last executing test programs: 9.466791766s ago: executing program 2 (id=10987): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x10300}) r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) ioctl$KVM_SET_MSRS(r0, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x121800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f00000000c0)={'hsr0\x00', {0x2, 0x0, @empty}}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x32, 0x18d], 0x100000, 0x240046}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000000840)={0x9, {"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", 0x1000}}, 0x214) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ppoll(&(0x7f0000000040)=[{r3, 0x200}], 0x1, 0x0, 0x0, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000240), 0x4, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_test', 0x8a881, 0xbb) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000080)={r6, 0x0, {0x0, 0x0, 0x0, 0x1, 0x4000000000000ffd, 0x0, 0x0, 0x3, 0xc, "faf98317e5a1149989fc67be43ea6acc96e3a2503dc31c97214d58128bbad0099cebdc25f5ab60c9e69098c8b534464c516bdd8a0f350000000000000300", "32d8cc26f7061a74df2cfc06489f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x7fffffff]}}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000005500)={0x2020}, 0x2020) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$XFS_IOC_FSCOUNTS(r9, 0x80205871, &(0x7f0000000200)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r8, 0x40a85323, &(0x7f0000000040)={{0x4, 0xbb}, 'port0\x00', 0x4, 0x80000, 0xe, 0x1, 0xf11, 0x9, 0x400, 0x0, 0x4, 0x8}) 8.098774831s ago: executing program 2 (id=10988): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0xc0001502, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 7.977638679s ago: executing program 2 (id=10991): r0 = socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000040)=""/47, 0x2f}, {0x0}], 0x2}, 0x2}], 0x1, 0x100, 0x0) sendmmsg$inet6(r0, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="b458b09a7bc6afad62c3f97125bc54bad5b9f64492fb3237f80678f40515a15a9bc7f8f9c9244e7fe0c328f6457f6d457effb6e3090aec26ddb480ffdd53c94d4d0ca124cd", 0x45}], 0x1}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000007c0)="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", 0x1000}], 0x1, &(0x7f0000001800)=[@dstopts={{0xb8, 0x29, 0x37, {0xb5, 0x13, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}, @jumbo={0xc2, 0x4, 0x9}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}}, @jumbo={0xc2, 0x4, 0x100}, @generic={0x8, 0x6c, "5b6abf80e52316419d1a8f3502acb4f5ec3b34978be76c43b22fd93980aca244781cfb2bb6c1babbb118edb4e53e386a82f87a85b0d2cdaa548435ba5ef195680124227a54ad30d22b59a512c01cfdbf66cacd033c270a6570ddd900a0dabaef0b65c83b993a7acce6b0da84"}, @ra={0x5, 0x2, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x3}}, @rthdr_2292={{0x78, 0x29, 0x39, {0x2b, 0xc, 0x1, 0x9, 0x0, [@private1, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @rand_addr=' \x01\x00', @loopback, @mcast1]}}}], 0x148}}], 0x2, 0x20e8086) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 7.36443516s ago: executing program 4 (id=10994): connect$inet(0xffffffffffffffff, 0x0, 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0xa2003, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x134f5000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x325000, 0x800}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = syz_io_uring_setup(0x231e, &(0x7f0000000c40)={0x0, 0x9d59, 0x0, 0x1, 0x88}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000040)) fsopen(&(0x7f0000000100)='binder\x00', 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x8, 0x2, 0x0) 7.146045333s ago: executing program 0 (id=10995): r0 = socket$inet(0x2, 0x6, 0x6) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3, &(0x7f0000000200)=0x1f, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) syz_open_dev$video(&(0x7f0000000040), 0xa8, 0x41841) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) syz_open_dev$cec(0x0, 0x0, 0x82) r1 = io_uring_setup(0x6bb, &(0x7f0000000040)={0x0, 0x3cb3, 0x1c080, 0xa, 0x20082f5}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newqdisc={0x178, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x10, 0xfffa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_MAX_P={0x8, 0x4, 0x3}, @TCA_GRED_PARMS={0x38, 0x1, {0xe0, 0x3, 0x4, 0xb, 0x3, 0x7, 0x9, 0x0, 0x0, 0x80, 0x5, 0x0, 0x1a, 0x4, 0xff, 0x1d4}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x178}}, 0x24040004) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x2f7, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d00)=ANY=[@ANYBLOB="5000000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000181002001c0012800b00010067656e65766500000c00028008000200e00000000000000000000000ecffffff0000000000000000"], 0x50}}, 0x80) sendto$inet(r0, &(0x7f0000000540)='v', 0x1, 0x4040, 0x0, 0x0) recvmmsg(r0, &(0x7f0000006f00)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x140, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000027000100000000000000000a01"], 0x50}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x210200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, 0x1, 0x8, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9db9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x54e}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xf}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa01}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000044}, 0x4004950) 7.054754174s ago: executing program 2 (id=10996): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r1}}, 0x20) r2 = io_uring_setup(0x100600d, &(0x7f0000002600)={0x0, 0x224f, 0x1, 0xfffffffe, 0x53}) io_uring_register$IORING_REGISTER_MEM_REGION(r2, 0x22, 0x0, 0x1) io_uring_register$IORING_REGISTER_PBUF_STATUS(r2, 0x1a, &(0x7f0000000240)={0x81}, 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200), 0x10, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="040000000f0400"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0300008001000000036d31a8fa69b10b1e87298a150000e0040200006e3f6d8fa45afdf6"], 0x48}}, 0x4044001) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x1b, 0x0, 0x0) syz_usb_connect(0xe7af3cf0599a7105, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r6, 0xc0045520, &(0x7f0000000080)=0xffffbf7f) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000000020502000001000003000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$nl_route(r8, 0x0, 0x0) sendmsg$nl_route_sched(r8, 0x0, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000040)={[0x3bf9, 0x1000000, 0x4, 0x100000000000fb, 0x6, 0x6, 0x7f, 0x7, 0xfffffffffffffff8, 0x4, 0x0, 0x9, 0xfffffffffffffffd, 0x39, 0x10000080000003, 0x9], 0x200000, 0x100005}) ioctl$KVM_RUN(r5, 0xae80, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001300)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x0, 0xffffffff, 0xffffffff, 0x128, 0xffffffff, 0x378, 0xffffffff, 0xffffffff, 0x378, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0x1000}}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @loopback}, [0x0, 0x0, 0x1fe0000ff], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x0, 0x0, 0x3}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2c8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000060a010400000000000000000a00fffe0900010073797a310000000028000480240001800b000100736f636b65740000140002800800014000000000080002400000000f0900020073797a320000000014000000149baec1dd57ec29a90000000500000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) socket$nl_route(0x10, 0x3, 0x0) r10 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$printer(r10, 0x0, &(0x7f0000000600)={0x34, &(0x7f0000000240)={0x40, 0xc, 0x1, '!'}, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.733666483s ago: executing program 0 (id=10999): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406d049cc20000000000010902240001040000000904000009030003000921fdff080122"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet(0x2, 0x3, 0x9) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000540)={r1, &(0x7f0000000400)='@S})){&{.%#\'\\^]#-\x98*5,!\x00', 0x101201, &(0x7f0000000480)={@_ha_fsid={[0x4, 0x7]}, {0x0, 0x9, 0xff, 0x4}}, 0x1a, &(0x7f00000004c0)={@_ha_fsid}, &(0x7f0000000500)=0x3}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000440)='freezer.self_freezing\x00', 0x0, 0x0) preadv2(r3, &(0x7f0000000040)=[{&(0x7f0000000100)=""/65, 0x41}], 0x1, 0x2, 0x0, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000580)='./binderfs2/binder1\x00', 0x1002, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000005c0)={0x73622a85, 0xa, 0x1}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000600)=0x80000001, 0x4) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x84, @empty, 0x15, 0x2, 'lc\x00', 0x1, 0x400000, 0x4}, 0x2c) open$dir(&(0x7f0000000080)='./file0\x00', 0xe0000, 0x57abcddc7439de67) r5 = syz_create_resource$binfmt(&(0x7f00000000c0)='./file0\x00') execveat$binfmt(r3, r5, &(0x7f00000001c0)={[&(0x7f0000000100)=')()^-\'\x00', &(0x7f0000000140)=']&+&\x00', &(0x7f0000000180)='-#\x00']}, &(0x7f00000003c0)={[&(0x7f0000000200)='a$\x00', &(0x7f0000000240)='*(*\\\x00', &(0x7f00000002c0)='@S})){&{.%#\'\\^]#-\x98*5,!\x00', &(0x7f0000000380)='+-\xc9', &(0x7f0000000640)='\x01\x00\t\x00\x05\x1dm\xe89\xe5v4\xeay&Q\xc0\xdf\x98d\xbfD\xe0X\xb2\xee\xc3!\x19\x19\xc2NT\xa1Z8\xba\xb5\x7f\x89\xdc\xdc\xd3b\x89\xdb\xff\x8b<\x84x\r\xac\xb0\x93\x928|\xad\xfc\x0f\x9a\"\xffE:\x12x\xb8\x8c\xa7\xa8\x89\xee\xb0oL\xf3G\xbc\x7f\xf6\xd2=Le\xde\xf0\xc2\x9b\x04\xa9H\xa3\x95\xd2W\xb8M>\x81I\xa7\xf9\xe6\v)\xa8S\xc8q2\xe0e|\a\x81', &(0x7f0000000340)='.!\x00']}, 0x800) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[], 0x0) pselect6(0x40, &(0x7f0000000000)={0x8, 0x0, 0x3, 0xa, 0x1, 0x6ee7, 0x4, 0x4}, &(0x7f0000000080)={0x8, 0x8, 0xe6c, 0x2, 0x4e7c, 0x1, 0x1, 0x9}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={[0x2]}, 0x8}) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r6) 6.614823408s ago: executing program 4 (id=11000): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030f000000000700000000000005000900e000000001d78771b90bd8a3b4914783c58777003d5b9538a9d03e6e9bfdac5500000000030006000000000002008e3400000000000000000000000002000100000000000000091600000000030005000000000002"], 0x78}, 0x1, 0x7}, 0x0) (fail_nth: 2) 6.219844803s ago: executing program 4 (id=11001): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x406, 0x4, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0xfffffffd, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x7000000, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, 0x0, 0x0) 6.117581791s ago: executing program 4 (id=11002): socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r2, 0x110, 0x7, 0x0, 0x4) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x458, 0x0, 0x310, 0xfeffffff, 0x240, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x3e8, 0x3e8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [0x0, 0x100], 0x0, 0x40}}, @common=@inet=@multiport={{0x50}, {0x1, 0x1, [0x4e20, 0x4e22, 0x4e20, 0x4e20, 0x4e24, 0x4e20, 0x4e24, 0x4e23, 0x4e21, 0x4e21, 0x4e23, 0x4e20, 0x4e24, 0x4e24, 0x4e22], [0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1], 0x1}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x3]}}}, @common=@set={{0x40}, {{0x0, [], 0x0, 0x1}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x40, 0x0}, @broadcast, @gre_key=0x6, @port=0x4e24}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @port=0x4e24}}}}, {{@ip={@local, @empty, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {}, 0x6}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@multicast1, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10009, 0x8a0}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x34}}, 0x4084) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000500)={0x401, r3, 'id0\x00'}) syz_fuse_handle_req(r6, &(0x7f0000006280)="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", 0x2000, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r7, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r8, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f00000007c0)={0x28, 0x4, r8, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x9}) migrate_pages(0x0, 0x7fff, &(0x7f00000001c0)=0xa0ff, &(0x7f0000000300)=0xa) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r9 = memfd_create(&(0x7f00000004c0)='TCPMSS\x00', 0x6) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000640)=ANY=[@ANYBLOB="0100000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000f0ffffffff000000f0ffffffff", @ANYRES32=r6, @ANYBLOB="0000000000000000010000000000010000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000000001000010000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000010000000000f0ffffffffffff", @ANYRES32=r6, @ANYBLOB="0000000000000000000001000000000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000000105000000000000f9ff00006e29dce5a1bfde04cc6c14a2270128b5797592394de5874075eb559ec87a1b4e7ef85dcc50be64cbb9106a7c1cdd824ab1d0ba5dae6507eed99fbc802ab6", @ANYRES32=r9, @ANYBLOB="000000000040000000000000000000f0ffffffff"]) 4.653619146s ago: executing program 2 (id=11009): r0 = socket$inet(0x2, 0x6, 0x6) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3, &(0x7f0000000200)=0x1f, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) syz_open_dev$video(&(0x7f0000000040), 0xa8, 0x41841) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) syz_open_dev$cec(0x0, 0x0, 0x82) r1 = io_uring_setup(0x6bb, &(0x7f0000000040)={0x0, 0x3cb3, 0x1c080, 0xa, 0x20082f5}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newqdisc={0x178, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x10, 0xfffa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_MAX_P={0x8, 0x4, 0x3}, @TCA_GRED_PARMS={0x38, 0x1, {0xe0, 0x3, 0x4, 0xb, 0x3, 0x7, 0x9, 0x0, 0x0, 0x80, 0x5, 0x0, 0x1a, 0x4, 0xff, 0x1d4}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x178}}, 0x24040004) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x2f7, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d00)=ANY=[@ANYBLOB="5000000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000181002001c0012800b00010067656e65766500000c00028008000200e00000000000000000000000ecffffff0000000000000000"], 0x50}}, 0x80) sendto$inet(r0, &(0x7f0000000540)='v', 0x1, 0x4040, 0x0, 0x0) recvmmsg(r0, &(0x7f0000006f00)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x140, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000027000100000000000000000a01"], 0x50}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x210200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, 0x1, 0x8, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9db9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x54e}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xf}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa01}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000044}, 0x4004950) 4.361417977s ago: executing program 4 (id=11011): r0 = userfaultfd(0x800) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}}) syz_emit_ethernet(0x416, &(0x7f0000000440)={@broadcast, @local, @val={@void, {0x8100, 0x5, 0x0, 0x2}}, {@mpls_uc={0x8847, {[{0x5}, {0x3, 0x0, 0x1}], @ipv6=@icmpv6={0xd, 0x6, "152992", 0x3d4, 0x3a, 0x1, @remote, @local, {[@dstopts={0x2b, 0x2, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x21}}, @padn, @padn={0x1, 0x1, [0x0]}]}], @dest_unreach={0x1, 0x2, 0x0, 0x5, '\x00', {0x1, 0x6, "711071", 0x2, 0x87, 0x1, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@hopopts={0x21, 0x20, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0xaa, 0x0, [0x9, 0x7242]}}, @jumbo={0xc2, 0x4, 0x5}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x1, 0xc, 0x1, 0x4, [0x81, 0xcd, 0x1, 0x4, 0xffffffff, 0x10]}}, @ra={0x5, 0x2, 0x32}, @generic={0x80, 0x7a, "e1444df1f45f55b35077b0aa971cae6cf58ae5cccc7eec055954931112bc4faa1d4f537ddcf0c38a90cbdf026b60d2c3c6566f6b0dd51ba2e72920787660fa8b16896371af476448c6abb8fd1279f540d8f920a0d5a3e9d8791a42cf54caa22e085f7e25b4fc89f11fcefdb1300a13b0b9b02cbebc55f09dc733"}, @ra={0x5, 0x2, 0xfdb8}, @jumbo={0xc2, 0x4, 0x6}]}, @routing={0x1d, 0xe, 0x1, 0x9, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, @empty]}, @dstopts={0x1, 0xb, '\x00', [@jumbo={0xc2, 0x4, 0x6}, @generic={0x1, 0x56, "2920fbe7af687a00fb8fab591ae14739c0abcd89623c5ed845a1ee36ba1c700e607a83626b9d0e68a7a27b4832ce0e757beb4a4960d8789a8d2167d684bebbde460d82f660c953ea3e286da0b2b1b46f47d65b252c58"}]}, @hopopts={0x2b, 0x14, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x14}}, @generic={0x81, 0x55, "80220580e000ceeb14b42e5855138c5f27841131171d38dd954e743442b6d493d5353eec80d3c369eaf0d7eaa58cf00a31e3a5d4ab42e7d3e270cfe8548731ae0b8465d3a290983abc948eb8f3e1bac860be9ed369"}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @empty}}, @enc_lim={0x4, 0x1, 0x90}, @padn={0x1, 0x2, [0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x3}, @jumbo={0xc2, 0x4, 0x7ff}, @ra={0x5, 0x2, 0x4}, @hao={0xc9, 0x10, @loopback}]}, @dstopts={0x2, 0x2, '\x00', [@ra={0x5, 0x2, 0x401}, @hao={0xc9, 0x10, @private2}]}], "33fe114a4a2f926921afc1edb6c22c26025c347ec798fc82975cc97e4d13c1c03c6ad285e1198c5a3e09d750d4857eda7550adc27383ffbb477583cf48bffda6f23876a533a15b12fb0b565fc7c42baef4dc035d7f46cc1ce5f5756807a16c4fb08c4d3c4e27326b804c9a7fcb7320aad8fd4c4b45c3e3a1d6a6bcb0736882b2c35d05aa34d8e6f890226d004d58067ce83ee20463709a17b1a1d1d0c02b5ad1f86b2db134921cbed01bec48fc532f762eff45b4ac2b9a75fa971d56b996bd5518c7d7fa"}}}}}}}}, &(0x7f0000001440)={0x0, 0x4, [0x44e, 0xb64, 0x36a, 0xd7d]}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000200)=0x3) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) syz_usb_connect$cdc_ecm(0x2, 0x55, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x43, 0x1, 0x1, 0xf3, 0x40, 0x1, "", [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x2, 0x6, 0x0, 0x7, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0xfffffffb, 0x8001, 0x7, 0xd6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x3ff, 0x9, 0x8}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x5, 0xf4, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x3, 0x0, 0x1}}}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x81, 0x80, 0x39, 0x20, 0x5}, 0x24, &(0x7f00000001c0)={0x5, 0xf, 0x24, 0x2, [@wireless={0xb, 0x10, 0x1, 0x0, 0xb0, 0x4d, 0xec, 0x217, 0xc}, @ss_container_id={0x14, 0x10, 0x4, 0x8d, "d843f877849f646f1af8c3799b408cc9"}]}, 0x3, [{0x2, &(0x7f0000000280)=@string={0x2}}, {0xbb, &(0x7f0000000380)=@string={0xbb, 0x3, "eba8c2c00afbb773ce0b4ec30e9f8a916499d73eb92a731f40eacdca31b22cd818f98e6db2aadeaf78def96e26c63ffc74b3b7dc74ce052f183279980c59453c3011f03249ea59b7f02ea1b55c8228d2a32e33638d8bfa05bd490af9c7452e93fba5b95315f128e42ac24be28b11662da4edd9655f95282cfb4fc515de1675d26d7cdcc776a09280c27cc3173bdbaafeddb272d6b188c3e622b85c28c81c6cc76de673f08d1cab11e271807d4edc5113ce677c0e01244408c0"}}, {0xf7, &(0x7f0000000440)=ANY=[@ANYBLOB="f703fcde39da8b484a6b957ef55f8119e9f8472b3fc523cfc55b7dec65a49cae331c3922fee2e4784a5aa63e42d19c97007a54e742ad386ed84398f750153fabbee2820eb719e57f1f78ce8adb1e76a328446ce2b9850e57fa45e095bf17390e5d64ea41319a8691f33645157b6c61318fca59d21fdb957c576072b05e16c2b1d2ec827f6472ebc12cf61bc08ceaa89718e26e1ef842cbdf1cbee7f3c93c71ec69d6e8e275d2b1ea1f0f0d8490c5cc101c201933a72dbb1c1ebb92bd855d4b4b3508dc596e7539c3f2055b3baf93f7b2dda93d9b8a12a063ed8700cbe9d4d04bcbf5b2f55be0d597da7dc42d195466"]}]}) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x880) bind$xdp(r4, &(0x7f0000000400)={0x2c, 