last executing test programs: 27.71767519s ago: executing program 2 (id=4556): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = memfd_create(&(0x7f0000000180)='[\vx\'\xa5)\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\x01\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x99\x83\xcd\b\xd1\x02R\xae\x80z8Z\xd2}\xf5\xe4\x9f5\x9b7\xaf\xb7o\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000180)={{0x2, 0x4c20, @remote}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x0, {0x2, 0x4ea0, @multicast2}}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000680)={0x24, &(0x7f0000000300)={0x40, 0x10, 0x33, {0x33, 0x8, "1503fd3b11a65e2f3e2c1967588e14ed8da7247423a3a50e0307cbba5fdf92ec3d1b5bf7e95d814db1ab4e00734fc6f583"}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2409}}, &(0x7f0000000580)={0x0, 0x22, 0x12, {[@global=@item_012={0x0, 0x1, 0xb}, @main=@item_4={0x3, 0x0, 0xb, "e981247e"}, @global=@item_012={0x1, 0x1, 0x5, 'G'}, @main=@item_4={0x3, 0x0, 0xc, "d8f84785"}, @local=@item_4={0x3, 0x2, 0x3, "d1e2d506"}]}}, &(0x7f00000005c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0xda9, 0x1, 0x1, {0x22, 0x732}}}}, &(0x7f0000000980)={0x2c, &(0x7f00000006c0)={0x40, 0x12, 0x16, "a1de117ff9fd2e4a0f256f85e7158ecd5082221c7f29"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000008c0)={0x0, 0x8, 0x1}, &(0x7f0000000900)={0x20, 0x1, 0x29, "7afd67bf44a696923b07ec113033b94a2a9cb20eca5d0c9621067872d4cb3ea20ed533ec979ed77a36"}, &(0x7f0000000940)={0x20, 0x3, 0x1, 0x3}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14, r5, 0x303, 0x70bd2b, 0xfffffffc}, 0x14}, 0x1, 0x0, 0x0, 0x8045}, 0x40000) r6 = syz_open_dev$loop(&(0x7f0000000040), 0xffffffff80000001, 0x1680a2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) clock_settime(0x100000000000000, &(0x7f0000000040)={0x8000000000000802, 0xfffffffffffffffe}) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/rcu_normal', 0x82802, 0x8) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000080)={r7, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf900000080149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d665f985881a350000ddffffff00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237601a8ca5b07dce141802c4dacf162e43ac6126c370ec00000000a04100", [0xffffffff7ffffce8, 0xa]}}) ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4, 0x71, 0x0, 0x9, 0x19, 0x0, "585633671ffbca2496d5728d0f8f2bfcb2c20f83c6f1fa74940c64d4abfa391b832442b953fc573f4446b09d04892c8343a864c88ace846789292b47ee7a6d8e", "c50f751886fb50e007d5d016c44110f534af43cc07fac51bee22e72e86c01b4928d69bdefd07854c13920811fd7002dc8aada05a7c0bda02f7ff87fdc11bc4ec", "ee221bd6914010cf945a86f1069be93a8dc7d78055821a5718fd6b88965c471e", [0x3, 0x6]}) getpeername(r2, &(0x7f0000000380)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f0000000400)=0x80) r8 = syz_usb_connect(0x4, 0x24, &(0x7f0000000040)=ANY=[@ANYRES32=r1], 0x0) syz_usb_control_io$uac1(r8, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) socket$inet6(0xa, 0x3, 0x6) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x378b5ec3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0xdc}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "804479", 0x14, 0x6, 0x0, @private2, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) write$binfmt_script(r0, &(0x7f0000000380)={'#! ', './file0', [{0x20, '\t\t'}, {}]}, 0xf) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 26.334197068s ago: executing program 2 (id=4566): r0 = syz_io_uring_setup(0x315b, &(0x7f0000000140)={0x0, 0xc7ca, 0x42, 0x1000, 0x18e}, &(0x7f00000000c0), &(0x7f0000000000), &(0x7f0000000040)) landlock_restrict_self(0xffffffffffffffff, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020601020060000000000000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400020000008001240fffffffa0d000300686173683a6e65740000000005"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x20008030) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) 26.08322548s ago: executing program 2 (id=4569): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000c00)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x46}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000280)="bc1c898bb49ee780838591ce0df578317ad5429c3bba6a5222cd40f6b65e608415a04dafc6965ceca8cc61300a0e063ea4a10ac789ad7889dd1038ec913fbddddc62deecc261a236ab5d87e1d93ed7616c6b2a343fd05b87c03450959401eb86eb2661acd4665181920b8cafa688b2ceacb4f9124a2b1a000001961d7c23c3016102a3352f1cc914c4aeeddb4f31eed662c504fcfbb81dcc9067c01706e366ba4500e49548fbedb28acb2458a5b8d572df573f184ef9677a00eefd5e7f10d0bca758d9f9a0e995286ef4b64d03836a0b48f185250108b1caf290a7b836f669ac23abcad43aa88eb60dfe509e5aa52dced1b0019330b7e1be556fd047af1df68437303da40c", 0x105}], 0x1}}], 0x1, 0x40408d1) shutdown(r0, 0x1) r1 = syz_clone(0x11, 0x0, 0x56, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setopts(0x4200, r1, 0x1, 0x60) ptrace$cont(0x7, r1, 0xff, 0x7) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000001c0)=[@in6={0xa, 0x4e22, 0xfffffffb, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x9}], 0x1c) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = epoll_create1(0x80000) (async) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r4, 0x40045542, &(0x7f0000000b00)) (async) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x6}, 0x8) (async, rerun: 32) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0xbc, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1a}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELRULE={0x5c, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x84}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2b}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x614a1d8fa97e61b4}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x16c}}, 0x40000) (async) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x40002) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x181c41) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) (async) r6 = getpid() ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) (async) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000200)={0x2011}) (async) kcmp$KCMP_EPOLL_TFD(r6, r7, 0x7, 0xffffffffffffffff, &(0x7f0000000100)={r3}) ptrace$peekuser(0x3, r7, 0x38c0e08d) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) semget(0x1, 0x4, 0x39c) 25.681615844s ago: executing program 2 (id=4573): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e23}]}}}]}, 0x3c}, 0x1, 0x800000000000000}, 0x48000) 25.290941004s ago: executing program 2 (id=4575): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x20) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000040)=0x1, 0x4) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000600)=0x180004) write$binfmt_elf32(r0, 0x0, 0x4cd) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)=0xffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000240)={0x0, &(0x7f0000000140)=[@wr_crn={0x67, 0x20, {0x2}}], 0x20}) ioctl$KVM_GET_SREGS(r3, 0x8138ae83, &(0x7f0000000440)) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r6 = accept4(r5, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched_retired(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=@newtclass={0x24, 0x28, 0x400, 0x70bd28, 0x8, {0x0, 0x0, 0x0, 0x0, {0x8}, {0x2}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x20008000) sendmmsg$alg(r6, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r6) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendfile(r2, r4, 0x0, 0xffffffff004) ioctl$KVM_TDX_CAPABILITIES(r4, 0xc008aeba, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000001840)}) write$dsp(r0, &(0x7f0000000180)="755a5b98d512d3907745ef85b89f2141d513969bd8665c01900f50438068ff0e4c792d818dea31bb6c2ba7630db369686fda9b7400000000000000000000e2ff00db18dc287ebfaa2bbc4ef1afe56dfa4702e93b428b19e84517c526907a31e25edeae8552ef9f348310842801e56968f90756ae726ee242dfe9d8e0a51214b9f7f4f0", 0x83) 25.068131623s ago: executing program 2 (id=4577): symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./file1\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_procfs(0x0, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x8) sendmsg(r3, &(0x7f0000000340)={0x0, 0x5f, 0x0, 0x5e, 0x0, 0x0, 0x2c}, 0x48d5) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000540)=""/155, 0x9b}, {&(0x7f0000000600)=""/243, 0xf3}, {&(0x7f0000000700)=""/4096, 0x1000}, {0x0}], 0x5}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp\x00') r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000003900)={0x0, &(0x7f0000003740)=[@wr_drn={0x68, 0x20, {0x4}}, @nested_amd_invlpga={0x17d, 0x20, {0x7000, 0x3568}}, @nested_vmlaunch={0x12f, 0x18}, @wr_drn={0x68, 0x20, {0x7}}, @nested_amd_invlpga={0x17d, 0x20, {0xeeed1000, 0x53da}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0x4, 0x4}}, @nested_load_syzos={0x136, 0xc8, {0x3, 0x4, [@code={0xa, 0x68, {"0f01c40f6a2417420f18df2665360f01c836f30f09c7442400b0b00000c744240200000100c7442406000000000f011c24360f005f5dc461fc2b28c44255be3dc7240000c744240062000000c7442402cc400000ff1c24"}}, @nested_load_syzos={0x136, 0x20, {0x1, 0x6}}, @in_dx={0x69, 0x20, {0x719e, 0x2}}]}}], 0x1a8}) lseek(r5, 0xfffffd, 0x1) read$FUSE(0xffffffffffffffff, &(0x7f0000001700)={0x2020}, 0xffffff08) pread64(r0, &(0x7f0000000100)=""/253, 0xfffffd58, 0x8) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x4e23, @rand_addr=0x64010101}}}, 0x84) openat$zero(0xffffffffffffff9c, 0x0, 0x42, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000540)=ANY=[@ANYBLOB="38000000480021032cbd7000fbdbdf250a000000", @ANYRES32=0x0, @ANYBLOB="0400000008000200060000fcffffff00ff0100000cb8e28fb51ec06e00000000"], 0x11}, 0x1, 0x0, 0x0, 0x4010}, 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0x8, 0x2) symlink(&(0x7f0000000280)='./file1/file0\x00', &(0x7f00000002c0)='./file0\x00') getxattr(&(0x7f0000000080)='./file1\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB='ujj'], 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x2000) 9.975563601s ago: executing program 32 (id=4577): symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./file1\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_procfs(0x0, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x8) sendmsg(r3, &(0x7f0000000340)={0x0, 0x5f, 0x0, 0x5e, 0x0, 0x0, 0x2c}, 0x48d5) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000540)=""/155, 0x9b}, {&(0x7f0000000600)=""/243, 0xf3}, {&(0x7f0000000700)=""/4096, 0x1000}, {0x0}], 0x5}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp\x00') r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000003900)={0x0, &(0x7f0000003740)=[@wr_drn={0x68, 0x20, {0x4}}, @nested_amd_invlpga={0x17d, 0x20, {0x7000, 0x3568}}, @nested_vmlaunch={0x12f, 0x18}, @wr_drn={0x68, 0x20, {0x7}}, @nested_amd_invlpga={0x17d, 0x20, {0xeeed1000, 0x53da}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0x4, 0x4}}, @nested_load_syzos={0x136, 0xc8, {0x3, 0x4, [@code={0xa, 0x68, {"0f01c40f6a2417420f18df2665360f01c836f30f09c7442400b0b00000c744240200000100c7442406000000000f011c24360f005f5dc461fc2b28c44255be3dc7240000c744240062000000c7442402cc400000ff1c24"}}, @nested_load_syzos={0x136, 0x20, {0x1, 0x6}}, @in_dx={0x69, 0x20, {0x719e, 0x2}}]}}], 0x1a8}) lseek(r5, 0xfffffd, 0x1) read$FUSE(0xffffffffffffffff, &(0x7f0000001700)={0x2020}, 0xffffff08) pread64(r0, &(0x7f0000000100)=""/253, 0xfffffd58, 0x8) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x4e23, @rand_addr=0x64010101}}}, 0x84) openat$zero(0xffffffffffffff9c, 0x0, 0x42, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000540)=ANY=[@ANYBLOB="38000000480021032cbd7000fbdbdf250a000000", @ANYRES32=0x0, @ANYBLOB="0400000008000200060000fcffffff00ff0100000cb8e28fb51ec06e00000000"], 0x11}, 0x1, 0x0, 0x0, 0x4010}, 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0x8, 0x2) symlink(&(0x7f0000000280)='./file1/file0\x00', &(0x7f00000002c0)='./file0\x00') getxattr(&(0x7f0000000080)='./file1\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB='ujj'], 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x2000) 9.538509707s ago: executing program 0 (id=4684): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0x5bcd, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000200)={0x3}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000e8ff6e0000000000000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfe64}, 0x94) 9.319806881s ago: executing program 0 (id=4685): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000010000107f6ffffff000000000a0000000600010014"], 0x1c}, 0x1, 0x8000000, 0x0, 0x40000}, 0x0) 9.158260359s ago: executing program 0 (id=4686): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002d3d6a08c6050592ac29000000010902240003000000000904060000ff4f9b000904b000003a3846000904"], 0x0) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b00"], 0x0) syz_usb_disconnect(r3) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$inet(0x2, 0x3, 0x100) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000500)=0x8, 0x4) bind$inet(r5, &(0x7f0000000000)={0x2, 0xffdf, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) syz_usb_connect$uac1(0x0, 0xca, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000a00)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x250, 0x80, 0xc, 0x4, 0xff, 0x9}, 0x39, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x3, [{0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x43f}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x4001}}, {0xc3, &(0x7f0000000700)=ANY=[@ANYBLOB="c30369422046915dec443c07022fb91d3f54b34bc16ffcc18b1bff71130eb4227f9f7e30e96d580273e8de2a84f8089651987c976f915a92290f08b78d6ea25a9c967d8e18face0c546baa536c485dfda1272b3ee3471a59b66b073b4ac0e74be23a7a8fa634e15a4511a27c76e096eb3af4e474fda34a0e226b21a0b6bb034071eb8675ae45bb12ee41d64761eca4f0930eb62b7746bf03d1c8d5e802a4b5a5e8ff5c50f582cdb2571466d1eeef16984e3b3a97928a9fa78ec5c52e2b4b1e71706a04"]}]}) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) writev(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r9, &(0x7f0000000340)='memory.swap.max\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) close(r7) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xffff, 0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x1, 0x800, 0x3}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x81}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r11 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r11, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r12, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 6.491629757s ago: executing program 4 (id=4698): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x38, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, 0x0, 0x0) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') lseek(r1, 0x400, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x50, 0x0, &(0x7f0000000480)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f00000003c0)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_handle={0x77682a85, 0x100b}, @flat=@weak_handle={0x77682a85, 0x1100, 0x1}}, &(0x7f0000000440)={0x0, 0x18, 0x30}}}, @free_buffer], 0x0, 0x0, 0x0}) dup3(r2, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x5, 0xc3, &(0x7f00000002c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x249c, 0x9008, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb1, 0x3, 0x1, 0x1, 0xf0, 0xf8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x17}, [@feature_unit={0xd, 0x24, 0x6, 0x5, 0x1, 0x3, [0x4, 0x5, 0x2], 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x51, 0x2, 0x7, 0x1f, "89", "9d7a97"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x24, 0x2, 0xf, 0x6, "eaee80", "e89824"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x0, 0x2}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x9f, 0x3, 0x9, 0x0, "e8be10db41adc5a197"}, @as_header={0x7, 0x24, 0x1, 0x80, 0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x28, 0x1, 0x3, 0x9, {0x7, 0x25, 0x1, 0x8, 0x1, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x8, 0x1, 0x91, 0x3, "69d487"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x4, 0x0, 0xb, {0x7, 0x25, 0x1, 0x8, 0x5, 0x7}}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x300, 0x0, 0x39, 0x8, 0x20, 0x4}, 0x32, &(0x7f0000000540)={0x5, 0xf, 0x32, 0x1, [@generic={0x2d, 0x10, 0xb, "346b99e6455eaf8dde64999f4026c1d0207d32df9f3497ef72f46bac80ba462c4542138ce8f89fbf94d4"}]}, 0x2, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x1407}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0xc09}}]}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/binder1\x00', 0x1002, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000080)=0x100) write$dsp(0xffffffffffffffff, &(0x7f0000000240)=' ', 0x1) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 6.033332752s ago: executing program 0 (id=4700): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x17cc, 0x1020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x9, 0x10, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x8, 0x5, 0x65, {0x7, 0x25, 0x1, 0xc, 0x2, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xee, 0x8, 0x1, {0x7, 0x25, 0x1, 0xc, 0xa, 0x2}}}}}}}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d0009055c"], 0x0) r2 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) syz_usb_disconnect(r1) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x18, 0x2, 0x1, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xd61fc6a79dd84b78}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x800) ppoll(&(0x7f0000000000)=[{r4, 0xd}, {r4, 0x8100}], 0x2, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_80211_inject_frame(0x0, &(0x7f0000000740)=@data_frame={@msdu=@type11={{0x0, 0x2, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x8}, @broadcast, @broadcast, @device_b, {0x5, 0x6}, @device_a, @void, @value=@ver_80211n={0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}}, @random="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"}, 0x24c) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r7, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x2, 0x0, 0x0, 0x2, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) writev(r8, &(0x7f0000000200)=[{&(0x7f0000000540)="ab2d3e76ac797a4cd8b70919b61eb5d07a1890cf6ff523fd85841332495b6351d971a785d06b7a625f0b886b772fe361b30f68bdf17635f8b23a3fb8311c482a9f90be4520ae09b98c9ee1dc1ec35b16096879fab7c40b5deaf2030940041b9742de58591dc288503c5ef8d2334710953161728142b1e25aa4afa272cc5913be1ac6a3159e827422e3bd3ba2370f800091a2fab6c4ee038913c004391711097e6a7b57c458f20950b85b72a102f98b31a475135dd7439e5d51b2f827b96abb152a782d", 0xc3}], 0x1) ioctl$TCSETS2(r8, 0x402c542b, &(0x7f0000000140)={0xfffff800, 0xfffff689, 0xfffffefe, 0xca, 0x9, "5eb658000000e500", 0x5f9, 0x10004}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) write$FUSE_INIT(r4, &(0x7f0000000080)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x2d, 0x2, 0x1100, 0x8, 0x0, 0xffffffff, 0x57f0, 0x0, 0x0, 0x8, 0x1}}, 0x50) 4.617494364s ago: executing program 4 (id=4711): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') (async) r1 = epoll_create1(0x0) (async) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DROP_PRIVILEGES(r2, 0x4004551e, &(0x7f00000004c0)=0x53fb428e) (async) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x115ebe53397add18, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x1, 0x4, 0x0, {0x2, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10009}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x19, 0x3c}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x48850) (async, rerun: 64) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x80000011}) (async, rerun: 64) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r3], 0x0) 3.86950673s ago: executing program 3 (id=4719): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r0, @ANYRES32=r2, @ANYBLOB="0100000000c000001c00128009000100626f6e64000000000c0002800500010006000000"], 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x6aedc5be46dcbf08) sendmsg$nl_route(r0, 0x0, 0x48000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000200)='blkio.bfq.time_recursive\x00', 0x0, 0x0) preadv2(r5, &(0x7f0000000040)=[{&(0x7f0000000100)=""/65, 0x77}], 0x1, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r6 = socket$inet(0x10, 0x3, 0x0) getresuid(&(0x7f0000000140)=0x0, &(0x7f00000001c0), &(0x7f0000000200)) quotactl_fd$Q_SETQUOTA(r6, 0xffffffff80000800, r7, &(0x7f0000000340)={0x7f, 0x398f, 0x7, 0xb4e, 0x1, 0x9, 0xe709, 0x0, 