acd3eb275b3cb856bf0bdb9e3416ba5b98b9041059bfacb49a82162fff68a6da4eb0baea961e3711b4fe3b4dc", 0x5c}], 0x1, &(0x7f0000001040)=[@cred={{0x18, 0x1, 0x2, {r10, r9}}}], 0x18, 0x4008000}}, {{&(0x7f0000001080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001100)="647a2e1797708706caa3b2021073a7e2fa79e2f7c57aa20a061c5f07f7002f0ad0e2f8948f8e21819a7419a6a0d036a50288d694723633c4f4dd763a2ccb7104a1211827c98ea96b8f2aa37f9c57c5a56e8341892d149eef0343665b38613a7fc119d8c6b5871b2e90f6e07e649d7eb4cee6688a3bf9bc2cfaf7a0b2094ce1fe78de74b5a73d63514ae50c4e6670d43b90af787a31d8e5dbe30c237966784c1f3c9f3c5ffdc135b5d53770b66544131fdf315cd87451977a2691d04fdfe0f0dc78c7eb4a64a8375215de8b126372def589ad17a65d064584de1b6b291b320be9a5e74f05765201634d58104265f88d8c44b34a419c7813d3f6c7", 0xfa}, {&(0x7f0000001200)="bf2851f99e2abf9cbf5b133fc1d6cdc4319c1739b554371b5089e0ff57c9145d49ed9f3cf28be9afa1e21ca9778b6cd960b3bf7baac9a7f25c5e660cfc5328206d4cd8f8265cd1266a42a198c1740600f6166ddc075561e69b6276ddba2c286339d8b395ccbf025231a2cd9b72dca480c96c", 0x72}, {&(0x7f0000001280)="ce4510d9217cc57b4c20e047ce43ac0504a27d45bc2d9c21c1d698e2c2b6698bcd19fc01d3f38c6979b773633cf25f0f992854e49b861a8c452e9627f1e652ccbc3a386d33f32232a9aed296108a4173ce86b0628ab1b7ffd6de670aceb42cdd62c294a5b7f55ac0b02fec1f1d653bed481be35175550538e8aadb91e6d66e11d70dbf5a936c0806e4a1846b9488588d", 0x90}, {&(0x7f0000001340)}, {&(0x7f0000001380)="409ab3d5a91b200cc214ed0d74799f05f64612670c6492c85474c774e17de590a16194f390adc274b48c638cfc03a72521e77b552b6b83002a2b87d14734e440fc77015e2917c92810040d83123ee47fc988792a88c8f07ae70a1fedd16ea22d1a8fbc3c9b0b1bd22c77c3847df43ca8eafa79d4a5b0d43d4b30245dd4315bbcf0df21ecf016ecd1cc829976d9b009b00a135ceda209e763d881b396a8a6", 0x9e}], 0x5, 0x0, 0x0, 0x80}}, {{&(0x7f0000001480)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001880)=[{&(0x7f0000001500)="b2ff2a9371c1549bc4e902b00e4c504bdf70a9fe097f6d8f85a858b2e02b49084693a0920a00f8f602da660e169fc15aad14b3677af4c82c596229b24f2228b02375ab70d5cef50f69a379bd49e6988b73b9b565d1bd3b17962f11e993b69af899d4ad5f52b6accbb5e4825975d9ea5a1c766c1b257a2602c4ac0c8bb0269b97675c0491d9defe66f47e322ae14db8f8c7b3746c244a5a07da08c672731d5168c2c63bc3aa426d", 0xa7}, {&(0x7f00000015c0)="a0553e5c25e0292f3c413b3d5a4ea184e4a41a8689ab58c5b86172266011e62075675334586f50e714d717b9329867b84308425a3deee5f82854c0e01b52a1717f", 0x41}, {&(0x7f0000001640)="b876c36b2ee299320b1d491d49584c4fe7eb9e7735a2ebf8e0c06f11a6256848fc39de43cd70a34be3d0613f362290551b93f8e5744c7c4e3c9a2ca66a2e4ac3edff71d260ba8f0bd4eb826b541e827adcb3b9bcaedcbc5e8f4f47e5a8574876130f03f032e5a84202e832db4d288fe0f622cce7873c163447ecce9606f0519d844f24763770f4f76ea2267694b14694f64f950abf87fe76ef7b07fd95b667410c72067833115134726a6ffa62d4af4ce140505410e010c1b9f94875bb9c1c8f3e5e2ad7b4493823e272486a530761a3eeee349ef7b022b823ebef0319d734c848fe5f", 0xe3}, {&(0x7f0000001740)="5e75cd8533ce9bca92beb858997b6ee51f4b9e7294debaa131592366ffea05ac67fec59b1c29ebaaa226d4325dcd8b1bb308d43837d9da86f4576bba18163ab920e03588", 0x44}, {&(0x7f00000017c0)="7bca181d39840e682b44d5a69fc040612213a742ec5f7a7eeb252d58eca53f0357d054aa51d7f385f76335783709b2536b2cba8487295a55761aae322e1ac7ce27e6191dc60e2d83a3a7fddec6d2344c5b74df2bd69276e591bc83c3cc952648e61c9aa5cae2c5094171eced707d8c85ab5107efa46448713a7cc7a349de30afe4d88ff22fe8b1e909e046", 0x8b}], 0x5, &(0x7f0000001980)=[@rights={{0x20, 0x1, 0x1, [r0, r2, r8, 0xffffffffffffffff, r6]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff, r8, 0xffffffffffffffff]}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {r10}}}, @cred={{0x18, 0x1, 0x2, {0x0, r9}}}, @cred={{0x18, 0x1, 0x2, {r10}}}, @rights={{0x18, 0x1, 0x1, [r1, r3, r2]}}, @cred={{0x18, 0x1, 0x2, {0x0, r9}}}], 0xcc, 0x84}}], 0x7, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000340)={0x0}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000003c0)={r11, @in6={{0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}, 0x7}}}, 0x84) recvmmsg(r7, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r12 = syz_io_uring_setup(0x8d2, &(0x7f0000000240)={0x0, 0x0, 0x1000, 0x6}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r13, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f00000001c0)) syz_io_uring_submit(r13, r14, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044}) io_uring_enter(r12, 0x2afd, 0x308b, 0xc, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xa000000}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) setitimer(0x2, &(0x7f0000000200)={{0x77359400}, {r4, r5/1000+10000}}, 0x0) ioctl$FIOCLEX(r8, 0x5451) prlimit64(0x0, 0x0, &(0x7f0000000140)={0xb4, 0x516f}, &(0x7f0000000180)) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000000000)=""/230) 2.817006492s ago: executing program 1 (id=1496): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x80, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) shutdown(r2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x33}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) move_pages(0x0, 0x6, &(0x7f00000000c0)=[&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil], 0x0, 0x0, 0x4) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000030b040373812e653"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, 0xffffffffffffffff, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2c, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0xffff1000, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 2.097148516s ago: executing program 2 (id=1497): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x4) r0 = socket(0x2d, 0x2, 0x0) connect$qrtr(r0, &(0x7f00000002c0)={0x2d, 0x0, 0x8000}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1700"/20, @ANYRES32=0x1], 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="3800000040000701feffffff02000000017c009fdb0042800c00018006000600800a000014000280100014800c0016"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000040000701feffffff00000000017c0000040042801000018006000600894f000004001c00040002"], 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0182101, &(0x7f0000000200)) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x543943) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x400454a4, &(0x7f0000000c00)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x403, 0x70bd2a, 0x0, {0x0, 0x0, 0x74, 0x0, 0x11}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x80}]}}}]}, 0x44}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 1.341416208s ago: executing program 4 (id=1498): socket$inet6_sctp(0xa, 0x5, 0x84) socket$igmp(0x2, 0x3, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x3c93, &(0x7f0000000900)={0x0, 0x1246, 0x80, 0x1, 0x60}) r5 = syz_io_uring_setup(0x892, &(0x7f0000000140)={0x0, 0x6de6, 0x1000, 0x7, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c80980000000080000000003000000d600", 0xffffffffffffffff}) r10 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r10, 0xc0285700, &(0x7f0000000200)={0x40000002, "fa02791d2a69a2610f02000000000000001100010000000800", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r11, 0xc0303e03, &(0x7f0000000080)={"6739a34dd06472f036ebf314e262816800", r9}) r12 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x28d00, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r10, 0xc0285700, &(0x7f0000000240)={0x1b, "8a6035ceeae3ecc42317afad010000000000000400", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r12, 0xc0285700, &(0x7f00000004c0)={0x9, "34e6498c270e0000b56a000005000000000000000000000000000100"}) socket$nl_generic(0x10, 0x3, 0x10) close(0x3) ioctl$SYNC_IOC_MERGE(r13, 0xc0303e03, &(0x7f0000000040)={"130f2672af9ee0452321864922cd3bebd7f9cec5064e58445f1268334b4900"}) io_uring_enter(r5, 0x47f6, 0x0, 0x2, 0x0, 0x300) 951.613366ms ago: executing program 3 (id=1499): ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xf5}}, './file0\x00'}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x4000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) sendto(r3, &(0x7f0000000180)='+', 0x1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000005cc0)=[{{0x0, 0xfffffd26, 0x0, 0x0, &(0x7f0000004400)=""/211, 0xd3}}, {{0x0, 0x0, &(0x7f0000004600), 0x2}, 0xc5b7}, {{0x0, 0xffffffffffffff39, &(0x7f0000005c40)=[{0x0, 0x7}], 0x1}}], 0x3, 0x182, &(0x7f0000005ec0)={0x0, 0x3938700}) 951.260068ms ago: executing program 2 (id=1500): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = openat$sndseq(0xffffff9c, &(0x7f00000000c0), 0x123400) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000000)={{}, {0x78, 0x3}, 0x3, 0x1, 0x80}) 364.169058ms ago: executing program 3 (id=1501): pipe(&(0x7f0000000040)={0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000180)) read$FUSE(r0, &(0x7f0000001740)={0x2020}, 0x2020) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000280)={r4, 0x2}, 0x8) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) recvmsg(0xffffffffffffffff, &(0x7f0000002240)={0x0, 0x0, 0x0}, 0x0) 342.803347ms ago: executing program 1 (id=1502): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_DONE(r1, 0x0, 0xc9, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e1d, 0x1, @mcast1, 0x7}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x400ad80, 0x0, 0x0) 319.345665ms ago: executing program 2 (id=1503): r0 = fsopen(&(0x7f0000000280)='jfs\x00', 0x1) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f00000002c0)='lazytime\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={0x0, 0xffffffffffffffff, 0x1, 0x2}}, 0x20) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x401, 0x9, 0x8, 0x0, 0x7}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000ba1000/0x1000)=nil, 0x1000, 0x0, 0x4, 0x1c0000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x5ff, 0x2000) timer_create(0x0, 0x0, 0x0) syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0) r4 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f0000000400)='_', 0x1, 0xfffffffffffffffe) preadv(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x3) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f0000006400), &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000680)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b0204dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e38b8beb84ef6d549eed5aaa86dbe646fc77a9b3df93199c796fa597f452bed6b6fbcc812df9be8e35d8d15086609c033a5d2a42d5dcb0d103098fa302c5b1", 0xbe, 0xfffffffffffffffe) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="78010000190001000000000010000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x178}}, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r6}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) r8 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x0, 0x802e2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}}) pipe(&(0x7f0000000040)) io_setup(0x3ff, &(0x7f0000000500)) 0s ago: executing program 1 (id=1504): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x98, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xd, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x64, 0x2, [@TCA_MATCHALL_ACT={0x60, 0x2, [@m_ife={0x5c, 0x1, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0xfff, 0x0, 0xa, 0x3}, 0x1}}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x7}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x1000}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x10880}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) (fail_nth: 6) kernel console output (not intermixed with test programs): subj=unconfined pid=9775 comm="syz.4.1005" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d539 code=0x7ffc0000 [ 416.044670][ T30] audit: type=1326 audit(1769020777.492:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9775 comm="syz.4.1005" exe="/root/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf747d539 code=0x7ffc0000 [ 416.103042][ T30] audit: type=1326 audit(1769020777.502:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9775 comm="syz.4.1005" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d539 code=0x7ffc0000 [ 416.116370][ T9781] input: syz1 as /devices/virtual/input/input17 [ 416.243440][ T30] audit: type=1326 audit(1769020777.502:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9775 comm="syz.4.1005" exe="/root/syz-executor" sig=0 arch=40000003 syscall=83 compat=1 ip=0xf747d539 code=0x7ffc0000 [ 416.442374][ T9781] xt_TCPMSS: Only works on TCP SYN packets [ 416.773334][ T9799] FAULT_INJECTION: forcing a failure. [ 416.773334][ T9799] name failslab, interval 1, probability 0, space 0, times 0 [ 416.827411][ T9799] CPU: 0 UID: 0 PID: 9799 Comm: syz.2.1015 Not tainted syzkaller #0 PREEMPT(full) [ 416.827432][ T9799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 416.827439][ T9799] Call Trace: [ 416.827444][ T9799] [ 416.827449][ T9799] dump_stack_lvl+0xe8/0x150 [ 416.827469][ T9799] should_fail_ex+0x412/0x560 [ 416.827489][ T9799] should_failslab+0xa8/0x100 [ 416.827504][ T9799] __kmalloc_cache_noprof+0x83/0x6e0 [ 416.827516][ T9799] ? nfnetlink_rcv+0xfe1/0x27b0 [ 416.827536][ T9799] nfnetlink_rcv+0xfe1/0x27b0 [ 416.827574][ T9799] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 416.827608][ T9799] ? ref_tracker_free+0x693/0x840 [ 416.827640][ T9799] ? __netlink_deliver_tap+0x807/0x850 [ 416.827652][ T9799] ? netlink_deliver_tap+0x2e/0x1b0 [ 416.827673][ T9799] netlink_unicast+0x80f/0x9b0 [ 416.827694][ T9799] ? __pfx_netlink_unicast+0x10/0x10 [ 416.827710][ T9799] ? __alloc_skb+0x193/0x390 [ 416.827726][ T9799] ? netlink_sendmsg+0x650/0xb40 [ 416.827737][ T9799] ? skb_put+0x11b/0x210 [ 416.827754][ T9799] netlink_sendmsg+0x813/0xb40 [ 416.827771][ T9799] ? __pfx_netlink_sendmsg+0x10/0x10 [ 416.827785][ T9799] ? __asan_memset+0x22/0x50 [ 416.827799][ T9799] ? aa_sock_msg_perm+0xf1/0x1b0 [ 416.827815][ T9799] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 416.827826][ T9799] ? __pfx_netlink_sendmsg+0x10/0x10 [ 416.827838][ T9799] __sock_sendmsg+0x21c/0x270 [ 416.827854][ T9799] ____sys_sendmsg+0x4d7/0x810 [ 416.827870][ T9799] ? __pfx_____sys_sendmsg+0x10/0x10 [ 416.827884][ T9799] ? kstrtoull+0x12f/0x1d0 [ 416.827903][ T9799] ___sys_sendmsg+0x2a5/0x360 [ 416.827913][ T9799] ? __lock_acquire+0x6b5/0x2cf0 [ 416.827928][ T9799] ? __pfx____sys_sendmsg+0x10/0x10 [ 416.827940][ T9799] ? get_pid_task+0x20/0x1f0 [ 416.827954][ T9799] ? get_pid_task+0x20/0x1f0 [ 416.827966][ T9799] ? get_pid_task+0x20/0x1f0 [ 416.827995][ T9799] ? __fget_files+0x2a/0x420 [ 416.828009][ T9799] ? __fget_files+0x3a0/0x420 [ 416.828028][ T9799] __sys_sendmsg+0x183/0x260 [ 416.828040][ T9799] ? __pfx___sys_sendmsg+0x10/0x10 [ 416.828058][ T9799] ? __pfx_ksys_write+0x10/0x10 [ 416.828074][ T9799] __do_fast_syscall_32+0x1d2/0x540 [ 416.828091][ T9799] ? lockdep_hardirqs_on+0x7a/0x110 [ 416.828105][ T9799] ? do_fast_syscall_32+0x33/0x70 [ 416.828119][ T9799] ? asm_int80_emulation+0x1a/0x20 [ 416.828130][ T9799] ? do_int80_emulation+0x20e/0x400 [ 416.828148][ T9799] do_fast_syscall_32+0x33/0x70 [ 416.828164][ T9799] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 416.828178][ T9799] RIP: 0023:0xf7f94539 [ 416.828189][ T9799] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 416.828198][ T9799] RSP: 002b:00000000f545650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 416.828212][ T9799] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 416.828220][ T9799] RDX: 0000000000040000 RSI: 0000000000000000 RDI: 0000000000000000 [ 416.828228][ T9799] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 416.828234][ T9799] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 416.828241][ T9799] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 416.828261][ T9799] [ 417.593974][ T9812] netlink: 'syz.4.1016': attribute type 2 has an invalid length. [ 417.654547][ T9812] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1016'. [ 417.916694][ T5925] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 417.962190][ T9822] FAULT_INJECTION: forcing a failure. [ 417.962190][ T9822] name failslab, interval 1, probability 0, space 0, times 0 [ 417.975960][ T9822] CPU: 0 UID: 0 PID: 9822 Comm: syz.4.1022 Not tainted syzkaller #0 PREEMPT(full) [ 417.975988][ T9822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 417.975999][ T9822] Call Trace: [ 417.976007][ T9822] [ 417.976014][ T9822] dump_stack_lvl+0xe8/0x150 [ 417.976046][ T9822] should_fail_ex+0x412/0x560 [ 417.976078][ T9822] should_failslab+0xa8/0x100 [ 417.976104][ T9822] __kmalloc_noprof+0xde/0x7e0 [ 417.976122][ T9822] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 417.976156][ T9822] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 417.976190][ T9822] genl_family_rcv_msg_doit+0xd9/0x330 [ 417.976225][ T9822] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 417.976258][ T9822] ? apparmor_capable+0x137/0x1a0 [ 417.976280][ T9822] ? bpf_lsm_capable+0x9/0x20 [ 417.976313][ T9822] ? security_capable+0x7e/0x2c0 [ 417.976343][ T9822] genl_rcv_msg+0x61c/0x7a0 [ 417.976376][ T9822] ? __pfx_genl_rcv_msg+0x10/0x10 [ 417.976399][ T9822] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 417.976416][ T9822] ? __pfx_nl80211_join_ibss+0x10/0x10 [ 417.976436][ T9822] ? __pfx_nl80211_post_doit+0x10/0x10 [ 417.976458][ T9822] ? __pfx_ref_tracker_free+0x10/0x10 [ 417.976494][ T9822] netlink_rcv_skb+0x232/0x4b0 [ 417.976516][ T9822] ? __pfx_genl_rcv_msg+0x10/0x10 [ 417.976541][ T9822] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 417.976558][ T9822] ? genl_rcv+0x19/0x40 [ 417.976600][ T9822] ? down_read+0x272/0x2e0 [ 417.976616][ T9822] ? genl_rcv+0xd/0x40 [ 417.976641][ T9822] genl_rcv+0x28/0x40 [ 417.976664][ T9822] netlink_unicast+0x80f/0x9b0 [ 417.976702][ T9822] ? __pfx_netlink_unicast+0x10/0x10 [ 417.976729][ T9822] ? __alloc_skb+0x193/0x390 [ 417.976756][ T9822] ? netlink_sendmsg+0x650/0xb40 [ 417.976775][ T9822] ? skb_put+0x11b/0x210 [ 417.976805][ T9822] netlink_sendmsg+0x813/0xb40 [ 417.976835][ T9822] ? __pfx_netlink_sendmsg+0x10/0x10 [ 417.976856][ T9822] ? __asan_memset+0x22/0x50 [ 417.976871][ T9822] ? aa_sock_msg_perm+0xf1/0x1b0 [ 417.976887][ T9822] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 417.976897][ T9822] ? __pfx_netlink_sendmsg+0x10/0x10 [ 417.976910][ T9822] __sock_sendmsg+0x21c/0x270 [ 417.976926][ T9822] ____sys_sendmsg+0x4d7/0x810 [ 417.976943][ T9822] ? __pfx_____sys_sendmsg+0x10/0x10 [ 417.976956][ T9822] ? kstrtoull+0x12f/0x1d0 [ 417.976987][ T9822] ___sys_sendmsg+0x2a5/0x360 [ 417.977004][ T9822] ? __lock_acquire+0x6b5/0x2cf0 [ 417.977029][ T9822] ? __pfx____sys_sendmsg+0x10/0x10 [ 417.977048][ T9822] ? get_pid_task+0x20/0x1f0 [ 417.977062][ T9822] ? get_pid_task+0x20/0x1f0 [ 417.977075][ T9822] ? get_pid_task+0x20/0x1f0 [ 417.977104][ T9822] ? __fget_files+0x2a/0x420 [ 417.977118][ T9822] ? __fget_files+0x3a0/0x420 [ 417.977137][ T9822] __sys_sendmsg+0x183/0x260 [ 417.977150][ T9822] ? __pfx___sys_sendmsg+0x10/0x10 [ 417.977168][ T9822] ? __pfx_ksys_write+0x10/0x10 [ 417.977184][ T9822] __do_fast_syscall_32+0x1d2/0x540 [ 417.977200][ T9822] ? lockdep_hardirqs_on+0x7a/0x110 [ 417.977214][ T9822] ? do_fast_syscall_32+0x33/0x70 [ 417.977229][ T9822] ? asm_int80_emulation+0x1a/0x20 [ 417.977239][ T9822] ? do_int80_emulation+0x20e/0x400 [ 417.977257][ T9822] do_fast_syscall_32+0x33/0x70 [ 417.977274][ T9822] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 417.977287][ T9822] RIP: 0023:0xf747d539 [ 417.977306][ T9822] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 417.977315][ T9822] RSP: 002b:00000000f54a650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 417.977329][ T9822] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300 [ 417.977337][ T9822] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 417.977344][ T9822] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 417.977351][ T9822] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 417.977358][ T9822] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 417.977375][ T9822] [ 418.356806][ T5925] usb 2-1: Using ep0 maxpacket: 16 [ 418.413462][ T5925] usb 2-1: config 0 has an invalid interface number: 15 but max is 0 [ 418.432160][ T5925] usb 2-1: config 0 has no interface number 0 [ 418.455319][ T5925] usb 2-1: New USB device found, idVendor=05ac, idProduct=e7da, bcdDevice=4b.a9 [ 418.507612][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.551950][ T5925] usb 2-1: Product: syz [ 418.560370][ T5925] usb 2-1: Manufacturer: syz [ 418.565197][ T5925] usb 2-1: SerialNumber: syz [ 418.605282][ T5925] usb 2-1: config 0 descriptor?? [ 418.745443][ T9828] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1025'. [ 418.766533][ T5909] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 418.794933][ T9828] 8021q: adding VLAN 0 to HW filter on device bond1 [ 418.840472][ T5925] ipheth 2-1:0.15: Unable to find alternate settings interface [ 418.880031][ T5925] usb 2-1: USB disconnect, device number 18 [ 418.902751][ T9828] 8021q: adding VLAN 0 to HW filter on device bond1 [ 418.926415][ T5909] usb 5-1: Using ep0 maxpacket: 8 [ 418.935127][ T9828] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 418.975133][ T5909] usb 5-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 418.977436][ T9828] bond1: (slave ip6tnl1): Error -95 calling set_mac_address [ 418.993022][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.003561][ T5909] usb 5-1: Product: syz [ 419.008192][ T5909] usb 5-1: Manufacturer: syz [ 419.013232][ T5909] usb 5-1: SerialNumber: syz [ 419.034628][ T5909] usb 5-1: config 0 descriptor?? [ 419.048691][ T5909] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 419.926358][ T5909] gspca_sonixj: reg_r err -110 [ 419.931303][ T5909] sonixj 5-1:0.0: probe with driver sonixj failed with error -110 [ 420.007452][ T9824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.043929][ T9824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.108281][ T9824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.159969][ T9824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.492353][ T9847] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 421.097071][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 421.097093][ T30] audit: type=1326 audit(1769020782.952:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9862 comm="syz.2.1035" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 421.126154][ T30] audit: type=1326 audit(1769020782.952:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9862 comm="syz.2.1035" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 421.159555][ T30] audit: type=1326 audit(1769020782.992:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9862 comm="syz.2.1035" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 421.183185][ T30] audit: type=1326 audit(1769020782.992:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9862 comm="syz.2.1035" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 421.207462][ T30] audit: type=1326 audit(1769020782.992:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9862 comm="syz.2.1035" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 421.230324][ T30] audit: type=1326 audit(1769020783.002:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9862 comm="syz.2.1035" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 421.287656][ T30] audit: type=1326 audit(1769020783.002:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9862 comm="syz.2.1035" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 421.310103][ T30] audit: type=1326 audit(1769020783.002:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9862 comm="syz.2.1035" exe="/root/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 421.334306][ T30] audit: type=1326 audit(1769020783.002:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9862 comm="syz.2.1035" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 421.381553][ T30] audit: type=1326 audit(1769020783.002:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9862 comm="syz.2.1035" exe="/root/syz-executor" sig=0 arch=40000003 syscall=83 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 421.594425][ T5909] usb 5-1: USB disconnect, device number 26 [ 422.815849][ T9881] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 423.316363][ T5923] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 423.382619][ T9897] sctp: [Deprecated]: syz.0.1047 (pid 9897) Use of int in max_burst socket option deprecated. [ 423.382619][ T9897] Use struct sctp_assoc_value instead [ 423.439544][ T9899] FAULT_INJECTION: forcing a failure. [ 423.439544][ T9899] name failslab, interval 1, probability 0, space 0, times 0 [ 423.456578][ T9899] CPU: 1 UID: 0 PID: 9899 Comm: syz.1.1048 Not tainted syzkaller #0 PREEMPT(full) [ 423.456607][ T9899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 423.456617][ T9899] Call Trace: [ 423.456624][ T9899] [ 423.456632][ T9899] dump_stack_lvl+0xe8/0x150 [ 423.456663][ T9899] should_fail_ex+0x412/0x560 [ 423.456692][ T9899] should_failslab+0xa8/0x100 [ 423.456716][ T9899] __kmalloc_noprof+0xde/0x7e0 [ 423.456734][ T9899] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 423.456765][ T9899] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 423.456797][ T9899] genl_family_rcv_msg_doit+0xd9/0x330 [ 423.456830][ T9899] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 423.456863][ T9899] ? apparmor_capable+0x137/0x1a0 [ 423.456885][ T9899] ? bpf_lsm_capable+0x9/0x20 [ 423.456905][ T9899] ? security_capable+0x7e/0x2c0 [ 423.456932][ T9899] genl_rcv_msg+0x61c/0x7a0 [ 423.456962][ T9899] ? __pfx_genl_rcv_msg+0x10/0x10 [ 423.456983][ T9899] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 423.456999][ T9899] ? __pfx_nl80211_start_ap+0x10/0x10 [ 423.457016][ T9899] ? __pfx_nl80211_post_doit+0x10/0x10 [ 423.457037][ T9899] ? __pfx_ref_tracker_free+0x10/0x10 [ 423.457066][ T9899] netlink_rcv_skb+0x232/0x4b0 [ 423.457086][ T9899] ? __pfx_genl_rcv_msg+0x10/0x10 [ 423.457111][ T9899] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 423.457128][ T9899] ? genl_rcv+0x19/0x40 [ 423.457170][ T9899] ? down_read+0x272/0x2e0 [ 423.457186][ T9899] ? genl_rcv+0xd/0x40 [ 423.457212][ T9899] genl_rcv+0x28/0x40 [ 423.457234][ T9899] netlink_unicast+0x80f/0x9b0 [ 423.457271][ T9899] ? __pfx_netlink_unicast+0x10/0x10 [ 423.457295][ T9899] ? __alloc_skb+0x193/0x390 [ 423.457321][ T9899] ? netlink_sendmsg+0x650/0xb40 [ 423.457339][ T9899] ? skb_put+0x11b/0x210 [ 423.457369][ T9899] netlink_sendmsg+0x813/0xb40 [ 423.457400][ T9899] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.457423][ T9899] ? __asan_memset+0x22/0x50 [ 423.457448][ T9899] ? aa_sock_msg_perm+0xf1/0x1b0 [ 423.457482][ T9899] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 423.457500][ T9899] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.457521][ T9899] __sock_sendmsg+0x21c/0x270 [ 423.457560][ T9899] ____sys_sendmsg+0x4d7/0x810 [ 423.457590][ T9899] ? __pfx_____sys_sendmsg+0x10/0x10 [ 423.457614][ T9899] ? kstrtoull+0x12f/0x1d0 [ 423.457648][ T9899] ___sys_sendmsg+0x2a5/0x360 [ 423.457664][ T9899] ? __lock_acquire+0x6b5/0x2cf0 [ 423.457689][ T9899] ? __pfx____sys_sendmsg+0x10/0x10 [ 423.457709][ T9899] ? get_pid_task+0x20/0x1f0 [ 423.457732][ T9899] ? get_pid_task+0x20/0x1f0 [ 423.457751][ T9899] ? get_pid_task+0x20/0x1f0 [ 423.457803][ T9899] ? __fget_files+0x2a/0x420 [ 423.457825][ T9899] ? __fget_files+0x3a0/0x420 [ 423.457859][ T9899] __sys_sendmsg+0x183/0x260 [ 423.457881][ T9899] ? __pfx___sys_sendmsg+0x10/0x10 [ 423.457913][ T9899] ? __pfx_ksys_write+0x10/0x10 [ 423.457941][ T9899] __do_fast_syscall_32+0x1d2/0x540 [ 423.457968][ T9899] ? lockdep_hardirqs_on+0x7a/0x110 [ 423.457990][ T9899] ? do_fast_syscall_32+0x33/0x70 [ 423.458015][ T9899] ? asm_int80_emulation+0x1a/0x20 [ 423.458032][ T9899] ? do_int80_emulation+0x20e/0x400 [ 423.458063][ T9899] do_fast_syscall_32+0x33/0x70 [ 423.458090][ T9899] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 423.458111][ T9899] RIP: 0023:0xf741d539 [ 423.458130][ T9899] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 423.458146][ T9899] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 423.458168][ T9899] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 423.458182][ T9899] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 423.458193][ T9899] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 423.458203][ T9899] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 423.458214][ T9899] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 423.458244][ T9899] [ 423.507884][ T5923] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 423.902853][ T5923] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 423.927255][ T5923] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 423.947389][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 423.957423][ T5923] usb 5-1: SerialNumber: syz [ 424.705936][ T5923] usb 5-1: 0:2 : does not exist [ 424.721336][ T5923] usb 5-1: unit 255 not found! [ 424.934887][ T5923] usb 5-1: USB disconnect, device number 27 [ 425.005434][ T9651] udevd[9651]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 425.146306][ T7382] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 425.316443][ T7382] usb 2-1: Using ep0 maxpacket: 16 [ 425.338571][ T7382] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 425.348878][ T9919] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 425.366047][ T7382] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 425.384594][ T7382] usb 2-1: Product: syz [ 425.396324][ T7382] usb 2-1: Manufacturer: syz [ 425.408606][ T7382] usb 2-1: SerialNumber: syz [ 425.434156][ T7382] usb 2-1: config 0 descriptor?? [ 425.817027][ T9917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.866067][ T9917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.880498][ T9924] FAULT_INJECTION: forcing a failure. [ 425.880498][ T9924] name failslab, interval 1, probability 0, space 0, times 0 [ 425.905993][ T9924] CPU: 0 UID: 0 PID: 9924 Comm: syz.3.1057 Not tainted syzkaller #0 PREEMPT(full) [ 425.906023][ T9924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 425.906035][ T9924] Call Trace: [ 425.906042][ T9924] [ 425.906052][ T9924] dump_stack_lvl+0xe8/0x150 [ 425.906083][ T9924] should_fail_ex+0x412/0x560 [ 425.906115][ T9924] should_failslab+0xa8/0x100 [ 425.906141][ T9924] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 425.906170][ T9924] ? __alloc_skb+0x193/0x390 [ 425.906201][ T9924] ? __alloc_skb+0x1d7/0x390 [ 425.906223][ T9924] ? __local_bh_enable_ip+0xd0/0x130 [ 425.906243][ T9924] ? __alloc_skb+0x193/0x390 [ 425.906268][ T9924] __alloc_skb+0x1d7/0x390 [ 425.906296][ T9924] netlink_ack+0x146/0xa50 [ 425.906413][ T9924] netlink_rcv_skb+0x2b6/0x4b0 [ 425.906435][ T9924] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 425.906466][ T9924] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 425.906497][ T9924] ? bpf_lsm_capable+0x9/0x20 [ 425.906518][ T9924] ? security_capable+0x7e/0x2c0 [ 425.906548][ T9924] nfnetlink_rcv+0x2c0/0x27b0 [ 425.906579][ T9924] ? __local_bh_enable_ip+0xd0/0x130 [ 425.906597][ T9924] ? lockdep_hardirqs_on+0x7a/0x110 [ 425.906622][ T9924] ? __dev_queue_xmit+0x2a7/0x32b0 [ 425.906642][ T9924] ? __local_bh_enable_ip+0xd0/0x130 [ 425.906659][ T9924] ? __dev_queue_xmit+0x2a7/0x32b0 [ 425.906676][ T9924] ? __dev_queue_xmit+0x1a32/0x32b0 [ 425.906694][ T9924] ? ___sys_sendmsg+0x2a5/0x360 [ 425.906715][ T9924] ? __dev_queue_xmit+0x2a7/0x32b0 [ 425.906744][ T9924] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 425.906776][ T9924] ? __pfx___dev_queue_xmit+0x10/0x10 [ 425.906803][ T9924] ? ref_tracker_free+0x693/0x840 [ 425.906827][ T9924] ? __copy_skb_header+0xa3/0x4a0 [ 425.906846][ T9924] ? __pfx_ref_tracker_free+0x10/0x10 [ 425.906872][ T9924] ? skb_clone+0x246/0x3a0 [ 425.906886][ T9924] ? __netlink_deliver_tap+0x807/0x850 [ 425.906897][ T9924] ? netlink_deliver_tap+0x2e/0x1b0 [ 425.906912][ T9924] ? netlink_deliver_tap+0x2e/0x1b0 [ 425.906928][ T9924] netlink_unicast+0x80f/0x9b0 [ 425.906950][ T9924] ? __pfx_netlink_unicast+0x10/0x10 [ 425.906966][ T9924] ? __alloc_skb+0x193/0x390 [ 425.906981][ T9924] ? netlink_sendmsg+0x650/0xb40 [ 425.906992][ T9924] ? skb_put+0x11b/0x210 [ 425.907010][ T9924] netlink_sendmsg+0x813/0xb40 [ 425.907026][ T9924] ? __pfx_netlink_sendmsg+0x10/0x10 [ 425.907040][ T9924] ? __asan_memset+0x22/0x50 [ 425.907055][ T9924] ? aa_sock_msg_perm+0xf1/0x1b0 [ 425.907070][ T9924] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 425.907081][ T9924] ? __pfx_netlink_sendmsg+0x10/0x10 [ 425.907093][ T9924] __sock_sendmsg+0x21c/0x270 [ 425.907109][ T9924] ____sys_sendmsg+0x4d7/0x810 [ 425.907125][ T9924] ? __pfx_____sys_sendmsg+0x10/0x10 [ 425.907138][ T9924] ? kstrtoull+0x12f/0x1d0 [ 425.907158][ T9924] ___sys_sendmsg+0x2a5/0x360 [ 425.907168][ T9924] ? __lock_acquire+0x6b5/0x2cf0 [ 425.907182][ T9924] ? __pfx____sys_sendmsg+0x10/0x10 [ 425.907194][ T9924] ? get_pid_task+0x20/0x1f0 [ 425.907208][ T9924] ? get_pid_task+0x20/0x1f0 [ 425.907220][ T9924] ? get_pid_task+0x20/0x1f0 [ 425.907249][ T9924] ? __fget_files+0x2a/0x420 [ 425.907261][ T9924] ? __fget_files+0x3a0/0x420 [ 425.907281][ T9924] __sys_sendmsg+0x183/0x260 [ 425.907293][ T9924] ? __pfx___sys_sendmsg+0x10/0x10 [ 425.907318][ T9924] ? __pfx_ksys_write+0x10/0x10 [ 425.907334][ T9924] __do_fast_syscall_32+0x1d2/0x540 [ 425.907350][ T9924] ? lockdep_hardirqs_on+0x7a/0x110 [ 425.907364][ T9924] ? do_fast_syscall_32+0x33/0x70 [ 425.907378][ T9924] ? asm_int80_emulation+0x1a/0x20 [ 425.907389][ T9924] ? do_int80_emulation+0x20e/0x400 [ 425.907408][ T9924] do_fast_syscall_32+0x33/0x70 [ 425.907424][ T9924] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 425.907438][ T9924] RIP: 0023:0xf743d539 [ 425.907450][ T9924] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 