last executing test programs: 7.861516782s ago: executing program 4 (id=5919): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='cubic', 0x9) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000040)='FROZEN\x00', 0x7) r4 = openat$cgroup_procs(r2, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) r5 = syz_clone(0x50100, 0x0, 0xfffffffffffffe78, 0x0, 0x0, 0x0) write$cgroup_pid(r4, &(0x7f0000000180)=r5, 0x12) write$cgroup_freezer_state(r3, &(0x7f0000000080)='THAWED\x00', 0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) read(r6, 0x0, 0xff00) 7.592653141s ago: executing program 3 (id=5922): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x2c, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0}, {0x10, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffffe}]}, 0x2c}}, 0x4040004) (fail_nth: 3) 7.225428242s ago: executing program 3 (id=5923): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) (async, rerun: 64) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) (rerun: 64) syz_usb_connect$cdc_ecm(0x0, 0x145, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x133, 0x1, 0x1, 0x8, 0xf0, 0x4b, "", [{{0x9, 0x4, 0x0, 0xf, 0x2, 0x2, 0x6, 0x0, 0x40, {{0x7, 0x24, 0x6, 0x0, 0x0, "8e3f"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x24, 0x4, 0x3, 0x6a}, [@mbim={0xc, 0x24, 0x1b, 0x0, 0x3ff, 0x4, 0x41, 0x89, 0x3}, @mbim={0xc, 0x24, 0x1b, 0x8, 0xff7f, 0xcb, 0x1, 0xfff9, 0x1}, @mdlm_detail={0xb0, 0x24, 0x13, 0x8, "fbc2e19961400ed78fea2be9517f576b404a3743799ea32838af7feb36946ebc1e1cca53174819c77c4a07e7cfa267fe7e7d1d02fa3c8c85797bf6cb8ac8e52cfd8c8c5467cd3f404c3536a04ff21ee46e5b9ec23f349d374a89208f2e71b4a90d2a21c71b61b64555773e16d12d91e62837bc30ebf64f38c406ad320fc42833e0d67f9809ff1d56649cc18fe9c91341e0fab42af84939c24c27325230bca361c4b1bbe88b178cba121dbd22"}, @mbim_extended={0x8, 0x24, 0x1c, 0x7b0, 0x5, 0xf}, @mbim_extended={0x8, 0x24, 0x1c, 0x6, 0xff, 0x7ff}, @mdlm={0x15, 0x24, 0x12, 0x40}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0xc, 0x7}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0xff, 0x7, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xf, 0x9, 0x80}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x87, 0xaa, 0x81, 0x10, 0x6}, 0x38, &(0x7f00000001c0)={0x5, 0xf, 0x38, 0x3, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "ec770c1966f36f0da4bdfa2b067b3314"}, @ssp_cap={0x1c, 0x10, 0xa, 0x1c, 0x4, 0x1ff, 0x0, 0x40, [0xffc0c0, 0x3f0f, 0xcf, 0x1fec0c0]}]}, 0x7, [{0x3a, &(0x7f0000000240)=@string={0x3a, 0x3, "828aaeffc1cb491e884601acb3af03e555d104bea0e1c3dfea8544d91196cefe507cddf8b5e6f5d303abec824149b75ba4e6368710de7f08"}}, {0x9a, &(0x7f0000000280)=@string={0x9a, 0x3, "113281b73a16959f227cf7c7ee69d402985aec616f46f6897629c4265e7bdfd18a7fac1f574f32fe592b88ea95279a75c9fae4b256ebc6a8abe9cd12887181bf60438e2a628195ebafb2ae5a321e414fad71235f3a7d379dbbb8905a0ba1236c1de2bb5cc8c302bf247d9a308a58adf5b468af01d83191177417854dcf72cffbff54b01b7b4de556f0ccb26bd7b3b0d7306663ffbd1766d4"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1809}}, {0x37, &(0x7f0000000400)=@string={0x37, 0x3, "82506dfe4aa3734d344670c26e1331c8e140c6b2f4852ee5c96ce2f394c5bd5ba7935805cdbad4371f50fabbd231542ccd7aca649c"}}, {0xab, &(0x7f0000000440)=@string={0xab, 0x3, "b3f071d1ad7c954181c54e8941e3a5e7f5b9fb368bc201da52b678fa4ad2489fc8481c0ce086d2d50a7cba79873ec7f152389a29b21b90ea2371791b8163b4ab0d8292c3bf116e88ea7a9005b9c7c9cd4b1c6e0ae31fa73e6efe03e6e8637c5e59434491513e9e485740551f07ff921934c3455a49122ac680a15441bf3fd74ba28cb838175836cd86bf6e340367c1bc991d8aed69a3c88c33641e41128cde507385a4961445f23119"}}]}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x38, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}]]}, 0x38}}, 0xc0c4) (async) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000001ac0)={r2, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x14a1ff, 0x0, 0x0, 0x1a, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca4f837026d1a8554feac911e1cd130e04d528539f3d3289737f0374c72a964a02447a75df8a6ca7f040000000000000072fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x9, 0x400]}}) (async) ioctl$LOOP_SET_STATUS(r6, 0x4c02, &(0x7f0000000480)={0x0, {}, 0x0, {}, 0x7, 0x9, 0x10, 0x10, "6972a16387920cfad256559f58af1ac31147acbd9b98f15a744d3c03497fc60c69384e4c90a0ed09e1b7f957fb401fa9e05136d2dd259e85fba5a108da06e82d", "7ae7cae7925fbe765218e6de64227243f96d9685d5016b32c02336b2cae3a91e", [0x0, 0x401]}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200)={0x40, 0x30, 0x1, "02"}, 0x0, 0x0, 0x0, 0x0}) 5.820667082s ago: executing program 1 (id=5932): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12012000f1048108cd060202d4921f01000109021b1901000000f30904150001da0900000905", @ANYBLOB="17af"], 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x11, @empty, 0x8000, 0x8000, 'none\x00', 0x10, 0x2}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r3, r4], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000440)={&(0x7f0000000240)=[r3, r4], 0x2}) sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x10}, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f00000002c0)={0x0, 0x3}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000380)={r6, 0xfffffff2}, &(0x7f0000000400)=0x8) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r7, 0x7a9, 0x0) r8 = socket(0x11, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f0000000000)=0xffffffff) ioctl$PPPIOCSPASS(r10, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0x48, 0xff, 0x38, 0xd}, {0x6, 0xfd}]}) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r9, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0x90, r11, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x90}, 0x1, 0x0, 0x0, 0x4887}, 0x40088c1) ioctl$PPPIOCSDEBUG(r10, 0x40047440, &(0x7f00000000c0)=0xfff) write$ppp(r10, &(0x7f0000000100)="229d", 0x2) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) r13 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r13, &(0x7f0000000140)='connect aa:aa:aa:aa:aa:10 1', 0x1b) bind$packet(r8, &(0x7f0000000180)={0x11, 0x0, r12, 0x1, 0x11, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x14) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000240)=0x9, 0x4) sendmsg$netlink(r8, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000017c0)={0x17a0, 0x32, 0x4, 0x70bd26, 0x25dfdbfb, "", [@generic="65e1d06bc8e552b4eb25c512e34f254bae6c4c081f064a2c867cebb937c67c6e701af2daa8a313db2c1388b0647a8fd49afb9da05211107a883ad29e62aebb9572ddc4d1c6fd6695", @nested={0x16af, 0xe6, 0x0, 0x1, [@generic="335e7fc65c94217fd1d84b954d48182c254661235b237e6e4b17a2330312bbb3dc29f3adc4e1b7dd7204e01135a0c3d1e7f9de8ab8893e415433f11cedda84d7186c9fe202d33b9ab4ccf29b9e04d62322af679bf4b8715053020b292f717d8e5b5a57058240f056eab2eaa6cc23b4d9ea6b47d5a9d1", @generic="751a44248e7c28c768f3291a78d9956699653200aea12772c1ce44d0d7bb800503ef01c19537753d29ae19ee29350fa342d98ab6dc0f05798c5175c30b82e0d317caf00fb70e1b6540f0311aff8ab8298b64298ade0d09d43c85e856471d30397e15c78648f2702dae38c6418a491c0cbb942b5303c55d489471c208f3d294512517d3b7ae294c12b7241ad54832fd8c79bae3d82f3eda6d8181119124b173540dcd9b53a8c71ef829052020772751a8d46f389ff47d2bbc2be86b27ca4017892ed5f7febce68732dc39b800a1b7972b46c7", @nested={0x4, 0xe2}, @nested={0x4, 0x14a}, @generic="7eb299cb71689bf9673ea04f2817e3786d8eec7abf76439f80fa736fb8d97938d919d323469927c1566f890d82e61078a4a74f6e1b8da0e52c5338c772a8b31b9fd1e0481ccf10ca8845119c36a98808258e8220221efae1cbf3d83728859f6d71471a0f6d184403e1335af4d526a6e9224e33c57fd2930e8b26fd03d526bbe9d41feed760d54f7bd3bb60ec24f698c9d76aae35136de2c2c04738e392f9464ac9bc4b6634b1eaf7b0dff24b8c33c123f2991e3239e5ed155db5f2c1d07be6b36f33ad322d7b82f90fe43b06f76c5a55", @nested={0x4, 0x4d}, @nested={0x1406, 0x11e, 0x0, 0x1, [@nested={0x9a, 0xff, 0x0, 0x1, [@generic="a444688ec907bb6908a755809ca3a12f96c3727e732f82faec073ccaf88d24eb42c78e3ef7ccf0183ec59161427a226062af404083964522417d422a25c24392fc43ef3d272862af95141b0d8056e9935b33bae3027d4e4f4a3a1c9bdb2d03c68e025b300dd2919d544febb80c67e691699c29fa50f6b772f5668852e38212957d710c7020a78a79e301f4828887", @typed={0x8, 0x100, 0x0, 0x0, @ipv4=@loopback}]}, @typed={0xc, 0x153, 0x0, 0x0, @str='batadv0\x00'}, @generic="88a39020fb0e5f4181c92f2325392e65d102ee8df8906b4bcf39e2322e8f0561d442305bbfa13c531c094e61c9bac264b334ed9c493aa4f450cc9c9ded636b335a8fc335aec1a0314090d948443d9a6bc3891386d05c82517316be94045434672e5615c9ecd66c6e22bf1a83df7f4b4d987b1b623a7108fd8a2769eba74a3baa90c011ad9225d909eb1f9f9652fa2a3d9176e6bd52a722329907237af11673f524bfc9cdb918", @typed={0x4, 0x8a}, @nested={0x14, 0xbe, 0x0, 0x1, [@nested={0x4, 0xd2}, @typed={0x9, 0x10b, 0x0, 0x0, @str=']&\x8e+\x00'}]}, @nested={0x1111, 0xfb, 0x0, 0x1, [@generic="cfed15c31cd39bd3395b10787c7a98ab8d9c273ce558c7e8a985c80774686b915ba85aaeee7585489552e43f4d062f2c937e0683160c25dc53e618b2b5343bd1d6dd17eef1484054724ba2f489208d66277f7927e5083dcf663f6ff4449027", @nested={0x4, 0xac}, @typed={0x8, 0x5, 0x0, 0x0, @u32=0x3f36}, @generic="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", @nested={0x4, 0x7}, @generic="953b28d0d7691ca1d5605e87fa89b1ce937b388e6e2f5761019968285797c0d4c8b004941a97d715c8549b8ac23137409db527aacb3bcf6e6e38d36f502606ff7c1842eac572891c848b6e7a67b5434b4e1e3034e0e150d20d72a4877c21e23c5767eeaf885d433d24b143f3f522f8ae1f3750dfb8aec9d7ffe912d4ac886a3d2af176289d652ecf3aef64306fb96148cd9dc0374059", @typed={0x8, 0xcc, 0x0, 0x0, @u32=0x3}]}, @nested={0xfa, 0x10e, 0x0, 0x1, [@nested={0x4, 0x125}, @generic="30746f06542d76eee3ff143f9e878be16d3786d8c2de450355cba1d6a6fd455b2eb134a0a8f16babb787e00169f1e5bf99725d73408d19dc521496e544969f6207fe4d8f22f823da9a594e517bc6fcd625147015150488655f73e458560b0341a939cd93c264be8f57af32142d032ff688cb877499e325ae4470fec4333935cbc51e1252167679ff2f4a810176000fea9cb8d93dbf9cc7aefb712bcd0ed876e45642ab25f65445f6cd3b724095818a989700e9e3fcf602143cf601fbb3c4c1ce8d3993210232bee3dffb410dbbeb44ba8355a5369889578d741696de74e43efbbf537dc5cfd47dbcc20f500697ce", @nested={0x4, 0x79}]}, @nested={0x8a, 0x9b, 0x0, 0x1, [@typed={0x9, 0x8b, 0x0, 0x0, @str='gre0\x00'}, @nested={0x4, 0x50}, @typed={0x14, 0x7fc, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @typed={0x14, 0x12a, 0x0, 0x0, @ipv6=@loopback}, @nested={0x4, 0x12e}, @nested={0x4, 0xb2}, @generic="d89c1ff44757657a3c897552e1ffd1431b53b99d99d816149977e6a6d09252f332505229c3014ba8df7af06e4575987a67dc9f4297810f18d304", @typed={0xc, 0x6c, 0x0, 0x0, @u64=0x9}]}]}, @typed={0x8, 0x14c, 0x0, 0x0, @ipv4=@private=0xa010100}, @generic="6d085c5a58942f7425124601142e0d2a91acfb5c9620e240c17578189bffbd9b1dbe1da805e872150dbe3a6aea227303cb57d5ab7dffa6bceae7aff1971a3569da0c0861cbfb3b9bb440e624104aa252d86c627e652c69e0d150db71a9014a0cb34e34b9a5de1808b8ae09ec01a7db67791cd04a65a146"]}, @generic="815a08b6a035d9535df5dee1e018539989ed1fd9baef747abd23c230a3358eb6ed5fd02fb85ba9ae0315f8cb7c985dfcf456515d64ae9894cfadcbe1830e7bc95be47481c37f1292472131e6e53b1d80ef9e5abf2e162878655e3f869f6783e9ebc60cc87c437abe74bacbee12c236dad5516257e048a0d79783ed113a475b82c369cfbd06fb08f4ed7a9d7af8266bc400760000", @nested={0x4, 0x54}]}, 0x17a0}], 0x1, 0x0, 0x0, 0x4000804}, 0x20000041) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)) 5.801754915s ago: executing program 4 (id=5933): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x5c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x6}, {0x5, 0x40, 0x2}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)="95", 0x1}], 0x1, 0x0, 0x0, 0x1f4}, 0x0) 5.542287033s ago: executing program 4 (id=5935): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) pwrite64(r0, 0x0, 0x0, 0xd) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000380), 0xc) 5.486143804s ago: executing program 4 (id=5936): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x22020600) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000005040)={0x2020}, 0x204f) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) read$FUSE(r2, &(0x7f0000003000)={0x2020}, 0x2020) connect$inet6(r1, &(0x7f0000000cc0)={0xa, 0x4e23, 0x2f18, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, 0x1c) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000640)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x65, 0x0, 0x0, 0x3a, 0x0, @multicast2, @multicast1}, {0x8000, 0x4e21, 0xc, 0x0, @gue={{0x1, 0x0, 0x3, 0x0, 0x100, @void}}}}}}}, 0x0) 4.289237939s ago: executing program 1 (id=5938): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x1000d, 0x0, 0x0, 0x100}, 0x94) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c93012000e00050015090a"], 0x17) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001c40)) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000140)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1) preadv2(r3, &(0x7f00000002c0)=[{0x0, 0x4e}, {&(0x7f0000000380)=""/81, 0x51}], 0x2, 0xfffffff7, 0x80, 0x16) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r4, 0x89f1, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) socket$inet(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x4a2040, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003cc0)={0x2020}, 0x208f) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f4adf700182c00fe800000000000000000000000000000ff0200000000030000000000000000013c0000000000000004019d000000000081009078000000005cbb4356c889eef9859a1d4283914fcf44d3b9126ece51d4c46268f3b6568850a22981ceb33b61ca2245f8f8a2f205da729e59d15854a2785c75f01540a077c8f97bc5c603f03d5e24e645b76b311ad32b4b61fe9b5de94cb99f2250eedb29c04868de59ad5835785fb25855c4239febfbb4b9ca16ed35602fae152da34a50ed8e"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xffffff8a, &(0x7f0000000140)={&(0x7f0000000880)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40840}, 0x24040084) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='ns\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000040)={0x6, 0x1, 0x80, "55c71c086a1aed672b3cbd45c102b01ccb8bbc89fe8d6868cb890bb495c4aa2e", 0x30314742}) 4.214045238s ago: executing program 3 (id=5939): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000200000000400000000000000000a20000000000a01000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010010000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000571000000060a010400000008000000000100080008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a30"], 0xf0}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) 4.091793409s ago: executing program 3 (id=5940): epoll_create1(0x0) r0 = socket$unix(0x1, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000001740), 0x12) r3 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) syz_clone3(&(0x7f0000000880)={0x308800000, 0x0, 0x0, 0x0, {0x2f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x10009, 0x4) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x2000002) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000020601010000000000000000010000001400078008001240000000050500140009000000050005000a0000000900020073797a31000000000500040000000000050001000600000011000300686173683a6e65742c6e6574"], 0x60}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0xfffffd64}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x4}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.265548138s ago: executing program 1 (id=5944): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xb) madvise(&(0x7f0000bde000/0x1000)=nil, 0x1000, 0x10) syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') pipe2(&(0x7f0000000000), 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000100)={0x2000201e}) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {r2, 0x7fffffff, 0x12, 0x0, 0x0, @ib={0x1b, 0x8, 0x6, {"78c36cbe7e38dade0099fe4e9d908e9b"}, 0xffff, 0x1ff, 0xfffffffeffffffff}, @in6={0xa, 0x4e22, 0x2, @local, 0x2}}}, 0x156) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38}, 0x94) pipe2$watch_queue(&(0x7f00000000c0), 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000480)=ANY=[@ANYRESOCT]) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) syz_open_dev$vim2m(&(0x7f00000004c0), 0x8003, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10113, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x185d, &(0x7f0000000040)={0x0, 0xc8a1, 0x100, 0xfffffffd, 0x800000c0}) r7 = memfd_create(&(0x7f0000000000)='-&:{-\xaa]{\x00', 0x2) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000001900)="0a703c7c0b8e4a41a671", 0xa}], 0x1) copy_file_range(r7, &(0x7f0000000080)=0x9, r7, 0x0, 0x7, 0x0) epoll_create(0x7) write$P9_RSTATFS(0xffffffffffffffff, 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x80) 3.166307354s ago: executing program 3 (id=5945): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0xffffffffffffffad, 0x10, 0xfffffffffffffdff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x33822}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x6bbd6}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x30}, 0x1, 0x0, 0x0, 0x200c0800}, 0x20040040) r3 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0xa00) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x12, r3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@local, @in6=@initdev}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000240)=0xe8) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) unshare(0x64000600) syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x35, [{{0x9, 0x2, 0x2d}}]}}, 0x0) unshare(0x20000400) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="06000000040000004000000089"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000380), &(0x7f0000000000), 0x80, r9, 0x0, 0x7}, 0x38) r10 = socket(0x2, 0x3, 0xff) r11 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r11, &(0x7f0000001a80), 0x0, 0x200400d1) shutdown(r11, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r11, 0x84, 0x83, &(0x7f0000000480)={0x0, 0x2}, 0x8) sendto$inet(r10, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r12 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0xc0686611, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r12, 0xc004500a, &(0x7f0000000040)=0x1) 2.889556489s ago: executing program 0 (id=5947): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2}, 0x50) read$FUSE(r0, &(0x7f00000090c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r3}, 0x10) ioctl$FS_IOC_RESVSP(r1, 0x40086602, 0x0) 2.867741511s ago: executing program 2 (id=5948): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0xaf01, 0x0) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) r1 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000d240902020000000001"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r1, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000b40)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) r4 = gettid() sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r3, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r4], 0x28}}, 0x0) syz_usb_control_io$sierra_net(r3, &(0x7f0000000240)={0x14, &(0x7f0000000100)={0x20, 0xc, 0x86, {0x86, 0x6, "7a4e24b1bf14173eb94646f2b881e065af499183ca1feedc730ddb9051a39bc7918834d11e45a108f9370588b92edc10f02f28d748551d821799496a6fb64738116cecf5c7f9336d66368073ade64ddd705bada7f94aa91f189e77980af471da74bfc54b45a86257db87544d95b4601031e360b2e2c47ae4a2d815b7b5251178b206d24f"}}, &(0x7f00000001c0)={0x0, 0x3, 0x68, @string={0x68, 0x3, "46e76a75ed7c504d9bc9fa0dbc99f0d1f0f5b74032e2d1abb6a46ce3db233b390d06e6702f51d785d8d92e0caa8dbf3f28d7f3c105762bd8ddf98c04310145a60de4db06062ab794fbe3cc06acd4b8dae2f8a203eb017fa744b597d5e76b9a1624f3a4ac61d3"}}}, &(0x7f0000001080)={0x1c, &(0x7f0000000280)={0x0, 0x13, 0xf7, "acd565bac23effdeec6aaa583ba4944a86a26b68ac579d8abbfae39e6746a873e2eea84240d921928c5dc675f9a27502822e9864e89cabff452c458fe8fdf536f8377e167f8f04fbb276adfa41382d6c2b4a53d529968cf6e01988a09394623f4866afb832bc7931f4dcc744b06998124b5347115104e3ed390e82049df0405e3e5e3d62a058dd9f5af65fe042dc10914c9cf273922c168ad1b5584fd5a98bebd5a0501bb3c409b480c01fec4b2cc3f146a0957738281ea433786d504c3827f5c536432283eece2c2a473cbb49583603b23dcb880ddc7db42c13b0d42f1836662793793931c4c7f91b1741c37331115eb183ed8fb24785"}, &(0x7f0000000c00)={0xa1, 0x1, 0x400, "b3cfa257171cbff29e0e6550bee32095d26acb372f3217cec52ca48e9e07ac0671f9c59c732dd2b446799ee6c9af0762f0089cea112454cbbb1bb2847a41fe0b981430b6feaf787028828325c872d5824b9bcf508bae92d5c26f8ca888dcaebc546c60d19103a8a9ce234e474c0af75741e6da871ac128cc5f02c4404450e2b93a518cf9eab5e71ad99a86d60232db167b3ca379f98c1b6f2e91c82f26f5777977798c47804894d503e07f21dd830423bf86561d38d2237ec076616b03ff2adf378ac3c5cee6b87b0937fe73644d96d049d8a085bda925467506e4a0b1f0a42cdf945f10eb28c3b57e8fe02c445ea30bee1a1782ac54a3e3c7d4fabfd4b5b50712b468e851909355984556b4689bf88bfec0d589c8466e967876e8945d6970dfd4fa41bef834a842a6a3263093d008f1ad7edea1a279578948415c6aed7584c03cd2013feefc25d472ffd04a5a61ac9921bc08d5635f820ea236fff39012589a6656cec2fc60134d97016e6b95f28606f8f901aa58336f105525c1d80347ee95bf888f4e6909696a0c382356cca21758b2ddc68e7b184d4b037645851b2e786aff7932d972300b31eebd96c3e19ca372bbafa7f872ca9b69fe996c7501f70ba4b753e895669f82dbb17df09260dfc66e90a023d511212ec9cc0e1aebac72d09b6e3918fec41ce788e7cde384faa850856fbba5f15c881b3748aaa56afdf9b7f2e198a603584da4bf978bdeaf3f95d5a1523f775a2ff2260b8dc064fbe8e10848d736e8ca4efe8a901a664414bea4a52c292d314571350031508320db5da680dc20c6b545c836f390bb0c09558504b747336ee45ff072e9b587ba84901ea9256068c3131ff12252201c0886bdd7b0a72b04328efdf4132fd97a3c900c7241f9f800bd9574d72ae7b689f30c8a870aa9de9e5c73a072bed42586bfbd9d97caadaf6de394c53df48976ce869b0ef8f1b0c305cec9bd880406cda17b651fa08f59f7de1b8139fc1b73698c4ce1b97ff94f4d8b91da03568f6be1dd75bd35e3429801c01c990e8bf83c076452e51d1e87894cd711b2128bdf8b1519b0fc09797121c7fffb032539f15d1e17c7cc83ed021d767837b5ded67ccb6536f8f7e1af69750c2c15044540e76d30428c34c8497eb1522078bca6747445ff96fe06f50563d185c0883d1c6e35eb7ec031af653900b26ef7384861996b19bb65b6ccde0b3a0bcafc9c5735f084c782fadd6fed2b173423213d4ddc6660b9ca96049ce42648907c2645f187329d56d57ca06c23dc7b32a776df5e37ee2fb430f8e65efa000bcbe6b19f9b619d98934624570917fe4463ce6c75b8f724c0022badcd7a2b20508b171ad390c51e9c529dce0fe6fb11279652f1e0c5d96c6c2bc98f4d25e4006d8e0fd51ae0430cc0fa771a00cb89d8fa9b4ade87ab1527d9443f7da9d8004b96f288"}, &(0x7f0000001040)={0x21, 0x0, 0x1, 'C'}}) syz_usb_control_io(r1, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$int_in(r0, 0x40000000af01, 0x0) (async) ioctl$VHOST_NET_SET_BACKEND(r0, 0xaf01, 0x0) (async) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) (async) syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000d240902020000000001"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac3(r1, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000000b40)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) (async) gettid() (async) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r3, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r4], 0x28}}, 0x0) (async) syz_usb_control_io$sierra_net(r3, &(0x7f0000000240)={0x14, &(0x7f0000000100)={0x20, 0xc, 0x86, {0x86, 0x6, "7a4e24b1bf14173eb94646f2b881e065af499183ca1feedc730ddb9051a39bc7918834d11e45a108f9370588b92edc10f02f28d748551d821799496a6fb64738116cecf5c7f9336d66368073ade64ddd705bada7f94aa91f189e77980af471da74bfc54b45a86257db87544d95b4601031e360b2e2c47ae4a2d815b7b5251178b206d24f"}}, &(0x7f00000001c0)={0x0, 0x3, 0x68, @string={0x68, 