0x9}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) bind$netlink(r10, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r10, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r9, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r11, @ANYBLOB="01000000000000002400128009000100626f6e6400000000140002800500010006"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x82, &(0x7f00000004c0)=ANY=[@ANYRESHEX], 0x0) r13 = socket(0x1, 0x803, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r8, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r14], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) socket$nl_netfilter(0x10, 0x3, 0xc) 3.466411899s ago: executing program 3 (id=4721): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x4000}, {0x200000000000000}}, [@tmpl={0x144, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in6=@dev, 0x0, 0x3}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}}, {{@in6=@local, 0x0, 0x33}, 0x0, @in=@empty}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x6c}, 0x2, @in=@rand_addr=0x64010101, 0x0, 0x6, 0x0, 0xfd, 0x0, 0x2, 0x8}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x1}, 0x0) 3.383941706s ago: executing program 3 (id=4722): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000d00)={{{@in=@empty, @in6=@private1}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000e00)=0xe8) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000e40)={@in6={{0xa, 0x4e24, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffa8}}, 0x0, 0x0, 0x40, 0x0, "83004c62019c4606de7828e8fd93533193851e02dab231ec1a9ed59d84432a92cc53ad78eb08e480f0b237d154c2331c075b1012fb6f3c55b6952d06f9ff249ea9f68564e19abb5327068492aca1d2bf"}, 0xd8) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac1414aa"], 0x38}, 0x1, 0x0, 0xff1f, 0x14}, 0x0) 2.632656841s ago: executing program 5 (id=4725): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000880)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d8, 0x1e8, 0x98, 0x0, 0x1e8, 0x150, 0x340, 0x340, 0x98, 0x340, 0x340, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x69}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0xd14bdc4, {0x8}}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00', {}, {}, 0x0, 0x0, 0x70}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0xff, 0x0, 'syzkaller0\x00', 'geneve1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98, 0x0, {0x4000000}}, {0x28}}}}, 0x438) 2.575105667s ago: executing program 5 (id=4726): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000980)="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", 0x126}, {&(0x7f0000000bc0)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac539985bac8624c50b527c68b0ff250261953f2da79a78104c2d0000000086b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677", 0x92}], 0x2}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001500)="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", 0x3b2}], 0x1}}], 0x2, 0x2090) 2.516610398s ago: executing program 5 (id=4727): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001, 0x4}, 0x8) connect$inet6(r2, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000011c0)="d3f04bb4604aed32226e529c8812223fc4797c733f8176720c3ad91b943b1ad6f8027b3cc582e5502433b313659a57fa991300b16a4529482443b67e8a41483837b5f9f422cb9d69b64f69b4bb9d3fdc2907e8201322498ed0448ce67f43a68a92938a420012241f6712e9dc52e38a6aed925779287435d8441c3f33760552e488dc42bcadd66a5e1643c45095a0aaae13af", 0x92}], 0x1}, 0x7101}], 0x1, 0x4001c00) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = eventfd2(0xe5c, 0x80000) r4 = eventfd2(0x4001, 0x800) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r3, 0x7, 0x2, r4}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x87, 0x82, 0x4, 0x1, 0xc5, 0xc, 0xb3, 0xc4, 0x6, 0x9, 0x5, 0x84, 0x8, 0xfd, 0xfe, 0xec}}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x35, 0xe, 0x4, 0x1, 0x2, 0x1000, 0xf1, 0x0, 0x7fffffffffffb, 0x1, 0x0, 0x40001, 0x0, 0xc12, 0x1, 0xbde], 0x1000, 0x3d4316}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.402326076s ago: executing program 3 (id=4728): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a0104f5ffffff000000000a8000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c000980080001400000001c080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.334304653s ago: executing program 3 (id=4729): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x28100, 0x0) ioctl$IOMMU_VFIO_SET_IOMMU(r1, 0x3b66, 0x3) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x5], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) close(r3) 2.289238972s ago: executing program 5 (id=4730): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0xc2400, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x4000002, 0x2}) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000040)={0x4000000, 0x400000}) close(r2) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8437f, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000001080)=0xc, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000001300)='net/kcm\x00') read$char_usb(r4, &(0x7f0000000040)=""/4109, 0x100d) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xd40, 0x82) lsm_get_self_attr(0x64, 0xffffffffffffffff, 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]}) pipe2$watch_queue(0x0, 0x80) 1.973141033s ago: executing program 0 (id=4731): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000070000ac1e0001821501f63ed02a170000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.880745003s ago: executing program 0 (id=4733): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x38, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, 0x0, 0x0) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') lseek(r1, 0x400, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x50, 0x0, &(0x7f0000000480)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f00000003c0)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_handle={0x77682a85, 0x100b}, @flat=@weak_handle={0x77682a85, 0x1100, 0x1}}, &(0x7f0000000440)={0x0, 0x18, 0x30}}}, @free_buffer], 0x0, 0x0, 0x0}) dup3(r2, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x5, 0xc3, &(0x7f00000002c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x249c, 0x9008, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb1, 0x3, 0x1, 0x1, 0xf0, 0xf8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x17}, [@feature_unit={0xd, 0x24, 0x6, 0x5, 0x1, 0x3, [0x4, 0x5, 0x2], 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x51, 0x2, 0x7, 0x1f, "89", "9d7a97"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x24, 0x2, 0xf, 0x6, "eaee80", "e89824"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x0, 0x2}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x9f, 0x3, 0x9, 0x0, "e8be10db41adc5a197"}, @as_header={0x7, 0x24, 0x1, 0x80, 0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x28, 0x1, 0x3, 0x9, {0x7, 0x25, 0x1, 0x8, 0x1, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x8, 0x1, 0x91, 0x3, "69d487"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x4, 0x0, 0xb, {0x7, 0x25, 0x1, 0x8, 0x5, 0x7}}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x300, 0x0, 0x39, 0x8, 0x20, 0x4}, 0x32, &(0x7f0000000540)={0x5, 0xf, 0x32, 0x1, [@generic={0x2d, 0x10, 0xb, "346b99e6455eaf8dde64999f4026c1d0207d32df9f3497ef72f46bac80ba462c4542138ce8f89fbf94d4"}]}, 0x2, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x1407}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0xc09}}]}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/binder1\x00', 0x1002, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000080)=0x100) write$dsp(0xffffffffffffffff, &(0x7f0000000240)=' ', 0x1) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 1.850347734s ago: executing program 1 (id=4734): socket$inet6(0xa, 0x200000000003, 0x87) syz_emit_ethernet(0xa2, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb006c2b0000000000000000000001000000000000fe8000000000000000000000000000aa87000000000000003b"], 0x0) 1.723622478s ago: executing program 3 (id=4735): write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0200000001000000000000000400000700000000100000000000000020"], 0x24, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.626480097s ago: executing program 1 (id=4736): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002e00090027bd70b80300003004"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x20048010) 1.367931643s ago: executing program 4 (id=4737): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000980)="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", 0x126}, {&(0x7f0000000bc0)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac539985bac8624c50b527c68b0ff250261953f2da79a78104c2d0000000086b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677", 0x92}], 0x2}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001500)="24acadd7f04daaa04e88680351d9ce53f67fd2afefe557d4bd561f02df2570f175951d4bdd97ec433ec583c79fa668922a61c8662e0890ce06996f5ba401e582dfb5197822bee50c6cd4b3a6f9d14f1fde9b1698ad6847d4fde0458282ece396a1e212cd02e6fb62599df5ecb5984843ee04e96eb26fa2a8100a0b7b2d032fff965485ded83b39d6c9835416a8db5414a6c54101693e6b05e652b49fceaf4a0cc2b7898034ff0eb5150b3e85b9ff5658ba346d0b6b5a3a71eb084311606cf6b8ccf7c45a79b319a201e9c5ae9f0aab5c4dd7a77de7f5ae2edb307892dbfa8377446d8cabb9302b27250c66ddaeb3988933df044b6ae4570671cf861484b9124827dbe78a0388eecac9e6ad371287ca014fa658c6f1308b046b2fc0cc3d5b8ba48f3b1319d5976bb45f3c630f01c77b93f07fe2b304a98383258a37791da00145e24f619c5dd07939c39212ca7d8421dcf50ab703f86dacf4a4159a123d25a7a9ad2319a876af43da4cf86b0f6a7f261562e1b10681a71d941a5e90031452e37f4a616b85fe6b48803cbca2369565be720ef5fd1e6326234c34f6e13ba39f9460acc68e15eef508e402b29e452883c90b50b04d66ad07cb689d31426147a965dd4691519d844bfc83d830b8c5a679c41fbdcc2d16b3dcecc1f5be156f96fa2a315c68bfd1ebba95e9de0e3cdf7ad8e93b92cda3c4643ca88fcd710c1a24d0d62b54d937f2fbe7aa09ba34c71a17eefa0dba2d4752ae91850d734be15b1f2f5e36856786f5cf0afec24a46634f8d5aec6008c1ace1e404af77c8f4d37283847349ac22f6703d44fb66cec0ceb9390cf2f878d8390ecd8fbeb82a6ccd966bca4c4689a2e2a850a30dfa7c0c19ecec0c799e2880d2088ece8401306bfa4b34da709caa802c8f9d6deb5b599d262faa7de40de113c89a8e8e3a4f19ac1847387be89e27286e20dd49339021e79ddb0cf3bf72fcc25f3b7d35ca05c4473521320b1a6bee637e4f4da9692506931df8f990ed54e23000030d26f30c8ee3ace6c9d5795b7443aa0651ecb2b64549d4bd4bea0ed0f69e69291057bf7c3b92ad0a8ec4e5acf31c4ed8c372f1bd9b0bf6c51a7a29915fc2e5a24c36599612fd4527870ea6c7057f87c105c73386f738f98165cb8bac0d2ce46eeb7e39d9f3c2d93e4910d231ce946d65120f2bd4842ed181261c0ea728b06e6155944b6c3554d553724c5419d45f633d97bc59889ed7a4df1d35cc9bede168d3d8dca779293dd9564877b009d93c99a7a0f983e33e937bfb13b06e611c8c33313821f110e6911643cfabc2c75c42af256a07c8fee22c7795cb5a57dda8df", 0x3b2}], 0x1}}], 0x2, 0x2090) 1.359330908s ago: executing program 1 (id=4738): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x2940000, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000000)="f4000c902c442c25fe80000000000100dc8b850f238466ccfec737220300120000000000807aa7c7", 0x28}], 0x1}, 0x0) 1.103470541s ago: executing program 4 (id=4739): r0 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x3}, &(0x7f00000021c0)='{', 0x1, 0xfffffffffffffffe) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2bb}) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000340)={r2}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) (fail_nth: 2) r3 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x800, 0x43, 0x1ff}) r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r4, 0xffffffffffffffff, 0x2d) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r6, 0xba) add_key(&(0x7f0000000040)='ceph\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000200)="a24b5395ac4c102c48568ebed7752771e969757d724b89ae552abbf3cf839d2b8732b25a0dad5212774e24741277faeab2a15523cfa00838c005b4953088837c4c91555f", 0x44, r0) r7 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x0}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705ae5", 0xc1, r4) keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r7, r7}, &(0x7f0000000540)=""/204, 0xcc, &(0x7f00000003c0)={0x0, &(0x7f0000000280)="708803449262ddb5bda92158536f78c390609a10de442b2c85a693afd7d8e5ffc37e1b3aebbdae8dc970f20781e971fc777714aa", 0x34}) 1.014930994s ago: executing program 1 (id=4740): syz_emit_ethernet(0x4e, &(0x7f0000001a00)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "c00100", 0x18, 0x0, 0x0, @remote, @dev={0xfe, 0x80, '\x00', 0x2e}, {[@routing={0x3a, 0x2, 0x1, 0x0, 0x0, [@private2]}]}}}}}, 0x0) 449.13872ms ago: executing program 5 (id=4741): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000980)="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", 0x126}, {&(0x7f0000000bc0)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac539985bac8624c50b527c68b0ff250261953f2da79a78104c2d0000000086b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677", 0x92}], 0x2}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001500)="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", 0x3b2}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 374.703773ms ago: executing program 4 (id=4742): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000980)="91f8a9849519def28691bbc4173c3d6f357d0272b7e95a136b3ffec75b73e6937b7b22a1319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000f2ffffff2e3591ceb1757de97fb25500620d0d30506e7429fa5337b74945da657f794d5b5bf89588e07b14a17f069912dc0c3f201bff8b9a687b85baa11244632642a9be7b42b6b5882b738f05eba73221490e2d5c17cf406be2796eec488a5b5268f507ee8d6f3dd1d64abc785708eb9bd24e352a984b2b1596d35ebe1d3443aa78fb40209dcfa4666bbcc6ca80810e4d7cf28a3ef8da37545132057476c8adc3906a07f6082bc4e4771b1f84d1eb323d4f9320e33ea3d4b4c1c259db0e63f82409d07fa54d3ecdfc9cd635c1bcd7a5efead4eb3486842c60", 0x126}, {&(0x7f0000000bc0)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac539985bac8624c50b527c68b0ff250261953f2da79a78104c2d0000000086b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677", 0x92}], 0x2}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001500)="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", 0x3b2}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 234.365453ms ago: executing program 5 (id=4743): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000002080)={0xa, {"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", 0x823}}, 0x1006) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="07000000000000000000050000001c000380080004001a0000000800020020000000080005007180bbda180001801400020073797a5f74756e00000000000021000005000600"], 0x50}, 0x1, 0x0, 0x0, 0x4000800}, 0x400d4) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0) mmap(&(0x7f00009f5000/0x1000)=nil, 0x1000, 0xb635773f07ebbee5, 0x10, 0xffffffffffffffff, 0xe9f19000) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000d40)={&(0x7f0000000000), 0xc, &(0x7f0000000d00)={&(0x7f0000000080)={0x98c, r6, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x978, 0x8, 0x0, 0x1, [{0x128, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @rand_addr=0x64010102}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x42b, @loopback, 0x80}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000fff}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "00bae0b630b2335f43884edc6037e6ede67bf578c043253d6c89ecc4afcaeca0"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "91fccca2dc11e006a04580007322c92e29b74978b92180bea881fe2d80444b59"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xb85, @local, 0x7}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x5b9, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3}}]}, {0xdc, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x0, @private0, 0x2}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x3, 0x8, @ipv4={'\x00', '\xff\xff', @multicast2}}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "848312f06c708f67eb553b294ac108354f81756af7d82ed238cb17b994d6321a"}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0x308, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @remote}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0xa, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b03247b8f7a22a044e1c0cecb97d8f6493c233d16eb4cf83410e5079d9a4f37b"}, @WGPEER_A_ALLOWEDIPS={0xc0, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x26}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}}, @WGPEER_A_ALLOWEDIPS={0x1d0, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xb}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}]}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @rand_addr=0x64010101}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x0, 0x4, {0x2, 0x4e22, @empty}}]}, {0x84, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "ee034a2c7137bda66a1853afba6eb9ddfbd4cc79278d13f018a829ff2e962220"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast1}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a9bbd0f2ac045b603d701a357c23dd2415aa3fee2e9a223e030a3c2c2b895808"}]}, {0x35c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x300, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x12}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1c}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xe}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "ee6cd36a45b60334051a4ff87dedae82a1a042dec487ec258b30fdaa9d1906be"}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x61bf}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0d54d3211a75560b09b8c515c56d6a4f85427fcc0994fdf946b35da7f916a715"}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}]}, 0x98c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 189.207404ms ago: executing program 1 (id=4744): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c"], 0x1c}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000044400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 183.416575ms ago: executing program 4 (id=4745): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x28100, 0x0) ioctl$IOMMU_VFIO_SET_IOMMU(r1, 0x3b66, 0x3) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x5], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x0) close(r3) 0s ago: executing program 1 (id=4746): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = syz_open_dev$video(&(0x7f0000000080), 0x45c, 0x40040) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x201, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r5, 0x541c, &(0x7f00000001c0)={0x6, 0x33}) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000002c0)={0x400, 0x1, 0x3, {0xb, @sliced={0x40, [0x4, 0xab33, 0x3, 0x2, 0x4, 0x101, 0xfff9, 0x40, 0x1000, 0x6, 0x800, 0x5, 0xfffc, 0x9, 0xff, 0x8, 0x4, 0x6, 0x5, 0x7ff, 0x3, 0x4, 0x74d, 0x3, 0x7ff, 0x7, 0xfffc, 0x2, 0xae, 0x7, 0x5, 0x3, 0x81, 0x8, 0x2, 0x4c98, 0x8000, 0x5da, 0x977, 0x2, 0x1, 0x4, 0x6e, 0x5, 0x1, 0x6, 0x8, 0x2]}}, 0x3b7c}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r6, @ANYBLOB="05"], 0x6c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r2, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) kernel console output (not intermixed with test programs): eftover after parsing attributes in process `syz.1.3599'. [ 678.739604][ T5771] usb 1-1: USB disconnect, device number 96 [ 678.745798][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 678.745840][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 679.306801][T16888] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3603'. [ 679.355324][T16888] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 680.136405][T16901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 680.780888][ T30] audit: type=1326 audit(1779289232.804:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16907 comm="syz.0.3613" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235719ce59 code=0x7ffc0000 [ 680.874589][ T30] audit: type=1326 audit(1779289232.884:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16907 comm="syz.0.3613" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f235719ce59 code=0x7ffc0000 [ 680.932221][ T30] audit: type=1326 audit(1779289232.944:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16907 comm="syz.0.3613" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235719ce59 code=0x7ffc0000 [ 680.966049][ T30] audit: type=1326 audit(1779289232.944:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16907 comm="syz.0.3613" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235719ce59 code=0x7ffc0000 [ 681.330543][T16933] netlink: 'syz.2.3620': attribute type 10 has an invalid length. [ 681.387520][T16933] team0: Port device geneve0 added [ 681.419966][T16935] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 681.773183][T16940] netlink: 'syz.2.3622': attribute type 29 has an