425.907460][ T9924] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 425.907473][ T9924] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000340 [ 425.907482][ T9924] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 425.907488][ T9924] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 425.907495][ T9924] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 425.907501][ T9924] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 425.907518][ T9924] [ 426.663592][ T9934] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1061'. [ 426.807203][ T7381] usb 2-1: USB disconnect, device number 19 [ 426.986344][ T5909] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 427.126362][ T5909] usb 5-1: device descriptor read/64, error -71 [ 427.236451][ T7382] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 427.366519][ T5909] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 427.420533][ T7382] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 427.446596][ T7382] usb 1-1: config 0 interface 0 has no altsetting 0 [ 427.469813][ T7382] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 427.494765][ T7382] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.515216][ T5909] usb 5-1: device descriptor read/64, error -71 [ 427.524052][ T7382] usb 1-1: Product: syz [ 427.532417][ T7382] usb 1-1: Manufacturer: syz [ 427.540456][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 427.540567][ T30] audit: type=1326 audit(1769020789.392:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9952 comm="syz.1.1068" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf741d539 code=0x0 [ 427.549488][ T7382] usb 1-1: SerialNumber: syz [ 427.623725][ T9954] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 427.643336][ T5909] usb usb5-port1: attempt power cycle [ 427.657852][ T7382] usb 1-1: config 0 descriptor?? [ 427.674062][ T7382] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 427.724040][ T7382] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 427.754567][ T7382] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 error while loading driver (-23) [ 427.996443][ T5909] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 428.027032][ T5909] usb 5-1: device descriptor read/8, error -71 [ 428.267485][ T5909] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 428.316084][ T5909] usb 5-1: device descriptor read/8, error -71 [ 428.436017][ T5909] usb usb5-port1: unable to enumerate USB device [ 429.754988][ T9976] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1074'. [ 429.895175][ T9981] sctp: [Deprecated]: syz.3.1078 (pid 9981) Use of int in max_burst socket option deprecated. [ 429.895175][ T9981] Use struct sctp_assoc_value instead [ 429.930942][ T30] audit: type=1326 audit(1769020791.782:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.2.1076" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 429.982952][ T30] audit: type=1326 audit(1769020791.812:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.2.1076" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 430.119275][ T30] audit: type=1326 audit(1769020791.812:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.2.1076" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 430.278752][ T30] audit: type=1326 audit(1769020791.812:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.2.1076" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 430.323812][ T30] audit: type=1326 audit(1769020791.812:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.2.1076" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 430.535882][ T30] audit: type=1326 audit(1769020791.812:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.2.1076" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 430.546017][ T5881] usb 1-1: USB disconnect, device number 24 [ 430.752809][ T30] audit: type=1326 audit(1769020791.812:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.2.1076" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 430.838890][ T30] audit: type=1326 audit(1769020791.812:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.2.1076" exe="/root/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 431.141920][ T9997] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 431.161332][ T30] audit: type=1326 audit(1769020791.812:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.2.1076" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 431.284910][ T9999] FAULT_INJECTION: forcing a failure. [ 431.284910][ T9999] name failslab, interval 1, probability 0, space 0, times 0 [ 431.326308][ T9999] CPU: 0 UID: 0 PID: 9999 Comm: syz.1.1081 Not tainted syzkaller #0 PREEMPT(full) [ 431.326336][ T9999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 431.326348][ T9999] Call Trace: [ 431.326356][ T9999] [ 431.326364][ T9999] dump_stack_lvl+0xe8/0x150 [ 431.326394][ T9999] should_fail_ex+0x412/0x560 [ 431.326424][ T9999] should_failslab+0xa8/0x100 [ 431.326447][ T9999] __kmalloc_cache_noprof+0x83/0x6e0 [ 431.326465][ T9999] ? __kmalloc_cache_noprof+0x3d1/0x6e0 [ 431.326478][ T9999] ? sctp_transport_new+0x7e/0x620 [ 431.326508][ T9999] sctp_transport_new+0x7e/0x620 [ 431.326527][ T9999] sctp_assoc_add_peer+0x259/0x13b0 [ 431.326553][ T9999] ? sctp_bind_addr_copy+0x380/0x3c0 [ 431.326580][ T9999] sctp_connect_new_asoc+0x329/0x6b0 [ 431.326607][ T9999] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 431.326631][ T9999] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 431.326654][ T9999] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 431.326680][ T9999] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 431.326703][ T9999] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 431.326721][ T9999] ? security_sctp_bind_connect+0x7e/0x2c0 [ 431.326743][ T9999] sctp_sendmsg+0x1577/0x2920 [ 431.326778][ T9999] ? __pfx_sctp_sendmsg+0x10/0x10 [ 431.326801][ T9999] ? aa_sk_perm+0x82d/0x960 [ 431.326830][ T9999] ? __pfx_aa_sk_perm+0x10/0x10 [ 431.326854][ T9999] ? sock_rps_record_flow+0x19/0x400 [ 431.326876][ T9999] ? inet_sendmsg+0x2f4/0x370 [ 431.326893][ T9999] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 431.326912][ T9999] __sock_sendmsg+0x19c/0x270 [ 431.326937][ T9999] __sys_sendto+0x3c0/0x550 [ 431.326964][ T9999] ? __pfx___sys_sendto+0x10/0x10 [ 431.327011][ T9999] ? fput+0xa0/0xd0 [ 431.327034][ T9999] ? ksys_write+0x242/0x270 [ 431.327053][ T9999] ? __pfx_ksys_write+0x10/0x10 [ 431.327071][ T9999] __ia32_sys_sendto+0xdd/0x100 [ 431.327099][ T9999] __do_fast_syscall_32+0x1d2/0x540 [ 431.327123][ T9999] ? lockdep_hardirqs_on+0x7a/0x110 [ 431.327144][ T9999] ? do_fast_syscall_32+0x33/0x70 [ 431.327165][ T9999] ? asm_int80_emulation+0x1a/0x20 [ 431.327180][ T9999] ? do_int80_emulation+0x20e/0x400 [ 431.327202][ T9999] ? rcu_is_watching+0x15/0xb0 [ 431.327226][ T9999] do_fast_syscall_32+0x33/0x70 [ 431.327250][ T9999] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 431.327270][ T9999] RIP: 0023:0xf741d539 [ 431.327285][ T9999] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 431.327300][ T9999] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 431.327320][ T9999] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080847fff [ 431.327333][ T9999] RDX: 000000000000fee4 RSI: 0000000000000000 RDI: 000000008005ffe4 [ 431.327344][ T9999] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 431.327354][ T9999] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 431.327365][ T9999] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 431.327392][ T9999] [ 432.239115][T10010] fuse: Unknown parameter 'f*•‰§üÚ¤WÆß3Ldt0xffffffffffffffff' [ 433.109489][T10014] netlink: 'syz.2.1086': attribute type 35 has an invalid length. [ 433.536546][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 433.536567][ T30] audit: type=1326 audit(1769020795.332:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10018 comm="syz.4.1088" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d539 code=0x7fc00000 [ 433.590487][ T30] audit: type=1326 audit(1769020795.332:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10018 comm="syz.4.1088" exe="/root/syz-executor" sig=0 arch=40000003 syscall=132 compat=1 ip=0xf747d539 code=0x7fc00000 [ 433.618340][ T30] audit: type=1326 audit(1769020795.332:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10018 comm="syz.4.1088" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d539 code=0x7fc00000 [ 433.641389][ T30] audit: type=1326 audit(1769020795.332:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10018 comm="syz.4.1088" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d539 code=0x7fc00000 [ 433.664412][ T30] audit: type=1326 audit(1769020795.332:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10018 comm="syz.4.1088" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d539 code=0x7fc00000 [ 433.687310][ T30] audit: type=1326 audit(1769020795.332:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10018 comm="syz.4.1088" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d539 code=0x7fc00000 [ 433.710355][ T30] audit: type=1326 audit(1769020795.332:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10018 comm="syz.4.1088" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d539 code=0x7fc00000 [ 433.805496][ T30] audit: type=1326 audit(1769020795.332:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10018 comm="syz.4.1088" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d539 code=0x7fc00000 [ 433.860516][ T30] audit: type=1326 audit(1769020795.332:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10018 comm="syz.4.1088" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d539 code=0x7fc00000 [ 433.915958][ T30] audit: type=1326 audit(1769020795.332:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10018 comm="syz.4.1088" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d539 code=0x7fc00000 [ 435.250341][T10012] netlink: 'syz.3.1085': attribute type 12 has an invalid length. [ 435.269120][T10012] netlink: 'syz.3.1085': attribute type 29 has an invalid length. [ 435.290930][T10012] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1085'. [ 435.319057][T10012] netlink: 'syz.3.1085': attribute type 2 has an invalid length. [ 435.347587][T10012] netlink: 'syz.3.1085': attribute type 3 has an invalid length. [ 435.366183][T10012] netlink: 15 bytes leftover after parsing attributes in process `syz.3.1085'. [ 435.634597][T10046] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1095'. [ 435.648566][T10046] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1095'. [ 435.690885][T10048] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 438.303871][T10072] netlink: 'syz.0.1102': attribute type 12 has an invalid length. [ 438.348811][T10072] netlink: 'syz.0.1102': attribute type 29 has an invalid length. [ 438.366716][T10072] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1102'. [ 438.388453][T10072] netlink: 'syz.0.1102': attribute type 2 has an invalid length. [ 438.406822][T10072] netlink: 'syz.0.1102': attribute type 3 has an invalid length. [ 438.432242][T10072] netlink: 15 bytes leftover after parsing attributes in process `syz.0.1102'. [ 438.454507][T10072] FAULT_INJECTION: forcing a failure. [ 438.454507][T10072] name failslab, interval 1, probability 0, space 0, times 0 [ 438.542469][T10072] CPU: 0 UID: 0 PID: 10072 Comm: syz.0.1102 Not tainted syzkaller #0 PREEMPT(full) [ 438.542505][T10072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 438.542513][T10072] Call Trace: [ 438.542518][T10072] [ 438.542523][T10072] dump_stack_lvl+0xe8/0x150 [ 438.542545][T10072] should_fail_ex+0x412/0x560 [ 438.542564][T10072] should_failslab+0xa8/0x100 [ 438.542580][T10072] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 438.542602][T10072] ? __alloc_skb+0x1d7/0x390 [ 438.542617][T10072] ? __local_bh_enable_ip+0xd0/0x130 [ 438.542630][T10072] ? __alloc_skb+0x193/0x390 [ 438.542646][T10072] __alloc_skb+0x1d7/0x390 [ 438.542664][T10072] br_info_notify+0x105/0x280 [ 438.542682][T10072] br_setlink+0x390/0x8c0 [ 438.542700][T10072] ? __pfx_br_setlink+0x10/0x10 [ 438.542744][T10072] ? __local_bh_enable_ip+0xd0/0x130 [ 438.542758][T10072] ? mutex_is_locked+0x17/0x50 [ 438.542774][T10072] rtnl_bridge_setlink+0x5bb/0x7e0 [ 438.542795][T10072] ? __pfx_rtnl_bridge_setlink+0x10/0x10 [ 438.542817][T10072] ? __pfx_rtnl_bridge_setlink+0x10/0x10 [ 438.542834][T10072] rtnetlink_rcv_msg+0x77e/0xbe0 [ 438.542852][T10072] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 438.542868][T10072] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 438.542882][T10072] ? ref_tracker_free+0x693/0x840 [ 438.542897][T10072] ? __copy_skb_header+0xa3/0x4a0 [ 438.542909][T10072] ? __pfx_ref_tracker_free+0x10/0x10 [ 438.542931][T10072] netlink_rcv_skb+0x232/0x4b0 [ 438.542944][T10072] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 438.542961][T10072] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 438.542979][T10072] ? netlink_deliver_tap+0x2e/0x1b0 [ 438.542995][T10072] netlink_unicast+0x80f/0x9b0 [ 438.543017][T10072] ? __pfx_netlink_unicast+0x10/0x10 [ 438.543032][T10072] ? __alloc_skb+0x193/0x390 [ 438.543048][T10072] ? netlink_sendmsg+0x650/0xb40 [ 438.543058][T10072] ? skb_put+0x11b/0x210 [ 438.543076][T10072] netlink_sendmsg+0x813/0xb40 [ 438.543093][T10072] ? __pfx_netlink_sendmsg+0x10/0x10 [ 438.543107][T10072] ? __asan_memset+0x22/0x50 [ 438.543122][T10072] ? aa_sock_msg_perm+0xf1/0x1b0 [ 438.543138][T10072] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 438.543149][T10072] ? __pfx_netlink_sendmsg+0x10/0x10 [ 438.543161][T10072] __sock_sendmsg+0x21c/0x270 [ 438.543177][T10072] ____sys_sendmsg+0x4d7/0x810 [ 438.543193][T10072] ? __pfx_____sys_sendmsg+0x10/0x10 [ 438.543207][T10072] ? kstrtoull+0x12f/0x1d0 [ 438.543226][T10072] ___sys_sendmsg+0x2a5/0x360 [ 438.543237][T10072] ? __lock_acquire+0x6b5/0x2cf0 [ 438.543254][T10072] ? __pfx____sys_sendmsg+0x10/0x10 [ 438.543266][T10072] ? get_pid_task+0x20/0x1f0 [ 438.543281][T10072] ? get_pid_task+0x20/0x1f0 [ 438.543293][T10072] ? get_pid_task+0x20/0x1f0 [ 438.543322][T10072] ? __fget_files+0x2a/0x420 [ 438.543336][T10072] ? __fget_files+0x3a0/0x420 [ 438.543355][T10072] __sys_sendmsg+0x183/0x260 [ 438.543367][T10072] ? __pfx___sys_sendmsg+0x10/0x10 [ 438.543385][T10072] ? rcu_is_watching+0x15/0xb0 [ 438.543405][T10072] __do_fast_syscall_32+0x1d2/0x540 [ 438.543421][T10072] ? lockdep_hardirqs_on+0x7a/0x110 [ 438.543435][T10072] ? do_fast_syscall_32+0x33/0x70 [ 438.543455][T10072] ? asm_int80_emulation+0x1a/0x20 [ 438.543470][T10072] ? do_int80_emulation+0x20e/0x400 [ 438.543509][T10072] do_fast_syscall_32+0x33/0x70 [ 438.543535][T10072] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 438.543558][T10072] RIP: 0023:0xf7fd2539 [ 438.543575][T10072] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 438.543592][T10072] RSP: 002b:00000000f549650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 438.543613][T10072] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 438.543626][T10072] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 438.543637][T10072] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 438.543648][T10072] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 438.543659][T10072] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 438.543690][T10072] [ 438.996498][ T7381] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 439.266307][ T7381] usb 2-1: device descriptor read/64, error -71 [ 439.509645][ T7381] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 439.646301][ T7381] usb 2-1: device descriptor read/64, error -71 [ 439.825083][ T7381] usb usb2-port1: attempt power cycle [ 440.222293][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.232136][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.716311][ T7381] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 441.589109][ T7381] usb 2-1: device descriptor read/8, error -71 [ 445.209261][T10130] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1115'. [ 445.218651][T10130] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1115'. [ 445.386073][ T30] kauditd_printk_skb: 234 callbacks suppressed [ 445.386126][ T30] audit: type=1326 audit(1769020807.232:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10127 comm="syz.2.1114" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f94539 code=0x0 [ 445.455628][T10128] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 445.796517][ T30] audit: type=1326 audit(1769020807.632:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10137 comm="syz.1.1118" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d539 code=0x7ffc0000 [ 445.865606][ T30] audit: type=1326 audit(1769020807.632:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10137 comm="syz.1.1118" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d539 code=0x7ffc0000 [ 