0x6, r5, 0xffffffff}, 0x10) setsockopt$inet6_int(r2, 0x29, 0x35, 0x0, 0x0) 3.94099318s ago: executing program 3 (id=11012): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000010000004000000005"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r0, &(0x7f00000014c0), &(0x7f0000000b40)=""/31}, 0x20) (fail_nth: 3) 3.656167948s ago: executing program 2 (id=11013): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000080)={0xa, 0x4, 0xfa00, {r2}}, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r3, 0x1000) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r5, @ANYBLOB="40002700060010"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'ipvlan1\x00'}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYRES16=r6, @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r3], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x24000000) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r9 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r9, 0x81044804, &(0x7f0000000400)={0x1, 0x2, 0x2000}) syz_usb_control_io(r8, 0x0, 0x0) r10 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r10, 0x7fffffff) syz_usb_control_io$hid(r8, &(0x7f0000000900)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f00000002c0)={'bridge0\x00', &(0x7f0000000340)=@ethtool_regs={0x4, 0x0, 0x1b, "aede62497cf56c9ab5bfd7b842f6b7ea6b8579d27d9c47d7da09f5"}}) 3.17349787s ago: executing program 3 (id=11014): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x10300}) r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) ioctl$KVM_SET_MSRS(r0, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = openat$kvm(0xffffff9c, &(0x7f0000000380), 0x121800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f00000000c0)={'hsr0\x00', {0x2, 0x0, @empty}}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x32, 0x18d], 0x100000, 0x240046}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000000840)={0x9, {"a2e339084fc752f91b2909094bf70e0dd038e7ff7fc6e5539b3263078b089b39363b6d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b3f300d316c0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df0784c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02ccf156f3da001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a5031e54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d618e462071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58ceecce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af44863c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ef9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766cf3817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000510b000000000000000000000000000000000000000000000000ac6b429961f8c30a00", 0x1000}}, 0x214) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ppoll(&(0x7f0000000040)=[{r3, 0x200}], 0x1, 0x0, 0x0, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000240), 0x4, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_test', 0x8a881, 0xbb) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000080)={r6, 0x0, {0x0, 0x0, 0x0, 0x1, 0x4000000000000ffd, 0x0, 0x0, 0x3, 0xc, "faf98317e5a1149989fc67be43ea6acc96e3a2503dc31c97214d58128bbad0099cebdc25f5ab60c9e69098c8b534464c516bdd8a0f350000000000000300", "32d8cc26f7061a74df2cfc06489f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x7fffffff]}}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000005500)={0x2020}, 0x2020) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$XFS_IOC_FSCOUNTS(r9, 0x80205871, &(0x7f0000000200)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r8, 0x40a85323, &(0x7f0000000040)={{0x4, 0xbb}, 'port0\x00', 0x4, 0x80000, 0xe, 0x1, 0xf11, 0x9, 0x400, 0x0, 0x4, 0x8}) 2.488173944s ago: executing program 1 (id=11015): ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000100)={0x20, &(0x7f0000000000)="2fcb9a5cef84c20efafb530337f4e46e20a84e61d66929137004eb807871338011af3e09db4fec8e70d6e925adde1e83e22f1d246b48b3ee1615941aebac09eb0b58fbcdbdb4ad840b2806e44b83432b317af16fb954d9786f480f0b265c4eefca5a810a08af1ae0c12016a6fe71d6d9afd82de65377f98951a98602fd2374ba756d5ecfc5f1f45a3d324eeb430998ff25faeb4c77e621"}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000010000004000000005"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r0, &(0x7f00000014c0), &(0x7f0000000b40)=""/31}, 0x20) 2.447586801s ago: executing program 1 (id=11016): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x5) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000000c0)=0x1) getsockopt(r2, 0x28, 0xfffffffe, &(0x7f0000001680)=""/56, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) unshare(0x42060680) (async) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40500, 0x0) ioctl$PTP_EXTTS_REQUEST(r3, 0x40103d02, 0x0) (async) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x408c0}, 0x4000000) (async) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f00000002c0)={0x4000000a00}) (async) r4 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000003c0)={0xb, @sdr={0x36314d4e, 0x4}}) fsopen(0x0, 0x1) (async) socket(0x11, 0x6, 0xc) (async) gettid() (async) timer_create(0x6, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f00000016c0)="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", &(0x7f00000026c0)="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"}}, &(0x7f0000000100)=0x0) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00'}) timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) (async) futex(&(0x7f000000cffc)=0x1, 0x80, 0x2, 0x0, 0x0, 0xffffeffa) (async) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) (async) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) 2.180331608s ago: executing program 1 (id=11017): socket$nl_audit(0x10, 0x3, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0xac, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_PROP_LIST={0x40, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth1_virt_wifi\x00'}, {0x14, 0x35, 'veth1_to_team\x00'}, {0x14, 0x35, 'vlan1\x00'}]}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x401}, @IFLA_TXQLEN={0x8, 0xd, 0x3}, @IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FD={0x5}]}, @IFLA_BROADCAST={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, @IFLA_IFALIAS={0x14, 0x14, 'team0\x00'}]}, 0xac}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0), 0x62080, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x0, 0x0, 0x201}, 0x48) listen(r3, 0x402) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0xb, 0xb}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000d00)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000cc0)={&(0x7f00000009c0)={0x2d0, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1ec, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r7}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x200000c0}, 0x48000) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ed56b6c5", 0x4) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff863b55000000001806fffe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60c20000907800001e020000"], 0x0) 2.124360874s ago: executing program 3 (id=11018): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000400000000000000100000031800018014"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2.041497338s ago: executing program 3 (id=11019): bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@filename='./file0\x00', r2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r3 = syz_open_dev$video(&(0x7f0000000440), 0x7, 0x1ebd41) ioctl$VIDIOC_S_FMT(r3, 0xc0d05640, &(0x7f0000000340)={0x9, @raw_data="618735fd78439a1fc1b5120506a63168f42f6c44fbb95ed9880f7c39f39a0d55000c410c79faa2cb2bbe25b575932873dd7910f10bc44a88ffb4857baf4432a0f36e9af6a720cb4d6996ee3f1b53b50352a148ed21c93a89be318ffd6908cf7fb040fda5adb8790ce0a3389119106cea64456e9bf35fa4273def34317f1b2b0bfa3b05a0f6ad4ca70670a495696377e6201012bf33172cf809d3808dcef62e3cbf17e480511b033e6a9242e96f27ed1460931aa4be94f560e4ded25a70fe9c3fca7c905bc3640f4b"}) unlink(&(0x7f0000000040)='.\x00') 1.949486965s ago: executing program 3 (id=11020): r0 = socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001e40)=""/99, 0x63}], 0x1}, 0x2}], 0x1, 0x100, 0x0) sendmmsg$inet6(r0, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="b458b09a7bc6afad62c3f97125bc54bad5b9f64492fb3237f80678f40515a15a9bc7f8f9c9244e7fe0c328f6457f6d457effb6e3090aec26ddb480ffdd53c94d4d0ca124cd", 0x45}], 0x1}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000007c0)="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", 0x1000}], 0x1, &(0x7f0000001800)=[@dstopts={{0xb8, 0x29, 0x37, {0xb5, 0x13, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}, @jumbo={0xc2, 0x4, 0x9}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}}, @jumbo={0xc2, 0x4, 0x100}, @generic={0x8, 0x6c, "5b6abf80e52316419d1a8f3502acb4f5ec3b34978be76c43b22fd93980aca244781cfb2bb6c1babbb118edb4e53e386a82f87a85b0d2cdaa548435ba5ef195680124227a54ad30d22b59a512c01cfdbf66cacd033c270a6570ddd900a0dabaef0b65c83b993a7acce6b0da84"}, @ra={0x5, 0x2, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x3}}, @rthdr_2292={{0x78, 0x29, 0x39, {0x2b, 0xc, 0x1, 0x9, 0x0, [@private1, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @rand_addr=' \x01\x00', @loopback, @mcast1]}}}], 0x148}}], 0x2, 0x20e8086) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 1.91673772s ago: executing program 1 (id=11021): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) umount2(&(0x7f0000000140)='./file0\x00', 0xa) 1.803620922s ago: executing program 0 (id=11022): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$loop(&(0x7f0000000200), 0x1, 0x100) (async, rerun: 64) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7fffffffffffffff, 0x66d, &(0x7f0000006680)) (rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xa7ae6000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) (async) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x200000000622c, 0x0) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 32) syz_clone3(&(0x7f0000000380)={0x180801600, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) (rerun: 32) process_madvise(r2, 0x0, 0x0, 0x12, 0x0) (async, rerun: 64) process_madvise(r2, &(0x7f0000000940)=[{&(0x7f00000004c0)="e271bf2c6cc3ca6afc2f22735681a91e21c7692d30e31cfcb296b649a51a1914194743d1d64f705f872319d5854c6ab5a45b13a7db72aa4a7833e97600e8734b01e092b7b51e44e109777a92157250255f5711f3ac9e75f8514f104a498012617ae615b17112e5d7bb89f8829b820d67459db87da2a03c93d861bb0bee43b4b66ab2e8821b46af2b474a2934be5b3f0d30cf7f26eaf1569fbd3a405f4c0de4c365f65dc909f97cc8518cf10d4e17f09f87ee75f1fb93b295eec9b037d3422914d89dece9c3a323c7797a0bfdf8c81b17368f1637d10f4a16e9d3508cbe5d", 0xde}, {&(0x7f00000005c0)="7e25f4485f676b46ef9fcde1fed54c8c2c2c4b67ce9496b01f5fc6417b51fce78d7460115865ec49e551dd1a86f4810a3eb88d9fc9a7e24ddf57ce2083541d14fb34635e6c9a1067ad88025c759c0d06efa4c2d027ce11cc2bf1f3f92efc2210586fb7d095c3effeb7d4f64017f37b1f09e0885d5b33c9b63e66d6c580811b86a9071d1c0b1916ec63f3e37f663e3f94a540e0d2196e576ebfe51f76333753ea4615d41a2872d1b10b2ac739d616b581a7154f", 0xb3}, {&(0x7f0000000680)="6c9acd85c0566003806cb92f3e0bdebe635f8ca3dc961f8f6a6c75f00d3bb201e35fd717b845b2a0a94f44ef999c15ac49806ca5b01aa9c17edad7226c69e9990f84591ec5b49d314cbd5966d28e00bb73014fd0fb67a136d36ab641f345a20f3c85f34e109a88dcde424636f7f9c012dd374e5a3428b32c964dfb994c7712abc21ea6ac50d313a4dbe8a8c0aa1a0291bb40679593147a", 0x97}, {&(0x7f0000000740)="dd68a14376d75e27b55ecdc61f27c09196d81d22e5d1bb18837e55425dbcfdaf35a544075abc63110302d4a217f5d5ecdf354d4b28c530f9d8b1bc586f9fa2e2efd638013807cbaca2ad98fd987a5887d876172f4379f67b87956a6be1e9dcaffdedf147c472ea049a812bb0ac211896145fca6ede35a1e315609b32a68663d77dacdcdc81d710b270d7ec5ca8810a5082276120218abc6d575ab23a531ae54707c19239d9a885ab3c7893f4ce602c30c3593db21815e05aae8ddd20f4aa611b3c7f51c4e59f78ad42af1d094b649bc9c77f4bedc16a60c976009c288b2864cc", 0xe0}, {&(0x7f0000000840)="8bab5501a6e8852d7751c704343ae45def9ad9243c2aa3a519ee2bda6afedf91ba64187a8e90f453f1109eba9305d2b100aa", 0x32}, {&(0x7f0000000880)="c68240cb9b6cb3ecbee23fecb67c82da7749bfd19459a38b2495b79d6d46064963e11c5a97990014a46dd417f20a121050a7d23fac8db39e165334a49c486f7834a50a0e99a681482b9a463ffd", 0x4d}, {&(0x7f0000000900)="6c7b8e986803f9341eb5bd870bb471a2d891c242a3274121769cbc26a2a8ebe049", 0x21}], 0x7, 0x0, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) (async, rerun: 64) r4 = io_uring_setup(0x1ddd, &(0x7f0000000440)={0x0, 0x40002000, 0x0, 0x2, 0x8c}) (async, rerun: 64) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="fc0000000201010100000000000000000200000524000e80140001800800010064010101080002007f0000010c00028005000100000000001c000e800c00028005000100060000000c0002800500010011000000340002800c000280050001005d0000000600034000040000140001"], 0xfc}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) io_uring_register$IORING_UNREGISTER_PBUF_RING(r4, 0x17, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x204}, 0x1) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000305000000c9e7f597c474a55357", @ANYRES32=0x0, @ANYBLOB="0000000000400000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r3, @ANYBLOB="080004007f000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000090) 1.201539473s ago: executing program 0 (id=11023): r0 = socket$inet(0x2, 0x6, 0x6) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3, &(0x7f0000000200)=0x1f, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) syz_open_dev$video(&(0x7f0000000040), 0xa8, 0x41841) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) syz_open_dev$cec(0x0, 0x0, 0x82) r1 = io_uring_setup(0x6bb, &(0x7f0000000040)={0x0, 0x3cb3, 0x1c080, 0xa, 0x20082f5}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newqdisc={0x178, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x10, 0xfffa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_MAX_P={0x8, 0x4, 0x3}, @TCA_GRED_PARMS={0x38, 0x1, {0xe0, 0x3, 0x4, 0xb, 0x3, 0x7, 0x9, 0x0, 0x0, 0x80, 0x5, 0x0, 0x1a, 0x4, 0xff, 0x1d4}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x178}}, 0x24040004) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x2f7, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d00)=ANY=[@ANYBLOB="5000000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000181002001c0012800b00010067656e65766500000c00028008000200e00000000000000000000000ecffffff0000000000000000"], 0x50}}, 0x80) sendto$inet(r0, &(0x7f0000000540)='v', 0x1, 0x4040, 0x0, 0x0) recvmmsg(r0, &(0x7f0000006f00)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x140, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000027000100000000000000000a01"], 0x50}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x210200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, 0x1, 0x8, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9db9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x54e}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xf}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa01}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000044}, 0x4004950) 898.958394ms ago: executing program 4 (id=11024): r0 = socket$inet(0x2, 0x3, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(0x0, 0x22) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000140)=@ethtool_cmd={0x2c, 0x6, 0x40004, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0xfc, 0x6}}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10}, 0x94) sendmsg$nl_xfrm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="940100001a001307fdffffff00000000fe8000000000000000000000000000aafc010000000000000000000000000000fffc00"/60, @ANYRES32=0x0, @ANYRES64, @ANYBLOB="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"], 0x194}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x10, 0x803, 0x800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x2c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc011}, 0x4004) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc001) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) 797.44665ms ago: executing program 3 (id=11025): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) rt_sigsuspend(&(0x7f0000000000)={[0x480000000000]}, 0x8) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) fcntl$dupfd(r0, 0x406, r0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, 0x0}) 733.528382ms ago: executing program 1 (id=11026): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x9, @loopback={0x58, 0x7ffffffe}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000760009eeffffffffffffff0400030000", @ANYRES32=0x0, @ANYBLOB="04000d80080005"], 0x24}, 0x1, 0x5502000000000000}, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x861}, 0x1c) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB="280000001200970225395d619e5a1e3f7fbd"], 0x28}}, 0x0) r3 = socket$kcm(0xa, 0x2, 0x73) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005e40)=ANY=[@ANYBLOB="140000001000010000008000000000000a00000a14000000020a0102000000000000000000000000140000000c0a0500000000000000000000000008140000001100010000000000000000000000000a"], 0x50}, 0x1, 0x0, 0x0, 0x4008004}, 0x4000000) sendmsg$inet(r3, &(0x7f0000001180)={&(0x7f0000001080)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001040)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001140)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000013c0)=ANY=[@ANYBLOB="1400000000000000290000003b000000000000c90000ec21240900000000000029000000370000000000002000000000f00dbe81000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="000000007f00000100000000900000000000000000000000070000008327cdac1414bbac14142a0000000064010100ffffffffac141414ffffffff00000000000000000707b67f000001da0e739e2f87888399bbb41d8c6b89109b1d12a17172d431003c0a490d4244347cd3ac1414bb00000004e0000001000000af00000000000000027f000001000000020000000000000001ac1414bb00004106d6d4c3d3f9f7749f1df08c88b169c27de6f62580636099f013c2d302f29d1a1592f8a1e173ba9ea0f59fb105320700000000000088152f374f792884f9bc957f17388b36a876e478f08f066936f33e7bd7b0aca3d546b8fc5c7f119454cb67cdc085aa6f3e1ec5f462ce5a8da6fccec07f00663dafc21317a8f5b03dc681346c6d10a05bceea2eac2eb9efc3d64505d2a02790ce8bdb88948de5d1e92a7eedbad2e75d855c1b78cb3a83eb4d8f7c8c1ca7054dc6690162927958d2fe69111b9f4aaef0d31498dabae7b96714d265b1ef41271e54a434e8f3323ecede0122500e9c7df43d74446679e9f7a9eec5af5fec2dd17a4daee512d0a3c48685801ebae1057f2dd66104825d9cbcc437f4e791338f36a731c4aaa682cbbc9a4b5b70fd230b4fdea22cb7af6db71149e3842beaed0401916af53ca927e0d0a38297c1c36e85b963aca86d40f0b04094d7ff0621598f916781af84dbb78f1ca558b6bfdf8cd5cde65cc597a86dafcb69056ad430eb3ee2d740c5246c87982118aeb4aafd6a2a2102e9b2a943513ca0edfd4e"], 0xe0}, 0x0) 622.133482ms ago: executing program 0 (id=11027): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) 531.91371ms ago: executing program 0 (id=11028): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x10300}) r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) ioctl$KVM_SET_MSRS(r0, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x121800, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f00000000c0)={'hsr0\x00', {0x2, 0x0, @empty}}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x32, 0x18d], 0x100000, 0x240046}) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, &(0x7f0000000840)={0x9, {"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", 0x1000}}, 0x214) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ppoll(&(0x7f0000000040)=[{r2, 0x200}], 0x1, 0x0, 0x0, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000240), 