invalid length. [ 682.022971][T16941] syz.4.3621 (16941): drop_caches: 2 [ 682.070813][T16943] netlink: 'syz.1.3623': attribute type 1 has an invalid length. [ 682.257345][T16943] 8021q: adding VLAN 0 to HW filter on device bond6 [ 682.396107][T16945] bond6: (slave ip6gretap1): making interface the new active one [ 682.456588][T16945] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 682.622599][T16946] veth3: entered promiscuous mode [ 682.679570][T16946] bond6: (slave veth3): Enslaving as an active interface with a down link [ 683.896926][T16969] netlink: 212112 bytes leftover after parsing attributes in process `syz.2.3632'. [ 684.040770][ T5771] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 684.087802][T16975] netlink: 'syz.1.3634': attribute type 1 has an invalid length. [ 684.143191][T16975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3634'. [ 684.225275][ T5771] usb 4-1: unable to get BOS descriptor or descriptor too short [ 684.253233][ T5771] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 684.272453][ T5771] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.283119][ T5771] usb 4-1: Product: syz [ 684.287418][ T5771] usb 4-1: Manufacturer: syz [ 684.313476][ T5771] usb 4-1: SerialNumber: syz [ 684.514292][T16987] netlink: 'syz.0.3637': attribute type 3 has an invalid length. [ 684.794299][T16991] syzkaller0: entered promiscuous mode [ 684.813649][T16991] syzkaller0: entered allmulticast mode [ 685.155829][T16963] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3630'. [ 685.203604][ T5771] usb 4-1: 1:1: cannot get freq at ep 0x1 [ 685.359334][ T5771] usb 4-1: USB disconnect, device number 115 [ 685.500621][ T5856] udevd[5856]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 685.588493][T17004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3644'. [ 685.617785][T17004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3644'. [ 686.015437][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.029307][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.671054][T17039] netlink: 'syz.4.3657': attribute type 46 has an invalid length. [ 686.763492][ T5771] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 686.861224][T17044] FAULT_INJECTION: forcing a failure. [ 686.861224][T17044] name failslab, interval 1, probability 0, space 0, times 0 [ 686.883779][T17044] CPU: 1 UID: 0 PID: 17044 Comm: syz.4.3660 Tainted: G L syzkaller #0 PREEMPT(full) [ 686.883815][T17044] Tainted: [L]=SOFTLOCKUP [ 686.883824][T17044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 686.883838][T17044] Call Trace: [ 686.883846][T17044] [ 686.883857][T17044] dump_stack_lvl+0xe8/0x150 [ 686.883886][T17044] should_fail_ex+0x412/0x560 [ 686.883921][T17044] should_failslab+0xa8/0x100 [ 686.883955][T17044] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 686.883984][T17044] ? __alloc_skb+0x186/0x7d0 [ 686.884011][T17044] ? __alloc_skb+0x1d0/0x7d0 [ 686.884035][T17044] ? __local_bh_enable_ip+0xd0/0x130 [ 686.884063][T17044] __alloc_skb+0x1d0/0x7d0 [ 686.884099][T17044] alloc_skb_with_frags+0xc8/0x760 [ 686.884141][T17044] sock_alloc_send_pskb+0x878/0x990 [ 686.884181][T17044] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 686.884200][T17044] ? kasan_quarantine_put+0xbb/0x1f0 [ 686.884233][T17044] ? lockdep_hardirqs_on+0x7a/0x110 [ 686.884268][T17044] ? unix_dgram_sendmsg+0x57c/0x18d0 [ 686.884293][T17044] ? kmem_cache_free+0x182/0x650 [ 686.884324][T17044] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 686.884358][T17044] unix_dgram_sendmsg+0x460/0x18d0 [ 686.884411][T17044] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 686.884444][T17044] ? aa_sock_msg_perm+0xda/0x1b0 [ 686.884473][T17044] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 686.884511][T17044] ____sys_sendmsg+0x972/0x9f0 [ 686.884542][T17044] ? __might_fault+0xaf/0x130 [ 686.884575][T17044] ? __pfx_____sys_sendmsg+0x10/0x10 [ 686.884614][T17044] ? import_iovec+0x73/0xa0 [ 686.884650][T17044] ___sys_sendmsg+0x2a5/0x360 [ 686.884679][T17044] ? __lock_acquire+0x6b5/0x2cf0 [ 686.884707][T17044] ? __pfx____sys_sendmsg+0x10/0x10 [ 686.884735][T17044] ? __lock_acquire+0x6b5/0x2cf0 [ 686.884869][T17044] ? kstrtouint+0x6e/0xe0 [ 686.884990][T17044] __sys_sendmmsg+0x27c/0x4e0 [ 686.885032][T17044] ? __pfx___sys_sendmmsg+0x10/0x10 [ 686.885060][T17044] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 686.885108][T17044] ? ksys_write+0x242/0x270 [ 686.885141][T17044] ? __pfx_ksys_write+0x10/0x10 [ 686.885177][T17044] __x64_sys_sendmmsg+0xa0/0xc0 [ 686.885210][T17044] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.885233][T17044] do_syscall_64+0x15f/0xf80 [ 686.885264][T17044] ? trace_irq_disable+0x3b/0x140 [ 686.885296][T17044] ? clear_bhb_loop+0x40/0x90 [ 686.885323][T17044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.885345][T17044] RIP: 0033:0x7fe3f859ce59 [ 686.885368][T17044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 686.885387][T17044] RSP: 002b:00007fe3f67ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 686.885411][T17044] RAX: ffffffffffffffda RBX: 00007fe3f8815fa0 RCX: 00007fe3f859ce59 [ 686.885426][T17044] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003 [ 686.885441][T17044] RBP: 00007fe3f67ee090 R08: 0000000000000000 R09: 0000000000000000 [ 686.885454][T17044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 686.885467][T17044] R13: 00007fe3f8816038 R14: 00007fe3f8815fa0 R15: 00007fe3f893fa48 [ 686.885500][T17044] [ 687.003687][ T5771] usb 1-1: Using ep0 maxpacket: 16 [ 687.303665][ T5771] usb 1-1: New USB device found, idVendor=249c, idProduct=9008, bcdDevice= 0.40 [ 687.326012][ T5771] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.368012][ T5771] usb 1-1: Product: syz [ 687.375719][ T5771] usb 1-1: Manufacturer: ఉ [ 687.380523][ T5771] usb 1-1: SerialNumber: syz [ 687.479844][T17053] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3663'. [ 687.656377][T17035] binder: 17025:17035 ioctl c0306201 0 returned -14 [ 687.772543][T17035] syz.0.3653 (17035): drop_caches: 2 [ 687.944071][T17066] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3668'. [ 688.162861][T17068] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 688.203367][T17066] macvlan2: entered promiscuous mode [ 688.208781][T17066] macvlan2: entered allmulticast mode [ 688.239661][T17066] bridge0: port 3(macvlan2) entered blocking state [ 688.290994][T17066] bridge0: port 3(macvlan2) entered disabled state [ 688.500573][T17075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3671'. [ 688.625675][T17080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3673'. [ 688.663429][T17080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3673'. [ 689.039817][ T30] audit: type=1326 audit(1779289241.064:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17071 comm="syz.2.3670" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32559ce59 code=0x7ffc0000 [ 689.112449][ T30] audit: type=1326 audit(1779289241.104:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17071 comm="syz.2.3670" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fd32559ce59 code=0x7ffc0000 [ 689.182907][ T30] audit: type=1326 audit(1779289241.134:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17071 comm="syz.2.3670" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32559ce59 code=0x7ffc0000 [ 689.221078][ T30] audit: type=1326 audit(1779289241.144:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17071 comm="syz.2.3670" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32559ce59 code=0x7ffc0000 [ 689.486129][T17091] netlink: 180 bytes leftover after parsing attributes in process `syz.4.3675'. [ 690.591795][ T5771] usb 1-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 690.622100][ T5771] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 690.801044][ T5771] usb 1-1: USB disconnect, device number 97 [ 690.970178][ T9945] udevd[9945]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 691.203550][T17102] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3678'. [ 691.380144][T17104] geneve2: entered promiscuous mode [ 691.401603][T17104] geneve2: entered allmulticast mode [ 691.820947][ T5631] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 691.924263][T17125] syz.2.3687 (17125): drop_caches: 2 [ 691.975668][ T5631] usb 1-1: Using ep0 maxpacket: 8 [ 691.986413][ T5631] usb 1-1: config 5 has an invalid interface number: 52 but max is 1 [ 691.996016][ T5631] usb 1-1: config 5 has an invalid interface number: 4 but max is 1 [ 692.025163][ T5631] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 692.061839][ T5631] usb 1-1: config 5 has no interface number 0 [ 692.082089][ T5631] usb 1-1: config 5 has no interface number 1 [ 692.106646][ T5631] usb 1-1: config 5 interface 52 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 692.164625][ T5631] usb 1-1: config 5 interface 4 altsetting 9 endpoint 0x5 has invalid wMaxPacketSize 0 [ 692.208507][ T5631] usb 1-1: config 5 interface 4 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 692.261751][ T5631] usb 1-1: config 5 interface 52 has no altsetting 0 [ 692.286048][ T5631] usb 1-1: config 5 interface 4 has no altsetting 0 [ 692.316297][ T5631] usb 1-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=e2.5c [ 692.350314][ T5631] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.383442][ T5631] usb 1-1: Product: syz [ 692.400536][ T5631] usb 1-1: Manufacturer: syz [ 692.419689][ T5631] usb 1-1: SerialNumber: syz [ 692.689480][T17112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 692.742525][T17112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 692.893152][ T5631] cytherm 1-1:5.52: Cypress thermometer device now attached [ 692.922339][ T5631] cytherm 1-1:5.4: Cypress thermometer device now attached [ 692.968386][ T5631] usb 1-1: USB disconnect, device number 98 [ 693.013940][ T5631] cytherm 1-1:5.52: Cypress thermometer now disconnected [ 693.038202][ T5631] cytherm 1-1:5.4: Cypress thermometer now disconnected [ 693.165050][T17145] netlink: 'syz.4.3694': attribute type 3 has an invalid length. [ 693.614924][T17153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3697'. [ 693.649119][T17153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3697'. [ 695.193530][T17172] netlink: 'syz.0.3703': attribute type 13 has an invalid length. [ 695.418288][T17182] fuse: Bad value for 'fd' [ 695.540513][T17184] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 697.674525][T17213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3716'. [ 697.704893][T17217] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3717'. [ 697.723753][T17217] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3717'. [ 697.741852][T17213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3716'. [ 697.959188][T17221] netlink: 'syz.1.3719': attribute type 13 has an invalid length. [ 697.983127][T17221] netlink: 'syz.1.3719': attribute type 17 has an invalid length. [ 698.424958][T17228] fuse: Bad value for 'fd' [ 698.928444][T17219] syz_tun: mtu less than device minimum [ 699.569506][T17260] veth0_macvtap: Caught tx_queue_len zero misconfig [ 699.766961][T17264] netlink: 'syz.3.3735': attribute type 12 has an invalid length. [ 699.795610][T17264] netlink: 'syz.3.3735': attribute type 29 has an invalid length. [ 699.816610][T17264] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3735'. [ 700.332803][T17279] fuse: Bad value for 'fd' [ 700.380444][T17282] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3741'. [ 700.404231][T17282] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3741'. [ 701.540925][ T5771] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 701.690801][ T5771] usb 1-1: device descriptor read/64, error -71 [ 701.751561][ T30] audit: type=1326 audit(1779289253.764:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17308 comm="syz.4.3751" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3f859ce59 code=0x7ffc0000 [ 701.871299][ T30] audit: type=1326 audit(1779289253.814:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17308 comm="syz.4.3751" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3f859ce59 code=0x7ffc0000 [ 701.954111][ T30] audit: type=1326 audit(1779289253.814:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17308 comm="syz.4.3751" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fe3f859ce59 code=0x7ffc0000 [ 701.981352][ T5771] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 702.028700][ T30] audit: type=1326 audit(1779289253.814:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17308 comm="syz.4.3751" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3f859ce59 code=0x7ffc0000 [ 702.115094][ T30] audit: type=1326 audit(1779289253.824:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17308 comm="syz.4.3751" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3f859ce59 code=0x7ffc0000 [ 702.141090][ T5771] usb 1-1: device descriptor read/64, error -71 [ 702.261970][ T5771] usb usb1-port1: attempt power cycle [ 702.630772][ T5771] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 702.671889][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 702.682571][ T5771] usb 1-1: device descriptor read/8, error -71 [ 702.962801][ T5771] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 703.004856][ T5771] usb 1-1: device descriptor read/8, error -71 [ 703.125031][ T5771] usb usb1-port1: unable to enumerate USB device [ 703.144881][T17333] netlink: 'syz.3.3758': attribute type 10 has an invalid length. [ 703.171322][T17333] team0: Device vxcan0 is up. Set it down before adding it as a team port [ 703.620053][T17337] syz.3.3759 (17337): drop_caches: 2 [ 704.431261][T17361] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3770'. [ 704.447366][T17361] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3770'. [ 704.576520][T17365] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 704.629934][T17368] netlink: 'syz.2.3772': attribute type 29 has an invalid length. [ 704.758720][T17374] bridge3: entered promiscuous mode [ 705.128031][T17388] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3777'. [ 705.254146][T17390] netlink: 'syz.2.3775': attribute type 4 has an invalid length. [ 705.350014][T17386] netlink: 'syz.2.3775': attribute type 4 has an invalid length. [ 705.375316][T17387] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 705.429563][T17390] xt_CT: You must specify a L4 protocol and not use inversions on it [ 706.996824][T17406] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3783'. [ 707.031198][T17407] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3784'. [ 707.191446][T17414] macvlan4: entered promiscuous mode [ 707.207925][T17414] macvlan4: entered allmulticast mode [ 707.229584][T17414] bridge0: port 5(macvlan4) entered blocking state [ 707.255555][T17414] bridge0: port 5(macvlan4) entered disabled state [ 707.358470][T17411] bond8: (slave bridge4): Enslaving as an active interface with an up link [ 707.367624][T17409] netlink: 'syz.3.3785': attribute type 29 has an invalid length. [ 707.516340][T17424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3789'. [ 707.981069][ T5631] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 708.050150][ T30] audit: type=1326 audit(1779289260.064:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17444 comm="syz.3.3797" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febd3b9ce59 code=0x7ffc0000 [ 708.147977][ T30] audit: type=1326 audit(1779289260.074:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17444 comm="syz.3.3797" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febd3b9ce59 code=0x7ffc0000 [ 708.192361][ T5631] usb 1-1: device descriptor read/64, error -71 [ 708.248753][ T30] audit: type=1326 audit(1779289260.074:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17444 comm="syz.3.3797" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7febd3b9ce59 code=0x7ffc0000 [ 708.320268][ T30] audit: type=1326 audit(1779289260.104:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17444 comm="syz.3.3797" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febd3b9ce59 code=0x7ffc0000 [ 708.404731][ T30] audit: type=1326 audit(1779289260.104:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17444 comm="syz.3.3797" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febd3b9ce59 code=0x7ffc0000 [ 708.495180][ T30] audit: type=1326 audit(1779289260.104:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17444 comm="syz.3.3797" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7febd3b5d68e code=0x7ffc0000 [ 708.594178][ T30] audit: type=1326 audit(1779289260.104:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17444 comm="syz.3.3797" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febd3b9ce59 code=0x7ffc0000 [ 708.660076][ T30] audit: type=1326 audit(1779289260.114:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17444 comm="syz.3.3797" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7febd3b9ce59 code=0x7ffc0000 [ 708.723609][ T30] audit: type=1326 audit(1779289260.114:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17444 comm="syz.3.3797" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febd3b9ce59 code=0x7ffc0000 [ 708.777567][ T30] audit: type=1326 audit(1779289260.114:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17444 comm="syz.3.3797" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7febd3b9ce59 code=0x7ffc0000 [ 708.787843][ T5631] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 709.120934][ T5631] usb 1-1: device descriptor read/64, error -71 [ 709.231239][ T5631] usb usb1-port1: attempt power cycle [ 709.615228][ T5631] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 709.666154][T17465] netlink: 'syz.2.3803': attribute type 13 has an invalid length. [ 709.685080][ T5631] usb 1-1: device descriptor read/8, error -71 [ 709.715776][T17465] netlink: 'syz.2.3803': attribute type 17 has an invalid length. [ 709.880618][T17471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3806'. [ 709.905958][T17471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3806'. [ 709.930833][ T5631] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 709.951903][ T5631] usb 1-1: device descriptor read/8, error -71 [ 709.994120][T17471] Cannot find set identified by id 0 to match [ 710.091440][ T5631] usb usb1-port1: unable to enumerate USB device [ 710.839579][T17493] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3816'. [ 710.857604][T17494] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3815'. [ 710.885521][T17496] FAULT_INJECTION: forcing a failure. [ 710.885521][T17496] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 710.907078][T17496] CPU: 1 UID: 0 PID: 17496 Comm: syz.1.3817 Tainted: G L syzkaller #0 PREEMPT(full) [ 710.907114][T17496] Tainted: [L]=SOFTLOCKUP [ 710.907122][T17496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 710.907136][T17496] Call Trace: [ 710.907145][T17496] [ 710.907155][T17496] dump_stack_lvl+0xe8/0x150 [ 710.907186][T17496] should_fail_ex+0x412/0x560 [ 710.907220][T17496] _copy_from_user+0x2d/0xb0 [ 710.907253][T17496] ___sys_sendmsg+0x1c6/0x360 [ 710.907284][T17496] ? __lock_acquire+0x6b5/0x2cf0 [ 710.907312][T17496] ? __pfx____sys_sendmsg+0x10/0x10 [ 710.907341][T17496] ? __lock_acquire+0x6b5/0x2cf0 [ 710.907369][T17496] ? kstrtouint+0x6e/0xe0 [ 710.907439][T17496] __sys_sendmmsg+0x27c/0x4e0 [ 710.907476][T17496] ? __pfx___sys_sendmmsg+0x10/0x10 [ 710.907505][T17496] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 710.907553][T17496] ? ksys_write+0x242/0x270 [ 710.907587][T17496] ? __pfx_ksys_write+0x10/0x10 [ 710.907623][T17496] __x64_sys_sendmmsg+0xa0/0xc0 [ 710.907654][T17496] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.907677][T17496] do_syscall_64+0x15f/0xf80 [ 710.907708][T17496] ? trace_irq_disable+0x3b/0x140 [ 710.907741][T17496] ? clear_bhb_loop+0x40/0x90 [ 710.907767][T17496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.907788][T17496] RIP: 0033:0x7fc301b9ce59 [ 710.907808][T17496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 710.907827][T17496] RSP: 002b:00007fc302a8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 710.907856][T17496] RAX: ffffffffffffffda RBX: 00007fc301e15fa0 RCX: 00007fc301b9ce59 [ 710.907871][T17496] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003 [ 710.907885][T17496] RBP: 00007fc302a8f090 R08: 0000000000000000 R09: 0000000000000000 [ 710.907897][T17496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 710.907909][T17496] R13: 