last executing test programs: 2m0.549844858s ago: executing program 4 (id=5744): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000180)={0xa, 0x4e24, 0x3fe, @remote, 0x6}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000001c0)='[', 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e20, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='_', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@sack_info={0x0, 0x7, 0x5}, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x80}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d2, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x3}, @in6=@private1={0xfc, 0x1, '\x00', 0x3}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x80}, {@in6=@private1={0xfc, 0x1, '\x00', 0x3}, 0x4d2, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x3}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) 2m0.216253535s ago: executing program 4 (id=5746): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000100)="aabbcc", 0x3}], 0x1, 0x0, 0x0, 0x34000}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000001c0)="aabbcc", 0x3}], 0x1}}], 0x2, 0x0) 2m0.064572914s ago: executing program 4 (id=5748): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x440322, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006380)="7f5912d07634539c3b2e15a57b311187a3eb119eb4b279cacf0b94d44882da90bb8c7bf605806fd007bddf798e1fed05db9ef39d3dff16e6eb4e5e642774588b2020a414a4574d1e0aa3474184583a655385fb5e7e632304e818af022a134095ea51f1f77a9472dabe407b36f0c47e318bfdd7c6ecb5a5bc07f28701201245abe626ab4592fac5b1544570a665a5e559eecf9505a828f5b0199a5dc33934b75bebb03744f92918f93553eb072cd2a940a5931a5907f82fc99d519f02287cac4341c4637dd8110214e9634088fc6b5a77a5065c4798538f41b263c6329df4d668d018f7ac9634910969342c836d78c7baa9893cef90deb8cbaa8cac81c262016a8dac72fa5c3d5094a8b64abbf82594b8cb1dc876e01a39fc9a26874052c47ec3ed015bc85933a98a61bbc108292a6c7932421162c82ec64518ce13f0fda30adf97b5c0d70fb0c69398e78d9dabe99d3d408bfef6e2518c820217b4a1cee43704fa5b5c4d4013bb61f631b813b8272188d403821fafe0ee4b5e09671c177e34a2566939920fcda640007845e4d19e2ce3693cea27e7ec2482ee603589260503c567e3dd320923e651d2530afe927013724b1ccc22c390c9e53a47331789172fb44c442cf558f9990badcbf377b731aa3cbe587e13c5715ef16c9b96b59e0a6e262da754b1bba316a31fc262561d4628e33de9969794b879eb7ceee36abb30f5f977198bed19fbc4c4f13f32a3909fa76a3beef541a5dfff9ff8609fbfaba986e3a02b23dc0938e7e5b476f5b256a3e3333caea34de6410f75d1daedf4176f6e5a9fb915647bb65302b49895cfb699131513e1d7d937f8e452fe350a78783de31c96535c742b35edc7b117bc2fd2df6cdbef0cfa1000bade8a6c8a06019592b7dc144ffa88a01fb1f6093e82f63b05830f414a07779226b4928f5edc6d592a294c030d518f7e350b2e2536a2bae2616a574b63415c952c28cf6a82553411d305fdc33d1447b7356b8726b67d23dc0749bbb1230b18abfdb6a0fd35cc1489fcdd90aa83edcc613a77db36dd42fc5b83635df5c2acfddab054303e7c859c8bd5a21493742d8fc1adb1ae3f68f6103d65709a8d917292e648c5621691425a203de2e82e9e6bcd53a7f3e90238e89b2b05202ceafc72bb2f997a99487aa993a72d0cb44b345b3982784a78aafe5e5b6ddf2a17e4dca9a5433481fd8e60195832b704a1c186dc3317888c8c0849f1029d0df6af3a5fc93c8e643287ee38580ff450a259dc4bd45343aa453f462e92302c020ce91f26b1c2b66764cac41d2e809a46e51ac50121172759ba4c791cfc8856f7676ad8020433e00bb80e46d9d7709e196565b3a7b18270508d1e0023960e5b335bd901465dc328a581ca918dd295a110aa9f25ebb51ae5523eb619431a9db2b6e046cd94aae4b985bd663c6c6769015f49cb40d3f4b520c1022683487b170c9e47ed306097f1208a92ecf6727f7f276d19bcdfb987ca8b7f54732d0908f98ccac0ba9f6905e194da99608598ee87a6992c4dd33fad2e5e463c995babd0c7dad010499ee2cbf0f2fb63c7678d681a8b63d8a1316fcac3a107f8723dc004aaf7d9224090b6c78212172884eda7089cac24f196db5d3bd2747649e6fee4ebafb3d883df077f99bb945220161a3323aaa09a5caba3348a2d78096a18625aece41aad5cf9fc9cdb590f0cabb882839474c53a14fdbd34772f69cdd369260309a9500af55572adb7b23d4fdbfaa807242ba1130f7029fbcffde2da9b8a0814840e9b241febe92d6247419ae4cd15f5b073c7dc03e4541e24291ac5b4e29cde2649ca6cb7952e81308ae249906ca9d97d8ceb129b0b2b44a84e7f8b12b8a373965b877028cae0ead133c8422052a8f91d92f6695b6a3e9c36661c0cb6d03dc795490b09f62210803d88dfb3777b16e1485c9c7ce4a4becc718c9da4aaa32f5d9da57ffbfe6633a302b10c676a0e047f1b24e8dac251dffc841a2906002abdd64334a2cc50db924e196b6cee0f9261a87793dcbf8dcf1363b91b33dfcbca15798e9089cab241884ddacd61fa07f8797cb21f9c1f4f1d7fd8d0f2e19b99b40173853282bbe94e5c867006949b55c1a27e12fef9f264d2a14700fb5c828e21293b38502dadfd2e96dbbe866547a460a737951e55803fe5ed0b448aa1fbe65de9117d066b2f46dbe658510434d2d3fabc734fc5632fd16a3ddf04a0da7067908f3fe7d9c046ec9d528808d0f4a755a4467609386b31104db69605b78507f83995c297d049d6b028ffe981f0ecd972f23ca43096a955d437f604355e49e1d9fac491f955fae46a150555bd91173091a016aeddc51399b8dd20bb6e8e3060da97180d79a8eea89562bbe4dd19f5c36686c3ab5de9cdce1a241b407c78b2a8886b3e316f5163ec082bb1de53ac1797a633587d9319f3626ce3b052107cd55a6c44b97e27aaf9bf5fe0d4475ae2090920865b0a0f32567351c4ac9859e57cdd8254a58d2dc5d67dd16b513a02954d7c99a9544ce5d8ea8a59a06321083690cf6007bb941cafccb17a3b81c96453964cb469e07e854388bbd2073cf9fdc51c9fcf58854417f49141efb66b0f98b36b89eccfb616992286ebaa8f325eb9ca85a45d8b1dfa7a18dd46516ad40d2f46365fac4cbb044624139bb5a0bb0ed062edfa0260ea03b9268f18a7d94d83d4411ee46896ef955aada3e31d29e83414ac0a64353b6498c8f1ef37d051b38291369f6f124913d3fef14af925ab93a34d58f569f3c4f12aa458c85b2b29249e4c868e0bce4791c7f7226bf050c23ad590f6231315f1c9a087b3041ce33f6971c4d5a20f85bb103edd586184e90a34dd5c9e3eb1fea74fe413c503c5d48c70e3fc1d210985644cedc30d01a7ca8fd1ae22e3dd6fa39dcbe1ee3def6a3097c8d9836db3b9ce1bcff91451bc46ef3000b5dc66b007ff2ace898a81631c5728c9de7710c41691332a268b18f0eec37ed7944ad0049936e9fe4df157a8eb324ef0d9954ee8da259c700b05bea37e4238c7be1ead4ca18ef228a15d9828476e899b77821f27512ad3ca27e2bdc769890e6addc2bc1ade2a5434421d627d978b72ce2fab1ee5769646881a2ecea9743ec88b48442806e946c27213bd7fe137d3979dcf477eee9ebec8fbe72fd9b6123c0523e83045dc88ef385d961cb4b48320e16350846ebb36accdcfe95cf541347dbdd7817e3e7d91b71a1dcb23ba7156484f90f789ba880b8019cb6a248f3db56e5cf7af156c6e84f58e8ffdc322b76dcd1b4ca02cb6fdd1d210807c34febac4c49ddb8257aa18ad782efca3406f34c6500fb65cbfec98077b50ef7a21e366e0fad97c6f6ca5d69b93639f7c608dae3e6b5c282ce130a8ef23908a626ef98e38bb9255ab6db1fdb48ca0d8f2d469123acbf6a1a83ca4f08d21bbf638ffe553fb4faa83993d9fbff7a9af18e21c74ffb720f41e02912d4507aee16acd64a34d2727bed087fa30c34202b34003330c15fbde12d5ba8e7a88b23501c6b837d01b97d78ea66e323579f0ffa9cbb40ebef25deb8a88f82a4e29441fdfcdb743bf98d1ac091677fd8fd3f172116697db4b2d1186303f68b71eae90dbcbee1cbd6eb49702dbf2de4f7f247bd071446fc2edeb68df92fb4436a3773ccc865587202f13083008f1dd964fc912c29bb0072f381b9d042d0fa058faba9d68886cd9fba2f41dd084ed13fbfe9e97afca35024025a83a6c6bbd798c8dae5bffdf486e88b6c32357b20b4b0fbea04c8cef7178a05d64bfcf836cd919216accd05b99ed4390b0016accac7e0fedacefb7ef4580ba6202aa241989fba902b5502bd4d6a3fb0c62c236f78969d395c67cf1ad2f5c250d8f8076189766d6e20ae9de72be45c2d68b5733a6d1f467db1b16a55da3245160188a217306298e5a86a4c4cad1ae72d6287c6b56684ab4452d54995322eb19c15724447b39c196e2056937fb2b956684c06bda117908000000f4524ddfab9c9fa5872f9fab3a5c3e1de343cb59744978ff286e037b2b8a122c6774291d713cd5b233ea9359764c528676e092840cfd716d995bdbae8dded68c71b8865490946df93c6c617b77ce830a1fb17b3459917ddb1797641ad2e5fa12a4ea8fdd0c914024913ea45237010d8f725c0d6ca6775a22285dab06c48432cee3faccfeda5c7756001121286c6ba8f52740a76a66632142fd84a088f5a0809d49b4cb513630a94acd1f5f246a997c85e90c7b0f9e55b3454a13cbc30518d3979789b76492afd411574ed54f0e9858693dd29b96a20aa55c6835a40c44c84d523054dcaded22718e48708958f977f94cdb360421878f67e97fe2140233f15924071c78fe5ea27b7f9e7eb0cc08fe19703df61906177cb8377c16d50ede70d62f1d8c0f8068323cd5eab2f6fba57ab3574c4742e06031d5a75f3d000b56051f43f987472a5f582a83f4c99a4366ac8c66673da6a312fe4804fb185f3fcbf6f3ffda91f5ebf6467ce6baa992a850765d37de2b3f16fd3ca44854993082e987ca1f520e0c149cdf92f727566c4c5ebe3ecf376c67a5fa7d51942784ff35236a0940a5f275a9ab8c0c5caf68421a14834edc9c29fd3adaedf4cca2802aaa33283ac811d97ef4affbba7315ce7fa5dd2783a067f223a4a8235fd67c23fa535efb4547202d171b51050d508081be9fb6467ea00f00000000000034c440f9f22c8f3d763d89666046951fe85f977a7ad816fc42037adbbec0352ed2b3454fa433e31a30159b9a3d5777944258f01dfe9d38f67af3e85dbdf23e5bb841401b40afeaa708f0a06a2efa2289f9ebda77c2a1390b887bf4b3dd90e418955d05431fd524b481b8b51c523fb1a3d0339bc3999c0a14d643a6ea69346f46a554bd25be3263a3c5ac0848b152d3eed833e7f2a6ce3b0d4100e49319120d4c2b520205fa2a344ab087bec0f73968768d0188007603a77428f12026cf3b296823f3138315ff0f95f3c62c060acb1a11850b46d361ab41b7ad241e45246b091ee2d0c1d444290ff6669a34f1fd0020795fe89d4b67bf07f16c88c8987e7f72480ad42109b43f37e4c753495661b0514553532364638ca8152782b99804b6f9da69fb2b5b7f93acad94ccbadf6e6d9547852088945d3d8c4c5702b1323c47fdd4fc77fcfd61c7ea8b26cfd0954be063cca429cb9915b8a937833ff4c1f2bd620b08dc00ddaab4fa5e13a5f4f2127f0b63b7140dd14b1dee95f178d2bc33cef7e820e609aaa20a733931625227529c714530574bb8cb38e6baef0cefe9a9e3277a4e1534f249abed7f06c8470ff3723c9140f5ed466ba7b79ab2ed2e616d72a560c8cc6cf6a64fb9e70b1d15b80f22cd86bbd38b5c46741e054204476f63651f3cc9bce975600abb3133e104fe0145383d0d320367df2dd202daeb7b51b4a1e4e7d36fd1c847965efd71430b8bcef773163b1e378e1381f05083304ea41ee8d37ecd988cc671270101ad4800706cf0387bd038a7164d1586ef5e8791cd6bc3a91bdcf35982d46d841acc8342544d557d369cb4a84589082bf9503d45659791e522bec6a5f61f740ca5540787dc4a6a9f567bb6c0b13d618e80b2b348adde16fc63b2052f381eab8c120f14ab623a4110030847db00ed2d19c0101991f82a8671738b68b6e0efaa8f771de3cb6c2165298df69383b775fafb7c249fd78ad2ee46390c1b905b3853680a80a1849952a10e69fa64d680cdeaf5a451408c5b5d64e0f244ee362f21f37c66b795d73647964d12e297f7f6b760ee4e4b46ef502a54483d3838674e1767eb93f91454f1dfb629e45ed71646f139b685cdac6c73afc20bf62b3b2dcd81d9adf65b4f485f2a2a2fa7e079d944739546462519521e523db10cbff9489d7ce84a78ed5fa80b2d5361f4829bfa4bef5c351c984cf58a5f227687eadceb8c0cdc51825a008f8bb8ebb549864b6fba1da22da5aa0a0161464695fad60e636e45091b6dee20498f33ff9f91c1ef927c90215cbf4f5711805eb13e0e65cf326627bcfdaf0bf07d5e9c53520b884411ed632f9f5169db46d674fd660637ab8ee1ca1aefee8ea4ab3b41e6fc18842a0a254db125243e4e996db939aab80b04d70fb22f3c1cf7edb1d18cb5af99be7dd4f01e2ee265109abc51845dcb3f5c8e8477fd7fa8fe41bd83809120428ea9dfef010005964d66ef96c1648516f1b0cacebd95ab20c2a2e2647c967c48c6c9b7977441a0dfeffba2beaec54a66f863c9ef3a4e2fc77928291753648b7abf3fc26128cb4eea246468b05cac113b3464546442e14d5aa760a3d7c481d238b2a5226bfe0dfd2dd5b2a9a5ad738c6a83e21312e0e11ea3daedaa7a6e527ec166337d24b083ccf97af580edb453dc1a7b841b7266ea143b294291ac5ed5dce7dac20d14bb6e53b64eec515515ef817611d22d3a306170d4f358f0b890411454e1bdf85ccc42589ba1a1d75289523e4aae1eb46328d0dac43539eab1d3aeca3db300e605c53cccf04d3688e5db58fe283b01745dc39baea5ff49db07deb7adeac2d3df45fa72f9fccc9d1947556fd8594faa393a2854691016eeea88e96272ee1156874b9ba78a4f71022e020000006f8db400e6b967be079684d3d80645125c488f5bc0a69a3d7e12bf187a41a8acc9b2f7a610798fb6e2e438b85a9012d6f6990c7b9a557b98d32753cc1786868dc864edd3f0edd8bbf48924fd09d0d7a2334bfcbb5786752765c8f33fc8cdab048b81607b1ba098ce44e6d99d8b1b08b5d19d177f6661c32031d475381c0c804c63d2b7ae9a2198c0d6114e7bdd0e01a4cbfc5c41e858d28f157efe5a52ffd6d70f2bef2066a2d65ec68ac1ea678588f1cf0c9eb030f34a2d99138c4a6a0f85edd8a382324c2c823a7bfc3db3e6822faa0ab1801361c1f23aff0fdb8fb27cdc1db4226d62c0101561e78b704854893c6bf0de79b45f87da7a8e4f65875842230d2bfa152e96fecbe4a7465fb400cb7790102d0a89f105e84a23173141245d641051b8d614d3be26423bc0d042990c62ea3b7392e7a8117e250348d3cf79be1529c8a764da382f019b5a750ab848ad03cf53921c8548318db7aaef2be3acce1a3d9a9715ebf6a5b53da18ef20b932d5926c3cb44c1a4e6ef83f2a84f8afa382d44ea35f17bc147ae1dc792784cfd9edeb9fe09f422000000000000007f29509a6b27ad0f6e21c977756a022979c8a47d983d42a913d0ea6ecfd8bc0aaf9fba62a36d542710161a088656dca539a940ec6dc79ab197eebb803988674d93c8d604a5bcdcdeba44c331c72e58ff9320f39031fe711bca2e0269b1028862c2d2a6c8871a0f92dddd30629eafc739165a070c61c12be11bf3d3cabb31decf449059c99fcc12a1684d8cb48e496df33920dc0a4fd225981c0f45b7220fd9d9189808e4bb39e5accc10fd7a8f3cf1335cb9dc31043a1e2eaf75e0ba500d5ca4497b2924725c0892033eb0ef944e2fc204e9f1e177862af3d59190e2335061a76d4d3bd922d9bb72553a339dd1672b61a91a0d0e23ddf6b08bd13cdf82451b5e8fd3842ba71eebdde40f8563124fba86c3c500f2ceb7246967f497f1dd3e5e42f14774a909199dbec4a169b8b3b6b25a95caa86f334084d38d71d93a395acb14c145298c503f7f494bb9867c564ad7e32aa1ca7bcfa2181dc712165247462db25192f7cba05cee92826c0561303bc473c9485a989793b8bfc2d0285dfbb13c11a426dff4e404435e2e47760d45b76f91b6c7bf04d4504c2502293fc7b49d24fda5b5fcfabf714087582d25a69ead80222da1d574d599b39a0c54ea7709dea1798b9eddea5cff504cc5ae40c561976c11a514f2ba359f6791830926fa13ac7f71e7614d0233305d3ec694b7d31ef320a44079af2614956ba31a66b959a11a3bfbdb683037d6ca42d0e9bbd2d83af74fd4a73dd6537e393b7026169d3c0e017a9e3392e03e8d76cc0f5f0caad4926b3169d61ea09b6cd45e5f62aba4ecab5b053d54cdf8ec5a69320094d520f702cbd218125f24e38a5934a2f5f4d74c12df05cc0c7b3c36a37db2863e918a8cbc496fa77bf6109008e20602636ddbd53aec45741384aafd05ebbac9d6ddd8aeb3d75775bae5124cbc7fb5db4ce9c8af96ad05035a8dcb64c0b02f0669c65b07f60c9cb81e99462ef8318d0ab65b97d6a9271042f4d46a5d8ee42b90783db78827d018b8d392ab3eab88e06b409878fcf74067b1a1fede92874741cfde10bdb444819fb991c36c9dd458c8794e0b4bd9e3f7cd383c485e6a60fa4238b318e14896934d97b4b7993472f4f9f246ca7523e5979c984fd16248b087cc3eafd706328a3ec47f88247357c4b759a2a1f0efde24f4129fb612f8c3742847b39996487653d6bcaf5862dc1bca501abed2d0b5a23c1d2a62eb968acb01763718b27acdb605034f259b096d0bedc7e6197bd58267cb1a8c61eeef9f19aaa6a0cab7cc268e8bec46db3fbcf4de3e8abe483bb01811087fec18bbe471628c3bc80194d3661efa6d9130a524089b07d8cdc30f77bbbcc7116d9bda8a4e6c01f047a4ee60a09ab23a63e1bcdeb3869043efe60eb3b7a6beb366d11e786002b2e3d36d44f91ed87152697e456f8ebd2b0e15df21a773b1ea876319fada12bd340314944f8d9d90ea26380cd83692a2f634c241bfa0868fd7ba52a841ad418c97e818195047d6d11ade0aafabe0d627a68721f61f3758c40dd14498521966380d59e0cb621953f0ea908fd297178899b2e60c210479a4a9ef9a8cf1d2a0c2e909043ce75d2f4fb766eb166b995b714cfb71bad7462525aa15d3fc8462808f8a0cee080502765bb9d1e9912a9ba937a94e48708b531d5ba71bdddb97fe77dfc7fcbcc0ddbef56c1f78feff399eabe15aac18b95f0c88a40dd5ebbdcb3ae45ba66dc990e9267c5290f7b357e1ae5e354c72edab117bcc394e4e8a91d99ca2f000420ff9cb32f87c663c6bb9692cab44c5c26212dad70a5426ce7eee219cdeb6bcb65d9b1f957c3e495a1198a60dcf446f4b192fa50d8c4426b8ba3ef0e06be2d04d7e142e825718828617220349408bd313df2ae8f860058b169b7ec3416f4c73fbfe509b442b8332a7049e7dd59b77d199079c187f7afb9b869ddd27864fb1bd0ba7e0ff67ceefc88f86362540a3020b9a90d07b9634358142a4b095f3becfc810b2ca5d78361403cf09e59c3b747953ff3535bb9f99bfd20da8a64082fd8552739f622e5d24d2fee438083d839402aac872f3d98f394d56bb4564c8caac19ec4873ffd2dae20a0bd8f0781fb92984755014695ba1f3a2e01ce4fa33206b53348afdacf34c2be54b56cd76a9948013538c7ed8fa60055e9b60aafde90f50b4e0cc9b3009f45823f674f23ddd6cb2439c479e20ab975139055bc8ad72315c3c466093be1e06ad27f7601b9cfbce93f172143c6523e239fed636ece9407caa423db7e64d6ee1163976dd7f19c333d02d788111de7243b7dd6dba0a1d9957e758acd4ad9ceba61d0be6c2be89b65d18f1a7f1cee89f9fee5dc682e12e7801822f99f4b2a920c36d0650604c545b76c9e5755032a8ea94d0fb21d513a138b5a1ad86acdf0097d5f289a9629c7a3e570a96383980c067a702cdc198712adade467e0baf05595108dff0b342d1b1fe243cf8145d024b46f8008c20ded574da9f49b49163591a6cd2fcad74caad0e95dc5714a15cfa88ff11a7d30028326575217447100f4c5c97f0cc25d79960e39b94f0ab60f986fa3c919865f8e231bd77c2c759b166d8874728e9e131b9b3aa5cd166a9ae330ca439ea3ffb7581f1f4389ebf9334810d07981c5ea03b42ef5615ebc170e9a0c9c02478353c08f4cca0b6a2e98de3d51d3174ee8101387f52b12b699b57a4c50452a978eb43c3a101ae69213fe93f2606fc6bf7b771e3dea5e57895cbc23ce174a1ceec151703a226749176d42d72468d48f88012d18e0f2640c3018e08c8a2df197f273596ca5d48cf976b7ee051189b8081f086613258f267a5bcf30509c6285fc37c0d045c29c471b04f189cb3c69914ba0591cfba1c71ed909362aa8840be28e624e3a6b8393170e809231e10820326ecd03e23e11dfe29ae47adddf3d4f858d51f9ca33ee85a5077a1463caac5d034293bcacafe15b3e6cac7247a33ace000f164cf8a5243f89b89b8b11220b35a07679e7af900e540d965669fa23ca0d0d3b47d9b2cb0fa31a90c69e686d582f6c9c8c628875c002cc5e288a5e1b738842258569fe2a4de3dfd7dfd13b1fd7c8c29dfa4f58ea8d0c7e56222fb9b0d29c68c7cb8ba3fd79b04a14366f83bbef2531311a3f385bdad440ee85e2dd947f32a349f9d1eb750ceb0f7211980b0b970c7b81f16935d4d3e764869edae7a45cb45a0445e8c8ec27fac4edd6ea269563b6f12f394782fd970cbfc2752fc9f4892c731eaac8e3a315797b0449b2a9ae3d4bd25d0e8f1a43e29630b4e2e882ece16dc542fcbc1f165b2cefc4deb40c23bf61f3e51d5acbc81135d35f0c055d8a003e03c0625e83f95ab2349c222dbc6d62d34e0119938d0b384a86dbdfd00c1226d0ff1f834c3529361c9db6d5612009bc39a0d654de2940ee2b8a96bd3c297ecad0a3df1b2a85a400fab889648315415c4ddbd0c9752146496d3769b3c9148330a8324453d4431d19727ddd12493003bd7eaeb05b2f5c333a33cba442df3dc11dc23c80292a52b040f5e707784b5d29f4c46d3ac8ae0e159517c1a196103bfd6bf6d32afd687773bf224ef00c844f1f36365e7220c57a97aa0904219a0ab84def7095b280b971b554e0142d154c5422c918b4744bb3b9e61721a983f4d63cc79fd88295b67b24fec0ec1ce8a2e80a1ca4e97cdda6d2df44a571a74b941f049886355e2bb5ed908e646850d85095d099e3a189a4298f4a25c0798b4dc25cd630695561a04f43ff009e4f49177e01c11442593fbc23657a46f918a77231b3405d4931b6f2c01f0207d6933304bb2106c5dbce23378bc7ca66ff4f57550bbc36500f6c4ce21dc22a4575c315d2f4c4fb1fb8e12ebc2c037451611718d4371c6d0a00bab9f68a1dea6bd654d49232ab3c85e07a6ec8e2b19012c31d540f81d666d0a236e9e2a4b6d85c0974efa172d13003b63e94cd7a5652f4703d88712fb63521abaf0e2a0dd4b2e457e42d4a811db6a77310b1aff1b9055c9995ce9a0fe2e0c3657c52ae562738b6c12693cb2bffd1d3c41b6a73feec4008e63562bbc38a8c56c10efdb2b67fcef74f6a6f7e35baa4685f7764977348db378b242ac5f81a8a69c666c0247d1d326faf3b7dd4f07bfb16c08bb2703f6997e1a6cf042c0ff0fea0f00000000000000573e8dd86263de6ffcf3d26d45d8be7234da9f24f1a08ab16f3df9e85861fb1251933eb8982b81999234d6d56759acd528ffcaee5a300e711e0b7f0b208612caa6dfeddfe4557161933a1910ec4b35ed89760fb91de6c19f766845979e36855a11d7ba6b892a717b32e8e17b367c5fd11b940de937a975470bbf872f8a1cd637c76fe0a9aba5fb9e00", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x28, 0x0, 0x9, {{0xf7fffffffffffffd, 0x3, 0xd8bef8474886e58c}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$lock(r2, 0x5, &(0x7f0000000200)={0x1, 0x0, 0x200000000000000}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) openat$vimc1(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000001d002100000000000000000007000004000200"], 0x20}}, 0x200040c0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r5, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r4, &(0x7f0000003800)=""/4062, 0xfffffffffffffecd, 0x17, 0x0, 0x0) 1m56.416417067s ago: executing program 4 (id=5760): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000220065adaf63110d782185d37d8318b9000020000030a65000f0ffffff236fce9500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_io_uring_setup(0x36a1, &(0x7f0000000400)={0x0, 0x5de4, 0x10000, 0x0, 0x51}, &(0x7f0000000300)=0x0, &(0x7f0000000000), &(0x7f0000000080)=0x0) r3 = syz_ublk_setup_io_uring(0x5058, &(0x7f0000000340)={0x0, 0xf1f4, 0x1000, 0x1, 0x2e1, 0x0, r0}, &(0x7f00000003c0), &(0x7f0000000480)=0x0, &(0x7f00000004c0)) syz_io_uring_submit(r1, r4, r2, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2000, @fd_index, 0x4, 0x0, 0x0, 0x8, 0x1, {0x3, 0x0, 0x1, '\x00', &(0x7f0000000680)={0x7, 0xffff, 0x8d, &(0x7f00000005c0)="6c169055c8715636128cc3d32be734d00f971af0f74e7b112799410ba556a620d7d0a51ad68c2e6f76ad83565e2995028a1f10199db213f84b77618cc04f28ff2bc24d1ad03bcd54e20359f0cfe50eafe2dd4cbd7e90b3742b568101b3a9d31e6094e879d90a91f12b6c5fd3084cd45a9a2485a81876fef14b25036a2f6cc835acfdf32158201fa74a413bb8ad", 0x5}, 0x2}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x0, 0xa160, 0x800, 0x2, 0x328, 0x0, r0}, &(0x7f00000006c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe43b, 0x80, 0x0, 0x113, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x50ad, 0x8000, 0x0, 0x150, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcc2c, 0x2, 0x3, 0x1f9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbe0b, 0x8000, 0x1, 0x28d, 0x0, r3}, 0xffffffffffffffff}], 0x4, &(0x7f0000002180)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x1}, 0x0, 0x0, '\x00', {0x4, 0x331, 0x0, &(0x7f0000001180)=@buf_512="25b63ca6f08470ef98016d88c2dbd55fea40adfa35dd36abfce7b4913eb767d3c344f79db409ef0401c3afa95c828e39db2629b3985d462c5930663dc296840706937ac15fc8e7604998f4ab2c193d33e6449b59ee77bee5a0f4c894e69468c50d3bd3be4df89fa625141d58f0c3e476aa7cb9b70f3c68871d8fbbb686cf8bd65988f08a27e78d61b28477a449bced0959e296c5e06e4049996c4e1f47faaf060faa93bfe5b6f72f5548604d590faccd3c24fa9283cdc9e02ddd41b0accd105989d4605193422ac088d1a831d0b6c67ec7bd822a6f5af2fbeeeae6c2b9b8bf972298fcda91374d30df3c948886f0b15ab19468220a270859b3f70d36a83e6d8b5bffc393baa090e2e033d976871e5000fd45c75644a298693b0f63fa491104d58bac8dc8cb71aa8a8eff40a46123c616b6a191b51b44bd63305844b05d0556ad996f0fa28ca3ee3858c58f39450e6bdea22a1822dad5c6d8ac6f9b5fda99e172e0e337bdb20e96652fe22f8141f610a122bf3211857094859978cd61bc526254c5fffaf7a3e31975bdab3a428c6f69b31c12338d1b9737d5c360b19c282ef53ec5100a9f2d2b24c91c5324ff350d6cd739a1c4480aa5b9e3e0e165ae911719c765484563d4a48d18ed329f0daa3034d81da0330c71cd243254377ae596f98d14ea2232698c276292001b5f935a87869687ae4dad313d9514f3b3ae519cce5370"}}, &(0x7f0000002200)) r7 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0xf}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x48, 0x0, @fd_index=0x4, 0x3b2e, 0x0, 0x5, 0x0, 0x0, {0x0, r11}}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r11) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="1400000012010100000000000000000023142806"], 0x14}], 0x1}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r14 = syz_open_dev$media(&(0x7f0000000000), 0xa, 0x41) ioctl$MEDIA_IOC_G_TOPOLOGY(r14, 0xc0487c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66667a4, 0x0, &(0x7f0000000fc0)}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r15 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r15, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r16 = open_tree(r15, &(0x7f0000000640)='\x00', 0x89901) move_mount(r16, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r5, 0xc01864c1, &(0x7f0000000240)={0x0, 0x1, 0xffffffffffffffff}) close_range(r14, r17, 0x0) ioctl$AUTOFS_IOC_FAIL(r6, 0x9361, 0x8) ioctl$int_in(r13, 0x5452, &(0x7f0000001140)=0x62a3) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r13, 0xc0684113, &(0x7f0000000040)={0x1, 0x1e, 0x10001, 0x80, 0xffffff81, 0x6, 0x7f, 0x6, 0x6, 0x7, 0x1, 0xb1c9799b4fe8deb}) ioctl$BLKTRACESETUP(r13, 0xc0401273, &(0x7f00000000c0)={'\x00', 0x2, 0xbb81, 0x9, 0xd, 0xc3, 0xffffffffffffffff}) sched_setattr(r18, &(0x7f0000000140)={0x38, 0x3, 0x10000000, 0x329, 0x7, 0x74de, 0x4, 0x3, 0x6, 0x3}, 0x0) 1m55.987296881s ago: executing program 4 (id=5764): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r2 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) process_vm_writev(0x0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000000000)=""/116, 0x74}], 0x1, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) mlock(&(0x7f0000368000/0x4000)=nil, 0x4000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x3) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000180)=@other={0x20300002000006a7, 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000340)=@newqdisc={0x60, 0x24, 0x3fe3aa0262d8c583, 0x2, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xfe}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x0, 0x5, 0x4, 0x153, 0xf}, {0x40, 0x2, 0x5, 0xf0e7, 0x3, 0x100}, 0x377c840f, 0x3, 0x1b9a}}]}}]}, 0x60}}, 0x2000400c) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000100)=ANY=[@ANYRESOCT=r7, @ANYRES8=r1, @ANYRES8=r5, @ANYRESDEC, @ANYRES32=r1, @ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) syz_usb_control_io$sierra_net(r7, 0x0, 0x0) syz_usb_control_io$sierra_net(r7, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) 1m55.736768551s ago: executing program 4 (id=5767): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000180081054e81f782db4cb904021d0800fd007c05e8fe55a10a0015000200142603600e12080005007f370401a8000700200006000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4", 0x6c}], 0x1}, 0x0) 1m55.292579856s ago: executing program 32 (id=5767): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000180081054e81f782db4cb904021d0800fd007c05e8fe55a10a0015000200142603600e12080005007f370401a8000700200006000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4", 0x6c}], 0x1}, 0x0) 10.03622075s ago: executing program 2 (id=6238): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000240)="ece5ed0e16b1a9c9f4e2432e8236e4142e25dd74ebdebe0a4cad7216c4e99614b1c54d0a2eed8f78ab6f67f2f7e7a237c76548eac7eac7e12075fd40b02bd754c08ee462889dfd49dca4d9e86b4412d1bb05515d2fdebdd7a3d65265ecd5c83da9177a16399413c596f9a45242a8cba6301655277484792d3b8669bbb50cb3a58bb27507ef8e8aaa5b3797dcc92ccc4ec48d26b26b4d0aa3267804f80f711ae264e03cb6f7a6143bbd225647732d75aaf0371677fe1351d87b7b01ab60872f735f7ad003eb06a4740d61655ba808f54c20b4d0d7507a8fe99a296bbff06a7659de9cb13a5751cf7b67645369ca31981c3d8cce87b5d2778b8e70bbadbf70e5d1") (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00') readlinkat(r1, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000540)=""/72, 0x48) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c2796173864", 0x3d}], 0x1}, 0x40000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/bpf', 0x0, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000140)='cpuset.memory_pressure\x00', 0x275a, 0x0) (async) ioctl$TCSBRKP(r4, 0x5425, 0x1) recvmsg(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000500)=""/63, 0x3c}], 0x1, 0x0, 0x4a}, 0x40fd) (async) close(r2) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) 9.904463554s ago: executing program 2 (id=6239): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000200)) mount_setattr(r1, &(0x7f00000001c0)='.