0x3, "46e76a75ed7c504d9bc9fa0dbc99f0d1f0f5b74032e2d1abb6a46ce3db233b390d06e6702f51d785d8d92e0caa8dbf3f28d7f3c105762bd8ddf98c04310145a60de4db06062ab794fbe3cc06acd4b8dae2f8a203eb017fa744b597d5e76b9a1624f3a4ac61d3"}}}, &(0x7f0000001080)={0x1c, &(0x7f0000000280)={0x0, 0x13, 0xf7, "acd565bac23effdeec6aaa583ba4944a86a26b68ac579d8abbfae39e6746a873e2eea84240d921928c5dc675f9a27502822e9864e89cabff452c458fe8fdf536f8377e167f8f04fbb276adfa41382d6c2b4a53d529968cf6e01988a09394623f4866afb832bc7931f4dcc744b06998124b5347115104e3ed390e82049df0405e3e5e3d62a058dd9f5af65fe042dc10914c9cf273922c168ad1b5584fd5a98bebd5a0501bb3c409b480c01fec4b2cc3f146a0957738281ea433786d504c3827f5c536432283eece2c2a473cbb49583603b23dcb880ddc7db42c13b0d42f1836662793793931c4c7f91b1741c37331115eb183ed8fb24785"}, &(0x7f0000000c00)={0xa1, 0x1, 0x400, "b3cfa257171cbff29e0e6550bee32095d26acb372f3217cec52ca48e9e07ac0671f9c59c732dd2b446799ee6c9af0762f0089cea112454cbbb1bb2847a41fe0b981430b6feaf787028828325c872d5824b9bcf508bae92d5c26f8ca888dcaebc546c60d19103a8a9ce234e474c0af75741e6da871ac128cc5f02c4404450e2b93a518cf9eab5e71ad99a86d60232db167b3ca379f98c1b6f2e91c82f26f5777977798c47804894d503e07f21dd830423bf86561d38d2237ec076616b03ff2adf378ac3c5cee6b87b0937fe73644d96d049d8a085bda925467506e4a0b1f0a42cdf945f10eb28c3b57e8fe02c445ea30bee1a1782ac54a3e3c7d4fabfd4b5b50712b468e851909355984556b4689bf88bfec0d589c8466e967876e8945d6970dfd4fa41bef834a842a6a3263093d008f1ad7edea1a279578948415c6aed7584c03cd2013feefc25d472ffd04a5a61ac9921bc08d5635f820ea236fff39012589a6656cec2fc60134d97016e6b95f28606f8f901aa58336f105525c1d80347ee95bf888f4e6909696a0c382356cca21758b2ddc68e7b184d4b037645851b2e786aff7932d972300b31eebd96c3e19ca372bbafa7f872ca9b69fe996c7501f70ba4b753e895669f82dbb17df09260dfc66e90a023d511212ec9cc0e1aebac72d09b6e3918fec41ce788e7cde384faa850856fbba5f15c881b3748aaa56afdf9b7f2e198a603584da4bf978bdeaf3f95d5a1523f775a2ff2260b8dc064fbe8e10848d736e8ca4efe8a901a664414bea4a52c292d314571350031508320db5da680dc20c6b545c836f390bb0c09558504b747336ee45ff072e9b587ba84901ea9256068c3131ff12252201c0886bdd7b0a72b04328efdf4132fd97a3c900c7241f9f800bd9574d72ae7b689f30c8a870aa9de9e5c73a072bed42586bfbd9d97caadaf6de394c53df48976ce869b0ef8f1b0c305cec9bd880406cda17b651fa08f59f7de1b8139fc1b73698c4ce1b97ff94f4d8b91da03568f6be1dd75bd35e3429801c01c990e8bf83c076452e51d1e87894cd711b2128bdf8b1519b0fc09797121c7fffb032539f15d1e17c7cc83ed021d767837b5ded67ccb6536f8f7e1af69750c2c15044540e76d30428c34c8497eb1522078bca6747445ff96fe06f50563d185c0883d1c6e35eb7ec031af653900b26ef7384861996b19bb65b6ccde0b3a0bcafc9c5735f084c782fadd6fed2b173423213d4ddc6660b9ca96049ce42648907c2645f187329d56d57ca06c23dc7b32a776df5e37ee2fb430f8e65efa000bcbe6b19f9b619d98934624570917fe4463ce6c75b8f724c0022badcd7a2b20508b171ad390c51e9c529dce0fe6fb11279652f1e0c5d96c6c2bc98f4d25e4006d8e0fd51ae0430cc0fa771a00cb89d8fa9b4ade87ab1527d9443f7da9d8004b96f288"}, &(0x7f0000001040)={0x21, 0x0, 0x1, 'C'}}) (async) syz_usb_control_io(r1, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) 2.744409412s ago: executing program 2 (id=5949): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x18fb82db60492700, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x338deb2fe304b7cd, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x741}, 0x94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000300)=@ethtool_dump={0x3e, 0x0, 0x2}}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'dummy0\x00', 0x4000}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r4, 0x8b1b, &(0x7f0000000040)) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a7ffa888000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r6], 0x44}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6400000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB="3c0012800b000100626174616476"], 0x64}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 2.521463901s ago: executing program 2 (id=5950): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000600000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007a00000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.491342771s ago: executing program 2 (id=5951): socket$nl_netfilter(0x10, 0x3, 0xc) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x29, 0x5, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x119, 0x9, 0x0, 0x33) connect$unix(r0, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x8) getsockopt$netlink(r4, 0x10e, 0x4, &(0x7f0000000200)=""/42, &(0x7f0000000100)=0x2a) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000e8ffffffffff0b000000480005800800010065756800070002"], 0x5c}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)={0x20000, 0x2, 0x8}, 0x18) execveat(r6, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new$default user:syz 00000000000000004093\x00'], 0x2a, 0x0) r7 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, r7) keyctl$read(0xb, r7, &(0x7f0000000240)=""/112, 0x349b7f55) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) unshare(0x2e040b80) unshare(0x2c060000) 2.411407935s ago: executing program 1 (id=5952): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240), 0x0}) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)={{0x1, 0x8080000, 0x4, 0x0, 0xb, 0x2, 0x1, 0x1, 0x4, 0x81, 0x59}, {0xa000, 0x60000, 0xd, 0x2, 0x2, 0x3, 0x2d, 0x3, 0x3, 0xa3, 0x3, 0x7}, {0xe000, 0x6000, 0xc, 0x8, 0x9, 0xc, 0x2, 0xaf, 0x0, 0x5, 0x3, 0x6}, {0x5000, 0x40000, 0x9, 0xc, 0x65, 0x1f, 0x43, 0x9, 0x4, 0xfc, 0x4, 0x1}, {0x5000, 0x1, 0xd, 0x1, 0x4c, 0x8, 0x7, 0xf4, 0x1, 0x8, 0x3, 0x10}, {0xe000, 0xdddd0000, 0x2, 0x27, 0x0, 0x8, 0xb, 0xa4, 0x6, 0x6, 0x3, 0x4}, {0x60000, 0x80e6000, 0xd, 0x6, 0x2, 0x31, 0x9, 0x5, 0x9, 0xff, 0x34, 0x3}, {0x2000, 0x2, 0xf, 0xc, 0x0, 0x6, 0x2, 0x8, 0xef, 0x82, 0x2, 0x1}, {0x9000, 0x9}, {0x54000, 0x6}, 0x10, 0x0, 0x40000, 0x8, 0x4, 0x3d01, 0x70000, [0x8000000000000000, 0x5, 0x0, 0x9]}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x98f905, 0x0, '\x00', @p_u8=0x0}}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x15, 0x1114c1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000450410408200ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8345050001000000240012800b00010067656e65766500001400028008000b4080000000060005004e210000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180b00, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000040)={0x191, 0x150, 0xa0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x0, 0xa}) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602200000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) 2.307150092s ago: executing program 4 (id=5953): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00', 0x4}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000048000480440001800c0001007061796c6f61640034000280080004400000000008000440000000b10800024000000002080005400000004708000340000000000800064000000001140000001100010000000000000000000000000a"], 0x9c}}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) write$UHID_INPUT(r2, &(0x7f0000000e00)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000001c0)={0x0, @time={0x7665642f, 0x6}, 0x5, {}, 0x1, 0x1, 0x70}) r3 = socket$unix(0x1, 0x2, 0x0) syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000480)={0x0, @reserved}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x222, 0x20, 0x0, 0x392}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mprotect(&(0x7f00005f4000/0x2000)=nil, 0x2000, 0x1) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'veth0_to_hsr\x00', 0x8000}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="600000000206030000000044cc00c33da529b90000000000000000001400078008000a40fffff000050015000000000005000100060000000500050002000000050004000000000012000300686173683a6e65742c706f72740000000900933744de020073797a3200000000"], 0x60}}, 0x800) r7 = socket$kcm(0x11, 0xc, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r11, 0x3a}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000480)}], 0x1}, 0x894) 2.04249601s ago: executing program 0 (id=5954): getgroups(0x1, &(0x7f0000000000)=[0xffffffffffffffff]) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000, 0x1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) setgroups(0x8, &(0x7f0000000340)=[r0, 0xee00, r1, r2, r4, r6, 0xee01, 0x0]) readlinkat(r5, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=""/76, 0x4c) r7 = socket$pppl2tp(0x18, 0x1, 0x1) capset(&(0x7f0000000440)={0x19980330}, &(0x7f0000000480)={0x9, 0x28, 0x0, 0x2, 0x3, 0x7}) setxattr$security_evm(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500), &(0x7f0000000540)=@v1={0x2, "18"}, 0x2, 0x2) read$FUSE(r5, &(0x7f0000000580)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r9 = syz_open_procfs(r8, &(0x7f00000025c0)='net/tcp6\x00') r10 = userfaultfd(0x800) capget(&(0x7f0000002600)={0x0, r8}, &(0x7f0000002640)={0xffff, 0x100, 0x1, 0x33, 0x3, 0x7}) r11 = openat$cgroup_int(r5, &(0x7f0000002680)='cpu.weight.nice\x00', 0x2, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r11, 0xc0385869, &(0x7f00000027c0)={r7, &(0x7f00000026c0)='net/tcp6\x00', 0x2040, &(0x7f0000002700)={@align=0x7, {0xc, 0x4, 0x0, 0xba48d1e}}, 0xb45, &(0x7f0000002740), &(0x7f0000002780)=0x8000}) ioctl$MON_IOCX_GET(r9, 0x40189206, &(0x7f0000003840)={&(0x7f0000002800), &(0x7f0000002840)=""/4096, 0x1000}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000003940)={'veth1_virt_wifi\x00', 0x0}) sendmmsg$inet(r7, &(0x7f00000054c0)=[{{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000003880)="c2d28f63ee9bc0c94376cd797956e670d763766c70766ae33bd79acc894eec8f768bf1baac556201d7f04a0de32c87eed659da96c7", 0x35}, {&(0x7f00000038c0)="8da869c49da30a78d72684fc1a787802526c6e43676749fcff33e3", 0x1b}], 0x2, &(0x7f0000003980)=[@ip_retopts={{0xc0, 0x0, 0x7, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x7, 0x25, [@private=0xa010102]}, @timestamp={0x44, 0x20, 0x30, 0x0, 0x1, [0x9117, 0x8, 0x5, 0xba, 0xc7ba, 0xffff, 0x2]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @lsrr={0x83, 0x13, 0x9e, [@multicast1, @rand_addr=0x64010100, @multicast1, @remote]}, @rr={0x7, 0x17, 0xb9, [@dev={0xac, 0x14, 0x14, 0x33}, @local, @rand_addr=0x64010101, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0x8, 0x9a, 0x0, 0x4, [0x1]}, @cipso={0x86, 0x4b, 0x0, [{0x0, 0xd, "d5550a3637b235cdec94b9"}, {0x1, 0xe, "5454c9eb1f00927b4ecff270"}, {0x7, 0x4, "eb55"}, {0x6, 0xe, "3d781110c83c6d413bdebe07"}, {0x7, 0x4, ',r'}, {0x6, 0x11, "a7542f48f3246aa3aaa9c97eed7051"}, {0x1, 0x3, '>'}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @dev={0xac, 0x14, 0x14, 0x13}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r13, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x16}}}}], 0x118}}, {{&(0x7f0000003ac0)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000005000)=[{&(0x7f0000003b00)="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", 0xfd}, {&(0x7f0000003c00)="fd678a2adc1a2a3329", 0x9}, {&(0x7f0000003c40)="42862ec70e302832c35bbbb55b5863a57f68625c499cfe417be64bd0d6c0257c693e9092c216a6d13ef21f9b98b2b482cdb32f8a193346d220e8056d6319daeb0ae5d22e388e9b03331feeb5fe5eb87e75583c889a96cf34c21be8a0045c0db7306b62bb1ce15816f1a55a84b7c08392", 0x70}, {&(0x7f0000003cc0)="d560acf8d6c636425d530a195e0fe3d19324b079dd5f0d308cd56a1118e6afa6fcae904449f6e387fae22eee9a7357772f684cae3591cabcf487acb90a7af689c4f675931ba55122e20339407b4cfaf76d6a1e999620c5ce5f0524d218f463810b787e9ac3b471c965769d406b2930ad0d89c0b7abeff7f604227bd09201cced24426d6f60c0180c7bb16de450f29ecde071f20ac9c33c3c52b31310a7914ce424f1c4025c4f62f6fcc4628512e374867a4994494571432ba9a7169351032050733ee3", 0xc3}, {&(0x7f0000003dc0)="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", 0x1000}, {&(0x7f0000004dc0)="e78458becbe5a1129e27e10035d6d199278b056fa42a07ad359eda72f11019b62521804da1295d989d7ca09e5561230c0f7c5f03b5e2a08c47818eb83ca3bdd174b6cbf3fdc50abbd6c6797dfda7956336c6c9a8302f0ad87b0b74cc74f15bdf667d3e50a267df2573a06bd0c7809008b5e19ed9c06667ea36a910ef53c62dd0725d56c78207c120ca5bbbb667bed9a5b7adf45f6559ae6636f8f2e99924dd613af934552114d53fca5a133f8848f5b11f508bb99c162297b7dfd35205c23c8588c4174c9563cce960911d8e233a6915e2d38c35efdb35b929017093a1662287467906a06357bd51c76c41f6", 0xec}, {&(0x7f0000004ec0)}, {&(0x7f0000004f00)="8ad06a99f3202c0477fef4775ef3d7244a7cfc1d0abd068e44a251cc05419cda20b885850ecfaed6999e836b00e3ad2cd99e9eb0a43460dcbe71c4dfaa0dd63d2d1cb6986bd3d781dc4816a204420f07ed4a75c78626df80b592a529b6ce29d680f167ee6e5a93b15487e95dbf300a7ae53a98505db26c9a26c5e32267a374ee2ac6fe8ca04c480aabaf6c59fc9d397202168acaced6d3dbb1d76109eea7", 0x9e}, {&(0x7f0000004fc0)="6869bd4749b84c9d87392c375b0da9b66e11", 0x12}], 0x9, &(0x7f00000050c0)=[@ip_retopts={{0x44, 0x0, 0x7, {[@timestamp_addr={0x44, 0x34, 0xeb, 0x1, 0x2, [{@private=0xa010102, 0xfffffffa}, {@remote, 0xc3}, {@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x1}, {@local, 0x1ff}]}]}}}], 0x48}}, {{&(0x7f0000005140)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000005400)=[{&(0x7f0000005180)="b14399818a78c3d97b1ee153881f871793cf0bdb6cd54b8ccd4f8a90483a9983da6fabedee4fb188e0d0d1080f1dbb90b31611287866afc2444433f70f973dc1fe5e7f55013b597170cb0c8bd961bd3ee5899b850b5a5b1b4cab3acafe87169d5282954cd608000d8275b18a5dbbf7e6bc0fea8a65a0fd9250460c17d6fcd88cc4f43bcbf05c253dc9e8a900108f660b199976b8f82a5716586193", 0x9b}, {&(0x7f0000005240)="db625eb5230f2d73781d1031c99a2ece8f6d21d651e69d1ccf16623c83f5ce", 0x1f}, {&(0x7f0000005280)}, {&(0x7f00000052c0)="05a4538b7a4d018dfbe5bcdb0bfa7b6d3bec6d060d5cf36d8f0a161f76446ba655d78b5ebe20b2a93f19e28b76b40f005a", 0x31}, {&(0x7f0000005300)="41d21f47931433f16b4b9929b51ad14a447af474103bb19161ec3dfd3697ac0f7ab84f70e615c5a410dcaa1ba13f38beac1debdeadcab24f7c5666a49ac92409db8a5164726f31a40109bab7747f36b8772f853bc55e10bfc660882fe9eef45b8676e7ca000237549562300698a2161862a9914e8c9704c8b278733a1bd1e5d8aee31b1435f65d9ea41295ae883b0ad55e6f0fb8d1f78109afcaf211f2645b2ffdbea530bfa215d2761307e3ec807e51", 0xb0}, {&(0x7f00000053c0)="f4391731ed0539dea68bfd9bce", 0xd}], 0x6, &(0x7f0000005480)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x200}}], 0x18}}], 0x3, 0x40080c0) capget(&(0x7f0000005580)={0x20080522, r8}, &(0x7f00000055c0)={0x7, 0x9, 0x686, 0x5, 0xf1, 0xad1}) sendmsg$nl_route(r12, &(0x7f0000005740)={&(0x7f0000005600)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005700)={&(0x7f0000005640)=@ipv4_newroute={0x88, 0x18, 0x800, 0x70bd26, 0x25dfdbfc, {0x2, 0x10, 0x0, 0x4, 0xff, 0x0, 0xfd, 0xa, 0xa00}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_TABLE={0x8, 0xf, 0x7}, @RTA_UID={0x8, 0x19, r3}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_METRICS={0x27, 0x8, 0x0, 0x1, "2452b1ee51ba24bd27efeacc19a2a307c7683542070d4947122dbecd9fc9cb300a2160"}, @RTA_ENCAP_TYPE={0x6}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x23}}}, @RTA_PRIORITY={0x8, 0x6, 0x1}, @RTA_PREFSRC={0x8, 0x7, @broadcast}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000010) openat$null(0xffffffffffffff9c, &(0x7f0000005780), 0x40, 0x0) mknod$loop(&(0x7f00000057c0)='./file0/file0\x00', 0x2000, 0x1) timer_create(0x7, &(0x7f0000005800)={0x0, 0x20, 0x4, @tid=0xffffffffffffffff}, &(0x7f0000005840)=0x0) timer_gettime(r14, &(0x7f0000005880)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0xffffffffffffffff, 0x0, &(0x7f00000058c0)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r12, 0xc018937e, &(0x7f0000005900)={{0x1, 0x1, 0x18, r9, {0x1}}, './file0/file0\x00'}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000005980)={'dummy0\x00', &(0x7f0000005940)=@ethtool_cmd={0x3b, 0x39c, 0x2, 0x2, 0x6, 0x6, 0x8, 0x1, 0x5, 0x2, 0x2, 0x75b1, 0x3ff, 0x10, 0x6, 0x27f, [0x5, 0xffff]}}) flock(r10, 0x2) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f00000059c0)={0x3, 0x8, 0x3, 0x0, 0x12}) 1.934406859s ago: executing program 0 (id=5955): epoll_create1(0x0) r0 = socket$unix(0x1, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000001740), 0x12) r3 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) syz_clone3(&(0x7f0000000880)={0x308800000, 0x0, 0x0, 0x0, {0x2f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x10009, 0x4) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x2000002) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000020601010000000000000000010000001400078008001240000000050500140009000000050005000a0000000900020073797a31000000000500040000000000050001000600000011000300686173683a6e65742c6e6574"], 0x60}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0xfffffd64}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x4}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.625283484s ago: executing program 3 (id=5956): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002880)=[{{&(0x7f0000000140)=@phonet, 0x80, &(0x7f0000000940)=[{&(0x7f00000007c0)=""/130, 0x82}, {&(0x7f0000000380)=""/160, 0xa0}, {&(0x7f0000000440)=""/210, 0xd2}, {&(0x7f0000000600)=""/70, 0x46}, {&(0x7f0000000540)=""/57, 0x39}, {&(0x7f00000006c0)=""/252, 0xfc}, {&(0x7f0000000a00)=""/139, 0x8b}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000002680)=""/30, 0x1e}], 0x9, &(0x7f0000002780)=""/232, 0xe8}, 0x80000000}], 0x1, 0x40000023, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) syz_usb_connect(0x2, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100021773b4086d04000979e10102030109021200017f0990070904a2050017c23dff8ef81320b1905766dafc08bff5738e8c76cc6710657f837400b4ca5a3fdc75f06af1a6d95136e2f2844d81dcd98566bdc68c5af08d59dd872ee25405797f9a1186627ee961a892fd4601611c31af3b0d8657e7fac9fbe00bdc6f6f9927c83e5694b57682834800a44393f0aa0be842241d90"], &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000080)={0x0, 0x1, 0x7, 0x10001, 0x5, "1afa86d32101b58680cdda128ed251c679583d", 0x3f, 0x80000004}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0x4}}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f00000001c0)=0x1, 0x4) sendmmsg(r0, &(0x7f0000003e40), 0x0, 0x404c851) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000080)=0x2386, 0x4) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$int_in(r6, 0x5452, 0x0) sendmmsg$inet6(r6, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c", 0x3}], 0x1}}, {}], 0x3, 0x1c000) ppoll(&(0x7f0000000040)=[{r6, 0x240}], 0x1, 0x0, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r7, 0x410, &(0x7f0000000080)={0x0, 0x1, 0x6, 0x1fd}) 1.105542769s ago: executing program 1 (id=5957): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001900)=ANY=[@ANYBLOB="0200000004"], 0x50) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2041, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES64=r1, @ANYRESDEC=r1, @ANYRESOCT=r0], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x6, 0xfe, "0062ba7d82000000160000000000f738096304"}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x14, 0x0, 0x4, 0x101, 0x70bd26, 0x25dfdbfb, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x80) r3 = syz_open_pts(r1, 0x80) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) r4 = dup3(r3, r1, 0x80000) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000000)) 1.078335777s ago: executing program 2 (id=5958): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001100010626bd7000ffdbdf0500000000", @ANYRES32=0x0, @ANYBLOB="23de0000000004001400350076657468305f766c616e000000000000"], 0x34}, 0x1, 0x200000000000000, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x20000040) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, 0x0, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, 0x0, 0x0) bind$xdp(r5, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x814) 1.000095107s ago: executing program 0 (id=5959): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x2}, 0x10) unshare(0x28000600) fremovexattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00') r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="3400000010000100000000000000000008000000", @ANYRES32=r2, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="14002b8008000300", @ANYRES32], 0x34}], 0x1}, 0x20000000) syz_open_dev$dri(&(0x7f0000000180), 0x9, 0x80001) r3 = socket(0x1e, 0x4, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8982, &(0x7f0000000080)={0x8, 'tunl0\x00', {'veth0_to_hsr\x00'}, 0x2}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) 837.108008ms ago: executing program 2 (id=5960): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000900)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000008c0)={&(0x7f0000000700)={0x19c, 0x12, 0x100, 0x70bd26, 0x25dfdbfd, {0x18, 0x7, 0x3, 0x0, {0x4e23, 0x4e23, [0x5, 0x6, 0x3, 0x4], [0x8, 0x2, 0x5], 0x0, [0x400, 0x2]}, 0x20000000, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xe6, 0x1, "629d301a894ba0e81ccdbe32a909bba6a0c0dfa101401687d90f6eb9fc52f95ac2410758ced947f6a8bbf35efb21ce30b2a2c0bdd45349e1be6d991dceba8df119e2b54b48b2fffc6d229d85c0fde5140a199f5b475c68011934cfff4c01dacb05fd17e9ffb2129c7f7f452db8120885afb93630e172023d6038caab481d466b366ad752b6418db76baa8a41a6e64a540c1d7a8c56ae2b75ed41d79ecb535b907577319e6ee83aafe730cfff80cdb57f5c75f09970bb7569507687dbfcbad89e28a29c1d15a7e11be92e5100a0ac5ce603c9b30ce8a3322a33750943da41dacc4053"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x21, 0x1, "cc5d76db5f6182b86bffc98076b219485dd51e3248a80d3408101bbdbd"}, @INET_DIAG_REQ_BYTECODE={0x40, 0x1, "d939573dbf9edd03f5f7fcbdc8402267f13172a4240d612f0a8db9c410ae42b73ef4cfdbc4dee6cf08284a2f3ff366147b94c689ef3ba26981408741"}]}, 0x19c}, 0x1, 0x0, 0x0, 0x80}, 0x40010) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x28, 0x0, 0x0, 0xfefff038}, {0x6}]}, 0x10) sendmmsg$unix(r1, &(0x7f00000023c0)=[{{0x0, 0x0, &(0x7f0000002340)=[{&(0x7f0000000200)="6880d9df", 0x4}], 0x1, 0x0, 0x0, 0x20000800}}], 0x52b, 0x2900) syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYRES32=r1], 0x0) syz_usb_connect$uac2(0x5, 0xb6, &(0x7f0000000240)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x6f8, 0xb000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa4, 0x3, 0x1, 0xff, 0x4b358821488fe827, 0x3, {0x8, 0xb, 0x0, 0x0, 0x1, 0xc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7, 0x5, 0x18, 0x13}, [@selector_unit={0x8, 0x24, 0xb, 0x4, 0x3, "779dc3"}, @extension_unit={0x7, 0x24, 0x9, 0x2, 0x1, 0x8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x7, 0x2, 0x3, {0x8, 0x25, 0x1, 0x2, 0x3, 0xf4, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x68, 0x1, 0x9, 0x72}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x37, 0x2, 0x9, 0x9, "a025a2", 'u'}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x5, 0x1, 0xf7, 0x1}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x4}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x6, 0x7, 0x71}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x2, 0x80, 0x0, {0x8, 0x25, 0x1, 0x3, 0xc, 0x3, 0x8}}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x200, 0xfe, 0x1, 0x4, 0x20, 0x9}, 0x119, &(0x7f0000000340)={0x5, 0xf, 0x119, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x4, 0x0, 0x9, 0x76}, @ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x8, 0xf000, 0x1, [0xc0c0, 0xff3fc0]}, @generic={0xe3, 0x10, 0x1, "2bbcdf786fe1a2f932355101dce872a1e39af7ee7aa5ed7d820a1ce481a4d22d6c035c796885f54cfcdc5d0c06d68c21e4ee1b4d2daed12d886c43efb5385005881f0ff623413a051ee175f074d272edcdadf7fcb436af012f174177661bb7efdbad744808d04f13f58e17d38edfbb54e15849ce1bd381e3771106176c0cd2de77d39d426a1a739b0700b60499ba05f31891002987687ed4e1b2517701fae6078dbd82fce13f0851ed888ecad6ac61bde9efaf32ef8b83071f61ff139e97597f99a323c74288a14c5c356c219c42903e6838fa975a0a47a7e17a3e063b8e916b"}, @ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0xf6, 