00007fc301e16038 R14: 00007fc301e15fa0 R15: 00007fc301f3fa48 [ 710.907940][T17496] [ 711.750371][T17538] netlink: 'syz.3.3835': attribute type 4 has an invalid length. [ 711.759789][T17538] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3835'. [ 711.820964][ T5361] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 711.981223][ T5361] usb 1-1: Using ep0 maxpacket: 32 [ 711.999409][ T5361] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 712.023227][ T5361] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 712.035035][ T5361] usb 1-1: config 0 interface 0 has no altsetting 0 [ 712.044985][ T5361] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 712.054619][ T5361] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.069678][ T5361] usb 1-1: Product: syz [ 712.080999][ T5361] usb 1-1: Manufacturer: syz [ 712.087753][ T5361] usb 1-1: SerialNumber: syz [ 712.107794][ T5361] usb 1-1: config 0 descriptor?? [ 712.522915][ T5361] gs_usb 1-1:0.0: Configuring for 256 interfaces [ 712.568592][ T5361] gs_usb 1-1:0.0: Driver cannot handle more that 255 CAN interfaces [ 712.586741][ T5361] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -22 [ 712.727793][ T9] usb 1-1: USB disconnect, device number 107 [ 712.915292][T17572] fuse: Bad value for 'fd' [ 712.922436][T17574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3849'. [ 713.775555][T17591] input: syz0 as /devices/virtual/input/input54 [ 714.770883][ T5631] usb 1-1: new low-speed USB device number 108 using dummy_hcd [ 714.934427][ T5631] usb 1-1: unable to get BOS descriptor or descriptor too short [ 714.959918][ T5631] usb 1-1: config 255 has an invalid interface number: 100 but max is 1 [ 714.991259][ T5631] usb 1-1: config 255 has an invalid interface number: 100 but max is 1 [ 715.011672][ T5631] usb 1-1: config 255 has 1 interface, different from the descriptor's value: 2 [ 715.035667][ T5631] usb 1-1: config 255 has no interface number 0 [ 715.049337][ T5631] usb 1-1: config 255 interface 100 altsetting 25 endpoint 0x9 has invalid maxpacket 16, setting to 8 [ 715.064409][ T5631] usb 1-1: config 255 interface 100 has no altsetting 0 [ 715.071825][ T5631] usb 1-1: config 255 interface 100 has no altsetting 1 [ 715.089455][ T5631] usb 1-1: string descriptor 0 read error: -22 [ 715.103345][ T5631] usb 1-1: New USB device found, idVendor=eb1a, idProduct=e357, bcdDevice=7b.81 [ 715.116856][ T5631] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.289482][T17611] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3863'. [ 715.430594][ T9284] usb 1-1: USB disconnect, device number 108 [ 715.821220][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 715.821239][ T30] audit: type=1326 audit(1779289267.844:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17621 comm="syz.4.3867" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3f859ce59 code=0x7ffc0000 [ 715.879684][ T30] audit: type=1326 audit(1779289267.884:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17621 comm="syz.4.3867" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fe3f859ce59 code=0x7ffc0000 [ 715.950249][ T30] audit: type=1326 audit(1779289267.964:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17621 comm="syz.4.3867" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3f859ce59 code=0x7ffc0000 [ 716.009914][ T30] audit: type=1326 audit(1779289267.974:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17621 comm="syz.4.3867" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3f859ce59 code=0x7ffc0000 [ 716.916023][T17657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3882'. [ 717.606058][T17670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3886'. [ 717.682859][T17674] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3889'. [ 718.138146][T17692] FAULT_INJECTION: forcing a failure. [ 718.138146][T17692] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 718.171134][T17692] CPU: 1 UID: 0 PID: 17692 Comm: syz.0.3897 Tainted: G L syzkaller #0 PREEMPT(full) [ 718.171169][T17692] Tainted: [L]=SOFTLOCKUP [ 718.171177][T17692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 718.171192][T17692] Call Trace: [ 718.171200][T17692] [ 718.171209][T17692] dump_stack_lvl+0xe8/0x150 [ 718.171239][T17692] should_fail_ex+0x412/0x560 [ 718.171274][T17692] _copy_from_user+0x2d/0xb0 [ 718.171308][T17692] ___sys_sendmsg+0x1c6/0x360 [ 718.171338][T17692] ? __lock_acquire+0x6b5/0x2cf0 [ 718.171366][T17692] ? __pfx____sys_sendmsg+0x10/0x10 [ 718.171394][T17692] ? __lock_acquire+0x6b5/0x2cf0 [ 718.171422][T17692] ? kstrtouint+0x6e/0xe0 [ 718.171489][T17692] __sys_sendmmsg+0x27c/0x4e0 [ 718.171526][T17692] ? __pfx___sys_sendmmsg+0x10/0x10 [ 718.171554][T17692] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 718.171602][T17692] ? ksys_write+0x242/0x270 [ 718.171642][T17692] ? __pfx_ksys_write+0x10/0x10 [ 718.171685][T17692] __x64_sys_sendmmsg+0xa0/0xc0 [ 718.171716][T17692] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.171739][T17692] do_syscall_64+0x15f/0xf80 [ 718.171772][T17692] ? clear_bhb_loop+0x40/0x90 [ 718.171798][T17692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.171819][T17692] RIP: 0033:0x7f235719ce59 [ 718.171839][T17692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 718.171856][T17692] RSP: 002b:00007f235810f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 718.171878][T17692] RAX: ffffffffffffffda RBX: 00007f2357415fa0 RCX: 00007f235719ce59 [ 718.171894][T17692] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003 [ 718.171908][T17692] RBP: 00007f235810f090 R08: 0000000000000000 R09: 0000000000000000 [ 718.171921][T17692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 718.171933][T17692] R13: 00007f2357416038 R14: 00007f2357415fa0 R15: 00007f235753fa48 [ 718.171966][T17692] [ 718.458852][T17702] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3899'. [ 718.618857][T17706] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 718.646712][T17707] macvlan3: entered promiscuous mode [ 718.665356][T17707] macvlan3: entered allmulticast mode [ 718.675891][T17707] bridge0: port 4(macvlan3) entered blocking state [ 718.691027][T17707] bridge0: port 4(macvlan3) entered disabled state [ 719.020559][T17718] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3904'. [ 719.650225][T17731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3906'. [ 719.731101][T17731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3906'. [ 719.808967][T17736] netlink: 'syz.1.3909': attribute type 46 has an invalid length. [ 720.071730][T17745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3911'. [ 720.154228][T17747] fuse: Bad value for 'fd' [ 720.281350][ T9] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 720.450930][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 720.462628][ T9] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 720.481470][ T9] usb 1-1: config 0 has no interface number 0 [ 720.496658][ T9] usb 1-1: config 0 interface 184 has no altsetting 0 [ 720.513154][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 720.526276][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.544554][ T9] usb 1-1: Product: syz [ 720.553809][ T9] usb 1-1: Manufacturer: syz [ 720.567877][ T9] usb 1-1: SerialNumber: syz [ 720.607978][ T9] usb 1-1: config 0 descriptor?? [ 720.856307][T17758] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3919'. [ 720.923317][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 720.955532][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 721.002787][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 721.053535][ T9] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 721.109422][ T9] usb 1-1: USB disconnect, device number 109 [ 721.811383][T17790] lo: Caught tx_queue_len zero misconfig [ 722.751506][T17801] netlink: 280 bytes leftover after parsing attributes in process `syz.2.3933'. [ 723.581334][T17816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3939'. [ 723.631288][T17816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3939'. [ 723.997472][T17836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3945'. [ 724.120969][T17838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3946'. [ 724.176880][T17838] batman_adv: batadv0: Adding interface: ipvlan2 [ 724.191851][T17838] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 724.237259][T17838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 724.255618][T17838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.266126][T17838] batman_adv: batadv0: Interface activated: ipvlan2 [ 724.322707][T17845] netlink: 'syz.4.3950': attribute type 11 has an invalid length. [ 724.390344][T17848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3951'. [ 724.469064][T17854] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3953'. [ 724.499879][T17852] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 724.566433][T17852] virt_wifi0: entered promiscuous mode [ 724.629855][T17852] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 725.415659][T17874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 725.556775][T17880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3962'. [ 726.058458][T17897] netlink: 'syz.2.3965': attribute type 62 has an invalid length. [ 727.507862][T17919] netlink: 'syz.3.3975': attribute type 4 has an invalid length. [ 727.520982][T17919] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3975'. [ 727.652773][T17923] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3978'. [ 728.221669][T17941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 728.507245][T17950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3988'. [ 728.871263][T17936] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3983'. [ 729.235058][T17962] netlink: 'syz.3.3991': attribute type 13 has an invalid length. [ 729.276182][T17962] netlink: 'syz.3.3991': attribute type 17 has an invalid length. [ 729.555503][T17966] FAULT_INJECTION: forcing a failure. [ 729.555503][T17966] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 729.581444][T17966] CPU: 0 UID: 0 PID: 17966 Comm: syz.0.3992 Tainted: G L syzkaller #0 PREEMPT(full) [ 729.581480][T17966] Tainted: [L]=SOFTLOCKUP [ 729.581488][T17966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 729.581501][T17966] Call Trace: [ 729.581510][T17966] [ 729.581519][T17966] dump_stack_lvl+0xe8/0x150 [ 729.581549][T17966] should_fail_ex+0x412/0x560 [ 729.581588][T17966] _copy_from_user+0x2d/0xb0 [ 729.581625][T17966] ___sys_sendmsg+0x1c6/0x360 [ 729.581656][T17966] ? __lock_acquire+0x6b5/0x2cf0 [ 729.581685][T17966] ? __pfx____sys_sendmsg+0x10/0x10 [ 729.581713][T17966] ? __lock_acquire+0x6b5/0x2cf0 [ 729.581742][T17966] ? kstrtouint+0x6e/0xe0 [ 729.581807][T17966] __sys_sendmmsg+0x27c/0x4e0 [ 729.581844][T17966] ? __pfx___sys_sendmmsg+0x10/0x10 [ 729.581873][T17966] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 729.581927][T17966] ? ksys_write+0x242/0x270 [ 729.581960][T17966] ? __pfx_ksys_write+0x10/0x10 [ 729.581997][T17966] __x64_sys_sendmmsg+0xa0/0xc0 [ 729.582044][T17966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.582067][T17966] do_syscall_64+0x15f/0xf80 [ 729.582098][T17966] ? trace_irq_disable+0x3b/0x140 [ 729.582129][T17966] ? clear_bhb_loop+0x40/0x90 [ 729.582154][T17966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.582175][T17966] RIP: 0033:0x7f235719ce59 [ 729.582209][T17966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 729.582227][T17966] RSP: 002b:00007f235810f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 729.582249][T17966] RAX: ffffffffffffffda RBX: 00007f2357415fa0 RCX: 00007f235719ce59 [ 729.582271][T17966] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003 [ 729.582285][T17966] RBP: 00007f235810f090 R08: 0000000000000000 R09: 0000000000000000 [ 729.582297][T17966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 729.582309][T17966] R13: 00007f2357416038 R14: 00007f2357415fa0 R15: 00007f235753fa48 [ 729.582339][T17966] [ 730.216001][T17983] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3999'. [ 731.430267][T18012] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4008'. [ 731.717266][T18015] netlink: 'syz.2.4009': attribute type 10 has an invalid length. [ 731.739004][T18015] team0: Device vxcan0 is up. Set it down before adding it as a team port [ 732.087480][T18022] netlink: 'syz.2.4011': attribute type 3 has an invalid length. [ 732.244534][T18024] Cannot find del_set index 0 as target [ 733.158046][T18038] tipc: Enabling of bearer rejected, failed to enable media [ 733.473259][T18043] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4020'. [ 733.525737][T18043] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 733.562904][T18048] FAULT_INJECTION: forcing a failure. [ 733.562904][T18048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 733.606876][T18048] CPU: 1 UID: 0 PID: 18048 Comm: syz.4.4023 Tainted: G L syzkaller #0 PREEMPT(full) [ 733.606910][T18048] Tainted: [L]=SOFTLOCKUP [ 733.606917][T18048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 733.606929][T18048] Call Trace: [ 733.606937][T18048] [ 733.606947][T18048] dump_stack_lvl+0xe8/0x150 [ 733.606977][T18048] should_fail_ex+0x412/0x560 [ 733.607011][T18048] _copy_from_user+0x2d/0xb0 [ 733.607046][T18048] ___sys_sendmsg+0x1c6/0x360 [ 733.607077][T18048] ? __lock_acquire+0x6b5/0x2cf0 [ 733.607106][T18048] ? __pfx____sys_sendmsg+0x10/0x10 [ 733.607135][T18048] ? __lock_acquire+0x6b5/0x2cf0 [ 733.607162][T18048] ? kstrtouint+0x6e/0xe0 [ 733.607229][T18048] __sys_sendmmsg+0x27c/0x4e0 [ 733.607267][T18048] ? __pfx___sys_sendmmsg+0x10/0x10 [ 733.607303][T18048] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 733.607354][T18048] ? ksys_write+0x242/0x270 [ 733.607388][T18048] ? __pfx_ksys_write+0x10/0x10 [ 733.607426][T18048] __x64_sys_sendmmsg+0xa0/0xc0 [ 733.607458][T18048] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.607480][T18048] do_syscall_64+0x15f/0xf80 [ 733.607512][T18048] ? trace_irq_disable+0x3b/0x140 [ 733.607544][T18048] ? clear_bhb_loop+0x40/0x90 [ 733.607570][T18048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.607592][T18048] RIP: 0033:0x7fe3f859ce59 [ 733.607612][T18048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 733.607630][T18048] RSP: 002b:00007fe3f67ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 733.607653][T18048] RAX: ffffffffffffffda RBX: 00007fe3f8815fa0 RCX: 00007fe3f859ce59 [ 733.607678][T18048] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003 [ 733.607692][T18048] RBP: 00007fe3f67ee090 R08: 0000000000000000 R09: 0000000000000000 [ 733.607705][T18048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 733.607718][T18048] R13: 00007fe3f8816038 R14: 00007fe3f8815fa0 R15: 00007fe3f893fa48 [ 733.607755][T18048] [ 734.869408][T18067] netlink: 'syz.2.4030': attribute type 1 has an invalid length. [ 734.963397][T18070] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4030'. [ 735.079586][T18067] 8021q: adding VLAN 0 to HW filter on device bond4 [ 735.206153][T18067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4030'. [ 735.285151][T18072] bond4: (slave dummy0): making interface the new active one [ 735.323190][T18072] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 735.480127][T18067] bond4 (unregistering): (slave dummy0): Releasing active interface [ 735.528516][T18067] bond4 (unregistering): Released all slaves [ 735.695119][T18077] syzkaller1: entered promiscuous mode [ 735.712434][T18071] syz.4.4029 (18071): drop_caches: 2 [ 735.761380][T18077] syzkaller1: entered allmulticast mode [ 736.334780][T18089] netlink: 'syz.3.4037': attribute type 10 has an invalid length. [ 736.403363][T18089] team0: Device vxcan0 is up. Set it down before adding it as a team port [ 736.660911][ T9284] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 736.841984][ T9284] usb 1-1: Using ep0 maxpacket: 16 [ 736.876159][ T9284] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 736.918392][ T9284] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 736.950608][ T9284] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 736.979542][ T9284] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 737.015180][ T9284] usb 1-1: SerialNumber: syz [ 737.060486][ T9284] usb 1-1: 0:2 : does not exist [ 737.596959][ T9284] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 737.690210][ T9284] usb 1-1: 5:0: cannot get min/max values for control 4 (id 5) [ 737.763637][ T9284] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 737.836465][ T9284] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 737.958866][ T9284] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 738.101006][ T9284] usb 1-1: USB disconnect, device number 110 [ 738.211874][T18102] udevd[18102]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 738.438202][T18124] netlink: 'syz.1.4047': attribute type 4 has an invalid length. [ 738.474336][T18124] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4047'. [ 739.028147][T18138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4048'. [ 739.357287][T18152] bridge0: port 5(vlan2) entered blocking state [ 739.382557][T18152] bridge0: port 5(vlan2) entered disabled state [ 739.398906][T18152] vlan2: entered allmulticast mode [ 739.428121][T18152] vlan2: entered promiscuous mode [ 739.443403][T18154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 739.528009][T18152] team0: Port device syz_tun removed [ 739.581905][T18152] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.616642][T18152] bridge_slave_1: left allmulticast mode [ 739.623297][T18152] bridge_slave_1: left promiscuous mode [ 739.629986][T18152] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.679061][T18152] bond1: (slave veth0_to_bond): Releasing active interface [ 739.719249][T18152] bond0: (slave bond_slave_0): Releasing backup interface [ 739.745691][T18152] bond0: (slave bond_slave_1): Releasing backup interface [ 739.791227][T18152] team0: Port device team_slave_0 removed [ 739.815208][T18152] team0: Port device team_slave_1 removed [ 739.833964][T18152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 739.862846][T18152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 739.879006][T18152] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 740.048083][T18168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4059'. [ 740.308461][ T30] audit: type=1326 audit(1779289292.334:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18174 comm="syz.1.4063" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc301b9ce59 code=0x0 [ 740.594444][T18186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4067'. [ 740.624244][T18186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4067'. [ 740.876616][T18194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4070'. [ 741.147003][T18202] netlink: 112 bytes leftover after parsing attributes in process `syz.2.4074'. [ 741.362686][T18211] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4077'. [ 741.495272][T18215] netlink: 'syz.2.4080': attribute type 1 has an invalid length. [ 743.158354][T18260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4099'. [ 743.377456][ T5361] IPVS: starting estimator thread 0... [ 743.383884][T18267] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 743.480762][T18268] IPVS: using max 28 ests per chain, 67200 per kthread [ 746.557624][T16561] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 746.579863][T16561] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 746.593320][T16561] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 746.604842][T16561] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 746.613098][T16561] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 747.454966][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.463572][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.650083][T18343] tipc: Started in network mode [ 747.688702][T18343] tipc: Node identity 4, cluster identity 4711 [ 747.702717][T18343] tipc: Node number set to 4 [ 747.713352][T18346] netlink: set zone limit has 4 unknown bytes [ 747.940756][T13786] usb 1-1: new full-speed USB device number 111 using dummy_hcd [ 748.123469][T13786] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 748.152579][T13786] usb 1-1: config 0 has no interfaces? [ 748.172188][T13786] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 748.189494][T13786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.207296][T13786] usb 1-1: Product: syz [ 748.220245][T13786] usb 1-1: Manufacturer: syz [ 