\x00', 0x0, &(0x7f0000000080)={0x100000, 0x71, 0x100000, {r2}}, 0x20) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000002c0)={0x34, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x3}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004000) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f00000002c0)={0x1, 0x7, 0xa4, &(0x7f0000000200)=""/164}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c00210009"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r5, 0x402c5639, &(0x7f0000000040)={0x9, 0x2, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) syz_io_uring_setup(0x1b38, &(0x7f0000000080)={0x0, 0x1a5a, 0x20, 0x2, 0x3c9, 0x0, r4}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) syz_emit_ethernet(0x32, &(0x7f0000000040)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @empty, @empty, {[@noop, @rr={0x7, 0x3, 0x16}]}}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r6 = getpid() sendmsg$nl_netfilter(r4, &(0x7f0000002140)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002100)={&(0x7f0000000a80)={0x1644, 0x6, 0xa, 0x3, 0x70bd25, 0x25dfdbfe, {0x7, 0x0, 0x8}, [@nested={0x1c, 0x4d, 0x0, 0x1, [@nested={0x4, 0x86}, @typed={0x14, 0x10e, 0x0, 0x0, @ipv6=@mcast1}]}, @nested={0x1f1, 0x92, 0x0, 0x1, [@generic="338a1454677f74b6f9b5823e5741ac78932cd35b9e9a83e76eb8913f76b074cae5d1adf96f8983c0ad465548660eb03fc266480ddab57ae3f7b63302e157b1bd44e5de77b3ebb585a229ccb2014bd1ce24044228388246b1a47911e83a4b8fe712cca3175bc05d78a946988dfed97c662133f607ee5373583655bdad0fd4c3776d3cda8079f1eaa1ed5e2a2ec88f19e862f31c40ccb0b8383826714eae28bc463566a7a1f91708ab5a2d97d9281bf42d4f5d1ac60bb0e7602297fd243fcf1e38e11849d7240d326a3227bdf261b6c90eb330a602c595cea1d66de2a5d9c0e5775abf2204427f8aab94c00e8842da", @typed={0x8, 0x79, 0x0, 0x0, @u32=0x6}, @nested={0x4, 0xdf}, @nested={0x4, 0xe3}, @typed={0x8, 0xcf, 0x0, 0x0, @ipv4=@broadcast}, @typed={0xc, 0xb6, 0x0, 0x0, @u64=0x3}, @generic="eb3a5eda6eaad7a6863206b416de674487dfc9cf1d927411a375ce4295b5b6ae36d7cdd641e78f046fef263eea5859e637b817c2ad34572fa4d04f218a50b1dd9638eb7544e8dcc267b2e55119e6516d91614fd902f87a94a58dcc77cd47afa0d4bce4b749448fd1e1c84051992dc34f0f0d8678028d20", @generic="0c1fa17630743a5cdd0b4582c4e95e5f3d2286df81aedde8c8185920902c1ed830dc8856ac8ca93598fda1a555d9f28bee73f96839023203dea7df15015a8a1c91274fda1ebf83f020b02f777dc475f24e018efa79cdae4ae351eb81f8f70d6eb2578f04"]}, @generic="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", @nested={0x10c, 0x140, 0x0, 0x1, [@typed={0xa, 0x34, 0x0, 0x0, @str='\xbb\xbb\xbb\xbb\xbb\xbb'}, @generic="af3a4285154e28c16fd40c0a57e03c43710ec72349cd16b45762b8d08db37c4dd3ba14014f0491ba68792272c992bec82bae2d56caf7a0abc189e8dc1ba940c0cd83fce84bb1459616275156d2e7f1db4b405e20708a263f7629eee4b015c1d2a104caf8059ec460a7019a576e01359619a0a28b2560ef17f03019a4bd6b4e53d9b19d22a7fc5ff18279f891e54e6fc768d5f576fc348ab1be3db78486e9722e657c640687ad24db6d5e0542ceda25712c9f", @generic="cfb439cc53fd02abedafd4c4db718e55c04a9bef6b69eed6a63fcf14012bccd645fbbd921f15cf576aad127b6cdb8c75a06b4e659994c50eba5425cfe67f55982b1f", @nested={0x4, 0x45}, @nested={0x4, 0xd0}]}, @nested={0x38, 0x3d, 0x0, 0x1, [@typed={0x8, 0x60, 0x0, 0x0, @pid=r6}, @nested={0x4, 0x9d}, @nested={0x4, 0xb9}, @typed={0x8, 0x130, 0x0, 0x0, @u32=0x80000001}, @typed={0x14, 0x15a, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0xc}}, @typed={0x8, 0x59, 0x0, 0x0, @u32=0x5}]}, @nested={0x1f4, 0xf6, 0x0, 0x1, [@typed={0xec, 0xd4, 0x0, 0x0, @binary="a4c8a409b7bfdeb81d0297dcdb6405def78bacbb85e038b1370b96b8d260cf227a4c81ae451f63e8eaf44e0431bf9945f178a944ad343393457fa88b869c9f76874083ec4e2667ab8ef8821eebd59137300aef3ccf0e80d9776428fd214dbf48d66cf1898d14b49ae61dc8225216ac48be64a369511bc6e8f05a543e30941f7c149998c545eb78324fd9cb7ea676de2b1962093eec4ccde5b32d8009b1e3feb02bcd805a658aef31bf18c3e458a63e6d44ccd5e65f7f4289bee5e14f56f482407408bd184b61b2a48bb1da0b5d1e21d4d7db1435ef171b646c8ce0cc1ac0b07724155f3229844b9b"}, @nested={0x4, 0x2}, @nested={0x4, 0x145}, @generic="c7e931165f44a6fd720e39f88aa66ba1b0efbbfd56f4e06e586ac4cd3f511f56ab1c45ab20aeda25ef47cd933271274544874c0a800bea844bbd066656b2e69404cea59d4c24c35e2365f6d4ef792825632ae8ad18e925878a676c5b9dfa0c2581ec7159c03f162ee9aee6947b24c53a737937b2ef22f9eb5f96fc7888d8e7b747e5380555923cee5c002cdf68e3578627", @typed={0x8, 0x1, 0x0, 0x0, @u32=0x1}, @generic="6004c9fdd7735ff57a", @generic="f6fad1d854cb54ddd29fadcb0e54c3216e127ef0608be91fef38e9552537f271239f959d1e8e89d6c306c1d89121fe5f01ec68af6e372b768010c22c82a60e16338e9e6f8fff0cd7ae72db569818e21660e9c73ea0ae5418059f"]}, @generic="b2f1a135c98e3e283f7c5e9423368b429f49b095d5c956a8dcd6c9e38d8d07b11ab38a8c89d0fe5c94a6f8f15f34c95482ff1dbda54e728b2a09e23bb92306ce798228bb60b9b6eedb2fd0bd9441cc2e1be9c76635ebbd6365cb72399585b8e106cda90af74aade7bb0eb6b6f67047e8b9999b9ad91648f0915695be7a5190fcf51a6c989a12e479e29ccb56f024da727515ec3b15601fd6b378b61d76fd1d81feee04c180c42dc71e2432a7cbe70e91e70aaf6cbe72", @generic="e84bf58a72f72c738ad867e0badf275083586569bed0b7b70f18c7ecf75a077d39e4ecf1f42a3c4c4eb94d639bb734"]}, 0x1644}, 0x1, 0x0, 0x0, 0x4006000}, 0x4000000) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000001c0)=0x3ff) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000001, 0x2010, r1, 0xfa0b6000) 9.524271082s ago: executing program 0 (id=6244): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, 0x0, 0xffdd) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) r3 = dup2(r1, r1) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/107, 0x0, 0x6000}) read$FUSE(r3, &(0x7f0000000a40)={0x2020}, 0x50a) write$vhost_msg_v2(r3, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/116, 0xfccf, 0x0, 0x1, 0x2}}, 0x48) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) write$P9_RVERSION(r4, &(0x7f0000000a80)=ANY=[], 0x15) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0cc5605, &(0x7f0000000100)={0x3, @win={{0x9, 0x2, 0x7, 0xb}, 0x0, 0x1, &(0x7f0000000040)={{0x3, 0x1, 0x4, 0x7}, &(0x7f0000000000)={{0x1a6, 0x1eb, 0x200, 0x10001}}}, 0x3, 0x0, 0x10}}) r5 = socket(0x840000000002, 0x3, 0xff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r7, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r8, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) connect$inet(r5, &(0x7f0000000540)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, &(0x7f0000000340)) 8.208910015s ago: executing program 3 (id=6254): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000005200000008000300", @ANYRES32=r2, @ANYBLOB="1d008800"], 0x4c}}, 0x0) 8.109811961s ago: executing program 3 (id=6255): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000340)=0x2, 0x4) sendmmsg$inet(r0, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}, {{&(0x7f00000000c0)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000400)="d2a534b308834d054586feb5c9428624db4b878120e41be144acec28b091f1237c91d74cf1ce0c17632e8dce6ac8c6822c2382fc3ac7c89f2d955bc265df5364df0d56866c920de52e29535b686bb2b4e7e485d65da8513267bc112d12e86bf2a6c815e7e152ecfcde4de24108b1", 0x6e}, {&(0x7f0000000a00)="d26f4a894505e4cb435268490fef3ab82e09dc74120d1fe735ac577f50976089bf7b715147d38cf5484e357c07c0184822dfa6ee88a786404855d6086b61189c0602d0056d86a8490a443bfaa3ed6da25bf296a08acb3a3f59b7c9eabd7b51297ab7cffdb4eb9c9f6f44c0ce8390cc64160cf457e992e94b36ea829b521e86b15fbe03b246962339a650eab941391339220bde5e16e11123b7ca6b0a3675dd7fe035187b73d43de9423d1357f4b15883d530e7db10b2f0bac6ee95ca0b7e96589c8ef1fc6c183df637a200ac059e59baa215a117a57000ee2b6f40c4ae379d95eab435556aa89edcd0a7453bdf38c1f8fd4b9a466d2d9517f812a4fbeba1cdcb2429101240e5adcabbfe440e4f326a6f50f59ca934b0c214936df5a338cf4c24e05d0efd8d932a3fd01f6fe596d186e08d2fc77b297f972530a81226294e2fda3d9dec706dbcaa9a1ad5b497d7f8989f6d9e689db0aab831d0b82184e88d6f45924b90744b898912bf3df4e6257723b490e56d93f5f38f4bceb5b43f30da82120d92655f4fc2ec1635a072892a12c462479a4480c46012b9df1f0b9971d0da6c5bfebd60af31c9492d9b3f4da64f7e8a6a760ea96242f9beac499b4e492777c1849ecb0207e1a0b095ac55cf137bd941c13099245069ef52e8a9b0e6c5cab4933962766e47b2ff97c1d0a4f4cc3284a3db70b2eb1fad2ec3b81b2fc65bc354a33caa38c2f6ff1fb9938ae9f0edb9ade42f53b7de7d09ac2ff6de81414917fa0a9ce6515f0f130327f3a0c47c0fcadc315309b06966f945de26b5a445423f22b8474a41f58d12eb8acbf8bdf9087b3b2bb98a802e791f57a86bc325ff6f3fd56b0eb828aea29575fc843902317423459d4e6fbfa3816b70bfbe17bc447d8501e22f0137b56781e8d89a0432bcff4923a5f2b480ee06d502346b0ca8ddeb42afca64179fb1076da91dfe1b19af87df73365ef29f482bea712301f685fcc9f779f9413973c395fee168036c181ede168c8dcd79f5b595f12cd79a1848a7ed9a2c39ffc4e2e0bb73a295a2d263f220d903d79e18c18d4f59d5b6622cdbda6aa9b165d9f3eb26bf5d977100cc722378b4462ad324854974e7bae6a82954f46f83124a73214f23f7baffe3d2f78b87dfa3d29d1f3efdf7cf0f022f96346473b3ad60c6e6885f1b1205d615866cf0837e04371f04e190af232329e39c70f4a89ad5476054c99cc01427ea12a7afd17531daae2661ab625c5e65aa09697adc3a00c04825fa5d6c4d36acaa41de2dfc531504658e12f77d6134ffa61880ad2b5c0b2e236042de25eeabb06f1d0a20a480d684e21c69cdb44f5cbf9e7ad51fa0023cf6240682ee66ead1b5fc3060f5dcaa74ecac0adfafcd68b6254ab01eb8ab49f96128991f33d84477810862780da272bab1fd74d34445a640cd2c82b4ad6cd5c3fb455fd55c7871bf19a20351a17a822ae8341bdbe89d4d69b81c43ba9c1abc4bef75cbc89e278d2a15974f92fdf8687049c5d37a0d469f8de70ce88d82dd505194360b0096ac45a9cea6c3003b2831a538513b3798737fc941c88e31b5334c47d2a774ca3da487ae43ddbd6d8661e26248ba77b30ba719c9c057e0f128f11b8d2ce44b0cb20a7170618c9ea92ef6ec05ddf29b2fabc6d3467b8ad1f683733e9238bdacd953ed0a731f8972113da633d8465adceac30c9e0d0259dbe0301f13bfaceff1d5927b56e5d2bb23b3d8511426829373754292e8564174ba481d395a2f75cfdb0b166434ea9ffde5b55174ab921c061b4da022de1a7ab6736e21ea8db56a7c618b72f64c14eaea2a9ece5cf3b53732a45174a4a45b303ca4f9d79e447aa3e276554fac324c4a211fafd3baf9d2d77c4344bd54bc7f57ed3268daa5e5039d82", 0x53f}], 0x2}, 0x5dc}], 0x2, 0x40) 7.983910557s ago: executing program 5 (id=6256): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=@newsa={0x148, 0x10, 0x713, 0x0, 0x0, {{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x4e22}, {@in6=@remote, 0x0, 0x32}, @in6=@mcast1, {0x0, 0xfff, 0x4, 0xb, 0x4, 0x0, 0x0, 0x4}, {}, {}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x10}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @coaddr={0x14, 0xe, @in=@rand_addr=0x64010100}]}, 0x148}}, 0x0) (fail_nth: 14) 7.983752429s ago: executing program 3 (id=6257): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240c01801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqn(r1, 0x0, 0x0, 0x0, 0x0) 7.515022177s ago: executing program 5 (id=6258): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050027bd7000000000400600000008000300", @ANYRES32=r1, @ANYBLOB="08004d01"], 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x0) 7.415523717s ago: executing program 3 (id=6259): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r1, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fcdbdf2501000000140002007767310000000000000000000041000024000300a0"], 0x4c}, 0x1, 0x0, 0x0, 0x40090}, 0x44000) 3.836690135s ago: executing program 2 (id=6260): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) syz_emit_ethernet(0x3a, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c20007000000000000008100000086dd6000000000000101fe8000"], 0x0) 3.836384655s ago: executing program 3 (id=6261): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'sit0\x00', 0x4}, 0x18) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000080)="441f0803", 0x1f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91107900000005000000000000000000"], &(0x7f0000000140)='syzkaller\x00'}, 0x94) close(r1) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000024882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r5, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r4, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) madvise(&(0x7f0000a07000/0x4000)=nil, 0x4000, 0x19) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) read$char_usb(r2, &(0x7f0000000280)=""/209, 0xd1) syz_genetlink_get_family_id$smc(&(0x7f0000000180), r2) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) socket$nl_route(0x10, 0x3, 0x0) unshare(0x2c020400) syz_clone(0x64144000, 0x0, 0x4c, 0x0, 0x0, 0x0) unshare(0x40000200) 3.836010196s ago: executing program 5 (id=6262): socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) close(r0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x420b41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x0, 0x374}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000000)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xd81, 0x0, 0x0, 0x1000, 0x2}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2, 0x2000, 0x10000004, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x1, 0x0, 0x106}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0xffffffff, 0x36f}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000", @ANYRESDEC=r7], 0x48) ioctl$TCSETS(r3, 0x5402, 0x0) ioctl$TCSETS(r3, 0x5402, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f0000000180)={0x80, 0x8, 0x6}) r11 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') r12 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000800), 0x1, 0x0) write$binfmt_register(r12, &(0x7f0000000840)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x8f, 0x3a, '%', 0x3a, '\x00', 0x3a, './file0', 0x3a, [0x50, 0x43]}, 0x2b) fchdir(0xffffffffffffffff) close(r11) r13 = socket$inet_smc(0x2b, 0x1, 0x0) close(r13) socket$nl_route(0x10, 0x3, 0x0) 3.725754182s ago: executing program 0 (id=6264): write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000800)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0xe7, '\x00', "2be13c086884449291376aaab3f822cd1bdbd211505af9305ee8860e3fc002d87075eb79567bf5e0f4bca7106ac01c1b57c35ccad9b9765784fe87f45f7b6ef77fcada488fe7c88173f2687e291ed1e74833989a34a16d57c4508c550aed75460c8aad5ebd53d001d243d723077e65f7eac17e396e4aa9874d8d3757ac66e098a79f7d22aa5d83bedf4f31f298f54dda92c6ee66dd0e13e386adcaa66cc9d7d1dff800863de8b5caf4be5c38aa64f5a0f1857c4c6a5b733bd56c0bdbd3dbae6638c0f5ff090885017b72e0ae8dc09619923e3cb4df3039fa91b969e5d31077ce8438f5c4f0f747dd43d62de3e408d8aaafed238cee632bfd7a14d1dd0a1f96e6"}}, 0xfffffea3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000002c0)={0x2, 0x0, [{0x3, 0x0, 0x0, 0x0, @msi={0x1, 0x5, 0x0, 0x7}}, {0x3, 0x4, 0x0, 0x0, @adapter={0x2000000000000000, 0x8000, 0xe, 0x9}}]}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8101, 0x0) write$binfmt_aout(r2, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0xfffffffe, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) r3 = syz_open_pts(r2, 0x8182) r4 = dup3(r3, r2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0xa, 0x5, 0x7, 0xc1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f00000001c0), 0x3f, r5}, 0x38) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=@newqdisc={0x78, 0x24, 0x400, 0x70bd2c, 0x200, {0x0, 0x0, 0x12, 0x0, {0xc, 0xd}, {0xffff, 0xb}, {0x2, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4000853, 0x1ff, 0x43ff, 0x1, 0x8005}, 0x0, 0x10000000, 0x2, 0x5, 0x6, 0x18, 0x13, 0xa, 0x0, 0x1, {0x0, 0x2521, 0xff, 0x9, 0x81, 0x8}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4048810}, 0x2000000) r6 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000098000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000006c000480680001800a0001006d61746368000000580002800e000100686173686c696d697400000008000240000000013c0003"], 0x10c}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r5, &(0x7f00000000c0)="24bdd96bd1e2f18aee", 0x0}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000002000000000000000400000085000000410000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000100850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x12000004}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r8 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r8, &(0x7f00000005c0)={&(0x7f0000000400)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f0000000280)="e196bcd880bba7", 0x7}], 0x2, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}, 0x2400c004) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, 0x0, 0x0) 3.697600937s ago: executing program 2 (id=6265): socket$kcm(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socket$kcm(0x1e, 0x4, 0x0) socket$kcm(0x1e, 0x4, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r2, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x0) 3.321742044s ago: executing program 2 (id=6268): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000f80)={0x30, 0x0, 0x2cb3b0415539fbbb, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0xcb, 0x49}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xfffffff7}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xfffffbff}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x80) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_vlan\x00', 0x0}) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000080)={0x0, 0xffff, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x2, r3, 0x2, &(0x7f0000000100)) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x28d6, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x200000000000012a}, 0x41) setsockopt$sock_attach_bpf(r4, 0x84, 0x1e, &(0x7f0000000000), 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xfff2}, {0xffff, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) 2.336243142s ago: executing program 0 (id=6269): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240c01801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqn(r1, 0x0, 0x0, 0x0, 0x0) 2.239372856s ago: executing program 0 (id=6270): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x33) write$vhost_msg_v2(r0, &(0x7f0000002080)={0x2, 0x0, {&(0x7f0000001f80)=""/152, 0x98, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000001f00)={0x2, 0x0, {&(0x7f0000004b00)=""/110, 0x6e, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000540)=""/224, 0xe0, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000340)={0x2, 0x0, {&(0x7f0000000a00)=""/274, 0x112, 0x0, 0x1, 0x2}}, 0x48) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x4000010, 0xffffffffffffffff, 0x42795000) mbind(&(0x7f000018a000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000080)=0x81, 0x7, 0x0) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000780)=""/200, 0xc8, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f00000002c0)=""/119, 0xfffffffffffffd55, 0x0, 0x2, 0x3}}, 0x48) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000000) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x89, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x9, 0x3, 0x0, 0xb49, 0x9, 0x8, 0x8, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000006c0)={0xa, 0x4e21, 0x5, @ipv4}, 0x1c) 2.09178779s ago: executing program 5 (id=6271): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) syz_open_dev$sndctrl(&(0x7f0000000040), 0xc, 0x80) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) r1 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x1) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x9) write(r2, &(0x7f0000000040)="240000001e005f0214f6fffffffffff807ffa6000000000000000000080009000d000000", 0x24) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000cc0)={0x2, {0x800, 0x7b, 0x1000}}) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fsopen(&(0x7f0000000000)='nfs4\x00', 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x13, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x7, 0x4, 0x7, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0x3a}, @alu={0x7, 0x1, 0x8, 0x2, 0x5, 0xfffffffffffffff8, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0xa, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x213}, 0x94) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x400042, 0x10000001, 0x2}, 0x73) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r6, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) r7 = syz_open_dev$mtd(&(0x7f0000000000), 0x492, 0x20800) ioctl$OTPSELECT(r7, 0x80044d0d, &(0x7f0000000040)=0x2aefd334848fe7dd) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 1.980706485s ago: executing program 2 (id=6272): open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643dd3e51f1edc16e48ff3a086cd82cf1e480a0869b69a207a0931bfd9cc30df16700eecce7fa5c4b3f4a0882a0ac963916093a34250f19d8d94f12a30d89e020fd479e0c673282d34b943ae5a9b591500"/103, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) syz_fuse_handle_req(r0, &(0x7f000000bb40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000000200)={0x50, 0x0, 0x1, {0x7, 0x29, 0x8, 0xdb0078e65cb35ffe, 0x5, 0x3, 0xb, 0x3, 0x0, 0x0, 0x4, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000007b40)="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", 0x2000, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x4, {0xffffffffffffffff, 0x4, 