last executing test programs:

6m43.287356985s ago: executing program 0 (id=41):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80004}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x68, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000980)=0x80000001, 0x4)
setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000b00)=0x6, 0x4)
bind$inet(r0, &(0x7f0000000b40)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x32, &(0x7f0000000b80)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x8d}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0)

6m42.985163091s ago: executing program 0 (id=44):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
dup(r0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000740)='team_slave_1\x00', 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x5, @empty, 0xb055}}, 0xff80, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c)
r2 = dup(r0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x5, 0x4, 0xf06, 0x0, 0x84, 0x81, 0x5}, 0x9c)

6m42.117887352s ago: executing program 0 (id=50):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000f00)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c)
sendmsg$inet6(r0, &(0x7f0000000f40)={&(0x7f0000000f80)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000fc0)=[{&(0x7f0000001000)="99", 0x1}], 0x1}, 0x4048043)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000013c0)={0x0, 0x2}, 0x8)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0)

6m41.120756962s ago: executing program 0 (id=58):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000002580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f40)}}], 0x1, 0x40000002, 0x0)
setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000140)=0x80000001, 0x4)
syz_emit_ethernet(0x32, &(0x7f0000000200)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x5e}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0)

6m40.105025995s ago: executing program 0 (id=64):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000980)=0x80000001, 0x4)
setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000b00)=0x6, 0x4)
bind$inet(r0, &(0x7f0000000b40)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x32, &(0x7f0000000b80)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x8d}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0)

6m39.752983326s ago: executing program 0 (id=66):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'syzkaller0\x00', 0x1})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = syz_usb_connect(0x5, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000006c055080a115014cb62010203010902120001fe0000000904"], 0x0)
syz_usb_control_io$sierra_net(r4, 0x0, 0x0)
sendto$inet6(r3, &(0x7f0000000740)='X', 0x1, 0x0, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback={0xe0ffffff00000000}}, 0x1c)
recvmmsg(r3, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}, 0xa}], 0x40000f6, 0x102, 0x0)
shutdown(r3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000980)={'gretap0\x00', &(0x7f0000000840)={'tunl0\x00', <r5=>r2, 0x20, 0x8000, 0x3, 0x4, {{0x2c, 0x4, 0x1, 0x25, 0xb0, 0x66, 0x0, 0x0, 0x29, 0x0, @multicast2, @remote, {[@timestamp_addr={0x44, 0x1c, 0xf5, 0x1, 0x3, [{@local, 0xfb1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff01}, {@private=0xa010101, 0x101}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x34, 0x34, 0x1, 0x5, [{@private=0xa010102, 0x2}, {@local, 0x3ec}, {@multicast2, 0x1000}, {@remote, 0x101}, {@empty, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}]}, @ssrr={0x89, 0x13, 0xae, [@multicast2, @remote, @loopback, @dev={0xac, 0x14, 0x14, 0x2c}]}, @cipso={0x86, 0xf, 0x4, [{0x6, 0x9, "a61690c1fa5a1e"}]}, @generic={0x89, 0xc, "ccf1c4a6ac0514c7cde3"}, @timestamp={0x44, 0x18, 0x35, 0x0, 0x0, [0x9, 0xa2, 0x8, 0x6, 0x10001]}]}}}}})
sendmsg$nl_route_sched(r1, &(0x7f0000001a80)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001a40)={&(0x7f00000009c0)=@deltclass={0x1064, 0x29, 0x100, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x2, 0x6}, {0x4, 0x5}, {0xe, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x3}}, @tclass_kind_options=@c_htb={{0x8}, {0x1030, 0x2, [@TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_RATE64={0xc, 0x6, 0x1}, @TCA_HTB_CTAB={0x404, 0x3, [0xfffffff7, 0x9, 0x5, 0x80000000, 0x0, 0x7, 0x401, 0xd, 0x6, 0x7f, 0xcc0, 0xfffff800, 0x0, 0x800, 0x7d4, 0x9, 0x6, 0x81, 0x6, 0x7ff, 0x4, 0x9, 0x7ff, 0x400, 0xa, 0x7f, 0x10000, 0x4, 0x8, 0xfff, 0x2, 0x4, 0x2, 0x4, 0x0, 0x6, 0x7de2, 0xb39, 0x5, 0x6, 0xaa7a, 0x6, 0x8, 0x6, 0x4614, 0x8000, 0xffffffbb, 0x8, 0xffffff03, 0x1, 0x9, 0xf87, 0xff, 0x9, 0x7, 0xde1, 0x0, 0x6, 0x66af, 0x1, 0x5, 0x8, 0x7fffffff, 0x9, 0x953f, 0xa, 0x0, 0x6, 0xf, 0x2, 0x7ff, 0x4, 0x8, 0xa2, 0x0, 0x2, 0x1, 0xffff, 0x8, 0xffffffe7, 0x3, 0x7, 0x1, 0x9, 0x2, 0xbb, 0xfffffffd, 0x8, 0x7, 0x6, 0x5, 0x6, 0x5, 0xc, 0x3, 0x6, 0x5, 0x5, 0x9, 0x10800000, 0x1a6, 0x1, 0x2, 0xfffffffb, 0x96, 0x6, 0x1, 0x80000001, 0x1, 0x4c, 0x6, 0x8, 0x33, 0x6222, 0xfff, 0x3, 0x4, 0xa, 0x57e, 0x6, 0x8, 0x1, 0x7, 0x4, 0x6, 0x1, 0x7, 0x1ff, 0x3, 0x7, 0x10, 0x81, 0x7, 0x1, 0x1, 0x0, 0x6, 0xfffffff9, 0x9, 0x1, 0xb35, 0xfffffa43, 0xfffffffb, 0x86aa, 0x0, 0x1, 0xfff, 0xdb6, 0x5, 0x10000, 0x0, 0xfffffff7, 0x73c, 0x5, 0x5, 0x0, 0x6, 0x9, 0x9, 0xfffffff7, 0x80000000, 0x2, 0x6, 0x8001, 0x4, 0x9, 0x10000, 0x6, 0x80000000, 0x7, 0x5, 0x0, 0x2, 0x3, 0x81, 0x200, 0xffff, 0x8b20, 0xffffffff, 0xe64, 0x5, 0x4, 0xfffffeff, 0xb, 0x4, 0x1000, 0x4, 0xcced, 0xc, 0xe0f, 0x9, 0x0, 0xe2f, 0x8, 0x7, 0xffffff00, 0xb, 0x3, 0x10001, 0x7, 0x7, 0xfffffff8, 0x2, 0x4, 0x8, 0xeff7, 0x80, 0x0, 0x7, 0x5, 0x2, 0x80000001, 0x0, 0x817, 0x57, 0xe7, 0x3, 0xa7, 0xffffffff, 0x4, 0x1, 0x5dc, 0x80, 0xfffffff5, 0xcd, 0x7, 0x4, 0x0, 0x9, 0x7, 0xfbc7879, 0x9, 0x0, 0x6, 0x1, 0x6e, 0x2, 0x6, 0x8, 0x2, 0xff, 0x6, 0x1000, 0x8001, 0xffff, 0x81, 0x10001, 0x65, 0x3, 0x5, 0x3, 0x1, 0x2192, 0x7adc, 0x7, 0x3]}, @TCA_HTB_CTAB={0x404, 0x3, [0x8, 0x8, 0xfffffff9, 0x2, 0x45, 0x9, 0x3, 0x7, 0x0, 0xe1b3, 0x495e, 0x2, 0x6f7, 0x2, 0xffff6ac3, 0x3ff, 0xff, 0x1ff, 0x7, 0x4, 0xfffffff9, 0xfffffffb, 0x328, 0xa, 0x401, 0x3, 0xe77f, 0xd, 0x90, 0x5, 0x7f, 0x5, 0x7f, 0x8, 0x1, 0x0, 0x4, 0x8, 0x4, 0x80000000, 0x9, 0x9, 0x2, 0x3, 0x574, 0x6, 0x8, 0x2, 0x198a, 0x7, 0x7fff, 0xfffffff0, 0x4, 0x0, 0x4, 0x9, 0x7, 0x5, 0xe, 0x3, 0x1000, 0xc0000, 0x5, 0xa02, 0x7, 0x6, 0xd06, 0x8001, 0xffffffff, 0x6, 0x9, 0x800, 0x1, 0x0, 0x10001, 0x8001, 0x10000, 0x0, 0xfffffffb, 0x80000000, 0x8, 0x0, 0x2, 0x800, 0xb, 0xc, 0x6, 0x6, 0xfc2, 0x4, 0x1, 0x2, 0x1, 0xcf81, 0x0, 0x3, 0x2, 0x7, 0x10000, 0x80, 0xe, 0x3, 0x4, 0x9, 0xa, 0x2, 0xffffa653, 0x9, 0x2, 0x2, 0xfffffffd, 0x2, 0xa, 0x6, 0x6, 0x50, 0x9, 0xfffffff3, 0x0, 0x30, 0x7, 0x0, 0x81, 0x5, 0x6, 0x2, 0xffffc9f0, 0xe, 0x0, 0x7, 0x3800000, 0xe15, 0x80, 0x6, 0x4, 0x80000001, 0x7, 0xa, 0x80, 0x9, 0xfffffff8, 0xe, 0x128e03b6, 0x6, 0xa000000, 0x9, 0x0, 0x80, 0x5a4, 0x7, 0x0, 0x5, 0x2, 0x8, 0xddb, 0x7, 0x0, 0x5, 0x9, 0x3, 0x2, 0xfffffff3, 0xfff, 0x7, 0x0, 0x10, 0x1, 0x3854, 0x8, 0x326, 0x200, 0x5, 0xd, 0x0, 0x9, 0x6, 0x4, 0x5, 0x3, 0xfffffff7, 0x3, 0x8, 0x3, 0x8, 0x6, 0x3, 0x3, 0x6, 0x6, 0xde, 0x7, 0x5, 0x1, 0x4, 0x2, 0x5, 0xa, 0xfffffff7, 0x1, 0xa, 0xf81, 0x2, 0x3, 0x800, 0x2, 0x9, 0xa, 0x2, 0x3, 0x7, 0x6e53, 0x5, 0xffffffff, 0x6, 0x8, 0x6, 0x55da, 0x0, 0xc04, 0x7, 0xf68, 0x6, 0x6, 0x9, 0x2, 0x993, 0xd1, 0x3, 0x7, 0xe, 0xa1, 0x3, 0x0, 0x0, 0xcb7, 0x4, 0x1, 0x44a, 0xd, 0xb0, 0x8, 0x401, 0x7, 0x3, 0xac9c, 0x60, 0x1, 0xc, 0x0, 0xae13, 0x100, 0x0, 0x5, 0x80]}, @TCA_HTB_CTAB={0x404, 0x3, [0x10, 0x0, 0x0, 0x7fffffff, 0x5, 0x4, 0x7ff, 0x7, 0x7, 0x5, 0x80000000, 0x8, 0x8001, 0x800, 0x3ec8, 0x9, 0x101, 0xbdd, 0x4, 0x6, 0x10, 0x9, 0x0, 0x447, 0x0, 0x17, 0x7, 0x1, 0x400, 0x2, 0x1, 0x9f, 0x2, 0x2fe2, 0xff2, 0x1799, 0x8, 0x0, 0xb, 0x5, 0x8979, 0x6, 0x8, 0x1, 0x6, 0x4, 0x5, 0x8, 0xc, 0x7fffffff, 0x8, 0x43, 0x401, 0x3, 0x800, 0xa, 0x10, 0x997bf96, 0x6, 0x8, 0x8, 0x4, 0x2, 0x50092d4f, 0x3, 0x6, 0x20, 0x2, 0x2, 0x80000000, 0x2, 0x6, 0x4, 0x9, 0x4, 0x5, 0xb07, 0x1b86c7c4, 0x4, 0xfffffffc, 0xfff, 0x40, 0x0, 0x6, 0x7, 0x1, 0x6, 0x3, 0x645cde5b, 0x8, 0x7, 0x1, 0x1, 0x5, 0x200, 0x7fffffff, 0xffffffff, 0x1, 0xc22, 0xffff7fff, 0xfff, 0x1, 0x6, 0x6, 0x3, 0x3, 0x0, 0x80, 0x9629, 0x7, 0x3, 0x6ffc0fcb, 0x800, 0xf, 0xa4, 0x7, 0x2, 0x3, 0x3ff, 0x7, 0x4, 0x2, 0x9359, 0x5, 0x5, 0x1ff, 0x5, 0xffffffe6, 0xfe2, 0x9, 0x6, 0x2, 0xe0000000, 0x7ff, 0xc, 0xfff, 0x3e53, 0x7f, 0xc367c4d5, 0x6, 0x3b2, 0xfffff5e4, 0xd, 0x9, 0x35f4, 0x153, 0x0, 0xf2, 0x2, 0x1, 0x4, 0x8, 0x0, 0x9, 0xd9, 0x8, 0x4, 0x2, 0x5, 0x7f, 0x0, 0x7ff, 0x6, 0x7, 0x0, 0x345c, 0x4000003, 0x79ae, 0x4, 0x7, 0x1000, 0xfffffffd, 0x8, 0xfffffff8, 0x3, 0x7, 0x5, 0x2, 0x0, 0x2, 0x7, 0x2, 0x9, 0x6, 0x9a08, 0x1, 0x10001, 0xfe000000, 0x6, 0x7fffffff, 0x5, 0x4, 0x800, 0x1b76, 0x3, 0x80, 0xfffffffc, 0x9e6c, 0x200, 0x9, 0x1, 0x401, 0x200, 0xfff, 0x99ed, 0x2, 0x3, 0x800, 0x3, 0x0, 0x6, 0x8, 0x7d6b, 0x6, 0x65b, 0x0, 0x1000, 0xffffffff, 0x7f, 0x2f24, 0x9, 0x2, 0x80000001, 0xf7b9, 0x4, 0x2, 0xb, 0x10000, 0x80000000, 0x9c8, 0x2, 0x1, 0x0, 0x80000001, 0x0, 0x67, 0x1d, 0xc, 0x0, 0x7f, 0x101, 0x400, 0x3, 0x9, 0x8, 0x0, 0xe, 0x795, 0xc, 0x1, 0x4, 0x3, 0xfffffff7, 0x4, 0x7fff, 0x560d]}, @TCA_HTB_CTAB={0x404, 0x3, [0x81, 0x2, 0x40000000, 0x3, 0x1, 0x6, 0x7, 0x4, 0x2, 0x7fffffff, 0x10000, 0xfffffff9, 0x2a, 0x0, 0x0, 0x7, 0x213, 0xffff, 0x7, 0x9, 0x6, 0xc, 0xdff, 0x401, 0x1, 0x3, 0x98, 0x1, 0x6, 0x3, 0x2, 0x4ee82af4, 0x4, 0x1, 0x1, 0x7106, 0xd, 0x2, 0x2, 0x21a7, 0x8, 0x280000, 0x9, 0x2, 0x2, 0xf2a1, 0xb, 0x5, 0x8, 0xd95, 0x8, 0x9, 0xc8, 0x6, 0x1, 0x40, 0x7f, 0x0, 0x2, 0x7, 0xfff, 0x401, 0xb, 0x80, 0x35e9ded1, 0x10, 0x4, 0x4, 0x9, 0x485, 0x4, 0x7, 0xffffff81, 0x4, 0x2, 0x7f, 0x3ff, 0x40, 0x4, 0x8, 0x3, 0x4, 0x10, 0x3, 0x8, 0xe0, 0x4, 0xfffffff2, 0xfffffffe, 0x9, 0x800, 0x9, 0x2, 0x8, 0x7, 0xfb0b, 0x0, 0x100, 0x2, 0x10001, 0x62, 0x2, 0x7fff, 0xd85, 0x3, 0x3, 0x5, 0x6, 0xcc, 0x0, 0x1, 0x6, 0xd8, 0x4, 0x80, 0x5, 0x5, 0xce, 0x9, 0x8, 0x3, 0x2, 0x14a, 0x8, 0x7fff, 0x1000, 0x1, 0xc, 0x2, 0x35, 0x4, 0x4, 0x8b, 0x3, 0x8, 0xfffffffb, 0x200, 0x80, 0xab2, 0x4, 0x4, 0x8, 0xcf03, 0xade2, 0xe, 0x7ff, 0x6, 0x4, 0x0, 0xa, 0xfffffffe, 0x2, 0xa45, 0x200, 0x6, 0x3, 0x8, 0xf9bd, 0x81, 0xb, 0x78f, 0x0, 0x9, 0x0, 0x2, 0x1, 0x10, 0x6, 0x5, 0x7, 0xfffffff5, 0x7, 0x7ff, 0x8000, 0x800, 0x9, 0x8000000, 0x2, 0x200, 0x4, 0x8, 0x7, 0x579, 0x9, 0x7, 0xd08, 0x9, 0xfffffffc, 0xb, 0x4, 0x800, 0xe, 0xca, 0xa0000000, 0x800000b, 0x100, 0x2, 0x272d0d31, 0x9, 0x671, 0x4, 0x97b, 0xfffffffd, 0xf553, 0x3, 0x8000, 0x241868a, 0x1, 0x6, 0x200, 0x2, 0xff, 0x7, 0xfffffff7, 0x80, 0x10, 0xe, 0xfffffffc, 0x2, 0x7c, 0x0, 0xffffffff, 0x10, 0x1, 0x2, 0x100, 0x2, 0x0, 0x8b, 0x0, 0xd3, 0x4, 0x8, 0x8, 0xb67, 0xff, 0x9, 0x1, 0x0, 0x10, 0x2, 0x9, 0x4, 0x80000001, 0x0, 0x4, 0xbc, 0x3, 0xf7d8, 0x4, 0xfffffff2, 0x0, 0x8, 0x6bb, 0x8, 0x6]}, @TCA_HTB_CEIL64={0xc, 0x7, 0x9}]}}]}, 0x1064}, 0x1, 0x0, 0x0, 0x1}, 0x4000880)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newtfilter={0x2c, 0x2c, 0x401, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0x3}, {0x0, 0xffff}, {0x300, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0x5a8983c8}]}, 0x2c}}, 0x40000)
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f00000001c0)=""/80, 0x0, 0x4})
r7 = syz_open_dev$cec(&(0x7f0000001ac0), 0x0, 0x40c301)
ioctl$CEC_ADAP_S_PHYS_ADDR(r7, 0x40026102, &(0x7f0000001b00))
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000001b40)=0x401, 0x4)
r8 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000640)='veth1_to_team\x00', 0x10)
sendto$inet(r8, 0x0, 0x0, 0x804, &(0x7f0000000680)={0x2, 0x4e22, @multicast1}, 0x10)
setsockopt$inet_int(r8, 0x0, 0x6, &(0x7f00000006c0)=0x7, 0x4)
recvmmsg(r8, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}, 0x8a}], 0x1, 0x40000002, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000280)=""/87, 0x0, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000300))
ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000340)=0x1)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f00000003c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x25000})

