last executing test programs: 5m15.313691804s ago: executing program 0 (id=4243): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0xa4, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x54, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4041}, 0x0) 5m15.078466752s ago: executing program 0 (id=4247): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x6}, 0x4) socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$inet(0x2b, 0x801, 0x0) listen(r1, 0x7f) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'rr\x00', 0x1, 0x10000004, 0x8}, 0x2c) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000140)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'none\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x50}, 0x4e22, 0x2, 0x1cb, 0x32d61, 0x12d58}}, 0x44) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 5m14.90188237s ago: executing program 0 (id=4251): r0 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x14, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x18, &(0x7f0000000300)=ANY=[@ANYBLOB='@\b\b'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000000080)={0x20, 0x6, 0x3, "348b35"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r3 = syz_ublk_setup_io_uring(0x22, &(0x7f0000000340)={0x0, 0x20000000, 0x100, 0x2, 0x1db}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0, &(0x7f00000004c0)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x1, {0x4644}}) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000180)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x100000001, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x4, 0xfcd, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x118}}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x74, &(0x7f0000000280)=[{}, {}], 0x10, 0x10, &(0x7f00000002c0), &(0x7f00000003c0), 0x8, 0xf, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000003700)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8004}, 0xc, &(0x7f00000036c0)={&(0x7f0000002340)=@newtfilter={0x135c, 0x2c, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0xa}, {0x1, 0xfff3}, {0x3, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x6, 0xe}}, @TCA_RATE={0x6, 0x5, {0x4, 0xff}}, @filter_kind_options=@f_route={{0xa}, {0x130c, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r7}, @TCA_ROUTE4_TO={0x8, 0x2, 0x8e}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x7, 0xfff2}}, @TCA_ROUTE4_ACT={0x12f0, 0x6, [@m_skbmod={0xac, 0x5, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x2}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}]}, {0x5e, 0x6, "44702572e073e550a2719591afda781e465f6e350b1106ed1c859ebb07541c6e05c673463bf0139819561bb73567c0810985f3892e5927961a286f23c3e3d417863a892965aa6836a4f77476f67f56ec8aa4da86706caeec02c5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_sample={0x120, 0x15, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x7ff, 0x6, 0x8, 0x4, 0xaf}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x9}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x6, 0x8, 0x6, 0x10001, 0x4f4}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x6}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xfffffffe}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7ff, 0xfffffffd, 0xdb136a1c803e1d20, 0x53f, 0x10000}}]}, {0x72, 0x6, "667ecbef1182c492c872a97dbb432652e825e504aded5a3b409bbeeb72b101a2c9516b6910f62b0a29d63078d5c5b326f0ea26c9c644f7d04d755d438d5a0484905675511e6090136efe9262fcbfed8c1cd2e25bb016e400a557a08f4aa61759c88778050156a06ba1e7f33e20b6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_pedit={0xf8c, 0x4, 0x0, 0x0, {{0xa}, {0xef4, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}]}, @TCA_PEDIT_PARMS_EX={0xee0, 0x4, {{{0xfffffe00, 0x3, 0x1, 0x6, 0x5}, 0x8c, 0x10, [{0xf, 0x8, 0x81, 0x4, 0x2, 0x4}, {0xd95a, 0x3, 0x0, 0xeef, 0xf1, 0x5000000}, {0x7, 0x8, 0x7dd, 0x0, 0x101, 0x3b}, {0x20000000, 0xffffff93, 0x5, 0x54, 0x401, 0x7}, {0x100000, 0x7, 0x8000, 0x8, 0x5, 0x3402}, {0x80000000, 0x7, 0x5, 0x1, 0x39, 0x7}, {0x3b7, 0x2, 0xfffffffe, 0x0, 0x664, 0x8}, {0x3, 0x1, 0x6, 0xfffff001, 0x1, 0x9}]}, [{0x0, 0xf, 0x4, 0x9, 0x0, 0x6}, {0x3, 0x4, 0x11, 0x0, 0x200, 0x2}, {0x5, 0x9, 0x0, 0x6, 0xc426, 0x3}, {0x5, 0x0, 0x0, 0x8, 0x8000}, {0xdd2, 0x80, 0x5, 0x80000000, 0xa462, 0x9}, {0x8, 0x400, 0x4, 0x0, 0x5, 0x61}, {0x7, 0x80000000, 0xffffffff, 0xdb7, 0x0, 0xb66}, {0xffff7fff, 0x8, 0x4, 0x1, 0x5, 0x401}, {0x4, 0x8, 0x3, 0x0, 0x5, 0xe35}, {0x2, 0x1, 0x7, 0x8001, 0x7, 0x5}, {0xfffffffc, 0x7, 0x10000, 0x4, 0x4, 0x6}, {0x1, 0x703, 0x1, 0x8, 0x5fa, 0x7}, {0xce1, 0x400, 0xc329, 0x4, 0x2, 0x6}, {0x2, 0x7, 0x1, 0x889, 0x100, 0x2}, {0xb, 0x81, 0xf, 0x2, 0x3, 0x7f}, {0x1000, 0x3, 0xb, 0x6b94b89e, 0x3, 0xc0000000}, {0x3, 0x2, 0x8000, 0x2, 0x5, 0x9}, {0x7fffffff, 0x1, 0x6, 0x1ff, 0xa0000000, 0x7fff}, {0x40, 0xc, 0x8001, 0x0, 0x25}, {0x1ff, 0x9, 0x3bf, 0x9, 0x5, 0xaee}, {0x101, 0x9, 0x0, 0x4, 0x38d1, 0x4}, {0x1, 0x4, 0x4c2, 0xfffffff8, 0x6, 0x2}, {0x7, 0xdb8, 0x3, 0x7, 0x6a000000, 0x8}, {0x2, 0x4, 0x80, 0x0, 0x4, 0x6}, {0xfffffffe, 0x20, 0x91f, 0x9, 0x7}, {0x4, 0x4, 0x49b58, 0x4, 0x7, 0x3}, {0xcc, 0x5, 0x0, 0x2, 0x6, 0x8f}, {0x6, 0xffffff32, 0xc0000000, 0x6, 0x65, 0x6}, {0x1, 0x1a5, 0x1, 0x7, 0x9, 0x7}, {0xfff, 0x40, 0x8, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x2, 0x6, 0x0, 0x100}, {0x0, 0x80000001, 0xfe, 0x248, 0x6151, 0x8}, {0x84fd, 0x7, 0xfffffff8, 0xffffffff, 0x7, 0xf264}, {0xa, 0x8, 0x1, 0x2, 0x0, 0x5}, {0x2, 0x7, 0xe627, 0x1, 0x777, 0x8}, {0x2, 0x8, 0x5, 0x3, 0x3, 0x81}, {0x8, 0x1, 0x6, 0x4, 0x8, 0xaff4}, {0x7f, 0x3, 0xfffffffd, 0xfff, 0x7, 0xfffffffe}, {0x1, 0x9, 0x4, 0xb4, 0x9, 0x5}, {0x5bdd, 0x2, 0x2, 0xffff, 0x1, 0x1ff}, {0x4, 0x9, 0x7, 0x3, 0xf3, 0x10}, {0x2, 0xff, 0x7, 0x10, 0x5, 0x2}, {0x10, 0x2d380, 0x7, 0x3, 0x6, 0x9}, {0x1f66f396, 0xe4d, 0x2, 0x8, 0x7edd, 0x40000}, {0x6, 0x1, 0x101, 0x0, 0x8}, {0x8, 0x96, 0x200, 0x7fffffff, 0x232, 0x6}, {0xa, 0x1, 0x1, 0x320000, 0x4, 0x400}, {0xc, 0x1, 0x4, 0x7fffffff, 0x1, 0x7}, {0xffffffff, 0x101, 0x1, 0x4a9682c7, 0x2, 0x4000000}, {0x9, 0x496, 0x1cb4, 0x5, 0x0, 0x8}, {0xfffffffe, 0x0, 0xffff, 0x4, 0x6, 0x1}, {0x7, 0xf, 0x1, 0xfffffffa, 0x4, 0x81}, {0x5, 0x99a8, 0x1, 0x1, 0x3, 0xffffffff}, {0x0, 0x0, 0x8, 0x0, 0x300000, 0xfffffffe}, {0xff, 0x191, 0xdbcd, 0xa, 0x3, 0x3}, {0x1, 0x4, 0x4, 0xc, 0x3, 0x7}, {0xb, 0xb, 0xfffffffd, 0x5, 0x0, 0xf4d8}, {0x5, 0x0, 0x4, 0xfffffffe, 0x2, 0x40}, {0x7, 0x2, 0x200, 0xffff7295, 0x2, 0x9}, {0xc75f, 0x0, 0x7, 0x5, 0x6, 0x3}, {0x2, 0x7, 0x101, 0x80000000, 0x9, 0xe000000}, {0x4, 0x8, 0x2, 0x9, 0x5, 0x6}, {0x1, 0xff, 0x100, 0x49a, 0x5, 0x4d20}, {0x6a, 0xb0b, 0x101, 0x9, 0x8, 0x1}, {0x4, 0xd, 0x7, 0x8, 0xc80, 0x1}, {0x7, 0x5, 0x6, 0x2, 0x40, 0x3}, {0x65, 0xf, 0x7f, 0x8, 0x0, 0x7}, {0x5, 0x5, 0x3ff, 0x101, 0x8, 0x8}, {0x6999fd26, 0x8001, 0xfffffffc, 0x51, 0x4, 0x3}, {0x80000001, 0x6, 0x7, 0x10, 0x0, 0xe5}, {0xffff, 0x101, 0x9, 0x6, 0x0, 0x5}, {0x9, 0xffffffff, 0x4, 0x1, 0x10000, 0xf2}, {0x7f, 0xde, 0x2, 0x0, 0x0, 0x7}, {0x0, 0xffff0000, 0x7, 0x4, 0x72, 0x7}, {0x7, 0x81, 0x3ff, 0x2, 0x0, 0x6}, {0x4, 0x10000, 0x401, 0x8, 0x4, 0x3df}, {0x92d1, 0xb58, 0xe3, 0x2, 0x2, 0x1}, {0x9, 0x3, 0x32, 0x0, 0x4, 0x1}, {0x2, 0xf, 0xdc15, 0x2, 0xc08c, 0x10000}, {0x6, 0xc, 0x7, 0x9, 0x9, 0xffff0001}, {0x37, 0x6, 0xfd, 0x8001, 0x310, 0x3}, {0xc90, 0xfffffff3, 0xd, 0x2, 0x2, 0x800}, {0x4, 0x5, 0x10000, 0xfffffff3, 0x6, 0x7}, {0x8001, 0x8f, 0x1, 0x9, 0xfff, 0x245}, {0x2, 0x6, 0x3, 0x3, 0x8, 0x9}, {0x80000001, 0x1, 0x6, 0x7, 0x9, 0x5}, {0x5, 0x1, 0xe1, 0x0, 0x3, 0x80000000}, {0x3, 0x4f, 0x10001, 0x2, 0x44, 0xfffffffd}, {0x9, 0x6, 0x1, 0x0, 0xfff, 0x6bd0}, {0x1ff, 0x3, 0x4, 0x4, 0x9, 0xfff}, {0xccac, 0x7, 0x3, 0x309f, 0x1, 0x4}, {0x0, 0xa000000, 0xf, 0x3, 0x7ff, 0x7}, {0xffff, 0xf691, 0x9, 0x1bc, 0x6, 0x10}, {0x1, 0x3, 0xfff, 0x5, 0x3}, {0x5, 0x1, 0x91, 0x101, 0x800, 0x3ff}, {0x7fffffff, 0xfffffffd, 0x0, 0x79, 0x100}, {0xa8a8, 0x8, 0x10000, 0xc, 0x81, 0xf}, {0x2, 0x5070, 0x0, 0xff, 0x9, 0x8}, {0x800, 0x8, 0x80000001, 0x1, 0x5, 0x1}, {0x364, 0x8, 0xcd0, 0x4, 0x10001, 0xffffface}, {0x8, 0x3, 0x80, 0x7, 0x6, 0x2}, {0x2, 0x11, 0x3, 0x81, 0x10000, 0xe1b5}, {0x9, 0xd, 0xfffffffa, 0x80, 0x7, 0x9}, {0x6, 0xffff, 0xffffffff, 0x40, 0x80000001, 0x2}, {0x0, 0xfffffffc, 0x3, 0x7, 0x6, 0x7}, {0x4, 0x8, 0x1, 0x7, 0x7, 0x7fff}, {0x5, 0x5, 0x4, 0x0, 0x8}, {0x8, 0x0, 0x348, 0xa, 0x6, 0xafd8}, {0x2, 0x1, 0x4, 0x2e4c0403, 0xffff, 0x5}, {0x1000, 0x5, 0x10, 0x86, 0x6, 0x7}, {0x4, 0x80, 0x4, 0x80000000, 0x800, 0x2}, {0x7, 0x6, 0x3, 0xe4fb, 0x1, 0xb7a}, {0x4, 0xb8b, 0x2, 0x401, 0x7, 0xbad8}, {0x4, 0x1, 0x4, 0x4, 0xaea, 0x3}, {0x8, 0xfffffff8, 0xfffffffd, 0x8, 0x2, 0x8}, {0x2f5d, 0x1, 0x2, 0x6, 0x7ff, 0x1}, {0x5, 0x96, 0x2, 0x8, 0x2, 0xfffffffa}, {0x3, 0x9, 0x40, 0xffffffff, 0x10001, 0x1}, {0x7, 0x9, 0x6f, 0x9, 0xb8d6, 0x3}, {0x7, 0x17, 0x2, 0x6, 0x7, 0x3fff8}, {0x4, 0x6, 0x0, 0x1000, 0x1, 0x3a}, {0xfffffe00, 0x6, 0x3, 0xc1a00000, 0x5, 0xe86}, {0x3a4, 0x3, 0x7, 0x4, 0x2, 0x9}, {0x1, 0x7, 0x4824, 0x0, 0x4, 0x1}, {0x800, 0x9, 0x1, 0x6, 0xf0, 0x7ff}, {0x9, 0xe50, 0x5, 0x67f1, 0x2051983d, 0x40}, {0xe8, 0x3, 0x5, 0x2, 0x7fff, 0x5}, {0xe5, 0x8, 0x0, 0x5, 0x388fa9a8, 0x4}], [{0x0, 0x1}, {0x1}, {}, {0x5}, {0x1}, {0x2, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x0, 0x2}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {}, {}, {0x1, 0x1}, {0x6, 0x1}, {0x3}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {}, {}, {0x3}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x4}, {}, {0x3}, {0x5}, {0x5, 0x1}, {0x4}, {0x1}, {0x5}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0xdbd19a514c9712fd, 0x44fb5017dad92449}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x2, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x2}, {0x0, 0x2}, {0x1}, {0x1, 0x1}, {0x1}, {0x1, 0x5032ceac9ae42bfa}, {}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x1}, {0x3}, {0x2}, {0x1}, {0x2}, {0x1}, {0x5}, {0x2}, {0x1}, {0x3}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {}, {}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x4}, {0x5}]}}]}, {0x6f, 0x6, "8d9bab92a16c7d0efc5c9d0ba3ec533d9e91f137dc6c5bd3e7193f69c90675b04ce9a1c9d026d20bafa2ec3b37dca47090e97e3eb6f1596e0fc2da4a62ec5d84f33b2d649dd9693f7771663c3169253c68b26cb3b8b78b72e144a98e966126396f27b1cc204207a641d9ab"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_skbedit={0xec, 0x1f, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x3, 0xa}}]}, {0xb7, 0x6, "b5e67d683e0c8ad4197adbea262ef23967a4a1bb200b9b8e9a126760680bbb416071a5e73af1725abd039c58227178bfaa07283c3690c8d5d9b315114b8aa0a2005e9a0319aacffb92de1db05e6f2f367dcc9161c47354df8b2b29f8e34120befc25aefc44af15d2b017d3e8c4a2472ff6789a0b68181517014e84417f5ee580029a502787405d7d6ac9e59ed0a87d970743971b35fe2efbc6df2e404742b7ead6f0fe793e8d6597b2bb651a5be2ea25bd4547"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_xt={0xa8, 0x14, 0x0, 0x0, {{0x7}, {0x7c, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0x6, 0x6, "bde8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0xff}}, @TCA_RATE={0x6, 0x5, {0x7a, 0xb}}]}, 0x135c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) writev(r1, &(0x7f0000000540)=[{0x0}, {&(0x7f00000000c0)}], 0x2) 5m12.008125304s ago: executing program 0 (id=4260): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9802"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8, '\a\x00'}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') r1 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, &(0x7f0000000100)='\\\x00', 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x3a, &(0x7f0000000940)={0x40, 0xe, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000004c0)={0x14, &(0x7f0000000300)={0x0, 0x30, 0x5c, {0x5c, 0x4, "8bbbff136d9fcba135ec9f43297f8d773cf55655342181d5e65cb4bd54da4694b83fe8c579520a0613cc39071dc9cc607136a209482d9ab63ada9f8335659e9ba2f0a1c7416eac1491e9ce24d572780a01d867ade1abf36b7c65"}}, &(0x7f0000000480)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000007c0)={0x1c, &(0x7f0000000640)={0x0, 0x15, 0xeb, "66479af126909e230e7a3ca4825af19990ddbf99d9fa263080efb5442ff26654306705964ec8a58c48c458e6f1843dc548e914d71888ab674dd10634ab938dcfbd719aefa3c66a63980330d39b8c1506770e6a5fd03fe4db3c48fe695b94393621d24bf0cfd6b053f452b6dd71eb465a2440b06ce6350c48cdb7ef621b8233eee25417a2345b0664f37bf01f1918b847190c747f2422fa23b6090eee73b56701109e81fae138ed96e77a78dc735f894ceb3267c7b9bf76ced9809067529539d0b0ca56b4af1c96bd376e5f466f182ddc3b629885b69c51ad465238cac430e5c884f683e86272bc0dce9404"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x2}}) dup3(r3, r2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) writev(r5, &(0x7f00000005c0)=[{&(0x7f0000000080)="f1", 0x1}], 0x1) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) 5m8.908036247s ago: executing program 0 (id=4277): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120014000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000080)={0x15}) 5m2.50124049s ago: executing program 0 (id=4303): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000f80), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000fc0)={0x16, 0x40, 0xfa00, {{0xa, 0x4e23, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa00}, {0xa, 0x4e21, 0x5fd2, @loopback, 0x4}, 0xffffffffffffffff, 0x6}}, 0x48) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = signalfd4(r4, &(0x7f0000000300), 0x8, 0x80800) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a40)={{0x1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000a00)='%+9llu \x00'}, 0x20) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000a80)={r6, r7}, 0xc) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000007c0)={'erspan0\x00', &(0x7f0000000700)={'syztnl0\x00', r9, 0x20, 0x7800, 0x6000, 0x3370eadc, {{0x19, 0x4, 0x1, 0x1, 0x64, 0x67, 0x0, 0x81, 0x29, 0x0, @local, @remote, {[@cipso={0x86, 0x12, 0x3, [{0x0, 0xc, "d7b821ef5693619bb289"}]}, @timestamp_prespec={0x44, 0x1c, 0x9e, 0x3, 0x2, [{@multicast2, 0x9a0}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@local, 0x5d}]}, @rr={0x7, 0x13, 0x71, [@private=0xa010101, @empty, @empty, @local]}, @timestamp={0x44, 0xc, 0x17, 0x0, 0x8, [0xfff, 0x7]}, @end]}}}}}) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r14 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_BULK(r14, 0xc0185502, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r13, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000600000000000c00"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002ec0)=@newchain={0xbcc, 0x64, 0x400, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x4, 0xffff}, {0x10, 0x6}, {0xffff}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x8}}, @TCA_CHAIN={0x8, 0xb, 0x7ff}, @filter_kind_options=@f_u32={{0x8}, {0x4c, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x87}, @TCA_U32_LINK={0x8, 0x3, 0x2d8}, @TCA_U32_HASH={0x8, 0x2, 0x9}, @TCA_U32_MARK={0x10, 0xa, {0xe, 0xfffeffff}}, @TCA_U32_HASH={0x8, 0x2, 0xe3}, @TCA_U32_DIVISOR={0x8, 0x4, 0x3b}, @TCA_U32_MARK={0x10, 0xa, {0x8, 0x2a}}]}}, @filter_kind_options=@f_cgroup={{0xb}, {0xb38, 0x2, [@TCA_CGROUP_EMATCHES={0x324, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x104, 0x2, 0x0, 0x1, [@TCF_EM_META={0x30, 0x3, 0x0, 0x0, {{0x6, 0x4, 0x2}, [@TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="f41b89407a6722cedd"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xe4, 0x4, 0x2}, {0xe000, 0x7, 0x1}}}]}}, @TCF_EM_META={0xd0, 0x3, 0x0, 0x0, {{0x0, 0x4, 0x1000}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x8}, {0xfff8, 0x1, 0x1}}}, @TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="17e498c15e3af2de5083", @TCF_META_TYPE_VAR="ac4105f8", @TCF_META_TYPE_VAR="ba75", @TCF_META_TYPE_VAR="ae"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x3, 0x1}, {0x3, 0x8, 0x2}}}, @TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_VAR="884853", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="04be4fb772", @TCF_META_TYPE_VAR="62f39336fd"]}, @TCA_EM_META_LVALUE={0x14, 0x2, [@TCF_META_TYPE_VAR="a2b4e31b9ccf5b66", @TCF_META_TYPE_VAR="8fe33af3b0bb6ce1"]}, @TCA_EM_META_LVALUE={0x15, 0x2, [@TCF_META_TYPE_VAR="d8", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="f2b14dc7"]}, @TCA_EM_META_RVALUE={0x1d, 0x3, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="40f51013d842469af9", @TCF_META_TYPE_VAR="33c933d9", @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_LVALUE={0x15, 0x2, [@TCF_META_TYPE_VAR="c49995", @TCF_META_TYPE_VAR="a49d97a74710", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x3, 0x3}, {0xfff, 0x9, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7fff, 0xc7, 0x1}, {0x9, 0x5, 0x1}}}]}}]}, @TCA_EMATCH_TREE_LIST={0x78, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x40, 0x8, 0x8}, {0x2, 0x6, 0x5}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xd, 0x1, 0x200}, {0x12a2, 0x7, 0xa, 0x2, 0x6, 0x1, 0x1}}}, @TCF_EM_NBYTE={0x10, 0x3, 0x0, 0x0, {{0x7, 0x2, 0x2}, {0x7ff, 0x0, 0x1}}}, @TCF_EM_CONTAINER={0x3c, 0x1, 0x0, 0x0, {{0x7, 0x0, 0x1ff}, "a84b671fe6c1bcac9fa69485b1c9546c9344b24cda292eccc99c30e4d6b273cfc1f1e8cad66c786dfee4f6bcb1bc"}}]}, @TCA_EMATCH_TREE_LIST={0x80, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x5, 0x2, 0xf}, {0x7, 0x4, 0x2, "99260391"}}}, @TCF_EM_CONTAINER={0x38, 0x2, 0x0, 0x0, {{0xaed, 0x0, 0x1}, "e32429c89d23adc30056dd3672a6f7d10d47e38615002473cf340c1a3d71df24748f0d0ca0f026208401"}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x101, 0x1, 0x1000}, {0x7, 0x9, 0x6, 0x1, 0x1, 0x0, 0x2}}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x81, 0x2, 0x3ff}, {0x40, 0x6, 0x1, "10df913d3f37"}}}]}, @TCA_EMATCH_TREE_LIST={0x124, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x80, 0x1, 0x0, 0x0, {{0xbc5, 0x0, 0x8}, "fbc6a7d96844d58b4c450c1abe7dfc6663bded1a48ab081566e4b1e5e39122b498f975564f9543941e23378bc96b24f80b082707551929a470d7fe35a37c852affdedfca058c34de99636134efddbf28c0903296ac32bbf4f35d53bb466519285d5ed0b2747a7cd66f423f07d37b97fa7d15"}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x2100, 0x8, 0xf}, {0x4, 0x1, 0x1}}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x4, 0x2, 0x8}, {0x0, 0x4, 0x0, "17e5b3b9"}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x2, 0x2, 0x8c}, {0xd, 0x7, 0x0, "10b69e2c45e7ab"}}}, @TCF_EM_META={0x38, 0x2, 0x0, 0x0, {{0x5, 0x4, 0x3}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x8, 0x1}, {0x101}}}, @TCA_EM_META_LVALUE={0x1f, 0x2, [@TCF_META_TYPE_VAR="a7e88f30ada6", @TCF_META_TYPE_VAR="ec02e41b9c", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x3]}]}}, @TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x4, 0x9, 0x7}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x5}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}, @TCA_CGROUP_ACT={0x1f0, 0x1, [@m_simple={0xc4, 0x10, 0x0, 0x0, {{0xb}, {0x4}, {0x97, 0x6, "c30740f6641e4497a26c9e103f8a6895e3f57430fb9737ff5813cf14e03cbca1ecdd2acac9b146d073a544a794330ed1247c5f8c74c1c62c14b8eaea61ae6ae5878023825ef47a3e0e08f648820ba2d746b122b48d89280732c5f1dddb1aad74316293d5fe6e92be7eb50fcdf0275fa5a828ace530a95d809d2520cc0b18244e1342c34e65185f9e853708bc60701cd518127a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_csum={0x128, 0x11, 0x0, 0x0, {{0x9}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x81, 0x400, 0x0, 0x7, 0x2}, 0x60}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x4419, 0x6, 0x14900b}, 0x6a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x9, 0x3, 0x2, 0x7ff}, 0x9}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x0, 0x0, 0x2}, 0x32}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x80000000, 0x20000000, 0x1, 0x6}, 0x38}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x1, 0x1, 0x6}, 0x5e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x8, 0x0, 0x7, 0x4}, 0x2a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x10001, 0x6, 0x2, 0x5}, 0x68}}]}, {0x19, 0x6, "a532cb816ddb008e4b2c5c232e49818a85fee1b5e4"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_CGROUP_ACT={0x620, 0x1, [@m_ctinfo={0x160, 0x9, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffffff00}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xaef}, @TCA_CTINFO_ACT={0x18, 0x3, {0xfffffffc, 0x3, 0xffffffffffffffff, 0x8, 0x3}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x80000000, 0x7ff, 0x2, 0x80000001, 0xfb}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x6}]}, {0xe9, 0x6, "a9ee4d9e76963e8a24e935bee10551308f9473b5b547c321f343e8fcd975a45f9635c134dd3e0066f86bcf5c1e810572a325e0fb23d9f69b42674d61a05f14ef3a4d75154ea19a80552a086ad6ea2328b843756b3fe6a3ca9c626022557f5cb55bc4da2b5de92f4617633fa6048bda0ef340a697f45b08ebef49fa0f94b8b5f97d757c09a630ed5c9a636f44dae4c970934f62bf85eddf454fdc79e335056ffb695ff4f0309e2a4a08aa7cb991f609fa91256a86d70dffed6c1614f2310e79a33e05f175711106daba1b84170aa0f0c4e85e0aa07b5ce4a8b37a35c0c5656c07b031832a23"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mpls={0xdc, 0x7, 0x0, 0x0, {{0x9}, {0x88, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x72540bd18df53ce3}, @TCA_MPLS_TC={0x5, 0x6, 0x3}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xed9, 0x6, 0x8, 0x10, 0x3}, 0x2}}, @TCA_MPLS_TTL={0x5, 0x7, 0xf9}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_TTL={0x5, 0x7, 0x4}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x1, 0x4, 0x10000000, 0x1, 0x9}, 0x2}}, @TCA_MPLS_TC={0x5, 0x6, 0x6}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x7, 0xfffffffb, 0x10000000, 0x7, 0x3}, 0x2}}]}, {0x29, 0x6, "4f814d8997b6172d3ccfa6772afe8f27bd21b6ce7cfb2f987ebe5b1fd4b56dfae8df82afaf"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbmod={0x148, 0x0, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x8}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}]}, {0xdb, 0x6, "f91f37c69d0e545d0bf47970760cb401f6df4565cd5fc06ee7551fb8890463bba8086c98ca4cb3c7b85d49c50bda73186f3309ff8fc0203a559d27838ced5f9df8489b1fb284012e20b32643c314c4b259c3d1630b72e91d8921992b1bb23c24948438f6e925946118f35167b68b31e68e70848d2a1834ddf7308f44e8a0458965cb65071b7b1c3cb2c1f38e239026207c753d6b85067a16061cc56235b12915f43a65c605a2ca954b4ec68a94590ee89ab917fa7fac61f7287dd2f712cf7b8c32ea8d9ddbdbc9af1302a7cb79e2291164cca613bfbc4c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_bpf={0x40, 0x3, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r0}]}, {0xf, 0x6, "7485f05c0f495d733d6d84"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_mirred={0x154, 0x14, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7f, 0x8, 0xffffffffffffffff, 0x3, 0x76aa}, 0x3, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xe93e, 0xffff8001, 0x3, 0x81, 0x9}, 0x4, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x9, 0x8, 0x6ea, 0x5}, 0x1, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x8, 0x7, 0x7, 0x401}, 0x1, r13}}]}, {0xa8, 0x6, "e58de72e55a8a39af54b65badabc06c3827f4d5587ba1f6d9b6738534f37a0e42395376cfb14de558147bf5326c305bee7bc8dba1651cfdbfe1a263d46a36d23517cc2f4a55888a033b690783c629fafc339261828913f41ab0b5a73e26f8cd236af33a21bfbda17a170e963997c75bb718dedf0444b01f9f224b13d7e2b86e64ad23f45d853dda87f9eb79446149ca5480737fbe287335919acee9963f8a4b365352a04"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x7}}}}, @m_ctinfo={0x64, 0x15, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x4}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x7}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x4}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x5}]}, {0x16, 0x6, "11cac45123be0e19c9f7daf6a6af6c0e2545"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mpls={0xa0, 0x16, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x1}, @TCA_MPLS_TC={0x5, 0x6, 0x7}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x6, 0x1a7e, 0xffffffffffffffff, 0x45a, 0x4}, 0x3}}, @TCA_MPLS_TTL={0x5, 0x7, 0xfe}]}, {0x3e, 0x6, "7c2156978825057260a6bf285a236e205b4d1174ac84a995c6c6c9c083917e9fab12de8e82494fede4f7a0b6ac26f0e73185ebdd0b3d187a3ead"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xbcc}}, 0x40000) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r16 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r16, &(0x7f0000001000)={&(0x7f00000001c0)=@vsock, 0x80, &(0x7f0000000980)=[{&(0x7f0000000440)="0f693ff1d99c4abeda370a71517a61671026cd512f4725d032c9303cf758c1e655861a26a5c15dae9d502b5e69d82bfc8d9a86613ef7078a23c4ff15e17b3b259f2264f64030d914ecdbdda1cb1ba919b21e09d5d6383b89eebeca061aa36dbbdaf5b53b610031b5bcf64ccf92e31dd6eef59c0b62c30bc0cdf5cd099034e4dbefd162208828610706909ba05d5a2f157544461ead490662edfe9d358e981f79de2e345080a3949faed2", 0xaa}, {&(0x7f0000000600)="f09a051e25ff57f035b8c4ddb04439e94a4bcab45a58c889bfe120bebddc0e16de00bed7d1e9627a91329f66029925027ab4f9a6d52fcdb87d827521138ac2bf717f993e5e9e2c7b27b315ef25253fe418790ad07f372427a74fb1bceeaf90b313169b83e45fc4d3104ea72850fb48c7f8507e835e5441f522a8d02bc9022c1ceda271eaf15a091bb3b05c37fa7b94a30846d3f0004dedf2aa5137a4a886962c5bbcbaf8c5a971", 0xa7}, {0xfffffffffffffffe}, {&(0x7f00000006c0)="3c6dc48d79e8c3cf5b6b88e629429fb68b07054271e5e178f4", 0x19}, {&(0x7f0000000800)="568b206a885966e9dd176b63184074d611e113b4c837020470430d0e4b59abe6887599123a2783d073fa15aceb1a5933054a27f27ce23809bf46868b20f4553f8412b212652603dfb6e68b3feacd3bf02c09bee20baafb0776a1cc52b5b2dad4715012c7101e9dd77eb088c82eb45c71d343f29dc80b891fd1cdf54769520902a87f6d8e068ec534d9bb1ab8a75641d328efc70823507673f12b011fe6257a1e7a00fc93ca30c8ae9fb29f3c87ced0654880dc15506cbc7c1d5a9f98419de33d4691d2bfa49fff7df381", 0xca}, {&(0x7f0000000900)="0eef5cae0e4293f15e93ffc417d8e720d6bd850d1cc350ec6d4c9a0305cb2437b7820e03c127d624aebe3eefe1f9e99dad9bd00cf97568e6c7fe5d03573a67931aa9eb2804287095e6c33f15daa505e9797f6bdd9b04d8b4dd197e3f95e230734299dbc09d6275efdcf29e798cac34b5c1f1926e8f39e5bc83fd", 0x7a}], 0x6, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], 0x5e8}, 0x4048895) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r15, 