0x0, {0x1, 0x3, 0x3, 0x2, 0x8, 0x7, 0xbe, 0xfffffff9, 0x406, 0x2000, 0x4, 0x0, 0x0, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x5, 0xe4, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000017ffd340b1134200bbdf000000010902d200010000400009046a", @ANYBLOB="4ad8"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000013000100fcff0700040000000300000004004880100001800c002470363e108004000880"], 0x28}, 0x1, 0x0, 0x0, 0x400c801}, 0x4048094) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7, 0x0, 0x8, 0x0, 0xfffffe0000000001, 0xfa11}, 0x0) syz_open_dev$vim2m(0x0, 0x6, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f00000000c0)={0x0, 0x2, {0x0, 0x1, 0x0, 0x1, 0x5}, 0x4}) fchdir(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = openat$pfkey(0xffffff9c, &(0x7f00000002c0), 0x40400, 0x0) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000140)={{&(0x7f000087a000/0x2000)=nil, 0x2000}, 0x1}) r5 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) syz_genetlink_get_family_id$wireguard(0x0, r4) r7 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r7, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r6, 0x0, 0x0}) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000300)) ioctl$PPPIOCSMAXCID(r8, 0x40047451, &(0x7f0000000100)=0xffff0000) 1.693899448s ago: executing program 5 (id=6274): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, 0x0, 0xffdd) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) r3 = dup2(r1, r1) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/107, 0x0, 0x6000}) read$FUSE(r3, &(0x7f0000000a40)={0x2020}, 0x50a) write$vhost_msg_v2(r3, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/116, 0xfccf, 0x0, 0x1, 0x2}}, 0x48) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) write$P9_RVERSION(r4, &(0x7f0000000a80)=ANY=[], 0x15) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0cc5605, &(0x7f0000000100)={0x3, @win={{0x9, 0x2, 0x7, 0xb}, 0x0, 0x1, &(0x7f0000000040)={{0x3, 0x1, 0x4, 0x7}, &(0x7f0000000000)={{0x1a6, 0x1eb, 0x200, 0x10001}}}, 0x3, 0x0, 0x10}}) r5 = socket(0x840000000002, 0x3, 0xff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r7, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r8, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) connect$inet(r5, &(0x7f0000000540)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, &(0x7f0000000340)) 1.521941541s ago: executing program 1 (id=6275): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) syz_emit_ethernet(0x3a, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c20007000000000000008100000086dd6000000000000101fe800000000000000000000000000018fe80"], 0x0) 1.405159837s ago: executing program 1 (id=6276): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xc3ff, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000005e0001002dbd7000fddbdb2500000000", @ANYRES32=r1, @ANYBLOB="9e59"], 0x1c}, 0x1, 0x0, 0x0, 0xa911}, 0x0) 1.208602257s ago: executing program 0 (id=6277): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="842a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x3c) 1.195843778s ago: executing program 1 (id=6278): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e50226bd70000100000007000000", @ANYRES32=r2, @ANYBLOB="20000100"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000100) 1.119880848s ago: executing program 1 (id=6279): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000380)=0x2, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000040)={0x2, 0x24e23, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004640)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000700)='?', 0x1}], 0x1}}], 0x1, 0x24000000) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40, 0x0) io_uring_setup(0x3ced, &(0x7f0000000540)={0x0, 0xf822, 0x1, 0x1, 0x38e}) close(0x3) r1 = io_uring_setup(0x67bb, &(0x7f00000000c0)={0x0, 0x904b, 0x3000, 0x0, 0x2d6}) poll(&(0x7f0000009b00)=[{r1}], 0x20, 0x72) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x2, 0x3, @remote}, 0x10) syz_extract_tcp_res(&(0x7f0000000200)={0x0, 0x0}, 0x0, 0x0) r3 = syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000240)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@allow_other}, {@max_read={'max_read', 0x3d, 0xde}}, {@max_read={'max_read', 0x3d, 0x8000}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x100}}, {@max_read={'max_read', 0x3d, 0x7}}, {@allow_other}], [{@fsuuid={'fsuuid', 0x3d, {[0x33, 0x31, 0x31, 0x31, 0x62, 0x31, 0x37, 0x35], 0x2d, [0x33, 0x65, 0x61, 0x31], 0x2d, [0x62, 0x0, 0x0, 0x39], 0x2d, [0x36, 0x31, 0x1c, 0x4d9728da3d32a5d3], 0x2d, [0x66, 0x33, 0x65, 0x61, 0x34, 0x62, 0x30, 0x65]}}}, {@fsuuid={'fsuuid', 0x3d, {[0x38, 0x39, 0x32, 0x31, 0x34, 0x36, 0x66, 0x64], 0x2d, [0x63, 0x36, 0x31, 0x61], 0x2d, [0x32, 0x33, 0x64, 0x37], 0x2d, [0x61, 0x35, 0x38, 0x38], 0x2d, [0x64, 0x38, 0x0, 0x65, 0x1c, 0x33, 0x31, 0x33]}}}, {@flag='dirsync'}]}}, 0x0, 0x0, &(0x7f00000003c0)="f3248821fc5ee83bcb8db4b0ac9f93a491b9854330dc48ad27cc8ad365754d511f95c9b1bb4462fffb8eabef5e2a3673c42be398d43a75feca9cdf68e57de9d2ed1e38f32c96905edd1bcacb213fb327843505710abe04dbfa6968dc89025068597e7a77cbbd79eebc") r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_TIOCINQ(r4, 0x541b, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r3, 0x4004f506, &(0x7f0000000440)=0x1) 1.055716518s ago: executing program 0 (id=6280): r0 = socket$packet(0x11, 0x3, 0x300) close(0x3) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x1000, 0xb, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xca58, 0x200, 0x2000, 0x10000004, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2, 0x0, 0x3e3, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x800, 0x2, 0x23e}}], 0x1, &(0x7f0000000340)={0x2e, 0x6, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) r9 = openat2$dir(0xffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x5ef100, 0x40, 0x23}, 0x18) ioctl$DVB_DEMUX_DMX_EXPBUF(r8, 0xc00c6f3e, &(0x7f00000000c0)={0x7, 0x0, r9}) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) 858.386645ms ago: executing program 1 (id=6281): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x57f}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4e3, 0xca0b, 0x6, 0x3}, 0x2}}]}, {0x4}, {0x3e, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x90}, 0x1, 0xe304, 0x0, 0x40800}, 0x44000) 759.576219ms ago: executing program 3 (id=6282): r0 = inotify_init() inotify_add_watch(r0, 0x0, 0x428) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) file_setattr(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x500, 0x8, 0x7, 0x7}, 0x18, 0x400) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x8900, 0x0) 664.127152ms ago: executing program 5 (id=6283): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000004c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x9, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0xffffffff}}}}}}, 0xfd78) (fail_nth: 7) 0s ago: executing program 1 (id=6284): sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000070605000000000000000000010000020500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000001740)="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", 0x8c1}], 0x1}}], 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)={0x40, r3, 0x101, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0xffffffffffffffa4, 0x7, @remote}, @FOU_ATTR_PEER_V6={0x0, 0x9, @remote}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040044}, 0xf0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x18, &(0x7f0000000500)=ANY=[@ANYRES8=r0, @ANYBLOB="f641dc74ed1897d975e5d36b1652e1ee15566fea540fd07fb62a65f04fce3e02bf0cb4b6de69f534baedd52e389fa3d808b56b85ef049cd10187a9d4982a3321fc8ba15d49157e4e0b84b7265ed503a9332ab23b06a62b77d829e7ecc23b23b4a364502f8e21de5253152bbc3f32f3bd2842ffabcf33624083675d8c58fca624ea26cdce01b3cf39a0aa16be71fb357a3347f87bf169e46f9249f4fb1d7e426b3995f7b9f38db995ca5b3cac339c08ac543c30f98c95b1b74d268e9305cd83bbe4", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000013c0)={0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="3915090000003cb2c96ba5485ec8b2090f6c934e91fca4e26d7e4fed32b908d3df5d51fdfef8b506d51b2d771c4d5725549b9f391fa35bd2898e8a5f27ab677a8da1faa4177c41d1b2b104feb158182731d60b155d8248015babe17a879ebb48c848f211a7599dad99e67bbf7316278d895b98e2d517e703e8d3e880e940200000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000200)={0x40, 0x17}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 0s ago: executing program 0 (id=6285): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000004c0)={@val={0x300, 0x86dd}, @val={0x0, 0x1, 0x9, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0xffffffff}}}}}}, 0xfd78) kernel console output (not intermixed with test programs): g 6 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 888.397581][T21560] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5946'. [ 888.417008][ T5702] usb 4-1: config 7 interface 65 altsetting 24 endpoint 0xF has invalid maxpacket 608, setting to 64 [ 888.445958][T21550] 8021q: VLANs not supported on syzkaller0 [ 888.454807][ T5702] usb 4-1: config 7 interface 65 altsetting 24 has 3 endpoint descriptors, different from the interface descriptor's value: 13 [ 888.505516][ T5702] usb 4-1: config 7 interface 23 has no altsetting 0 [ 888.530303][ T5702] usb 4-1: config 7 interface 65 has no altsetting 0 [ 888.558452][ T5702] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.573391][ T5702] usb 4-1: Product: И [ 888.582001][ T5702] usb 4-1: Manufacturer: 樘╁窣丂儶칿㚩触ﻬꯩ铈匍遟쳢閖燱䀮툙럥韵썊ꂟ㸓⚜旘裠䜳ચࣹ締꒹⎣壗眂嚦ᙜ寸ᘃ㬽苖契㶴땣莻萢듣ᠧᲸ㫑囨냐俽 [ 888.607318][ T5702] usb 4-1: SerialNumber: 奣桻﨣۟泑㳡誈뺽욢뼼킉덹㊙᭏⪮䱆襫썼뛊瓢姚犆꣠熨췴杦叏 [ 888.851775][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 889.267989][ T30] audit: type=1326 audit(1787017706.563:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21584 comm="syz.1.5953" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f770ec code=0x0 [ 889.481465][T21590] vim2m vim2m.0: vidioc_s_fmt queue busy [ 889.508375][T21590] vim2m vim2m.0: vidioc_s_fmt queue busy [ 889.950879][ T5702] usb-storage 4-1:7.23: USB Mass Storage device detected [ 889.988742][ T5702] usb-storage 4-1:7.23: Quirks match for vid 1908 pid 1315: 20000 [ 890.051726][ T5679] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 890.121001][ T5702] usb-storage 4-1:7.65: USB Mass Storage device detected [ 890.179384][ T5702] usb-storage 4-1:7.65: Quirks match for vid 1908 pid 1315: 20000 [ 890.222514][ T5679] usb 6-1: Using ep0 maxpacket: 16 [ 890.256023][ T5679] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 890.289114][ T5679] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 890.304810][ T5702] usb 4-1: USB disconnect, device number 11 [ 890.320656][ T5679] usb 6-1: config 0 has no interface number 0 [ 890.354894][ T5679] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 890.406633][ T5679] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 890.441150][ T5679] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 890.461716][ T5679] usb 6-1: Product: syz [ 890.480034][ T5679] usb 6-1: SerialNumber: syz [ 890.498186][ T5679] usb 6-1: config 0 descriptor?? [ 890.525674][ T5679] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 890.562463][ T5679] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input89 [ 891.162093][T21632] netlink: NAT attribute has 5 unknown bytes [ 891.168731][T21632] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 891.611453][ T5687] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 891.781677][ T5687] usb 4-1: Using ep0 maxpacket: 16 [ 891.794725][ T5687] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 891.820360][ T5687] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 891.841167][ T5687] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 891.859899][ T5687] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.869015][ T5687] usb 4-1: Product: syz [ 891.873635][ T5687] usb 4-1: Manufacturer: syz [ 891.885243][ T5687] usb 4-1: SerialNumber: syz [ 891.920691][ T5687] usb 4-1: 0:2 : does not exist [ 891.951779][ T5702] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 892.123629][T21636] use of bytesused == 0 is deprecated and will be removed in the future, [ 892.139029][T21636] use the actual size instead. [ 892.144130][ T5702] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 892.162977][ T5702] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 892.185775][ T5702] usb 2-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 892.220480][ T5702] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.464582][T21636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 892.488567][T21636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 892.539945][T21652] syzkaller0: entered promiscuous mode [ 892.552266][T21652] syzkaller0: entered allmulticast mode [ 892.670782][ T5687] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 892.691606][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 892.691633][ C0] bridge0: topology change detected, propagating [ 892.692097][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 892.692117][ C0] bridge0: topology change detected, propagating [ 892.816972][ T5702] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 892.817796][ T5702] usb 2-1: invalid MIDI out EP 0 [ 892.822705][ T5687] usb 4-1: USB disconnect, device number 12 [ 892.914498][ C1] cm109_urb_ctl_callback: 436 callbacks suppressed [ 892.914516][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 892.914768][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 892.914991][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 892.915237][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 892.915339][ T5679] usb 6-1: USB disconnect, device number 6 [ 892.915453][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 892.915474][ C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 892.936508][ T5679] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 893.304193][ T5702] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 893.435482][T16382] udevd[16382]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 893.497041][T21648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5968'. [ 894.221509][ T985] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 894.382538][ T985] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 894.396666][ T985] usb 3-1: config 0 has no interfaces? [ 894.407638][ T985] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.417398][ T985] usb 3-1: Product: syz [ 894.421979][ T985] usb 3-1: Manufacturer: syz [ 894.428920][ T985] usb 3-1: SerialNumber: syz [ 894.440577][ T985] usb 3-1: config 0 descriptor?? [ 894.787091][ T5730] usb 2-1: USB disconnect, device number 19 [ 894.910926][ T985] usb 3-1: USB disconnect, device number 18 [ 894.933838][T21683] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5984'. [ 895.383495][ T985] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 895.541560][ T985] usb 2-1: Using ep0 maxpacket: 16 [ 895.563023][ T985] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 895.578094][T21694] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5988'. [ 895.599238][ T985] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 895.612990][T21694] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5988'. [ 895.629888][ T985] usb 2-1: config 0 has no interface number 0 [ 895.643422][ T985] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 895.676119][ T985] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 895.700546][ T985] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 895.712210][ T985] usb 2-1: Product: syz [ 895.716810][ T985] usb 2-1: SerialNumber: syz [ 895.722068][T21695] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5988'. [ 895.743505][ T985] usb 2-1: config 0 descriptor?? [ 895.753557][T21695] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5988'. [ 895.800258][ T985] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 895.820436][ T985] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input90 [ 895.833278][T21694] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5988'. [ 895.855499][T21694] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5988'. [ 895.955549][T21695] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5988'. [ 895.980741][T21695] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5988'. [ 897.621523][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 897.781402][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 897.793546][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 897.806023][ T9] usb 6-1: New USB device found, idVendor=12d1, idProduct=8b88, bcdDevice=f3.59 [ 897.829657][ T9] usb 6-1: config 4 has an invalid interface number: 133 but max is 0 [ 897.839286][ T9] usb 6-1: config 4 has no interface number 0 [ 897.854248][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.866091][ T9] usb 6-1: Product: syz [ 897.874629][ T9] usb 6-1: Manufacturer: syz [ 897.881689][ T9] usb 6-1: SerialNumber: syz [ 898.108671][ T9] huawei_cdc_ncm 6-1:4.133: CDC Union missing and no IAD found [ 898.126989][ T9] huawei_cdc_ncm 6-1:4.133: bind() failure [ 898.143467][ T9] usb 6-1: USB disconnect, device number 7 [ 898.657323][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 898.657798][ T9] usb 2-1: USB disconnect, device number 20 [ 898.664428][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 898.769954][ T9] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 898.992905][T21729] __nla_validate_parse: 4 callbacks suppressed [ 898.992930][T21729] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5994'. [ 899.118477][T21732] trusted_key: encrypted_key: keylen parameter is missing [ 899.349322][T21735] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5996'. [ 899.538344][T21716] netlink: 'syz.2.5993': attribute type 3 has an invalid length. [ 899.787061][T21741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5999'. [ 899.941483][ T5730] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 899.962525][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 900.121854][ T5730] usb 2-1: Using ep0 maxpacket: 32 [ 900.132927][ T5730] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 900.143412][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 900.152763][ T5730] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 900.169642][ T5730] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 900.181204][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 900.190138][ T9] usb 3-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=b6.be [ 900.201041][ T5730] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 900.218577][ T5730] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.228054][ T9] usb 3-1: config 3 has an invalid interface number: 20 but max is 0 [ 900.237369][ T9] usb 3-1: config 3 has no interface number 0 [ 900.243886][ T9] usb 3-1: config 3 interface 20 altsetting 67 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 900.255804][ T9] usb 3-1: config 3 interface 20 has no altsetting 0 [ 900.265861][ T5730] usb 2-1: config 0 descriptor?? [ 900.282793][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.292637][ T9] usb 3-1: Product: syz [ 900.299240][ T9] usb 3-1: Manufacturer: syz [ 900.307776][ T9] usb 3-1: SerialNumber: syz [ 900.551173][T21747] netlink: zone id is out of range [ 900.565104][ T9] ljca 3-1:3.20: bulk endpoints not found [ 900.572161][T21747] netlink: zone id is out of range [ 900.581029][T21747] netlink: zone id is out of range [ 900.593553][ T9] usb 3-1: USB disconnect, device number 19 [ 900.606877][T21747] netlink: zone id is out of range [ 900.616958][T21747] netlink: zone id is out of range [ 900.627259][T21747] netlink: zone id is out of range [ 900.638794][T21747] netlink: zone id is out of range [ 900.680166][T21747] netlink: zone id is out of range [ 900.690077][T21747] netlink: zone id is out of range [ 900.700286][T21747] netlink: zone id is out of range [ 900.701078][T21739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 900.749102][T21755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 900.749298][T21739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 900.799845][T21755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 900.815767][T21756] netlink: 19 bytes leftover after parsing attributes in process `syz.0.6005'. [ 900.914198][ T5730] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0038/input/input91 [ 901.058141][ T5730] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0038/input/input92 [ 901.268755][ T5730] kye 0003:0458:5011.0038: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 901.306427][T21764] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6008'. [ 901.373814][T21763] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6007'. [ 901.511669][ T5730] usb 2-1: USB disconnect, device number 21 [ 902.004968][ T5687] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 902.172900][ T5687] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 902.217000][ T5687] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 902.255838][ T5687] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 902.285394][ T5687] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.330987][ T5687] usb 4-1: config 0 descriptor?? [ 902.485286][T21793] netlink: 'syz.5.6017': attribute type 24 has an invalid length. [ 902.501902][T21793] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6017'. [ 902.523516][T21793] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 902.647734][ T30] audit: type=1326 audit(1787017719.943:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21796 comm="syz.0.6019" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb40ec code=0x7ffc0000 [ 902.738879][ T30] audit: type=1326 audit(1787017719.943:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21796 comm="syz.0.6019" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb40ec code=0x7ffc0000 [ 902.806018][ T30] audit: type=1326 audit(1787017719.943:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21796 comm="syz.0.6019" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb40ec code=0x7ffc0000 [ 902.870068][ T30] audit: type=1326 audit(1787017719.943:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21796 comm="syz.0.6019" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb40ec code=0x7ffc0000 [ 902.930175][ T30] audit: type=1326 audit(1787017719.973:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21796 comm="syz.0.6019" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb40ec code=0x7ffc0000 [ 902.983032][ T5687] usb 4-1: string descriptor 0 read error: -22 [ 903.009802][ T30] audit: type=1326 audit(1787017719.973:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21796 comm="syz.0.6019" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7fb40ec code=0x7ffc0000 [ 903.059811][ T30] audit: type=1326 audit(1787017720.003:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21796 comm="syz.0.6019" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb40ec code=0x7ffc0000 [ 903.089696][ T30] audit: type=1326 audit(1787017720.003:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21796 