6m24.686277493s ago: executing program 32 (id=66):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'syzkaller0\x00', 0x1})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = syz_usb_connect(0x5, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000006c055080a115014cb62010203010902120001fe0000000904"], 0x0)
syz_usb_control_io$sierra_net(r4, 0x0, 0x0)
sendto$inet6(r3, &(0x7f0000000740)='X', 0x1, 0x0, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback={0xe0ffffff00000000}}, 0x1c)
recvmmsg(r3, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}, 0xa}], 0x40000f6, 0x102, 0x0)
shutdown(r3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000980)={'gretap0\x00', &(0x7f0000000840)={'tunl0\x00', <r5=>r2, 0x20, 0x8000, 0x3, 0x4, {{0x2c, 0x4, 0x1, 0x25, 0xb0, 0x66, 0x0, 0x0, 0x29, 0x0, @multicast2, @remote, {[@timestamp_addr={0x44, 0x1c, 0xf5, 0x1, 0x3, [{@local, 0xfb1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff01}, {@private=0xa010101, 0x101}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x34, 0x34, 0x1, 0x5, [{@private=0xa010102, 0x2}, {@local, 0x3ec}, {@multicast2, 0x1000}, {@remote, 0x101}, {@empty, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}]}, @ssrr={0x89, 0x13, 0xae, [@multicast2, @remote, @loopback, @dev={0xac, 0x14, 0x14, 0x2c}]}, @cipso={0x86, 0xf, 0x4, [{0x6, 0x9, "a61690c1fa5a1e"}]}, @generic={0x89, 0xc, "ccf1c4a6ac0514c7cde3"}, @timestamp={0x44, 0x18, 0x35, 0x0, 0x0, [0x9, 0xa2, 0x8, 0x6, 0x10001]}]}}}}})
sendmsg$nl_route_sched(r1, &(0x7f0000001a80)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001a40)={&(0x7f00000009c0)=@deltclass={0x1064, 0x29, 0x100, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x2, 0x6}, {0x4, 0x5}, {0xe, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x3}}, @tclass_kind_options=@c_htb={{0x8}, {0x1030, 0x2, [@TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_RATE64={0xc, 0x6, 0x1}, @TCA_HTB_CTAB={0x404, 0x3, [0xfffffff7, 0x9, 0x5, 0x80000000, 0x0, 0x7, 0x401, 0xd, 0x6, 0x7f, 0xcc0, 0xfffff800, 0x0, 0x800, 0x7d4, 0x9, 0x6, 0x81, 0x6, 0x7ff, 0x4, 0x9, 0x7ff, 0x400, 0xa, 0x7f, 0x10000, 0x4, 0x8, 0xfff, 0x2, 0x4, 0x2, 0x4, 0x0, 0x6, 0x7de2, 0xb39, 0x5, 0x6, 0xaa7a, 0x6, 0x8, 0x6, 0x4614, 0x8000, 0xffffffbb, 0x8, 0xffffff03, 0x1, 0x9, 0xf87, 0xff, 0x9, 0x7, 0xde1, 0x0, 0x6, 0x66af, 0x1, 0x5, 0x8, 0x7fffffff, 0x9, 0x953f, 0xa, 0x0, 0x6, 0xf, 0x2, 0x7ff, 0x4, 0x8, 0xa2, 0x0, 0x2, 0x1, 0xffff, 0x8, 0xffffffe7, 0x3, 0x7, 0x1, 0x9, 0x2, 0xbb, 0xfffffffd, 0x8, 0x7, 0x6, 0x5, 0x6, 0x5, 0xc, 0x3, 0x6, 0x5, 0x5, 0x9, 0x10800000, 0x1a6, 0x1, 0x2, 0xfffffffb, 0x96, 0x6, 0x1, 0x80000001, 0x1, 0x4c, 0x6, 0x8, 0x33, 0x6222, 0xfff, 0x3, 0x4, 0xa, 0x57e, 0x6, 0x8, 0x1, 0x7, 0x4, 0x6, 0x1, 0x7, 0x1ff, 0x3, 0x7, 0x10, 0x81, 0x7, 0x1, 0x1, 0x0, 0x6, 0xfffffff9, 0x9, 0x1, 0xb35, 0xfffffa43, 0xfffffffb, 0x86aa, 0x0, 0x1, 0xfff, 0xdb6, 0x5, 0x10000, 0x0, 0xfffffff7, 0x73c, 0x5, 0x5, 0x0, 0x6, 0x9, 0x9, 0xfffffff7, 0x80000000, 0x2, 0x6, 0x8001, 0x4, 0x9, 0x10000, 0x6, 0x80000000, 0x7, 0x5, 0x0, 0x2, 0x3, 0x81, 0x200, 0xffff, 0x8b20, 0xffffffff, 0xe64, 0x5, 0x4, 0xfffffeff, 0xb, 0x4, 0x1000, 0x4, 0xcced, 0xc, 0xe0f, 0x9, 0x0, 0xe2f, 0x8, 0x7, 0xffffff00, 0xb, 0x3, 0x10001, 0x7, 0x7, 0xfffffff8, 0x2, 0x4, 0x8, 0xeff7, 0x80, 0x0, 0x7, 0x5, 0x2, 0x80000001, 0x0, 0x817, 0x57, 0xe7, 0x3, 0xa7, 0xffffffff, 0x4, 0x1, 0x5dc, 0x80, 0xfffffff5, 0xcd, 0x7, 0x4, 0x0, 0x9, 0x7, 0xfbc7879, 0x9, 0x0, 0x6, 0x1, 0x6e, 0x2, 0x6, 0x8, 0x2, 0xff, 0x6, 0x1000, 0x8001, 0xffff, 0x81, 0x10001, 0x65, 0x3, 0x5, 0x3, 0x1, 0x2192, 0x7adc, 0x7, 0x3]}, @TCA_HTB_CTAB={0x404, 0x3, [0x8, 0x8, 0xfffffff9, 0x2, 0x45, 0x9, 0x3, 0x7, 0x0, 0xe1b3, 0x495e, 0x2, 0x6f7, 0x2, 0xffff6ac3, 0x3ff, 0xff, 0x1ff, 0x7, 0x4, 0xfffffff9, 0xfffffffb, 0x328, 0xa, 0x401, 0x3, 0xe77f, 0xd, 0x90, 0x5, 0x7f, 0x5, 0x7f, 0x8, 0x1, 0x0, 0x4, 0x8, 0x4, 0x80000000, 0x9, 0x9, 0x2, 0x3, 0x574, 0x6, 0x8, 0x2, 0x198a, 0x7, 0x7fff, 0xfffffff0, 0x4, 0x0, 0x4, 0x9, 0x7, 0x5, 0xe, 0x3, 0x1000, 0xc0000, 0x5, 0xa02, 0x7, 0x6, 0xd06, 0x8001, 0xffffffff, 0x6, 0x9, 0x800, 0x1, 0x0, 0x10001, 0x8001, 0x10000, 0x0, 0xfffffffb, 0x80000000, 0x8, 0x0, 0x2, 0x800, 0xb, 0xc, 0x6, 0x6, 0xfc2, 0x4, 0x1, 0x2, 0x1, 0xcf81, 0x0, 0x3, 0x2, 0x7, 0x10000, 0x80, 0xe, 0x3, 0x4, 0x9, 0xa, 0x2, 0xffffa653, 0x9, 0x2, 0x2, 0xfffffffd, 0x2, 0xa, 0x6, 0x6, 0x50, 0x9, 0xfffffff3, 0x0, 0x30, 0x7, 0x0, 0x81, 0x5, 0x6, 0x2, 0xffffc9f0, 0xe, 0x0, 0x7, 0x3800000, 0xe15, 0x80, 0x6, 0x4, 0x80000001, 0x7, 0xa, 0x80, 0x9, 0xfffffff8, 0xe, 0x128e03b6, 0x6, 0xa000000, 0x9, 0x0, 0x80, 0x5a4, 0x7, 0x0, 0x5, 0x2, 0x8, 0xddb, 0x7, 0x0, 0x5, 0x9, 0x3, 0x2, 0xfffffff3, 0xfff, 0x7, 0x0, 0x10, 0x1, 0x3854, 0x8, 0x326, 0x200, 0x5, 0xd, 0x0, 0x9, 0x6, 0x4, 0x5, 0x3, 0xfffffff7, 0x3, 0x8, 0x3, 0x8, 0x6, 0x3, 0x3, 0x6, 0x6, 0xde, 0x7, 0x5, 0x1, 0x4, 0x2, 0x5, 0xa, 0xfffffff7, 0x1, 0xa, 0xf81, 0x2, 0x3, 0x800, 0x2, 0x9, 0xa, 0x2, 0x3, 0x7, 0x6e53, 0x5, 0xffffffff, 0x6, 0x8, 0x6, 0x55da, 0x0, 0xc04, 0x7, 0xf68, 0x6, 0x6, 0x9, 0x2, 0x993, 0xd1, 0x3, 0x7, 0xe, 0xa1, 0x3, 0x0, 0x0, 0xcb7, 0x4, 0x1, 0x44a, 0xd, 0xb0, 0x8, 0x401, 0x7, 0x3, 0xac9c, 0x60, 0x1, 0xc, 0x0, 0xae13, 0x100, 0x0, 0x5, 0x80]}, @TCA_HTB_CTAB={0x404, 0x3, [0x10, 0x0, 0x0, 0x7fffffff, 0x5, 0x4, 0x7ff, 0x7, 0x7, 0x5, 0x80000000, 0x8, 0x8001, 0x800, 0x3ec8, 0x9, 0x101, 0xbdd, 0x4, 0x6, 0x10, 0x9, 0x0, 0x447, 0x0, 0x17, 0x7, 0x1, 0x400, 0x2, 0x1, 0x9f, 0x2, 0x2fe2, 0xff2, 0x1799, 0x8, 0x0, 0xb, 0x5, 0x8979, 0x6, 0x8, 0x1, 0x6, 0x4, 0x5, 0x8, 0xc, 0x7fffffff, 0x8, 0x43, 0x401, 0x3, 0x800, 0xa, 0x10, 0x997bf96, 0x6, 0x8, 0x8, 0x4, 0x2, 0x50092d4f, 0x3, 0x6, 0x20, 0x2, 0x2, 0x80000000, 0x2, 0x6, 0x4, 0x9, 0x4, 0x5, 0xb07, 0x1b86c7c4, 0x4, 0xfffffffc, 0xfff, 0x40, 0x0, 0x6, 0x7, 0x1, 0x6, 0x3, 0x645cde5b, 0x8, 0x7, 0x1, 0x1, 0x5, 0x200, 0x7fffffff, 0xffffffff, 0x1, 0xc22, 0xffff7fff, 0xfff, 0x1, 0x6, 0x6, 0x3, 0x3, 0x0, 0x80, 0x9629, 0x7, 0x3, 0x6ffc0fcb, 0x800, 0xf, 0xa4, 0x7, 0x2, 0x3, 0x3ff, 0x7, 0x4, 0x2, 0x9359, 0x5, 0x5, 0x1ff, 0x5, 0xffffffe6, 0xfe2, 0x9, 0x6, 0x2, 0xe0000000, 0x7ff, 0xc, 0xfff, 0x3e53, 0x7f, 0xc367c4d5, 0x6, 0x3b2, 0xfffff5e4, 0xd, 0x9, 0x35f4, 0x153, 0x0, 0xf2, 0x2, 0x1, 0x4, 0x8, 0x0, 0x9, 0xd9, 0x8, 0x4, 0x2, 0x5, 0x7f, 0x0, 0x7ff, 0x6, 0x7, 0x0, 0x345c, 0x4000003, 0x79ae, 0x4, 0x7, 0x1000, 0xfffffffd, 0x8, 0xfffffff8, 0x3, 0x7, 0x5, 0x2, 0x0, 0x2, 0x7, 0x2, 0x9, 0x6, 0x9a08, 0x1, 0x10001, 0xfe000000, 0x6, 0x7fffffff, 0x5, 0x4, 0x800, 0x1b76, 0x3, 0x80, 0xfffffffc, 0x9e6c, 0x200, 0x9, 0x1, 0x401, 0x200, 0xfff, 0x99ed, 0x2, 0x3, 0x800, 0x3, 0x0, 0x6, 0x8, 0x7d6b, 0x6, 0x65b, 0x0, 0x1000, 0xffffffff, 0x7f, 0x2f24, 0x9, 0x2, 0x80000001, 0xf7b9, 0x4, 0x2, 0xb, 0x10000, 0x80000000, 0x9c8, 0x2, 0x1, 0x0, 0x80000001, 0x0, 0x67, 0x1d, 0xc, 0x0, 0x7f, 0x101, 0x400, 0x3, 0x9, 0x8, 0x0, 0xe, 0x795, 0xc, 0x1, 0x4, 0x3, 0xfffffff7, 0x4, 0x7fff, 0x560d]}, @TCA_HTB_CTAB={0x404, 0x3, [0x81, 0x2, 0x40000000, 0x3, 0x1, 0x6, 0x7, 0x4, 0x2, 0x7fffffff, 0x10000, 0xfffffff9, 0x2a, 0x0, 0x0, 0x7, 0x213, 0xffff, 0x7, 0x9, 0x6, 0xc, 0xdff, 0x401, 0x1, 0x3, 0x98, 0x1, 0x6, 0x3, 0x2, 0x4ee82af4, 0x4, 0x1, 0x1, 0x7106, 0xd, 0x2, 0x2, 0x21a7, 0x8, 0x280000, 0x9, 0x2, 0x2, 0xf2a1, 0xb, 0x5, 0x8, 0xd95, 0x8, 0x9, 0xc8, 0x6, 0x1, 0x40, 0x7f, 0x0, 0x2, 0x7, 0xfff, 0x401, 0xb, 0x80, 0x35e9ded1, 0x10, 0x4, 0x4, 0x9, 0x485, 0x4, 0x7, 0xffffff81, 0x4, 0x2, 0x7f, 0x3ff, 0x40, 0x4, 0x8, 0x3, 0x4, 0x10, 0x3, 0x8, 0xe0, 0x4, 0xfffffff2, 0xfffffffe, 0x9, 0x800, 0x9, 0x2, 0x8, 0x7, 0xfb0b, 0x0, 0x100, 0x2, 0x10001, 0x62, 0x2, 0x7fff, 0xd85, 0x3, 0x3, 0x5, 0x6, 0xcc, 0x0, 0x1, 0x6, 0xd8, 0x4, 0x80, 0x5, 0x5, 0xce, 0x9, 0x8, 0x3, 0x2, 0x14a, 0x8, 0x7fff, 0x1000, 0x1, 0xc, 0x2, 0x35, 0x4, 0x4, 0x8b, 0x3, 0x8, 0xfffffffb, 0x200, 0x80, 0xab2, 0x4, 0x4, 0x8, 0xcf03, 0xade2, 0xe, 0x7ff, 0x6, 0x4, 0x0, 0xa, 0xfffffffe, 0x2, 0xa45, 0x200, 0x6, 0x3, 0x8, 0xf9bd, 0x81, 0xb, 0x78f, 0x0, 0x9, 0x0, 0x2, 0x1, 0x10, 0x6, 0x5, 0x7, 0xfffffff5, 0x7, 0x7ff, 0x8000, 0x800, 0x9, 0x8000000, 0x2, 0x200, 0x4, 0x8, 0x7, 0x579, 0x9, 0x7, 0xd08, 0x9, 0xfffffffc, 0xb, 0x4, 0x800, 0xe, 0xca, 0xa0000000, 0x800000b, 0x100, 0x2, 0x272d0d31, 0x9, 0x671, 0x4, 0x97b, 0xfffffffd, 0xf553, 0x3, 0x8000, 0x241868a, 0x1, 0x6, 0x200, 0x2, 0xff, 0x7, 0xfffffff7, 0x80, 0x10, 0xe, 0xfffffffc, 0x2, 0x7c, 0x0, 0xffffffff, 0x10, 0x1, 0x2, 0x100, 0x2, 0x0, 0x8b, 0x0, 0xd3, 0x4, 0x8, 0x8, 0xb67, 0xff, 0x9, 0x1, 0x0, 0x10, 0x2, 0x9, 0x4, 0x80000001, 0x0, 0x4, 0xbc, 0x3, 0xf7d8, 0x4, 0xfffffff2, 0x0, 0x8, 0x6bb, 0x8, 0x6]}, @TCA_HTB_CEIL64={0xc, 0x7, 0x9}]}}]}, 0x1064}, 0x1, 0x0, 0x0, 0x1}, 0x4000880)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newtfilter={0x2c, 0x2c, 0x401, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0x3}, {0x0, 0xffff}, {0x300, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0x5a8983c8}]}, 0x2c}}, 0x40000)
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f00000001c0)=""/80, 0x0, 0x4})
r7 = syz_open_dev$cec(&(0x7f0000001ac0), 0x0, 0x40c301)
ioctl$CEC_ADAP_S_PHYS_ADDR(r7, 0x40026102, &(0x7f0000001b00))
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000001b40)=0x401, 0x4)
r8 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000640)='veth1_to_team\x00', 0x10)
sendto$inet(r8, 0x0, 0x0, 0x804, &(0x7f0000000680)={0x2, 0x4e22, @multicast1}, 0x10)
setsockopt$inet_int(r8, 0x0, 0x6, &(0x7f00000006c0)=0x7, 0x4)
recvmmsg(r8, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}, 0x8a}], 0x1, 0x40000002, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000280)=""/87, 0x0, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000300))
ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000340)=0x1)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f00000003c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x25000})

2m55.546324647s ago: executing program 2 (id=1292):
unshare(0x60600)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x68}}, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_flowlabel\x00')
r2 = syz_ublk_setup_io_uring(0x277a, &(0x7f00000001c0)={0x0, 0x8be, 0x400, 0x1024002, 0x35}, &(0x7f0000000240)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000380), 0x1, 0x40, 0x1})
syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x100000001, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x2, 0xf44, 0x0, 0x0, 0x1000, 0xffffff7f, 0xffffffffffffffff, 0x0, 0x118}}}, 0x0)
r6 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000480)=0x63ba, 0x4)
setsockopt$inet6_int(r6, 0x29, 0x2, &(0x7f00000004c0)=0x3, 0x4)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000)
sendmmsg$inet6(r6, &(0x7f0000000500)=[{{&(0x7f0000000540)={0xa, 0x4e24, 0x6, @local, 0x7}, 0x1c, 0x0}}], 0x1, 0x24000000)
recvmmsg(r6, &(0x7f0000000580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=""/130, 0x82}, 0xdb36}], 0x1, 0x40002042, 0x0)
getrusage(0x0, &(0x7f0000000680))
read$dsp(r1, &(0x7f0000000700)=""/229, 0xe5)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x12, 0xffffffffffffffff, 0x0)
socket$inet(0xa, 0x801, 0x84)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = fsopen(&(0x7f0000000800)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
r8 = fsmount(r7, 0x0, 0x0)
fchdir(r8)
r9 = open(&(0x7f0000000840)='./bus\x00', 0x143142, 0x80)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000880)={0xdc, 0x0, &(0x7f00000008c0)=[@acquire={0x40046305, 0x2}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f00000009c0)={@flat, @ptr={0x70742a85, 0x1, &(0x7f0000000a40), 0x52, 0x201, 0x36}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}}, &(0x7f0000000a80)={0x0, 0x1c, 0x44}}}, @acquire={0x40046305, 0x3}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000ac0)={@fd={0x66642a85, 0x0, r7}, @ptr={0x70742a85, 0x1, &(0x7f0000000b40), 0x4, 0x0, 0x3d}, @ptr={0x70742a85, 0x1, &(0x7f0000000b80), 0x24, 0x2, 0x5}}, &(0x7f0000000bc0)={0x0, 0x18, 0x40}}, 0x1000}, @request_death={0x400c630e, 0x2}, @free_buffer, @decrefs={0x40046307, 0x1}], 0xea, 0x0, &(0x7f0000000c00)})
openat(0xffffffffffffff9c, &(0x7f0000000d00)='./bus\x00', 0x1c1040, 0x0)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000d40)='./bus\x00', 0x1c1002, 0x40)
write(r10, &(0x7f0000000d80)='t', 0x1)
ftruncate(r9, 0x2007ffb)

2m53.791742706s ago: executing program 2 (id=1303):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000006840)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000006800)={&(0x7f0000000440)={0x34, r1, 0xc, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x5}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x34}}, 0xc3b27d3f848699a4)
syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x2446a, 0x0, 0x4, 0x0, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000000)={{0x2, 0x4e23, @multicast1}, {0x0, @random="6ffd8a7efd01"}, 0x4a, {0x2, 0x4e24, @rand_addr=0x64010104}, 'veth0_macvtap\x00'})
ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @multicast1}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x8, {0x2, 0x0, @empty}, 'lo\x00'})
mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_usb_connect(0x0, 0x3f, &(0x7f0000000380)={{0x12, 0x1, 0x110, 0x49, 0xcd, 0xb4, 0x40, 0x424, 0xcf19, 0x7190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x2, 0xff, 0x2b, 0x20, 0x6, "", [{{0x9, 0x4, 0xeb, 0x4, 0x0, 0xfc, 0x6c, 0x65, 0x4}}, {{0x9, 0x4, 0x61, 0x9, 0x2, 0x2, 0x2, 0xff, 0x7, [], [{{0x9, 0x5, 0x2, 0x0, 0x200, 0x7, 0x2, 0xe}}, {{0x9, 0x5, 0x5, 0x2, 0x8, 0xb, 0x5, 0x9}}]}}]}}]}}, 0x0)
r4 = socket$inet(0xa, 0x801, 0x84)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000006900)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
close(r5)
sendmsg$AUDIT_SET_FEATURE(r5, &(0x7f0000006940)={&(0x7f0000006980)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000069c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x8000)
connect$inet(r4, &(0x7f0000006a00)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
sched_setattr(0x0, 0x0, 0x0)
socket(0x2, 0x2, 0x1)
set_mempolicy(0x3, &(0x7f0000006a40)=0x7, 0x7)
madvise(&(0x7f0000bdd000/0x1000)=nil, 0x1000, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000006a80)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f0000006ac0)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000200), 0x0, 0x0)
recvmmsg(r6, 0x0, 0x0, 0x2, 0x0)
syz_open_dev$usbfs(0x0, 0x77, 0x101301)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000006b80)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socket(0x400000000010, 0x3, 0x0)

2m52.21283576s ago: executing program 2 (id=1318):
r0 = syz_open_dev$dmmidi(&(0x7f0000000000), 0x20, 0x0)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x6, &(0x7f0000000080)='\a', 0x1)
r2 = open(&(0x7f0000000480)='.\x00', 0x0, 0x112)
getdents(r2, 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f00000004c0)={0x5, "b80035ace29fb6b5ed11c1df5cdef8da6c6fc3d65f8528bc9bebe04268db8a61"})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="8500000005000000350000000000000085000000050000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0xa0, &(0x7f0000000300)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x27}, 0x15)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000440)="07b0f148ff6b6017620000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0)=0x632a, 0x4)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000540)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000580)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd2d, 0xa000, {0x0, 0x0, 0x0, r7, {0x4, 0xc}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0xc, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x10)
sendmmsg$inet6(r1, &(0x7f0000000500)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x12141, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0205710, &(0x7f0000000040)={0x1, 0xfffffffd, 0x0, 0x0, 0x80000000})
ioctl$SYNC_IOC_FILE_INFO(r2, 0xc0383e04, &(0x7f0000000840)={""/32, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000780)=[{}, {}]})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x4008032, 0xffffffffffffffff, 0x2000)

2m51.421904948s ago: executing program 2 (id=1328):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c0053f8600907551b8569f80c81bd385c0ead18d30b1c032bda37401905831bc25dcdf8f2005128dbbd011c25477b405c6d7c5918e9581635d7a71259db49af74b3579d924cce1bfc2202509c08c404fec6c0e4e8edc1e131077a02e19b381bb7c1eaa3b49ab69b79f943870cda949378e9672b1e9b85fc32d0f588c8"], 0x0, 0x0, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='\x00', 0x89901)
move_mount(r1, &(0x7f00000002c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x9801)
r3 = openat$pidfd(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
pidfd_send_signal(r3, 0x6c, &(0x7f0000000180)={0x5, 0x400001, 0x6}, 0x0)
move_mount(r2, &(0x7f00000003c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000004c0), 0x4000000004002, 0x0)
r5 = dup(r4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r5, 0x5000)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000)
r6 = userfaultfd(0x801)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r7, &(0x7f0000000240)='X', 0x34000, 0x600, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000340))
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000480)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
mount$fuseblk(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x24000, 0x0)

2m50.524596407s ago: executing program 2 (id=1331):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$peeksig(0x1a, r0, 0x0, &(0x7f0000000100))
sched_setattr(0x0, &(0x7f0000001700)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
r1 = syz_io_uring_setup(0x112, &(0x7f0000001740)={0x0, 0x5a87, 0x8000, 0x4, 0xfffffffe}, &(0x7f00000017c0), &(0x7f0000001800), &(0x7f0000001840))
io_uring_register$IORING_REGISTER_IOWQ_AFF(r1, 0x11, &(0x7f0000001880)='n', 0x1)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
set_mempolicy(0x8006, &(0x7f0000001b40)=0xfff, 0x5)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000180))
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffe8d, 0x0, &(0x7f0000000240)=[@increfs]})
r5 = dup3(r4, r3, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10b, 0xffffffffffffffff})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000300)={0x54, 0x0, &(0x7f0000000340)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x34}, @fd={0x66642a85, 0x0, r5}, @flat=@handle={0x73682a85, 0x0, 0x1}}, &(0x7f0000000440)={0x0, 0x28, 0x40}}, 0x400}]})
ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000480), 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000500)})
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)

2m49.97705s ago: executing program 2 (id=1333):
r0 = openat$nullb(0xffffff9c, &(0x7f0000000000), 0x60200, 0x0)
ioctl$BLKCLOSEZONE(r0, 0x40101287, &(0x7f0000000040)={0x9, 0x400})
r1 = openat$rnullb(0xffffff9c, &(0x7f0000000080)={'/dev/syzrnull', 0x0}, 0x105000, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f00000000c0)={0x2, 'macvtap0\x00', {0x1}, 0xfff})
r3 = syz_io_uring_complete(0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', <r4=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', <r5=>0x0})
sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa8, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x4801)
socket$inet6_sctp(0xa, 0x1, 0x84)
r6 = openat$binder_debug(0xffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000008)
recvmsg$can_bcm(r6, &(0x7f0000004280)={0x0, 0x0, &(0x7f0000004200)=[{&(0x7f00000040c0)=""/17, 0x11}, {&(0x7f0000004100)=""/74, 0x4a}, {&(0x7f0000004180)=""/117, 0x75}], 0x3, &(0x7f0000004240)}, 0x121)
read$FUSE(r6, &(0x7f00000042c0)={0x2020}, 0x2020)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil)
ppoll(&(0x7f0000006400)=[{r1, 0x3185}, {0xffffffffffffffff, 0x5009}, {r0, 0x8008}, {r1, 0x568}, {r2, 0x1000}], 0x5, &(0x7f0000006440)={0x0, 0x3938700}, &(0x7f0000006480)={[0x3, 0xb]}, 0x8)

2m49.720096998s ago: executing program 33 (id=1333):
r0 = openat$nullb(0xffffff9c, &(0x7f0000000000), 0x60200, 0x0)
ioctl$BLKCLOSEZONE(r0, 0x40101287, &(0x7f0000000040)={0x9, 0x400})
r1 = openat$rnullb(0xffffff9c, &(0x7f0000000080)={'/dev/syzrnull', 0x0}, 0x105000, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f00000000c0)={0x2, 'macvtap0\x00', {0x1}, 0xfff})
r3 = syz_io_uring_complete(0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', <r4=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', <r5=>0x0})
sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa8, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x4801)
socket$inet6_sctp(0xa, 0x1, 0x84)
r6 = openat$binder_debug(0xffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000008)
recvmsg$can_bcm(r6, &(0x7f0000004280)={0x0, 0x0, &(0x7f0000004200)=[{&(0x7f00000040c0)=""/17, 0x11}, {&(0x7f0000004100)=""/74, 0x4a}, {&(0x7f0000004180)=""/117, 0x75}], 0x3, &(0x7f0000004240)}, 0x121)
read$FUSE(r6, &(0x7f00000042c0)={0x2020}, 0x2020)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil)
ppoll(&(0x7f0000006400)=[{r1, 0x3185}, {0xffffffffffffffff, 0x5009}, {r0, 0x8008}, {r1, 0x568}, {r2, 0x1000}], 0x5, &(0x7f0000006440)={0x0, 0x3938700}, &(0x7f0000006480)={[0x3, 0xb]}, 0x8)

5.286492777s ago: executing program 6 (id=2227):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0)

5.073981656s ago: executing program 6 (id=2230):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000300)=@ccm_128={{0x304}, "e3d9162be1b07411", "726c84d47b8e1c777b43316b24f98517", "6284695f", "296d4442c1ff8da4"}, 0x28)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000340)=@gcm_256={{0x303}, "24747942338921a1", "d830ce0a000000000000a7173985202bbfb61b36f3678de8ea2d0d6616076243", "559edb33", "7c5cec21291a43fe"}, 0x38)

4.995743157s ago: executing program 1 (id=2231):
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000380)="240020001a007f0214f9f4070009040802000000000000050002000008000f40fe00000e", 0x24)

4.937391685s ago: executing program 6 (id=2232):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$peeksig(0x1a, r0, 0x0, &(0x7f0000000100))
sched_setattr(0x0, &(0x7f0000001700)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
r1 = syz_io_uring_setup(0x112, &(0x7f0000001740)={0x0, 0x5a87, 0x8000, 0x4, 0xfffffffe}, &(0x7f00000017c0), &(0x7f0000001800), &(0x7f0000001840))
io_uring_register$IORING_REGISTER_IOWQ_AFF(r1, 0x11, &(0x7f0000001880)='n', 0x1)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
set_mempolicy(0x8006, &(0x7f0000001b40)=0xfff, 0x5)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000180))
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0xfffffffffffffe8d, 0x0, &(0x7f0000000240)=[@increfs]})
r4 = dup3(r3, r2, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10b, 0xffffffffffffffff})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000300)={0x54, 0x0, &(0x7f0000000340)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x34}, @fd={0x66642a85, 0x0, r4}, @flat=@handle={0x73682a85, 0x0, 0x1}}, &(0x7f0000000440)={0x0, 0x28, 0x40}}, 0x400}]})
ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000480), 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000500)})
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0)
mremap(&(0x7f00003d0000/0x1000)=nil, 0x1000, 0x4000, 0x2, &(0x7f00002e5000/0x4000)=nil)
socket$inet_udp(0x2, 0x2, 0x0)

4.88844737s ago: executing program 1 (id=2233):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newsa={0x150, 0x10, 0x713, 0x70bd27, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in=@dev={0xac, 0x14, 0x14, 0x26}, 0x4, 0x79b0, 0x4e21, 0x2, 0x0, 0x0, 0xa0, 0x21, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x2b}, 0x4d6, 0x32}, @in=@multicast2, {0x200, 0xe839, 0x0, 0x9, 0xffffffff00000001, 0x3, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x70}, [@algo_aead={0x56, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x50, 0x60, "210466d38547aa140db9"}}, @offload={0xc, 0x1c, {0x0, 0x7}}]}, 0x150}, 0x1, 0x0, 0x0, 0x8000881}, 0x2014)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c000}, 0x80)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e5080012400000000905000500020000000500010006"], 0x58}}, 0x4c8d0)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100060000001c0007800c00018008000140fffffffe0c00028008000140", @ANYRESOCT], 0x44}, 0x1, 0x0, 0x0, 0x40080}, 0x4000050) (fail_nth: 4)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000007c0), 0x0)
gettimeofday(0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="230000000300000002000000ffff000005"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940), 0x0, 0x7ff, r4}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x80, r4}, 0x38)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = mq_open(&(0x7f00000009c0)='batadv_slave_1\xbb', 0x1, 0x11d, 0x0)
mq_getsetattr(r5, 0x0, 0x0)
syz_usb_connect(0x2, 0x2d, 0x0, 0x0)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv6_newaddrlabel={0x1c, 0x48, 0x1, 0x70bd28, 0x25dfdbfe, {0xa, 0x0, 0x8c, 0x0, 0x0, 0x8}}, 0x1c}}, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)

3.859732148s ago: executing program 5 (id=2236):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x3e7, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18010000310009002abd70000000000004"], 0x118}, 0x1, 0x0, 0x0, 0x42804}, 0x84)

3.788451565s ago: executing program 1 (id=2237):
r0 = memfd_create(&(0x7f0000000240)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xef-\xa6m\xa1\xc4\xb5{\xf2\\\x8d[7k~\x04\x03~K\xfbP\x84=\xfa\x81\x8c\x1et\x10', 0x0)
pwrite64(r0, &(0x7f0000000040)="6b77ee", 0x3, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0)
symlink(0x0, &(0x7f00000000c0)='./file0\x00')

3.730704571s ago: executing program 5 (id=2238):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xa31e3000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
pipe2(&(0x7f0000001040)={<r0=>0xffffffffffffffff}, 0x800)
setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000000)=0x80000000, 0x4)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xa31e3000) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async)
pipe2(&(0x7f0000001040), 0x800) (async)
setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000000)=0x80000000, 0x4) (async)

3.66212558s ago: executing program 1 (id=2240):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0)