0x4, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_test', 0x8a881, 0xbb) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000080)={r5, 0x0, {0x0, 0x0, 0x0, 0x1, 0x4000000000000ffd, 0x0, 0x0, 0x3, 0xc, "faf98317e5a1149989fc67be43ea6acc96e3a2503dc31c97214d58128bbad0099cebdc25f5ab60c9e69098c8b534464c516bdd8a0f350000000000000300", "32d8cc26f7061a74df2cfc06489f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x7fffffff]}}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000005500)={0x2020}, 0x2020) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$XFS_IOC_FSCOUNTS(r8, 0x80205871, &(0x7f0000000200)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0x40a85323, &(0x7f0000000040)={{0x4, 0xbb}, 'port0\x00', 0x4, 0x80000, 0xe, 0x1, 0xf11, 0x9, 0x400, 0x0, 0x4, 0x8}) 0s ago: executing program 1 (id=11029): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) (fail_nth: 2) kernel console output (not intermixed with test programs): 3224.916919][ T1373] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 3225.112280][ T1379] netlink: 48 bytes leftover after parsing attributes in process `syz.2.10631'. [ 3225.434566][T10825] usb 4-1: USB disconnect, device number 116 [ 3225.756176][ T1394] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3225.904023][ T1402] FAULT_INJECTION: forcing a failure. [ 3225.904023][ T1402] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3225.928460][ T1402] CPU: 1 UID: 0 PID: 1402 Comm: syz.1.10634 Tainted: G L syzkaller #0 PREEMPT(full) [ 3225.928482][ T1402] Tainted: [L]=SOFTLOCKUP [ 3225.928488][ T1402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 3225.928497][ T1402] Call Trace: [ 3225.928503][ T1402] [ 3225.928509][ T1402] dump_stack_lvl+0xe8/0x150 [ 3225.928536][ T1402] should_fail_ex+0x40c/0x560 [ 3225.928556][ T1402] _copy_from_iter+0x1d3/0x1660 [ 3225.928587][ T1402] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 3225.928610][ T1402] ? __pfx_policy_nodemask+0x10/0x10 [ 3225.928630][ T1402] ? unwind_next_frame+0x8f/0x2550 [ 3225.928645][ T1402] ? __pfx__copy_from_iter+0x10/0x10 [ 3225.928664][ T1402] ? alloc_pages_mpol+0x24a/0x380 [ 3225.928689][ T1402] copy_page_from_iter+0x219/0x2d0 [ 3225.928709][ T1402] tun_get_user+0x1bf1/0x4370 [ 3225.928729][ T1402] ? tun_get_user+0x6e7/0x4370 [ 3225.928756][ T1402] ? aa_file_perm+0x4ed/0x15f0 [ 3225.928770][ T1402] ? __pfx_tun_get_user+0x10/0x10 [ 3225.928789][ T1402] ? __lock_acquire+0x683/0x2cf0 [ 3225.928816][ T1402] ? ref_tracker_alloc+0x341/0x4b0 [ 3225.928831][ T1402] ? get_pid_task+0x20/0x1f0 [ 3225.928851][ T1402] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 3225.928869][ T1402] ? tun_get+0x1c/0x2f0 [ 3225.928886][ T1402] ? tun_get+0x1c/0x2f0 [ 3225.928906][ T1402] ? tun_get+0x1c/0x2f0 [ 3225.928922][ T1402] ? tun_get+0x1c/0x2f0 [ 3225.928942][ T1402] tun_chr_write_iter+0x113/0x200 [ 3225.928960][ T1402] vfs_write+0x612/0xba0 [ 3225.928988][ T1402] ? __pfx_vfs_write+0x10/0x10 [ 3225.929015][ T1402] ? __fget_files+0x2a/0x420 [ 3225.929038][ T1402] ksys_write+0x150/0x270 [ 3225.929059][ T1402] ? __pfx_ksys_write+0x10/0x10 [ 3225.929084][ T1402] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3225.929098][ T1402] do_syscall_64+0x174/0x580 [ 3225.929118][ T1402] ? trace_irq_disable+0x3b/0x140 [ 3225.929136][ T1402] ? clear_bhb_loop+0x40/0x90 [ 3225.929152][ T1402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3225.929166][ T1402] RIP: 0033:0x7fc1f035e68e [ 3225.929178][ T1402] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 3225.929189][ T1402] RSP: 002b:00007fc1f130cfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3225.929204][ T1402] RAX: ffffffffffffffda RBX: 00007fc1f130d6c0 RCX: 00007fc1f035e68e [ 3225.929213][ T1402] RDX: 000000000000006e RSI: 0000200000000080 RDI: 00000000000000c8 [ 3225.929222][ T1402] RBP: 00007fc1f130d090 R08: 0000000000000000 R09: 0000000000000000 [ 3225.929230][ T1402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3225.929243][ T1402] R13: 00007fc1f0626038 R14: 00007fc1f0625fa0 R15: 00007fc1f074fa48 [ 3225.929263][ T1402] [ 3226.397178][ T1411] netlink: 'syz.0.10636': attribute type 4 has an invalid length. [ 3226.485892][ T29] kauditd_printk_skb: 202 callbacks suppressed [ 3226.485910][ T29] audit: type=1326 audit(1784089543.618:11047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1393 comm="syz.4.10633" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb629b9de59 code=0x0 [ 3226.600005][ T1428] fuse: Unknown parameter '00000000000000000003' [ 3226.833590][T32005] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 3226.895812][ T1443] sctp: [Deprecated]: syz.0.10643 (pid 1443) Use of struct sctp_assoc_value in delayed_ack socket option. [ 3226.895812][ T1443] Use struct sctp_sack_info instead [ 3227.051734][T18131] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 3227.101776][T32005] usb 3-1: Using ep0 maxpacket: 8 [ 3227.108529][T32005] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 3227.124557][T32005] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 3227.149534][T32005] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 3227.159699][T32005] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 3227.176311][T32005] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 3227.193144][T32005] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3227.206591][T32005] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3227.223068][T32005] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3227.291875][T18131] usb 2-1: Using ep0 maxpacket: 8 [ 3227.305051][T18131] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 3227.322558][T18131] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 3227.334486][T18131] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 3227.349654][T18131] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 3227.361872][T18131] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 3227.374958][T18131] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3227.388521][T18131] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3227.411597][T18131] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3227.448832][T32005] usb 3-1: GET_CAPABILITIES returned 0 [ 3227.491420][T32005] usbtmc 3-1:16.0: can't read capabilities [ 3227.642864][T18131] usb 2-1: GET_CAPABILITIES returned 0 [ 3227.655080][ T9380] usb 3-1: USB disconnect, device number 34 [ 3227.667495][T18131] usbtmc 2-1:16.0: can't read capabilities [ 3227.702918][ T1487] netlink: 'syz.0.10654': attribute type 4 has an invalid length. [ 3227.764560][ T1490] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10653'. [ 3227.775562][ T1490] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10653'. [ 3227.844490][ T1430] FAULT_INJECTION: forcing a failure. [ 3227.844490][ T1430] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3227.879455][ T1430] CPU: 1 UID: 0 PID: 1430 Comm: syz.1.10641 Tainted: G L syzkaller #0 PREEMPT(full) [ 3227.879486][ T1430] Tainted: [L]=SOFTLOCKUP [ 3227.879494][ T1430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 3227.879507][ T1430] Call Trace: [ 3227.879515][ T1430] [ 3227.879523][ T1430] dump_stack_lvl+0xe8/0x150 [ 3227.879559][ T1430] should_fail_ex+0x40c/0x560 [ 3227.879588][ T1430] _copy_to_user+0x31/0xb0 [ 3227.879620][ T1430] simple_read_from_buffer+0xe1/0x170 [ 3227.879652][ T1430] proc_fail_nth_read+0x1bb/0x230 [ 3227.879683][ T1430] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3227.879714][ T1430] ? rw_verify_area+0x24a/0x4c0 [ 3227.879745][ T1430] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3227.879772][ T1430] vfs_read+0x213/0xa80 [ 3227.879806][ T1430] ? __pfx___mutex_lock+0x10/0x10 [ 3227.879837][ T1430] ? __pfx_vfs_read+0x10/0x10 [ 3227.879868][ T1430] ? __fget_files+0x2a/0x420 [ 3227.879898][ T1430] ? __fget_files+0x3a2/0x420 [ 3227.879923][ T1430] ? __fget_files+0x2a/0x420 [ 3227.879958][ T1430] ksys_read+0x150/0x270 [ 3227.879989][ T1430] ? __pfx_ksys_read+0x10/0x10 [ 3227.880026][ T1430] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3227.880049][ T1430] do_syscall_64+0x174/0x580 [ 3227.880084][ T1430] ? trace_irq_disable+0x3b/0x140 [ 3227.880110][ T1430] ? clear_bhb_loop+0x40/0x90 [ 3227.880135][ T1430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3227.880156][ T1430] RIP: 0033:0x7fc1f035e68e [ 3227.880175][ T1430] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 3227.880193][ T1430] RSP: 002b:00007fc1f130cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3227.880215][ T1430] RAX: ffffffffffffffda RBX: 00007fc1f130d6c0 RCX: 00007fc1f035e68e [ 3227.880230][ T1430] RDX: 000000000000000f RSI: 00007fc1f130d0a0 RDI: 0000000000000005 [ 3227.880243][ T1430] RBP: 00007fc1f130d090 R08: 0000000000000000 R09: 0000000000000000 [ 3227.880257][ T1430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3227.880270][ T1430] R13: 00007fc1f0626038 R14: 00007fc1f0625fa0 R15: 00007fc1f074fa48 [ 3227.880301][ T1430] [ 3228.348013][ T9380] usb 2-1: USB disconnect, device number 42 [ 3228.465328][ T1522] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3228.644631][ T1531] netlink: 'syz.2.10661': attribute type 7 has an invalid length. [ 3228.662585][ T1531] netlink: 'syz.2.10661': attribute type 8 has an invalid length. [ 3228.806771][ T29] audit: type=1326 audit(1784089545.958:11048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1521 comm="syz.0.10657" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fae2c59de59 code=0x0 [ 3228.964887][ T1530] ALSA: mixer_oss: invalid OSS volume 'ev/kvm' [ 3229.222306][ T9380] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 3229.328737][ T1549] FAULT_INJECTION: forcing a failure. [ 3229.328737][ T1549] name failslab, interval 1, probability 0, space 0, times 0 [ 3229.343834][ T1549] CPU: 1 UID: 0 PID: 1549 Comm: syz.2.10664 Tainted: G L syzkaller #0 PREEMPT(full) [ 3229.343864][ T1549] Tainted: [L]=SOFTLOCKUP [ 3229.343872][ T1549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 3229.343883][ T1549] Call Trace: [ 3229.343893][ T1549] [ 3229.343902][ T1549] dump_stack_lvl+0xe8/0x150 [ 3229.343937][ T1549] should_fail_ex+0x40c/0x560 [ 3229.343967][ T1549] should_failslab+0xa8/0x100 [ 3229.343997][ T1549] __kmalloc_cache_noprof+0xa8/0x660 [ 3229.344022][ T1549] ? do_raw_spin_lock+0x12b/0x2f0 [ 3229.344045][ T1549] ? reuseport_alloc+0x11e/0x4d0 [ 3229.344140][ T1549] ? reuseport_alloc+0x11e/0x4d0 [ 3229.344175][ T1549] reuseport_alloc+0x11e/0x4d0 [ 3229.344209][ T1549] inet_hash+0x700/0xd40 [ 3229.344241][ T1549] inet_csk_listen_start+0x27a/0x380 [ 3229.344272][ T1549] __inet_listen_sk+0x2d3/0x5c0 [ 3229.344305][ T1549] ? __pfx___inet_listen_sk+0x10/0x10 [ 3229.344336][ T1549] ? inet_listen+0x45/0x110 [ 3229.344364][ T1549] ? __local_bh_enable_ip+0xd0/0x130 [ 3229.344392][ T1549] inet_listen+0xa5/0x110 [ 3229.344420][ T1549] __x64_sys_listen+0x1c7/0x240 [ 3229.344454][ T1549] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3229.344476][ T1549] do_syscall_64+0x174/0x580 [ 3229.344505][ T1549] ? trace_irq_disable+0x3b/0x140 [ 3229.344530][ T1549] ? clear_bhb_loop+0x40/0x90 [ 3229.344555][ T1549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3229.344576][ T1549] RIP: 0033:0x7fb0eaf9de59 [ 3229.344595][ T1549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3229.344612][ T1549] RSP: 002b:00007fb0ebe9c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 3229.344634][ T1549] RAX: ffffffffffffffda RBX: 00007fb0eb225fa0 RCX: 00007fb0eaf9de59 [ 3229.344649][ T1549] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 3229.344660][ T1549] RBP: 00007fb0ebe9c090 R08: 0000000000000000 R09: 0000000000000000 [ 3229.344673][ T1549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3229.344685][ T1549] R13: 00007fb0eb226038 R14: 00007fb0eb225fa0 R15: 00007fb0eb34fa48 [ 3229.344717][ T1549] [ 3229.696382][ T1560] netlink: 'syz.1.10667': attribute type 4 has an invalid length. [ 3229.705072][ T9380] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 3229.713276][ T9380] usb 4-1: config 1 has no interface number 0 [ 3229.719432][ T9380] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 3229.731621][ T9380] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 3229.741867][ T9380] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3229.755838][ T9380] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 3229.765410][ T9380] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3229.773727][ T9380] usb 4-1: Product: syz [ 3229.778115][ T9380] usb 4-1: Manufacturer: syz [ 3229.783127][ T9380] usb 4-1: SerialNumber: syz [ 3229.792909][ T1541] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 3229.991442][T10825] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 3230.011741][ T1541] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 3230.237543][ T9380] sierra_net 4-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.3-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:02:07 [ 3230.427369][ T1541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3230.454339][ T1541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3230.481272][ T9380] sierra_net 4-1:1.7 wwan0: Submit SYNC failed -71 [ 3230.497090][ T9380] sierra_net 4-1:1.7 wwan0: Send SYNC failed, status -71 [ 3230.505323][ T9380] sierra_net 4-1:1.7 wwan0: Submit SYNC failed -71 [ 3230.512277][ T9380] sierra_net 4-1:1.7 wwan0: Send SYNC failed, status -71 [ 3230.526207][ T9380] usb 4-1: USB disconnect, device number 117 [ 3230.537973][ T9380] sierra_net 4-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.3-1, Sierra Wireless USB-to-WWAN Modem [ 3230.775622][ T9380] sierra_net 4-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 3230.917489][ T1607] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3231.099235][T10825] usb 3-1: config 4 has an invalid interface number: 15 but max is 0 [ 3231.109130][T10825] usb 3-1: config 4 has no interface number 0 [ 3231.123507][T10825] usb 3-1: config 4 interface 15 has no altsetting 0 [ 3231.167029][T10825] usb 3-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=8b.8e [ 3231.187346][T10825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3231.198362][T10825] usb 3-1: Product: syz [ 3231.204125][T10825] usb 3-1: Manufacturer: syz [ 3231.210451][T10825] usb 3-1: SerialNumber: syz [ 3231.349952][ T29] audit: type=1326 audit(1784089548.518:11049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1605 comm="syz.4.10675" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb629b9de59 code=0x0 [ 3231.700972][ T5698] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 3231.867595][ T1632] netlink: 'syz.4.10680': attribute type 4 has an invalid length. [ 3231.920677][T10825] gspca_main: touptek-2.14.0 probing 0547:6801 [ 3231.933508][T10825] usb 3-1: USB disconnect, device number 35 [ 3232.102158][ T1651] netlink: 96 bytes leftover after parsing attributes in process `syz.3.10682'. [ 3232.112265][ T1651] netlink: 96 bytes leftover after parsing attributes in process `syz.3.10682'. [ 3232.339961][ T1657] netlink: 76 bytes leftover after parsing attributes in process `syz.3.10682'. [ 3232.360751][ T1657] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10682'. [ 3232.374110][ T5698] usb 2-1: Using ep0 maxpacket: 8 [ 3232.386464][ T1657] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10682'. [ 3232.445361][ T1660] netlink: 'syz.2.10685': attribute type 1 has an invalid length. [ 3232.472612][T28743] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 3232.501588][ T1660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10685'. [ 3232.547370][ T1695] syz_tun: entered allmulticast mode [ 3232.556936][ T1694] syz_tun: left allmulticast mode [ 3232.700658][T24047] Bluetooth: hci0: connection err: -111 [ 3232.770395][ T1711] netlink: 'syz.2.10691': attribute type 4 has an invalid length. [ 3232.807930][ T1708] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3232.959228][ T29] audit: type=1326 audit(1784089550.078:11050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1707 comm="syz.0.10690" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fae2c59de59 code=0x0 [ 3233.011428][ T5698] usb 2-1: config 0 interface 0 has no altsetting 0 [ 3233.018084][ T5698] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 3233.028184][ T5698] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3233.079278][ T5698] usb 2-1: config 0 descriptor?? [ 3233.119445][T28743] usb 5-1: Using ep0 maxpacket: 8 [ 3233.469012][ T1621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3233.477834][ T1621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3233.489141][ T1621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3233.498094][ T1621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3233.509146][ T29] audit: type=1326 audit(1784089550.678:11051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1620 comm="syz.1.10679" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc1f039de59 code=0x0 [ 3233.513903][ T1728] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10692'. [ 3233.692328][ T1735] netlink: 'syz.1.10679': attribute type 10 has an invalid length. [ 3233.768776][T28743] usb 5-1: config 0 interface 0 has no altsetting 0 [ 3233.775436][T28743] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 3233.789074][T28743] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3233.804132][T28743] usb 5-1: config 0 descriptor?? [ 3234.029107][ T1744] fuse: Unknown parameter '00000000000000000003' [ 3234.109788][ T1646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3234.176584][ T1646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3234.323763][ T1646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3234.377747][ T1646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3234.406371][ T29] audit: type=1326 audit(1784089551.558:11052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1645 comm="syz.4.10681" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb629b9de59 code=0x0 [ 3234.575426][ T1760] netlink: 'syz.4.10681': attribute type 10 has an invalid length. [ 3234.615773][ T1760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3234.644246][ T1760] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 3234.696210][ T1761] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3234.712178][ T1761] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3234.739958][ T1761] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 3234.758225][ T1761] bond0 (unregistering): Released all slaves [ 3235.206242][ T5698] usb 2-1: string descriptor 0 read error: -71 [ 3235.622760][ T1781] netlink: 'syz.3.10702': attribute type 4 has an invalid length. [ 3235.756099][ T5698] usbhid 2-1:0.0: can't add hid device: -71 [ 3235.762125][ T5698] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 3235.777384][ T5698] usb 2-1: USB disconnect, device number 43 [ 3236.133242][ T5719] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 3236.358682][T28743] usb 5-1: string descriptor 0 read error: -71 [ 3236.466345][ T5698] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 3236.580007][T28743] usbhid 5-1:0.0: can't add hid device: -71 [ 3236.587319][T28743] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 3236.601017][T28743] usb 5-1: USB disconnect, device number 41 [ 3237.247856][ T5719] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 3237.258696][ T5719] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3237.270142][T28743] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 3237.277888][ T5719] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3237.287606][ T5719] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 3237.679654][ T5698] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 3237.689378][ T5698] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 3237.699053][ T5698] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 3237.708822][ T5698] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 3237.718662][ T5719] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 3237.727720][ T5719] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 3237.735837][ T5719] usb 4-1: Manufacturer: syz [ 3237.742128][ T5698] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 3237.751190][ T5698] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3237.761418][ T5719] usb 4-1: config 0 descriptor?? [ 3237.767514][ T5698] usb 2-1: config 0 descriptor?? [ 3238.112450][ T5698] hdpvr 2-1:0.0: unexpected answer of status request, len -32 [ 3238.119970][ T5698] hdpvr 2-1:0.0: device init failed [ 3238.125266][ T5698] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 3238.234551][ T1835] loop0: detected capacity change from 0 to 7 [ 3238.241661][ T1835] Dev loop0: unable to read RDB block 7 [ 3238.247252][ T1835] loop0: AHDI p1 p2 p3 [ 3238.251437][ T1835] loop0: partition table partially beyond EOD, truncated [ 3238.258929][ T1835] loop0: p1 start 1601398130 is beyond EOD, truncated [ 3238.265737][ T1835] loop0: p2 start 1702059890 is beyond EOD, truncated [ 3238.332699][ T5719] appleir 0003:05AC:8243.0041: unknown main item tag 0x0 [ 3238.351563][ T5719] appleir 0003:05AC:8243.0041: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 3238.487906][ T1852] syz.1.10704 (1852): drop_caches: 2 [ 3238.544245][T28743] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 3238.555373][T28743] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3238.566265][T28743] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3238.576019][T28743] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 3238.601702][ T9380] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 3238.660414][T28743] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 3238.671828][T28743] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 3238.680915][T28743] usb 5-1: Manufacturer: syz [ 3238.688339][T28743] usb 5-1: config 0 descriptor?? [ 3238.782408][ T9380] usb 3-1: Using ep0 maxpacket: 8 [ 3238.800665][ T9380] usb 3-1: config 2 has an invalid interface number: 31 but max is 0 [ 3238.810889][ T9380] usb 3-1: config 2 has no interface number 0 [ 3238.817553][ T9380] usb 3-1: config 2 interface 31 has no altsetting 0 [ 3238.826379][ T9380] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 3238.835802][ T9380] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3238.843950][ T9380] usb 3-1: Product: syz [ 3238.848200][ T9380] usb 3-1: Manufacturer: syz [ 3238.853847][ T9380] usb 3-1: SerialNumber: syz [ 3239.068488][ T1843] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10711'. [ 3239.081563][ T1843] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10711'. [ 3239.093404][ T1843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3239.103457][ T1843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3239.113845][ T9380] ch9200 3-1:2.31: probe with driver ch9200 failed with error -71 [ 3239.136308][ T1795] bridge0: port 3(veth0_to_bridge) entered blocking state [ 3239.143500][ T1795] bridge0: port 3(veth0_to_bridge) entered disabled state [ 3239.150770][ T1795] veth0_to_bridge: entered allmulticast mode [ 3239.163788][ T1795] veth0_to_bridge: entered promiscuous mode [ 3239.170934][ T9380] usb 3-1: USB disconnect, device number 36 [ 3239.199878][T15604] usb 4-1: USB disconnect, device number 118 [ 3239.452727][T28743] appleir 0003:05AC:8243.0042: unknown main item tag 0x0 [ 3239.465219][T28743] appleir 0003:05AC:8243.0042: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 3239.572074][T28743] usb 2-1: USB disconnect, device number 44 [ 3239.918921][ T1901] netlink: 'syz.2.10715': attribute type 4 has an invalid length. [ 3239.953248][ T1904] FAULT_INJECTION: forcing a failure. [ 3239.953248][ T1904] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3239.966293][ T1904] CPU: 0 UID: 0 PID: 1904 Comm: syz.3.10716 Tainted: G L syzkaller #0 PREEMPT(full) [ 3239.966313][ T1904] Tainted: [L]=SOFTLOCKUP [ 3239.966319][ T1904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 3239.966328][ T1904] Call Trace: [ 3239.966334][ T1904] [ 3239.966340][ T1904] dump_stack_lvl+0xe8/0x150 [ 3239.966366][ T1904] should_fail_ex+0x40c/0x560 [ 3239.966386][ T1904] _copy_to_user+0x31/0xb0 [ 3239.966409][ T1904] simple_read_from_buffer+0xe1/0x170 [ 3239.966446][ T1904] proc_fail_nth_read+0x1bb/0x230 [ 3239.966467][ T1904] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3239.966491][ T1904] ? rw_verify_area+0x24a/0x4c0 [ 3239.966512][ T1904] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3239.966529][ T1904] vfs_read+0x213/0xa80 [ 3239.966548][ T1904] ? __pfx_aa_sk_perm+0x10/0x10 [ 3239.966573][ T1904] ? __pfx_vfs_read+0x10/0x10 [ 3239.966593][ T1904] ? bpf_lsm_socket_connect+0x9/0x20 [ 3239.966608][ T1904] ? __sys_connect+0x33c/0x460 [ 3239.966629][ T1904] ? __pfx___sys_connect+0x10/0x10 [ 3239.966651][ T1904] ksys_read+0x150/0x270 [ 3239.966672][ T1904] ? __pfx_ksys_read+0x10/0x10 [ 3239.966696][ T1904] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3239.966711][ T1904] do_syscall_64+0x174/0x580 [ 3239.966731][ T1904] ? trace_irq_disable+0x3b/0x140 [ 3239.966748][ T1904] ? clear_bhb_loop+0x40/0x90 [ 3239.966764][ T1904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3239.966777][ T1904] RIP: 0033:0x7f6d2815e68e [ 3239.966790][ T1904] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 3239.966801][ T1904] RSP: 002b:00007f6d29030fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3239.966815][ T1904] RAX: ffffffffffffffda RBX: 00007f6d290316c0 RCX: 00007f6d2815e68e [ 3239.966825][ T1904] RDX: 000000000000000f RSI: 00007f6d290310a0 RDI: 0000000000000004 [ 3239.966833][ T1904] RBP: 00007f6d29031090 R08: 0000000000000000 R09: 0000000000000000 [ 3239.966841][ T1904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3239.966849][ T1904] R13: 00007f6d28426038 R14: 00007f6d28425fa0 R15: 00007f6d2854fa48 [ 3239.966868][ T1904] [ 3239.990622][ T1804] bridge0: port 3(veth0_to_bridge) entered blocking state [ 3240.208058][ T1804] bridge0: port 3(veth0_to_bridge) entered disabled state [ 3240.248372][ T1804] veth0_to_bridge: entered allmulticast mode [ 3240.264082][ T1804] veth0_to_bridge: entered promiscuous mode [ 3240.290931][ T1804] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 3240.331153][ T1804] bridge0: port 3(veth0_to_bridge) entered blocking state [ 3240.338497][ T1804] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 3240.367175][T18131] usb 5-1: USB disconnect, device number 42 [ 3240.651829][ T9382] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 3240.724203][ T1935] netlink: 64 bytes leftover after parsing attributes in process `syz.2.10721'. [ 3240.797611][ T1943] loop0: detected capacity change from 0 to 7 [ 3240.807597][ T1943] Dev loop0: unable to read RDB block 7 [ 3240.813406][ T1943] loop0: AHDI p1 p2 p3 [ 3240.817608][ T1943] loop0: partition table partially beyond EOD, truncated [ 3240.827437][T15604] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 3240.839227][ T1943] loop0: p1 start 1601398130 is beyond EOD, truncated [ 3240.852427][ T1943] loop0: p2 start 1702059890 is beyond EOD, truncated [ 3240.875164][ T9382] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 3240.884994][ T4992] Dev loop0: unable to read RDB block 7 [ 3240.890746][ T4992] loop0: AHDI p1 p2 p3 [ 3240.894991][ T9382] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3240.903046][ T4992] loop0: partition table partially beyond EOD, truncated [ 3240.910271][ T9382] usb 2-1: Product: syz [ 3240.914940][ T4992] loop0: p1 start 1601398130 is beyond EOD, truncated [ 3240.922001][ T9382] usb 2-1: Manufacturer: syz [ 3240.926697][ T9382] usb 2-1: SerialNumber: syz [ 3240.931334][ T4992] loop0: p2 start 1702059890 is beyond EOD, truncated [ 3240.968573][ T9382] usb 2-1: config 0 descriptor?? [ 3240.996812][ T9382] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 045 [ 3241.315071][ T1964] picdev_read: 77 callbacks suppressed [ 3241.315090][ T1964] kvm: pic: non byte read [ 3241.332060][ T1964] kvm: pic: non byte read [ 3241.336613][ T1964] kvm: pic: level sensitive irq not supported [ 3241.336675][ T1964] kvm: pic: non byte read [ 3241.351802][ T1964] kvm: pic: non byte read [ 3241.356334][ T1964] kvm: pic: level sensitive irq not supported [ 3241.356389][ T1964] kvm: pic: non byte read [ 3241.408004][ T1964] pic_ioport_write: 729 callbacks suppressed [ 3241.408017][ T1964] kvm: pic: single mode not supported [ 3241.414402][ T1964] kvm: pic: non byte read [ 3241.424394][ T1964] kvm: pic: non byte read [ 3241.428986][ T1964] kvm: pic: non byte read [ 3241.433497][ T1964] kvm: pic: single mode not supported [ 3241.433550][ T1964] kvm: pic: non byte read [ 3241.444995][ T1964] kvm: pic: single mode not supported [ 3241.445012][ T1964] kvm: pic: level sensitive irq not supported [ 3241.451603][ T1964] kvm: pic: non byte read [ 3241.462615][ T1964] kvm: pic: single mode not supported [ 3241.462632][ T1964] kvm: pic: level sensitive irq not supported [ 3241.482221][ T1964] kvm: pic: single mode not supported [ 3241.502630][ T1964] kvm: pic: level sensitive irq not supported [ 3241.516836][ T1912] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10718'. [ 3241.536129][ T1964] kvm: pic: single mode not supported [ 3241.536147][ T1964] kvm: pic: level sensitive irq not supported [ 3241.541776][ T1964] kvm: pic: single mode not supported [ 3241.547871][ T1964] kvm: pic: level sensitive irq not supported [ 3241.553516][ T1964] kvm: pic: single mode not supported [ 3241.559600][ T1964] kvm: pic: level sensitive irq not supported [ 3241.567194][ T1964] kvm: pic: level sensitive irq not supported [ 3241.574844][ T9382] (null): failure reading functionality [ 3241.586597][ T1964] kvm: pic: level sensitive irq not supported [ 3241.589347][ T1964] kvm: pic: single mode not supported [ 3241.599213][ T1964] kvm: pic: single mode not supported [ 3241.614457][ T9382] i2c i2c-1: failure reading functionality [ 3241.637640][ T9382] i2c i2c-1: connected i2c-tiny-usb device [ 3241.663397][ T9382] usb 2-1: USB disconnect, device number 45 [ 3242.129738][ T1987] fuse: Bad value for 'fd' [ 3242.170711][T15604] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3242.181648][T15604] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3242.191388][T15604] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3242.204324][T15604] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3242.215413][T15604] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3242.236786][T15604] usb 4-1: config 0 descriptor?? [ 3242.337851][ T1996] FAULT_INJECTION: forcing a failure. [ 3242.337851][ T1996] name failslab, interval 1, probability 0, space 0, times 0 [ 3242.350504][ T1996] CPU: 0 UID: 0 PID: 1996 Comm: syz.2.10727 Tainted: G L syzkaller #0 PREEMPT(full) [ 3242.350533][ T1996] Tainted: [L]=SOFTLOCKUP [ 3242.350540][ T1996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 3242.350553][ T1996] Call Trace: [ 3242.350561][ T1996] [ 3242.350570][ T1996] dump_stack_lvl+0xe8/0x150 [ 3242.350606][ T1996] should_fail_ex+0x40c/0x560 [ 3242.350631][ T1996] ? vmemdup_user+0x2b/0xd0 [ 3242.350660][ T1996] should_failslab+0xa8/0x100 [ 3242.350691][ T1996] __kvmalloc_node_noprof+0x176/0x860 [ 3242.350721][ T1996] ? __fget_files+0x2a/0x420 [ 3242.350747][ T1996] ? vmemdup_user+0x2b/0xd0 [ 3242.350785][ T1996] vmemdup_user+0x2b/0xd0 [ 3242.350813][ T1996] map_get_next_key+0x1c3/0x610 [ 3242.350841][ T1996] ? bpf_lsm_bpf+0x9/0x20 [ 3242.350863][ T1996] ? security_bpf+0x7e/0x2d0 [ 3242.350896][ T1996] __sys_bpf+0xb83/0xd90 [ 3242.350929][ T1996] ? __pfx___sys_bpf+0x10/0x10 [ 3242.350965][ T1996] ? __fget_files+0x2a/0x420 [ 3242.351007][ T1996] ? ksys_write+0x242/0x270 [ 3242.351039][ T1996] ? __pfx_ksys_write+0x10/0x10 [ 3242.351074][ T1996] __x64_sys_bpf+0xba/0xd0 [ 3242.351097][ T1996] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3242.351120][ T1996] do_syscall_64+0x174/0x580 [ 3242.351148][ T1996] ? trace_irq_disable+0x3b/0x140 [ 3242.351173][ T1996] ? clear_bhb_loop+0x40/0x90 [ 3242.351197][ T1996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3242.351218][ T1996] RIP: 0033:0x7fb0eaf9de59 [ 3242.351237][ T1996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3242.351253][ T1996] RSP: 002b:00007fb0ebe9c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3242.351275][ T1996] RAX: ffffffffffffffda RBX: 00007fb0eb225fa0 RCX: 00007fb0eaf9de59 [ 3242.351290][ T1996] RDX: 0000000000000020 RSI: 0000200000000b80 RDI: 0000000000000004 [ 3242.351303][ T1996] RBP: 00007fb0ebe9c090 R08: 0000000000000000 R09: 0000000000000000 [ 3242.351315][ T1996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3242.351328][ T1996] R13: 00007fb0eb226038 R14: 00007fb0eb225fa0 R15: 00007fb0eb34fa48 [ 3242.351359][ T1996] [ 3242.640151][ T1999] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10728'. [ 3242.650923][ T1999] netlink: 'syz.4.10728': attribute type 1 has an invalid length. [ 3242.659225][ T1999] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10728'. [ 3242.859732][ T2005] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10731'. [ 3242.893293][ T2005] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10731'. [ 3243.418009][ T2021] kAFS: unable to lookup cell '.ñÏ(,c¾ûL' [ 3243.628853][T15604] usbhid 4-1:0.0: can't add hid device: -71 [ 3243.634933][T15604] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 3243.645977][T15604] usb 4-1: USB disconnect, device number 119 [ 3244.082624][T18131] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 3244.278188][ T2049] FAULT_INJECTION: forcing a failure. [ 3244.278188][ T2049] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3244.286736][T18131] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 3244.302519][T18131] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3244.314510][T18131] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3244.324556][T18131] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 3244.340663][ T2049] CPU: 0 UID: 0 PID: 2049 Comm: syz.3.10737 Tainted: G L syzkaller #0 PREEMPT(full) [ 3244.340691][ T2049] Tainted: [L]=SOFTLOCKUP [ 3244.340698][ T2049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 3244.340709][ T2049] Call Trace: [ 3244.340718][ T2049] [ 3244.340726][ T2049] dump_stack_lvl+0xe8/0x150 [ 3244.340765][ T2049] should_fail_ex+0x40c/0x560 [ 3244.340797][ T2049] strncpy_from_user+0x36/0x2c0 [ 3244.340819][ T2049] do_getname+0x77/0x250 [ 3244.340842][ T2049] user_path_at+0x2a/0x160 [ 3244.340874][ T2049] __x64_sys_umount+0xf6/0x170 [ 3244.340894][ T2049] ? __pfx___x64_sys_umount+0x10/0x10 [ 3244.340920][ T2049] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3244.340939][ T2049] do_syscall_64+0x174/0x580 [ 3244.340966][ T2049] ? trace_irq_disable+0x3b/0x140 [ 3244.340988][ T2049] ? clear_bhb_loop+0x40/0x90 [ 3244.341010][ T2049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3244.341027][ T2049] RIP: 0033:0x7f6d2819de59 [ 3244.341045][ T2049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3244.341060][ T2049] RSP: 002b:00007f6d29010028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 3244.341079][ T2049] RAX: ffffffffffffffda RBX: 00007f6d28426090 RCX: 00007f6d2819de59 [ 3244.341092][ T2049] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000200000000140 [ 3244.341104][ T2049] RBP: 00007f6d29010090 R08: 0000000000000000 R09: 0000000000000000 [ 3244.341124][ T2049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3244.341136][ T2049] R13: 00007f6d28426128 R14: 00007f6d28426090 R15: 00007f6d2854fa48 [ 3244.341163][ T2049] [ 3244.345158][T18131] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 3244.535668][T18131] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 3244.543856][T18131] usb 5-1: Manufacturer: syz [ 3244.552817][T18131] usb 5-1: config 0 descriptor?? [ 3244.987351][ T2062] FAULT_INJECTION: forcing a failure. [ 3244.987351][ T2062] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3245.000466][ T2062] CPU: 1 UID: 0 PID: 2062 Comm: syz.2.10740 Tainted: G L syzkaller #0 PREEMPT(full) [ 3245.000493][ T2062] Tainted: [L]=SOFTLOCKUP [ 3245.000500][ T2062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 3245.000511][ T2062] Call Trace: [ 3245.000520][ T2062] [ 3245.000532][ T2062] dump_stack_lvl+0xe8/0x150 [ 3245.000557][ T2062] should_fail_ex+0x40c/0x560 [ 3245.000578][ T2062] _copy_from_user+0x2d/0xb0 [ 3245.000599][ T2062] do_ipv6_setsockopt+0x249/0x3180 [ 3245.000623][ T2062] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 3245.000645][ T2062] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 3245.000663][ T2062] ? get_pid_task+0x20/0x1f0 [ 3245.000688][ T2062] ? __lock_acquire+0x683/0x2cf0 [ 3245.000718][ T2062] ? aa_sk_perm+0x6d5/0x900 [ 3245.000738][ T2062] ? __fget_files+0x2a/0x420 [ 3245.000759][ T2062] ? __pfx_aa_sk_perm+0x10/0x10 [ 3245.000780][ T2062] ? __fget_files+0x2a/0x420 [ 3245.000796][ T2062] ? aa_sock_opt_perm+0xff/0x1a0 [ 3245.000811][ T2062] ipv6_setsockopt+0x59/0x170 [ 3245.000829][ T2062] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 3245.000848][ T2062] do_sock_setsockopt+0x17c/0x1b0 [ 3245.000871][ T2062] __x64_sys_setsockopt+0x13d/0x1b0 [ 3245.000893][ T2062] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3245.000907][ T2062] do_syscall_64+0x174/0x580 [ 3245.000929][ T2062] ? clear_bhb_loop+0x40/0x90 [ 3245.000945][ T2062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3245.000959][ T2062] RIP: 0033:0x7fb0eaf9de59 [ 3245.000971][ T2062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3245.000983][ T2062] RSP: 002b:00007fb0ebe9c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 3245.000997][ T2062] RAX: ffffffffffffffda RBX: 00007fb0eb225fa0 RCX: 00007fb0eaf9de59 [ 3245.001007][ T2062] RDX: 000000000000002a RSI: 0000000000000029 RDI: 0000000000000003 [ 3245.001016][ T2062] RBP: 00007fb0ebe9c090 R08: 0000000000000108 R09: 0000000000000000 [ 3245.001024][ T2062] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 3245.001032][ T2062] R13: 00007fb0eb226038 R14: 00007fb0eb225fa0 R15: 00007fb0eb34fa48 [ 3245.001072][ T2062] [ 3245.326564][T18131] appleir 0003:05AC:8243.0043: unknown main item tag 0x0 [ 3245.341940][T18131] appleir 0003:05AC:8243.0043: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 3245.399365][ T2079] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10742'. [ 3245.456789][ T2068] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10742'. [ 3245.719976][ T2093] FAULT_INJECTION: forcing a failure. [ 3245.719976][ T2093] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3245.733957][ T2093] CPU: 1 UID: 0 PID: 2093 Comm: syz.2.10747 Tainted: G L syzkaller #0 PREEMPT(full) [ 3245.733990][ T2093] Tainted: [L]=SOFTLOCKUP [ 3245.733999][ T2093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 3245.734013][ T2093] Call Trace: [ 3245.734022][ T2093] [ 3245.734031][ T2093] dump_stack_lvl+0xe8/0x150 [ 3245.734070][ T2093] should_fail_ex+0x40c/0x560 [ 3245.734102][ T2093] _copy_from_user+0x2d/0xb0 [ 3245.734136][ T2093] ___sys_recvmsg+0x173/0x5a0 [ 3245.734166][ T2093] ? __pfx____sys_recvmsg+0x10/0x10 [ 3245.734194][ T2093] ? __fget_files+0x2a/0x420 [ 3245.734242][ T2093] ? __fget_files+0x3a2/0x420 [ 3245.734281][ T2093] do_recvmmsg+0x31a/0x7f0 [ 3245.734313][ T2093] ? __pfx_do_recvmmsg+0x10/0x10 [ 3245.734349][ T2093] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3245.734384][ T2093] ? __fget_files+0x3a2/0x420 [ 3245.734437][ T2093] __x64_sys_recvmmsg+0x198/0x250 [ 3245.734462][ T2093] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 3245.734521][ T2093] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3245.734546][ T2093] do_syscall_64+0x174/0x580 [ 3245.734577][ T2093] ? trace_irq_disable+0x3b/0x140 [ 3245.734605][ T2093] ? clear_bhb_loop+0x40/0x90 [ 3245.734633][ T2093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3245.734657][ T2093] RIP: 0033:0x7fb0eaf9de59 [ 3245.734677][ T2093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3245.734698][ T2093] RSP: 002b:00007fb0ebe9c028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 3245.734734][ T2093] RAX: ffffffffffffffda RBX: 00007fb0eb225fa0 RCX: 00007fb0eaf9de59 [ 3245.734751][ T2093] RDX: 04000000000002b7 RSI: 0000200000006f00 RDI: 0000000000000003 [ 3245.734767][ T2093] RBP: 00007fb0ebe9c090 R08: 0000000000000000 R09: 0000000000000000 [ 3245.734782][ T2093] R10: 0000000000000140 R11: 0000000000000246 R12: 0000000000000001 [ 3245.734797][ T2093] R13: 00007fb0eb226038 R14: 00007fb0eb225fa0 R15: 00007fb0eb34fa48 [ 3245.734831][ T2093] [ 3246.022719][ T2101] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3246.102708][ T5719] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 3246.251484][ T29] audit: type=1326 audit(1784089563.378:11053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2099 comm="syz.2.10749" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb0eaf9de59 code=0x0 [ 3246.530053][T28743] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 3246.542859][ T9382] usb 5-1: USB disconnect, device number 43 [ 3246.745643][ T5719] usb 2-1: Using ep0 maxpacket: 32 [ 3246.760770][ T5719] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 3246.773593][ T5719] usb 2-1: config 0 interface 0 has no altsetting 0 [ 3246.780770][ T5719] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 3246.792606][ T5719] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3246.803270][ T5719] usb 2-1: config 0 descriptor?? [ 3247.250955][T28743] usb 4-1: Using ep0 maxpacket: 16 [ 3247.461107][ T5719] corsair-cpro 0003:1B1C:0C10.0044: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0 [ 3247.776460][T15604] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 3247.854705][ T2095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3247.864145][ T2095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3247.887083][T28743] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3247.899941][T28743] usb 4-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00 [ 3247.909009][T28743] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3247.930822][T28743] usb 4-1: config 0 descriptor?? [ 3248.002052][ T5719] corsair-cpro 0003:1B1C:0C10.0044: probe with driver corsair-cpro failed with error -71 [ 3248.028079][ T5719] usb 2-1: USB disconnect, device number 46 [ 3248.126621][ T2185] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10757'. [ 3248.144554][ T2170] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10757'. [ 3248.492862][ T9382] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 3248.554191][T28743] maltron 0003:058F:9410.0045: unknown main item tag 0x0 [ 3248.561285][T28743] maltron 0003:058F:9410.0045: unknown main item tag 0x0 [ 3248.568355][T28743] maltron 0003:058F:9410.0045: unknown main item tag 0x0 [ 3248.575395][T28743] maltron 0003:058F:9410.0045: unknown main item tag 0x0 [ 3248.582461][T28743] maltron 0003:058F:9410.0045: unknown main item tag 0x0 [ 3248.589547][T28743] maltron 0003:058F:9410.0045: unknown main item tag 0x0 [ 3248.596610][T28743] maltron 0003:058F:9410.0045: unknown main item tag 0x0 [ 3248.603667][T28743] maltron 0003:058F:9410.0045: unknown main item tag 0x0 [ 3248.611198][T28743] maltron 0003:058F:9410.0045: unknown main item tag 0x0 [ 3248.621398][T28743] maltron 0003:058F:9410.0045: hidraw0: USB HID v0.06 Device [HID 058f:9410] on usb-dummy_hcd.3-1/input0 [ 3248.761908][ T9382] usb 3-1: Using ep0 maxpacket: 32 [ 3248.782227][ T9382] usb 3-1: unable to get BOS descriptor or descriptor too short [ 3248.791725][ T9382] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 3248.799795][ T9382] usb 3-1: can't read configurations, error -61 [ 3248.931723][ T9382] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 3248.990043][ T5719] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 3249.125196][ T2207] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10762'. [ 3249.201732][ T9382] usb 3-1: Using ep0 maxpacket: 32 [ 3249.209777][ T9382] usb 3-1: unable to get BOS descriptor or descriptor too short [ 3249.221067][ T9382] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 3249.228920][ T9382] usb 3-1: can't read configurations, error -61 [ 3249.235935][ T9382] usb usb3-port1: attempt power cycle [ 3249.591938][ T9382] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 3249.642677][ T9382] usb 3-1: Using ep0 maxpacket: 32 [ 3249.643615][ T5719] usb 2-1: Using ep0 maxpacket: 32 [ 3249.653964][ T9382] usb 3-1: unable to get BOS descriptor or descriptor too short [ 3249.664092][ T9382] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 3249.671813][ T9382] usb 3-1: can't read configurations, error -61 [ 3249.802316][ T9382] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 3249.852313][ T9382] usb 3-1: Using ep0 maxpacket: 32 [ 3249.859946][ T9382] usb 3-1: unable to get BOS descriptor or descriptor too short [ 3249.871345][ T9382] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 3249.879941][ T9382] usb 3-1: can't read configurations, error -61 [ 3249.890508][ T9382] usb usb3-port1: unable to enumerate USB device [ 3249.905209][T28743] usb 4-1: USB disconnect, device number 120 [ 3249.983612][T15604] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 3249.992714][T15604] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3250.000736][T15604] usb 5-1: Product: syz [ 3250.004926][T15604] usb 5-1: Manufacturer: syz [ 3250.009746][T15604] usb 5-1: SerialNumber: syz [ 3250.307278][T15604] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 3250.319199][T15604] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 3250.329653][T15604] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 3250.346569][T15604] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 3250.363205][T15604] usb 5-1: USB disconnect, device number 44 [ 3250.540670][ T5719] usb 2-1: unable to get BOS descriptor or descriptor too short [ 3251.178845][T15604] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 3251.271294][ T2258] usb usb1: usbfs: process 2258 (syz.1.10769) did not claim interface 0 before use [ 3251.405431][ T5719] usb 2-1: string descriptor 0 read error: -71 [ 3251.411793][ T5719] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 3251.420884][ T5719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3251.511618][ T5719] usb 2-1: can't set config #1, error -71 [ 3251.519678][ T5719] usb 2-1: USB disconnect, device number 47 [ 3251.836280][T15604] usb 5-1: Using ep0 maxpacket: 16 [ 3252.054197][T10825] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 3252.158727][ T5719] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 3252.483734][T15604] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 3252.491954][T15604] usb 5-1: config 1 has no interface number 0 [ 3252.498097][T15604] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 3252.508019][T15604] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 3252.522205][T15604] usb 5-1: config 1 interface 105 has no altsetting 0 [ 3252.707461][T10825] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 3252.719688][T15604] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 3252.728966][T15604] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 3252.737044][T15604] usb 5-1: Product: syz [ 3252.741219][T15604] usb 5-1: Manufacturer: syz [ 3252.745810][T15604] usb 5-1: SerialNumber: syz [ 3252.751676][T10825] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 3252.761336][T10825] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 3252.771059][T10825] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 3252.782604][T10825] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 3252.791671][T10825] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3252.803037][T10825] usb 3-1: config 0 descriptor?? [ 3252.829372][ T2237] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 3252.836924][ T2237] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 3253.342387][ T9382] bridge0: entered promiscuous mode [ 3253.351429][ T2296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3253.355724][ T2296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3253.369334][ T5719] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3253.369367][ T5719] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3253.369405][ T5719] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 3253.369429][ T5719] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3253.371194][T10825] hdpvr 3-1:0.0: unexpected answer of status request, len -32 [ 3253.371234][T10825] hdpvr 3-1:0.0: device init failed [ 3253.371320][T10825] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 3253.374542][ T5719] usb 2-1: config 0 descriptor?? [ 3253.411659][ T9382] hid_parser_main: 31 callbacks suppressed [ 3253.411676][ T9382] hid-generic 0006:0008:0001.0046: unknown main item tag 0x0 [ 3253.411700][ T9382] hid-generic 0006:0008:0001.0046: unknown main item tag 0x0 [ 3253.411720][ T9382] hid-generic 0006:0008:0001.0046: unknown main item tag 0x0 [ 3253.411739][ T9382] hid-generic 0006:0008:0001.0046: unknown main item tag 0x0 [ 3253.411758][ T9382] hid-generic 0006:0008:0001.0046: unknown main item tag 0x0 [ 3253.411777][ T9382] hid-generic 0006:0008:0001.0046: unknown main item tag 0x0 [ 3253.411814][ T9382] hid-generic 0006:0008:0001.0046: unknown main item tag 0x0 [ 3253.411833][ T9382] hid-generic 0006:0008:0001.0046: unknown main item tag 0x0 [ 3253.411869][ T9382] hid-generic 0006:0008:0001.0046: unknown main item tag 0x0 [ 3253.411888][ T9382] hid-generic 0006:0008:0001.0046: unknown main item tag 0x0 [ 3253.421293][ T9382] hid-generic 0006:0008:0001.0046: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 3253.464619][ T2237] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 3253.464741][ T2237] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 3253.522049][ T2310] fido_id[2310]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 3253.742069][ T9382] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 3254.019415][ T9382] usb 4-1: Using ep0 maxpacket: 16 [ 3254.029144][ T9382] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3254.029190][ T9382] usb 4-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00 [ 3254.029214][ T9382] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3254.031329][ T9382] usb 4-1: config 0 descriptor?? [ 3254.131146][T15604] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 3254.241698][ T5719] cp2112 0003:10C4:EA90.0047: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 3254.345807][T15604] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 3254.562508][ T5719] cp2112 0003:10C4:EA90.0047: Part Number: 0x00 Device Version: 0x00 [ 3254.585643][T15604] aqc111 5-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, d2:a0:33:c1:7e:10 [ 3254.683577][ T2329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3254.692394][ T2329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3254.714681][ T9382] maltron 0003:058F:9410.0048: hidraw1: USB HID v0.06 Device [HID 058f:9410] on usb-dummy_hcd.3-1/input0 [ 3254.783762][T15604] usb 5-1: USB disconnect, device number 45 [ 3254.792237][T15604] aqc111 5-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 3254.859327][T10825] usb 3-1: USB disconnect, device number 41 [ 3254.911112][ T5698] usb 4-1: USB disconnect, device number 121 [ 3255.018453][T15604] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 3255.027905][T15604] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 3255.037335][T15604] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 3255.252016][ T2381] syzkaller0: entered promiscuous mode [ 3255.257506][ T2381] syzkaller0: entered allmulticast mode [ 3255.825033][ T2348] cp2112 0003:10C4:EA90.0047: Error starting transaction: -38 [ 3255.921135][ T5719] cp2112 0003:10C4:EA90.0047: error reading lock byte: -32 [ 3256.127210][T13323] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 3256.127270][T13323] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 3256.127390][T13323] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 3256.127488][T13323] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 3256.268745][T13322] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 3256.269339][T13322] bond1: (slave veth3): making interface the new active one [ 3256.294207][ T2446] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 3256.320881][ T5698] usb 2-1: reset high-speed USB device number 48 using dummy_hcd [ 3256.363638][T13322] bond1: active interface up! [ 3256.453175][ T2458] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 3256.453175][ T2458] Please contact the netfilter-devel mailing list or update your nftables rules. [ 3256.479857][ T2460] netlink: 76 bytes leftover after parsing attributes in process `syz.1.10786'. [ 3257.014185][ T2478] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10791'. [ 3257.044021][ T2478] FAULT_INJECTION: forcing a failure. [ 3257.044021][ T2478] name failslab, interval 1, probability 0, space 0, times 0 [ 3257.068943][ T2478] CPU: 1 UID: 0 PID: 2478 Comm: syz.1.10791 Tainted: G L syzkaller #0 PREEMPT(full) [ 3257.068964][ T2478] Tainted: [L]=SOFTLOCKUP [ 3257.068969][ T2478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 3257.068978][ T2478] Call Trace: [ 3257.068984][ T2478] [ 3257.068990][ T2478] dump_stack_lvl+0xe8/0x150 [ 3257.069015][ T2478] should_fail_ex+0x40c/0x560 [ 3257.069035][ T2478] should_failslab+0xa8/0x100 [ 3257.069062][ T2478] __kmalloc_node_track_caller_noprof+0x100/0x730 [ 3257.069083][ T2478] ? xfrm_add_sa+0x20ec/0x40d0 [ 3257.069103][ T2478] ? xfrm_add_sa+0x20ec/0x40d0 [ 3257.069126][ T2478] kmemdup_noprof+0x2b/0x70 [ 3257.069146][ T2478] xfrm_add_sa+0x20ec/0x40d0 [ 3257.069171][ T2478] ? __pfx_xfrm_add_sa+0x10/0x10 [ 3257.069189][ T2478] ? apparmor_capable+0x126/0x170 [ 3257.069209][ T2478] ? __nla_parse+0x40/0x60 [ 3257.069229][ T2478] xfrm_user_rcv_msg+0x7a8/0xf30 [ 3257.069253][ T2478] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 3257.069291][ T2478] ? __mutex_trylock_common+0x15f/0x270 [ 3257.069308][ T2478] ? __pfx___mutex_trylock_common+0x10/0x10 [ 3257.069323][ T2478] ? rcu_is_watching+0x15/0xb0 [ 3257.069344][ T2478] ? trace_contention_end+0x3d/0x140 [ 3257.069362][ T2478] netlink_rcv_skb+0x226/0x4a0 [ 3257.069385][ T2478] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 3257.069406][ T2478] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 3257.069436][ T2478] ? netlink_deliver_tap+0x2e/0x1b0 [ 3257.069449][ T2478] ? netlink_deliver_tap+0x2e/0x1b0 [ 3257.069464][ T2478] xfrm_netlink_rcv+0x79/0x90 [ 3257.069486][ T2478] netlink_unicast+0x7bb/0x940 [ 3257.069512][ T2478] netlink_sendmsg+0x813/0xb40 [ 3257.069531][ T2478] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3257.069549][ T2478] ? aa_sock_msg_perm+0xf1/0x1b0 [ 3257.069565][ T2478] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3257.069577][ T2478] sock_sendmsg_nosec+0x13a/0x180 [ 3257.069596][ T2478] ____sys_sendmsg+0x54e/0x850 [ 3257.069620][ T2478] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3257.069646][ T2478] ? import_iovec+0x73/0xa0 [ 3257.069668][ T2478] ___sys_sendmsg+0x2a5/0x360 [ 3257.069688][ T2478] ? __lock_acquire+0x683/0x2cf0 [ 3257.069708][ T2478] ? __pfx____sys_sendmsg+0x10/0x10 [ 3257.069750][ T2478] ? __fget_files+0x2a/0x420 [ 3257.069767][ T2478] ? __fget_files+0x3a2/0x420 [ 3257.069790][ T2478] __x64_sys_sendmsg+0x1b1/0x290 [ 3257.069813][ T2478] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 3257.069845][ T2478] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3257.069860][ T2478] do_syscall_64+0x174/0x580 [ 3257.069879][ T2478] ? trace_irq_disable+0x3b/0x140 [ 3257.069896][ T2478] ? clear_bhb_loop+0x40/0x90 [ 3257.069912][ T2478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3257.069925][ T2478] RIP: 0033:0x7fc1f039de59 [ 3257.069938][ T2478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3257.069950][ T2478] RSP: 002b:00007fc1f130d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3257.069965][ T2478] RAX: ffffffffffffffda RBX: 00007fc1f0625fa0 RCX: 00007fc1f039de59 [ 3257.069974][ T2478] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 3257.069983][ T2478] RBP: 00007fc1f130d090 R08: 0000000000000000 R09: 0000000000000000 [ 3257.069991][ T2478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3257.069999][ T2478] R13: 00007fc1f0626038 R14: 00007fc1f0625fa0 R15: 00007fc1f074fa48 [ 3257.070020][ T2478] [ 3257.633649][T15604] usb 2-1: USB disconnect, device number 48 [ 3258.754909][ T2537] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10802'. [ 3258.813843][ T2541] FAULT_INJECTION: forcing a failure. [ 3258.813843][ T2541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3258.871535][ T2541] CPU: 1 UID: 0 PID: 2541 Comm: syz.2.10805 Tainted: G L syzkaller #0 PREEMPT(full) [ 3258.871567][ T2541] Tainted: [L]=SOFTLOCKUP [ 3258.871575][ T2541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 3258.871587][ T2541] Call Trace: [ 3258.871596][ T2541] [ 3258.871604][ T2541] dump_stack_lvl+0xe8/0x150 [ 3258.871639][ T2541] should_fail_ex+0x40c/0x560 [ 3258.871668][ T2541] _copy_from_user+0x2d/0xb0 [ 3258.871702][ T2541] ___sys_sendmsg+0x1c6/0x360 [ 3258.871738][ T2541] ? __pfx____sys_sendmsg+0x10/0x10 [ 3258.871767][ T2541] ? __lock_acquire+0x683/0x2cf0 [ 3258.871834][ T2541] __sys_sendmmsg+0x273/0x4d0 [ 3258.871859][ T2541] ? __pfx___sys_sendmmsg+0x10/0x10 [ 3258.871887][ T2541] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3258.871930][ T2541] ? ksys_write+0x242/0x270 [ 3258.871962][ T2541] ? __pfx_ksys_write+0x10/0x10 [ 3258.872010][ T2541] __x64_sys_sendmmsg+0xa0/0xc0 [ 3258.872031][ T2541] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3258.872051][ T2541] do_syscall_64+0x174/0x580 [ 3258.872079][ T2541] ? trace_irq_disable+0x3b/0x140 [ 3258.872104][ T2541] ? clear_bhb_loop+0x40/0x90 [ 3258.872129][ T2541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3258.872149][ T2541] RIP: 0033:0x7fb0eaf9de59 [ 3258.872168][ T2541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3258.872186][ T2541] RSP: 002b:00007fb0ebe9c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3258.872207][ T2541] RAX: ffffffffffffffda RBX: 00007fb0eb225fa0 RCX: 00007fb0eaf9de59 [ 3258.872222][ T2541] RDX: 0400000000000159 