0xa}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000500)="80e9df932ae248464c7b544da8e5a26fef09871adb880482bbfb403008b1de0d4871d180d83edda16aea62220cbe3585c7206e764da9f977c7e6ff0b96cc79e178bb89411cc61c9948fd8d224ae416a3bea9ff603376a2283a11510410f6027cdd7680656fb54c1096a7b84aacca2cd673af7b5e3d12ca30cc3a79f7cb61dbfdec03285ee8d4162b8981e46d60f65f448b2a51a91b32c247effa672d61144436479820cebdfbf9caf352ad48c0673ab174b56c3f2eaa136394f8a38238bad15efe9853f5c671f3ea9f3f", 0xca}], 0x1}, 0x4) 5m2.057094239s ago: executing program 32 (id=4303): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000f80), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000fc0)={0x16, 0x40, 0xfa00, {{0xa, 0x4e23, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa00}, {0xa, 0x4e21, 0x5fd2, @loopback, 0x4}, 0xffffffffffffffff, 0x6}}, 0x48) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = signalfd4(r4, &(0x7f0000000300), 0x8, 0x80800) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a40)={{0x1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000a00)='%+9llu \x00'}, 0x20) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000a80)={r6, r7}, 0xc) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000007c0)={'erspan0\x00', &(0x7f0000000700)={'syztnl0\x00', r9, 0x20, 0x7800, 0x6000, 0x3370eadc, {{0x19, 0x4, 0x1, 0x1, 0x64, 0x67, 0x0, 0x81, 0x29, 0x0, @local, @remote, {[@cipso={0x86, 0x12, 0x3, [{0x0, 0xc, "d7b821ef5693619bb289"}]}, @timestamp_prespec={0x44, 0x1c, 0x9e, 0x3, 0x2, [{@multicast2, 0x9a0}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@local, 0x5d}]}, @rr={0x7, 0x13, 0x71, [@private=0xa010101, @empty, @empty, @local]}, @timestamp={0x44, 0xc, 0x17, 0x0, 0x8, [0xfff, 0x7]}, @end]}}}}}) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r14 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_BULK(r14, 0xc0185502, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r13, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000600000000000c00"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002ec0)=@newchain={0xbcc, 0x64, 0x400, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x4, 0xffff}, {0x10, 0x6}, {0xffff}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x8}}, @TCA_CHAIN={0x8, 0xb, 0x7ff}, @filter_kind_options=@f_u32={{0x8}, {0x4c, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x87}, @TCA_U32_LINK={0x8, 0x3, 0x2d8}, @TCA_U32_HASH={0x8, 0x2, 0x9}, @TCA_U32_MARK={0x10, 0xa, {0xe, 0xfffeffff}}, @TCA_U32_HASH={0x8, 0x2, 0xe3}, @TCA_U32_DIVISOR={0x8, 0x4, 0x3b}, @TCA_U32_MARK={0x10, 0xa, {0x8, 0x2a}}]}}, @filter_kind_options=@f_cgroup={{0xb}, {0xb38, 0x2, [@TCA_CGROUP_EMATCHES={0x324, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x104, 0x2, 0x0, 0x1, [@TCF_EM_META={0x30, 0x3, 0x0, 0x0, {{0x6, 0x4, 0x2}, [@TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="f41b89407a6722cedd"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xe4, 0x4, 0x2}, {0xe000, 0x7, 0x1}}}]}}, @TCF_EM_META={0xd0, 0x3, 0x0, 0x0, {{0x0, 0x4, 0x1000}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x8}, {0xfff8, 0x1, 0x1}}}, @TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="17e498c15e3af2de5083", @TCF_META_TYPE_VAR="ac4105f8", @TCF_META_TYPE_VAR="ba75", @TCF_META_TYPE_VAR="ae"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x3, 0x1}, {0x3, 0x8, 0x2}}}, @TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_VAR="884853", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="04be4fb772", @TCF_META_TYPE_VAR="62f39336fd"]}, @TCA_EM_META_LVALUE={0x14, 0x2, [@TCF_META_TYPE_VAR="a2b4e31b9ccf5b66", @TCF_META_TYPE_VAR="8fe33af3b0bb6ce1"]}, @TCA_EM_META_LVALUE={0x15, 0x2, [@TCF_META_TYPE_VAR="d8", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="f2b14dc7"]}, @TCA_EM_META_RVALUE={0x1d, 0x3, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="40f51013d842469af9", @TCF_META_TYPE_VAR="33c933d9", @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_LVALUE={0x15, 0x2, [@TCF_META_TYPE_VAR="c49995", @TCF_META_TYPE_VAR="a49d97a74710", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x3, 0x3}, {0xfff, 0x9, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7fff, 0xc7, 0x1}, {0x9, 0x5, 0x1}}}]}}]}, @TCA_EMATCH_TREE_LIST={0x78, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x40, 0x8, 0x8}, {0x2, 0x6, 0x5}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xd, 0x1, 0x200}, {0x12a2, 0x7, 0xa, 0x2, 0x6, 0x1, 0x1}}}, @TCF_EM_NBYTE={0x10, 0x3, 0x0, 0x0, {{0x7, 0x2, 0x2}, {0x7ff, 0x0, 0x1}}}, @TCF_EM_CONTAINER={0x3c, 0x1, 0x0, 0x0, {{0x7, 0x0, 0x1ff}, "a84b671fe6c1bcac9fa69485b1c9546c9344b24cda292eccc99c30e4d6b273cfc1f1e8cad66c786dfee4f6bcb1bc"}}]}, @TCA_EMATCH_TREE_LIST={0x80, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x5, 0x2, 0xf}, {0x7, 0x4, 0x2, "99260391"}}}, @TCF_EM_CONTAINER={0x38, 0x2, 0x0, 0x0, {{0xaed, 0x0, 0x1}, "e32429c89d23adc30056dd3672a6f7d10d47e38615002473cf340c1a3d71df24748f0d0ca0f026208401"}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x101, 0x1, 0x1000}, {0x7, 0x9, 0x6, 0x1, 0x1, 0x0, 0x2}}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x81, 0x2, 0x3ff}, {0x40, 0x6, 0x1, "10df913d3f37"}}}]}, @TCA_EMATCH_TREE_LIST={0x124, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x80, 0x1, 0x0, 0x0, {{0xbc5, 0x0, 0x8}, "fbc6a7d96844d58b4c450c1abe7dfc6663bded1a48ab081566e4b1e5e39122b498f975564f9543941e23378bc96b24f80b082707551929a470d7fe35a37c852affdedfca058c34de99636134efddbf28c0903296ac32bbf4f35d53bb466519285d5ed0b2747a7cd66f423f07d37b97fa7d15"}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x2100, 0x8, 0xf}, {0x4, 0x1, 0x1}}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x4, 0x2, 0x8}, {0x0, 0x4, 0x0, "17e5b3b9"}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x2, 0x2, 0x8c}, {0xd, 0x7, 0x0, "10b69e2c45e7ab"}}}, @TCF_EM_META={0x38, 0x2, 0x0, 0x0, {{0x5, 0x4, 0x3}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x8, 0x1}, {0x101}}}, @TCA_EM_META_LVALUE={0x1f, 0x2, [@TCF_META_TYPE_VAR="a7e88f30ada6", @TCF_META_TYPE_VAR="ec02e41b9c", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x3]}]}}, @TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x4, 0x9, 0x7}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x5}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}, @TCA_CGROUP_ACT={0x1f0, 0x1, [@m_simple={0xc4, 0x10, 0x0, 0x0, {{0xb}, {0x4}, {0x97, 0x6, "c30740f6641e4497a26c9e103f8a6895e3f57430fb9737ff5813cf14e03cbca1ecdd2acac9b146d073a544a794330ed1247c5f8c74c1c62c14b8eaea61ae6ae5878023825ef47a3e0e08f648820ba2d746b122b48d89280732c5f1dddb1aad74316293d5fe6e92be7eb50fcdf0275fa5a828ace530a95d809d2520cc0b18244e1342c34e65185f9e853708bc60701cd518127a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_csum={0x128, 0x11, 0x0, 0x0, {{0x9}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x81, 0x400, 0x0, 0x7, 0x2}, 0x60}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x4419, 0x6, 0x14900b}, 0x6a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x9, 0x3, 0x2, 0x7ff}, 0x9}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x0, 0x0, 0x2}, 0x32}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x80000000, 0x20000000, 0x1, 0x6}, 0x38}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x1, 0x1, 0x6}, 0x5e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x8, 0x0, 0x7, 0x4}, 0x2a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x10001, 0x6, 0x2, 0x5}, 0x68}}]}, {0x19, 0x6, "a532cb816ddb008e4b2c5c232e49818a85fee1b5e4"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_CGROUP_ACT={0x620, 0x1, [@m_ctinfo={0x160, 0x9, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffffff00}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xaef}, @TCA_CTINFO_ACT={0x18, 0x3, {0xfffffffc, 0x3, 0xffffffffffffffff, 0x8, 0x3}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x80000000, 0x7ff, 0x2, 0x80000001, 0xfb}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x6}]}, {0xe9, 0x6, "a9ee4d9e76963e8a24e935bee10551308f9473b5b547c321f343e8fcd975a45f9635c134dd3e0066f86bcf5c1e810572a325e0fb23d9f69b42674d61a05f14ef3a4d75154ea19a80552a086ad6ea2328b843756b3fe6a3ca9c626022557f5cb55bc4da2b5de92f4617633fa6048bda0ef340a697f45b08ebef49fa0f94b8b5f97d757c09a630ed5c9a636f44dae4c970934f62bf85eddf454fdc79e335056ffb695ff4f0309e2a4a08aa7cb991f609fa91256a86d70dffed6c1614f2310e79a33e05f175711106daba1b84170aa0f0c4e85e0aa07b5ce4a8b37a35c0c5656c07b031832a23"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mpls={0xdc, 0x7, 0x0, 0x0, {{0x9}, {0x88, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x72540bd18df53ce3}, @TCA_MPLS_TC={0x5, 0x6, 0x3}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xed9, 0x6, 0x8, 0x10, 0x3}, 0x2}}, @TCA_MPLS_TTL={0x5, 0x7, 0xf9}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_TTL={0x5, 0x7, 0x4}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x1, 0x4, 0x10000000, 0x1, 0x9}, 0x2}}, @TCA_MPLS_TC={0x5, 0x6, 0x6}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x7, 0xfffffffb, 0x10000000, 0x7, 0x3}, 0x2}}]}, {0x29, 0x6, "4f814d8997b6172d3ccfa6772afe8f27bd21b6ce7cfb2f987ebe5b1fd4b56dfae8df82afaf"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbmod={0x148, 0x0, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x8}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}]}, {0xdb, 0x6, "f91f37c69d0e545d0bf47970760cb401f6df4565cd5fc06ee7551fb8890463bba8086c98ca4cb3c7b85d49c50bda73186f3309ff8fc0203a559d27838ced5f9df8489b1fb284012e20b32643c314c4b259c3d1630b72e91d8921992b1bb23c24948438f6e925946118f35167b68b31e68e70848d2a1834ddf7308f44e8a0458965cb65071b7b1c3cb2c1f38e239026207c753d6b85067a16061cc56235b12915f43a65c605a2ca954b4ec68a94590ee89ab917fa7fac61f7287dd2f712cf7b8c32ea8d9ddbdbc9af1302a7cb79e2291164cca613bfbc4c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_bpf={0x40, 0x3, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r0}]}, {0xf, 0x6, "7485f05c0f495d733d6d84"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_mirred={0x154, 0x14, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7f, 0x8, 0xffffffffffffffff, 0x3, 0x76aa}, 0x3, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xe93e, 0xffff8001, 0x3, 0x81, 0x9}, 0x4, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x9, 0x8, 0x6ea, 0x5}, 0x1, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x8, 0x7, 0x7, 0x401}, 0x1, r13}}]}, {0xa8, 0x6, "e58de72e55a8a39af54b65badabc06c3827f4d5587ba1f6d9b6738534f37a0e42395376cfb14de558147bf5326c305bee7bc8dba1651cfdbfe1a263d46a36d23517cc2f4a55888a033b690783c629fafc339261828913f41ab0b5a73e26f8cd236af33a21bfbda17a170e963997c75bb718dedf0444b01f9f224b13d7e2b86e64ad23f45d853dda87f9eb79446149ca5480737fbe287335919acee9963f8a4b365352a04"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x7}}}}, @m_ctinfo={0x64, 0x15, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x4}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x7}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x4}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x5}]}, {0x16, 0x6, "11cac45123be0e19c9f7daf6a6af6c0e2545"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mpls={0xa0, 0x16, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x1}, @TCA_MPLS_TC={0x5, 0x6, 0x7}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x6, 0x1a7e, 0xffffffffffffffff, 0x45a, 0x4}, 0x3}}, @TCA_MPLS_TTL={0x5, 0x7, 0xfe}]}, {0x3e, 0x6, "7c2156978825057260a6bf285a236e205b4d1174ac84a995c6c6c9c083917e9fab12de8e82494fede4f7a0b6ac26f0e73185ebdd0b3d187a3ead"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xbcc}}, 0x40000) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r16 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r16, &(0x7f0000001000)={&(0x7f00000001c0)=@vsock, 0x80, &(0x7f0000000980)=[{&(0x7f0000000440)="0f693ff1d99c4abeda370a71517a61671026cd512f4725d032c9303cf758c1e655861a26a5c15dae9d502b5e69d82bfc8d9a86613ef7078a23c4ff15e17b3b259f2264f64030d914ecdbdda1cb1ba919b21e09d5d6383b89eebeca061aa36dbbdaf5b53b610031b5bcf64ccf92e31dd6eef59c0b62c30bc0cdf5cd099034e4dbefd162208828610706909ba05d5a2f157544461ead490662edfe9d358e981f79de2e345080a3949faed2", 0xaa}, {&(0x7f0000000600)="f09a051e25ff57f035b8c4ddb04439e94a4bcab45a58c889bfe120bebddc0e16de00bed7d1e9627a91329f66029925027ab4f9a6d52fcdb87d827521138ac2bf717f993e5e9e2c7b27b315ef25253fe418790ad07f372427a74fb1bceeaf90b313169b83e45fc4d3104ea72850fb48c7f8507e835e5441f522a8d02bc9022c1ceda271eaf15a091bb3b05c37fa7b94a30846d3f0004dedf2aa5137a4a886962c5bbcbaf8c5a971", 0xa7}, {0xfffffffffffffffe}, {&(0x7f00000006c0)="3c6dc48d79e8c3cf5b6b88e629429fb68b07054271e5e178f4", 0x19}, {&(0x7f0000000800)="568b206a885966e9dd176b63184074d611e113b4c837020470430d0e4b59abe6887599123a2783d073fa15aceb1a5933054a27f27ce23809bf46868b20f4553f8412b212652603dfb6e68b3feacd3bf02c09bee20baafb0776a1cc52b5b2dad4715012c7101e9dd77eb088c82eb45c71d343f29dc80b891fd1cdf54769520902a87f6d8e068ec534d9bb1ab8a75641d328efc70823507673f12b011fe6257a1e7a00fc93ca30c8ae9fb29f3c87ced0654880dc15506cbc7c1d5a9f98419de33d4691d2bfa49fff7df381", 0xca}, {&(0x7f0000000900)="0eef5cae0e4293f15e93ffc417d8e720d6bd850d1cc350ec6d4c9a0305cb2437b7820e03c127d624aebe3eefe1f9e99dad9bd00cf97568e6c7fe5d03573a67931aa9eb2804287095e6c33f15daa505e9797f6bdd9b04d8b4dd197e3f95e230734299dbc09d6275efdcf29e798cac34b5c1f1926e8f39e5bc83fd", 0x7a}], 0x6, &(0x7f0000001300)=ANY=[@ANYBLOB="f800000000000000000000007d8d0000fd8dd580dcf62ffefcecd7b4af153b30eb51909db5d53b02367956a362b17cf8069426cc0e4d62a6773530f13bfd9a213f4aac247bb9d3ac96482e3f703036b5cedfd93fb7ff46778cedcd774c5d3ac1bebbe05c77aeae39ff9abeba6fd846a7af5e8a7025e9486198e7e6dfae756f3631160174c80e5560bfbcb3e64a675f71fd8cbf03dea78a1710c3fd67b83043ab79cee8581e44fe64d5bfd9b1ff7d2160b09e88af83fc8a935caaea77d16c75b78f6e64573edea3bd78dc253f6b13e4ebff74422cc29c365c9c853c23eb2a89cb85e9cba553d66c29bd153fad5e4b09753afa8ea8d9e40000500000000000000019010000ffff00005c079f3da81ad50e46c4ecc2c56fc158f415806a26abe191a45702c51e96fe68f0edc151cd41e010a19fecb21aab73f960dcf660bcc478cf8b91cae50000000078000000000000000600000004000000f19e27add473075968c5d5cc18d0f957bf495a94657310ed9b5a1fc40cf2ef73814acfd9224864b0638a0e960e518320891261cfd80db0c5583726b824825a1ca58a84aeeb37954004275d6ac6d110fee02d4ab9750f9b382c1744675a207ab307d7cc21b82fa400b8000000000000001301000007000000e2c72cc1124fda107d5362d21439bf3ae48ee893112e07a5f4211ce94e4b9ccade6b91d76da4b4bd3ab2f9e46bdf182d817f2a4ee35ed0eb7c105c794680652c1babe50d7b051ec6605cf2fe5e4f36db4ca1f2594d8026f9b53b0db5144b762d8ceb1fc8c7fbc0872f2a564eb00902393ec5043371a46dda6741bcabdce5e8557d053159415629d31f903c7c62da447a6dbd83fa7c9e50f5d4d9faeff72b84e430d24f7e00000000e00000000000000001000000220300001e5a0d7a70dbfbbb3cf1eb6058fe7fee5d794f01f428c46c4a54b999e0b6c4805405b6597f0434058728d251d67cbfac8559d48bb04bd9239a7ea7470e6cbbeaabc46a180557fc66a09707a0d44f197ef3f062f1b8d6667d2bd26313248bc17d286edb1f9cc000f9c6b5fab9fa186db053c419a912a3cfb34a82dca50132e6313ddc8e632da89364c5c909a86946d15ec52aa31dcbb6ee2f7b7531391f3264a93c0b95ab04b5a2c2eaf04fa848c60847c25881c8b1d865d858f886923a8ae24070d71f3d092783236600000000000000a00000000000000009010000070000001c3c4ac0b0d36a7ac01c9346a1867a6b54d0fe03b71a2c64dc1978272ed7290a37d8a6f0327cf4d0fd3ef071a6f54110d7c99fc2814f1907fc36e5f47fe7b559756b5e9c4c887ed1fc01f7ea310809ed4861d11f24280ecc89257280a90144f7d39991ec9c86ef1a7179835032b3dfc29a617c64aa1df13df0a1a2d12efa985fc537ca64ee55141851700000000000001800000000000000ff0000000d0000004b0000000000000068000000000000001301000049000000e58254e25a853ea903a54593c840067c69a0c4496309f0bba7f6cd7608a6a89402b3df78d0e1748aff0002fa021d0c9a338793f4db038bc4142bd5fd1ee5861433f524bd04886882aa96305569b0cf56cd86f4414700000008010000000000000301000000000000c662351c4af2d2ec1aaf6d8e1674e8ed27c6d10d4db0fb2549aef28694f67173965f5faa188bb313f4c5c92130768b5dd25b2b4031091b746b7c5cc6be084b9750cfecd79eca11fe7023b9831b26fde246c5dd09335bb6e45774f063624a437235f0af60a571a6cea0df3e2dfbc096238f66c69775e645f55db4228132b44cdc77a5d2d08783cbe35b6cf0890713d0a03385a1df41747050ef9ccfdb32a54715c3ba2f0cbbe53c2b3973b8d4e4464518795b6cbb27343101fd5589ff1a1f798cdfa0031f6b907175aba552ba388f0efea4faa34be619a5308d09f2f064ebbaf372185f59f607ff8e4d413d9ab11cbba5860d0000000000006800993d14c1e2ba67732400000000000000000000412b00009e0a1709d0e748041535a62a60ab726d852b27ff26f25b19bd78749831343f9fdc5742473e86d02e89f3eafd1c3ffa2615584a50f9c1d37a1b3c8721a3f82763c2aab424c7c443a556abed34e6fb12331a74350000000000"], 0x5e8}, 0x4048895) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r15, 0xa}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000500)="80e9df932ae248464c7b544da8e5a26fef09871adb880482bbfb403008b1de0d4871d180d83edda16aea62220cbe3585c7206e764da9f977c7e6ff0b96cc79e178bb89411cc61c9948fd8d224ae416a3bea9ff603376a2283a11510410f6027cdd7680656fb54c1096a7b84aacca2cd673af7b5e3d12ca30cc3a79f7cb61dbfdec03285ee8d4162b8981e46d60f65f448b2a51a91b32c247effa672d61144436479820cebdfbf9caf352ad48c0673ab174b56c3f2eaa136394f8a38238bad15efe9853f5c671f3ea9f3f", 0xca}], 0x1}, 0x4) 21.225427661s ago: executing program 2 (id=5482): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_ublk_setup_io_uring(0xf60, &(0x7f00000003c0)={0x0, 0xd2d0, 0x33009, 0x1, 0x22d}, 0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r2 = syz_usb_connect$cdc_ecm(0x3, 0xa6, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010102020000ff2505a1a4400001020301090294000e0102902d0904000f02020600990a240600002bfdb1dfc605240000020d240f010b000000080007000305240100020a24070b0400ff0707000c241b0100020005481000021524128a06a317a88b04956df3d63ead106f326274007c2938215e4f01a607c0ffcb7e392a1524120400a317a88b045e4f01a607c0ffcb7e392a06241a030029090581034000ff067f09058202ff030846ff090503020004ae02c0"], &(0x7f0000000340)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x110, 0x0, 0x7, 0x9, 0x20, 0x2}, 0x43, &(0x7f0000000280)={0x5, 0xf, 0x43, 0x4, [@ssp_cap={0x1c, 0x10, 0xa, 0x2, 0x4, 0x7ff, 0xf000, 0x1, [0xf0, 0xffff3f, 0xc00f, 0xffde]}, @ss_container_id={0x14, 0x10, 0x4, 0x10, "b07e71936aed5b2bd253a74ccba15eff"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x3, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x0, 0x9, 0x8}]}, 0x1, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x443}}]}) syz_usb_control_io$cdc_ecm(r2, &(0x7f00000006c0)={0x14, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000680)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000008c0)={0x1c, &(0x7f0000000780)=ANY=[@ANYBLOB="200ead000000b8770b0ea86bdedae40be3bc1918e2716004bdfb92eebc3f2d60d9565e1562000000006fd4ab801f5820d32c8b5bd398fcb17e90fc6707a74fac7374225c7b064867d26636274452ae054bd38c50ada344abe4e8a4c2150a942707cb4d1998a75c7c3f7d2fe5e0b6f4b28d0306cc98eb20c5baa7e4c2630802fa761087e11c5b5f552cee80cb1dbdadd014a6fc7151de77b9f80078e62bea488c8a0ca4b4e62bc24f00"/179], &(0x7f0000000840)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x2}}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x3, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000080)={r7, 0x1000}, &(0x7f0000000180)=0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="48000000100037040000000000007fff00000000", @ANYRES32=r8, @ANYBLOB="8304050032800200280012800a000100767863616e0000001800028014000100000000", @ANYRES32=r8], 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x40080) syz_usb_control_io$sierra_net(r0, &(0x7f0000000c80)={0x14, &(0x7f0000000b00)={0x0, 0x22, 0xa4, {0xa4, 0x22, "01a836797cfd652da7e01d8efa82f20161a964fc5edc71cd795d17793295f7e370b475380c130146b8c01f93a3e3dda4ea77ae90ef934dab05e7f837569a43233b157df2508d1e7e6dfe2156cb54856aac080fe6b60d699b558b871bc200520dbce170d54f7b2f8e3cbfd4a6fc2d75b0b90335c35437fa39d2f6e33265244b27b387c81f90af7b977ec0e7586c01fbb5d1396520d2f7431ef81becb780f17030bca5"}}, &(0x7f0000000bc0)={0x0, 0x3, 0x90, @string={0x90, 0x3, "d577b3e50586d1087e33b755b1058e70fcd2ec933f08161e5d208fe3ebd2c26072431bde21081666b2b6de13024fa96639f9215b4d233d4b67cd35c167c161e9b78c31813f68825d00aac9994e3e68fbae585efd8b11519e50541e59229d746d700aa3fd5a9960ba0da5cd41229a41b80d1169442591f4f9038942c6bf5bb4085f4e91b5989003aa9edfe20553b0"}}}, &(0x7f0000001200)={0x1c, &(0x7f0000000cc0)={0x40, 0x18, 0x8a, "5dd9523ef4195eedfd59d37c9e9a27aec9d5f4402dcd48ad7a36869e7aff9b68cabf0a5abdf6075523cc2b7a500c75f0087ffccf9dd27639b36c2738611a4ed44b8f36258b973ecdf65ee68fad621d69d32875eeed5d945775d291bbb8fa15fb61033cb9e8c1986032635346ea225b2f6ded94e2cebf0f2dee16ab0346b0aa3df603b2de08d2bf43450f"}, &(0x7f0000000d80)={0xa1, 0x1, 0x400, "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"}, &(0x7f00000011c0)={0x21, 0x0, 0x2, "ce13"}}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3}) 14.605476955s ago: executing program 2 (id=5515): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[], 0xa8}}, 0x0) close(0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001040)={0x14, 0x1, 0x1, 0x3, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x8000) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000000000)={0xe, {"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", 0x1000}}, 0x1006) 14.32793388s ago: executing program 2 (id=5516): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) open(&(0x7f00000003c0)='./bus\x00', 0x6801, 0xed) r1 = openat(r0, &(0x7f0000000240)='./cgroup/pids.max\x00', 0x2, 0x100) prctl$PR_SET_KEEPCAPS(0x59616d61, 0xdaffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='file0\x00', 0x42, 0x1ff) write(r2, &(0x7f0000000080)='/sys/kernel/config', 0x12) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='file0\x00', 0x0, 0x0) read(r3, &(0x7f0000000000), 0x12) symlink(&(0x7f0000000000), &(0x7f0000000300)='my_configfs\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='my_configfs\x00', 0x0, 0x0) r5 = syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd=r5, 0x5, 0x0, 0x0, 0x3e, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r5, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) getdents(r4, 0x0, 0xfebb) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r9 = syz_open_dev$video(&(0x7f00000000c0), 0x0, 0x80) ioctl$VIDIOC_S_SELECTION(r9, 0xc040565f, &(0x7f0000000140)={0x2, 0x1, 0x0, {0x9, 0x3, 0xc, 0xa}}) r10 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3f10, 0x1, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r10, 0x2219, 0x7721, 0x16, 0x0, 0x0) r11 = inotify_init() fsopen(&(0x7f00000001c0)='tmpfs\x00', 0x0) close_range(r11, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x24, &(0x7f0000000080)={0x3, 0x0, 0x5, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xa9525000) timer_create(0x7, &(0x7f0000000200)={0x0, 0x15, 0x2}, &(0x7f0000000300)) 12.325693322s ago: executing program 2 (id=5525): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x4048000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=@newtfilter={0x87c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0xd, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x5, 0x0, 0x2, 0x3ff, 0xd, 0xffffff81, 0xc0, 0x1, 0x2fa, 0x6, 0x4, 0x2, 0x8, 0x1ff, 0x1a7, 0xce, 0x6, 0x4, 0x207, 0x1, 0x7, 0x0, 0x8, 0x8001, 0x8001, 0x2, 0x7, 0x3, 0x8, 0x1, 0x66, 0x10000, 0x0, 0x8, 0xa3, 0x0, 0x0, 0x1, 0x0, 0xd1c8, 0x88c9, 0x1000, 0x7, 0x800, 0x8007, 0xc76, 0xdd, 0x386, 0x101, 0x5, 0xfd, 0x7, 0x66b6, 0xd4, 0x9, 0x8, 0x933, 0x10000, 0x0, 0x7, 0x7, 0x3fd, 0x8, 0x7, 0x66c53844, 0xb7, 0x5, 0x9140, 0x7fffffff, 0x401, 0x7, 0x7, 0x8, 0x9, 0xfffffffe, 0x5, 0x63, 0x9, 0x4, 0xffffff6a, 0x4, 0x401, 0x2, 0x5, 0x7fd, 0x5, 0x10001, 0x7, 0x6, 0x3, 0x5, 0x81, 0x3b932d, 0x8000, 0x4, 0x44c0, 0x8001, 0x5, 0x8, 0xa2e, 0xd, 0x3c8b, 0x3, 0x8001, 0x2, 0x40, 0x0, 0x0, 0x2, 0x101, 0x3ff, 0x2, 0x6, 0x7f, 0x37d8, 0x8, 0xd, 0x8, 0x3, 0x4, 0x40, 0x1, 0x22af662d, 0x7, 0x5, 0x387, 0x400, 0x81, 0x0, 0xffff, 0xa5e, 0x7ff, 0x6, 0x4, 0xf1, 0xffff, 0xa849, 0x8, 0x0, 0x400, 0x1ff, 0x6c, 0x0, 0x7b, 0x400, 0x68a5, 0x8, 0x56, 0x3, 0x800, 0x7, 0x6, 0x2, 0x4, 0x1, 0x1, 0x7, 0x7, 0x4, 0xaee, 0x5, 0x8, 0xef19, 0x7, 0x5, 0x7f, 0x5, 0x7, 0x800, 0xfff, 0x6, 0x4, 0x800, 0x800, 0x4, 0xffffffff, 0x4338, 0xb, 0x7, 0xea, 0x40008, 0xffff33fd, 0x0, 0x8000, 0xa, 0x9, 0x0, 0x8, 0x30aa0000, 0x7, 0x6, 0x8, 0x60000000, 0x7f, 0x3, 0x5, 0x9, 0x5, 0xfffffffd, 0x4, 0x0, 0x9, 0xffffff91, 0x80000000, 0x1, 0x5, 0x51, 0x10, 0x7, 0x1, 0x9, 0xed, 0x1, 0xac39, 0xb, 0x6, 0x0, 0x2, 0x1, 0x0, 0x1, 0xc6, 0xfff, 0xffffffff, 0x8, 0x400, 0x2, 0x0, 0x1, 0x5, 0xb, 0x73073418, 0x2, 0x9, 0x3, 0x3, 0x40, 0x18000000, 0xa, 0x5, 0x9, 0x0, 0x2, 0xf1, 0x0, 0x3, 0x1, 0x8000, 0x1, 0x9, 0x7fffffff, 0x7, 0x5, 0x1, 0xffff2581]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0xfffffffe, 0x9, 0x2, 0x73b5, 0x80000000, 0x400, 0x8, 0x8000, 0x4, 0x8, 0x100, 0x217, 0x1000, 0x99, 0x6, 0x6, 0x7, 0x0, 0x7, 0x5, 0x1, 0x3, 0x4, 0xc22, 0xf14, 0x8092, 0x7, 0x10004, 0x80, 0xec, 0xeff, 0x7, 0x3, 0x2, 0x0, 0x3, 0x2, 0x4, 0x0, 0xd010, 0xffffff0b, 0x2, 0x1, 0x400, 0x0, 0x1, 0x3, 0x228, 0x29, 0x3, 0x7000000, 0x1, 0xffff, 0x9, 0xf, 0xd, 0x9, 0x9, 0x7, 0x7, 0x7fff, 0x5, 0xe7b, 0x4, 0x3, 0x7, 0x6, 0x4, 0x5, 0x4, 0x100, 0x0, 0x3, 0x9, 0x3, 0x80000002, 0x10, 0x2, 0x9, 0x9, 0x7ff, 0x401, 0x8, 0x8, 0x99c2, 0x4, 0x7, 0x61, 0xa40a, 0xc, 0x5, 0x7fff, 0x4000100, 0x76, 0x9, 0x1, 0xf, 0x50, 0x0, 0xffffffff, 0x3, 0x1, 0x767c, 0x6, 0x8000, 0x8, 0xd, 0x6, 0xffffffc0, 0x7, 0x101, 0x8, 0x3, 0x7066211e, 0x2, 0x6, 0x5, 0x3, 0x5, 0x8, 0xfff, 0x2a4, 0xd, 0x10001, 0xfffffffa, 0x6, 0x1, 0x3, 0x9, 0x8, 0x0, 0x40000040, 0x2, 0xffdff801, 0x6, 0x7, 0xcc0, 0xfffffff4, 0x8, 0x5, 0x9, 0x9, 0x1, 0x17, 0x1, 0x0, 0x400, 0x9, 0x5, 0x100, 0xffff8000, 0x2, 0x6, 0x10, 0x4, 0x80, 0xfff, 0x1, 0xfffffffb, 0x8, 0x4, 0x24, 0x3, 0x0, 0x3ff, 0x4, 0xdd5, 0x7fffffff, 0x10000000, 0x4fcf, 0x1, 0xe0000000, 0x2, 0x8, 0x6, 0x4, 0x3, 0x80, 0x20004, 0x8, 0x81, 0x0, 0x6, 0x5, 0x8, 0xffffff3a, 0xfffffffb, 0x8, 0x80000, 0x0, 0x9, 0x8, 0x44ca0699, 0x6, 0x4, 0x495, 0x52, 0x8, 0x3, 0x1, 0x5, 0x4, 0x5, 0x2, 0x6e, 0x5, 0x40, 0x7, 0x0, 0x1, 0xd, 0x0, 0x1, 0x3, 0x5, 0xe0ae, 0x10001, 0x7, 0x20004, 0xa4, 0x10, 0xd, 0x7f, 0x864, 0xfa, 0x0, 0x81, 0x0, 0x9, 0x1, 0x0, 0x3, 0x3, 0x6, 0xd, 0x1, 0x42, 0xaa, 0x4, 0x101, 0x8, 0x7, 0x4, 0x3, 0x40, 0xfff, 0xfffffff8, 0x30000, 0xf, 0x4, 