3.5908218s ago: executing program 1 (id=2241):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10) (async)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000100)=0x7, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a4000000000101060000000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001001100000006000200870700000600030006b700003400028014000180080001007f000001080002007f0000011c00028005000100110000000600020006b70000060003008707000008000700000003e808000300000000080c00058008000100524153000c000680080001000a000001"], 0xa4}}, 0x0) (async)
r2 = socket$inet(0x2, 0x2, 0x11)
bind$inet(r2, &(0x7f00000002c0)={0x2, 0x8707, @loopback}, 0x10) (async, rerun: 32)
sendto$inet(r2, &(0x7f0000000340)="280000010000007f0000010000", 0xd, 0x0, &(0x7f0000000380)={0x2, 0x6b7, @loopback}, 0x10) (rerun: 32)
sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff94, 0xb, 0x0, 0x0) (async)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async, rerun: 64)
ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f00000003c0)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x20}, @can, @generic={0x15, "48fdc9873a7662d84a01490dde29"}, 0x6, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x2, 0x0, 0x2}) (rerun: 64)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r3 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x3, 0x40483)
ioctl$VIDIOC_DQEVENT(r3, 0x80885659, 0x0)

3.275960447s ago: executing program 6 (id=2242):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000300)=@ccm_128={{0x304}, "e3d9162be1b07411", "726c84d47b8e1c777b43316b24f98517", "6284695f", "296d4442c1ff8da4"}, 0x28)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000340)=@gcm_256={{0x303}, "24747942338921a1", "d830ce0a000000000000a7173985202bbfb61b36f3678de8ea2d0d6616076243", "559edb33", "7c5cec21291a43fe"}, 0x38)

3.169944496s ago: executing program 6 (id=2243):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000600)={'vcan0\x00', <r1=>0x0})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'bond0\x00'}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0x120, 0x16, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0xe4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffff}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'erspan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x1c4}}, 0x0)
bind$can_j1939(r0, &(0x7f0000000680)={0x1d, r1, 0x1}, 0x18)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000940)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x200], [0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55f8, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000]}, 0x45c)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000dc0)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0)
sendmsg$inet(r0, &(0x7f0000000580)={&(0x7f0000000100)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000140)="26f8c6ee8a31ba9ea949951966bf5a", 0xf}, {&(0x7f0000000180)="dfbe1e1a992a768f6b7cd46ce6cb822827026ffe7447192689d967b12f95fcd60dd7d67592b78bbb63ab122be7452e80fb71b3b0a597da598c9e216ba46efd49bba620b69b320d0a3eec07a8385c3d64ed906aa96397dca9d974adba1f431c827e0fb56ba12048fcf336cdc43e476f41b0c391b9b8bf34", 0x77}, {&(0x7f0000000480)="4882fbd9165e75de41cd1616bdd2d7f56a242cbbbe75ab21faf52a650f6c4f504aecc8f17fefccfe921f50836d4371ce91262094711ff7718b8168a0835688b99926aedfb8e5abac8bf7c43a01694cb2fb0627b542cbf34dd7699930f75d589461b0", 0x62}, {&(0x7f0000000500)="9eb5e8dfb1a9cc65d758e0", 0xb}], 0x4}, 0x8800)
ftruncate(r4, 0x4a8e)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
ioctl$UI_GET_SYSNAME(r3, 0x8040552c, &(0x7f0000000e00))
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6(0xa, 0x80000, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000700)={'vxcan1\x00', <r7=>0x0})
r8 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r8, &(0x7f0000000740)={0x1d, r7, 0x0, {0x0, 0x0, 0x3}}, 0x18)
sendmsg$can_j1939(r8, &(0x7f0000000780)={&(0x7f00000007c0), 0x18, &(0x7f0000000800)={&(0x7f0000000440)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x40000}, 0x4406f)
sendmsg$nl_route_sched(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@gettaction={0x14, 0x32, 0x4, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004010}, 0x40080)

2.859866906s ago: executing program 6 (id=2244):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r1, 0x4068aea3, &(0x7f0000000100)={0xbe, 0x0, 0x1})
ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000180)={0x58, 0x0, [{0x4b564d07}]})
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000280)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c000904020000010300000904020101010200000724"], 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000240)={'vcan0\x00'})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x4b96, 0x4)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x0, 0x12, 0x60d, 0x0, 0x202, 0x2d8, 0x2e8, 0x2e8, 0x2d8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [0x0, 0x0, 0xff], [], 'veth0_to_team\x00', 'macsec0\x00', {}, {0xff}, 0x89, 0xfc}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3, 0x91, 0x5, 'syz0\x00', {0x6}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x2, 0x3, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
connect$inet(r3, &(0x7f0000000880)={0x2, 0x4e21, @multicast1}, 0x10)
sendmmsg(r3, &(0x7f00000008c0), 0x800001d, 0x300)
recvmmsg(r3, &(0x7f0000000900), 0x291962b, 0x45833af92e4b39ff, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$can_j1939(0x1d, 0x2, 0x7)
socket$netlink(0x10, 0x3, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x400002, 0x3f)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000480)={0x38, 0x0, 0x0, 0x0, 0xdc4, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
r4 = syz_io_uring_setup(0x111, &(0x7f00000004c0)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, &(0x7f0000000540), &(0x7f00000008c0), &(0x7f0000000900))
io_uring_register$IORING_REGISTER_IOWQ_AFF(r4, 0x11, &(0x7f0000000940)='n', 0x1)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0xeb, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000009c0)={0x0, 0x30b4, 0x8000, 0x2, 0x158}, &(0x7f0000000a40)=<r6=>0x0, &(0x7f0000000a80)=<r7=>0x0, &(0x7f0000000ac0)=<r8=>0x0)
syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000b00)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000b80)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000bc0))

2.713270391s ago: executing program 5 (id=2245):
socket(0x10, 0x3, 0x0)
setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000580), 0x4)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000600)={0x80000000, 0x0, 0xfffffffc}, 0x10)
write(r0, &(0x7f0000000a40)="240000001a005f0214f9f407000904ff81000000fe0000000000000008000500fd001900", 0x24)
syz_emit_ethernet(0x72, &(0x7f0000000a80)={@link_local, @random, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb3e02", 0x3c, 0x3a, 0x1, @dev={0xfe, 0x80, '\x00', 0x2c}, @mcast2, {[], @param_prob={0x4, 0x1, 0x0, 0x0, {0x0, 0x6, "b24307", 0x0, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [], "307585520d694c7f6c801176"}}}}}}}, 0x0)
r1 = syz_clone(0x80, &(0x7f0000000b00)="b5611e73224f288df17a5955d595f5c585bd18158e142eee2dd5600f29f4e4c131ad61a02507b768dfc2ba62bc6391ec916a0eb295426d65852b7c1804c3bffd3ef0bc2b19307f9b57daeb3346edc8da8f2e5b4d7d39091b3cf2efbad7fbfc8e420fb767af652a4bc33ff0af2c5f4c", 0x6f, &(0x7f0000000b80), &(0x7f0000000bc0), &(0x7f0000000c00)="2ed358ad8bb96fce85bba69b494069c274d90f3db8b965af0ed256e08967777ce9156709482301f4c078c4733291daf667d27d1f96d7da4f82f2e65bac374af0d09ba103e3bbbc8ae4676e84c0a223f7dd972915a630be459d299d949f1fa1196fb14bb3fe76955e47883eab305ac5ebbcfb132e0a24cd74e300412294598e65c7d8474335e2b8cd91d2ee17bba98154416b3a813342b432a68324c60f04eebab42383c95634b2af025cc4266abd1803cb53")
ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000cc0)=r1)
userfaultfd(0x80001)
syz_io_uring_setup(0xf00, &(0x7f0000000d00)={0x0, 0x0, 0x10000, 0x0, 0x40058}, &(0x7f0000000d80)=<r2=>0x0, &(0x7f0000000dc0)=<r3=>0x0, &(0x7f0000000e00)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000e40)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {}, 0x1})
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ec0)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io(r6, 0x0, &(0x7f0000000f00)={0x44, &(0x7f0000000f80)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
setxattr$system_posix_acl(&(0x7f0000000fc0)='.\x00', &(0x7f0000001000)='system.posix_acl_default\x00', &(0x7f0000001040)=ANY=[@ANYBLOB="0200000001000000000000000010000000000000002000"/36], 0x24, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0x0)
listxattr(&(0x7f00000010c0)='./file0\x00', 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0)
syz_usb_control_io$uac2(r6, 0x0, &(0x7f0000001100)={0x24, &(0x7f0000001140)=ANY=[@ANYBLOB="600e490000003572e86f1dcc02dff5c354ef4ffeb9a510c131cf8ea7f5c78a2baf7b30604da15a2c09d176a57e13d6b047aeb35d56af3f4245f6e8d513add091300a295467a4b87b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f00000011c0)=ANY=[], 0x8)
ioctl$XFS_IOC_AG_GEOMETRY(r5, 0xc080583d, &(0x7f0000001200)={0x10001, 0x1, 0x1, 0x4e85, 0x9, 0x5, 0x5, 0x9})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001300)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x1}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x100}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000001380)={'wlan0\x00', &(0x7f00000013c0)=@ethtool_cmd={0x17, 0x6, 0x7, 0x3, 0x7f, 0x8, 0x3, 0x7, 0x5, 0x5, 0x1, 0x1, 0xfff, 0x7, 0x9, 0x9, [0x2, 0xc]}})
connect$inet6(r5, &(0x7f0000001400)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000001440)='bridge0\x00', 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

2.699589694s ago: executing program 1 (id=2246):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x3138, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x9, "", [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x1001, 0xff, 0x1, {0x22, 0x4}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x7b, 0x9, 0xa}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = fsopen(&(0x7f0000000640)='mqueue\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x82)
fchdir(r2)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000680)='.\x00', 0x800, 0x0)
fcntl$notify(r3, 0x402, 0x6) (async)
fcntl$notify(r3, 0x402, 0x6)
openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', 0x101000, 0x108) (async)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', 0x101000, 0x108)
getdents64(r4, &(0x7f0000000700)=""/4096, 0x1000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40280, 0x0) (async)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40280, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl(r7, 0x4048aecb, &(0x7f00000003c0)="070000000000000001000000ffffffff40894088") (async)
ioctl(r7, 0x4048aecb, &(0x7f00000003c0)="070000000000000001000000ffffffff40894088")
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "04e6c17b"}]}}, 0x0}, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x103780, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212007d5d000000090401"], 0x0) (async)
r11 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212007d5d000000090401"], 0x0)
r12 = socket(0x2, 0x5, 0x0)
sendmmsg$inet(r12, &(0x7f0000000500)=[{{&(0x7f0000000540)={0x2, 0x4e20, @rand_addr=0x3}, 0x10, &(0x7f0000000580)=[{&(0x7f00000005c0)='`', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0xc, 0x84, 0x8}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @loopback, @private=0xa010100}}}], 0x24}}], 0x2, 0x20044810)
syz_usb_control_io$cdc_ecm(r11, 0x0, &(0x7f0000000440)={0x1c, &(0x7f0000000480)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ecm(r11, 0x0, &(0x7f0000000440)={0x1c, &(0x7f0000000480)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0})
r13 = syz_open_dev$I2C(&(0x7f00000004c0), 0x1, 0x402)
ioctl$I2C_FUNCS(r13, 0x705, 0x0) (async)
ioctl$I2C_FUNCS(r13, 0x705, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x11)
ioctl$KVM_SET_MSRS(r10, 0xc008ae88, &(0x7f0000000300)={0x10000000000000f6, 0x0, [{0x40000002, 0x0, 0x43}]})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r14 = socket$nl_route(0x10, 0x3, 0x0)
fcntl$F_GET_RW_HINT(r14, 0x40f, &(0x7f0000000140)) (async)
fcntl$F_GET_RW_HINT(r14, 0x40f, &(0x7f0000000140))

2.671443881s ago: executing program 3 (id=2247):
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0xf01)
ioctl$USBDEVFS_CONNECTINFO(r0, 0x80045505, &(0x7f0000000040))
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000b40)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000100)={0xfffc}, 0x8)
r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000140), 0x2)
ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000180)=ANY=[@ANYBLOB="3827bff63a2d841f"])
listen(r1, 0xfffffffc)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000bc0)={0x2, 0x4e22, @local}, 0x10)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0xc0000101}]})
sendto$inet(r3, &(0x7f0000000c00)="1c", 0x1, 0x40, 0x0, 0x0)

1.725579443s ago: executing program 3 (id=2257):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x1b, &(0x7f0000000240)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @cb_func={0x18, 0x9}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x3}], &(0x7f0000000340)='syzkaller\x00', 0x1, 0x96, &(0x7f0000000380)=""/150, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0x1, 0x7, 0x8}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f00000004c0)=[{0x3, 0x5, 0x9, 0x2}, {0x2, 0x4, 0x4, 0xc}, {0x2, 0x1, 0xd, 0x3}, {0x5, 0x2, 0x6, 0xa}, {0x3, 0x4, 0xf, 0xc}, {0x1, 0x1, 0xb, 0x6}], 0x10, 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc0, 0x0, 0xffffffffffffffd2, 0x0, 0x0, 0x0, 0x7}, 0x50)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r3, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0xd, 0x8563, 0x5}, 0x10)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200040d4}, 0x24044040) (fail_nth: 6)

1.714982491s ago: executing program 4 (id=2258):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
bind$unix(0xffffffffffffffff, &(0x7f00000003c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="44000000100001042abd70000002000000000000", @ANYRES32=r1, @ANYBLOB="8249e900800005001c00378009000100626f6e64000000000c00028005001000060000"], 0x44}, 0x1, 0x0, 0x0, 0x20000c10}, 0x8000)

1.635650575s ago: executing program 4 (id=2259):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = syz_open_dev$sg(&(0x7f0000000500), 0x0, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000007c0)={r3, 0x0, 0x25, 0x4, @val=@tcx={@void, @value=r3}}, 0x1c)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000004c0), 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_O_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000380)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f00000003c0)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f00000002c0)=[@increfs, @decrefs]})

1.471511322s ago: executing program 3 (id=2260):
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
close(r1)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r2, &(0x7f00000003c0)={0x2, 0x4e21, @empty}, 0x10)
pipe(&(0x7f0000000400)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r2, 0x0, r3, 0x0, 0x7ffff000, 0x2)
sendmmsg$inet(r2, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)="1d", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)="9c", 0x1}], 0x1}}], 0x2, 0x80)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000300)={0x22, 0x3, 0x0, {0x3, 0x1, 0x0, ':'}}, 0x22)
close_range(r0, 0xffffffffffffffff, 0x2000000)

1.356862931s ago: executing program 3 (id=2261):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x8020000)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0xaf316000)
getpgrp(0x0)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000840)='.\x00', 0x8000, &(0x7f0000000880)={0xf, 0x0, 0x100000}, 0x20)
r2 = open_tree(0xffffffffffffff9c, &(0x7f00000008c0)='\x00', 0x89901)
mount_setattr(r2, &(0x7f0000000900)='.\x00', 0x8000, &(0x7f0000000940)={0x89, 0x0, 0x100000}, 0x20)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="aa15a4adea860e419c4d910ecab0459e7ca5910d156889cf432af4409e79"], 0x24}, 0x1, 0x0, 0x0, 0x20040001}, 0x4c891)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f00000007c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)=ANY=[@ANYBLOB="05010000", @ANYRES16=0x0, @ANYBLOB="000327bd7000fbdbdf250a00000008000100706369008cfc0200303030303a30303a31302e30000000000800030000000000080001007063690011000200303030303a30303a31302e300000000008000300000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300020000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030002000000080001007063690011000200000000000000e85e31302e30000000000800030002000000080001007063690011000200303030303a30303a31302e30000000000800030000000000"], 0xf4}, 0x1, 0x0, 0x0, 0x4008004}, 0x80)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000200))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/profiling', 0x101a02, 0x0)
copy_file_range(r4, &(0x7f0000000800)=0x7, r4, 0x0, 0x7, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x4}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc4}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "11223344"}]}, @NFTA_SET_ELEM_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "55667788"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1400000010000100000000000000be68be57000a7dfd000011000100000000123a0f8e6a2b45a705"], 0x28}, 0x1, 0x0, 0x0, 0x2}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4)
lstat(0x0, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
setitimer(0x0, &(0x7f0000000000)={{0x0, 0x2710}, {0x0, 0x82}}, 0x0)
connect$inet(r6, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10)
r7 = request_key(&(0x7f0000000100)='cifs.idmap\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='\x80\n', 0x0)
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000001c0)={r7, 0xd6, 0xc8}, &(0x7f0000000580)=ANY=[@ANYBLOB="656e72617720686173683d7368613232342d7373736533003c13215312e398650000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000028216ba7769e6a0a25ab9c9b358a2b740c8ab61025e4ef18934ca081027984dd47f8f7a591d5d914db88247bbbadbf354c06b23f4c33fd783b1496fe01a1e24aa4ba30719d24d88c1e271c7a92e8682c0e8df9fbbc791eb20ea346073007de1fbdffea670b414972f927926ebf234e3a5b661827df598bb2ac55f0acdd1b600262ac000000000a23e76c9dff37bd259ff87d95b7c811d7d1ddebd38b4cda72c5"], &(0x7f0000000380)="8d12ee43cd18482f2a2cd4f8452863e2506d7d9f66a1eacb6e885f2c179338f9af3996b16b7f399fb0bff9976e3a756f2b132d4eb3af7a32ad54400f824d10aa509220b2f0dfb274c7c399e29a69b56c875e9decad7b4c1097ae586e86873829864afce87e2921d7677048489d0015813d835026b1b95406d66d2f5dc8591b7279e6998c1ad3495a0c45d9ccd2f48f58210062b72011a8dd69525bf1befee3ec547400aee57273fbab7935ea2701486309607d9d548598a23956e702e502304562647ae137750091d5d97633ef44e959cdb79fc53c45", &(0x7f0000000480)=""/200)
bind$inet(r6, &(0x7f0000000300)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r6, &(0x7f0000000340)=[{{&(0x7f0000000fc0)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000)

1.333162544s ago: executing program 4 (id=2262):
r0 = memfd_create(&(0x7f0000000240)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xef-\xa6m\xa1\xc4\xb5{\xf2\\\x8d[7k~\x04\x03~K\xfbP\x84=\xfa\x81\x8c\x1et\x10', 0x0)
pwrite64(r0, &(0x7f0000000040)="6b77ee", 0x3, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0)
symlink(&(0x7f0000001000)='./file0\x00', 0x0)

1.078609282s ago: executing program 5 (id=2263):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000440)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="12000000010000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r4}, &(0x7f0000000500), &(0x7f0000000540)=r3}, 0x20)
shutdown(r2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', <r5=>0x0})
openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000006800e9780000000000dbdf250a0000000000000008000500", @ANYRES32=r5], 0x20}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0)
sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1800000076000d0b"], 0x18}}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002"], 0x54}, 0x1, 0x0, 0x0, 0x4000085}, 0x0)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x20) (fail_nth: 17)

1.045558339s ago: executing program 4 (id=2264):
r0 = socket$pppoe(0x18, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'veth0_virt_wifi\x00'}}, 0x1e)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x10, 0x40, 0x1000, 0x0, {{0x5, 0x4, 0x1, 0x8, 0x14, 0x65, 0x89, 0x9, 0x0, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x33}}}}})
ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040))
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x80002, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0))
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000004c0)={'syzkaller0\x00', 0x2})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0xffffffff, 0x6361, 0x7, 0xfffffffd, 0x40000004}}}}]}, 0x4c}}, 0x20000804)
close(r5)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000680), r9)
sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000780)={'syzkaller0\x00', @multicast})
r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000007c0), 0x100, 0x0)
close(r11)
r12 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r13, {}, {0x2, 0xb}, {0xb, 0xb}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r11, 0x8922, &(0x7f0000000900)={'syzkaller0\x00', @random="2b0100004ec6"})

860.795106ms ago: executing program 5 (id=2265):
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000340)={0x1, 0x1}, 0x2)
write$USERIO_CMD_REGISTER(r0, 0x0, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000003c0), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000001680)={0x2, 0xfc}, 0x2)

858.963157ms ago: executing program 5 (id=2266):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x9801)
move_mount(r0, 0x0, 0xffffffffffffff9c, 0x0, 0x44)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='\x00', 0x89101)
fchdir(r1)
close(r1)
mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2, 0x4)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000002c0)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000340), 0x318, 0x0)
recvmmsg(r2, &(0x7f0000000380), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f00000003c0)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
socket$inet(0xa, 0x801, 0x84)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008004}, 0x4)
semget$private(0x0, 0x4000000009, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x20800, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000480)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010003904fffffffffddbdf2500000000ba85ce765b03e969db286f3e91455c98275cdb507f5ba2780f7982ae5d0707619781cfb8181c5a541aa7c34b3e85d844360e86ffbcd5d4fc6dbcd6ebc243b70b", @ANYRES32=0x0, @ANYBLOB="0198000013130000050011000600000008001b000b000000180012800e00010077697265677561726400000004000280"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4044000)
sendmsg$nl_route_sched(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0x6, 0xffff}, {0x2, 0x6}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x9, 0x2, [@TCA_PIE_BYTEMODE={0x8, 0x7, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x40)
sendmsg$nl_route_sched(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xfff3}, {}, {0x7, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)

696.488489ms ago: executing program 4 (id=2267):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
connect$vsock_stream(r0, 0x0, 0x3f)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f00000000c0)=0x2)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
ptrace$setregset(0x4205, r2, 0x46e62b7f, &(0x7f0000000280)={0x0})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000640)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480))
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x25, &(0x7f00000001c0), 0x4)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = dup(r8)
setsockopt$packet_int(r9, 0x107, 0x14, 0x0, 0x0)
getsockopt$inet6_mptcp_buf(r9, 0x11c, 0x4, &(0x7f0000000500)=""/218, &(0x7f0000000600)=0xda)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e"], 0x48)
write(0xca, &(0x7f0000000800)="040fe7f39f0500", 0x7)
r10 = socket(0x6, 0x2, 0xffffffff)
r11 = io_uring_setup(0x6390, &(0x7f00000002c0)={0x0, 0x621d, 0x842, 0x3, 0x39c})
io_uring_register$IORING_REGISTER_RESTRICTIONS(r11, 0xb, &(0x7f0000000400), 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(r11, 0x1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x400, 0x72bd2b, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0x10}, {0xffff, 0xffff}, {0x6, 0x10}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000000)={0x0, 0x2, 0x25000, 0x2000, &(0x7f00001b7000/0x2000)=nil})

253.346997ms ago: executing program 3 (id=2268):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
close(r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x3, 0x3, 0x6364, 0x200005, 0xffffffff, 0x3}, [@TCA_NETEM_RATE={0x14, 0x6, {0x86e, 0x4, 0x1ff, 0x5}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r4=>0x0})
r5 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r5, &(0x7f00000003c0)="80", 0x70, 0x40, &(0x7f0000000400)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @broadcast}, 0x14)

114.038094ms ago: executing program 4 (id=2269):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
bind$unix(0xffffffffffffffff, &(0x7f00000003c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="44000000100001042abd70000002000000000000", @ANYRES32=r1, @ANYBLOB="8249e900800005001c00378009000100626f6e64000000000c00028005001000060000"], 0x44}, 0x1, 0x0, 0x0, 0x20000c10}, 0x8000)

0s ago: executing program 3 (id=2270):
r0 = epoll_create1(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
close(r1)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r2, &(0x7f00000003c0)={0x2, 0x4e21, @empty}, 0x10)
pipe(&(0x7f0000000400)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r2, 0x0, r3, 0x0, 0x7ffff000, 0x2)
sendmmsg$inet(r2, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)="1d", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)="9c", 0x1}], 0x1}}], 0x2, 0x80)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000000)=ANY=[], 0x22)
close_range(r0, 0xffffffffffffffff, 0x100000000000000)

kernel console output (not intermixed with test programs):