446.155312][ T30] audit: type=1326 audit(1769020807.642:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10137 comm="syz.1.1118" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf741d539 code=0x7ffc0000 [ 446.218236][ T30] audit: type=1326 audit(1769020807.642:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10137 comm="syz.1.1118" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d539 code=0x7ffc0000 [ 446.626972][ T30] audit: type=1326 audit(1769020807.672:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10137 comm="syz.1.1118" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d539 code=0x7ffc0000 [ 446.688205][ T30] audit: type=1326 audit(1769020807.742:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10137 comm="syz.1.1118" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf741d539 code=0x7ffc0000 [ 446.750946][ T30] audit: type=1326 audit(1769020807.742:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10137 comm="syz.1.1118" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d539 code=0x7ffc0000 [ 446.797793][ T30] audit: type=1326 audit(1769020807.922:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10137 comm="syz.1.1118" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d539 code=0x7ffc0000 [ 446.839698][ T30] audit: type=1326 audit(1769020807.922:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10137 comm="syz.1.1118" exe="/root/syz-executor" sig=0 arch=40000003 syscall=83 compat=1 ip=0xf741d539 code=0x7ffc0000 [ 447.135511][T10155] fuse: Unknown parameter 'f*•‰§üÚ¤WÆß3Ldt0xffffffffffffffff' [ 447.346426][ T5925] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 447.511858][ T5925] usb 2-1: Using ep0 maxpacket: 16 [ 447.522132][ T5925] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 447.531757][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 447.540480][ T5925] usb 2-1: Product: syz [ 447.544941][ T5925] usb 2-1: Manufacturer: syz [ 447.550981][ T5925] usb 2-1: SerialNumber: syz [ 447.593017][ T5925] usb 2-1: config 0 descriptor?? [ 447.835537][T10157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.850243][T10157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.079616][T10166] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1126'. [ 448.223962][ T6156] usb 2-1: USB disconnect, device number 24 [ 448.605894][T10178] input: syz1 as /devices/virtual/input/input19 [ 449.716407][ T6156] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 449.760690][T10175] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 449.886270][ T6156] usb 4-1: Using ep0 maxpacket: 16 [ 449.951106][ T6156] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 449.971445][ T6156] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 449.988699][ T6156] usb 4-1: Product: syz [ 449.996500][ T6156] usb 4-1: Manufacturer: syz [ 450.005351][ T6156] usb 4-1: SerialNumber: syz [ 450.022935][ T6156] usb 4-1: config 0 descriptor?? [ 450.124506][T10197] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1138'. [ 450.263948][T10187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.286950][T10187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.415514][ T6156] usb 4-1: USB disconnect, device number 19 [ 450.525960][T10210] input: syz1 as /devices/virtual/input/input20 [ 451.196468][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 451.196489][ T30] audit: type=1326 audit(1769020813.052:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10218 comm="syz.0.1145" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2539 code=0x7ffc0000 [ 451.241834][ T5923] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 451.660393][ T5923] usb 3-1: Using ep0 maxpacket: 8 [ 451.661317][ T30] audit: type=1326 audit(1769020813.072:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10218 comm="syz.0.1145" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2539 code=0x7ffc0000 [ 451.667823][ T5923] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 451.735284][ T30] audit: type=1326 audit(1769020813.072:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10218 comm="syz.0.1145" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fd2539 code=0x7ffc0000 [ 451.763997][ T30] audit: type=1326 audit(1769020813.072:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10218 comm="syz.0.1145" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2539 code=0x7ffc0000 [ 451.774768][ T5923] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 451.797554][ T30] audit: type=1326 audit(1769020813.072:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10218 comm="syz.0.1145" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2539 code=0x7ffc0000 [ 451.806642][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.949114][ T5923] usb 3-1: Product: syz [ 452.033921][ T30] audit: type=1326 audit(1769020813.072:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10218 comm="syz.0.1145" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7fd2539 code=0x7ffc0000 [ 452.046250][ T5923] usb 3-1: Manufacturer: syz [ 452.108104][ T5923] usb 3-1: SerialNumber: syz [ 452.149838][ T5923] usb 3-1: config 0 descriptor?? [ 452.202269][ T5923] imon_raw 3-1:0.0: IR endpoint missing [ 452.266346][ T30] audit: type=1326 audit(1769020813.082:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10218 comm="syz.0.1145" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2539 code=0x7ffc0000 [ 452.312381][ T30] audit: type=1326 audit(1769020813.082:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10218 comm="syz.0.1145" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2539 code=0x7ffc0000 [ 452.389018][ T30] audit: type=1326 audit(1769020813.082:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10218 comm="syz.0.1145" exe="/root/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7fd2539 code=0x7ffc0000 [ 452.415680][ T30] audit: type=1326 audit(1769020813.082:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10218 comm="syz.0.1145" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2539 code=0x7ffc0000 [ 452.416535][ T5923] usb 3-1: USB disconnect, device number 24 [ 453.052369][T10244] netlink: 'syz.4.1151': attribute type 10 has an invalid length. [ 453.092177][T10244] team0: Device vxcan1 is of different type [ 453.104704][T10245] sg_write: data in/out 28/38 bytes for SCSI command 0x5d-- guessing data in; [ 453.104704][T10245] program syz.4.1151 not setting count and/or reply_len properly [ 453.652810][T10249] input: syz1 as /devices/virtual/input/input21 [ 453.980644][T10247] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 455.151471][T10269] FAULT_INJECTION: forcing a failure. [ 455.151471][T10269] name failslab, interval 1, probability 0, space 0, times 0 [ 455.166801][T10269] CPU: 0 UID: 0 PID: 10269 Comm: syz.2.1158 Not tainted syzkaller #0 PREEMPT(full) [ 455.166828][T10269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 455.166850][T10269] Call Trace: [ 455.166858][T10269] [ 455.166867][T10269] dump_stack_lvl+0xe8/0x150 [ 455.166904][T10269] should_fail_ex+0x412/0x560 [ 455.166936][T10269] should_failslab+0xa8/0x100 [ 455.166960][T10269] __kmalloc_cache_noprof+0x83/0x6e0 [ 455.166985][T10269] ? rtm_new_nexthop+0x28b4/0x8620 [ 455.167040][T10269] rtm_new_nexthop+0x28b4/0x8620 [ 455.167071][T10269] ? kasan_save_track+0x3e/0x80 [ 455.167091][T10269] ? kasan_save_free_info+0x46/0x50 [ 455.167130][T10269] ? __kasan_slab_free+0x5c/0x80 [ 455.167152][T10269] ? netlink_deliver_tap+0x19c/0x1b0 [ 455.167171][T10269] ? netlink_unicast+0x7e3/0x9b0 [ 455.167195][T10269] ? netlink_sendmsg+0x813/0xb40 [ 455.167213][T10269] ? ____sys_sendmsg+0x4d7/0x810 [ 455.167230][T10269] ? __sys_sendmsg+0x183/0x260 [ 455.167245][T10269] ? __do_fast_syscall_32+0x1d2/0x540 [ 455.167271][T10269] ? do_fast_syscall_32+0x33/0x70 [ 455.167294][T10269] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 455.167321][T10269] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 455.167362][T10269] ? kasan_quarantine_put+0xbb/0x1f0 [ 455.167377][T10269] ? lockdep_hardirqs_on+0x7a/0x110 [ 455.167404][T10269] ? kmem_cache_free+0x195/0x610 [ 455.167420][T10269] ? nlmon_xmit+0xb0/0x100 [ 455.167446][T10269] ? __lock_acquire+0x6b5/0x2cf0 [ 455.167473][T10269] ? lockdep_hardirqs_on+0x7a/0x110 [ 455.167493][T10269] ? __dev_queue_xmit+0x2a7/0x32b0 [ 455.167510][T10269] ? __local_bh_enable_ip+0xd0/0x130 [ 455.167527][T10269] ? __dev_queue_xmit+0x2a7/0x32b0 [ 455.167562][T10269] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 455.167587][T10269] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 455.167618][T10269] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 455.167644][T10269] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 455.167668][T10269] ? ref_tracker_free+0x693/0x840 [ 455.167694][T10269] ? __copy_skb_header+0xa3/0x4a0 [ 455.167714][T10269] ? __pfx_ref_tracker_free+0x10/0x10 [ 455.167750][T10269] netlink_rcv_skb+0x232/0x4b0 [ 455.167772][T10269] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 455.167800][T10269] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 455.167827][T10269] ? netlink_deliver_tap+0x2e/0x1b0 [ 455.167851][T10269] netlink_unicast+0x80f/0x9b0 [ 455.167882][T10269] ? __pfx_netlink_unicast+0x10/0x10 [ 455.167905][T10269] ? __alloc_skb+0x193/0x390 [ 455.167928][T10269] ? netlink_sendmsg+0x650/0xb40 [ 455.167942][T10269] ? skb_put+0x11b/0x210 [ 455.167967][T10269] netlink_sendmsg+0x813/0xb40 [ 455.167991][T10269] ? __pfx_netlink_sendmsg+0x10/0x10 [ 455.168010][T10269] ? __asan_memset+0x22/0x50 [ 455.168033][T10269] ? aa_sock_msg_perm+0xf1/0x1b0 [ 455.168057][T10269] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 455.168072][T10269] ? __pfx_netlink_sendmsg+0x10/0x10 [ 455.168090][T10269] __sock_sendmsg+0x21c/0x270 [ 455.168116][T10269] ____sys_sendmsg+0x4d7/0x810 [ 455.168155][T10269] ? __pfx_____sys_sendmsg+0x10/0x10 [ 455.168178][T10269] ? kstrtoull+0x12f/0x1d0 [ 455.168211][T10269] ___sys_sendmsg+0x2a5/0x360 [ 455.168228][T10269] ? __lock_acquire+0x6b5/0x2cf0 [ 455.168252][T10269] ? __pfx____sys_sendmsg+0x10/0x10 [ 455.168272][T10269] ? get_pid_task+0x20/0x1f0 [ 455.168294][T10269] ? get_pid_task+0x20/0x1f0 [ 455.168315][T10269] ? get_pid_task+0x20/0x1f0 [ 455.168364][T10269] ? __fget_files+0x2a/0x420 [ 455.168384][T10269] ? __fget_files+0x3a0/0x420 [ 455.168415][T10269] __sys_sendmsg+0x183/0x260 [ 455.168437][T10269] ? __pfx___sys_sendmsg+0x10/0x10 [ 455.168468][T10269] ? __pfx_ksys_write+0x10/0x10 [ 455.168496][T10269] __do_fast_syscall_32+0x1d2/0x540 [ 455.168524][T10269] ? lockdep_hardirqs_on+0x7a/0x110 [ 455.168547][T10269] ? do_fast_syscall_32+0x33/0x70 [ 455.168572][T10269] ? asm_int80_emulation+0x1a/0x20 [ 455.168589][T10269] ? do_int80_emulation+0x20e/0x400 [ 455.168616][T10269] do_fast_syscall_32+0x33/0x70 [ 455.168639][T10269] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 455.168659][T10269] RIP: 0023:0xf7f94539 [ 455.168676][T10269] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 455.168692][T10269] RSP: 002b:00000000f545650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 455.168713][T10269] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 455.168727][T10269] RDX: 0000000000000090 RSI: 0000000000000000 RDI: 0000000000000000 [ 455.168738][T10269] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 455.168750][T10269] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 455.168762][T10269] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 455.168791][T10269] [ 456.106326][ T7382] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 456.259567][ T7382] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 456.268853][ T7382] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 456.302833][ T7382] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 456.315267][ T7382] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 456.333910][ T7382] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 456.351313][ T7382] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 456.362015][ T7382] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 456.373345][ T7382] usb 2-1: Product: syz [ 456.378484][ T7382] usb 2-1: Manufacturer: syz [ 456.792477][ T7382] cdc_wdm 2-1:1.0: skipping garbage [ 456.804607][ T7382] cdc_wdm 2-1:1.0: skipping garbage [ 456.816782][ T7382] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 456.840131][ T7382] cdc_wdm 2-1:1.0: Unknown control protocol [ 456.906390][ T6156] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 457.078561][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 457.085295][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 457.091832][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 457.098657][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 457.105114][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 457.112005][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 457.118492][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 457.125304][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 457.131840][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 457.138567][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 457.144968][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 457.151696][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 457.158373][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 457.165178][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 457.171557][ T6156] usb 1-1: Using ep0 maxpacket: 32 [ 457.171656][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 457.183767][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 457.190938][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 457.197857][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 457.204624][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 457.211360][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 457.418634][ T5909] usb 2-1: USB disconnect, device number 25 [ 457.418634][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 457.492156][ T6156] usb 1-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 457.518540][ T6156] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.534947][ T6156] usb 1-1: Product: syz [ 457.539624][ T6156] usb 1-1: Manufacturer: syz [ 457.545788][ T6156] usb 1-1: SerialNumber: syz [ 457.558751][ T6156] usb 1-1: config 0 descriptor?? [ 457.572102][ T6156] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 457.580270][ T6156] dvb-usb: bulk message failed: -22 (2/0) [ 457.592869][ T6156] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 458.003385][ T6156] dvb-usb: DViCO FusionHDTV5 USB Gold error while loading driver (-23) [ 458.032660][ T6156] dvb_usb_cxusb 1-1:0.0: probe with driver dvb_usb_cxusb failed with error -22 [ 458.076865][ T6156] usb 1-1: USB disconnect, device number 25 [ 458.284433][T10300] sctp: [Deprecated]: syz.3.1168 (pid 10300) Use of int in max_burst socket option deprecated. [ 458.284433][T10300] Use struct sctp_assoc_value instead [ 458.790351][T10310] FAULT_INJECTION: forcing a failure. [ 458.790351][T10310] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 458.851046][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 458.851065][ T30] audit: type=1326 audit(1769020820.702:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10311 comm="syz.0.1171" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2539 code=0x7ffc0000 [ 458.851075][T10310] CPU: 0 UID: 0 PID: 10310 Comm: syz.1.1172 Not tainted syzkaller #0 PREEMPT(full) [ 458.851097][T10310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 458.851107][T10310] Call Trace: [ 458.851114][T10310] [ 458.851120][T10310] dump_stack_lvl+0xe8/0x150 [ 458.851161][T10310] should_fail_ex+0x412/0x560 [ 458.851196][T10310] _copy_from_user+0x2d/0xb0 [ 458.851214][T10310] __ia32_compat_sys_ioctl+0x320/0x950 [ 458.851235][T10310] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 458.851255][T10310] ? __fget_files+0x3a0/0x420 [ 458.851282][T10310] ? fput+0xa0/0xd0 [ 458.851308][T10310] ? __pfx_ksys_write+0x10/0x10 [ 458.851332][T10310] __do_fast_syscall_32+0x1d2/0x540 [ 458.851356][T10310] ? lockdep_hardirqs_on+0x7a/0x110 [ 458.851376][T10310] ? do_fast_syscall_32+0x33/0x70 [ 458.851398][T10310] ? asm_int80_emulation+0x1a/0x20 [ 458.851413][T10310] ? do_int80_emulation+0x20e/0x400 [ 458.851441][T10310] do_fast_syscall_32+0x33/0x70 [ 458.851465][T10310] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 458.851484][T10310] RIP: 0023:0xf741d539 [ 458.851499][T10310] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 458.851513][T10310] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 458.851532][T10310] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000402c5828 [ 458.851544][T10310] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 458.851554][T10310] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 