0x0, 0x100, 0x0, 0x3}]}, 0x4, [{0xbf, &(0x7f0000000480)=@string={0xbf, 0x3, "559b14c34fac17a23e1bf81dcb3111a519d8849d9cc827ad85d07ed0f2f86367026463a8041e17eb94bd6bb7f266b14d0acddd2fa83e06f4108141d79c00987c982004d174d01ec9fc3da5747ca4fe624b4a18785a507b9748e357fa5056e30b281a84505dbb48efe8d2fb69374be006e47874083c103a6fc2b2771694db95c5bbd2b6b32baeb354b055803324301b056a583f5ca263d9efcd4547037952ac7a7c4a00108bead2514f713a07245189e8afc95d3a75867ed982d27c562f"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x446}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x801}}, {0x92, &(0x7f00000005c0)=@string={0x92, 0x3, "c05171930322cd4aa7317e4b0a135c495c7cb3c882f5059ed8606d57d143d297e4c8f205cb1ae75987c2d3ee235397c784b9cb62b038eade33afa1ea59a68c21484782a6736311cce518aff5c3eea1a4c5c88f710ffc1061e816534054f1ac67322c68775468cbc7120426d91c0a57787df8cec6b9abb19fcf3a792836d5e2c749c033981854029290e453e40f9af357"}}]}) 782.529353ms ago: executing program 0 (id=5961): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="7000000000010104000000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108000200ac1e000108000740000000000c0010800700014000000009b8528173907687a3e2"], 0x70}}, 0x0) r2 = openat$cgroup_pressure(r0, &(0x7f00000000c0)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000080)={'full', 0x20, 0x2000000007, 0x20, 0x10000000fffff}, 0x2f) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r3, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000006800010000000000fddbdf250a00000000000000060007000300000008000500", @ANYRES32=r5, @ANYBLOB="18000880140001"], 0x40}, 0x1, 0x0, 0x0, 0x4008081}, 0x0) 688.604824ms ago: executing program 0 (id=5962): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x24, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x30}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xfffffff9}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 625.540625ms ago: executing program 4 (id=5963): r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000003c0)={0xb, @sdr={0x36314d4e, 0x4}}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/vmallocinfo\x00', 0x0, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x2a801, 0x0) sendfile(r4, r3, 0x0, 0x80000000) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, 0x0) ioctl$TCSETS(r2, 0x5402, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x3, 0x3, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001e000103020000200000000001000000080003"], 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f0000000000)) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000480)=@gcm_128={{0x304}, "0500000e00", "43ce399444a4c78900004000", '/:)N', "5f7b960b7f9d5422"}, 0x28) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4040000, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x38, 0x2}, @cond=[{0x2, 0x5, 0x40, 0x9, 0x8001, 0xfc01}, {0x9, 0x6, 0x401, 0x3, 0x2000, 0x8}]}) write$char_usb(r7, &(0x7f0000000040)="e2", 0x2250) writev(r1, &(0x7f0000001640)=[{&(0x7f0000000080)="4b178366b8a103c83b1efb822708a20d19e0b9deabcb6847c744b4ce8e190c2e92891f3d3dc53dcacfc863b78275e7d74982dd0021bbf9059fd26c8e7a218c0fc10f92e11bced44b16f6cf93306b3a0152dc87fd3917b8ee04325548f6ad5130cd86c41397966bc39312f47668e5ee65cfef78eb9d8796a8602f8efb08fbed142dc975b62307c9e622c18ea7bc989d3cf68c83e1f311607ee097b2ec524a76847551fad3cdf48e5ebfbf2fc623e746df6cf5db2d837830233463cec7a6de9b0595af", 0xc2}, {&(0x7f0000000180)="85f65cd5139c5617a32f264f7859d813cc588ad89f6fb9aaf8484ed18ebedf53a10836c619331c649b1923339bc1f13d03b9aa0f3b0e70b120f45f95271012bf6c3f505fe455ff169ceb", 0x4a}, {&(0x7f0000000540)="576b8068eec983aaaaf3209183dac220fff5037dd59b2abce43334e6a97607d1070a3dce4ad5cfe990f16a82e7032fd7e1769da02866b6065636abeb66e476785fcf61b7c77a8549b2b9a946ce03b8620afa4789f90fed277927e95119eea7f9fb55eebbd24ee66af7d3a39cd7d33cc3548d079c393445937f2ec06674b2eed45309ae7af70cf1cbaa7e367dc96610265d6ef5ef8f50d4b4e2dd540ca46095fea30ec4249413e0be3fa213a82a93e01ea55e2ad751ee0c3062de8c6859514a8acd6673ba22723e423147b6c3946fb0a4469d37638396b5778aa5f3843c51b009245839e1dacaae542fdc6eaf2797e19e007f1d7aaf5eab2c66ce485bae550c17cd106c149af1b6015d4a8c79cfd85c1f8123c3d247f371c5ee00615163a6b38b47e9a5e5493c4d881dac3c964ec3a39fff738bc55c139d8ce8501a68c8acfc69791ced8170cc35b86233e9d1aeb2fbfadf1871657f029881cbdac14b53e7e37141b5c5afd0c154a1f50841f67fab77c637391b2b86a2164a2279498a73215519c3764900a2d906b121f9504d7535c180b66ed883c60e02c05fdaea707e1b4297249686aede948229fdd98ba53d72e65a123ba42fe82825d435a788020df982580942e5c180b21d9b2c6ad97a7d861ac041f06d3ca04534cce9eddf54008afb338539af98e1632d6863ddef6a08b1a2aadcf24cc7409a8ade1b53c4b48f938cbdcb83f74d9ee4c17af30cace46043053b52179663706f04525874eebb9f1e51b6f794f01c5d1f92e07f99f9aa9f3535716b9a8bad1c105680a4814856b9815f65903c76456f6c4fabfd99710fc85dd40c7c39892dd2cfb18ab779d0d55fe0a7536660805f2e02ad4274eb6b44261607e36744329b4bfb7d39d529efeb6c877d7fd074076501558ba73c8cfb318da3f837906117726759df5de8cde5b731ecad215017259ffd4b57b57a0820b873367e4c916c207fbecbbbfc51e62aa494e46ce2b000f6767dcf931ca8d84360d54abcd7e611df1ff5c5459dc9ecd14d2c6b5b6ec9ef6b65489210de4b206aa9ba10b159a27b293fe9b5180f45b7ea94ca9eb045b8a017e1da2059c9812ffbee476fb2321bf65a493baa1423587f750635abced2a1c5d1b8d6aeb2359a0f38822b4fc297532ff773b213961d85721d35fb503e59caa47c6678cb65865d133170ed9b1f5fe4aeb726a31a98b67a45f51f65d475a21ce94d231e88d10ed444f3a0adbc0029772932c7539fc89b43d53dceebdaa14fcd0d2a7bd898839ae612bf3daf10267df35c3963799fe174f856f4c3de890c72537ee2873e9c114191d29e93692de78d39c17ca5a296cd228f3b54749f57a8bf02571cf140126db10492dcaa500caba41bcb2c7c19941ab596f162b7812b64804e2f1182f8fc776697193a4782eeec12dca17231734b526fb83590e8c4fca7d6f0282907d36cdf15e8d05d2707b1f9c2805cd0ff0900f58e700a3209e8cac8bc7501b7dbfb5945418e32f9f28d506b0fc30e0272fd0a7b9c227a63390c278348d003c8d9d7df7bfafa75dd26e79dfa1a4c166bbd0002aa80d922c7c1037958ebe3dcfc550a64958bc3272956626b0fc7b9b34cbe9322db2983c30092beff72f7bd67458fe7e58047343c80dd03204c0dea58ba478c2e19281c2e6879bf0e75b7b96aa1a9cfc84ade0e6966bd21b39688abdcabb557ef26c9bb62a7fe7410814dedb921aba84fd8410efa807a8aa73a100435f367edbe4b42daf47d4931cd8b7c1823302dd1a43c56429123f05a7a62f4e165a279dcd7595f337dd06c33300f3d290241707dca00cc78d9ee041f4249394211a8e8d38f6830fc1375f20c7394a9c277d34ece9c1d9d66b46a0753a5a1aecd5420ada041f70f2e5f80265ee9be34fe2e734b040de8c7bc8c231e49bd8126c4f942b18ff0efc1b2e40aa7c597e3b3bb63f746dd59cb2bb0d4100f30b5ab73e13e2637001f88ee0b382e5f01303db08d8b6b226d45587538bb452ce28196c627b5dbf8a27e0306ba52727b2d427916b166bf3212f1b5773b4e9e5514df6e5a66719044c4687fc5230388cc919655b372f800ca3d28fefb0dae0255ba7539f8771f81744a70ea1c174bc96b542cf7071d2eb0cb00705831549a322c59584a7ed85286a9ccb31934ad3655017a67ecb673c4ece015ed19ea31d21139991bbd48fea6a7e3064aec8f08cc4d8d5bc8024b915e02e9fa40406dc3d9bdc5feb718b075eff4ede3e952b38fc96bec33b825efdedfd718a917a78f2868a603144bfb9bd67160e796577da1fd4d75e71af194714eee01161d6e05d8910f0c1159be5964108c620146d2e83c36e2def9daf97220759919219146611620052bbcaf6c4001bf90fe682de9e27aef9bf4525366ca66caef8eb3d71e79fe7c97785a19285cc52d1d23bf35bc728f99030fa2cf6cca513662c69ba959f442ed4d59eb37a15e0f66beb693ed195181be0e41c0542d6df760bdaf695acbb81f599728cd8ba039e160d8753dfa1a997560bd13f13bce1004e87afb56721791279d13f476b510f097931f7943d03bb6d44dd9d0864a1b68aa0220514f32df8cfa8a8846d83596d9068084c6efa746821b614122ef92893330d3a51cc5911f3f9445b2bac66696ad06558058b3f00377db0cf9d4da342388259d18e1deb19724f57beb51952a642bd682f7d6d4a5859f02eb07011885ed681cdce3da319e63704ff0a1ea319e7ca83f759546b96288558f75a12b89a56ea13f3033db037616b09e0713ba3e10d48d8e600ca01ea3c7df2be3863f3ef1fddb18282563011900e82264aa1240587be0ac8f5c9ac7bb3147ff7a1cac5a1c7451ec9ad1e123d9458f893d043a2442eaf494ad3bb551e85dd17272cb12560f05b7eb471f0b882eb091d4c4ff1327d0aa28767579bfc0bef1ddb52b26e0850d0ac4628f93e9b76ccf37c4834f2e8bfb8413dfca83959cc01dfba34654f49b042d9ef7353150c6600078d7b5936e7b47dd080c83594fe979ab54eccb9ab4342e534c20cb42616da109eea9ae1e336ef5f16c87cc45fce8299e272dc1c979ac5e2db0bc3585e0d115e6f362dba8cc00d09d9ddd0bd0d1bd1af016ff185c8d1de9c36c871e4daef0d10a187df71ca53fd5a10978b0901a725bf3b7aeeb7cfbd42fa446db7c6223be8ca99f713aef9798fc4b61eba48b26a9d4013c1e0442a3ed3aca9b5546a97e2b0d1c476804a6d85cc75c75117c993a0e0cbbc07f2532578d8b0c51be833cee8d70615c4d0aeb262c7e6ccbe4086bdf4045a03f2bd7d4a1e2949bfb5fd93c146819b234cb03841217266c192b214627d7d1bd51f5d2c40f82b9687c739c79edef67793d543b6f217f3c3e0efecfab6e4be0fa75d894c985aa4a58e2f0877fb0c2010ad2f100bf1169451eeadf3f458532a958de3b827fa47e895e9c6ea71d952ec7b599b1b508a1af4337343141fb758717970155a4fe975f8a04ce7083289662dd5a855cb2d222f4b396cac10876009ff349e62577ccf7d9635dc7a790926fcc097fe9329a3d1226395a7bc8d25236c8442cab8a783c081c8665683ecf7fbdc50d44502dbfef734169e20911eb8c63e1b462abbd0930307eca689ca644579cb025bd5ac792df716762189ab2cb245a92544f8c3fd3492917295984f4096b6cf9412dc2a3d6ea14f95d74488bbb7304d09a60b2afe7afdf2e8b7859b4fd026a011d60478efa0ce9526cadfd29af51cbd54d39ebaf204dc53085f329551edb339dfb72ce39d8a8f0555473ce586a463f6eb4dec0fd18e0451f7409817a7329fcf202e01c618ab10aa0039d3d67f23cba564cc359df05a9a3a5dce12e696391c1d687906fb6e9127adf3c921051cad2120f0d314651f66707514700b7950369e3a1a8e1f39543aa3bedcbcfe493ed8c7b986a30acabfb13e97053e917b04eb3244baf378f8733443dd8ba2342740ea03dd7b6244469894d0c5d05d569275e9a7d35eccce0a3daaf6f051fd4e14d365fcaf7a4dc6b45448db4a00ca8f31714efe2e73bf3c0c72f6be225638b45297f301540fb7e4cc7e57ad74fc3f9ca8e35399e11ece2c9b755bf0ca78b0189d54d371177bcdddf6dc1519a745ebe6c81669edf3b36a986f59a4679449d51d832c1fe1b783d3a9ea60d798a85f14fd2a8957eaf5921e8a9c3822bf76c8b8e34a2c19b01cdaf53d6ef269a33c3097f10dae0df2c22cf8a18944f2729dfe4eae0fe14d2dda2d0fd6904806ebcc4381f8397d17a951319e023471007d14c6f32dff7da899c8df9861c7614e828c44b683d8bb183bb434d03e262b39dc32da7871a58abc33a3be3b08c3386cba3c7dc8894c69da4031a313b80f73cac42c0f4cf96719e5f39707ed2f2576fd288d262e67c71dfa52bd3778e0f068256b3eefb8771c66a4bb72613e77e39043788688bccc914a93df622854cab0cb659bc4132cc0bb61b981b537498a0d3e7853dd71027a7ce2deae8363417a5714c32b8fc8cf87038a5c030338bc2e95a3fc35ea39e2245e29d2ef85da600de74912272e8fa39db8d1b994f49bad3979073615983e4e44232a52b9c1e2ef6e2d0fb0feca07106a9c02cacb47a5bbb3a38e21558afd30d40ffd9476fd8159f3741ac71c410370777edde10e849f1d9de3c2856274556f0ac5321d77b9e6d16e7a6271e892b6189cf30c86bd90806a7e3e70c57439f0ed6f07eea6d99c2cc5367754500aae059edda5e98afb3114c788c765e43fd89c0ac6599db8200e25171683502aabf54a1467a6afe5b3e950424390a196cc707d71237bf798e97675ea26fb17d4110428bcd41d7b5e614ac46c9b53559c3b7c1169bf4695198cd0720543c7a82568a5dacf174de2df7e28d13a05de9ff01d3c5a58010842788a76c264b8918c521e9c22ee34cc512b36ff3dbf2c8c3ef697236e1c5c710c7baab3b2b838aec507f08e5856eba9069b7a258fc0d64a32195834a5fde870f5e0be8eb24e2b1d57f5c59f500ab4002fef5c0ad13b34645ba36f6b56009af0d6c8d690a319b9d606720c2b2d48b936eee22a52bf243050d405be292ab7263b00ff58ea9931e3b330f3637278aefd40550c70f6abf3557e7e402c4e200dd85abd82ec2cdf16fc09d7e2f906dbca0a34023780ffa686de87c1e2b6f0abcdfd22bedba9e8c99e686eda7dd9a6e8ef26be383b4ca7b17ead6f57c2108edca1f94de7bb80146e8c6c1f2e29c83ac90ac0d92c88b084bda12acac4c0b29ec442863548458cb591b22a6e040b2efcf4c16477ad0dfafbb53a5848d504d89748ef7f8f50208d6f43f87ff7f1dabaaa403ed7ce2a8e20d1fd4cc5671718e57190d2d3ce87b52edd770a17eb0d6da920f43cf162dcf8f3e73ad0d3cf099ddfff817468ddd30f65266adf128d8682d1ff0ef3c97caa6bbd723ddc92b10c2c1a4a69716bd38998a41d321d413001d2cfc54995432905dc46fe964cd571d4867e60a35cbeeae4cbfa02509f7760358a812fce977ca63bcc177b4a7d0abe9f3a575e65e69f3c4179e177c1050140f9aa757d1938b0f9a97c7c2a4337dce9344ea7da8457f7056501d7696ce7f601bf5270262dba47e2d8e2fc94dbf743d1f36df254458f646e914c96d59bd4248af560c5fcb33be9361afc2eecf7d542dc04d08bac7e184d6c10867460d5ec25602cf60901542cfcfaddb17b51cbef5bc5942d46cc140f856cd7a76ea2e741046d9c8fceb030a810b69df5ddf0178cd8b7db2aa9f389053543eb677fb65bf3726021283a02ddb630b9f919fe92e5975b51841da6301b6b64c5e", 0x1000}, {&(0x7f0000001540)="03a767b67b90cba6291551a727ef3ce33de185783596a0775b322064909b45af94cb15a3d679a25ce6b575cdeca30d6cb3d94f3c313a4f5e7305998537f126cba94f44301209b5584972f1d7e2e7bdc909c0155e556b7d390243f73b1f90257055c36eb1ddc97b1207981984c11e608736cb2566451dba0a02406050565b50fcbbbc8012bc4fc64de2e4fc36696223c3d6c7a5be66dac6161bab05ea811b4e4e88b60441d59de77748ba4d675a75d2e25ef834b8d324d74e5a34d6ae4b65dc5e9de37fe79ff5c681fd6d4d8a1f5882c2c44021bc93e4f2e82f2c6dd690c2abb7fb231fadcc30a179ec4ed7cd251d66334f0a44c4764f9b", 0xf7}], 0x4) write$P9_RSTATu(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="930200007d00000005f0000000000000050000000000000000000000000000000000000000000000000000000000000000001f00046e6f6465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05f7"], 0x232) 0s ago: executing program 1 (id=5964): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2}, 0x50) read$FUSE(r0, &(0x7f00000090c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r3}, 0x10) ioctl$FS_IOC_RESVSP(r1, 0x40086602, 0x0) kernel console output (not intermixed with test programs): .537902][ T12] bond3 (unregistering): Released all slaves [ 957.579571][T21980] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 4, id = 0 [ 957.594892][T21977] IPVS: stopping backup sync thread 21980 ... [ 957.729168][ T12] tipc: Left network mode [ 957.751007][ T12] IPVS: stopping backup sync thread 18024 ... [ 957.765748][ T1602] usb 5-1: USB disconnect, device number 27 [ 957.807898][T21984] netlink: 124 bytes leftover after parsing attributes in process `syz.3.5544'. [ 958.115422][ T5734] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 958.285064][ T5734] usb 4-1: unable to get BOS descriptor or descriptor too short [ 958.296750][ T5734] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 220, changing to 7 [ 958.313294][ T5734] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 958.332133][ T5734] usb 4-1: New USB device found, idVendor=041e, idProduct=0005, bcdDevice= 0.40 [ 958.350662][ T5734] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.376779][ T5734] usb 4-1: Product: syz [ 958.391696][ T5734] usb 4-1: Manufacturer: syz [ 958.402160][ T5734] usb 4-1: SerialNumber: syz [ 958.668091][T21984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 958.702907][T21984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 958.791300][ T5734] usb 4-1: USB disconnect, device number 27 [ 958.988368][T22012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5549'. [ 959.037463][T22012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5549'. [ 959.049282][ T5290] 8021q: adding VLAN 0 to HW filter on device eth1 [ 959.316584][T21446] Bluetooth: hci5: command tx timeout [ 959.394419][ T12] hsr_slave_0: left promiscuous mode [ 959.411997][ T12] hsr_slave_1: left promiscuous mode [ 959.431282][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 959.455381][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 959.485735][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 959.503465][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 959.547405][ T12] veth1_macvtap: left promiscuous mode [ 959.563368][ T12] veth0_macvtap: left promiscuous mode [ 959.578123][ T12] veth1_vlan: left promiscuous mode [ 959.589389][ T12] veth0_vlan: left promiscuous mode [ 960.337667][ T29] audit: type=1326 audit(1778425445.823:16318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22018 comm="syz.1.5551" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865259cdd9 code=0x7fc00000 [ 960.373688][ T12] team0 (unregistering): Port device team_slave_1 removed [ 960.399365][ T12] team0 (unregistering): Port device team_slave_0 removed [ 961.393164][T21446] Bluetooth: hci5: command tx timeout [ 961.473694][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 961.589275][ T29] audit: type=1326 audit(1778425447.073:16319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22024 comm="syz.1.5552" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865259cdd9 code=0x7fc00000 [ 961.703697][T22050] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5559'. [ 961.781136][ T12] IPVS: stop unused estimator thread 0... [ 961.965886][T16152] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 961.993940][T21951] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 962.017711][T21951] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 962.031242][T21951] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 962.045458][T21951] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 962.054746][T21951] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 962.069829][T21951] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 962.095177][T21951] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 962.133195][T16152] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 962.153257][T21951] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 962.160323][T16152] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.179022][T16152] usb 4-1: Product: syz [ 962.188433][T16152] usb 4-1: Manufacturer: syz [ 962.206610][T16152] usb 4-1: SerialNumber: syz [ 962.218501][T16152] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 962.240722][ T808] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 962.329437][T21951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 962.358125][T21951] 8021q: adding VLAN 0 to HW filter on device team0 [ 962.376713][ T1130] bridge0: port 1(bridge_slave_0) entered blocking state [ 962.383907][ T1130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 962.400553][ T1130] bridge0: port 2(bridge_slave_1) entered blocking state [ 962.407722][ T1130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 962.710326][T21951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 962.831670][T21951] veth0_vlan: entered promiscuous mode [ 962.871741][T21951] veth1_vlan: entered promiscuous mode [ 962.890064][ T1602] usb 4-1: USB disconnect, device number 28 [ 962.948584][T21951] veth0_macvtap: entered promiscuous mode [ 962.982387][T21951] veth1_macvtap: entered promiscuous mode [ 963.049161][T21951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 963.099235][T21951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 963.137996][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.159138][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.180835][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.200455][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.313637][ T808] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 963.331841][ T808] ath9k_htc: Failed to initialize the device [ 963.367542][ T1602] usb 4-1: ath9k_htc: USB layer deinitialized [ 963.474094][T21446] Bluetooth: hci5: command tx timeout [ 963.645674][T14501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 963.667337][T14501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 963.778829][T14501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 963.810644][T14501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 964.141694][T22087] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5563'. [ 964.370746][ T5734] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 964.563633][ T5734] usb 2-1: Using ep0 maxpacket: 16 [ 964.574048][ T5734] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 964.584259][ T5734] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.592699][ T5734] usb 2-1: Product: syz [ 964.598064][ T5734] usb 2-1: Manufacturer: syz [ 964.603202][ T5734] usb 2-1: SerialNumber: syz [ 964.610798][ T5734] usb 2-1: config 0 descriptor?? [ 964.623551][ T5734] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 964.813215][ T1602] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 964.909058][T22105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5571'. [ 964.983829][ T1602] usb 3-1: Using ep0 maxpacket: 32 [ 964.990693][ T1602] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 964.999543][ T1602] usb 3-1: config 0 has no interface number 0 [ 965.008612][ T1602] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 965.018069][ T1602] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.030251][ T1602] usb 3-1: Product: syz [ 965.037405][T22107] netlink: 92 bytes leftover after parsing attributes in process `syz.3.5571'. [ 965.047273][ T5734] usb 2-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 965.054758][ T1602] usb 3-1: Manufacturer: syz [ 965.059878][ T1602] usb 3-1: SerialNumber: syz [ 965.076703][ T1602] usb 3-1: config 0 descriptor?? [ 965.091938][ T1602] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 965.232003][T22089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 965.245940][T22089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 965.258231][T22089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 965.268608][T22089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 965.288310][ T24] usb 2-1: USB disconnect, device number 36 [ 965.316877][ T24] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 965.327750][ T1602] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 965.328154][ T24] visor 2-1:0.0: device disconnected [ 965.355255][ T1602] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB2 [ 965.468816][T22112] netlink: 9 bytes leftover after parsing attributes in process `syz.4.5573'. [ 965.485001][T22112] netlink: 9 bytes leftover after parsing attributes in process `syz.4.5573'. [ 965.706412][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 965.709959][ T24] usb 3-1: USB disconnect, device number 41 [ 965.733693][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 965.756294][T22118] tipc: Cannot configure node identity twice [ 965.764516][ T24] quatech-serial ttyUSB2: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB2 [ 965.798771][ T24] quatech2 3-1:0.51: device disconnected [ 965.950490][T22126] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 965.959953][ T808] team_slave_0: entered promiscuous mode [ 965.967456][ T808] team_slave_1: entered promiscuous mode [ 966.022086][T22128] netlink: 248 bytes leftover after parsing attributes in process `syz.1.5580'. [ 966.063160][T16152] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 966.112836][T22130] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5581'. [ 966.134960][T22130] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5581'. [ 966.233549][T16152] usb 4-1: Using ep0 maxpacket: 16 [ 966.249043][T16152] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 966.284698][T16152] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 966.308394][T16152] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 966.334977][T16152] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 966.351309][T16152] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.382165][T16152] usb 4-1: config 0 descriptor?? [ 966.686328][T22150] syzkaller1: entered promiscuous mode [ 966.691862][T22150] syzkaller1: entered allmulticast mode [ 966.716971][T22154] netlink: 180 bytes leftover after parsing attributes in process `syz.4.5589'. [ 966.964953][T22160] syzkaller0: entered promiscuous mode [ 966.971626][T22160] syzkaller0: entered allmulticast mode [ 967.064796][T16152] usbhid 4-1:0.0: can't add