748.227117][T13786] usb 1-1: SerialNumber: syz [ 748.262483][T13786] usb 1-1: config 0 descriptor?? [ 748.290012][T18368] fuse: Bad value for 'fd' [ 748.325302][T18372] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4136'. [ 748.380504][T18335] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.413614][T18335] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.449327][T18335] bridge_slave_0: entered allmulticast mode [ 748.477647][T18335] bridge_slave_0: entered promiscuous mode [ 748.490407][T16561] Bluetooth: hci3: unexpected event for opcode 0x2042 [ 748.502831][T18346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 748.522590][T18335] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.530580][T18346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 748.540993][T18335] bridge0: port 2(bridge_slave_1) entered disabled state [ 748.553184][T18335] bridge_slave_1: entered allmulticast mode [ 748.561452][T18335] bridge_slave_1: entered promiscuous mode [ 748.615849][T18335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 748.651151][T18335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 748.721617][T16561] Bluetooth: hci0: command tx timeout [ 748.754567][T18346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 748.763696][T18346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 748.829038][T13786] usb 1-1: USB disconnect, device number 111 [ 748.871027][T18335] team0: Port device team_slave_0 added [ 748.897875][T18335] team0: Port device team_slave_1 added [ 749.000774][T18335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 749.021432][T18335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 749.070706][T18335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 749.097199][T18335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 749.113092][T18335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 749.140582][T18335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 749.215627][T18335] hsr_slave_0: entered promiscuous mode [ 749.222884][T18335] hsr_slave_1: entered promiscuous mode [ 749.248057][T18335] debugfs: 'hsr0' already exists in 'hsr' [ 749.257373][T18335] Cannot create hsr debugfs directory [ 749.529080][T16561] Bluetooth: hci4: command 0x0406 tx timeout [ 750.098695][T18335] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 750.122475][T18335] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.539281][T18335] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 750.550112][T18335] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.763960][T18335] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 750.792051][T18335] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.811020][ T5637] Bluetooth: hci0: command tx timeout [ 751.627475][T18440] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 751.655315][T18335] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 751.682642][T18335] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 751.701772][T18335] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 751.711487][ T9] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 751.736377][T18335] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 751.764602][T18335] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 751.794592][T18335] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 751.812892][T18335] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 751.842781][T18335] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 751.881010][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 751.894306][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 751.931193][ T9] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 751.970928][ T9] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 751.986820][ T9] usb 1-1: Product: syz [ 752.000920][ T9] usb 1-1: Manufacturer: syz [ 752.017303][ T9] usb 1-1: SerialNumber: syz [ 752.045050][ T9] usb 1-1: config 0 descriptor?? [ 752.063909][T18436] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 752.156035][T18335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 752.237498][T18335] 8021q: adding VLAN 0 to HW filter on device team0 [ 752.265924][T13905] bridge0: port 1(bridge_slave_0) entered blocking state [ 752.273210][T13905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 752.320178][T13905] bridge0: port 2(bridge_slave_1) entered blocking state [ 752.327442][T13905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 752.488324][ T5771] usb 1-1: USB disconnect, device number 112 [ 752.645525][T18335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 752.814820][T18335] veth0_vlan: entered promiscuous mode [ 752.881778][ T5637] Bluetooth: hci0: command tx timeout [ 752.892086][T18335] veth1_vlan: entered promiscuous mode [ 753.015414][T18335] veth0_macvtap: entered promiscuous mode [ 753.073419][T18335] veth1_macvtap: entered promiscuous mode [ 753.134945][T18335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 753.169145][T18335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 753.233802][T13908] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.258149][T13908] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.293576][T13908] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.351153][T13908] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.643548][T18467] syz.1.4169 (18467): drop_caches: 2 [ 753.726378][T13906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 753.756347][T13906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 753.909737][T13905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 753.950902][T13905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 754.353757][ T30] audit: type=1326 audit(1779289306.374:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18476 comm="syz.2.4173" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32559ce59 code=0x7ffc0000 [ 754.497448][ T30] audit: type=1326 audit(1779289306.374:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18476 comm="syz.2.4173" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32559ce59 code=0x7ffc0000 [ 754.539482][ T30] audit: type=1326 audit(1779289306.434:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18476 comm="syz.2.4173" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd32559ce59 code=0x7ffc0000 [ 754.646583][ T30] audit: type=1326 audit(1779289306.434:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18476 comm="syz.2.4173" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32559ce59 code=0x7ffc0000 [ 754.652768][T18479] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4173'. [ 754.739583][T18480] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4173'. [ 754.778340][T18480] netlink: 260 bytes leftover after parsing attributes in process `syz.2.4173'. [ 754.788132][ T30] audit: type=1326 audit(1779289306.434:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18476 comm="syz.2.4173" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32559ce59 code=0x7ffc0000 [ 754.847897][T18479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4173'. [ 754.916208][ T30] audit: type=1326 audit(1779289306.454:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18476 comm="syz.2.4173" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd32559ce59 code=0x7ffc0000 [ 754.976228][ T5637] Bluetooth: hci0: command tx timeout [ 755.017006][ T30] audit: type=1326 audit(1779289306.454:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18476 comm="syz.2.4173" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32559ce59 code=0x7ffc0000 [ 755.041911][ T30] audit: type=1326 audit(1779289306.454:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18476 comm="syz.2.4173" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32559ce59 code=0x7ffc0000 [ 755.087512][ T30] audit: type=1326 audit(1779289306.454:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18476 comm="syz.2.4173" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd32559ce59 code=0x7ffc0000 [ 755.168112][ T30] audit: type=1326 audit(1779289306.454:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18476 comm="syz.2.4173" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32559ce59 code=0x7ffc0000 [ 756.005624][T18489] tipc: Enabling of bearer rejected, failed to enable media [ 756.726215][T18500] netlink: 'syz.1.4180': attribute type 29 has an invalid length. [ 757.020304][T18509] openvswitch: netlink: nsh attr 4 is out of range max 3 [ 757.043748][T18509] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 757.214739][T18518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4187'. [ 757.239112][T18518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4187'. [ 757.855037][T18531] netlink: 'syz.1.4191': attribute type 11 has an invalid length. [ 757.892361][T18530] netlink: 'syz.4.4192': attribute type 29 has an invalid length. [ 758.470753][T13786] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 758.611335][T13786] usb 5-1: device descriptor read/64, error -71 [ 758.860997][T13786] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 759.030809][T13786] usb 5-1: device descriptor read/64, error -71 [ 759.143958][T13786] usb usb5-port1: attempt power cycle [ 759.501296][T13786] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 759.531475][T13786] usb 5-1: device descriptor read/8, error -71 [ 759.810811][T13786] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 759.851862][T13786] usb 5-1: device descriptor read/8, error -71 [ 759.972604][T13786] usb usb5-port1: unable to enumerate USB device [ 761.414687][T18590] netlink: 'syz.4.4212': attribute type 4 has an invalid length. [ 761.422965][T18590] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4212'. [ 761.539556][T18596] tipc: Enabled bearer , priority 27 [ 761.819088][T18609] netlink: 'syz.4.4220': attribute type 1 has an invalid length. [ 762.191023][T18618] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 762.202826][T18618] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 762.214885][T18618] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 762.504259][T13905] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.518835][T18621] binder_alloc: 18616: binder_alloc_buf, no vma [ 762.650843][ T5730] tipc: Node number set to 1232869321 [ 762.697098][T18631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4229'. [ 762.707924][T18631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4229'. [ 762.775603][T18635] netlink: 'syz.2.4230': attribute type 3 has an invalid length. [ 763.173611][T18642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4233'. [ 764.222845][T18669] netlink: 'syz.1.4242': attribute type 1 has an invalid length. [ 764.468181][T18673] netlink: 'syz.1.4244': attribute type 1 has an invalid length. [ 764.832654][T18678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 765.326912][T18691] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4252'. [ 765.356311][T18691] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 765.763866][T18705] Cannot find map_set index 135 as target [ 765.985317][ T30] kauditd_printk_skb: 103 callbacks suppressed [ 765.985338][ T30] audit: type=1326 audit(1779289318.014:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18699 comm="syz.2.4255" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32559ce59 code=0x7ffc0000 [ 766.064251][ T30] audit: type=1326 audit(1779289318.014:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18699 comm="syz.2.4255" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32559ce59 code=0x7ffc0000 [ 766.117920][ T30] audit: type=1326 audit(1779289318.014:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18699 comm="syz.2.4255" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fd32559ce59 code=0x7ffc0000 [ 766.191567][ T30] audit: type=1326 audit(1779289318.014:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18699 comm="syz.2.4255" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32559ce59 code=0x7ffc0000 [ 766.264711][ T30] audit: type=1326 audit(1779289318.014:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18699 comm="syz.2.4255" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32559ce59 code=0x7ffc0000 [ 767.253289][T18722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4265'. [ 767.498989][T18733] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4269'. [ 767.693842][T18743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 767.889120][T18754] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4278'. [ 768.249122][T18769] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4282'. [ 768.365808][T18775] netlink: 'syz.3.4286': attribute type 46 has an invalid length. [ 768.600981][ T5361] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 768.762856][ T5361] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 768.789424][ T5361] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 768.831228][ T5361] usb 5-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 768.850800][ T5361] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.880812][ T5361] usb 5-1: Product: syz [ 768.885200][ T5361] usb 5-1: Manufacturer: syz [ 768.891399][ T5361] usb 5-1: SerialNumber: syz [ 769.139628][ T5361] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 769.157043][ T5361] usb 5-1: unit 6 not found! [ 769.300563][ T5361] usb 5-1: USB disconnect, device number 72 [ 769.393158][T18785] udevd[18785]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 769.524916][T18794] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4290'. [ 769.553302][T18795] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4290'. [ 769.846956][ T30] audit: type=1326 audit(1779289321.874:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18801 comm="syz.0.4293" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f235719ce59 code=0x0 [ 770.097604][T18813] netlink: 'syz.4.4298': attribute type 3 has an invalid length. [ 770.200919][ T5361] usb 1-1: new full-speed USB device number 113 using dummy_hcd [ 770.279178][T18819] geneve2: entered promiscuous mode [ 770.287413][T18819] geneve2: entered allmulticast mode [ 770.372638][ T5361] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 770.393418][ T5361] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.440924][ T5361] usb 1-1: config 0 descriptor?? [ 770.471047][ T5631] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 770.493217][ T5361] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 770.554311][ T30] audit: type=1326 audit(1779289322.584:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18826 comm="syz.1.4305" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc301b9ce59 code=0x0 [ 770.675075][ T5631] usb 5-1: Using ep0 maxpacket: 32 [ 770.684903][ T5631] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 770.703145][ T5361] gp8psk: usb in 128 operation failed. [ 770.712423][ T5631] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.753608][ T5631] usb 5-1: config 0 descriptor?? [ 770.985429][ T5361] gp8psk: usb in 146 operation failed. [ 770.991470][ T5631] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 771.010212][ T5361] gp8psk: failed to get FW version [ 771.024161][ T5631] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 771.061582][ T5631] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 771.087338][ T5631] usb 5-1: media controller created [ 771.157508][ T5631] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 771.226090][ T5631] az6027: usb out operation failed. (-71) [ 771.242007][ T5631] az6027: usb out operation failed. (-71) [ 771.249889][ T5361] gp8psk: usb in 149 operation failed. [ 771.265166][ T5361] gp8psk: failed to get FPGA version [ 771.272579][ T5631] stb0899_attach: Driver disabled by Kconfig [ 771.285907][ T5361] gp8psk: usb in 138 operation failed. [ 771.300567][ T5631] az6027: no front-end attached [ 771.300567][ T5631] [ 771.309871][ T5361] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 771.322855][ T5631] az6027: usb out operation failed. (-71) [ 771.336593][ T5631] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 771.344304][ T5361] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 771.358697][ T5631] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input55 [ 771.384215][ T5361] usb 1-1: USB disconnect, device number 113 [ 771.393695][ T5631] dvb-usb: schedule remote query interval to 400 msecs. [ 771.425881][ T5631] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 771.479617][ T5631] usb 5-1: USB disconnect, device number 73 [ 771.636233][ T5631] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 772.193997][T18850] Cannot find del_set index 0 as target [ 772.480910][ T5771] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 772.642372][ T30] audit: type=1326 audit(1779289324.664:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18861 comm="syz.0.4318" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f235719ce59 code=0x0 [ 772.672646][ T5771] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 772.694378][ T5771] usb 5-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 772.725430][ T5771] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.774330][ T5771] usb 5-1: config 0 descriptor?? [ 772.816819][ T5771] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 773.030892][ T5771] usb 5-1: USB disconnect, device number 74 [ 773.479713][T18879] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4325'. [ 773.492805][T18879] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4325'. [ 773.832510][T18888] netlink: 'syz.3.4329': attribute type 29 has an invalid length. [ 773.976022][T18895] netlink: 'syz.4.4332': attribute type 5 has an invalid length. [ 774.236249][T18907] pim6reg: entered allmulticast mode [ 774.530210][T18927] binder_alloc: 18924: pid 18924 spamming oneway? 1 buffers allocated for a total size of 4096 [ 774.564553][T18927] binder_alloc: 18924: pid 18924 spamming oneway? 