- omni.net usb converter now disconnected from ttyUSB0
[  433.989060][ T5698] omninet 6-1:0.0: device disconnected
[  434.019841][T12106] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1944'.
[  434.019861][T12106] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1944'.
[  434.064762][T12106] geneve2: entered promiscuous mode
[  434.064781][T12106] geneve2: entered allmulticast mode
[  434.066224][T12107] netlink: 18 bytes leftover after parsing attributes in process `syz.6.1944'.
[  434.066242][T12107] netlink: 22 bytes leftover after parsing attributes in process `syz.6.1944'.
[  434.173874][T12109] FAULT_INJECTION: forcing a failure.
[  434.173874][T12109] name failslab, interval 1, probability 0, space 0, times 0
[  434.173903][T12109] CPU: 0 UID: 0 PID: 12109 Comm: syz.4.1945 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  434.173926][T12109] Tainted: [L]=SOFTLOCKUP
[  434.173934][T12109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  434.173945][T12109] Call Trace:
[  434.173952][T12109]  <TASK>
[  434.173961][T12109]  dump_stack_lvl+0xe8/0x150
[  434.173994][T12109]  should_fail_ex+0x410/0x560
[  434.174027][T12109]  should_failslab+0xa8/0x100
[  434.174048][T12109]  ? skb_clone+0x212/0x3a0
[  434.174075][T12109]  kmem_cache_alloc_noprof+0x9c/0x600
[  434.174106][T12109]  ? skb_clone+0x212/0x3a0
[  434.174146][T12109]  skb_clone+0x212/0x3a0
[  434.174177][T12109]  __netlink_deliver_tap+0x355/0x6e0
[  434.174210][T12109]  ? netlink_deliver_tap+0x2e/0x1b0
[  434.174233][T12109]  netlink_deliver_tap+0x19c/0x1b0
[  434.174254][T12109]  netlink_unicast+0x8c1/0xa80
[  434.174292][T12109]  netlink_sendmsg+0x7f0/0xb20
[  434.174319][T12109]  ? __pfx_netlink_sendmsg+0x10/0x10
[  434.174344][T12109]  ? aa_sock_msg_perm+0x144/0x210
[  434.174375][T12109]  ? apparmor_socket_sendmsg+0x98/0x360
[  434.174398][T12109]  ? __pfx_netlink_sendmsg+0x10/0x10
[  434.174418][T12109]  sock_sendmsg_nosec+0x14e/0x190
[  434.174442][T12109]  ____sys_sendmsg+0x54e/0x850
[  434.174474][T12109]  ? __pfx_____sys_sendmsg+0x10/0x10
[  434.174516][T12109]  ___sys_sendmsg+0x2a5/0x360
[  434.174540][T12109]  ? __lock_acquire+0x747/0x2de0
[  434.174566][T12109]  ? __pfx____sys_sendmsg+0x10/0x10
[  434.174595][T12109]  ? kstrtoull+0x137/0x1d0
[  434.174643][T12109]  ? __fget_files+0x3a2/0x420
[  434.174667][T12109]  ? __fget_files+0x2a/0x420
[  434.174699][T12109]  __sys_sendmmsg+0x2de/0x4e0
[  434.174731][T12109]  ? __pfx___sys_sendmmsg+0x10/0x10
[  434.174802][T12109]  __ia32_compat_sys_sendmmsg+0xa2/0xc0
[  434.174827][T12109]  __do_fast_syscall_32+0x28b/0x6c0
[  434.174855][T12109]  ? do_fast_syscall_32+0x33/0x70
[  434.174880][T12109]  ? asm_int80_emulation+0x1a/0x20
[  434.174898][T12109]  ? do_int80_emulation+0x299/0x500
[  434.174924][T12109]  ? trace_irq_disable+0x3b/0x140
[  434.174951][T12109]  do_fast_syscall_32+0x33/0x70
[  434.174977][T12109]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  434.175000][T12109] RIP: 0023:0xf746ef1c
[  434.175017][T12109] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  434.175031][T12109] RSP: 002b:00000000f548650c EFLAGS: 00000206 ORIG_RAX: 0000000000000159
[  434.175051][T12109] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080005200
[  434.175064][T12109] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[  434.175075][T12109] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  434.175086][T12109] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  434.175098][T12109] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  434.175127][T12109]  </TASK>
[  434.691694][T12117] FAULT_INJECTION: forcing a failure.
[  434.691694][T12117] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  434.691716][T12117] CPU: 0 UID: 0 PID: 12117 Comm: syz.6.1948 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  434.691731][T12117] Tainted: [L]=SOFTLOCKUP
[  434.691735][T12117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  434.691741][T12117] Call Trace:
[  434.691746][T12117]  <TASK>
[  434.691751][T12117]  dump_stack_lvl+0xe8/0x150
[  434.691772][T12117]  should_fail_ex+0x410/0x560
[  434.691791][T12117]  _copy_from_user+0x2d/0xb0
[  434.691807][T12117]  get_compat_msghdr+0xb3/0x4c0
[  434.691822][T12117]  ? __pfx_get_compat_msghdr+0x10/0x10
[  434.691839][T12117]  ___sys_sendmsg+0x201/0x360
[  434.691853][T12117]  ? __lock_acquire+0x747/0x2de0
[  434.691868][T12117]  ? __pfx____sys_sendmsg+0x10/0x10
[  434.691881][T12117]  ? get_pid_task+0x20/0x1f0
[  434.691891][T12117]  ? get_pid_task+0x20/0x1f0
[  434.691899][T12117]  ? get_pid_task+0x20/0x1f0
[  434.691925][T12117]  ? __fget_files+0x3a2/0x420
[  434.691937][T12117]  ? __fget_files+0x2a/0x420
[  434.691954][T12117]  __sys_sendmsg+0x177/0x240
[  434.691969][T12117]  ? __pfx___sys_sendmsg+0x10/0x10
[  434.691989][T12117]  ? __might_fault+0xaf/0x130
[  434.692004][T12117]  __do_fast_syscall_32+0x28b/0x6c0
[  434.692020][T12117]  ? do_fast_syscall_32+0x33/0x70
[  434.692034][T12117]  ? asm_int80_emulation+0x1a/0x20
[  434.692044][T12117]  ? do_int80_emulation+0x299/0x500
[  434.692057][T12117]  ? trace_irq_disable+0x3b/0x140
[  434.692071][T12117]  do_fast_syscall_32+0x33/0x70
[  434.692098][T12117]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  434.692124][T12117] RIP: 0023:0xf73eef1c
[  434.692134][T12117] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  434.692142][T12117] RSP: 002b:00000000f540650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  434.692155][T12117] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080
[  434.692162][T12117] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  434.692168][T12117] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  434.692174][T12117] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  434.692180][T12117] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  434.692195][T12117]  </TASK>
[  435.208629][ T1239] usb 4-1: new high-speed USB device number 106 using dummy_hcd
[  435.349092][  T991] usb 6-1: new high-speed USB device number 94 using dummy_hcd
[  435.371690][ T1239] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  435.396928][ T1239] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  435.396947][ T1239] usb 4-1: Product: syz
[  435.396954][ T1239] usb 4-1: SerialNumber: syz
[  435.419856][ T1239] usb 4-1: config 0 descriptor??
[  435.437537][ T1239] hso 4-1:0.0: Not our interface
[  435.478376][   T10] usb 2-1: new high-speed USB device number 114 using dummy_hcd
[  435.498912][  T991] usb 6-1: Using ep0 maxpacket: 16
[  435.499891][  T991] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  435.523333][  T991] usb 6-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  435.523362][  T991] usb 6-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0
[  435.523383][  T991] usb 6-1: config 0 interface 0 has no altsetting 0
[  435.523415][  T991] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  435.576395][  T991] usb 6-1: config 0 descriptor??
[  435.648679][   T10] usb 2-1: Using ep0 maxpacket: 32
[  435.650150][   T10] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  435.663698][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  435.663713][   T10] usb 2-1: Product: syz
[  435.663726][   T10] usb 2-1: Manufacturer: syz
[  435.663739][   T10] usb 2-1: SerialNumber: syz
[  435.703846][   T10] usb 2-1: config 0 descriptor??
[  435.723471][   T10] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  435.814015][T11398] usb 4-1: USB disconnect, device number 106
[  435.970520][   T30] audit: type=1326 audit(1792866654.832:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12122 comm="syz.6.1951" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73eef1c code=0x7ffc0000
[  435.974336][   T30] audit: type=1326 audit(1792866654.832:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12122 comm="syz.6.1951" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73eef1c code=0x7ffc0000
[  435.978039][   T30] audit: type=1326 audit(1792866654.832:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12122 comm="syz.6.1951" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=36 compat=1 ip=0xf73eef1c code=0x7ffc0000
[  436.108949][  T991] mcp2221 0003:04D8:00DD.002F: unknown main item tag 0x0
[  436.108976][  T991] mcp2221 0003:04D8:00DD.002F: unknown main item tag 0x0
[  436.109003][  T991] mcp2221 0003:04D8:00DD.002F: unknown main item tag 0x0
[  436.109028][  T991] mcp2221 0003:04D8:00DD.002F: unknown main item tag 0x0
[  436.109053][  T991] mcp2221 0003:04D8:00DD.002F: unknown main item tag 0x0
[  436.157268][  T991] mcp2221 0003:04D8:00DD.002F: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0
[  436.299168][   T30] audit: type=1326 audit(1792866655.162:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12122 comm="syz.6.1951" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73eef1c code=0x7ffc0000
[  436.299327][   T30] audit: type=1326 audit(1792866655.162:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12122 comm="syz.6.1951" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73eef1c code=0x7ffc0000
[  436.359747][T12119] i2c i2c-1: unsupported multi-msg i2c transaction
[  436.433108][   T24] usb 6-1: USB disconnect, device number 94
[  436.881528][   T10] gspca_ov534_9: reg_r err -32
[  436.980481][ T1239] usb 5-1: new full-speed USB device number 91 using dummy_hcd
[  437.148660][   T10] gspca_ov534_9: Unknown sensor 0000
[  437.148790][   T10] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22
[  437.151056][ T1239] usb 5-1: New USB device found, idVendor=2040, idProduct=8265, bcdDevice=b5.a3
[  437.154396][ T1239] usb 5-1: config 2 has an invalid interface number: 12 but max is 0
[  437.154411][ T1239] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  437.154420][ T1239] usb 5-1: config 2 has no interface number 0
[  437.154443][ T1239] usb 5-1: config 2 interface 12 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  437.154456][ T1239] usb 5-1: config 2 interface 12 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  437.154468][ T1239] usb 5-1: config 2 interface 12 has no altsetting 0
[  437.158189][ T1239] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  437.158211][ T1239] usb 5-1: Product: syz
[  437.158222][ T1239] usb 5-1: Manufacturer: syz
[  437.158230][ T1239] usb 5-1: SerialNumber: syz
[  437.801881][T12137] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  437.878755][ T5676] usb 6-1: new high-speed USB device number 95 using dummy_hcd
[  438.051643][ T5676] usb 6-1: Using ep0 maxpacket: 32
[  438.052589][ T5676] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  438.055920][ T5676] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  438.055947][ T5676] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  438.055982][ T5676] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  438.098207][ T1239] usb 5-1: USB disconnect, device number 91
[  438.117803][ T5676] usb 6-1: config 0 descriptor??
[  438.286499][  T991] usb 2-1: USB disconnect, device number 114
[  438.565593][ T5676] ft260 0003:0403:6030.0030: unknown main item tag 0x0
[  438.565617][ T5676] ft260 0003:0403:6030.0030: unknown main item tag 0x0
[  438.777966][T12155] loop4: detected capacity change from 0 to 2640
[  438.815383][T12155] buffer_io_error: 9 callbacks suppressed
[  438.815396][T12155] Buffer I/O error on dev loop4, logical block 0, lost async page write
[  438.815415][T12155] Buffer I/O error on dev loop4, logical block 1, lost async page write
[  438.815429][T12155] Buffer I/O error on dev loop4, logical block 2, lost async page write
[  438.815441][T12155] Buffer I/O error on dev loop4, logical block 3, lost async page write
[  438.815454][T12155] Buffer I/O error on dev loop4, logical block 4, lost async page write
[  438.815466][T12155] Buffer I/O error on dev loop4, logical block 5, lost async page write
[  438.815479][T12155] Buffer I/O error on dev loop4, logical block 6, lost async page write
[  438.815507][T12155] Buffer I/O error on dev loop4, logical block 7, lost async page write
[  438.815519][T12155] Buffer I/O error on dev loop4, logical block 8, lost async page write
[  438.815531][T12155] Buffer I/O error on dev loop4, logical block 9, lost async page write
[  440.016228][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[  440.016288][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  440.707980][ T5676] ft260 0003:0403:6030.0030: failed to retrieve chip version
[  440.709698][ T5676] ft260 0003:0403:6030.0030: probe with driver ft260 failed with error -71
[  440.743709][ T5676] usb 6-1: USB disconnect, device number 95
[  440.896577][T12184] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1966'.
[  440.914090][T12184] net_ratelimit: 2 callbacks suppressed
[  440.914107][T12184] openvswitch: netlink: IP tunnel dst address not specified
[  441.420648][T12197] FAULT_INJECTION: forcing a failure.
[  441.420648][T12197] name failslab, interval 1, probability 0, space 0, times 0
[  441.420670][T12197] CPU: 1 UID: 0 PID: 12197 Comm: syz.3.1972 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  441.420685][T12197] Tainted: [L]=SOFTLOCKUP
[  441.420689][T12197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  441.420696][T12197] Call Trace:
[  441.420700][T12197]  <TASK>
[  441.420706][T12197]  dump_stack_lvl+0xe8/0x150
[  441.420726][T12197]  should_fail_ex+0x410/0x560
[  441.420745][T12197]  should_failslab+0xa8/0x100
[  441.420757][T12197]  ? skb_clone+0x212/0x3a0
[  441.420773][T12197]  kmem_cache_alloc_noprof+0x9c/0x600
[  441.420788][T12197]  ? skb_clone+0x212/0x3a0
[  441.420805][T12197]  skb_clone+0x212/0x3a0
[  441.420822][T12197]  __netlink_deliver_tap+0x355/0x6e0
[  441.420840][T12197]  ? netlink_deliver_tap+0x2e/0x1b0
[  441.420852][T12197]  netlink_deliver_tap+0x19c/0x1b0
[  441.420864][T12197]  netlink_unicast+0x8c1/0xa80
[  441.420884][T12197]  netlink_sendmsg+0x7f0/0xb20
[  441.420899][T12197]  ? __pfx_netlink_sendmsg+0x10/0x10
[  441.420912][T12197]  ? aa_sock_msg_perm+0x144/0x210
[  441.420929][T12197]  ? apparmor_socket_sendmsg+0x98/0x360
[  441.420942][T12197]  ? __pfx_netlink_sendmsg+0x10/0x10
[  441.420953][T12197]  sock_sendmsg_nosec+0x14e/0x190
[  441.420966][T12197]  ____sys_sendmsg+0x54e/0x850
[  441.420983][T12197]  ? __pfx_____sys_sendmsg+0x10/0x10
[  441.421005][T12197]  ___sys_sendmsg+0x2a5/0x360
[  441.421017][T12197]  ? __lock_acquire+0x747/0x2de0
[  441.421032][T12197]  ? __pfx____sys_sendmsg+0x10/0x10
[  441.421045][T12197]  ? get_pid_task+0x20/0x1f0
[  441.421055][T12197]  ? get_pid_task+0x20/0x1f0
[  441.421064][T12197]  ? get_pid_task+0x20/0x1f0
[  441.421092][T12197]  ? __fget_files+0x3a2/0x420
[  441.421105][T12197]  ? __fget_files+0x2a/0x420
[  441.421123][T12197]  __sys_sendmsg+0x177/0x240
[  441.421138][T12197]  ? __pfx___sys_sendmsg+0x10/0x10
[  441.421158][T12197]  ? __might_fault+0xaf/0x130
[  441.421172][T12197]  __do_fast_syscall_32+0x28b/0x6c0
[  441.421189][T12197]  ? do_fast_syscall_32+0x33/0x70
[  441.421202][T12197]  ? asm_int80_emulation+0x1a/0x20
[  441.421212][T12197]  ? do_int80_emulation+0x299/0x500
[  441.421225][T12197]  ? trace_irq_disable+0x3b/0x140
[  441.421248][T12197]  do_fast_syscall_32+0x33/0x70
[  441.421273][T12197]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  441.421296][T12197] RIP: 0023:0xf748ef1c
[  441.421308][T12197] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  441.421316][T12197] RSP: 002b:00000000f54a650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  441.421327][T12197] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000340
[  441.421335][T12197] RDX: 0000000000044054 RSI: 0000000000000000 RDI: 0000000000000000
[  441.421341][T12197] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  441.421347][T12197] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  441.421353][T12197] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  441.421368][T12197]  </TASK>
[  441.914862][T12199] FAULT_INJECTION: forcing a failure.
[  441.914862][T12199] name failslab, interval 1, probability 0, space 0, times 0
[  441.914898][T12199] CPU: 1 UID: 0 PID: 12199 Comm: syz.3.1973 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  441.914923][T12199] Tainted: [L]=SOFTLOCKUP
[  441.914930][T12199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  441.914941][T12199] Call Trace:
[  441.914950][T12199]  <TASK>
[  441.914958][T12199]  dump_stack_lvl+0xe8/0x150
[  441.914986][T12199]  should_fail_ex+0x410/0x560
[  441.915005][T12199]  should_failslab+0xa8/0x100
[  441.915018][T12199]  __kmalloc_noprof+0xf9/0x710
[  441.915031][T12199]  ? rcu_is_watching+0x16/0xb0
[  441.915048][T12199]  ? tomoyo_realpath_from_path+0xef/0x640
[  441.915062][T12199]  ? tomoyo_realpath_from_path+0xef/0x640
[  441.915079][T12199]  tomoyo_realpath_from_path+0xef/0x640
[  441.915099][T12199]  ? tomoyo_path_number_perm+0x219/0x5f0
[  441.915110][T12199]  tomoyo_path_number_perm+0x246/0x5f0
[  441.915124][T12199]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  441.915135][T12199]  ? __lock_acquire+0x747/0x2de0
[  441.915166][T12199]  ? __fget_files+0x2a/0x420
[  441.915180][T12199]  ? __fget_files+0x2a/0x420
[  441.915191][T12199]  ? __fget_files+0x3a2/0x420
[  441.915203][T12199]  ? __fget_files+0x2a/0x420
[  441.915218][T12199]  security_file_ioctl_compat+0xc3/0x2a0
[  441.915232][T12199]  __ia32_compat_sys_ioctl+0x139/0x950
[  441.915244][T12199]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  441.915254][T12199]  ? __fget_files+0x3a2/0x420
[  441.915266][T12199]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  441.915284][T12199]  ? lock_acquire+0x115/0x350
[  441.915302][T12199]  ? __might_fault+0xaf/0x130
[  441.915317][T12199]  __do_fast_syscall_32+0x28b/0x6c0
[  441.915333][T12199]  ? do_fast_syscall_32+0x33/0x70
[  441.915346][T12199]  ? asm_int80_emulation+0x1a/0x20
[  441.915356][T12199]  ? do_int80_emulation+0x299/0x500
[  441.915369][T12199]  ? trace_irq_disable+0x3b/0x140
[  441.915383][T12199]  do_fast_syscall_32+0x33/0x70
[  441.915397][T12199]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  441.915409][T12199] RIP: 0023:0xf748ef1c
[  441.915420][T12199] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  441.915428][T12199] RSP: 002b:00000000f54a650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  441.915440][T12199] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000c1105511
[  441.915448][T12199] RDX: 0000000080002240 RSI: 0000000000000000 RDI: 0000000000000000
[  441.915454][T12199] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  441.915460][T12199] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  441.915466][T12199] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  441.915482][T12199]  </TASK>
[  441.922471][T12199] ERROR: Out of memory at tomoyo_realpath_from_path.
[  444.055500][T12218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1978'.
[  444.055514][T12218] netlink: 9456 bytes leftover after parsing attributes in process `syz.1.1978'.
[  444.055523][T12218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1978'.
[  444.246062][T12224] loop8: detected capacity change from 0 to 2
[  444.260988][T12224] Dev loop8: unable to read RDB block 2
[  444.261016][T12224]  loop8: unable to read partition table
[  444.261145][T12224] loop8: partition table beyond EOD, truncated
[  444.261169][T12224] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  444.349701][   T10] usb 4-1: new high-speed USB device number 107 using dummy_hcd
[  444.443351][T12230] FAULT_INJECTION: forcing a failure.
[  444.443351][T12230] name failslab, interval 1, probability 0, space 0, times 0
[  444.443383][T12230] CPU: 0 UID: 0 PID: 12230 Comm: syz.6.1984 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  444.443408][T12230] Tainted: [L]=SOFTLOCKUP
[  444.443415][T12230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  444.443426][T12230] Call Trace:
[  444.443434][T12230]  <TASK>
[  444.443443][T12230]  dump_stack_lvl+0xe8/0x150
[  444.443477][T12230]  should_fail_ex+0x410/0x560
[  444.443509][T12230]  should_failslab+0xa8/0x100
[  444.443529][T12230]  ? skb_clone+0x212/0x3a0
[  444.443557][T12230]  kmem_cache_alloc_noprof+0x9c/0x600
[  444.443584][T12230]  ? skb_clone+0x212/0x3a0
[  444.443617][T12230]  skb_clone+0x212/0x3a0
[  444.443648][T12230]  __netlink_deliver_tap+0x355/0x6e0
[  444.443689][T12230]  ? netlink_deliver_tap+0x2e/0x1b0
[  444.443712][T12230]  netlink_deliver_tap+0x19c/0x1b0
[  444.443735][T12230]  netlink_unicast+0x8c1/0xa80
[  444.443772][T12230]  netlink_sendmsg+0x7f0/0xb20
[  444.443800][T12230]  ? __pfx_netlink_sendmsg+0x10/0x10
[  444.443826][T12230]  ? aa_sock_msg_perm+0x144/0x210
[  444.443856][T12230]  ? apparmor_socket_sendmsg+0x98/0x360
[  444.443879][T12230]  ? __pfx_netlink_sendmsg+0x10/0x10
[  444.443899][T12230]  sock_sendmsg_nosec+0x14e/0x190
[  444.443923][T12230]  ____sys_sendmsg+0x54e/0x850
[  444.443955][T12230]  ? __pfx_____sys_sendmsg+0x10/0x10
[  444.443999][T12230]  ___sys_sendmsg+0x2a5/0x360
[  444.444023][T12230]  ? __lock_acquire+0x747/0x2de0
[  444.444050][T12230]  ? __pfx____sys_sendmsg+0x10/0x10
[  444.444075][T12230]  ? get_pid_task+0x20/0x1f0
[  444.444093][T12230]  ? get_pid_task+0x20/0x1f0
[  444.444109][T12230]  ? get_pid_task+0x20/0x1f0
[  444.444160][T12230]  ? __fget_files+0x3a2/0x420
[  444.444182][T12230]  ? __fget_files+0x2a/0x420
[  444.444216][T12230]  __sys_sendmsg+0x177/0x240
[  444.444244][T12230]  ? __pfx___sys_sendmsg+0x10/0x10
[  444.444283][T12230]  ? __might_fault+0xaf/0x130
[  444.444308][T12230]  __do_fast_syscall_32+0x28b/0x6c0
[  444.444337][T12230]  ? do_fast_syscall_32+0x33/0x70
[  444.444363][T12230]  ? asm_int80_emulation+0x1a/0x20
[  444.444381][T12230]  ? do_int80_emulation+0x299/0x500
[  444.444407][T12230]  ? trace_irq_disable+0x3b/0x140
[  444.444434][T12230]  do_fast_syscall_32+0x33/0x70
[  444.444462][T12230]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  444.444484][T12230] RIP: 0023:0xf73eef1c
[  444.444501][T12230] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  444.444516][T12230] RSP: 002b:00000000f540650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  444.444535][T12230] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000080
[  444.444549][T12230] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  444.444560][T12230] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  444.444570][T12230] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  444.444580][T12230] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  444.444613][T12230]  </TASK>
[  444.509222][   T10] usb 4-1: Using ep0 maxpacket: 32
[  444.519491][   T10] usb 4-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.06
[  444.777337][   T10] usb 4-1: config index 0 descriptor too short (expected 10138, got 36)
[  444.777353][   T10] usb 4-1: config 153 has too many interfaces: 48, using maximum allowed: 32
[  444.777363][   T10] usb 4-1: config 153 has an invalid descriptor of length 0, skipping remainder of the config
[  444.777372][   T10] usb 4-1: config 153 has 0 interfaces, different from the descriptor's value: 48
[  444.777393][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  444.936038][   T30] audit: type=1326 audit(1792866663.792:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12225 comm="syz.5.1983" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf73aef1c code=0x0
[  444.993671][T12231] netlink: 'syz.1.1982': attribute type 10 has an invalid length.
[  445.055059][   T30] audit: type=1326 audit(1792866663.912:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12219 comm="syz.3.1980" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748ef1c code=0x7ffc0000
[  445.086578][   T30] audit: type=1326 audit(1792866663.942:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12219 comm="syz.3.1980" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748ef1c code=0x7ffc0000
[  445.117063][   T30] audit: type=1326 audit(1792866663.972:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12219 comm="syz.3.1980" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf748ef1c code=0x7ffc0000
[  445.118137][   T30] audit: type=1326 audit(1792866663.972:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12219 comm="syz.3.1980" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748ef1c code=0x7ffc0000
[  445.143598][   T30] audit: type=1326 audit(1792866663.982:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12219 comm="syz.3.1980" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748ef1c code=0x7ffc0000
[  445.192727][   T30] audit: type=1326 audit(1792866664.032:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12219 comm="syz.3.1980" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf748ef1c code=0x7ffc0000
[  445.192756][   T30] audit: type=1326 audit(1792866664.032:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12219 comm="syz.3.1980" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748ef1c code=0x7ffc0000
[  445.208385][   T30] audit: type=1326 audit(1792866664.052:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12219 comm="syz.3.1980" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748ef1c code=0x7ffc0000
[  445.272063][   T30] audit: type=1326 audit(1792866664.132:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12219 comm="syz.3.1980" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf748ef1c code=0x7ffc0000
[  445.413841][T12235] tipc: Started in network mode
[  445.413869][T12235] tipc: Node identity be2f0c06f994, cluster identity 4711
[  445.414076][T12235] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  445.473822][T12235] syzkaller0: entered promiscuous mode
[  445.473842][T12235] syzkaller0: entered allmulticast mode
[  445.503580][   T24] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 4
[  445.551708][T12235] tipc: Resetting bearer <eth:syzkaller0>
[  445.551901][   T10] usb 4-1: string descriptor 0 read error: -71
[  445.556257][   T10] usb 4-1: USB disconnect, device number 107
[  445.615858][T12234] tipc: Resetting bearer <eth:syzkaller0>
[  445.684422][T12234] tipc: Disabling bearer <eth:syzkaller0>
[  445.729720][T12251] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1990'.
[  446.186138][ T9755] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery!
[  446.186333][T12261] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery"
[  446.491316][T12278] binder: 12274:12278 ioctl c018620c 80000d40 returned -1
[  446.644043][T12278] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1996'.
[  446.754562][T12260] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1994'.
[  446.754623][T12260] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1994'.
[  446.754632][T12260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1994'.
[  446.787995][T12260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1994'.
[  447.218579][ T1239] usb 6-1: new high-speed USB device number 96 using dummy_hcd