458.851564][T10310] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 458.851574][T10310] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 458.851600][T10310] [ 459.673739][ T30] audit: type=1326 audit(1769020820.912:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10311 comm="syz.0.1171" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2539 code=0x7ffc0000 [ 459.718062][ T30] audit: type=1326 audit(1769020820.912:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10311 comm="syz.0.1171" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fd2539 code=0x7ffc0000 [ 459.847296][ T30] audit: type=1326 audit(1769020820.912:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10311 comm="syz.0.1171" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2539 code=0x7ffc0000 [ 459.934896][ T30] audit: type=1326 audit(1769020820.912:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10311 comm="syz.0.1171" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2539 code=0x7ffc0000 [ 459.971653][T10324] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 460.005155][ T30] audit: type=1326 audit(1769020820.912:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10311 comm="syz.0.1171" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7fd2539 code=0x7ffc0000 [ 460.110214][ T30] audit: type=1326 audit(1769020820.912:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10311 comm="syz.0.1171" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2539 code=0x7ffc0000 [ 460.172929][ T30] audit: type=1326 audit(1769020820.992:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10311 comm="syz.0.1171" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2539 code=0x7ffc0000 [ 460.224402][ T30] audit: type=1326 audit(1769020821.072:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10311 comm="syz.0.1171" exe="/root/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7fd2539 code=0x7ffc0000 [ 460.287130][ T30] audit: type=1326 audit(1769020821.082:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10311 comm="syz.0.1171" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2539 code=0x7ffc0000 [ 461.113167][T10344] netlink: 'syz.1.1179': attribute type 17 has an invalid length. [ 462.277140][T10359] netlink: 'syz.1.1184': attribute type 10 has an invalid length. [ 462.330471][T10360] sg_write: data in/out 28/38 bytes for SCSI command 0x5d-- guessing data in; [ 462.330471][T10360] program syz.1.1184 not setting count and/or reply_len properly [ 462.384845][T10359] team0: Device vxcan1 is of different type [ 462.685440][T10368] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1188'. [ 462.727935][T10370] FAULT_INJECTION: forcing a failure. [ 462.727935][T10370] name failslab, interval 1, probability 0, space 0, times 0 [ 462.916337][T10370] CPU: 0 UID: 0 PID: 10370 Comm: syz.1.1189 Not tainted syzkaller #0 PREEMPT(full) [ 462.916366][T10370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 462.916377][T10370] Call Trace: [ 462.916388][T10370] [ 462.916397][T10370] dump_stack_lvl+0xe8/0x150 [ 462.916430][T10370] should_fail_ex+0x412/0x560 [ 462.916463][T10370] should_failslab+0xa8/0x100 [ 462.916489][T10370] kmem_cache_alloc_noprof+0x87/0x6e0 [ 462.916519][T10370] ? skb_clone+0x212/0x3a0 [ 462.916543][T10370] skb_clone+0x212/0x3a0 [ 462.916568][T10370] __netlink_deliver_tap+0x404/0x850 [ 462.916603][T10370] ? netlink_deliver_tap+0x2e/0x1b0 [ 462.916625][T10370] netlink_deliver_tap+0x19c/0x1b0 [ 462.916647][T10370] netlink_sendskb+0x68/0x140 [ 462.916679][T10370] netlink_unicast+0x3a3/0x9b0 [ 462.916717][T10370] ? __pfx_netlink_unicast+0x10/0x10 [ 462.916756][T10370] ip_set_dump_start+0x29d/0x430 [ 462.916776][T10370] ? __netlink_dump_start+0xfe/0x7e0 [ 462.916800][T10370] ? __pfx_ip_set_dump_start+0x10/0x10 [ 462.916830][T10370] ? netlink_lookup+0x30/0x200 [ 462.916847][T10370] ? netlink_lookup+0x30/0x200 [ 462.916863][T10370] ? netlink_lookup+0x30/0x200 [ 462.916888][T10370] __netlink_dump_start+0x469/0x7e0 [ 462.916917][T10370] ip_set_dump+0x15b/0x1f0 [ 462.916936][T10370] ? __pfx_ip_set_dump+0x10/0x10 [ 462.916952][T10370] ? __pfx_ip_set_dump_start+0x10/0x10 [ 462.916968][T10370] ? __pfx_ip_set_dump_do+0x10/0x10 [ 462.916984][T10370] ? __pfx_ip_set_dump_done+0x10/0x10 [ 462.917017][T10370] nfnetlink_rcv_msg+0xc00/0x12c0 [ 462.917044][T10370] ? unwind_get_return_address+0x4d/0x90 [ 462.917067][T10370] ? nfnetlink_rcv_msg+0x229/0x12c0 [ 462.917114][T10370] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 462.917202][T10370] netlink_rcv_skb+0x232/0x4b0 [ 462.917222][T10370] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 462.917251][T10370] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 462.917282][T10370] ? bpf_lsm_capable+0x9/0x20 [ 462.917302][T10370] ? security_capable+0x7e/0x2c0 [ 462.917332][T10370] nfnetlink_rcv+0x2c0/0x27b0 [ 462.917368][T10370] ? __local_bh_enable_ip+0xd0/0x130 [ 462.917388][T10370] ? lockdep_hardirqs_on+0x7a/0x110 [ 462.917413][T10370] ? __dev_queue_xmit+0x2a7/0x32b0 [ 462.917431][T10370] ? __local_bh_enable_ip+0xd0/0x130 [ 462.917449][T10370] ? __dev_queue_xmit+0x2a7/0x32b0 [ 462.917467][T10370] ? __dev_queue_xmit+0x1a32/0x32b0 [ 462.917485][T10370] ? ___sys_sendmsg+0x2a5/0x360 [ 462.917506][T10370] ? __dev_queue_xmit+0x2a7/0x32b0 [ 462.917535][T10370] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 462.917568][T10370] ? __pfx___dev_queue_xmit+0x10/0x10 [ 462.917597][T10370] ? ref_tracker_free+0x693/0x840 [ 462.917621][T10370] ? __copy_skb_header+0xa3/0x4a0 [ 462.917641][T10370] ? __pfx_ref_tracker_free+0x10/0x10 [ 462.917685][T10370] ? skb_clone+0x246/0x3a0 [ 462.917707][T10370] ? __netlink_deliver_tap+0x807/0x850 [ 462.917726][T10370] ? netlink_deliver_tap+0x2e/0x1b0 [ 462.917752][T10370] ? netlink_deliver_tap+0x2e/0x1b0 [ 462.917779][T10370] netlink_unicast+0x80f/0x9b0 [ 462.917815][T10370] ? __pfx_netlink_unicast+0x10/0x10 [ 462.917841][T10370] ? __alloc_skb+0x193/0x390 [ 462.917867][T10370] ? netlink_sendmsg+0x650/0xb40 [ 462.917884][T10370] ? skb_put+0x11b/0x210 [ 462.917914][T10370] netlink_sendmsg+0x813/0xb40 [ 462.917943][T10370] ? __pfx_netlink_sendmsg+0x10/0x10 [ 462.917965][T10370] ? __asan_memset+0x22/0x50 [ 462.917990][T10370] ? aa_sock_msg_perm+0xf1/0x1b0 [ 462.918017][T10370] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 462.918033][T10370] ? __pfx_netlink_sendmsg+0x10/0x10 [ 462.918054][T10370] __sock_sendmsg+0x21c/0x270 [ 462.918079][T10370] ____sys_sendmsg+0x4d7/0x810 [ 462.918107][T10370] ? __pfx_____sys_sendmsg+0x10/0x10 [ 462.918141][T10370] ? kstrtoull+0x12f/0x1d0 [ 462.918174][T10370] ___sys_sendmsg+0x2a5/0x360 [ 462.918190][T10370] ? __lock_acquire+0x6b5/0x2cf0 [ 462.918214][T10370] ? __pfx____sys_sendmsg+0x10/0x10 [ 462.918234][T10370] ? get_pid_task+0x20/0x1f0 [ 462.918257][T10370] ? get_pid_task+0x20/0x1f0 [ 462.918277][T10370] ? get_pid_task+0x20/0x1f0 [ 462.918330][T10370] ? __fget_files+0x2a/0x420 [ 462.918351][T10370] ? __fget_files+0x3a0/0x420 [ 462.918384][T10370] __sys_sendmsg+0x183/0x260 [ 462.918404][T10370] ? __pfx___sys_sendmsg+0x10/0x10 [ 462.918435][T10370] ? __pfx_ksys_write+0x10/0x10 [ 462.918462][T10370] __do_fast_syscall_32+0x1d2/0x540 [ 462.918488][T10370] ? lockdep_hardirqs_on+0x7a/0x110 [ 462.918511][T10370] ? do_fast_syscall_32+0x33/0x70 [ 462.918535][T10370] ? asm_int80_emulation+0x1a/0x20 [ 462.918551][T10370] ? do_int80_emulation+0x20e/0x400 [ 462.918582][T10370] do_fast_syscall_32+0x33/0x70 [ 462.918608][T10370] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 462.918630][T10370] RIP: 0023:0xf741d539 [ 462.918647][T10370] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 462.918663][T10370] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 462.918683][T10370] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 462.918695][T10370] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 462.918706][T10370] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 462.918716][T10370] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 462.918726][T10370] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 462.918756][T10370] [ 463.457741][ T5925] usb 5-1: new low-speed USB device number 32 using dummy_hcd [ 463.596359][ T5925] usb 5-1: device descriptor read/64, error -71 [ 463.836376][ T5925] usb 5-1: new low-speed USB device number 33 using dummy_hcd [ 463.976726][ T5925] usb 5-1: device descriptor read/64, error -71 [ 464.160626][ T5925] usb usb5-port1: attempt power cycle [ 464.495191][T10386] sctp: [Deprecated]: syz.3.1194 (pid 10386) Use of int in max_burst socket option deprecated. [ 464.495191][T10386] Use struct sctp_assoc_value instead [ 464.536988][ T5925] usb 5-1: new low-speed USB device number 34 using dummy_hcd [ 464.597096][ T5925] usb 5-1: device descriptor read/8, error -71 [ 465.028293][T10391] netlink: 'syz.0.1195': attribute type 17 has an invalid length. [ 465.106803][ T5925] usb 5-1: new low-speed USB device number 35 using dummy_hcd [ 465.211493][ T5925] usb 5-1: device descriptor read/8, error -71 [ 465.608393][ T5925] usb usb5-port1: unable to enumerate USB device [ 466.222145][T10408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1200'. [ 466.226331][ T5925] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 466.389131][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.421085][ T5925] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 466.434410][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.447219][ T5925] usb 5-1: config 0 descriptor?? [ 466.734064][ T5925] usbhid 5-1:0.0: can't add hid device: -71 [ 466.742568][ T5925] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 466.797777][ T5925] usb 5-1: USB disconnect, device number 36 [ 467.307033][ T5925] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 467.327145][ T5909] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 467.476549][ T5925] usb 5-1: Using ep0 maxpacket: 32 [ 467.486275][ T5909] usb 3-1: Using ep0 maxpacket: 32 [ 467.492080][ T5925] usb 5-1: config index 0 descriptor too short (expected 36, got 27) [ 467.500516][ T5925] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 467.514329][ T5909] usb 3-1: too many configurations: 179, using maximum allowed: 8 [ 467.531742][ T5909] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 467.541227][ T5925] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.00 [ 467.551427][ T5909] usb 3-1: can't read configurations, error -61 [ 467.576578][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.589843][T10429] sctp: [Deprecated]: syz.3.1208 (pid 10429) Use of int in max_burst socket option deprecated. [ 467.589843][T10429] Use struct sctp_assoc_value instead [ 467.612576][ T5925] usb 5-1: config 0 descriptor?? [ 467.624666][ T5925] ldusb 5-1:0.0: Interrupt in endpoint not found [ 467.638539][ T5925] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 467.706504][ T5909] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 467.828200][ T5923] usb 5-1: USB disconnect, device number 37 [ 467.856350][ T5909] usb 3-1: Using ep0 maxpacket: 32 [ 467.862442][ T5909] usb 3-1: too many configurations: 179, using maximum allowed: 8 [ 467.883404][ T5909] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 467.895124][ T5909] usb 3-1: can't read configurations, error -61 [ 467.903191][ T5909] usb usb3-port1: attempt power cycle [ 468.286661][ T5909] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 468.317268][ T5909] usb 3-1: Using ep0 maxpacket: 32 [ 468.323566][ T5909] usb 3-1: too many configurations: 179, using maximum allowed: 8 [ 468.333764][ T5909] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 468.342164][ T5909] usb 3-1: can't read configurations, error -61 [ 468.529300][T10441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1212'. [ 468.566418][ T5909] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 468.598541][ T5909] usb 3-1: Using ep0 maxpacket: 32 [ 468.610254][ T5909] usb 3-1: too many configurations: 179, using maximum allowed: 8 [ 468.642841][ T5909] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 468.651388][ T5909] usb 3-1: can't read configurations, error -61 [ 468.670468][ T5909] usb usb3-port1: unable to enumerate USB device [ 469.244273][T10451] sctp: [Deprecated]: syz.1.1216 (pid 10451) Use of int in max_burst socket option deprecated. [ 469.244273][T10451] Use struct sctp_assoc_value instead [ 470.512954][T10469] input: syz1 as /devices/virtual/input/input23 [ 470.941151][T10478] sctp: [Deprecated]: syz.0.1225 (pid 10478) Use of int in max_burst socket option deprecated. [ 470.941151][T10478] Use struct sctp_assoc_value instead [ 471.705170][T10494] FAULT_INJECTION: forcing a failure. [ 471.705170][T10494] name failslab, interval 1, probability 0, space 0, times 0 [ 472.267059][T10494] CPU: 1 UID: 0 PID: 10494 Comm: syz.2.1231 Tainted: G L syzkaller #0 PREEMPT(full) [ 472.267093][T10494] Tainted: [L]=SOFTLOCKUP [ 472.267100][T10494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 472.267111][T10494] Call Trace: [ 472.267119][T10494] [ 472.267128][T10494] dump_stack_lvl+0xe8/0x150 [ 472.267160][T10494] should_fail_ex+0x412/0x560 [ 472.267193][T10494] should_failslab+0xa8/0x100 [ 472.267217][T10494] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 472.267249][T10494] ? __alloc_skb+0x1d7/0x390 [ 472.267273][T10494] ? __local_bh_enable_ip+0xd0/0x130 [ 472.267303][T10494] ? __alloc_skb+0x193/0x390 [ 472.267330][T10494] __alloc_skb+0x1d7/0x390 [ 472.267360][T10494] netlink_dump+0x1ef/0xe80 [ 472.267387][T10494] ? __netlink_lookup+0xc6/0x8b0 [ 472.267410][T10494] ? __pfx_netlink_dump+0x10/0x10 [ 472.267426][T10494] ? __netlink_lookup+0x7e4/0x8b0 [ 472.267464][T10494] ? netlink_lookup+0x30/0x200 [ 472.267481][T10494] ? netlink_lookup+0x30/0x200 [ 472.267496][T10494] ? netlink_lookup+0x30/0x200 [ 472.267521][T10494] __netlink_dump_start+0x5cb/0x7e0 [ 472.267549][T10494] rtnetlink_rcv_msg+0xa3a/0xbe0 [ 472.267579][T10494] ? __pfx_tc_dump_qdisc+0x10/0x10 [ 472.267603][T10494] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 472.267629][T10494] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 472.267654][T10494] ? ref_tracker_free+0x693/0x840 [ 472.267681][T10494] ? __pfx_rtnl_dumpit+0x10/0x10 [ 472.267707][T10494] ? __pfx_tc_dump_qdisc+0x10/0x10 [ 472.267745][T10494] netlink_rcv_skb+0x232/0x4b0 [ 472.267766][T10494] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 472.267795][T10494] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 472.267827][T10494] ? netlink_deliver_tap+0x2e/0x1b0 [ 472.267856][T10494] netlink_unicast+0x80f/0x9b0 [ 472.267894][T10494] ? __pfx_netlink_unicast+0x10/0x10 [ 472.267921][T10494] ? __alloc_skb+0x193/0x390 [ 472.267947][T10494] ? netlink_sendmsg+0x650/0xb40 [ 472.267965][T10494] ? skb_put+0x11b/0x210 [ 472.267996][T10494] netlink_sendmsg+0x813/0xb40 [ 472.268026][T10494] ? __pfx_netlink_sendmsg+0x10/0x10 [ 472.268049][T10494] ? __asan_memset+0x22/0x50 [ 472.268074][T10494] ? aa_sock_msg_perm+0xf1/0x1b0 [ 472.268102][T10494] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 472.268119][T10494] ? __pfx_netlink_sendmsg+0x10/0x10 [ 472.268140][T10494] __sock_sendmsg+0x21c/0x270 [ 472.268167][T10494] ____sys_sendmsg+0x4d7/0x810 [ 472.268196][T10494] ? __pfx_____sys_sendmsg+0x10/0x10 [ 472.268220][T10494] ? kstrtoull+0x12f/0x1d0 [ 472.268255][T10494] ___sys_sendmsg+0x2a5/0x360 [ 472.268272][T10494] ? __lock_acquire+0x6b5/0x2cf0 [ 472.268305][T10494] ? __pfx____sys_sendmsg+0x10/0x10 [ 472.268327][T10494] ? get_pid_task+0x20/0x1f0 [ 472.268351][T10494] ? get_pid_task+0x20/0x1f0 [ 472.268372][T10494] ? get_pid_task+0x20/0x1f0 [ 472.268426][T10494] ? __fget_files+0x2a/0x420 [ 472.268448][T10494] ? __fget_files+0x3a0/0x420 [ 472.268483][T10494] __sys_sendmsg+0x183/0x260 [ 472.268504][T10494] ? __pfx___sys_sendmsg+0x10/0x10 [ 472.268536][T10494] ? __pfx_ksys_write+0x10/0x10 [ 472.268565][T10494] __do_fast_syscall_32+0x1d2/0x540 [ 472.268594][T10494] ? lockdep_hardirqs_on+0x7a/0x110 [ 472.268618][T10494] ? do_fast_syscall_32+0x33/0x70 [ 472.268643][T10494] ? asm_int80_emulation+0x1a/0x20 [ 472.268660][T10494] ? do_int80_emulation+0x20e/0x400 [ 472.268691][T10494] do_fast_syscall_32+0x33/0x70 [ 472.268718][T10494] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 472.268741][T10494] RIP: 0023:0xf7f94539 [ 472.268759][T10494] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 472.268774][T10494] RSP: 002b:00000000f545650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 472.268796][T10494] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000280 [ 472.268810][T10494] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 472.268821][T10494] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 472.268831][T10494] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 472.268842][T10494] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 