0x2, 0x9, 0x8, 0x6, 0x90000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffd, 0x6, 0x1, 0x9, 0xef, {0x2, 0x1, 0x1, 0x7ff, 0x84cc, 0x5}, {0x2, 0x2, 0x4, 0x5, 0x1, 0x6}, 0x100, 0x2, 0x7}}]}]}}]}, 0x87c}}, 0x0) write$tun(r1, &(0x7f0000001600)=ANY=[], 0x46) 11.852747059s ago: executing program 2 (id=5528): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000680)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000700)=ANY=[@ANYBLOB=' \n\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) 10.08125676s ago: executing program 5 (id=5534): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r0, &(0x7f0000002240)={0x2020}, 0x2020) writev(r0, &(0x7f0000002140)=[{0x0}], 0x1) 9.355932965s ago: executing program 5 (id=5535): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0xcf2, 0x6250, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8, 0x6, 0x50, 0x0, [], [{{0x9, 0x5, 0x1, 0x2, 0x200}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) r1 = socket(0x1, 0x5, 0x0) close(r1) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000480)={[0x7]}, 0x8, 0x80000) r3 = epoll_create1(0x80000) r4 = userfaultfd(0x80001) r5 = epoll_create1(0x80000) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x4c}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000140)={0x90000011}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r1, &(0x7f0000000040)={0x80002017}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0xffffffff, 0x100000}) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0xcf2, 0x6250, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8, 0x6, 0x50, 0x0, [], [{{0x9, 0x5, 0x1, 0x2, 0x200}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) (async) socket(0x1, 0x5, 0x0) (async) close(r1) (async) signalfd4(0xffffffffffffffff, &(0x7f0000000480)={[0x7]}, 0x8, 0x80000) (async) epoll_create1(0x80000) (async) userfaultfd(0x80001) (async) epoll_create1(0x80000) (async) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x4c}) (async) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000140)={0x90000011}) (async) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r1, &(0x7f0000000040)={0x80002017}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0xffffffff, 0x100000}) (async) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async) 6.067827897s ago: executing program 5 (id=5546): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x3f, 0x0, &(0x7f0000000180)="e3ef7f670000ec6783b4241544940000009550f50ac311e0f0544b00aab05400f16b2882a631a8af3a439e1432fa00228f11b0f472aeeb58d909c57270d30b", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000000), 0xa, 0x40800) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) (fail_nth: 3) 5.940712992s ago: executing program 4 (id=5548): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) read$FUSE(r0, &(0x7f00000057c0)={0x2020}, 0x2020) syz_usb_connect(0x0, 0x62, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030505030605810924030601030405050724040501"], 0x0) 5.814337846s ago: executing program 5 (id=5549): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x3, 0x82040) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0xbffffe0000000001, 0xfa11, 0xfffeffff}, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x28, 0x0, &(0x7f0000001380)) ioctl$KVM_RUN(r1, 0xae80, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r3 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$apparmor_exec(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="65786563203a0008c499100949c23262e80dfac1d62de5d32dceea7045b533260ba0d34f2345c44997fd"], 0x2a) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) socket$inet(0x2, 0x2, 0x7) r4 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d1000905070000000000000905", @ANYRES32], 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000100)) syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x169101) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x5, 0xfffffffb, 0x0, 0x4}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f00000000c0)=""/122) 4.524344257s ago: executing program 3 (id=5556): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "97"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x9c}}, 0x0) 4.306013857s ago: executing program 3 (id=5557): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000000080)="e9e3ae0000000000000000000000ab000062af74aaa638b626013d3bcb27084f1d", 0x21}], 0x1, 0x0, 0x0, 0x20048044}], 0x1, 0x20040045) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000000)=""/3, 0x3}, {&(0x7f0000000180)=""/194, 0xc2}], 0x2}, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) unshare(0x8040480) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x1) fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x20000, 0x0) fchmod(r5, 0xe0) bind$rxrpc(r2, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0x8b2, @loopback, 0x2}}, 0x24) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x1) 4.070550617s ago: executing program 3 (id=5558): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01010000000000000000070000000900010073797a300000000054000000090a010400000000000000000700001008000a40000000030900020073797a31000000000900010073797a30000000000800054000000008080003400000000808000740000000280800064000000000480000000c0a01010000000000000000070040041c0003801800008008000340000000020c000280050001001b0000000900020073797a31000000000900010073797a300000000014000000100001000000006a9400000000000084"], 0xe4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 3.894792653s ago: executing program 3 (id=5559): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4400000010000b042bbd70000005000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d6163736563000214000280050003000c00000005000a"], 0x44}}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) get_mempolicy(0x0, 0x0, 0xffffffffffffe4d5, &(0x7f00005c6000/0x1000)=nil, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x0, 0x0}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x87, 0x7ffc0201}]}) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, 0x0, 0x0) ptrace(0x10, 0x0) ptrace$setregs(0xd, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000800000000000060cf0000186a00000000000000000000083d00009500000000000000a3699376ca0ecbc8330882fa238ab78611c567d2bbbe6b04a0884c2671efa3797887aff982afa52ae3f3ba592d88d724120ebbcf89"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYRES64=r2, @ANYRES64, @ANYRESOCT=r1, @ANYRES64=r2, @ANYRES32], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x800, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x3104, 0x1b400}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_LOCAL={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFLA_GTP_CREATE_SOCKETS={0x5}]}}}]}, 0x40}}, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1f, {[@global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, '\n\x00'}, @global=@item_4={0x3, 0x1, 0x0, '\a\x00'}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) r5 = syz_open_dev$hidraw(&(0x7f0000000000), 0x15e, 0x800) ioctl$HIDIOCGFEATURE(r5, 0xc0404807, &(0x7f0000000200)={0x1, "b4be8421a3f3090ceb57129c83bb1a1562ae2050097bc3a277628b8fb36a28da220fdf81608f602bc11cfdaec03d294cfbdd855de75763122def77a5c75d51a8"}) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000640)={0x34, &(0x7f0000000400)=ANY=[@ANYBLOB="200804"], 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_netprio_ifpriomap(r6, &(0x7f0000000080), 0x2, 0x0) sendfile(r7, r7, 0x0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) 2.752416098s ago: executing program 4 (id=5561): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1e9100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x4, 0xee}) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r3, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4024000) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_SET_FPU(r3, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0xd, 0x96, 0x0, 0x100, 0x10000, 0x1, '\x00', 0x1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, 0x0) unshare(0x400) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[], 0x0, 0x46, 0x0, 0x9, 0x4}, 0x28) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x61, 0x40200) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0xcc080) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x109) fsetxattr$security_capability(r6, &(0x7f0000000200), 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r6}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000340)={0x48, 0x12, r8, 0x0, 0xffffffffffffffff, 0x1}) socket$rds(0x15, 0x5, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) 2.328162745s ago: executing program 1 (id=5563): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800"], 0xa8}}, 0x0) close(0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001040)={0x14, 0x1, 0x1, 0x3, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x8000) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000000000)={0xe, {"a2e3ad21ed0d52f90b9b39094bf70e06d038e7ff7fc6e5539b324b298b089b0732376d090890e0878f0e1ac6e7049b334a959bfc9a240d2567f3988f7ef319520100ffe8d1780700523c921b1b9b31070d315d0936cd3b78130daa61f94b61404d64aec1b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c088215ec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6f44ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d208001349b41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2a15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee53259289d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c1980778efa5ea567b7b7430acc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a0700d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8440daaa69bf5c8f4350aeae9ca1207e76061b28f27da19acc7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211c7847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7beddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e781171e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b906ce2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf3f2aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11ee9afb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e75c40e42e07b34449e15e065cc7348663a52190202c7ae288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289d8523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c78e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e7c7b2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df06720ba2b26bbfcc807c8aabb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db38b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 2.264644598s ago: executing program 5 (id=5564): r0 = syz_open_dev$sndctrl(&(0x7f0000000580), 0x0, 0x80000) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xffb) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0xe00008da) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./bus\x00') ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1088, 0x4, 0x2, 0x40, 'syz0\x00', 0x200000}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) openat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x400000, 0x100, 0x2}, 0x18) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x6, 0x1000, 0x1, 0x1ba}, &(0x7f0000000880), &(0x7f0000000100)=0x0, &(0x7f0000000140)) r3 = getpid() openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) sigaltstack(&(0x7f0000000200)={0x0, 0x80000001}, 0x0) sigaltstack(0x0, &(0x7f0000000180)={0x0}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r4, r4, 0x0, 0x20000005) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) sendmmsg(r5, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f00000002c0)="143613d0273152d4b270d784e4b24ddb50a607917dcde0e686ffe2dd57eecac45d1c0ac375910a54b3e528064f9f7b32ccf09a58fb853f01fde40747682aae9fe62528aa079cb20dec920ed135a376c4d7101a28e00a4f0ac80a53e476c16191dfae8a4d677c356e032bae46e8f2", 0x6e}, {&(0x7f0000000600)="a14ec0ff09f46ac653fb50c2c6b0114802ef0f5fc68241caced721e5cb7d274d8efabfbcbaa6ff8453562feee9ed7ce954230df9e23ed381d4df7a3e82762ca061232db249f67356efb24a123022b3fd082e6ade024515180d3e05b503ad187600ba312e3c9a6038db78ec5505ae5280dd4647a26c962377a0f09e65818d587a6037b66ac433b38a864dfc593f46feaf642f753b3afaca61a3de3f8a15d02369cdd2c8d6e92a91f11e3e70732875ea0e73dd14247fddb96138684545424e2efc0bb96d448460eb70d398596e", 0xcc}, {&(0x7f00000007c0)="a83e1667578a94c8099b2308f1b3f5776f9e35504e45f3208326b731ef98fa9a9d438256fd5ed0549c9226720f2211f477657ce3286025be7740cf9a847d261f63f7b7f62a81cca5ecf99d9863ee4637e92c49005f8af6d0e9cbba7eb4a15292066520a620f77f92105f69870313d59ec23474e2c81d57ba50c5c273b11de24d6d32", 0x82}, {&(0x7f0000001100)="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", 0xfd}, {&(0x7f0000001200)="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", 0x1fa}, {&(0x7f0000000ac0)}, {&(0x7f0000000bc0)="1e87976e329a52c2a294ffb7ab5f1218f4f0daac7c18c5b7b2544c320a4512d41e2c33aed0f5f76b5fde7f7d24d305dac23782", 0x33}, {0x0}, {&(0x7f0000000d00)="1c89c8eb9910874af373d08315d8701219d86c8cc3078366b58011fc5068b120b17bfb6599b8ce823592f8bafb9142d27c68f28023256238a49d004a67d3e0ff01e834ce43", 0x45}], 0x9, &(0x7f0000000e40)=ANY=[@ANYBLOB="c80000000000000007010000050000001130b1ec589d963eba4fbcd1dad5c057da1798a53256850bee7f2b5bef2c6c369ef03bd6402666b5914991f710cf3baf4f93448c760088462b217d356a8bb17b80baee7a7553e6867afd97b17bbb4226a2015b77b7211d05b2f608d153ca886914d391e1f032c66d8d2d86aaccdb8573b1d08094f9a026a8774f40b654716772949b30f3cb7113fe72a5f10ab7310f0dee4319ffa694476834fa7ed11931dc6fb680de00017b2fee963f8c236379db925a55000000000000100100000000000019010000d9af000074db80101476852b20c2a60f1da54c189396192740cf46cb19d4159973d45ce09a1255d8c34276a390585351b7e758b0877a189257fc8a663f944a1e7e3f1219dd25a8f0afa778e82d51643ca7e3ab77d13e635fbd4d94029d98ce3af6aeda9b1a1299d394171c3541b1f6e012fdf7699ca5997bfbdc8f0a8da966db3848fb2579b93289471bde7aa38bc4600a3d1b8afb47ade4d4a4dba9dd9ddb3ab91b0c5cf3b5d28c6731de8127f2bca8b36ea37638c59c2ce824ff7224c12ea9e421d2fb9d7416d5dfbb0f4489f7203b3f443a2dba695e6597c452273521436ec23e1e520fc81c90526d696f6e13559ad3dd3706f491efb21d007350e3e7ff00000000008800000000000000290000000700000042d13f2ca74e7b2f7cbdd4e9836e040c449ed17a0f4d69b1550e930780bde42bdb5b6128ce7ebbee04964a272f04ddac96797971ba5f678c3a1597d347a80d530a0e59e3231640639ac9da057636303ba21b486b432ad44ec0bc18039445e7c673cea5feee00805ba82ad501b4cb6855c900000000000000"], 0x260}}], 0x1, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r3) sync() bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES8=r4, @ANYRES32=r3, @ANYBLOB="1000000000f6ffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r2], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 2.235138189s ago: executing program 1 (id=5565): r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000074c0000000c0a01020000000000000000010000000900020073797a3200000000200003801c0000800400018008000340000000010c00044000000000000000000900010073797a300000000038000000020a01"], 0x110}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000300)='\n\x00\x00\x00', 0x4) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="000228bd7000fedbdf255c00000008006b005a00000008006b000a00000008006b001c02000008006b00e001000008006b003c00000008006b000a00000042755e682caffe839559c8f2a5591ef8335e9a5121ce447e123a1f61cf1cfb12ab94efba045559a1ff85ce2f101e76844564e082938e1422f347996f69a7955edae1ec52a3ae8da0d890509f3984d2e592fcdeddb4a05a109c1a4e1dcf664ca8c2785a7368cd28f066b7bbb30d090b35bb933fbe1920df40"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 2.148001477s ago: executing program 1 (id=5566): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x81) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, 0x0, 0x4) close(r1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r3, 0x10001, 0x81, &(0x7f0000000040)="1400000009000000c49e151d63a9000000000100f6ff54280e2f01a1ecdb41aaa1ac574c29091185f7eaca2ff80956fb678f3a23019f7c0a7f", 0x39) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x40811, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf) unshare(0xa000200) r5 = semget$private(0x0, 0x4000, 0x0) semctl$SETALL(r5, 0x0, 0x11, &(0x7f0000000340)) getsockopt(r4, 0x200000000114, 0x2721, 0x0, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xffd03000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r6) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x38}}}}, 0x84) 2.119487646s ago: executing program 4 (id=5567): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r0, &(0x7f0000002240)={0x2020}, 0x2020) writev(r0, &(0x7f0000002140)=[{&(0x7f0000000080)}], 0x1) 1.936173831s ago: executing program 3 (id=5568): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000001000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000940)=ANY=[@ANYBLOB="14000002", @ANYRES16=r2, @ANYBLOB="000125bd7000fbdbdf2512000000"], 0x14}}, 0x40000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000a, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) read$eventfd(r5, &(0x7f0000000000), 0x8) r7 = socket$netlink(0x10, 0x3, 0xf) io_submit(r6, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0xeffd, 0x0, 0x0, 0x0, 0x8, r7, 0x0, 0x0, 0x0, 0x0, 0x1, r5}]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e00000004000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000004209d2515a693185aee7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_io_uring_setup(0x328d, &(0x7f0000001340)={0x0, 0xdece, 0x40, 0x1, 0x223}, &(0x7f0000000080), &(0x7f0000000680), &(0x7f0000000240)) syz_ublk_setup_io_uring(0x3574, &(0x7f0000000340)={0x0, 0xfffffffc, 0x40000, 0x1, 0x1e4}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000001300)) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r8, r8, 0x0, 0x20000005) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) 1.840514186s ago: executing program 4 (id=5569): socket$inet_sctp(0x2, 0x5, 0x84) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x4}, 0x8) sendmmsg$inet6(r2, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001700)='\x00', 0x1}], 0x1}}], 0x1, 0x0) r3 = timerfd_create(0x0, 0x0) read(r3, 0x0, 0x0) timerfd_settime(r3, 0x3, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r4 = semget$private(0x0, 0x7, 0x180) semtimedop(r4, &(0x7f0000000380)=[{0x0, 0x9, 0x800}, {}], 0x2, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) pwritev(r5, &(0x7f0000000440)=[{&(0x7f00000003c0)='/', 0x1}], 0x1, 0x7, 0x3) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x80801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 689.572635ms ago: executing program 1 (id=5570): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x13ca78670876f9b3, 0x0, 0x25dfdc01, {{@in=@broadcast, @in6=@dev={0xfe, 0x80, '\x00', 0x2c}, 0x4e22, 0x0, 0x4e23, 0x0, 0x2, 0x20, 0x20}, {0x20000, 0x7, 0x0, 0x0, 0x7, 0x2}, {0x3, 0x448b, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3}}, 0xb8}}, 0x0) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) sendto$inet(r1, 0x0, 0x17, 0x48890, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) 510.685641ms ago: executing program 3 (id=5571): openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_emit_ethernet(0x4c8, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080045bc04ba00544a7d784951002000e39ea6714259e202000000119078000000000000000000004e2004a6907802010001800000002b47019676fb912bfb3979bb82d94c42da0498ad601e4b92fe2c62ba4d6bdd44d280dada5a5650e1edaecb4fd923a6ded85d084df9d5e7bffddda34d04e5cdb51ef2fe8703b3988bb47989823d53b49308c5d2977c173d08535eaf56e740391766d74589e9806165ef3d4085755bbaa162e74e4dc541aa6004761f6a43e20556918bb04da9070b3cc89472820459902b3342031e1571d32a8b78f2da2a8e73e26af9389dced48cdcaf0a714363789e4acd9373813e2729986552c1cdbeabd3a03d7684ead62926c387b1552066f9751c9f0fa935afda36cf2fb30bba0cb8007f3bd1fea86ef3b7f8434e250f2a09e6a3b569c8c0519adc93f8b909470f39920551618ecfe04ff0cc4b1ed29eee56dcd976a79181e4d3218b51150ce595c25371293ec4d05e4aa411ef3b190554c6a2e06ee6374d80a3c511603a8a20b75f8075d0d83d31b86be7d2d785e6d60c07b515fe04bd55e20bcfe799a3e66c93744c52d0d34880ab42354859d5d1a9d0d65b52a0819b19c2d7f7a285d401825bf40ccc355b1aecb100c3f86c71607b00c59c7a8c0d8ae35a0a0e20f189568cb1a386c9d799f2c5ba6cce4e6ae0dce69f7391a4f4b011b27ad89ecaca95b90be9e517d39fa47ab5d08fd75233c1b0b604c169ebdc29efe713e9ecd551fc383be78cc5afccee1d8bb067e64054734b61c99f1055748b335ea261b9a6ccd1b3362a0c9d26c74bcda8e4d1efca7f614a61b8dfa2508a39f78901cf7ab2f15409f1da06432db0b50f00e16a77ceece0e315fc63c46cd418a1d259ba713bc5a26a49bdc202cf04e02149cf29c1f617f0898321ecf9d395f349e276480b42147d4dc1af6491e05cff9a33517437cb21125f6945e0b727576880a89ef6d53375bb901e14ae1a2dd27a5bf67012b8e4515023dba602d2e5293da914c199c0c0d610bf6461cd7bba6c8b948e96f395c39a7a0b93df65368f8eaa306fdcf87522ac1a36c427d98af77c3a3afa33dc3e8e070a1a2f66a4877abbeef23ff67befdcc9532cf3990918fb778d7799ee1f26b469c37f3c9578b8f8f2d00d32fc839171b9474e76f03d827a4eac2802322f3d68b03d1516aec9566bba3acc0bcf0d6a551c412f080d8c7fe0c60e23cdb328920263477470ea4f23e23d5aebbfda173aa781f89bf0cdfce2003ed3c010c511b3b489eab29453a365b839cca172e3abbcbab0203899bdb4f14a3423c2293166145760e61c3c188c3e0888ee817f0772ff89e02df8f42b9951e1661b39def34308c46e8ec1e4e5b68e88140ac7dc993523191fdb71db3a2677a3bd666e6180a96c9846bce6cb6c16e379bf29e1769a66da2f6781e79f082cb80662d72adbb21240cef87dc3079a822b2a791753fcd12a7ec362088d76237370bcd5d5daa440ba735b4e29cf2cb93583a5080270d1a3fd40183dc04f30e01c428f92e595c89fcbd1fc52962eedea82e2772b5f5fa3dad0f908fe6a48fffcc69df60f34ef9d9ba7609d16cdf733ca77785c0ab6f536b79ffde4ff9b835bfcaffef0d15ae69c26c0588f1acd5a648fde52568c713163717eb77f863d20dda0f1ca2c0306748544d3763c1cfa82f1785f047c842cadc4f8ac1906ab6ad8f6425bb9efbe97ee62ea7e"], 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000009c0)=ANY=[], 0x1000f) 445.895891ms ago: executing program 4 (id=5572): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001900010028bd70000000000000000000000000000000000000000001fc02000000000000000000000000000000010000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32], 0xfc}, 0x1, 0x0, 0x0, 0x20}, 0x4048050) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x300, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 417.630681ms ago: executing program 1 (id=5573): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r0, 0x4, 0x40800) connect$inet(r0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x7ffff004) 376.584781ms ago: executing program 2 (id=5528): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000680)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000700)=ANY=[@ANYBLOB=' \n\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) 308.536777ms ago: executing program 5 (id=5574): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_smc(0x2b, 0x1, 0x0) accept(r0, 0x0, 0x0) (fail_nth: 3) connect$inet(r1, &(0x7f0000000300)={0x2, 0x4e20, @loopback}, 0x10) 110.517639ms ago: executing program 1 (id=5575): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800"], 0xa8}}, 0x0) close(0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001040)={0x14, 0x1, 0x1, 0x3, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x8000) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000000000)={0xe, {"a2e3ad21ed0d52f90b9b39094bf70e06d038e7ff7fc6e5539b324b298b089b0732376d090890e0878f0e1ac6e7049b334a959bfc9a240d2567f3988f7ef319520100ffe8d1780700523c921b1b9b31070d315d0936cd3b78130daa61f94b61404d64aec1b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c088215ec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6f44ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d208001349b41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2a15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee53259289d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c1980778efa5ea567b7b7430acc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a0700d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8440daaa69bf5c8f4350aeae9ca1207e76061b28f27da19acc7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211c7847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7beddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e781171e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b906ce2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf3f2aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11ee9afb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e75c40e42e07b34449e15e065cc7348663a52190202c7ae288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289d8523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c78e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e7c7b2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df06720ba2b26bbfcc807c8aabb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db38b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 0s ago: executing program 4 (id=5576): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4400000010000b042bbd70000005000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d6163736563000214000280050003000c00000005000a"], 0x44}}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) get_mempolicy(0x0, 0x0, 0xffffffffffffe4d5, &(0x7f00005c6000/0x1000)=nil, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x0, 0x0}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x87, 0x7ffc0201}]}) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, 0x0, 0x0) ptrace(0x10, 0x0) ptrace$setregs(0xd, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000800000000000060cf0000186a00000000000000000000083d00009500000000000000a3699376ca0ecbc8330882fa238ab78611c567d2bbbe6b04a0884c2671efa3797887aff982afa52ae3f3ba592d88d724120ebbcf89"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYRES64=r2, @ANYRES64, @ANYRESOCT=r1, @ANYRES64=r2, @ANYRES32], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x800, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x3104, 0x1b400}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_LOCAL={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFLA_GTP_CREATE_SOCKETS={0x5}]}}}]}, 