hid device: -71 [ 967.078328][T16152] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 967.097418][T16152] usb 4-1: USB disconnect, device number 29 [ 967.670492][ T29] audit: type=1326 audit(1778425453.153:16320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22181 comm="syz.1.5600" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f865259cdd9 code=0x0 [ 967.907076][T22195] netlink: 'syz.2.5606': attribute type 6 has an invalid length. [ 967.954350][ T5724] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 968.123434][ T5724] usb 4-1: Using ep0 maxpacket: 8 [ 968.190289][ T5724] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 968.200004][ T1602] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 968.210572][ T5724] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.220424][ T5724] usb 4-1: Product: syz [ 968.224768][ T5724] usb 4-1: Manufacturer: syz [ 968.229521][ T5724] usb 4-1: SerialNumber: syz [ 968.236601][ T5724] usb 4-1: config 0 descriptor?? [ 968.246523][ T5724] gspca_main: sq930x-2.14.0 probing 2770:930c [ 968.375427][ T1602] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 968.389503][ T1602] usb 3-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 968.398954][ T1602] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.407534][ T1602] usb 3-1: Product: syz [ 968.411902][ T1602] usb 3-1: Manufacturer: syz [ 968.416786][ T1602] usb 3-1: SerialNumber: syz [ 968.455616][ T5724] gspca_sq930x: reg_r 001f failed -32 [ 968.471967][ T5724] sq930x 4-1:0.0: probe with driver sq930x failed with error -32 [ 968.526615][T22206] netlink: 'syz.1.5611': attribute type 8 has an invalid length. [ 968.583301][ T10] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 968.629716][ T1602] usb 3-1: selecting invalid altsetting 1 [ 968.753407][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 968.765794][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 968.788821][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 968.821342][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 968.834166][ T1602] LME2510(C): Firmware Status: 06 03 47 00 00 00 [ 968.834219][ T1602] usb 3-1: dvb_usb_v2: found a 'DM04_LME2510C_DVB-S RS2000' in warm state [ 968.849781][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.858974][ T10] usb 5-1: Product: syz [ 968.869669][ T10] usb 5-1: Manufacturer: syz [ 968.874614][ T1602] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 968.884383][ T10] usb 5-1: SerialNumber: syz [ 968.897332][ T1602] usb 3-1: dvb_usb_v2: will use the device's hardware PID filter (table count: 15) [ 968.922117][ T1602] dvbdev: DVB: registering new adapter (DM04_LME2510C_DVB-S RS2000) [ 968.932274][ T10] usb 5-1: 0:2 : does not exist [ 968.947566][ T1602] usb 3-1: media controller created [ 968.961449][ T1602] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 969.001319][T16152] usb 4-1: USB disconnect, device number 30 [ 969.043511][ T24] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 969.143841][ T1602] DVB: Unable to find symbol m88rs2000_attach() [ 969.152604][ T1602] LME2510(C): DM04/QQBOX Not Powered up or not Supported [ 969.152660][ T1602] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 969.214723][ T1602] usb 3-1: USB disconnect, device number 42 [ 969.235217][ T10] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 969.255025][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 969.335311][ T10] usb 5-1: USB disconnect, device number 28 [ 969.341550][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 969.371287][ T29] audit: type=1326 audit(1778425454.853:16321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22216 comm="syz.3.5615" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f19a639cdd9 code=0x0 [ 969.422134][T14287] udevd[14287]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 969.447215][ T24] usb 2-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 969.457776][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.466908][ T24] usb 2-1: Product: syz [ 969.471328][ T24] usb 2-1: Manufacturer: syz [ 969.479669][ T24] usb 2-1: SerialNumber: syz [ 969.723387][T22212] netlink: 7 bytes leftover after parsing attributes in process `syz.1.5613'. [ 969.853179][ T10] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 969.927917][T22222] FAULT_INJECTION: forcing a failure. [ 969.927917][T22222] name failslab, interval 1, probability 0, space 0, times 0 [ 969.941073][T22222] CPU: 1 UID: 0 PID: 22222 Comm: syz.4.5617 Tainted: G L syzkaller #0 PREEMPT(full) [ 969.941093][T22222] Tainted: [L]=SOFTLOCKUP [ 969.941097][T22222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 969.941103][T22222] Call Trace: [ 969.941108][T22222] [ 969.941113][T22222] dump_stack_lvl+0xe8/0x150 [ 969.941133][T22222] should_fail_ex+0x412/0x560 [ 969.941150][T22222] should_failslab+0xa8/0x100 [ 969.941166][T22222] __kmalloc_noprof+0xe8/0x760 [ 969.941185][T22222] ? tomoyo_encode+0x28b/0x550 [ 969.941203][T22222] tomoyo_encode+0x28b/0x550 [ 969.941219][T22222] tomoyo_realpath_from_path+0x58d/0x5d0 [ 969.941238][T22222] ? tomoyo_path_number_perm+0x219/0x630 [ 969.941249][T22222] tomoyo_path_number_perm+0x246/0x630 [ 969.941262][T22222] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 969.941273][T22222] ? __lock_acquire+0x6b5/0x2cf0 [ 969.941293][T22222] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 969.941317][T22222] ? __fget_files+0x2a/0x420 [ 969.941331][T22222] ? __fget_files+0x2a/0x420 [ 969.941342][T22222] ? __fget_files+0x3a0/0x420 [ 969.941353][T22222] ? __fget_files+0x2a/0x420 [ 969.941367][T22222] security_file_ioctl+0xc3/0x2a0 [ 969.941379][T22222] __se_sys_ioctl+0x47/0x170 [ 969.941394][T22222] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.941405][T22222] do_syscall_64+0x15f/0xf80 [ 969.941419][T22222] ? trace_irq_disable+0x3b/0x140 [ 969.941434][T22222] ? clear_bhb_loop+0x40/0x90 [ 969.941446][T22222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.941456][T22222] RIP: 0033:0x7f59b5d9cdd9 [ 969.941466][T22222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 969.941475][T22222] RSP: 002b:00007f59b6c3a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 969.941486][T22222] RAX: ffffffffffffffda RBX: 00007f59b6015fa0 RCX: 00007f59b5d9cdd9 [ 969.941493][T22222] RDX: 0000200000000140 RSI: 0000000000002285 RDI: 0000000000000003 [ 969.941499][T22222] RBP: 00007f59b6c3a090 R08: 0000000000000000 R09: 0000000000000000 [ 969.941506][T22222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 969.941511][T22222] R13: 00007f59b6016038 R14: 00007f59b6015fa0 R15: 00007f59b613fa48 [ 969.941526][T22222] [ 969.941557][T22222] ERROR: Out of memory at tomoyo_realpath_from_path. [ 970.196004][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 970.206582][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 970.219859][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 970.230099][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.253845][ T10] usb 3-1: config 0 descriptor?? [ 970.292455][ T10] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 970.603281][T16152] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 970.753387][T16152] usb 4-1: Using ep0 maxpacket: 16 [ 970.760469][T16152] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 970.772212][T16152] usb 4-1: config 0 interface 0 has no altsetting 0 [ 970.781202][T16152] usb 4-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 970.790405][T16152] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.798478][T16152] usb 4-1: Product: syz [ 970.802914][T16152] usb 4-1: Manufacturer: syz [ 970.807687][T16152] usb 4-1: SerialNumber: syz [ 970.814979][T16152] usb 4-1: config 0 descriptor?? [ 970.823517][ T808] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 970.974839][ T808] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 970.987834][ T808] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 970.997936][ T808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.006230][ T808] usb 5-1: Product: syz [ 971.010461][ T808] usb 5-1: Manufacturer: syz [ 971.015273][ T808] usb 5-1: SerialNumber: syz [ 971.022430][ T808] usb 5-1: config 0 descriptor?? [ 971.037328][ C1] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 971.047708][T16152] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input128 [ 971.066737][ T808] streamzap 5-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 971.077797][T16152] imon:send_packet: packet tx failed (-71) [ 971.103179][T16152] imon 4-1:0.0: panel buttons/knobs setup failed [ 971.193890][T16152] rc_core: IR keymap rc-imon-pad not found [ 971.202642][T16152] Registered IR keymap rc-empty [ 971.208768][T16152] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 971.219417][T16152] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 971.229860][T16152] imon:send_packet: packet tx failed (-71) [ 971.263362][T16152] imon 4-1:0.0: remote input dev register failed [ 971.270021][T16152] imon 4-1:0.0: imon_init_intf0: rc device setup failed [ 971.291723][T16152] imon 4-1:0.0: unable to initialize intf0, err 0 [ 971.298498][T16152] imon:imon_probe: failed to initialize context! [ 971.299968][ T10] usb 5-1: USB disconnect, device number 29 [ 971.307272][T16152] imon 4-1:0.0: unable to register, err -19 [ 971.335418][T16152] usb 4-1: USB disconnect, device number 31 [ 971.478485][T22242] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 971.653216][T16152] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 971.697892][ T24] usb 2-1: 1:1 : bogus bTerminalLink 5 [ 971.704632][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 971.712302][ T24] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 971.728036][ T24] usb 2-1: 1:1 : bogus bTerminalLink 5 [ 971.746810][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 971.758162][ T24] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 971.771432][ T24] usb 2-1: 1:1 : bogus bTerminalLink 5 [ 971.777969][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 971.806859][T16152] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 971.819725][T22249] netlink: 'syz.1.5625': attribute type 12 has an invalid length. [ 971.839500][T16152] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 971.856857][T16152] usb 4-1: config 0 interface 0 has no altsetting 0 [ 971.875481][ T24] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 971.896050][ T24] usb 2-1: USB disconnect, device number 37 [ 971.906932][T16152] usb 4-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 971.924260][T16152] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.932436][T16152] usb 4-1: Product: syz [ 971.937226][T16152] usb 4-1: Manufacturer: syz [ 971.941979][T16152] usb 4-1: SerialNumber: syz [ 971.946820][T14287] udevd[14287]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 971.975135][T16152] usb 4-1: config 0 descriptor?? [ 971.987722][T22226] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 972.106425][T22252] netlink: 192 bytes leftover after parsing attributes in process `syz.0.5627'. [ 972.123915][T22254] netlink: 9 bytes leftover after parsing attributes in process `syz.4.5626'. [ 972.136140][T22254] netlink: 9 bytes leftover after parsing attributes in process `syz.4.5626'. [ 972.160118][T22254] FAULT_INJECTION: forcing a failure. [ 972.160118][T22254] name failslab, interval 1, probability 0, space 0, times 0 [ 972.175433][T22254] CPU: 0 UID: 0 PID: 22254 Comm: syz.4.5626 Tainted: G L syzkaller #0 PREEMPT(full) [ 972.175459][T22254] Tainted: [L]=SOFTLOCKUP [ 972.175465][T22254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 972.175476][T22254] Call Trace: [ 972.175483][T22254] [ 972.175490][T22254] dump_stack_lvl+0xe8/0x150 [ 972.175517][T22254] should_fail_ex+0x412/0x560 [ 972.175543][T22254] should_failslab+0xa8/0x100 [ 972.175566][T22254] __kmalloc_cache_noprof+0x88/0x660 [ 972.175589][T22254] ? nft_trans_rule_add+0x59/0x440 [ 972.175614][T22254] nft_trans_rule_add+0x59/0x440 [ 972.175638][T22254] nf_tables_newrule+0x1b72/0x28b0 [ 972.175670][T22254] ? __pfx_nf_tables_newrule+0x10/0x10 [ 972.175695][T22254] ? nfnl_pernet+0x23/0x240 [ 972.175715][T22254] ? nfnl_pernet+0x23/0x240 [ 972.175741][T22254] ? __nla_parse+0x40/0x60 [ 972.175768][T22254] nfnetlink_rcv+0x123e/0x27b0 [ 972.175822][T22254] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 972.175885][T22254] ? netlink_deliver_tap+0x2e/0x1b0 [ 972.175919][T22254] ? netlink_deliver_tap+0x2e/0x1b0 [ 972.175940][T22254] ? netlink_deliver_tap+0x2e/0x1b0 [ 972.175967][T22254] netlink_unicast+0x75c/0x8e0 [ 972.175998][T22254] netlink_sendmsg+0x813/0xb40 [ 972.176028][T22254] ? __pfx_netlink_sendmsg+0x10/0x10 [ 972.176054][T22254] ? aa_sock_msg_perm+0xf1/0x1b0 [ 972.176079][T22254] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 972.176105][T22254] ____sys_sendmsg+0x972/0x9f0 [ 972.176129][T22254] ? __might_fault+0xaf/0x130 [ 972.176156][T22254] ? __pfx_____sys_sendmsg+0x10/0x10 [ 972.176189][T22254] ? import_iovec+0x73/0xa0 [ 972.176217][T22254] ___sys_sendmsg+0x2a5/0x360 [ 972.176240][T22254] ? __lock_acquire+0x6b5/0x2cf0 [ 972.176265][T22254] ? __pfx____sys_sendmsg+0x10/0x10 [ 972.176322][T22254] ? __fget_files+0x2a/0x420 [ 972.176342][T22254] ? __fget_files+0x3a0/0x420 [ 972.176373][T22254] __x64_sys_sendmsg+0x1bd/0x2a0 [ 972.176399][T22254] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 972.176435][T22254] ? __pfx_ksys_write+0x10/0x10 [ 972.176467][T22254] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.176487][T22254] do_syscall_64+0x15f/0xf80 [ 972.176510][T22254] ? trace_irq_disable+0x3b/0x140 [ 972.176535][T22254] ? clear_bhb_loop+0x40/0x90 [ 972.176558][T22254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.176576][T22254] RIP: 0033:0x7f59b5d9cdd9 [ 972.176593][T22254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 972.176606][T22254] RSP: 002b:00007f59b6c3a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 972.176625][T22254] RAX: ffffffffffffffda RBX: 00007f59b6015fa0 RCX: 00007f59b5d9cdd9 [ 972.176638][T22254] RDX: 0000000000004000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 972.176649][T22254] RBP: 00007f59b6c3a090 R08: 0000000000000000 R09: 0000000000000000 [ 972.176661][T22254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 972.176671][T22254] R13: 00007f59b6016038 R14: 00007f59b6015fa0 R15: 00007f59b613fa48 [ 972.176707][T22254] [ 972.535026][ C1] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 972.547111][T16152] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input130 [ 972.589281][T22262] FAULT_INJECTION: forcing a failure. [ 972.589281][T22262] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 972.619802][ T5709] usb 3-1: USB disconnect, device number 43 [ 972.629031][T22262] CPU: 1 UID: 0 PID: 22262 Comm: syz.0.5630 Tainted: G L syzkaller #0 PREEMPT(full) [ 972.629059][T22262] Tainted: [L]=SOFTLOCKUP [ 972.629066][T22262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 972.629076][T22262] Call Trace: [ 972.629084][T22262] [ 972.629091][T22262] dump_stack_lvl+0xe8/0x150 [ 972.629111][T22262] should_fail_ex+0x412/0x560 [ 972.629128][T22262] _copy_from_user+0x2d/0xb0 [ 972.629144][T22262] ___sys_recvmsg+0x175/0x590 [ 972.629162][T22262] ? __pfx____sys_recvmsg+0x10/0x10 [ 972.629179][T22262] ? __fget_files+0x2a/0x420 [ 972.629205][T22262] do_recvmmsg+0x334/0x800 [ 972.629223][T22262] ? __pfx_do_recvmmsg+0x10/0x10 [ 972.629243][T22262] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 972.629277][T22262] __x64_sys_recvmmsg+0x198/0x250 [ 972.629302][T22262] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 972.629333][T22262] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.629346][T22262] do_syscall_64+0x15f/0xf80 [ 972.629360][T22262] ? trace_irq_disable+0x3b/0x140 [ 972.629376][T22262] ? clear_bhb_loop+0x40/0x90 [ 972.629388][T22262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.629398][T22262] RIP: 0033:0x7fd7a559cdd9 [ 972.629410][T22262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 972.629419][T22262] RSP: 002b:00007fd7a63bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 972.629431][T22262] RAX: ffffffffffffffda RBX: 00007fd7a5815fa0 RCX: 00007fd7a559cdd9 [ 972.629438][T22262] RDX: 03ffffffffffff67 RSI: 0000200000002440 RDI: 0000000000000004 [ 972.629445][T22262] RBP: 00007fd7a63bf090 R08: 0000000000000000 R09: 0000000000000000 [ 972.629451][T22262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 972.629457][T22262] R13: 00007fd7a5816038 R14: 00007fd7a5815fa0 R15: 00007fd7a593fa48 [ 972.629471][T22262] [ 972.832539][T22261] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5629'. [ 972.861655][T22261] team1: entered promiscuous mode [ 972.866762][T22261] team1: entered allmulticast mode [ 972.872346][T22261] 8021q: adding VLAN 0 to HW filter on device team1 [ 972.882643][T22261] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5629'. [ 972.911443][T22261] team2: entered promiscuous mode [ 972.916607][T22261] team2: entered allmulticast mode [ 972.922155][T22261] 8021q: adding VLAN 0 to HW filter on device team2 [ 972.986231][ T24] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 973.073183][T16152] rc_core: IR keymap rc-imon-pad not found [ 973.079087][T16152] Registered IR keymap rc-empty [ 973.084194][T16152] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 973.095016][T16152] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 973.134122][T16152] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 973.148042][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 973.162682][T16152] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input131 [ 973.177228][ T24] usb 2-1: config 0 has no interfaces? [ 973.198403][ T24] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 973.198436][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.198458][ T24] usb 2-1: Product: syz [ 973.198474][ T24] usb 2-1: Manufacturer: syz [ 973.198490][ T24] usb 2-1: SerialNumber: syz [ 973.206767][ T24] usb 2-1: config 0 descriptor?? [ 973.224892][T16152] imon 4-1:0.0: iMON device (15c2:0045, intf0) on usb<4:32> initialized [ 973.396720][T22273] netlink: 'syz.4.5632': attribute type 1 has an invalid length. [ 973.396926][T22273] netlink: 'syz.4.5632': attribute type 2 has an invalid length. [ 973.396942][T22273] netlink: 'syz.4.5632': attribute type 1 has an invalid length. [ 973.396955][T22273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5632'. [ 973.648478][T22279] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5636'. [ 973.697536][T22279] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 973.723425][T22279] bond1 (unregistering): Released all slaves [ 973.868391][T22284] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5637'. [ 974.064920][T22293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 974.078393][T22293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 974.701793][ T1602] usb 4-1: USB disconnect, device number 32 [ 974.822173][T22313] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 974.994304][ T24] usb 2-1: USB disconnect, device number 38 [ 975.026739][T22317] fuse: Bad value for 'fd' [ 975.793192][ T1602] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 975.916641][T22349] syzkaller0: entered promiscuous mode [ 975.922250][T22349] syzkaller0: entered allmulticast mode [ 975.967310][ T1602] usb 2-1: Using ep0 maxpacket: 16 [ 975.976658][ T1602] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 975.986930][ T1602] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.996250][ T1602] usb 2-1: Product: syz [ 976.000710][ T1602] usb 2-1: Manufacturer: syz [ 976.008784][ T1602] usb 2-1: SerialNumber: syz [ 976.018975][ T1602] usb 2-1: config 0 descriptor?? [ 976.026225][ T1602] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 976.093176][ T24] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 976.225995][T22327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 976.235943][T22327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 976.245961][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 976.257486][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 976.263266][ T5734] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 976.268256][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 976.289038][T22329] binder: BINDER_SET_CONTEXT_MGR already set [ 976.296863][T22329] binder: 22326:22329 ioctl 4018620d 200000000100 returned -16 [ 976.306535][ T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 976.316291][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.324740][T22329] binder: BINDER_SET_CONTEXT_MGR already set [ 976.332674][T22329] binder: 22326:22329 ioctl 4018620d 200000004a80 returned -16 [ 976.341761][T22327] binder_alloc: 22326: binder_alloc_buf, no vma [ 976.343983][ T24] usb 3-1: config 0 descriptor?? [ 976.357341][ T1602] ssu100 2-1:0.0: probe with driver ssu100 failed with error -110 [ 976.433346][ T5734] usb 4-1: Using ep0 maxpacket: 32 [ 976.441452][ T5734] usb 4-1: config 7 has an invalid interface number: 63 but max is 0 [ 976.449836][ T5734] usb 4-1: config 7 has no interface number 0 [ 976.456025][ T5734] usb 4-1: config 7 interface 63 altsetting 1 endpoint 0xE has invalid wMaxPacketSize 0 [ 976.465927][ T5734] usb 4-1: config 7 interface 63 has no altsetting 0 [ 976.475653][ T5734] usb 4-1: New USB device found, idVendor=0499, idProduct=1044, bcdDevice=6d.8e [ 976.484947][ T5734] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.492992][ T5734] usb 4-1: Product: 䗓륧ꋲॗá¾æ‚î¯ä¤¯ä£ é²½ï®Šáœ‚갠ﮯ溂⹞ë½î¡œèŒ»äƒ­ë•œä³­í‹…鳭橠⭋詧ⓔ絊熰ïžã°–‣ᚦì¯é«©ì°±î©©ì••ì¿«åŸ‡ïŠ™å„´åŸ‹å˜¬ë¿¨æµ±á„ŠîžçŠ‹á‡šå’¾à¸°å§ƒî©¤æ§£è‰¬×¯ä²°ë¼“রꟋ蠷㵹藺홺䇫㣣₢Ȫ낆༵鋜倕ï˜ï‹Å¦å‚’犺ჟ鮄蔙鎃ᩨ㾗蹀㊪Ô羭饮ﳱ绎黴ﵑゎ [ 976.524245][ T5734] usb 4-1: Manufacturer: Є [ 976.529362][ T5734] usb 4-1: SerialNumber: 飦翿顚柵ࢺஃ굅ﱉ変畃ᇡ⳵慪뙮䜲åšç²˜ä±œæ™€êŒºã¤¹á•–䟼ອ퇳䲜鴕庲ë¹ï’™ã´“é‡ìƒ†ì³“ã„ʖ⡎嶭ᆸ밵⸡Ꭱ⛄￪몧ㄨꮚ臰ç·ì®‰ç¤«è˜†á¶žç…¸ÊºÔ‚ [ 976.755485][T22349] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 976.781571][ T5734] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 976.789355][ T24] plantronics 0003:047F:FFFF.0029: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 976.882691][ T5734] snd-usb-audio 4-1:7.63: probe with driver snd-usb-audio failed with error -2 [ 976.905076][ T5734] usb 4-1: USB disconnect, device number 33 [ 976.934007][T14287] udevd[14287]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:7.63/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 977.027328][ T5724] usb 3-1: USB disconnect, device number 44 [ 977.090103][ T24] usb 2-1: USB disconnect, device number 39 [ 977.433008][T22372] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5663'. [ 977.442707][T22372] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5663'. [ 977.762700][T22385] fuse: Invalid rootmode [ 977.793026][T22387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5665'. [ 977.808841][T22387] netlink: 'syz.2.5665': attribute type 1 has an invalid length. [ 977.817417][T22387] netlink: 'syz.2.5665': attribute type 2 has an invalid length. [ 978.063396][ T24] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 978.089802][T22392] binder_alloc: 22390: binder_alloc_buf, no vma [ 