472.268873][T10494] [ 473.235953][T10506] input: syz1 as /devices/virtual/input/input24 [ 474.253654][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 474.253679][ T30] audit: type=1326 audit(1769020835.882:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10509 comm="syz.0.1234" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2539 code=0x7ffc0000 [ 474.471393][ T30] audit: type=1326 audit(1769020835.882:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10509 comm="syz.0.1234" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd2539 code=0x7ffc0000 [ 474.534354][ T30] audit: type=1326 audit(1769020835.882:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10509 comm="syz.0.1234" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2539 code=0x7ffc0000 [ 474.721330][ T30] audit: type=1326 audit(1769020835.892:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10509 comm="syz.0.1234" exe="/root/syz-executor" sig=0 arch=40000003 syscall=14 compat=1 ip=0xf7fd2539 code=0x7ffc0000 [ 474.788496][ T30] audit: type=1326 audit(1769020835.892:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10509 comm="syz.0.1234" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2539 code=0x7ffc0000 [ 474.887549][ T30] audit: type=1326 audit(1769020835.892:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10509 comm="syz.0.1234" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fd2539 code=0x7ffc0000 [ 475.014186][T10535] sctp: [Deprecated]: syz.3.1244 (pid 10535) Use of int in max_burst socket option deprecated. [ 475.014186][T10535] Use struct sctp_assoc_value instead [ 475.026283][ T30] audit: type=1326 audit(1769020835.892:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10509 comm="syz.0.1234" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2539 code=0x7ffc0000 [ 475.116740][ T30] audit: type=1326 audit(1769020835.892:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10509 comm="syz.0.1234" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fd2539 code=0x7ffc0000 [ 475.171645][ T30] audit: type=1326 audit(1769020835.892:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10509 comm="syz.0.1234" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2539 code=0x7ffc0000 [ 475.213623][ T30] audit: type=1326 audit(1769020835.892:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10509 comm="syz.0.1234" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2539 code=0x7ffc0000 [ 475.546858][T10545] input: syz1 as /devices/virtual/input/input25 [ 475.772262][T10549] FAULT_INJECTION: forcing a failure. [ 475.772262][T10549] name failslab, interval 1, probability 0, space 0, times 0 [ 475.934317][T10549] CPU: 1 UID: 0 PID: 10549 Comm: syz.0.1247 Tainted: G L syzkaller #0 PREEMPT(full) [ 475.934364][T10549] Tainted: [L]=SOFTLOCKUP [ 475.934370][T10549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 475.934380][T10549] Call Trace: [ 475.934388][T10549] [ 475.934397][T10549] dump_stack_lvl+0xe8/0x150 [ 475.934428][T10549] should_fail_ex+0x412/0x560 [ 475.934456][T10549] should_failslab+0xa8/0x100 [ 475.934478][T10549] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 475.934505][T10549] ? __alloc_skb+0x193/0x390 [ 475.934530][T10549] ? __alloc_skb+0x1d7/0x390 [ 475.934552][T10549] ? __local_bh_enable_ip+0xd0/0x130 [ 475.934574][T10549] ? __alloc_skb+0x193/0x390 [ 475.934598][T10549] __alloc_skb+0x1d7/0x390 [ 475.934627][T10549] netlink_sendmsg+0x5d4/0xb40 [ 475.934657][T10549] ? __pfx_netlink_sendmsg+0x10/0x10 [ 475.934679][T10549] ? __asan_memset+0x22/0x50 [ 475.934704][T10549] ? aa_sock_msg_perm+0xf1/0x1b0 [ 475.934729][T10549] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 475.934747][T10549] ? __pfx_netlink_sendmsg+0x10/0x10 [ 475.934767][T10549] __sock_sendmsg+0x21c/0x270 [ 475.934793][T10549] ____sys_sendmsg+0x4d7/0x810 [ 475.934821][T10549] ? __pfx_____sys_sendmsg+0x10/0x10 [ 475.934843][T10549] ? kstrtoull+0x12f/0x1d0 [ 475.934876][T10549] ___sys_sendmsg+0x2a5/0x360 [ 475.934892][T10549] ? __lock_acquire+0x6b5/0x2cf0 [ 475.934914][T10549] ? __pfx____sys_sendmsg+0x10/0x10 [ 475.934934][T10549] ? get_pid_task+0x20/0x1f0 [ 475.934957][T10549] ? get_pid_task+0x20/0x1f0 [ 475.934978][T10549] ? get_pid_task+0x20/0x1f0 [ 475.935028][T10549] ? __fget_files+0x2a/0x420 [ 475.935052][T10549] ? __fget_files+0x3a0/0x420 [ 475.935084][T10549] __sys_sendmsg+0x183/0x260 [ 475.935104][T10549] ? __pfx___sys_sendmsg+0x10/0x10 [ 475.935136][T10549] ? __pfx_ksys_write+0x10/0x10 [ 475.935161][T10549] __do_fast_syscall_32+0x1d2/0x540 [ 475.935188][T10549] ? lockdep_hardirqs_on+0x7a/0x110 [ 475.935211][T10549] ? do_fast_syscall_32+0x33/0x70 [ 475.935235][T10549] ? asm_int80_emulation+0x1a/0x20 [ 475.935252][T10549] ? do_int80_emulation+0x20e/0x400 [ 475.935279][T10549] do_fast_syscall_32+0x33/0x70 [ 475.935303][T10549] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 475.935323][T10549] RIP: 0023:0xf7fd2539 [ 475.935349][T10549] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 475.935364][T10549] RSP: 002b:00000000f549650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 475.935384][T10549] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 475.935397][T10549] RDX: 00000000000000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 475.935407][T10549] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 475.935417][T10549] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 475.935428][T10549] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 475.935455][T10549] [ 476.585737][T10555] sctp: [Deprecated]: syz.3.1250 (pid 10555) Use of int in maxseg socket option. [ 476.585737][T10555] Use struct sctp_assoc_value instead [ 477.950840][T10577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1255'. [ 478.216432][T10586] input: syz1 as /devices/virtual/input/input27 [ 478.549783][T10593] sctp: [Deprecated]: syz.3.1260 (pid 10593) Use of int in max_burst socket option deprecated. [ 478.549783][T10593] Use struct sctp_assoc_value instead [ 478.936480][ T5881] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 479.140584][ T5881] usb 2-1: Using ep0 maxpacket: 16 [ 479.160429][ T5881] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 479.183858][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 479.215583][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 479.298727][ T5881] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 479.313398][ T5881] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 479.333467][ T5881] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 479.345405][ T5881] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 479.353899][ T5881] usb 2-1: Manufacturer: syz [ 479.487457][ T5881] usb 2-1: config 0 descriptor?? [ 479.701302][T10597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1261'. [ 480.116947][ T5881] rc_core: IR keymap rc-hauppauge not found [ 480.123056][ T5881] Registered IR keymap rc-empty [ 480.151815][ T5881] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 480.204584][T10615] sctp: [Deprecated]: syz.3.1265 (pid 10615) Use of int in max_burst socket option deprecated. [ 480.204584][T10615] Use struct sctp_assoc_value instead [ 480.221731][ T5881] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 480.279713][ T5881] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 480.333663][ T5881] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input28 [ 480.393196][ T5881] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 480.439853][ T5881] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 480.670349][ T5881] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 480.706401][ T5881] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 480.769434][ T5881] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 480.806779][ T5881] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 480.847875][ T5881] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 480.890530][ T5881] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 480.947222][ T5881] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 480.996390][ T5881] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 481.444710][ T5881] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 481.481273][ T5881] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 481.542479][ T5881] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 481.564470][ T5881] usb 2-1: USB disconnect, device number 26 [ 481.838821][ T5909] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 481.845636][T10639] input: syz1 as /devices/virtual/input/input29 [ 482.009640][ T5909] usb 1-1: Using ep0 maxpacket: 16 [ 482.015523][T10641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1272'. [ 482.052531][ T5909] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 482.062164][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 482.072926][ T5909] usb 1-1: Product: syz [ 482.084596][ T5909] usb 1-1: Manufacturer: syz [ 482.089496][ T5909] usb 1-1: SerialNumber: syz [ 482.105733][ T5909] usb 1-1: config 0 descriptor?? [ 482.251349][T10648] sctp: [Deprecated]: syz.1.1275 (pid 10648) Use of int in max_burst socket option deprecated. [ 482.251349][T10648] Use struct sctp_assoc_value instead [ 482.348057][T10635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.365462][T10635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.860126][ T5925] usb 1-1: USB disconnect, device number 26 [ 485.482066][T10674] input: syz1 as /devices/virtual/input/input30 [ 485.986334][ T5925] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 486.306292][ T5925] usb 4-1: Using ep0 maxpacket: 32 [ 486.314974][ T5925] usb 4-1: too many configurations: 179, using maximum allowed: 8 [ 486.339090][ T5925] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 486.352197][ T5925] usb 4-1: can't read configurations, error -61 [ 486.409598][T10682] syzkaller0: entered promiscuous mode [ 486.416312][T10682] syzkaller0: entered allmulticast mode [ 486.488465][ T5925] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 486.539713][T10689] sctp: [Deprecated]: syz.4.1287 (pid 10689) Use of int in max_burst socket option deprecated. [ 486.539713][T10689] Use struct sctp_assoc_value instead [ 486.879962][ T5925] usb 4-1: Using ep0 maxpacket: 32 [ 486.922677][ T5925] usb 4-1: too many configurations: 179, using maximum allowed: 8 [ 486.935424][ T5925] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 486.944544][ T5925] usb 4-1: can't read configurations, error -61 [ 487.048445][ T5925] usb usb4-port1: attempt power cycle [ 487.464474][ T5925] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 487.515063][ T5925] usb 4-1: Using ep0 maxpacket: 32 [ 487.525211][ T5925] usb 4-1: too many configurations: 179, using maximum allowed: 8 [ 487.627752][ T5925] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 487.647034][ T5925] usb 4-1: can't read configurations, error -61 [ 487.779808][ T5925] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 487.808059][ T5925] usb 4-1: Using ep0 maxpacket: 32 [ 487.815602][ T5925] usb 4-1: too many configurations: 179, using maximum allowed: 8 [ 487.842440][ T5925] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 487.858835][ T5925] usb 4-1: can't read configurations, error -61 [ 487.874855][ T5925] usb usb4-port1: unable to enumerate USB device [ 487.891909][T10713] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1296'. [ 487.957458][T10717] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1298'. [ 489.126438][ T5925] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 489.318079][ T5925] usb 4-1: Using ep0 maxpacket: 16 [ 489.330197][ T5925] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 489.340043][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 489.350651][ T5925] usb 4-1: Product: syz [ 489.354866][ T5925] usb 4-1: Manufacturer: syz [ 489.359930][ T5925] usb 4-1: SerialNumber: syz [ 489.369070][ T5925] usb 4-1: config 0 descriptor?? [ 489.595568][T10725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.615985][T10725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.697541][T10717] FAULT_INJECTION: forcing a failure. [ 489.697541][T10717] name failslab, interval 1, probability 0, space 0, times 0 [ 489.712090][T10717] CPU: 1 UID: 0 PID: 10717 Comm: syz.1.1298 Tainted: G L syzkaller #0 PREEMPT(full) [ 489.712123][T10717] Tainted: [L]=SOFTLOCKUP [ 489.712131][T10717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 489.712142][T10717] Call Trace: [ 489.712150][T10717] [ 489.712159][T10717] dump_stack_lvl+0xe8/0x150 [ 489.712192][T10717] should_fail_ex+0x412/0x560 [ 489.712224][T10717] should_failslab+0xa8/0x100 [ 489.712250][T10717] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 489.712282][T10717] ? __alloc_skb+0x1d7/0x390 [ 489.712307][T10717] ? __local_bh_enable_ip+0xd0/0x130 [ 489.712329][T10717] ? __alloc_skb+0x193/0x390 [ 489.712357][T10717] __alloc_skb+0x1d7/0x390 [ 489.712390][T10717] netlink_ack+0x146/0xa50 [ 489.712407][T10717] ? __pfx_genl_rcv_msg+0x10/0x10 [ 489.712429][T10717] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 489.712447][T10717] ? __pfx_nl80211_post_doit+0x10/0x10 [ 489.712468][T10717] ? __pfx_ref_tracker_free+0x10/0x10 [ 489.712502][T10717] netlink_rcv_skb+0x2b6/0x4b0 [ 489.712521][T10717] ? __pfx_genl_rcv_msg+0x10/0x10 [ 489.712545][T10717] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 489.712563][T10717] ? genl_rcv+0x19/0x40 [ 489.712605][T10717] ? down_read+0x272/0x2e0 [ 489.712622][T10717] ? genl_rcv+0xd/0x40 [ 489.712648][T10717] genl_rcv+0x28/0x40 [ 489.712670][T10717] netlink_unicast+0x80f/0x9b0 [ 489.712709][T10717] ? __pfx_netlink_unicast+0x10/0x10 [ 489.712736][T10717] ? __alloc_skb+0x193/0x390 [ 489.712763][T10717] ? netlink_sendmsg+0x650/0xb40 [ 489.712781][T10717] ? skb_put+0x11b/0x210 [ 489.712812][T10717] netlink_sendmsg+0x813/0xb40 [ 489.712844][T10717] ? __pfx_netlink_sendmsg+0x10/0x10 [ 489.712867][T10717] ? __asan_memset+0x22/0x50 [ 489.712892][T10717] ? aa_sock_msg_perm+0xf1/0x1b0 [ 489.712921][T10717] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 489.712939][T10717] ? __pfx_netlink_sendmsg+0x10/0x10 [ 489.712970][T10717] __sock_sendmsg+0x21c/0x270 [ 489.712997][T10717] ____sys_sendmsg+0x4d7/0x810 [ 489.713028][T10717] ? __pfx_____sys_sendmsg+0x10/0x10 [ 489.713053][T10717] ? kstrtoull+0x12f/0x1d0 [ 489.713101][T10717] ___sys_sendmsg+0x2a5/0x360 [ 489.713125][T10717] ? __lock_acquire+0x6b5/0x2cf0 [ 489.713151][T10717] ? __pfx____sys_sendmsg+0x10/0x10 [ 489.713172][T10717] ? get_pid_task+0x20/0x1f0 [ 489.713196][T10717] ? get_pid_task+0x20/0x1f0 [ 489.713216][T10717] ? get_pid_task+0x20/0x1f0 [ 489.713270][T10717] ? __fget_files+0x2a/0x420 [ 489.713292][T10717] ? __fget_files+0x3a0/0x420 [ 489.713326][T10717] __sys_sendmsg+0x183/0x260 [ 489.713348][T10717] ? __pfx___sys_sendmsg+0x10/0x10 [ 489.713381][T10717] ? __pfx_ksys_write+0x10/0x10 [ 489.713410][T10717] __do_fast_syscall_32+0x1d2/0x540 [ 489.713437][T10717] ? lockdep_hardirqs_on+0x7a/0x110 [ 489.713467][T10717] ? do_fast_syscall_32+0x33/0x70 [ 489.713492][T10717] ? asm_int80_emulation+0x1a/0x20 [ 489.713510][T10717] ? do_int80_emulation+0x20e/0x400 [ 489.713538][T10717] do_fast_syscall_32+0x33/0x70 [ 489.713565][T10717] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 489.713589][T10717] RIP: 0023:0xf741d539 [ 489.713608][T10717] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 489.713626][T10717] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 489.713649][T10717] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 489.713663][T10717] RDX: 000000000caad94c RSI: 0000000000000000 RDI: 0000000000000000 [ 489.713675][T10717] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 489.713687][T10717] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 489.713698][T10717] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 489.713730][T10717] [ 490.258539][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 490.258554][ T30] audit: type=1326 audit(1769020852.112:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10729 comm="syz.0.1302" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd2539 code=0x0 [ 490.345531][ T5909] usb 4-1: USB disconnect, device number 24 [ 490.513589][T10738] sctp: [Deprecated]: syz.1.1305 (pid 10738) Use of int in max_burst socket option deprecated. [ 490.513589][T10738] Use struct sctp_assoc_value instead [ 492.091538][T10754] sctp: [Deprecated]: syz.0.1320 (pid 10754) Use of int in max_burst socket option deprecated. [ 492.091538][T10754] Use struct sctp_assoc_value instead [ 493.666435][ T5830] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 493.848946][ T5830] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 493.867998][ T5830] usb 4-1: config 1 has an invalid descriptor of length 223, skipping remainder of the config [ 