0x40}}, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1f, {[@global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, '\n\x00'}, @global=@item_4={0x3, 0x1, 0x0, '\a\x00'}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) r5 = syz_open_dev$hidraw(&(0x7f0000000000), 0x15e, 0x800) ioctl$HIDIOCGFEATURE(r5, 0xc0404807, &(0x7f0000000200)={0x1, "b4be8421a3f3090ceb57129c83bb1a1562ae2050097bc3a277628b8fb36a28da220fdf81608f602bc11cfdaec03d294cfbdd855de75763122def77a5c75d51a8"}) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000640)={0x34, &(0x7f0000000400)=ANY=[@ANYBLOB="200804"], 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_netprio_ifpriomap(r6, &(0x7f0000000080), 0x2, 0x0) sendfile(r7, r7, 0x0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) kernel console output (not intermixed with test programs): an invalid interface number: 228 but max is 1 [ 1214.438054][T19272] usb 2-1: config 14 has no interface number 0 [ 1214.438073][T19272] usb 2-1: config 14 has no interface number 1 [ 1214.438134][T19272] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1214.438172][T19272] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1214.438794][T19272] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1214.438815][T19272] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1214.438833][T19272] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1214.438852][T19272] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1214.438869][T19272] usb 2-1: config 14 interface 57 has no altsetting 0 [ 1214.438930][T19272] usb 2-1: config 14 interface 228 has no altsetting 0 [ 1214.442272][T19272] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.442299][T19272] usb 2-1: Product: syz [ 1214.442315][T19272] usb 2-1: Manufacturer: syz [ 1214.442331][T19272] usb 2-1: SerialNumber: syz [ 1214.578021][T14571] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1214.596847][ T8082] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1214.624515][ T5673] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1214.626469][ T5673] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.651735][ T5673] usb 3-1: config 0 descriptor?? [ 1214.754122][T14571] usb 5-1: Using ep0 maxpacket: 32 [ 1214.754875][ T8082] usb 4-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01 [ 1214.758901][ T8082] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1214.758924][ T8082] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1214.761207][T14571] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1214.761256][T14571] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 1214.764159][ T8082] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.764262][ T8082] usb 4-1: Product: syz [ 1214.764299][ T8082] usb 4-1: Manufacturer: syz [ 1214.764338][ T8082] usb 4-1: SerialNumber: syz [ 1214.857722][T14571] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.857756][T14571] usb 5-1: Product: syz [ 1214.857767][T14571] usb 5-1: Manufacturer: syz [ 1214.857779][T14571] usb 5-1: SerialNumber: syz [ 1214.887148][ T8082] ums-onetouch 4-1:1.0: USB Mass Storage device detected [ 1214.921245][ T5673] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1214.922832][ T8082] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/input/input76 [ 1214.922943][ T8082] input input76: usb_submit_urb failed [ 1214.991690][ T8082] input: failed to attach handler kbd to device input76, error: -5 [ 1215.001165][ T4969] input input76: usb_submit_urb failed [ 1215.018545][ T4969] input input76: usb_submit_urb failed [ 1215.023853][ T8082] scsi host1: usb-storage 4-1:1.0 [ 1215.075619][T19272] legousbtower 2-1:14.57: interrupt endpoints not found [ 1215.107385][ T5695] usb 4-1: USB disconnect, device number 80 [ 1215.179759][ T5673] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 1215.179787][ T5673] [drm] Initialized udl on minor 1 [ 1215.262224][ T5617] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 1215.361341][T22720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1215.375936][T22720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1215.472714][T19272] legousbtower 2-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 1215.488753][T19272] legousbtower 2-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1215.664114][ T5695] usb 4-1: new full-speed USB device number 81 using dummy_hcd [ 1215.803991][ T5695] usb 4-1: device descriptor read/64, error -71 [ 1215.886939][T22733] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5296'. [ 1216.022804][ T31] kauditd_printk_skb: 83 callbacks suppressed [ 1216.022826][ T31] audit: type=1326 audit(1791275625.119:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22734 comm="syz.5.5297" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feedd79e199 code=0x7ffc0000 [ 1216.022955][ T31] audit: type=1326 audit(1791275625.119:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22734 comm="syz.5.5297" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feedd79e199 code=0x7ffc0000 [ 1216.054144][ T31] audit: type=1326 audit(1791275625.119:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22734 comm="syz.5.5297" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feedd75e9ce code=0x7ffc0000 [ 1216.081368][ T5695] usb 4-1: new full-speed USB device number 82 using dummy_hcd [ 1216.098473][ T31] audit: type=1326 audit(1791275625.189:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22734 comm="syz.5.5297" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7feedd75ae91 code=0x7ffc0000 [ 1216.147732][ T31] audit: type=1326 audit(1791275625.249:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22734 comm="syz.5.5297" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feedd79e199 code=0x7ffc0000 [ 1216.147788][ T31] audit: type=1326 audit(1791275625.249:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22734 comm="syz.5.5297" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feedd79e199 code=0x7ffc0000 [ 1216.149251][ T31] audit: type=1326 audit(1791275625.189:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22734 comm="syz.5.5297" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7feedd79ef89 code=0x7ffc0000 [ 1216.151084][ T31] audit: type=1326 audit(1791275625.249:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22734 comm="syz.5.5297" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7feedd75aefb code=0x7ffc0000 [ 1216.151247][ T31] audit: type=1326 audit(1791275625.249:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22734 comm="syz.5.5297" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7feedd75a5ec code=0x7ffc0000 [ 1216.151315][ T31] audit: type=1326 audit(1791275625.249:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22734 comm="syz.5.5297" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feedd79e199 code=0x7ffc0000 [ 1216.323857][ T5695] usb 4-1: device descriptor read/64, error -71 [ 1216.357561][T19272] usb 2-1: USB disconnect, device number 120 [ 1216.357705][ C1] usb 2-1: tower_interrupt_in_callback: usb_submit_urb failed (-19) [ 1216.439982][T19272] legousbtower 2-1:14.228: LEGO USB Tower #-160 now disconnected [ 1216.455923][ T5695] usb usb4-port1: attempt power cycle [ 1216.696335][T22741] netlink: 'syz.5.5298': attribute type 1 has an invalid length. [ 1216.746790][T22741] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1216.803877][ T5695] usb 4-1: new full-speed USB device number 83 using dummy_hcd [ 1216.825748][ T5695] usb 4-1: device descriptor read/8, error -71 [ 1216.829639][T22741] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1216.898477][T22741] bond1: (slave geneve2): making interface the new active one [ 1216.915531][T22741] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1217.086309][ T5695] usb 4-1: new full-speed USB device number 84 using dummy_hcd [ 1217.117723][ T5695] usb 4-1: device descriptor read/8, error -71 [ 1217.234910][ T5695] usb usb4-port1: unable to enumerate USB device [ 1217.257826][T22752] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1217.529122][T22755] could not allocate digest TFM handle  [ 1217.657231][T22763] Cannot find del_set index 2 as target [ 1217.700752][T22763] bond2: option updelay: invalid value (18446744073256566793) [ 1217.700802][T22763] bond2: option updelay: allowed values 0 - 2147483647 [ 1217.726937][T22763] bond2 (unregistering): Released all slaves [ 1217.898607][T14571] usb 5-1: unit 4 not found! [ 1217.898638][T14571] usb 5-1: unit 0 not found! [ 1217.921059][T14571] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1217.938163][T14571] usb 5-1: unit 4 not found! [ 1217.938187][T14571] usb 5-1: unit 0 not found! [ 1217.958604][T14571] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1217.977073][T14571] usb 5-1: unit 4 not found! [ 1217.977099][T14571] usb 5-1: unit 0 not found! [ 1218.115571][T14571] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 1218.121827][T14571] usb 5-1: USB disconnect, device number 83 [ 1218.191206][T10504] udevd[10504]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1218.495819][ T8082] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1218.644223][T14571] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1218.644408][ T8082] usb 4-1: Using ep0 maxpacket: 32 [ 1218.647523][ T8082] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1218.647576][ T8082] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1218.648742][ T8082] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 1218.648768][ T8082] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 1218.648794][ T8082] usb 4-1: config 14 has no interface number 0 [ 1218.648831][ T8082] usb 4-1: config 14 has no interface number 1 [ 1218.648894][ T8082] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1218.648922][ T8082] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1218.648941][ T8082] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1218.648984][ T8082] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1218.649016][ T8082] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1218.649043][ T8082] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1218.649075][ T8082] usb 4-1: config 14 interface 57 has no altsetting 0 [ 1218.649089][ T8082] usb 4-1: config 14 interface 228 has no altsetting 0 [ 1218.651437][ T8082] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1218.651467][ T8082] usb 4-1: Product: syz [ 1218.651479][ T8082] usb 4-1: Manufacturer: syz [ 1218.651490][ T8082] usb 4-1: SerialNumber: syz [ 1218.844693][T14571] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1218.846138][T14571] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1218.846202][T14571] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1218.846234][T14571] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1218.846265][T14571] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1218.846310][T14571] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.852932][T14571] usb 2-1: config 0 descriptor?? [ 1218.901501][T22778] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1219.247728][ T8082] legousbtower 4-1:14.57: interrupt endpoints not found [ 1219.281526][T22781] bond0: option resend_igmp: invalid value (2875) [ 1219.281556][T22781] bond0: option resend_igmp: allowed values 0 - 255 [ 1219.340257][T22781] bond0 (unregistering): Released all slaves [ 1219.347402][T14571] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 1219.347437][T14571] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 1219.347482][T14571] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 1219.347501][T14571] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 1219.347518][T14571] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 1219.347556][T14571] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 1219.347580][T14571] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 1219.347629][T14571] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 1219.347647][T14571] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 1219.347664][T14571] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 1219.471974][T14571] plantronics 0003:047F:FFFF.003B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1219.642274][T22778] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5311'. [ 1219.676658][ T5695] usb 2-1: USB disconnect, device number 121 [ 1219.691080][ T8082] legousbtower 4-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 1219.762500][ T8082] legousbtower 4-1:14.228: LEGO USB Tower #-159 now attached to major 180 minor 1 [ 1219.887491][T22784] fido_id[22784]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1220.506431][ T5673] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffff92 [ 1220.506732][ T5673] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1220.582378][ T5695] usb 3-1: USB disconnect, device number 96 [ 1220.585486][ T5673] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1220.629753][ T5673] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1220.664589][T12974] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1220.814980][T12974] usb 2-1: Using ep0 maxpacket: 16 [ 1220.816231][T12974] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1220.820547][T12974] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1220.832298][T12974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.832329][T12974] usb 2-1: Product: syz [ 1220.832346][T12974] usb 2-1: Manufacturer: syz [ 1220.832402][T12974] usb 2-1: SerialNumber: syz [ 1220.892320][T12974] usb 2-1: config 0 descriptor?? [ 1220.919290][T12974] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 1220.920959][T12974] usb 2-1: Detected FT232R [ 1221.089943][ T5617] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 1221.107811][ T31] kauditd_printk_skb: 155 callbacks suppressed [ 1221.107828][ T31] audit: type=1326 audit(1791275630.219:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22794 comm="syz.1.5316" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff17a79e199 code=0x7ffc0000 [ 1221.107893][ T31] audit: type=1326 audit(1791275630.219:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22794 comm="syz.1.5316" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff17a79e199 code=0x7ffc0000 [ 1221.112101][T12974] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1221.112605][ T31] audit: type=1326 audit(1791275630.219:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22794 comm="syz.1.5316" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff17a79de2b code=0x7ffc0000 [ 1221.112661][ T31] audit: type=1326 audit(1791275630.219:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22794 comm="syz.1.5316" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff17a79de2b code=0x7ffc0000 [ 1221.112885][ T31] audit: type=1326 audit(1791275630.219:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22794 comm="syz.1.5316" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff17a79e199 code=0x7ffc0000 [ 1221.113438][ T31] audit: type=1326 audit(1791275630.219:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22794 comm="syz.1.5316" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff17a75e9ce code=0x7ffc0000 [ 1221.140935][ T31] audit: type=1326 audit(1791275630.219:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22794 comm="syz.1.5316" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff17a79de2b code=0x7ffc0000 [ 1221.144549][ T31] audit: type=1326 audit(1791275630.219:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22794 comm="syz.1.5316" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff17a79de2b code=0x7ffc0000 [ 1221.158231][T22795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1221.258288][T22795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1221.258570][ T31] audit: type=1326 audit(1791275630.369:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22794 comm="syz.1.5316" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff17a79e199 code=0x7ffc0000 [ 1221.394290][ T31] audit: type=1326 audit(1791275630.489:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22794 comm="syz.1.5316" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff17a79e199 code=0x7ffc0000 [ 1221.493399][ T5673] usb 4-1: USB disconnect, device number 85 [ 1221.560113][ T5673] legousbtower 4-1:14.228: LEGO USB Tower #-159 now disconnected [ 1221.673357][T12974] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 1221.692785][T12974] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1221.716644][T12974] usb 2-1: USB disconnect, device number 122 [ 1221.738608][T12974] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1221.739233][T12974] ftdi_sio 2-1:0.0: device disconnected [ 1222.143820][ T5673] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1222.316219][ T5673] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1222.317722][ T5673] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1222.317773][ T5673] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.360713][ T5673] usb 6-1: config 0 descriptor?? [ 1222.383377][ T5673] pwc: Askey VC010 type 2 USB webcam detected. [ 1222.774140][ T5673] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1222.783108][ T5673] pwc: recv_control_msg error -32 req 02 val 2700 [ 1222.808822][ T5673] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1222.823477][ T5673] pwc: recv_control_msg error -32 req 04 val 1000 [ 1223.038873][T22815] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1223.046037][ T5673] pwc: recv_control_msg error -71 req 04 val 1400 [ 1223.048497][ T5673] pwc: recv_control_msg error -71 req 02 val 2000 [ 1223.050934][ T5673] pwc: recv_control_msg error -71 req 02 val 2100 [ 1223.053660][ T5673] pwc: recv_control_msg error -71 req 04 val 1500 [ 1223.055986][ T5673] pwc: recv_control_msg error -71 req 02 val 2500 [ 1223.058148][ T5673] pwc: recv_control_msg error -71 req 02 val 2400 [ 1223.059004][ T5673] pwc: recv_control_msg error -71 req 02 val 2600 [ 1223.060980][ T5673] pwc: recv_control_msg error -71 req 02 val 2900 [ 1223.062688][ T5673] pwc: recv_control_msg error -71 req 02 val 2800 [ 1223.071740][ T5673] pwc: recv_control_msg error -71 req 04 val 1100 [ 1223.078201][ T5673] pwc: recv_control_msg error -71 req 04 val 1200 [ 1223.176253][ T5673] pwc: Registered as video103. [ 1223.197150][ T5673] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input77 [ 1223.255176][T12974] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1223.313918][ T5673] usb 6-1: USB disconnect, device number 39 [ 1223.427224][T12974] usb 4-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=ca.fb [ 1223.429957][T12974] usb 4-1: config 2 has an invalid interface number: 79 but max is 0 [ 1223.430004][T12974] usb 4-1: config 2 has no interface number 0 [ 1223.430034][T12974] usb 4-1: config 2 interface 79 has no altsetting 0 [ 1223.475192][T12974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1223.475214][T12974] usb 4-1: Product: syz [ 1223.475225][T12974] usb 4-1: Manufacturer: syz [ 1223.475235][T12974] usb 4-1: SerialNumber: syz [ 1223.767674][T12974] usb 4-1: USB disconnect, device number 86 [ 1223.914572][T22839] netlink: 80 bytes leftover after parsing attributes in process `syz.5.5328'. [ 1224.843961][T19272] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1224.869740][T22854] FAULT_INJECTION: forcing a failure. [ 1224.869740][T22854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1224.869777][T22854] CPU: 1 UID: 0 PID: 22854 Comm: syz.4.5333 Tainted: G L syzkaller #0 PREEMPT(full) [ 1224.869808][T22854] Tainted: [L]=SOFTLOCKUP [ 1224.869816][T22854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1224.869829][T22854] Call Trace: [ 1224.869839][T22854] [ 1224.869849][T22854] dump_stack_lvl+0xe8/0x150 [ 1224.869886][T22854] should_fail_ex+0x410/0x560 [ 1224.869917][T22854] _copy_from_user+0x2d/0xb0 [ 1224.869949][T22854] snd_rawmidi_kernel_write1+0x3ad/0x640 [ 1224.870069][T22854] snd_rawmidi_write+0x5b6/0xbc0 [ 1224.870111][T22854] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 1224.870140][T22854] ? __pfx_default_wake_function+0x10/0x10 [ 1224.870173][T22854] ? common_file_perm+0x20e/0x2b0 [ 1224.870208][T22854] ? bpf_lsm_file_permission+0x9/0x20 [ 1224.870240][T22854] ? security_file_permission+0x75/0x260 [ 1224.870268][T22854] ? rw_verify_area+0x203/0x4c0 [ 1224.870306][T22854] vfs_writev+0x4bb/0x990 [ 1224.870334][T22854] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 1224.870367][T22854] ? __pfx_vfs_writev+0x10/0x10 [ 1224.870408][T22854] ? __fget_files+0x2a/0x420 [ 1224.870445][T22854] ? __fget_files+0x3a2/0x420 [ 1224.870476][T22854] ? __fget_files+0x2a/0x420 [ 1224.870524][T22854] do_writev+0x154/0x2e0 [ 1224.870553][T22854] ? __pfx_do_writev+0x10/0x10 [ 1224.870604][T22854] do_syscall_64+0x166/0x520 [ 1224.870635][T22854] ? trace_irq_disable+0x3b/0x140 [ 1224.870662][T22854] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1224.870685][T22854] ? clear_bhb_loop+0x70/0xc0 [ 1224.870712][T22854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1224.870734][T22854] RIP: 0033:0x7f922499e199 [ 1224.870774][T22854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1224.870794][T22854] RSP: 002b:00007f922582a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1224.870818][T22854] RAX: ffffffffffffffda RBX: 00007f9224c25fa0 RCX: 00007f922499e199 [ 1224.870835][T22854] RDX: 0000000000000001 RSI: 0000200000000840 RDI: 0000000000000003 [ 1224.870851][T22854] RBP: 00007f922582a090 R08: 0000000000000000 R09: 0000000000000000 [ 1224.870865][T22854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1224.870879][T22854] R13: 00007f9224c26038 R14: 00007f9224c25fa0 R15: 00007f9224d4fa48 [ 1224.870914][T22854] [ 1225.090141][T19272] usb 6-1: Using ep0 maxpacket: 32 [ 1225.149080][T19272] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1225.149157][T19272] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1225.181937][T19272] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 1225.181966][T19272] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 1225.181987][T19272] usb 6-1: config 14 has no interface number 0 [ 1225.182004][T19272] usb 6-1: config 14 has no interface number 1 [ 1225.182064][T19272] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1225.182089][T19272] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1225.182132][T19272] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1225.182161][T19272] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1225.182190][T19272] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1225.182217][T19272] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1225.182246][T19272] usb 6-1: config 14 interface 57 has no altsetting 0 [ 1225.182266][T19272] usb 6-1: config 14 interface 228 has no altsetting 0 [ 1225.306502][T19272] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1225.306534][T19272] usb 6-1: Product: syz [ 1225.306552][T19272] usb 6-1: Manufacturer: syz [ 1225.306569][T19272] usb 6-1: SerialNumber: syz [ 1225.767454][T19272] legousbtower 6-1:14.57: interrupt endpoints not found [ 1226.211101][T19272] legousbtower 6-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 1226.224978][T19272] legousbtower 6-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1227.092110][ T8082] usb 6-1: USB disconnect, device number 40 [ 1227.134544][ T8082] legousbtower 6-1:14.228: LEGO USB Tower #-160 now disconnected [ 1227.813757][T22876] netlink: 80 bytes leftover after parsing attributes in process `syz.5.5340'. [ 1228.174223][T19272] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1228.333785][T19272] usb 4-1: Using ep0 maxpacket: 16 [ 1228.334579][T19272] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1228.335639][T19272] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1228.335662][T19272] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1228.335682][T19272] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1228.338279][T19272] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.338305][T19272] usb 4-1: Product: syz [ 1228.338321][T19272] usb 4-1: Manufacturer: syz [ 1228.338336][T19272] usb 4-1: SerialNumber: syz [ 1228.427646][T19272] usb 4-1: 0:2 : does not exist [ 1229.298601][T19272] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 1229.476344][T19272] usb 4-1: USB disconnect, device number 87 [ 1229.579665][T11050] udevd[11050]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1229.756103][T22916] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5353'. [ 1229.923981][ T8082] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1230.076224][ T8082] usb 2-1: Using ep0 maxpacket: 32 [ 1230.101127][ T8082] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1230.101181][ T8082] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1230.105885][ T8082] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 1230.105966][ T8082] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 1230.106035][ T8082] usb 2-1: config 14 has no interface number 0 [ 1230.106082][ T8082] usb 2-1: config 14 has no interface number 1 [ 1230.106276][ T8082] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1230.106382][ T8082] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1230.106443][ T8082] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1230.106525][ T8082] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1230.106600][ T8082] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1230.106673][ T8082] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1230.106747][ T8082] usb 2-1: config 14 interface 57 has no altsetting 0 [ 1230.106805][ T8082] usb 2-1: config 14 interface 228 has no altsetting 0 [ 1230.141613][ T8082] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.141677][ T8082] usb 2-1: Product: syz [ 1230.141715][ T8082] usb 2-1: Manufacturer: syz [ 1230.141761][ T8082] usb 2-1: SerialNumber: syz [ 1230.681175][ T8082] legousbtower 2-1:14.57: interrupt endpoints not found [ 1231.082482][ T8082] legousbtower 2-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 1231.088669][ T8082] legousbtower 2-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1231.269921][T22942] kvm: user requested TSC rate below hardware speed [ 1231.270069][T22942] kvm: user requested TSC rate below hardware speed [ 1231.270182][T22942] kvm: user requested TSC rate below hardware speed [ 1231.270290][T22942] kvm: user requested TSC rate below hardware speed [ 1231.270406][T22942] kvm: user requested TSC rate below hardware speed [ 1231.270518][T22942] kvm: user requested TSC rate below hardware speed [ 1231.270627][T22942] kvm: user requested TSC rate below hardware speed [ 1231.270754][T22942] kvm: user requested TSC rate below hardware speed [ 1231.270870][T22942] kvm: user requested TSC rate below hardware speed [ 1231.270984][T22942] kvm: user requested TSC rate below hardware speed [ 1231.348371][T22941] netlink: 'syz.4.5361': attribute type 10 has an invalid length. [ 1231.386279][T22943] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1231.420468][T22943] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1231.456922][T22943] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1231.519111][T22943] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1231.548807][T22943] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1231.549649][T22949] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[21851] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[22949] [ 1231.589756][T22943] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1231.606306][T22943] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1231.642392][T22943] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1231.678876][T22943] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1231.762656][T22943] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1231.794618][T22943] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1231.830965][T22943] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1231.859053][T22943] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1231.911509][T20450] usb 2-1: USB disconnect, device number 123 [ 1231.914801][ T8082] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1231.944159][T22943] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1231.980354][T22954] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[14543] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[22954] [ 1232.041370][T22943] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1232.075534][ T8082] usb 3-1: Using ep0 maxpacket: 32 [ 1232.096545][T20450] legousbtower 2-1:14.228: LEGO USB Tower #-160 now disconnected [ 1232.097458][ T8082] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1232.097526][ T8082] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 1232.151795][ T8082] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.151817][ T8082] usb 3-1: Product: syz [ 1232.151829][ T8082] usb 3-1: Manufacturer: syz [ 1232.151839][ T8082] usb 3-1: SerialNumber: syz [ 1232.152283][T22943] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1232.435170][T14571] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1232.598707][T14571] usb 4-1: Using ep0 maxpacket: 32 [ 1232.616704][T14571] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1232.616745][T14571] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 1232.655183][T14571] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.655258][T14571] usb 4-1: Product: syz [ 1232.655276][T14571] usb 4-1: Manufacturer: syz [ 1232.655294][T14571] usb 4-1: SerialNumber: syz [ 1232.702481][T22960] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5365'. [ 1233.304088][T20450] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1233.465388][T20450] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1233.466284][T20450] usb 2-1: config 0 has no interfaces? [ 1233.473524][T20450] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1233.473542][T20450] usb 2-1: Product: syz [ 1233.473553][T20450] usb 2-1: Manufacturer: syz [ 1233.516500][T20450] usb 2-1: config 0 descriptor?? [ 1233.743907][T19272] usb 2-1: USB disconnect, device number 124 [ 1234.388454][ T8082] usb 3-1: unit 4 not found! [ 1234.388474][ T8082] usb 3-1: unit 0 not found! [ 1234.436356][ T8082] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1234.464913][ T8082] usb 3-1: unit 4 not found! [ 1234.464932][ T8082] usb 3-1: unit 0 not found! [ 1234.510297][ T8082] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1234.538670][ T8082] usb 3-1: unit 4 not found! [ 1234.538689][ T8082] usb 3-1: unit 0 not found! [ 1234.757109][T22978] FAULT_INJECTION: forcing a failure. [ 1234.757109][T22978] name failslab, interval 1, probability 0, space 0, times 0 [ 1234.757152][T22978] CPU: 1 UID: 0 PID: 22978 Comm: syz.5.5371 Tainted: G L syzkaller #0 PREEMPT(full) [ 1234.757184][T22978] Tainted: [L]=SOFTLOCKUP [ 1234.757193][T22978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1234.757208][T22978] Call Trace: [ 1234.757218][T22978] [ 1234.757228][T22978] dump_stack_lvl+0xe8/0x150 [ 1234.757267][T22978] should_fail_ex+0x410/0x560 [ 1234.757301][T22978] should_failslab+0xa8/0x100 [ 1234.757334][T22978] __kmalloc_noprof+0xfe/0x720 [ 1234.757358][T22978] ? rcu_is_watching+0x16/0xb0 [ 1234.757387][T22978] ? tomoyo_realpath_from_path+0xef/0x640 [ 1234.757421][T22978] ? tomoyo_realpath_from_path+0xef/0x640 [ 1234.757463][T22978] tomoyo_realpath_from_path+0xef/0x640 [ 1234.757520][T22978] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1234.757550][T22978] tomoyo_path_number_perm+0x246/0x5f0 [ 1234.757581][T22978] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1234.757609][T22978] ? __lock_acquire+0x747/0x2de0 [ 1234.757649][T22978] ? hook_file_ioctl+0x1f2/0x600 [ 1234.757698][T22978] ? __fget_files+0x2a/0x420 [ 1234.757734][T22978] ? __fget_files+0x2a/0x420 [ 1234.757765][T22978] ? __fget_files+0x3a2/0x420 [ 1234.757796][T22978] ? __fget_files+0x2a/0x420 [ 1234.757832][T22978] security_file_ioctl+0xc3/0x2a0 [ 1234.757862][T22978] __se_sys_ioctl+0x47/0x170 [ 1234.757891][T22978] do_syscall_64+0x166/0x520 [ 1234.757924][T22978] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1234.757947][T22978] ? clear_bhb_loop+0x70/0xc0 [ 1234.757975][T22978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1234.757997][T22978] RIP: 0033:0x7feedd79e199 [ 1234.758018][T22978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1234.758038][T22978] RSP: 002b:00007feede5cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1234.758062][T22978] RAX: ffffffffffffffda RBX: 00007feedda25fa0 RCX: 00007feedd79e199 [ 1234.758079][T22978] RDX: 0000200000000440 RSI: 00000000c058560f RDI: 0000000000000003 [ 1234.758101][T22978] RBP: 00007feede5cb090 R08: 0000000000000000 R09: 0000000000000000 [ 1234.758115][T22978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1234.758130][T22978] R13: 00007feedda26038 R14: 00007feedda25fa0 R15: 00007feeddb4fa48 [ 1234.758163][T22978] [ 1234.762585][T22978] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1235.185243][ T8082] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 1235.185869][T14571] usb 4-1: unit 4 not found! [ 1235.185884][T14571] usb 4-1: unit 0 not found! [ 1235.238330][ T8082] usb 3-1: USB disconnect, device number 97 [ 1235.245632][T14571] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1235.375389][T22983] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 1235.443247][T14571] usb 4-1: unit 4 not found! [ 1235.443276][T14571] usb 4-1: unit 0 not found! [ 1235.468112][T10475] udevd[10475]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1235.528339][T14571] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1235.575100][T14571] usb 4-1: unit 4 not found! [ 1235.575127][T14571] usb 4-1: unit 0 not found! [ 1235.823417][T22990] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5373'. [ 1236.175223][T14571] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 1236.179925][T14571] usb 4-1: USB disconnect, device number 88 [ 1236.321099][T10504] udevd[10504]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1236.613893][T20450] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1236.635419][T14571] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1236.766481][T20450] usb 3-1: Using ep0 maxpacket: 32 [ 1236.782855][T20450] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1236.782906][T20450] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1236.788033][T14571] usb 4-1: Using ep0 maxpacket: 8 [ 1236.808801][T20450] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 1236.808831][T20450] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 1236.808860][T20450] usb 3-1: config 14 has no interface number 0 [ 1236.808879][T20450] usb 3-1: config 14 has no interface number 1 [ 1236.808941][T20450] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1236.808967][T20450] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1236.808995][T20450] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1236.809024][T20450] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1236.809051][T20450] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1236.809079][T20450] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1236.809106][T20450] usb 3-1: config 14 interface 57 has no altsetting 0 [ 1236.809125][T20450] usb 3-1: config 14 interface 228 has no altsetting 0 [ 1236.811610][T14571] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 1236.833968][T20450] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.833998][T20450] usb 3-1: Product: syz [ 1236.834015][T20450] usb 3-1: Manufacturer: syz [ 1236.834031][T20450] usb 3-1: SerialNumber: syz [ 1236.835943][T14571] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1236.836082][T14571] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 1236.836180][T14571] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1236.836267][T14571] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 1236.836348][T14571] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1236.836410][T14571] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1236.870202][T14571] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.870231][T14571] usb 4-1: Product: syz [ 1236.870246][T14571] usb 4-1: Manufacturer: syz [ 1236.870262][T14571] usb 4-1: SerialNumber: syz [ 1236.943359][T14571] usb 4-1: config 0 descriptor?? [ 1236.997787][T23001] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1237.098749][T14571] ati_remote 4-1:0.0: ati_remote_probe: Unexpected endpoint_out [ 1237.290196][T23011] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5379'. [ 1237.332038][T20450] legousbtower 3-1:14.57: interrupt endpoints not found [ 1237.724147][T19272] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1237.730480][T20450] legousbtower 3-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 1237.732724][T20450] legousbtower 3-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1237.763605][ T5695] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1237.846769][ T5673] usb 4-1: USB disconnect, device number 89 [ 1237.874696][T19272] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1237.875255][T19272] usb 6-1: config 0 has no interfaces? [ 1237.877825][T19272] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1237.877852][T19272] usb 6-1: Product: syz [ 1237.877869][T19272] usb 6-1: Manufacturer: syz [ 1237.883008][T19272] usb 6-1: config 0 descriptor?? [ 1237.954780][ T5695] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1237.955910][ T5695] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1237.955963][ T5695] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1238.091710][ T5673] usb 6-1: USB disconnect, device number 41 [ 1238.500166][ T5673] usb 3-1: USB disconnect, device number 98 [ 1238.548154][ T5673] legousbtower 3-1:14.228: LEGO USB Tower #-160 now disconnected [ 1238.708879][T23031] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[12838] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[23031] [ 1238.745034][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.745075][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.853077][T23033] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[21990] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[23033] [ 1239.034686][T20450] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1239.173841][ T5673] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1239.183982][T20450] usb 2-1: Using ep0 maxpacket: 32 [ 1239.208212][T20450] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1239.208248][T20450] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 1239.236176][T20450] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.236226][T20450] usb 2-1: Product: syz [ 1239.236237][T20450] usb 2-1: Manufacturer: syz [ 1239.236248][T20450] usb 2-1: SerialNumber: syz [ 1239.343784][ T5673] usb 6-1: Using ep0 maxpacket: 32 [ 1239.362289][ T5673] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1239.362356][ T5673] usb 6-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 1239.404178][ T5673] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.404214][ T5673] usb 6-1: Product: syz [ 1239.404225][ T5673] usb 6-1: Manufacturer: syz [ 1239.404235][ T5673] usb 6-1: SerialNumber: syz [ 1239.677639][T23044] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5388'. [ 1241.600599][T20450] usb 2-1: unit 4 not found! [ 1241.600618][T20450] usb 2-1: unit 0 not found! [ 1241.660277][T20450] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1241.691361][T20450] usb 2-1: unit 4 not found! [ 1241.691385][T20450] usb 2-1: unit 0 not found! [ 1241.747926][T20450] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1241.750069][ T5673] usb 6-1: unit 4 not found! [ 1241.750095][ T5673] usb 6-1: unit 0 not found! [ 1241.785706][ T5673] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1241.817139][T20450] usb 2-1: unit 4 not found! [ 1241.817165][T20450] usb 2-1: unit 0 not found! [ 1241.843566][ T8082] usb 5-1: USB disconnect, device number 84 [ 1242.236307][T20450] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 1242.238426][ T5673] usb 6-1: unit 4 not found! [ 1242.238450][ T5673] usb 6-1: unit 0 not found! [ 1242.281172][T20450] usb 2-1: USB disconnect, device number 125 [ 1242.282406][ T5673] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1242.329121][ T5673] usb 6-1: unit 4 not found! [ 1242.329147][ T5673] usb 6-1: unit 0 not found! [ 1242.412126][T15741] udevd[15741]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1242.653278][ T5673] snd-usb-audio 6-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 1242.677327][ T5673] usb 6-1: USB disconnect, device number 42 [ 1242.765663][T15741] udevd[15741]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1243.035040][T23062] usb usb8: usbfs: process 23062 (syz.5.5394) did not claim interface 0 before use [ 1243.228874][T23068] FAULT_INJECTION: forcing a failure. [ 1243.228874][T23068] name failslab, interval 1, probability 0, space 0, times 0 [ 1243.228903][T23068] CPU: 0 UID: 0 PID: 23068 Comm: syz.5.5396 Tainted: G L syzkaller #0 PREEMPT(full) [ 1243.228925][T23068] Tainted: [L]=SOFTLOCKUP [ 1243.228932][T23068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1243.228957][T23068] Call Trace: [ 1243.228964][T23068] [ 1243.228971][T23068] dump_stack_lvl+0xe8/0x150 [ 1243.229001][T23068] should_fail_ex+0x410/0x560 [ 1243.229025][T23068] should_failslab+0xa8/0x100 [ 1243.229049][T23068] __kmalloc_noprof+0xfe/0x720 [ 1243.229066][T23068] ? rcu_is_watching+0x16/0xb0 [ 1243.229086][T23068] ? tomoyo_realpath_from_path+0xef/0x640 [ 1243.229111][T23068] ? tomoyo_realpath_from_path+0xef/0x640 [ 1243.229140][T23068] tomoyo_realpath_from_path+0xef/0x640 [ 1243.229172][T23068] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1243.229194][T23068] tomoyo_path_number_perm+0x246/0x5f0 [ 1243.229217][T23068] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1243.229237][T23068] ? __lock_acquire+0x747/0x2de0 [ 1243.229266][T23068] ? hook_file_ioctl+0x1f2/0x600 [ 1243.229333][T23068] ? __fget_files+0x2a/0x420 [ 1243.229360][T23068] ? __fget_files+0x2a/0x420 [ 1243.229383][T23068] ? __fget_files+0x3a2/0x420 [ 1243.229407][T23068] ? __fget_files+0x2a/0x420 [ 1243.229434][T23068] security_file_ioctl+0xc3/0x2a0 [ 1243.229455][T23068] __se_sys_ioctl+0x47/0x170 [ 1243.229477][T23068] do_syscall_64+0x166/0x520 [ 1243.229501][T23068] ? trace_irq_disable+0x3b/0x140 [ 1243.229519][T23068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1243.229536][T23068] ? clear_bhb_loop+0x70/0xc0 [ 1243.229556][T23068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1243.229573][T23068] RIP: 0033:0x7feedd79e199 [ 1243.229588][T23068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1243.229603][T23068] RSP: 002b:00007feede5cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1243.229620][T23068] RAX: ffffffffffffffda RBX: 00007feedda25fa0 RCX: 00007feedd79e199 [ 1243.229631][T23068] RDX: 0000200000000040 RSI: 00000000c1105511 RDI: 0000000000000003 [ 1243.229642][T23068] RBP: 00007feede5cb090 R08: 0000000000000000 R09: 0000000000000000 [ 1243.229652][T23068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1243.229662][T23068] R13: 00007feedda26038 R14: 00007feedda25fa0 R15: 00007feeddb4fa48 [ 1243.229687][T23068] [ 1243.229693][T23068] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1243.404621][ T8082] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1243.578288][ T8082] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1243.578961][ T8082] usb 2-1: config 0 has no interfaces? [ 1243.582101][ T8082] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1243.582120][ T8082] usb 2-1: Product: syz [ 1243.582130][ T8082] usb 2-1: Manufacturer: syz [ 1243.612268][ T8082] usb 2-1: config 0 descriptor?? [ 1243.838446][T20450] usb 2-1: USB disconnect, device number 126 [ 1243.934143][ T5673] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1244.013971][ T8082] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1244.113844][ T5673] usb 6-1: Using ep0 maxpacket: 32 [ 1244.115989][ T5673] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1244.116039][ T5673] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1244.117180][ T5673] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 1244.117208][ T5673] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 1244.117229][ T5673] usb 6-1: config 14 has no interface number 0 [ 1244.117247][ T5673] usb 6-1: config 14 has no interface number 1 [ 1244.117303][ T5673] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1244.117321][ T5673] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1244.117354][ T5673] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1244.117373][ T5673] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1244.117405][ T5673] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1244.117424][ T5673] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1244.117442][ T5673] usb 6-1: config 14 interface 57 has no altsetting 0 [ 1244.117454][ T5673] usb 6-1: config 14 interface 228 has no altsetting 0 [ 1244.119369][ T5673] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.119395][ T5673] usb 6-1: Product: syz [ 1244.119410][ T5673] usb 6-1: Manufacturer: syz [ 1244.119432][ T5673] usb 6-1: SerialNumber: syz [ 1244.166183][ T8082] usb 3-1: Using ep0 maxpacket: 8 [ 1244.167821][ T8082] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1244.213046][ T8082] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.213077][ T8082] usb 3-1: Product: syz [ 1244.213094][ T8082] usb 3-1: Manufacturer: syz [ 1244.213110][ T8082] usb 3-1: SerialNumber: syz [ 1244.243496][ T8082] usb 3-1: config 0 descriptor?? [ 1244.356287][T23084] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[14397] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[23084] [ 1244.464408][ T8082] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1244.565093][ T5673] legousbtower 6-1:14.57: interrupt endpoints not found [ 1244.591795][T23086] netlink: 'syz.1.5404': attribute type 31 has an invalid length. [ 1244.678476][T19272] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1244.836799][T19272] usb 5-1: Using ep0 maxpacket: 32 [ 1244.844724][T19272] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1244.844925][T19272] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 1244.882695][T19272] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.882718][T19272] usb 5-1: Product: syz [ 1244.882730][T19272] usb 5-1: Manufacturer: syz [ 1244.882747][T19272] usb 5-1: SerialNumber: syz [ 1244.967653][ T5673] legousbtower 6-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 1244.988748][ T5673] legousbtower 6-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1245.003957][T23090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1245.018229][T23090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1245.086623][T23072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1245.087426][T23072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1245.158131][T23094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5398'. [ 1245.244637][ T5695] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1245.378472][ T5695] usb 4-1: device descriptor read/64, error -71 [ 1245.412902][ T31] kauditd_printk_skb: 39 callbacks suppressed [ 1245.412954][ T31] audit: type=1326 audit(1791275654.509:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23095 comm="syz.1.5408" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff17a79e199 code=0x0 [ 1245.613978][ T5695] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1245.745092][ T5695] usb 4-1: device descriptor read/64, error -71 [ 1245.746259][ T5673] usb 6-1: USB disconnect, device number 43 [ 1245.791119][ T5673] legousbtower 6-1:14.228: LEGO USB Tower #-160 now disconnected [ 1245.854650][ T5695] usb usb4-port1: attempt power cycle [ 1246.194005][ T5695] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1246.215462][ T5695] usb 4-1: device descriptor read/8, error -71 [ 1246.454100][ T5695] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1246.476429][ T5695] usb 4-1: device descriptor read/8, error -71 [ 1246.554103][T23109] fuse: Unknown parameter '0x000000000000000b' [ 1246.584473][ T5695] usb usb4-port1: unable to enumerate USB device [ 1246.830343][T23111] FAULT_INJECTION: forcing a failure. [ 1246.830343][T23111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1246.830418][T23111] CPU: 0 UID: 0 PID: 23111 Comm: syz.5.5412 Tainted: G L syzkaller #0 PREEMPT(full) [ 1246.830450][T23111] Tainted: [L]=SOFTLOCKUP [ 1246.830458][T23111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1246.830471][T23111] Call Trace: [ 1246.830480][T23111] [ 1246.830491][T23111] dump_stack_lvl+0xe8/0x150 [ 1246.830533][T23111] should_fail_ex+0x410/0x560 [ 1246.830566][T23111] _copy_from_iter+0x1d3/0x1660 [ 1246.830594][T23111] ? __alloc_skb+0x27a/0x7a0 [ 1246.830626][T23111] ? __alloc_skb+0x27a/0x7a0 [ 1246.830659][T23111] ? __alloc_skb+0x27a/0x7a0 [ 1246.830690][T23111] ? __pfx__copy_from_iter+0x10/0x10 [ 1246.830716][T23111] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 1246.830739][T23111] ? __alloc_skb+0x27a/0x7a0 [ 1246.830769][T23111] ? __alloc_skb+0x27a/0x7a0 [ 1246.830806][T23111] ? netlink_sendmsg+0x650/0xb40 [ 1246.830830][T23111] ? skb_put+0x112/0x210 [ 1246.830863][T23111] netlink_sendmsg+0x6c0/0xb40 [ 1246.830896][T23111] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1246.830929][T23111] ? apparmor_socket_sendmsg+0x98/0x360 [ 1246.830962][T23111] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1246.830986][T23111] sock_sendmsg_nosec+0x13a/0x180 [ 1246.831015][T23111] ____sys_sendmsg+0x54e/0x850 [ 1246.831055][T23111] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1246.831100][T23111] ? import_iovec+0x73/0xa0 [ 1246.831134][T23111] ___sys_sendmsg+0x2a5/0x360 [ 1246.831167][T23111] ? __lock_acquire+0x747/0x2de0 [ 1246.831197][T23111] ? __pfx____sys_sendmsg+0x10/0x10 [ 1246.831267][T23111] ? __fget_files+0x2a/0x420 [ 1246.831300][T23111] ? __fget_files+0x3a2/0x420 [ 1246.831343][T23111] __x64_sys_sendmsg+0x1b1/0x290 [ 1246.831382][T23111] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1246.831448][T23111] do_syscall_64+0x166/0x520 [ 1246.831481][T23111] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1246.831506][T23111] ? clear_bhb_loop+0x70/0xc0 [ 1246.831535][T23111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1246.831557][T23111] RIP: 0033:0x7feedd79e199 [ 1246.831578][T23111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1246.831600][T23111] RSP: 002b:00007feede5cb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1246.831625][T23111] RAX: ffffffffffffffda RBX: 00007feedda25fa0 RCX: 00007feedd79e199 [ 1246.831644][T23111] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 1246.831659][T23111] RBP: 00007feede5cb090 R08: 0000000000000000 R09: 0000000000000000 [ 1246.831675][T23111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1246.831688][T23111] R13: 00007feedda26038 R14: 00007feedda25fa0 R15: 00007feeddb4fa48 [ 1246.831719][T23111] [ 1246.923255][ T8082] usb write operation failed. (-71) [ 1247.132443][ T8082] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1247.133016][ T8082] dvbdev: DVB: registering new adapter (Terratec H7) [ 1247.133068][ T8082] usb 3-1: media controller created [ 1247.159558][ T8082] usb read operation failed. (-71) [ 1247.160021][ T8082] usb write operation failed. (-71) [ 1247.179748][ T8082] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1247.204134][ T8082] usb 3-1: USB disconnect, device number 99 [ 1247.237154][T19272] usb 5-1: unit 4 not found! [ 1247.237173][T19272] usb 5-1: unit 0 not found! [ 1247.304855][T19272] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1247.365304][T19272] usb 5-1: unit 4 not found! [ 1247.365329][T19272] usb 5-1: unit 0 not found! [ 1247.401441][T19272] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1247.431019][T19272] usb 5-1: unit 4 not found! [ 1247.431045][T19272] usb 5-1: unit 0 not found! [ 1247.715715][ T8082] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1247.826940][T19272] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 1247.831012][T19272] usb 5-1: USB disconnect, device number 85 [ 1247.874550][ T8082] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1247.875103][ T8082] usb 6-1: config 0 has no interfaces? [ 1247.877216][ T8082] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1247.877242][ T8082] usb 6-1: Product: syz [ 1247.877257][ T8082] usb 6-1: Manufacturer: syz [ 1247.880375][ T8082] usb 6-1: config 0 descriptor?? [ 1247.956477][T10504] udevd[10504]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1248.097318][T20450] usb 6-1: USB disconnect, device number 44 [ 1248.293869][ T8082] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1248.453962][ T8082] usb 5-1: Using ep0 maxpacket: 8 [ 1248.456413][ T8082] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1248.456466][ T8082] usb 5-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 1248.457702][ T8082] usb 5-1: config 1 has an invalid interface descriptor of length 8, skipping [ 1248.457732][ T8082] usb 5-1: config 1 has an invalid descriptor of length 184, skipping remainder of the config [ 1248.457747][ T8082] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1248.460999][ T8082] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1248.461026][ T8082] usb 5-1: Product: syz [ 1248.461042][ T8082] usb 5-1: Manufacturer: syz [ 1248.461056][ T8082] usb 5-1: SerialNumber: syz [ 1248.605162][T19272] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1248.754641][T19272] usb 3-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 1248.756418][T19272] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1248.756439][T19272] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1248.756494][T19272] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1248.823162][T19272] idmouse 3-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 1248.925355][ T8082] usb 5-1: USB disconnect, device number 86 [ 1248.929392][ T31] audit: type=1326 audit(1791275658.029:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23136 comm="syz.5.5422" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feedd79e199 code=0x7ffc0000 [ 1248.930756][ T31] audit: type=1326 audit(1791275658.029:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23136 comm="syz.5.5422" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7feedd79e199 code=0x7ffc0000 [ 1248.930886][ T31] audit: type=1326 audit(1791275658.029:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23136 comm="syz.5.5422" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feedd79e199 code=0x7ffc0000 [ 1248.932320][ T31] audit: type=1326 audit(1791275658.029:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23136 comm="syz.5.5422" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feedd79e199 code=0x7ffc0000 [ 1248.964573][ T31] audit: type=1326 audit(1791275658.039:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23136 comm="syz.5.5422" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7feedd79e199 code=0x7ffc0000 [ 1249.005032][ T31] audit: type=1326 audit(1791275658.039:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23136 comm="syz.5.5422" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feedd79e199 code=0x7ffc0000 [ 1249.005204][ T31] audit: type=1326 audit(1791275658.089:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23136 comm="syz.5.5422" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feedd79e199 code=0x7ffc0000 [ 1249.054818][ T31] audit: type=1326 audit(1791275658.139:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23136 comm="syz.5.5422" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7feedd79e199 code=0x7ffc0000 [ 1249.054959][ T31] audit: type=1326 audit(1791275658.139:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23136 comm="syz.5.5422" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feedd79e199 code=0x7ffc0000 [ 1249.233862][T11050] udevd[11050]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1249.433897][T18660] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1249.594039][T18660] usb 6-1: Using ep0 maxpacket: 16 [ 1249.597270][T18660] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1249.603228][T18660] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1249.649975][T18660] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.650003][T18660] usb 6-1: Product: syz [ 1249.650018][T18660] usb 6-1: Manufacturer: syz [ 1249.650033][T18660] usb 6-1: SerialNumber: syz [ 1249.679614][T18660] usb 6-1: config 0 descriptor?? [ 1249.696281][T18660] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 1249.697197][T18660] usb 6-1: Detected FT232R [ 1249.754159][T19272] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1249.797598][T23155] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5429'. [ 1249.899329][T18660] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1249.904272][T19272] usb 2-1: Using ep0 maxpacket: 32 [ 1249.922962][T23137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1249.942422][T19272] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1249.942489][T19272] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 1249.953216][T23137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1249.998317][T19272] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.998347][T19272] usb 2-1: Product: syz [ 1249.998369][T19272] usb 2-1: Manufacturer: syz [ 1249.998382][T19272] usb 2-1: SerialNumber: syz [ 1250.345192][T18660] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 1250.361483][T18660] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1250.376438][T12974] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1250.391485][T18660] usb 6-1: USB disconnect, device number 45 [ 1250.416177][T18660] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1250.417956][T18660] ftdi_sio 6-1:0.0: device disconnected [ 1250.451929][T11050] udevd[11050]: setting owner of /dev/bus/usb/006/045 to uid=0, gid=0 failed: No such file or directory [ 1250.526951][T12974] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1250.527696][T12974] usb 5-1: config 0 has no interfaces? [ 1250.531715][T12974] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1250.531734][T12974] usb 5-1: Product: syz [ 1250.531745][T12974] usb 5-1: Manufacturer: syz [ 1250.582424][T12974] usb 5-1: config 0 descriptor?? [ 1250.807265][T12974] usb 5-1: USB disconnect, device number 87 [ 1251.514031][T18660] usb 4-1: new full-speed USB device number 94 using dummy_hcd [ 1251.664655][T18660] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1251.666666][T18660] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1251.698939][T18660] usb 4-1: config 0 descriptor?? [ 1251.720980][T18660] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1251.727966][ T5695] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1251.886778][ T5695] usb 5-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 1251.891676][ T5695] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1251.891788][ T5695] usb 5-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 1251.928868][ T5695] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1251.928905][ T5695] usb 5-1: Product: syz [ 1251.928917][ T5695] usb 5-1: Manufacturer: syz [ 1251.928949][ T5695] usb 5-1: SerialNumber: syz [ 1251.991977][ T5695] usb-storage 5-1:1.0: USB Mass Storage device detected [ 1252.039312][ T5695] scsi host1: usb-storage 5-1:1.0 [ 1252.266056][ T5695] usb 5-1: USB disconnect, device number 88 [ 1252.301422][T23171] bridge0: port 1(bridge_slave_0) entered disabled state [ 1252.330520][T18660] gp8psk: usb in 128 operation failed. [ 1252.331006][T18660] gp8psk: usb in 137 operation failed. [ 1252.331023][T18660] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1252.332271][T18660] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1252.372566][T18660] usb 4-1: USB disconnect, device number 94 [ 1252.470699][T19272] usb 2-1: unit 4 not found! [ 1252.470734][T19272] usb 2-1: unit 0 not found! [ 1252.522019][T19272] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1252.567634][T19272] usb 2-1: unit 4 not found! [ 1252.567652][T19272] usb 2-1: unit 0 not found! [ 1252.612943][T19272] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1252.629632][T19272] usb 2-1: unit 4 not found! [ 1252.629651][T19272] usb 2-1: unit 0 not found! [ 1252.652551][T12974] usb 3-1: USB disconnect, device number 100 [ 1252.665266][T12974] idmouse 3-1:1.0: disconnected [ 1252.965706][T19272] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 1252.986424][T19272] usb 2-1: USB disconnect, device number 127 [ 1253.058274][T15741] udevd[15741]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1253.123286][T23183] ipvlan2: entered promiscuous mode [ 1253.198236][T23183] team0: Device ipvlan2 failed to register rx_handler [ 1253.480599][T23197] FAULT_INJECTION: forcing a failure. [ 1253.480599][T23197] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1253.480637][T23197] CPU: 1 UID: 0 PID: 23197 Comm: syz.4.5446 Tainted: G L syzkaller #0 PREEMPT(full) [ 1253.480666][T23197] Tainted: [L]=SOFTLOCKUP [ 1253.480675][T23197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1253.480688][T23197] Call Trace: [ 1253.480698][T23197] [ 1253.480708][T23197] dump_stack_lvl+0xe8/0x150 [ 1253.480743][T23197] should_fail_ex+0x410/0x560 [ 1253.480776][T23197] _copy_to_user+0x31/0xb0 [ 1253.480811][T23197] simple_read_from_buffer+0xe1/0x170 [ 1253.480868][T23197] proc_fail_nth_read+0x1bb/0x230 [ 1253.480893][T23197] ? common_file_perm+0x20e/0x2b0 [ 1253.480929][T23197] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1253.480958][T23197] ? rw_verify_area+0x24a/0x4c0 [ 1253.480996][T23197] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1253.481020][T23197] vfs_read+0x213/0xa80 [ 1253.481048][T23197] ? __pfx___mutex_lock+0x10/0x10 [ 1253.481084][T23197] ? __pfx_vfs_read+0x10/0x10 [ 1253.481108][T23197] ? __fget_files+0x2a/0x420 [ 1253.481146][T23197] ? __fget_files+0x3a2/0x420 [ 1253.481180][T23197] ? __fget_files+0x2a/0x420 [ 1253.481222][T23197] ksys_read+0x150/0x270 [ 1253.481248][T23197] ? __pfx_ksys_read+0x10/0x10 [ 1253.481283][T23197] do_syscall_64+0x166/0x520 [ 1253.481315][T23197] ? trace_irq_disable+0x3b/0x140 [ 1253.481340][T23197] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1253.481374][T23197] ? clear_bhb_loop+0x70/0xc0 [ 1253.481413][T23197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1253.481436][T23197] RIP: 0033:0x7f922495e9ce [ 1253.481456][T23197] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1253.481476][T23197] RSP: 002b:00007f9225829fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1253.481501][T23197] RAX: ffffffffffffffda RBX: 00007f922582a6c0 RCX: 00007f922495e9ce [ 1253.481518][T23197] RDX: 000000000000000f RSI: 00007f922582a0a0 RDI: 0000000000000005 [ 1253.481533][T23197] RBP: 00007f922582a090 R08: 0000000000000000 R09: 0000000000000000 [ 1253.481548][T23197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1253.481562][T23197] R13: 00007f9224c26038 R14: 00007f9224c25fa0 R15: 00007f9224d4fa48 [ 1253.481599][T23197] [ 1253.488516][T23196] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5444'. [ 1253.974769][ T5673] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1254.058281][T23213] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5450'. [ 1254.124059][ T5673] usb 2-1: Using ep0 maxpacket: 16 [ 1254.125792][ T5673] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1254.126955][ T5673] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1254.126989][ T5673] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1254.127034][ T5673] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1254.129551][ T5673] usb 2-1: config 0 descriptor?? [ 1254.134100][T19272] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1254.284666][T19272] usb 5-1: New USB device found, idVendor=0af0, idProduct=6711, bcdDevice= 0.00 [ 1254.285937][T19272] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1254.285973][T19272] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1254.285989][T19272] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1254.286006][T19272] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1254.290237][T19272] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1254.290289][T19272] usb 5-1: Product: syz [ 1254.290306][T19272] usb 5-1: Manufacturer: syz [ 1254.453071][T19272] hso 5-1:1.0: Can't find INT IN endpoint [ 1254.735278][T23223] kAFS: unable to lookup cell '(G|' [ 1255.244030][T18660] usb 3-1: new low-speed USB device number 101 using dummy_hcd [ 1255.245118][ T5673] microsoft 0003:045E:07DA.003C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1255.328943][T23253] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5461'. [ 1255.406281][T18660] usb 3-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32 [ 1255.409747][T18660] usb 3-1: config 0 has an invalid interface number: 244 but max is 0 [ 1255.409777][T18660] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1255.409797][T18660] usb 3-1: config 0 has no interface number 0 [ 1255.409839][T18660] usb 3-1: config 0 interface 244 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1255.409863][T18660] usb 3-1: config 0 interface 244 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1255.409888][T18660] usb 3-1: config 0 interface 244 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 8 [ 1255.409918][T18660] usb 3-1: config 0 interface 244 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 8 [ 1255.409946][T18660] usb 3-1: config 0 interface 244 altsetting 0 endpoint 0x8 is Bulk; changing to Interrupt [ 1255.409969][T18660] usb 3-1: config 0 interface 244 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1255.409993][T18660] usb 3-1: config 0 interface 244 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 15 [ 1255.410036][T18660] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1255.497103][T18660] usb 3-1: config 0 descriptor?? [ 1255.498072][T23237] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1255.683481][ T5680] usb 5-1: USB disconnect, device number 89 [ 1255.711714][T18660] usb 3-1: string descriptor 0 read error: -71 [ 1255.724509][T18660] cypress_m8 3-1:0.244: DeLorme Earthmate USB converter detected [ 1255.755383][T18660] earthmate ttyUSB0: required endpoint is missing [ 1255.807333][T18660] usb 3-1: USB disconnect, device number 101 [ 1255.842114][T18660] cypress_m8 3-1:0.244: device disconnected [ 1255.944010][ T5673] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1256.094804][ T5673] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1256.097898][ T5673] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.097923][ T5673] usb 6-1: Product: syz [ 1256.097938][ T5673] usb 6-1: Manufacturer: syz [ 1256.097951][ T5673] usb 6-1: SerialNumber: syz [ 1256.100498][ T5673] usb 6-1: config 0 descriptor?? [ 1256.193851][ T5680] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1256.344840][ T5680] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1256.348433][ T5680] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1256.348560][ T5680] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 1256.350344][ T5680] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1256.350374][ T5680] usb 5-1: SerialNumber: syz [ 1256.417940][ T5680] cdc_ether 5-1:1.0: missing cdc ether descriptor [ 1256.628741][T23277] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5471'. [ 1256.634265][ T8082] usb 5-1: USB disconnect, device number 90 [ 1256.674033][T18660] usb 2-1: USB disconnect, device number 2 [ 1256.775121][T23281] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5473'. [ 1256.937902][T23285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1256.938329][T23285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1257.052279][T23292] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5477'. [ 1257.133232][ T5673] usb 6-1: USB disconnect, device number 46 [ 1257.553890][ T5680] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1257.604593][T18660] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1257.704760][ T5680] usb 5-1: Using ep0 maxpacket: 8 [ 1257.705466][ T5680] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1257.706758][ T5680] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1257.706810][ T5680] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1257.706836][ T5680] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1257.706863][ T5680] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1257.706890][ T5680] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1257.706936][ T5680] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1257.778834][T18660] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1257.800050][T18660] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1257.826782][T18660] usb 3-1: config 0 descriptor?? [ 1258.033922][ T5680] usb 5-1: usb_control_msg returned -32 [ 1258.033969][ T5680] usbtmc 5-1:16.0: can't read capabilities [ 1258.063211][T23301] syzkaller0: left promiscuous mode [ 1258.063233][T23301] syzkaller0: left allmulticast mode [ 1258.091528][T18660] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1258.353611][T18660] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 1258.353656][T18660] [drm] Initialized udl on minor 1 [ 1258.442045][T23320] usbtmc 5-1:16.0: control status returned 0 [ 1258.510884][T23304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1258.511376][T23304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1258.552756][T23324] netlink: 6 bytes leftover after parsing attributes in process `syz.5.5490'. [ 1258.615255][T23324] syzkaller1: entered promiscuous mode [ 1258.615277][T23324] syzkaller1: entered allmulticast mode [ 1258.646714][T20450] usb 5-1: USB disconnect, device number 91 [ 1258.836322][T23331] ip_tables: iptables: counters copy to user failed while replacing table [ 1258.931058][T23331] FAULT_INJECTION: forcing a failure. [ 1258.931058][T23331] name failslab, interval 1, probability 0, space 0, times 0 [ 1258.931097][T23331] CPU: 1 UID: 0 PID: 23331 Comm: syz.3.5487 Tainted: G L syzkaller #0 PREEMPT(full) [ 1258.931127][T23331] Tainted: [L]=SOFTLOCKUP [ 1258.931137][T23331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1258.931151][T23331] Call Trace: [ 1258.931164][T23331] [ 1258.931175][T23331] dump_stack_lvl+0xe8/0x150 [ 1258.931223][T23331] should_fail_ex+0x410/0x560 [ 1258.931253][T23331] ? __alloc_skb+0x1db/0x7a0 [ 1258.931280][T23331] should_failslab+0xa8/0x100 [ 1258.931308][T23331] ? __alloc_skb+0x1db/0x7a0 [ 1258.931334][T23331] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1258.931357][T23331] ? __alloc_skb+0x18d/0x7a0 [ 1258.931385][T23331] ? __alloc_skb+0x1db/0x7a0 [ 1258.931425][T23331] __alloc_skb+0x1db/0x7a0 [ 1258.931457][T23331] alloc_skb_with_frags+0xc6/0x760 [ 1258.931581][T23331] sock_alloc_send_pskb+0x878/0x990 [ 1258.931620][T23331] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1258.931652][T23331] ? iov_iter_advance+0x8b/0x1c0 [ 1258.931681][T23331] tun_get_user+0x8fb/0x44d0 [ 1258.931721][T23331] ? aa_file_perm+0x18b/0x15f0 [ 1258.931757][T23331] ? aa_file_perm+0x4ed/0x15f0 [ 1258.931787][T23331] ? __pfx_tun_get_user+0x10/0x10 [ 1258.931815][T23331] ? __lock_acquire+0x747/0x2de0 [ 1258.931840][T23331] ? kstrtoull+0x137/0x1d0 [ 1258.931869][T23331] ? ref_tracker_alloc+0x341/0x4b0 [ 1258.931896][T23331] ? lock_acquire+0x115/0x350 [ 1258.931918][T23331] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1258.931948][T23331] ? lock_acquire+0x115/0x350 [ 1258.931970][T23331] ? tun_get+0x1c/0x2f0 [ 1258.931999][T23331] ? tun_get+0x1c/0x2f0 [ 1258.932023][T23331] ? tun_get+0x1c/0x2f0 [ 1258.932070][T23331] tun_chr_write_iter+0x113/0x200 [ 1258.932100][T23331] vfs_write+0x612/0xba0 [ 1258.932130][T23331] ? __pfx_vfs_write+0x10/0x10 [ 1258.932161][T23331] ? fdget_pos+0x18e/0x320 [ 1258.932196][T23331] ? fdget_pos+0x196/0x320 [ 1258.932233][T23331] ksys_write+0x150/0x270 [ 1258.932257][T23331] ? __pfx_ksys_write+0x10/0x10 [ 1258.932290][T23331] do_syscall_64+0x166/0x520 [ 1258.932322][T23331] ? trace_irq_disable+0x3b/0x140 [ 1258.932346][T23331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1258.932369][T23331] ? clear_bhb_loop+0x70/0xc0 [ 1258.932396][T23331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1258.932425][T23331] RIP: 0033:0x7fb93699e199 [ 1258.932445][T23331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1258.932464][T23331] RSP: 002b:00007fb93788b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1258.932488][T23331] RAX: ffffffffffffffda RBX: 00007fb936c25fa0 RCX: 00007fb93699e199 [ 1258.932506][T23331] RDX: 0000000000000fce RSI: 0000200000001200 RDI: 0000000000000004 [ 1258.932520][T23331] RBP: 00007fb93788b090 R08: 0000000000000000 R09: 0000000000000000 [ 1258.932535][T23331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1258.932549][T23331] R13: 00007fb936c26038 R14: 00007fb936c25fa0 R15: 00007fb936d4fa48 [ 1258.932582][T23331] [ 1259.419465][T23340] tipc: Enabled bearer , priority 0 [ 1259.776705][T23355] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5500'. [ 1260.267317][T23351] Cannot find del_set index 0 as target [ 1260.390781][T23372] FAULT_INJECTION: forcing a failure. [ 1260.390781][T23372] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1260.390820][T23372] CPU: 0 UID: 0 PID: 23372 Comm: syz.1.5505 Tainted: G L syzkaller #0 PREEMPT(full) [ 1260.390852][T23372] Tainted: [L]=SOFTLOCKUP [ 1260.390859][T23372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1260.390869][T23372] Call Trace: [ 1260.390875][T23372] [ 1260.390882][T23372] dump_stack_lvl+0xe8/0x150 [ 1260.390929][T23372] should_fail_ex+0x410/0x560 [ 1260.390962][T23372] prepare_alloc_pages+0x223/0x600 [ 1260.390995][T23372] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 1260.391028][T23372] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1260.391059][T23372] ? __pfx_policy_nodemask+0x10/0x10 [ 1260.391088][T23372] ? __get_vm_area_node+0x155/0x2f0 [ 1260.391118][T23372] ? __vmalloc_node_range_noprof+0x343/0x1540 [ 1260.391138][T23372] ? __vmalloc_noprof+0xd2/0x120 [ 1260.391161][T23372] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 1260.391180][T23372] ? bpf_prog_alloc+0x3c/0x1a0 [ 1260.391218][T23372] ? __sys_bpf+0xd0d/0xd90 [ 1260.391243][T23372] ? __x64_sys_bpf+0xba/0xd0 [ 1260.391264][T23372] ? do_syscall_64+0x166/0x520 [ 1260.391293][T23372] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1260.391324][T23372] alloc_pages_mpol+0x21e/0x390 [ 1260.391350][T23372] alloc_pages_noprof+0xb1/0x2b0 [ 1260.391391][T23372] get_free_pages_noprof+0xf/0x80 [ 1260.391418][T23372] __kasan_populate_vmalloc+0x38/0x1c0 [ 1260.391440][T23372] ? do_raw_spin_unlock+0xf5/0x200 [ 1260.391478][T23372] alloc_vmap_area+0xd1a/0x1420 [ 1260.391512][T23372] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1260.391553][T23372] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 1260.391578][T23372] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 1260.391601][T23372] ? __get_vm_area_node+0x155/0x2f0 [ 1260.391638][T23372] __get_vm_area_node+0x200/0x2f0 [ 1260.391667][T23372] __vmalloc_node_range_noprof+0x343/0x1540 [ 1260.391705][T23372] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 1260.391733][T23372] ? __lock_acquire+0x747/0x2de0 [ 1260.391782][T23372] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1260.391805][T23372] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 1260.391823][T23372] __vmalloc_noprof+0xd2/0x120 [ 1260.391865][T23372] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 1260.391894][T23372] bpf_prog_alloc_no_stats+0x47/0x560 [ 1260.391918][T23372] ? bpf_prog_alloc+0x2a/0x1a0 [ 1260.391948][T23372] bpf_prog_alloc+0x3c/0x1a0 [ 1260.391968][T23372] bpf_prog_load+0x7f8/0x1c20 [ 1260.391993][T23372] ? __pfx_bpf_prog_load+0x10/0x10 [ 1260.392051][T23372] __sys_bpf+0xd0d/0xd90 [ 1260.392084][T23372] ? __pfx___sys_bpf+0x10/0x10 [ 1260.392119][T23372] ? __fget_files+0x2a/0x420 [ 1260.392165][T23372] ? ksys_write+0x242/0x270 [ 1260.392207][T23372] ? __pfx_ksys_write+0x10/0x10 [ 1260.392234][T23372] __x64_sys_bpf+0xba/0xd0 [ 1260.392259][T23372] do_syscall_64+0x166/0x520 [ 1260.392292][T23372] ? trace_irq_disable+0x3b/0x140 [ 1260.392308][T23372] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1260.392324][T23372] ? clear_bhb_loop+0x70/0xc0 [ 1260.392365][T23372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1260.392387][T23372] RIP: 0033:0x7ff17a79e199 [ 1260.392406][T23372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1260.392430][T23372] RSP: 002b:00007ff17b728028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1260.392448][T23372] RAX: ffffffffffffffda RBX: 00007ff17aa25fa0 RCX: 00007ff17a79e199 [ 1260.392459][T23372] RDX: 0000000000000058 RSI: 000020000000e000 RDI: 0000000000000005 [ 1260.392469][T23372] RBP: 00007ff17b728090 R08: 0000000000000000 R09: 0000000000000000 [ 1260.392479][T23372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1260.392505][T23372] R13: 00007ff17aa26038 R14: 00007ff17aa25fa0 R15: 00007ff17ab4fa48 [ 1260.392539][T23372] [ 