978.114586][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 978.255747][ T24] usb 3-1: config 1 has an invalid descriptor of length 115, skipping remainder of the config [ 978.273235][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 978.310626][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 978.323924][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.332059][ T24] usb 3-1: Product: syz [ 978.336414][ T24] usb 3-1: Manufacturer: syz [ 978.341203][ T24] usb 3-1: SerialNumber: syz [ 978.464762][T22395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 978.484134][T22395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 978.583580][ T24] usb 3-1: 0:1 : does not exist [ 978.589136][ T24] usb 3-1: unit 6 not found! [ 978.600353][ T24] usb 3-1: unit 2 not found! [ 978.667418][ T24] usb 3-1: USB disconnect, device number 45 [ 978.704814][ T5724] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 978.713088][T14287] udevd[14287]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 978.875416][ T5724] usb 4-1: config 0 interface 0 has no altsetting 0 [ 978.893318][ T5724] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 978.904173][ T5724] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.922911][ T5724] usb 4-1: config 0 descriptor?? [ 979.181537][T22407] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5670'. [ 979.289392][T22412] xt_ecn: cannot match TCP bits for non-tcp packets [ 979.463223][ T5734] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 979.547629][ T5724] radio-keene 4-1:0.0: V4L2 device registered as radio48 [ 979.623364][ T5734] usb 3-1: Using ep0 maxpacket: 32 [ 979.635682][ T5734] usb 3-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 979.656431][ T5734] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.673762][ T5734] usb 3-1: Product: syz [ 979.682509][ T5734] usb 3-1: Manufacturer: syz [ 979.693090][ T5734] usb 3-1: SerialNumber: syz [ 979.709765][ T5734] usb 3-1: config 0 descriptor?? [ 979.757137][ T5724] usb 4-1: USB disconnect, device number 34 [ 979.927321][T22410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 979.937841][T22410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 980.175121][ T5734] usb 3-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 980.403769][ T10] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 980.523248][ T24] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 980.609711][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 980.623680][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 980.634667][T22430] fuse: Invalid rootmode [ 980.639790][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 980.653937][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 980.662996][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.676335][ T10] usb 5-1: config 0 descriptor?? [ 980.686733][ T24] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 980.698337][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.709708][ T24] usb 2-1: config 0 descriptor?? [ 980.844623][ T5734] usb 3-1: reset high-speed USB device number 46 using dummy_hcd [ 981.073369][ T5724] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 981.174430][ T10] plantronics 0003:047F:FFFF.002A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 981.252608][ T5724] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 981.270245][ T5734] usb 3-1: [UEAGLE-ATM] interface 1 not found [ 981.292284][ T5734] ueagle-atm 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 981.317696][ T5724] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 981.354245][ T5724] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 981.383320][ T5724] usb 4-1: Product: syz [ 981.394307][ T5724] usb 4-1: Manufacturer: syz [ 981.405205][ T5724] usb 4-1: SerialNumber: syz [ 981.477412][ T5734] usb 3-1: USB disconnect, device number 46 [ 981.985139][ T5724] usblp 4-1:1.0: usblp1: USB Unidirectional printer dev 35 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 982.006424][T16152] usb 5-1: USB disconnect, device number 30 [ 982.083452][ T5724] usb 4-1: USB disconnect, device number 35 [ 982.126061][ T5724] usblp1: removed [ 982.436184][T22447] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5685'. [ 982.544628][T22449] FAULT_INJECTION: forcing a failure. [ 982.544628][T22449] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 982.568304][ T24] usb 2-1: Cannot set autoneg [ 982.580458][ T24] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 982.589559][T22449] CPU: 0 UID: 0 PID: 22449 Comm: syz.2.5686 Tainted: G L syzkaller #0 PREEMPT(full) [ 982.589590][T22449] Tainted: [L]=SOFTLOCKUP [ 982.589597][T22449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 982.589608][T22449] Call Trace: [ 982.589616][T22449] [ 982.589624][T22449] dump_stack_lvl+0xe8/0x150 [ 982.589650][T22449] should_fail_ex+0x412/0x560 [ 982.589677][T22449] prepare_alloc_pages+0x22a/0x650 [ 982.589710][T22449] __alloc_frozen_pages_noprof+0x12f/0x380 [ 982.589745][T22449] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 982.589773][T22449] ? __pfx_policy_nodemask+0x10/0x10 [ 982.589802][T22449] ? __lock_acquire+0x6b5/0x2cf0 [ 982.589824][T22449] alloc_pages_mpol+0x235/0x490 [ 982.589853][T22449] folio_alloc_mpol_noprof+0x39/0x160 [ 982.589878][T22449] vma_alloc_folio_noprof+0xe1/0x1e0 [ 982.589906][T22449] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 982.589932][T22449] ? __pte_offset_map+0x29/0x240 [ 982.589953][T22449] ? __pte_offset_map+0x29/0x240 [ 982.589975][T22449] do_pte_missing+0x159d/0x33f0 [ 982.590009][T22449] ? handle_mm_fault+0xee/0x3170 [ 982.590033][T22449] handle_mm_fault+0x1bd7/0x3170 [ 982.590066][T22449] ? handle_mm_fault+0xee/0x3170 [ 982.590092][T22449] ? __pfx_handle_mm_fault+0x10/0x10 [ 982.590114][T22449] ? follow_page_pte+0x6b5/0xe50 [ 982.590142][T22449] ? __pfx_follow_page_pte+0x10/0x10 [ 982.590172][T22449] __get_user_pages+0x1683/0x2720 [ 982.590220][T22449] __gup_longterm_locked+0xdcf/0x1630 [ 982.590251][T22449] ? sanity_check_pinned_pages+0x7af/0x870 [ 982.590278][T22449] gup_fast_fallback+0x1d84/0x20d0 [ 982.590300][T22449] ? stack_depot_save_flags+0x33/0x810 [ 982.590324][T22449] ? __lock_acquire+0x6b5/0x2cf0 [ 982.590360][T22449] ? __pfx_gup_fast_fallback+0x10/0x10 [ 982.590381][T22449] ? blkg_tryget+0x20/0x250 [ 982.590404][T22449] ? is_valid_gup_args+0x11f/0x200 [ 982.590425][T22449] ? pin_user_pages_fast+0x4d/0xb0 [ 982.590447][T22449] iov_iter_extract_pages+0x37b/0x5f0 [ 982.590478][T22449] iov_iter_extract_bvecs+0xb1/0x920 [ 982.590511][T22449] ? bio_associate_blkg+0x6d/0x230 [ 982.590540][T22449] bio_iov_iter_get_pages+0x346/0x930 [ 982.590573][T22449] __blkdev_direct_IO+0x677/0xfa0 [ 982.590611][T22449] ? __pfx___blkdev_direct_IO+0x10/0x10 [ 982.590634][T22449] ? __lock_acquire+0x6b5/0x2cf0 [ 982.590654][T22449] ? iov_npages+0x170/0x290 [ 982.590679][T22449] blkdev_direct_IO+0x121a/0x1790 [ 982.590708][T22449] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 982.590726][T22449] ? ktime_get_coarse_real_ts64_mg+0x1c5/0x1e0 [ 982.590756][T22449] ? current_time+0x22a/0x370 [ 982.590788][T22449] ? blkdev_read_iter+0x210/0x440 [ 982.590807][T22449] ? touch_atime+0x379/0x6b0 [ 982.590829][T22449] ? blkdev_read_iter+0x210/0x440 [ 982.590852][T22449] blkdev_read_iter+0x23d/0x440 [ 982.590876][T22449] do_iter_readv_writev+0x619/0x8c0 [ 982.590903][T22449] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 982.590932][T22449] ? bpf_lsm_file_permission+0x9/0x20 [ 982.590955][T22449] ? security_file_permission+0x75/0x260 [ 982.590975][T22449] ? rw_verify_area+0x2a6/0x4d0 [ 982.591000][T22449] vfs_readv+0x288/0x840 [ 982.591026][T22449] ? __pfx_vfs_readv+0x10/0x10 [ 982.591061][T22449] ? __fget_files+0x2a/0x420 [ 982.591084][T22449] ? __fget_files+0x3a0/0x420 [ 982.591102][T22449] ? __fget_files+0x2a/0x420 [ 982.591130][T22449] __se_sys_preadv2+0x184/0x2a0 [ 982.591157][T22449] ? __pfx___se_sys_preadv2+0x10/0x10 [ 982.591186][T22449] ? __x64_sys_preadv2+0x20/0xc0 [ 982.591210][T22449] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 982.591229][T22449] do_syscall_64+0x15f/0xf80 [ 982.591252][T22449] ? trace_irq_disable+0x3b/0x140 [ 982.591276][T22449] ? clear_bhb_loop+0x40/0x90 [ 982.591296][T22449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 982.591314][T22449] RIP: 0033:0x7f0d29f9cdd9 [ 982.591331][T22449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 982.591345][T22449] RSP: 002b:00007f0d2ae69028 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 [ 982.591364][T22449] RAX: ffffffffffffffda RBX: 00007f0d2a215fa0 RCX: 00007f0d29f9cdd9 [ 982.591376][T22449] RDX: 0000000000000002 RSI: 0000200000000080 RDI: 0000000000000003 [ 982.591387][T22449] RBP: 00007f0d2ae69090 R08: 0000000000000000 R09: 0000000000000000 [ 982.591397][T22449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 982.591407][T22449] R13: 00007f0d2a216038 R14: 00007f0d2a215fa0 R15: 00007f0d2a33fa48 [ 982.591436][T22449] [ 983.048317][ T24] usb 2-1: USB disconnect, device number 40 [ 983.280034][T22463] fuse: Invalid rootmode [ 983.783176][ T5709] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 983.933262][ T5709] usb 4-1: Using ep0 maxpacket: 16 [ 983.940689][ T5709] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 983.950494][ T5709] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 983.961815][ T5709] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 983.981761][ T5709] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 983.991146][ T5709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.999354][ T5709] usb 4-1: Product: syz [ 984.005972][ T5709] usb 4-1: Manufacturer: syz [ 984.010666][ T5709] usb 4-1: SerialNumber: syz [ 984.013185][ T5724] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 984.029255][ T5709] usb 4-1: 0:2 : does not exist [ 984.173149][ T5724] usb 5-1: Using ep0 maxpacket: 8 [ 984.184558][ T5724] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 984.213163][ T5724] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.226898][ T5724] usb 5-1: Product: syz [ 984.234114][ T5724] usb 5-1: Manufacturer: syz [ 984.237908][T22479] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5697'. [ 984.244865][ T5724] usb 5-1: SerialNumber: syz [ 984.267730][ T5724] usb 5-1: config 0 descriptor?? [ 984.293707][ T5724] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 984.393212][ T10] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 984.553285][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 984.562061][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 984.575957][ T10] usb 3-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 984.585723][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.593962][ T10] usb 3-1: Product: syz [ 984.598936][ T10] usb 3-1: Manufacturer: syz [ 984.604973][ T10] usb 3-1: SerialNumber: syz [ 984.620348][ T10] usb 3-1: config 0 descriptor?? [ 984.908145][T22488] netlink: 192 bytes leftover after parsing attributes in process `syz.2.5696'. [ 985.091535][T22492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 985.117092][T22492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 985.168229][ T5709] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 985.281254][ T5709] usb 4-1: USB disconnect, device number 36 [ 985.386307][T22470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 985.406359][ T5724] gspca_sonixj: reg_r err -110 [ 985.411208][ T5724] sonixj 5-1:0.0: probe with driver sonixj failed with error -110 [ 985.422057][ T5734] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 985.518861][T22470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 985.539427][ T5709] usb 5-1: USB disconnect, device number 31 [ 985.655731][ T5734] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 985.666962][ T5734] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 985.676809][ T5734] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 985.690277][ T5734] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 985.699405][ T5734] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.709424][ T5734] usb 2-1: config 0 descriptor?? [ 985.887887][T22500] loop2: detected capacity change from 0 to 7 [ 985.895685][T22500] loop2: [ 985.898756][T22500] loop2: partition table partially beyond EOD, truncated [ 986.012236][T22503] xt_hashlimit: size too large, truncated to 1048576 [ 986.103818][ T5709] usb 3-1: USB disconnect, device number 47 [ 986.183353][ T5734] plantronics 0003:047F:FFFF.002B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 986.330904][T22508] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5708'. [ 986.340553][T22512] netlink: 'syz.3.5710': attribute type 3 has an invalid length. [ 986.427158][ T5734] usb 2-1: USB disconnect, device number 41 [ 986.652822][T22522] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5713'. [ 986.743454][T21446] Bluetooth: hci5: connection err: -111 [ 986.868203][ T29] audit: type=1326 audit(1778425472.353:16322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22527 comm="syz.3.5716" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f19a639cdd9 code=0x0 [ 986.919430][T22531] FAULT_INJECTION: forcing a failure. [ 986.919430][T22531] name failslab, interval 1, probability 0, space 0, times 0 [ 986.932300][T22531] CPU: 0 UID: 0 PID: 22531 Comm: syz.3.5716 Tainted: G L syzkaller #0 PREEMPT(full) [ 986.932328][T22531] Tainted: [L]=SOFTLOCKUP [ 986.932336][T22531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 986.932349][T22531] Call Trace: [ 986.932364][T22531] [ 986.932369][T22531] dump_stack_lvl+0xe8/0x150 [ 986.932385][T22531] should_fail_ex+0x412/0x560 [ 986.932402][T22531] should_failslab+0xa8/0x100 [ 986.932418][T22531] ? security_file_alloc+0x34/0x310 [ 986.932429][T22531] kmem_cache_alloc_noprof+0x87/0x650 [ 986.932443][T22531] ? rcu_is_watching+0x15/0xb0 [ 986.932456][T22531] ? trace_kmem_cache_alloc+0x29/0xe0 [ 986.932472][T22531] security_file_alloc+0x34/0x310 [ 986.932491][T22531] init_file+0x90/0x2b0 [ 986.932512][T22531] alloc_empty_file+0x74/0x1d0 [ 986.932532][T22531] path_openat+0x10f/0x3860 [ 986.932549][T22531] ? arch_stack_walk+0xfb/0x150 [ 986.932566][T22531] ? do_getname+0x2e/0x250 [ 986.932576][T22531] ? stack_trace_save+0xa9/0x100 [ 986.932591][T22531] ? __pfx_stack_trace_save+0x10/0x10 [ 986.932605][T22531] ? do_getname+0x2e/0x250 [ 986.932617][T22531] ? stack_depot_save_flags+0x33/0x810 [ 986.932631][T22531] ? do_getname+0x2e/0x250 [ 986.932641][T22531] ? kasan_save_track+0x4f/0x80 [ 986.932654][T22531] ? kasan_save_track+0x3e/0x80 [ 986.932666][T22531] ? __kasan_slab_alloc+0x6c/0x80 [ 986.932679][T22531] ? __pfx_path_openat+0x10/0x10 [ 986.932692][T22531] ? __x64_sys_openat+0x138/0x170 [ 986.932706][T22531] ? __lock_acquire+0x6b5/0x2cf0 [ 986.932722][T22531] do_file_open+0x23e/0x4a0 [ 986.932738][T22531] ? __pfx_do_file_open+0x10/0x10 [ 986.932761][T22531] ? _raw_spin_unlock+0x28/0x50 [ 986.932774][T22531] ? alloc_fd+0x64b/0x6c0 [ 986.932790][T22531] do_sys_openat2+0x113/0x200 [ 986.932803][T22531] ? __pfx_do_sys_openat2+0x10/0x10 [ 986.932815][T22531] ? ksys_write+0x242/0x270 [ 986.932830][T22531] ? __pfx_ksys_write+0x10/0x10 [ 986.932846][T22531] __x64_sys_openat+0x138/0x170 [ 986.932859][T22531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.932869][T22531] do_syscall_64+0x15f/0xf80 [ 986.932883][T22531] ? trace_irq_disable+0x3b/0x140 [ 986.932899][T22531] ? clear_bhb_loop+0x40/0x90 [ 986.932911][T22531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.932921][T22531] RIP: 0033:0x7f19a635d60e [ 986.932931][T22531] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 986.932940][T22531] RSP: 002b:00007f19a7208ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 986.932951][T22531] RAX: ffffffffffffffda RBX: 00007f19a72096c0 RCX: 00007f19a635d60e [ 986.932959][T22531] RDX: 0000000000000000 RSI: 00007f19a7208f90 RDI: ffffffffffffff9c [ 986.932965][T22531] RBP: 00007f19a7209090 R08: 0000000000000000 R09: 0000000000000000 [ 986.932972][T22531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 986.932978][T22531] R13: 00007f19a6616128 R14: 00007f19a6616090 R15: 00007f19a673fa48 [ 986.932993][T22531] [ 987.311558][T22535] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5717'. [ 987.329371][T22534] tipc: Failed to remove unknown binding: 66,1,1/0:2847558043/2847558045 [ 987.351976][T22535] bond1: entered promiscuous mode [ 987.357324][T22535] 8021q: adding VLAN 0 to HW filter on device bond1 [ 987.735255][ T29] audit: type=1326 audit(1778425473.223:16323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22540 comm="syz.3.5719" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f19a639cdd9 code=0x0 [ 987.833361][ T5734] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 987.896694][T22545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5720'. [ 987.906135][T22545] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5720'. [ 987.975375][ T5734] usb 2-1: device descriptor read/64, error -71 [ 988.233256][ T5734] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 988.383319][ T5734] usb 2-1: device descriptor read/64, error -71 [ 988.493453][ T5734] usb usb2-port1: attempt power cycle [ 988.568522][ T29] audit: type=1326 audit(1778425474.053:16324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22540 comm="syz.3.5719" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19a639cdd9 code=0x7fc00000 [ 988.833987][T21446] Bluetooth: hci1: command 0x0c1a tx timeout [ 988.843502][T22525] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 988.849621][T22525] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 988.863405][ T5734] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 988.867090][ T5709] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 988.886068][ T5734] usb 2-1: device descriptor read/8, error -71 [ 988.956583][T22559] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5724'. [ 989.023179][ T5709] usb 4-1: Using ep0 maxpacket: 16 [ 989.031860][ T5709] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 989.041754][ T5709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.050131][ T5709] usb 4-1: Product: syz [ 989.054516][ T5709] usb 4-1: Manufacturer: syz [ 989.059150][ T5709] usb 4-1: SerialNumber: syz [ 989.071275][ T5709] usb 4-1: config 0 descriptor?? [ 989.143193][ T5734] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 989.173839][ T5734] usb 2-1: device descriptor read/8, error -71 [ 989.284067][ T5709] usb 4-1: USB disconnect, device number 37 [ 989.293932][ T5734] usb usb2-port1: unable to enumerate USB device [ 989.740416][T22525] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 989.746544][T22525] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 990.016114][T22570] FAULT_INJECTION: forcing a failure. [ 990.016114][T22570] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 990.127825][T22570] CPU: 0 UID: 0 PID: 22570 Comm: syz.2.5727 Tainted: G L syzkaller #0 PREEMPT(full) [ 990.127853][T22570] Tainted: [L]=SOFTLOCKUP [ 990.127860][T22570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 990.127871][T22570] Call Trace: [ 990.127878][T22570] [ 990.127886][T22570] dump_stack_lvl+0xe8/0x150 [ 990.127913][T22570] should_fail_ex+0x412/0x560 [ 990.127940][T22570] _copy_from_user+0x2d/0xb0 [ 990.127964][T22570] snd_seq_oss_write+0x5b1/0x8f0 [ 990.127982][T22570] ? get_pid_task+0x20/0x1f0 [ 990.128014][T22570] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 990.128034][T22570] ? apparmor_file_permission+0x1f4/0x300 [ 990.128066][T22570] ? security_file_permission+0x75/0x260 [ 990.128090][T22570] odev_write+0x5a/0x80 [ 990.128105][T22570] ? __pfx_odev_write+0x10/0x10 [ 990.128122][T22570] vfs_write+0x29a/0xb90 [ 990.128149][T22570] ? __pfx_vfs_write+0x10/0x10 [ 990.128174][T22570] ? __fget_files+0x2a/0x420 [ 990.128195][T22570] ? __fget_files+0x2a/0x420 [ 990.128214][T22570] ? __fget_files+0x3a0/0x420 [ 990.128231][T22570] ? __fget_files+0x2a/0x420 [ 990.128255][T22570] ksys_write+0x150/0x270 [ 990.128281][T22570] ? __pfx_ksys_write+0x10/0x10 [ 990.128310][T22570] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.128329][T22570] do_syscall_64+0x15f/0xf80 [ 990.128355][T22570] ? clear_bhb_loop+0x40/0x90 [ 990.128375][T22570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.128392][T22570] RIP: 0033:0x7f0d29f9cdd9 [ 990.128408][T22570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 990.128423][T22570] RSP: 002b:00007f0d2ae48028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 990.128442][T22570] RAX: ffffffffffffffda RBX: 00007f0d2a216090 RCX: 00007f0d29f9cdd9 [ 990.128454][T22570] RDX: 0000000000000232 RSI: 00002000000004c0 RDI: 0000000000000003 [ 990.128466][T22570] RBP: 00007f0d2ae48090 R08: 0000000000000000 R09: 0000000000000000 [ 990.128476][T22570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 990.128487][T22570] R13: 00007f0d2a216128 R14: 00007f0d2a216090 R15: 00007f0d2a33fa48 [ 990.128512][T22570] [ 990.142306][T22576] kAFS: unable to lookup cell 'ÿ' [ 990.234022][T22579] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5729'. [ 990.514442][ T10] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 990.675769][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 990.686285][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 990.706943][T22585] netlink: 91 bytes leftover after parsing attributes in process `syz.0.5733'. [ 990.730141][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 990.762188][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 990.778416][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 990.795415][ T10] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 990.812505][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 990.822688][ T10] usb 3-1: Product: syz [ 990.831118][ T10] usb 3-1: Manufacturer: syz [ 990.831140][ T10] usb 3-1: SerialNumber: syz [ 990.863610][ T10] usb 3-1: config 0 descriptor?? [ 991.073341][ T10] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 991.085736][ T10] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 991.273687][ T10] radio-si470x 3-1:0.0: software version 0, hardware version 0 [ 991.282740][ T10] radio-si470x 3-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 991.301276][ T10] radio-si470x 3-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 991.474446][ T10] radio-si470x 3-1:0.0: submitting int urb failed (-90) [ 991.653154][ T5709] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 991.812936][ T5709] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 991.830385][ T5709] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 991.841068][ T5709] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 991.854315][ T5709] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 991.864019][ T5709] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.876778][ T5709] usb 5-1: config 0 descriptor?? [ 992.191147][T22618] all: renamed from bridge_slave_1 (while UP) [ 992.212001][ T29] audit: type=1326 audit(1778425477.693:16325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22608 comm="syz.3.5741" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19a639cdd9 code=0x7fc00000 [ 992.281668][ T10] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 992.314285][ T10] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22 [ 992.368511][ T10] usb 3-1: USB disconnect, device number 48 [ 992.414845][T22622] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 992.517071][ T5709] usbhid 5-1:0.0: can't add hid device: -71 [ 992.540253][ T5709] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 992.585837][ T5709] usb 5-1: USB disconnect, device number 32 [ 992.601319][T22629] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5748'. [ 992.622405][T22629] netlink: 'syz.1.5748': attribute type 1 has an invalid length. [ 992.707611][T22635] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5751'. [ 992.738403][T22639] IPVS: set_ctl: invalid protocol: 108 0.0.0.0:20000 [ 992.844712][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.854154][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.116408][T22651] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 993.163301][ T5709] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 993.323145][ T5709] usb 4-1: Using ep0 maxpacket: 16 [ 993.335479][ T5709] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 993.352589][ T5709] usb 4-1: config 0 has no interface number 0 [ 993.367249][ T5709] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 993.381324][ T5709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.398930][ T5709] usb 4-1: Product: syz [ 993.406882][ T5709] usb 4-1: Manufacturer: syz [ 993.415948][ T5709] usb 4-1: SerialNumber: syz [ 993.433945][ T5709] usb 4-1: config 0 descriptor?? [ 993.454860][ T5709] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 993.742662][T22659] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5760'. [ 993.981892][T22663] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 994.007697][ T29] audit: type=1326 audit(1778425479.493:16326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22652 comm="syz.4.5757" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59b5d9cdd9 code=0x7fc00000 [ 994.174356][T22669] nvme_fabrics: missing parameter 'transport=%s' [ 994.181239][T22669] nvme_fabrics: missing parameter 'nqn=%s' [ 994.509710][T22676] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5765'. [ 994.567118][T22676] FAULT_INJECTION: forcing a failure. [ 994.567118][T22676] name failslab, interval 1, probability 0, space 0, times 0 [ 994.608891][T22676] CPU: 1 UID: 0 PID: 22676 Comm: syz.1.5765 Tainted: G L syzkaller #0 PREEMPT(full) [ 994.608919][T22676] Tainted: [L]=SOFTLOCKUP [ 994.608925][T22676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 994.608935][T22676] Call Trace: [ 994.608942][T22676] [ 994.608954][T22676] dump_stack_lvl+0xe8/0x150 [ 994.608979][T22676] should_fail_ex+0x412/0x560 [ 994.609008][T22676] should_failslab+0xa8/0x100 [ 994.609035][T22676] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 994.609060][T22676] ? __alloc_skb+0x186/0x7d0 [ 994.609081][T22676] ? __alloc_skb+0x1d0/0x7d0 [ 994.609100][T22676] ? __local_bh_enable_ip+0xd0/0x130 [ 994.609123][T22676] __alloc_skb+0x1d0/0x7d0 [ 994.609149][T22676] netlink_sendmsg+0x5d4/0xb40 [ 994.609182][T22676] ? __pfx_netlink_sendmsg+0x10/0x10 [ 994.609209][T22676] ? aa_sock_msg_perm+0xf1/0x1b0 [ 994.609230][T22676] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 994.609255][T22676] ____sys_sendmsg+0x972/0x9f0 [ 994.609274][T22676] ? __might_fault+0xaf/0x130 [ 994.609298][T22676] ? __pfx_____sys_sendmsg+0x10/0x10 [ 994.609325][T22676] ? import_iovec+0x73/0xa0 [ 994.609352][T22676] ___sys_sendmsg+0x2a5/0x360 [ 994.609375][T22676] ? __lock_acquire+0x6b5/0x2cf0 [ 994.609398][T22676] ? __pfx____sys_sendmsg+0x10/0x10 [ 994.609453][T22676] ? __fget_files+0x2a/0x420 [ 994.609474][T22676] ? __fget_files+0x3a0/0x420 [ 994.609503][T22676] __x64_sys_sendmsg+0x1bd/0x2a0 [ 994.609530][T22676] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 994.609563][T22676] ? __pfx_ksys_write+0x10/0x10 [ 994.609594][T22676] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 994.609614][T22676] do_syscall_64+0x15f/0xf80 [ 994.609644][T22676] ? trace_irq_disable+0x3b/0x140 [ 994.609668][T22676] ? clear_bhb_loop+0x40/0x90 [ 994.609690][T22676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 994.609708][T22676] RIP: 0033:0x7f865259cdd9 [ 994.609726][T22676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 994.609741][T22676] RSP: 002b:00007f8653522028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 994.609760][T22676] RAX: ffffffffffffffda RBX: 00007f8652815fa0 RCX: 00007f865259cdd9 [ 994.609774][T22676] RDX: 0000000004040004 RSI: 0000200000000280 RDI: 0000000000000003 [ 994.609786][T22676] RBP: 00007f8653522090 R08: 0000000000000000 R09: 0000000000000000 [ 994.609797][T22676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 994.609808][T22676] R13: 00007f8652816038 R14: 00007f8652815fa0 R15: 00007f865293fa48 [ 994.609835][T22676] [ 995.128224][T22684] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 995.303834][ T5734] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 995.478623][ T5734] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 7 [ 995.500444][ T5734] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 995.510966][ T5734] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.526589][ T5734] usb 3-1: Product: syz [ 995.532939][ T5734] usb 3-1: Manufacturer: syz [ 995.538309][ T5734] usb 3-1: SerialNumber: syz [ 995.539603][T22696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5773'. [ 995.761482][T22647] CUSE: unknown device info "€" [ 995.773655][T22647] CUSE: unknown device info "Ö" [ 995.779965][T22647] CUSE: unknown device info "" [ 995.785574][T22647] CUSE: unknown device info "€" [ 995.788640][ T5734] usb 3-1: found format II with max.bitrate = 9, frame size=2 [ 995.790743][T22647] CUSE: unknown device info "ðÿÿÿ" [ 995.808971][T22647] CUSE: unknown device info "" [ 995.813795][ T5734] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 995.819483][T22647] CUSE: unknown device info "" [ 995.829799][T22647] CUSE: unknown device info "" [ 995.840791][T22647] CUSE: zero length info key specified [ 995.841915][ T5734] usb 3-1: found format II with max.bitrate = 9, frame size=2 [ 995.873255][ T5734] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 995.902015][ T5734] usb 3-1: unit 4 not found! [ 995.958570][ T5709] gspca_spca1528: reg_r err -71 [ 995.981690][ T5709] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 996.003312][T16152] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 996.018332][ T5709] usb 4-1: USB disconnect, device number 38 [ 996.103006][ T5734] usb 3-1: USB disconnect, device number 49 [ 996.246351][T16152] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 996.258576][T16152] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 996.269419][T16152] usb 5-1: config 0 interface 0 has no altsetting 0 [ 996.276440][T16152] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 996.286372][T16152] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.341245][T16152] usb 5-1: config 0 descriptor?? [ 996.709157][ T29] audit: type=1326 audit(1778425482.193:16327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22714 comm="syz.0.5778" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a559cdd9 code=0x7ffc0000 [ 996.735815][ T29] audit: type=1326 audit(1778425482.193:16328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22714 comm="syz.0.5778" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a559cdd9 code=0x7ffc0000 [ 996.761726][ T29] audit: type=1326 audit(1778425482.223:16329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22714 comm="syz.0.5778" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a559cdd9 code=0x7ffc0000 [ 996.787076][ T29] audit: type=1326 audit(1778425482.223:16330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22714 comm="syz.0.5778" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a559cdd9 code=0x7ffc0000 [ 996.812505][ T29] audit: type=1326 audit(1778425482.223:16331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22714 comm="syz.0.5778" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7fd7a559cdd9 code=0x7ffc0000 [ 996.838084][ T29] audit: type=1326 audit(1778425482.223:16332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22714 comm="syz.0.5778" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a559cdd9 code=0x7ffc0000 [ 996.863661][ T29] audit: type=1326 audit(1778425482.223:16333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22714 comm="syz.0.5778" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a559cdd9 code=0x7ffc0000 [ 996.888963][ T29] audit: type=1326 audit(1778425482.223:16334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22714 comm="syz.0.5778" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a559cdd9 code=0x7ffc0000 [ 997.214165][ T29] kauditd_printk_skb: 208 callbacks suppressed [ 997.214183][ T29] audit: type=1326 audit(1778425482.703:16543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22714 comm="syz.0.5778" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd7a555d60e code=0x7ffc0000 [ 997.282049][ T29] audit: type=1326 audit(1778425482.733:16544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22714 comm="syz.0.5778" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd7a555d60e code=0x7ffc0000 [ 997.314074][ T29] audit: type=1326 audit(1778425482.743:16545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22714 comm="syz.0.5778" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd7a555d60e code=0x7ffc0000 [ 997.340588][ T29] audit: type=1326 audit(1778425482.743:16546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22714 comm="syz.0.5778" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd7a555d60e code=0x7ffc0000 [ 997.392004][ T29] audit: type=1326 audit(1778425482.743:16547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22714 comm="syz.0.5778" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd7a555d60e code=0x7ffc0000 [ 997.417529][ T29] audit: type=1326 audit(1778425482.743:16548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22714 comm="syz.0.5778" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd7a555d60e code=0x7ffc0000 [ 997.462176][ T29] audit: type=1326 audit(1778425482.753:16549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22714 comm="syz.0.5778" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd7a555d60e code=0x7ffc0000 [ 997.497927][ T29] audit: type=1326 audit(1778425482.753:16550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22714 comm="syz.0.5778" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd7a555d60e code=0x7ffc0000 [ 997.603923][ T29] audit: type=1326 audit(1778425482.753:16551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22714 comm="syz.0.5778" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd7a555d60e code=0x7ffc0000 [ 997.666335][ T29] audit: type=1326 audit(1778425482.753:16552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22714 comm="syz.0.5778" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd7a555d60e code=0x7ffc0000 [ 998.076857][T12546] bridge_slave_1: left allmulticast mode [ 998.125067][T12546] bridge_slave_1: left promiscuous mode [ 998.138225][T12546] bridge0: port 2(bridge_slave_1) entered disabled state [ 998.195189][T12546] bridge_slave_0: left allmulticast mode [ 998.207721][T12546] bridge_slave_0: left promiscuous mode [ 998.246243][T12546] bridge0: port 1(bridge_slave_0) entered disabled state [ 998.358917][T22703] syz.1.5775 (22703): drop_caches: 1 [ 998.776859][T12546] bond1 (unregistering): (slave geneve2): Releasing active interface [ 998.789124][T12546] geneve2 (unregistering): left allmulticast mode [ 998.797159][T16152] usbhid 5-1:0.0: can't add hid device: -71 [ 998.812719][T16152] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 998.841567][T16152] usb 5-1: USB disconnect, device number 33 [ 998.935908][T12546] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 998.947808][T12546] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 998.959244][T12546] bond0 (unregistering): (slave team0): Releasing backup interface [ 998.972851][T12546] bond0 (unregistering): Released all slaves [ 998.996981][T12546] bond1 (unregistering): Released all slaves [ 999.032128][T12546] bond2 (unregistering): Released all slaves [ 999.060947][T12546] bond3 (unregistering): Released all slaves [ 999.078352][T12546] bond4 (unregistering): Released all slaves [ 999.094851][T12546] bond5 (unregistering): Released all slaves [ 999.111295][T12546] bond6 (unregistering): Released all slaves [ 999.134313][T12546] bond7 (unregistering): Released all slaves [ 999.148270][T12546] bond8 (unregistering): Released all slaves [ 999.162630][T12546] bond9 (unregistering): Released all slaves [ 999.316972][T12546] tipc: Disabling bearer [ 999.342937][T12546] tipc: Left network mode [ 999.593831][ T5724] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 999.678884][T22759] binder: 22758:22759 ioctl c038586a 200000000300 returned -22 [ 999.689157][T22759] binder: BINDER_SET_CONTEXT_MGR already set [ 999.696434][T22759] binder: 22758:22759 ioctl 4018620d 2000000003c0 returned -16 [ 999.730258][T22761] program syz.3.5794 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 999.741831][T22754] syzkaller0: entered promiscuous mode [ 999.748398][T22754] syzkaller0: entered allmulticast mode [ 999.773155][ T5724] usb 2-1: Using ep0 maxpacket: 16 [ 999.780384][ T5724] usb 2-1: unable to get BOS descriptor or descriptor too short [ 999.790734][ T5724] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 999.802293][ T5724] usb 2-1: can't read configurations, error -22 [ 999.943862][ T5724] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 999.963420][T16152] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1000.084343][ T10] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 1000.113410][ T5724] usb 2-1: Using ep0 maxpacket: 16 [ 1000.122076][ T5724] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1000.129938][T16152] usb 3-1: Using ep0 maxpacket: 8 [ 1000.131750][T16152] usb 3-1: config index 0 descriptor too short (expected 8192, got 18) [ 1000.137892][ T5724] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 1000.151768][ T5724] usb 2-1: can't read configurations, error -22 [ 1000.158180][T16152] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1000.158994][ T5724] usb usb2-port1: attempt power cycle [ 1000.178956][T16152] usb 3-1: config 0 has no interfaces? [ 1000.195182][T16152] usb 3-1: config index 1 descriptor too short (expected 8192, got 18) [ 1000.213129][T16152] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1000.227655][T16152] usb 3-1: config 0 has no interfaces? [ 1000.235323][T16152] usb 3-1: config index 2 descriptor too short (expected 8192, got 18) [ 1000.243871][T16152] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1000.254077][T16152] usb 3-1: config 0 has no interfaces? [ 1000.261887][T16152] usb 3-1: config index 3 descriptor too short (expected 8192, got 18) [ 1000.266681][ T10] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 1000.271655][T16152] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1000.291514][T16152] usb 3-1: config 0 has no interfaces? [ 1000.297073][T16152] usb 3-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 1000.306174][T16152] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.307792][ T10] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 1000.329596][T16152] usb 3-1: config 0 descriptor?? [ 1000.371242][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1000.402576][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1000.412949][ T10] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1000.430052][ T10] usb 4-1: Product: syz [ 1000.436598][ T10] usb 4-1: Manufacturer: syz [ 1000.441542][ T10] usb 4-1: SerialNumber: syz [ 1000.462856][ T10] usb 4-1: config 0 descriptor?? [ 1000.480222][ T10] usb 4-1: selecting invalid altsetting 0 [ 1000.524657][ T5724] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1000.554079][ T5724] usb 2-1: Using ep0 maxpacket: 16 [ 1000.575879][ T5724] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1000.607367][ T5724] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 1000.627094][T22774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5798'. [ 1000.632204][ T5724] usb 2-1: can't read configurations, error -22 [ 1000.703988][T22763] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 1000.714028][ T10] usb 4-1: USB disconnect, device number 39 [ 1000.793192][ T5724] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1000.835385][ T5724] usb 2-1: Using ep0 maxpacket: 16 [ 1000.844688][ T5724] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1000.852667][T12546] team0 (unregistering): Port device team_slave_1 removed [ 1000.863730][ T5724] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 1000.882956][ T5724] usb 2-1: can't read configurations, error -22 [ 1000.890169][T12546] team0 (unregistering): Port device team_slave_0 removed [ 1000.897799][ T5724] usb usb2-port1: unable to enumerate USB device [ 1001.168359][T16152] usb 3-1: USB disconnect, device number 50 [ 1001.363955][T22785] netlink: 'syz.2.5802': attribute type 11 has an invalid length. [ 1001.374637][T22787] netlink: 'syz.3.5803': attribute type 1 has an invalid length. [ 1001.452831][T12546] IPVS: stop unused estimator thread 0... [ 1001.624391][T22793] syzkaller0: entered promiscuous mode [ 1001.630036][T22793] syzkaller0: entered allmulticast mode [ 1001.642232][ T1111] syzkaller0: tun_net_xmit 70 [ 1002.232313][ T5627] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1002.271638][ T5627] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1002.283790][ T5627] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1002.293259][ T5627] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1002.301503][ T5627] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1002.327583][T21446] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1002.358978][T21446] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1002.370025][T21446] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1002.381518][T21446] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1002.392548][T21446] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1002.594754][T22813] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1002.799753][T22822] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5812'. [ 1002.870811][T22823] Cannot find add_set index 1 as target [ 1002.952815][T22823] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5814'. [ 1003.094727][T22836] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5817'. [ 1003.309664][T22804] bridge0: port 1(bridge_slave_0) entered blocking state [ 1003.317054][T22804] bridge0: port 1(bridge_slave_0) entered disabled state [ 1003.324867][T22804] bridge_slave_0: entered allmulticast mode [ 1003.332734][T22804] bridge_slave_0: entered promiscuous mode [ 1003.345239][T22804] bridge0: port 2(bridge_slave_1) entered blocking state [ 1003.352592][T22804] bridge0: port 2(bridge_slave_1) entered disabled state [ 1003.361336][T22804] bridge_slave_1: entered allmulticast mode [ 1003.369694][T22804] bridge_slave_1: entered promiscuous mode [ 1003.407343][T22804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1003.425593][T22804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1003.465643][T22804] team0: Port device team_slave_0 added [ 1003.474388][T22804] team0: Port device team_slave_1 added [ 1003.511007][T22804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1003.520140][T22804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1003.546316][T22804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1003.582041][T22804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1003.589519][T22804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1003.615715][T22804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1003.659647][T22845] syzkaller0: entered promiscuous mode [ 1003.665232][T22845] syzkaller0: entered allmulticast mode [ 1003.883670][ T5724] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1004.055787][ T5724] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1004.064732][ T5724] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1004.075172][ T5724] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1004.085004][ T5724] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1004.111091][ T5724] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1004.120257][ T5724] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1004.128604][ T5724] usb 5-1: Product: syz [ 1004.132821][ T5724] usb 5-1: Manufacturer: syz [ 1004.180941][ T5724] cdc_wdm 5-1:1.0: skipping garbage [ 1004.192056][ T5724] cdc_wdm 5-1:1.0: skipping garbage [ 1004.215818][ T5724] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1004.222327][ T5724] cdc_wdm 5-1:1.0: Unknown control protocol [ 1004.405001][T16152] usb 5-1: USB disconnect, device number 34 [ 1004.433360][T21446] Bluetooth: hci4: command tx timeout [ 1004.895579][T16152] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1005.134671][T16152] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1005.143602][T16152] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1005.153944][T16152] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1005.163198][T16152] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1005.176353][T16152] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1005.190104][T16152] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1005.198385][T16152] usb 5-1: Product: syz [ 1005.202587][T16152] usb 5-1: Manufacturer: syz [ 1005.218101][T16152] cdc_wdm 5-1:1.0: skipping garbage [ 1005.223866][T16152] cdc_wdm 5-1:1.0: skipping garbage [ 1005.231308][T16152] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1005.244143][T16152] cdc_wdm 5-1:1.0: Unknown control protocol [ 1006.247832][T22855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1006.258815][T22855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1006.473310][ T5724] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1006.523672][T21446] Bluetooth: hci4: command tx timeout [ 1006.666576][ T5724] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1006.677806][ T5724] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1006.687452][ T5724] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.710180][ T5724] usb 2-1: config 0 descriptor?? [ 1006.756138][T22853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5821'. [ 1006.776318][T22804] hsr_slave_0: entered promiscuous mode [ 1006.784337][T22804] hsr_slave_1: entered promiscuous mode [ 1006.791084][T22804] debugfs: 'hsr0' already exists in 'hsr' [ 1006.797994][T22804] Cannot create hsr debugfs directory [ 1006.906400][T22860] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1006.944686][ T5724] usbhid 2-1:0.0: can't add hid device: -71 [ 1006.957196][ T5724] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1006.990807][ T5724] usb 2-1: USB disconnect, device number 50 [ 