2 buffers allocated for a total size of 5120 [ 774.588946][T18927] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4347'. [ 774.611062][T18927] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4347'. [ 774.644988][T18934] netlink: 'syz.1.4350': attribute type 46 has an invalid length. [ 775.275091][T18954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4356'. [ 775.555135][T18965] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4359'. [ 775.582018][T18965] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4359'. [ 775.622198][T18968] netlink: 344 bytes leftover after parsing attributes in process `syz.0.4362'. [ 775.657621][T18968] tipc: Enabling of bearer rejected, failed to enable media [ 775.705157][T18974] FAULT_INJECTION: forcing a failure. [ 775.705157][T18974] name failslab, interval 1, probability 0, space 0, times 0 [ 775.720130][T18974] CPU: 0 UID: 0 PID: 18974 Comm: syz.2.4364 Tainted: G L syzkaller #0 PREEMPT(full) [ 775.720162][T18974] Tainted: [L]=SOFTLOCKUP [ 775.720168][T18974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 775.720178][T18974] Call Trace: [ 775.720184][T18974] [ 775.720192][T18974] dump_stack_lvl+0xe8/0x150 [ 775.720214][T18974] should_fail_ex+0x412/0x560 [ 775.720239][T18974] should_failslab+0xa8/0x100 [ 775.720263][T18974] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 775.720284][T18974] ? __alloc_skb+0x186/0x7d0 [ 775.720304][T18974] ? __alloc_skb+0x1d0/0x7d0 [ 775.720322][T18974] ? __local_bh_enable_ip+0xd0/0x130 [ 775.720341][T18974] __alloc_skb+0x1d0/0x7d0 [ 775.720364][T18974] alloc_skb_with_frags+0xc8/0x760 [ 775.720393][T18974] sock_alloc_send_pskb+0x878/0x990 [ 775.720423][T18974] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 775.720437][T18974] ? kasan_quarantine_put+0xbb/0x1f0 [ 775.720458][T18974] ? lockdep_hardirqs_on+0x7a/0x110 [ 775.720484][T18974] ? unix_dgram_sendmsg+0x57c/0x18d0 [ 775.720503][T18974] ? kmem_cache_free+0x182/0x650 [ 775.720526][T18974] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 775.720551][T18974] unix_dgram_sendmsg+0x460/0x18d0 [ 775.720589][T18974] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 775.720639][T18974] ? aa_sock_msg_perm+0xda/0x1b0 [ 775.720668][T18974] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 775.720699][T18974] ____sys_sendmsg+0x972/0x9f0 [ 775.720729][T18974] ? __might_fault+0xaf/0x130 [ 775.720763][T18974] ? __pfx_____sys_sendmsg+0x10/0x10 [ 775.720801][T18974] ? import_iovec+0x73/0xa0 [ 775.720835][T18974] ___sys_sendmsg+0x2a5/0x360 [ 775.720951][T18974] ? __lock_acquire+0x6b5/0x2cf0 [ 775.721056][T18974] ? __pfx____sys_sendmsg+0x10/0x10 [ 775.721135][T18974] ? __lock_acquire+0x6b5/0x2cf0 [ 775.721220][T18974] ? kstrtouint+0x6e/0xe0 [ 775.721386][T18974] __sys_sendmmsg+0x27c/0x4e0 [ 775.721470][T18974] ? __pfx___sys_sendmmsg+0x10/0x10 [ 775.721546][T18974] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 775.721651][T18974] ? ksys_write+0x242/0x270 [ 775.721729][T18974] ? __pfx_ksys_write+0x10/0x10 [ 775.721825][T18974] __x64_sys_sendmmsg+0xa0/0xc0 [ 775.721910][T18974] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.721968][T18974] do_syscall_64+0x15f/0xf80 [ 775.722045][T18974] ? trace_irq_disable+0x3b/0x140 [ 775.722124][T18974] ? clear_bhb_loop+0x40/0x90 [ 775.722199][T18974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.722242][T18974] RIP: 0033:0x7fd32559ce59 [ 775.722296][T18974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 775.722357][T18974] RSP: 002b:00007fd326495028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 775.722421][T18974] RAX: ffffffffffffffda RBX: 00007fd325815fa0 RCX: 00007fd32559ce59 [ 775.722477][T18974] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003 [ 775.722512][T18974] RBP: 00007fd326495090 R08: 0000000000000000 R09: 0000000000000000 [ 775.722553][T18974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 775.722579][T18974] R13: 00007fd325816038 R14: 00007fd325815fa0 R15: 00007fd32593fa48 [ 775.722665][T18974] [ 776.214620][T18981] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4367'. [ 776.240172][T18981] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4367'. [ 776.669350][T19003] input: syz0 as /devices/virtual/input/input56 [ 777.007888][T19019] tipc: Enabling of bearer rejected, failed to enable media [ 777.174686][T19029] Cannot find del_set index 0 as target [ 777.311582][ T9284] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 777.441986][ T30] audit: type=1326 audit(1779289329.464:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19045 comm="syz.3.4395" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7febd3b9ce59 code=0x0 [ 777.470858][ T9284] usb 1-1: device descriptor read/64, error -71 [ 777.480281][T19046] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 777.595233][T19054] FAULT_INJECTION: forcing a failure. [ 777.595233][T19054] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 777.628383][T19054] CPU: 0 UID: 0 PID: 19054 Comm: syz.2.4397 Tainted: G L syzkaller #0 PREEMPT(full) [ 777.628419][T19054] Tainted: [L]=SOFTLOCKUP [ 777.628428][T19054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 777.628440][T19054] Call Trace: [ 777.628448][T19054] [ 777.628458][T19054] dump_stack_lvl+0xe8/0x150 [ 777.628488][T19054] should_fail_ex+0x412/0x560 [ 777.628522][T19054] _copy_from_user+0x2d/0xb0 [ 777.628555][T19054] do_seccomp+0x1ab/0xdd0 [ 777.628578][T19054] ? __fget_files+0x3a0/0x420 [ 777.628612][T19054] ? __pfx_do_seccomp+0x10/0x10 [ 777.628636][T19054] ? ksys_write+0x242/0x270 [ 777.628668][T19054] ? __pfx_ksys_write+0x10/0x10 [ 777.628706][T19054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.628730][T19054] do_syscall_64+0x15f/0xf80 [ 777.628766][T19054] ? trace_irq_disable+0x3b/0x140 [ 777.628797][T19054] ? clear_bhb_loop+0x40/0x90 [ 777.628824][T19054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.628845][T19054] RIP: 0033:0x7fd32559ce59 [ 777.628865][T19054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 777.628884][T19054] RSP: 002b:00007fd326495028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 777.628906][T19054] RAX: ffffffffffffffda RBX: 00007fd325815fa0 RCX: 00007fd32559ce59 [ 777.628921][T19054] RDX: 0000200000000040 RSI: 0000000000000002 RDI: 0000000000000001 [ 777.628934][T19054] RBP: 00007fd326495090 R08: 0000000000000000 R09: 0000000000000000 [ 777.628946][T19054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 777.628958][T19054] R13: 00007fd325816038 R14: 00007fd325815fa0 R15: 00007fd32593fa48 [ 777.628991][T19054] [ 777.842458][ T30] audit: type=1326 audit(1779289329.864:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19053 comm="syz.1.4398" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc301b9ce59 code=0x0 [ 777.890736][ T9284] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 777.998613][T19069] fuse: Bad value for 'fd' [ 778.041789][ T9284] usb 1-1: device descriptor read/64, error -71 [ 778.053454][T19071] netlink: 'syz.2.4404': attribute type 12 has an invalid length. [ 778.061584][T19071] netlink: 'syz.2.4404': attribute type 29 has an invalid length. [ 778.151234][ T9284] usb usb1-port1: attempt power cycle [ 778.163737][ T5771] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 778.266691][T19081] geneve2: entered promiscuous mode [ 778.272529][T19081] geneve2: entered allmulticast mode [ 778.332621][ T5771] usb 5-1: Using ep0 maxpacket: 8 [ 778.353151][ T5771] usb 5-1: unable to get BOS descriptor or descriptor too short [ 778.364418][ T5771] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7 [ 778.396181][ T5771] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 80, changing to 7 [ 778.422213][ T5771] usb 5-1: string descriptor 0 read error: -22 [ 778.448143][ T5771] usb 5-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice= 0.40 [ 778.472577][ T5771] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.498176][ T5771] usb 5-1: unit 1 not found! [ 778.506939][ T5771] usb 5-1: unit 2 not found! [ 778.512020][ T9284] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 778.551506][ T9284] usb 1-1: device descriptor read/8, error -71 [ 778.707847][ T5771] usb 5-1: USB disconnect, device number 75 [ 778.801432][ T9284] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 778.832541][ T9284] usb 1-1: device descriptor read/8, error -71 [ 778.952232][ T9284] usb usb1-port1: unable to enumerate USB device [ 779.299090][T19098] __nla_validate_parse: 5 callbacks suppressed [ 779.299111][T19098] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4415'. [ 779.653147][T19114] netlink: 'syz.2.4420': attribute type 13 has an invalid length. [ 779.850016][ T5637] Bluetooth: hci0: unexpected cc 0x0c2d length: 65 > 4 [ 780.121257][ T5771] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 780.323245][ T5771] usb 5-1: config index 0 descriptor too short (expected 3133, got 61) [ 780.357352][ T5771] usb 5-1: config 0 has an invalid interface number: 156 but max is 1 [ 780.403963][ T5771] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 780.435956][ T5771] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 780.460130][ T5771] usb 5-1: config 0 has no interface number 0 [ 780.480817][ T5771] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 780.522641][ T5771] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 780.560001][ T5771] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 780.587549][T19132] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4426'. [ 780.598701][ T5771] usb 5-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 780.660802][ T5771] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 780.683988][ T5771] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.737408][ T5771] usb 5-1: config 0 descriptor?? [ 780.767264][ T5771] gspca_main: spca561-2.14.0 probing abcd:cdee [ 780.981624][ T5771] spca561 5-1:0.156: probe with driver spca561 failed with error -22 [ 781.022100][ T5771] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 781.045050][ T5771] usb 5-1: MIDIStreaming interface descriptor not found [ 781.275030][ T5771] usb 5-1: USB disconnect, device number 76 [ 781.460872][ T30] audit: type=1800 audit(1779289333.474:1673): pid=19150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4432" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=76456 res=0 errno=0 [ 781.573737][T19152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4432'. [ 781.662731][ T30] audit: type=1326 audit(1779289333.664:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19141 comm="syz.3.4431" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febd3b9ce59 code=0x7ffc0000 [ 781.929367][ T30] audit: type=1326 audit(1779289333.664:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19141 comm="syz.3.4431" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febd3b9ce59 code=0x7ffc0000 [ 782.210890][ T5631] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 782.303614][T19160] netlink: 'syz.2.4434': attribute type 29 has an invalid length. [ 782.340764][ T5631] usb 5-1: device descriptor read/64, error -71 [ 782.600742][ T5631] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 782.741514][ T5631] usb 5-1: device descriptor read/64, error -71 [ 782.861719][ T5631] usb usb5-port1: attempt power cycle [ 783.060816][T19172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4438'. [ 783.230817][ T5631] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 783.288582][ T5631] usb 5-1: device descriptor read/8, error -71 [ 783.549496][ T5631] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 783.684339][ T5631] usb 5-1: device descriptor read/8, error -71 [ 783.911552][ T5631] usb usb5-port1: unable to enumerate USB device [ 783.927139][T19192] netlink: 'syz.2.4445': attribute type 29 has an invalid length. [ 784.335575][T19200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4448'. [ 784.382376][T19200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4448'. [ 784.415981][T19196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4447'. [ 784.987426][T19211] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4452'. [ 785.415697][T19222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 785.436139][T19222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 785.630920][ T5730] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 785.722931][T19231] netlink: 'syz.1.4457': attribute type 29 has an invalid length. [ 785.776552][T19234] syzkaller0: entered promiscuous mode [ 785.798663][T19234] syzkaller0: entered allmulticast mode [ 785.834282][T19226] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4456'. [ 785.912083][T19234] tipc: Started in network mode [ 785.931132][T19234] tipc: Node identity 8ebe73c2befe, cluster identity 4711 [ 785.965107][T19234] tipc: Enabled bearer , priority 0 [ 785.985172][T19233] tipc: Resetting bearer [ 786.129525][T19233] tipc: Disabling bearer [ 786.224372][T19254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4465'. [ 786.240170][T19251] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4464'. [ 786.262741][T19251] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 786.308691][T19249] fuse: Unknown parameter '18446744073709551615' [ 786.339503][T19249] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4462'. [ 786.350835][ T30] audit: type=1326 audit(1779289338.364:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19235 comm="syz.0.4459" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235719ce59 code=0x7ffc0000 [ 786.433119][ T30] audit: type=1326 audit(1779289338.464:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19235 comm="syz.0.4459" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235719ce59 code=0x7ffc0000 [ 786.781497][T19273] netlink: 'syz.2.4471': attribute type 29 has an invalid length. [ 786.867156][T19277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4472'. [ 786.913835][T19277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4472'. [ 787.278857][T19290] geneve2: entered promiscuous mode [ 787.307494][T19290] geneve2: entered allmulticast mode [ 787.632904][T19293] process '/newroot/385/file0' started with executable stack [ 788.005866][T19306] bond9: Unable to set peer notification delay as MII monitoring is disabled [ 788.057960][T19306] bond9 (unregistering): Released all slaves [ 788.152917][T19313] netlink: 'syz.3.4484': attribute type 29 has an invalid length. [ 788.815663][ T30] audit: type=1326 audit(1779289340.844:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19319 comm="syz.1.4487" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc301b9ce59 code=0x7ffc0000 [ 788.901075][ T30] audit: type=1326 audit(1779289340.844:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19319 comm="syz.1.4487" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc301b9ce59 code=0x7ffc0000 [ 789.051496][T19348] netlink: 'syz.3.4496': attribute type 29 has an invalid length. [ 789.059946][T19350] netlink: 'syz.4.4497': attribute type 4 has an invalid length. [ 789.581002][ T9284] usb 5-1: new full-speed USB device number 81 using dummy_hcd [ 789.767313][ T9284] usb 5-1: config 8 has an invalid interface number: 80 but max is 0 [ 789.803742][ T9284] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 789.850830][ T9284] usb 5-1: config 8 has no interface number 0 [ 789.875487][ T9284] usb 5-1: config 8 interface 80 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 789.924991][T19371] __nla_validate_parse: 6 callbacks suppressed [ 789.925007][T19371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4506'. [ 789.943963][ T9284] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 790.013847][ T9284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.123561][ T9284] usb 5-1: NFC: intf ffff888029864000 id ffffffff8f3e4800 [ 790.843137][T19394] netlink: 'syz.3.4512': attribute type 29 has an invalid length. [ 791.105270][T19401] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4516'. [ 791.185339][T19403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4517'. [ 791.506119][T19421] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4524'. [ 791.537114][T19420] netlink: 'syz.3.4525': attribute type 29 has an invalid length. [ 791.563563][T19421] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 791.602461][T19421] macvlan5: entered promiscuous mode [ 791.610277][T19421] macvlan5: entered allmulticast mode [ 791.621236][T19421] bridge0: port 6(macvlan5) entered blocking state [ 791.628175][T19421] bridge0: port 6(macvlan5) entered disabled state [ 791.768608][T19428] netlink: 'syz.3.4528': attribute type 10 has an invalid length. [ 791.792897][T19428] team0: Device vxcan0 is up. Set it down before adding it as a team port [ 791.946178][T19434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4530'. [ 792.490163][T19441] netlink: 7 bytes leftover after parsing attributes in process `syz.2.4529'. [ 792.559705][ T5771] usb 5-1: USB disconnect, device number 81 [ 792.641521][T19447] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4534'. [ 792.658984][T19447] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4534'. [ 792.677008][T19447] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4534'. [ 792.726133][T19451] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4534'. [ 792.757205][T19451] netlink: 'syz.0.4534': attribute type 1 has an invalid length. [ 793.282771][ T5730] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 793.430724][ T5730] usb 1-1: device descriptor read/64, error -71 [ 793.674976][T19476] netlink: 'syz.2.4545': attribute type 4 has an invalid length. [ 793.686302][ T5730] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 793.820705][ T5730] usb 1-1: device descriptor read/64, error -71 [ 793.952953][ T5730] usb usb1-port1: attempt power cycle [ 794.323828][ T5730] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 794.355847][T19489] binder: BINDER_SET_CONTEXT_MGR already set [ 794.382345][ T5730] usb 1-1: device descriptor read/8, error -71 [ 794.419111][T19489] binder: 19488:19489 ioctl 4018620d 200000000040 returned -16 [ 794.641154][ T5730] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 794.691729][ T5730] usb 1-1: device descriptor read/8, error -71 [ 794.711044][ T9284] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 794.809349][T19496] FAULT_INJECTION: forcing a failure. [ 794.809349][T19496] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 794.823732][ T5730] usb usb1-port1: unable to enumerate USB device [ 794.832131][T19496] CPU: 0 UID: 0 PID: 19496 Comm: syz.1.4552 Tainted: G L syzkaller #0 PREEMPT(full) [ 794.832156][T19496] Tainted: [L]=SOFTLOCKUP [ 794.832162][T19496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 794.832172][T19496] Call Trace: [ 794.832178][T19496] [ 794.832186][T19496] dump_stack_lvl+0xe8/0x150 [ 794.832214][T19496] should_fail_ex+0x412/0x560 [ 794.832239][T19496] _copy_from_user+0x2d/0xb0 [ 794.832263][T19496] ___sys_sendmsg+0x1c6/0x360 [ 794.832286][T19496] ? __lock_acquire+0x6b5/0x2cf0 [ 794.832306][T19496] ? __pfx____sys_sendmsg+0x10/0x10 [ 794.832327][T19496] ? __lock_acquire+0x6b5/0x2cf0 [ 794.832347][T19496] ? kstrtouint+0x6e/0xe0 [ 794.832392][T19496] __sys_sendmmsg+0x27c/0x4e0 [ 794.832419][T19496] ? __pfx___sys_sendmmsg+0x10/0x10 [ 794.832440][T19496] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 794.832473][T19496] ? ksys_write+0x242/0x270 [ 794.832497][T19496] ? __pfx_ksys_write+0x10/0x10 [ 794.832524][T19496] __x64_sys_sendmmsg+0xa0/0xc0 [ 794.832546][T19496] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.832562][T19496] do_syscall_64+0x15f/0xf80 [ 794.832585][T19496] ? trace_irq_disable+0x3b/0x140 [ 794.832609][T19496] ? clear_bhb_loop+0x40/0x90 [ 794.832627][T19496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.832643][T19496] RIP: 0033:0x7fc301b9ce59 [ 794.832657][T19496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 794.832670][T19496] RSP: 002b:00007fc302a8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 794.832686][T19496] RAX: ffffffffffffffda RBX: 00007fc301e15fa0 RCX: 00007fc301b9ce59 [ 794.832697][T19496] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003 [ 794.832711][T19496] RBP: 00007fc302a8f090 R08: 0000000000000000 R09: 0000000000000000 [ 794.832720][T19496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 794.832729][T19496] R13: 00007fc301e16038 R14: 00007fc301e15fa0 R15: 00007fc301f3fa48 [ 794.832752][T19496] [ 795.170746][ T9284] usb 5-1: Using ep0 maxpacket: 32 [ 795.179780][ T9284] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 795.189501][ T9284] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.197633][ T9284] usb 5-1: Product: syz [ 795.201900][ T9284] usb 5-1: Manufacturer: syz [ 795.206556][ T9284] usb 5-1: SerialNumber: syz [ 795.214481][ T9284] usb 5-1: config 0 descriptor?? [ 795.317669][T19503] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4554'. [ 795.373850][ T30] audit: type=1326 audit(1779289347.404:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19504 comm="syz.2.4556" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd32553e1d9 code=0x7ffc0000 [ 795.420451][ T30] audit: type=1326 audit(1779289347.404:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19504 comm="syz.2.4556" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32559ce59 code=0x7ffc0000 [ 795.472748][ T30] audit: type=1326 audit(1779289347.404:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19504 comm="syz.2.4556" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd32553e1d9 code=0x7ffc0000 [ 795.543718][ T30] audit: type=1326 audit(1779289347.404:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19504 comm="syz.2.4556" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd32553e1d9 code=0x7ffc0000 [ 795.610907][ T30] audit: type=1326 audit(1779289347.404:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19504 comm="syz.2.4556" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd32553e1d9 code=0x7ffc0000 [ 795.662081][ T9284] airspy 5-1:0.0: Board ID: 00 [ 795.669663][ T9284] airspy 5-1:0.0: Firmware version: [ 795.702500][ T30] audit: type=1326 audit(1779289347.404:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19504 comm="syz.2.4556" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd32553e1d9 code=0x7ffc0000 [ 795.780715][ T30] audit: type=1326 audit(1779289347.404:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19504 comm="syz.2.4556" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd32553e1d9 code=0x7ffc0000 [ 795.850737][ T30] audit: type=1326 audit(1779289347.404:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19504 comm="syz.2.4556" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd32553e1d9 code=0x7ffc0000 [ 795.939509][ T9284] airspy 5-1:0.0: usb_control_msg() failed -71 request 11 [ 795.965730][ T30] audit: type=1326 audit(1779289347.404:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19504 comm="syz.2.4556" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd32553e1d9 code=0x7ffc0000 [ 796.066771][ T9284] airspy 5-1:0.0: Registered as swradio24 [ 796.085869][ T9284] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 796.135506][ T9284] usb 