1260.476618][T23372] syz.1.5505: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1260.476700][T23372] CPU: 0 UID: 0 PID: 23372 Comm: syz.1.5505 Tainted: G L syzkaller #0 PREEMPT(full) [ 1260.476732][T23372] Tainted: [L]=SOFTLOCKUP [ 1260.476742][T23372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1260.476755][T23372] Call Trace: [ 1260.476764][T23372] [ 1260.476774][T23372] dump_stack_lvl+0xe8/0x150 [ 1260.476821][T23372] warn_alloc+0x24d/0x270 [ 1260.476849][T23372] ? lockdep_hardirqs_on+0x7b/0x110 [ 1260.476885][T23372] ? __pfx_warn_alloc+0x10/0x10 [ 1260.476908][T23372] ? kfree+0x1c5/0x650 [ 1260.476935][T23372] ? __get_vm_area_node+0x219/0x2f0 [ 1260.476977][T23372] __vmalloc_node_range_noprof+0x36b/0x1540 [ 1260.477002][T23372] ? __lock_acquire+0x747/0x2de0 [ 1260.477053][T23372] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1260.477086][T23372] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 1260.477117][T23372] __vmalloc_noprof+0xd2/0x120 [ 1260.477139][T23372] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 1260.477171][T23372] bpf_prog_alloc_no_stats+0x47/0x560 [ 1260.477198][T23372] ? bpf_prog_alloc+0x2a/0x1a0 [ 1260.477227][T23372] bpf_prog_alloc+0x3c/0x1a0 [ 1260.477257][T23372] bpf_prog_load+0x7f8/0x1c20 [ 1260.477298][T23372] ? __pfx_bpf_prog_load+0x10/0x10 [ 1260.477352][T23372] __sys_bpf+0xd0d/0xd90 [ 1260.477388][T23372] ? __pfx___sys_bpf+0x10/0x10 [ 1260.477443][T23372] ? __fget_files+0x2a/0x420 [ 1260.477512][T23372] ? ksys_write+0x242/0x270 [ 1260.477538][T23372] ? __pfx_ksys_write+0x10/0x10 [ 1260.477565][T23372] __x64_sys_bpf+0xba/0xd0 [ 1260.477592][T23372] do_syscall_64+0x166/0x520 [ 1260.477624][T23372] ? trace_irq_disable+0x3b/0x140 [ 1260.477654][T23372] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1260.477677][T23372] ? clear_bhb_loop+0x70/0xc0 [ 1260.477706][T23372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1260.477728][T23372] RIP: 0033:0x7ff17a79e199 [ 1260.477750][T23372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1260.477771][T23372] RSP: 002b:00007ff17b728028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1260.477801][T23372] RAX: ffffffffffffffda RBX: 00007ff17aa25fa0 RCX: 00007ff17a79e199 [ 1260.477819][T23372] RDX: 0000000000000058 RSI: 000020000000e000 RDI: 0000000000000005 [ 1260.477834][T23372] RBP: 00007ff17b728090 R08: 0000000000000000 R09: 0000000000000000 [ 1260.477849][T23372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1260.477864][T23372] R13: 00007ff17aa26038 R14: 00007ff17aa25fa0 R15: 00007ff17ab4fa48 [ 1260.477899][T23372] [ 1260.592372][T23372] Mem-Info: [ 1260.592418][T23372] active_anon:26385 inactive_anon:11 isolated_anon:0 [ 1260.592418][T23372] active_file:2983 inactive_file:58873 isolated_file:0 [ 1260.592418][T23372] unevictable:0 dirty:21 writeback:0 [ 1260.592418][T23372] slab_reclaimable:11138 slab_unreclaimable:102094 [ 1260.592418][T23372] mapped:33211 shmem:16988 pagetables:1971 [ 1260.592418][T23372] sec_pagetables:0 bounce:0 [ 1260.592418][T23372] kernel_misc_reclaimable:0 [ 1260.592418][T23372] free:1261810 free_pcp:11971 free_cma:0 [ 1260.592657][T23372] Node 0 active_anon:105540kB inactive_anon:44kB active_file:11932kB inactive_file:235288kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:132844kB dirty:84kB writeback:0kB shmem:67952kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:12288kB kernel_stack:13636kB pagetables:7740kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1260.592886][T23372] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1260.593146][T23372] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1260.599625][T23372] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 1260.599889][T23372] Node 0 DMA32 free:1077208kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:105540kB inactive_anon:44kB active_file:11932kB inactive_file:235288kB unevictable:0kB writepending:116kB zspages:492kB present:3129332kB managed:2546824kB mlocked:0kB bounce:0kB free_pcp:47128kB local_pcp:24648kB free_cma:0kB [ 1260.600131][T23372] lowmem_reserve[]: 0 0 0 0 0 [ 1260.621176][T23372] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1260.621419][T23372] lowmem_reserve[]: 0 0 0 0 0 [ 1260.621581][T23372] Node 1 Normal free:3954544kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:756kB local_pcp:756kB free_cma:0kB [ 1260.621844][T23372] lowmem_reserve[]: 0 0 0 0 0 [ 1260.622080][T23372] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1260.622628][T23372] Node 0 DMA32: 2804*4kB (UM) 1859*8kB (UME) 729*16kB (UME) 449*32kB (UME) 251*64kB (UME) 103*128kB (UME) 58*256kB (UME) 32*512kB (UME) 6*1024kB (UM) 2*2048kB (UE) 233*4096kB (UM) = 1077208kB [ 1260.646826][T23372] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1260.647442][T23372] Node 1 Normal: 4*4kB (UM) 4*8kB (UM) 10*16kB (UM) 7*32kB (UM) 7*64kB (UM) 4*128kB (UM) 4*256kB (UM) 3*512kB (UM) 2*1024kB (M) 2*2048kB (UM) 963*4096kB (UM) = 3954544kB [ 1260.648622][T23372] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1260.648688][T23372] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1260.714278][T23372] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1260.714344][T23372] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1260.714416][T23372] 78846 total pagecache pages [ 1260.714447][T23372] 6 pages in swap cache [ 1260.714469][T23372] Free swap = 124820kB [ 1260.714492][T23372] Total swap = 124996kB [ 1260.714516][T23372] 2097051 pages RAM [ 1260.714539][T23372] 0 pages HighMem/MovableOnly [ 1260.714574][T23372] 428729 pages reserved [ 1260.714597][T23372] 0 pages cma reserved [ 1261.595827][T23351] bond0: Unable to set down delay as MII monitoring is disabled [ 1261.903802][T23386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5507'. [ 1261.903832][T23386] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5507'. [ 1261.993791][T19272] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1262.143833][T19272] usb 4-1: Using ep0 maxpacket: 16 [ 1262.144776][T19272] usb 4-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 1262.146425][T19272] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1262.146490][T19272] usb 4-1: config 0 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1262.146521][T19272] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1262.146555][T19272] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1262.150763][T19272] usb 4-1: config 0 descriptor?? [ 1262.170306][T23351] bond0 (unregistering): Released all slaves [ 1262.235532][T19272] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1263.453847][T19272] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 1263.604649][T19272] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1263.609900][T19272] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.609922][T19272] usb 6-1: Product: syz [ 1263.609956][T19272] usb 6-1: Manufacturer: syz [ 1263.609973][T19272] usb 6-1: SerialNumber: syz [ 1263.653061][T19272] usb 6-1: config 0 descriptor?? [ 1263.706184][T18660] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffff92 [ 1263.706675][T18660] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1263.729562][ T5673] usb 4-1: USB disconnect, device number 95 [ 1263.733158][T20450] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1263.735533][T20450] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1263.736067][T20450] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1263.772002][T18660] usb 3-1: USB disconnect, device number 102 [ 1263.881207][T19272] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1264.158753][T23407] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5514'. [ 1264.934104][T23393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1264.939051][T23393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1265.128578][T23421] FAULT_INJECTION: forcing a failure. [ 1265.128578][T23421] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1265.128605][T23421] CPU: 0 UID: 0 PID: 23421 Comm: syz.1.5518 Tainted: G L syzkaller #0 PREEMPT(full) [ 1265.128628][T23421] Tainted: [L]=SOFTLOCKUP [ 1265.128634][T23421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1265.128644][T23421] Call Trace: [ 1265.128650][T23421] [ 1265.128657][T23421] dump_stack_lvl+0xe8/0x150 [ 1265.128683][T23421] should_fail_ex+0x410/0x560 [ 1265.128755][T23421] _copy_from_iter+0x1d3/0x1660 [ 1265.128784][T23421] ? __pfx__copy_from_iter+0x10/0x10 [ 1265.128802][T23421] ? __kmalloc_node_track_caller_noprof+0x2eb/0x720 [ 1265.128820][T23421] ? netlink_sendmsg+0x5d4/0xb40 [ 1265.128837][T23421] ? netlink_sendmsg+0x5d4/0xb40 [ 1265.128858][T23421] ? netlink_sendmsg+0x650/0xb40 [ 1265.128874][T23421] ? skb_put+0x112/0x210 [ 1265.128899][T23421] netlink_sendmsg+0x6c0/0xb40 [ 1265.128958][T23421] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1265.128996][T23421] ? apparmor_socket_sendmsg+0x98/0x360 [ 1265.129043][T23421] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1265.129066][T23421] sock_sendmsg_nosec+0x13a/0x180 [ 1265.129095][T23421] ____sys_sendmsg+0x54e/0x850 [ 1265.129134][T23421] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1265.129177][T23421] ? import_iovec+0x73/0xa0 [ 1265.129210][T23421] ___sys_sendmsg+0x2a5/0x360 [ 1265.129242][T23421] ? __lock_acquire+0x747/0x2de0 [ 1265.129271][T23421] ? __pfx____sys_sendmsg+0x10/0x10 [ 1265.129338][T23421] ? __fget_files+0x2a/0x420 [ 1265.129371][T23421] ? __fget_files+0x3a2/0x420 [ 1265.129413][T23421] __x64_sys_sendmsg+0x1b1/0x290 [ 1265.129450][T23421] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1265.129505][T23421] do_syscall_64+0x166/0x520 [ 1265.129537][T23421] ? trace_irq_disable+0x3b/0x140 [ 1265.129561][T23421] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1265.129584][T23421] ? clear_bhb_loop+0x70/0xc0 [ 1265.129611][T23421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1265.129634][T23421] RIP: 0033:0x7ff17a79e199 [ 1265.129655][T23421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1265.129675][T23421] RSP: 002b:00007ff17b728028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1265.129698][T23421] RAX: ffffffffffffffda RBX: 00007ff17aa25fa0 RCX: 00007ff17a79e199 [ 1265.129714][T23421] RDX: 0000000004048010 RSI: 0000200000000080 RDI: 0000000000000003 [ 1265.129729][T23421] RBP: 00007ff17b728090 R08: 0000000000000000 R09: 0000000000000000 [ 1265.129743][T23421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1265.129757][T23421] R13: 00007ff17aa26038 R14: 00007ff17aa25fa0 R15: 00007ff17ab4fa48 [ 1265.129790][T23421] [ 1265.420734][T19272] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1265.423493][T19272] usb 6-1: USB disconnect, device number 47 [ 1265.633188][T23525] FAULT_INJECTION: forcing a failure. [ 1265.633188][T23525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1265.633225][T23525] CPU: 0 UID: 0 PID: 23525 Comm: syz.1.5519 Tainted: G L syzkaller #0 PREEMPT(full) [ 1265.633253][T23525] Tainted: [L]=SOFTLOCKUP [ 1265.633261][T23525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1265.633274][T23525] Call Trace: [ 1265.633293][T23525] [ 1265.633303][T23525] dump_stack_lvl+0xe8/0x150 [ 1265.633340][T23525] should_fail_ex+0x410/0x560 [ 1265.633371][T23525] _copy_from_user+0x2d/0xb0 [ 1265.633403][T23525] vmemdup_user+0x5e/0xd0 [ 1265.633430][T23525] path_setxattrat+0x2d0/0x450 [ 1265.633465][T23525] ? __pfx_path_setxattrat+0x10/0x10 [ 1265.633513][T23525] ? ksys_write+0x242/0x270 [ 1265.633539][T23525] ? __pfx_ksys_write+0x10/0x10 [ 1265.633563][T23525] __x64_sys_setxattr+0xbc/0xe0 [ 1265.633600][T23525] do_syscall_64+0x166/0x520 [ 1265.633632][T23525] ? trace_irq_disable+0x3b/0x140 [ 1265.633655][T23525] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1265.633677][T23525] ? clear_bhb_loop+0x70/0xc0 [ 1265.633706][T23525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1265.633729][T23525] RIP: 0033:0x7ff17a79e199 [ 1265.633748][T23525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1265.633767][T23525] RSP: 002b:00007ff17b728028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 1265.633790][T23525] RAX: ffffffffffffffda RBX: 00007ff17aa25fa0 RCX: 00007ff17a79e199 [ 1265.633806][T23525] RDX: 0000200000000500 RSI: 0000200000002a40 RDI: 0000200000002a00 [ 1265.633822][T23525] RBP: 00007ff17b728090 R08: 0000000000000000 R09: 0000000000000000 [ 1265.633837][T23525] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000001 [ 1265.633851][T23525] R13: 00007ff17aa26038 R14: 00007ff17aa25fa0 R15: 00007ff17ab4fa48 [ 1265.633882][T23525] [ 1266.243860][T19272] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1266.394592][T19272] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1266.395569][T19272] usb 4-1: config 0 has no interfaces? [ 1266.399039][T19272] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1266.399059][T19272] usb 4-1: Product: syz [ 1266.399070][T19272] usb 4-1: Manufacturer: syz [ 1266.439993][T19272] usb 4-1: config 0 descriptor?? [ 1266.676251][T19272] usb 4-1: USB disconnect, device number 96 [ 1267.026635][T18686] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1267.539327][T18686] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1267.751784][T23540] binder: 23538:23540 ioctl c018937e 200000000100 returned -22 [ 1267.804175][ T5631] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1267.821759][ T5631] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1267.835113][ T5631] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1267.842028][ T5631] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1267.849333][ T5631] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1267.937362][T18686] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1267.984229][T23553] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5529'. [ 1268.251836][T18686] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1269.465521][T19272] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1269.469997][T18686] bridge_slave_1: left allmulticast mode [ 1269.470021][T18686] bridge_slave_1: left promiscuous mode [ 1269.470211][T18686] bridge0: port 2(bridge_slave_1) entered disabled state [ 1269.476371][ T31] kauditd_printk_skb: 84 callbacks suppressed [ 1269.476428][ T31] audit: type=1326 audit(1791275678.569:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23581 comm="syz.3.5540" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93699e199 code=0x7ffc0000 [ 1269.535192][ T31] audit: type=1326 audit(1791275678.629:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23581 comm="syz.3.5540" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fb93699e199 code=0x7ffc0000 [ 1269.535248][ T31] audit: type=1326 audit(1791275678.629:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23581 comm="syz.3.5540" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93699e199 code=0x7ffc0000 [ 1269.535313][ T31] audit: type=1326 audit(1791275678.629:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23581 comm="syz.3.5540" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93699e199 code=0x7ffc0000 [ 1269.537961][ T31] audit: type=1326 audit(1791275678.639:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23581 comm="syz.3.5540" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fb93699e199 code=0x7ffc0000 [ 1269.538012][ T31] audit: type=1326 audit(1791275678.639:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23581 comm="syz.3.5540" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93699e199 code=0x7ffc0000 [ 1269.538057][ T31] audit: type=1326 audit(1791275678.639:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23581 comm="syz.3.5540" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93699e199 code=0x7ffc0000 [ 1269.542865][T18686] bridge_slave_0: left allmulticast mode [ 1269.542891][T18686] bridge_slave_0: left promiscuous mode [ 1269.543100][T18686] bridge0: port 1(bridge_slave_0) entered disabled state [ 1269.551432][ T31] audit: type=1326 audit(1791275678.639:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23581 comm="syz.3.5540" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fb93699e199 code=0x7ffc0000 [ 1269.551567][ T31] audit: type=1326 audit(1791275678.639:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23581 comm="syz.3.5540" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93699e199 code=0x7ffc0000 [ 1269.551681][ T31] audit: type=1326 audit(1791275678.639:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23581 comm="syz.3.5540" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93699e199 code=0x7ffc0000 [ 1269.655407][T20450] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1269.695142][T19272] usb 6-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00 [ 1269.813324][T19272] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.813352][T19272] usb 6-1: Product: syz [ 1269.813368][T19272] usb 6-1: Manufacturer: syz [ 1269.813381][T19272] usb 6-1: SerialNumber: syz [ 1269.816176][T20450] usb 5-1: Using ep0 maxpacket: 16 [ 1269.822081][T20450] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1269.830903][T20450] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1269.830987][T20450] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1269.831100][T20450] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.841907][ T8082] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1269.898401][T19272] ums_eneub6250 6-1:1.0: USB Mass Storage device detected [ 1269.902871][T20450] usb 5-1: config 0 descriptor?? [ 1269.935739][T23586] random: crng reseeded on system resumption [ 1269.944424][ T5617] Bluetooth: hci0: command tx timeout [ 1269.951709][T19272] scsi host1: usb-storage 6-1:1.0 [ 1270.008252][ T8082] usb 4-1: Using ep0 maxpacket: 16 [ 1270.014848][ T8082] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1270.017054][ T8082] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1270.026402][ T8082] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1270.026432][ T8082] usb 4-1: Product: syz [ 1270.026449][ T8082] usb 4-1: Manufacturer: syz [ 1270.026465][ T8082] usb 4-1: SerialNumber: syz [ 1270.070307][ T8082] usb 4-1: config 0 descriptor?? [ 1270.108085][T23570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1270.108534][T23570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1270.130836][ T8082] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1270.175821][ T8082] usb 4-1: Detected FT232R [ 1270.240076][T19272] ums_eneub6250 6-1:1.0: probe with driver ums_eneub6250 failed with error 3 [ 1270.300851][T23604] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5543'. [ 1270.342804][T23582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1270.343025][ T8082] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1270.348445][T23582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1270.571441][T18686] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1270.590156][T18686] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1270.604470][T18686] bond0 (unregistering): Released all slaves [ 1270.612228][T23606] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 1270.612257][T23606] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1270.638141][T23606] vhci_hcd vhci_hcd.0: Device attached [ 1270.773060][T18686] tipc: Left network mode [ 1270.810754][ T8082] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 1270.818095][ T8082] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1270.872043][ T8082] usb 4-1: USB disconnect, device number 97 [ 1270.897695][ T8082] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1270.898523][ T8082] ftdi_sio 4-1:0.0: device disconnected [ 1270.904910][T19272] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 1270.927655][ T8061] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1271.073823][ T8061] usb 2-1: Using ep0 maxpacket: 8 [ 1271.074670][ T8061] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1271.076243][ T8061] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1271.076273][ T8061] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1271.076294][ T8061] usb 2-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 1271.076334][ T8061] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.177127][T20450] microsoft 0003:045E:07DA.003D: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1271.350573][T18686] hsr_slave_0: left promiscuous mode [ 1271.352632][T18686] hsr_slave_1: left promiscuous mode [ 1271.353384][T18686] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1271.353401][T18686] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1271.366666][T18686] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1271.366727][T18686] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1271.411289][T18686] veth1_macvtap: left promiscuous mode [ 1271.411332][T18686] veth0_macvtap: left promiscuous mode [ 1271.411512][T18686] veth1_vlan: left promiscuous mode [ 1271.411582][T18686] veth0_vlan: left promiscuous mode [ 1271.421116][T23610] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5544'. [ 1271.421252][T23610] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5544'. [ 1271.831306][T18686] team0 (unregistering): Port device team_slave_1 removed [ 1271.859601][T18686] team0 (unregistering): Port device team_slave_0 removed [ 1272.024115][ T5617] Bluetooth: hci0: command tx timeout [ 1272.063048][T20450] usb 2-1: USB disconnect, device number 3 [ 1272.066725][ T5279] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1272.091992][T23612] usb 35-1: recv xbuf, 0 [ 1272.121187][T17827] vhci_hcd vhci_hcd.1: stop threads [ 1272.131507][T17827] vhci_hcd vhci_hcd.1: release socket [ 1272.142524][T17827] vhci_hcd vhci_hcd.1: disconnect device [ 1272.167154][T19272] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 1272.202385][T23552] bridge0: port 1(bridge_slave_0) entered blocking state [ 1272.202550][T23552] bridge0: port 1(bridge_slave_0) entered disabled state [ 1272.202673][T23552] bridge_slave_0: entered allmulticast mode [ 1272.229090][T23552] bridge_slave_0: entered promiscuous mode [ 1272.238711][T23552] bridge0: port 2(bridge_slave_1) entered blocking state [ 1272.238887][T23552] bridge0: port 2(bridge_slave_1) entered disabled state [ 1272.239017][T23552] bridge_slave_1: entered allmulticast mode [ 1272.240981][T23552] bridge_slave_1: entered promiscuous mode [ 1272.304402][T23552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1272.327576][T23552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1272.379036][ T5680] usb 6-1: USB disconnect, device number 48 [ 1272.497321][T12974] usb 5-1: USB disconnect, device number 92 [ 1272.535867][T23552] team0: Port device team_slave_0 added [ 1272.538479][T23552] team0: Port device team_slave_1 added [ 1272.590309][T23635] program syz.5.5546 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1272.663283][T23639] FAULT_INJECTION: forcing a failure. [ 1272.663283][T23639] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1272.663320][T23639] CPU: 0 UID: 0 PID: 23639 Comm: syz.3.5547 Tainted: G L syzkaller #0 PREEMPT(full) [ 1272.663347][T23639] Tainted: [L]=SOFTLOCKUP [ 1272.663356][T23639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1272.663369][T23639] Call Trace: [ 1272.663378][T23639] [ 1272.663388][T23639] dump_stack_lvl+0xe8/0x150 [ 1272.663422][T23639] should_fail_ex+0x410/0x560 [ 1272.663453][T23639] _copy_from_user+0x2d/0xb0 [ 1272.663484][T23639] get_sg_io_hdr+0xf6/0x850 [ 1272.663591][T23639] ? do_raw_write_lock+0x11d/0x260 [ 1272.663636][T23639] ? __pfx_get_sg_io_hdr+0x10/0x10 [ 1272.663668][T23639] ? sg_add_request+0x630/0x690 [ 1272.663718][T23639] sg_new_write+0x180/0x7f0 [ 1272.663743][T23639] ? __pfx_sg_new_write+0x10/0x10 [ 1272.663790][T23639] ? hook_file_ioctl+0x1f2/0x600 [ 1272.663820][T23639] sg_ioctl+0x10c8/0x21b0 [ 1272.663858][T23639] ? __pfx_sg_ioctl+0x10/0x10 [ 1272.663889][T23639] ? __fget_files+0x2a/0x420 [ 1272.663922][T23639] ? __fget_files+0x2a/0x420 [ 1272.663967][T23639] ? __fget_files+0x3a2/0x420 [ 1272.663997][T23639] ? __fget_files+0x2a/0x420 [ 1272.664032][T23639] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1272.664065][T23639] ? __pfx_sg_ioctl+0x10/0x10 [ 1272.664097][T23639] __se_sys_ioctl+0xfc/0x170 [ 1272.664124][T23639] do_syscall_64+0x166/0x520 [ 1272.664155][T23639] ? trace_irq_disable+0x3b/0x140 [ 1272.664178][T23639] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1272.664200][T23639] ? clear_bhb_loop+0x70/0xc0 [ 1272.664226][T23639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1272.664249][T23639] RIP: 0033:0x7fb93699e199 [ 1272.664270][T23639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1272.664289][T23639] RSP: 002b:00007fb93788b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1272.664313][T23639] RAX: ffffffffffffffda RBX: 00007fb936c25fa0 RCX: 00007fb93699e199 [ 1272.664330][T23639] RDX: 0000200000000000 RSI: 0000000000002285 RDI: 0000000000000003 [ 1272.664345][T23639] RBP: 00007fb93788b090 R08: 0000000000000000 R09: 0000000000000000 [ 1272.664359][T23639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1272.664373][T23639] R13: 00007fb936c26038 R14: 00007fb936c25fa0 R15: 00007fb936d4fa48 [ 1272.664407][T23639] [ 1272.931796][T23552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1272.931816][T23552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1272.931843][T23552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1272.965788][T23552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1272.965859][T23552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1272.965940][T23552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1273.075841][T12974] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1273.219667][T23552] hsr_slave_0: entered promiscuous mode [ 1273.221353][T23552] hsr_slave_1: entered promiscuous mode [ 