1007.276237][T22804] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1007.290742][T22804] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1007.335460][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1007.342327][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1007.350254][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1007.356880][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1007.363249][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1007.369863][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1007.376077][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 1007.423398][ T10] usb 5-1: USB disconnect, device number 35 [ 1007.463204][ T5724] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1007.535002][T22804] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1007.549390][T22804] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1007.569875][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 1007.569893][ T29] audit: type=1326 audit(1778425493.053:16597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22873 comm="syz.2.5828" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0d29f9cdd9 code=0x0 [ 1007.655794][ T5724] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1007.668170][ T5724] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1007.677530][ T5724] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.689797][ T5724] usb 2-1: config 0 descriptor?? [ 1007.692390][T22804] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1007.718165][T22804] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1007.745331][T22879] fuse: Bad value for 'group_id' [ 1007.750433][T22879] fuse: Bad value for 'group_id' [ 1007.804434][T22804] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1007.816102][T22804] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1007.837143][T22879] caif0: tun_chr_ioctl cmd 1074812117 [ 1007.844048][T22879] netlink: 'syz.4.5829': attribute type 21 has an invalid length. [ 1008.124744][T22804] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1008.136267][T22804] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1008.144820][T22804] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1008.155368][T22804] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1008.168365][T22804] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1008.179727][T22804] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1008.188494][T22804] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1008.205475][ T5724] usbhid 2-1:0.0: can't add hid device: -71 [ 1008.221060][ T5724] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1008.221376][T22804] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1008.260443][ T5724] usb 2-1: USB disconnect, device number 51 [ 1008.418904][T22804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1008.468888][T22804] 8021q: adding VLAN 0 to HW filter on device team0 [ 1008.513582][T12546] bridge0: port 1(bridge_slave_0) entered blocking state [ 1008.520732][T12546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1008.578834][T12546] bridge0: port 2(bridge_slave_1) entered blocking state [ 1008.586007][T12546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1008.593799][T21446] Bluetooth: hci4: command tx timeout [ 1008.830687][T22804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1008.894366][T22804] veth0_vlan: entered promiscuous mode [ 1008.925273][T22804] veth1_vlan: entered promiscuous mode [ 1008.956196][T22804] veth0_macvtap: entered promiscuous mode [ 1008.967483][T22804] veth1_macvtap: entered promiscuous mode [ 1008.994208][T22804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1009.009615][T22804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1009.070482][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.085838][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.103487][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.112376][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.279247][T14501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1009.292265][T14501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1009.330184][T15520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1009.339073][T15520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1009.419759][T22906] vivid-008: disconnect [ 1009.546811][T22902] sg_write: data in/out 393432/56 bytes for SCSI command 0x0-- guessing data in; [ 1009.546811][T22902] program syz.1.5834 not setting count and/or reply_len properly [ 1009.903255][ T10] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 1010.003466][T22907] team_slave_0: left promiscuous mode [ 1010.010576][T22907] team_slave_1: left promiscuous mode [ 1010.079047][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1010.091143][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.099685][ T10] usb 3-1: Product: syz [ 1010.103929][ T10] usb 3-1: Manufacturer: syz [ 1010.108563][ T10] usb 3-1: SerialNumber: syz [ 1010.116960][ T10] usb 3-1: config 0 descriptor?? [ 1010.332259][T22915] Invalid argument reading file caps for ./file0 [ 1010.352443][ T10] dvb_usb_rtl28xxu 3-1:0.0: chip type detection failed -71 [ 1010.363619][ T10] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1010.376732][ T10] usb 3-1: USB disconnect, device number 51 [ 1010.400378][T14287] udevd[14287]: setting mode of /dev/bus/usb/003/051 to 020664 failed: No such file or directory [ 1010.435998][T14287] udevd[14287]: setting owner of /dev/bus/usb/003/051 to uid=0, gid=0 failed: No such file or directory [ 1010.622042][T22932] sctp: [Deprecated]: syz.3.5841 (pid 22932) Use of int in max_burst socket option. [ 1010.622042][T22932] Use struct sctp_assoc_value instead [ 1010.673882][T21446] Bluetooth: hci4: command tx timeout [ 1010.697920][T22928] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5839'. [ 1011.183339][T22944] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5842'. [ 1011.624556][T22947] kvm: requested 5866 ns i8254 timer period limited to 200000 ns [ 1011.776124][T22960] kvm: pic: level sensitive irq not supported [ 1011.776567][T22960] kvm: pic: single mode not supported [ 1011.829526][T22960] kvm: pic: single mode not supported [ 1011.835088][T22960] kvm: pic: level sensitive irq not supported [ 1012.228372][T22968] syzkaller0: entered promiscuous mode [ 1012.253710][T22968] syzkaller0: entered allmulticast mode [ 1012.673747][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 1016.442872][T23005] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5858'. [ 1016.472737][T23005] netlink: 236 bytes leftover after parsing attributes in process `syz.0.5858'. [ 1016.486439][T23002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5857'. [ 1016.570715][T23013] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5861'. [ 1016.580430][T23013] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5861'. [ 1016.592713][T23013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5861'. [ 1016.853164][ T24] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1016.947180][T22904] vivid-008: reconnect [ 1017.003881][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 1017.017264][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1017.027694][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1017.038492][ T24] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1017.049691][ T24] usb 3-1: New USB device found, idVendor=0421, idProduct=042f, bcdDevice=cc.d6 [ 1017.059416][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.067773][ T24] usb 3-1: Product: syz [ 1017.072100][ T24] usb 3-1: Manufacturer: syz [ 1017.077650][ T24] usb 3-1: SerialNumber: syz [ 1017.087406][ T24] usb 3-1: config 0 descriptor?? [ 1017.379630][ T24] usb 3-1: USB disconnect, device number 52 [ 1017.493163][ T5709] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 1017.647348][ T5709] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1017.656642][ T5709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.664890][ T5709] usb 4-1: Product: syz [ 1017.669573][ T5709] usb 4-1: Manufacturer: syz [ 1017.674508][ T5709] usb 4-1: SerialNumber: syz [ 1017.682343][ T5709] usb 4-1: config 0 descriptor?? [ 1017.762210][T23037] syzkaller0: entered promiscuous mode [ 1017.768080][T23037] syzkaller0: entered allmulticast mode [ 1017.893406][ T5709] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1018.089008][T23039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5872'. [ 1018.348234][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807768f800: rx timeout, send abort [ 1018.539319][T23051] FAULT_INJECTION: forcing a failure. [ 1018.539319][T23051] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1018.552869][T23051] CPU: 0 UID: 0 PID: 23051 Comm: syz.4.5874 Tainted: G L syzkaller #0 PREEMPT(full) [ 1018.552897][T23051] Tainted: [L]=SOFTLOCKUP [ 1018.552903][T23051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1018.552914][T23051] Call Trace: [ 1018.552921][T23051] [ 1018.552929][T23051] dump_stack_lvl+0xe8/0x150 [ 1018.552954][T23051] should_fail_ex+0x412/0x560 [ 1018.552981][T23051] _copy_to_user+0x31/0xb0 [ 1018.553006][T23051] simple_read_from_buffer+0xe1/0x170 [ 1018.553032][T23051] proc_fail_nth_read+0x1bb/0x230 [ 1018.553061][T23051] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1018.553086][T23051] ? rw_verify_area+0x2a6/0x4d0 [ 1018.553107][T23051] ? tun_chr_write_iter+0x18a/0x200 [ 1018.553126][T23051] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1018.553148][T23051] vfs_read+0x20c/0xa70 [ 1018.553175][T23051] ? __pfx___mutex_lock+0x10/0x10 [ 1018.553199][T23051] ? __pfx_vfs_read+0x10/0x10 [ 1018.553222][T23051] ? __fget_files+0x2a/0x420 [ 1018.553245][T23051] ? __fget_files+0x3a0/0x420 [ 1018.553264][T23051] ? __fget_files+0x2a/0x420 [ 1018.553288][T23051] ksys_read+0x150/0x270 [ 1018.553320][T23051] ? __pfx_ksys_read+0x10/0x10 [ 1018.553350][T23051] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.553369][T23051] do_syscall_64+0x15f/0xf80 [ 1018.553390][T23051] ? trace_irq_disable+0x3b/0x140 [ 1018.553414][T23051] ? clear_bhb_loop+0x40/0x90 [ 1018.553433][T23051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.553450][T23051] RIP: 0033:0x7f59b5d5d60e [ 1018.553466][T23051] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1018.553479][T23051] RSP: 002b:00007f59b6c39fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1018.553497][T23051] RAX: ffffffffffffffda RBX: 00007f59b6c3a6c0 RCX: 00007f59b5d5d60e [ 1018.553509][T23051] RDX: 000000000000000f RSI: 00007f59b6c3a0a0 RDI: 0000000000000004 [ 1018.553519][T23051] RBP: 00007f59b6c3a090 R08: 0000000000000000 R09: 0000000000000000 [ 1018.553529][T23051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1018.553539][T23051] R13: 00007f59b6016038 R14: 00007f59b6015fa0 R15: 00007f59b613fa48 [ 1018.553565][T23051] [ 1018.673504][T23054] netlink: 'syz.0.5875': attribute type 62 has an invalid length. [ 1018.838690][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880319ee000: rx timeout, send abort [ 1018.857861][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807768f800: abort rx timeout. Force session deactivation [ 1019.347003][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880319ee000: abort rx timeout. Force session deactivation [ 1019.480645][ T5709] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 1019.803700][T23061] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5876'. [ 1021.215386][ T1602] usb 4-1: USB disconnect, device number 40 [ 1021.361669][T23068] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.5879'. [ 1021.583255][ T5709] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1021.738066][ T5709] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1021.752945][ T5709] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.770669][ T5709] usb 3-1: Product: syz [ 1021.780366][ T5709] usb 3-1: Manufacturer: syz [ 1021.791641][ T5709] usb 3-1: SerialNumber: syz [ 1022.221798][ T5709] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1022.255538][ T5709] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1022.551301][T23087] openvswitch: netlink: IP tunnel dst address not specified [ 1022.662786][T23092] syzkaller0: entered promiscuous mode [ 1022.668409][T23092] syzkaller0: entered allmulticast mode [ 1023.674169][T23112] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5891'. [ 1023.910376][T23066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1023.919640][T23066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1024.297897][ T1602] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 1024.434481][ T1602] usb 5-1: device descriptor read/64, error -71 [ 1024.678078][ T1602] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 1024.842878][ T1602] usb 5-1: device descriptor read/64, error -71 [ 1024.957269][ T1602] usb usb5-port1: attempt power cycle [ 1025.314776][ T1602] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 1025.366260][ T1602] usb 5-1: device descriptor read/8, error -71 [ 1025.613234][ T1602] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 1025.650055][ T1602] usb 5-1: device descriptor read/8, error -71 [ 1025.769749][ T1602] usb usb5-port1: unable to enumerate USB device [ 1026.106115][T23130] fuse: Unknown parameter '0x0000000000000003' [ 1026.142991][T23131] syzkaller0: entered promiscuous mode [ 1026.158909][T23131] syzkaller0: entered allmulticast mode [ 1027.061816][T23158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1027.083864][ T29] audit: type=1326 audit(1778425512.543:16598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23162 comm="syz.0.5906" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a559cdd9 code=0x7ffc0000 [ 1027.118529][T23158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1027.156232][ T29] audit: type=1326 audit(1778425512.543:16599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23162 comm="syz.0.5906" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a559cdd9 code=0x7ffc0000 [ 1027.274137][ T29] audit: type=1326 audit(1778425512.553:16600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23162 comm="syz.0.5906" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a559cdd9 code=0x7ffc0000 [ 1027.316699][ T24] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1027.369353][ T29] audit: type=1326 audit(1778425512.553:16601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23162 comm="syz.0.5906" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a559cdd9 code=0x7ffc0000 [ 1027.471274][ T29] audit: type=1326 audit(1778425512.563:16602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23162 comm="syz.0.5906" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd7a559cdd9 code=0x7ffc0000 [ 1027.500620][ T29] audit: type=1326 audit(1778425512.563:16603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23162 comm="syz.0.5906" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a559cdd9 code=0x7ffc0000 [ 1027.523932][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 1027.534569][ T29] audit: type=1326 audit(1778425512.563:16604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23162 comm="syz.0.5906" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a559cdd9 code=0x7ffc0000 [ 1027.562835][ T29] audit: type=1326 audit(1778425512.563:16605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23162 comm="syz.0.5906" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a559cdd9 code=0x7ffc0000 [ 1027.625715][ T29] audit: type=1326 audit(1778425512.563:16606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23162 comm="syz.0.5906" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a559cdd9 code=0x7ffc0000 [ 1027.688942][ T29] audit: type=1326 audit(1778425512.563:16607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23162 comm="syz.0.5906" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd7a559cdd9 code=0x7ffc0000 [ 1028.029308][T23172] FAULT_INJECTION: forcing a failure. [ 1028.029308][T23172] name failslab, interval 1, probability 0, space 0, times 0 [ 1028.043939][T23172] CPU: 1 UID: 0 PID: 23172 Comm: syz.1.5909 Tainted: G L syzkaller #0 PREEMPT(full) [ 1028.043967][T23172] Tainted: [L]=SOFTLOCKUP [ 1028.043974][T23172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1028.043984][T23172] Call Trace: [ 1028.043993][T23172] [ 1028.044004][T23172] dump_stack_lvl+0xe8/0x150 [ 1028.044030][T23172] should_fail_ex+0x412/0x560 [ 1028.044058][T23172] should_failslab+0xa8/0x100 [ 1028.044084][T23172] __kmalloc_noprof+0xe8/0x760 [ 1028.044108][T23172] ? ethnl_default_notify+0x1f5/0xbe0 [ 1028.044133][T23172] ? __kmalloc_noprof+0x1b8/0x760 [ 1028.044157][T23172] ethnl_default_notify+0x1f5/0xbe0 [ 1028.044179][T23172] ? __pfx___ethnl_set_coalesce+0x10/0x10 [ 1028.044208][T23172] ? __pfx_ethnl_default_notify+0x10/0x10 [ 1028.044245][T23172] ? mutex_is_locked+0x17/0x50 [ 1028.044266][T23172] ? rtnl_is_locked+0x15/0x20 [ 1028.044292][T23172] ethnl_default_set_doit+0x6ad/0xad0 [ 1028.044326][T23172] genl_family_rcv_msg_doit+0x22a/0x330 [ 1028.044345][T23172] ? __asan_memcpy+0x40/0x70 [ 1028.044369][T23172] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1028.044397][T23172] ? bpf_lsm_capable+0x9/0x20 [ 1028.044413][T23172] ? security_capable+0x7e/0x2c0 [ 1028.044437][T23172] genl_rcv_msg+0x61c/0x7a0 [ 1028.044458][T23172] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1028.044474][T23172] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 1028.044499][T23172] ? __pfx_ref_tracker_free+0x10/0x10 [ 1028.044530][T23172] netlink_rcv_skb+0x232/0x4b0 [ 1028.044551][T23172] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1028.044567][T23172] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1028.044597][T23172] ? down_read+0x270/0x2e0 [ 1028.044610][T23172] ? genl_rcv+0xd/0x40 [ 1028.044628][T23172] genl_rcv+0x28/0x40 [ 1028.044651][T23172] netlink_unicast+0x75c/0x8e0 [ 1028.044680][T23172] netlink_sendmsg+0x813/0xb40 [ 1028.044710][T23172] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1028.044735][T23172] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1028.044758][T23172] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1028.044782][T23172] ____sys_sendmsg+0x972/0x9f0 [ 1028.044803][T23172] ? __might_fault+0xaf/0x130 [ 1028.044827][T23172] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1028.044858][T23172] ? import_iovec+0x73/0xa0 [ 1028.044887][T23172] ___sys_sendmsg+0x2a5/0x360 [ 1028.044908][T23172] ? __lock_acquire+0x6b5/0x2cf0 [ 1028.044928][T23172] ? __pfx____sys_sendmsg+0x10/0x10 [ 1028.044981][T23172] ? __fget_files+0x2a/0x420 [ 1028.045002][T23172] ? __fget_files+0x3a0/0x420 [ 1028.045031][T23172] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1028.045058][T23172] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1028.045090][T23172] ? __pfx_ksys_write+0x10/0x10 [ 1028.045122][T23172] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1028.045139][T23172] do_syscall_64+0x15f/0xf80 [ 1028.045162][T23172] ? trace_irq_disable+0x3b/0x140 [ 1028.045186][T23172] ? clear_bhb_loop+0x40/0x90 [ 1028.045208][T23172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1028.045226][T23172] RIP: 0033:0x7f865259cdd9 [ 1028.045242][T23172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1028.045257][T23172] RSP: 002b:00007f8653522028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1028.045276][T23172] RAX: ffffffffffffffda RBX: 00007f8652815fa0 RCX: 00007f865259cdd9 [ 1028.045289][T23172] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 000000000000001a [ 1028.045301][T23172] RBP: 00007f8653522090 R08: 0000000000000000 R09: 0000000000000000 [ 1028.045312][T23172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1028.045323][T23172] R13: 00007f8652816038 R14: 00007f8652815fa0 R15: 00007f865293fa48 [ 1028.045354][T23172] [ 1028.490730][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1028.500906][ T24] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1028.508493][ T24] usb 4-1: can't read configurations, error -71 [ 1028.735162][T23186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5911'. [ 1029.314412][ T5709] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000080. ret = -ETIMEDOUT [ 1029.326800][ T5709] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1029.337312][ T5709] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1029.347795][ T5709] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -110 [ 1029.516547][T23200] fuse: Unknown parameter '0x0000000000000003' [ 1029.801556][T23213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1029.810530][T23213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1029.922724][T23215] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5922'. [ 1029.937514][T23215] FAULT_INJECTION: forcing a failure. [ 1029.937514][T23215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1029.951012][T23215] CPU: 0 UID: 0 PID: 23215 Comm: syz.3.5922 Tainted: G L syzkaller #0 PREEMPT(full) [ 1029.951038][T23215] Tainted: [L]=SOFTLOCKUP [ 1029.951044][T23215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1029.951055][T23215] Call Trace: [ 1029.951063][T23215] [ 1029.951070][T23215] dump_stack_lvl+0xe8/0x150 [ 1029.951095][T23215] should_fail_ex+0x412/0x560 [ 1029.951122][T23215] _copy_from_iter+0x1d3/0x1670 [ 1029.951140][T23215] ? rcu_is_watching+0x15/0xb0 [ 1029.951155][T23215] ? __pfx__copy_from_iter+0x10/0x10 [ 1029.951171][T23215] ? netlink_sendmsg+0x650/0xb40 [ 1029.951184][T23215] ? skb_put+0x11b/0x210 [ 1029.951199][T23215] netlink_sendmsg+0x6c0/0xb40 [ 1029.951219][T23215] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1029.951234][T23215] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1029.951248][T23215] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1029.951264][T23215] ____sys_sendmsg+0x972/0x9f0 [ 1029.951278][T23215] ? __might_fault+0xaf/0x130 [ 1029.951294][T23215] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1029.951311][T23215] ? import_iovec+0x73/0xa0 [ 1029.951327][T23215] ___sys_sendmsg+0x2a5/0x360 [ 1029.951341][T23215] ? __lock_acquire+0x6b5/0x2cf0 [ 1029.951353][T23215] ? __pfx____sys_sendmsg+0x10/0x10 [ 1029.951382][T23215] ? __fget_files+0x2a/0x420 [ 1029.951393][T23215] ? __fget_files+0x3a0/0x420 [ 1029.951409][T23215] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1029.951424][T23215] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1029.951442][T23215] ? __pfx_ksys_write+0x10/0x10 [ 1029.951460][T23215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.951478][T23215] do_syscall_64+0x15f/0xf80 [ 1029.951492][T23215] ? trace_irq_disable+0x3b/0x140 [ 1029.951507][T23215] ? clear_bhb_loop+0x40/0x90 [ 1029.951519][T23215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.951529][T23215] RIP: 0033:0x7fe18819cdd9 [ 1029.951539][T23215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1029.951547][T23215] RSP: 002b:00007fe189041028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1029.951558][T23215] RAX: ffffffffffffffda RBX: 00007fe188415fa0 RCX: 00007fe18819cdd9 [ 1029.951565][T23215] RDX: 0000000004040004 RSI: 0000200000000280 RDI: 0000000000000003 [ 1029.951572][T23215] RBP: 00007fe189041090 R08: 0000000000000000 R09: 0000000000000000 [ 