last executing test programs: 1m39.580470466s ago: executing program 1 (id=117): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="30000000200025a726bd7000fddbdf250a0000cdff0000010200010008000600000000000c000c00e5"], 0x30}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb0100180000000000000014000000140000000c000000000000060400000009000000000000000000000000000000002e2000"], &(0x7f0000000080)=""/159, 0x38, 0x9f, 0x1}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r2, 0x0, 0x0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r2, 0x58, &(0x7f0000000280)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={r3, 0x9, 0x10}, 0xc) ioctl$XFS_IOC_FSINUMBERS(r0, 0xc0205867, &(0x7f0000000740)={&(0x7f0000000000)=0x1, 0x2, &(0x7f00000004c0)=[{}, {}, {}], &(0x7f0000000700)}) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0x2) poll(&(0x7f0000000000)=[{r5, 0x40}], 0x1, 0x82) ioctl$RTC_RD_TIME(r4, 0x80247009, &(0x7f0000000080)) 1m38.148093203s ago: executing program 1 (id=122): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a80), r0) unshare(0x20000400) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) file_setattr(r1, 0x0, &(0x7f00000004c0)={0x118ba, 0x2, 0x80000002, 0x800a1ef, 0x203}, 0x18, 0x1000) 1m37.926503445s ago: executing program 1 (id=123): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @empty, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xdd}}], 0x38}, 0x0) (fail_nth: 7) 1m37.56597359s ago: executing program 1 (id=125): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0xc0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='-0'], 0x6) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000400)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000540)={{0x2, 0x6, 0xcf06, 0x9, '\x00', 0x3b0}, 0x6, 0x10000000, 0x7, r1, 0x1, 0x3, 'syz0\x00', &(0x7f0000000440)=['\x00'], 0x1}) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) setrlimit(0x4, &(0x7f0000000080)={0x4, 0x5aba7a50}) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa8d, 0x156, 0x1, 0x1, 0xd59f80, 0x19f5, 0x4, 0x19ef, 0x3, 0x5, 0x27fd, 0x2800, 0x440, 0x3, 0xf, 0x7, {0xb, 0xffffffff}, 0xcd, 0x7}}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000004c0)) r5 = dup(r4) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000040)={0x0, r5}) r6 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r6, &(0x7f0000001a40)=""/102392, 0x18ff8) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0xfffc, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f000001d000)=[{{&(0x7f0000000680)={0xa, 0x4e21, 0x3448, @remote, 0x3}, 0x1c, &(0x7f000001bd00)=[{&(0x7f00000006c0)="5f061fb8067be6eeeb93dd739f6a20bcdde478b47cf33c1d5b48308a8a7a7d2df9a69a9928b5a1f97af4de7df62d3ef3cd88d4e673f143a445b9c24666a696ca4f81f0a11c7c298a49154d8d87b77bba754e102777f9ec8ffa7fbc9915b4459b077208038164b8d4941856771ecb5a4cf16211dfb611126ae8b61c93213907d1b10ed33bb80959eafff651b4d0991823f1bb2dd90d0af6d0e5bbc1620af9ad16a94ecf603181afdd697f94b273c487b2547350e07dc8906f051b82340157243a883f7d11e4dfd06c0960175bec4ef9e6151dc0a9af4c3dbd7f2203113e35a75260733dd30a2509fffda5734a7e46e97646b3682ea0", 0xf5}, {&(0x7f00000007c0)="0cc848f3610070c58e74e7c553db6afa660f921a19b89a4a39a9f996a2b4bfe3871e04e0489840fa97887804305e28deabd1616f016304f061bdd2cfeed2c6905423d0f72df34003486527e4b6d76191c38dd63dbed386ce9a87f35b5df741fe7327ec3a6f853d97522e04c9fc361e806a986ecdca8c95879c82416bf8149f9c6b6a05eaef7385d7ff9cf966f32531bef3873a", 0x93}, {&(0x7f0000000880)="eaf3422e129a2177d0a5aaeeff4f4edc2cbce38275d36822ac47cc7c9de0086b0c2b8140846368596070419272a0b4a07c0ecc247585746552453f0f2f0c64657a2e4fd1c41adec1fc0829a49d99471c1ce4f424442363931e34ea6e7f3fd081777241f757ce8f1277c35d5f1ead32c672981d5d6173b84bb1982f13bddd21fdd80933b4a3b5cb88d5bfc6416aa531efb27ffbafb726a2418d0697097a2dde75f702263a83bf7f45ada92b6559856fdb611ad1bd6941753861774f9d6a82c691fee9421f243e7da3c101ed5b043bb831c9e5d4ba40f9d743", 0xd8}, {&(0x7f0000000980)="519a8ca58f411b7bcae280bc395479c99b22f94748b98f2e371b6921990d1a904ae7fb182e66525fd3826d5736ca7678b6cda1c959a33a7532cf2f174b0219bbf87c8607ca96a20af4aaedcc55b1a7c78815b2954e06149d8a4406c7202df489970a906c0fec6d70dd032c9787cf3bfb5ba350466b362c3d220d7d2437abfbfe7b586e33603f0da022fd522d596304efabd0", 0x92}, {&(0x7f0000000a40)="9721c11058884f3ef0e042f2129271b979c70c6e3edf3c49bbb6b3b148bf3545386049b1c688959bf5de20dd9d56f42ad6c79cbc586773e0ff0d299b1ab96385c85775630d8de58944ab4f9fafd8cc5852a8ce3aeb0aba5acb6d3f9890cb8337578d5e29e47719e89d27107f761ef4537b028fce50e2ae97276d4b9631", 0x7d}, {&(0x7f000001aa40)="8ad9a3f4cf13dfe417004a2a0a245c4c391b4d00070a3ce729623d604114ee5831aeb887b73845b9c88e044ef38b754f273ec1688e2c2758497641a733eb0b4561e8d10fbda623ebd61c3f3555e03f2bd5a396def53c1a66bc995e8e82f903f1e6ec096a44f751c845c3c2367e6529315f785b4fbd2ef5f4dd55eafdcba74a5f1c239015f56674daa12f808c8cd9f545a819614574c0e1afaf3173b492c733eec845ec81f4b3458e8ffac6e3beac24b07488320ecca44991a31e83be77e473100fcbece1dfbcfa9214e97ba8daeb3adbf8094fcc319ca05d4da10a6e4de19e3ef16f062faea4556bf2fb81fd76b2c95b418b4202dfaf00eea764697a24a80ea6d277b147f5f3233c9dbf76c6c40f581be8b01326b44f588d8e4365a4b07900be670bd9b7427d429d5f79ffa8e308a6ed4274cddcc535dc06bab5e9098aacbd3e34fcf8016265700d85dbc7db33d87a4c60ddb3b4907adf78649fb7622f9d28f8bb03dbb14817d528804de345899a286a4446bf8cd79b2e1b3ebd7990d748bfcd6bd4ab2a7fd479f70e984e6783d271e10126173a02c2bb268268b8963f2227fb5946a3a54b3be10fa438c97d45fed6205b3923f0ad8b3a14ca8a55693404185bdcb1aa3f8bf0dcf48da299db2caa44b21dafede9340d155e9603954c321368d2fcb91aa85481db903e8f941c00be9b1806fedd440feaee1021a6adcabcabf801bc8a3c088a744bf5cdc84206d118d3e46d6f330aae68d32349c65a917f279520735d1320b49ad89c38dde2157c7dd252673645c4c1fcd70d0b9f1290736640fd7ba09db254df1d7a2dcb3460277eff3841c3ca49e310fc977ad171f9bf58be052503d282c76f5ff778afcac1868cea62140804e2bb84ffff8abeae255a78f25a18fccd77c51c54f7a9430c6c1c4d97e60c2c3d3957a62dc36e4f4081528f17d3c9d236d5e126ad9242c19e0e767e4dfd9ff02499e266a19ea902c74c7749f0bc0c65a367e7ff5380d88dc1d4cf5e3577d33701686e80e4b94a789f6482770961d6aec5e24fa8e8b78d16902226275911eb5efe8e6836318bc2b14426e333ac635ef27fd2f754797d0ae8896b77e15b6c89ef9808add406ef145086b9eb4528e3af595113c7a8fae70dc56f347cba038d2ac32945bd54f7253e424b2ff61bbcc3c16d66f3691767ca098d9c88423cc28189bda27d6155cec4de964659083524d2b0f30bbf3c074d9a56f19836091773a6b5382a87d11ffced3add537b3b864a516dedbf465ffd225e788966912e016634cee6d992aca1220fac934c9618d98bcce2042e9f9fc7b3b39e352b7459cddb77b17d86c64fc19e1131f923cdab9f7708007aa16cb0b78e22eb8c4850e6a0b43402cbf17a03161b923d511e991c8e2ba14c7f62813de878f35298df2337f4580b88eee9c8a40bce6a2046add0444e23b3578e044ac94a45d5c48c2f8a25b953089d82e22d5d326943086051be708f3c381e342f24f889c99391ae2cb36330f746939d438520dd0791eba311a148e58cff46446b7dc799e535b5d25f4cee9233c2c19fb175de58288970b65859343a3e7e0cc5c62df2ad4a9b8d209d1771dc1a9241e4fdb9280f2b9661b082175e9e38e704c959de21aabc35cb1cf2d0f90ed8b187b3b28142370b2efd8b19d9f86effe1d46c982e71c91b50dae1f373151812cc8fac4e11b09b5f2e84102eeacc18d2017b83ff4e36aeb816c1fcbbaa5995018c11055c5df1afb718e099b2a3c9d8facd30cf42b697580dc5d54abe3ae6b47538ce89b8b9276aabe743931931b24ec822debec3caef529d102bbe54234f924bc2a37c28e6b06be8efd78bd8a7d41576606e40e9ca2db0b241d1ca35211ca5071070209d9da5dd43130c3113af2b6d91cef4597f932e089495a87cc538c9a1f7775e45d3d3b3f824a8e7faf943809bf591b44171a9c957d63371fa21cf3a90a7c86da5cd7301f89c5eec13da885c99bfc9ec93f7c56223f7385bd0e5ffd1612c63aa2d0f163318d0fb78174ce9ecb5d19a1feda71b99a90114bc99135c16baf0889e77e9fa83408efae6203afca939eac3bf9b6c8a19fd36b61f1c47380240be883aa60ad16e339cf2f41478f630a4e76e79d14bbc5a130e30a2472be0a42f0dc9b30a62ef58b967ba5821e1d7147180573cfc285781db1d4a1c6e0773ff8ec6799f6585138b8e63cf0a4f8bffc2c79b4c3c44e9d99e3e8ed47b20dcbf47884a792b60bbede04842f093ef6351af4847538fd3a1da851ed195abeb544aa4847919bddd21249ffd72b4db554c0986ec544f0662909c1ef9cde83517841ffdd4a49313976fcfdb339bde94c3b8925f77c9c5fd9cc9c6fdca8b2d0d19c73db854e052672f1817a269b4e2db6d722ee45e6173a715abd6b0194e85ced7643b7b1f77933ad0638573c23272cb14f348965539fc4d65a4dca7cddb1b1b8438acd8c3cc2ca7bd54949a44939767a234a5d63b28c25193842b7b2a68670fe7e5710409566f212b528ef366410bbbbc21244ea311e2354c38d4b87409429c4c95f6ef273e10048a0ed9f3e009a25b4b59d48bd18f41fc9fb4bcc244a425ccc5f9e595c353ac5299a1da8955576e6d2ec3a59742557b496e175245ee0d183a522a4905248015dd488cc84530051428c51d07986ca658d881a811763d0d9e732f789c9bd2aef7cb2f49410806e8a5730dbe5834733412d3fd619c7f8d756ca8c9e4d53867873ae59a396ea440de975e20c8f2ab4a23d5abe6c3472036fe5d5ea0a53bcfdbd5bfb97be95fced4c13680c81be4d671b12cd5ac7a2ddc4af5a46dede42ed83e1ea6a11bd9a6d4432cc82ff50c9545988db8bf9e82b6b8917def674da20606039ed2f061aab8444b26e07f5cd0d127d6a3755dc847ec37f57bfda5ce1838df3f2bb0591f46bb14466ef062d6493f30daeafdab711527d6299729bfa2835b144a59cae8077022ef5e36993945bc2a897d32cc7d9d55fcee9786f9b6990e67d5a50b0885ab5d6f0cada8663a1b293fbb867cbc1105a00ea4637b218330381c965fe546be5d94349fda0c18eefe2f3b63371feb3cb508e77f96da64c54fcc06e17eed60728feb42e5c27e085c0c1b941d7fba170d8774bf8c75d68a83b36a6c762563e0b3cd0b624493ebdab2abaa2c27242bdc22491807589cbdf74d04e718b87b04c5c4457b566078288967267f43a5a1031b426be1d671607139e1f633c5ea26ebf4e8d8b624206d73595dd97b8664677646e89b375ad293d1f5b8e3974cf19f6ade46c04ebbae6a6846129817af8d183b7815fefbee89f0628a749a822203fc0691bbff06af6c6ac0feccf3475a963c0dab5e6d32eb4d58c546801eb7c133dfec54f8d02b496230a241b5d7be5d0be6874154be8016e315ef44b3d0121966f99681471fde94efad05d66ddc04c3ed26a1e2e67219567844ffd9dde7e4c5ffb6e37184de90913dd705489389f5644836f936ce89e13130f3dab85a875521b99d94975f9a4fbaf09189ff4fa0bb03d81d7d3b615bdf829f52315e0a2b4746ffd61cf60b6c8a200e414130050c5d1c8ced8dd8c226e1fae4d6e5d1534cfbb7aa2ddbe9b57cd985174ff8d059a9e9df0f0dfb97dbab1fd65b1fcad2fa03144b623a2730c1d2fa062f94c951bdd4c76ebda2cb408ac0ee2b05a30fd534f6c7efedabbedd93eea4d032b5b891808130c8ba91b5c6303db6be40ea59284b6ef94d5e340ffd0c08257737733944a251f0de97d7554a1d40bd633edd2d4810ce0f9d9c3696e1619b79945c5206511bfc0f42f351f741f25d47b5bd86d7c578f137190d47f089e9569409b4afdd391e99126d423183610fdada7e28c3d0bbe2a1f1ca0a543f7fe12cf9eeded85a14d484c610a7355aa59dffa8f41d6bb30c3088bc5162be643b99f6907e5dac6a1f5d3a66ab7d1fc159ac14530ab7e8a60780d2133e9b794d0067ae68c6bc62de41dd6ee019366544e9702a3b66fbeeda7b83c416600473eeae64e70e646946f97d7da4303c708d164979d9d953a2ec8b1756a4ec80e9c267908505164fa32e2d76fbb33a6c91f1c6014875c51630a3ef9a88b3471aefa5869e9fe662d62bb443b701c6f55db4d47af7994463f70a0868f127399ee17d02b59b0b6bfb6bcea62440e1277d9db5d8afabe05d890385bfdd7bec9e1e133ffae3b240f80cb41f7e84a4b8bf4cce561af34ef61c42e1617af55e58d65a464d2f867c323a233daecb058693a0fffcb19296943d6142dd04cd1d0de4e69d2d093db6a2c57c9397a2234121e9344caa7704a04aadb34d09c25c86470741ff6662619046373ca591e1bd31399075365c7594af1c8a49df98ba971a39c9338f99b7cbfda383c0e42cf884ee2a1c3fc8ef7e81af500a4469aeb69ba503a8c5eb2f138c8422b504f9e895e41d9024b3c0796d769a2ab66700fa25880080c2f76be5996dda7c7d22fbdd652873484472935727ea3c614abfbcbdf5f6863eba16125897dc043bc9934a938bd45a26c5efa75c8349423f5bf996010fdd7c5837a8176b4874b5439a842dbcb83e515dfd1c67d9a4f5c013f0f7b64d9f79a6d013b20caa026618ff571b9379559abf97b048b4f21da27aa4bcef9e621bdc141554a23d9c334773f72fb7f69f300a1f390af429917e007ea8ff0d31511d79e8ba13204e5af2688d8aa142bc02b8a096a5e119af4298e6c39f2012bace55b27913db814041b0b41491498337bd7114abeebe8f4436cf11719ba32bb40297ac911eb2d9912aaee2bd48469ac2c65b20ba023d0f71684ed5e63136090eb1d13beb9d6237f25bf3bb7702d81f2ebd5c04cadeeea310a14bde564aa7b989f6cb40a4f70d5ad397ca1699a14858232604ee7304e2ea5382e6ae267e15a3e7ed8016ebb0cab270911eebd9c84572483a303c53780b7114a85c0f75feb95f9a5e5fa7d8da114437567f2a935ff953cde201e330a8970910c17e7d5db143bb139e82be8ce7d14f2a31f4d33e8510b85a6c093f1cf53dd240f374e3f35354b9ba7b5f0d860cd72907698b62b3bfa10cc151d0a21ea1795feea575e5b683a6e3231e7caeffef7b3b60fd721e62f5da4450699a5b380cb3db7ef1d3464851f38c603b8b8f2190d55bbd4d7386b4361737c35625d9cd7a53fe84092f4e2d6afc94a38423e168c2433d75d3c9df1c1e6ddc9bf06e02757c13999467f0a3d8014bb7b7e854773d93117e3dc76c4882da0b8ce5817bb96ac136d54a51197a66a3e5b207d9c1a9f21ccace1a670f6bd1dc820f8c7cd19da710648b2cdd07b816902f456d6dc330bd166f7657ae16378cf320b43c0087d2f01c4ca49b5f40bc8cdd1eb611c3d88821ebbfa961a89e83b927458d4e9f72dde452d779abad7b37139a7ea6ba6a498597549d543e89672a268ed8827572bab06b83293e02ab5f4c75a3b7585961ca777331538609f10b8de50e9f3a5d79b93c46af38302e7ea0ecc21fe579a66b45ae718daff177b139463e7808ea2b9046abc82c84ffed3c4ef22fb3444989e1d00d93e09ba2587671bcd8ceacb8965c25ba8749dcf3800eb98d7f3c3128abf1a3e71550fe53da451c05342184837529fcff66fc2355b40cd9dee32505bf8e7d2d0cd81c9ac700f834d6c2ad3ea87962f97bab302b3b36693cf59c07e691c05db7bd3a094856e71f997fbaeeaf5d02ca718d0eacb98018a28c6c8234ada9aa08402bc9fd771f3c6675da5dd53642dc15b24c8c04d5132c4856c402cecb2c7aceb65e8daf05470ac99955ff580cc6e1eaa69dfda3c5b2fd9a99dd28e0", 0x1000}, {&(0x7f000001ba40)="d51a928a7cc8609482d6f2ac6ff6843a5b44fb200b3a6448886f693f28c9b2d8e037452317fe62622351de72d3d73fe5b0ab62a4ae60efe4ec952c9a9332c3668a9eccb79f558b68789e02b2d0c0069a5a83eeae0c408a47cd5c283f7fb2d0d7130a24a902853cf0f32c1c825a818191454cdbf4c92b7c44ad8c645628ade5be01b81e8f3c58e0a328938d14fb5dc915b456fb872b1b1ed02f476141bf41e12d9c44613eef6ea10f0049581309e481822e5f2c394ea2dcbed8c2718006a667455641af21202af64885eb0f468dc0932b25c2abec00d2c27155e0dc7d43873d1b", 0xe0}, {&(0x7f000001bb40)="6857d2f07a3bb328a085dd57a84c6b5d6ef23b31251282afe52e9e7a34a41a64b36d1a1d6113d225d149942b7367a70bafd72164bfd53e62d0cb25074713e365e6dfb49c0ce60b289084b617524abd1b98fa91aa0fdd5a6478f07992a92f3543b642039e784c16bcba7315a836203b0950e1de5837c8c513a66928196765d1f71f0293497b525b4136dfb90f49904f51d4e132b3ba90e0ef3b67d327edd6f4bd69a3bba2", 0xa4}, {&(0x7f000001bc00)="cadd5f12d97505ac814a143b451cf21bc2415944e7aae6c1e9dc22cd749541eb2030ee78d83e5256cbab1ae2eeafc88dc89544318f722516757d37a17d21daddf79305891c904156a8ab4576df032263cf344c4d4f1059329ac787c7d3bba52ba38abbeb00a015196bd494930859b7304f3086169eb56009a667b7492251be913d9e948ba044a63229116dee33c0ee7f54597ff33f33b493710827f75eca35af9c37060d021dfa5f7069bcf2e1e463aa0ef75cb031e608a94acb9d429b73a9325abd85b75b7c50cc33e77cf40039112a3f9ca9e6f57d50b3c686184273da0dba71839dee6375ab60f1025a66dbd1eabb9a69ff91", 0xf4}], 0x9, &(0x7f000001bdc0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x8000}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}, @dstopts_2292={{0x1048, 0x29, 0x4, {0x8, 0x205, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x94, 0x14, "d16420a09fa4bebaf5ce93015fdf412ed470f61c"}, @jumbo={0xc2, 0x4, 0x5}, @ra={0x5, 0x2, 0xa0e}, @generic={0xe4, 0xf80, "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"}, @enc_lim={0x4, 0x1, 0x8}, @hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x6}, @generic={0x6, 0x67, "b1d0b2856117ccdec4c5eb50d4aad2c55f92b046918a42b4af2d74a1758c74a27e1646351d47b0242cbad5d01b44264d0bd70ed5290ded8edecadcc8f20a376e2211362891d2ec84995205f50c645ac9b433e069999bdf9a9a0e2a6733658607c261e067a7b255"}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}, @rthdr={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x0, 0x8, 0x0, [@remote, @mcast2]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xf}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x3c, 0xa, 0x2, 0xfa, 0x0, [@mcast1, @mcast2, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2]}}}, @tclass={{0x14, 0x29, 0x43, 0xfffffff2}}, @dstopts={{0x30, 0x29, 0x37, {0x6, 0x3, '\x00', [@enc_lim={0x4, 0x1, 0x30}, @hao={0xc9, 0x10, @mcast2}, @pad1]}}}], 0x11a0}}], 0x1, 0x4800) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f00000000c0)={0xfd, 0x0, 0xfe, 0x22, 0x0, 0x7, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3}, 0xe) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x61, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x144, 0x10, 0x713, 0x70bd22, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a}, {@in6=@remote, 0x0, 0x32}, @in6=@mcast2, {0x0, 0x9, 0x6, 0xa, 0x6, 0xfffffffffffffffc, 0x0, 0x3}, {0x0, 0x1, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd2d, 0x0, 0xa, 0x3, 0x0, 0xac}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x100}}, @tfcpad={0x8, 0x29, 0x4}]}, 0x144}, 0x1, 0x0, 0x0, 0xc0}, 0x0) shutdown(r7, 0x1) 1m36.629054628s ago: executing program 1 (id=128): syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) socket$l2tp(0x2, 0x2, 0x73) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) syz_usb_connect$cdc_ncm(0x8525f5e3be18bd75, 0x6e, &(0x7f00000002c0)=ANY=[], &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0}) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x2, 0x5, 0x0, 0x81, 0xffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(0x0, 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f00000001c0)={0x0, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000080), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 1m29.244725843s ago: executing program 1 (id=151): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) unshare(0x2a020400) connect$inet(r2, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000003c0)={0xc}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000005600)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2b, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4a, &(0x7f0000000040)=0xe7, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x801, &(0x7f00000001c0)={0xa, 0x4e20, 0xffffffff, @mcast1}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000740)=[{&(0x7f00000000c0)=""/30, 0x1e}, {&(0x7f0000000400)=""/197, 0xc5}, {&(0x7f0000000540)=""/17, 0x11}, {&(0x7f0000000640)=""/239, 0xef}], 0x4) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x6a3, 0xccd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8, 0x4, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x420, 0x3, 0x81}}}}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000300)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB=' 16'], 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000600), 0x80000001, 0x121240) ioctl$FIOCLEX(r0, 0x5451) syz_emit_ethernet(0x8a, &(0x7f0000000780)=ANY=[@ANYBLOB="05a9caf9c90e441a1fd57503d4cb", @ANYRES32=r0, @ANYRESDEC=r1, @ANYRES8=r1, @ANYRES16=r5, @ANYBLOB="3196fcf77a1504c1c4a4525a451121c7f197393642d80be856fce3aaca39dbb47e33c346a7528fb75779e05a759ba1b4f397134d9ef4903c36e272a79ca3705120fefcb133ae1a2a880eb0c46e75ed6e0f95cd6f3c07eca193af3d91401dceee74bc40272d616bf7b3ddb45d44ef61daea3214d88e78cb7d696dc0980afe7d7239c0e2f78a16e15aefd46fdecf1cfae349dc69002c898aa8891d2f52eba7db116bf075ecae0792c02c6a294edd35d729438f5cb021685163afa7f2a4bba6a688e453c876921c87aa3d018ed507a77bd0a5c4ed18331ff46f04ed604c4a4f", @ANYRES32=r1, @ANYRESHEX=r0, @ANYRESOCT=r5, @ANYBLOB="7d08f845a62b96d4ffb924072ac768b0f7fb502bc01f99ebe43823f80c1a2d3eccaac1138f0ddf27e4027b56fe4eb919ceec858d"], 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x1, 0x0) write$vga_arbiter(r6, &(0x7f0000000040)=ANY=[@ANYBLOB='trylock m'], 0xc) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) socket$inet6(0xa, 0x2, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x81, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r7, 0xc008ae05, &(0x7f0000000140)={0x28729f328c68897}) 57.968025439s ago: executing program 4 (id=234): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000b40)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x4, r1, 0x0, &(0x7f0000343000/0xf000)=nil, 0xf000, 0x8000004004000004}) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000003800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3eb4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000240)={0x28, 0x5, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000000265}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r1, r1, 0x3, 0x902f, 0x3fff}) 57.441367622s ago: executing program 4 (id=236): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = getpid() r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000002a000701fcffffff20000000057c0000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0xc000) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000001c0)=r2) sched_setaffinity(r1, 0x8, &(0x7f0000000380)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x267, 0x4959, 0x101, 0x0, 0x0, 0x6, 0x1, 0x100, 0x8, 0x3fe, 0x8, 0x1000, 0x918c, 0x91c, 0xfffffffffffffff9, 0x3], 0xfec00000, 0x400}) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x0, @void}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3400000044000701feffffff00000000037c0000040042800c00018006000600800a0000100002"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) pread64(r6, 0x0, 0x0, 0x5) ioctl$XFS_IOC_FSGEOMETRY_V4(r4, 0x8070587c, &(0x7f00000004c0)) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x802c, @mcast2, 0x5}, 0x1c) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r11, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r7], 0x4}}, 0x0) sendfile(r10, r8, 0x0, 0x100000000) 56.886824939s ago: executing program 4 (id=239): openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x40c}}, 0x0) r0 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064d1, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000100)=[0x0]}) 56.643772691s ago: executing program 4 (id=241): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0xc0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='-0'], 0x6) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000400)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000540)={{0x2, 0x6, 0xcf06, 0x9, '\x00', 0x3b0}, 0x6, 0x10000000, 0x7, r1, 0x1, 0x3, 'syz0\x00', &(0x7f0000000440)=['\x00'], 0x1}) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) setrlimit(0x4, &(0x7f0000000080)={0x4, 0x5aba7a50}) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa8d, 0x156, 0x1, 0x1, 0xd59f80, 0x19f5, 0x4, 0x19ef, 0x3, 0x5, 0x27fd, 0x2800, 0x440, 0x3, 0xf, 0x7, {0xb, 0xffffffff}, 0xcd, 0x7}}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000004c0)) r5 = dup(r4) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000040)={0x0, r5}) r6 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r6, &(0x7f0000001a40)=""/102392, 0x18ff8) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0xfffc, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f000001d000)=[{{&(0x7f0000000680)={0xa, 0x4e21, 0x3448, @remote, 0x3}, 0x1c, &(0x7f000001bd00)=[{&(0x7f00000006c0)="5f061fb8067be6eeeb93dd739f6a20bcdde478b47cf33c1d5b48308a8a7a7d2df9a69a9928b5a1f97af4de7df62d3ef3cd88d4e673f143a445b9c24666a696ca4f81f0a11c7c298a49154d8d87b77bba754e102777f9ec8ffa7fbc9915b4459b077208038164b8d4941856771ecb5a4cf16211dfb611126ae8b61c93213907d1b10ed33bb80959eafff651b4d0991823f1bb2dd90d0af6d0e5bbc1620af9ad16a94ecf603181afdd697f94b273c487b2547350e07dc8906f051b82340157243a883f7d11e4dfd06c0960175bec4ef9e6151dc0a9af4c3dbd7f2203113e35a75260733dd30a2509fffda5734a7e46e97646b3682ea0", 0xf5}, {&(0x7f00000007c0)="0cc848f3610070c58e74e7c553db6afa660f921a19b89a4a39a9f996a2b4bfe3871e04e0489840fa97887804305e28deabd1616f016304f061bdd2cfeed2c6905423d0f72df34003486527e4b6d76191c38dd63dbed386ce9a87f35b5df741fe7327ec3a6f853d97522e04c9fc361e806a986ecdca8c95879c82416bf8149f9c6b6a05eaef7385d7ff9cf966f32531bef3873a", 0x93}, {&(0x7f0000000880)="eaf3422e129a2177d0a5aaeeff4f4edc2cbce38275d36822ac47cc7c9de0086b0c2b8140846368596070419272a0b4a07c0ecc247585746552453f0f2f0c64657a2e4fd1c41adec1fc0829a49d99471c1ce4f424442363931e34ea6e7f3fd081777241f757ce8f1277c35d5f1ead32c672981d5d6173b84bb1982f13bddd21fdd80933b4a3b5cb88d5bfc6416aa531efb27ffbafb726a2418d0697097a2dde75f702263a83bf7f45ada92b6559856fdb611ad1bd6941753861774f9d6a82c691fee9421f243e7da3c101ed5b043bb831c9e5d4ba40f9d743", 0xd8}, {&(0x7f0000000980)="519a8ca58f411b7bcae280bc395479c99b22f94748b98f2e371b6921990d1a904ae7fb182e66525fd3826d5736ca7678b6cda1c959a33a7532cf2f174b0219bbf87c8607ca96a20af4aaedcc55b1a7c78815b2954e06149d8a4406c7202df489970a906c0fec6d70dd032c9787cf3bfb5ba350466b362c3d220d7d2437abfbfe7b586e33603f0da022fd522d596304efabd0", 