[  447.390070][ T1239] usb 6-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00
[  447.393424][ T1239] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  447.393451][ T1239] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  447.669642][T12302] FAULT_INJECTION: forcing a failure.
[  447.669642][T12302] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  447.669663][T12302] CPU: 0 UID: 0 PID: 12302 Comm: syz.4.2004 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  447.669680][T12302] Tainted: [L]=SOFTLOCKUP
[  447.669687][T12302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  447.669697][T12302] Call Trace:
[  447.669704][T12302]  <TASK>
[  447.669713][T12302]  dump_stack_lvl+0xe8/0x150
[  447.669747][T12302]  should_fail_ex+0x410/0x560
[  447.669780][T12302]  _copy_from_user+0x2d/0xb0
[  447.669809][T12302]  get_compat_msghdr+0xb3/0x4c0
[  447.669832][T12302]  ? __pfx_get_compat_msghdr+0x10/0x10
[  447.669866][T12302]  ___sys_sendmsg+0x201/0x360
[  447.669890][T12302]  ? __lock_acquire+0x747/0x2de0
[  447.669916][T12302]  ? __pfx____sys_sendmsg+0x10/0x10
[  447.669940][T12302]  ? get_pid_task+0x20/0x1f0
[  447.669959][T12302]  ? get_pid_task+0x20/0x1f0
[  447.669975][T12302]  ? get_pid_task+0x20/0x1f0
[  447.670024][T12302]  ? __fget_files+0x3a2/0x420
[  447.670048][T12302]  ? __fget_files+0x2a/0x420
[  447.670081][T12302]  __sys_sendmsg+0x177/0x240
[  447.670108][T12302]  ? __pfx___sys_sendmsg+0x10/0x10
[  447.670131][T12302]  ? __might_fault+0xaf/0x130
[  447.670146][T12302]  __do_fast_syscall_32+0x28b/0x6c0
[  447.670161][T12302]  ? do_fast_syscall_32+0x33/0x70
[  447.670175][T12302]  ? asm_int80_emulation+0x1a/0x20
[  447.670185][T12302]  ? do_int80_emulation+0x299/0x500
[  447.670198][T12302]  ? trace_irq_disable+0x3b/0x140
[  447.670212][T12302]  do_fast_syscall_32+0x33/0x70
[  447.670227][T12302]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  447.670243][T12302] RIP: 0023:0xf746ef1c
[  447.670260][T12302] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  447.670275][T12302] RSP: 002b:00000000f548650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  447.670294][T12302] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000680
[  447.670302][T12302] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 0000000000000000
[  447.670308][T12302] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  447.670314][T12302] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  447.670320][T12302] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  447.670335][T12302]  </TASK>
[  447.927860][ T1239] wacom 0003:056A:033B.0031: Unknown device_type for 'HID 056a:033b'. Assuming pen.
[  447.944932][ T1239] wacom 0003:056A:033B.0031: hidraw1: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.5-1/input0
[  447.966131][ T1239] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/0003:056A:033B.0031/input/input48
[  448.205632][T12311] netlink: 84 bytes leftover after parsing attributes in process `syz.6.2007'.
[  448.262569][T12311] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2007'.
[  448.282064][T12311] ipvlan2: entered allmulticast mode
[  448.282082][T12311] virt_wifi0: entered allmulticast mode
[  448.355599][   T24] usb 6-1: USB disconnect, device number 96
[  448.639656][ T1239] usb 4-1: new high-speed USB device number 108 using dummy_hcd
[  448.671924][T12325] kernel profiling enabled (shift: 23)
[  448.809129][ T1239] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  448.810223][ T1239] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  448.817313][ T1239] usb 4-1: config 0 descriptor??
[  449.257959][T12338] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  449.258075][T12344] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  449.285920][T12338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  449.286345][T12338] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  449.396070][T12346] nftables ruleset with unbound set
[  449.520867][ T5676] usb 6-1: new high-speed USB device number 97 using dummy_hcd
[  449.541234][ T1239] usb 4-1: USB disconnect, device number 108
[  449.615317][T12350] vivid-003: disconnect
[  449.620328][T12349] vivid-003: reconnect
[  449.635008][T12352] netlink: 200 bytes leftover after parsing attributes in process `syz.1.2019'.
[  449.635030][T12352] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2019'.
[  449.689518][ T5676] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  449.690831][ T5676] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  449.693969][ T5676] usb 6-1: config 0 descriptor??
[  449.724697][T12356] FAULT_INJECTION: forcing a failure.
[  449.724697][T12356] name failslab, interval 1, probability 0, space 0, times 0
[  449.724727][T12356] CPU: 1 UID: 0 PID: 12356 Comm: syz.1.2021 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  449.724751][T12356] Tainted: [L]=SOFTLOCKUP
[  449.724758][T12356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  449.724770][T12356] Call Trace:
[  449.724778][T12356]  <TASK>
[  449.724786][T12356]  dump_stack_lvl+0xe8/0x150
[  449.724810][T12356]  should_fail_ex+0x410/0x560
[  449.724843][T12356]  should_failslab+0xa8/0x100
[  449.724864][T12356]  ? ep_ptable_queue_proc+0x5c/0x200
[  449.724886][T12356]  kmem_cache_alloc_noprof+0x9c/0x600
[  449.724910][T12356]  ? __lock_acquire+0x747/0x2de0
[  449.724924][T12356]  ? ep_ptable_queue_proc+0x5c/0x200
[  449.724939][T12356]  ep_ptable_queue_proc+0x5c/0x200
[  449.724949][T12356]  ? __pfx_ep_ptable_queue_proc+0x10/0x10
[  449.724962][T12356]  vsock_poll+0x10a/0xa60
[  449.724982][T12356]  ? __pfx_vsock_poll+0x10/0x10
[  449.725007][T12356]  ? do_raw_spin_lock+0x12b/0x2f0
[  449.725040][T12356]  sock_poll+0x341/0x460
[  449.725064][T12356]  ? __pfx_sock_poll+0x10/0x10
[  449.725074][T12356]  ep_insert+0x11da/0x1af0
[  449.725092][T12356]  ? __pfx_ep_insert+0x10/0x10
[  449.725102][T12356]  ? __pfx___mutex_lock+0x10/0x10
[  449.725118][T12356]  ? rcu_is_watching+0x16/0xb0
[  449.725140][T12356]  ? __pfx_ep_ptable_queue_proc+0x10/0x10
[  449.725165][T12356]  ? security_capable+0xb9/0x2c0
[  449.725195][T12356]  do_epoll_ctl_file+0x8c2/0xee0
[  449.725218][T12356]  ? __pfx_do_epoll_ctl_file+0x10/0x10
[  449.725233][T12356]  ? __fget_files+0x3a2/0x420
[  449.725245][T12356]  ? __fget_files+0x2a/0x420
[  449.725259][T12356]  ? fdget+0x1ac/0x250
[  449.725273][T12356]  __se_sys_epoll_ctl+0x162/0x230
[  449.725295][T12356]  ? __pfx___se_sys_epoll_ctl+0x10/0x10
[  449.725319][T12356]  ? __might_fault+0xaf/0x130
[  449.725345][T12356]  __do_fast_syscall_32+0x28b/0x6c0
[  449.725368][T12356]  ? do_fast_syscall_32+0x33/0x70
[  449.725382][T12356]  ? asm_int80_emulation+0x1a/0x20
[  449.725392][T12356]  ? do_int80_emulation+0x299/0x500
[  449.725405][T12356]  ? trace_irq_disable+0x3b/0x140
[  449.725420][T12356]  do_fast_syscall_32+0x33/0x70
[  449.725444][T12356]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  449.725466][T12356] RIP: 0023:0xf746ef1c
[  449.725483][T12356] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  449.725497][T12356] RSP: 002b:00000000f548650c EFLAGS: 00000206 ORIG_RAX: 00000000000000ff
[  449.725515][T12356] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000001
[  449.725522][T12356] RDX: 0000000000000004 RSI: 0000000080000040 RDI: 0000000000000000
[  449.725528][T12356] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  449.725534][T12356] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  449.725540][T12356] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  449.725556][T12356]  </TASK>
[  449.805425][T12358] FAULT_INJECTION: forcing a failure.
[  449.805425][T12358] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  449.805456][T12358] CPU: 1 UID: 0 PID: 12358 Comm: syz.1.2022 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  449.805481][T12358] Tainted: [L]=SOFTLOCKUP
[  449.805488][T12358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  449.805500][T12358] Call Trace:
[  449.805507][T12358]  <TASK>
[  449.805514][T12358]  dump_stack_lvl+0xe8/0x150
[  449.805548][T12358]  should_fail_ex+0x410/0x560
[  449.805580][T12358]  prepare_alloc_pages+0x21e/0x5f0
[  449.805613][T12358]  __alloc_frozen_pages_noprof+0x17a/0x400
[  449.805644][T12358]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  449.805673][T12358]  ? is_bpf_text_address+0x26/0x2b0
[  449.805706][T12358]  ? policy_nodemask+0x2cc/0x8e0
[  449.805726][T12358]  ? __lock_acquire+0x747/0x2de0
[  449.805748][T12358]  alloc_pages_mpol+0x21e/0x390
[  449.805774][T12358]  folio_alloc_mpol_noprof+0x39/0x160
[  449.805797][T12358]  vma_alloc_folio_noprof+0xe1/0x1e0
[  449.805826][T12358]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  449.805848][T12358]  ? lock_acquire+0x115/0x350
[  449.805875][T12358]  do_pte_missing+0x173a/0x34b0
[  449.805919][T12358]  handle_mm_fault+0x1a53/0x3750
[  449.805951][T12358]  ? handle_mm_fault+0xf1/0x3750
[  449.805983][T12358]  ? __pfx_handle_mm_fault+0x10/0x10
[  449.806019][T12358]  ? __lock_acquire+0x747/0x2de0
[  449.806041][T12358]  ? lock_mm_and_find_vma+0xa7/0x340
[  449.806067][T12358]  do_user_addr_fault+0x7f6/0x1480
[  449.806106][T12358]  exc_page_fault+0x6a/0xc0
[  449.806132][T12358]  asm_exc_page_fault+0x26/0x30
[  449.806150][T12358] RIP: 0010:rep_movs_alternative+0x11/0xa0
[  449.806172][T12358] Code: e9 04 7f 04 00 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 cd 7e 04 00 66 2e 0f 1f
[  449.806186][T12358] RSP: 0018:ffffc90005337ac8 EFLAGS: 00050202
[  449.806203][T12358] RAX: ffffffff84e30200 RBX: 0000000000000004 RCX: 0000000000000004
[  449.806215][T12358] RDX: 0000000000000000 RSI: ffffc90005337b40 RDI: 0000000080001000
[  449.806227][T12358] RBP: ffffc90005337bb0 R08: 0000000000000003 R09: 0000000000000004
[  449.806238][T12358] R10: dffffc0000000000 R11: fffff52000a66f68 R12: 0000000080001004
[  449.806251][T12358] R13: 00007ffffffff000 R14: ffffc90005337b40 R15: 0000000080001000
[  449.806272][T12358]  ? _copy_from_user+0x40/0xb0
[  449.806307][T12358]  _copy_to_user+0x8a/0xb0
[  449.806335][T12358]  ucma_destroy_id+0x239/0x280
[  449.806493][T12358]  ? __pfx_ucma_destroy_id+0x10/0x10
[  449.806534][T12358]  ucma_write+0x249/0x2f0
[  449.806562][T12358]  ? __pfx_ucma_write+0x10/0x10
[  449.806588][T12358]  ? security_file_permission+0x75/0x260
[  449.806610][T12358]  ? rw_verify_area+0x203/0x4c0
[  449.806637][T12358]  ? __pfx_ucma_write+0x10/0x10
[  449.806662][T12358]  vfs_write+0x296/0xba0
[  449.806695][T12358]  ? __pfx_vfs_write+0x10/0x10
[  449.806722][T12358]  ? __fget_files+0x2a/0x420
[  449.806744][T12358]  ? __fget_files+0x3a2/0x420
[  449.806766][T12358]  ? __fget_files+0x2a/0x420
[  449.806793][T12358]  ? fdget+0x1ac/0x250
[  449.806829][T12358]  ksys_write+0x150/0x270
[  449.806856][T12358]  ? __pfx_ksys_write+0x10/0x10
[  449.806884][T12358]  ? __might_fault+0xaf/0x130
[  449.806910][T12358]  __do_fast_syscall_32+0x28b/0x6c0
[  449.806937][T12358]  ? do_fast_syscall_32+0x33/0x70
[  449.806962][T12358]  ? asm_int80_emulation+0x1a/0x20
[  449.806979][T12358]  ? do_int80_emulation+0x299/0x500
[  449.807004][T12358]  ? trace_irq_disable+0x3b/0x140
[  449.807030][T12358]  do_fast_syscall_32+0x33/0x70
[  449.807056][T12358]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  449.807078][T12358] RIP: 0023:0xf746ef1c
[  449.807094][T12358] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  449.807107][T12358] RSP: 002b:00000000f548650c EFLAGS: 00000206 ORIG_RAX: 0000000000000004
[  449.807125][T12358] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000fc0
[  449.807138][T12358] RDX: 0000000000000018 RSI: 0000000000000000 RDI: 0000000000000000
[  449.807148][T12358] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  449.807163][T12358] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  449.807173][T12358] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  449.807202][T12358]  </TASK>
[  449.908377][   T24] usb 5-1: new high-speed USB device number 92 using dummy_hcd
[  449.935380][T12361] FAULT_INJECTION: forcing a failure.
[  449.935380][T12361] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  449.935411][T12361] CPU: 1 UID: 0 PID: 12361 Comm: syz.1.2023 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  449.935435][T12361] Tainted: [L]=SOFTLOCKUP
[  449.935442][T12361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  449.935453][T12361] Call Trace:
[  449.935460][T12361]  <TASK>
[  449.935468][T12361]  dump_stack_lvl+0xe8/0x150
[  449.935503][T12361]  should_fail_ex+0x410/0x560
[  449.935537][T12361]  _copy_from_user+0x2d/0xb0
[  449.935567][T12361]  kstrtouint_from_user+0xd6/0x180
[  449.935594][T12361]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  449.935628][T12361]  ? lock_acquire+0x115/0x350
[  449.935654][T12361]  proc_fail_nth_write+0x8e/0x210
[  449.935675][T12361]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  449.935703][T12361]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  449.935721][T12361]  vfs_write+0x296/0xba0
[  449.935757][T12361]  ? __pfx_vfs_write+0x10/0x10
[  449.935785][T12361]  ? __fget_files+0x2a/0x420
[  449.935814][T12361]  ? __fget_files+0x3a2/0x420
[  449.935838][T12361]  ? __fget_files+0x2a/0x420
[  449.935866][T12361]  ? fdget+0x1ac/0x250
[  449.935897][T12361]  ksys_write+0x150/0x270
[  449.935926][T12361]  ? __pfx_ksys_write+0x10/0x10
[  449.935956][T12361]  ? asm_int80_emulation+0x1a/0x20
[  449.935981][T12361]  do_int80_emulation+0x198/0x500
[  449.936008][T12361]  ? trace_irq_disable+0x3b/0x140
[  449.936030][T12361]  ? asm_int80_emulation+0x1a/0x20
[  449.936048][T12361]  ? clear_bhb_loop+0x70/0xc0
[  449.936067][T12361]  ? clear_bhb_loop+0x70/0xc0
[  449.936090][T12361]  asm_int80_emulation+0x1a/0x20
[  449.936108][T12361] RIP: 0023:0xf71c77ab
[  449.936125][T12361] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  449.936140][T12361] RSP: 002b:00000000f54654bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004
[  449.936160][T12361] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54655d0
[  449.936174][T12361] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[  449.936186][T12361] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  449.936197][T12361] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  449.936209][T12361] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  449.936242][T12361]  </TASK>
[  450.020484][ T5676] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  450.028952][ T5676] [drm:udl_init] *ERROR* Selecting channel failed
[  450.040691][   T24] usb 5-1: device descriptor read/64, error -71
[  450.091593][T12363] syzkaller1: entered promiscuous mode
[  450.091612][T12363] syzkaller1: entered allmulticast mode
[  450.246689][ T5676] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 1
[  450.246712][ T5676] [drm] Initialized udl on minor 1
[  450.264492][ T5676] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  450.264934][ T5676] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[  450.272634][ T5676] usb 6-1: USB disconnect, device number 97
[  450.281278][   T24] usb 5-1: new high-speed USB device number 93 using dummy_hcd
[  450.304153][   T10] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[  450.435904][   T24] usb 5-1: device descriptor read/64, error -71
[  450.538675][   T24] usb usb5-port1: attempt power cycle
[  450.800348][ T1239] usb 4-1: new high-speed USB device number 109 using dummy_hcd
[  450.963884][ T1239] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  450.964910][ T1239] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  450.969934][ T1239] usb 4-1: config 0 descriptor??
[  450.998593][   T24] usb 5-1: new high-speed USB device number 94 using dummy_hcd
[  451.026293][   T24] usb 5-1: device descriptor read/8, error -71
[  451.046536][T12375] vivid-002: disconnect
[  451.054962][   T30] kauditd_printk_skb: 197 callbacks suppressed
[  451.054976][   T30] audit: type=1326 audit(1792866669.902:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12374 comm="syz.1.2028" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746ef1c code=0x7ffc0000
[  451.055045][   T30] audit: type=1326 audit(1792866669.912:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12374 comm="syz.1.2028" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746ef1c code=0x7ffc0000
[  451.056896][   T30] audit: type=1326 audit(1792866669.912:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12374 comm="syz.1.2028" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746ef1c code=0x7ffc0000
[  451.056941][   T30] audit: type=1326 audit(1792866669.912:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12374 comm="syz.1.2028" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf746ef1c code=0x7ffc0000
[  451.057003][   T30] audit: type=1326 audit(1792866669.912:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12374 comm="syz.1.2028" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746ef1c code=0x7ffc0000
[  451.057042][   T30] audit: type=1326 audit(1792866669.912:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12374 comm="syz.1.2028" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746ef1c code=0x7ffc0000
[  451.057081][   T30] audit: type=1326 audit(1792866669.912:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12374 comm="syz.1.2028" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746ef1c code=0x7ffc0000
[  451.057141][   T30] audit: type=1326 audit(1792866669.912:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12374 comm="syz.1.2028" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=71 compat=1 ip=0xf746ef1c code=0x7ffc0000
[  451.057179][   T30] audit: type=1326 audit(1792866669.912:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12374 comm="syz.1.2028" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746ef1c code=0x7ffc0000
[  451.057216][   T30] audit: type=1326 audit(1792866669.912:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12374 comm="syz.1.2028" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746ef1c code=0x7ffc0000
[  451.116482][T12375] vivid-002: reconnect
[  451.183438][ T1239] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  451.388351][   T24] usb 5-1: new high-speed USB device number 95 using dummy_hcd
[  451.410014][   T24] usb 5-1: device descriptor read/8, error -71
[  451.422511][ T1239] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1
[  451.422532][ T1239] [drm] Initialized udl on minor 1
[  451.483115][T12379] FAULT_INJECTION: forcing a failure.
[  451.483115][T12379] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  451.483170][T12379] CPU: 0 UID: 0 PID: 12379 Comm: syz.1.2030 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  451.483195][T12379] Tainted: [L]=SOFTLOCKUP
[  451.483203][T12379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  451.483214][T12379] Call Trace:
[  451.483222][T12379]  <TASK>
[  451.483231][T12379]  dump_stack_lvl+0xe8/0x150
[  451.483263][T12379]  should_fail_ex+0x410/0x560
[  451.483299][T12379]  _copy_from_iter+0x1d3/0x1660
[  451.483325][T12379]  ? __alloc_skb+0x27a/0x7a0
[  451.483351][T12379]  ? __alloc_skb+0x27a/0x7a0
[  451.483376][T12379]  ? __alloc_skb+0x27a/0x7a0
[  451.483399][T12379]  ? __pfx__copy_from_iter+0x10/0x10
[  451.483423][T12379]  ? kmem_cache_alloc_node_noprof+0x1f4/0x600
[  451.483447][T12379]  ? __alloc_skb+0x27a/0x7a0
[  451.483468][T12379]  ? __alloc_skb+0x27a/0x7a0
[  451.483504][T12379]  ? netlink_sendmsg+0x64f/0xb20
[  451.483526][T12379]  ? skb_put+0x112/0x210
[  451.483553][T12379]  netlink_sendmsg+0x6bb/0xb20
[  451.483580][T12379]  ? __pfx_netlink_sendmsg+0x10/0x10
[  451.483605][T12379]  ? aa_sock_msg_perm+0x144/0x210
[  451.483635][T12379]  ? apparmor_socket_sendmsg+0x98/0x360
[  451.483659][T12379]  ? __pfx_netlink_sendmsg+0x10/0x10
[  451.483679][T12379]  sock_sendmsg_nosec+0x14e/0x190
[  451.483701][T12379]  ____sys_sendmsg+0x54e/0x850
[  451.483730][T12379]  ? __pfx_____sys_sendmsg+0x10/0x10
[  451.483770][T12379]  ___sys_sendmsg+0x2a5/0x360
[  451.483794][T12379]  ? __lock_acquire+0x747/0x2de0
[  451.483821][T12379]  ? __pfx____sys_sendmsg+0x10/0x10
[  451.483845][T12379]  ? get_pid_task+0x20/0x1f0
[  451.483864][T12379]  ? get_pid_task+0x20/0x1f0
[  451.483879][T12379]  ? get_pid_task+0x20/0x1f0
[  451.483929][T12379]  ? __fget_files+0x3a2/0x420
[  451.483952][T12379]  ? __fget_files+0x2a/0x420
[  451.483984][T12379]  __sys_sendmsg+0x177/0x240
[  451.484011][T12379]  ? __pfx___sys_sendmsg+0x10/0x10
[  451.484049][T12379]  ? __might_fault+0xaf/0x130
[  451.484076][T12379]  __do_fast_syscall_32+0x28b/0x6c0
[  451.484105][T12379]  ? do_fast_syscall_32+0x33/0x70
[  451.484130][T12379]  ? asm_int80_emulation+0x1a/0x20
[  451.484148][T12379]  ? do_int80_emulation+0x299/0x500
[  451.484173][T12379]  ? trace_irq_disable+0x3b/0x140
[  451.484200][T12379]  do_fast_syscall_32+0x33/0x70
[  451.484228][T12379]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  451.484249][T12379] RIP: 0023:0xf746ef1c
[  451.484266][T12379] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  451.484281][T12379] RSP: 002b:00000000f548650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  451.484300][T12379] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000480
[  451.484313][T12379] RDX: 0000000002000000 RSI: 0000000000000000 RDI: 0000000000000000
[  451.484325][T12379] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  451.484336][T12379] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  451.484347][T12379] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  451.484376][T12379]  </TASK>
[  451.593471][   T24] usb usb5-port1: unable to enumerate USB device
[  451.888810][   T10] usb 2-1: new high-speed USB device number 115 using dummy_hcd
[  452.048384][   T10] usb 2-1: Using ep0 maxpacket: 16
[  452.049413][   T10] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  452.050753][   T10] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  452.050780][   T10] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0
[  452.050824][   T10] usb 2-1: config 0 interface 0 has no altsetting 0
[  452.050852][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  452.052684][   T10] usb 2-1: config 0 descriptor??
[  452.355145][T12398] fuse: Bad value for 'user_id'
[  452.355165][T12398] fuse: Bad value for 'user_id'
[  452.376862][T12398] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2038'.
[  452.401265][T12398] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2038'.
[  452.464443][   T10] mcp2221 0003:04D8:00DD.0032: unknown main item tag 0x0
[  452.464478][   T10] mcp2221 0003:04D8:00DD.0032: unknown main item tag 0x0
[  452.464505][   T10] mcp2221 0003:04D8:00DD.0032: unknown main item tag 0x0
[  452.464555][   T10] mcp2221 0003:04D8:00DD.0032: unknown main item tag 0x0
[  452.464581][   T10] mcp2221 0003:04D8:00DD.0032: unknown main item tag 0x0
[  452.465584][   T10] mcp2221 0003:04D8:00DD.0032: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0
[  452.569319][T12400] syz_tun: entered allmulticast mode
[  452.575875][T12400] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2039'.
[  452.687265][T12404] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  452.751505][ T5691] usb 2-1: USB disconnect, device number 115
[  453.068325][   T24] usb 5-1: new full-speed USB device number 96 using dummy_hcd
[  453.220716][   T24] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  453.223967][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  453.223990][   T24] usb 5-1: Product: syz
[  453.224003][   T24] usb 5-1: Manufacturer: syz
[  453.224015][   T24] usb 5-1: SerialNumber: syz
[  453.228128][   T24] usb 5-1: config 0 descriptor??
[  453.469167][   T24] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  453.489730][T12425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  453.490362][T12425] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  453.522854][T12427] FAULT_INJECTION: forcing a failure.
[  453.522854][T12427] name failslab, interval 1, probability 0, space 0, times 0
[  453.522874][T12427] CPU: 0 UID: 0 PID: 12427 Comm: syz.1.2048 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  453.522888][T12427] Tainted: [L]=SOFTLOCKUP
[  453.522892][T12427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  453.522899][T12427] Call Trace:
[  453.522903][T12427]  <TASK>
[  453.522909][T12427]  dump_stack_lvl+0xe8/0x150
[  453.522944][T12427]  should_fail_ex+0x410/0x560
[  453.522977][T12427]  should_failslab+0xa8/0x100
[  453.522997][T12427]  ? do_getname+0x2e/0x250
[  453.523013][T12427]  kmem_cache_alloc_noprof+0x9c/0x600
[  453.523027][T12427]  ? ksys_write+0x1e6/0x270
[  453.523040][T12427]  ? do_getname+0x2e/0x250
[  453.523054][T12427]  do_getname+0x2e/0x250
[  453.523064][T12427]  ? getname_flags+0x11/0x20
[  453.523086][T12427]  do_sys_openat2+0xce/0x200
[  453.523111][T12427]  ? __pfx_do_sys_openat2+0x10/0x10
[  453.523130][T12427]  ? lock_acquire+0x115/0x350
[  453.523161][T12427]  __ia32_compat_sys_openat+0x131/0x160
[  453.523176][T12427]  __do_fast_syscall_32+0x28b/0x6c0
[  453.523192][T12427]  ? do_fast_syscall_32+0x33/0x70
[  453.523205][T12427]  ? asm_int80_emulation+0x1a/0x20
[  453.523215][T12427]  ? do_int80_emulation+0x299/0x500
[  453.523240][T12427]  ? trace_irq_disable+0x3b/0x140
[  453.523267][T12427]  do_fast_syscall_32+0x33/0x70
[  453.523294][T12427]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  453.523316][T12427] RIP: 0023:0xf746ef1c
[  453.523328][T12427] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  453.523336][T12427] RSP: 002b:00000000f546550c EFLAGS: 00000206 ORIG_RAX: 0000000000000127
[  453.523348][T12427] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080006940
[  453.523356][T12427] RDX: 0000000003002a8d RSI: 0000000000000001 RDI: 0000000000000000
[  453.523362][T12427] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  453.523368][T12427] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  453.523374][T12427] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  453.523401][T12427]  </TASK>
[  453.708479][   T24] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  453.715014][   T24] usb 5-1: USB disconnect, device number 96
[  454.433102][ T5691] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0
[  454.458085][ T5691] hid-generic 0000:0000:0000.0033: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  454.616015][T12438] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2051'.
[  454.708853][   T10] usb 2-1: new high-speed USB device number 116 using dummy_hcd
[  454.818571][T12442] FAULT_INJECTION: forcing a failure.
[  454.818571][T12442] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  454.818594][T12442] CPU: 1 UID: 0 PID: 12442 Comm: syz.4.2052 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  454.818609][T12442] Tainted: [L]=SOFTLOCKUP
[  454.818614][T12442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  454.818620][T12442] Call Trace:
[  454.818625][T12442]  <TASK>
[  454.818631][T12442]  dump_stack_lvl+0xe8/0x150
[  454.818667][T12442]  should_fail_ex+0x410/0x560
[  454.818710][T12442]  strncpy_from_user+0x36/0x2c0
[  454.818806][T12442]  do_getname+0x77/0x250
[  454.818831][T12442]  __se_sys_renameat2+0x43/0x2c0
[  454.818857][T12442]  __do_fast_syscall_32+0x28b/0x6c0
[  454.818885][T12442]  ? do_fast_syscall_32+0x33/0x70
[  454.818900][T12442]  ? asm_int80_emulation+0x1a/0x20
[  454.818909][T12442]  ? do_int80_emulation+0x299/0x500
[  454.818923][T12442]  ? trace_irq_disable+0x3b/0x140
[  454.818937][T12442]  do_fast_syscall_32+0x33/0x70
[  454.818961][T12442]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  454.818983][T12442] RIP: 0023:0xf746ef1c
[  454.819001][T12442] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  454.819016][T12442] RSP: 002b:00000000f546550c EFLAGS: 00000206 ORIG_RAX: 0000000000000161
[  454.819035][T12442] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080002400
[  454.819043][T12442] RDX: 000000000000000d RSI: 00000000800024c0 RDI: 0000000000000000
[  454.819049][T12442] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  454.819055][T12442] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  454.819061][T12442] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  454.819077][T12442]  </TASK>
[  454.838434][   T10] usb 2-1: device descriptor read/64, error -71
[  455.079528][   T10] usb 2-1: new high-speed USB device number 117 using dummy_hcd
[  455.208425][   T10] usb 2-1: device descriptor read/64, error -71
[  455.319264][   T10] usb usb2-port1: attempt power cycle
[  455.359781][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  455.660738][   T10] usb 2-1: new high-speed USB device number 118 using dummy_hcd
[  455.679921][   T10] usb 2-1: device descriptor read/8, error -71
[  455.918385][   T10] usb 2-1: new high-speed USB device number 119 using dummy_hcd
[  455.938831][   T10] usb 2-1: device descriptor read/8, error -71
[  456.004377][T12447] fuse: Bad value for 'fd'
[  456.048901][   T10] usb usb2-port1: unable to enumerate USB device
[  456.054912][T12449] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2055'.
[  456.055472][T12449] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2055'.
[  456.121801][T12451] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0001
[  456.122473][T12451] tipc: Enabled bearer <udp:syz0>, priority 10
[  456.267401][   T30] kauditd_printk_skb: 20 callbacks suppressed
[  456.267419][   T30] audit: type=1326 audit(1792866675.122:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12456 comm="syz.4.2059" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=172 compat=1 ip=0xf746ef1c code=0x0
[  456.480295][ T1239] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92
[  456.480741][ T1239] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  456.488182][ T1239] usb 4-1: USB disconnect, device number 109
[  456.512827][ T5676] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  456.996787][T12480] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2064'.
[  457.010502][T12480] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2064'.
[  457.013911][T12482] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  457.014491][T12482] syzkaller0: entered promiscuous mode
[  457.014507][T12482] syzkaller0: entered allmulticast mode
[  457.020666][T12480] netlink: 364 bytes leftover after parsing attributes in process `syz.3.2064'.
[  457.023657][T12482] tipc: Resetting bearer <eth:syzkaller0>
[  457.032319][T12481] tipc: Resetting bearer <eth:syzkaller0>
[  457.087923][T12481] tipc: Disabling bearer <eth:syzkaller0>
[  457.150521][ T5691] tipc: Node number set to 1203440646
[  457.386516][T12490] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2067'.
[  457.831109][T12503] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2070'.
[  457.914049][T12498] ipvlan2: left promiscuous mode
[  457.952753][T12503] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  458.027000][T12503] batman_adv: batadv0: Removing interface: batadv_slave_0
[  458.109952][ T5691] usb 2-1: new full-speed USB device number 120 using dummy_hcd
[  458.259826][ T5691] usb 2-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00
[  458.261177][ T5691] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  458.261194][ T5691] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  458.261216][ T5691] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  458.263151][ T5691] usb 2-1: config 0 descriptor??
[  458.263943][T12506] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  458.428373][ T5676] usb 5-1: new high-speed USB device number 97 using dummy_hcd
[  458.473917][ T5691] usbhid 2-1:0.0: can't add hid device: -71
[  458.473980][ T5691] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  458.478108][ T5691] usb 2-1: USB disconnect, device number 120
[  458.540769][T12519] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  458.541063][T12519] syzkaller0: entered promiscuous mode
[  458.541073][T12519] syzkaller0: entered allmulticast mode
[  458.546495][T12519] tipc: Resetting bearer <eth:syzkaller0>
[  458.578845][T12518] tipc: Resetting bearer <eth:syzkaller0>
[  458.590598][ T5676] usb 5-1: Using ep0 maxpacket: 16
[  458.601770][ T5676] usb 5-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9
[  458.601806][ T5676] usb 5-1: too many configurations: 60, using maximum allowed: 8
[  458.620840][T12518] tipc: Disabling bearer <eth:syzkaller0>
[  458.635967][ T5676] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204
[  458.635990][ T5676] usb 5-1: Product: syz
[  458.635998][ T5676] usb 5-1: Manufacturer: syz
[  458.636005][ T5676] usb 5-1: SerialNumber: syz
[  458.637973][ T5676] usb 5-1: config 0 descriptor??
[  458.669662][ T5676] pwc: Philips SPC 880NC USB webcam detected.
[  458.887736][T12529] blktrace: Concurrent blktraces are not allowed on nullb0
[  458.888186][T12529] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2081'.
[  458.979537][ T5691] usb 2-1: new full-speed USB device number 121 using dummy_hcd
[  459.028435][ T1239] usb 4-1: new high-speed USB device number 110 using dummy_hcd
[  459.158419][ T1239] usb 4-1: device descriptor read/64, error -71
[  459.211282][ T5691] usb 2-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00
[  459.212472][ T5691] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  459.212499][ T5691] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  459.212539][ T5691] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  459.227631][ T5691] usb 2-1: config 0 descriptor??
[  459.228466][T12506] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  459.376923][T12536] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2084'.
[  459.376968][T12536] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2084'.
[  459.398384][ T1239] usb 4-1: new high-speed USB device number 111 using dummy_hcd
[  459.528319][ T1239] usb 4-1: device descriptor read/64, error -71
[  459.636770][ T5691] usbhid 2-1:0.0: can't add hid device: -71
[  459.636862][ T5691] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  459.643496][ T5691] usb 2-1: USB disconnect, device number 121
[  459.662370][ T1239] usb usb4-port1: attempt power cycle
[  459.999458][ T1239] usb 4-1: new high-speed USB device number 112 using dummy_hcd
[  460.024303][ T1239] usb 4-1: device descriptor read/8, error -71
[  460.258393][ T1239] usb 4-1: new high-speed USB device number 113 using dummy_hcd
[  460.279315][ T1239] usb 4-1: device descriptor read/8, error -71
[  460.389949][ T1239] usb usb4-port1: unable to enumerate USB device
[  460.663297][T12559] blktrace: Concurrent blktraces are not allowed on nullb0
[  460.665506][T12559] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2092'.
[  460.836028][ T5676] pwc: Warning: more than 1 configuration available.
[  460.836447][ T5676] pwc: Failed to set LED on/off time (-71)
[  460.836814][ T5676] pwc: send_video_command error -71
[  460.836827][ T5676] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  460.836923][ T5676] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71
[  460.876869][ T5676] usb 5-1: USB disconnect, device number 97
[  461.085552][T12564] netlink: 'syz.4.2094': attribute type 29 has an invalid length.
[  461.547510][T12584] blktrace: Concurrent blktraces are not allowed on nullb0
[  461.548119][T12584] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2103'.
[  461.592389][T12588] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2104'.
[  461.592404][T12588] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2104'.
[  461.595317][T12588] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2104'.
[  461.626760][ T1239] usb 5-1: new high-speed USB device number 98 using dummy_hcd
[  461.788423][ T1239] usb 5-1: Using ep0 maxpacket: 8
[  461.789568][ T1239] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[  461.791582][ T1239] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  461.791604][ T1239] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  461.791623][ T1239] usb 5-1: config 1 has no interface number 0
[  461.791661][ T1239] usb 5-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  461.793785][ T1239] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  461.793806][ T1239] usb 5-1: Product: syz
[  461.793818][ T1239] usb 5-1: Manufacturer: syz
[  461.793831][ T1239] usb 5-1: SerialNumber: syz
[  461.807739][T12594] kvm: pic: level sensitive irq not supported
[  461.815465][T12594] kvm: pic: level sensitive irq not supported
[  462.109685][ T5691] usb 2-1: new high-speed USB device number 122 using dummy_hcd
[  462.118115][ T1239] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -22
[  462.165431][ T9532] udevd[9532]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  462.260919][ T5691] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  462.264090][ T5691] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  462.264114][ T5691] usb 2-1: config 0 has no interface number 0
[  462.266311][ T5691] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  462.266334][ T5691] usb 2-1: Product: syz
[  462.266347][ T5691] usb 2-1: Manufacturer: syz
[  462.266359][ T5691] usb 2-1: SerialNumber: syz
[  462.271614][ T5691] usb 2-1: config 0 descriptor??
[  462.486146][ T5691] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  462.488675][ T5691] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  462.488979][ T5691] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  462.489021][ T5691] usb 2-1: media controller created
[  462.509905][ T5691] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  462.633515][T12612] netlink: 'syz.4.2096': attribute type 21 has an invalid length.
[  463.121299][T12617] __nla_validate_parse: 1 callbacks suppressed
[  463.121342][T12617] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2114'.
[  463.121356][T12617] netlink: 15 bytes leftover after parsing attributes in process `syz.5.2114'.
[  463.303098][ T5691] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[  463.358802][  T991] usb 6-1: new high-speed USB device number 98 using dummy_hcd
[  463.403497][ T5691] usb 2-1: USB disconnect, device number 122
[  463.509427][  T991] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  463.510976][  T991] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  463.512270][  T991] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  463.515981][  T991] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  463.516003][  T991] usb 6-1: Product: syz
[  463.516017][  T991] usb 6-1: Manufacturer: syz
[  463.516030][  T991] usb 6-1: SerialNumber: syz
[  463.520808][  T991] usb 6-1: config 0 descriptor??
[  463.528035][T12617] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22
[  463.528134][T12617] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22
[  463.740469][T12617] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22
[  463.740556][T12617] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22
[  463.959053][ T5691] usb 4-1: new full-speed USB device number 114 using dummy_hcd
[  464.111800][ T5691] usb 4-1: unable to get BOS descriptor or descriptor too short
[  464.112285][ T5691] usb 4-1: not running at top speed; connect to a high speed hub
[  464.112321][ T5691] usb 4-1: New USB device found, idVendor=05ac, idProduct=2c1f, bcdDevice=94.a2
[  464.113141][ T5691] usb 4-1: config 6 has an invalid interface number: 247 but max is 0
[  464.113361][ T5691] usb 4-1: config 6 has no interface number 0
[  464.113391][ T5691] usb 4-1: config 6 interface 247 has no altsetting 0
[  464.115469][ T5691] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  464.115492][ T5691] usb 4-1: Product: syz
[  464.116849][ T5691] usb 4-1: Manufacturer: syz
[  464.116909][ T5691] usb 4-1: SerialNumber: syz
[  464.147036][  T991] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00
[  464.305746][ T5698] usb 5-1: USB disconnect, device number 98
[  464.363501][T12617] fuse: Unknown parameter 'euid<00000000000000000000'
[  464.429887][ T5691] ipheth 4-1:6.247: Unable to find alternate settings interface
[  464.443278][ T5691] usb 4-1: USB disconnect, device number 114
[  464.547922][T12641] sg_write: data in/out 14848/1 bytes for SCSI command 0x0-- guessing data in;
[  464.547922][T12641]    program syz.6.2123 not setting count and/or reply_len properly
[  464.596645][T12639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  464.609232][T12639] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  464.689348][T12643] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2124'.
[  464.785899][T12645] tipc: Started in network mode
[  464.785928][T12645] tipc: Node identity 1e3b054af965, cluster identity 4711
[  464.786080][T12645] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  464.786871][T12645] syzkaller0: entered promiscuous mode
[  464.786888][T12645] syzkaller0: entered allmulticast mode
[  464.817059][  T991] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID
[  464.837062][  T991] usb 6-1: USB disconnect, device number 98
[  464.875026][T12645] tipc: Resetting bearer <eth:syzkaller0>
[  464.877909][T12644] tipc: Resetting bearer <eth:syzkaller0>
[  464.912493][T12644] tipc: Disabling bearer <eth:syzkaller0>
[  464.925909][T12647] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2126'.
[  465.002344][T12651] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2128'.
[  465.071947][T12654] syzkaller1: entered promiscuous mode
[  465.071967][T12654] syzkaller1: entered allmulticast mode
[  465.230664][T12659] syzkaller0: entered promiscuous mode
[  465.230685][T12659] syzkaller0: entered allmulticast mode
[  465.323946][   T30] audit: type=1326 audit(1792866684.182:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12660 comm="syz.1.2132" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746ef1c code=0x7ffc0000
[  465.324263][   T30] audit: type=1326 audit(1792866684.182:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12660 comm="syz.1.2132" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746ef1c code=0x7ffc0000
[  465.324350][   T30] audit: type=1326 audit(1792866684.182:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12660 comm="syz.1.2132" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746ef1c code=0x7ffc0000
[  465.324491][   T30] audit: type=1326 audit(1792866684.182:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12660 comm="syz.1.2132" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71c77ab code=0x7ffc0000
[  465.325061][   T30] audit: type=1326 audit(1792866684.182:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12660 comm="syz.1.2132" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71c77ab code=0x7ffc0000
[  465.325104][   T30] audit: type=1326 audit(1792866684.182:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12660 comm="syz.1.2132" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746ef1c code=0x7ffc0000
[  465.325290][   T30] audit: type=1326 audit(1792866684.182:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12660 comm="syz.1.2132" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=239 compat=1 ip=0xf746ef1c code=0x7ffc0000
[  465.325400][   T30] audit: type=1326 audit(1792866684.182:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12660 comm="syz.1.2132" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf71c77ab code=0x7ffc0000
[  465.325402][T12661] FAULT_INJECTION: forcing a failure.
[  465.325402][T12661] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  465.325429][T12661] CPU: 1 UID: 0 PID: 12661 Comm: syz.1.2132 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  465.325454][T12661] Tainted: [L]=SOFTLOCKUP
[  465.325461][T12661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  465.325472][T12661] Call Trace:
[  465.325480][T12661]  <TASK>
[  465.325488][T12661]  dump_stack_lvl+0xe8/0x150
[  465.325516][T12661]  should_fail_ex+0x410/0x560
[  465.325536][T12661]  _copy_to_user+0x31/0xb0
[  465.325553][T12661]  simple_read_from_buffer+0xe1/0x170
[  465.325570][T12661]  proc_fail_nth_read+0x1bb/0x230
[  465.325582][T12661]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  465.325594][T12661]  ? rw_verify_area+0x24a/0x4c0
[  465.325609][T12661]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  465.325619][T12661]  vfs_read+0x213/0xa80
[  465.325635][T12661]  ? __pfx___mutex_lock+0x10/0x10
[  465.325650][T12661]  ? __pfx_vfs_read+0x10/0x10
[  465.325664][T12661]  ? __fget_files+0x2a/0x420
[  465.325679][T12661]  ? __fget_files+0x3a2/0x420
[  465.325691][T12661]  ? __fget_files+0x2a/0x420
[  465.325706][T12661]  ? fdget+0x1ac/0x250
[  465.325722][T12661]  ksys_read+0x150/0x270
[  465.325737][T12661]  ? __pfx_ksys_read+0x10/0x10
[  465.325765][T12661]  ? __seccomp_permit_syscall+0xe7/0x2b0
[  465.325826][T12661]  do_int80_emulation+0x198/0x500
[  465.325852][T12661]  ? trace_irq_disable+0x3b/0x140
[  465.325872][T12661]  ? asm_int80_emulation+0x1a/0x20
[  465.325882][T12661]  ? clear_bhb_loop+0x70/0xc0
[  465.325892][T12661]  ? clear_bhb_loop+0x70/0xc0
[  465.325904][T12661]  asm_int80_emulation+0x1a/0x20
[  465.325919][T12661] RIP: 0023:0xf71c77ab
[  465.325936][T12661] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  465.325951][T12661] RSP: 002b:00000000f54864bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  465.325970][T12661] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f54865d0
[  465.325983][T12661] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[  465.325994][T12661] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  465.326004][T12661] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  465.326015][T12661] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  465.326044][T12661]  </TASK>
[  465.326213][   T30] audit: type=1326 audit(1792866684.182:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12660 comm="syz.1.2132" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71c77ab code=0x7ffc0000
[  465.326482][   T30] audit: type=1326 audit(1792866684.182:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12660 comm="syz.1.2132" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71c77ab code=0x7ffc0000
[  466.076778][T12676] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2139'.
[  466.158538][ T5691] usb 4-1: new high-speed USB device number 115 using dummy_hcd
[  466.310549][ T5691] usb 4-1: Using ep0 maxpacket: 16
[  466.311858][ T5691] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  466.314174][ T5691] usb 4-1: config 0 has an invalid interface number: 105 but max is 0
[  466.314198][ T5691] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  466.314215][ T5691] usb 4-1: config 0 has no interface number 0
[  466.317901][ T5691] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  466.317922][ T5691] usb 4-1: Product: syz
[  466.317935][ T5691] usb 4-1: Manufacturer: syz
[  466.317948][ T5691] usb 4-1: SerialNumber: syz
[  466.334779][ T5691] usb 4-1: config 0 descriptor??
[  466.345036][ T5691] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046d:08f3)
[  466.345112][ T5691] uvcvideo 4-1:0.105: No valid video chain found.
[  466.546039][ T5691] usb 4-1: USB disconnect, device number 115
[  466.601841][T12683] netlink: 'syz.5.2142': attribute type 21 has an invalid length.
[  466.601855][T12683] netlink: 'syz.5.2142': attribute type 7 has an invalid length.
[  467.013495][T12696] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2147'.
[  467.123886][T12703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2150'.
[  467.124217][T12703] netlink: 'syz.1.2150': attribute type 1 has an invalid length.
[  467.124246][T12703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2150'.
[  467.279443][T12709] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2152'.
[  467.998543][   T10] usb 2-1: new high-speed USB device number 123 using dummy_hcd
[  468.150158][   T10] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  468.151477][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  468.155961][   T10] usb 2-1: config 0 descriptor??
[  468.188954][   T29] usb 5-1: new high-speed USB device number 99 using dummy_hcd
[  468.339656][   T29] usb 5-1: Using ep0 maxpacket: 32
[  468.340370][   T29] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  468.345733][   T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  468.351779][   T29] usb 5-1: config 0 descriptor??
[  468.405329][   T29] as10x_usb: device has been detected
[  468.411148][   T29] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  468.439179][   T29] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  468.473077][T12726] blktrace: Concurrent blktraces are not allowed on nullb0
[  468.490384][   T29] as10x_usb: error during firmware upload part1
[  468.490993][   T29] Registered device nBox DVB-T Dongle
[  468.493335][T12726] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2157'.
[  468.512064][   T10] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  468.654913][T12701] random: crng reseeded on system resumption
[  468.739886][   T10] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1
[  468.739907][   T10] [drm] Initialized udl on minor 1
[  468.777950][ T5676] usb 5-1: USB disconnect, device number 99
[  468.819462][ T5676] Unregistered device nBox DVB-T Dongle
[  468.822488][ T5676] as10x_usb: device has been disconnected
[  468.893180][T12740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2162'.
[  468.985894][T12740] netlink: 'syz.3.2162': attribute type 1 has an invalid length.
[  468.985912][T12740] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2162'.
[  469.239153][T12749] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2165'.
[  470.547872][T12763] blktrace: Concurrent blktraces are not allowed on nullb0
[  470.555402][T12761] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2169'.
[  470.568123][T12763] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2168'.
[  470.579286][ T5676] usb 5-1: new high-speed USB device number 100 using dummy_hcd
[  470.606837][T12761] 8021q: adding VLAN 0 to HW filter on device bond4
[  470.608043][T12762] bond4: option ad_select: unable to set because the bond device is up
[  470.730015][ T5676] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  470.731423][ T5676] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  470.731445][ T5676] usb 5-1: config 0 has no interface number 0
[  470.733974][ T5676] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  470.733997][ T5676] usb 5-1: Product: syz
[  470.734010][ T5676] usb 5-1: Manufacturer: syz
[  470.734048][ T5676] usb 5-1: SerialNumber: syz
[  470.737213][ T5676] usb 5-1: config 0 descriptor??
[  470.751106][T12770] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2171'.
[  470.751123][T12770] netlink: 15 bytes leftover after parsing attributes in process `syz.5.2171'.
[  470.971104][ T5676] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  470.973297][ T5676] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  470.973538][ T5676] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  470.973565][ T5676] usb 5-1: media controller created
[  470.989465][ T5691] usb 6-1: new high-speed USB device number 99 using dummy_hcd
[  471.022897][ T5676] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  471.119381][   T29] usb 4-1: new full-speed USB device number 116 using dummy_hcd
[  471.139083][ T5691] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  471.140091][ T5691] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  471.140117][ T5691] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  471.142501][ T5691] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  471.142523][ T5691] usb 6-1: Product: syz
[  471.142536][ T5691] usb 6-1: Manufacturer: syz
[  471.142550][ T5691] usb 6-1: SerialNumber: syz
[  471.145422][ T5691] usb 6-1: config 0 descriptor??
[  471.146286][T12770] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22
[  471.146422][T12770] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22
[  471.221018][ T5676] i2c i2c-1: ec100: i2c rd failed=-32 reg=33
[  471.270570][   T29] usb 4-1: unable to get BOS descriptor or descriptor too short
[  471.271100][   T29] usb 4-1: not running at top speed; connect to a high speed hub
[  471.271158][   T29] usb 4-1: New USB device found, idVendor=05ac, idProduct=2c1f, bcdDevice=94.a2
[  471.272292][   T29] usb 4-1: config 6 has an invalid interface number: 247 but max is 0
[  471.272314][   T29] usb 4-1: config 6 has no interface number 0
[  471.272365][   T29] usb 4-1: config 6 interface 247 has no altsetting 0
[  471.274456][   T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  471.274477][   T29] usb 4-1: Product: syz
[  471.274491][   T29] usb 4-1: Manufacturer: syz
[  471.274504][   T29] usb 4-1: SerialNumber: syz
[  471.349919][T12770] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22
[  471.350038][T12770] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22
[  471.490840][   T29] ipheth 4-1:6.247: Unable to find alternate settings interface
[  471.496327][   T29] usb 4-1: USB disconnect, device number 116
[  471.537838][T12775] FAULT_INJECTION: forcing a failure.
[  471.537838][T12775] name failslab, interval 1, probability 0, space 0, times 0
[  471.537873][T12775] CPU: 1 UID: 0 PID: 12775 Comm: syz.4.2166 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  471.537893][T12775] Tainted: [L]=SOFTLOCKUP
[  471.537900][T12775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  471.537911][T12775] Call Trace:
[  471.537919][T12775]  <TASK>
[  471.537927][T12775]  dump_stack_lvl+0xe8/0x150
[  471.537962][T12775]  should_fail_ex+0x410/0x560
[  471.537987][T12775]  should_failslab+0xa8/0x100
[  471.537999][T12775]  __kmalloc_noprof+0xf9/0x710
[  471.538014][T12775]  ? compat_i2cdev_ioctl+0x310/0x5c0
[  471.538122][T12775]  ? compat_i2cdev_ioctl+0x310/0x5c0