493.900245][ T5830] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 493.923953][ T5830] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.965338][ T5830] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24831, setting to 1024 [ 493.980651][ T5830] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 494.017917][ T5830] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 494.028144][ T5830] usb 4-1: Product: syz [ 494.032379][ T5830] usb 4-1: Manufacturer: syz [ 494.061638][ T5830] cdc_wdm 4-1:1.0: skipping garbage [ 494.084653][ T5830] cdc_wdm 4-1:1.0: skipping garbage [ 494.118488][ T5830] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 494.127729][ T5830] cdc_wdm 4-1:1.0: Unknown control protocol [ 494.308835][T10773] netlink: 'syz.3.1313': attribute type 1 has an invalid length. [ 495.149596][ T5830] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 495.311005][ T5830] usb 1-1: Using ep0 maxpacket: 8 [ 495.331741][ T5830] usb 1-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 495.341600][ T5830] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.351882][ T5830] usb 1-1: Product: syz [ 495.357794][ T5830] usb 1-1: Manufacturer: syz [ 495.370183][ T5830] usb 1-1: SerialNumber: syz [ 495.396119][ T5830] usb 1-1: config 0 descriptor?? [ 495.425868][ T5830] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 496.483468][ T5923] usb 4-1: USB disconnect, device number 25 [ 497.686403][ T5830] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 497.846288][ T5830] usb 3-1: Using ep0 maxpacket: 16 [ 497.863823][ T5924] usb 1-1: USB disconnect, device number 27 [ 497.883330][ T5830] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 497.902915][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 497.921797][ T5830] usb 3-1: Product: syz [ 497.926737][ T5925] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 497.946610][ T5830] usb 3-1: Manufacturer: syz [ 497.951625][ T5830] usb 3-1: SerialNumber: syz [ 497.976047][ T5830] usb 3-1: config 0 descriptor?? [ 498.106313][ T5925] usb 2-1: Using ep0 maxpacket: 32 [ 498.114057][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.142925][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.178884][ T5925] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 498.188745][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.341081][ T5925] usb 2-1: config 0 descriptor?? [ 498.358304][T10811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.490150][ T5925] hub 2-1:0.0: USB hub found [ 498.556435][T10811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.692238][ T5925] hub 2-1:0.0: config failed, can't read hub descriptor (err -90) [ 499.172656][T10831] sctp: [Deprecated]: syz.3.1333 (pid 10831) Use of int in max_burst socket option deprecated. [ 499.172656][T10831] Use struct sctp_assoc_value instead [ 499.224928][T10834] binder: 10833:10834 unknown command 0 [ 499.233139][T10832] only policy match revision 0 supported [ 499.233157][T10832] unable to load match [ 499.247775][T10835] binder: 10833:10835 unknown command 0 [ 499.254732][T10835] binder: 10833:10835 ioctl c0306201 80000480 returned -22 [ 499.277702][T10834] binder: 10833:10834 ioctl c0306201 80000480 returned -22 [ 499.311661][T10834] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1334'. [ 499.494319][ T7382] usb 3-1: USB disconnect, device number 29 [ 499.809030][ T5925] usbhid 2-1:0.0: can't add hid device: -71 [ 499.822666][ T5925] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 499.886018][ T5925] usb 2-1: USB disconnect, device number 27 [ 500.587593][T10853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1339'. [ 500.615578][T10853] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1339'. [ 501.335316][T10872] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1344'. [ 501.564836][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.572372][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.101433][ T5925] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 502.236953][ T5925] usb 2-1: device descriptor read/64, error -71 [ 502.486441][ T5925] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 502.630211][ T5925] usb 2-1: device descriptor read/64, error -71 [ 502.688111][T10876] netlink: 79 bytes leftover after parsing attributes in process `syz.1.1345'. [ 502.748902][ T5925] usb usb2-port1: attempt power cycle [ 503.138481][ T5925] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 503.308462][ T5925] usb 2-1: device descriptor read/8, error -71 [ 503.356325][ T5923] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 503.549528][ T5925] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 503.573314][ T5923] usb 4-1: Using ep0 maxpacket: 16 [ 503.580810][ T5925] usb 2-1: device descriptor read/8, error -71 [ 503.697265][ T5925] usb usb2-port1: unable to enumerate USB device [ 503.698675][ T5923] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 503.716292][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 503.728623][ T5923] usb 4-1: Product: syz [ 503.733569][ T5923] usb 4-1: Manufacturer: syz [ 503.738497][ T5923] usb 4-1: SerialNumber: syz [ 503.745748][ T5923] usb 4-1: config 0 descriptor?? [ 504.110279][T10885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.140396][T10885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.106697][T10900] sctp: [Deprecated]: syz.4.1349 (pid 10900) Use of int in max_burst socket option deprecated. [ 505.106697][T10900] Use struct sctp_assoc_value instead [ 505.355267][ T5881] usb 4-1: USB disconnect, device number 26 [ 505.453900][T10904] sctp: [Deprecated]: syz.1.1350 (pid 10904) Use of int in max_burst socket option deprecated. [ 505.453900][T10904] Use struct sctp_assoc_value instead [ 506.655936][T10920] sctp: [Deprecated]: syz.2.1354 (pid 10920) Use of int in max_burst socket option deprecated. [ 506.655936][T10920] Use struct sctp_assoc_value instead [ 509.210268][T10949] netlink: 'syz.0.1361': attribute type 4 has an invalid length. [ 509.772622][ T30] audit: type=1800 audit(1769020871.612:1225): pid=10950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1362" name="/" dev="fuse" ino=9 res=0 errno=0 [ 509.946635][ T5909] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 510.106318][ T5909] usb 4-1: Using ep0 maxpacket: 16 [ 510.160027][ T5909] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 510.175538][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 510.186876][ T5909] usb 4-1: Product: syz [ 510.191326][ T5909] usb 4-1: Manufacturer: syz [ 510.197228][ T5909] usb 4-1: SerialNumber: syz [ 510.209072][ T5909] usb 4-1: config 0 descriptor?? [ 510.552152][T10953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.571908][T10953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.722029][ T5909] usb 4-1: USB disconnect, device number 27 [ 511.976458][T10969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1367'. [ 512.014424][ T5909] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 512.026275][ T5909] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 512.058661][ T5909] hid-generic 0003:0004:0000.0006: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 512.140177][T10972] fido_id[10972]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 512.660013][T10978] sctp: [Deprecated]: syz.4.1370 (pid 10978) Use of int in max_burst socket option deprecated. [ 512.660013][T10978] Use struct sctp_assoc_value instead [ 512.910584][ T5909] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 513.055544][T10984] sctp: [Deprecated]: syz.0.1372 (pid 10984) Use of int in max_burst socket option deprecated. [ 513.055544][T10984] Use struct sctp_assoc_value instead [ 513.086377][ T5909] usb 4-1: Using ep0 maxpacket: 32 [ 513.097380][ T5909] usb 4-1: config 0 has an invalid interface number: 119 but max is 4 [ 513.119306][ T5909] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 5 [ 513.646345][ T5909] usb 4-1: config 0 has no interface number 0 [ 513.706931][ T5909] usb 4-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 513.752129][T10985] netlink: 'syz.2.1373': attribute type 1 has an invalid length. [ 513.804114][ T5909] usb 4-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 513.829337][ T5909] usb 4-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 513.841602][ T5909] usb 4-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 513.978055][ T5909] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 513.987386][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.006359][ T5909] usb 4-1: Product: syz [ 514.010604][ T5909] usb 4-1: Manufacturer: syz [ 514.015316][ T5909] usb 4-1: SerialNumber: syz [ 514.057655][ T5909] usb 4-1: config 0 descriptor?? [ 514.103184][ T5909] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.119/input/input31 [ 514.162378][T10985] 8021q: adding VLAN 0 to HW filter on device bond2 [ 514.313809][T10996] bond2: (slave dummy0): making interface the new active one [ 514.330620][ T5909] usb 4-1: USB disconnect, device number 28 [ 514.339696][T10996] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 515.090115][T11011] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 515.176284][ T5909] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 515.888122][ T5909] usb 1-1: Using ep0 maxpacket: 16 [ 515.928752][ T5909] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 515.938097][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 515.946778][ T5909] usb 1-1: Product: syz [ 515.951350][ T5909] usb 1-1: Manufacturer: syz [ 515.956614][ T5909] usb 1-1: SerialNumber: syz [ 515.990836][ T5909] usb 1-1: config 0 descriptor?? [ 516.217592][T11007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.327574][T11007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.431529][ T30] audit: type=1326 audit(1769020878.282:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11016 comm="syz.3.1380" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf743d539 code=0x0 [ 516.460553][ T5881] usb 1-1: USB disconnect, device number 28 [ 516.537098][T11018] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 521.238795][ T30] audit: type=1326 audit(1769020883.082:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11083 comm="syz.2.1396" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f94539 code=0x0 [ 521.325652][T11084] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 523.013640][T11095] netlink: 'syz.4.1398': attribute type 1 has an invalid length. [ 523.081677][T11102] sctp: [Deprecated]: syz.2.1401 (pid 11102) Use of int in max_burst socket option deprecated. [ 523.081677][T11102] Use struct sctp_assoc_value instead [ 523.084179][T11095] 8021q: adding VLAN 0 to HW filter on device bond2 [ 523.156214][T11103] bond2: (slave dummy0): making interface the new active one [ 523.174792][T11103] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 523.523749][T11116] sctp: [Deprecated]: syz.3.1403 (pid 11116) Use of int in max_burst socket option deprecated. [ 523.523749][T11116] Use struct sctp_assoc_value instead [ 524.390743][T11126] sctp: [Deprecated]: syz.4.1405 (pid 11126) Use of int in max_burst socket option deprecated. [ 524.390743][T11126] Use struct sctp_assoc_value instead [ 526.876120][T11146] input: syz1 as /devices/virtual/input/input32 [ 526.912682][ T6889] IPVS: starting estimator thread 0... [ 527.016343][T11152] IPVS: using max 52 ests per chain, 124800 per kthread [ 527.228138][ T30] audit: type=1326 audit(1769020889.082:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11149 comm="syz.4.1411" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf747d539 code=0x0 [ 527.325151][T11150] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 527.653719][T11158] netlink: 'syz.1.1413': attribute type 10 has an invalid length. [ 527.684253][T11158] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1413'. [ 529.881335][T11158] FAULT_INJECTION: forcing a failure. [ 529.881335][T11158] name failslab, interval 1, probability 0, space 0, times 0 [ 529.928842][T11158] CPU: 1 UID: 0 PID: 11158 Comm: syz.1.1413 Tainted: G L syzkaller #0 PREEMPT(full) [ 529.928877][T11158] Tainted: [L]=SOFTLOCKUP [ 529.928884][T11158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 529.928906][T11158] Call Trace: [ 529.928915][T11158] [ 529.928923][T11158] dump_stack_lvl+0xe8/0x150 [ 529.928956][T11158] should_fail_ex+0x412/0x560 [ 529.928989][T11158] should_failslab+0xa8/0x100 [ 529.929014][T11158] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 529.929061][T11158] ? __alloc_skb+0x1d7/0x390 [ 529.929086][T11158] ? __local_bh_enable_ip+0xd0/0x130 [ 529.929108][T11158] ? __alloc_skb+0x193/0x390 [ 529.929136][T11158] __alloc_skb+0x1d7/0x390 [ 529.929165][T11158] rtmsg_ifinfo_build_skb+0x84/0x260 [ 529.929190][T11158] ? netpoll_poll_enable+0xce/0xe0 [ 529.929215][T11158] rtmsg_ifinfo+0x8c/0x1a0 [ 529.929245][T11158] __dev_notify_flags+0xf2/0x310 [ 529.929268][T11158] ? __pfx___dev_notify_flags+0x10/0x10 [ 529.929284][T11158] ? __dev_change_flags+0x4c6/0x690 [ 529.929309][T11158] ? __pfx___dev_change_flags+0x10/0x10 [ 529.929341][T11158] netif_change_flags+0xe8/0x1a0 [ 529.929366][T11158] do_setlink+0xf82/0x4590 [ 529.929400][T11158] ? __lock_acquire+0x6b5/0x2cf0 [ 529.929420][T11158] ? __pfx_do_setlink+0x10/0x10 [ 529.929457][T11158] ? do_raw_spin_lock+0x12b/0x2f0 [ 529.929486][T11158] ? do_raw_spin_lock+0x12b/0x2f0 [ 529.929525][T11158] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 529.929550][T11158] ? lockdep_hardirqs_on+0x7a/0x110 [ 529.929578][T11158] ? __mutex_lock+0xd09/0x1300 [ 529.929610][T11158] ? __mutex_lock+0x5ac/0x1300 [ 529.929641][T11158] ? rtnl_setlink+0x55e/0x940 [ 529.929667][T11158] ? __pfx___mutex_lock+0x10/0x10 [ 529.929705][T11158] ? get_net+0x13d/0x1f0 [ 529.929728][T11158] rtnl_setlink+0x635/0x940 [ 529.929750][T11158] ? do_fast_syscall_32+0x33/0x70 [ 529.929774][T11158] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 529.929803][T11158] ? __pfx_rtnl_setlink+0x10/0x10 [ 529.929923][T11158] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 529.929967][T11158] ? __pfx_rtnl_setlink+0x10/0x10 [ 529.929993][T11158] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 529.930025][T11158] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 529.930051][T11158] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 529.930075][T11158] ? ref_tracker_free+0x693/0x840 [ 529.930101][T11158] ? __copy_skb_header+0xa3/0x4a0 [ 529.930123][T11158] ? __pfx_ref_tracker_free+0x10/0x10 [ 529.930161][T11158] netlink_rcv_skb+0x232/0x4b0 [ 529.930183][T11158] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 529.930212][T11158] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 529.930245][T11158] ? netlink_deliver_tap+0x2e/0x1b0 [ 529.930273][T11158] netlink_unicast+0x80f/0x9b0 [ 529.930307][T11158] ? __pfx_netlink_unicast+0x10/0x10 [ 529.930329][T11158] ? __alloc_skb+0x193/0x390 [ 529.930356][T11158] ? netlink_sendmsg+0x650/0xb40 [ 529.930374][T11158] ? skb_put+0x11b/0x210 [ 529.930405][T11158] netlink_sendmsg+0x813/0xb40 [ 529.930436][T11158] ? __pfx_netlink_sendmsg+0x10/0x10 [ 529.930460][T11158] ? __asan_memset+0x22/0x50 [ 529.930485][T11158] ? aa_sock_msg_perm+0xf1/0x1b0 [ 529.930514][T11158] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 529.930532][T11158] ? __pfx_netlink_sendmsg+0x10/0x10 [ 529.930554][T11158] __sock_sendmsg+0x21c/0x270 [ 529.930582][T11158] ____sys_sendmsg+0x4d7/0x810 [ 529.930612][T11158] ? __pfx_____sys_sendmsg+0x10/0x10 [ 529.930635][T11158] ? kstrtoull+0x12f/0x1d0 [ 529.930671][T11158] ___sys_sendmsg+0x2a5/0x360 [ 529.930688][T11158] ? __lock_acquire+0x6b5/0x2cf0 [ 529.930712][T11158] ? __pfx____sys_sendmsg+0x10/0x10 [ 529.930734][T11158] ? get_pid_task+0x20/0x1f0 [ 529.930758][T11158] ? get_pid_task+0x20/0x1f0 [ 529.930780][T11158] ? get_pid_task+0x20/0x1f0 [ 529.930833][T11158] ? __fget_files+0x2a/0x420 [ 529.930857][T11158] ? __fget_files+0x3a0/0x420 [ 529.930890][T11158] __sys_sendmsg+0x183/0x260 [ 529.930920][T11158] ? __pfx___sys_sendmsg+0x10/0x10 [ 529.930951][T11158] ? __pfx_ksys_write+0x10/0x10 [ 529.930980][T11158] __do_fast_syscall_32+0x1d2/0x540 [ 529.931005][T11158] ? lockdep_hardirqs_on+0x7a/0x110 [ 529.931026][T11158] ? do_fast_syscall_32+0x33/0x70 [ 529.931050][T11158] ? asm_int80_emulation+0x1a/0x20 [ 529.931066][T11158] ? do_int80_emulation+0x20e/0x400 [ 529.931096][T11158] do_fast_syscall_32+0x33/0x70 [ 529.931123][T11158] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 529.931144][T11158] RIP: 0023:0xf741d539 [ 529.931161][T11158] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 529.931177][T11158] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 529.931198][T11158] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000140 [ 529.931211][T11158] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 