0x92}, {&(0x7f0000000a40)="9721c11058884f3ef0e042f2129271b979c70c6e3edf3c49bbb6b3b148bf3545386049b1c688959bf5de20dd9d56f42ad6c79cbc586773e0ff0d299b1ab96385c85775630d8de58944ab4f9fafd8cc5852a8ce3aeb0aba5acb6d3f9890cb8337578d5e29e47719e89d27107f761ef4537b028fce50e2ae97276d4b9631", 0x7d}, {&(0x7f000001aa40)="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", 0x1000}, {&(0x7f000001ba40)="d51a928a7cc8609482d6f2ac6ff6843a5b44fb200b3a6448886f693f28c9b2d8e037452317fe62622351de72d3d73fe5b0ab62a4ae60efe4ec952c9a9332c3668a9eccb79f558b68789e02b2d0c0069a5a83eeae0c408a47cd5c283f7fb2d0d7130a24a902853cf0f32c1c825a818191454cdbf4c92b7c44ad8c645628ade5be01b81e8f3c58e0a328938d14fb5dc915b456fb872b1b1ed02f476141bf41e12d9c44613eef6ea10f0049581309e481822e5f2c394ea2dcbed8c2718006a667455641af21202af64885eb0f468dc0932b25c2abec00d2c27155e0dc7d43873d1b", 0xe0}, {&(0x7f000001bb40)="6857d2f07a3bb328a085dd57a84c6b5d6ef23b31251282afe52e9e7a34a41a64b36d1a1d6113d225d149942b7367a70bafd72164bfd53e62d0cb25074713e365e6dfb49c0ce60b289084b617524abd1b98fa91aa0fdd5a6478f07992a92f3543b642039e784c16bcba7315a836203b0950e1de5837c8c513a66928196765d1f71f0293497b525b4136dfb90f49904f51d4e132b3ba90e0ef3b67d327edd6f4bd69a3bba2", 0xa4}, {&(0x7f000001bc00)="cadd5f12d97505ac814a143b451cf21bc2415944e7aae6c1e9dc22cd749541eb2030ee78d83e5256cbab1ae2eeafc88dc89544318f722516757d37a17d21daddf79305891c904156a8ab4576df032263cf344c4d4f1059329ac787c7d3bba52ba38abbeb00a015196bd494930859b7304f3086169eb56009a667b7492251be913d9e948ba044a63229116dee33c0ee7f54597ff33f33b493710827f75eca35af9c37060d021dfa5f7069bcf2e1e463aa0ef75cb031e608a94acb9d429b73a9325abd85b75b7c50cc33e77cf40039112a3f9ca9e6f57d50b3c686184273da0dba71839dee6375ab60f1025a66dbd1eabb9a69ff91", 0xf4}], 0x9, &(0x7f000001bdc0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x8000}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}, @dstopts_2292={{0x10c0, 0x29, 0x4, {0x8, 0x214, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x94, 0x14, "d16420a09fa4bebaf5ce93015fdf412ed470f61c"}, @jumbo={0xc2, 0x4, 0x5}, @ra={0x5, 0x2, 0xa0e}, @generic={0xe4, 0xff8, "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"}, @enc_lim={0x4, 0x1, 0x8}, @hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x6}, @generic={0x6, 0x67, "b1d0b2856117ccdec4c5eb50d4aad2c55f92b046918a42b4af2d74a1758c74a27e1646351d47b0242cbad5d01b44264d0bd70ed5290ded8edecadcc8f20a376e2211362891d2ec84995205f50c645ac9b433e069999bdf9a9a0e2a6733658607c261e067a7b255"}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}, @rthdr={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x0, 0x8, 0x0, [@remote, @mcast2]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xf}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x3c, 0xa, 0x2, 0xfa, 0x0, [@mcast1, @mcast2, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2]}}}, @tclass={{0x14, 0x29, 0x43, 0xfffffff2}}, @dstopts={{0x30, 0x29, 0x37, {0x6, 0x3, '\x00', [@enc_lim={0x4, 0x1, 0x30}, @hao={0xc9, 0x10, @mcast2}, @pad1]}}}], 0x1218}}], 0x1, 0x4800) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f00000000c0)={0xfd, 0x0, 0xfe, 0x22, 0x0, 0x7, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3}, 0xe) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x61, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x144, 0x10, 0x713, 0x70bd22, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a}, {@in6=@remote, 0x0, 0x32}, @in6=@mcast2, {0x0, 0x9, 0x6, 0xa, 0x6, 0xfffffffffffffffc, 0x0, 0x3}, {0x0, 0x1, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd2d, 0x0, 0xa, 0x3, 0x0, 0xac}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x100}}, @tfcpad={0x8, 0x29, 0x4}]}, 0x144}, 0x1, 0x0, 0x0, 0xc0}, 0x0) shutdown(r7, 0x1) 55.731118177s ago: executing program 4 (id=244): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f00000024c0)={&(0x7f0000002400)={0x24, @short={0x2, 0x2, 0xfffe}}, 0x14, &(0x7f0000002480)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x400c0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r1, &(0x7f0000000240)={&(0x7f0000000180)={0xa, 0x4e23, 0x1, @local, 0x38a}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000000400)="80004b77efe55463", 0x8}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="120000000000000001"], 0x30}, 0x4) 50.289079846s ago: executing program 4 (id=255): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080)=0x76, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005880)=ANY=[@ANYBLOB="140000001500010029bd5a000000000002"], 0x14}, 0x1, 0x4000}, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f000007e000/0x1000)=nil) openat$snapshot(0xffffffffffffff9c, 0x0, 0x400, 0x500) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f00000000c0)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r3, 0x0, &(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x9}) landlock_restrict_self(0xffffffffffffffff, 0xe) 9.148631322s ago: executing program 3 (id=356): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0xfffffffffffffdb1, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000025300)=""/102392, 0x18ff8) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1b, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240120005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) poll(&(0x7f00000001c0)=[{r2, 0xa}], 0x1, 0x9) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x1, 0x12d4c}}, 0x44) 7.69077391s ago: executing program 3 (id=360): socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40080c0) socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mremap(&(0x7f0000ff1000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffb000/0x4000)=nil) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9}, 0x48) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40186f40, &(0x7f0000000440)=0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') (fail_nth: 6) sync_file_range(r2, 0x4, 0x100000000000, 0x3) 6.337462158s ago: executing program 3 (id=363): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) prlimit64(r0, 0xb, &(0x7f00000014c0)={0x8, 0x3ff}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r3 = fanotify_init(0xf00, 0x1) fanotify_mark(r3, 0x105, 0x20, r2, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) fanotify_mark(r3, 0x441, 0x4800001a, r4, 0x0) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000001240)=0x1, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) sendmmsg$unix(r1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000838001180090001006c61737400000000280002800c0002400000000000000009080001"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@base={0xb, 0x4, 0x77, 0xfffffffb}, 0x50) file_getattr(r5, &(0x7f0000001280)='./file0\x00', &(0x7f0000001400), 0x18, 0x100) 5.232365486s ago: executing program 3 (id=364): stat(0x0, 0x0) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000602, 0x0, &(0x7f0000000100)={0x6, 0x39, 0x1, 0xa013abda6fcf7674}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1580, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000300)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x24008040) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c2c2, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r2, &(0x7f0000000000)=[{0x1e, 0x0, 0x8, 0xff, @time={0xfff, 0x3}, {0x0, 0xa}, {}, @result={0x9}}], 0x1c) close_range(r1, 0xffffffffffffffff, 0x0) r3 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) syz_usb_disconnect(r3) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_disconnect(r3) read$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r4) 5.008763903s ago: executing program 0 (id=365): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000005400e50100000000fdffffff07", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x841}, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000200)={0x1d, r1}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001800310700000000000000000a002000000000000005000008001700ffffffff"], 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r2, @ANYRES64=r3, @ANYRES64=0x0, @ANYRES64=r1, @ANYRES64=r0, @ANYBLOB="3bf81bb9e9"], 0x20000600}, 0x1, 0x0, 0x0, 0x4000055}, 0x0) sendmsg$sock(r2, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x82, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) 4.85202861s ago: executing program 0 (id=366): r0 = shmget$private(0x0, 0x2000, 0x54000200, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000000)=""/21) r1 = shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffc000/0x2000)=nil) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x5, 0x9, 0x7, 0x2, 0xf56}) shmctl$SHM_LOCK(r0, 0xb) r2 = shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) shmctl$IPC_RMID(r0, 0x0) ioctl$XFS_IOC_BULKSTAT(r3, 0x8040587f, &(0x7f0000000180)={{0x7ff, 0x5, 0xecb8, 0x11c2425, 0x80}, &(0x7f00000000c0)=[{}]}) r4 = syz_clone(0x110000, &(0x7f0000000200)="d2039983439538a11171a2f4a81284de52056ed6592d766d3e8deb51648822299edb92a643", 0x25, 0x0, &(0x7f0000000280), &(0x7f00000002c0)="c5a612819b450e392649905ede4f31324453f0d4b71eff040af03abad3d954b07f6a5566b938df5e2a151aa557bacac35d49f08751f67d6a6e51393ecfd03ee4249e0c80654809077319d3f65f2c1386feba533eff5764616d8867060634a06e7d147821dc571a0220e344b082a579f2de29ba81dbc4d139770e9b7e") shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000380)=""/7) shmctl$SHM_STAT(0x0, 0xd, &(0x7f00000003c0)=""/75) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x800448d4, &(0x7f0000000440)="6d0003b0b4b7647a67c70115b01ba0a61750ab1bc17441b2cb525508438d00d3e2824e7323b6addb8ea8c40f6aeb65fb9a4c353a7cea292ca14f3b84baa0c90ec11ff32bcb7b696671d31d3432b7030a86b906392ba41de38d16bf3e846db1ff9ec4a366467b7468f81a78") bind$bt_hci(r5, &(0x7f00000004c0)={0x1f, 0x3}, 0x6) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000500), 0x400000, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x13) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r6, 0x4068aea3, &(0x7f0000000540)={0xa8, 0x0, 0x1}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) shmdt(r2) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@remote, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@private1}}, &(0x7f0000000700)=0xe8) statx(0xffffffffffffffff, &(0x7f0000000740)='./file0\x00', 0x4000, 0x4, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000880)=0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000008c0)=0x0) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000900)={{0x1, r8, r9, r10, 0xffffffffffffffff, 0x4, 0x1000}, 0x15, 0x0, 0x1, 0xb, r4, r11, 0x1}) syz_open_dev$MSR(&(0x7f0000000980), 0x393c, 0x0) fchmod(r7, 0x2) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000a40)={0x48, 0x1, 0x0, 0x0, 0x5, 0x3}) 4.432963331s ago: executing program 0 (id=367): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r3, @ANYBLOB="05"], 0x6c}, 0x1, 0x0, 0x0, 0x14044085}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r2, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = syz_genetlink_get_family_id$wireguard(0x0, r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000600)={0x14, r5, 0x0, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000840}, 0x20008000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xfe, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 3.719329581s ago: executing program 0 (id=368): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x615a}, 0x50) timer_settime(0x0, 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/4\x00') read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x3200) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r1, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000003c0), &(0x7f00000001c0)=0x8) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x88}, 0x1, 0x0, 0x0, 0x840}, 0x0) 3.564370975s ago: executing program 2 (id=369): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040845}, 0x1) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000001400000826bd7000fddbdf25125721000100510856707976161d06ee38b5eb81090819d445ec2b55fe1173d1f700000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x82) ioctl$DVB_DVR_DMX_EXPBUF(r5, 0xc00c6f3e, &(0x7f0000000280)={0x6aca}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x8, 0xfff3}, {}, {0xf, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @rand_addr=0x64010102}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x40, &(0x7f0000000300)=0xffffff7f, 0x4) getsockopt$SO_TIMESTAMP(r7, 0x1, 0x40, 0x0, &(0x7f0000000ac0)) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x62) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='pim6reg1\x00', 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@setlink={0x3c, 0x13, 0x1, 0x4070bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x3d82, 0x1f9c6}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macvtap0\x00'}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x1}]}, 0x93}}, 0x20044000) 3.034162558s ago: executing program 0 (id=370): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x4043}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x8}]}}}]}, 0x44}}, 0x20000884) (fail_nth: 3) 2.097427186s ago: executing program 0 (id=371): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x10000000}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r2, 0x4b4a, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000100)={0x20000014}) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff00090000000905", @ANYRES16], 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) sendfile(r4, r5, 0x0, 0xffffffff000) ioctl$SNDRV_PCM_IOCTL_FORWARD(r5, 0x40084149, &(0x7f0000000140)=0x5) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000340)=[@text16={0x10, &(0x7f00000001c0)="660f3a09be00080e0f4d4500360f20e4676466afbad10466edba400066ed0f4771e9dbd865660f3a40d7373636f4", 0x2e}], 0x1, 0x1b, &(0x7f0000000440)=[@cstype0={0x4, 0xf}, @cr0={0x0, 0x1}], 0x2) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r7, &(0x7f0000000040)={0x20000000}) r8 = accept$alg(r7, 0x0, 0x0) recvmmsg(r8, &(0x7f0000004040)=[{{&(0x7f00000002c0)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000002400)=[{&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/167, 0xa7}], 0x2, &(0x7f0000002440)=""/225, 0xe1}, 0x9cdb}, {{&(0x7f0000002540)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000002740)=[{&(0x7f00000025c0)=""/65, 0x41}, {&(0x7f0000002640)=""/189, 0xbd}, {&(0x7f0000002700)=""/46, 0x2e}], 0x3}, 0x100}, {{&(0x7f0000002780)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @empty}}, 0x80, &(0x7f0000002840)=[{&(0x7f00000003c0)=""/67, 0x43}], 0x1}, 0x3}, {{&(0x7f0000002880)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x80, &(0x7f0000003980)=[{&(0x7f0000002900)=""/17, 0x11}, {&(0x7f0000002940)=""/4096, 0x1000}, {&(0x7f0000003940)=""/52, 0x34}], 0x3, &(0x7f00000039c0)=""/149, 0x95}, 0x1}, {{&(0x7f0000003a80)=@qipcrtr, 0x80, &(0x7f0000003ec0)=[{&(0x7f0000003b00)=""/114, 0x72}, {&(0x7f0000003b80)=""/82, 0x52}, {&(0x7f0000003c00)=""/75, 0x4b}, {&(0x7f0000003c80)=""/230, 0xe6}, {&(0x7f0000003d80)=""/159, 0x9f}, {&(0x7f0000003e40)}, {&(0x7f0000003e80)=""/61, 0x3d}], 0x7, &(0x7f0000003f40)=""/202, 0xca}, 0x3}], 0x5, 0x12000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) r9 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv(r9, &(0x7f0000001300)=[{&(0x7f0000000040)=""/209, 0xd1}, {&(0x7f0000000200)=""/88, 0x58}, {&(0x7f0000000280)=""/40, 0x28}, {&(0x7f0000000380)=""/39, 0x27}], 0x4) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r9, 0x4008941a, &(0x7f00000000c0)=0x2) 1.72946915s ago: executing program 2 (id=372): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4a61, 0x2, @loopback, 0xaa}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/36, 0x24}], 0x1}, 0xc66}], 0x1, 0x10020, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) 1.51455386s ago: executing program 2 (id=373): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r3, @ANYBLOB="05"], 0x6c}, 0x1, 0x0, 0x0, 0x14044085}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r2, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = syz_genetlink_get_family_id$wireguard(0x0, r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000600)={0x14, r5, 0x0, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000840}, 0x20008000) r6 = mq_open(&(0x7f0000000080)='r\xf1\xe4\x1f\xb7l\xef;RvA\xeb\x9emdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0xe0, &(0x7f0000000000)={0x80000003, 0xf, 0x101, 0xfffffffffffffffd}) ppoll(&(0x7f0000002280)=[{r6, 0x800}], 0x1, 0x0, 0x0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x4, 0x0) mq_timedreceive(r6, &(0x7f00000022c0)=""/4099, 0x1003, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 777.595065ms ago: executing program 3 (id=374): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = fanotify_init(0xf00, 0x1) fanotify_mark(r1, 0x105, 0x20, r0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) fanotify_mark(r1, 0x441, 0x4800001a, r2, 0x0) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000001240)=0x1, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) file_getattr(r3, &(0x7f0000001280)='./file0\x00', &(0x7f0000001400), 0x18, 0x100) 491.688825ms ago: executing program 3 (id=375): r0 = syz_usb_connect$midi(0x4, 0x10e, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x582, 0x16, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfc, 0x1, 0x1, 0x1a, 0x8, 0x9b, "", {{{0x9, 0x4, 0x0, 0x0, 0x8, 0x1, 0x3, 0x30, 0x2, [@midi_out_jack={0x9, 0x24, 0x3, 0x6, 0x9, 0x1, [{0x0, 0x4}], 0x5}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x65, 0x3}, @ms_header={0x7, 0x24, 0x1, 0x377, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x75a3, 0x7}, @midi_out_jack={0x1b, 0x24, 0x3, 0x2, 0xf7, 0xa, [{0xc1, 0xff}, {0x6}, {0x3, 0x6}, {0x86, 0x6}, {0x7f, 0x2}, {0x81, 0x5}, {0xf0, 0xd}, {0x1, 0x80}, {0x4, 0x9}, {0x3, 0xc}], 0x7b}, @midi_out_jack={0xf, 0x24, 0x3, 0x2, 0x6, 0x4, [{0x0, 0x2}, {0xfb}, {0x1, 0x40}, {0xe, 0x4}]}], [{{0x9, 0x5, 0x5, 0x10, 0x10, 0x6, 0xf1, 0x6, {0x7, 0x25, 0x1, 0x3, "887138"}}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0x0, 0x5b, 0x2, {0xe, 0x25, 0x1, 0xa, "6b6a50f913b6aa555b8f"}}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x2, 0x71, 0x0, {0xb, 0x25, 0x1, 0x7, "08874547593325"}}}, {{0x9, 0x5, 0x0, 0xe2e663d83a0c98d7, 0x400, 0xff, 0x2, 0x1, {0x9, 0x25, 0x1, 0x5, "a21e88fbb4"}}}, {{0x9, 0x5, 0x8, 0x7, 0x20, 0x0, 0x1e, 0xd, {0x4}}}, {{0x9, 0x5, 0x0, 0xc, 0x200, 0x0, 0x6, 0x4, {0xb, 0x25, 0x1, 0x7, "030bd3b8407fac"}}}, {{0x9, 0x5, 0x5, 0x0, 0x3fb, 0xea, 0x1, 0xf4, {0x14, 0x25, 0x1, 0x10, "55fe6b8c0133f3076960edbe4f1e4638"}}}, {{0x9, 0x5, 0x0, 0x8, 0x400, 0x9, 0xb, 0x7f, {0xf, 0x25, 0x1, 0xb, "b726bb6fac600998a9e403"}}}]}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x9, 0x40, 0xfe, 0x20, 0x8}, 0xf, &(0x7f0000000180)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x6, 0xa, 0x1}]}, 0x2, [{0x56, &(0x7f00000001c0)=@string={0x56, 0x3, "8eb80762e098dcdb6970e8969ae1fa9ead7a96cda11184f054c482ae640a6067edb75ff7c641966c7177166b702af19456c769675f77fd9dbb4a1a685c83a3d3f3ac0c00fe5e7195a5ecf3b67efddabdbffad52b"}}, {0x18, &(0x7f0000000240)=@string={0x18, 0x3, "91ca5798e4948845048c4cb55653f0093faf34ca5702"}}]}) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x3, 0x141, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12f, 0x2, 0x1, 0x3, 0x30, 0x9, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, '-'}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0xe4, 0x4, 0x3, 0x80}, {0x6}, [@mdlm_detail={0x5c, 0x24, 0x13, 0xd, "a16b0c4030b0e4338ef0610d0fcbb605d53b2660350effc8c4b3abe2edd609af4cefcb1c8fcecf6d03e9d3f773b38841d61c1043a0d7e690d737ee2655b0e4f5d068c5d7a5e313968d326a084124baf4d9f7c3eda2e0aab0"}, @acm={0x4, 0x24, 0x2, 0x8}, @mdlm_detail={0x72, 0x24, 0x13, 0x9, "e63d0d9ac991f28a8a3d6c02e8a53bc3c83e05b588d8cae6f45a841613dadeb492cca17df99059cbedc7abd19a61eb905ce7cdc174746700da2c039f6e06ffef67bbcb842fd1eb271f1a408873334b0557ceb0b190a3ae351b985b6838f2b3de763fc38c8584fb1daaa9c6c619a0"}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x33, 0x7, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x6, 0x81, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x5, 0x0, 0x8}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x250, 0x3, 0x7, 0x89, 0x40}, 0x24, &(0x7f0000000480)={0x5, 0xf, 0x24, 0x4, [@wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0xb, 0x54, 0x8, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xf, 0x2, 0x9, 0xfffc}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x2, 0x2, 0x2}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x455}}]}) syz_usb_control_io$sierra_net(r0, &(0x7f0000000600)={0x14, &(0x7f0000000540)={0x40, 0x24, 0x6a, {0x6a, 0x9, "65cfcc4d6cdabd16929e3c2f5be4ffb4ddd5b059327178b19ba88483851476d7336126f455c9a5554fa5b81ff690f9f03faa4c75b673f4e7d7da8542c5fdd0fc9d6b3a1f1becbee968cf204aef91126b6cc42c27c50197f63a839c993dd528eb884ae2f0d4f37c21"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x380a}}}, &(0x7f0000000b00)={0x1c, &(0x7f0000000640)={0x0, 0xb, 0x5, "12b86f2b01"}, &(0x7f0000000680)={0xa1, 0x1, 0x400, "8801be9cd828b738f2f6a5f9bda38ac9b426b972e492142fcbe4a236acb9bfe511fa544f0f59e780c619c958d55c281c0d2c8035efcf5e0f1dd1f7afc58cc650df99269769936740a5cdc63cf15b87070d76e5581bbd6c532488df79cec795b1be0a246dc95d92afec5fbea88281f66205a56eb0153df44e790be54c33c3421bc9e8317394044cf47a1afe65f16b85552637c0b27116b55009399892807e52a9e98c3d667947791ee571a4d2bf00229b69bdc9808253452626f58060ab0a2f7b46a29a14011863f875110228cb4d1dcac2c921d981c438583da36f88ab3050b2acc01f42a00049b63ae94ec8de580ee03e905e8d526930edf63cbcf6a115e7c2223760a5bab724c43a98beb11321a6fbc6e7468698f024ad06bac385f63278f9541b6f9b0a4ba3766e6621889d2eb18a530f845a732bcd1a98cc31008aa9d01ca668ae3558caa376afef926df20be7ddb77901f89f20679e3fb6520ed7623c5a31ceb90c6009589f1127a5a7d7a6c9c54f0744432ee9ee9d797c716725bda14dda8b494f4309caf776bbce883f8c2f28b81f7ba9c9910942d3263421fed2234a5689811658ed955a1cec7b2dbd29fb3813637ca3353c91f833dd2ad6402cbe38d45fd42e650fbed24c8beb3709fd4225222ff9335d0ded423312c568f8989a8aa580dfb478bef3933c3c574d5d5b8982242572bbea2483cfcab0c08229054d64aae4e5ae320a88267def2cfba1ed8a9d36161e388040f9eac10b945c1d4e41c1e785d0ae56b83a133e18262f4923593efbec11aa1fa6e5e04c9751a9d27f1e857dcf3013995c75cfee3711db70890beafc731fbe9bd9dc5be5daf17ac843706fde7516d92156585a95e5af0fb1622bf181eb419d9e74392384b35e5161978bdbbfa457539d1569b4b743d547c44edaae795ac0391ea119e8c96e6a941406dd0fc2dfb7e43d31d2af0f9a63267c85da30c13ce19dd4c441bae3fb6549f552dbb94338d04501c7eb7d57f286ad58368fc3de4310e96b5a5e37de31d81ffb4c190c0d53a28e37a902685d3177b6d37dedc0c1663251cb2d0efdcdd5ced7ccb005730e618bec02634369416f8280834ca1b622736467017831ae1bfe50d806d068d140d12a2050e4386ffcc43460a93a18048a095e52728e1078b6aea1d15f9ad505ff1b2eb1aa685d1fca9a603002e1605d16dc5c827cc9496b0bab2eb2f0574c2d215c19d975c09e17f4a48c049b6e3e375624fcaec946045f15586ba641295b800cf1874be942eba78aa53bfc801221dfea44ffcb7e6b300281e84360f1946a801628901803c117c8d75bdb5ca0fbe39488c3d75604a4cf126661a83a88b8e00cff7b4841a72c6452e189a33cf0be172bc1887bff2ff06564fac95aab6afa83694f289253f23651d5f2adb918ac2a75d22b89fd6c1f41ebd68e92527589f6c743"}, &(0x7f0000000ac0)={0x21, 0x0, 0x2, '>a'}}) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xc) r1 = syz_usb_connect$uac3(0x0, 0xbc, &(0x7f0000000b40)={{0x12, 0x1, 0x140, 0x0, 0x0, 0x0, 0xff, 0x582, 0x156, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xaa, 0x3, 0x1, 0x1, 0x40, 0x6, {0x8, 0xb, 0x0, 0x2, 0x1, 0x22, 0x30, 0x40}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x33, 0x8}, [@processing_unit={0x11, 0x24, 0x9, 0x1, 0x3, [0x3, 0x1, 0x1]}, @source_unit={0xc, 0x24, 0xb, 0x5, 0x0, 0x1, 0xfc, 0x8}, @power_domain={0xc, 0x24, 0x10, 0x4, 0x10b, 0x3ff, 0xff, "67f435"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x3, 0x7, 0x3, {0xa, 0x25, 0x25, 0x2, 0x8e, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6, 