comm="syz.0.6019" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7fb40ec code=0x7ffc0000 [ 903.122164][ T5730] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 903.182397][T21782] netlink: 'syz.3.6013': attribute type 1 has an invalid length. [ 903.270464][ T30] audit: type=1326 audit(1787017720.563:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21796 comm="syz.0.6019" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb40ec code=0x7ffc0000 [ 903.321830][ T5730] usb 6-1: Using ep0 maxpacket: 32 [ 903.362151][ T5730] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 903.377063][ T5730] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 903.390488][ T5730] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 903.399289][ T5730] usb 6-1: Product: syz [ 903.403866][ T5730] usb 6-1: Manufacturer: syz [ 903.406867][ T30] audit: type=1326 audit(1787017720.563:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21796 comm="syz.0.6019" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf7fb40ec code=0x7ffc0000 [ 903.408657][ T5730] usb 6-1: SerialNumber: syz [ 903.438216][T21782] 8021q: adding VLAN 0 to HW filter on device bond1 [ 903.451093][ T5730] usb 6-1: config 0 descriptor?? [ 903.471666][T21806] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 903.490389][ T5730] hub 6-1:0.0: bad descriptor, ignoring hub [ 903.505386][ T5730] hub 6-1:0.0: probe with driver hub failed with error -5 [ 903.556495][ T5687] uclogic 0003:256C:006D.0039: interface is invalid, ignoring [ 903.579040][ T5687] usb 4-1: USB disconnect, device number 13 [ 903.906937][T21816] fuse: Bad value for 'user_id' [ 903.906963][T21816] fuse: Bad value for 'user_id' [ 903.983101][T21816] fuse: Bad value for 'fd' [ 904.542752][T21797] bridge0: port 3(syz_tun) entered blocking state [ 904.556545][T21797] bridge0: port 3(syz_tun) entered disabled state [ 904.567995][T21797] syz_tun: entered allmulticast mode [ 904.577982][T21797] syz_tun: entered promiscuous mode [ 904.596293][T21797] bridge0: port 3(syz_tun) entered blocking state [ 904.602974][T21797] bridge0: port 3(syz_tun) entered forwarding state [ 904.630869][ T5730] usb 6-1: USB disconnect, device number 8 [ 904.669823][T21812] bridge0: port 4(ip6gretap0) entered blocking state [ 904.690923][T21812] bridge0: port 4(ip6gretap0) entered disabled state [ 904.691382][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 904.718059][T21812] ip6gretap0: entered allmulticast mode [ 904.734627][T21812] ip6gretap0: entered promiscuous mode [ 904.746534][T21812] bridge0: port 4(ip6gretap0) entered blocking state [ 904.753539][T21812] bridge0: port 4(ip6gretap0) entered forwarding state [ 904.788224][T21797] bridge0: port 5(bond0) entered blocking state [ 904.796039][ T5730] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 904.809373][T21797] bridge0: port 5(bond0) entered disabled state [ 904.825643][T21797] bond0: entered allmulticast mode [ 904.832469][T21797] bond_slave_0: entered allmulticast mode [ 904.839978][T21797] bond_slave_1: entered allmulticast mode [ 904.876281][T21797] bond0: entered promiscuous mode [ 904.881844][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 904.888505][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 904.899052][T21797] bond_slave_0: entered promiscuous mode [ 904.907205][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 904.917782][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 904.932163][T21797] bond_slave_1: entered promiscuous mode [ 904.945883][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.955341][ T9] usb 2-1: Product: syz [ 904.959701][ T9] usb 2-1: Manufacturer: syz [ 904.964712][ T9] usb 2-1: SerialNumber: syz [ 904.972975][ T5730] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 904.990245][ T9] usb 2-1: 0:2 : does not exist [ 904.999281][ T5730] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 905.023917][ T5730] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 905.033723][ T5730] usb 6-1: Product: syz [ 905.037979][ T5730] usb 6-1: Manufacturer: syz [ 905.043901][ T5730] usb 6-1: SerialNumber: syz [ 905.050995][ T5730] usb 6-1: config 0 descriptor?? [ 905.058923][T21814] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 905.080000][ T5730] hub 6-1:0.0: bad descriptor, ignoring hub [ 905.089101][ T5730] hub 6-1:0.0: probe with driver hub failed with error -5 [ 905.149638][T21797] bridge0: port 5(bond0) entered blocking state [ 905.156175][T21797] bridge0: port 5(bond0) entered forwarding state [ 905.346642][T21812] bridge0: port 6(team0) entered blocking state [ 905.385478][T21812] bridge0: port 6(team0) entered disabled state [ 905.413514][T21812] team0: entered allmulticast mode [ 905.429329][T21839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6029'. [ 905.440619][T21812] team_slave_0: entered allmulticast mode [ 905.503932][T21812] team_slave_1: entered allmulticast mode [ 905.545649][T21812] team0: entered promiscuous mode [ 905.563011][T21812] team_slave_0: entered promiscuous mode [ 905.592630][T21812] team_slave_1: entered promiscuous mode [ 905.627887][T21812] bridge0: port 6(team0) entered blocking state [ 905.634553][T21812] bridge0: port 6(team0) entered forwarding state [ 905.783433][T13280] usb 6-1: USB disconnect, device number 9 [ 906.070828][T21847] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 906.271036][ T9] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 906.354083][ T9] usb 2-1: USB disconnect, device number 22 [ 906.372192][ T187] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 906.429862][T16382] udevd[16382]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 906.532657][ T187] usb 1-1: Using ep0 maxpacket: 16 [ 906.538901][ T187] usb 1-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=23.75 [ 906.563204][ T187] usb 1-1: config 3 has an invalid interface number: 174 but max is 0 [ 906.581370][ T187] usb 1-1: config 3 has no interface number 0 [ 906.594985][ T187] usb 1-1: config 3 interface 174 has no altsetting 0 [ 906.620060][ T187] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.637108][ T187] usb 1-1: Product: syz [ 906.660836][ T187] usb 1-1: Manufacturer: syz [ 906.670192][ T187] usb 1-1: SerialNumber: syz [ 906.883636][ T187] gspca_main: mars-2.14.0 probing 093a:050f [ 906.959366][ T187] usb 1-1: USB disconnect, device number 114 [ 907.213797][ T985] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 907.402096][ T985] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 907.445237][ T985] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.473897][ T985] usb 2-1: Product: syz [ 907.487379][ T985] usb 2-1: Manufacturer: syz [ 907.498158][ T985] usb 2-1: SerialNumber: syz [ 907.520835][ T985] usb 2-1: config 0 descriptor?? [ 907.554752][ T985] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 907.653128][T21869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6039'. [ 907.825282][ T9] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 907.991557][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 908.005672][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 908.026615][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 908.037366][ T187] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 908.071846][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.093795][ T9] usb 1-1: config 0 descriptor?? [ 908.107945][ T9] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 908.231655][ T187] usb 4-1: Using ep0 maxpacket: 32 [ 908.245822][ T187] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 908.268131][ T187] usb 4-1: config 0 has an invalid descriptor of length 140, skipping remainder of the config [ 908.299692][ T187] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.325227][ T187] usb 4-1: Product: syz [ 908.330744][T21867] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6038'. [ 908.341989][ T187] usb 4-1: Manufacturer: syz [ 908.347331][ T187] usb 4-1: SerialNumber: syz [ 908.371089][ T187] usb 4-1: config 0 descriptor?? [ 908.396869][ T187] cdc_ether 4-1:0.0: skipping garbage [ 908.402838][ T187] usb 4-1: No union descriptors [ 908.410758][ T187] usb 4-1: unsupported MDLM descriptors [ 908.602832][ T5679] usb 4-1: USB disconnect, device number 14 [ 909.276227][ T5614] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 909.288046][ T5614] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 909.305001][ T5614] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 909.320571][ T5614] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 909.339915][ T5614] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 909.378996][ T985] gspca_stk1135: reg_w 0x200 err -71 [ 909.410914][ T985] gspca_stk1135: serial bus timeout: status=0x00 [ 909.455950][ T985] gspca_stk1135: Sensor write failed [ 909.487552][ T985] gspca_stk1135: serial bus timeout: status=0x00 [ 909.520367][ T985] gspca_stk1135: Sensor write failed [ 909.546142][ T985] gspca_stk1135: serial bus timeout: status=0x00 [ 909.570136][ T985] gspca_stk1135: Sensor read failed [ 909.586381][ T9] gspca_vc032x: reg_w err -71 [ 909.607441][ T9] vc032x 1-1:0.0: probe with driver vc032x failed with error -71 [ 909.608881][ T985] gspca_stk1135: serial bus timeout: status=0x00 [ 909.665031][ T9] usb 1-1: USB disconnect, device number 115 [ 909.679525][ T985] gspca_stk1135: Sensor read failed [ 909.709350][ T985] gspca_stk1135: Detected sensor type unknown (0x0) [ 909.747886][ T985] gspca_stk1135: serial bus timeout: status=0x00 [ 909.778287][ T985] gspca_stk1135: Sensor read failed [ 909.799619][ T985] gspca_stk1135: serial bus timeout: status=0x00 [ 909.826836][ T985] gspca_stk1135: Sensor read failed [ 909.852515][ T985] gspca_stk1135: serial bus timeout: status=0x00 [ 909.859377][ T985] gspca_stk1135: Sensor write failed [ 909.866317][ T985] gspca_stk1135: serial bus timeout: status=0x00 [ 909.874556][ T985] gspca_stk1135: Sensor write failed [ 909.889906][ T985] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 909.921559][ T985] usb 2-1: USB disconnect, device number 23 [ 910.501455][ T985] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 910.609009][T21907] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6048'. [ 910.652040][ T5687] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 910.674318][ T985] usb 1-1: Using ep0 maxpacket: 32 [ 910.695406][ T985] usb 1-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 910.726700][ T985] usb 1-1: config 0 has an invalid interface number: 119 but max is 0 [ 910.745846][ T985] usb 1-1: config 0 has no interface number 0 [ 910.761513][ T985] usb 1-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 910.787225][ T985] usb 1-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 910.799348][ T5687] usb 2-1: device descriptor read/64, error -71 [ 910.822405][T21881] bridge0: port 1(bridge_slave_0) entered blocking state [ 910.829788][T21881] bridge0: port 1(bridge_slave_0) entered disabled state [ 910.837297][T21881] bridge_slave_0: entered allmulticast mode [ 910.845770][T21881] bridge_slave_0: entered promiscuous mode [ 910.846321][ T985] usb 1-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 910.855156][T21881] bridge0: port 2(bridge_slave_1) entered blocking state [ 910.869511][T21881] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.877328][T21881] bridge_slave_1: entered allmulticast mode [ 910.885848][T21881] bridge_slave_1: entered promiscuous mode [ 910.903067][ T985] usb 1-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 0 [ 910.924457][ T985] usb 1-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 910.958020][T21881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 910.962188][ T985] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.983302][T21881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 910.985759][ T985] usb 1-1: Product: syz [ 911.010884][ T985] usb 1-1: Manufacturer: syz [ 911.023023][ T985] usb 1-1: SerialNumber: syz [ 911.039287][ T985] usb 1-1: config 0 descriptor?? [ 911.061692][ T5687] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 911.081049][ T985] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.119/input/input94 [ 911.097880][T21881] team0: Port device team_slave_0 added [ 911.121719][T21881] team0: Port device team_slave_1 added [ 911.201382][ T5687] usb 2-1: device descriptor read/64, error -71 [ 911.234875][T21881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 911.265449][T21881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 911.323123][ T5687] usb usb2-port1: attempt power cycle [ 911.335595][T21881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 911.354152][ T985] usb 1-1: USB disconnect, device number 116 [ 911.365529][T21881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 911.378845][T21881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 911.412098][ T5614] Bluetooth: hci5: command tx timeout [ 911.416145][T21881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 911.593224][T21881] hsr_slave_0: entered promiscuous mode [ 911.601026][T21881] hsr_slave_1: entered promiscuous mode [ 911.608318][T21881] debugfs: 'hsr0' already exists in 'hsr' [ 911.614827][T21881] Cannot create hsr debugfs directory [ 911.681717][ T5687] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 911.712089][ T5687] usb 2-1: device descriptor read/8, error -71 [ 911.788010][T21922] IPv6: NLM_F_REPLACE set, but no existing node found! [ 911.953226][ T5687] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 912.015339][ T5687] usb 2-1: device descriptor read/8, error -71 [ 912.047514][T21926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6054'. [ 912.132426][ T5687] usb usb2-port1: unable to enumerate USB device [ 912.177244][T21881] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.374069][T21881] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.477832][T21931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6056'. [ 912.479052][T21881] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.505652][T21931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6056'. [ 912.561616][ T5687] usb 1-1: new full-speed USB device number 117 using dummy_hcd [ 912.625070][T21881] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.701449][ T5687] usb 1-1: device descriptor read/64, error -71 [ 912.751810][ T5730] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 912.877527][T21881] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 912.892648][T21881] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 912.900793][T21881] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 912.911156][T21881] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 912.924082][T21881] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 912.932339][ T5730] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 912.941646][ T5687] usb 1-1: new full-speed USB device number 118 using dummy_hcd [ 912.951203][ T5730] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 912.969412][ T5730] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 912.983818][ T5730] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.997416][T21881] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 913.004577][ T5730] usb 4-1: config 0 descriptor?? [ 913.035270][T21881] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 913.052908][T21881] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 913.091599][ T5687] usb 1-1: device descriptor read/64, error -71 [ 913.202098][ T5687] usb usb1-port1: attempt power cycle [ 913.218801][T21881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 913.249896][T21881] 8021q: adding VLAN 0 to HW filter on device team0 [ 913.275098][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 913.282435][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 913.319844][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 913.327134][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 913.418979][T21931] FAULT_INJECTION: forcing a failure. [ 913.418979][T21931] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 913.461575][T21931] CPU: 1 UID: 0 PID: 21931 Comm: syz.3.6056 Tainted: G L syzkaller #0 PREEMPT(full) [ 913.461610][T21931] Tainted: [L]=SOFTLOCKUP [ 913.461618][T21931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 913.461630][T21931] Call Trace: [ 913.461638][T21931] [ 913.461657][T21931] dump_stack_lvl+0xe8/0x150 [ 913.461698][T21931] should_fail_ex+0x40c/0x560 [ 913.461734][T21931] _copy_from_iter+0x1d3/0x1660 [ 913.461762][T21931] ? kmem_cache_alloc_node_noprof+0x111/0x610 [ 913.461793][T21931] ? rcu_is_watching+0x15/0xb0 [ 913.461824][T21931] ? trace_kmem_cache_alloc+0x29/0xe0 [ 913.461849][T21931] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 913.461875][T21931] ? __pfx__copy_from_iter+0x10/0x10 [ 913.461901][T21931] ? __alloc_skb+0x276/0x7a0 [ 913.461924][T21931] ? __alloc_skb+0x276/0x7a0 [ 913.461949][T21931] ? netlink_sendmsg+0x650/0xb40 [ 913.461974][T21931] ? skb_put+0x112/0x210 [ 913.461998][T21931] netlink_sendmsg+0x6c0/0xb40 [ 913.462031][T21931] ? __pfx_netlink_sendmsg+0x10/0x10 [ 913.462059][T21931] ? aa_sock_msg_perm+0xf1/0x1b0 [ 913.462087][T21931] ? __pfx_netlink_sendmsg+0x10/0x10 [ 913.462109][T21931] sock_sendmsg_nosec+0x13a/0x180 [ 913.462143][T21931] ____sys_sendmsg+0x54e/0x850 [ 913.462172][T21931] ? __pfx_____sys_sendmsg+0x10/0x10 [ 913.462212][T21931] ___sys_sendmsg+0x2a5/0x360 [ 913.462233][T21931] ? __lock_acquire+0x683/0x2cf0 [ 913.462259][T21931] ? __pfx____sys_sendmsg+0x10/0x10 [ 913.462273][T21931] ? get_pid_task+0x20/0x1f0 [ 913.462290][T21931] ? get_pid_task+0x20/0x1f0 [ 913.462307][T21931] ? get_pid_task+0x20/0x1f0 [ 913.462361][T21931] ? __fget_files+0x2a/0x420 [ 913.462387][T21931] ? __fget_files+0x3a2/0x420 [ 913.462416][T21931] __sys_sendmsg+0x177/0x240 [ 913.462432][T21931] ? __pfx___sys_sendmsg+0x10/0x10 [ 913.462457][T21931] __do_fast_syscall_32+0x23e/0x6f0 [ 913.462485][T21931] ? do_fast_syscall_32+0x33/0x70 [ 913.462509][T21931] ? lockdep_hardirqs_on+0x7a/0x110 [ 913.462530][T21931] ? asm_int80_emulation+0x1a/0x20 [ 913.462549][T21931] ? do_int80_emulation+0x29f/0x550 [ 913.462568][T21931] ? trace_irq_disable+0x3b/0x140 [ 913.462593][T21931] do_fast_syscall_32+0x33/0x70 [ 913.462619][T21931] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 913.462653][T21931] RIP: 0023:0xf7f570ec [ 913.462672][T21931] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 913.462690][T21931] RSP: 002b:00000000f541650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 913.462712][T21931] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000440 [ 913.462722][T21931] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 913.462729][T21931] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 913.462737][T21931] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 913.462744][T21931] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 913.462762][T21931] [ 913.467644][ T5730] usbhid 4-1:0.0: can't add hid device: -71 [ 913.555542][ T5614] Bluetooth: hci5: command tx timeout [ 913.564720][T21943] ip6tnl0: Caught tx_queue_len zero misconfig [ 913.621450][ T5687] usb 1-1: new full-speed USB device number 119 using dummy_hcd [ 913.882514][ T5687] usb 1-1: device descriptor read/8, error -71 [ 913.951964][ T5730] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 913.960184][T21881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 913.980603][ T5730] usb 4-1: USB disconnect, device number 15 [ 914.067982][T21948] net_ratelimit: 43 callbacks suppressed [ 914.068046][T21948] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 914.120919][T21881] veth0_vlan: entered promiscuous mode [ 914.127481][ T5687] usb 1-1: new full-speed USB device number 120 using dummy_hcd [ 914.150614][T21881] veth1_vlan: entered promiscuous mode [ 914.161969][ T5345] usb 2-1: new low-speed USB device number 28 using dummy_hcd [ 914.174113][ T5687] usb 1-1: device descriptor read/8, error -71 [ 914.214361][T21881] veth0_macvtap: entered promiscuous mode [ 914.248793][T21881] veth1_macvtap: entered promiscuous mode [ 914.289750][T21881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 914.305517][ T5687] usb usb1-port1: unable to enumerate USB device [ 914.327677][T21881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 914.335942][ T5345] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 914.347235][ T5345] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 914.356041][ T5345] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 914.373702][ T5345] usb 2-1: config 0 has no interface number 0 [ 914.394420][ T5345] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 914.409504][ T5345] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 914.436427][T18909] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.446771][T18909] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.458924][ T5345] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.482290][ T5345] usb 2-1: config 0 descriptor?? [ 914.537623][T18909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 914.548506][T18909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 914.562055][ T5679] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 914.573105][ T5730] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 914.581689][T17638] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.597660][T17638] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.627915][T17638] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 914.636431][T17638] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 914.716298][ T5679] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 914.728576][ T5679] usb 4-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 914.738280][ T5679] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 914.750298][ T5679] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 255, setting to 8 [ 914.762078][ T5730] usb 6-1: Using ep0 maxpacket: 16 [ 914.762328][ T5679] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.777728][ T5730] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 914.792196][T21956] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6040'. [ 914.797736][T21952] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 914.806456][ T5730] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 914.830610][ T5730] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 42662, setting to 1024 [ 914.856990][ T5730] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.867307][ T5730] usb 6-1: Product: syz [ 914.872293][ T5730] usb 6-1: Manufacturer: syz [ 914.872675][ T5345] usb 2-1: USB disconnect, device number 28 [ 914.877231][ T5730] usb 6-1: SerialNumber: syz [ 914.906029][ T5730] usb 6-1: config 0 descriptor?? [ 914.969894][ T5730] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 915.005113][T21962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6064'. [ 915.017638][T21962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6064'. [ 915.121538][T21964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 915.171229][ T5730] usb 6-1: USB disconnect, device