RSI: 0000200000001c00 RDI: 0000000000000003 [ 3258.872235][ T2541] RBP: 00007fb0ebe9c090 R08: 0000000000000000 R09: 0000000000000000 [ 3258.872248][ T2541] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000002 [ 3258.872261][ T2541] R13: 00007fb0eb226038 R14: 00007fb0eb225fa0 R15: 00007fb0eb34fa48 [ 3258.872291][ T2541] [ 3259.172499][ T2552] fuse: Bad value for 'fd' [ 3259.899705][ T2601] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10814'. [ 3259.910445][ T2601] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10814'. [ 3260.175897][ T2623] loop4: detected capacity change from 0 to 2640 [ 3260.186710][ T2623] buffer_io_error: 10 callbacks suppressed [ 3260.186739][ T2623] Buffer I/O error on dev loop4, logical block 0, async page read [ 3260.198664][ T2634] fuse: Bad value for 'fd' [ 3260.218597][ T5698] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 3260.230537][T19840] Buffer I/O error on dev loop4, logical block 0, async page read [ 3260.239520][T19840] Buffer I/O error on dev loop4, logical block 0, async page read [ 3260.247983][T19840] Buffer I/O error on dev loop4, logical block 0, async page read [ 3260.256394][T19840] Buffer I/O error on dev loop4, logical block 0, async page read [ 3260.267195][T19840] Buffer I/O error on dev loop4, logical block 0, async page read [ 3260.275172][ T2623] Buffer I/O error on dev loop4, logical block 0, async page read [ 3260.291671][ T2623] Buffer I/O error on dev loop4, logical block 0, async page read [ 3260.306443][ T2623] Buffer I/O error on dev loop4, logical block 0, async page read [ 3260.319989][ T2623] Buffer I/O error on dev loop4, logical block 0, async page read [ 3260.358431][ T2638] FAULT_INJECTION: forcing a failure. [ 3260.358431][ T2638] name failslab, interval 1, probability 0, space 0, times 0 [ 3260.364933][ T2623] ldm_validate_partition_table(): Disk read failed. [ 3260.373627][ T2638] CPU: 0 UID: 0 PID: 2638 Comm: syz.2.10822 Tainted: G L syzkaller #0 PREEMPT(full) [ 3260.373733][ T2638] Tainted: [L]=SOFTLOCKUP [ 3260.373755][ T2638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 3260.373796][ T2638] Call Trace: [ 3260.373819][ T2638] [ 3260.373849][ T2638] dump_stack_lvl+0xe8/0x150 [ 3260.373955][ T2638] should_fail_ex+0x40c/0x560 [ 3260.374033][ T2638] should_failslab+0xa8/0x100 [ 3260.374121][ T2638] __kmalloc_cache_noprof+0xa8/0x660 [ 3260.374217][ T2638] ? genl_start+0x1c9/0x6d0 [ 3260.374307][ T2638] ? genl_start+0x1c9/0x6d0 [ 3260.374395][ T2638] genl_start+0x1c9/0x6d0 [ 3260.374483][ T2638] __netlink_dump_start+0x442/0x7b0 [ 3260.374578][ T2638] genl_family_rcv_msg_dumpit+0x213/0x310 [ 3260.374666][ T2638] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 3260.374745][ T2638] ? genl_get_cmd+0x6cc/0x960 [ 3260.374826][ T2638] ? __pfx_genl_start+0x10/0x10 [ 3260.374887][ T2638] ? __pfx_genl_dumpit+0x10/0x10 [ 3260.374941][ T2638] ? __pfx_genl_done+0x10/0x10 [ 3260.375012][ T2638] ? __dev_queue_xmit+0x29b/0x37f0 [ 3260.375095][ T2638] genl_rcv_msg+0x5e1/0x7a0 [ 3260.375178][ T2638] ? __pfx_genl_rcv_msg+0x10/0x10 [ 3260.375240][ T2638] ? __pfx_ethnl_default_start+0x10/0x10 [ 3260.375292][ T2638] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 3260.375338][ T2638] ? __pfx_ethnl_default_done+0x10/0x10 [ 3260.375406][ T2638] ? __pfx_ref_tracker_free+0x10/0x10 [ 3260.375498][ T2638] netlink_rcv_skb+0x226/0x4a0 [ 3260.375608][ T2638] ? __pfx_genl_rcv_msg+0x10/0x10 [ 3260.375721][ T2638] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 3260.375852][ T2638] ? down_read+0x2be/0x330 [ 3260.375924][ T2638] genl_rcv+0x28/0x40 [ 3260.375989][ T2638] netlink_unicast+0x7bb/0x940 [ 3260.376103][ T2638] netlink_sendmsg+0x813/0xb40 [ 3260.376181][ T2638] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3260.376253][ T2638] ? aa_sock_msg_perm+0xf1/0x1b0 [ 3260.376324][ T2638] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3260.376376][ T2638] sock_sendmsg_nosec+0x13a/0x180 [ 3260.376455][ T2638] ____sys_sendmsg+0x54e/0x850 [ 3260.376548][ T2638] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3260.376651][ T2638] ? import_iovec+0x73/0xa0 [ 3260.376734][ T2638] ___sys_sendmsg+0x2a5/0x360 [ 3260.376814][ T2638] ? __lock_acquire+0x683/0x2cf0 [ 3260.376909][ T2638] ? __pfx____sys_sendmsg+0x10/0x10 [ 3260.377090][ T2638] ? __fget_files+0x2a/0x420 [ 3260.377159][ T2638] ? __fget_files+0x3a2/0x420 [ 3260.377246][ T2638] __x64_sys_sendmsg+0x1b1/0x290 [ 3260.377336][ T2638] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 3260.377469][ T2638] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3260.377531][ T2638] do_syscall_64+0x174/0x580 [ 3260.377604][ T2638] ? trace_irq_disable+0x3b/0x140 [ 3260.377674][ T2638] ? clear_bhb_loop+0x40/0x90 [ 3260.377746][ T2638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3260.377799][ T2638] RIP: 0033:0x7fb0eaf9de59 [ 3260.377857][ T2638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3260.377906][ T2638] RSP: 002b:00007fb0ebe9c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3260.377927][ T2638] RAX: ffffffffffffffda RBX: 00007fb0eb225fa0 RCX: 00007fb0eaf9de59 [ 3260.377940][ T2638] RDX: 0000000000000080 RSI: 0000200000000540 RDI: 0000000000000006 [ 3260.377952][ T2638] RBP: 00007fb0ebe9c090 R08: 0000000000000000 R09: 0000000000000000 [ 3260.377965][ T2638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3260.377976][ T2638] R13: 00007fb0eb226038 R14: 00007fb0eb225fa0 R15: 00007fb0eb34fa48 [ 3260.378007][ T2638] [ 3260.612497][ T2648] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10818'. [ 3260.613745][ T9382] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 3260.618437][ T2648] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10818'. [ 3260.655534][ T2623] Dev loop4: unable to read RDB block 0 [ 3260.656219][ T2623] loop4: unable to read partition table [ 3260.776793][ T2623] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 3260.912515][ T9382] usb 2-1: Using ep0 maxpacket: 8 [ 3260.920275][ T9382] usb 2-1: unable to get BOS descriptor or descriptor too short [ 3260.928889][ T5698] usb 5-1: Using ep0 maxpacket: 8 [ 3260.939111][ T9382] usb 2-1: config 1 has an invalid interface number: 54 but max is 1 [ 3260.947407][ T9382] usb 2-1: config 1 has an invalid interface number: 54 but max is 1 [ 3260.955671][ T9382] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3260.964604][ T9382] usb 2-1: config 1 has no interface number 0 [ 3260.970827][ T9382] usb 2-1: config 1 interface 54 has no altsetting 0 [ 3260.979623][ T9382] usb 2-1: New USB device found, idVendor=1199, idProduct=0028, bcdDevice=e5.25 [ 3260.988926][ T9382] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3260.996958][ T9382] usb 2-1: Product: syz [ 3261.001152][ T9382] usb 2-1: Manufacturer: syz [ 3261.005813][ T9382] usb 2-1: SerialNumber: syz [ 3261.241680][ T2655] syz_tun: entered allmulticast mode [ 3261.253355][ T2616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10816'. [ 3261.253397][ T2616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10816'. [ 3261.259628][ T9382] sierra 2-1:1.54: Sierra USB modem converter detected [ 3261.276571][ T9382] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 3261.326607][ T9382] usb 2-1: USB disconnect, device number 49 [ 3261.342738][ T9382] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 3261.359072][ T2655] syz_tun: left allmulticast mode [ 3261.364895][ T9382] sierra 2-1:1.54: device disconnected [ 3261.602921][ T5698] usb 5-1: config 0 interface 0 has no altsetting 0 [ 3261.609613][ T5698] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 3261.618670][ T5698] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3261.638874][ T5698] usb 5-1: config 0 descriptor?? [ 3261.724754][ T2686] netlink: 64 bytes leftover after parsing attributes in process `syz.3.10825'. [ 3261.781892][ T2693] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10826'. [ 3261.790967][ T2693] openvswitch: netlink: EtherType 0 is less than min 600 [ 3261.852116][ T2695] xt_hashlimit: size too large, truncated to 1048576 [ 3262.016199][ T2605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3262.042181][ T2605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3262.077797][ T2605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3262.109699][ T2605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3262.151016][ T29] audit: type=1326 audit(1784089579.318:11054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2603 comm="syz.4.10815" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb629b9de59 code=0x0 [ 3262.234696][ T2704] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10828'. [ 3262.266830][ T2704] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10828'. [ 3262.268431][ T2714] netlink: 'syz.4.10815': attribute type 10 has an invalid length. [ 3262.398696][ T2718] FAULT_INJECTION: forcing a failure. [ 3262.398696][ T2718] name failslab, interval 1, probability 0, space 0, times 0 [ 3262.411366][ T2718] CPU: 0 UID: 0 PID: 2718 Comm: syz.2.10829 Tainted: G L syzkaller #0 PREEMPT(full) [ 3262.411394][ T2718] Tainted: [L]=SOFTLOCKUP [ 3262.411402][ T2718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 3262.411414][ T2718] Call Trace: [ 3262.411423][ T2718] [ 3262.411432][ T2718] dump_stack_lvl+0xe8/0x150 [ 3262.411467][ T2718] should_fail_ex+0x40c/0x560 [ 3262.411495][ T2718] should_failslab+0xa8/0x100 [ 3262.411534][ T2718] __kmalloc_cache_noprof+0xa8/0x660 [ 3262.411559][ T2718] ? __kmalloc_cache_noprof+0x150/0x660 [ 3262.411583][ T2718] ? fuse_get_tree+0xc2/0x3b0 [ 3262.411608][ T2718] ? fuse_get_tree+0xc2/0x3b0 [ 3262.411638][ T2718] fuse_get_tree+0xc2/0x3b0 [ 3262.411666][ T2718] vfs_get_tree+0x92/0x2a0 [ 3262.411686][ T2718] do_new_mount+0x319/0xdc0 [ 3262.411717][ T2718] ? __pfx_do_new_mount+0x10/0x10 [ 3262.411743][ T2718] ? ns_capable+0x89/0xe0 [ 3262.411766][ T2718] ? path_mount+0x647/0x1040 [ 3262.411792][ T2718] ? user_path_at+0xd4/0x160 [ 3262.411823][ T2718] __se_sys_mount+0x31d/0x420 [ 3262.411854][ T2718] ? __pfx___se_sys_mount+0x10/0x10 [ 3262.411887][ T2718] ? __x64_sys_mount+0x20/0xc0 [ 3262.411912][ T2718] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3262.411934][ T2718] do_syscall_64+0x174/0x580 [ 3262.411962][ T2718] ? trace_irq_disable+0x3b/0x140 [ 3262.411987][ T2718] ? clear_bhb_loop+0x40/0x90 [ 3262.412011][ T2718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3262.412032][ T2718] RIP: 0033:0x7fb0eaf9de59 [ 3262.412050][ T2718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3262.412068][ T2718] RSP: 002b:00007fb0ebe9c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3262.412088][ T2718] RAX: ffffffffffffffda RBX: 00007fb0eb225fa0 RCX: 00007fb0eaf9de59 [ 3262.412103][ T2718] RDX: 0000200000002100 RSI: 00002000000020c0 RDI: 0000000000000000 [ 3262.412117][ T2718] RBP: 00007fb0ebe9c090 R08: 0000200000002140 R09: 0000000000000000 [ 3262.412130][ T2718] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000002 [ 3262.412143][ T2718] R13: 00007fb0eb226038 R14: 00007fb0eb225fa0 R15: 00007fb0eb34fa48 [ 3262.412174][ T2718] [ 3262.470691][ T2720] fuse: Bad value for 'fd' [ 3263.483029][ T2766] syz_tun: entered allmulticast mode [ 3263.592225][ T2766] syz_tun: left allmulticast mode [ 3263.623655][ T5698] usb 5-1: string descriptor 0 read error: -71 [ 3263.848486][ T5698] usbhid 5-1:0.0: can't add hid device: -71 [ 3263.855673][ T5698] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 3263.888331][ T5698] usb 5-1: USB disconnect, device number 46 [ 3264.032576][ T9382] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 3264.213868][ T9382] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 3264.231567][ T9382] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3264.251878][ T9382] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3264.271927][ T9382] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 3264.312880][ T9382] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 3264.334876][ T9382] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 3264.361553][ T9382] usb 3-1: Manufacturer: syz [ 3264.369566][ T9382] usb 3-1: config 0 descriptor?? [ 3264.445495][ T5698] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 3264.533529][ T2815] fuse: Bad value for 'fd' [ 3264.637882][ T2817] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3264.788973][ T9382] hid_parser_main: 54 callbacks suppressed [ 3264.788997][ T9382] appleir 0003:05AC:8243.0049: unknown main item tag 0x0 [ 3264.839534][ T9382] appleir 0003:05AC:8243.0049: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 3265.123721][ T29] audit: type=1326 audit(1784089582.278:11055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2816 comm="syz.1.10847" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc1f039de59 code=0x0 [ 3265.216272][T10825] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 3265.751161][ T5698] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 3265.762262][ T5698] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3265.773158][ T5698] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3265.782899][ T5698] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 3265.802579][ T9382] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 3265.857238][T10825] usb 4-1: Using ep0 maxpacket: 8 [ 3266.072984][ T9382] usb 2-1: Using ep0 maxpacket: 8 [ 3266.080482][ T9382] usb 2-1: unable to get BOS descriptor or descriptor too short [ 3266.089260][ T9382] usb 2-1: config 4 interface 0 has no altsetting 0 [ 3266.098282][ T9382] usb 2-1: string descriptor 0 read error: -22 [ 3266.104970][ T9382] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 3266.114038][ T9382] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 3266.133514][ T9382] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 3266.150940][ T9382] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 3266.167846][ T9382] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 3266.177536][ T9382] usb 2-1: media controller created [ 3266.196761][ T5698] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 3266.205921][ T5698] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 3266.215096][ T5698] usb 5-1: Manufacturer: syz [ 3266.224800][ T5698] usb 5-1: config 0 descriptor?? [ 3266.236116][ T9382] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3266.408661][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 3266.416174][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 3266.518825][T10825] usb 4-1: config 0 interface 0 has no altsetting 0 [ 3266.525513][T10825] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 3266.534686][T10825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3266.547191][T10825] usb 4-1: config 0 descriptor?? [ 3266.852317][ T5698] appleir 0003:05AC:8243.004A: unknown main item tag 0x0 [ 3266.868178][ T5698] appleir 0003:05AC:8243.004A: hiddev1,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 3266.942836][ T2829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3266.971994][ T2829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3266.984413][ T2829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3266.995022][ T2829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3267.005492][ T29] audit: type=1326 audit(1784089584.138:11056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2825 comm="syz.3.10849" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6d2819de59 code=0x0 [ 3267.081034][ T2901] netlink: 'syz.3.10849': attribute type 10 has an invalid length. [ 3267.095531][ T2901] bond0 (unregistering): Released all slaves [ 3267.197120][T15604] usb 3-1: reset high-speed USB device number 42 using dummy_hcd [ 3267.333187][ T9382] zl10353_read_register: readreg error (reg=127, ret==0) [ 3267.414482][ T9382] usb 2-1: USB disconnect, device number 50 [ 3267.617189][T15604] usb 3-1: device descriptor read/64, error -71 [ 3267.940131][T15604] usb 3-1: reset high-speed USB device number 42 using dummy_hcd [ 3268.306713][ T2956] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3268.371001][T15604] usb 3-1: device descriptor read/64, error -71 [ 3268.443963][ T2963] FAULT_INJECTION: forcing a failure. [ 3268.443963][ T2963] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3268.478933][T10825] usb 4-1: string descriptor 0 read error: -71 [ 3268.494034][ T2963] CPU: 0 UID: 0 PID: 2963 Comm: syz.0.10855 Tainted: G L syzkaller #0 PREEMPT(full) [ 3268.494072][ T2963] Tainted: [L]=SOFTLOCKUP [ 3268.494080][ T2963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 3268.494092][ T2963] Call Trace: [ 3268.494100][ T2963] [ 3268.494108][ T2963] dump_stack_lvl+0xe8/0x150 [ 3268.494144][ T2963] should_fail_ex+0x40c/0x560 [ 3268.494192][ T2963] _copy_to_user+0x31/0xb0 [ 3268.494225][ T2963] simple_read_from_buffer+0xe1/0x170 [ 3268.494260][ T2963] proc_fail_nth_read+0x1bb/0x230 [ 3268.494291][ T2963] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3268.494323][ T2963] ? rw_verify_area+0x24a/0x4c0 [ 3268.494367][ T2963] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3268.494392][ T2963] vfs_read+0x213/0xa80 [ 3268.494425][ T2963] ? __pfx___mutex_lock+0x10/0x10 [ 3268.494456][ T2963] ? __pfx_vfs_read+0x10/0x10 [ 3268.494484][ T2963] ? __fget_files+0x2a/0x420 [ 3268.494513][ T2963] ? __fget_files+0x3a2/0x420 [ 3268.494536][ T2963] ? __fget_files+0x2a/0x420 [ 3268.494587][ T2963] ksys_read+0x150/0x270 [ 3268.494617][ T2963] ? __pfx_ksys_read+0x10/0x10 [ 3268.494637][ T2963] ? __pfx_sock_ioctl+0x10/0x10 [ 3268.494660][ T2963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3268.494676][ T2963] do_syscall_64+0x174/0x580 [ 3268.494697][ T2963] ? trace_irq_disable+0x3b/0x140 [ 3268.494716][ T2963] ? clear_bhb_loop+0x40/0x90 [ 3268.494734][ T2963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3268.494748][ T2963] RIP: 0033:0x7fae2c55e68e [ 3268.494761][ T2963] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 3268.494773][ T2963] RSP: 002b:00007fae2d45cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3268.494788][ T2963] RAX: ffffffffffffffda RBX: 00007fae2d45d6c0 RCX: 00007fae2c55e68e [ 3268.494799][ T2963] RDX: 000000000000000f RSI: 00007fae2d45d0a0 RDI: 0000000000000005 [ 3268.494808][ T2963] RBP: 00007fae2d45d090 R08: 0000000000000000 R09: 0000000000000000 [ 3268.494817][ T2963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3268.494826][ T2963] R13: 00007fae2c826038 R14: 00007fae2c825fa0 R15: 00007fae2c94fa48 [ 3268.494848][ T2963] [ 3268.650939][ T29] audit: type=1326 audit(1784089585.778:11057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2955 comm="syz.3.10854" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6d2819de59 code=0x0 [ 3268.651306][ T9382] usb 5-1: USB disconnect, device number 47 [ 3268.751044][T15604] usb 3-1: reset high-speed USB device number 42 using dummy_hcd [ 3268.967360][ T2987] fuse: Bad value for 'fd' [ 3269.044678][ T2992] batman_adv: batadv0: Adding interface: dummy0 [ 3269.051052][ T2992] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3269.099262][ T2992] batman_adv: batadv0: Interface activated: dummy0 [ 3269.190514][T10825] usbhid 4-1:0.0: can't add hid device: -71 [ 3269.196559][T10825] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 3269.208422][T10825] usb 4-1: USB disconnect, device number 122 [ 3269.302178][ T3007] Cannot find del_set index 2 as target [ 3269.385183][ T3010] binder: 3009:3010 ioctl c0306201 0 