0x4, 0x0, 0x6}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x8, 0xe9, 0xd, 0x2, 0x6}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x7, 0x2, 0x2, {0xa, 0x25, 0x25, 0x1, 0x6, 0x49}}}}}}}}]}}, &(0x7f0000000f80)={0xa, &(0x7f0000000c00)={0xa, 0x6, 0x110, 0x4, 0x9, 0x3, 0x40, 0x9}, 0x118, &(0x7f0000000c40)={0x5, 0xf, 0x118, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x8, 0xff, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x9, 0x4, 0x5}, @generic={0xff, 0x10, 0x2, "1b7846e0777d10f0190de74f9fa067729bd0450f4feeedd39f0c51efddfcae7b0b9ed462716046ca6745b40a352aa0c30d0f5cec90f712a02fcd7112de48c2e6074d673fb1bc14bc62bcb383f835b6527f8c0229a288da8e423c5b17f55b841bcfe45a84459a2605eb3001b365c5c026542865720cd4f5761fb9e2c9011ec3fa893972df6c04575d182c4188db6f2704c86d877db4d3fcf5ca8c83b6f50842b5cda6fff7ee780b7cc37983997da4548c4a7bd24375abe9d7682ad35b1bc1808ddb0fe77d1e063416f07001f7712a4ecaa041faea8d4a4d38250fe78f994c32b56077866cd891dee5dd15b8e15c4d1d5e2070db4c533bed12fc06e7f6"}, @ptm_cap={0x3}]}, 0x6, [{0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x813}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x421}}, {0x72, &(0x7f0000000e00)=@string={0x72, 0x3, "25eef289ac02c5321eec193ad06b99cbd948b4a6734876be78f02943a135e83daa059a2bd95139bb7f7236e42f00b86fe058a729cb97f01a9ba1d9204e420504e9ba59b46b99f434504417854eeb4fa2d4ee257ed04ddac7b6dd51b8fab09409a073680c4ebf64d4b8c99e1afe32ccb9"}}, {0x6f, &(0x7f0000000e80)=@string={0x6f, 0x3, "900977bd4bc359f335c329629783e7cfded1fc6dce72c9f6323d66681db02367cd9cd93dcfce60ff50cdd85b90e6bb979c0b20dc8de273c7427b6864edfb70de6190ef461a36495e96537364fb16acd96f197726cfbf6b641ffaaa7aaaf1917a05f9709cca1eeec410c69dd985"}}, {0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0x3c03}}, {0x13, &(0x7f0000000f40)=@string={0x13, 0x3, "94b2437dea00392dadd74b9971f0369329"}}]}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_XSAVE2(r2, 0x9000aecf, &(0x7f0000ffb000/0x3000)=nil) (async) ioctl$KVM_GET_XSAVE2(r2, 0x9000aecf, &(0x7f0000ffb000/0x3000)=nil) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) (async) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) r3 = syz_usb_connect$cdc_ecm(0x3, 0x0, 0xfffffffffffffffd, &(0x7f00000010c0)={0xa, &(0x7f0000001000)={0xa, 0x6, 0x200, 0x3, 0x10, 0x0, 0x40, 0x5}, 0x8, &(0x7f0000001040)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x413}}]}) syz_open_dev$vcsn(&(0x7f0000001100), 0xa, 0x440) (async) r4 = syz_open_dev$vcsn(&(0x7f0000001100), 0xa, 0x440) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001140)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x29, 0x80, 0x2, "", [{{0x9, 0x4, 0x0, 0x50, 0x1, 0x7, 0x1, 0x1, 0xd7, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x2, 0xa, 0x40}}}}}]}}]}}, &(0x7f0000001500)={0xa, &(0x7f0000001180)={0xa, 0x6, 0x201, 0xa9, 0x10, 0x5, 0xff, 0x8}, 0x20, &(0x7f00000011c0)={0x5, 0xf, 0x20, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0xa, 0x7, 0x1a}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x8, 0x2, 0x4704}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0xb7, 0x8, 0xad5}]}, 0x9, [{0x4, &(0x7f0000001200)=@lang_id={0x4, 0x3, 0x438}}, {0xf2, &(0x7f0000001240)=@string={0xf2, 0x3, "4a80aa0c183d40e2658a636a5d8ebf42d377afd0e011cdbd7e0b73f027a0b75e086d322497e964755c104d392965077bdaaa268dc8a446f9ae3ea898fd862a1453d258ef350fa6bbe57f853dd3eadb3545021c0879833aaf1c230b9a3ce2283fbe0a884d26b1a5af0c513a1dfafa336596a0984a590801a03b4a31f0d19b4e726e88746b1f1c0c302263acf781613e23100b374668999cbba5def056687e63f9f52cb5b053295638d2bcfa580b954c97a768362f591e6d0b3ab3e89c21720f7ca8291c4f6305f1bbdaf7fe9128f3966889b822302a9901b2049c0994bc2fd9d2ce852f042a69b23d622c230cb33f528f"}}, {0x4, &(0x7f0000001340)=@lang_id={0x4, 0x3, 0x860}}, {0x4, &(0x7f0000001380)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f00000013c0)=@lang_id={0x4}}, {0x4, &(0x7f0000001400)=@lang_id={0x4, 0x3, 0x380a}}, {0x4, &(0x7f0000001440)=@lang_id={0x4, 0x3, 0xc0c}}, {0x4, &(0x7f0000001480)=@lang_id={0x4, 0x3, 0xc09}}, {0x4, &(0x7f00000014c0)=@lang_id={0x4, 0x3, 0xc07}}]}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000001680)={0x14, &(0x7f00000015c0)={0x0, 0x1, 0x5b, {0x5b, 0x30, "2136aec81bf6f979b3a5dacce82f944379575377b69b340cff18ac55d5a02fd19f10a8902b2eb9d76be5421fc8c6793b5fc7f7dd33621320a33cfdd18ae40d44b9e9f0dda8fb9a4deff7bc3b4fbd0b3f71253671d75ca9bf2d"}}, &(0x7f0000001640)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001840)={0x1c, &(0x7f00000016c0)={0x40, 0x16, 0xcd, "08ce8f58c6d648d8ce7621527e1aaf990fa2d74d35a56a6d9e214301997da6a4c2b7571ae96c949f0abc297ec3c8946bbdcb4b23f2fa4dc762a7b5b2e5e82f2c3ebbf80846592534e2346b01c1236c94ef11e0fe8e871959e799bac892bd89b6073720ba2c5f9ee73eb6739fee8a3f106b6c038546792be7b5418fd9b64ff383774bc6875ce5eceb17bf2acea6ead23998723112018070d1447437fdb1937a5ddefdad5abd862e16ecae280724464f000e291dc7f68452b536b65c03fd7f4e4e1d7a2f4db1f12cde7a514a1cc1"}, &(0x7f00000017c0)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000001800)={0x0, 0x8, 0x1}}) syz_usb_control_io$uac3(r1, &(0x7f0000001a00)={0x14, &(0x7f0000001880)={0x20, 0x23, 0x6d, {0x6d, 0xe, "e6a05638e5e998b2fe151d5658fdd626b634ce3cf530ca5bbece8e34508854cc2bb1b27e1ed0922acc02555eb533ad728918cda92ba8aa90274b2355b114f27415e39ff935aa5573d7cbc935a708fc3cf48d48c035ea1c21d201f5604ea168f08aa7974844ed6bb26a5bc0"}}, &(0x7f0000001900)={0x0, 0x3, 0xd7, @string={0xd7, 0x3, "660ceb124e134e6b1cbb14c188c33179c5c2ac358ea6eda3f80cf74a4a1f549fa6b989a78fdf5ddf3cbc40ae5e6e4958b0507b5575cfe15bf93fec853d347cc6ce315a429fcaa43c271a45b7c00b21ba0dfcd9bd4d1a3f4a80382b6718b67a71776e3d25cbf8002c2ddc93c443440dda2df5a3f6a110908059d742cc5684265ea4a72196a84c91e4570ac20c82446c58dd87c05f644c5fb3297ec187259c38081916359ab23c3d0f68994a295570a92bfc5664a0db06d95b86ec8866a035ca7495f22aeddde6c7705d2e167502f2307ffc6e261163"}}}, &(0x7f0000001c80)={0x44, &(0x7f0000001a40)={0x20, 0x17, 0x68, "efdf6a5be0c64a3375886335c0aadf1c2fa632a173dc094b6bfd2fdef92ec6d28065bf663fe9cd19f4d0ca111a37dcd1798a349114e7e9c360d779e0de1ae55961b7f2b825b16b8d78b5169643469af480eb4f459143c86ce87e6956778fb1d5845d89e0d1a37e65"}, &(0x7f0000001ac0)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000001b00)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000001b40)={0x20, 0x81, 0x3, "d14dee"}, &(0x7f0000001b80)={0x20, 0x82, 0x3, "ace417"}, &(0x7f0000001bc0)={0x20, 0x83, 0x3, "d4bf48"}, &(0x7f0000001c00)={0x20, 0x84, 0x4, "c1eaa355"}, &(0x7f0000001c40)={0x20, 0x85, 0x3, "b77b20"}}) syz_usb_connect$sierra_net(0x1, 0x3f, &(0x7f0000001d00)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x7, 0x2, 0x20, 0xc0, 0x3, 0x9}, {0x9, 0x5, 0xd, 0x2, 0x40, 0x0, 0x8}, {0x9, 0x5, 0x2, 0x3, 0x8, 0x7, 0x81, 0x4}}}}}}]}}, 0x0) (async) r5 = syz_usb_connect$sierra_net(0x1, 0x3f, &(0x7f0000001d00)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x7, 0x2, 0x20, 0xc0, 0x3, 0x9}, {0x9, 0x5, 0xd, 0x2, 0x40, 0x0, 0x8}, {0x9, 0x5, 0x2, 0x3, 0x8, 0x7, 0x81, 0x4}}}}}}]}}, 0x0) syz_usb_control_io(r5, &(0x7f0000001f80)={0x2c, &(0x7f0000001d40)={0x0, 0x30, 0x48, {0x48, 0xc, "ce82d9b7ce1b0bd5c8030ddfdb688ace863a5c77dfae5925d6fdfc31aa9880bb8584ab25e079509e3651900ceb2278aa037883a450a97ba533de223b320c1811eb6b55f4fe85"}}, &(0x7f0000001dc0)={0x0, 0x3, 0xf6, @string={0xf6, 0x3, "fc7d35c31fbd12d238d4e3b4b6d66b666444bdcd3720d1460137481ec84bf5933bfe3f8c0da898549a1739fbd95429c6aff20e725a101f5a8a10c6e273be6264b33bcb0993b628bbe17a734ae5d1c4390e73bccebe7a59627bba3b70568a9727d77657b14e0fbc4e66593956182faf1c715dbc8828ac2beaac26b7c8eac74ed7d4bc24e197862bb3db9cca909764523b6d17237a2cacb15fec50c01fd6ef82a67c726cbf532ceecd291143b5a3c332d0d5a9226cd0ec0e71fcdcb19e158922024d9f10ceb979068af3ce03b5be12051375792691df3f306558ce434e342bb058831e33fe20f050f840170a662e84fec1ee3a0298"}}, &(0x7f0000001ec0)={0x0, 0xf, 0x26, {0x5, 0xf, 0x26, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x6, 0x6, 0x1}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x5, 0xd, 0x1426}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x80, 0xc3, 0x3}, @ptm_cap={0x3}]}}, &(0x7f0000001f00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x3, 0x1, 0x9, "07017b5b", "f1e81451"}}, &(0x7f0000001f40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x80, 0x18, 0x10, 0xdd, 0x6, 0x0, 0x6}}}, &(0x7f0000002440)={0x84, &(0x7f0000001fc0)={0x20, 0x17, 0x8b, "3609b68e762e8936771b1e07317bd5a2ceb911a88446ffdbc316ad3d8aa8bf840d7547a611c376008a375008795eaca2dda6fcc61ee17ffcdd34185f996f07cc5340a22c628e3664fd8b83820321415a4f4b82761cdbc68f75ba1a5f1281071a029d214d89aa3a93bc88e8bec3b27d2ddeeeb6a3f3f54ae094746835d2c32dc0ff22e9debac04560b1f59c"}, &(0x7f0000002080)={0x0, 0xa, 0x1, 0xb}, &(0x7f00000020c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000002100)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000002140)={0x20, 0x0, 0x4, {0x10, 0x1}}, &(0x7f0000002180)={0x40, 0x7, 0x2, 0x1}, &(0x7f00000021c0)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000002200)={0x40, 0xb, 0x2, "c74c"}, &(0x7f0000002240)={0x40, 0xf, 0x2, 0x7ca}, &(0x7f0000002280)={0x40, 0x13, 0x6}, &(0x7f00000022c0)={0x40, 0x17, 0x6, @random="e6c957dbe1c1"}, &(0x7f0000002300)={0x40, 0x19, 0x2, "bccf"}, &(0x7f0000002340)={0x40, 0x1a, 0x2, 0xa33f}, &(0x7f0000002380)={0x40, 0x1c, 0x1, 0x2}, &(0x7f00000023c0)={0x40, 0x1e, 0x1, 0xc3}, &(0x7f0000002400)={0x40, 0x21, 0x1, 0x7}}) (async) syz_usb_control_io(r5, &(0x7f0000001f80)={0x2c, &(0x7f0000001d40)={0x0, 0x30, 0x48, {0x48, 0xc, "ce82d9b7ce1b0bd5c8030ddfdb688ace863a5c77dfae5925d6fdfc31aa9880bb8584ab25e079509e3651900ceb2278aa037883a450a97ba533de223b320c1811eb6b55f4fe85"}}, &(0x7f0000001dc0)={0x0, 0x3, 0xf6, @string={0xf6, 0x3, "fc7d35c31fbd12d238d4e3b4b6d66b666444bdcd3720d1460137481ec84bf5933bfe3f8c0da898549a1739fbd95429c6aff20e725a101f5a8a10c6e273be6264b33bcb0993b628bbe17a734ae5d1c4390e73bccebe7a59627bba3b70568a9727d77657b14e0fbc4e66593956182faf1c715dbc8828ac2beaac26b7c8eac74ed7d4bc24e197862bb3db9cca909764523b6d17237a2cacb15fec50c01fd6ef82a67c726cbf532ceecd291143b5a3c332d0d5a9226cd0ec0e71fcdcb19e158922024d9f10ceb979068af3ce03b5be12051375792691df3f306558ce434e342bb058831e33fe20f050f840170a662e84fec1ee3a0298"}}, &(0x7f0000001ec0)={0x0, 0xf, 0x26, {0x5, 0xf, 0x26, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x6, 0x6, 0x1}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x5, 0xd, 0x1426}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x80, 0xc3, 0x3}, @ptm_cap={0x3}]}}, &(0x7f0000001f00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x3, 0x1, 0x9, "07017b5b", "f1e81451"}}, &(0x7f0000001f40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x80, 0x18, 0x10, 0xdd, 0x6, 0x0, 0x6}}}, &(0x7f0000002440)={0x84, &(0x7f0000001fc0)={0x20, 0x17, 0x8b, "3609b68e762e8936771b1e07317bd5a2ceb911a88446ffdbc316ad3d8aa8bf840d7547a611c376008a375008795eaca2dda6fcc61ee17ffcdd34185f996f07cc5340a22c628e3664fd8b83820321415a4f4b82761cdbc68f75ba1a5f1281071a029d214d89aa3a93bc88e8bec3b27d2ddeeeb6a3f3f54ae094746835d2c32dc0ff22e9debac04560b1f59c"}, &(0x7f0000002080)={0x0, 0xa, 0x1, 0xb}, &(0x7f00000020c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000002100)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000002140)={0x20, 0x0, 0x4, {0x10, 0x1}}, &(0x7f0000002180)={0x40, 0x7, 0x2, 0x1}, &(0x7f00000021c0)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000002200)={0x40, 0xb, 0x2, "c74c"}, &(0x7f0000002240)={0x40, 0xf, 0x2, 0x7ca}, &(0x7f0000002280)={0x40, 0x13, 0x6}, &(0x7f00000022c0)={0x40, 0x17, 0x6, @random="e6c957dbe1c1"}, &(0x7f0000002300)={0x40, 0x19, 0x2, "bccf"}, &(0x7f0000002340)={0x40, 0x1a, 0x2, 0xa33f}, &(0x7f0000002380)={0x40, 0x1c, 0x1, 0x2}, &(0x7f00000023c0)={0x40, 0x1e, 0x1, 0xc3}, &(0x7f0000002400)={0x40, 0x21, 0x1, 0x7}}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000002640)={0x14, 0x0, &(0x7f0000002500)=[@increfs_done={0x40106308, 0x2}], 0xd2, 0x0, &(0x7f0000002540)="56bb29296fe693a3d86fa17ed3042f3a70a2eb365e07d16425fb79b16321a7b567abb0b9d1e2f031d35907c057c6a68e3ae7c3eadc44a1d911c300cbbeef367008b45c9ecc5d14b6453aead84743b959964805b9649a5cd93c9f2f2b8dc672ad6f516a87426beb90d533d4759c0f709a0076c60ac3dfaee255113cd79a2606505b91780157ebed53dbe3f1add1cd1b473a46c6237a9694c5f1c475ea045c39e91e8df1aaaa272af4fc2229ce1083c42b28bdf0ad8646c371087f4d0077fc7944a8740a69c8d80c4e376fce2cec2cf520769f"}) shutdown(r4, 0x0) (async) shutdown(r4, 0x0) ioctl$DRM_IOCTL_SG_FREE(r4, 0x40106439, &(0x7f0000002680)={0x7fffffff}) (async) ioctl$DRM_IOCTL_SG_FREE(r4, 0x40106439, &(0x7f0000002680)={0x7fffffff}) remap_file_pages(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x300000a, 0x9, 0x2d3c0f537b953d6b) r6 = syz_usb_connect(0x5, 0x2c1, &(0x7f00000026c0)={{0x12, 0x1, 0x201, 0x15, 0x88, 0xf0, 0x40, 0x2cb7, 0x104, 0xb8cb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2af, 0x3, 0xd0, 0x4, 0x20, 0x4, "", [{{0x9, 0x4, 0x4, 0x9, 0x1, 0x7c, 0x4f, 0x25, 0xd4, [], [{{0x9, 0x5, 0x9, 0x0, 0x40, 0x97, 0xe9, 0x8}}]}}, {{0x9, 0x4, 0x8b, 0x1, 0xa, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0x2, 0x2}}, {{0x9, 0x5, 0x80, 0x8, 0x10, 0x2d, 0xd2, 0x6, [@generic={0x7a, 0x5e485da757fa8761, "b4ebf0ed2ef17df60799afb9ca08ef1907d1cc31a69288b5dfb1a7708fddd654ee0b6a1607272b015043e77a3f36f0bd9d8ffe0413a56992b810ec086b089fa58dec0bb51ed7608af9e157acd177840076609cc1103122510e2dde338b293ea7dda7bbc9e864ae22db2f9be1024e39d6cc0060029b2da34e"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x7}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x3, 0x4, 0x79}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x7, 0x97, 0xfe, [@generic={0x5, 0xc, "0a813c"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x4}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x6, 0x6, 0x0, [@generic={0xb6, 0x11, "6dbc17c535923394660ff7c34b3e6a0bd6de4109d46ea3d866cb00044eb53d826860f79856fda0e30de059ae6bc7fe9832950b044a54d061c7aca567f3e06b24d6c2751c24b793300c664c137daa0f55c4170356472eb6e60e4dcd481636f2c0d0373b386b8f3cf259eab24f33104cbea503d993d56103519b949ec4ba869b4563d0669d1e687c0fb7df414d37df0debef2fda55288cb8682615725425723b6e8e5235117a989470854454d758ef36e54835a154"}]}}, {{0x9, 0x5, 0xd, 0x2, 0x200, 0x6, 0x3, 0x6}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0x0, 0x7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x321b}]}}, {{0x9, 0x5, 0x8, 0x2, 0x200, 0x5c, 0x50, 0x2}}, {{0x9, 0x5, 0xc, 0x10, 0x200, 0x8, 0x4, 0x43}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x8, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5}, @generic={0x39, 0x2, "1e08bff177c9c3ee4a40e363e8c889a3211bb7d5ac2b049526a5ebccdacb8e8257159a4a7776cf30d778681822e8e0f2c5cb18a10d073a"}]}}]}}, {{0x9, 0x4, 0xaa, 0x9, 0x4, 0x45, 0xcb, 0xa5, 0x5, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "106e937f"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x401, 0x7}, [@mdlm={0x15, 0x24, 0x12, 0x9}, @mbim={0xc, 0x24, 0x1b, 0x0, 0x6, 0x7, 0x0, 0x1, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x8}]}], [{{0x9, 0x5, 0x0, 0x0, 0x40, 0x10, 0xe, 0xf7}}, {{0x9, 0x5, 0xf, 0x10, 0xfa7, 0xf, 0x9e, 0x36, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0x5a38}]}}, {{0x9, 0x5, 0x3, 0x3, 0x10, 0x5, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x6}]}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x7, 0x4, 0x8, [@generic={0x2b, 0x0, "7af1474a8fda33b63c4a99d9a85350cafb18443426ea066cbf1e59121cd83d151ddf04de26c6951c22"}]}}]}}]}}]}}, &(0x7f0000002a80)={0xa, &(0x7f00000029c0)={0xa, 0x6, 0x250, 0x5, 0x6, 0x4, 0x20}, 0x5, &(0x7f0000002a00)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f0000002a40)=@lang_id={0x4, 0x3, 0xc04}}]}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io$rtl8150(r6, &(0x7f0000002c00)={0x14, &(0x7f0000002ac0)={0x60, 0x31, 0xd2, {0xd2, 0x5, "c7784a864f4b5ef893ba1f975c4be2c475aeaf2cffc688a6cb0421b4b1b0b134e431718f5b0c537cd8c0d7be622392d37827e9bc09ad29def8a07280d06b3ba0b204c1e2b5784fa38465de66d432438b0bbb7e60dff9f077b39621015e823825b09d31fca856b29fa3c236074d1bd82fc5392883de0825e104c3be83c9e9208c59965665be22151d5d8accd6941150778328426430661c07ddcb38d8bf661957b960832ef4fc6b1e1c30effa6bb30c48e0d8ec3eebf874cb0a623d7d1a7665f521c3745868cb3db0b7e6fb5996835417"}}, &(0x7f0000002bc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}}, &(0x7f0000002e00)={0x2c, &(0x7f0000002c40)={0x20, 0x30, 0x93, "15318f098b8e1826d04755b7f307eb4d9ddc8b20b94ef2f340c0f7db815eae7742482ab301d66d5f9a4387e2bce6b021bd1b4a363bce42564f5bb0307139e6b9cfb5e3f546a6b63c834e48e144f713398311851b3b5bb7e0dd7004ea89cd633593515929f44ab5ea24754c7c47c98626ab83ba9c453e60e9b66fdb0bae305dc79bd38edfe37f1515a1c4602e493356114264a7"}, &(0x7f0000002d00)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000002d40)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000002d80)={0xc0, 0x5, 0x4, "d0aa9a96"}, &(0x7f0000002dc0)}) (async) syz_usb_control_io$rtl8150(r6, &(0x7f0000002c00)={0x14, &(0x7f0000002ac0)={0x60, 0x31, 0xd2, {0xd2, 0x5, "c7784a864f4b5ef893ba1f975c4be2c475aeaf2cffc688a6cb0421b4b1b0b134e431718f5b0c537cd8c0d7be622392d37827e9bc09ad29def8a07280d06b3ba0b204c1e2b5784fa38465de66d432438b0bbb7e60dff9f077b39621015e823825b09d31fca856b29fa3c236074d1bd82fc5392883de0825e104c3be83c9e9208c59965665be22151d5d8accd6941150778328426430661c07ddcb38d8bf661957b960832ef4fc6b1e1c30effa6bb30c48e0d8ec3eebf874cb0a623d7d1a7665f521c3745868cb3db0b7e6fb5996835417"}}, &(0x7f0000002bc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}}, &(0x7f0000002e00)={0x2c, &(0x7f0000002c40)={0x20, 0x30, 0x93, "15318f098b8e1826d04755b7f307eb4d9ddc8b20b94ef2f340c0f7db815eae7742482ab301d66d5f9a4387e2bce6b021bd1b4a363bce42564f5bb0307139e6b9cfb5e3f546a6b63c834e48e144f713398311851b3b5bb7e0dd7004ea89cd633593515929f44ab5ea24754c7c47c98626ab83ba9c453e60e9b66fdb0bae305dc79bd38edfe37f1515a1c4602e493356114264a7"}, &(0x7f0000002d00)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000002d40)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000002d80)={0xc0, 0x5, 0x4, "d0aa9a96"}, &(0x7f0000002dc0)}) syz_usb_control_io$sierra_net(r5, &(0x7f0000002ec0)={0x14, &(0x7f0000002e40)={0x20, 0xe, 0x24, {0x24, 0x9, "8bd63d0f4c648c930ad78afb2f80530c9b4259166ed6577a72a23ad5a69bb5bca2f7"}}, &(0x7f0000002e80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x430}}}, &(0x7f0000003480)={0x1c, &(0x7f0000002f00)={0x0, 0x16, 0xd1, "c462aacce37fcb72869942e982ed504718f907de3ef1172f5bef7e3391d9082156c66372ba95b876bc5b984073c896164c685fde2553a6a7f7b87a0c94f0c069c37a3842d3350d6494ed558290121dd59c8036a19ad0578d7c163c10f22e9f7474c1a632d53b30a4b80a58fbfa424f24e08e82112e34abc597da405c404542df057e09b30f99e36fa29354fc62e94f853e9118644787301f6c82c50c16e900c6cab909a420da107024717998f8a5274e780c4a4c9ba7a0d33a4dd2e93a6bb1dbea77e0b0a67ca70fc1240c4f19b3e0454b"}, &(0x7f0000003000)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000003440)={0x21, 0x0, 0x4, "88be8ed7"}}) ioctl$KVM_GET_SREGS2(r2, 0x8140aecc, &(0x7f00000034c0)) (async) ioctl$KVM_GET_SREGS2(r2, 0x8140aecc, &(0x7f00000034c0)) ioctl$SIOCX25SDTEFACILITIES(r2, 0x89eb, &(0x7f0000003600)={0xfff, 0x41a0, 0x1, 0x7, 0x0, 0x28, 0x1d, "57d263e6f4cbd95caf4be8b5dba93c06d25e35ae", "1b29db3228acb18445dd8cfb8c02942799a51445"}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000003780)={'erspan0\x00', &(0x7f0000003640)={'erspan0\x00', 0x0, 0x20, 0x1, 0x89, 0x9, {{0x44, 0x4, 0x3, 0x2c, 0x110, 0x64, 0x0, 0x7, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x63, 0x0, [{0x0, 0x10, "de269f6b2e0df9cdfaaf327a5285"}, {0x7, 0x7, "5a35280e0d"}, {0x1, 0xe, "cfc5b8714a9c92413830992b"}, {0x7, 0xe, "dcb18ab1bd3ac2543982a403"}, {0x670e837eb58bc1e, 0x12, "f89581ce51b5f52a9a05b23485a19ce7"}, {0x0, 0x11, "b87138453969aeeb3ee380731ef671"}, {0x2, 0x7, "a57de9db5d"}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @end, @end, @ssrr={0x89, 0x17, 0x35, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @end, @cipso={0x86, 0x75, 0x3, [{0x0, 0x6, "bb732b15"}, {0xc, 0x10, "f50e350b36a8966e61d94334df0f"}, {0x2, 0x4, "2605"}, {0x1, 0xc, "65cb635e241e6c2c3c2d"}, {0x2, 0x6, "7be4b46d"}, {0x6, 0x5, "edf2cf"}, {0x6, 0x10, "46b8655c64bd226d70dec858ea15"}, {0x6, 0x11, "a8a32741a66f857f7e5826816ec818"}, {0x7, 0x10, "259f3c4e315e7d1e8ae7ff9a836f"}, {0x1, 0xd, "20d5476a11d3ef9f9b6ea7"}]}]}}}}}) ioctl$BTRFS_IOC_LOGICAL_INO(r7, 0xc0389424, &(0x7f0000003800)={0x8, 0x40, '\x00', 0x1, &(0x7f00000037c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003900)={&(0x7f0000003880)={0x44, 0x1, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_LABELS_MASK={0x18, 0x17, [0x5, 0x3, 0x9, 0x9, 0x279]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) (async) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003900)={&(0x7f0000003880)={0x44, 0x1, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_LABELS_MASK={0x18, 0x17, [0x5, 0x3, 0x9, 0x9, 0x279]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000003ac0)={0x14, &(0x7f0000003980)={0x20, 0x10, 0xec, {0xec, 0x21, "eb38a26642996b86ec5f2b896a60e65d50cd2186c74029d6db5c5f02132376a748acdfb7a80b2ecd0488c5b000e328f24519625226ba5f29b0e1ee7d62025d7d393992400bdf4c6e67fcfccfeee5606c47bc3e12db612c58fde94c98e1cd9533a1a6f3705bb9894ddf74ed7a0a70781ff2f5cb7291f04187f77405904af17605f733657fe3a6fd44d42f554cc3e75cfd78cf8c5cd0a3601468ace1cdc3692e72b320abb96d4599128e66ac64e8fd24ce344d57f397cd9d3513df9873b8583a185101d141e5702d42fe21b1d449cd17c7fc4bbc4c6a16811cce4e21fe82f609526f05c58c66ce9993409e"}}, &(0x7f0000003a80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000003c00)={0x1c, &(0x7f0000003b00)={0x40, 0x11, 0x78, "721304b952d8e43d3363a49b496c167dd1bc53b1cfdee419517b22a2855423b0edb8587d12fa19cf18c4f836b451154a9607f195f3df9803a3cfa2eeecb341d66373e99ff335c33779bf13df66f444852e187e6b5c847f1ae2059cf064294b78ab9460a2972fdad140c2a0f37fd6b9b7f127f17586d49ce2"}, &(0x7f0000003b80)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000003bc0)={0x0, 0x8, 0x1, 0x9}}) 395.800751ms ago: executing program 2 (id=376): r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) 144.015236ms ago: executing program 2 (id=377): r0 = shmget$private(0x0, 0x2000, 0x54000200, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000000)=""/21) r1 = shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffc000/0x2000)=nil) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x5, 0x9, 0x7, 0x2, 0xf56}) shmctl$SHM_LOCK(r0, 0xb) r2 = shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) shmctl$IPC_RMID(r0, 0x0) ioctl$XFS_IOC_BULKSTAT(r3, 0x8040587f, &(0x7f0000000180)={{0x7ff, 0x5, 0xecb8, 0x11c2425, 0x80}, &(0x7f00000000c0)=[{}]}) r4 = syz_clone(0x110000, &(0x7f0000000200)="d2039983439538a11171a2f4a81284de52056ed6592d766d3e8deb51648822299edb92a643", 0x25, 0x0, &(0x7f0000000280), &(0x7f00000002c0)="c5a612819b450e392649905ede4f31324453f0d4b71eff040af03abad3d954b07f6a5566b938df5e2a151aa557bacac35d49f08751f67d6a6e51393ecfd03ee4249e0c80654809077319d3f65f2c1386feba533eff5764616d8867060634a06e7d147821dc571a0220e344b082a579f2de29ba81dbc4d139770e9b7e") shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000380)=""/7) shmctl$SHM_STAT(0x0, 0xd, &(0x7f00000003c0)=""/75) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x800448d4, &(0x7f0000000440)="6d0003b0b4b7647a67c70115b01ba0a61750ab1bc17441b2cb525508438d00d3e2824e7323b6addb8ea8c40f6aeb65fb9a4c353a7cea292ca14f3b84baa0c90ec11ff32bcb7b696671d31d3432b7030a86b906392ba41de38d16bf3e846db1ff9ec4a366467b7468f81a78") bind$bt_hci(r5, &(0x7f00000004c0)={0x1f, 0x3}, 0x6) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000500), 0x400000, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x13) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r6, 0x4068aea3, &(0x7f0000000540)={0xa8, 0x0, 0x1}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) shmdt(r2) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@remote, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@private1}}, &(0x7f0000000700)=0xe8) statx(0xffffffffffffffff, &(0x7f0000000740)='./file0\x00', 