[  471.538138][T12775]  compat_i2cdev_ioctl+0x310/0x5c0
[  471.538153][T12775]  ? __pfx_compat_i2cdev_ioctl+0x10/0x10
[  471.538164][T12775]  ? __fget_files+0x2a/0x420
[  471.538176][T12775]  ? __fget_files+0x3a2/0x420
[  471.538190][T12775]  ? __fget_files+0x2a/0x420
[  471.538217][T12775]  ? bpf_lsm_file_ioctl_compat+0x9/0x20
[  471.538241][T12775]  __ia32_compat_sys_ioctl+0x5ea/0x950
[  471.538263][T12775]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  471.538280][T12775]  ? __fget_files+0x3a2/0x420
[  471.538302][T12775]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  471.538333][T12775]  ? lock_acquire+0x115/0x350
[  471.538368][T12775]  ? __might_fault+0xaf/0x130
[  471.538395][T12775]  __do_fast_syscall_32+0x28b/0x6c0
[  471.538427][T12775]  ? do_fast_syscall_32+0x33/0x70
[  471.538453][T12775]  ? asm_int80_emulation+0x1a/0x20
[  471.538471][T12775]  ? do_int80_emulation+0x299/0x500
[  471.538496][T12775]  ? trace_irq_disable+0x3b/0x140
[  471.538523][T12775]  do_fast_syscall_32+0x33/0x70
[  471.538550][T12775]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  471.538572][T12775] RIP: 0023:0xf746ef1c
[  471.538589][T12775] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  471.538604][T12775] RSP: 002b:00000000f546550c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  471.538624][T12775] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707
[  471.538636][T12775] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000
[  471.538648][T12775] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  471.538658][T12775] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  471.538669][T12775] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  471.538698][T12775]  </TASK>
[  471.796694][ T5691] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00
[  472.014864][T12770] fuse: Unknown parameter 'euid<00000000000000000000'
[  472.042012][T12777] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2174'.
[  472.042175][T12777] netlink: 'syz.6.2174': attribute type 1 has an invalid length.
[  472.042189][T12777] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2174'.
[  472.215038][T12778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  472.215489][T12778] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  472.273062][ T5691] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID
[  472.282954][ T5691] usb 6-1: USB disconnect, device number 99
[  472.463385][T12788] FAULT_INJECTION: forcing a failure.
[  472.463385][T12788] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  472.463419][T12788] CPU: 1 UID: 0 PID: 12788 Comm: syz.6.2178 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  472.463442][T12788] Tainted: [L]=SOFTLOCKUP
[  472.463446][T12788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  472.463453][T12788] Call Trace:
[  472.463457][T12788]  <TASK>
[  472.463463][T12788]  dump_stack_lvl+0xe8/0x150
[  472.463495][T12788]  should_fail_ex+0x410/0x560
[  472.463529][T12788]  _copy_from_user+0x2d/0xb0
[  472.463558][T12788]  kstrtouint_from_user+0xd6/0x180
[  472.463576][T12788]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  472.463599][T12788]  ? lock_acquire+0x115/0x350
[  472.463614][T12788]  proc_fail_nth_write+0x8e/0x210
[  472.463630][T12788]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  472.463658][T12788]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  472.463679][T12788]  vfs_write+0x296/0xba0
[  472.463714][T12788]  ? __pfx_vfs_write+0x10/0x10
[  472.463730][T12788]  ? __fget_files+0x2a/0x420
[  472.463742][T12788]  ? __fget_files+0x3a2/0x420
[  472.463754][T12788]  ? __fget_files+0x2a/0x420
[  472.463769][T12788]  ? fdget+0x1ac/0x250
[  472.463795][T12788]  ksys_write+0x150/0x270
[  472.463824][T12788]  ? __pfx_ksys_write+0x10/0x10
[  472.463855][T12788]  ? asm_int80_emulation+0x1a/0x20
[  472.463874][T12788]  do_int80_emulation+0x198/0x500
[  472.463889][T12788]  ? asm_int80_emulation+0x1a/0x20
[  472.463898][T12788]  ? clear_bhb_loop+0x70/0xc0
[  472.463908][T12788]  ? clear_bhb_loop+0x70/0xc0
[  472.463920][T12788]  asm_int80_emulation+0x1a/0x20
[  472.463934][T12788] RIP: 0023:0xf71477ab
[  472.463952][T12788] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  472.463967][T12788] RSP: 002b:00000000f53e54bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004
[  472.463986][T12788] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f53e55d0
[  472.463999][T12788] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[  472.464010][T12788] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  472.464019][T12788] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  472.464025][T12788] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  472.464041][T12788]  </TASK>
[  472.995836][T12793] netlink: 'syz.5.2180': attribute type 10 has an invalid length.
[  473.016840][T12793] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  473.020269][T12793] netdevsim netdevsim5 netdevsim1: entered promiscuous mode
[  473.021450][T12793] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  473.199015][T12801] blktrace: Concurrent blktraces are not allowed on nullb0
[  473.331501][T12803] program syz.3.2183 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  473.389582][ T5676] usb 5-1: USB disconnect, device number 100
[  473.501369][T12814] usb usb7: usbfs: process 12814 (syz.4.2187) did not claim interface 0 before use
[  473.749631][ T5691] usb 4-1: new full-speed USB device number 117 using dummy_hcd
[  473.760767][   T10] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92
[  473.761287][   T10] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  473.782139][   T10] usb 2-1: USB disconnect, device number 123
[  473.782438][ T5676] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[  473.810802][ T5676] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[  473.821363][ T5676] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  473.909835][ T5691] usb 4-1: unable to get BOS descriptor or descriptor too short
[  473.912029][ T5691] usb 4-1: not running at top speed; connect to a high speed hub
[  473.912060][ T5691] usb 4-1: New USB device found, idVendor=05ac, idProduct=2c1f, bcdDevice=94.a2
[  473.915648][ T5691] usb 4-1: config 6 has an invalid interface number: 247 but max is 0
[  473.915671][ T5691] usb 4-1: config 6 has no interface number 0
[  473.915700][ T5691] usb 4-1: config 6 interface 247 has no altsetting 0
[  473.929276][ T5691] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  473.929298][ T5691] usb 4-1: Product: syz
[  473.929311][ T5691] usb 4-1: Manufacturer: syz
[  473.929325][ T5691] usb 4-1: SerialNumber: syz
[  473.947661][T12822] __nla_validate_parse: 3 callbacks suppressed
[  473.947678][T12822] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2190'.
[  473.947691][T12822] netlink: 15 bytes leftover after parsing attributes in process `syz.5.2190'.
[  474.109623][T12828] netlink: 'syz.1.2191': attribute type 10 has an invalid length.
[  474.183358][ T5691] ipheth 4-1:6.247: Unable to find alternate settings interface
[  474.194582][ T5691] usb 4-1: USB disconnect, device number 117
[  474.258728][ T5698] usb 6-1: new high-speed USB device number 100 using dummy_hcd
[  474.260331][T12833] blktrace: Concurrent blktraces are not allowed on nullb0
[  474.260977][T12833] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2194'.
[  474.429264][ T5698] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  474.430552][ T5698] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  474.430579][ T5698] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  474.432568][ T5698] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  474.432582][ T5698] usb 6-1: Product: syz
[  474.432589][ T5698] usb 6-1: Manufacturer: syz
[  474.432596][ T5698] usb 6-1: SerialNumber: syz
[  474.435129][ T5698] usb 6-1: config 0 descriptor??
[  474.435935][T12824] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  474.436070][T12824] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  474.640029][T12822] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  474.640150][T12822] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  474.987896][T12854] fuse: Bad value for 'group_id'
[  474.987914][T12854] fuse: Bad value for 'group_id'
[  475.011561][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  475.032720][T12855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2201'.
[  475.043171][ T5698] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00
[  475.245652][T12822] fuse: Unknown parameter 'euid<00000000000000000000'
[  475.338823][   T29] usb 2-1: new high-speed USB device number 124 using dummy_hcd
[  475.363528][T12824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  475.369932][T12824] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  475.374194][T12862] FAULT_INJECTION: forcing a failure.
[  475.374194][T12862] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  475.374226][T12862] CPU: 1 UID: 0 PID: 12862 Comm: syz.4.2205 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  475.374250][T12862] Tainted: [L]=SOFTLOCKUP
[  475.374257][T12862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  475.374268][T12862] Call Trace:
[  475.374276][T12862]  <TASK>
[  475.374283][T12862]  dump_stack_lvl+0xe8/0x150
[  475.374315][T12862]  should_fail_ex+0x410/0x560
[  475.374348][T12862]  _copy_to_user+0x31/0xb0
[  475.374378][T12862]  __se_sys_mincore+0x670/0x830
[  475.374411][T12862]  __do_fast_syscall_32+0x28b/0x6c0
[  475.374447][T12862]  ? do_fast_syscall_32+0x33/0x70
[  475.374473][T12862]  ? asm_int80_emulation+0x1a/0x20
[  475.374490][T12862]  ? do_int80_emulation+0x299/0x500
[  475.374515][T12862]  ? trace_irq_disable+0x3b/0x140
[  475.374541][T12862]  do_fast_syscall_32+0x33/0x70
[  475.374568][T12862]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  475.374589][T12862] RIP: 0023:0xf746ef1c
[  475.374606][T12862] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  475.374620][T12862] RSP: 002b:00000000f548650c EFLAGS: 00000206 ORIG_RAX: 00000000000000da
[  475.374639][T12862] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000800000
[  475.374652][T12862] RDX: 0000000080019800 RSI: 0000000000000000 RDI: 0000000000000000
[  475.374664][T12862] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  475.374674][T12862] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  475.374685][T12862] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  475.374713][T12862]  </TASK>
[  475.398736][ T5691] usb 4-1: new high-speed USB device number 118 using dummy_hcd
[  475.459262][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  475.469818][ T5698] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID
[  475.486966][ T5698] usb 6-1: USB disconnect, device number 100
[  475.490436][   T29] usb 2-1: Using ep0 maxpacket: 16
[  475.491977][   T29] usb 2-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9
[  475.492010][   T29] usb 2-1: too many configurations: 60, using maximum allowed: 8
[  475.509294][   T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204
[  475.509317][   T29] usb 2-1: Product: syz
[  475.509330][   T29] usb 2-1: Manufacturer: syz
[  475.509343][   T29] usb 2-1: SerialNumber: syz
[  475.541578][   T29] usb 2-1: config 0 descriptor??
[  475.550326][ T5691] usb 4-1: Using ep0 maxpacket: 32
[  475.553847][ T5691] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  475.557115][   T29] pwc: Philips SPC 880NC USB webcam detected.
[  475.564278][ T5691] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  475.564300][ T5691] usb 4-1: Product: syz
[  475.564314][ T5691] usb 4-1: Manufacturer: syz
[  475.564346][ T5691] usb 4-1: SerialNumber: syz
[  475.573184][ T5691] usb 4-1: config 0 descriptor??
[  476.237461][ T5691] airspy 4-1:0.0: usb_control_msg() failed -71 request 0a
[  476.237485][ T5691] airspy 4-1:0.0: Could not detect board
[  476.237605][ T5691] airspy 4-1:0.0: probe with driver airspy failed with error -71
[  476.245114][ T5691] usb 4-1: USB disconnect, device number 118
[  476.728343][ T5691] usb 5-1: new full-speed USB device number 101 using dummy_hcd
[  476.883957][ T5691] usb 5-1: unable to get BOS descriptor or descriptor too short
[  476.884421][ T5691] usb 5-1: not running at top speed; connect to a high speed hub
[  476.884452][ T5691] usb 5-1: New USB device found, idVendor=05ac, idProduct=2c1f, bcdDevice=94.a2
[  476.885566][ T5691] usb 5-1: config 6 has an invalid interface number: 247 but max is 0
[  476.885588][ T5691] usb 5-1: config 6 has no interface number 0
[  476.885614][ T5691] usb 5-1: config 6 interface 247 has no altsetting 0
[  476.941055][ T5691] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  476.941078][ T5691] usb 5-1: Product: syz
[  476.941098][ T5691] usb 5-1: Manufacturer: syz
[  476.941112][ T5691] usb 5-1: SerialNumber: syz
[  477.064862][T12875] netlink: 'syz.3.2209': attribute type 11 has an invalid length.
[  477.064884][T12875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2209'.
[  477.171922][ T5691] ipheth 5-1:6.247: Unable to find alternate settings interface
[  477.186436][ T5691] usb 5-1: USB disconnect, device number 101
[  477.339162][   T10] usb 4-1: new high-speed USB device number 119 using dummy_hcd
[  477.492092][   T10] usb 4-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00
[  477.495326][   T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  477.495354][   T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  477.520571][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  477.520601][   T10] usb 4-1: Product: syz
[  477.520615][   T10] usb 4-1: Manufacturer: syz
[  477.572987][   T10] mos7840 4-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected
[  477.754670][T12885] netlink: 'syz.5.2212': attribute type 30 has an invalid length.
[  477.758728][    C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 4
[  477.797552][T12875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  477.807152][T12875] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  477.832640][   T10] mos7840 4-1:1.0: probe with driver mos7840 failed with error -71
[  477.860660][   T10] usb 4-1: USB disconnect, device number 119
[  477.934055][   T29] pwc: Warning: more than 1 configuration available.
[  477.936748][   T29] pwc: Failed to set LED on/off time (-71)
[  477.937320][   T29] pwc: send_video_command error -71
[  477.937334][   T29] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  477.937418][   T29] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71
[  477.981467][   T29] usb 2-1: USB disconnect, device number 124
[  477.997108][ T5631] udevd[5631]: setting owner of /dev/bus/usb/002/124 to uid=0, gid=0 failed: No such file or directory
[  478.111741][T12888] fuse: Bad value for 'group_id'
[  478.111761][T12888] fuse: Bad value for 'group_id'
[  478.325377][T12894] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2213'.
[  478.448453][   T10] usb 2-1: new high-speed USB device number 125 using dummy_hcd
[  478.578371][   T10] usb 2-1: device descriptor read/64, error -71
[  478.623299][T12897] netlink: 'syz.3.2216': attribute type 1 has an invalid length.
[  478.704447][T12897] bond5: entered promiscuous mode
[  478.705823][T12897] 8021q: adding VLAN 0 to HW filter on device bond5
[  478.828563][   T10] usb 2-1: new high-speed USB device number 126 using dummy_hcd
[  478.847499][T12897] bond5: (slave bridge4): making interface the new active one
[  478.847518][T12897] bridge4: entered promiscuous mode
[  478.857007][T12897] bond5: (slave bridge4): Enslaving as an active interface with an up link
[  478.948430][ T5676] usb 6-1: new full-speed USB device number 101 using dummy_hcd
[  478.958550][   T10] usb 2-1: device descriptor read/64, error -71
[  479.037606][T12908] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2220'.
[  479.068601][   T10] usb usb2-port1: attempt power cycle
[  479.098872][ T5676] usb 6-1: New USB device found, idVendor=a6eb, idProduct=7458, bcdDevice=2d.4d
[  479.100180][ T5676] usb 6-1: config 8 has an invalid interface number: 223 but max is 0
[  479.100194][ T5676] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  479.100204][ T5676] usb 6-1: config 8 has no interface number 0
[  479.100230][ T5676] usb 6-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64
[  479.100254][ T5676] usb 6-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  479.103626][ T5676] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  479.103648][ T5676] usb 6-1: Product: syz
[  479.103662][ T5676] usb 6-1: Manufacturer: syz
[  479.103675][ T5676] usb 6-1: SerialNumber: syz
[  479.460193][   T10] usb 2-1: new high-speed USB device number 127 using dummy_hcd
[  479.483952][   T10] usb 2-1: device descriptor read/8, error -71
[  479.602153][T12901] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  479.738420][   T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  479.760739][   T10] usb 2-1: device descriptor read/8, error -71
[  479.832255][T12901] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  479.868780][   T10] usb usb2-port1: unable to enumerate USB device
[  479.978152][T12901] bond0: (slave netdevsim1): Releasing backup interface
[  480.000341][T12901] netdevsim netdevsim5 netdevsim1 (unregistering): left promiscuous mode
[  480.001184][T12901] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  480.119077][T12901] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  480.604696][T12922] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  480.620427][T12922] syzkaller0: entered promiscuous mode
[  480.620444][T12922] syzkaller0: entered allmulticast mode
[  480.647965][T12922] netlink: 'syz.6.2225': attribute type 8 has an invalid length.
[  480.679044][   T29] usb 4-1: new full-speed USB device number 120 using dummy_hcd
[  480.703703][T12922] tipc: Resetting bearer <eth:syzkaller0>
[  480.726249][T12921] tipc: Resetting bearer <eth:syzkaller0>
[  480.802854][T12921] tipc: Disabling bearer <eth:syzkaller0>
[  480.833929][   T29] usb 4-1: unable to get BOS descriptor or descriptor too short
[  480.834436][   T29] usb 4-1: not running at top speed; connect to a high speed hub
[  480.834466][   T29] usb 4-1: New USB device found, idVendor=05ac, idProduct=2c1f, bcdDevice=94.a2
[  480.836538][   T29] usb 4-1: config 6 has an invalid interface number: 247 but max is 0
[  480.836561][   T29] usb 4-1: config 6 has no interface number 0
[  480.836587][   T29] usb 4-1: config 6 interface 247 has no altsetting 0
[  480.896513][   T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  480.896528][   T29] usb 4-1: Product: syz
[  480.896536][   T29] usb 4-1: Manufacturer: syz
[  480.896549][   T29] usb 4-1: SerialNumber: syz
[  481.009170][ T5676] usb 6-1: USB disconnect, device number 101
[  481.166267][   T29] ipheth 4-1:6.247: Unable to find alternate settings interface
[  481.180620][   T29] usb 4-1: USB disconnect, device number 120
[  481.471738][T12943] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2233'.
[  481.492524][T12943] FAULT_INJECTION: forcing a failure.
[  481.492524][T12943] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  481.492557][T12943] CPU: 1 UID: 0 PID: 12943 Comm: syz.1.2233 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  481.492582][T12943] Tainted: [L]=SOFTLOCKUP
[  481.492590][T12943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  481.492601][T12943] Call Trace:
[  481.492609][T12943]  <TASK>
[  481.492617][T12943]  dump_stack_lvl+0xe8/0x150
[  481.492650][T12943]  should_fail_ex+0x410/0x560
[  481.492683][T12943]  _copy_from_iter+0x1d3/0x1660
[  481.492710][T12943]  ? __alloc_skb+0x27a/0x7a0
[  481.492735][T12943]  ? __alloc_skb+0x27a/0x7a0
[  481.492760][T12943]  ? __alloc_skb+0x27a/0x7a0
[  481.492783][T12943]  ? __pfx__copy_from_iter+0x10/0x10
[  481.492805][T12943]  ? kmem_cache_alloc_node_noprof+0x1f4/0x600
[  481.492829][T12943]  ? __alloc_skb+0x27a/0x7a0
[  481.492851][T12943]  ? __alloc_skb+0x27a/0x7a0
[  481.492879][T12943]  ? netlink_sendmsg+0x64f/0xb20
[  481.492900][T12943]  ? skb_put+0x112/0x210
[  481.492928][T12943]  netlink_sendmsg+0x6bb/0xb20
[  481.492956][T12943]  ? __pfx_netlink_sendmsg+0x10/0x10
[  481.492982][T12943]  ? aa_sock_msg_perm+0x144/0x210
[  481.493013][T12943]  ? apparmor_socket_sendmsg+0x98/0x360
[  481.493038][T12943]  ? __pfx_netlink_sendmsg+0x10/0x10
[  481.493061][T12943]  sock_sendmsg_nosec+0x14e/0x190
[  481.493086][T12943]  ____sys_sendmsg+0x54e/0x850
[  481.493118][T12943]  ? __pfx_____sys_sendmsg+0x10/0x10
[  481.493167][T12943]  ___sys_sendmsg+0x2a5/0x360
[  481.493191][T12943]  ? __lock_acquire+0x747/0x2de0
[  481.493218][T12943]  ? __pfx____sys_sendmsg+0x10/0x10
[  481.493243][T12943]  ? get_pid_task+0x20/0x1f0
[  481.493262][T12943]  ? get_pid_task+0x20/0x1f0
[  481.493278][T12943]  ? get_pid_task+0x20/0x1f0
[  481.493327][T12943]  ? __fget_files+0x3a2/0x420
[  481.493350][T12943]  ? __fget_files+0x2a/0x420
[  481.493383][T12943]  __sys_sendmsg+0x177/0x240
[  481.493412][T12943]  ? __pfx___sys_sendmsg+0x10/0x10
[  481.493448][T12943]  ? __might_fault+0xaf/0x130
[  481.493473][T12943]  __do_fast_syscall_32+0x28b/0x6c0
[  481.493502][T12943]  ? do_fast_syscall_32+0x33/0x70
[  481.493528][T12943]  ? asm_int80_emulation+0x1a/0x20
[  481.493545][T12943]  ? do_int80_emulation+0x299/0x500
[  481.493571][T12943]  ? trace_irq_disable+0x3b/0x140
[  481.493598][T12943]  do_fast_syscall_32+0x33/0x70
[  481.493624][T12943]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  481.493646][T12943] RIP: 0023:0xf746ef1c
[  481.493663][T12943] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  481.493678][T12943] RSP: 002b:00000000f548650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  481.493698][T12943] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000800006c0
[  481.493711][T12943] RDX: 0000000004000050 RSI: 0000000000000000 RDI: 0000000000000000
[  481.493722][T12943] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  481.493733][T12943] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  481.493744][T12943] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  481.493773][T12943]  </TASK>
[  481.951204][T12947] FAULT_INJECTION: forcing a failure.
[  481.951204][T12947] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  481.951260][T12947] CPU: 1 UID: 0 PID: 12947 Comm: syz.3.2235 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  481.951285][T12947] Tainted: [L]=SOFTLOCKUP
[  481.951292][T12947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  481.951300][T12947] Call Trace:
[  481.951305][T12947]  <TASK>
[  481.951310][T12947]  dump_stack_lvl+0xe8/0x150
[  481.951331][T12947]  should_fail_ex+0x410/0x560
[  481.951350][T12947]  __kvm_read_guest_page+0x18d/0x240
[  481.951384][T12947]  kvm_fetch_guest_virt+0x10c/0x160
[  481.951398][T12947]  ? __pfx_kvm_fetch_guest_virt+0x10/0x10
[  481.951410][T12947]  __do_insn_fetch_bytes+0x53a/0x6c0
[  481.951428][T12947]  ? __pfx___do_insn_fetch_bytes+0x10/0x10
[  481.951444][T12947]  ? __pfx___up_read+0x10/0x10
[  481.951457][T12947]  ? x86_decode_insn+0x16fa/0x5af0
[  481.951473][T12947]  x86_decode_insn+0x374/0x5af0
[  481.951506][T12947]  ? __pfx_x86_decode_insn+0x10/0x10
[  481.951528][T12947]  ? __asan_memset+0x22/0x50
[  481.951543][T12947]  ? init_decode_cache+0xf3/0x160
[  481.951558][T12947]  ? init_emulate_ctxt+0x4c4/0x640
[  481.951574][T12947]  ? __pfx_init_emulate_ctxt+0x10/0x10
[  481.951593][T12947]  x86_emulate_instruction+0x323/0x1e70
[  481.951619][T12947]  ? __pfx_x86_emulate_instruction+0x10/0x10
[  481.951636][T12947]  ? vmx_handle_exit_irqoff+0x100/0xa00
[  481.951651][T12947]  ? trace_rcu_utilization+0x4a/0x1f0
[  481.951666][T12947]  ? __pfx_vmx_handle_exit_irqoff+0x10/0x10
[  481.951676][T12947]  ? rcu_note_context_switch+0x12a/0xe70
[  481.951692][T12947]  handle_ud+0x19e/0x590
[  481.951707][T12947]  ? __pfx_handle_ud+0x10/0x10
[  481.951726][T12947]  ? handle_exception_nmi+0x2aa/0x1260
[  481.951739][T12947]  ? lock_acquire+0x115/0x350
[  481.951750][T12947]  ? __pfx_handle_exception_nmi+0x10/0x10
[  481.951762][T12947]  vmx_handle_exit+0xfa4/0x16e0
[  481.951779][T12947]  vcpu_run+0x4ead/0x7aa0
[  481.951806][T12947]  ? vcpu_run+0x3616/0x7aa0
[  481.951836][T12947]  ? __pfx_vcpu_run+0x10/0x10
[  481.951846][T12947]  ? lock_acquire+0x115/0x350
[  481.951859][T12947]  ? fpu_swap_kvm_fpstate+0xbe/0x510
[  481.951878][T12947]  kvm_arch_vcpu_ioctl_run+0xe87/0x19c0
[  481.951892][T12947]  ? kvm_arch_vcpu_ioctl_run+0x1f8/0x19c0
[  481.951907][T12947]  kvm_vcpu_ioctl+0xa61/0xfd0
[  481.951923][T12947]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  481.951933][T12947]  ? do_vfs_ioctl+0x116f/0x1530
[  481.951945][T12947]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  481.951974][T12947]  kvm_vcpu_compat_ioctl+0x204/0x390
[  481.951986][T12947]  ? __fget_files+0x2a/0x420
[  481.952000][T12947]  ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10
[  481.952011][T12947]  ? __fget_files+0x2a/0x420
[  481.952023][T12947]  ? __fget_files+0x3a2/0x420
[  481.952034][T12947]  ? __fget_files+0x2a/0x420
[  481.952049][T12947]  ? bpf_lsm_file_ioctl_compat+0x9/0x20
[  481.952063][T12947]  __ia32_compat_sys_ioctl+0x5ea/0x950
[  481.952075][T12947]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  481.952084][T12947]  ? __fget_files+0x3a2/0x420
[  481.952096][T12947]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  481.952114][T12947]  ? lock_acquire+0x115/0x350
[  481.952138][T12947]  ? __might_fault+0xaf/0x130
[  481.952153][T12947]  __do_fast_syscall_32+0x28b/0x6c0
[  481.952167][T12947]  ? do_fast_syscall_32+0x33/0x70
[  481.952181][T12947]  ? asm_int80_emulation+0x1a/0x20
[  481.952191][T12947]  ? do_int80_emulation+0x299/0x500
[  481.952204][T12947]  ? trace_irq_disable+0x3b/0x140
[  481.952218][T12947]  do_fast_syscall_32+0x33/0x70
[  481.952233][T12947]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  481.952245][T12947] RIP: 0023:0xf748ef1c
[  481.952256][T12947] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  481.952264][T12947] RSP: 002b:00000000f54a650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  481.952276][T12947] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000000ae80
[  481.952283][T12947] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  481.952289][T12947] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  481.952295][T12947] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  481.952301][T12947] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  481.952318][T12947]  </TASK>
[  482.458765][T12954] netlink: 260 bytes leftover after parsing attributes in process `syz.5.2236'.
[  482.688624][  T991] usb 5-1: new high-speed USB device number 102 using dummy_hcd