529.931221][T11158] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 529.931232][T11158] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 529.931243][T11158] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 529.931274][T11158] [ 530.478713][T11158] team0: Port device geneve0 added [ 530.697464][T11172] netlink: 'syz.1.1417': attribute type 1 has an invalid length. [ 530.808525][T11172] 8021q: adding VLAN 0 to HW filter on device bond1 [ 530.991482][ T5881] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 531.235402][ T5881] usb 1-1: Using ep0 maxpacket: 16 [ 531.345557][ T5881] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 531.356362][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 531.439556][ T5881] usb 1-1: Product: syz [ 531.443973][ T5881] usb 1-1: Manufacturer: syz [ 531.449312][ T5881] usb 1-1: SerialNumber: syz [ 531.474319][ T5881] usb 1-1: config 0 descriptor?? [ 531.717188][T11175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.737080][T11175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.196844][ T5909] usb 1-1: USB disconnect, device number 29 [ 533.152184][T11202] netlink: 'syz.2.1425': attribute type 10 has an invalid length. [ 533.254187][T11202] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 533.289936][T11202] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 533.962627][T11222] ipt_ECN: cannot use operation on non-tcp rule [ 534.811822][T11228] sctp: [Deprecated]: syz.4.1435 (pid 11228) Use of int in max_burst socket option deprecated. [ 534.811822][T11228] Use struct sctp_assoc_value instead [ 538.452679][T11222] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1432'. [ 538.519879][T11244] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 538.526705][T11244] dvmrp1: linktype set to 808 [ 538.943385][T11262] netlink: 'syz.3.1440': attribute type 10 has an invalid length. [ 538.952684][T11250] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 539.447444][T11262] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 540.261970][T11281] sctp: [Deprecated]: syz.2.1446 (pid 11281) Use of int in max_burst socket option deprecated. [ 540.261970][T11281] Use struct sctp_assoc_value instead [ 541.748281][T11298] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1448'. [ 544.470264][ T5881] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 544.786288][ T5881] usb 5-1: Using ep0 maxpacket: 16 [ 544.812631][ T5881] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 544.832600][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 544.846641][ T5881] usb 5-1: Product: syz [ 544.850979][ T5881] usb 5-1: Manufacturer: syz [ 544.860882][ T5881] usb 5-1: SerialNumber: syz [ 544.890910][ T5881] usb 5-1: config 0 descriptor?? [ 545.123049][T11329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.131980][T11329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.687679][ T5923] usb 5-1: USB disconnect, device number 38 [ 546.319889][T11342] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 546.325714][T11342] dvmrp1: linktype set to 808 [ 546.450669][T11353] sctp: [Deprecated]: syz.1.1473 (pid 11353) Use of int in max_burst socket option deprecated. [ 546.450669][T11353] Use struct sctp_assoc_value instead [ 547.067407][ T107] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 547.206833][ T107] usb 1-1: device descriptor read/64, error -71 [ 547.281859][T11365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1464'. [ 547.536382][ T107] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 547.706344][ T107] usb 1-1: device descriptor read/64, error -71 [ 547.817315][ T107] usb usb1-port1: attempt power cycle [ 548.130550][T11379] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1466'. [ 548.255518][ T107] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 548.326441][ T107] usb 1-1: device descriptor read/8, error -71 [ 548.656899][T11386] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1470'. [ 548.687113][ T5924] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 548.695722][T11386] QAT: failed to copy from user cfg_data. [ 548.904135][ T5924] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 548.906272][ T107] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 548.913746][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.013891][ T5924] usb 5-1: config 0 descriptor?? [ 549.222789][ T107] usb 1-1: device not accepting address 33, error -71 [ 549.261316][ T107] usb usb1-port1: unable to enumerate USB device [ 550.203760][ T30] audit: type=1326 audit(1769020912.042:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11393 comm="syz.0.1472" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2539 code=0x7ffc0000 [ 550.256396][ T30] audit: type=1326 audit(1769020912.042:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11393 comm="syz.0.1472" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fd2539 code=0x7ffc0000 [ 550.285571][ T30] audit: type=1326 audit(1769020912.042:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11393 comm="syz.0.1472" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2539 code=0x7ffc0000 [ 550.309314][ T5909] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 550.319339][ T30] audit: type=1326 audit(1769020912.042:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11393 comm="syz.0.1472" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7fd2539 code=0x7ffc0000 [ 550.343566][ T30] audit: type=1326 audit(1769020912.042:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11393 comm="syz.0.1472" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2539 code=0x7ffc0000 [ 550.370440][ T30] audit: type=1326 audit(1769020912.042:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11393 comm="syz.0.1472" exe="/root/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7fd2539 code=0x7ffc0000 [ 550.403337][ T30] audit: type=1326 audit(1769020912.052:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11393 comm="syz.0.1472" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2539 code=0x7ffc0000 [ 550.429781][ T30] audit: type=1326 audit(1769020912.052:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11393 comm="syz.0.1472" exe="/root/syz-executor" sig=0 arch=40000003 syscall=83 compat=1 ip=0xf7fd2539 code=0x7ffc0000 [ 550.462879][ T30] audit: type=1326 audit(1769020912.052:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11393 comm="syz.0.1472" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2539 code=0x7ffc0000 [ 550.489531][ T5909] usb 4-1: Using ep0 maxpacket: 16 [ 550.497132][ T30] audit: type=1326 audit(1769020912.052:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11393 comm="syz.0.1472" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7fd2539 code=0x7ffc0000 [ 550.540562][ T5909] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 550.550373][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 550.559169][ T5909] usb 4-1: Product: syz [ 550.564838][ T5909] usb 4-1: Manufacturer: syz [ 550.599106][ T5909] usb 4-1: SerialNumber: syz [ 550.616851][ T5909] usb 4-1: config 0 descriptor?? [ 550.648759][T11401] sctp: [Deprecated]: syz.2.1476 (pid 11401) Use of int in max_burst socket option deprecated. [ 550.648759][T11401] Use struct sctp_assoc_value instead [ 550.846790][T11392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.868895][T11392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.186435][ T5909] usb 4-1: USB disconnect, device number 29 [ 551.315641][T11409] sctp: [Deprecated]: syz.1.1477 (pid 11409) Use of int in max_burst socket option deprecated. [ 551.315641][T11409] Use struct sctp_assoc_value instead [ 552.217444][T11415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1478'. [ 552.380649][ T5924] usb 5-1: Cannot set autoneg [ 552.385776][ T5924] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 552.478017][ T5924] usb 5-1: USB disconnect, device number 39 [ 552.872422][ T107] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 553.176956][ T107] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 553.219213][ T107] usb 3-1: config 0 has no interface number 0 [ 553.233580][ T107] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 553.267120][ T107] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 553.294614][ T107] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 553.363097][ T107] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.433110][ T107] usb 3-1: config 0 descriptor?? [ 553.745911][T11442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1485'. [ 553.878906][ T107] prodikeys 0003:041E:2801.0007: unknown main item tag 0x0 [ 553.926421][ T107] prodikeys 0003:041E:2801.0007: item fetching failed at offset 1/7 [ 553.941521][ T107] prodikeys 0003:041E:2801.0007: hid parse failed [ 553.993087][ T107] prodikeys 0003:041E:2801.0007: probe with driver prodikeys failed with error -22 [ 554.237143][ T107] usb 3-1: USB disconnect, device number 30 [ 554.806030][ T7381] IPVS: starting estimator thread 0... [ 555.056354][T11450] IPVS: using max 29 ests per chain, 69600 per kthread [ 555.294281][T11460] sctp: [Deprecated]: syz.3.1493 (pid 11460) Use of int in max_burst socket option deprecated. [ 555.294281][T11460] Use struct sctp_assoc_value instead [ 556.377918][ T7381] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 556.628671][ T7381] usb 1-1: Using ep0 maxpacket: 16 [ 556.654726][ T7381] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 556.665437][ T7381] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 556.696492][ T7381] usb 1-1: Product: syz [ 556.700843][ T7381] usb 1-1: Manufacturer: syz [ 556.715173][ T7381] usb 1-1: SerialNumber: syz [ 556.728785][T11474] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 556.746916][ T7381] usb 1-1: config 0 descriptor?? [ 556.976737][T11467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.003714][T11467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.773327][ T5909] usb 1-1: USB disconnect, device number 34 [ 558.507869][T11503] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1503'. [ 558.728321][T11500] netdevsim netdevsim2: Direct firmware load for ..€ failed with error -2 [ 558.751681][T11507] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 558.763702][T11507] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 558.772119][T11507] CPU: 1 UID: 0 PID: 11507 Comm: syz.1.1504 Tainted: G L syzkaller #0 PREEMPT(full) [ 558.783137][T11507] Tainted: [L]=SOFTLOCKUP [ 558.787548][T11507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 558.797874][T11507] RIP: 0010:ife_tlv_meta_encode+0x46/0xb0 [ 558.803608][T11507] Code: 70 86 73 f6 45 8d 77 07 4d 8d 65 04 c1 e5 10 44 89 fb 83 c3 04 09 eb 0f cb 4c 89 e8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 75 43 41 89 5d 00 41 81 e6 fc ff 00 00 41 8d 46 [ 558.823666][T11507] RSP: 0018:ffffc9000b176f40 EFLAGS: 00010246 [ 558.829744][T11507] RAX: 0000000000000000 RBX: 0000000008000100 RCX: dffffc0000000000 [ 558.837831][T11507] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 558.845891][T11507] RBP: 0000000000010000 R08: 0000000000000003 R09: 0000000000000004 [ 558.854045][T11507] R10: dffffc0000000000 R11: ffffffff8979f0c0 R12: 0000000000000004 [ 558.862554][T11507] R13: 0000000000000000 R14: 000000000000000b R15: 0000000000000004 [ 558.870818][T11507] FS: 0000000000000000(0000) GS:ffff888125a29000(0063) knlGS:00000000f5446b40 [ 558.880221][T11507] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 558.886919][T11507] CR2: 00007f384464fe9c CR3: 00000000338fa000 CR4: 00000000003526f0 [ 558.894909][T11507] Call Trace: [ 558.898218][T11507] [ 558.901169][T11507] ife_encode_meta_u32+0x126/0x1c0 [ 558.906376][T11507] ? tcf_ife_act+0x1067/0x1d80 [ 558.911162][T11507] ? __pfx_ife_encode_meta_u32+0x10/0x10 [ 558.916908][T11507] ? ife_encode+0x3cf/0x4e0 [ 558.921618][T11507] tcf_ife_act+0x10fd/0x1d80 [ 558.926332][T11507] ? tcf_ife_act+0x980/0x1d80 [ 558.931465][T11507] ? __pfx_tcf_ife_act+0x10/0x10 [ 558.936692][T11507] ? ____sys_sendmsg+0x4d7/0x810 [ 558.941832][T11507] ? ___sys_sendmsg+0x2a5/0x360 [ 558.946688][T11507] ? __sys_sendmsg+0x183/0x260 [ 558.951450][T11507] ? __do_fast_syscall_32+0x1d2/0x540 [ 558.956944][T11507] ? do_fast_syscall_32+0x33/0x70 [ 558.962058][T11507] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 558.969005][T11507] tcf_action_exec+0x185/0x8e0 [ 558.973782][T11507] tcf_classify+0x4cf/0x1130 [ 558.978389][T11507] multiq_enqueue+0x102/0x4d0 [ 558.983074][T11507] ? __pfx_multiq_enqueue+0x10/0x10 [ 558.988372][T11507] ? do_raw_spin_lock+0x12b/0x2f0 [ 558.993509][T11507] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 558.998894][T11507] dev_qdisc_enqueue+0x4e/0x240 [ 559.003934][T11507] ? __dev_queue_xmit+0x1916/0x32b0 [ 559.009577][T11507] __dev_queue_xmit+0x1933/0x32b0 [ 559.014780][T11507] ? __dev_queue_xmit+0x2a7/0x32b0 [ 559.020161][T11507] ? _copy_from_iter+0x21b/0x1670 [ 559.025298][T11507] ? __pfx___dev_queue_xmit+0x10/0x10 [ 559.030677][T11507] ? sock_alloc_send_pskb+0x896/0x990 [ 559.036060][T11507] ? packet_parse_headers+0x808/0xb50 [ 559.041443][T11507] ? packet_parse_headers+0x8b5/0xb50 [ 559.047174][T11507] ? skb_copy_datagram_from_iter+0x60c/0x710 [ 559.053335][T11507] ? packet_xmit+0x68/0x320 [ 559.058023][T11507] packet_sendmsg+0x3eb6/0x50f0 [ 559.062886][T11507] ? __lock_acquire+0x6b5/0x2cf0 [ 559.068094][T11507] ? aa_sk_perm+0x15a/0x960 [ 559.072602][T11507] ? aa_sk_perm+0x82d/0x960 [ 559.077215][T11507] ? __pfx_packet_sendmsg+0x10/0x10 [ 559.082768][T11507] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 559.089471][T11507] ? __asan_memset+0x22/0x50 [ 559.094271][T11507] ? aa_sock_msg_perm+0xf1/0x1b0 [ 559.099243][T11507] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 559.104627][T11507] ? __pfx_packet_sendmsg+0x10/0x10 [ 559.112440][T11507] __sock_sendmsg+0x21c/0x270 [ 559.117306][T11507] ____sys_sendmsg+0x4d7/0x810 [ 559.122082][T11507] ? __pfx_____sys_sendmsg+0x10/0x10 [ 559.127376][T11507] ? kstrtoull+0x12f/0x1d0 [ 559.131885][T11507] ___sys_sendmsg+0x2a5/0x360 [ 559.136661][T11507] ? __lock_acquire+0x6b5/0x2cf0 [ 559.141632][T11507] ? __pfx____sys_sendmsg+0x10/0x10 [ 559.146855][T11507] ? get_pid_task+0x20/0x1f0 [ 559.151476][T11507] ? get_pid_task+0x20/0x1f0 [ 559.156247][T11507] ? get_pid_task+0x20/0x1f0 [ 559.160863][T11507] ? __fget_files+0x2a/0x420 [ 559.165461][T11507] ? __fget_files+0x3a0/0x420 [ 559.170142][T11507] __sys_sendmsg+0x183/0x260 [ 559.174826][T11507] ? __pfx___sys_sendmsg+0x10/0x10 [ 559.179956][T11507] ? __pfx_ksys_write+0x10/0x10 [ 559.185368][T11507] __do_fast_syscall_32+0x1d2/0x540 [ 559.190688][T11507] ? lockdep_hardirqs_on+0x7a/0x110 [ 559.195950][T11507] ? do_fast_syscall_32+0x33/0x70 [ 559.201011][T11507] ? asm_int80_emulation+0x1a/0x20 [ 559.206269][T11507] ? do_int80_emulation+0x20e/0x400 [ 559.211513][T11507] do_fast_syscall_32+0x33/0x70 [ 559.216887][T11507] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 559.223577][T11507] RIP: 0023:0xf741d539 [ 559.227915][T11507] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 559.247616][T11507] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 559.256136][T11507] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000800000c0 [ 559.264834][T11507] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 559.273294][T11507] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 559.281398][T11507] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 559.289409][T11507] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 559.297581][T11507] [ 559.300845][T11507] Modules linked in: [ 559.305044][T11507] ---[ end trace 0000000000000000 ]--- [ 559.310650][T11507] RIP: 0010:ife_tlv_meta_encode+0x46/0xb0 [ 559.316486][T11507] Code: 70 86 73 f6 45 8d 77 07 4d 8d 65 04 c1 e5 10 44 89 fb 83 c3 04 09 eb 0f cb 4c 89 e8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 75 43 41 89 5d 00 41 81 e6 fc ff 00 00 41 8d 46 [ 559.336550][T11507] RSP: 0018:ffffc9000b176f40 EFLAGS: 00010246 [ 559.342813][T11507] RAX: 0000000000000000 RBX: 0000000008000100 RCX: dffffc0000000000 [ 559.351063][T11507] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 559.359397][T11507] RBP: 0000000000010000 R08: 0000000000000003 R09: 0000000000000004 [ 559.367570][T11507] R10: dffffc0000000000 R11: ffffffff8979f0c0 R12: 0000000000000004 [ 559.375815][T11507] R13: 0000000000000000 R14: 000000000000000b R15: 0000000000000004 [ 559.384458][T11507] FS: 0000000000000000(0000) GS:ffff888125a29000(0063) knlGS:00000000f5446b40 [ 559.394021][T11507] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 559.401081][T11507] CR2: 00007f384464fe9c CR3: 00000000338fa000 CR4: 00000000003526f0 [ 559.409366][T11507] Kernel panic - not syncing: Fatal exception in interrupt [ 559.417304][T11507] Kernel Offset: disabled [ 559.421843][T11507] Rebooting in 86400 seconds..