0x4000, 0x4, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000880)=0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000008c0)=0x0) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000900)={{0x1, r8, r9, r10, 0xffffffffffffffff, 0x4, 0x1000}, 0x15, 0x0, 0x1, 0xb, r4, r11, 0x1}) syz_open_dev$MSR(&(0x7f0000000980), 0x393c, 0x0) fchmod(r7, 0x2) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000a40)={0x48, 0x1, 0x0, 0x0, 0x5, 0x3}) 0s ago: executing program 2 (id=378): mount(&(0x7f00000001c0)=@filename='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400010000000900020073797a32000000001400078008001240ff00000008001340000000000500050002000000050001000600000013000300686173683a6e65742c696661636500"], 0x60}, 0x1, 0x0, 0x0, 0x20020800}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) ftruncate(r2, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) pread64(r0, &(0x7f0000002240)=""/237, 0xfdef, 0x4eb) kernel console output (not intermixed with test programs): yz.4.43'. [ 101.525666][ T5947] capability: warning: `syz.4.44' uses 32-bit capabilities (legacy support in use) [ 101.531086][ T5738] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 101.835696][ T5738] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 101.835785][ T5738] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 101.835817][ T5738] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 101.835847][ T5738] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 101.835871][ T5738] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 101.848642][ T5738] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 101.848672][ T5738] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.848742][ T5738] usb 1-1: Product: syz [ 101.848755][ T5738] usb 1-1: Manufacturer: syz [ 101.848769][ T5738] usb 1-1: SerialNumber: syz [ 102.025371][ T5738] usb 1-1: config 0 descriptor?? [ 102.123240][ T5738] iguanair 1-1:0.0: probe with driver iguanair failed with error -12 [ 102.234147][ T126] rndis_host 3-1:8.135: More than one union descriptor, skipping ... [ 102.234168][ T126] rndis_host 3-1:8.135: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 102.255039][ T126] cdc_acm 3-1:8.135: More than one union descriptor, skipping ... [ 102.267408][ T5947] overlayfs: upper fs does not support file handles, falling back to index=off. [ 102.479073][ T126] usb 3-1: USB disconnect, device number 3 [ 103.661073][ T126] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 103.801596][ T126] usb 3-1: device descriptor read/64, error -71 [ 103.815810][ T5974] program syz.1.51 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.827000][ T5974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.51'. [ 104.121076][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 104.122108][ T126] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 104.219958][ T5738] usb 1-1: USB disconnect, device number 2 [ 104.291784][ T126] usb 3-1: device descriptor read/64, error -71 [ 104.316620][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 104.316650][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.391143][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 104.454250][ T126] usb usb3-port1: attempt power cycle [ 104.455811][ T10] usb 5-1: config 0 descriptor?? [ 104.490206][ T10] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 104.642838][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 104.643075][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 104.643100][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 104.643121][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 104.643144][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 104.649774][ T9] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 104.649805][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.649825][ T9] usb 2-1: Product: syz [ 104.649839][ T9] usb 2-1: Manufacturer: syz [ 104.649853][ T9] usb 2-1: SerialNumber: syz [ 104.784979][ T9] usb 2-1: config 0 descriptor?? [ 104.823790][ T9] iguanair 2-1:0.0: probe with driver iguanair failed with error -12 [ 104.951318][ T126] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 104.952264][ T10] gspca_stv06xx: I2C: Read error writing address: -71 [ 104.973951][ T126] usb 3-1: device descriptor read/8, error -71 [ 105.006980][ T10] usb 5-1: USB disconnect, device number 2 [ 105.113785][ T5989] openvswitch: netlink: EtherType 0 is less than min 600 [ 105.199888][ T5991] openvswitch: netlink: EtherType 0 is less than min 600 [ 105.237474][ T126] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 105.277113][ T126] usb 3-1: device descriptor read/8, error -71 [ 105.381416][ T126] usb usb3-port1: unable to enumerate USB device [ 105.550433][ T5999] FAULT_INJECTION: forcing a failure. [ 105.550433][ T5999] name failslab, interval 1, probability 0, space 0, times 0 [ 105.550954][ T5999] CPU: 1 UID: 0 PID: 5999 Comm: syz.3.59 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 105.550995][ T5999] Tainted: [L]=SOFTLOCKUP [ 105.551004][ T5999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 105.551017][ T5999] Call Trace: [ 105.551023][ T5999] [ 105.551029][ T5999] dump_stack_lvl+0xe8/0x150 [ 105.551053][ T5999] should_fail_ex+0x46b/0x600 [ 105.551079][ T5999] should_failslab+0xa8/0x100 [ 105.551097][ T5999] __kmalloc_cache_noprof+0x84/0x690 [ 105.551115][ T5999] ? binder_transaction+0x22c9/0x6fa0 [ 105.551137][ T5999] binder_transaction+0x22c9/0x6fa0 [ 105.551183][ T5999] ? __pfx_binder_transaction+0x10/0x10 [ 105.551214][ T5999] ? __lock_acquire+0x6b5/0x2cf0 [ 105.551242][ T5999] ? __lock_acquire+0x6b5/0x2cf0 [ 105.551269][ T5999] ? __lock_acquire+0x6b5/0x2cf0 [ 105.551290][ T5999] ? __lock_acquire+0x6b5/0x2cf0 [ 105.551312][ T5999] ? __might_fault+0xaf/0x130 [ 105.551328][ T5999] ? __might_fault+0xaf/0x130 [ 105.551362][ T5999] binder_ioctl_write_read+0xb37/0xa490 [ 105.551380][ T5999] ? is_bpf_text_address+0x26/0x2b0 [ 105.551409][ T5999] ? __kernel_text_address+0xd/0x30 [ 105.551442][ T5999] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 105.551459][ T5999] ? stack_depot_save_flags+0x33/0x810 [ 105.551488][ T5999] ? do_raw_spin_lock+0x12b/0x2f0 [ 105.551520][ T5999] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 105.551540][ T5999] ? reacquire_held_locks+0x104/0x190 [ 105.551559][ T5999] ? rt_spin_lock+0x1e0/0x400 [ 105.551576][ T5999] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 105.551596][ T5999] ? rt_spin_unlock+0x14f/0x200 [ 105.551628][ T5999] ? binder_get_thread+0x177/0x6d0 [ 105.551648][ T5999] binder_ioctl+0x426/0x1b10 [ 105.551666][ T5999] ? tomoyo_path_number_perm+0x219/0x630 [ 105.551685][ T5999] ? tomoyo_path_number_perm+0x219/0x630 [ 105.551705][ T5999] ? do_vfs_ioctl+0x117b/0x1540 [ 105.551723][ T5999] ? __pfx_binder_ioctl+0x10/0x10 [ 105.551739][ T5999] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 105.551757][ T5999] ? __pfx_smack_log+0x10/0x10 [ 105.551773][ T5999] ? smk_access+0x14c/0x4e0 [ 105.551793][ T5999] ? smk_tskacc+0x311/0x3a0 [ 105.551812][ T5999] ? smack_file_ioctl+0x2c2/0x360 [ 105.551832][ T5999] ? __pfx_smack_file_ioctl+0x10/0x10 [ 105.551856][ T5999] ? __fget_files+0x2a/0x420 [ 105.551876][ T5999] ? __fget_files+0x3a6/0x420 [ 105.551897][ T5999] ? __fget_files+0x2a/0x420 [ 105.551921][ T5999] ? bpf_lsm_file_ioctl+0x9/0x20 [ 105.551941][ T5999] ? __pfx_binder_ioctl+0x10/0x10 [ 105.551958][ T5999] __se_sys_ioctl+0xff/0x170 [ 105.551975][ T5999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.551990][ T5999] do_syscall_64+0x15f/0xf80 [ 105.552003][ T5999] ? trace_irq_disable+0x3b/0x140 [ 105.552018][ T5999] ? clear_bhb_loop+0x40/0x90 [ 105.552035][ T5999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.552047][ T5999] RIP: 0033:0x7fc551abcdd9 [ 105.552062][ T5999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.552072][ T5999] RSP: 002b:00007fc54fd16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 105.552088][ T5999] RAX: ffffffffffffffda RBX: 00007fc551d35fa0 RCX: 00007fc551abcdd9 [ 105.552098][ T5999] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 105.552106][ T5999] RBP: 00007fc54fd16090 R08: 0000000000000000 R09: 0000000000000000 [ 105.552114][ T5999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.552122][ T5999] R13: 00007fc551d36038 R14: 00007fc551d35fa0 R15: 00007ffc45a3fd28 [ 105.552145][ T5999] [ 106.080614][ T6004] netlink: 44 bytes leftover after parsing attributes in process `syz.3.61'. [ 106.080645][ T6004] netlink: 35 bytes leftover after parsing attributes in process `syz.3.61'. [ 106.109366][ T6004] netlink: 'syz.3.61': attribute type 5 has an invalid length. [ 106.109392][ T6004] netlink: 'syz.3.61': attribute type 6 has an invalid length. [ 106.109402][ T6004] netlink: 35 bytes leftover after parsing attributes in process `syz.3.61'. [ 106.260593][ T6009] program syz.4.63 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.287319][ T6009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.63'. [ 106.293504][ T5738] IPVS: starting estimator thread 0... [ 106.381125][ T6010] IPVS: using max 11 ests per chain, 26400 per kthread [ 106.434110][ C0] vcan0: j1939_tp_rxtimer: 0xffff888035212800: rx timeout, send abort [ 106.438062][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888035212800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 106.491015][ T126] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 106.550251][ T6014] FAULT_INJECTION: forcing a failure. [ 106.550251][ T6014] name failslab, interval 1, probability 0, space 0, times 0 [ 106.550274][ T6014] CPU: 1 UID: 0 PID: 6014 Comm: syz.4.64 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 106.550288][ T6014] Tainted: [L]=SOFTLOCKUP [ 106.550292][ T6014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 106.550298][ T6014] Call Trace: [ 106.550302][ T6014] [ 106.550306][ T6014] dump_stack_lvl+0xe8/0x150 [ 106.550323][ T6014] should_fail_ex+0x46b/0x600 [ 106.550342][ T6014] should_failslab+0xa8/0x100 [ 106.550367][ T6014] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 106.550386][ T6014] ? __alloc_skb+0x1d0/0x7d0 [ 106.550401][ T6014] ? lockdep_hardirqs_on+0x7a/0x110 [ 106.550424][ T6014] __alloc_skb+0x1d0/0x7d0 [ 106.550440][ T6014] ? netlink_ack_tlv_len+0x6c/0x210 [ 106.550462][ T6014] netlink_ack+0x146/0xa50 [ 106.550476][ T6014] ? __pfx_genl_rcv_msg+0x10/0x10 [ 106.550488][ T6014] ? ref_tracker_free+0x673/0x820 [ 106.550497][ T6014] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 106.550512][ T6014] ? __pfx_nl80211_post_doit+0x10/0x10 [ 106.550525][ T6014] ? __pfx_ref_tracker_free+0x10/0x10 [ 106.550534][ T6014] ? __asan_memcpy+0x40/0x70 [ 106.550547][ T6014] ? __skb_clone+0x63/0x7a0 [ 106.550562][ T6014] netlink_rcv_skb+0x2b6/0x4b0 [ 106.550573][ T6014] ? __pfx_genl_rcv_msg+0x10/0x10 [ 106.550587][ T6014] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 106.550606][ T6014] ? netlink_deliver_tap+0x2e/0x1b0 [ 106.550616][ T6014] ? netlink_deliver_tap+0x2e/0x1b0 [ 106.550629][ T6014] genl_rcv+0x28/0x40 [ 106.550640][ T6014] netlink_unicast+0x780/0x920 [ 106.550661][ T6014] netlink_sendmsg+0x813/0xb40 [ 106.550676][ T6014] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.550688][ T6014] ? unwind_get_return_address+0x4d/0x90 [ 106.550703][ T6014] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 106.550716][ T6014] ____sys_sendmsg+0x94c/0x9c0 [ 106.550730][ T6014] ? __pfx_____sys_sendmsg+0x10/0x10 [ 106.550746][ T6014] ? import_iovec+0x73/0xa0 [ 106.550759][ T6014] ___sys_sendmsg+0x2a5/0x360 [ 106.550770][ T6014] ? __lock_acquire+0x6b5/0x2cf0 [ 106.550786][ T6014] ? __pfx____sys_sendmsg+0x10/0x10 [ 106.550819][ T6014] ? __fget_files+0x2a/0x420 [ 106.550833][ T6014] ? __fget_files+0x3a6/0x420 [ 106.550852][ T6014] __x64_sys_sendmsg+0x1c3/0x2a0 [ 106.550865][ T6014] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 106.550881][ T6014] ? __pfx_ksys_write+0x10/0x10 [ 106.550900][ T6014] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.550918][ T6014] do_syscall_64+0x15f/0xf80 [ 106.550932][ T6014] ? trace_irq_disable+0x3b/0x140 [ 106.550951][ T6014] ? clear_bhb_loop+0x40/0x90 [ 106.550973][ T6014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.550988][ T6014] RIP: 0033:0x7f081f8fcdd9 [ 106.551004][ T6014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.551016][ T6014] RSP: 002b:00007f081db56028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 106.551034][ T6014] RAX: ffffffffffffffda RBX: 00007f081fb75fa0 RCX: 00007f081f8fcdd9 [ 106.551045][ T6014] RDX: 0000000000004004 RSI: 0000200000000a40 RDI: 0000000000000003 [ 106.551056][ T6014] RBP: 00007f081db56090 R08: 0000000000000000 R09: 0000000000000000 [ 106.551065][ T6014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.551075][ T6014] R13: 00007f081fb76038 R14: 00007f081fb75fa0 R15: 00007ffec142b2f8 [ 106.551101][ T6014] [ 106.633149][ T126] usb 4-1: device descriptor read/64, error -71 [ 106.871089][ T126] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 107.022677][ T126] usb 4-1: device descriptor read/64, error -71 [ 107.131451][ T126] usb usb4-port1: attempt power cycle [ 107.203440][ T31] usb 2-1: USB disconnect, device number 4 [ 107.235686][ T5718] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 107.411054][ T5718] usb 5-1: Using ep0 maxpacket: 32 [ 107.433968][ T5718] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 107.433995][ T5718] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.434013][ T5718] usb 5-1: config 0 has no interface number 0 [ 107.434058][ T5718] usb 5-1: config 0 interface 8 altsetting 248 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 107.434086][ T5718] usb 5-1: config 0 interface 8 altsetting 248 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 107.434113][ T5718] usb 5-1: config 0 interface 8 has no altsetting 0 [ 107.453510][ T5718] usb 5-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 107.453541][ T5718] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.453560][ T5718] usb 5-1: Product: syz [ 107.453573][ T5718] usb 5-1: Manufacturer: syz [ 107.453603][ T5718] usb 5-1: SerialNumber: syz [ 107.466993][ T5718] usb 5-1: config 0 descriptor?? [ 107.508792][ T126] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 107.533553][ T126] usb 4-1: device descriptor read/8, error -71 [ 107.786041][ T6022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.67'. [ 107.786259][ T6022] netlink: 'syz.1.67': attribute type 2 has an invalid length. [ 107.801033][ T126] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 107.845677][ T126] usb 4-1: device descriptor read/8, error -71 [ 107.873156][ T5718] ath6kl: Failed to submit usb control message: -71 [ 107.873189][ T5718] ath6kl: unable to send the bmi data to the device: -71 [ 107.873197][ T5718] ath6kl: Unable to send get target info: -71 [ 107.903859][ T5718] ath6kl: Failed to init ath6kl core: -71 [ 107.907802][ T5718] ath6kl_usb 5-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 107.941744][ T5718] usb 5-1: USB disconnect, device number 3 [ 107.969166][ T126] usb usb4-port1: unable to enumerate USB device [ 108.678498][ T6042] team_slave_0: mtu greater than device maximum [ 109.071099][ T31] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 109.204994][ T31] usb 1-1: device descriptor read/64, error -71 [ 109.230110][ T6054] FAULT_INJECTION: forcing a failure. [ 109.230110][ T6054] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 109.230146][ T6054] CPU: 0 UID: 0 PID: 6054 Comm: syz.1.79 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 109.230172][ T6054] Tainted: [L]=SOFTLOCKUP [ 109.230177][ T6054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 109.230186][ T6054] Call Trace: [ 109.230193][ T6054] [ 109.230200][ T6054] dump_stack_lvl+0xe8/0x150 [ 109.230225][ T6054] should_fail_ex+0x46b/0x600 [ 109.230259][ T6054] _copy_from_user+0x2d/0xb0 [ 109.230276][ T6054] video_usercopy+0x36f/0x1450 [ 109.230296][ T6054] ? smk_tskacc+0x311/0x3a0 [ 109.230310][ T6054] ? __pfx___video_do_ioctl+0x10/0x10 [ 109.230327][ T6054] ? __pfx_video_usercopy+0x10/0x10 [ 109.230341][ T6054] ? smack_file_ioctl+0x2c2/0x360 [ 109.230368][ T6054] ? __fget_files+0x2a/0x420 [ 109.230388][ T6054] ? __fget_files+0x3a6/0x420 [ 109.230408][ T6054] v4l2_ioctl+0x190/0x1e0 [ 109.230436][ T6054] ? __pfx_v4l2_ioctl+0x10/0x10 [ 109.230452][ T6054] __se_sys_ioctl+0xff/0x170 [ 109.230467][ T6054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.230481][ T6054] do_syscall_64+0x15f/0xf80 [ 109.230513][ T6054] ? trace_irq_disable+0x3b/0x140 [ 109.230529][ T6054] ? clear_bhb_loop+0x40/0x90 [ 109.230546][ T6054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.230559][ T6054] RIP: 0033:0x7f10d0f2cdd9 [ 109.230573][ T6054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.230584][ T6054] RSP: 002b:00007f10cf17e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 109.230598][ T6054] RAX: ffffffffffffffda RBX: 00007f10d11a5fa0 RCX: 00007f10d0f2cdd9 [ 109.230607][ T6054] RDX: 0000200000000140 RSI: 00000000c014563b RDI: 0000000000000003 [ 109.230616][ T6054] RBP: 00007f10cf17e090 R08: 0000000000000000 R09: 0000000000000000 [ 109.230624][ T6054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.230631][ T6054] R13: 00007f10d11a6038 R14: 00007f10d11a5fa0 R15: 00007ffdafc8df58 [ 109.230653][ T6054] [ 109.266598][ T5707] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 109.453646][ T31] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 109.620954][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.640989][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.650973][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.660990][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.670961][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.680957][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.690955][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.710961][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.720961][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.730990][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.093007][ T31] usb 1-1: device descriptor read/64, error -71 [ 111.170569][ T5707] usb 3-1: Using ep0 maxpacket: 16 [ 111.186771][ T5707] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 111.211871][ T5707] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 111.211900][ T5707] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.211919][ T5707] usb 3-1: Product: syz [ 111.211933][ T5707] usb 3-1: Manufacturer: syz [ 111.211947][ T5707] usb 3-1: SerialNumber: syz [ 111.212982][ T31] usb usb1-port1: attempt power cycle [ 111.283614][ T5707] usb 3-1: config 0 descriptor?? [ 111.317855][ T5707] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 111.317888][ T5707] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 111.614953][ T6063] netlink: 20 bytes leftover after parsing attributes in process `syz.3.83'. [ 111.651102][ T126] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 111.651354][ T31] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 111.780702][ T31] usb 1-1: device descriptor read/8, error -71 [ 111.837100][ T126] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 111.837133][ T126] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 217 [ 111.837182][ T126] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 111.837204][ T126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.877465][ T126] usb 5-1: config 0 descriptor?? [ 111.888943][ T6058] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 112.116792][ T5707] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 112.408078][ T126] ath6kl: Failed to submit usb control message: -71 [ 112.408130][ T126] ath6kl: unable to send the bmi data to the device: -71 [ 112.408144][ T126] ath6kl: Unable to send get target info: -71 [ 112.427796][ T126] ath6kl: Failed to init ath6kl core: -71 [ 112.429240][ T126] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 112.594628][ T126] usb 5-1: USB disconnect, device number 4 [ 113.247040][ T5707] em28xx 3-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 113.247069][ T5707] em28xx 3-1:0.0: board has no eeprom [ 113.521174][ T5707] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 113.521215][ T5707] em28xx 3-1:0.0: dvb set to bulk mode. [ 113.531457][ T10] em28xx 3-1:0.0: Binding DVB extension [ 113.663585][ T5707] usb 3-1: USB disconnect, device number 8 [ 113.738098][ T5707] em28xx 3-1:0.0: Disconnecting em28xx [ 113.818064][ T6087] netlink: 16 bytes leftover after parsing attributes in process `syz.3.89'. [ 113.881557][ T6087] veth1_to_team: entered promiscuous mode [ 114.528425][ T6087] veth1_to_team: left promiscuous mode [ 114.753306][ T6094] ======================================================= [ 114.753306][ T6094] WARNING: The mand mount option has been deprecated and [ 114.753306][ T6094] and is ignored by this kernel. Remove the mand [ 114.753306][ T6094] option from the mount to silence this warning. [ 114.753306][ T6094] ======================================================= [ 114.754390][ T10] em28xx 3-1:0.0: Registering input extension [ 114.755506][ T5707] em28xx 3-1:0.0: Closing input extension [ 114.814031][ T5733] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 114.962909][ T5733] usb 4-1: Using ep0 maxpacket: 32 [ 114.968421][ T5733] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.968455][ T5733] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.999302][ T5733] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 114.999333][ T5733] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 114.999352][ T5733] usb 4-1: Product: syz [ 114.999366][ T5733] usb 4-1: Manufacturer: syz [ 115.057230][ T5707] em28xx 3-1:0.0: Freeing device [ 115.070297][ T5733] hub 4-1:4.0: USB hub found [ 115.254180][ T6085] capability: warning: `syz.3.89' uses deprecated v2 capabilities in a way that may be insecure [ 115.380274][ T6107] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 115.454718][ T6109] netlink: 'syz.4.92': attribute type 1 has an invalid length. [ 115.549945][ T6111] netlink: 16 bytes leftover after parsing attributes in process `syz.4.92'. [ 115.832553][ T6109] 8021q: adding VLAN 0 to HW filter on device bond1 [ 116.222060][ T6111] veth1_to_team: entered promiscuous mode [ 116.321920][ T6111] veth1_to_team: left promiscuous mode [ 116.598981][ T5733] hub 4-1:4.0: config failed, can't read hub descriptor (err -22) [ 116.768791][ T5733] usb 4-1: USB disconnect, device number 6 [ 116.871434][ T6123] FAULT_INJECTION: forcing a failure. [ 116.871434][ T6123] name failslab, interval 1, probability 0, space 0, times 0 [ 116.871470][ T6123] CPU: 0 UID: 0 PID: 6123 Comm: syz.3.96 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 116.871495][ T6123] Tainted: [L]=SOFTLOCKUP [ 116.871501][ T6123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 116.871510][ T6123] Call Trace: [ 116.871516][ T6123] [ 116.871523][ T6123] dump_stack_lvl+0xe8/0x150 [ 116.871549][ T6123] should_fail_ex+0x46b/0x600 [ 116.871581][ T6123] should_failslab+0xa8/0x100 [ 116.871604][ T6123] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 116.871624][ T6123] ? __alloc_skb+0x1d0/0x7d0 [ 116.871640][ T6123] ? lockdep_hardirqs_on+0x7a/0x110 [ 116.871670][ T6123] __alloc_skb+0x1d0/0x7d0 [ 116.871686][ T6123] ? netlink_ack_tlv_len+0x6c/0x210 [ 116.871706][ T6123] netlink_ack+0x146/0xa50 [ 116.871722][ T6123] ? __pfx_genl_rcv_msg+0x10/0x10 [ 116.871741][ T6123] ? ref_tracker_free+0x673/0x820 [ 116.871757][ T6123] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 116.871777][ T6123] ? __pfx_nl80211_post_doit+0x10/0x10 [ 116.871798][ T6123] ? __pfx_ref_tracker_free+0x10/0x10 [ 116.871813][ T6123] ? __asan_memcpy+0x40/0x70 [ 116.871836][ T6123] ? __skb_clone+0x63/0x7a0 [ 116.871864][ T6123] netlink_rcv_skb+0x2b6/0x4b0 [ 116.871884][ T6123] ? __pfx_genl_rcv_msg+0x10/0x10 [ 116.871906][ T6123] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 116.871938][ T6123] ? netlink_deliver_tap+0x2e/0x1b0 [ 116.871956][ T6123] ? netlink_deliver_tap+0x2e/0x1b0 [ 116.871978][ T6123] genl_rcv+0x28/0x40 [ 116.871998][ T6123] netlink_unicast+0x780/0x920 [ 116.872034][ T6123] netlink_sendmsg+0x813/0xb40 [ 116.872059][ T6123] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.872080][ T6123] ? unwind_get_return_address+0x4d/0x90 [ 116.872106][ T6123] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 116.872128][ T6123] ____sys_sendmsg+0x94c/0x9c0 [ 116.872155][ T6123] ? __pfx_____sys_sendmsg+0x10/0x10 [ 116.872184][ T6123] ? import_iovec+0x73/0xa0 [ 116.872207][ T6123] ___sys_sendmsg+0x2a5/0x360 [ 116.872225][ T6123] ? __lock_acquire+0x6b5/0x2cf0 [ 116.872252][ T6123] ? __pfx____sys_sendmsg+0x10/0x10 [ 116.872307][ T6123] ? __fget_files+0x2a/0x420 [ 116.872331][ T6123] ? __fget_files+0x3a6/0x420 [ 116.872365][ T6123] __x64_sys_sendmsg+0x1c3/0x2a0 [ 116.872388][ T6123] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 116.872418][ T6123] ? __pfx_ksys_write+0x10/0x10 [ 116.872446][ T6123] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.872466][ T6123] do_syscall_64+0x15f/0xf80 [ 116.872482][ T6123] ? trace_irq_disable+0x3b/0x140 [ 116.872503][ T6123] ? clear_bhb_loop+0x40/0x90 [ 116.872525][ T6123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.872542][ T6123] RIP: 0033:0x7fc551abcdd9 [ 116.872559][ T6123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.872573][ T6123] RSP: 002b:00007fc54fd16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.872592][ T6123] RAX: ffffffffffffffda RBX: 00007fc551d35fa0 RCX: 00007fc551abcdd9 [ 116.872605][ T6123] RDX: 0000000020000004 RSI: 0000200000000180 RDI: 0000000000000003 [ 116.872616][ T6123] RBP: 00007fc54fd16090 R08: 0000000000000000 R09: 0000000000000000 [ 116.872627][ T6123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.872638][ T6123] R13: 00007fc551d36038 R14: 00007fc551d35fa0 R15: 00007ffc45a3fd28 [ 116.872674][ T6123] [ 117.397808][ T6138] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 117.495969][ T6140] FAULT_INJECTION: forcing a failure. [ 117.495969][ T6140] name failslab, interval 1, probability 0, space 0, times 0 [ 117.496001][ T6140] CPU: 0 UID: 0 PID: 6140 Comm: syz.3.101 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 117.496024][ T6140] Tainted: [L]=SOFTLOCKUP [ 117.496029][ T6140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 117.496039][ T6140] Call Trace: [ 117.496045][ T6140] [ 117.496052][ T6140] dump_stack_lvl+0xe8/0x150 [ 117.496077][ T6140] should_fail_ex+0x46b/0x600 [ 117.496108][ T6140] should_failslab+0xa8/0x100 [ 117.496127][ T6140] __kmalloc_cache_noprof+0x84/0x690 [ 117.496144][ T6140] ? drm_atomic_state_alloc+0xa9/0x100 [ 117.496170][ T6140] drm_atomic_state_alloc+0xa9/0x100 [ 117.496190][ T6140] drm_atomic_helper_disable_plane+0x41/0x200 [ 117.496210][ T6140] drm_mode_setplane+0x816/0xd90 [ 117.496236][ T6140] ? __pfx_drm_mode_setplane+0x10/0x10 [ 117.496268][ T6140] ? rt_spin_unlock+0x160/0x200 [ 117.496289][ T6140] ? drm_is_current_master+0x1a2/0x210 [ 117.496310][ T6140] drm_ioctl_kernel+0x2e2/0x3b0 [ 117.496331][ T6140] ? __pfx_drm_mode_setplane+0x10/0x10 [ 117.496347][ T6140] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 117.496372][ T6140] drm_ioctl+0x6c0/0xb80 [ 117.496386][ T6140] ? smk_tskacc+0x311/0x3a0 [ 117.496406][ T6140] ? __pfx_drm_mode_setplane+0x10/0x10 [ 117.496432][ T6140] ? __pfx_drm_ioctl+0x10/0x10 [ 117.496462][ T6140] ? __fget_files+0x2a/0x420 [ 117.496488][ T6140] ? bpf_lsm_file_ioctl+0x9/0x20 [ 117.496507][ T6140] ? __pfx_drm_ioctl+0x10/0x10 [ 117.496523][ T6140] __se_sys_ioctl+0xff/0x170 [ 117.496540][ T6140] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.496555][ T6140] do_syscall_64+0x15f/0xf80 [ 117.496571][ T6140] ? trace_irq_disable+0x3b/0x140 [ 117.496588][ T6140] ? clear_bhb_loop+0x40/0x90 [ 117.496606][ T6140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.496620][ T6140] RIP: 0033:0x7fc551abcdd9 [ 117.496635][ T6140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.496647][ T6140] RSP: 002b:00007fc54fd16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 117.496664][ T6140] RAX: ffffffffffffffda RBX: 00007fc551d35fa0 RCX: 00007fc551abcdd9 [ 117.496675][ T6140] RDX: 0000200000000a00 RSI: 00000000c03064b7 RDI: 0000000000000003 [ 117.496684][ T6140] RBP: 00007fc54fd16090 R08: 0000000000000000 R09: 0000000000000000 [ 117.496692][ T6140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.496702][ T6140] R13: 00007fc551d36038 R14: 00007fc551d35fa0 R15: 00007ffc45a3fd28 [ 117.496729][ T6140] [ 117.707027][ T6142] FAULT_INJECTION: forcing a failure. [ 117.707027][ T6142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.707061][ T6142] CPU: 1 UID: 0 PID: 6142 Comm: syz.4.104 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 117.707086][ T6142] Tainted: [L]=SOFTLOCKUP [ 117.707091][ T6142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 117.707101][ T6142] Call Trace: [ 117.707108][ T6142] [ 117.707115][ T6142] dump_stack_lvl+0xe8/0x150 [ 117.707141][ T6142] should_fail_ex+0x46b/0x600 [ 117.707172][ T6142] _copy_from_user+0x2d/0xb0 [ 117.707192][ T6142] raw_setsockopt+0x523/0x12f0 [ 117.707220][ T6142] ? __pfx_raw_setsockopt+0x10/0x10 [ 117.707244][ T6142] ? __fget_files+0x2a/0x420 [ 117.707271][ T6142] ? __fget_files+0x2a/0x420 [ 117.707293][ T6142] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 117.707309][ T6142] ? __pfx_raw_setsockopt+0x10/0x10 [ 117.707334][ T6142] do_sock_setsockopt+0x17c/0x1b0 [ 117.707358][ T6142] __x64_sys_setsockopt+0x143/0x1b0 [ 117.707379][ T6142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.707397][ T6142] do_syscall_64+0x15f/0xf80 [ 117.707414][ T6142] ? trace_irq_disable+0x3b/0x140 [ 117.707433][ T6142] ? clear_bhb_loop+0x40/0x90 [ 117.707458][ T6142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.707475][ T6142] RIP: 0033:0x7f081f8fcdd9 [ 117.707492][ T6142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.707505][ T6142] RSP: 002b:00007f081db56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 117.707523][ T6142] RAX: ffffffffffffffda RBX: 00007f081fb75fa0 RCX: 00007f081f8fcdd9 [ 117.707536][ T6142] RDX: 0000000000000007 RSI: 0000000000000065 RDI: 0000000000000004 [ 117.707554][ T6142] RBP: 00007f081db56090 R08: 0000000000000004 R09: 0000000000000000 [ 117.707565][ T6142] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 117.707575][ T6142] R13: 00007f081fb76038 R14: 00007f081fb75fa0 R15: 00007ffec142b2f8 [ 117.707603][ T6142] [ 118.129258][ T6151] binder: 6149:6151 ioctl 40046629 200000000180 returned -22 [ 118.253172][ T5718] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 118.461008][ T5718] usb 2-1: Using ep0 maxpacket: 8 [ 118.462797][ T5718] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 118.462851][ T5718] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 118.462873][ T5718] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 118.462896][ T5718] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 118.462921][ T5718] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 118.462958][ T5718] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 118.462977][ T5718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.499587][ T6154] netlink: 48 bytes leftover after parsing attributes in process `syz.3.107'. [ 118.701933][ T6157] IPv6: NLM_F_CREATE should be specified when creating new route [ 118.708813][ T6157] netlink: 12 bytes leftover after parsing attributes in process `syz.4.108'. [ 118.743391][ T5718] usb 2-1: usb_control_msg returned -32 [ 118.743446][ T5718] usbtmc 2-1:16.0: can't read capabilities [ 119.071137][ T126] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 119.742255][ T6165] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 2, id = 0 [ 119.832306][ T126] usb 4-1: Using ep0 maxpacket: 16 [ 119.836257][ T126] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.836286][ T126] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 119.839178][ T126] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 119.839206][ T126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.839226][ T126] usb 4-1: Product: syz [ 119.839239][ T126] usb 4-1: Manufacturer: syz [ 119.839253][ T126] usb 4-1: SerialNumber: syz [ 119.986831][ T5738] usb 2-1: USB disconnect, device number 5 [ 120.080236][ T126] usb 4-1: 0:2 : does not exist [ 120.345864][ T6176] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 120.402579][ T5733] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 120.755220][ T5733] usb 1-1: Using ep0 maxpacket: 16 [ 120.761052][ T5733] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 120.761079][ T5733] usb 1-1: config 1 has no interface number 0 [ 120.761122][ T5733] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 120.761147][ T5733] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 120.761169][ T5733] usb 1-1: config 1 interface 105 has no altsetting 0 [ 120.807003][ T5733] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 120.807032][ T5733] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 120.807051][ T5733] usb 1-1: Product: syz [ 120.807064][ T5733] usb 1-1: Manufacturer: syz [ 120.807077][ T5733] usb 1-1: SerialNumber: syz [ 121.633906][ T126] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 121.838240][ T6171] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 121.881478][ T6171] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 122.307934][ T6171] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 122.308189][ T6171] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 122.399403][ T6203] FAULT_INJECTION: forcing a failure. [ 122.399403][ T6203] name failslab, interval 1, probability 0, space 0, times 0 [ 122.399455][ T6203] CPU: 0 UID: 0 PID: 6203 Comm: syz.1.123 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 122.399481][ T6203] Tainted: [L]=SOFTLOCKUP [ 122.399487][ T6203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 122.399505][ T6203] Call Trace: [ 122.399512][ T6203] [ 122.399519][ T6203] dump_stack_lvl+0xe8/0x150 [ 122.399557][ T6203] should_fail_ex+0x46b/0x600 [ 122.399590][ T6203] should_failslab+0xa8/0x100 [ 122.399613][ T6203] kmem_cache_alloc_noprof+0x87/0x680 [ 122.399633][ T6203] ? sk_prot_alloc+0x57/0x210 [ 122.399658][ T6203] sk_prot_alloc+0x57/0x210 [ 122.399676][ T6203] ? sk_alloc+0x27/0x390 [ 122.399697][ T6203] sk_alloc+0x3a/0x390 [ 122.399721][ T6203] inet_create+0x7a0/0x1010 [ 122.399743][ T6203] ? inet_create+0x9c/0x1010 [ 122.399766][ T6203] __sock_create+0x4b2/0x9d0 [ 122.399799][ T6203] udp_sock_create4+0xca/0x480 [ 122.399822][ T6203] ? __pfx_udp_sock_create4+0x10/0x10 [ 122.399855][ T6203] rxrpc_lookup_local+0xdbc/0x15c0 [ 122.399884][ T6203] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 122.399923][ T6203] ? lockdep_hardirqs_on+0x7a/0x110 [ 122.399948][ T6203] rxrpc_sendmsg+0x399/0x710 [ 122.399982][ T6203] ____sys_sendmsg+0x94c/0x9c0 [ 122.400009][ T6203] ? __pfx_____sys_sendmsg+0x10/0x10 [ 122.400040][ T6203] ? import_iovec+0x73/0xa0 [ 122.400065][ T6203] ___sys_sendmsg+0x2a5/0x360 [ 122.400084][ T6203] ? __lock_acquire+0x6b5/0x2cf0 [ 122.400112][ T6203] ? __pfx____sys_sendmsg+0x10/0x10 [ 122.400171][ T6203] ? __fget_files+0x2a/0x420 [ 122.400195][ T6203] ? __fget_files+0x3a6/0x420 [ 122.400231][ T6203] __x64_sys_sendmsg+0x1c3/0x2a0 [ 122.400253][ T6203] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 122.400285][ T6203] ? __pfx_ksys_write+0x10/0x10 [ 122.400314][ T6203] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.400334][ T6203] do_syscall_64+0x15f/0xf80 [ 122.400351][ T6203] ? trace_irq_disable+0x3b/0x140 [ 122.400372][ T6203] ? clear_bhb_loop+0x40/0x90 [ 122.400394][ T6203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.400412][ T6203] RIP: 0033:0x7f10d0f2cdd9 [ 122.400434][ T6203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.400449][ T6203] RSP: 002b:00007f10cf17e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.400472][ T6203] RAX: ffffffffffffffda RBX: 00007f10d11a5fa0 RCX: 00007f10d0f2cdd9 [ 122.400485][ T6203] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 122.400502][ T6203] RBP: 00007f10cf17e090 R08: 0000000000000000 R09: 0000000000000000 [ 122.400513][ T6203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.400524][ T6203] R13: 00007f10d11a6038 R14: 00007f10d11a5fa0 R15: 00007ffdafc8df58 [ 122.400556][ T6203] [ 122.482677][ T5718] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 122.650073][ T5718] usb 3-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 122.650102][ T5718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.650121][ T5718] usb 3-1: Product: syz [ 122.650134][ T5718] usb 3-1: Manufacturer: syz [ 122.650154][ T5718] usb 3-1: SerialNumber: syz [ 122.842815][ T6171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.843363][ T6171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.851610][ T5718] usb 3-1: config 0 descriptor?? [ 122.924917][ T5733] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 122.928124][ T5733] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 122.928720][ T5733] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 122.943895][ T5718] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 122.977159][ T6207] cgroup: fork rejected by pids controller in /syz1 [ 123.054312][ T5733] aqc111 1-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 9a:93:01:e4:e0:5b [ 123.057388][ T5733] usb 1-1: USB disconnect, device number 7 [ 123.097432][ T5733] aqc111 1-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 123.169878][ T6211] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 123.376007][ T9] usb 3-1: USB disconnect, device number 9 [ 123.552324][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 123.686159][ T126] usb 4-1: USB disconnect, device number 7 [ 123.702729][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 123.704913][ T10] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 123.704961][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 123.704982][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 123.705004][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 123.705025][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 123.705060][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 123.705083][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.898457][ T5733] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 123.900008][ T5733] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 123.921666][ T5733] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 124.076871][ T10] usb 5-1: usb_control_msg returned -32 [ 124.076936][ T10] usbtmc 5-1:16.0: can't read capabilities [ 124.742415][ T43] usb 5-1: USB disconnect, device number 5 [ 128.437184][ T6212] udevd[6212]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 130.534276][ T6355] FAULT_INJECTION: forcing a failure. [ 130.534276][ T6355] name failslab, interval 1, probability 0, space 0, times 0 [ 130.534311][ T6355] CPU: 1 UID: 0 PID: 6355 Comm: syz.2.141 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 130.534334][ T6355] Tainted: [L]=SOFTLOCKUP [ 130.534339][ T6355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 130.534349][ T6355] Call Trace: [ 130.534357][ T6355] [ 130.534364][ T6355] dump_stack_lvl+0xe8/0x150 [ 130.534389][ T6355] should_fail_ex+0x46b/0x600 [ 130.534419][ T6355] should_failslab+0xa8/0x100 [ 130.534441][ T6355] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 130.534461][ T6355] ? __alloc_skb+0x1d0/0x7d0 [ 130.534477][ T6355] ? lockdep_hardirqs_on+0x7a/0x110 [ 130.534499][ T6355] __alloc_skb+0x1d0/0x7d0 [ 130.534515][ T6355] ? netlink_ack_tlv_len+0x6c/0x210 [ 130.534537][ T6355] netlink_ack+0x146/0xa50 [ 130.534552][ T6355] ? __pfx_genl_rcv_msg+0x10/0x10 [ 130.534573][ T6355] ? ref_tracker_free+0x673/0x820 [ 130.534590][ T6355] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 130.534614][ T6355] ? __pfx_nl80211_post_doit+0x10/0x10 [ 130.534645][ T6355] ? __pfx_ref_tracker_free+0x10/0x10 [ 130.534661][ T6355] ? __asan_memcpy+0x40/0x70 [ 130.534683][ T6355] ? __skb_clone+0x63/0x7a0 [ 130.534715][ T6355] netlink_rcv_skb+0x2b6/0x4b0 [ 130.534735][ T6355] ? __pfx_genl_rcv_msg+0x10/0x10 [ 130.534758][ T6355] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 130.534789][ T6355] ? netlink_deliver_tap+0x2e/0x1b0 [ 130.534806][ T6355] ? netlink_deliver_tap+0x2e/0x1b0 [ 130.534834][ T6355] genl_rcv+0x28/0x40 [ 130.534855][ T6355] netlink_unicast+0x780/0x920 [ 130.534886][ T6355] netlink_sendmsg+0x813/0xb40 [ 130.534912][ T6355] ? __pfx_netlink_sendmsg+0x10/0x10 [ 130.534932][ T6355] ? unwind_get_return_address+0x4d/0x90 [ 130.534958][ T6355] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 130.534978][ T6355] ____sys_sendmsg+0x94c/0x9c0 [ 130.535003][ T6355] ? __pfx_____sys_sendmsg+0x10/0x10 [ 130.535032][ T6355] ? import_iovec+0x73/0xa0 [ 130.535055][ T6355] ___sys_sendmsg+0x2a5/0x360 [ 130.535074][ T6355] ? __lock_acquire+0x6b5/0x2cf0 [ 130.535100][ T6355] ? __pfx____sys_sendmsg+0x10/0x10 [ 130.535155][ T6355] ? __fget_files+0x2a/0x420 [ 130.535178][ T6355] ? __fget_files+0x3a6/0x420 [ 130.535211][ T6355] __x64_sys_sendmsg+0x1c3/0x2a0 [ 130.535233][ T6355] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 130.535262][ T6355] ? __pfx_ksys_write+0x10/0x10 [ 130.535286][ T6355] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.535301][ T6355] do_syscall_64+0x15f/0xf80 [ 130.535318][ T6355] ? clear_bhb_loop+0x40/0x90 [ 130.535336][ T6355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.535353][ T6355] RIP: 0033:0x7f9968dacdd9 [ 130.535370][ T6355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.535383][ T6355] RSP: 002b:00007f9966ffe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 130.535401][ T6355] RAX: ffffffffffffffda RBX: 00007f9969025fa0 RCX: 00007f9968dacdd9 [ 130.535413][ T6355] RDX: 0000000000008800 RSI: 0000200000001480 RDI: 0000000000000003 [ 130.535424][ T6355] RBP: 00007f9966ffe090 R08: 0000000000000000 R09: 0000000000000000 [ 130.535434][ T6355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.535444][ T6355] R13: 00007f9969026038 R14: 00007f9969025fa0 R15: 00007ffee1194bf8 [ 130.535473][ T6355] [ 131.175253][ T5733] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 131.323478][ T5733] usb 5-1: config 8 has an invalid interface number: 223 but max is 0 [ 131.323506][ T5733] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 131.323536][ T5733] usb 5-1: config 8 has no interface number 0 [ 131.323580][ T5733] usb 5-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 131.326574][ T5733] usb 5-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 131.326604][ T5733] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.326623][ T5733] usb 5-1: Product: syz [ 131.326637][ T5733] usb 5-1: Manufacturer: syz [ 131.326652][ T5733] usb 5-1: SerialNumber: syz [ 131.368920][ T126] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 131.601083][ T126] usb 4-1: Using ep0 maxpacket: 8 [ 131.623864][ T126] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 131.623921][ T126] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 131.623944][ T126] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 131.623966][ T126] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 131.623986][ T126] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 131.624024][ T126] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 131.624045][ T126] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.663952][ T5733] usb 5-1: USB disconnect, device number 6 [ 131.717903][ T1578] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.041321][ T126] usb 4-1: usb_control_msg returned -32 [ 132.041362][ T126] usbtmc 4-1:16.0: can't read capabilities [ 132.376589][ T5606] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 132.408910][ T6391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.153'. [ 132.442171][ T5606] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 132.488215][ T5606] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 132.498752][ T126] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 132.522566][ T5606] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 132.533037][ T5606] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 132.698599][ T5733] usb 4-1: USB disconnect, device number 8 [ 132.707877][ T126] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 132.707906][ T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.825671][ T126] usb 3-1: config 0 descriptor?? [ 132.966832][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.966898][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.061822][ T126] usb 3-1: Cannot read MAC address [ 133.062094][ T126] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 133.145097][ T126] usb 3-1: USB disconnect, device number 10 [ 133.323972][ T6391] team0: Port device team_slave_0 removed [ 133.459225][ T6414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.158'. [ 133.922883][ T1578] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.685986][ T5605] Bluetooth: hci0: command tx timeout [ 135.424011][ T6437] FAULT_INJECTION: forcing a failure. [ 135.424011][ T6437] name failslab, interval 1, probability 0, space 0, times 0 [ 135.424045][ T6437] CPU: 1 UID: 0 PID: 6437 Comm: syz.0.165 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 135.424069][ T6437] Tainted: [L]=SOFTLOCKUP [ 135.424075][ T6437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 135.424086][ T6437] Call Trace: [ 135.424094][ T6437] [ 135.424102][ T6437] dump_stack_lvl+0xe8/0x150 [ 135.424129][ T6437] should_fail_ex+0x46b/0x600 [ 135.424162][ T6437] should_failslab+0xa8/0x100 [ 135.424186][ T6437] kmem_cache_alloc_noprof+0x87/0x680 [ 135.424205][ T6437] ? skb_clone+0x212/0x3a0 [ 135.424232][ T6437] skb_clone+0x212/0x3a0 [ 135.424251][ T6437] ? nfnetlink_rcv+0x4b0/0x27b0 [ 135.424272][ T6437] nfnetlink_rcv+0x4e2/0x27b0 [ 135.424293][ T6437] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 135.424313][ T6437] ? lockdep_hardirqs_on+0x7a/0x110 [ 135.424337][ T6437] ? __dev_queue_xmit+0x1eaf/0x3900 [ 135.424357][ T6437] ? __netlink_deliver_tap+0x404/0x850 [ 135.424376][ T6437] ? netlink_unicast+0x754/0x920 [ 135.424408][ T6437] ? __dev_queue_xmit+0x2b3/0x3900 [ 135.424434][ T6437] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 135.424468][ T6437] ? ref_tracker_free+0x673/0x820 [ 135.424493][ T6437] ? __pfx_ref_tracker_free+0x10/0x10 [ 135.424509][ T6437] ? __asan_memcpy+0x40/0x70 [ 135.424532][ T6437] ? __skb_clone+0x63/0x7a0 [ 135.424564][ T6437] ? __skb_clone+0x483/0x7a0 [ 135.424591][ T6437] ? skb_clone+0x246/0x3a0 [ 135.424615][ T6437] ? __netlink_deliver_tap+0x807/0x850 [ 135.424634][ T6437] ? netlink_deliver_tap+0x2e/0x1b0 [ 135.424659][ T6437] ? netlink_deliver_tap+0x2e/0x1b0 [ 135.424678][ T6437] ? netlink_deliver_tap+0x2e/0x1b0 [ 135.424702][ T6437] netlink_unicast+0x780/0x920 [ 135.424738][ T6437] netlink_sendmsg+0x813/0xb40 [ 135.424767][ T6437] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.424789][ T6437] ? unwind_get_return_address+0x4d/0x90 [ 135.424815][ T6437] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 135.424837][ T6437] ____sys_sendmsg+0x94c/0x9c0 [ 135.424864][ T6437] ? __pfx_____sys_sendmsg+0x10/0x10 [ 135.424893][ T6437] ? import_iovec+0x73/0xa0 [ 135.424917][ T6437] ___sys_sendmsg+0x2a5/0x360 [ 135.424936][ T6437] ? __lock_acquire+0x6b5/0x2cf0 [ 135.424964][ T6437] ? __pfx____sys_sendmsg+0x10/0x10 [ 135.425019][ T6437] ? __fget_files+0x2a/0x420 [ 135.425043][ T6437] ? __fget_files+0x3a6/0x420 [ 135.425076][ T6437] __x64_sys_sendmsg+0x1c3/0x2a0 [ 135.425100][ T6437] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 135.425130][ T6437] ? __pfx_ksys_write+0x10/0x10 [ 135.425159][ T6437] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.425178][ T6437] do_syscall_64+0x15f/0xf80 [ 135.425195][ T6437] ? trace_irq_disable+0x3b/0x140 [ 135.425216][ T6437] ? clear_bhb_loop+0x40/0x90 [ 135.425239][ T6437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.425256][ T6437] RIP: 0033:0x7f22e568cdd9 [ 135.425273][ T6437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.425288][ T6437] RSP: 002b:00007f22e38de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.425307][ T6437] RAX: ffffffffffffffda RBX: 00007f22e5905fa0 RCX: 00007f22e568cdd9 [ 135.425320][ T6437] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 135.425331][ T6437] RBP: 00007f22e38de090 R08: 0000000000000000 R09: 0000000000000000 [ 135.425342][ T6437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.425353][ T6437] R13: 00007f22e5906038 R14: 00007f22e5905fa0 R15: 00007ffc11f570b8 [ 135.425382][ T6437] [ 136.751476][ T5605] Bluetooth: hci0: command tx timeout [ 136.820743][ T1578] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.977582][ T5707] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 137.021139][ T5720] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 137.121128][ T5707] usb 1-1: Using ep0 maxpacket: 8 [ 137.123159][ T5707] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 137.123196][ T5707] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 137.123208][ T5707] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 137.123221][ T5707] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 137.123232][ T5707] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 137.123256][ T5707] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 137.123268][ T5707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.167887][ T5720] usb 4-1: device descriptor read/64, error -71 [ 137.341348][ T5707] usb 1-1: usb_control_msg returned -32 [ 137.341386][ T5707] usbtmc 1-1:16.0: can't read capabilities [ 137.346921][ T1578] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.441091][ T5720] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 137.604587][ T5720] usb 4-1: device descriptor read/64, error -71 [ 137.721358][ T5720] usb usb4-port1: attempt power cycle [ 138.626462][ T5605] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 138.626629][ T5605] Bluetooth: hci4: Injecting HCI hardware error event [ 138.634372][ T5606] Bluetooth: hci4: hardware error 0x00 [ 138.833766][ T5605] Bluetooth: hci0: command tx timeout [ 138.862667][ T126] usb 1-1: USB disconnect, device number 8 [ 138.982318][ T5720] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 139.008959][ T5720] usb 4-1: device descriptor read/8, error -71 [ 139.837526][ T6460] IPv6: addrconf: prefix option has invalid lifetime [ 141.068074][ T5605] Bluetooth: hci0: command tx timeout [ 141.150990][ T5606] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 141.966087][ T6455] tipc: Failed to remove unknown binding: 66,0,0/0:2699722834/2699722835 [ 141.969882][ T6455] tipc: Failed to remove unknown binding: 66,0,0/0:2699722834/2699722835 [ 141.995668][ T6455] binder: BINDER_SET_CONTEXT_MGR already set [ 141.995681][ T6455] binder: 6453:6455 ioctl 4018620d 200000004a80 returned -16 [ 142.564579][ T36] audit: type=1326 audit(1777659060.576:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6477 comm="syz.0.176" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f22e568cdd9 code=0x0 [ 143.751084][ T5707] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 143.756820][ T1578] bridge_slave_1: left allmulticast mode [ 143.802796][ T1578] bridge_slave_1: left promiscuous mode [ 143.844461][ T1578] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.922341][ T5707] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 143.922376][ T5707] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 143.922403][ T5707] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 143.922426][ T5707] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 143.922447][ T5707] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 143.927431][ T5707] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 143.927461][ T5707] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.927481][ T5707] usb 1-1: Product: syz [ 143.927495][ T5707] usb 1-1: Manufacturer: syz [ 143.927509][ T5707] usb 1-1: SerialNumber: syz [ 144.033537][ T5707] usb 1-1: config 0 descriptor?? [ 144.061024][ T5707] iguanair 1-1:0.0: probe with driver iguanair failed with error -12 [ 144.112706][ T1578] bridge_slave_0: left allmulticast mode [ 144.112738][ T1578] bridge_slave_0: left promiscuous mode [ 144.112964][ T1578] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.470988][ T36] audit: type=1107 audit(1777659062.496:7): pid=6487 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 144.934818][ T6512] FAULT_INJECTION: forcing a failure. [ 144.934818][ T6512] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 144.934855][ T6512] CPU: 0 UID: 0 PID: 6512 Comm: syz.2.183 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 144.934881][ T6512] Tainted: [L]=SOFTLOCKUP [ 144.934887][ T6512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 144.934898][ T6512] Call Trace: [ 144.934905][ T6512] [ 144.934913][ T6512] dump_stack_lvl+0xe8/0x150 [ 144.934940][ T6512] should_fail_ex+0x46b/0x600 [ 144.934973][ T6512] prepare_alloc_pages+0x22a/0x6b0 [ 144.935004][ T6512] __alloc_frozen_pages_noprof+0x12f/0x380 [ 144.935031][ T6512] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 144.935057][ T6512] ? __pfx_policy_nodemask+0x10/0x10 [ 144.935080][ T6512] ? __lock_acquire+0x6b5/0x2cf0 [ 144.935110][ T6512] alloc_pages_mpol+0xd1/0x380 [ 144.935135][ T6512] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 144.935160][ T6512] vma_alloc_folio_noprof+0xe1/0x1e0 [ 144.935184][ T6512] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 144.935207][ T6512] ? __pte_offset_map+0x29/0x200 [ 144.935233][ T6512] do_pte_missing+0x822/0x2950 [ 144.935271][ T6512] handle_mm_fault+0xd0a/0x13c0 [ 144.935297][ T6512] ? handle_mm_fault+0xe7/0x13c0 [ 144.935320][ T6512] ? __pfx_handle_mm_fault+0x10/0x10 [ 144.935341][ T6512] ? follow_page_pte+0xbc8/0xe40 [ 144.935369][ T6512] ? __pfx_follow_page_pte+0x10/0x10 [ 144.935400][ T6512] __get_user_pages+0x168f/0x2570 [ 144.935466][ T6512] __gup_longterm_locked+0xdcf/0x1630 [ 144.935490][ T6512] ? lock_acquire+0x106/0x350 [ 144.935512][ T6512] ? sanity_check_pinned_pages+0x7a8/0x870 [ 144.935551][ T6512] gup_fast_fallback+0x1cf3/0x2040 [ 144.935601][ T6512] ? __pfx_gup_fast_fallback+0x10/0x10 [ 144.935622][ T6512] ? is_valid_gup_args+0x11f/0x200 [ 144.935643][ T6512] ? pin_user_pages_fast+0x4d/0xb0 [ 144.935664][ T6512] rds_info_getsockopt+0x20e/0x400 [ 144.935696][ T6512] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 144.935724][ T6512] ? __might_fault+0xaf/0x130 [ 144.935748][ T6512] ? rds_getsockopt+0x2b4/0x500 [ 144.935769][ T6512] ? __pfx_rds_getsockopt+0x10/0x10 [ 144.935791][ T6512] do_sock_getsockopt+0x51d/0x7e0 [ 144.935818][ T6512] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 144.935855][ T6512] ? __fget_files+0x3a6/0x420 [ 144.935880][ T6512] ? __fget_files+0x2a/0x420 [ 144.935910][ T6512] __x64_sys_getsockopt+0x1aa/0x250 [ 144.935937][ T6512] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.935957][ T6512] do_syscall_64+0x15f/0xf80 [ 144.935975][ T6512] ? trace_irq_disable+0x3b/0x140 [ 144.935995][ T6512] ? clear_bhb_loop+0x40/0x90 [ 144.936017][ T6512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.936034][ T6512] RIP: 0033:0x7f9968dacdd9 [ 144.936051][ T6512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.936065][ T6512] RSP: 002b:00007f9966ffe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 144.936084][ T6512] RAX: ffffffffffffffda RBX: 00007f9969025fa0 RCX: 00007f9968dacdd9 [ 144.936097][ T6512] RDX: 0000000000002711 RSI: 0000000000000114 RDI: 0000000000000003 [ 144.936109][ T6512] RBP: 00007f9966ffe090 R08: 00002000000000c0 R09: 0000000000000000 [ 144.936120][ T6512] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000001 [ 144.936131][ T6512] R13: 00007f9969026038 R14: 00007f9969025fa0 R15: 00007ffee1194bf8 [ 144.936162][ T6512] [ 145.559029][ T6518] syz.2.184 uses obsolete (PF_INET,SOCK_PACKET) [ 145.781608][ T5733] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 145.869574][ T5720] usb 1-1: USB disconnect, device number 9 [ 145.930994][ T5733] usb 5-1: Using ep0 maxpacket: 8 [ 145.937515][ T5733] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 145.937567][ T5733] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 145.937586][ T5733] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 145.937609][ T5733] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 145.937631][ T5733] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.937669][ T5733] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 145.937689][ T5733] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.384621][ T5733] usb 5-1: usb_control_msg returned -32 [ 146.384669][ T5733] usbtmc 5-1:16.0: can't read capabilities [ 147.169829][ T6530] tipc: Failed to remove unknown binding: 66,0,0/0:2678992489/2678992490 [ 147.170182][ T6530] tipc: Failed to remove unknown binding: 66,0,0/0:2678992489/2678992490 [ 147.173125][ T6530] binder: BINDER_SET_CONTEXT_MGR already set [ 147.173139][ T6530] binder: 6529:6530 ioctl 4018620d 200000004a80 returned -16 [ 147.675581][ T6533] netlink: 28 bytes leftover after parsing attributes in process `syz.4.189'. [ 148.414672][ T5720] usb 5-1: USB disconnect, device number 7 [ 149.372106][ T1578] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.451571][ T1578] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.473592][ T1578] bond0 (unregistering): Released all slaves [ 149.545347][ T5258] 8021q: adding VLAN 0 to HW filter on device eth1 [ 151.682733][ T5720] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 151.841705][ T5720] usb 3-1: Using ep0 maxpacket: 16 [ 151.844563][ T5720] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 151.848431][ T5720] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 151.848457][ T5720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.848467][ T5720] usb 3-1: Product: syz [ 151.848475][ T5720] usb 3-1: Manufacturer: syz [ 151.848482][ T5720] usb 3-1: SerialNumber: syz [ 151.910733][ T5720] r8152-cfgselector 3-1: Unknown version 0x0000 [ 151.910750][ T5720] r8152-cfgselector 3-1: config 0 descriptor?? [ 152.740676][ T5720] r8152-cfgselector 3-1: Unknown version 0x0000 [ 152.750368][ T5720] r8152-cfgselector 3-1: No union descriptors [ 152.813531][ T5720] r8152-cfgselector 3-1: USB disconnect, device number 11 [ 153.040761][ T6389] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.043008][ T6389] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.043226][ T6389] bridge_slave_0: entered allmulticast mode [ 153.045672][ T6389] bridge_slave_0: entered promiscuous mode [ 153.294321][ T6389] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.295401][ T6389] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.295606][ T6389] bridge_slave_1: entered allmulticast mode [ 153.298722][ T6389] bridge_slave_1: entered promiscuous mode [ 153.588791][ T6389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.751110][ T1578] hsr_slave_0: left promiscuous mode [ 153.791342][ T1578] hsr_slave_1: left promiscuous mode [ 153.795552][ T1578] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.795611][ T1578] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.852598][ T1578] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.852623][ T1578] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.976284][ T1578] veth1_macvtap: left promiscuous mode [ 153.976535][ T1578] veth0_macvtap: left promiscuous mode [ 153.976806][ T1578] veth1_vlan: left promiscuous mode [ 153.977213][ T1578] veth0_vlan: left promiscuous mode [ 154.167029][ T6559] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 154.903905][ T36] audit: type=1326 audit(1777659072.956:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6598 comm="syz.2.206" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9968dacdd9 code=0x0 [ 155.931748][ T6619] FAULT_INJECTION: forcing a failure. [ 155.931748][ T6619] name failslab, interval 1, probability 0, space 0, times 0 [ 155.931782][ T6619] CPU: 1 UID: 0 PID: 6619 Comm: syz.2.212 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 155.931807][ T6619] Tainted: [L]=SOFTLOCKUP [ 155.931813][ T6619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 155.931823][ T6619] Call Trace: [ 155.931830][ T6619] [ 155.931837][ T6619] dump_stack_lvl+0xe8/0x150 [ 155.931863][ T6619] should_fail_ex+0x46b/0x600 [ 155.931895][ T6619] should_failslab+0xa8/0x100 [ 155.931919][ T6619] __kmalloc_cache_noprof+0x84/0x690 [ 155.931938][ T6619] ? __vmalloc_noprof+0xd2/0x120 [ 155.931955][ T6619] ? bpf_prog_alloc_no_stats+0xdb/0x4f0 [ 155.931981][ T6619] bpf_prog_alloc_no_stats+0xdb/0x4f0 [ 155.932005][ T6619] bpf_prog_alloc+0x3c/0x1a0 [ 155.932035][ T6619] bpf_prog_load+0x779/0x1a10 [ 155.932067][ T6619] ? __pfx_bpf_prog_load+0x10/0x10 [ 155.932089][ T6619] ? __might_fault+0xaf/0x130 [ 155.932123][ T6619] ? bpf_lsm_bpf+0x9/0x20 [ 155.932141][ T6619] ? security_bpf+0x7e/0x2d0 [ 155.932166][ T6619] __sys_bpf+0x618/0x950 [ 155.932185][ T6619] ? __pfx___sys_bpf+0x10/0x10 [ 155.932201][ T6619] ? rt_mutex_slowunlock+0x1cb/0x300 [ 155.932237][ T6619] ? ksys_write+0x248/0x270 [ 155.932259][ T6619] ? __pfx_ksys_write+0x10/0x10 [ 155.932281][ T6619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.932299][ T6619] __x64_sys_bpf+0x7c/0x90 [ 155.932318][ T6619] do_syscall_64+0x15f/0xf80 [ 155.932335][ T6619] ? trace_irq_disable+0x3b/0x140 [ 155.932356][ T6619] ? clear_bhb_loop+0x40/0x90 [ 155.932377][ T6619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.932393][ T6619] RIP: 0033:0x7f9968dacdd9 [ 155.932409][ T6619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.932422][ T6619] RSP: 002b:00007f9966ffe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 155.932441][ T6619] RAX: ffffffffffffffda RBX: 00007f9969025fa0 RCX: 00007f9968dacdd9 [ 155.932454][ T6619] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 155.932465][ T6619] RBP: 00007f9966ffe090 R08: 0000000000000000 R09: 0000000000000000 [ 155.932476][ T6619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.932486][ T6619] R13: 00007f9969026038 R14: 00007f9969025fa0 R15: 00007ffee1194bf8 [ 155.932516][ T6619] [ 157.143169][ T1578] team0 (unregistering): Port device team_slave_1 removed [ 157.221729][ T1578] team0 (unregistering): Port device team_slave_0 removed [ 157.297179][ T6636] input: syz1 as /devices/virtual/input/input15 [ 157.521943][ T6644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.219'. [ 157.523072][ T6644] netlink: 36 bytes leftover after parsing attributes in process `syz.2.219'. [ 157.756617][ T6389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.816970][ T6389] team0: Port device team_slave_0 added [ 158.840394][ T6389] team0: Port device team_slave_1 added [ 159.139761][ T5258] 8021q: adding VLAN 0 to HW filter on device eth3 [ 159.940100][ T6389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.940115][ T6389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.940134][ T6389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.018166][ T6389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.018182][ T6389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 160.018207][ T6389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.242041][ T5733] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 160.391147][ T5733] usb 4-1: Using ep0 maxpacket: 32 [ 160.391992][ T5733] usb 4-1: no configurations [ 160.392008][ T5733] usb 4-1: can't read configurations, error -22 [ 160.454487][ T6389] hsr_slave_0: entered promiscuous mode [ 160.457266][ T6389] hsr_slave_1: entered promiscuous mode [ 160.459809][ T6389] debugfs: 'hsr0' already exists in 'hsr' [ 160.459902][ T6389] Cannot create hsr debugfs directory [ 160.541077][ T5733] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 160.692723][ T5733] usb 4-1: Using ep0 maxpacket: 32 [ 160.740330][ T5733] usb 4-1: no configurations [ 160.740350][ T5733] usb 4-1: can't read configurations, error -22 [ 160.740634][ T5733] usb usb4-port1: attempt power cycle [ 161.181014][ T5733] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 161.201900][ T5733] usb 4-1: Using ep0 maxpacket: 32 [ 161.202911][ T5733] usb 4-1: no configurations [ 161.202926][ T5733] usb 4-1: can't read configurations, error -22 [ 161.331043][ T5733] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 161.337366][ T6694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.229'. [ 161.360106][ T5733] usb 4-1: Using ep0 maxpacket: 32 [ 161.360844][ T5733] usb 4-1: no configurations [ 161.360860][ T5733] usb 4-1: can't read configurations, error -22 [ 161.384004][ T5733] usb usb4-port1: unable to enumerate USB device [ 161.456476][ T6694] vxcan2: entered allmulticast mode [ 161.829536][ T6704] netlink: 'syz.4.230': attribute type 1 has an invalid length. [ 161.829558][ T6704] netlink: 'syz.4.230': attribute type 22 has an invalid length. [ 161.881378][ T1578] IPVS: stop unused estimator thread 0... [ 161.984531][ T6704] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.017345][ T6704] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.258258][ T5258] 8021q: adding VLAN 0 to HW filter on device eth2 [ 163.106358][ T6728] netlink: 'syz.4.236': attribute type 2 has an invalid length. [ 163.641040][ T5720] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 163.716677][ T6744] cgroup: fork rejected by pids controller in /syz4 [ 163.813410][ T5720] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 163.813440][ T5720] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.813455][ T5720] usb 4-1: Product: syz [ 163.813462][ T5720] usb 4-1: Manufacturer: syz [ 163.813469][ T5720] usb 4-1: SerialNumber: syz [ 163.896214][ T5720] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 164.023468][ T5738] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 164.105485][ T5718] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 164.183540][ T5738] usb 1-1: Using ep0 maxpacket: 8 [ 164.186658][ T5738] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 164.186686][ T5738] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 164.186791][ T5738] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 164.186834][ T5738] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 164.186855][ T5738] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.527863][ T5738] usbtmc 1-1:16.0: bulk endpoints not found [ 164.532987][ T5710] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 165.200263][ T6748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.222719][ T6748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.521434][ T5710] usb 3-1: Using ep0 maxpacket: 32 [ 165.522359][ T5710] usb 3-1: no configurations [ 165.522380][ T5710] usb 3-1: can't read configurations, error -22 [ 165.632977][ T5707] usb 1-1: USB disconnect, device number 10 [ 165.682838][ T5710] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 166.581982][ T5718] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 166.582341][ T5718] ath9k_htc: Failed to initialize the device [ 166.884004][ T5710] usb 3-1: Using ep0 maxpacket: 32 [ 166.958682][ T5710] usb 3-1: no configurations [ 166.958703][ T5710] usb 3-1: can't read configurations, error -22 [ 166.964159][ T5710] usb usb3-port1: attempt power cycle [ 167.826524][ C1] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 167.851584][ T5733] usb 4-1: USB disconnect, device number 17 [ 167.976354][ T5733] usb 4-1: ath9k_htc: USB layer deinitialized [ 168.492151][ T6871] netlink: 'syz.0.248': attribute type 2 has an invalid length. [ 168.911112][ T31] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 169.137711][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 169.138413][ T31] usb 4-1: not running at top speed; connect to a high speed hub [ 169.139551][ T31] usb 4-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 169.147074][ T31] usb 4-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.00 [ 169.147102][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.147120][ T31] usb 4-1: Product: syz [ 169.147133][ T31] usb 4-1: Manufacturer: syz [ 169.147147][ T31] usb 4-1: SerialNumber: syz [ 169.221501][ T6892] program syz.0.253 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 169.226229][ T6892] netlink: 4 bytes leftover after parsing attributes in process `syz.0.253'. [ 169.230115][ T5718] IPVS: starting estimator thread 0... [ 169.316653][ T6893] IPVS: using max 8 ests per chain, 19200 per kthread [ 169.527219][ T6878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.250'. [ 169.944137][ T31] qmi_wwan 4-1:251.0: probe with driver qmi_wwan failed with error -22 [ 169.994954][ T31] usb 4-1: USB disconnect, device number 18 [ 171.899412][ T5605] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 171.915192][ T5605] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 171.939617][ T5605] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 171.981094][ T5605] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 172.143145][ T5605] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 172.229782][ T1578] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.261063][ T5733] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 172.412830][ T5733] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.414592][ T5733] usb 4-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 172.414608][ T5733] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.414618][ T5733] usb 4-1: Product: syz [ 172.414625][ T5733] usb 4-1: Manufacturer: syz [ 172.414632][ T5733] usb 4-1: SerialNumber: syz [ 172.426516][ T5733] usb 4-1: config 0 descriptor?? [ 172.687308][ T5733] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in cold state, will try to load a firmware [ 172.847357][ T1578] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.536788][ T5733] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 173.536854][ T5733] dib0700: firmware download failed at 7 with -22 [ 173.599720][ T6930] netlink: 'syz.3.261': attribute type 2 has an invalid length. [ 173.621142][ T5733] usb 4-1: USB disconnect, device number 19 [ 174.271024][ T5605] Bluetooth: hci3: command tx timeout [ 174.313242][ T1578] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.403307][ T6954] binder: 6946:6954 ioctl c0306201 0 returned -14 [ 174.475261][ T6956] program syz.0.266 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 174.538535][ T6957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.266'. [ 176.601491][ T5605] Bluetooth: hci3: command tx timeout [ 177.490738][ T1578] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.771470][ T6389] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 177.921376][ T6389] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 178.043804][ T6389] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 178.222005][ T6389] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 178.293834][ T6997] netlink: 'syz.3.273': attribute type 2 has an invalid length. [ 178.370995][ T6389] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 178.452353][ T6389] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 178.523808][ T6389] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 178.633044][ T6389] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 178.674480][ T5605] Bluetooth: hci3: command tx timeout [ 178.769891][ T7013] program syz.3.277 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 178.892599][ T7014] netlink: 4 bytes leftover after parsing attributes in process `syz.3.277'. [ 179.691571][ T126] IPVS: starting estimator thread 0... [ 179.793701][ T7021] IPVS: using max 9 ests per chain, 21600 per kthread [ 180.156941][ T7035] fuse: fd is not a fuse device [ 180.449012][ T7047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.281'. [ 180.616647][ T7054] netlink: 'syz.0.284': attribute type 2 has an invalid length. [ 180.754615][ T5605] Bluetooth: hci3: command tx timeout [ 182.351139][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 182.457983][ T7084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.292'. [ 182.513695][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 182.513727][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 217 [ 182.513765][ T10] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 182.513786][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.607328][ T10] usb 1-1: config 0 descriptor?? [ 182.608257][ T7080] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 182.849808][ T1578] bridge_slave_1: left allmulticast mode [ 182.849852][ T1578] bridge_slave_1: left promiscuous mode [ 182.850097][ T1578] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.934201][ T1578] bridge_slave_0: left allmulticast mode [ 182.934233][ T1578] bridge_slave_0: left promiscuous mode [ 182.935627][ T1578] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.000093][ T10] ath6kl: Failed to submit usb control message: -71 [ 183.000142][ T10] ath6kl: unable to send the bmi data to the device: -71 [ 183.000155][ T10] ath6kl: Unable to send get target info: -71 [ 183.060106][ T10] ath6kl: Failed to init ath6kl core: -71 [ 183.061427][ T10] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 183.080969][ T10] usb 1-1: USB disconnect, device number 11 [ 184.692964][ T1578] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.751664][ T1578] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.773016][ T1578] bond0 (unregistering): Released all slaves [ 184.779404][ T1578] bond1 (unregistering): Released all slaves [ 184.983693][ T7110] faux_driver vgem: [drm] Unknown color mode 98305; guessing buffer size. [ 185.296824][ T7114] netlink: 'syz.0.298': attribute type 21 has an invalid length. [ 185.296846][ T7114] IPv6: NLM_F_CREATE should be specified when creating new route [ 185.296854][ T7114] FAULT_INJECTION: forcing a failure. [ 185.296854][ T7114] name failslab, interval 1, probability 0, space 0, times 0 [ 185.296876][ T7114] CPU: 1 UID: 0 PID: 7114 Comm: syz.0.298 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 185.296894][ T7114] Tainted: [L]=SOFTLOCKUP [ 185.296899][ T7114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 185.296907][ T7114] Call Trace: [ 185.296912][ T7114] [ 185.296928][ T7114] dump_stack_lvl+0xe8/0x150 [ 185.296951][ T7114] should_fail_ex+0x46b/0x600 [ 185.296977][ T7114] should_failslab+0xa8/0x100 [ 185.296996][ T7114] __kmalloc_cache_noprof+0x84/0x690 [ 185.297012][ T7114] ? __pfx__printk+0x10/0x10 [ 185.297030][ T7114] ? fib6_new_table+0xfc/0x430 [ 185.297049][ T7114] fib6_new_table+0xfc/0x430 [ 185.297069][ T7114] ip6_route_info_create+0xfc/0x860 [ 185.297085][ T7114] ? inet6_rtm_newroute+0x394/0x18d0 [ 185.297102][ T7114] inet6_rtm_newroute+0x56e/0x18d0 [ 185.297120][ T7114] ? lockdep_hardirqs_on+0x7a/0x110 [ 185.297138][ T7114] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 185.297150][ T7114] ? nlmon_xmit+0xb0/0x100 [ 185.297176][ T7114] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 185.297191][ T7114] ? lockdep_hardirqs_on+0x7a/0x110 [ 185.297204][ T7114] ? __dev_queue_xmit+0x2b3/0x3900 [ 185.297242][ T7114] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 185.297256][ T7114] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 185.297273][ T7114] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 185.297286][ T7114] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 185.297298][ T7114] ? ref_tracker_free+0x673/0x820 [ 185.297315][ T7114] ? __pfx_ref_tracker_free+0x10/0x10 [ 185.297327][ T7114] ? __asan_memcpy+0x40/0x70 [ 185.297347][ T7114] ? __skb_clone+0x63/0x7a0 [ 185.297369][ T7114] netlink_rcv_skb+0x232/0x4b0 [ 185.297387][ T7114] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 185.297404][ T7114] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 185.297431][ T7114] ? netlink_deliver_tap+0x2e/0x1b0 [ 185.297448][ T7114] ? netlink_deliver_tap+0x2e/0x1b0 [ 185.297469][ T7114] netlink_unicast+0x780/0x920 [ 185.297501][ T7114] netlink_sendmsg+0x813/0xb40 [ 185.297525][ T7114] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.297544][ T7114] ? unwind_get_return_address+0x4d/0x90 [ 185.297569][ T7114] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 185.297588][ T7114] ____sys_sendmsg+0x94c/0x9c0 [ 185.297609][ T7114] ? __pfx_____sys_sendmsg+0x10/0x10 [ 185.297632][ T7114] ? import_iovec+0x73/0xa0 [ 185.297651][ T7114] ___sys_sendmsg+0x2a5/0x360 [ 185.297668][ T7114] ? __lock_acquire+0x6b5/0x2cf0 [ 185.297688][ T7114] ? __pfx____sys_sendmsg+0x10/0x10 [ 185.297727][ T7114] ? __fget_files+0x2a/0x420 [ 185.297750][ T7114] ? __fget_files+0x3a6/0x420 [ 185.297781][ T7114] __x64_sys_sendmsg+0x1c3/0x2a0 [ 185.297804][ T7114] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 185.297832][ T7114] ? __pfx_ksys_write+0x10/0x10 [ 185.297857][ T7114] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.297875][ T7114] do_syscall_64+0x15f/0xf80 [ 185.297891][ T7114] ? trace_irq_disable+0x3b/0x140 [ 185.297911][ T7114] ? clear_bhb_loop+0x40/0x90 [ 185.297941][ T7114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.297958][ T7114] RIP: 0033:0x7f22e568cdd9 [ 185.297976][ T7114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.297990][ T7114] RSP: 002b:00007f22e38de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.298009][ T7114] RAX: ffffffffffffffda RBX: 00007f22e5905fa0 RCX: 00007f22e568cdd9 [ 185.298026][ T7114] RDX: 0000000000004000 RSI: 0000200000000340 RDI: 0000000000000003 [ 185.298039][ T7114] RBP: 00007f22e38de090 R08: 0000000000000000 R09: 0000000000000000 [ 185.298050][ T7114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.298062][ T7114] R13: 00007f22e5906038 R14: 00007f22e5905fa0 R15: 00007ffc11f570b8 [ 185.298092][ T7114] [ 187.621250][ T5720] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 187.786500][ T5720] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 187.807707][ T5720] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 187.807739][ T5720] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 187.807760][ T5720] usb 1-1: Product: syz [ 187.807775][ T5720] usb 1-1: Manufacturer: syz [ 187.807789][ T5720] usb 1-1: SerialNumber: syz [ 187.853411][ T5720] usb 1-1: config 0 descriptor?? [ 187.856828][ T7125] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 187.885855][ T5720] hub 1-1:0.0: bad descriptor, ignoring hub [ 187.885894][ T5720] hub 1-1:0.0: probe with driver hub failed with error -5 [ 188.733022][ T5720] usb 1-1: USB disconnect, device number 12 [ 188.861053][ T126] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 189.018338][ T5258] 8021q: adding VLAN 0 to HW filter on device eth1 [ 189.042133][ T126] usb 3-1: Using ep0 maxpacket: 16 [ 189.050435][ T126] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 189.053062][ T126] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 189.053090][ T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.053110][ T126] usb 3-1: Product: syz [ 189.053122][ T126] usb 3-1: Manufacturer: syz [ 189.053135][ T126] usb 3-1: SerialNumber: syz [ 189.118378][ T126] r8152-cfgselector 3-1: Unknown version 0x0000 [ 189.118404][ T126] r8152-cfgselector 3-1: config 0 descriptor?? [ 189.171040][ T5720] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 189.290405][ T7155] FAULT_INJECTION: forcing a failure. [ 189.290405][ T7155] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.290439][ T7155] CPU: 0 UID: 0 PID: 7155 Comm: syz.3.306 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 189.290472][ T7155] Tainted: [L]=SOFTLOCKUP [ 189.290479][ T7155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 189.290488][ T7155] Call Trace: [ 189.290495][ T7155] [ 189.290503][ T7155] dump_stack_lvl+0xe8/0x150 [ 189.290530][ T7155] should_fail_ex+0x46b/0x600 [ 189.290560][ T7155] _copy_from_user+0x2d/0xb0 [ 189.290581][ T7155] ___sys_sendmsg+0x1c6/0x360 [ 189.290601][ T7155] ? __lock_acquire+0x6b5/0x2cf0 [ 189.290626][ T7155] ? __pfx____sys_sendmsg+0x10/0x10 [ 189.290676][ T7155] ? __fget_files+0x2a/0x420 [ 189.290699][ T7155] ? __fget_files+0x3a6/0x420 [ 189.290732][ T7155] __x64_sys_sendmsg+0x1c3/0x2a0 [ 189.290755][ T7155] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 189.290783][ T7155] ? __pfx_ksys_write+0x10/0x10 [ 189.290809][ T7155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.290827][ T7155] do_syscall_64+0x15f/0xf80 [ 189.290845][ T7155] ? trace_irq_disable+0x3b/0x140 [ 189.290868][ T7155] ? clear_bhb_loop+0x40/0x90 [ 189.290889][ T7155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.290906][ T7155] RIP: 0033:0x7fc551abcdd9 [ 189.290925][ T7155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.290937][ T7155] RSP: 002b:00007fc54fd16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.290957][ T7155] RAX: ffffffffffffffda RBX: 00007fc551d35fa0 RCX: 00007fc551abcdd9 [ 189.290970][ T7155] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 189.290982][ T7155] RBP: 00007fc54fd16090 R08: 0000000000000000 R09: 0000000000000000 [ 189.290993][ T7155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.291004][ T7155] R13: 00007fc551d36038 R14: 00007fc551d35fa0 R15: 00007ffc45a3fd28 [ 189.291028][ T7155] [ 189.362836][ T5720] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 189.362869][ T5720] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 217 [ 189.362908][ T5720] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 189.362929][ T5720] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.381356][ T1578] hsr_slave_0: left promiscuous mode [ 189.407628][ T126] r8152-cfgselector 3-1: Unknown version 0x0000 [ 189.408130][ T126] r8152-cfgselector 3-1: No union descriptors [ 189.575112][ T126] r8152-cfgselector 3-1: USB disconnect, device number 15 [ 189.578521][ T5720] usb 1-1: config 0 descriptor?? [ 189.586562][ T7145] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 189.602414][ T1578] hsr_slave_1: left promiscuous mode [ 189.604743][ T1578] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.604766][ T1578] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.685963][ T1578] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.685990][ T1578] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.936059][ T1578] veth1_macvtap: left promiscuous mode [ 189.936159][ T1578] veth0_macvtap: left promiscuous mode [ 189.936400][ T1578] veth1_vlan: left promiscuous mode [ 189.939505][ T1578] veth0_vlan: left promiscuous mode [ 190.014620][ T5720] ath6kl: Failed to submit usb control message: -71 [ 190.014672][ T5720] ath6kl: unable to send the bmi data to the device: -71 [ 190.014687][ T5720] ath6kl: Unable to send get target info: -71 [ 190.024442][ T5720] ath6kl: Failed to init ath6kl core: -71 [ 190.025839][ T5720] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 190.108664][ T5720] usb 1-1: USB disconnect, device number 13 [ 190.355849][ T5710] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 190.503357][ T5710] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 190.503387][ T5710] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 190.503408][ T5710] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 190.503442][ T5710] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 190.503480][ T5710] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 190.503502][ T5710] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 190.503524][ T5710] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 190.584796][ T7174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.311'. [ 191.517732][ T5710] usb 3-1: string descriptor 0 read error: -22 [ 191.517882][ T5710] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 191.517906][ T5710] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.553396][ T5710] usb 3-1: config 0 descriptor?? [ 191.606208][ T5710] hub 3-1:0.0: bad descriptor, ignoring hub [ 191.606242][ T5710] hub 3-1:0.0: probe with driver hub failed with error -5 [ 191.635305][ T5710] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input17 [ 193.078223][ T5606] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 193.092691][ T5606] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 193.121075][ T5606] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 193.138892][ T5606] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 193.139616][ T5606] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 193.338556][ T1578] team0 (unregistering): Port device team_slave_1 removed [ 193.617970][ T5738] usb 3-1: USB disconnect, device number 16 [ 194.181740][ T6910] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.181853][ T6910] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.182061][ T6910] bridge_slave_0: entered allmulticast mode [ 194.283352][ T6910] bridge_slave_0: entered promiscuous mode [ 194.359083][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.359161][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.408347][ T6910] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.408474][ T6910] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.408734][ T6910] bridge_slave_1: entered allmulticast mode [ 194.411409][ T6910] bridge_slave_1: entered promiscuous mode [ 194.661202][ T7191] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 194.843489][ T6910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.879150][ T6910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.894123][ T7202] FAULT_INJECTION: forcing a failure. [ 194.894123][ T7202] name failslab, interval 1, probability 0, space 0, times 0 [ 194.894156][ T7202] CPU: 0 UID: 0 PID: 7202 Comm: syz.3.317 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 194.894182][ T7202] Tainted: [L]=SOFTLOCKUP [ 194.894188][ T7202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 194.894198][ T7202] Call Trace: [ 194.894205][ T7202] [ 194.894213][ T7202] dump_stack_lvl+0xe8/0x150 [ 194.894248][ T7202] should_fail_ex+0x46b/0x600 [ 194.894280][ T7202] should_failslab+0xa8/0x100 [ 194.894303][ T7202] __kmalloc_cache_noprof+0x84/0x690 [ 194.894324][ T7202] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 194.894342][ T7202] ? __request_module+0x2d0/0x630 [ 194.894371][ T7202] __request_module+0x2d0/0x630 [ 194.894401][ T7202] ? __pfx___request_module+0x10/0x10 [ 194.894428][ T7202] ? nfnetlink_rcv_msg+0x230/0x1260 [ 194.894458][ T7202] ? nfnetlink_rcv_msg+0x230/0x1260 [ 194.894477][ T7202] ? nfnetlink_rcv_msg+0x230/0x1260 [ 194.894496][ T7202] nfnetlink_rcv_msg+0x448/0x1260 [ 194.894513][ T7202] ? arch_stack_walk+0xfb/0x150 [ 194.894556][ T7202] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 194.894579][ T7202] ? kasan_save_track+0x4f/0x80 [ 194.894595][ T7202] ? kasan_save_track+0x3e/0x80 [ 194.894611][ T7202] ? kasan_save_free_info+0x46/0x50 [ 194.894632][ T7202] ? __kasan_slab_free+0x5c/0x80 [ 194.894649][ T7202] ? kmem_cache_free+0x187/0x6c0 [ 194.894667][ T7202] ? nlmon_xmit+0xb0/0x100 [ 194.894684][ T7202] ? dev_hard_start_xmit+0x2df/0x860 [ 194.894704][ T7202] ? __dev_queue_xmit+0x1428/0x3900 [ 194.894725][ T7202] ? __netlink_deliver_tap+0x5ad/0x850 [ 194.894744][ T7202] ? netlink_deliver_tap+0x19c/0x1b0 [ 194.894761][ T7202] ? netlink_unicast+0x754/0x920 [ 194.894784][ T7202] ? netlink_sendmsg+0x813/0xb40 [ 194.894802][ T7202] ? ____sys_sendmsg+0x94c/0x9c0 [ 194.894825][ T7202] ? ___sys_sendmsg+0x2a5/0x360 [ 194.894843][ T7202] ? __x64_sys_sendmsg+0x1c3/0x2a0 [ 194.894861][ T7202] ? do_syscall_64+0x15f/0xf80 [ 194.894879][ T7202] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.894925][ T7202] netlink_rcv_skb+0x232/0x4b0 [ 194.894946][ T7202] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 194.894967][ T7202] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 194.894982][ T7202] ? rcu_is_watching+0x15/0xb0 [ 194.895014][ T7202] ? bpf_lsm_capable+0x9/0x20 [ 194.895035][ T7202] ? security_capable+0x7e/0x2c0 [ 194.895067][ T7202] nfnetlink_rcv+0x2c0/0x27b0 [ 194.895088][ T7202] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 194.895108][ T7202] ? lockdep_hardirqs_on+0x7a/0x110 [ 194.895127][ T7202] ? __dev_queue_xmit+0x2b3/0x3900 [ 194.895151][ T7202] ? __dev_queue_xmit+0x1eaf/0x3900 [ 194.895171][ T7202] ? __netlink_deliver_tap+0x404/0x850 [ 194.895189][ T7202] ? netlink_deliver_tap+0x19c/0x1b0 [ 194.895206][ T7202] ? netlink_unicast+0x754/0x920 [ 194.895244][ T7202] ? __dev_queue_xmit+0x2b3/0x3900 [ 194.895271][ T7202] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 194.895295][ T7202] ? __pfx___dev_queue_xmit+0x10/0x10 [ 194.895324][ T7202] ? ref_tracker_free+0x673/0x820 [ 194.895349][ T7202] ? __pfx_ref_tracker_free+0x10/0x10 [ 194.895365][ T7202] ? __asan_memcpy+0x40/0x70 [ 194.895388][ T7202] ? __skb_clone+0x63/0x7a0 [ 194.895413][ T7202] ? __skb_clone+0x483/0x7a0 [ 194.895440][ T7202] ? skb_clone+0x246/0x3a0 [ 194.895464][ T7202] ? __netlink_deliver_tap+0x807/0x850 [ 194.895483][ T7202] ? netlink_deliver_tap+0x2e/0x1b0 [ 194.895509][ T7202] ? netlink_deliver_tap+0x2e/0x1b0 [ 194.895528][ T7202] ? netlink_deliver_tap+0x2e/0x1b0 [ 194.895552][ T7202] netlink_unicast+0x780/0x920 [ 194.895588][ T7202] netlink_sendmsg+0x813/0xb40 [ 194.895618][ T7202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.895640][ T7202] ? unwind_get_return_address+0x4d/0x90 [ 194.895666][ T7202] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 194.895689][ T7202] ____sys_sendmsg+0x94c/0x9c0 [ 194.895713][ T7202] ? __pfx_____sys_sendmsg+0x10/0x10 [ 194.895742][ T7202] ? import_iovec+0x73/0xa0 [ 194.895764][ T7202] ___sys_sendmsg+0x2a5/0x360 [ 194.895782][ T7202] ? __lock_acquire+0x6b5/0x2cf0 [ 194.895807][ T7202] ? __pfx____sys_sendmsg+0x10/0x10 [ 194.895860][ T7202] ? __fget_files+0x2a/0x420 [ 194.895884][ T7202] ? __fget_files+0x3a6/0x420 [ 194.895914][ T7202] __x64_sys_sendmsg+0x1c3/0x2a0 [ 194.895936][ T7202] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 194.895966][ T7202] ? __pfx_ksys_write+0x10/0x10 [ 194.895993][ T7202] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.896013][ T7202] do_syscall_64+0x15f/0xf80 [ 194.896030][ T7202] ? trace_irq_disable+0x3b/0x140 [ 194.896050][ T7202] ? clear_bhb_loop+0x40/0x90 [ 194.896072][ T7202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.896090][ T7202] RIP: 0033:0x7fc551abcdd9 [ 194.896107][ T7202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.896122][ T7202] RSP: 002b:00007fc54fd16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 194.896142][ T7202] RAX: ffffffffffffffda RBX: 00007fc551d35fa0 RCX: 00007fc551abcdd9 [ 194.896156][ T7202] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 194.896168][ T7202] RBP: 00007fc54fd16090 R08: 0000000000000000 R09: 0000000000000000 [ 194.896179][ T7202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.896191][ T7202] R13: 00007fc551d36038 R14: 00007fc551d35fa0 R15: 00007ffc45a3fd28 [ 194.896221][ T7202] [ 195.110993][ T5718] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 195.126812][ T6910] team0: Port device team_slave_0 added [ 195.153891][ T6910] team0: Port device team_slave_1 added [ 195.244429][ T5605] Bluetooth: hci5: command tx timeout [ 195.441949][ T5718] usb 3-1: Using ep0 maxpacket: 32 [ 195.503545][ T5718] usb 3-1: config 0 has no interfaces? [ 195.533000][ T5718] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 195.533032][ T5718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.533051][ T5718] usb 3-1: Product: syz [ 195.533065][ T5718] usb 3-1: Manufacturer: syz [ 195.533079][ T5718] usb 3-1: SerialNumber: syz [ 195.540802][ T5718] usb 3-1: config 0 descriptor?? [ 195.558745][ T6910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.558761][ T6910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.558786][ T6910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.570245][ T6910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.570260][ T6910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.570287][ T6910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.932201][ T5710] usb 3-1: USB disconnect, device number 17 [ 196.767027][ T6910] hsr_slave_0: entered promiscuous mode [ 196.780751][ T6910] hsr_slave_1: entered promiscuous mode [ 196.789924][ T6910] debugfs: 'hsr0' already exists in 'hsr' [ 196.789943][ T6910] Cannot create hsr debugfs directory [ 196.965103][ T1578] IPVS: stop unused estimator thread 0... [ 197.340520][ T5605] Bluetooth: hci5: command tx timeout [ 198.026943][ T5258] 8021q: adding VLAN 0 to HW filter on device eth2 [ 199.401056][ T5605] Bluetooth: hci5: command tx timeout [ 201.471335][ T5606] Bluetooth: hci5: command tx timeout [ 201.559142][ T5606] Bluetooth: hci1: command 0x0406 tx timeout [ 201.559183][ T5606] Bluetooth: hci2: command 0x0406 tx timeout [ 201.960765][ T7271] tipc: Failed to remove unknown binding: 66,0,0/0:2626596801/2626596802 [ 201.971141][ T7271] tipc: Failed to remove unknown binding: 66,0,0/0:2626596801/2626596802 [ 201.976415][ T7271] binder: BINDER_SET_CONTEXT_MGR already set [ 201.976430][ T7271] binder: 7270:7271 ioctl 4018620d 200000004a80 returned -16 [ 201.976926][ T7271] binder: 7270:7271 ioctl c0306201 200000000180 returned -14 [ 202.067545][ T7275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.325'. [ 202.210133][ T7276] netlink: 28 bytes leftover after parsing attributes in process `syz.3.325'. [ 202.935094][ T7277] ªªªªªª: renamed from vlan0 (while UP) [ 203.243948][ T5258] 8021q: adding VLAN 0 to HW filter on device eth3 [ 203.661109][ T5738] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 203.830961][ T5738] usb 4-1: Using ep0 maxpacket: 32 [ 203.835063][ T5738] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 203.835092][ T5738] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.835113][ T5738] usb 4-1: Product: syz [ 203.835126][ T5738] usb 4-1: Manufacturer: syz [ 203.835139][ T5738] usb 4-1: SerialNumber: syz [ 203.885674][ T5738] usb 4-1: config 0 descriptor?? [ 204.375384][ T5738] airspy 4-1:0.0: Board ID: 00 [ 204.375408][ T5738] airspy 4-1:0.0: Firmware version: [ 204.611828][ T7296] netlink: 32 bytes leftover after parsing attributes in process `syz.2.334'. [ 206.056870][ T5738] airspy 4-1:0.0: usb_control_msg() failed -110 request 0f [ 206.144484][ T5738] airspy 4-1:0.0: Registered as swradio24 [ 206.144506][ T5738] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 206.571814][ T7317] tipc: Failed to remove unknown binding: 66,0,0/0:263142321/263142322 [ 206.572360][ T7317] tipc: Failed to remove unknown binding: 66,0,0/0:263142321/263142322 [ 206.613766][ T7317] binder: BINDER_SET_CONTEXT_MGR already set [ 206.613776][ T7317] binder: 7316:7317 ioctl 4018620d 200000004a80 returned -16 [ 206.615121][ T7317] binder: 7316:7317 ioctl c0306201 200000000180 returned -14 [ 206.799668][ T7323] FAULT_INJECTION: forcing a failure. [ 206.799668][ T7323] name failslab, interval 1, probability 0, space 0, times 0 [ 206.799702][ T7323] CPU: 0 UID: 0 PID: 7323 Comm: syz.0.342 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 