number 10 [ 915.179825][T17638] usb 6-1: Failed to submit usb control message: -71 [ 915.205075][T17638] usb 6-1: unable to send the bmi data to the device: -71 [ 915.205456][T21964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 915.227533][T17638] usb 6-1: unable to get target info from device [ 915.237842][T21946] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6059'. [ 915.248745][T17638] usb 6-1: could not get target info (-71) [ 915.261079][T17638] usb 6-1: could not probe fw (-71) [ 915.262352][ T24] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 915.424768][ T24] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 915.441134][ T24] usb 3-1: too many configurations: 65, using maximum allowed: 8 [ 915.456207][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 915.470287][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 915.488638][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 915.506099][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 915.524596][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 915.562599][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 915.576588][ T5614] Bluetooth: hci5: command tx timeout [ 915.592073][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 915.618752][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 915.635383][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 915.647731][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 915.663362][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 915.676372][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 915.692464][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 915.704295][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 915.719748][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 915.747789][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 915.781374][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.801538][ T24] usb 3-1: config 0 descriptor?? [ 915.844864][ T5730] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 916.021601][ T5730] usb 1-1: Using ep0 maxpacket: 32 [ 916.043390][ T5730] usb 1-1: unable to get BOS descriptor or descriptor too short [ 916.057737][ T5730] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 916.080538][ T5730] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 916.101543][ T5730] usb 1-1: config 1 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 916.128068][ T5679] usb 4-1: string descriptor 0 read error: -71 [ 916.131356][ T5730] usb 1-1: config 1 interface 0 has no altsetting 0 [ 916.161726][ T5730] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.181388][ T5730] usb 1-1: Product: syz [ 916.191878][ T5730] usb 1-1: Manufacturer: syz [ 916.202759][ T5730] usb 1-1: SerialNumber: syz [ 916.382124][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 916.523388][ T5679] usb 4-1: USB disconnect, device number 16 [ 917.011580][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 917.652008][ T5614] Bluetooth: hci5: command tx timeout [ 917.844078][T21998] FAULT_INJECTION: forcing a failure. [ 917.844078][T21998] name failslab, interval 1, probability 0, space 0, times 0 [ 917.891707][T21998] CPU: 1 UID: 0 PID: 21998 Comm: syz.1.6074 Tainted: G L syzkaller #0 PREEMPT(full) [ 917.891744][T21998] Tainted: [L]=SOFTLOCKUP [ 917.891753][T21998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 917.891764][T21998] Call Trace: [ 917.891774][T21998] [ 917.891783][T21998] dump_stack_lvl+0xe8/0x150 [ 917.891820][T21998] should_fail_ex+0x40c/0x560 [ 917.891852][T21998] should_failslab+0xa8/0x100 [ 917.891884][T21998] __kmalloc_noprof+0xfe/0x720 [ 917.891911][T21998] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 917.891943][T21998] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 917.891981][T21998] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 917.892020][T21998] genl_family_rcv_msg_doit+0xda/0x340 [ 917.892056][T21998] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 917.892095][T21998] ? apparmor_capable+0x126/0x170 [ 917.892123][T21998] ? bpf_lsm_capable+0x9/0x20 [ 917.892148][T21998] ? security_capable+0x7e/0x2c0 [ 917.892187][T21998] genl_rcv_msg+0x614/0x7a0 [ 917.892224][T21998] ? __pfx_genl_rcv_msg+0x10/0x10 [ 917.892253][T21998] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 917.892354][T21998] ? __pfx_ref_tracker_free+0x10/0x10 [ 917.892394][T21998] netlink_rcv_skb+0x226/0x4a0 [ 917.892421][T21998] ? __pfx_genl_rcv_msg+0x10/0x10 [ 917.892454][T21998] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 917.892494][T21998] ? down_read+0x2be/0x330 [ 917.892526][T21998] genl_rcv+0x28/0x40 [ 917.892554][T21998] netlink_unicast+0x7bb/0x940 [ 917.892589][T21998] netlink_sendmsg+0x813/0xb40 [ 917.892633][T21998] ? __pfx_netlink_sendmsg+0x10/0x10 [ 917.892664][T21998] ? aa_sock_msg_perm+0xf1/0x1b0 [ 917.892692][T21998] ? __pfx_netlink_sendmsg+0x10/0x10 [ 917.892716][T21998] sock_sendmsg_nosec+0x13a/0x180 [ 917.892751][T21998] ____sys_sendmsg+0x54e/0x850 [ 917.892781][T21998] ? __pfx_____sys_sendmsg+0x10/0x10 [ 917.892824][T21998] ___sys_sendmsg+0x2a5/0x360 [ 917.892847][T21998] ? __lock_acquire+0x683/0x2cf0 [ 917.892881][T21998] ? __pfx____sys_sendmsg+0x10/0x10 [ 917.892904][T21998] ? get_pid_task+0x20/0x1f0 [ 917.892931][T21998] ? get_pid_task+0x20/0x1f0 [ 917.892957][T21998] ? get_pid_task+0x20/0x1f0 [ 917.893018][T21998] ? __fget_files+0x2a/0x420 [ 917.893044][T21998] ? __fget_files+0x3a2/0x420 [ 917.893081][T21998] __sys_sendmsg+0x177/0x240 [ 917.893108][T21998] ? __pfx___sys_sendmsg+0x10/0x10 [ 917.893153][T21998] __do_fast_syscall_32+0x23e/0x6f0 [ 917.893181][T21998] ? do_fast_syscall_32+0x33/0x70 [ 917.893204][T21998] ? lockdep_hardirqs_on+0x7a/0x110 [ 917.893226][T21998] ? asm_int80_emulation+0x1a/0x20 [ 917.893247][T21998] ? do_int80_emulation+0x29f/0x550 [ 917.893278][T21998] do_fast_syscall_32+0x33/0x70 [ 917.893304][T21998] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 917.893329][T21998] RIP: 0023:0xf7f770ec [ 917.893349][T21998] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 917.893368][T21998] RSP: 002b:00000000f543650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 917.893392][T21998] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000100 [ 917.893408][T21998] RDX: 000000000c0004c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 917.893422][T21998] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 917.893435][T21998] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 917.893448][T21998] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 917.893480][T21998] [ 918.330680][ T24] usb 3-1: USB disconnect, device number 20 [ 918.491431][ T985] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 918.510346][T22006] FAULT_INJECTION: forcing a failure. [ 918.510346][T22006] name failslab, interval 1, probability 0, space 0, times 0 [ 918.561538][T22006] CPU: 0 UID: 0 PID: 22006 Comm: syz.2.6079 Tainted: G L syzkaller #0 PREEMPT(full) [ 918.561579][T22006] Tainted: [L]=SOFTLOCKUP [ 918.561587][T22006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 918.561600][T22006] Call Trace: [ 918.561609][T22006] [ 918.561619][T22006] dump_stack_lvl+0xe8/0x150 [ 918.561656][T22006] should_fail_ex+0x40c/0x560 [ 918.561688][T22006] should_failslab+0xa8/0x100 [ 918.561720][T22006] __kmalloc_cache_noprof+0xa8/0x660 [ 918.561747][T22006] ? rtnl_newlink+0x136/0x1bd0 [ 918.561769][T22006] ? rtnl_newlink+0x136/0x1bd0 [ 918.561797][T22006] rtnl_newlink+0x136/0x1bd0 [ 918.561819][T22006] ? kasan_save_track+0x4f/0x80 [ 918.561843][T22006] ? kasan_save_track+0x3e/0x80 [ 918.561867][T22006] ? kasan_save_free_info+0x40/0x50 [ 918.561888][T22006] ? __kasan_slab_free+0x5c/0x80 [ 918.561912][T22006] ? kmem_cache_free+0x182/0x650 [ 918.561937][T22006] ? dev_hard_start_xmit+0x2cd/0x830 [ 918.561960][T22006] ? __netlink_deliver_tap+0x5b4/0x860 [ 918.561982][T22006] ? netlink_deliver_tap+0x19c/0x1b0 [ 918.562002][T22006] ? netlink_unicast+0x77f/0x940 [ 918.562020][T22006] ? netlink_sendmsg+0x813/0xb40 [ 918.562045][T22006] ? __pfx_rtnl_newlink+0x10/0x10 [ 918.562063][T22006] ? __do_fast_syscall_32+0x23e/0x6f0 [ 918.562088][T22006] ? do_fast_syscall_32+0x33/0x70 [ 918.562111][T22006] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 918.562178][T22006] ? kasan_quarantine_put+0xbb/0x1f0 [ 918.562203][T22006] ? lockdep_hardirqs_on+0x7a/0x110 [ 918.562230][T22006] ? nlmon_xmit+0xb0/0x100 [ 918.562311][T22006] ? kmem_cache_free+0x182/0x650 [ 918.562332][T22006] ? __lock_acquire+0x683/0x2cf0 [ 918.562351][T22006] ? __dev_queue_xmit+0x29b/0x3820 [ 918.562368][T22006] ? __local_bh_enable_ip+0xd0/0x130 [ 918.562384][T22006] ? lockdep_hardirqs_on+0x7a/0x110 [ 918.562397][T22006] ? __dev_queue_xmit+0x29b/0x3820 [ 918.562410][T22006] ? __local_bh_enable_ip+0xd0/0x130 [ 918.562422][T22006] ? __dev_queue_xmit+0x29b/0x3820 [ 918.562441][T22006] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 918.562454][T22006] ? __pfx_rtnl_newlink+0x10/0x10 [ 918.562473][T22006] ? __pfx_rtnl_newlink+0x10/0x10 [ 918.562484][T22006] rtnetlink_rcv_msg+0x802/0xc00 [ 918.562499][T22006] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 918.562511][T22006] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 918.562522][T22006] ? ref_tracker_free+0x689/0x830 [ 918.562540][T22006] ? __pfx_ref_tracker_free+0x10/0x10 [ 918.562562][T22006] netlink_rcv_skb+0x226/0x4a0 [ 918.562581][T22006] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 918.562595][T22006] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 918.562620][T22006] ? netlink_deliver_tap+0x2e/0x1b0 [ 918.562635][T22006] ? netlink_deliver_tap+0x2e/0x1b0 [ 918.562652][T22006] netlink_unicast+0x7bb/0x940 [ 918.562675][T22006] netlink_sendmsg+0x813/0xb40 [ 918.562695][T22006] ? __pfx_netlink_sendmsg+0x10/0x10 [ 918.562712][T22006] ? aa_sock_msg_perm+0xf1/0x1b0 [ 918.562728][T22006] ? __pfx_netlink_sendmsg+0x10/0x10 [ 918.562741][T22006] sock_sendmsg_nosec+0x13a/0x180 [ 918.562761][T22006] ____sys_sendmsg+0x54e/0x850 [ 918.562778][T22006] ? __pfx_____sys_sendmsg+0x10/0x10 [ 918.562820][T22006] ___sys_sendmsg+0x2a5/0x360 [ 918.562833][T22006] ? __lock_acquire+0x683/0x2cf0 [ 918.562851][T22006] ? __pfx____sys_sendmsg+0x10/0x10 [ 918.562865][T22006] ? get_pid_task+0x20/0x1f0 [ 918.562881][T22006] ? get_pid_task+0x20/0x1f0 [ 918.562896][T22006] ? get_pid_task+0x20/0x1f0 [ 918.562928][T22006] ? __fget_files+0x2a/0x420 [ 918.562944][T22006] ? __fget_files+0x3a2/0x420 [ 918.562965][T22006] __sys_sendmsg+0x177/0x240 [ 918.562980][T22006] ? __pfx___sys_sendmsg+0x10/0x10 [ 918.563005][T22006] __do_fast_syscall_32+0x23e/0x6f0 [ 918.563020][T22006] ? do_fast_syscall_32+0x33/0x70 [ 918.563034][T22006] ? lockdep_hardirqs_on+0x7a/0x110 [ 918.563047][T22006] ? asm_int80_emulation+0x1a/0x20 [ 918.563059][T22006] ? do_int80_emulation+0x29f/0x550 [ 918.563076][T22006] do_fast_syscall_32+0x33/0x70 [ 918.563091][T22006] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 918.563106][T22006] RIP: 0023:0xf702f0ec [ 918.563120][T22006] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 918.563132][T22006] RSP: 002b:00000000f541d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 918.563148][T22006] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080006040 [ 918.563163][T22006] RDX: 0000000024040084 RSI: 0000000000000000 RDI: 0000000000000000 [ 918.563171][T22006] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 918.563179][T22006] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 918.563187][T22006] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 918.563208][T22006] [ 919.061411][ T985] usb 4-1: Using ep0 maxpacket: 16 [ 919.067460][ T985] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 919.078504][ T985] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 919.086956][ T985] usb 4-1: config 0 has no interface number 0 [ 919.097131][T22009] ipip0: entered promiscuous mode [ 919.103241][ T985] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 919.114702][ T985] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 919.232870][T22009] ipip0: entered allmulticast mode [ 919.233525][ T985] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 919.276918][ T985] usb 4-1: Product: syz [ 919.278730][T22011] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 919.291560][ T985] usb 4-1: SerialNumber: syz [ 919.296951][T22011] macvtap0: entered promiscuous mode [ 919.303804][ T985] usb 4-1: config 0 descriptor?? [ 919.358339][T22008] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6078'. [ 919.647943][ T985] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 919.658342][ T985] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input96 [ 919.757436][ T5730] cdc_ether 1-1:1.0: GUID doesn't match [ 919.815380][ T5730] usb 1-1: USB disconnect, device number 121 [ 920.796628][T22031] FAULT_INJECTION: forcing a failure. [ 920.796628][T22031] name failslab, interval 1, probability 0, space 0, times 0 [ 920.809824][T22031] CPU: 1 UID: 0 PID: 22031 Comm: syz.2.6086 Tainted: G L syzkaller #0 PREEMPT(full) [ 920.809860][T22031] Tainted: [L]=SOFTLOCKUP [ 920.809868][T22031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 920.809885][T22031] Call Trace: [ 920.809894][T22031] [ 920.809903][T22031] dump_stack_lvl+0xe8/0x150 [ 920.809941][T22031] should_fail_ex+0x40c/0x560 [ 920.809973][T22031] should_failslab+0xa8/0x100 [ 920.810004][T22031] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 920.810031][T22031] ? skb_clone+0x212/0x3a0 [ 920.810055][T22031] ? skb_clone+0x212/0x3a0 [ 920.810096][T22031] skb_clone+0x212/0x3a0 [ 920.810125][T22031] __netlink_deliver_tap+0x413/0x860 [ 920.810164][T22031] ? netlink_deliver_tap+0x2e/0x1b0 [ 920.810191][T22031] netlink_deliver_tap+0x19c/0x1b0 [ 920.810218][T22031] netlink_unicast+0x77f/0x940 [ 920.810261][T22031] netlink_sendmsg+0x813/0xb40 [ 920.810298][T22031] ? __pfx_netlink_sendmsg+0x10/0x10 [ 920.810328][T22031] ? aa_sock_msg_perm+0xf1/0x1b0 [ 920.810357][T22031] ? __pfx_netlink_sendmsg+0x10/0x10 [ 920.810381][T22031] sock_sendmsg_nosec+0x13a/0x180 [ 920.810413][T22031] ____sys_sendmsg+0x54e/0x850 [ 920.810443][T22031] ? __pfx_____sys_sendmsg+0x10/0x10 [ 920.810483][T22031] ___sys_sendmsg+0x2a5/0x360 [ 920.810504][T22031] ? __lock_acquire+0x683/0x2cf0 [ 920.810536][T22031] ? __pfx____sys_sendmsg+0x10/0x10 [ 920.810557][T22031] ? get_pid_task+0x20/0x1f0 [ 920.810584][T22031] ? get_pid_task+0x20/0x1f0 [ 920.810607][T22031] ? get_pid_task+0x20/0x1f0 [ 920.810662][T22031] ? __fget_files+0x2a/0x420 [ 920.810690][T22031] ? __fget_files+0x3a2/0x420 [ 920.810726][T22031] __sys_sendmsg+0x177/0x240 [ 920.810754][T22031] ? __pfx___sys_sendmsg+0x10/0x10 [ 920.810800][T22031] __do_fast_syscall_32+0x23e/0x6f0 [ 920.810828][T22031] ? do_fast_syscall_32+0x33/0x70 [ 920.810851][T22031] ? lockdep_hardirqs_on+0x7a/0x110 [ 920.810874][T22031] ? asm_int80_emulation+0x1a/0x20 [ 920.810893][T22031] ? do_int80_emulation+0x29f/0x550 [ 920.810916][T22031] ? trace_irq_disable+0x3b/0x140 [ 920.810943][T22031] do_fast_syscall_32+0x33/0x70 [ 920.810969][T22031] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 920.810993][T22031] RIP: 0023:0xf702f0ec [ 920.811012][T22031] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 920.811029][T22031] RSP: 002b:00000000f541d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 920.811051][T22031] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 920.811065][T22031] RDX: 0000000008000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 920.811077][T22031] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 920.811097][T22031] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 920.811108][T22031] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 920.811139][T22031] [ 920.811215][T22031] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6086'. [ 921.138880][T22031] vlan2: entered allmulticast mode [ 921.144362][T22031] bond0: entered allmulticast mode [ 921.150580][T22031] bond_slave_0: entered allmulticast mode [ 921.157353][T22031] bond_slave_1: entered allmulticast mode [ 921.276154][ T5730] IPVS: starting estimator thread 0... [ 921.285744][T22042] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.6088'. [ 921.319124][T22042] FAULT_INJECTION: forcing a failure. [ 921.319124][T22042] name failslab, interval 1, probability 0, space 0, times 0 [ 921.384801][T22041] IPVS: using max 29 ests per chain, 69600 per kthread [ 921.409039][T22042] CPU: 0 UID: 0 PID: 22042 Comm: syz.2.6088 Tainted: G L syzkaller #0 PREEMPT(full) [ 921.409072][T22042] Tainted: [L]=SOFTLOCKUP [ 921.409080][T22042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 921.409090][T22042] Call Trace: [ 921.409099][T22042] [ 921.409108][T22042] dump_stack_lvl+0xe8/0x150 [ 921.409145][T22042] should_fail_ex+0x40c/0x560 [ 921.409175][T22042] should_failslab+0xa8/0x100 [ 921.409207][T22042] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 921.409231][T22042] ? skb_clone+0x212/0x3a0 [ 921.409253][T22042] ? skb_clone+0x212/0x3a0 [ 921.409283][T22042] skb_clone+0x212/0x3a0 [ 921.409312][T22042] __netlink_deliver_tap+0x413/0x860 [ 921.409349][T22042] ? netlink_deliver_tap+0x2e/0x1b0 [ 921.409376][T22042] netlink_deliver_tap+0x19c/0x1b0 [ 921.409400][T22042] netlink_dump+0x95b/0xee0 [ 921.409424][T22042] ? __netlink_lookup+0xc6/0x8b0 [ 921.409457][T22042] ? __pfx_netlink_dump+0x10/0x10 [ 921.409490][T22042] ? netlink_lookup+0x30/0x200 [ 921.409512][T22042] ? netlink_lookup+0x30/0x200 [ 921.409539][T22042] __netlink_dump_start+0x589/0x7b0 [ 921.409582][T22042] rtnetlink_rcv_msg+0xa48/0xc00 [ 921.409614][T22042] ? __pfx_tc_dump_qdisc+0x10/0x10 [ 921.409711][T22042] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 921.409731][T22042] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 921.409750][T22042] ? ref_tracker_free+0x689/0x830 [ 921.409786][T22042] ? __pfx_rtnl_dumpit+0x10/0x10 [ 921.409806][T22042] ? __pfx_tc_dump_qdisc+0x10/0x10 [ 921.409848][T22042] netlink_rcv_skb+0x226/0x4a0 [ 921.409874][T22042] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 921.409898][T22042] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 921.409945][T22042] ? netlink_deliver_tap+0x2e/0x1b0 [ 921.409969][T22042] ? netlink_deliver_tap+0x2e/0x1b0 [ 921.409998][T22042] netlink_unicast+0x7bb/0x940 [ 921.410032][T22042] netlink_sendmsg+0x813/0xb40 [ 921.410065][T22042] ? __pfx_netlink_sendmsg+0x10/0x10 [ 921.410095][T22042] ? aa_sock_msg_perm+0xf1/0x1b0 [ 921.410142][T22042] ? __pfx_netlink_sendmsg+0x10/0x10 [ 921.410164][T22042] sock_sendmsg_nosec+0x13a/0x180 [ 921.410196][T22042] sock_sendmsg+0x1ca/0x2d0 [ 921.410237][T22042] ? __pfx_sock_sendmsg+0x10/0x10 [ 921.410280][T22042] ? __asan_memset+0x22/0x50 [ 921.410304][T22042] ? iov_iter_bvec+0xb8/0x180 [ 921.410337][T22042] splice_to_socket+0xb5e/0x12a0 [ 921.410388][T22042] ? __pfx_splice_to_socket+0x10/0x10 [ 921.410464][T22042] ? bpf_lsm_file_permission+0x9/0x20 [ 921.410486][T22042] ? security_file_permission+0x75/0x260 [ 921.410515][T22042] ? rw_verify_area+0x203/0x4c0 [ 921.410553][T22042] ? __pfx_splice_to_socket+0x10/0x10 [ 921.410581][T22042] do_splice+0xf14/0x1970 [ 921.410633][T22042] ? __pfx_do_splice+0x10/0x10 [ 921.410670][T22042] __se_sys_splice+0x353/0x490 [ 921.410705][T22042] ? __pfx___se_sys_splice+0x10/0x10 [ 921.410737][T22042] ? __ia32_sys_splice+0x21/0xf0 [ 921.410764][T22042] __do_fast_syscall_32+0x23e/0x6f0 [ 921.410781][T22042] ? do_fast_syscall_32+0x33/0x70 [ 921.410795][T22042] ? lockdep_hardirqs_on+0x7a/0x110 [ 921.410811][T22042] ? asm_int80_emulation+0x1a/0x20 [ 921.410829][T22042] ? do_int80_emulation+0x29f/0x550 [ 921.410859][T22042] do_fast_syscall_32+0x33/0x70 [ 921.410884][T22042] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 921.410907][T22042] RIP: 0023:0xf702f0ec [ 921.410924][T22042] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 921.410935][T22042] RSP: 002b:00000000f53fc50c EFLAGS: 00000206 ORIG_RAX: 0000000000000139 [ 921.410951][T22042] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 921.410960][T22042] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 000000000004ffe6 [ 921.410967][T22042] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 921.410979][T22042] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 921.410991][T22042] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 921.411022][T22042] [ 922.143521][T22052] bond3: option ad_actor_sys_prio: invalid value (0) [ 922.150331][T22052] bond3: option ad_actor_sys_prio: allowed values 1 - 65535 [ 922.162155][T22052] bond3 (unregistering): Released all slaves [ 922.436315][T22065] syz_tun: entered allmulticast mode [ 922.578868][T22065] dvmrp8: entered allmulticast mode [ 922.691849][T22068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6094'. [ 922.984616][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 922.992045][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 922.999583][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 923.007101][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 923.016699][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 923.028753][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 923.036465][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 923.046961][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 923.055703][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 923.065421][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 923.076600][ T985] usb 4-1: USB disconnect, device number 17 [ 923.083036][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 923.185194][ T985] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 923.311413][ T187] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 923.462149][ T187] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 923.486021][ T187] usb 2-1: too many configurations: 241, using maximum allowed: 8 [ 923.520726][ T187] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.531899][ T187] usb 2-1: Product: syz [ 923.537096][ T187] usb 2-1: Manufacturer: syz [ 923.544039][ T187] usb 2-1: SerialNumber: syz [ 923.684610][T22077] FAULT_INJECTION: forcing a failure. [ 923.684610][T22077] name failslab, interval 1, probability 0, space 0, times 0 [ 923.756373][T22077] CPU: 1 UID: 0 PID: 22077 Comm: syz.3.6097 Tainted: G L syzkaller #0 PREEMPT(full) [ 923.756397][T22077] Tainted: [L]=SOFTLOCKUP [ 923.756402][T22077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 923.756410][T22077] Call Trace: [ 923.756416][T22077] [ 923.756427][T22077] dump_stack_lvl+0xe8/0x150 [ 923.756461][T22077] should_fail_ex+0x40c/0x560 [ 923.756492][T22077] should_failslab+0xa8/0x100 [ 923.756524][T22077] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 923.756548][T22077] ? local_lock_release+0x9c/0x160 [ 923.756572][T22077] ? __alloc_skb+0x1d7/0x7a0 [ 923.756590][T22077] ? __alloc_skb+0x1d7/0x7a0 [ 923.756617][T22077] __alloc_skb+0x1d7/0x7a0 [ 923.756680][T22077] netlink_ack+0x136/0xb30 [ 923.756704][T22077] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 923.756724][T22077] ? ref_tracker_free+0x689/0x830 [ 