5-1: USB disconnect, device number 82 [ 796.139149][ T30] audit: type=1326 audit(1779289347.404:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19504 comm="syz.2.4556" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd32553e1d9 code=0x7ffc0000 [ 797.474449][T19557] geneve2: entered promiscuous mode [ 797.510682][T19557] geneve2: entered allmulticast mode [ 797.614100][T19560] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4574'. [ 797.654732][T19560] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4574'. [ 798.964119][T19587] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.143396][T19587] bridge_slave_0 (unregistering): left allmulticast mode [ 799.263357][T19587] bridge_slave_0 (unregistering): left promiscuous mode [ 799.373927][T19587] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.070754][ T5361] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 801.100508][T19609] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 801.377732][T19616] FAULT_INJECTION: forcing a failure. [ 801.377732][T19616] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 801.406735][T19616] CPU: 1 UID: 0 PID: 19616 Comm: syz.1.4593 Tainted: G L syzkaller #0 PREEMPT(full) [ 801.406770][T19616] Tainted: [L]=SOFTLOCKUP [ 801.406776][T19616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 801.406786][T19616] Call Trace: [ 801.406793][T19616] [ 801.406800][T19616] dump_stack_lvl+0xe8/0x150 [ 801.406823][T19616] should_fail_ex+0x412/0x560 [ 801.406854][T19616] _copy_to_user+0x31/0xb0 [ 801.406880][T19616] simple_read_from_buffer+0xe1/0x170 [ 801.406903][T19616] proc_fail_nth_read+0x1bb/0x230 [ 801.406926][T19616] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 801.406948][T19616] ? rw_verify_area+0x2a6/0x4d0 [ 801.406969][T19616] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 801.406989][T19616] vfs_read+0x20c/0xa70 [ 801.407014][T19616] ? __pfx___mutex_lock+0x10/0x10 [ 801.407036][T19616] ? __pfx_vfs_read+0x10/0x10 [ 801.407058][T19616] ? __fget_files+0x2a/0x420 [ 801.407080][T19616] ? __fget_files+0x3a0/0x420 [ 801.407121][T19616] ? __fget_files+0x2a/0x420 [ 801.407154][T19616] ksys_read+0x150/0x270 [ 801.407177][T19616] ? __pfx_ksys_read+0x10/0x10 [ 801.407203][T19616] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.407220][T19616] do_syscall_64+0x15f/0xf80 [ 801.407242][T19616] ? trace_irq_disable+0x3b/0x140 [ 801.407264][T19616] ? clear_bhb_loop+0x40/0x90 [ 801.407283][T19616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.407297][T19616] RIP: 0033:0x7fc301b5d68e [ 801.407312][T19616] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 801.407325][T19616] RSP: 002b:00007fc302a8efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 801.407341][T19616] RAX: ffffffffffffffda RBX: 00007fc302a8f6c0 RCX: 00007fc301b5d68e [ 801.407352][T19616] RDX: 000000000000000f RSI: 00007fc302a8f0a0 RDI: 0000000000000003 [ 801.407362][T19616] RBP: 00007fc302a8f090 R08: 0000000000000000 R09: 0000000000000000 [ 801.407371][T19616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 801.407380][T19616] R13: 00007fc301e16038 R14: 00007fc301e15fa0 R15: 00007fc301f3fa48 [ 801.407404][T19616] [ 801.822211][T19623] netlink: 'syz.1.4594': attribute type 4 has an invalid length. [ 802.344921][T19635] netlink: 'syz.3.4600': attribute type 13 has an invalid length. [ 802.353161][T19635] netlink: 'syz.3.4600': attribute type 17 has an invalid length. [ 802.369634][T19635] netlink: 'syz.3.4600': attribute type 27 has an invalid length. [ 802.759001][ T5361] usb 1-1: unable to get BOS descriptor or descriptor too short [ 802.781084][ T5361] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 802.818380][ T5361] usb 1-1: can't read configurations, error -71 [ 804.397311][T19678] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4608'. [ 805.501414][T19695] netlink: 'syz.0.4621': attribute type 13 has an invalid length. [ 805.511996][T19695] netlink: 'syz.0.4621': attribute type 17 has an invalid length. [ 805.942234][T19704] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4625'. [ 807.561056][T19735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4638'. [ 807.605609][T19737] netlink: 136 bytes leftover after parsing attributes in process `syz.0.4639'. [ 807.616134][T19735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4638'. [ 807.674035][T19737] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 808.230952][T19752] input: syz0 as /devices/virtual/input/input57 [ 808.889809][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.899614][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.942977][T19763] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4647'. [ 808.968172][T19763] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 809.561467][T19783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 809.602040][T19791] binder: BINDER_SET_CONTEXT_MGR already set [ 809.612180][T19791] binder: 19786:19791 ioctl 4018620d 200000000040 returned -16 [ 809.623041][T19791] binder: 19786:19791 ioctl c0306201 200000000240 returned -11 [ 809.668194][T19791] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2988763953 (5977527906 ns) > initial count (1530137536 ns). Using initial count to start timer. [ 809.766547][T19793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4657'. [ 809.797103][T19793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4657'. [ 809.866860][T19783] geneve2: left promiscuous mode [ 809.882731][T19783] geneve2: left allmulticast mode [ 809.938099][T19783] 8021q: adding VLAN 0 to HW filter on device bond1 [ 809.985893][T19783] 8021q: adding VLAN 0 to HW filter on device bond2 [ 810.016522][T19783] bond2: entered promiscuous mode [ 810.030328][T19783] bridge1: entered promiscuous mode [ 810.050070][T19783] bridge0: port 3(macvlan2) entered blocking state [ 810.056855][T19783] bridge0: port 3(macvlan2) entered forwarding state [ 810.098927][T19783] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 810.118855][T19783] ip6gretap0: entered promiscuous mode [ 810.140146][T19783] ip6gretap0: entered allmulticast mode [ 810.152883][T19783] macvtap1: left promiscuous mode [ 810.165179][T19783] macvtap1: left allmulticast mode [ 810.177572][T19783] ip6gretap0: left allmulticast mode [ 810.217766][T19783] 8021q: adding VLAN 0 to HW filter on device bond3 [ 810.258033][T19783] 8021q: adding VLAN 0 to HW filter on device bond4 [ 810.286946][T19783] bond4: entered promiscuous mode [ 810.348660][T19783] bridge2: entered promiscuous mode [ 810.369142][T19783] bridge0: port 4(macvlan3) entered blocking state [ 810.375936][T19783] bridge0: port 4(macvlan3) entered forwarding state [ 810.385217][T19783] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 810.398932][T19783] 8021q: adding VLAN 0 to HW filter on device bond5 [ 810.418586][T19783] veth3: left promiscuous mode [ 810.432299][T19783] 8021q: adding VLAN 0 to HW filter on device bond7 [ 810.445050][T19783] bridge3: left promiscuous mode [ 810.457006][T19783] 8021q: adding VLAN 0 to HW filter on device bond8 [ 810.465427][T19783] bond8: entered promiscuous mode [ 810.475055][T19783] bridge4: entered promiscuous mode [ 810.489561][T19783] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 810.709425][T13905] bridge0: port 5(macvlan4) entered blocking state [ 810.716126][T13905] bridge0: port 5(macvlan4) entered forwarding state [ 810.810779][ T1349] bond6: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 811.013893][T13905] ip6_tunnel: K xmit: Local address not yet configured! [ 811.061563][T13905] ip6_tunnel: K xmit: Local address not yet configured! [ 811.071834][ T9284] ip6_tunnel: K xmit: Local address not yet configured! [ 811.191590][ T30] kauditd_printk_skb: 346 callbacks suppressed [ 811.191605][ T30] audit: type=1326 audit(1779289363.224:2036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19814 comm="syz.1.4666" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc301b9ce59 code=0x7ffc0000 [ 811.318832][ T30] audit: type=1326 audit(1779289363.254:2037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19814 comm="syz.1.4666" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc301b9ce59 code=0x7ffc0000 [ 811.351116][ T9284] ip6_tunnel: K xmit: Local address not yet configured! [ 811.381486][ T30] audit: type=1326 audit(1779289363.284:2038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19814 comm="syz.1.4666" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc301b9ce59 code=0x7ffc0000 [ 811.434187][ T30] audit: type=1326 audit(1779289363.284:2039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19814 comm="syz.1.4666" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc301b9ce59 code=0x7ffc0000 [ 811.494121][ T30] audit: type=1326 audit(1779289363.284:2040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19814 comm="syz.1.4666" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc301b9ce59 code=0x7ffc0000 [ 811.545047][ T30] audit: type=1326 audit(1779289363.284:2041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19814 comm="syz.1.4666" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fc301b9ce59 code=0x7ffc0000 [ 811.596428][ T30] audit: type=1326 audit(1779289363.284:2042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19814 comm="syz.1.4666" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc301b9ce59 code=0x7ffc0000 [ 811.650745][ T30] audit: type=1326 audit(1779289363.284:2043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19814 comm="syz.1.4666" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc301b9ce59 code=0x7ffc0000 [ 811.700772][ T30] audit: type=1326 audit(1779289363.284:2044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19814 comm="syz.1.4666" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc301b9ce59 code=0x7ffc0000 [ 811.752352][ T30] audit: type=1326 audit(1779289363.284:2045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19814 comm="syz.1.4666" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc301b9ce59 code=0x7ffc0000 [ 812.000258][T19826] xt_TCPMSS: Only works on TCP SYN packets [ 812.009339][ T9] ip6_tunnel: K xmit: Local address not yet configured! [ 812.353377][T19831] syz.1.4671 (19831): drop_caches: 2 [ 812.980730][ T9] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 813.050051][T19848] x_tables: ip6_tables: dccp match: only valid for protocol 33 [ 813.151308][ T9] usb 5-1: device descriptor read/64, error -71 [ 813.368158][T19855] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4682'. [ 813.413253][ T9] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 813.508835][T16561] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 813.534134][T16561] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 813.545384][T16561] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 813.569036][T16561] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 813.577445][T16561] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 813.590760][ T9] usb 5-1: device descriptor read/64, error -71 [ 813.741423][ T9] usb usb5-port1: attempt power cycle [ 814.117552][T19543] team0: Port device syz_tun removed [ 814.123740][ T9] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 814.151730][ T9] usb 5-1: device descriptor read/8, error -71 [ 814.180961][ T5728] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 814.370816][ T5728] usb 1-1: Using ep0 maxpacket: 8 [ 814.389985][ T5728] usb 1-1: config 0 has no interfaces? [ 814.402506][ T9] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 814.413640][ T5728] usb 1-1: config 0 has no interfaces? [ 814.436748][ T9] usb 5-1: device descriptor read/8, error -71 [ 814.446222][ T5728] usb 1-1: config 0 has no interfaces? [ 814.453183][T19869] syz.1.4688 (19869): drop_caches: 2 [ 814.464805][ T5728] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 814.476503][ T5728] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.485243][ T5728] usb 1-1: Product: syz [ 814.492151][ T5728] usb 1-1: Manufacturer: syz [ 814.496856][ T5728] usb 1-1: SerialNumber: syz [ 814.512538][ T5728] usb 1-1: config 0 descriptor?? [ 814.561419][ T9] usb usb5-port1: unable to enumerate USB device [ 814.619988][T19861] bridge0: port 1(bridge_slave_0) entered blocking state [ 814.627324][T19861] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.634729][T19861] bridge_slave_0: entered allmulticast mode [ 814.644768][T19861] bridge_slave_0: entered promiscuous mode [ 814.656302][T19861] bridge0: port 2(bridge_slave_1) entered blocking state [ 814.664097][T19861] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.671530][T19861] bridge_slave_1: entered allmulticast mode [ 814.679327][T19861] bridge_slave_1: entered promiscuous mode [ 814.714399][T19861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 814.728337][T19861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 814.746214][T19866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 814.759859][T19866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 814.774469][T19866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 814.786361][T19866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 814.800208][ T5631] usb 1-1: USB disconnect, device number 125 [ 814.804445][T19861] team0: Port device team_slave_0 added [ 814.819393][T19861] team0: Port device team_slave_1 added [ 814.860119][T19861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 814.867317][T19861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 814.895306][T19861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 814.909254][T19861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 814.916528][T19861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 814.942673][T19861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 814.991189][T19861] hsr_slave_0: entered promiscuous mode [ 815.002800][T19861] hsr_slave_1: entered promiscuous mode [ 815.011625][T19861] debugfs: 'hsr0' already exists in 'hsr' [ 815.018132][T19861] Cannot create hsr debugfs directory [ 815.270701][ T5631] usb 1-1: new low-speed USB device number 126 using dummy_hcd [ 815.336821][T19887] fuse: Bad value for 'fd' [ 815.447633][T19861] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 815.459578][ T5631] usb 1-1: config 0 has an invalid interface number: 6 but max is 2 [ 815.468583][ T5631] usb 1-1: config 0 has an invalid interface number: 176 but max is 2 [ 815.476970][ T5631] usb 1-1: config 0 has no interface number 1 [ 815.485262][ T5631] usb 1-1: config 0 has no interface number 2 [ 815.492447][ T5631] usb 1-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=29.ac [ 815.505567][T19861] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 815.515289][ T5631] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.525314][T19861] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 815.531723][ C0] ip6_tunnel: K xmit: Local address not yet configured! [ 815.549546][ T5631] usb 1-1: config 0 descriptor?? [ 815.565704][T19861] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 815.583964][ T5631] imon 1-1:0.6: inconsistent driver matching [ 815.592474][T19861] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 815.599374][ T5631] imon 1-1:0.6: unable to register, err -22 [ 815.606792][ T5631] imon 1-1:0.6: probe with driver imon failed with error -22 [ 815.620194][T19861] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 815.634234][ T5631] imon 1-1:0.176: inconsistent driver matching [ 815.642911][T19861] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 815.649814][ T5631] imon 1-1:0.176: unable to register, err -22 [ 815.660888][T19861] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 815.668142][ T5631] imon 1-1:0.176: probe with driver imon failed with error -22 [ 815.681416][ T5637] Bluetooth: hci1: command tx timeout [ 815.708262][ T5631] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 815.716411][ T5631] imon 1-1:0.0: unable to initialize intf0, err -19 [ 815.725569][ T5631] imon:imon_probe: failed to initialize context! [ 815.733351][ T5631] imon 1-1:0.0: unable to register, err -19 [ 815.879957][T19866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 815.934788][T19866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 815.986962][T19866] syzkaller0: entered promiscuous mode [ 816.039249][T19898] netlink: 'syz.4.4694': attribute type 13 has an invalid length. [ 816.047845][T19898] netlink: 'syz.4.4694': attribute type 17 has an invalid length. [ 816.082516][T19866] 0: reclassify loop, rule prio 0, protocol 700 [ 816.129227][ T5361] usb 1-1: USB disconnect, device number 126 [ 816.410004][T19906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 816.455931][T19861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 816.506924][T19861] 8021q: adding VLAN 0 to HW filter on device team0 [ 816.532979][ T114] bridge0: port 1(bridge_slave_0) entered blocking state [ 816.540208][ T114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 816.564926][ T114] bridge0: port 2(bridge_slave_1) entered blocking state [ 816.572221][ T114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 816.795604][T19861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 816.941351][ T9] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 816.990395][T19861] veth0_vlan: entered promiscuous mode [ 817.019713][T19913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4699'. [ 817.050575][T19861] veth1_vlan: entered promiscuous mode [ 817.110986][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 817.153020][ T9] usb 5-1: New USB device found, idVendor=249c, idProduct=9008, bcdDevice= 0.40 [ 817.164279][T19861] veth0_macvtap: entered promiscuous mode [ 817.177931][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.195988][T19861] veth1_macvtap: entered promiscuous mode [ 817.198498][ T9] usb 5-1: Product: syz [ 817.218561][ T9] usb 5-1: Manufacturer: ఉ [ 817.225497][ T9] usb 5-1: SerialNumber: syz [ 817.235508][T19861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 817.263214][T19861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 817.294010][T13907] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.311141][ T9284] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 817.321827][T13907] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.346951][T13907] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.376654][T13907] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.471573][T19911] binder: 19910:19911 ioctl c0306201 0 returned -14 [ 817.517476][ T9284] usb 1-1: unable to get BOS descriptor or descriptor too short [ 817.548378][ T9284] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 238, changing to 7 [ 817.561163][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 817.590974][ T9284] usb 1-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice= 0.40 [ 817.605534][ T9284] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.638045][ T9284] usb 1-1: Product: syz [ 817.648541][ T9284] usb 1-1: Manufacturer: syz [ 817.666635][T19925] syz.4.4698 (19925): drop_caches: 2 [ 817.675009][ T9284] usb 1-1: SerialNumber: syz [ 817.707175][ T9] usb 5-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 817.755879][ T9] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 817.762678][ T5637] Bluetooth: hci1: command tx timeout [ 817.818147][T13903] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 817.873268][T13903] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 817.919796][T19931] netlink: 136 bytes leftover after parsing attributes in process `syz.3.4706'. [ 817.942004][T19915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 817.971839][T19915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 818.007108][T19931] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 818.043692][ T9] usb 5-1: USB disconnect, device number 87 [ 818.061901][T13907] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 818.104512][T13907] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 818.268642][T19593] udevd[19593]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 818.334977][T19937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 818.399560][T19937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 818.780929][ T5361] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 818.837788][T19957] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 818.845177][T19957] IPv6: NLM_F_CREATE should be set when creating new route [ 818.852498][T19957] IPv6: NLM_F_CREATE should be set when creating new route [ 818.878337][T19957] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 