206.799726][ T7323] Tainted: [L]=SOFTLOCKUP [ 206.799732][ T7323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 206.799742][ T7323] Call Trace: [ 206.799749][ T7323] [ 206.799756][ T7323] dump_stack_lvl+0xe8/0x150 [ 206.799782][ T7323] should_fail_ex+0x46b/0x600 [ 206.799814][ T7323] should_failslab+0xa8/0x100 [ 206.799837][ T7323] kmem_cache_alloc_noprof+0x87/0x680 [ 206.799856][ T7323] ? do_getname+0x2e/0x250 [ 206.799882][ T7323] do_getname+0x2e/0x250 [ 206.799901][ T7323] ? user_path_at+0x1e/0x160 [ 206.799921][ T7323] user_path_at+0x2a/0x160 [ 206.799941][ T7323] __se_sys_mount+0x2dc/0x420 [ 206.799969][ T7323] ? __pfx___se_sys_mount+0x10/0x10 [ 206.799999][ T7323] ? __x64_sys_mount+0x20/0xc0 [ 206.800021][ T7323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.800041][ T7323] do_syscall_64+0x15f/0xf80 [ 206.800059][ T7323] ? trace_irq_disable+0x3b/0x140 [ 206.800080][ T7323] ? clear_bhb_loop+0x40/0x90 [ 206.800101][ T7323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.800119][ T7323] RIP: 0033:0x7f22e568cdd9 [ 206.800135][ T7323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.800150][ T7323] RSP: 002b:00007f22e38de028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 206.800205][ T7323] RAX: ffffffffffffffda RBX: 00007f22e5905fa0 RCX: 00007f22e568cdd9 [ 206.800219][ T7323] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 206.800231][ T7323] RBP: 00007f22e38de090 R08: 0000200000000100 R09: 0000000000000000 [ 206.800242][ T7323] R10: 0000000000000400 R11: 0000000000000246 R12: 0000000000000001 [ 206.800254][ T7323] R13: 00007f22e5906038 R14: 00007f22e5905fa0 R15: 00007ffc11f570b8 [ 206.800284][ T7323] [ 206.937920][ T7181] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.938013][ T7181] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.938223][ T7181] bridge_slave_0: entered allmulticast mode [ 206.944531][ T7181] bridge_slave_0: entered promiscuous mode [ 206.956303][ T7181] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.962157][ T7181] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.962438][ T7181] bridge_slave_1: entered allmulticast mode [ 206.964943][ T7181] bridge_slave_1: entered promiscuous mode [ 206.978261][ T5720] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 207.119736][ T5738] usb 4-1: USB disconnect, device number 20 [ 207.143432][ T5720] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 207.143464][ T5720] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 207.143489][ T5720] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 207.143513][ T5720] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 207.143535][ T5720] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 207.148511][ T5720] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 207.148538][ T5720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.148556][ T5720] usb 3-1: Product: syz [ 207.148568][ T5720] usb 3-1: Manufacturer: syz [ 207.148580][ T5720] usb 3-1: SerialNumber: syz [ 207.260895][ T7328] netlink: 'syz.3.344': attribute type 1 has an invalid length. [ 207.425037][ T5720] usb 3-1: config 0 descriptor?? [ 207.459939][ T5720] iguanair 3-1:0.0: probe with driver iguanair failed with error -12 [ 208.043731][ T7181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.318777][ T7181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.555117][ T7181] team0: Port device team_slave_0 added [ 208.581731][ T5710] usb 3-1: USB disconnect, device number 18 [ 209.081068][ T5707] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 209.108274][ T7181] team0: Port device team_slave_1 added [ 209.233675][ T5707] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 209.233706][ T5707] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 209.233725][ T5707] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 209.233759][ T5707] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 209.233797][ T5707] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 209.233819][ T5707] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 209.233841][ T5707] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 209.237539][ T5707] usb 1-1: string descriptor 0 read error: -22 [ 209.237682][ T5707] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 209.237705][ T5707] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.345349][ T5707] usb 1-1: config 0 descriptor?? [ 209.357329][ T5707] hub 1-1:0.0: bad descriptor, ignoring hub [ 209.357368][ T5707] hub 1-1:0.0: probe with driver hub failed with error -5 [ 209.382047][ T5707] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input19 [ 209.447943][ T1578] bridge_slave_1: left allmulticast mode [ 209.447978][ T1578] bridge_slave_1: left promiscuous mode [ 209.448247][ T1578] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.611868][ T1578] bridge_slave_0: left allmulticast mode [ 209.611898][ T1578] bridge_slave_0: left promiscuous mode [ 209.689435][ T1578] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.481847][ T1578] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.551602][ T1578] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.614007][ T1578] bond0 (unregistering): Released all slaves [ 210.665148][ T7181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.665166][ T7181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.665192][ T7181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.684934][ T7181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.684952][ T7181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.684978][ T7181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.700282][ T5718] usb 1-1: USB disconnect, device number 14 [ 211.007830][ T5605] Bluetooth: hci5: command tx timeout [ 211.239154][ T7181] hsr_slave_0: entered promiscuous mode [ 211.245204][ T7181] hsr_slave_1: entered promiscuous mode [ 211.246092][ T7181] debugfs: 'hsr0' already exists in 'hsr' [ 211.246115][ T7181] Cannot create hsr debugfs directory [ 211.485657][ T7415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.486901][ T7415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.520997][ T1578] hsr_slave_0: left promiscuous mode [ 211.571158][ T1578] hsr_slave_1: left promiscuous mode [ 211.572246][ T1578] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.621723][ T1578] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.721036][ T5707] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 211.877195][ T5707] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.880112][ T5707] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 211.880140][ T5707] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.880160][ T5707] usb 1-1: Product: syz [ 211.880174][ T5707] usb 1-1: Manufacturer: syz [ 211.880187][ T5707] usb 1-1: SerialNumber: syz [ 211.943682][ T5707] usb 1-1: config 0 descriptor?? [ 211.971865][ T5707] port100 1-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 212.151917][ T126] usb 1-1: USB disconnect, device number 15 [ 212.168944][ T1578] team0 (unregistering): Port device team_slave_1 removed [ 212.247892][ T1578] team0 (unregistering): Port device team_slave_0 removed [ 212.432458][ T6910] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 212.493028][ T6910] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 212.600450][ T6910] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 212.998980][ T7425] FAULT_INJECTION: forcing a failure. [ 212.998980][ T7425] name failslab, interval 1, probability 0, space 0, times 0 [ 212.999126][ T7425] CPU: 0 UID: 0 PID: 7425 Comm: syz.3.360 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 212.999151][ T7425] Tainted: [L]=SOFTLOCKUP [ 212.999158][ T7425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 212.999168][ T7425] Call Trace: [ 212.999175][ T7425] [ 212.999184][ T7425] dump_stack_lvl+0xe8/0x150 [ 212.999211][ T7425] should_fail_ex+0x46b/0x600 [ 212.999243][ T7425] should_failslab+0xa8/0x100 [ 212.999266][ T7425] kmem_cache_alloc_lru_noprof+0x8b/0x680 [ 212.999287][ T7425] ? __d_alloc+0x37/0x6f0 [ 212.999311][ T7425] __d_alloc+0x37/0x6f0 [ 212.999328][ T7425] ? __pfx___schedule+0x10/0x10 [ 212.999359][ T7425] d_alloc_parallel+0xe6/0x1610 [ 212.999387][ T7425] ? irqentry_exit+0x218/0x730 [ 212.999405][ T7425] ? lockdep_hardirqs_on+0x7a/0x110 [ 212.999423][ T7425] ? irqentry_exit+0x218/0x730 [ 212.999440][ T7425] ? trace_irq_disable+0x3b/0x140 [ 212.999464][ T7425] ? __pfx_d_alloc_parallel+0x10/0x10 [ 212.999502][ T7425] path_openat+0xcc3/0x38a0 [ 212.999552][ T7425] ? lockdep_hardirqs_on+0x7a/0x110 [ 212.999573][ T7425] ? __pfx_path_openat+0x10/0x10 [ 212.999606][ T7425] ? do_file_open+0x11d/0x4a0 [ 212.999627][ T7425] ? kasan_check_range+0x1bd/0x2c0 [ 212.999662][ T7425] do_file_open+0x23e/0x4a0 [ 212.999687][ T7425] ? __pfx_do_file_open+0x10/0x10 [ 212.999705][ T7425] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 212.999739][ T7425] ? __pfx_kfree_link+0x10/0x10 [ 212.999768][ T7425] ? alloc_fd+0x64e/0x6c0 [ 212.999803][ T7425] do_sys_openat2+0x113/0x200 [ 212.999828][ T7425] ? irqentry_exit+0x218/0x730 [ 212.999847][ T7425] ? __pfx_do_sys_openat2+0x10/0x10 [ 212.999877][ T7425] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.999902][ T7425] __x64_sys_openat+0x138/0x170 [ 212.999929][ T7425] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.999954][ T7425] do_syscall_64+0x15f/0xf80 [ 212.999975][ T7425] ? clear_bhb_loop+0x40/0x90 [ 212.999998][ T7425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.000017][ T7425] RIP: 0033:0x7fc551a7d60e [ 213.000034][ T7425] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 213.000049][ T7425] RSP: 002b:00007fc54fcf4ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 213.000069][ T7425] RAX: ffffffffffffffda RBX: 00007fc54fcf56c0 RCX: 00007fc551a7d60e [ 213.000083][ T7425] RDX: 0000000000000002 RSI: 00007fc54fcf4f90 RDI: ffffffffffffff9c [ 213.000095][ T7425] RBP: 00007fc54fcf5090 R08: 0000000000000000 R09: 0000000000000000 [ 213.000107][ T7425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.000118][ T7425] R13: 00007fc551d36128 R14: 00007fc551d36090 R15: 00007ffc45a3fd28 [ 213.000149][ T7425] [ 213.530733][ T6910] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 213.900241][ T6910] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 213.921049][ T6071] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 214.032310][ T6910] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 214.058302][ T5738] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 214.087790][ T7441] netlink: 16 bytes leftover after parsing attributes in process `syz.3.363'. [ 214.094227][ T6910] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 214.111100][ T6071] usb 1-1: Using ep0 maxpacket: 16 [ 214.113392][ T6071] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 214.113419][ T6071] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 97, changing to 7 [ 214.113433][ T6071] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 24929, setting to 1024 [ 214.117050][ T6071] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 214.117078][ T6071] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.117097][ T6071] usb 1-1: Product: syz [ 214.117110][ T6071] usb 1-1: Manufacturer: syz [ 214.117123][ T6071] usb 1-1: SerialNumber: syz [ 214.129144][ T6071] usb 1-1: config 0 descriptor?? [ 214.148016][ T6071] pegasus_notetaker 1-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 214.260684][ T5738] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 214.260704][ T5738] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 214.260719][ T5738] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 214.260732][ T5738] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 214.260745][ T5738] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 214.295704][ T5738] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 214.295734][ T5738] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.295753][ T5738] usb 3-1: Product: syz [ 214.295767][ T5738] usb 3-1: Manufacturer: syz [ 214.295780][ T5738] usb 3-1: SerialNumber: syz [ 214.312788][ T5738] usb 3-1: config 0 descriptor?? [ 214.334682][ T5738] iguanair 3-1:0.0: probe with driver iguanair failed with error -12 [ 214.340346][ T6910] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 214.639810][ T126] usb 1-1: USB disconnect, device number 16 [ 214.750804][ T5258] 8021q: adding VLAN 0 to HW filter on device eth1 [ 215.307135][ T7457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.365'. [ 215.451141][ T5710] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 215.684164][ T5710] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 215.684194][ T5710] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 215.684212][ T5710] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 215.684258][ T5710] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.686610][ T5710] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 215.686640][ T5710] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 215.686660][ T5710] usb 4-1: Product: syz [ 215.686674][ T5710] usb 4-1: Manufacturer: syz [ 215.817097][ T5710] cdc_wdm 4-1:1.0: skipping garbage [ 215.817117][ T5710] cdc_wdm 4-1:1.0: skipping garbage [ 215.856724][ T5710] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 215.856766][ T5710] cdc_wdm 4-1:1.0: Unknown control protocol [ 215.900394][ T5738] usb 3-1: USB disconnect, device number 19 [ 216.001478][ T7467] netlink: 52 bytes leftover after parsing attributes in process `syz.0.367'. [ 216.039690][ T5710] usb 4-1: USB disconnect, device number 21 [ 216.070659][ T7468] netlink: 76 bytes leftover after parsing attributes in process `syz.0.367'. [ 216.324228][ T7467] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.329031][ T7467] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.355036][ T7468] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.355175][ T7468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.368894][ T7468] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.369268][ T7468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.385467][ T7468] netlink: 52 bytes leftover after parsing attributes in process `syz.0.367'. [ 216.404367][ T7468] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.404630][ T7468] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.454403][ T6910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.541080][ T5710] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 216.709745][ T5710] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 216.709777][ T5710] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 216.709792][ T5710] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 216.709837][ T5710] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.753069][ T5710] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 216.753099][ T5710] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 216.753119][ T5710] usb 4-1: Product: syz [ 216.753132][ T5710] usb 4-1: Manufacturer: syz [ 216.814465][ T6910] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.853710][ T5258] 8021q: adding VLAN 0 to HW filter on device eth2 [ 216.869961][ T5710] cdc_wdm 4-1:1.0: skipping garbage [ 216.869981][ T5710] cdc_wdm 4-1:1.0: skipping garbage [ 216.887951][ T5710] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 216.887973][ T5710] cdc_wdm 4-1:1.0: Unknown control protocol [ 216.907652][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.908307][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.935949][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.942500][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.319555][ T36] audit: type=1326 audit(1777659135.396:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7479 comm="syz.2.369" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9968dacdd9 code=0x7ffc0000 [ 217.319599][ T36] audit: type=1326 audit(1777659135.396:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7479 comm="syz.2.369" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9968dacdd9 code=0x7ffc0000 [ 217.319629][ T36] audit: type=1326 audit(1777659135.396:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7479 comm="syz.2.369" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9968d6d60e code=0x7ffc0000 [ 217.319665][ T36] audit: type=1326 audit(1777659135.396:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7479 comm="syz.2.369" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9968dacdd9 code=0x7ffc0000 [ 217.319694][ T36] audit: type=1326 audit(1777659135.396:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7479 comm="syz.2.369" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9968dacdd9 code=0x7ffc0000 [ 217.319724][ T36] audit: type=1326 audit(1777659135.396:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7479 comm="syz.2.369" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9968dacdd9 code=0x7ffc0000 [ 217.319752][ T36] audit: type=1326 audit(1777659135.396:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7479 comm="syz.2.369" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9968dacdd9 code=0x7ffc0000 [ 217.319781][ T36] audit: type=1326 audit(1777659135.396:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7479 comm="syz.2.369" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9968dacdd9 code=0x7ffc0000 [ 217.319809][ T36] audit: type=1326 audit(1777659135.396:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7479 comm="syz.2.369" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9968dacdd9 code=0x7ffc0000 [ 217.319837][ T36] audit: type=1326 audit(1777659135.396:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7479 comm="syz.2.369" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9968dacdd9 code=0x7ffc0000 [ 218.518876][ T5710] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 218.672744][ T5710] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 218.672776][ T5710] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 218.672802][ T5710] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 218.672826][ T5710] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 218.672849][ T5710] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 218.675479][ T5710] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 218.675508][ T5710] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.675536][ T5710] usb 1-1: Product: syz [ 218.675550][ T5710] usb 1-1: Manufacturer: syz [ 218.675562][ T5710] usb 1-1: SerialNumber: syz [ 218.725236][ T5710] usb 1-1: config 0 descriptor?? [ 218.752116][ T5710] iguanair 1-1:0.0: probe with driver iguanair failed with error -12 [ 218.897954][ T7502] netlink: 52 bytes leftover after parsing attributes in process `syz.2.373'. [ 219.047096][ T7504] netlink: 76 bytes leftover after parsing attributes in process `syz.2.373'. [ 219.361555][ T5738] usb 4-1: USB disconnect, device number 22 [ 219.384227][ T7502] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.404118][ T7502] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.492556][ T7504] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.492706][ T7504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.493178][ T7504] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.493317][ T7504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.546489][ T7504] netlink: 52 bytes leftover after parsing attributes in process `syz.2.373'. [ 219.553410][ T7504] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.553620][ T7504] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.318179][ T6071] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 220.420323][ T10] BUG: kernel NULL pointer dereference, address: 0000000000000010 [ 220.420341][ T10] #PF: supervisor read access in kernel mode [ 220.420352][ T10] #PF: error_code(0x0000) - not-present page [ 220.420362][ T10] PGD 800000003a20d067 P4D 800000003a20d067 PUD 0 [ 220.420386][ T10] Oops: Oops: 0000 [#1] SMP KASAN PTI [ 220.420409][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 220.420435][ T10] Tainted: [L]=SOFTLOCKUP [ 220.420441][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 220.420453][ T10] Workqueue: usb_hub_wq hub_event [ 220.420475][ T10] RIP: 0010:kcov_remote_start+0x2a1/0x710 [ 220.420504][ T10] Code: 8a 8d 4c 8b b8 08 f4 6a 92 bd 00 00 04 00 eb 4f 41 8b ae a4 00 00 00 49 c7 c7 20 57 02 8e 4d 8b 3f 49 81 ff 20 57 02 8e 74 4c <41> 39 6f 10 75 ee 4c 89 ff e8 51 5a e7 02 84 c0 74 0e 49 8b 07 49 [ 220.420519][ T10] RSP: 0000:ffffc900000f77c8 EFLAGS: 00010203 [ 220.420535][ T10] RAX: 0000000000000000 RBX: ffff88801cebbd80 RCX: 0000000000000000 [ 220.420547][ T10] RDX: 000000002245e300 RSI: 0000000000000001 RDI: ffffffff8ba74c80 [ 220.420559][ T10] RBP: 0000000000100000 R08: ffffffff8b1e9760 R09: ffffffff8dfc8140 [ 220.420572][ T10] R10: dffffc0000000000 R11: fffffbfff1f11b7f R12: 0000000000000002 [ 220.420585][ T10] R13: 0000000000000001 R14: ffff888026490f00 R15: 0000000000000000 [ 220.420597][ T10] FS: 0000000000000000(0000) GS:ffff88812617a000(0000) knlGS:0000000000000000 [ 220.420613][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 220.420626][ T10] CR2: 0000000000000010 CR3: 000000005ef9e000 CR4: 00000000003526f0 [ 220.420641][ T10] Call Trace: [ 220.420648][ T10] [ 220.420657][ T10] hub_event+0x150/0x4f60 [ 220.420679][ T10] ? __lock_acquire+0x6b5/0x2cf0 [ 220.420701][ T10] ? look_up_lock_class+0x57/0x110 [ 220.420723][ T10] ? __lock_acquire+0x6b5/0x2cf0 [ 220.420745][ T10] ? trace_hrtimer_start+0x82/0x200 [ 220.420766][ T10] ? lock_acquire+0x106/0x350 [ 220.420787][ T10] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 220.420808][ T10] ? __pfx_hub_event+0x10/0x10 [ 220.420825][ T10] ? process_scheduled_works+0xa70/0x1860 [ 220.420850][ T10] ? process_scheduled_works+0xa70/0x1860 [ 220.420866][ T10] ? process_scheduled_works+0xa70/0x1860 [ 220.420882][ T10] process_scheduled_works+0xb5d/0x1860 [ 220.420908][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 220.420927][ T10] ? assign_work+0x3d5/0x5e0 [ 220.420946][ T10] worker_thread+0xa53/0xfc0 [ 220.420976][ T10] kthread+0x388/0x470 [ 220.420997][ T10] ? __pfx_worker_thread+0x10/0x10 [ 220.421015][ T10] ? __pfx_kthread+0x10/0x10 [ 220.421036][ T10] ret_from_fork+0x514/0xb70 [ 220.421057][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 220.421076][ T10] ? __switch_to+0xc79/0x1410 [ 220.421101][ T10] ? __pfx_kthread+0x10/0x10 [ 220.421122][ T10] ret_from_fork_asm+0x1a/0x30 [ 220.421149][ T10] [ 220.421155][ T10] Modules linked in: [ 220.421177][ T10] CR2: 0000000000000010 [ 220.421190][ T10] ---[ end trace 0000000000000000 ]--- [ 220.421204][ T10] RIP: 0010:kcov_remote_start+0x2a1/0x710 [ 220.421224][ T10] Code: 8a 8d 4c 8b b8 08 f4 6a 92 bd 00 00 04 00 eb 4f 41 8b ae a4 00 00 00 49 c7 c7 20 57 02 8e 4d 8b 3f 49 81 ff 20 57 02 8e 74 4c <41> 39 6f 10 75 ee 4c 89 ff e8 51 5a e7 02 84 c0 74 0e 49 8b 07 49 [ 220.421238][ T10] RSP: 0000:ffffc900000f77c8 EFLAGS: 00010203 [ 220.421252][ T10] RAX: 0000000000000000 RBX: ffff88801cebbd80 RCX: 0000000000000000 [ 220.421264][ T10] RDX: 000000002245e300 RSI: 0000000000000001 RDI: ffffffff8ba74c80 [ 220.421276][ T10] RBP: 0000000000100000 R08: ffffffff8b1e9760 R09: ffffffff8dfc8140 [ 220.421289][ T10] R10: dffffc0000000000 R11: fffffbfff1f11b7f R12: 0000000000000002 [ 220.421302][ T10] R13: 0000000000000001 R14: ffff888026490f00 R15: 0000000000000000 [ 220.421314][ T10] FS: 0000000000000000(0000) GS:ffff88812617a000(0000) knlGS:0000000000000000 [ 220.421325][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 220.421337][ T10] CR2: 0000000000000010 CR3: 000000005ef9e000 CR4: 00000000003526f0 [ 220.421353][ T10] Kernel panic - not syncing: Fatal exception [ 220.421497][ T10] Kernel Offset: disabled