1029.951578][T23215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1029.951583][T23215] R13: 00007fe188416038 R14: 00007fe188415fa0 R15: 00007fe18853fa48 [ 1029.951597][T23215] [ 1030.201346][ T1602] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1030.354794][ T1602] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1030.364109][ T1602] usb 5-1: config 0 has no interface number 0 [ 1030.372653][ T1602] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1030.381819][ T1602] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.389874][ T1602] usb 5-1: Product: syz [ 1030.394108][ T1602] usb 5-1: Manufacturer: syz [ 1030.398706][ T1602] usb 5-1: SerialNumber: syz [ 1030.410081][ T1602] usb 5-1: config 0 descriptor?? [ 1030.493307][ T24] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1030.636941][ T1602] dvb_usb_ec168 5-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 1030.646964][ T24] usb 4-1: config 0 has an invalid interface number: 97 but max is 0 [ 1030.659713][ T1602] usb 5-1: USB disconnect, device number 40 [ 1030.670662][ T24] usb 4-1: config 0 has no interface number 0 [ 1030.687321][ T24] usb 4-1: too many endpoints for config 0 interface 97 altsetting 97: 97, using maximum allowed: 30 [ 1030.699052][ T24] usb 4-1: config 0 interface 97 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 1030.712767][ T24] usb 4-1: config 0 interface 97 has no altsetting 0 [ 1030.719637][ T24] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1030.728981][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.741278][ T24] usb 4-1: config 0 descriptor?? [ 1030.957210][T23218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1030.975711][T23218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1030.986958][T23218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1030.996246][T23218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1031.005934][T23218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1031.015000][T23218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1031.024273][T23218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1031.033569][T23218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1031.044562][T23218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1031.055021][T23218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1031.088272][T23218] loop6: detected capacity change from 0 to 2640 [ 1031.126656][T23235] loop6: detected capacity change from 2640 to 524287999 [ 1031.148649][T23218] Buffer I/O error on dev loop6, logical block 0, async page read [ 1031.157181][T23218] Buffer I/O error on dev loop6, logical block 0, async page read [ 1031.166317][T23218] Buffer I/O error on dev loop6, logical block 0, async page read [ 1031.174857][T23218] Buffer I/O error on dev loop6, logical block 0, async page read [ 1031.182906][T23218] Buffer I/O error on dev loop6, logical block 0, async page read [ 1031.196133][T23218] Buffer I/O error on dev loop6, logical block 0, async page read [ 1031.205019][T23218] Buffer I/O error on dev loop6, logical block 0, async page read [ 1031.213390][T23218] Buffer I/O error on dev loop6, logical block 0, async page read [ 1031.221637][T23218] ldm_validate_partition_table(): Disk read failed. [ 1031.229181][T23218] Buffer I/O error on dev loop6, logical block 0, async page read [ 1031.250703][T23218] Buffer I/O error on dev loop6, logical block 0, async page read [ 1031.260259][T23218] Dev loop6: unable to read RDB block 0 [ 1031.267038][T23218] loop6: unable to read partition table [ 1031.273508][T23218] loop_reread_partitions: partition scan of loop6 (ir¡c‡’ úÒVUŸX¯ÃG¬½›˜ñZtM<IÆ i8NL í á·ùWû@©àQ6ÒÝ%ž…û¥¡Úè) failed (rc=-5) [ 1031.779907][T23252] fuse: Unknown parameter '0x0000000000000003' [ 1031.814692][T23254] syzkaller0: entered promiscuous mode [ 1031.820301][T23254] syzkaller0: entered allmulticast mode [ 1031.993175][ T5629] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1032.143234][ T5629] usb 2-1: Using ep0 maxpacket: 8 [ 1032.155649][ T5629] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 1032.173932][ T5629] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 1032.189089][ T5629] usb 2-1: config 0 has no interface number 0 [ 1032.198332][ T5629] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0x17, changing to 0x7 [ 1032.210736][ T5629] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 1032.221757][ T5629] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1032.236913][ T5629] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1032.246160][ T5629] usb 2-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 1032.254572][ T5629] usb 2-1: Product: syz [ 1032.258818][ T5629] usb 2-1: Manufacturer: syz [ 1032.267217][ T5629] usb 2-1: config 0 descriptor?? [ 1032.313166][ T5709] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1032.483147][ T5709] usb 5-1: Using ep0 maxpacket: 32 [ 1032.490319][ T5629] IPVS: starting estimator thread 0... [ 1032.540433][ T5709] usb 5-1: config 0 has no interfaces? [ 1032.546025][ T5709] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1032.569440][ T5709] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.581172][ T5709] usb 5-1: config 0 descriptor?? [ 1032.616603][T23279] IPVS: using max 29 ests per chain, 69600 per kthread [ 1032.635688][ T5709] usb 2-1: USB disconnect, device number 52 [ 1032.734907][ T24] usb 4-1: string descriptor 0 read error: -71 [ 1032.759084][ T24] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1032.766436][ T24] gspca_cpia1: usb_control_msg 05, error -71 [ 1032.784652][ T24] gspca_cpia1: usb_control_msg 01, error -71 [ 1032.788430][T23284] bridge0: port 2(bridge_slave_1) entered disabled state [ 1032.792783][ T24] cpia1 4-1:0.97: only firmware version 1 is supported (got: 0) [ 1032.798389][T23284] bridge0: port 1(bridge_slave_0) entered disabled state [ 1032.809951][ T24] usb 4-1: USB disconnect, device number 43 [ 1032.875104][T23284] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1032.887716][T23284] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1032.947874][T14895] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1032.957913][T14895] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1032.967232][T14895] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1032.978083][T14895] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.190342][T23290] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5936'. [ 1033.258058][ T4995] ldm_validate_partition_table(): Disk read failed. [ 1033.265562][ T4995] Dev loop6: unable to read RDB block 0 [ 1033.271713][ T4995] loop6: unable to read partition table [ 1033.298396][T23292] bond0: (slave bond_slave_1): Releasing backup interface [ 1033.365396][T23294] netlink: 9 bytes leftover after parsing attributes in process `syz.3.5939'. [ 1033.420476][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 1033.420540][ T29] audit: type=1326 audit(1778425518.903:16724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23287 comm="syz.1.5938" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f865259cdd9 code=0x0 [ 1033.540803][T23285] kvm: pic: level sensitive irq not supported [ 1033.541132][T23285] kvm: pic: non byte write [ 1034.592627][T23321] fuse: Unknown parameter '0x0000000000000003' [ 1034.658790][T23324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1034.671664][T23324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1034.684914][T23324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1034.695876][T23324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1034.704075][ T5709] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1034.716375][T23324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1034.727882][T23324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1034.776629][T23331] netlink: 'syz.2.5949': attribute type 1 has an invalid length. [ 1034.802094][T23331] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1034.815876][T23331] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5949'. [ 1034.830390][T23331] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1034.846583][T23331] bond1: (slave batadv1): making interface the new active one [ 1034.856755][T23331] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 1034.866383][ T5709] usb 4-1: too many configurations: 53, using maximum allowed: 8 [ 1034.907459][ T5709] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1034.935833][ T5709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.953004][ T5709] usb 4-1: Product: syz [ 1034.962152][ T5709] usb 4-1: Manufacturer: syz [ 1034.968735][ T5709] usb 4-1: SerialNumber: syz [ 1035.067664][T16152] usb 5-1: USB disconnect, device number 41 [ 1035.209712][ T5709] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1035.221226][T23340] trusted_key: encrypted_key: keyword 'new$default' not recognized [ 1035.250001][ T5709] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1035.263264][ T5709] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1035.273676][ T5709] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1035.299806][ T5709] usb 4-1: USB disconnect, device number 44 [ 1035.628084][T23349] netlink: 'syz.1.5952': attribute type 10 has an invalid length. [ 1036.145206][T23343] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5953'. [ 1036.343138][ T24] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 1036.515568][ T24] usb 4-1: not running at top speed; connect to a high speed hub [ 1036.536995][ T24] usb 4-1: config 127 has an invalid interface number: 162 but max is 0 [ 1036.560249][ T24] usb 4-1: config 127 has no interface number 0 [ 1036.575093][ T24] usb 4-1: config 127 interface 162 has no altsetting 0 [ 1036.590940][T23364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5959'. [ 1036.595097][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=e1.79 [ 1036.623575][T23364] tipc: Started in network mode [ 1036.624128][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.636560][T23364] tipc: Node identity 4, cluster identity 4711 [ 1036.636576][T23364] tipc: Node number set to 4 [ 1036.647708][ T24] usb 4-1: Product: syz [ 1036.656639][ T24] usb 4-1: Manufacturer: syz [ 1036.662877][ T24] usb 4-1: SerialNumber: syz [ 1036.728095][T23367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1036.742638][T23367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1036.751583][T23369] netlink: 'syz.0.5961': attribute type 1 has an invalid length. [ 1036.766392][T23367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1036.788271][T23367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1084.996856][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 1142.033073][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1142.040059][ C1] rcu: 0-...!: (5 ticks this GP) idle=4f7c/1/0x4000000000000000 softirq=157641/157643 fqs=14 [ 1142.051662][ C1] rcu: (detected by 1, t=10502 jiffies, g=173685, q=279 ncpus=2) [ 1142.059493][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1142.059525][ C0] NMI backtrace for cpu 0 [ 1142.059549][ C0] CPU: 0 UID: 0 PID: 23375 Comm: syz.0.5962 Tainted: G L syzkaller #0 PREEMPT(full) [ 1142.059571][ C0] Tainted: [L]=SOFTLOCKUP [ 1142.059576][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1142.059587][ C0] RIP: 0010:kasan_check_range+0x1d0/0x2c0 [ 1142.059616][ C0] Code: 5c 24 07 4d 85 e4 49 0f 49 dc 48 83 e3 f8 49 29 dc 74 0e 41 80 3b 00 75 7c 49 ff c3 49 ff cc 75 f2 5b 41 5c 41 5d 41 5e 41 5f <5d> e9 9a bf 7a 09 cc 45 84 ff 0f 85 a1 00 00 00 41 f7 c7 00 ff 00 [ 1142.059629][ C0] RSP: 0018:ffffc90000007d58 EFLAGS: 00000056 [ 1142.059644][ C0] RAX: ffffffff81b2c401 RBX: 0000000000000000 RCX: ffffffff81b2c515 [ 1142.059655][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff9030b5f0 [ 1142.059665][ C0] RBP: 0000000000000000 R08: ffffffff9030b5f7 R09: 1ffffffff20616be [ 1142.059677][ C0] R10: dffffc0000000000 R11: fffffbfff20616bf R12: 0000000000000001 [ 1142.059687][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1142.059698][ C0] FS: 00007fd7a639e6c0(0000) GS:ffff88812528d000(0000) knlGS:0000000000000000 [ 1142.059711][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1142.059722][ C0] CR2: 00002000000012c0 CR3: 000000007cfd4000 CR4: 00000000003526f0 [ 1142.059737][ C0] Call Trace: [ 1142.059745][ C0] [ 1142.059754][ C0] trace_hrtimer_start+0x55/0x200 [ 1142.059801][ C0] enqueue_hrtimer+0xb7/0x2c0 [ 1142.059847][ C0] __hrtimer_run_queues+0x4d2/0xa20 [ 1142.059897][ C0] hrtimer_interrupt+0x44b/0x950 [ 1142.059928][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 1142.059948][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1142.059969][ C0] [ 1142.059975][ C0] [ 1142.059981][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1142.059998][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 1142.060017][ C0] Code: f7 e8 3d f7 f6 f5 f7 c3 00 02 00 00 74 05 e8 30 8d 22 f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 14 78 e8 f5 65 8b 05 0d d0 8d 07 85 c0 74 18 5b 41 5e c3 cc cc [ 1142.060030][ C0] RSP: 0018:ffffc90006886ee8 EFLAGS: 00000206 [ 1142.060043][ C0] RAX: 0000000000000002 RBX: 0000000000000282 RCX: 0000000000000202 [ 1142.060053][ C0] RDX: 0000000000000002 RSI: ffffffff8dfa66cf RDI: 0000000000000001 [ 1142.060063][ C0] RBP: ffffc900068871d0 R08: ffffffff9030b5f7 R09: 1ffffffff20616be [ 1142.060074][ C0] R10: dffffc0000000000 R11: fffffbfff20616bf R12: ffff888038013290 [ 1142.060086][ C0] R13: dffffc0000000000 R14: ffff8880380132a8 R15: ffff8880380132f8 [ 1142.060106][ C0] taprio_change+0x30fe/0x3e50 [ 1142.060136][ C0] ? __pfx_taprio_change+0x10/0x10 [ 1142.060166][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 1142.060198][ C0] taprio_init+0x96f/0xbe0 [ 1142.060222][ C0] ? __pfx_taprio_init+0x10/0x10 [ 1142.060240][ C0] ? qdisc_alloc+0x6ec/0x9e0 [ 1142.060261][ C0] ? __pfx_taprio_init+0x10/0x10 [ 1142.060279][ C0] qdisc_create+0x7c4/0xf20 [ 1142.060297][ C0] ? lockdep_rtnl_is_held+0x26/0x40 [ 1142.060320][ C0] tc_modify_qdisc+0x16f0/0x2290 [ 1142.060336][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1142.060360][ C0] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1142.060389][ C0] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1142.060404][ C0] rtnetlink_rcv_msg+0x77e/0xbe0 [ 1142.060422][ C0] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 1142.060441][ C0] ? netlink_sendmsg+0x5d4/0xb40 [ 1142.060460][ C0] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1142.060477][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1142.060496][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1142.060517][ C0] netlink_rcv_skb+0x232/0x4b0 [ 1142.060537][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1142.060555][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1142.060580][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 1142.060598][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 1142.060619][ C0] netlink_unicast+0x75c/0x8e0 [ 1142.060641][ C0] netlink_sendmsg+0x813/0xb40 [ 1142.060665][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1142.060685][ C0] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1142.060706][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1142.060727][ C0] ____sys_sendmsg+0x972/0x9f0 [ 1142.060747][ C0] ? __might_fault+0xaf/0x130 [ 1142.060768][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1142.060791][ C0] ? import_iovec+0x73/0xa0 [ 1142.060813][ C0] ___sys_sendmsg+0x2a5/0x360 [ 1142.060832][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1142.060849][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 1142.060871][ C0] ? futex_wait+0x2a2/0x390 [ 1142.060907][ C0] ? __fget_files+0x2a/0x420 [ 1142.060924][ C0] ? __fget_files+0x3a0/0x420 [ 1142.060945][ C0] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1142.060967][ C0] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1142.060991][ C0] ? rcu_is_watching+0x15/0xb0 [ 1142.061013][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1142.061028][ C0] do_syscall_64+0x15f/0xf80 [ 1142.061048][ C0] ? trace_irq_disable+0x3b/0x140 [ 1142.061068][ C0] ? clear_bhb_loop+0x40/0x90 [ 1142.061085][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1142.061100][ C0] RIP: 0033:0x7fd7a559cdd9 [ 1142.061117][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1142.061129][ C0] RSP: 002b:00007fd7a639e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1142.061144][ C0] RAX: ffffffffffffffda RBX: 00007fd7a5816090 RCX: 00007fd7a559cdd9 [ 1142.061156][ C0] RDX: 0000000000000010 RSI: 00002000000012c0 RDI: 0000000000000006 [ 1142.061165][ C0] RBP: 00007fd7a5632d69 R08: 0000000000000000 R09: 0000000000000000 [ 1142.061175][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1142.061184][ C0] R13: 00007fd7a5816128 R14: 00007fd7a5816090 R15: 00007fd7a593fa48 [ 1142.061203][ C0] [ 1142.061517][ C1] rcu: rcu_preempt kthread starved for 10473 jiffies! g173685 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1142.634767][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1142.644738][ C1] rcu: RCU grace-period kthread stack dump: [ 1142.650617][ C1] task:rcu_preempt state:R running task stack:27536 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1142.664107][ C1] Call Trace: [ 1142.667378][ C1] [ 1142.670312][ C1] __schedule+0x1821/0x5740 [ 1142.674823][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1142.679786][ C1] ? __pfx___schedule+0x10/0x10 [ 1142.684650][ C1] ? schedule+0x90/0x360 [ 1142.688894][ C1] schedule+0x164/0x360 [ 1142.693053][ C1] schedule_timeout+0x158/0x2c0 [ 1142.697907][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1142.703276][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1142.708572][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1142.714384][ C1] ? prepare_to_swait_event+0x340/0x370 [ 1142.719939][ C1] rcu_gp_fqs_loop+0x312/0x11d0 [ 1142.724804][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1142.730954][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1142.736241][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1142.742051][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 1142.746640][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1142.751831][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1142.757635][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 1142.762569][ C1] ? __kthread_parkme+0x19c/0x1f0 [ 1142.767606][ C1] kthread+0x388/0x470 [ 1142.771673][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1142.776866][ C1] ? __pfx_kthread+0x10/0x10 [ 1142.781456][ C1] ret_from_fork+0x514/0xb70 [ 1142.786045][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1142.791152][ C1] ? __switch_to+0xc79/0x1410 [ 1142.795834][ C1] ? __pfx_kthread+0x10/0x10 [ 1142.800423][ C1] ret_from_fork_asm+0x1a/0x30 [ 1142.805203][ C1] [ 1142.808219][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1142.814537][ C1] CPU: 1 UID: 0 PID: 21568 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1142.825636][ C1] Tainted: [L]=SOFTLOCKUP [ 1142.829950][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1142.839996][ C1] RIP: 0010:handle_softirqs+0x160/0x840 [ 1142.845540][ C1] Code: 89 6c 24 20 0f b7 db 48 c7 c7 20 1d cb 8b e8 37 f1 20 0a 65 66 c7 05 d5 4f b1 11 00 00 e8 c8 0c 46 00 fb 48 c7 c5 c0 a0 60 8e ff ff ff ff 0f bc c3 41 89 c6 41 ff c6 0f 84 09 04 00 00 89 5c [ 1142.865136][ C1] RSP: 0018:ffffc90000a08f28 EFLAGS: 00000206 [ 1142.871199][ C1] RAX: 00000000009a445c RBX: 0000000000000100 RCX: 0000000000000102 [ 1142.879162][ C1] RDX: 0000000000000002 RSI: ffffffff8dfa66cf RDI: ffffffff8c28af60 [ 1142.887220][ C1] RBP: ffffffff8e60a0c0 R08: ffffffff9030b5f7 R09: 1ffffffff20616be [ 1142.895183][ C1] R10: dffffc0000000000 R11: fffffbfff20616bf R12: 0000000000000000 [ 1142.903149][ C1] R13: 0000000000000000 R14: ffff88803ba4dc40 R15: dffffc0000000000 [ 1142.911112][ C1] FS: 0000555579d78500(0000) GS:ffff88812538d000(0000) knlGS:0000000000000000 [ 1142.920038][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1142.926616][ C1] CR2: 00007f86533456b8 CR3: 0000000030536000 CR4: 00000000003526f0 [ 1142.934588][ C1] Call Trace: [ 1142.937864][ C1] [ 1142.940706][ C1] ? __irq_exit_rcu+0xca/0x220 [ 1142.945477][ C1] __irq_exit_rcu+0xca/0x220 [ 1142.950081][ C1] irq_exit_rcu+0x9/0x30 [ 1142.954316][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1142.959955][ C1] [ 1142.962879][ C1] [ 1142.965805][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1142.971784][ C1] RIP: 0010:smp_call_function_many_cond+0xfcf/0x13d0 [ 1142.978458][ C1] Code: 79 45 8b 2e 44 89 ee 83 e6 01 31 ff e8 da 07 0c 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 85 03 0c 00 eb 37 f3 90 <43> 0f b6 04 2c 84 c0 75 10 41 f7 06 01 00 00 00 74 1e e8 6a 03 0c [ 1142.998058][ C1] RSP: 0018:ffffc9000cdcf560 EFLAGS: 00000293 [ 1143.004121][ C1] RAX: ffffffff81b9be66 RBX: ffff8880b873c148 RCX: ffff88803ba4dc40 [ 1143.012087][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1143.020049][ C1] RBP: ffffc9000cdcf688 R08: ffffffff9030b5f7 R09: 1ffffffff20616be [ 1143.028017][ C1] R10: dffffc0000000000 R11: fffffbfff20616bf R12: 1ffff110170c8589 [ 1143.035985][ C1] R13: dffffc0000000000 R14: ffff8880b8642c48 R15: 0000000000000000 [ 1143.043961][ C1] ? smp_call_function_many_cond+0xfe6/0x13d0 [ 1143.050036][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 1143.055244][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1143.061573][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 1143.066777][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 1143.071885][ C1] flush_tlb_mm_range+0x5c3/0x10b0 [ 1143.077008][ C1] ? up_write+0x1ab/0x410 [ 1143.081342][ C1] dup_mmap+0x17a2/0x1d90 [ 1143.085692][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 1143.090383][ C1] ? copy_mm+0x130/0x4a0 [ 1143.094630][ C1] ? copy_mm+0x130/0x4a0 [ 1143.098881][ C1] copy_mm+0x13b/0x4a0 [ 1143.102951][ C1] copy_process+0x1f1c/0x4440 [ 1143.107641][ C1] ? copy_process+0xd87/0x4440 [ 1143.112413][ C1] ? __pfx_copy_process+0x10/0x10 [ 1143.117452][ C1] kernel_clone+0x284/0x8f0 [ 1143.121952][ C1] ? cgroup1_freezing+0x20/0x350 [ 1143.126891][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 1143.131930][ C1] __x64_sys_clone+0x1b6/0x230 [ 1143.136697][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 1143.142008][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1143.148071][ C1] do_syscall_64+0x15f/0xf80 [ 1143.152668][ C1] ? trace_irq_disable+0x3b/0x140 [ 1143.157695][ C1] ? clear_bhb_loop+0x40/0x90 [ 1143.162370][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1143.168257][ C1] RIP: 0033:0x7f86525c5852 [ 1143.172680][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 1143.192277][ C1] RSP: 002b:00007f865293fc60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1143.200687][ C1] RAX: ffffffffffffffda RBX: 00007f865293fc60 RCX: 00007f86525c5852 [ 1143.208656][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1143.216622][ C1] RBP: 00007f865293fdec R08: 0000000000000000 R09: 0000000000000001 [ 1143.224588][ C1] R10: 0000555579d787d0 R11: 0000000000000246 R12: 0000000000000001 [ 1143.232554][ C1] R13: 00000000000927c0 R14: 00000000000fd3ad R15: 00007f865293fe40 [ 1143.240538][ C1]