818.932341][ T5361] usb 5-1: device descriptor read/64, error -71 [ 819.021501][T13786] IPVS: starting estimator thread 0... [ 819.130918][T19966] IPVS: using max 28 ests per chain, 67200 per kthread [ 819.181837][ T5361] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 819.264967][T19970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4719'. [ 819.326091][T19970] 8021q: adding VLAN 0 to HW filter on device bond6 [ 819.332406][T19973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4719'. [ 819.333319][ T5361] usb 5-1: device descriptor read/64, error -71 [ 819.360330][T19973] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4719'. [ 819.395319][T19973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 819.422845][T19973] bond6: (slave bond0): making interface the new active one [ 819.452087][ T5361] usb usb5-port1: attempt power cycle [ 819.461481][T19974] syz.1.4720 (19974): drop_caches: 2 [ 819.468815][T19973] bond6: (slave bond0): Enslaving as an active interface with an up link [ 819.790837][ T5361] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 819.822917][ T5361] usb 5-1: device descriptor read/8, error -71 [ 819.840886][ T5637] Bluetooth: hci1: command tx timeout [ 820.070732][ T5361] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 820.104536][ T5361] usb 5-1: device descriptor read/8, error -71 [ 820.231140][ T5361] usb usb5-port1: unable to enumerate USB device [ 820.654741][T19914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 820.782824][ T9284] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 820.798156][ T9284] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 820.816149][ T9284] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 820.840355][ T9284] usb 1-1: USB disconnect, device number 127 [ 821.009510][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 821.009528][ T30] audit: type=1326 audit(1779289373.034:2083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19998 comm="syz.5.4730" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d6979ce59 code=0x7ffc0000 [ 821.085179][ T30] audit: type=1326 audit(1779289373.114:2084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19998 comm="syz.5.4730" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f9d6979ce59 code=0x7ffc0000 [ 821.188210][ T30] audit: type=1326 audit(1779289373.214:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19998 comm="syz.5.4730" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d6979ce59 code=0x7ffc0000 [ 821.220361][ T30] audit: type=1326 audit(1779289373.244:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19998 comm="syz.5.4730" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d6979ce59 code=0x7ffc0000 [ 821.410427][T20015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4736'. [ 821.550844][ T5733] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 821.740786][ T5733] usb 1-1: Using ep0 maxpacket: 16 [ 821.775677][ T5733] usb 1-1: New USB device found, idVendor=249c, idProduct=9008, bcdDevice= 0.40 [ 821.810745][ T5733] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.848638][ T5733] usb 1-1: Product: syz [ 821.870272][ T5733] usb 1-1: Manufacturer: ఉ [ 821.884422][ T5733] usb 1-1: SerialNumber: syz [ 821.921492][ T5637] Bluetooth: hci1: command tx timeout [ 822.019961][T20021] FAULT_INJECTION: forcing a failure. [ 822.019961][T20021] name failslab, interval 1, probability 0, space 0, times 0 [ 822.034113][T20021] CPU: 1 UID: 0 PID: 20021 Comm: syz.4.4739 Tainted: G L syzkaller #0 PREEMPT(full) [ 822.034146][T20021] Tainted: [L]=SOFTLOCKUP [ 822.034154][T20021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 822.034167][T20021] Call Trace: [ 822.034175][T20021] [ 822.034184][T20021] dump_stack_lvl+0xe8/0x150 [ 822.034215][T20021] should_fail_ex+0x412/0x560 [ 822.034251][T20021] should_failslab+0xa8/0x100 [ 822.034286][T20021] __kmalloc_noprof+0xe8/0x760 [ 822.034315][T20021] ? percpu_ref_get_many+0x21/0x1e0 [ 822.034341][T20021] ? io_cache_alloc_new+0x40/0x100 [ 822.034375][T20021] io_cache_alloc_new+0x40/0x100 [ 822.034404][T20021] __io_prep_rw+0x2bd/0xed0 [ 822.034443][T20021] ? __pfx___io_prep_rw+0x10/0x10 [ 822.034473][T20021] ? __pfx___io_alloc_req_refill+0x10/0x10 [ 822.034511][T20021] io_prep_read+0x33/0x110 [ 822.034538][T20021] ? blk_start_plug_nr_ios+0x7e/0x1c0 [ 822.034583][T20021] io_submit_sqes+0xb8d/0x2240 [ 822.034645][T20021] __se_sys_io_uring_enter+0x341/0x1c40 [ 822.034680][T20021] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 822.034706][T20021] ? __fget_files+0x3a0/0x420 [ 822.034736][T20021] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 822.034767][T20021] ? fput+0xa0/0xd0 [ 822.034793][T20021] ? ksys_write+0x242/0x270 [ 822.034826][T20021] ? __pfx_ksys_write+0x10/0x10 [ 822.034862][T20021] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 822.034892][T20021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.034916][T20021] do_syscall_64+0x15f/0xf80 [ 822.034948][T20021] ? trace_irq_disable+0x3b/0x140 [ 822.034980][T20021] ? clear_bhb_loop+0x40/0x90 [ 822.035007][T20021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.035029][T20021] RIP: 0033:0x7f73c939ce59 [ 822.035049][T20021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 822.035067][T20021] RSP: 002b:00007f73ca336028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 822.035090][T20021] RAX: ffffffffffffffda RBX: 00007f73c9615fa0 RCX: 00007f73c939ce59 [ 822.035106][T20021] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 822.035119][T20021] RBP: 00007f73ca336090 R08: 0000000000000000 R09: 0000000000000000 [ 822.035132][T20021] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 822.035144][T20021] R13: 00007f73c9616038 R14: 00007f73c9615fa0 R15: 00007f73c973fa48 [ 822.035178][T20021] [ 822.350633][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 822.470639][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 822.500651][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 822.608918][T20011] binder: 20009:20011 ioctl c0306201 0 returned -14 [ 822.626652][T20011] syz.0.4733 (20011): drop_caches: 2 [ 822.696327][ T5733] usb 1-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 822.720451][ T5733] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 822.912739][ T5733] usb 1-1: USB disconnect, device number 2 [ 823.140955][ T9284] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 823.160755][T20039] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4746'. [ 823.174697][T19938] udevd[19938]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 823.216379][T20039] bridge0: port 5(macvlan4) entered disabled state [ 823.226368][T20039] bridge0: port 4(macvlan3) entered disabled state [ 823.233214][T20039] bridge0: port 3(macvlan2) entered disabled state [ 823.239972][T20039] bridge0: port 2(bridge_slave_1) entered disabled state [ 823.260882][T20040] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4746'. [ 823.322429][ T9284] usb 5-1: device descriptor read/64, error -71 [ 823.401351][T20040] bridge0: port 5(macvlan4) entered blocking state [ 823.408079][T20040] bridge0: port 5(macvlan4) entered forwarding state [ 823.415285][T20040] bridge0: port 4(macvlan3) entered blocking state [ 823.421994][T20040] bridge0: port 4(macvlan3) entered forwarding state [ 823.429016][T20040] bridge0: port 3(macvlan2) entered blocking state [ 823.435768][T20040] bridge0: port 3(macvlan2) entered forwarding state [ 823.442837][T20040] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.449991][T20040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 823.466341][T20040] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4746'. [ 823.482521][ C1] [ 823.484922][ C1] ============================================ [ 823.491106][ C1] WARNING: possible recursive locking detected [ 823.497295][ C1] syzkaller #0 Tainted: G L [ 823.503298][ C1] -------------------------------------------- [ 823.509560][ C1] syz.1.4746/20040 is trying to acquire lock: [ 823.515650][ C1] ffff88802bd915e0 (&br->multicast_lock){+.-.}-{3:3}, at: br_multicast_rcv+0x2a6d/0x7640 [ 823.525517][ C1] [ 823.525517][ C1] but task is already holding lock: [ 823.532896][ C1] ffff8880586595e0 (&br->multicast_lock){+.-.}-{3:3}, at: br_ip4_multicast_port_query_expired+0x68/0x380 [ 823.544150][ C1] [ 823.544150][ C1] other info that might help us debug this: [ 823.552228][ C1] Possible unsafe locking scenario: [ 823.552228][ C1] [ 823.559697][ C1] CPU0 [ 823.563006][ C1] ---- [ 823.566322][ C1] lock(&br->multicast_lock); [ 823.571117][ C1] lock(&br->multicast_lock); [ 823.575908][ C1] [ 823.575908][ C1] *** DEADLOCK *** [ 823.575908][ C1] [ 823.584065][ C1] May be due to missing lock nesting notation [ 823.584065][ C1] [ 823.592494][ C1] 10 locks held by syz.1.4746/20040: [ 823.597810][ C1] #0: ffffffff9032c0a0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 823.607361][ C1] #1: ffffffff8fdd0f80 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 823.616504][ C1] #2: ffff88807c7ac530 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xa50 [ 823.626233][ C1] #3: ffffc90000a08ce0 ((&pmctx->ip4_own_query.timer)){+.-.}-{0:0}, at: call_timer_fn+0xd4/0x5e0 [ 823.636911][ C1] #4: ffff8880586595e0 (&br->multicast_lock){+.-.}-{3:3}, at: br_ip4_multicast_port_query_expired+0x68/0x380 [ 823.648639][ C1] #5: ffffffff8e95cd00 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 823.658600][ C1] #6: ffffffff8e95cd00 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 823.668570][ C1] #7: ffffffff8e95cca0 (rcu_read_lock){....}-{1:3}, at: bond_start_xmit+0xb4/0x1900 [ 823.678124][ C1] #8: ffffffff8e95cd00 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 823.688112][ C1] #9: ffffffff8e95cca0 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x193/0x1990 [ 823.697418][ C1] [ 823.697418][ C1] stack backtrace: [ 823.703348][ C1] CPU: 1 UID: 0 PID: 20040 Comm: syz.1.4746 Tainted: G L syzkaller #0 PREEMPT(full) [ 823.703378][ C1] Tainted: [L]=SOFTLOCKUP [ 823.703385][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 823.703396][ C1] Call Trace: [ 823.703403][ C1] [ 823.703411][ C1] dump_stack_lvl+0xe8/0x150 [ 823.703434][ C1] print_deadlock_bug+0x279/0x290 [ 823.703457][ C1] __lock_acquire+0x253f/0x2cf0 [ 823.703476][ C1] ? __skb_checksum_complete+0x13d/0x3d0 [ 823.703496][ C1] ? ip_mc_validate_checksum+0x336/0x5b0 [ 823.703519][ C1] ? csum_partial+0x239/0x2c0 [ 823.703538][ C1] ? br_multicast_rcv+0x2a6d/0x7640 [ 823.703562][ C1] lock_acquire+0x106/0x350 [ 823.703578][ C1] ? br_multicast_rcv+0x2a6d/0x7640 [ 823.703605][ C1] _raw_spin_lock+0x2e/0x40 [ 823.703626][ C1] ? br_multicast_rcv+0x2a6d/0x7640 [ 823.703647][ C1] br_multicast_rcv+0x2a6d/0x7640 [ 823.703680][ C1] ? __pfx_br_multicast_rcv+0x10/0x10 [ 823.703705][ C1] ? psi_group_change+0xab8/0x1050 [ 823.703728][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 823.703746][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 823.703763][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 823.703784][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 823.703807][ C1] ? ktime_get_update_offsets_now+0x5d/0x3e0 [ 823.703827][ C1] ? ktime_get+0x45/0x220 [ 823.703851][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 823.703872][ C1] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 823.703897][ C1] ? ktime_get+0x1f5/0x220 [ 823.703921][ C1] ? unwind_next_frame+0xa6/0x2550 [ 823.703941][ C1] ? lock_acquire+0x106/0x350 [ 823.703958][ C1] ? br_allowed_ingress+0xda/0x1330 [ 823.703977][ C1] ? lock_acquire+0x106/0x350 [ 823.703993][ C1] ? br_dev_xmit+0x193/0x1990 [ 823.704010][ C1] ? unwind_next_frame+0xa6/0x2550 [ 823.704039][ C1] br_dev_xmit+0xb67/0x1990 [ 823.704057][ C1] ? br_dev_xmit+0x193/0x1990 [ 823.704076][ C1] ? __pfx_br_dev_xmit+0x10/0x10 [ 823.704096][ C1] ? netif_set_real_num_rx_queues+0x1c0/0x330 [ 823.704119][ C1] ? lock_acquire+0x106/0x350 [ 823.704139][ C1] dev_hard_start_xmit+0x2cd/0x830 [ 823.704169][ C1] __dev_queue_xmit+0x14d9/0x3950 [ 823.704186][ C1] ? __asan_memcpy+0x40/0x70 [ 823.704206][ C1] ? __dev_queue_xmit+0x2b6/0x3950 [ 823.704224][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 823.704241][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 823.704270][ C1] bond_start_xmit+0xd5c/0x1900 [ 823.704293][ C1] ? bond_start_xmit+0xb4/0x1900 [ 823.704314][ C1] ? __pfx_bond_start_xmit+0x10/0x10 [ 823.704330][ C1] ? __pfx_netif_skb_features+0x10/0x10 [ 823.704353][ C1] ? __bfs+0x13a/0x290 [ 823.704369][ C1] ? __pfx_usage_match+0x10/0x10 [ 823.704395][ C1] dev_hard_start_xmit+0x2cd/0x830 [ 823.704429][ C1] __dev_queue_xmit+0x14d9/0x3950 [ 823.704446][ C1] ? unwind_next_frame+0xa6/0x2550 [ 823.704469][ C1] ? __dev_queue_xmit+0x2b6/0x3950 [ 823.704488][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 823.704512][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 823.704531][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 823.704552][ C1] ? skb_network_protocol+0x23d/0x400 [ 823.704593][ C1] ? __pfx_netif_skb_features+0x10/0x10 [ 823.704624][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 823.704645][ C1] macvlan_start_xmit+0x3ba/0x600 [ 823.704673][ C1] dev_hard_start_xmit+0x2cd/0x830 [ 823.704711][ C1] __dev_queue_xmit+0x14d9/0x3950 [ 823.704733][ C1] ? __dev_queue_xmit+0x2b6/0x3950 [ 823.704752][ C1] ? ebt_do_table+0x2665/0x2830 [ 823.704775][ C1] ? ebt_do_table+0x2665/0x2830 [ 823.704799][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 823.704828][ C1] ? __br_multicast_send_query+0x3e72/0x4630 [ 823.704849][ C1] ? lock_acquire+0x106/0x350 [ 823.704875][ C1] br_dev_queue_push_xmit+0x370/0x4b0 [ 823.704906][ C1] __br_multicast_send_query+0x2f4a/0x4630 [ 823.704928][ C1] ? __br_multicast_send_query+0x3e72/0x4630 [ 823.704955][ C1] ? __pfx___br_multicast_send_query+0x10/0x10 [ 823.704972][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 823.704996][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 823.705017][ C1] br_multicast_send_query+0x509/0x6b0 [ 823.705034][ C1] ? __pfx_br_multicast_send_query+0x10/0x10 [ 823.705052][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 823.705075][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 823.705097][ C1] ? call_timer_fn+0xd4/0x5e0 [ 823.705114][ C1] ? lock_acquire+0x106/0x350 [ 823.705130][ C1] ? call_timer_fn+0xd4/0x5e0 [ 823.705149][ C1] br_ip4_multicast_port_query_expired+0x2ab/0x380 [ 823.705174][ C1] call_timer_fn+0x192/0x5e0 [ 823.705192][ C1] ? __pfx_br_ip4_multicast_port_query_expired+0x10/0x10 [ 823.705213][ C1] ? call_timer_fn+0xd4/0x5e0 [ 823.705230][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 823.705251][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 823.705271][ C1] ? __pfx_br_ip4_multicast_port_query_expired+0x10/0x10 [ 823.705294][ C1] __run_timer_base+0x652/0x8b0 [ 823.705321][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 823.705338][ C1] ? sched_clock+0x3f/0x60 [ 823.705362][ C1] ? sched_clock_cpu+0x74/0x440 [ 823.705382][ C1] run_timer_softirq+0xb7/0x170 [ 823.705399][ C1] handle_softirqs+0x22a/0x840 [ 823.705416][ C1] ? do_softirq+0x76/0xd0 [ 823.705433][ C1] ? dev_mc_add+0xd0/0x120 [ 823.705446][ C1] do_softirq+0x76/0xd0 [ 823.705462][ C1] [ 823.705467][ C1] [ 823.705473][ C1] __local_bh_enable_ip+0xf8/0x130 [ 823.705489][ C1] dev_mc_add+0xd0/0x120 [ 823.705504][ C1] igmp6_group_added+0x234/0x820 [ 823.705526][ C1] ? __pfx_igmp6_group_added+0x10/0x10 [ 823.705548][ C1] ? mld_del_delrec+0x35f/0xcd0 [ 823.705572][ C1] __ipv6_dev_mc_inc+0x897/0xa50 [ 823.705595][ C1] br_multicast_join_snoopers+0x164/0x1c0 [ 823.705620][ C1] ? __pfx_br_multicast_join_snoopers+0x10/0x10 [ 823.705642][ C1] ? br_multicast_toggle+0x3e9/0x450 [ 823.705669][ C1] br_multicast_toggle+0x444/0x450 [ 823.705695][ C1] ? __pfx_br_multicast_toggle+0x10/0x10 [ 823.705721][ C1] ? __pfx___mutex_trylock_common+0x10/0x10 [ 823.705745][ C1] br_changelink+0xa4c/0x18d0 [ 823.705768][ C1] ? __pfx_br_changelink+0x10/0x10 [ 823.705792][ C1] ? rtnl_newlink+0x883/0x1bb0 [ 823.705813][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 823.705831][ C1] ? ns_capable+0x89/0xe0 [ 823.705848][ C1] rtnl_newlink+0x1607/0x1bb0 [ 823.705873][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 823.705893][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.705922][ C1] ? kasan_quarantine_put+0xbb/0x1f0 [ 823.705943][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 823.705967][ C1] ? nlmon_xmit+0xb0/0x100 [ 823.705987][ C1] ? kmem_cache_free+0x182/0x650 [ 823.706014][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 823.706032][ C1] ? __dev_queue_xmit+0x2b6/0x3950 [ 823.706047][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 823.706063][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 823.706086][ C1] ? __dev_queue_xmit+0x2b6/0x3950 [ 823.706100][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 823.706114][ C1] ? __dev_queue_xmit+0x2b6/0x3950 [ 823.706131][ C1] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 823.706157][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 823.706177][ C1] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 823.706198][ C1] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 823.706218][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 823.706237][ C1] ? ref_tracker_free+0x693/0x840 [ 823.706261][ C1] ? __pfx_ref_tracker_free+0x10/0x10 [ 823.706286][ C1] netlink_rcv_skb+0x232/0x4b0 [ 823.706314][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 823.706335][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 823.706361][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 823.706383][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 823.706406][ C1] netlink_unicast+0x75c/0x8e0 [ 823.706430][ C1] netlink_sendmsg+0x813/0xb40 [ 823.706456][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 823.706480][ C1] ? aa_sock_msg_perm+0xf1/0x1b0 [ 823.706502][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 823.706524][ C1] ____sys_sendmsg+0x972/0x9f0 [ 823.706551][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 823.706578][ C1] ? import_iovec+0x73/0xa0 [ 823.706602][ C1] ___sys_sendmsg+0x2a5/0x360 [ 823.706624][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 823.706642][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 823.706667][ C1] ? futex_wake+0x4ac/0x580 [ 823.706698][ C1] ? __fget_files+0x2a/0x420 [ 823.706717][ C1] ? __fget_files+0x3a0/0x420 [ 823.706739][ C1] __x64_sys_sendmsg+0x1bd/0x2a0 [ 823.706763][ C1] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 823.706790][ C1] ? rcu_is_watching+0x15/0xb0 [ 823.706811][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.706828][ C1] do_syscall_64+0x15f/0xf80 [ 823.706852][ C1] ? trace_irq_disable+0x3b/0x140 [ 823.706876][ C1] ? clear_bhb_loop+0x40/0x90 [ 823.706893][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.706909][ C1] RIP: 0033:0x7fc301b9ce59 [ 823.706926][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 823.706940][ C1] RSP: 002b:00007fc302a6e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 823.706958][ C1] RAX: ffffffffffffffda RBX: 00007fc301e16090 RCX: 00007fc301b9ce59 [ 823.706971][ C1] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 823.706981][ C1] RBP: 00007fc301c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 823.706992][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 823.707001][ C1] R13: 00007fc301e16128 R14: 00007fc301e16090 R15: 00007fc301f3fa48 [ 823.707020][ C1] [ 823.910968][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 824.321217][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 824.712626][T20040] bridge0: port 5(macvlan4) entered disabled state [ 824.712807][T20040] bridge0: port 4(macvlan3) entered disabled state [ 824.712931][T20040] bridge0: port 3(macvlan2) entered disabled state [ 824.713045][T20040] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.752887][ T9284] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 824.881285][ C0] ip6_tunnel: K xmit: Local address not yet configured! [ 824.902144][ T9284] usb 5-1: device descriptor read/64, error -71 [ 825.021471][ T9284] usb usb5-port1: attempt power cycle [ 825.370776][ T9284] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 825.391706][ T9284] usb 5-1: device descriptor read/8, error -71 [ 825.630754][ T9284] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 825.651731][ T9284] usb 5-1: device descriptor read/8, error -71 [ 825.762390][ T9284] usb usb5-port1: unable to enumerate USB device