923.756751][T22077] ? __pfx_ref_tracker_free+0x10/0x10 [ 923.756781][T22077] netlink_rcv_skb+0x2a4/0x4a0 [ 923.756805][T22077] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 923.756830][T22077] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 923.756866][T22077] ? netlink_deliver_tap+0x2e/0x1b0 [ 923.756891][T22077] ? netlink_deliver_tap+0x2e/0x1b0 [ 923.756921][T22077] netlink_unicast+0x7bb/0x940 [ 923.756954][T22077] netlink_sendmsg+0x813/0xb40 [ 923.756988][T22077] ? __pfx_netlink_sendmsg+0x10/0x10 [ 923.757018][T22077] ? aa_sock_msg_perm+0xf1/0x1b0 [ 923.757045][T22077] ? __pfx_netlink_sendmsg+0x10/0x10 [ 923.757068][T22077] sock_sendmsg_nosec+0x13a/0x180 [ 923.757100][T22077] ____sys_sendmsg+0x54e/0x850 [ 923.757131][T22077] ? __pfx_____sys_sendmsg+0x10/0x10 [ 923.757171][T22077] ___sys_sendmsg+0x2a5/0x360 [ 923.757193][T22077] ? __lock_acquire+0x683/0x2cf0 [ 923.757225][T22077] ? __pfx____sys_sendmsg+0x10/0x10 [ 923.757249][T22077] ? get_pid_task+0x20/0x1f0 [ 923.757275][T22077] ? get_pid_task+0x20/0x1f0 [ 923.757299][T22077] ? get_pid_task+0x20/0x1f0 [ 923.757353][T22077] ? __fget_files+0x2a/0x420 [ 923.757373][T22077] ? __fget_files+0x3a2/0x420 [ 923.757394][T22077] __sys_sendmsg+0x177/0x240 [ 923.757418][T22077] ? __pfx___sys_sendmsg+0x10/0x10 [ 923.757462][T22077] __do_fast_syscall_32+0x23e/0x6f0 [ 923.757490][T22077] ? do_fast_syscall_32+0x33/0x70 [ 923.757513][T22077] ? lockdep_hardirqs_on+0x7a/0x110 [ 923.757535][T22077] ? asm_int80_emulation+0x1a/0x20 [ 923.757555][T22077] ? do_int80_emulation+0x29f/0x550 [ 923.757579][T22077] ? trace_irq_disable+0x3b/0x140 [ 923.757608][T22077] do_fast_syscall_32+0x33/0x70 [ 923.757634][T22077] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 923.757669][T22077] RIP: 0023:0xf7f570ec [ 923.757689][T22077] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 923.757706][T22077] RSP: 002b:00000000f541650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 923.757731][T22077] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000600 [ 923.757746][T22077] RDX: 0000000004004080 RSI: 0000000000000000 RDI: 0000000000000000 [ 923.757760][T22077] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 923.757773][T22077] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 923.757785][T22077] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 923.757817][T22077] [ 923.765182][ T5730] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 924.118104][T22050] syz_tun: left allmulticast mode [ 924.247613][ C0] usb 2-1: ath9k_htc: over RX MAX_PKT_NUM [ 924.525301][ T5345] usb 2-1: USB disconnect, device number 29 [ 924.683727][ T187] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 924.894047][ T187] usb 4-1: Using ep0 maxpacket: 16 [ 924.908918][ T187] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 924.958440][ T187] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 924.985913][ T187] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 925.028680][ T187] usb 4-1: config 0 has no interface number 0 [ 925.059917][ T187] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.077942][ T187] usb 4-1: Product: syz [ 925.092866][ T187] usb 4-1: Manufacturer: syz [ 925.107834][ T187] usb 4-1: SerialNumber: syz [ 925.137129][ T187] usb 4-1: config 0 descriptor?? [ 925.264349][ T5730] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 925.286424][ T5730] ath9k_htc: Failed to initialize the device [ 925.305299][ T5345] usb 2-1: ath9k_htc: USB layer deinitialized [ 925.468081][T22079] netlink: 292 bytes leftover after parsing attributes in process `syz.3.6098'. [ 925.514475][ T187] usb 4-1: USB disconnect, device number 18 [ 925.641432][ T5345] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 925.792598][ T5345] usb 2-1: Using ep0 maxpacket: 16 [ 925.798864][ T5345] usb 2-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 925.812404][ T5345] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 925.824481][ T5345] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 925.834768][ T5345] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 925.848176][ T5345] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.861906][ T5345] usb 2-1: config 0 descriptor?? [ 925.871353][ T5701] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 926.051485][ T5701] usb 3-1: Using ep0 maxpacket: 16 [ 926.068084][ T5701] usb 3-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 926.095124][ T5701] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.105839][ T5701] usb 3-1: Product: syz [ 926.109542][T22083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 926.121517][ T5701] usb 3-1: Manufacturer: syz [ 926.126874][ T5701] usb 3-1: SerialNumber: syz [ 926.138647][T22083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 926.144308][ T5701] usb 3-1: config 0 descriptor?? [ 926.165295][ T5701] gspca_main: spca508-2.14.0 probing 041e:4018 [ 926.185379][T22093] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6103'. [ 926.218714][T22093] vlan3: entered allmulticast mode [ 926.224105][T22093] bond0: entered allmulticast mode [ 926.229322][T22093] bond_slave_0: entered allmulticast mode [ 926.235619][T22093] bond_slave_1: entered allmulticast mode [ 926.363295][T22095] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6104'. [ 926.378633][ T5701] gspca_spca508: reg_read err -32 [ 926.574342][ T5701] gspca_spca508: reg_read err -32 [ 926.588787][ T5701] gspca_spca508: reg_read err -32 [ 926.599712][ T5701] gspca_spca508: reg_read err -32 [ 926.697422][ T5345] usbhid 2-1:0.0: can't add hid device: -71 [ 926.726378][ T5345] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 926.755402][ T5345] usb 2-1: USB disconnect, device number 30 [ 927.151730][ T5701] gspca_spca508: reg write: error -110 [ 927.163197][ T5701] spca508 3-1:0.0: probe with driver spca508 failed with error -110 [ 927.678146][T22108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6108'. [ 928.026488][T22110] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6110'. [ 928.063993][T22112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6111'. [ 928.511436][ T5345] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 928.545536][T22132] FAULT_INJECTION: forcing a failure. [ 928.545536][T22132] name failslab, interval 1, probability 0, space 0, times 0 [ 928.606295][T22134] syzkaller0: entered promiscuous mode [ 928.642687][T22134] syzkaller0: entered allmulticast mode [ 928.652082][T22132] CPU: 0 UID: 0 PID: 22132 Comm: syz.2.6118 Tainted: G L syzkaller #0 PREEMPT(full) [ 928.652120][T22132] Tainted: [L]=SOFTLOCKUP [ 928.652128][T22132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 928.652141][T22132] Call Trace: [ 928.652151][T22132] [ 928.652260][T22132] dump_stack_lvl+0xe8/0x150 [ 928.652295][T22132] should_fail_ex+0x40c/0x560 [ 928.652325][T22132] should_failslab+0xa8/0x100 [ 928.652357][T22132] __kmalloc_noprof+0xfe/0x720 [ 928.652385][T22132] ? hash_netnet_create+0x716/0x1580 [ 928.652483][T22132] ? hash_netnet_create+0x716/0x1580 [ 928.652518][T22132] hash_netnet_create+0x716/0x1580 [ 928.652563][T22132] ? __pfx_hash_netnet_create+0x10/0x10 [ 928.652595][T22132] ? ip_set_create+0x4ef/0x1a50 [ 928.652619][T22132] ? __pfx_hash_netnet_create+0x10/0x10 [ 928.652648][T22132] ip_set_create+0xae8/0x1a50 [ 928.652673][T22132] ? ip_set_create+0x4ef/0x1a50 [ 928.652709][T22132] ? __pfx_ip_set_create+0x10/0x10 [ 928.652771][T22132] nfnetlink_rcv_msg+0xcc2/0x12b0 [ 928.652795][T22132] ? unwind_get_return_address+0x4d/0x90 [ 928.652818][T22132] ? nfnetlink_rcv_msg+0x228/0x12b0 [ 928.652861][T22132] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 928.652947][T22132] netlink_rcv_skb+0x226/0x4a0 [ 928.652976][T22132] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 928.653001][T22132] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 928.653038][T22132] ? bpf_lsm_capable+0x9/0x20 [ 928.653064][T22132] ? security_capable+0x7e/0x2c0 [ 928.653104][T22132] nfnetlink_rcv+0x2b9/0x28c0 [ 928.653131][T22132] ? __dev_queue_xmit+0x29b/0x3820 [ 928.653215][T22132] ? __local_bh_enable_ip+0xd0/0x130 [ 928.653242][T22132] ? lockdep_hardirqs_on+0x7a/0x110 [ 928.653267][T22132] ? __dev_queue_xmit+0x29b/0x3820 [ 928.653291][T22132] ? __local_bh_enable_ip+0xd0/0x130 [ 928.653312][T22132] ? __dev_queue_xmit+0x29b/0x3820 [ 928.653338][T22132] ? __dev_queue_xmit+0x1edc/0x3820 [ 928.653362][T22132] ? __do_fast_syscall_32+0x23e/0x6f0 [ 928.653388][T22132] ? do_fast_syscall_32+0x33/0x70 [ 928.653426][T22132] ? __dev_queue_xmit+0x29b/0x3820 [ 928.653452][T22132] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 928.653480][T22132] ? __pfx___dev_queue_xmit+0x10/0x10 [ 928.653513][T22132] ? ref_tracker_free+0x689/0x830 [ 928.653544][T22132] ? __pfx_ref_tracker_free+0x10/0x10 [ 928.653580][T22132] ? __skb_clone+0x449/0x6c0 [ 928.653612][T22132] ? skb_clone+0x246/0x3a0 [ 928.653640][T22132] ? __netlink_deliver_tap+0x811/0x860 [ 928.653663][T22132] ? netlink_deliver_tap+0x2e/0x1b0 [ 928.653691][T22132] ? netlink_deliver_tap+0x2e/0x1b0 [ 928.653714][T22132] ? netlink_deliver_tap+0x2e/0x1b0 [ 928.653743][T22132] netlink_unicast+0x7bb/0x940 [ 928.653775][T22132] netlink_sendmsg+0x813/0xb40 [ 928.653809][T22132] ? __pfx_netlink_sendmsg+0x10/0x10 [ 928.653838][T22132] ? aa_sock_msg_perm+0xf1/0x1b0 [ 928.653865][T22132] ? __pfx_netlink_sendmsg+0x10/0x10 [ 928.653888][T22132] sock_sendmsg_nosec+0x13a/0x180 [ 928.653921][T22132] ____sys_sendmsg+0x54e/0x850 [ 928.653952][T22132] ? __pfx_____sys_sendmsg+0x10/0x10 [ 928.653995][T22132] ___sys_sendmsg+0x2a5/0x360 [ 928.654018][T22132] ? __lock_acquire+0x683/0x2cf0 [ 928.654051][T22132] ? __pfx____sys_sendmsg+0x10/0x10 [ 928.654076][T22132] ? get_pid_task+0x20/0x1f0 [ 928.654105][T22132] ? get_pid_task+0x20/0x1f0 [ 928.654128][T22132] ? get_pid_task+0x20/0x1f0 [ 928.654197][T22132] ? __fget_files+0x2a/0x420 [ 928.654224][T22132] ? __fget_files+0x3a2/0x420 [ 928.654262][T22132] __sys_sendmsg+0x177/0x240 [ 928.654289][T22132] ? __pfx___sys_sendmsg+0x10/0x10 [ 928.654336][T22132] __do_fast_syscall_32+0x23e/0x6f0 [ 928.654362][T22132] ? do_fast_syscall_32+0x33/0x70 [ 928.654385][T22132] ? lockdep_hardirqs_on+0x7a/0x110 [ 928.654407][T22132] ? asm_int80_emulation+0x1a/0x20 [ 928.654427][T22132] ? do_int80_emulation+0x29f/0x550 [ 928.654450][T22132] ? trace_irq_disable+0x3b/0x140 [ 928.654479][T22132] do_fast_syscall_32+0x33/0x70 [ 928.654503][T22132] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 928.654529][T22132] RIP: 0023:0xf702f0ec [ 928.654550][T22132] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 928.654569][T22132] RSP: 002b:00000000f541d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 928.654592][T22132] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 928.654608][T22132] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 0000000000000000 [ 928.654622][T22132] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 928.654635][T22132] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 928.654648][T22132] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 928.654692][T22132] [ 928.661521][ T5345] usb 6-1: device descriptor read/64, error -71 [ 929.446180][ T25] I/O error, dev loop8, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 929.581497][ T5345] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 929.698870][T22146] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6125'. [ 929.712229][ T5345] usb 6-1: device descriptor read/64, error -71 [ 929.822334][ T5345] usb usb6-port1: attempt power cycle [ 929.841382][ T985] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 929.993814][ T985] usb 2-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 930.016456][ T985] usb 2-1: config 0 has no interfaces? [ 930.031907][ T985] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.060960][ T985] usb 2-1: Product: syz [ 930.091457][ T985] usb 2-1: Manufacturer: syz [ 930.113121][ T985] usb 2-1: SerialNumber: syz [ 930.126992][ T985] usb 2-1: config 0 descriptor?? [ 930.161483][ T5345] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 930.170437][T22156] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6128'. [ 930.198283][ T5345] usb 6-1: device descriptor read/8, error -71 [ 930.348254][T22144] sg_write: data in/out 483328/136 bytes for SCSI command 0x0-- guessing data in; [ 930.348254][T22144] program syz.1.6124 not setting count and/or reply_len properly [ 930.391109][ T985] usb 2-1: USB disconnect, device number 31 [ 930.441440][ T5345] usb 6-1: new low-speed USB device number 14 using dummy_hcd [ 930.462328][ T5345] usb 6-1: device descriptor read/8, error -71 [ 930.581801][ T5345] usb usb6-port1: unable to enumerate USB device [ 930.678197][ T5345] usb 3-1: USB disconnect, device number 21 [ 930.717784][T22166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6133'. [ 930.758391][T22166] vlan3: entered promiscuous mode [ 930.774111][T22166] dummy0: entered promiscuous mode [ 930.801520][ T24] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 930.952755][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 931.005688][ T24] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 931.041391][ T24] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 931.066736][ T24] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 931.092765][ T24] usb 4-1: Product: syz [ 931.101766][ T24] usb 4-1: Manufacturer: syz [ 931.133961][ T24] hub 4-1:4.0: USB hub found [ 931.309462][ T5610] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 931.332251][ T5610] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 931.344370][ T5610] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 931.360320][ T5610] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 931.370488][ T24] hub 4-1:4.0: 1 port detected [ 931.379405][ T5610] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 931.387273][T22186] netlink: 'syz.2.6140': attribute type 1 has an invalid length. [ 931.465937][T22188] FAULT_INJECTION: forcing a failure. [ 931.465937][T22188] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 931.479765][T22188] CPU: 1 UID: 0 PID: 22188 Comm: syz.5.6142 Tainted: G L syzkaller #0 PREEMPT(full) [ 931.479801][T22188] Tainted: [L]=SOFTLOCKUP [ 931.479809][T22188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 931.479826][T22188] Call Trace: [ 931.479835][T22188] [ 931.479844][T22188] dump_stack_lvl+0xe8/0x150 [ 931.479882][T22188] should_fail_ex+0x40c/0x560 [ 931.479914][T22188] _copy_from_user+0x2d/0xb0 [ 931.479946][T22188] kstrtouint_from_user+0xd6/0x180 [ 931.479977][T22188] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 931.480021][T22188] proc_fail_nth_write+0x8e/0x210 [ 931.480052][T22188] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 931.480092][T22188] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 931.480121][T22188] vfs_write+0x296/0xba0 [ 931.480163][T22188] ? __pfx_vfs_write+0x10/0x10 [ 931.480196][T22188] ? __fget_files+0x2a/0x420 [ 931.480229][T22188] ? __fget_files+0x3a2/0x420 [ 931.480254][T22188] ? __fget_files+0x2a/0x420 [ 931.480291][T22188] ksys_write+0x150/0x270 [ 931.480325][T22188] ? __pfx_ksys_write+0x10/0x10 [ 931.480361][T22188] ? asm_int80_emulation+0x1a/0x20 [ 931.480389][T22188] do_int80_emulation+0x19a/0x550 [ 931.480416][T22188] ? asm_int80_emulation+0x1a/0x20 [ 931.480436][T22188] ? clear_bhb_loop+0x70/0xc0 [ 931.480457][T22188] ? clear_bhb_loop+0x70/0xc0 [ 931.480484][T22188] asm_int80_emulation+0x1a/0x20 [ 931.480504][T22188] RIP: 0023:0xf71474eb [ 931.480534][T22188] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 931.480553][T22188] RSP: 002b:00000000f54064bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 931.480576][T22188] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54065d0 [ 931.480592][T22188] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 931.480605][T22188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 931.480618][T22188] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 931.480631][T22188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 931.480664][T22188] [ 931.745560][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.773801][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.837435][ T24] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 931.844141][ T24] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 931.873455][ T24] usb 4-1: USB disconnect, device number 19 [ 931.971380][ T5730] usb 1-1: new full-speed USB device number 122 using dummy_hcd [ 932.044288][ T985] hid-generic 0000:0000:0000.003A: unknown main item tag 0x0 [ 932.064778][ T985] hid-generic 0000:0000:0000.003A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 932.145802][ T5730] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 932.165991][ T5730] usb 1-1: config 0 has an invalid interface number: 48 but max is 0 [ 932.181803][ T5730] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 932.202711][ T5730] usb 1-1: config 0 has no interface number 0 [ 932.217500][ T5730] usb 1-1: too many endpoints for config 0 interface 48 altsetting 120: 48, using maximum allowed: 30 [ 932.241414][ T5730] usb 1-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 932.271778][ T5730] usb 1-1: config 0 interface 48 has no altsetting 0 [ 932.291937][ T5730] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.301937][ T5730] usb 1-1: Product: syz [ 932.310387][ T5730] usb 1-1: Manufacturer: syz [ 932.318930][ T5730] usb 1-1: SerialNumber: syz [ 932.327254][ T5730] usb 1-1: config 0 descriptor?? [ 932.544218][ T5730] streamzap 1-1:0.48: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 932.576924][ T5730] usb 1-1: USB disconnect, device number 122 [ 933.007745][T22225] netlink: 'syz.5.6153': attribute type 1 has an invalid length. [ 933.062840][T22192] bridge0: port 1(bridge_slave_0) entered blocking state [ 933.070274][T22192] bridge0: port 1(bridge_slave_0) entered disabled state [ 933.091761][T22192] bridge_slave_0: entered allmulticast mode [ 933.101122][T22192] bridge_slave_0: entered promiscuous mode [ 933.114298][T22192] bridge0: port 2(bridge_slave_1) entered blocking state [ 933.131598][T22192] bridge0: port 2(bridge_slave_1) entered disabled state [ 933.139042][T22192] bridge_slave_1: entered allmulticast mode [ 933.159075][T22192] bridge_slave_1: entered promiscuous mode [ 933.171561][ T5345] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 933.201482][T22228] m920x_read = error: -19 [ 933.256194][T22192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 933.270030][T22192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 933.332753][ T5345] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 933.352820][ T5345] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 933.363846][ T5345] usb 3-1: config 0 has no interface number 0 [ 933.371883][T22192] team0: Port device team_slave_0 added [ 933.391973][ T5345] usb 3-1: config 0 interface 41 has no altsetting 0 [ 933.399570][T22192] team0: Port device team_slave_1 added [ 933.408106][ T5345] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.416683][ T5345] usb 3-1: Product: syz [ 933.421013][ T5345] usb 3-1: Manufacturer: syz [ 933.431487][ T5345] usb 3-1: SerialNumber: syz [ 933.451590][ T5345] usb 3-1: config 0 descriptor?? [ 933.493672][ T5610] Bluetooth: hci0: command tx timeout [ 933.525964][T22192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 933.541637][T22192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 933.581492][T22192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 933.597630][T22192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 933.613144][T22192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 933.668150][ T5345] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 933.681965][T22192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 933.708473][ T5345] usb 3-1: USB disconnect, device number 22 [ 933.900053][T22192] hsr_slave_0: entered promiscuous mode [ 933.917076][T22192] hsr_slave_1: entered promiscuous mode [ 933.929152][T22192] debugfs: 'hsr0' already exists in 'hsr' [ 933.945157][T22192] Cannot create hsr debugfs directory [ 934.180551][T22237] syzkaller0: entered promiscuous mode [ 934.189476][T22237] syzkaller0: entered allmulticast mode [ 934.214828][T22228] fuse: Bad value for 'fd' [ 934.225075][T22238] FAULT_INJECTION: forcing a failure. [ 934.225075][T22238] name failslab, interval 1, probability 0, space 0, times 0 [ 934.240094][T22238] CPU: 1 UID: 0 PID: 22238 Comm: syz.0.6158 Tainted: G L syzkaller #0 PREEMPT(full) [ 934.240131][T22238] Tainted: [L]=SOFTLOCKUP [ 934.240140][T22238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 934.240153][T22238] Call Trace: [ 934.240163][T22238] [ 934.240173][T22238] dump_stack_lvl+0xe8/0x150 [ 934.240212][T22238] should_fail_ex+0x40c/0x560 [ 934.240244][T22238] should_failslab+0xa8/0x100 [ 934.240279][T22238] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 934.240305][T22238] ? local_lock_release+0x9c/0x160 [ 934.240329][T22238] ? __alloc_skb+0x1d7/0x7a0 [ 934.240349][T22238] ? __alloc_skb+0x1d7/0x7a0 [ 934.240377][T22238] __alloc_skb+0x1d7/0x7a0 [ 934.240403][T22238] skb_segment+0xf87/0x41d0 [ 934.240452][T22238] ? skb_segment+0x821/0x41d0 [ 934.240516][T22238] udp6_ufo_fragment+0x9d2/0xf40 [ 934.240635][T22238] ? __pfx_udp6_ufo_fragment+0x10/0x10 [ 934.240667][T22238] ipv6_gso_segment+0xb7c/0x18a0 [ 934.240707][T22238] ? __pfx_ipv6_gso_segment+0x10/0x10 [ 934.240725][T22238] ? __lock_acquire+0x683/0x2cf0 [ 934.240759][T22238] ? __pfx_ipv6_gso_segment+0x10/0x10 [ 934.240784][T22238] skb_mac_gso_segment+0x31c/0x690 [ 934.240860][T22238] ? skb_mac_gso_segment+0x182/0x690 [ 934.240892][T22238] ? __pfx_skb_mac_gso_segment+0x10/0x10 [ 934.240924][T22238] ? __pfx_netif_skb_features+0x10/0x10 [ 934.240948][T22238] ? flow_hash_from_keys+0x82/0x130 [ 934.240976][T22238] __skb_gso_segment+0x371/0x550 [ 934.241011][T22238] cake_enqueue+0x1b01/0x8b60 [ 934.241108][T22238] ? is_bpf_text_address+0x292/0x2b0 [ 934.241138][T22238] ? is_bpf_text_address+0x26/0x2b0 [ 934.241169][T22238] ? __pfx_cake_enqueue+0x10/0x10 [ 934.241195][T22238] ? __kernel_text_address+0xd/0x30 [ 934.241229][T22238] ? unwind_get_return_address+0x4d/0x90 [ 934.241250][T22238] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 934.241274][T22238] ? arch_stack_walk+0xfb/0x150 [ 934.241310][T22238] ? __lock_acquire+0x683/0x2cf0 [ 934.241337][T22238] ? __pfx_stack_trace_save+0x10/0x10 [ 934.241368][T22238] ? check_path+0x21/0x40 [ 934.241403][T22238] ? add_lock_to_list+0xc7/0x100 [ 934.241461][T22238] ? lockdep_hardirqs_on+0x7a/0x110 [ 934.241486][T22238] ? ktime_get+0x45/0x220 [ 934.241518][T22238] netem_dequeue+0xe82/0x15e0 [ 934.241583][T22238] ? lock_acquire+0x106/0x350 [ 934.241627][T22238] ? __pfx_netem_dequeue+0x10/0x10 [ 934.241650][T22238] ? seqcount_lockdep_reader_access+0xea/0x100 [ 934.241677][T22238] ? ktime_get+0x1f5/0x220 [ 934.241707][T22238] __qdisc_run+0x24c/0x1620 [ 934.241753][T22238] __dev_queue_xmit+0x1c05/0x3820 [ 934.241795][T22238] ? __dev_queue_xmit+0x29b/0x3820 [ 934.241827][T22238] ? _copy_from_iter+0x21b/0x1660 [ 934.241858][T22238] ? __pfx___dev_queue_xmit+0x10/0x10 [ 934.241892][T22238] ? virtio_net_hdr_to_skb+0xa2a/0x1620 [ 934.241940][T22238] ? __pfx_virtio_net_hdr_to_skb+0x10/0x10 [ 934.241974][T22238] ? packet_xmit+0x68/0x330 [ 934.242007][T22238] packet_sendmsg+0x3d0d/0x4f80 [ 934.242044][T22238] ? __lock_acquire+0x683/0x2cf0 [ 934.242074][T22238] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 934.242109][T22238] ? __lock_acquire+0x683/0x2cf0 [ 934.242152][T22238] ? __lock_acquire+0x683/0x2cf0 [ 934.242191][T22238] ? __pfx_packet_sendmsg+0x10/0x10 [ 934.242231][T22238] ? __pfx_aa_sk_perm+0x10/0x10 [ 934.242266][T22238] ? aa_sock_msg_perm+0xf1/0x1b0 [ 934.242294][T22238] ? __pfx_packet_sendmsg+0x10/0x10 [ 934.242318][T22238] sock_sendmsg_nosec+0x13a/0x180 [ 934.242352][T22238] ____sys_sendmsg+0x54e/0x850 [ 934.242383][T22238] ? __pfx_____sys_sendmsg+0x10/0x10 [ 934.242426][T22238] ___sys_sendmsg+0x2a5/0x360 [ 934.242450][T22238] ? __lock_acquire+0x683/0x2cf0 [ 934.242482][T22238] ? __pfx____sys_sendmsg+0x10/0x10 [ 934.242505][T22238] ? get_pid_task+0x20/0x1f0 [ 934.242533][T22238] ? get_pid_task+0x20/0x1f0 [ 934.242566][T22238] ? get_pid_task+0x20/0x1f0 [ 934.242627][T22238] ? __fget_files+0x2a/0x420 [ 934.242654][T22238] ? __fget_files+0x3a2/0x420 [ 934.242710][T22238] __sys_sendmsg+0x177/0x240 [ 934.242739][T22238] ? __pfx___sys_sendmsg+0x10/0x10 [ 934.242785][T22238] __do_fast_syscall_32+0x23e/0x6f0 [ 934.242813][T22238] ? do_fast_syscall_32+0x33/0x70 [ 934.242837][T22238] ? lockdep_hardirqs_on+0x7a/0x110 [ 934.242860][T22238] ? asm_int80_emulation+0x1a/0x20 [ 934.242881][T22238] ? do_int80_emulation+0x29f/0x550 [ 934.242905][T22238] ? trace_irq_disable+0x3b/0x140 [ 934.242935][T22238] do_fast_syscall_32+0x33/0x70 [ 934.242961][T22238] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 934.242986][T22238] RIP: 0023:0xf7fb40ec [ 934.243009][T22238] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 934.243026][T22238] RSP: 002b:00000000f545550c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 934.243050][T22238] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000800000c0 [ 934.243066][T22238] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 934.243079][T22238] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 934.243091][T22238] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 934.243104][T22238] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 934.243137][T22238] [ 935.083158][T22192] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.339737][T22192] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.411191][T22251] netlink: 'syz.0.6162': attribute type 4 has an invalid length. [ 935.464691][T22254] netlink: 'syz.0.6162': attribute type 4 has an invalid length. [ 935.474997][T22253] netlink: 'syz.5.6163': attribute type 1 has an invalid length. [ 935.572810][ T5610] Bluetooth: hci0: command tx timeout [ 935.644230][T22192] team0: Port device netdevsim1 removed [ 935.660654][T22192] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.713358][T22261] syz_tun: entered allmulticast mode [ 935.796777][T22192] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.857618][T22259] syz_tun: left allmulticast mode [ 935.983920][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 936.162346][ T9] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 936.176792][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 936.194444][T22192] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 936.208122][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 936.212610][T22192] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 936.227690][T22192] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 936.235897][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.269674][ T9] usb 4-1: config 0 descriptor?? [ 936.270347][T22192] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 936.300185][T22192] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 936.337110][T22192] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 936.351976][T13280] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 936.367450][T22192] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 936.393511][T22192] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 936.513718][T13280] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 936.551198][T13280] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x6 has an invalid bInterval 0, changing to 4 [ 936.556825][T22192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 936.584007][T13280] usb 6-1: config 0 interface 0 has no altsetting 0 [ 936.618096][T13280] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 936.629530][ T5701] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 936.647562][T22192] 8021q: adding VLAN 0 to HW filter on device team0 [ 936.653113][T13280] usb 6-1: Product: syz [ 936.660175][T13280] usb 6-1: Manufacturer: syz [ 936.669291][T13280] usb 6-1: SerialNumber: syz [ 936.687519][T17638] bridge0: port 1(bridge_slave_0) entered blocking state [ 936.694942][T17638] bridge0: port 1(bridge_slave_0) entered forwarding state [ 936.706697][T13280] usb 6-1: config 0 descriptor?? [ 936.734038][T13280] usb 6-1: selecting invalid altsetting 0 [ 936.763917][T17638] bridge0: port 2(bridge_slave_1) entered blocking state [ 936.771367][T17638] bridge0: port 2(bridge_slave_1) entered forwarding state [ 936.822910][ T5701] usb 1-1: Using ep0 maxpacket: 32 [ 936.829548][ T5701] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 936.853433][ T5701] usb 1-1: config 2 has an invalid interface number: 88 but max is 0 [ 936.879552][ T5701] usb 1-1: config 2 has no interface number 0 [ 936.908196][ T9] hid-steam 0003:28DE:1142.003B: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 936.923066][ T5701] usb 1-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 936.985329][ T5701] usb 1-1: config 2 interface 88 has no altsetting 0 [ 937.007085][ T5701] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 937.017392][ T5701] usb 1-1: Product: syz [ 937.041819][ T9] hid-steam 0003:28DE:1142.003B: Steam wireless receiver connected [ 937.056278][ T5701] usb 1-1: Manufacturer: syz [ 937.070002][ T5701] usb 1-1: SerialNumber: syz [ 937.144104][T22271] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 937.185821][T22268] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 937.232131][ T9] hid-steam 0003:28DE:1142.003C: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 937.257727][T22268] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 937.266801][ T5345] usb 6-1: USB disconnect, device number 15 [ 937.307188][T22268] usb 6-1: cannot submit urb 0, error -19: no device [ 937.335890][T22287] FAULT_INJECTION: forcing a failure. [ 937.335890][T22287] name failslab, interval 1, probability 0, space 0, times 0 [ 937.392000][T22287] CPU: 0 UID: 0 PID: 22287 Comm: syz.2.6172 Tainted: G L syzkaller #0 PREEMPT(full) [ 937.392040][T22287] Tainted: [L]=SOFTLOCKUP [ 937.392049][T22287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 937.392065][T22287] Call Trace: [ 937.392075][T22287] [ 937.392084][T22287] dump_stack_lvl+0xe8/0x150 [ 937.392120][T22287] should_fail_ex+0x40c/0x560 [ 937.392152][T22287] should_failslab+0xa8/0x100 [ 937.392183][T22287] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 937.392207][T22287] ? local_lock_release+0x9c/0x160 [ 937.392231][T22287] ? __alloc_skb+0x1d7/0x7a0 [ 937.392249][T22287] ? __alloc_skb+0x1d7/0x7a0 [ 937.392276][T22287] __alloc_skb+0x1d7/0x7a0 [ 937.392301][T22287] netlink_dump+0x1e7/0xee0 [ 937.392338][T22287] ? __pfx_netlink_dump+0x10/0x10 [ 937.392373][T22287] ? __asan_memcpy+0x40/0x70 [ 937.392398][T22287] ? kmemdup_noprof+0x55/0x70 [ 937.392434][T22287] __netlink_dump_start+0x589/0x7b0 [ 937.392461][T22287] ? nft_netlink_dump_start_rcu+0xb6/0x1a0 [ 937.392584][T22287] nft_netlink_dump_start_rcu+0xdb/0x1a0 [ 937.392611][T22287] nf_tables_getsetelem+0x384/0x11c0 [ 937.392644][T22287] ? __skb_flow_dissect+0x652a/0x6d50 [ 937.392671][T22287] ? __pfx_nf_tables_getsetelem+0x10/0x10 [ 937.392698][T22287] ? __nla_validate_parse+0x2429/0x2d50 [ 937.392748][T22287] ? __pfx___nla_validate_parse+0x10/0x10 [ 937.392774][T22287] ? lock_acquire+0x106/0x350 [ 937.392808][T22287] ? is_bpf_text_address+0x26/0x2b0 [ 937.392835][T22287] ? lock_acquire+0x106/0x350 [ 937.392868][T22287] ? nfnl_pernet+0x23/0x240 [ 937.392890][T22287] ? __pfx_nf_tables_dump_set_start+0x10/0x10 [ 937.392915][T22287] ? __pfx_nf_tables_dump_set+0x10/0x10 [ 937.392940][T22287] ? __pfx_nf_tables_dump_set_done+0x10/0x10 [ 937.392979][T22287] ? __nla_parse+0x40/0x60 [ 937.393006][T22287] ? __pfx_nf_tables_getsetelem+0x10/0x10 [ 937.393028][T22287] nfnetlink_rcv_msg+0x8a9/0x12b0 [ 937.393050][T22287] ? unwind_get_return_address+0x4d/0x90 [ 937.393070][T22287] ? nfnetlink_rcv_msg+0x228/0x12b0 [ 937.393106][T22287] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 937.393173][T22287] netlink_rcv_skb+0x226/0x4a0 [ 937.393199][T22287] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 937.393222][T22287] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 937.393257][T22287] ? bpf_lsm_capable+0x9/0x20 [ 937.393282][T22287] ? security_capable+0x7e/0x2c0 [ 937.393320][T22287] nfnetlink_rcv+0x2b9/0x28c0 [ 937.393346][T22287] ? __dev_queue_xmit+0x29b/0x3820 [ 937.393373][T22287] ? __local_bh_enable_ip+0xd0/0x130 [ 937.393397][T22287] ? lockdep_hardirqs_on+0x7a/0x110 [ 937.393421][T22287] ? __dev_queue_xmit+0x29b/0x3820 [ 937.393444][T22287] ? __local_bh_enable_ip+0xd0/0x130 [ 937.393464][T22287] ? __dev_queue_xmit+0x29b/0x3820 [ 937.393488][T22287] ? __dev_queue_xmit+0x1edc/0x3820 [ 937.393512][T22287] ? __do_fast_syscall_32+0x23e/0x6f0 [ 937.393537][T22287] ? do_fast_syscall_32+0x33/0x70 [ 937.393575][T22287] ? __dev_queue_xmit+0x29b/0x3820 [ 937.393600][T22287] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 937.393630][T22287] ? __pfx___dev_queue_xmit+0x10/0x10 [ 937.393664][T22287] ? ref_tracker_free+0x689/0x830 [ 937.393695][T22287] ? __pfx_ref_tracker_free+0x10/0x10 [ 937.393731][T22287] ? __skb_clone+0x449/0x6c0 [ 937.393762][T22287] ? skb_clone+0x246/0x3a0 [ 937.393791][T22287] ? __netlink_deliver_tap+0x811/0x860 [ 937.393814][T22287] ? netlink_deliver_tap+0x2e/0x1b0 [ 937.393847][T22287] ? netlink_deliver_tap+0x2e/0x1b0 [ 937.393871][T22287] ? netlink_deliver_tap+0x2e/0x1b0 [ 937.393903][T22287] netlink_unicast+0x7bb/0x940 [ 937.393939][T22287] netlink_sendmsg+0x813/0xb40 [ 937.393985][T22287] ? __pfx_netlink_sendmsg+0x10/0x10 [ 937.394016][T22287] ? aa_sock_msg_perm+0xf1/0x1b0 [ 937.394043][T22287] ? __pfx_netlink_sendmsg+0x10/0x10 [ 937.394068][T22287] sock_sendmsg_nosec+0x13a/0x180 [ 937.394102][T22287] ____sys_sendmsg+0x54e/0x850 [ 937.394133][T22287] ? __pfx_____sys_sendmsg+0x10/0x10 [ 937.394176][T22287] ___sys_sendmsg+0x2a5/0x360 [ 937.394199][T22287] ? __lock_acquire+0x683/0x2cf0 [ 937.394232][T22287] ? __pfx____sys_sendmsg+0x10/0x10 [ 937.394255][T22287] ? get_pid_task+0x20/0x1f0 [ 937.394281][T22287] ? get_pid_task+0x20/0x1f0 [ 937.394305][T22287] ? get_pid_task+0x20/0x1f0 [ 937.394366][T22287] ? __fget_files+0x2a/0x420 [ 937.394392][T22287] ? __fget_files+0x3a2/0x420 [ 937.394431][T22287] __sys_sendmsg+0x177/0x240 [ 937.394458][T22287] ? __pfx___sys_sendmsg+0x10/0x10 [ 937.394502][T22287] __do_fast_syscall_32+0x23e/0x6f0 [ 937.394528][T22287] ? do_fast_syscall_32+0x33/0x70 [ 937.394553][T22287] ? lockdep_hardirqs_on+0x7a/0x110 [ 937.394576][T22287] ? asm_int80_emulation+0x1a/0x20 [ 937.394596][T22287] ? do_int80_emulation+0x29f/0x550 [ 937.394621][T22287] ? trace_irq_disable+0x3b/0x140 [ 937.394650][T22287] do_fast_syscall_32+0x33/0x70 [ 937.394676][T22287] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 937.394702][T22287] RIP: 0023:0xf702f0ec [ 937.394721][T22287] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 937.394738][T22287] RSP: 002b:00000000f53fc50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 937.394761][T22287] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000100 [ 937.394776][T22287] RDX: 0000000000008000 RSI: 0000000000000000 RDI: 0000000000000000 [ 937.394788][T22287] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 937.394800][T22287] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 937.394813][T22287] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 937.394844][T22287] [ 937.399310][T22271] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 937.964515][T22192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 937.984863][ T5610] Bluetooth: hci0: command tx timeout [ 938.224326][ T9] usb 4-1: reset high-speed USB device number 20 using dummy_hcd [ 938.233300][T22192] veth0_vlan: entered promiscuous mode [ 938.284160][T22292] netlink: 'syz.2.6173': attribute type 1 has an invalid length. [ 938.285248][T22192] veth1_vlan: entered promiscuous mode [ 938.397244][T22192] veth0_macvtap: entered promiscuous mode [ 938.450468][T22192] veth1_macvtap: entered promiscuous mode [ 938.503857][T22294] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6174'. [ 938.543875][T22192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 938.563797][T22294] syzkaller1: entered promiscuous mode [ 938.569564][T22294] syzkaller1: entered allmulticast mode [ 938.598477][T22294] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6174'. [ 938.602690][T22192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 938.684075][ T48] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.695014][ T48] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.802782][ T48] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.856424][ T48] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.042774][T18908] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 939.067800][T18908] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 939.224633][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 939.249053][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 939.546655][ T5701] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 939.589026][ T5701] asix 1-1:2.88: probe with driver asix failed with error -71 [ 939.630978][ T5701] usb 1-1: USB disconnect, device number 123 [ 939.642770][T22319] netlink: 'syz.2.6183': attribute type 1 has an invalid length. [ 939.658499][ T5702] usb 4-1: USB disconnect, device number 20 [ 939.715442][T22321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6184'. [ 939.743597][T22321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6184'. [ 939.805891][ T30] kauditd_printk_skb: 214 callbacks suppressed [ 939.805912][ T30] audit: type=1400 audit(1787017757.103:1323): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=22320 comm="syz.0.6184" [ 939.828397][ T5702] hid-steam 0003:28DE:1142.003B: Steam wireless receiver disconnected [ 939.835103][T22325] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6185'. [ 939.859346][T22321] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6184'. [ 940.054514][ T5610] Bluetooth: hci0: command tx timeout [ 940.128574][T22330] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6187'. [ 940.374361][T22338] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6189'. [ 940.651539][ T5345] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 940.659335][ T30] audit: type=1326 audit(1787017757.943:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22349 comm="syz.0.6194" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb40ec code=0x0 [ 940.780113][T22355] netlink: 'syz.2.6196': attribute type 1 has an invalid length. [ 940.841710][ T5345] usb 6-1: Using ep0 maxpacket: 8 [ 940.851911][ T5345] usb 6-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice=fb.00 [ 940.875575][ T5345] usb 6-1: no configurations [ 940.894110][ T5345] usb 6-1: can't read configurations, error -22 [ 941.042681][ T5345] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 941.158060][T22372] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6203'. [ 941.201495][ T5345] usb 6-1: Using ep0 maxpacket: 8 [ 941.209682][ T5345] usb 6-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice=fb.00 [ 941.218923][ T5345] usb 6-1: no configurations [ 941.231163][ T5345] usb 6-1: can't read configurations, error -22 [ 941.242784][ T5345] usb usb6-port1: attempt power cycle [ 941.591456][ T5345] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 941.622394][ T5345] usb 6-1: Using ep0 maxpacket: 8 [ 941.632163][ T5345] usb 6-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice=fb.00 [ 941.675579][ T5345] usb 6-1: no configurations [ 941.693968][ T5345] usb 6-1: can't read configurations, error -22 [ 941.851396][ T5345] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 941.895372][ T5345] usb 6-1: Using ep0 maxpacket: 8 [ 941.906294][ T5345] usb 6-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice=fb.00 [ 941.930209][ T5345] usb 6-1: no configurations [ 941.941560][ T5345] usb 6-1: can't read configurations, error -22 [ 941.959611][ T5345] usb usb6-port1: unable to enumerate USB device [ 941.975063][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 942.032130][T22390] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6208'. [ 942.119178][T22393] netlink: 'syz.1.6209': attribute type 1 has an invalid length. [ 942.256933][T22396] syzkaller0: entered promiscuous mode [ 942.274327][T22396] syzkaller0: entered allmulticast mode [ 942.720161][T22412] sg_write: data in/out 401408/1 bytes for SCSI command 0x0-- guessing data in; [ 942.720161][T22412] program syz.3.6216 not setting count and/or reply_len properly [ 942.992398][ T5345] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 943.154112][ T5345] usb 3-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 943.185641][ T5345] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 943.210976][ T5345] usb 3-1: config 0 has no interface number 0 [ 943.236410][ T5345] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.265318][ T5345] usb 3-1: Product: syz [ 943.277641][ T5345] usb 3-1: Manufacturer: syz [ 943.288638][ T5345] usb 3-1: SerialNumber: syz [ 943.308167][ T5345] usb 3-1: config 0 descriptor?? [ 943.329255][ T5345] technisat-usb2: could not set alternate setting to 0 [ 943.820265][T22434] netlink: 'syz.1.6222': attribute type 1 has an invalid length. [ 943.851637][ T5345] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in cold state, will try to load a firmware [ 943.898920][T22436] __nla_validate_parse: 2 callbacks suppressed [ 943.898945][T22436] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6223'. [ 943.919583][ T5345] usb 3-1: Direct firmware load for dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw failed with error -2 [ 943.943888][ T5345] usb 3-1: Falling back to sysfs fallback for: dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw [ 944.032741][T22441] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 944.137628][T22445] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6227'. [ 944.284223][T22452] netlink: 'syz.5.6230': attribute type 1 has an invalid length. [ 944.369406][T22457] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6228'. [ 944.417322][T22452] bond1: entered promiscuous mode [ 944.430267][T22452] 8021q: adding VLAN 0 to HW filter on device bond1 [ 944.594751][T22459] 8021q: adding VLAN 0 to HW filter on device bond1 [ 944.623970][T22459] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 944.635897][T22459] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 944.666218][T22459] bond1: (slave ip6gre1): making interface the new active one [ 944.680802][T22459] ip6gre1: entered promiscuous mode [ 944.773615][T22459] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 945.344136][T22477] netlink: 'syz.3.6235': attribute type 1 has an invalid length. [ 945.846722][T22490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6239'. [ 945.880686][T22490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6239'. [ 945.909622][T22493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6240'. [ 945.948035][T22493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6240'. [ 945.980109][T22493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6240'. [ 946.197024][T22500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6243'. [ 946.388714][T22509] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6244'. [ 946.589879][T22515] FAULT_INJECTION: forcing a failure. [ 946.589879][T22515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 946.621679][T22515] CPU: 0 UID: 0 PID: 22515 Comm: syz.5.6247 Tainted: G L syzkaller #0 PREEMPT(full) [ 946.621719][T22515] Tainted: [L]=SOFTLOCKUP [ 946.621728][T22515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 946.621740][T22515] Call Trace: [ 946.621750][T22515] [ 946.621760][T22515] dump_stack_lvl+0xe8/0x150 [ 946.621798][T22515] should_fail_ex+0x40c/0x560 [ 946.621830][T22515] _copy_from_user+0x2d/0xb0 [ 946.621863][T22515] sctp_setsockopt+0x1c4/0x12c0 [ 946.621890][T22515] ? sock_common_setsockopt+0x36/0xc0 [ 946.621922][T22515] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 946.621954][T22515] do_sock_setsockopt+0x17c/0x1b0 [ 946.621992][T22515] __ia32_sys_setsockopt+0x13d/0x1b0 [ 946.622022][T22515] __do_fast_syscall_32+0x23e/0x6f0 [ 946.622048][T22515] ? do_fast_syscall_32+0x33/0x70 [ 946.622072][T22515] ? lockdep_hardirqs_on+0x7a/0x110 [ 946.622095][T22515] ? asm_int80_emulation+0x1a/0x20 [ 946.622115][T22515] ? do_int80_emulation+0x29f/0x550 [ 946.622139][T22515] ? trace_irq_disable+0x3b/0x140 [ 946.622167][T22515] do_fast_syscall_32+0x33/0x70 [ 946.622193][T22515] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 946.622218][T22515] RIP: 0023:0xf7f440ec [ 946.622238][T22515] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 946.622257][T22515] RSP: 002b:00000000f53e550c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 946.622282][T22515] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000084 [ 946.622297][T22515] RDX: 0000000000000011 RSI: 0000000080000100 RDI: 0000000000000008 [ 946.622310][T22515] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 946.622323][T22515] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 946.622336][T22515] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 946.622371][T22515] [ 947.718103][T22537] FAULT_INJECTION: forcing a failure. [ 947.718103][T22537] name failslab, interval 1, probability 0, space 0, times 0 [ 947.753951][T22537] CPU: 1 UID: 0 PID: 22537 Comm: syz.5.6256 Tainted: G L syzkaller #0 PREEMPT(full) [ 947.753986][T22537] Tainted: [L]=SOFTLOCKUP [ 947.753995][T22537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 947.754007][T22537] Call Trace: [ 947.754015][T22537] [ 947.754025][T22537] dump_stack_lvl+0xe8/0x150 [ 947.754062][T22537] should_fail_ex+0x40c/0x560 [ 947.754094][T22537] should_failslab+0xa8/0x100 [ 947.754126][T22537] __kmalloc_noprof+0xfe/0x720 [ 947.754152][T22537] ? crypto_alloc_tfm_node+0x3b5/0x3e0 [ 947.754245][T22537] ? esp6_init_state+0x740/0x1220 [ 947.754318][T22537] ? esp6_init_state+0x740/0x1220 [ 947.754354][T22537] esp6_init_state+0x740/0x1220 [ 