[  482.844458][  T991] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[  482.845604][  T991] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  482.845651][  T991] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  482.845672][  T991] usb 5-1: config 2 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  482.845693][  T991] usb 5-1: config 2 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5
[  482.848019][  T991] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  482.848064][  T991] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  482.848084][  T991] usb 5-1: config 2 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  482.848106][  T991] usb 5-1: config 2 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5
[  482.873051][  T991] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  482.873074][  T991] usb 5-1: Product: syz
[  482.873087][  T991] usb 5-1: Manufacturer: syz
[  482.873100][  T991] usb 5-1: SerialNumber: syz
[  482.898087][  T991] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected
[  482.905126][  T991] ti_usb_3410_5052 5-1:2.0: missing endpoints
[  483.143422][  T991] usb 5-1: USB disconnect, device number 102
[  483.194829][T12975] input: syz0 as /devices/virtual/input/input52
[  483.198049][T12973] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2239'.
[  483.233704][T12973] vlan4: entered promiscuous mode
[  483.233723][T12973] macvlan0: entered promiscuous mode
[  483.254886][T12973] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžq
Ó†ØÈÌONEOUT'
[  483.777744][T12994] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2250'.
[  483.830476][ T5676] usb 6-1: new high-speed USB device number 102 using dummy_hcd
[  483.858618][ T5698] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  483.905783][T12999] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  483.906316][T12999] syzkaller0: entered promiscuous mode
[  483.906327][T12999] syzkaller0: entered allmulticast mode
[  483.917758][T12999] tipc: Resetting bearer <eth:syzkaller0>
[  483.927701][T12998] tipc: Resetting bearer <eth:syzkaller0>
[  483.950658][T12998] tipc: Disabling bearer <eth:syzkaller0>
[  484.000358][ T5676] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  484.001326][ T5676] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  484.005785][ T5676] usb 6-1: config 0 descriptor??
[  484.008987][ T5698] usb 2-1: Using ep0 maxpacket: 8
[  484.018034][ T5676] cp210x 6-1:0.0: cp210x converter detected
[  484.045362][ T5698] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00
[  484.046577][ T5698] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 123, changing to 10
[  484.046606][ T5698] usb 2-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  484.046629][ T5698] usb 2-1: config 0 interface 0 has no altsetting 0
[  484.046660][ T5698] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  484.051552][ T5698] usb 2-1: config 0 descriptor??
[  484.258124][T13003] misc userio: Invalid payload size
[  484.265559][T13003] misc userio: The device must be registered before sending interrupts
[  484.266119][T13003] misc userio: The device must be registered before sending interrupts
[  484.412856][ T5676] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32
[  484.431438][ T5676] usb 6-1: cp210x converter now attached to ttyUSB0
[  484.510289][ T5698] ryos 0003:1E7D:3138.0034: item fetching failed at offset 0/4
[  484.510713][ T5698] ryos 0003:1E7D:3138.0034: parse failed
[  484.510756][ T5698] ryos 0003:1E7D:3138.0034: probe with driver ryos failed with error -22
[  484.596772][T13015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2258'.
[  484.597595][T13015] netlink: 'syz.4.2258': attribute type 1 has an invalid length.
[  484.597612][T13015] netlink: 'syz.4.2258': attribute type 2 has an invalid length.
[  484.632867][ T5698] usb 6-1: USB disconnect, device number 102
[  484.635784][T13016] FAULT_INJECTION: forcing a failure.
[  484.635784][T13016] name failslab, interval 1, probability 0, space 0, times 0
[  484.635814][T13016] CPU: 1 UID: 0 PID: 13016 Comm: syz.3.2257 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  484.635840][T13016] Tainted: [L]=SOFTLOCKUP
[  484.635848][T13016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  484.635868][T13016] Call Trace:
[  484.635876][T13016]  <TASK>
[  484.635883][T13016]  dump_stack_lvl+0xe8/0x150
[  484.635917][T13016]  should_fail_ex+0x410/0x560
[  484.635951][T13016]  should_failslab+0xa8/0x100
[  484.635974][T13016]  __kmalloc_cache_noprof+0x9e/0x600
[  484.635999][T13016]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  484.636025][T13016]  ? __request_module+0x2d0/0x630
[  484.636049][T13016]  ? __request_module+0x2d0/0x630
[  484.636080][T13016]  __request_module+0x2d0/0x630
[  484.636108][T13016]  ? rtnl_link_ops_get+0x23/0x250
[  484.636136][T13016]  ? __pfx___request_module+0x10/0x10
[  484.636173][T13016]  ? rtnl_link_ops_get+0x23/0x250
[  484.636196][T13016]  ? rtnl_link_ops_get+0x23/0x250
[  484.636225][T13016]  ? rtnl_link_ops_get+0x215/0x250
[  484.636254][T13016]  rtnl_newlink+0x66c/0x1c30
[  484.636279][T13016]  ? __lock_acquire+0x680/0x2de0
[  484.636302][T13016]  ? kasan_save_track+0x4f/0x80
[  484.636326][T13016]  ? kasan_save_track+0x3e/0x80
[  484.636350][T13016]  ? kasan_save_free_info+0x40/0x50
[  484.636370][T13016]  ? __kasan_slab_free+0x5c/0x80
[  484.636387][T13016]  ? __pfx_rtnl_newlink+0x10/0x10
[  484.636409][T13016]  ? __netlink_deliver_tap+0x4f1/0x6e0
[  484.636428][T13016]  ? netlink_deliver_tap+0x19c/0x1b0
[  484.636446][T13016]  ? netlink_unicast+0x8c1/0xa80
[  484.636462][T13016]  ? netlink_sendmsg+0x7f0/0xb20
[  484.636481][T13016]  ? sock_sendmsg_nosec+0x14e/0x190
[  484.636498][T13016]  ? ____sys_sendmsg+0x54e/0x850
[  484.636520][T13016]  ? ___sys_sendmsg+0x2a5/0x360
[  484.636543][T13016]  ? __sys_sendmsg+0x177/0x240
[  484.636565][T13016]  ? __do_fast_syscall_32+0x28b/0x6c0
[  484.636590][T13016]  ? do_fast_syscall_32+0x33/0x70
[  484.636614][T13016]  ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  484.636669][T13016]  ? kasan_quarantine_put+0xbb/0x1f0
[  484.636694][T13016]  ? lockdep_hardirqs_on+0x7b/0x110
[  484.636722][T13016]  ? nlmon_xmit+0xb0/0x100
[  484.636828][T13016]  ? kmem_cache_free+0x182/0x650
[  484.636868][T13016]  ? __lock_acquire+0x747/0x2de0
[  484.636893][T13016]  ? __pfx_hook_capable+0x10/0x10
[  484.636974][T13016]  ? __dev_queue_xmit+0x29b/0x3920
[  484.636996][T13016]  ? __pfx_hook_capable+0x10/0x10
[  484.637018][T13016]  ? lockdep_hardirqs_on+0x7b/0x110
[  484.637067][T13016]  ? __pfx_rtnl_newlink+0x10/0x10
[  484.637090][T13016]  rtnetlink_rcv_msg+0x802/0xc00
[  484.637117][T13016]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  484.637141][T13016]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  484.637167][T13016]  ? __copy_skb_header+0xa3/0x4a0
[  484.637203][T13016]  netlink_rcv_skb+0x226/0x4a0
[  484.637224][T13016]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  484.637250][T13016]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  484.637283][T13016]  ? netlink_deliver_tap+0x2e/0x1b0
[  484.637302][T13016]  ? netlink_deliver_tap+0x2e/0x1b0
[  484.637327][T13016]  netlink_unicast+0x8ef/0xa80
[  484.637361][T13016]  netlink_sendmsg+0x7f0/0xb20
[  484.637388][T13016]  ? __pfx_netlink_sendmsg+0x10/0x10
[  484.637412][T13016]  ? aa_sock_msg_perm+0x144/0x210
[  484.637439][T13016]  ? apparmor_socket_sendmsg+0x18b/0x360
[  484.637463][T13016]  ? __pfx_netlink_sendmsg+0x10/0x10
[  484.637483][T13016]  sock_sendmsg_nosec+0x14e/0x190
[  484.637505][T13016]  ____sys_sendmsg+0x54e/0x850
[  484.637535][T13016]  ? __pfx_____sys_sendmsg+0x10/0x10
[  484.637576][T13016]  ___sys_sendmsg+0x2a5/0x360
[  484.637599][T13016]  ? __lock_acquire+0x747/0x2de0
[  484.637623][T13016]  ? __pfx____sys_sendmsg+0x10/0x10
[  484.637647][T13016]  ? get_pid_task+0x20/0x1f0
[  484.637665][T13016]  ? get_pid_task+0x20/0x1f0
[  484.637680][T13016]  ? get_pid_task+0x20/0x1f0
[  484.637727][T13016]  ? __fget_files+0x3a2/0x420
[  484.637749][T13016]  ? __fget_files+0x2a/0x420
[  484.637781][T13016]  __sys_sendmsg+0x177/0x240
[  484.637808][T13016]  ? __pfx___sys_sendmsg+0x10/0x10
[  484.637844][T13016]  ? __might_fault+0xaf/0x130
[  484.637877][T13016]  __do_fast_syscall_32+0x28b/0x6c0
[  484.637904][T13016]  ? do_fast_syscall_32+0x33/0x70
[  484.637928][T13016]  ? asm_int80_emulation+0x1a/0x20
[  484.637945][T13016]  ? do_int80_emulation+0x299/0x500
[  484.637970][T13016]  ? trace_irq_disable+0x3b/0x140
[  484.637996][T13016]  do_fast_syscall_32+0x33/0x70
[  484.638022][T13016]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  484.638042][T13016] RIP: 0023:0xf748ef1c
[  484.638059][T13016] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  484.638073][T13016] RSP: 002b:00000000f548550c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  484.638092][T13016] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200
[  484.638105][T13016] RDX: 0000000024044040 RSI: 0000000000000000 RDI: 0000000000000000
[  484.638116][T13016] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  484.638126][T13016] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  484.638137][T13016] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  484.638164][T13016]  </TASK>
[  484.674610][ T5698] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  484.675241][ T5698] cp210x 6-1:0.0: device disconnected
[  484.756621][T12985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  484.757036][T12985] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  484.761246][T13009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  484.766805][T13009] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  485.286959][T13032] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  485.287619][T13032] syzkaller0: entered promiscuous mode
[  485.287637][T13032] syzkaller0: entered allmulticast mode
[  485.295236][T13032] tipc: Resetting bearer <eth:syzkaller0>
[  485.310744][T13031] tipc: Resetting bearer <eth:syzkaller0>
[  485.394282][T13031] tipc: Disabling bearer <eth:syzkaller0>
[  485.396784][T13035] misc userio: Invalid payload size
[  485.397022][T13035] misc userio: The device must be registered before sending interrupts
[  485.397207][T13035] misc userio: The device must be registered before sending interrupts
[  485.727870][T13039] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2266'.
[  485.944560][   T53] Bluetooth: hci1: unexpected event for opcode 0x0005
[  486.359397][T13051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2269'.
[  486.473975][ T9754] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  486.474011][ T9754] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  486.614532][T13051] netlink: 'syz.4.2269': attribute type 1 has an invalid length.
[  486.614548][T13051] netlink: 'syz.4.2269': attribute type 2 has an invalid length.
[  486.757812][    C1] 
[  486.760174][    C1] =============================
[  486.765024][    C1] [ BUG: Invalid wait context ]
[  486.769961][    C1] syzkaller #0 Tainted: G             L      
[  486.776021][    C1] -----------------------------
[  486.780913][    C1] swapper/1/0 is trying to lock:
[  486.785845][    C1] ffff88802c5f5bb0 (&gpc->lock){....}-{3:3}, at: kvm_xen_set_evtchn_fast+0x1f4/0x9a0
[  486.795388][    C1] other info that might help us debug this:
[  486.801272][    C1] context-{2:2}
[  486.804726][    C1] locks held by swapper/1/0: 1, last CPU#1:
[  486.810683][    C1]  #0: ffff88802c5f6110 (&kvm->srcu){.?.+}-{0:0}, at: kvm_xen_set_evtchn_fast+0x1bc/0x9a0
[  486.820610][    C1] stack backtrace:
[  486.824307][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  486.834866][    C1] Tainted: [L]=SOFTLOCKUP
[  486.839163][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  486.849212][    C1] Call Trace:
[  486.852470][    C1]  <IRQ>
[  486.855305][    C1]  dump_stack_lvl+0xe8/0x150
[  486.859881][    C1]  __lock_acquire+0xf5b/0x2de0
[  486.864641][    C1]  ? __lock_acquire+0x747/0x2de0
[  486.869562][    C1]  lock_acquire+0x115/0x350
[  486.874041][    C1]  ? kvm_xen_set_evtchn_fast+0x1f4/0x9a0
[  486.879651][    C1]  ? xa_load+0x1db/0x210
[  486.883868][    C1]  _raw_read_lock_irqsave+0x48/0x60
[  486.889045][    C1]  ? kvm_xen_set_evtchn_fast+0x1f4/0x9a0
[  486.894656][    C1]  kvm_xen_set_evtchn_fast+0x1f4/0x9a0
[  486.900094][    C1]  ? kvm_xen_set_evtchn_fast+0x1bc/0x9a0
[  486.905708][    C1]  xen_timer_callback+0x109/0x220
[  486.910718][    C1]  ? __pfx_xen_timer_callback+0x10/0x10
[  486.916263][    C1]  __hrtimer_run_queues+0x371/0xa10
[  486.921459][    C1]  hrtimer_interrupt+0x4cd/0xaa0
[  486.926381][    C1]  __sysvec_apic_timer_interrupt+0x102/0x430
[  486.932337][    C1]  sysvec_apic_timer_interrupt+0xa1/0xc0
[  486.937950][    C1]  </IRQ>
[  486.940857][    C1]  <TASK>
[  486.943778][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  486.949750][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  486.955374][    C1] Code: 4b 7e 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 66 11 00 fb f4 <e9> fc 17 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[  486.974956][    C1] RSP: 0000:ffffc90000197e40 EFLAGS: 00000242
[  486.981000][    C1] RAX: 000000000087d449 RBX: ffffffff819c0410 RCX: 8000000000000001
[  486.988949][    C1] RDX: 0000000000000001 RSI: ffffffff8e491b41 RDI: ffffffff8c6e0980
[  486.996902][    C1] RBP: ffffc90000197f10 R08: ffff8880b8533d9b R09: 1ffff110170a67b3
[  487.004847][    C1] R10: dffffc0000000000 R11: ffffed10170a67b4 R12: 0000000000000000
[  487.012794][    C1] R13: 1ffff11003ed4000 R14: 1ffff92000032fd0 R15: dffffc0000000000
[  487.020746][    C1]  ? do_idle+0x2e0/0x540
[  487.024969][    C1]  default_idle+0x9/0x20
[  487.029187][    C1]  default_idle_call+0x72/0xb0
[  487.033928][    C1]  do_idle+0x2e0/0x540
[  487.037970][    C1]  ? __pfx_do_idle+0x10/0x10
[  487.042536][    C1]  cpu_startup_entry+0x43/0x60
[  487.047275][    C1]  start_secondary+0x101/0x110
[  487.052014][    C1]  common_startup_64+0x13e/0x157
[  487.056933][    C1]  </TASK>
[  487.063826][ T9754] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  487.063851][ T9754] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  487.172291][ T5625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  487.172800][ T5625] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  487.173055][ T5625] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  487.173616][ T5625] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  487.174033][ T5625] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  487.235419][ T5676] usb 2-1: USB disconnect, device number 3
[  487.436795][ T9754] bond0: (slave netdevsim1): Releasing backup interface
[  487.487668][ T9754] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  487.487700][ T9754] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  487.880063][ T9754] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode
[  487.880485][ T9754] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  487.880503][ T9754] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  487.983433][T13058] syz_tun (unregistering): left allmulticast mode
[  488.187429][ T9754] vlan0: left allmulticast mode
[  488.187525][ T9754] vlan0: left promiscuous mode
[  488.187762][ T9754] bridge0: port 4(vlan0) entered disabled state
[  488.207359][ T9754] batadv0: left allmulticast mode
[  488.207380][ T9754] batadv0: left promiscuous mode
[  488.207515][ T9754] bridge0: port 3(batadv0) entered disabled state
[  488.227973][ T9754] bridge_slave_1: left allmulticast mode
[  488.227993][ T9754] bridge_slave_1: left promiscuous mode
[  488.228124][ T9754] bridge0: port 2(bridge_slave_1) entered disabled state
[  488.253477][ T9754] bridge_slave_0: left allmulticast mode
[  488.253497][ T9754] bridge_slave_0: left promiscuous mode
[  488.253615][ T9754] bridge0: port 1(bridge_slave_0) entered disabled state
[  488.589667][ T9754] bond5 (unregistering): (slave bridge4): Releasing backup interface
[  488.589691][ T9754] bridge4 (unregistering): left promiscuous mode
[  488.614994][ T9754] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  488.627820][ T9754] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  488.636398][ T9754] bond0 (unregistering): Released all slaves
[  488.645013][ T9754] bond1 (unregistering): Released all slaves
[  488.662404][ T9754] bond2 (unregistering): Released all slaves
[  488.679998][ T9754] bond3 (unregistering): (slave veth3): Releasing active interface
[  488.681366][ T9754] bond3 (unregistering): (slave macvlan0): Releasing active interface
[  488.683934][ T9754] bond3 (unregistering): Released all slaves
[  488.717598][ T9754] bond4 (unregistering): Released all slaves
[  488.729092][ T9754] bond5 (unregistering): Released all slaves
[  488.786896][ T9754] ovs_dp0: left promiscuous mode
[  488.820023][ T5286] 8021q: adding VLAN 0 to HW filter on device eth9
[  488.888057][ T9754] tipc: Left network mode
[  489.032919][ T9754] hsr_slave_0: left promiscuous mode
[  489.033513][ T9754] hsr_slave_1: left promiscuous mode
[  489.034033][ T9754] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  489.034048][ T9754] batman_adv: batadv0: Removing interface: batadv_slave_1
[  489.037133][ T9754] veth0_vlan: left promiscuous mode
[  489.204780][ T9754] team0 (unregistering): Port device team_slave_1 removed
[  489.207861][ T9754] team0 (unregistering): Port device team_slave_0 removed
[  489.259281][ T5286] 8021q: adding VLAN 0 to HW filter on device eth10
[  489.457982][ T9754] IPVS: stop unused estimator thread 0...
[  489.536561][ T5286] 8021q: adding VLAN 0 to HW filter on device eth11
[  489.555825][ T9754] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  489.620514][ T9754] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  489.692169][ T9754] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  489.764723][ T9754] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  489.792076][ T5286] 8021q: adding VLAN 0 to HW filter on device eth12
[  489.864675][ T9754] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  489.904915][ T9754] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  489.961425][ T9754] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  490.004000][ T9754] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  490.124697][ T9754] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  490.145745][ T5286] 8021q: adding VLAN 0 to HW filter on device eth13
[  490.167242][ T9754] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  490.234979][ T9754] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  490.265115][ T9754] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  490.347921][ T9754] bridge_slave_1: left allmulticast mode
[  490.347945][ T9754] bridge_slave_1: left promiscuous mode
[  490.348086][ T9754] bridge0: port 2(bridge_slave_1) entered disabled state
[  490.364025][ T9754] bridge_slave_0: left allmulticast mode
[  490.364042][ T9754] bridge_slave_0: left promiscuous mode
[  490.364175][ T9754] bridge0: port 1(bridge_slave_0) entered disabled state
[  490.390817][ T9754] bridge_slave_1: left promiscuous mode
[  490.390942][ T9754] bridge0: port 2(bridge_slave_1) entered disabled state
[  490.405381][ T9754] bridge_slave_0: left allmulticast mode
[  490.405399][ T9754] bridge_slave_0: left promiscuous mode
[  490.405515][ T9754] bridge0: port 1(bridge_slave_0) entered disabled state
[  490.427382][ T9754] bridge_slave_1: left promiscuous mode
[  490.427507][ T9754] bridge0: port 2(bridge_slave_1) entered disabled state
[  490.450378][ T9754] bridge_slave_0: left promiscuous mode
[  490.450499][ T9754] bridge0: port 1(bridge_slave_0) entered disabled state
[  490.470302][ T9754] batadv0: left promiscuous mode
[  490.470418][ T9754] bridge0: port 3(batadv0) entered disabled state
[  490.477959][ T9754] bridge_slave_1: left promiscuous mode
[  490.478076][ T9754] bridge0: port 2(bridge_slave_1) entered disabled state
[  490.483678][ T9754] bridge_slave_0: left allmulticast mode
[  490.483695][ T9754] bridge_slave_0: left promiscuous mode
[  490.483811][ T9754] bridge0: port 1(bridge_slave_0) entered disabled state
[  490.523295][ T9754] bond_slave_0: left promiscuous mode
[  490.523384][ T9754] bond_slave_1: left promiscuous mode
[  490.523466][ T9754] batadv0: left promiscuous mode
[  490.676752][ T9754] bond1 (unregistering): (slave geneve2): Releasing active interface
[  490.676769][ T9754] geneve2 (unregistering): left allmulticast mode
[  490.693498][ T9754] bond0 (unregistering): (slave geneve1): Releasing backup interface
[  490.698142][ T9754] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  490.716750][ T9754] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  490.727560][ T9754] bond0 (unregistering): Released all slaves
[  490.734626][ T9754] bond1 (unregistering): left allmulticast mode
[  490.753918][ T9754] bond1 (unregistering): Released all slaves
[  490.756985][ T9754] team0: Port device bond2 removed
[  490.757290][ T9754] bond2 (unregistering): Released all slaves
[  490.798114][ T9754] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  490.809630][ T9754] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  490.810294][ T9754] bond0 (unregistering): Released all slaves
[  490.953803][ T9754] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  490.954826][ T9754] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  490.955813][ T9754] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  490.956831][ T9754] bond0 (unregistering): Released all slaves
[  490.961949][ T9754] bond1 (unregistering): Released all slaves
[  490.966965][ T9754] bond2 (unregistering): Released all slaves
[  490.972115][ T9754] bond3 (unregistering): Released all slaves
[  490.977039][ T9754] bond4 (unregistering): Released all slaves
[  490.982457][ T9754] bond5 (unregistering): Released all slaves
[  490.987412][ T9754] bond6 (unregistering): Released all slaves
[  490.993082][ T9754] bond7 (unregistering): Released all slaves
[  490.997992][ T9754] bond8 (unregistering): Released all slaves
[  491.117024][ T9754] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  491.117344][ T9754] bond_slave_0: left promiscuous mode
[  491.127243][ T9754] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  491.130227][ T9754] bond_slave_1: left promiscuous mode
[  491.130900][ T9754] bond0 (unregistering): Released all slaves
[  491.142267][ T9754] bond1 (unregistering): (slave veth3): Releasing backup interface
[  491.143134][ T9754] bond1 (unregistering): Released all slaves
[  491.149819][ T9754] bond3 (unregistering): Released all slaves
[  491.154806][ T9754] bond2 (unregistering): Released all slaves
[  491.183720][ T5286] 8021q: adding VLAN 0 to HW filter on device eth14
[  491.335707][ T9754] tipc: Left network mode
[  491.335937][ T9754] tipc: Disabling bearer <udp:syz0>
[  491.336006][ T9754] tipc: Left network mode
[  491.336304][ T9754] tipc: Disabling bearer <udp:syz0>
[  491.336368][ T9754] tipc: Left network mode
[  491.336679][ T9754] tipc: Disabling bearer <udp:syz0>
[  491.336738][ T9754] tipc: Left network mode
[  491.368128][ T9754] IPVS: stopping backup sync thread 5964 ...
[  491.575781][ T5286] 8021q: adding VLAN 0 to HW filter on device eth15
[  491.886768][ T5286] 8021q: adding VLAN 0 to HW filter on device eth16
[  492.135201][ T5286] 8021q: adding VLAN 0 to HW filter on device eth17
[  492.177946][ T9754] hsr_slave_0: left promiscuous mode
[  492.184362][ T9754] hsr_slave_1: left promiscuous mode
[  492.184844][ T9754] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  492.184861][ T9754] batman_adv: batadv0: Removing interface: batadv_slave_1
[  492.190448][ T9754] batman_adv: batadv0: Interface deactivated: dummy0
[  492.190463][ T9754] batman_adv: batadv0: Removing interface: dummy0
[  492.206262][ T9754] hsr_slave_0: left promiscuous mode
[  492.212980][ T9754] hsr_slave_1: left promiscuous mode
[  492.213508][ T9754] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  492.213524][ T9754] batman_adv: batadv0: Removing interface: batadv_slave_0
[  492.219825][ T9754] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  492.219841][ T9754] batman_adv: batadv0: Removing interface: batadv_slave_1
[  492.260819][ T9754] hsr_slave_0: left promiscuous mode
[  492.261268][ T9754] hsr_slave_1: left promiscuous mode
[  492.261739][ T9754] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  492.261754][ T9754] batman_adv: batadv0: Removing interface: batadv_slave_1
[  492.263700][ T9754] hsr_slave_0: left promiscuous mode
[  492.264104][ T9754] hsr_slave_1: left promiscuous mode
[  492.264616][ T9754] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  492.264639][ T9754] batman_adv: batadv0: Removing interface: batadv_slave_1
[  492.287089][ T9754] veth1_macvtap: left promiscuous mode
[  492.287116][ T9754] veth0_macvtap: left promiscuous mode
[  492.287201][ T9754] veth1_vlan: left promiscuous mode
[  492.287242][ T9754] veth0_vlan: left promiscuous mode
[  492.304900][ T9754] veth1_macvtap: left promiscuous mode
[  492.304924][ T9754] veth0_macvtap: left promiscuous mode
[  492.305011][ T9754] veth1_vlan: left promiscuous mode
[  492.305077][ T9754] veth0_vlan: left promiscuous mode
[  492.325204][ T9754] veth1_macvtap: left promiscuous mode
[  492.325230][ T9754] veth0_macvtap: left promiscuous mode
[  492.325299][ T9754] veth1_vlan: left promiscuous mode
[  492.325340][ T9754] veth0_vlan: left promiscuous mode
[  492.347227][ T9754] veth1_vlan: left promiscuous mode
[  492.347272][ T9754] veth0_vlan: left promiscuous mode
[  492.637342][ T9754] team0 (unregistering): Port device team_slave_1 removed
[  492.645662][ T9754] team0 (unregistering): Port device team_slave_0 removed
[  492.740459][ T9754] team0 (unregistering): Port device team_slave_1 removed
[  492.743146][ T9754] team0 (unregistering): Port device team_slave_0 removed
[  492.855478][ T9754] team0 (unregistering): Port device team_slave_1 removed
[  492.858148][ T9754] team0 (unregistering): Port device team_slave_0 removed
[  492.911949][ T9754] dummy0 (unregistering): left allmulticast mode
[  492.912330][ T9754] team0 (unregistering): Port device dummy0 removed
[  492.956715][ T9754] team0 (unregistering): Port device veth1_to_hsr removed
[  492.966962][ T9754] team0 (unregistering): Port device team_slave_1 removed
[  492.975938][ T9754] team0 (unregistering): Port device team_slave_0 removed
[  493.027710][ T5286] 8021q: adding VLAN 0 to HW filter on device eth18
[  493.340985][ T5286] 8021q: adding VLAN 0 to HW filter on device eth19
[  493.650620][ T5286] 8021q: adding VLAN 0 to HW filter on device eth20
[  493.846685][ T5286] 8021q: adding VLAN 0 to HW filter on device eth21
[  493.870547][ T9754] IPVS: stop unused estimator thread 0...
[  493.871062][ T9754] IPVS: stop unused estimator thread 0...
[  494.136318][ T5286] 8021q: adding VLAN 0 to HW filter on device eth22
[  494.328065][ T5286] 8021q: adding VLAN 0 to HW filter on device eth23
[  494.511682][ T5286] 8021q: adding VLAN 0 to HW filter on device eth24