1273.223911][T12974] usb 5-1: device descriptor read/64, error -71 [ 1273.246242][T23552] debugfs: 'hsr0' already exists in 'hsr' [ 1273.246269][T23552] Cannot create hsr debugfs directory [ 1273.343854][T19272] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1273.464467][T12974] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1273.519917][T19272] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1273.529633][T19272] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.529705][T19272] usb 6-1: Product: syz [ 1273.529746][T19272] usb 6-1: Manufacturer: syz [ 1273.529787][T19272] usb 6-1: SerialNumber: syz [ 1273.574579][T19272] usb 6-1: config 0 descriptor?? [ 1273.625332][T12974] usb 5-1: device descriptor read/64, error -71 [ 1273.625981][T23659] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5554'. [ 1273.748539][T12974] usb usb5-port1: attempt power cycle [ 1274.096882][T12974] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1274.114126][ T5617] Bluetooth: hci0: command tx timeout [ 1274.125848][T12974] usb 5-1: device descriptor read/8, error -71 [ 1274.373865][T12974] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1274.398615][T12974] usb 5-1: device descriptor read/8, error -71 [ 1274.504533][T12974] usb usb5-port1: unable to enumerate USB device [ 1274.670070][T23679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1274.670530][T23679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1274.694701][ T31] kauditd_printk_skb: 58 callbacks suppressed [ 1274.694727][ T31] audit: type=1326 audit(1791275683.799:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23676 comm="syz.3.5559" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93699e199 code=0x7ffc0000 [ 1274.695317][ T31] audit: type=1326 audit(1791275683.799:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23676 comm="syz.3.5559" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93699e199 code=0x7ffc0000 [ 1274.759645][ T31] audit: type=1326 audit(1791275683.809:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23676 comm="syz.3.5559" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fb93699e199 code=0x7ffc0000 [ 1274.759805][ T31] audit: type=1326 audit(1791275683.809:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23676 comm="syz.3.5559" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93699e199 code=0x7ffc0000 [ 1274.759936][ T31] audit: type=1326 audit(1791275683.809:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23676 comm="syz.3.5559" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93699e199 code=0x7ffc0000 [ 1274.760044][ T31] audit: type=1326 audit(1791275683.859:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23676 comm="syz.3.5559" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb93699e199 code=0x7ffc0000 [ 1274.760160][ T31] audit: type=1326 audit(1791275683.859:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23676 comm="syz.3.5559" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93699e199 code=0x7ffc0000 [ 1274.760272][ T31] audit: type=1326 audit(1791275683.859:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23676 comm="syz.3.5559" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93699e199 code=0x7ffc0000 [ 1274.760386][ T31] audit: type=1326 audit(1791275683.859:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23676 comm="syz.3.5559" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fb93699e199 code=0x7ffc0000 [ 1274.760486][ T31] audit: type=1326 audit(1791275683.859:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23676 comm="syz.3.5559" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93699e199 code=0x7ffc0000 [ 1275.047917][ T8061] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1275.193949][ T8061] usb 4-1: Using ep0 maxpacket: 16 [ 1275.194911][ T8061] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1275.200498][ T8061] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1275.236253][ T8061] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.236285][ T8061] usb 4-1: Product: syz [ 1275.236301][ T8061] usb 4-1: Manufacturer: syz [ 1275.236318][ T8061] usb 4-1: SerialNumber: syz [ 1275.250934][ T8061] usb 4-1: config 0 descriptor?? [ 1275.327022][ T8061] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1275.348718][ T8061] usb 4-1: Detected FT232R [ 1275.438461][ T8082] usb 6-1: USB disconnect, device number 49 [ 1275.440470][T23552] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1275.488589][T23552] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1275.492883][T23552] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1275.529443][T23552] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1275.538828][ T8061] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1275.563617][T23552] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1275.591423][T23677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1275.591977][T23677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1275.655784][T23552] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1275.687243][T23552] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1275.711035][T23552] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1275.927184][T23552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1275.953969][ T8061] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 1275.961702][ T8061] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1275.993954][ T8061] usb 4-1: USB disconnect, device number 98 [ 1276.013039][T23552] 8021q: adding VLAN 0 to HW filter on device team0 [ 1276.037151][T20167] bridge0: port 1(bridge_slave_0) entered blocking state [ 1276.037270][T20167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1276.041650][ T8061] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1276.042262][ T8061] ftdi_sio 4-1:0.0: device disconnected [ 1276.094449][T17827] bridge0: port 2(bridge_slave_1) entered blocking state [ 1276.094558][T17827] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1276.183813][ T5617] Bluetooth: hci0: command tx timeout [ 1276.312559][T23706] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5565'. [ 1276.426493][T23552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1276.622428][T23552] veth0_vlan: entered promiscuous mode [ 1276.680200][T23552] veth1_vlan: entered promiscuous mode [ 1276.748748][T23719] bridge0: port 4(gretap0) entered disabled state [ 1276.748928][T23719] bridge0: port 3(syz_tun) entered disabled state [ 1276.749187][T23719] bridge0: port 2(bridge_slave_1) entered disabled state [ 1276.799309][T23719] bridge0: entered allmulticast mode [ 1276.978539][T23552] veth0_macvtap: entered promiscuous mode [ 1277.007667][T23552] veth1_macvtap: entered promiscuous mode [ 1277.107651][T23552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1277.180003][T23552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1277.304823][T20167] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1277.305165][T20167] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1277.344760][T20167] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1277.347839][T18688] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1277.886529][T18688] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1277.886567][T18688] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1278.011660][T18688] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1278.011703][T18688] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1278.224103][T23739] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5572'. [ 1278.272785][T23744] FAULT_INJECTION: forcing a failure. [ 1278.272785][T23744] name failslab, interval 1, probability 0, space 0, times 0 [ 1278.272822][T23744] CPU: 1 UID: 0 PID: 23744 Comm: syz.5.5574 Tainted: G L syzkaller #0 PREEMPT(full) [ 1278.272851][T23744] Tainted: [L]=SOFTLOCKUP [ 1278.272859][T23744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1278.272872][T23744] Call Trace: [ 1278.272881][T23744] [ 1278.272891][T23744] dump_stack_lvl+0xe8/0x150 [ 1278.272926][T23744] should_fail_ex+0x410/0x560 [ 1278.272957][T23744] should_failslab+0xa8/0x100 [ 1278.272988][T23744] kmem_cache_alloc_lru_noprof+0xa7/0x5f0 [ 1278.273012][T23744] ? __d_alloc+0x37/0x6f0 [ 1278.273031][T23744] ? __d_alloc+0x37/0x6f0 [ 1278.273057][T23744] __d_alloc+0x37/0x6f0 [ 1278.273082][T23744] d_alloc_pseudo+0x21/0xc0 [ 1278.273104][T23744] alloc_path_pseudo+0x107/0x220 [ 1278.273161][T23744] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 1278.273198][T23744] alloc_file_pseudo+0xa8/0x1e0 [ 1278.273229][T23744] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1278.273255][T23744] ? security_inode_alloc+0xd5/0x310 [ 1278.273288][T23744] ? inode_init_always_gfp+0x994/0xd30 [ 1278.273322][T23744] sock_alloc_file+0xb8/0x2e0 [ 1278.273350][T23744] do_accept+0x3a0/0x750 [ 1278.273381][T23744] ? __pfx_do_accept+0x10/0x10 [ 1278.273432][T23744] __sys_accept4+0x139/0x230 [ 1278.273463][T23744] ? __pfx___sys_accept4+0x10/0x10 [ 1278.273490][T23744] ? __pfx_ksys_write+0x10/0x10 [ 1278.273518][T23744] __x64_sys_accept+0x7d/0x90 [ 1278.273547][T23744] do_syscall_64+0x166/0x520 [ 1278.273576][T23744] ? trace_irq_disable+0x3b/0x140 [ 1278.273599][T23744] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1278.273621][T23744] ? clear_bhb_loop+0x70/0xc0 [ 1278.273646][T23744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1278.273667][T23744] RIP: 0033:0x7feedd79e199 [ 1278.273686][T23744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1278.273703][T23744] RSP: 002b:00007feede5cb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 1278.273725][T23744] RAX: ffffffffffffffda RBX: 00007feedda25fa0 RCX: 00007feedd79e199 [ 1278.273740][T23744] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1278.273752][T23744] RBP: 00007feede5cb090 R08: 0000000000000000 R09: 0000000000000000 [ 1278.273765][T23744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1278.273776][T23744] R13: 00007feedda26038 R14: 00007feedda25fa0 R15: 00007feeddb4fa48 [ 1278.273807][T23744] [ 1278.565241][T23743] [ 1278.567633][T23743] ====================================================== [ 1278.574682][T23743] WARNING: possible circular locking dependency detected [ 1278.581750][T23743] syzkaller #0 Tainted: G L [ 1278.587747][T23743] ------------------------------------------------------ [ 1278.594787][T23743] syz.5.5574/23743 is trying to acquire lock: [ 1278.600867][T23743] ffff88802076e1e8 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x101/0xca0 [ 1278.612378][T23743] [ 1278.612378][T23743] but task is already holding lock: [ 1278.619753][T23743] ffff88802076f2e0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x24d/0x550 [ 1278.624508][T19272] usb 3-1: new full-speed USB device number 103 using dummy_hcd [ 1278.636502][T23743] [ 1278.636502][T23743] which lock already depends on the new lock. [ 1278.636502][T23743] [ 1278.646931][T23743] [ 1278.646931][T23743] the existing dependency chain (in reverse order) is: [ 1278.655968][T23743] [ 1278.655968][T23743] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 1278.663734][T23743] lock_sock_nested+0x41/0x100 [ 1278.669048][T23743] smc_listen_out+0xd4/0x3d0 [ 1278.674186][T23743] smc_listen_work+0x81d/0x1410 [ 1278.679603][T23743] process_scheduled_works+0xc3d/0x1630 [ 1278.685704][T23743] worker_thread+0xa47/0xfb0 [ 1278.690861][T23743] kthread+0x38b/0x480 [ 1278.695470][T23743] ret_from_fork+0x514/0xb70 [ 1278.700606][T23743] ret_from_fork_asm+0x1a/0x30 [ 1278.705935][T23743] [ 1278.705935][T23743] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 1278.716123][T23743] __lock_acquire+0x164c/0x2de0 [ 1278.721569][T23743] lock_acquire+0x115/0x350 [ 1278.726613][T23743] __flush_work+0x74c/0xca0 [ 1278.731681][T23743] __cancel_work_sync+0xbf/0x110 [ 1278.737176][T23743] smc_clcsock_release+0x60/0xf0 [ 1278.742786][T23743] __smc_release+0x64e/0x7c0 [ 1278.747950][T23743] smc_close_non_accepted+0xd5/0x1f0 [ 1278.753804][T23743] smc_close_active+0xb30/0xf20 [ 1278.759216][T23743] __smc_release+0x9c/0x7c0 [ 1278.764262][T23743] smc_release+0x2c5/0x550 [ 1278.769219][T23743] __sock_release+0xa0/0x1f0 [ 1278.774363][T23743] sock_close+0x1c/0x30 [ 1278.779072][T23743] __fput+0x418/0xa50 [ 1278.783611][T23743] task_work_run+0x1d9/0x270 [ 1278.788752][T23743] exit_to_user_mode_loop+0x204/0x770 [ 1278.794662][T23743] do_syscall_64+0x328/0x520 [ 1278.799795][T23743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1278.806320][T23743] [ 1278.806320][T23743] other info that might help us debug this: [ 1278.806320][T23743] [ 1278.816740][T23743] Possible unsafe locking scenario: [ 1278.816740][T23743] [ 1278.824207][T23743] CPU0 CPU1 [ 1278.829596][T23743] ---- ---- [ 1278.834973][T23743] lock(sk_lock-AF_SMC/1); [ 1278.839522][T23743] lock((work_completion)(&new_smc->smc_listen_work)); [ 1278.849015][T23743] lock(sk_lock-AF_SMC/1); [ 1278.856070][T23743] lock((work_completion)(&new_smc->smc_listen_work)); [ 1278.863040][T23743] [ 1278.863040][T23743] *** DEADLOCK *** [ 1278.863040][T23743] [ 1278.871216][T23743] locks held by syz.5.5574/23743: 3, last CPU#1: [ 1278.877581][T23743] #0: ffff888075d53040 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 1278.888157][T23743] #1: ffff88802076f2e0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x24d/0x550 [ 1278.897618][T23743] #2: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __flush_work+0x101/0xca0 [ 1278.906908][T23743] [ 1278.906908][T23743] stack backtrace: [ 1278.912825][T23743] CPU: 1 UID: 0 PID: 23743 Comm: syz.5.5574 Tainted: G L syzkaller #0 PREEMPT(full) [ 1278.923786][T23743] Tainted: [L]=SOFTLOCKUP [ 1278.928137][T23743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1278.938232][T23743] Call Trace: [ 1278.941525][T23743] [ 1278.944482][T23743] dump_stack_lvl+0xe8/0x150 [ 1278.949106][T23743] print_circular_bug+0x2e2/0x300 [ 1278.954154][T23743] check_noncircular+0x12f/0x150 [ 1278.959122][T23743] __lock_acquire+0x164c/0x2de0 [ 1278.964002][T23743] ? do_raw_spin_unlock+0xf5/0x200 [ 1278.969190][T23743] lock_acquire+0x115/0x350 [ 1278.973736][T23743] ? __flush_work+0x101/0xca0 [ 1278.978459][T23743] ? __flush_work+0x101/0xca0 [ 1278.983173][T23743] __flush_work+0x74c/0xca0 [ 1278.987710][T23743] ? __flush_work+0x101/0xca0 [ 1278.992414][T23743] ? __flush_work+0x101/0xca0 [ 1278.997120][T23743] ? __pfx___flush_work+0x10/0x10 [ 1279.002179][T23743] ? __pfx_wq_barrier_func+0x10/0x10 [ 1279.007531][T23743] ? __cancel_work_sync+0x5c/0x110 [ 1279.012693][T23743] __cancel_work_sync+0xbf/0x110 [ 1279.017667][T23743] smc_clcsock_release+0x60/0xf0 [ 1279.022644][T23743] __smc_release+0x64e/0x7c0 [ 1279.027612][T23743] smc_close_non_accepted+0xd5/0x1f0 [ 1279.032919][T23743] smc_close_active+0xb30/0xf20 [ 1279.037790][T23743] ? __pfx_sock_def_readable+0x10/0x10 [ 1279.043268][T23743] __smc_release+0x9c/0x7c0 [ 1279.047786][T23743] ? __local_bh_enable_ip+0xd6/0x140 [ 1279.053095][T23743] smc_release+0x2c5/0x550 [ 1279.057538][T23743] __sock_release+0xa0/0x1f0 [ 1279.062174][T23743] ? __pfx_sock_close+0x10/0x10 [ 1279.067050][T23743] sock_close+0x1c/0x30 [ 1279.071236][T23743] __fput+0x418/0xa50 [ 1279.075256][T23743] task_work_run+0x1d9/0x270 [ 1279.079877][T23743] ? __pfx_task_work_run+0x10/0x10 [ 1279.085022][T23743] exit_to_user_mode_loop+0x204/0x770 [ 1279.090431][T23743] ? rcu_is_watching+0x16/0xb0 [ 1279.095241][T23743] do_syscall_64+0x328/0x520 [ 1279.099867][T23743] ? trace_irq_disable+0x3b/0x140 [ 1279.104905][T23743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1279.110991][T23743] ? clear_bhb_loop+0x70/0xc0 [ 1279.115690][T23743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1279.121633][T23743] RIP: 0033:0x7feedd79e199 [ 1279.126087][T23743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1279.145715][T23743] RSP: 002b:00007feeddb4fba8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1279.154176][T23743] RAX: 0000000000000000 RBX: 00007feedda27da0 RCX: 00007feedd79e199 [ 1279.162163][T23743] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1279.170147][T23743] RBP: 00007feedda27da0 R08: 00007feedda26038 R09: 54c55d34f47ee157 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1279.178137][T23743] R10: 000000000003fda4 R11: 0000000000000246 R12: 0000000000138449 [ 1279.186123][T23743] R13: 00007feedda25fac R14: 0000000000138158 R15: 00007feeddb4fcb0 [ 1279.194128][T23743] [ 1279.344062][T19272] usb 3-1: device descriptor read/64, error -71 [ 1279.471428][T20808] tipc: Resetting bearer [ 1279.583828][T19272] usb 3-1: new full-speed USB device number 104 using dummy_hcd [ 1279.623935][ T5673] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1279.691363][T20808] tipc: Disabling bearer [ 1279.937307][T23750] syz_tun (unregistering): left allmulticast mode [ 1279.937391][T23750] bridge0: port 3(syz_tun) entered disabled state [ 1280.242586][T22296] tipc: Resetting bearer [ 1280.269139][T22296] tipc: Disabling bearer [ 1280.465901][T18580] syz_tun (unregistering): left allmulticast mode [ 1280.465929][T18580] syz_tun (unregistering): left promiscuous mode [ 1280.465982][T18580] bridge0: port 3(syz_tun) entered disabled state [ 1280.737846][T20167] bridge_slave_1: left allmulticast mode [ 1280.738008][T20167] bridge0: port 2(bridge_slave_1) entered disabled state [ 1280.739178][T20167] bridge_slave_0: left allmulticast mode [ 1280.739320][T20167] bridge0: port 1(bridge_slave_0) entered disabled state [ 1280.755867][T20167] lo: left allmulticast mode [ 1280.915170][T20167] tipc: Left network mode [ 1281.034999][T20167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1281.036954][T20167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1281.220434][T20167] team0 (unregistering): Port device team_slave_1 removed [ 1281.228219][T20167] team0 (unregistering): Port device team_slave_0 removed [ 1281.519660][ T5279] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1281.562367][T20167] IPVS: stop unused estimator thread 0... [ 1281.669704][T20167] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1281.669760][T20167] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1281.728206][T20167] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1281.728246][T20167] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1281.786735][T20167] team0: Port device netdevsim1 removed [ 1281.787934][T20167] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1281.787968][T20167] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1281.914471][ T5279] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1281.947878][T20167] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1281.980848][T20167] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1282.031562][T20167] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1282.079957][T20167] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1282.267028][ T5279] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1282.482602][T20167] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1282.542390][T20167] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1282.597371][T20167] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1282.601465][ T5279] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1282.660171][T20167] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1282.738238][T20167] gretap0: left allmulticast mode [ 1282.738265][T20167] gretap0: left promiscuous mode [ 1282.738444][T20167] bridge0: port 4(gretap0) entered disabled state [ 1282.757342][T20167] bridge_slave_1: left allmulticast mode [ 1282.757369][T20167] bridge_slave_1: left promiscuous mode [ 1282.757671][T20167] bridge0: port 2(bridge_slave_1) entered disabled state [ 1282.771106][T20167] bridge_slave_0: left allmulticast mode [ 1282.772301][T20167] bridge0: port 1(bridge_slave_0) entered disabled state [ 1282.794872][T20167] bridge_slave_1: left allmulticast mode [ 1282.794899][T20167] bridge_slave_1: left promiscuous mode [ 1282.795045][T20167] bridge0: port 2(bridge_slave_1) entered disabled state [ 1282.796722][T20167] bridge_slave_0: left allmulticast mode [ 1282.796743][T20167] bridge_slave_0: left promiscuous mode [ 1282.796871][T20167] bridge0: port 1(bridge_slave_0) entered disabled state [ 1282.842051][T20167] bridge_slave_1: left allmulticast mode [ 1282.842206][T20167] bridge0: port 2(bridge_slave_1) entered disabled state [ 1282.848713][T20167] bridge_slave_0: left allmulticast mode [ 1282.849092][T20167] bridge0: port 1(bridge_slave_0) entered disabled state [ 1282.871363][T20167] pimreg: left allmulticast mode [ 1282.880914][T20167] bridge_slave_1: left allmulticast mode [ 1282.880938][T20167] bridge_slave_1: left promiscuous mode [ 1282.881079][T20167] bridge0: port 2(bridge_slave_1) entered disabled state [ 1282.902340][T20167] bridge_slave_0: left allmulticast mode [ 1282.902365][T20167] bridge_slave_0: left promiscuous mode [ 1282.902516][T20167] bridge0: port 1(bridge_slave_0) entered disabled state [ 1283.192808][T20167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1283.205421][T20167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1283.206972][T20167] bond0 (unregistering): Released all slaves [ 1283.301689][T20167] bond0 (unregistering): Released all slaves [ 1283.312892][T20167] bond1 (unregistering): Released all slaves [ 1283.349692][T20167] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1283.376229][T20167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1283.377785][T20167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1283.378636][T20167] bond0 (unregistering): Released all slaves [ 1283.382647][T20167] bond1 (unregistering): Released all slaves [ 1283.421666][ T5279] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1283.488245][T20167] tipc: Left network mode [ 1283.488657][T20167] tipc: Left network mode [ 1283.839178][ T5279] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1283.931203][T20167] hsr_slave_0: left promiscuous mode [ 1283.931675][T20167] hsr_slave_1: left promiscuous mode [ 1283.932175][T20167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1283.932193][T20167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1283.932670][T20167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1283.932687][T20167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1283.941575][T20167] hsr_slave_0: left promiscuous mode [ 1283.947364][T20167] hsr_slave_1: left promiscuous mode [ 1283.947925][T20167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1283.947944][T20167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1283.950843][T20167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1283.950885][T20167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1284.018290][T20167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1284.018313][T20167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1284.018846][T20167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1284.018875][T20167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1284.022036][T20167] hsr_slave_0: left promiscuous mode [ 1284.022484][T20167] hsr_slave_1: left promiscuous mode [ 1284.023037][T20167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1284.023056][T20167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1284.023589][T20167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1284.023607][T20167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1284.070804][T20167] veth1_macvtap: left promiscuous mode [ 1284.070894][T20167] veth0_macvtap: left promiscuous mode [ 1284.071119][T20167] veth1_vlan: left promiscuous mode [ 1284.071224][T20167] veth0_vlan: left promiscuous mode [ 1284.095295][T20167] veth1_macvtap: left promiscuous mode [ 1284.095377][T20167] veth0_macvtap: left promiscuous mode [ 1284.095594][T20167] veth1_vlan: left promiscuous mode [ 1284.095737][T20167] veth0_vlan: left promiscuous mode [ 1284.138467][T20167] veth1_macvtap: left promiscuous mode [ 1284.138498][T20167] veth0_macvtap: left promiscuous mode [ 1284.138559][T20167] veth1_vlan: left promiscuous mode [ 1284.138603][T20167] veth0_vlan: left promiscuous mode [ 1284.438677][T20167] team0 (unregistering): Port device team_slave_1 removed [ 1284.442332][T20167] team0 (unregistering): Port device team_slave_0 removed [ 1284.561629][T20167] team0 (unregistering): Port device team_slave_1 removed [ 1284.573530][T20167] team0 (unregistering): Port device team_slave_0 removed [ 1284.742814][T20167] team0 (unregistering): Port device team_slave_1 removed [ 1284.754734][T20167] team0 (unregistering): Port device team_slave_0 removed [ 1284.867005][T20167] team0 (unregistering): Port device team_slave_1 removed [ 1284.870470][T20167] team0 (unregistering): Port device team_slave_0 removed [ 1284.956014][ T5279] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1285.325383][ T5279] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1285.710583][ T5279] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1285.778895][T20167] IPVS: stop unused estimator thread 0... [ 1285.779501][T20167] IPVS: stop unused estimator thread 0... [ 1286.041603][ T5279] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1286.288120][ T5279] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1286.546119][ T5279] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1286.811529][ T5279] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1287.067287][ T5279] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1287.327430][ T5279] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1287.584509][ T5279] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1287.874530][ T5279] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1288.130553][ T5279] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1288.390135][ T5279] 8021q: adding VLAN 0 to HW filter on device eth24