947.754391][T22537] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 947.754430][T22537] ? __pfx_esp6_init_state+0x10/0x10 [ 947.754480][T22537] ? xfrm_state_get_afinfo+0x2e/0x1b0 [ 947.754553][T22537] ? xfrm_state_get_afinfo+0x2e/0x1b0 [ 947.754592][T22537] ? __xfrm_init_state+0x745/0x1320 [ 947.754624][T22537] __xfrm_init_state+0x9dd/0x1320 [ 947.754652][T22537] ? __xfrm_init_state+0x745/0x1320 [ 947.754681][T22537] xfrm_add_sa+0x2f51/0x40d0 [ 947.754719][T22537] ? __pfx_xfrm_add_sa+0x10/0x10 [ 947.754755][T22537] ? __nla_parse+0x40/0x60 [ 947.754788][T22537] xfrm_user_rcv_msg+0x7a8/0xf30 [ 947.754820][T22537] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 947.754882][T22537] ? __mutex_trylock_common+0x15f/0x270 [ 947.754917][T22537] ? __pfx___mutex_trylock_common+0x10/0x10 [ 947.754952][T22537] ? rcu_is_watching+0x15/0xb0 [ 947.754982][T22537] ? trace_contention_end+0x3d/0x140 [ 947.755012][T22537] netlink_rcv_skb+0x226/0x4a0 [ 947.755040][T22537] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 947.755068][T22537] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 947.755111][T22537] ? netlink_deliver_tap+0x2e/0x1b0 [ 947.755134][T22537] ? netlink_deliver_tap+0x2e/0x1b0 [ 947.755160][T22537] xfrm_netlink_rcv+0x79/0x90 [ 947.755186][T22537] netlink_unicast+0x7bb/0x940 [ 947.755218][T22537] netlink_sendmsg+0x813/0xb40 [ 947.755253][T22537] ? __pfx_netlink_sendmsg+0x10/0x10 [ 947.755283][T22537] ? aa_sock_msg_perm+0xf1/0x1b0 [ 947.755310][T22537] ? __pfx_netlink_sendmsg+0x10/0x10 [ 947.755333][T22537] sock_sendmsg_nosec+0x13a/0x180 [ 947.755367][T22537] ____sys_sendmsg+0x54e/0x850 [ 947.755407][T22537] ? __pfx_____sys_sendmsg+0x10/0x10 [ 947.755450][T22537] ___sys_sendmsg+0x2a5/0x360 [ 947.755473][T22537] ? __lock_acquire+0x683/0x2cf0 [ 947.755504][T22537] ? __pfx____sys_sendmsg+0x10/0x10 [ 947.755526][T22537] ? get_pid_task+0x20/0x1f0 [ 947.755553][T22537] ? get_pid_task+0x20/0x1f0 [ 947.755576][T22537] ? get_pid_task+0x20/0x1f0 [ 947.755637][T22537] ? __fget_files+0x2a/0x420 [ 947.755663][T22537] ? __fget_files+0x3a2/0x420 [ 947.755701][T22537] __sys_sendmsg+0x177/0x240 [ 947.755728][T22537] ? __pfx___sys_sendmsg+0x10/0x10 [ 947.755774][T22537] __do_fast_syscall_32+0x23e/0x6f0 [ 947.755801][T22537] ? do_fast_syscall_32+0x33/0x70 [ 947.755825][T22537] ? lockdep_hardirqs_on+0x7a/0x110 [ 947.755848][T22537] ? asm_int80_emulation+0x1a/0x20 [ 947.755868][T22537] ? do_int80_emulation+0x29f/0x550 [ 947.755891][T22537] ? trace_irq_disable+0x3b/0x140 [ 947.755920][T22537] do_fast_syscall_32+0x33/0x70 [ 947.755946][T22537] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 947.755971][T22537] RIP: 0023:0xf7f440ec [ 947.755991][T22537] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 947.756009][T22537] RSP: 002b:00000000f540650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 947.756033][T22537] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 947.756049][T22537] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 947.756061][T22537] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 947.756073][T22537] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 947.756086][T22537] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 947.756119][T22537] [ 951.947714][T22555] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6263'. [ 952.026780][T22559] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 952.046034][T22555] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6263'. [ 952.141894][T22561] netlink: 'syz.2.6265': attribute type 24 has an invalid length. [ 952.199048][T22561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6265'. [ 952.254090][T22561] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 952.343317][T22572] netlink: 'syz.1.6267': attribute type 1 has an invalid length. [ 952.404338][T22572] openvswitch: netlink: Actions may not be safe on all matching packets [ 952.489655][T22572] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6267'. [ 952.525409][T22577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6268'. [ 953.597521][T22548] IPVS: You probably need to specify IP address on multicast interface. [ 953.669593][T22548] IPVS: Error connecting to the multicast addr [ 953.778929][T22592] fuse: Bad value for 'group_id' [ 953.788935][T22592] fuse: Bad value for 'group_id' [ 953.870737][T22594] syz_tun: entered allmulticast mode [ 954.078248][T22595] ip6gre0: entered allmulticast mode [ 954.178634][T22600] netlink: 156 bytes leftover after parsing attributes in process `syz.5.6274'. [ 954.709772][T22616] fuse: Bad value for 'fd' [ 955.006684][T22619] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6281'. [ 955.042563][T22619] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6281'. [ 955.122269][T22622] FAULT_INJECTION: forcing a failure. [ 955.122269][T22622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 955.149902][T22622] CPU: 1 UID: 0 PID: 22622 Comm: syz.5.6283 Tainted: G L syzkaller #0 PREEMPT(full) [ 955.149939][T22622] Tainted: [L]=SOFTLOCKUP [ 955.149947][T22622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 955.149960][T22622] Call Trace: [ 955.149968][T22622] [ 955.149979][T22622] dump_stack_lvl+0xe8/0x150 [ 955.150017][T22622] should_fail_ex+0x40c/0x560 [ 955.150049][T22622] _copy_from_iter+0x1d3/0x1660 [ 955.150077][T22622] ? skb_set_owner_w+0x263/0x3d0 [ 955.150115][T22622] ? __pfx__copy_from_iter+0x10/0x10 [ 955.150152][T22622] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 955.150182][T22622] skb_copy_datagram_from_iter+0xe6/0x720 [ 955.150215][T22622] ? skb_put+0x112/0x210 [ 955.150241][T22622] tun_get_user+0x1520/0x4370 [ 955.150301][T22622] ? aa_file_perm+0x18b/0x15f0 [ 955.150330][T22622] ? aa_file_perm+0x4ed/0x15f0 [ 955.150354][T22622] ? __pfx_tun_get_user+0x10/0x10 [ 955.150388][T22622] ? __lock_acquire+0x683/0x2cf0 [ 955.150425][T22622] ? kstrtoull+0x12f/0x1d0 [ 955.150456][T22622] ? ref_tracker_alloc+0x341/0x4b0 [ 955.150488][T22622] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 955.150518][T22622] ? tun_get+0x1c/0x2f0 [ 955.150548][T22622] ? tun_get+0x1c/0x2f0 [ 955.150582][T22622] ? tun_get+0x1c/0x2f0 [ 955.150612][T22622] ? tun_get+0x1c/0x2f0 [ 955.150648][T22622] tun_chr_write_iter+0x113/0x200 [ 955.150682][T22622] vfs_write+0x612/0xba0 [ 955.150725][T22622] ? __pfx_vfs_write+0x10/0x10 [ 955.150767][T22622] ? __fget_files+0x2a/0x420 [ 955.150804][T22622] ksys_write+0x150/0x270 [ 955.150839][T22622] ? __pfx_ksys_write+0x10/0x10 [ 955.150884][T22622] __do_fast_syscall_32+0x23e/0x6f0 [ 955.150912][T22622] ? do_fast_syscall_32+0x33/0x70 [ 955.150936][T22622] ? lockdep_hardirqs_on+0x7a/0x110 [ 955.150960][T22622] ? asm_int80_emulation+0x1a/0x20 [ 955.150982][T22622] ? do_int80_emulation+0x29f/0x550 [ 955.151006][T22622] ? trace_irq_disable+0x3b/0x140 [ 955.151035][T22622] do_fast_syscall_32+0x33/0x70 [ 955.151062][T22622] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 955.151089][T22622] RIP: 0023:0xf7f440ec [ 955.151110][T22622] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 955.151130][T22622] RSP: 002b:00000000f540650c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 955.151154][T22622] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800004c0 [ 955.151169][T22622] RDX: 000000000000fd78 RSI: 0000000000000000 RDI: 0000000000000000 [ 955.151182][T22622] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 955.151194][T22622] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 955.151207][T22622] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 955.151237][T22622] [ 955.860803][ C1] ================================================================== [ 955.869006][ C1] BUG: KASAN: use-after-free in qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 955.877206][ C1] Read of size 2 at addr ffff888156456df4 by task syz.0.6285/22628 [ 955.885269][ C1] [ 955.887665][ C1] CPU: 1 UID: 0 PID: 22628 Comm: syz.0.6285 Tainted: G L syzkaller #0 PREEMPT(full) [ 955.887698][ C1] Tainted: [L]=SOFTLOCKUP [ 955.887704][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 955.887714][ C1] Call Trace: [ 955.887724][ C1] [ 955.887732][ C1] dump_stack_lvl+0xe8/0x150 [ 955.887759][ C1] print_address_description+0x55/0x1e0 [ 955.887787][ C1] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 955.887808][ C1] print_report+0x58/0x70 [ 955.887825][ C1] kasan_report+0x117/0x150 [ 955.887847][ C1] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 955.887868][ C1] qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 955.887892][ C1] __dev_queue_xmit+0x27f/0x3820 [ 955.887910][ C1] ? lock_acquire+0x106/0x350 [ 955.887938][ C1] ? __lock_acquire+0x683/0x2cf0 [ 955.887959][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 955.887980][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 955.888001][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 955.888021][ C1] ? __lock_acquire+0x683/0x2cf0 [ 955.888046][ C1] ? br_nf_post_routing+0x1e0/0xee0 [ 955.888111][ C1] br_dev_queue_push_xmit+0x370/0x4b0 [ 955.888153][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 955.888175][ C1] NF_HOOK+0x360/0x3f0 [ 955.888195][ C1] ? net_generic+0x1e/0x240 [ 955.888210][ C1] ? NF_HOOK+0xa2/0x3f0 [ 955.888231][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 955.888252][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 955.888278][ C1] br_forward_finish+0xd3/0x130 [ 955.888299][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 955.888321][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 955.888343][ C1] NF_HOOK+0x360/0x3f0 [ 955.888365][ C1] ? NF_HOOK+0xa2/0x3f0 [ 955.888385][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 955.888406][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 955.888430][ C1] ? br_handle_vlan+0x5e/0x530 [ 955.888473][ C1] __br_forward+0x397/0x540 [ 955.888493][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 955.888516][ C1] br_flood+0x3e6/0x8d0 [ 955.888541][ C1] br_handle_frame_finish+0x1175/0x1990 [ 955.888564][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 955.888586][ C1] ? net_generic+0x1e/0x240 [ 955.888600][ C1] ? net_generic+0x1e/0x240 [ 955.888613][ C1] ? net_generic+0x1e/0x240 [ 955.888627][ C1] ? ccm_tx_work_expired+0xa40/0xe70 [ 955.888649][ C1] ? br_nf_pre_routing+0xc41/0x14b0 [ 955.888668][ C1] br_handle_frame+0x81b/0x1510 [ 955.888687][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 955.888703][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 955.888719][ C1] ? __asan_memmove+0x40/0x70 [ 955.888738][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 955.888752][ C1] __netif_receive_skb_core+0x989/0x30b0 [ 955.888775][ C1] ? chacha_permute+0x4ce/0xf00 [ 955.888815][ C1] ? unwind_next_frame+0x8f/0x2550 [ 955.888829][ C1] ? lock_acquire+0x106/0x350 [ 955.888849][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 955.888871][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 955.888890][ C1] ? lock_acquire+0x106/0x350 [ 955.888915][ C1] ? __lock_acquire+0x683/0x2cf0 [ 955.888942][ C1] __netif_receive_skb_list_core+0x24d/0x830 [ 955.888967][ C1] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 955.888992][ C1] netif_receive_skb_list_internal+0x995/0xcf0 [ 955.889014][ C1] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 955.889035][ C1] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 955.889056][ C1] ? dev_gro_receive+0x1097/0x2380 [ 955.889076][ C1] napi_complete_done+0x299/0x730 [ 955.889099][ C1] ? __pfx_napi_complete_done+0x10/0x10 [ 955.889120][ C1] ? gro_cell_poll+0x175/0x5d0 [ 955.889159][ C1] gro_cell_poll+0x5ab/0x5d0 [ 955.889176][ C1] ? gro_cell_poll+0x175/0x5d0 [ 955.889191][ C1] __napi_poll+0xaa/0x330 [ 955.889213][ C1] net_rx_action+0x61d/0xf50 [ 955.889231][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 955.889253][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 955.889273][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 955.889299][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 955.889313][ C1] ? sched_clock+0x3f/0x60 [ 955.889335][ C1] handle_softirqs+0x225/0x840 [ 955.889354][ C1] ? do_softirq+0x76/0xd0 [ 955.889371][ C1] ? tun_rx_batched+0x185/0x790 [ 955.889392][ C1] do_softirq+0x76/0xd0 [ 955.889408][ C1] [ 955.889414][ C1] [ 955.889420][ C1] __local_bh_enable_ip+0xf8/0x130 [ 955.889436][ C1] ? tun_rx_batched+0x185/0x790 [ 955.889456][ C1] tun_rx_batched+0x616/0x790 [ 955.889479][ C1] ? __pfx_tun_rx_batched+0x10/0x10 [ 955.889499][ C1] ? tun_get_user+0x2717/0x4370 [ 955.889519][ C1] ? tun_get_user+0x2717/0x4370 [ 955.889540][ C1] ? tun_get_user+0x23cb/0x4370 [ 955.889560][ C1] ? tun_get_user+0x23cb/0x4370 [ 955.889585][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 955.889601][ C1] ? tun_get_user+0x2717/0x4370 [ 955.889620][ C1] ? tun_get_user+0x2717/0x4370 [ 955.889640][ C1] tun_get_user+0x2b44/0x4370 [ 955.889665][ C1] ? aa_file_perm+0x18b/0x15f0 [ 955.889684][ C1] ? aa_file_perm+0x4ed/0x15f0 [ 955.889699][ C1] ? __pfx_tun_get_user+0x10/0x10 [ 955.889720][ C1] ? __lock_acquire+0x683/0x2cf0 [ 955.889740][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 955.889757][ C1] ? preempt_schedule_common+0x82/0xd0 [ 955.889774][ C1] ? ref_tracker_alloc+0x341/0x4b0 [ 955.889794][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 955.889812][ C1] ? tun_get+0x1c/0x2f0 [ 955.889832][ C1] ? tun_get+0x1c/0x2f0 [ 955.889853][ C1] ? tun_get+0x1c/0x2f0 [ 955.889872][ C1] ? tun_get+0x1c/0x2f0 [ 955.889892][ C1] tun_chr_write_iter+0x113/0x200 [ 955.889913][ C1] vfs_write+0x612/0xba0 [ 955.889944][ C1] ? __pfx_vfs_write+0x10/0x10 [ 955.889969][ C1] ? __fget_files+0x2a/0x420 [ 955.889990][ C1] ksys_write+0x150/0x270 [ 955.890012][ C1] ? __pfx_ksys_write+0x10/0x10 [ 955.890036][ C1] __do_fast_syscall_32+0x23e/0x6f0 [ 955.890055][ C1] ? do_fast_syscall_32+0x33/0x70 [ 955.890072][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 955.890088][ C1] ? irqentry_exit+0x10f/0x910 [ 955.890104][ C1] ? trace_irq_disable+0x3b/0x140 [ 955.890123][ C1] do_fast_syscall_32+0x33/0x70 [ 955.890141][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 955.890160][ C1] RIP: 0023:0xf7fb40ec [ 955.890176][ C1] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 955.890189][ C1] RSP: 002b:00000000f547650c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 955.890207][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800004c0 [ 955.890219][ C1] RDX: 000000000000fd78 RSI: 0000000000000000 RDI: 0000000000000000 [ 955.890229][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 955.890239][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 955.890248][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 955.890264][ C1] [ 955.890270][ C1] [ 956.576133][ C1] The buggy address belongs to the physical page: [ 956.582551][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x156456 [ 956.591523][ C1] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff) [ 956.598935][ C1] raw: 057ff00000000000 ffffea0005591588 ffffea0005591588 0000000000000000 [ 956.607560][ C1] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 956.616165][ C1] page dumped because: kasan: bad access detected [ 956.622681][ C1] page_owner info is not present (never set?) [ 956.628741][ C1] [ 956.631771][ C1] Memory state around the buggy address: [ 956.637578][ C1] ffff888156456c80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 956.645731][ C1] ffff888156456d00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 956.653816][ C1] >ffff888156456d80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 956.662063][ C1] ^ [ 956.670041][ C1] ffff888156456e00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 956.678363][ C1] ffff888156456e80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 956.686425][ C1] ================================================================== [ 956.694693][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 956.701919][ C1] CPU: 1 UID: 0 PID: 22628 Comm: syz.0.6285 Tainted: G L syzkaller #0 PREEMPT(full) [ 956.713072][ C1] Tainted: [L]=SOFTLOCKUP [ 956.717414][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 956.727500][ C1] Call Trace: [ 956.730842][ C1] [ 956.733722][ C1] vpanic+0x56c/0xa60 [ 956.737842][ C1] ? __pfx_vpanic+0x10/0x10 [ 956.742650][ C1] panic+0xc5/0xd0 [ 956.746430][ C1] ? __pfx_panic+0x10/0x10 [ 956.750888][ C1] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 956.756563][ C1] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 956.762241][ C1] check_panic_on_warn+0x89/0xb0 [ 956.767329][ C1] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 956.773174][ C1] end_report+0x73/0x170 [ 956.777460][ C1] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 956.783315][ C1] kasan_report+0x128/0x150 [ 956.787861][ C1] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 956.793538][ C1] qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 956.799043][ C1] __dev_queue_xmit+0x27f/0x3820 [ 956.804037][ C1] ? lock_acquire+0x106/0x350 [ 956.808934][ C1] ? __lock_acquire+0x683/0x2cf0 [ 956.813916][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 956.819242][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 956.824667][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 956.830095][ C1] ? __lock_acquire+0x683/0x2cf0 [ 956.835086][ C1] ? br_nf_post_routing+0x1e0/0xee0 [ 956.840325][ C1] br_dev_queue_push_xmit+0x370/0x4b0 [ 956.845873][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 956.852011][ C1] NF_HOOK+0x360/0x3f0 [ 956.856212][ C1] ? net_generic+0x1e/0x240 [ 956.860753][ C1] ? NF_HOOK+0xa2/0x3f0 [ 956.864937][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 956.869540][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 956.875542][ C1] br_forward_finish+0xd3/0x130 [ 956.880410][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 956.886316][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 956.891788][ C1] NF_HOOK+0x360/0x3f0 [ 956.895878][ C1] ? NF_HOOK+0xa2/0x3f0 [ 956.900043][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 956.904644][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 956.910115][ C1] ? br_handle_vlan+0x5e/0x530 [ 956.914889][ C1] __br_forward+0x397/0x540 [ 956.919400][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 956.924869][ C1] br_flood+0x3e6/0x8d0 [ 956.929043][ C1] br_handle_frame_finish+0x1175/0x1990 [ 956.934597][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 956.940491][ C1] ? net_generic+0x1e/0x240 [ 956.945027][ C1] ? net_generic+0x1e/0x240 [ 956.949534][ C1] ? net_generic+0x1e/0x240 [ 956.954042][ C1] ? ccm_tx_work_expired+0xa40/0xe70 [ 956.959426][ C1] ? br_nf_pre_routing+0xc41/0x14b0 [ 956.964675][ C1] br_handle_frame+0x81b/0x1510 [ 956.969553][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 956.974850][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 956.980850][ C1] ? __asan_memmove+0x40/0x70 [ 956.985971][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 956.991393][ C1] __netif_receive_skb_core+0x989/0x30b0 [ 956.997040][ C1] ? chacha_permute+0x4ce/0xf00 [ 957.001899][ C1] ? unwind_next_frame+0x8f/0x2550 [ 957.007026][ C1] ? lock_acquire+0x106/0x350 [ 957.011710][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 957.017792][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 957.023093][ C1] ? lock_acquire+0x106/0x350 [ 957.028132][ C1] ? __lock_acquire+0x683/0x2cf0 [ 957.033108][ C1] __netif_receive_skb_list_core+0x24d/0x830 [ 957.039117][ C1] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 957.045633][ C1] netif_receive_skb_list_internal+0x995/0xcf0 [ 957.051802][ C1] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 957.058139][ C1] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 957.064824][ C1] ? dev_gro_receive+0x1097/0x2380 [ 957.069957][ C1] napi_complete_done+0x299/0x730 [ 957.075079][ C1] ? __pfx_napi_complete_done+0x10/0x10 [ 957.080635][ C1] ? gro_cell_poll+0x175/0x5d0 [ 957.085402][ C1] gro_cell_poll+0x5ab/0x5d0 [ 957.090002][ C1] ? gro_cell_poll+0x175/0x5d0 [ 957.094771][ C1] __napi_poll+0xaa/0x330 [ 957.099110][ C1] net_rx_action+0x61d/0xf50 [ 957.103723][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 957.108865][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 957.114087][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 957.119385][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 957.124589][ C1] ? sched_clock+0x3f/0x60 [ 957.129483][ C1] handle_softirqs+0x225/0x840 [ 957.134267][ C1] ? do_softirq+0x76/0xd0 [ 957.138603][ C1] ? tun_rx_batched+0x185/0x790 [ 957.143462][ C1] do_softirq+0x76/0xd0 [ 957.147725][ C1] [ 957.150672][ C1] [ 957.153603][ C1] __local_bh_enable_ip+0xf8/0x130 [ 957.158953][ C1] ? tun_rx_batched+0x185/0x790 [ 957.163853][ C1] tun_rx_batched+0x616/0x790 [ 957.168566][ C1] ? __pfx_tun_rx_batched+0x10/0x10 [ 957.173785][ C1] ? tun_get_user+0x2717/0x4370 [ 957.178655][ C1] ? tun_get_user+0x2717/0x4370 [ 957.183547][ C1] ? tun_get_user+0x23cb/0x4370 [ 957.188412][ C1] ? tun_get_user+0x23cb/0x4370 [ 957.193272][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 957.198571][ C1] ? tun_get_user+0x2717/0x4370 [ 957.203442][ C1] ? tun_get_user+0x2717/0x4370 [ 957.208311][ C1] tun_get_user+0x2b44/0x4370 [ 957.213003][ C1] ? aa_file_perm+0x18b/0x15f0 [ 957.217772][ C1] ? aa_file_perm+0x4ed/0x15f0 [ 957.222808][ C1] ? __pfx_tun_get_user+0x10/0x10 [ 957.227857][ C1] ? __lock_acquire+0x683/0x2cf0 [ 957.232803][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 957.238183][ C1] ? preempt_schedule_common+0x82/0xd0 [ 957.243666][ C1] ? ref_tracker_alloc+0x341/0x4b0 [ 957.248784][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 957.254289][ C1] ? tun_get+0x1c/0x2f0 [ 957.258460][ C1] ? tun_get+0x1c/0x2f0 [ 957.262627][ C1] ? tun_get+0x1c/0x2f0 [ 957.267047][ C1] ? tun_get+0x1c/0x2f0 [ 957.271298][ C1] tun_chr_write_iter+0x113/0x200 [ 957.276423][ C1] vfs_write+0x612/0xba0 [ 957.280677][ C1] ? __pfx_vfs_write+0x10/0x10 [ 957.285460][ C1] ? __fget_files+0x2a/0x420 [ 957.290143][ C1] ksys_write+0x150/0x270 [ 957.294481][ C1] ? __pfx_ksys_write+0x10/0x10 [ 957.299343][ C1] __do_fast_syscall_32+0x23e/0x6f0 [ 957.304549][ C1] ? do_fast_syscall_32+0x33/0x70 [ 957.309587][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 957.314792][ C1] ? irqentry_exit+0x10f/0x910 [ 957.319665][ C1] ? trace_irq_disable+0x3b/0x140 [ 957.324705][ C1] do_fast_syscall_32+0x33/0x70 [ 957.329569][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 957.335907][ C1] RIP: 0023:0xf7fb40ec [ 957.339988][ C1] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 957.359783][ C1] RSP: 002b:00000000f547650c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 957.368397][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800004c0 [ 957.376459][ C1] RDX: 000000000000fd78 RSI: 0000000000000000 RDI: 0000000000000000 [ 957.384522][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 957.392517][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 957.400496][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 957.408497][ C1] [ 957.411874][ C1] Kernel Offset: disabled [ 957.416195][ C1] Rebooting in 86400 seconds..