returned -14 [ 3269.404285][T15604] usb 3-1: device descriptor read/8, error -71 [ 3269.470669][ T3015] loop4: detected capacity change from 0 to 7 [ 3269.495381][ T3015] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 3269.504126][ T3015] loop4: partition table partially beyond EOD, truncated [ 3269.512483][ T3015] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 3269.530222][ T3021] binder: 3009:3021 ioctl c0306201 0 returned -14 [ 3269.683289][ T4992] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 3269.688768][ T4992] loop4: partition table partially beyond EOD, truncated [ 3269.696094][ T4992] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 3269.744078][T15604] usb 3-1: reset high-speed USB device number 42 using dummy_hcd [ 3269.918567][ T3045] fuse: Bad value for 'fd' [ 3270.076321][T15604] usb 3-1: device not accepting address 42, error -71 [ 3270.086059][ T9380] usb 3-1: USB disconnect, device number 42 [ 3270.121650][ T3054] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3270.130636][ T4992] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 3270.137198][ T4992] loop4: partition table partially beyond EOD, truncated [ 3270.144486][ T4992] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 3270.222801][T19822] udevd[19822]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 3270.341686][ T29] audit: type=1326 audit(1784089587.468:11058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3053 comm="syz.4.10871" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb629b9de59 code=0x0 [ 3270.493305][ T3074] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10872'. [ 3270.528887][ T3074] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10872'. [ 3270.632091][ T3079] loop5: detected capacity change from 0 to 7 [ 3270.642379][ T3079] Dev loop5: unable to read RDB block 7 [ 3270.654245][ T3079] loop5: unable to read partition table [ 3270.667834][ T3079] loop5: partition table beyond EOD, truncated [ 3270.688421][ T3079] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 3270.917560][ T3088] binder: 3087:3088 ioctl c0306201 0 returned -14 [ 3271.001514][ T3096] loop4: detected capacity change from 0 to 7 [ 3271.027145][ T3096] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 3271.032509][ T3096] loop4: partition table partially beyond EOD, truncated [ 3271.040355][ T3096] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 3271.052568][ T3104] binder: 3087:3104 ioctl c0306201 0 returned -14 [ 3271.067411][T15604] usb 4-1: new full-speed USB device number 123 using dummy_hcd [ 3271.341813][ T9382] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 3271.458438][ T29] audit: type=1326 audit(1784089588.618:11059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3107 comm="syz.2.10878" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0eaf9de59 code=0x7ffc0000 [ 3271.483958][ T29] audit: type=1326 audit(1784089588.618:11060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3107 comm="syz.2.10878" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0eaf9de59 code=0x7ffc0000 [ 3271.511582][ T9382] usb 5-1: device descriptor read/64, error -71 [ 3271.533408][ T29] audit: type=1326 audit(1784089588.618:11061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3107 comm="syz.2.10878" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb0eaf9de59 code=0x7ffc0000 [ 3271.557776][ T29] audit: type=1326 audit(1784089588.618:11062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3107 comm="syz.2.10878" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0eaf9de59 code=0x7ffc0000 [ 3271.582228][ T29] audit: type=1326 audit(1784089588.618:11063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3107 comm="syz.2.10878" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0eaf9de59 code=0x7ffc0000 [ 3271.606735][ T29] audit: type=1326 audit(1784089588.618:11064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3107 comm="syz.2.10878" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0eaf9de59 code=0x7ffc0000 [ 3271.644057][ T29] audit: type=1326 audit(1784089588.618:11065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3107 comm="syz.2.10878" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb0eaf9de59 code=0x7ffc0000 [ 3271.668452][ T29] audit: type=1326 audit(1784089588.618:11066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3107 comm="syz.2.10878" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0eaf9de59 code=0x7ffc0000 [ 3271.801704][ T9382] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 3272.021836][ T9382] usb 5-1: device descriptor read/64, error -71 [ 3272.172335][ T9382] usb usb5-port1: attempt power cycle [ 3272.320777][T15604] usb 4-1: unable to get BOS descriptor or descriptor too short [ 3272.332383][T15604] usb 4-1: not running at top speed; connect to a high speed hub [ 3272.450809][ T5698] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 3272.611727][ T9382] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 3272.619368][T18131] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 3272.678021][ T9382] usb 5-1: device descriptor read/8, error -71 [ 3272.775812][T15604] usb 4-1: config 0 has an invalid interface number: 175 but max is 0 [ 3272.789181][T15604] usb 4-1: config 0 has no interface number 0 [ 3272.795301][T15604] usb 4-1: config 0 interface 175 has no altsetting 0 [ 3272.885268][T18131] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 3272.892994][T18131] usb 3-1: can't read configurations, error -61 [ 3272.932583][ T9382] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 3272.997220][ T9382] usb 5-1: device descriptor read/8, error -71 [ 3273.081862][T18131] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 3273.103337][ T9382] usb usb5-port1: unable to enumerate USB device [ 3273.293649][T18131] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 3273.301342][T18131] usb 3-1: can't read configurations, error -61 [ 3273.308383][T18131] usb usb3-port1: attempt power cycle [ 3273.646155][T15604] usb 4-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice=a3.02 [ 3273.661512][T15604] usb 4-1: New USB device strings: Mfr=120, Product=243, SerialNumber=26 [ 3273.669972][T15604] usb 4-1: Product: syz [ 3273.686695][T15604] usb 4-1: Manufacturer: syz [ 3273.691338][T15604] usb 4-1: SerialNumber: syz [ 3273.699737][T15604] usb 4-1: config 0 descriptor?? [ 3273.706578][T18131] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 3273.757482][ T5698] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3273.768403][ T5698] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3273.778157][ T5698] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3273.791084][ T5698] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3273.800154][ T5698] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3273.808806][T15604] usb 4-1: can't set config #0, error -71 [ 3273.818359][T15604] usb 4-1: USB disconnect, device number 123 [ 3273.825144][T18131] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 3273.834695][T18131] usb 3-1: can't read configurations, error -61 [ 3273.842434][ T3148] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 3273.847399][ T3147] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 3273.876323][ T5698] usb 2-1: config 0 descriptor?? [ 3273.880470][ T3148] loop5: detected capacity change from 0 to 6 [ 3273.889753][ T3148] Dev loop5: unable to read RDB block 6 [ 3273.895624][ T3148] loop5: unable to read partition table [ 3273.901712][ T3148] loop5: partition table beyond EOD, truncated [ 3273.907954][ T3148] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 3273.924159][ T3147] netlink: 'syz.3.10886': attribute type 1 has an invalid length. [ 3274.016208][ T3147] bond0: (slave bridge2): making interface the new active one [ 3274.024505][ T3147] bond0: (slave bridge2): Enslaving as an active interface with an up link [ 3274.032686][T18131] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 3274.087612][T18131] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 3274.117904][T18131] usb 3-1: can't read configurations, error -61 [ 3274.140051][T18131] usb usb3-port1: unable to enumerate USB device [ 3274.601170][ T3208] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10889'. [ 3275.032503][ T3221] binder: 3220:3221 ioctl c0306201 0 returned -14 [ 3275.196028][ T3224] loop4: detected capacity change from 0 to 7 [ 3275.230973][ T3224] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 3275.239904][ T3224] loop4: partition table partially beyond EOD, truncated [ 3275.252261][ T3224] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 3275.263846][ T3224] binder: 3220:3224 ioctl c0306201 0 returned -14 [ 3275.831906][ T3258] sctp: [Deprecated]: syz.0.10898 (pid 3258) Use of struct sctp_assoc_value in delayed_ack socket option. [ 3275.831906][ T3258] Use struct sctp_sack_info instead [ 3276.068916][ T5698] usbhid 2-1:0.0: can't add hid device: -71 [ 3276.074962][ T5698] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 3276.089655][T15604] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 3276.167003][ T5698] usb 2-1: USB disconnect, device number 51 [ 3276.519631][T15604] usb 3-1: device descriptor read/64, error -71 [ 3276.779909][ T3296] binder: 3294:3296 ioctl c0306201 0 returned -14 [ 3276.893048][ T3302] loop4: detected capacity change from 0 to 7 [ 3276.937109][ T3302] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 3276.952433][ T3302] loop4: partition table partially beyond EOD, truncated [ 3276.958238][ T3304] binder: 3294:3304 ioctl c0306201 0 returned -14 [ 3276.969175][T15604] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 3276.985346][ T3302] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 3277.117766][ T4992] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 3277.123387][ T4992] loop4: partition table partially beyond EOD, truncated [ 3277.135529][ T4992] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 3277.191436][ T4992] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 3277.197112][ T4992] loop4: partition table partially beyond EOD, truncated [ 3277.205187][ T4992] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 3277.390978][T15604] usb 3-1: device descriptor read/64, error -71 [ 3277.452284][ T3322] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10914'. [ 3277.463465][ T3322] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10914'. [ 3277.501312][T15604] usb usb3-port1: attempt power cycle [ 3277.551719][ T9382] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 3277.736660][ T9382] usb 5-1: Using ep0 maxpacket: 16 [ 3277.756913][ T9382] usb 5-1: config index 0 descriptor too short (expected 5650, got 18) [ 3277.802304][ T9382] usb 5-1: config 3 has an invalid interface number: 20 but max is 0 [ 3277.824027][ T9382] usb 5-1: config 3 has no interface number 0 [ 3277.861996][ T9382] usb 5-1: config 3 interface 20 has no altsetting 0 [ 3277.883569][ T9382] usb 5-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice=27.b1 [ 3277.897172][ T9382] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3277.922944][ T9382] usb 5-1: Product: syz [ 3277.933216][ T9382] usb 5-1: Manufacturer: syz [ 3277.942143][ T9382] usb 5-1: SerialNumber: syz [ 3277.957926][T15604] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 3277.975089][ T3341] tipc: Enabled bearer , priority 0 [ 3277.988270][ T3341] syzkaller0: entered promiscuous mode [ 3277.994004][ T3341] syzkaller0: entered allmulticast mode [ 3278.011895][ T3341] sch_tbf: peakrate 11 is lower than or equals to rate 2048 ! [ 3278.026894][ T3341] tipc: Resetting bearer [ 3278.101668][ T3349] tipc: Resetting bearer [ 3278.141440][ T3349] tipc: Disabling bearer [ 3278.231835][T18131] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 3278.243404][ T3316] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 3278.249247][ T3316] syzkaller1: group set to 0 [ 3278.397836][T15604] usb 3-1: device descriptor read/8, error -71 [ 3278.427636][ T9382] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:3.20/input/input137 [ 3278.466249][ T4977] bcm5974 5-1:3.20: could not read from device [ 3278.501635][T18131] usb 2-1: Using ep0 maxpacket: 8 [ 3278.563571][T18131] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 3278.575252][ T4977] bcm5974 5-1:3.20: could not read from device [ 3278.583010][T18131] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 3278.639014][ T9382] usb 5-1: USB disconnect, device number 52 [ 3278.656038][T18131] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 3278.699244][T18131] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 3278.725319][T18131] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 3278.734869][ T4977] bcm5974 5-1:3.20: could not read from device [ 3278.741721][T15604] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 3278.743169][T18131] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3278.765583][T19186] bcm5974 5-1:3.20: could not read from device [ 3278.772484][T18131] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3278.781670][T18131] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3278.816027][T19186] udevd[19186]: Error opening device "/dev/input/event4": No such file or directory [ 3278.831320][T19186] udevd[19186]: Unable to EVIOCGABS device "/dev/input/event4" [ 3278.862710][T19186] udevd[19186]: Unable to EVIOCGABS device "/dev/input/event4" [ 3278.887170][T19186] udevd[19186]: Unable to EVIOCGABS device "/dev/input/event4" [ 3278.896372][T19186] udevd[19186]: Unable to EVIOCGABS device "/dev/input/event4" [ 3278.908935][T19186] udevd[19186]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 3278.953054][ T4992] udevd[4992]: worker [19186] terminated by signal 6 (Aborted) [ 3278.960700][ T4992] udevd[4992]: worker [19186] failed while handling '/devices/platform/dummy_hcd.4/usb5/5-1/5-1:3.20/input/input137/event4' [ 3279.066813][T18131] usb 2-1: GET_CAPABILITIES returned 0 [ 3279.075862][T18131] usbtmc 2-1:16.0: can't read capabilities [ 3279.168858][T15604] usb 3-1: device descriptor read/8, error -71 [ 3279.270439][T18131] usb 2-1: USB disconnect, device number 52 [ 3279.288163][T15604] usb usb3-port1: unable to enumerate USB device [ 3279.547663][ T3398] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10925'. [ 3279.558755][ T3398] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10925'. [ 3279.805265][ T3410] FAULT_INJECTION: forcing a failure. [ 3279.805265][ T3410] name failslab, interval 1, probability 0, space 0, times 0 [ 3279.831708][ T3410] CPU: 1 UID: 0 PID: 3410 Comm: syz.3.10928 Tainted: G L syzkaller #0 PREEMPT(full) [ 3279.831740][ T3410] Tainted: [L]=SOFTLOCKUP [ 3279.831749][ T3410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 3279.831777][ T3410] Call Trace: [ 3279.831787][ T3410] [ 3279.831796][ T3410] dump_stack_lvl+0xe8/0x150 [ 3279.831835][ T3410] should_fail_ex+0x40c/0x560 [ 3279.831867][ T3410] should_failslab+0xa8/0x100 [ 3279.831902][ T3410] __kmalloc_cache_noprof+0xa8/0x660 [ 3279.831929][ T3410] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 3279.831960][ T3410] ? __kmalloc_cache_noprof+0x150/0x660 [ 3279.831988][ T3410] ? sctp_add_bind_addr+0x8c/0x370 [ 3279.832026][ T3410] ? sctp_add_bind_addr+0x8c/0x370 [ 3279.832061][ T3410] sctp_add_bind_addr+0x8c/0x370 [ 3279.832094][ T3410] sctp_copy_local_addr_list+0x31a/0x4e0 [ 3279.832125][ T3410] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 3279.832154][ T3410] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 3279.832184][ T3410] ? sctp_v6_is_any+0x64/0x80 [ 3279.832216][ T3410] ? sctp_copy_one_addr+0x93/0x360 [ 3279.832247][ T3410] sctp_bind_addr_copy+0xb3/0x3c0 [ 3279.832277][ T3410] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 3279.832306][ T3410] sctp_connect_new_asoc+0x2ff/0x6b0 [ 3279.832343][ T3410] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 3279.832383][ T3410] ? __local_bh_enable_ip+0xd0/0x130 [ 3279.832407][ T3410] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 3279.832432][ T3410] ? security_sctp_bind_connect+0x7e/0x2c0 [ 3279.832466][ T3410] sctp_sendmsg+0x159b/0x2d00 [ 3279.832515][ T3410] ? __pfx_sctp_sendmsg+0x10/0x10 [ 3279.832554][ T3410] ? aa_sk_perm+0x6d5/0x900 [ 3279.832599][ T3410] ? __might_fault+0xaf/0x130 [ 3279.832627][ T3410] ? sock_rps_record_flow+0x19/0x350 [ 3279.832662][ T3410] ? inet_sendmsg+0x298/0x320 [ 3279.832694][ T3410] ? __pfx_inet_sendmsg+0x10/0x10 [ 3279.832721][ T3410] sock_sendmsg_nosec+0x10e/0x180 [ 3279.832752][ T3410] __sys_sendto+0x408/0x5a0 [ 3279.832781][ T3410] ? ksys_write+0x1e6/0x270 [ 3279.832817][ T3410] ? __pfx___sys_sendto+0x10/0x10 [ 3279.832845][ T3410] ? __mutex_unlock_slowpath+0x731/0x900 [ 3279.832908][ T3410] ? __pfx_ksys_write+0x10/0x10 [ 3279.832945][ T3410] __x64_sys_sendto+0xde/0x100 [ 3279.832977][ T3410] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3279.833001][ T3410] do_syscall_64+0x174/0x580 [ 3279.833031][ T3410] ? trace_irq_disable+0x3b/0x140 [ 3279.833058][ T3410] ? clear_bhb_loop+0x40/0x90 [ 3279.833086][ T3410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3279.833111][ T3410] RIP: 0033:0x7f6d2819de59 [ 3279.833131][ T3410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3279.833151][ T3410] RSP: 002b:00007f6d29031028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 3279.833174][ T3410] RAX: ffffffffffffffda RBX: 00007f6d28425fa0 RCX: 00007f6d2819de59 [ 3279.833190][ T3410] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 3279.833205][ T3410] RBP: 00007f6d29031090 R08: 000020000005ffe4 R09: 000000000000001c [ 3279.833220][ T3410] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 3279.833234][ T3410] R13: 00007f6d28426038 R14: 00007f6d28425fa0 R15: 00007f6d2854fa48 [ 3279.833269][ T3410] [ 3280.240332][ T3415] binder: 3414:3415 ioctl c0306201 0 returned -14 [ 3280.289093][ T3424] netlink: 88 bytes leftover after parsing attributes in process `syz.1.10932'. [ 3280.338827][ T3427] loop4: detected capacity change from 0 to 7 [ 3280.357843][ T3427] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 3280.363197][ T3427] loop4: partition table partially beyond EOD, truncated [ 3280.370908][ T3427] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 3280.385142][ T3425] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10931'. [ 3280.397340][ T3433] binder: 3414:3433 ioctl c0306201 0 returned -14 [ 3280.661094][ T3431] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10931'. [ 3280.791094][ T3463] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10936'. [ 3280.807750][ T3463] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10936'. [ 3281.307301][ T3505] netlink: 96 bytes leftover after parsing attributes in process `syz.3.10940'. [ 3281.342909][T15604] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 3282.637033][T15604] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 3282.647883][T15604] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3282.667633][T15604] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3282.699182][T15604] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 3282.722253][ T3549] binder: 3548:3549 ioctl c0306201 0 returned -14 [ 3282.837221][ T3553] loop4: detected capacity change from 0 to 7 [ 3282.905817][ T3553] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 3282.911864][ T3553] loop4: partition table partially beyond EOD, truncated [ 3282.929387][ T3553] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 3282.976183][ T3557] binder: 3548:3557 ioctl c0306201 0 returned -14 [ 3283.180179][T15604] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 3283.189264][T15604] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 3283.203829][T15604] usb 3-1: Manufacturer: syz [ 3283.212521][T15604] usb 3-1: config 0 descriptor?? [ 3283.673517][ T3572] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 3283.796326][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 3283.888962][ T3581] __nla_validate_parse: 6 callbacks suppressed [ 3283.888977][ T3581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10956'. [ 3284.063955][T15604] appleir 0003:05AC:8243.004B: unknown main item tag 0x0 [ 3284.087289][T15604] appleir 0003:05AC:8243.004B: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 3284.808836][ T3604] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10959'. [ 3284.819450][ T3604] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10959'. [ 3285.105080][ T3614] trusted_key: encrypted_key: master key parameter is missing [ 3285.133000][ T5698] usb 3-1: USB disconnect, device number 51 [ 3285.251045][ T3623] binder: 3618:3623 ioctl c0306201 0 returned -14 [ 3285.327989][ T3640] netlink: 136 bytes leftover after parsing attributes in process `syz.0.10968'. [ 3285.373888][ T3644] loop4: detected capacity change from 0 to 7 [ 3285.391882][ T3640] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10968'. [ 3285.417847][ T3640] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10968'. [ 3285.434966][ T3644] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 3285.465024][ T3644] loop4: partition table partially beyond EOD, truncated [ 3285.475925][ T3644] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 3285.489603][ T3644] binder: 3618:3644 ioctl c0306201 0 returned -14 [ 3285.652396][ T4992] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 3285.657772][ T4992] loop4: partition table partially beyond EOD, truncated [ 3285.678353][ T4992] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 3285.832456][ T3669] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10972'. [ 3285.885384][ T3669] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10972'. [ 3286.076767][T28743] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 3286.129974][ T3681] program syz.0.10974 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3286.178082][ T3681] binfmt_misc: register: failed to install interpreter file ./file0 [ 3286.273518][ T3687] FAULT_INJECTION: forcing a failure. [ 3286.273518][ T3687] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3286.290508][ T3687] CPU: 1 UID: 0 PID: 3687 Comm: syz.2.10979 Tainted: G L syzkaller #0 PREEMPT(full) [ 3286.290539][ T3687] Tainted: [L]=SOFTLOCKUP [ 3286.290547][ T3687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 3286.290560][ T3687] Call Trace: [ 3286.290569][ T3687] [ 3286.290578][ T3687] dump_stack_lvl+0xe8/0x150 [ 3286.290614][ T3687] should_fail_ex+0x40c/0x560 [ 3286.290643][ T3687] _copy_to_user+0x31/0xb0 [ 3286.290696][ T3687] simple_read_from_buffer+0xe1/0x170 [ 3286.290732][ T3687] proc_fail_nth_read+0x1bb/0x230 [ 3286.290765][ T3687] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3286.290799][ T3687] ? rw_verify_area+0x24a/0x4c0 [ 3286.290834][ T3687] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3286.290863][ T3687] vfs_read+0x213/0xa80 [ 3286.290900][ T3687] ? __pfx___mutex_lock+0x10/0x10 [ 3286.290934][ T3687] ? __pfx_vfs_read+0x10/0x10 [ 3286.290967][ T3687] ? __fget_files+0x2a/0x420 [ 3286.291000][ T3687] ? __fget_files+0x3a2/0x420 [ 3286.291027][ T3687] ? __fget_files+0x2a/0x420 [ 3286.291064][ T3687] ksys_read+0x150/0x270 [ 3286.291100][ T3687] ? __pfx_ksys_read+0x10/0x10 [ 3286.291141][ T3687] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3286.291166][ T3687] do_syscall_64+0x174/0x580 [ 3286.291197][ T3687] ? trace_irq_disable+0x3b/0x140 [ 3286.291254][ T3687] ? clear_bhb_loop+0x40/0x90 [ 3286.291281][ T3687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3286.291304][ T3687] RIP: 0033:0x7fb0eaf5e68e [ 3286.291325][ T3687] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 3286.291344][ T3687] RSP: 002b:00007fb0ebe9bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3286.291368][ T3687] RAX: ffffffffffffffda RBX: 00007fb0ebe9c6c0 RCX: 00007fb0eaf5e68e [ 3286.291385][ T3687] RDX: 000000000000000f RSI: 00007fb0ebe9c0a0 RDI: 0000000000000004 [ 3286.291399][ T3687] RBP: 00007fb0ebe9c090 R08: 0000000000000000 R09: 0000000000000000 [ 3286.291414][ T3687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3286.291430][ T3687] R13: 00007fb0eb226038 R14: 00007fb0eb225fa0 R15: 00007fb0eb34fa48 [ 3286.291465][ T3687] [ 3286.656289][ T3699] x_tables: duplicate underflow at hook 1 [ 3286.735020][ T3701] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10982'. [ 3286.872571][ T3701] team0: Port device team_slave_0 removed [ 3286.984418][ T3721] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10984'. [ 3287.021101][ T5698] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 3287.081912][ T9382] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 3287.172578][ T3734] fuse: Bad value for 'fd' [ 3287.252044][ T3734] tipc: Enabled bearer , priority 10 [ 3287.344048][ T9382] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3287.354333][ T9382] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3287.377679][ T9382] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3287.391531][ T9382] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3287.400062][ T9382] usb 2-1: Product: syz [ 3287.406230][ T9382] usb 2-1: Manufacturer: syz [ 3287.413566][ T9382] usb 2-1: SerialNumber: syz [ 3287.574431][ T3742] binder: 3739:3742 ioctl c0306201 0 returned -14 [ 3287.646170][ T9382] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 3287.657834][ T3740] loop4: detected capacity change from 0 to 7 [ 3287.675996][ T3740] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 3287.681348][ T3740] loop4: partition table partially beyond EOD, truncated [ 3287.691432][ T9382] usb 2-1: USB disconnect, device number 53 [ 3287.710454][ T3740] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 3287.721272][ T3740] binder: 3739:3740 ioctl c0306201 0 returned -14 [ 3288.241764][ T9382] tipc: Node number set to 3765057521 [ 3288.256758][T10825] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 3288.368908][ T5698] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 3288.379773][ T5698] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3288.390669][ T5698] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3288.400534][T28743] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3288.400567][T28743] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3288.400590][T28743] usb 5-1: Product: syz [ 3288.400607][T28743] usb 5-1: Manufacturer: syz [ 3288.400625][T28743] usb 5-1: SerialNumber: syz [ 3288.408524][ T5698] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 3288.588280][T28743] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3288.695651][ T5698] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 3288.707570][ T5698] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 3288.721367][ T5698] usb 4-1: Manufacturer: syz [ 3288.733038][T10825] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3288.747261][T10825] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3288.765046][ T5698] usb 4-1: config 0 descriptor?? [ 3288.785072][T15604] usb 5-1: USB disconnect, device number 53 [ 3288.874447][T28743] usb 5-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 3288.885554][T15604] usb 5-1: ath9k_htc: USB layer deinitialized [ 3289.426706][ T5698] appleir 0003:05AC:8243.004C: unknown main item tag 0x0 [ 3289.450779][ T5698] appleir 0003:05AC:8243.004C: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 3289.639283][T10825] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3289.648414][T10825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3289.656469][T10825] usb 2-1: Product: syz [ 3289.660659][T10825] usb 2-1: Manufacturer: syz [ 3289.665327][T10825] usb 2-1: SerialNumber: syz [ 3289.903681][ T3817] __nla_validate_parse: 1 callbacks suppressed [ 3289.903700][ T3817] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10995'. [ 3289.959437][ T3820] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10995'. [ 3289.988416][T10825] usb 2-1: can't set config #1, error -71 [ 3290.004388][T10825] usb 2-1: USB disconnect, device number 54 [ 3290.133534][ T3839] binder: 3838:3839 ioctl c0306201 0 returned -14 [ 3290.265247][ T5698] usb 4-1: USB disconnect, device number 124 [ 3290.323372][ T3857] FAULT_INJECTION: forcing a failure. [ 3290.323372][ T3857] name failslab, interval 1, probability 0, space 0, times 0 [ 3290.336396][ T3857] CPU: 1 UID: 0 PID: 3857 Comm: syz.4.11000 Tainted: G L syzkaller #0 PREEMPT(full) [ 3290.336426][ T3857] Tainted: [L]=SOFTLOCKUP [ 3290.336434][ T3857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 3290.336446][ T3857] Call Trace: [ 3290.336454][ T3857] [ 3290.336463][ T3857] dump_stack_lvl+0xe8/0x150 [ 3290.336498][ T3857] should_fail_ex+0x40c/0x560 [ 3290.336526][ T3857] should_failslab+0xa8/0x100 [ 3290.336555][ T3857] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 3290.336579][ T3857] ? local_lock_release+0x9c/0x160 [ 3290.336608][ T3857] ? __alloc_skb+0x1d7/0x7a0 [ 3290.336633][ T3857] ? __alloc_skb+0x1d7/0x7a0 [ 3290.336665][ T3857] __alloc_skb+0x1d7/0x7a0 [ 3290.336700][ T3857] pfkey_sendmsg+0x20c/0x11d0 [ 3290.336730][ T3857] ? unwind_next_frame+0x8f/0x2550 [ 3290.336761][ T3857] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 3290.336796][ T3857] ? aa_sk_perm+0x6d5/0x900 [ 3290.336831][ T3857] ? __pfx_aa_sk_perm+0x10/0x10 [ 3290.336863][ T3857] ? aa_sock_msg_perm+0xf1/0x1b0 [ 3290.336905][ T3857] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 3290.336933][ T3857] sock_sendmsg_nosec+0x13a/0x180 [ 3290.336959][ T3857] ____sys_sendmsg+0x54e/0x850 [ 3290.337013][ T3857] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3290.337052][ T3857] ? import_iovec+0x73/0xa0 [ 3290.337096][ T3857] ___sys_sendmsg+0x2a5/0x360 [ 3290.337135][ T3857] ? __lock_acquire+0x683/0x2cf0 [ 3290.337173][ T3857] ? __pfx____sys_sendmsg+0x10/0x10 [ 3290.337239][ T3857] ? __fget_files+0x2a/0x420 [ 3290.337263][ T3857] ? __fget_files+0x3a2/0x420 [ 3290.337317][ T3857] __x64_sys_sendmsg+0x1b1/0x290 [ 3290.337351][ T3857] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 3290.337400][ T3857] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3290.337424][ T3857] do_syscall_64+0x174/0x580 [ 3290.337453][ T3857] ? trace_irq_disable+0x3b/0x140 [ 3290.337479][ T3857] ? clear_bhb_loop+0x40/0x90 [ 3290.337505][ T3857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3290.337525][ T3857] RIP: 0033:0x7fb629b9de59 [ 3290.337545][ T3857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3290.337562][ T3857] RSP: 002b:00007fb62aa1c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3290.337583][ T3857] RAX: ffffffffffffffda RBX: 00007fb629e25fa0 RCX: 00007fb629b9de59 [ 3290.337598][ T3857] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 3290.337611][ T3857] RBP: 00007fb62aa1c090 R08: 0000000000000000 R09: 0000000000000000 [ 3290.337627][ T3857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3290.337640][ T3857] R13: 00007fb629e26038 R14: 00007fb629e25fa0 R15: 00007fb629f4fa48 [ 3290.337672][ T3857] [ 3290.609850][ T3858] binder: 3838:3858 ioctl c0306201 0 returned -14 [ 3290.627433][ T9380] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 3290.805730][ T9380] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 3290.814880][ T9380] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3290.823144][ T9380] usb 3-1: Product: syz [ 3290.827342][ T9380] usb 3-1: Manufacturer: syz [ 3290.832174][ T9380] usb 3-1: SerialNumber: syz [ 3290.838924][ T9380] usb 3-1: config 0 descriptor?? [ 3291.135095][ T3819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3291.145917][ T3819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3291.179518][ T9380] usb 3-1: USB disconnect, device number 52 [ 3291.194076][ T3883] netlink: 64 bytes leftover after parsing attributes in process `syz.3.11003'. [ 3291.361547][ T3904] netlink: 344 bytes leftover after parsing attributes in process `syz.1.11005'. [ 3291.597073][ T3881] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3292.457018][ T3928] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11009'. [ 3292.524460][ T3924] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11009'. [ 3292.582283][ T3929] fuse: Unknown parameter '0x0000000000000007' [ 3292.962069][ T3938] FAULT_INJECTION: forcing a failure. [ 3292.962069][ T3938] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3292.975269][ T3938] CPU: 0 UID: 0 PID: 3938 Comm: syz.3.11012 Tainted: G L syzkaller #0 PREEMPT(full) [ 3292.975301][ T3938] Tainted: [L]=SOFTLOCKUP [ 3292.975309][ T3938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 3292.975322][ T3938] Call Trace: [ 3292.975331][ T3938] [ 3292.975340][ T3938] dump_stack_lvl+0xe8/0x150 [ 3292.975378][ T3938] should_fail_ex+0x40c/0x560 [ 3292.975409][ T3938] _copy_from_user+0x2d/0xb0 [ 3292.975441][ T3938] vmemdup_user+0x5e/0xd0 [ 3292.975473][ T3938] map_get_next_key+0x1c3/0x610 [ 3292.975503][ T3938] ? bpf_lsm_bpf+0x9/0x20 [ 3292.975527][ T3938] ? security_bpf+0x7e/0x2d0 [ 3292.975561][ T3938] __sys_bpf+0xb83/0xd90 [ 3292.975597][ T3938] ? __pfx___sys_bpf+0x10/0x10 [ 3292.975636][ T3938] ? __fget_files+0x2a/0x420 [ 3292.975682][ T3938] ? ksys_write+0x242/0x270 [ 3292.975717][ T3938] ? __pfx_ksys_write+0x10/0x10 [ 3292.975755][ T3938] __x64_sys_bpf+0xba/0xd0 [ 3292.975780][ T3938] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3292.975804][ T3938] do_syscall_64+0x174/0x580 [ 3292.975835][ T3938] ? trace_irq_disable+0x3b/0x140 [ 3292.975862][ T3938] ? clear_bhb_loop+0x40/0x90 [ 3292.975888][ T3938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3292.975918][ T3938] RIP: 0033:0x7f6d2819de59 [ 3292.975939][ T3938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3292.975958][ T3938] RSP: 002b:00007f6d29031028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3292.975981][ T3938] RAX: ffffffffffffffda RBX: 00007f6d28425fa0 RCX: 00007f6d2819de59 [ 3292.975997][ T3938] RDX: 0000000000000020 RSI: 0000200000000b80 RDI: 0000000000000004 [ 3292.976012][ T3938] RBP: 00007f6d29031090 R08: 0000000000000000 R09: 0000000000000000 [ 3292.976026][ T3938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3292.976039][ T3938] R13: 00007f6d28426038 R14: 00007f6d28425fa0 R15: 00007f6d2854fa48 [ 3292.976071][ T3938] [ 3293.250353][ T3939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3293.259260][ T3939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3293.276257][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 3293.276274][ T29] audit: type=1326 audit(1784089610.378:11078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3840 comm="syz.0.10999" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2c59de59 code=0x7ffc0000 [ 3293.321342][ T29] audit: type=1326 audit(1784089610.378:11079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3840 comm="syz.0.10999" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2c59de59 code=0x7ffc0000 [ 3293.345796][ T29] audit: type=1326 audit(1784089610.378:11080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3840 comm="syz.0.10999" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fae2c59de59 code=0x7ffc0000 [ 3293.370238][ T29] audit: type=1326 audit(1784089610.378:11081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3840 comm="syz.0.10999" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2c59de59 code=0x7ffc0000 [ 3293.394702][ T29] audit: type=1326 audit(1784089610.378:11082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3840 comm="syz.0.10999" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2c59de59 code=0x7ffc0000 [ 3293.432135][ T29] audit: type=1326 audit(1784089610.378:11083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3840 comm="syz.0.10999" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fae2c59de59 code=0x7ffc0000 [ 3293.456649][ T29] audit: type=1326 audit(1784089610.378:11084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3840 comm="syz.0.10999" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2c59de59 code=0x7ffc0000 [ 3293.481114][ T29] audit: type=1326 audit(1784089610.378:11085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3840 comm="syz.0.10999" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2c59de59 code=0x7ffc0000 [ 3293.505619][ T29] audit: type=1326 audit(1784089610.378:11086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3840 comm="syz.0.10999" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fae2c59de59 code=0x7ffc0000 [ 3293.530077][ T29] audit: type=1326 audit(1784089610.378:11087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3840 comm="syz.0.10999" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2c59de59 code=0x7ffc0000 [ 3293.691794][T10825] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 3293.806168][ T3954] binder: 3951:3954 ioctl c0306201 0 returned -14 [ 3293.925375][ T3955] loop4: detected capacity change from 0 to 7 [ 3294.019850][ T5698] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 3294.034217][ T3952] binder: 3951:3952 ioctl c0306201 0 returned -14 [ 3294.257522][ T3955] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 3294.263174][ T3955] loop4: partition table partially beyond EOD, truncated [ 3294.272342][ T3955] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 3294.672476][ T3972] netlink: 'syz.1.11017': attribute type 1 has an invalid length. [ 3294.736709][ T3972] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3295.256865][T10825] usb 5-1: not running at top speed; connect to a high speed hub [ 3295.364854][ T5698] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 3295.375791][ T5698] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3295.386681][ T5698] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3295.396433][ T5698] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 3295.696986][T10825] usb 5-1: config 1 interface 0 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3295.706775][T10825] usb 5-1: config 1 interface 0 altsetting 7 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 3295.717485][T10825] usb 5-1: config 1 interface 0 has no altsetting 0 [ 3295.809393][ T5698] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 3295.818483][ T5698] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 3295.826580][ T5698] usb 3-1: Manufacturer: syz [ 3295.852718][ T5698] usb 3-1: config 0 descriptor?? [ 3295.869223][ T4001] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11023'. [ 3295.884712][ T4001] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11023'. [ 3295.937168][T10825] usb 5-1: language id specifier not provided by device, defaulting to English [ 3296.601996][T10825] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3296.611117][T10825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3296.671074][ T4022] binder: 4021:4022 ioctl c0306201 0 returned -14 [ 3296.695434][T10825] usb 5-1: can't set config #1, error -71 [ 3296.704861][T10825] usb 5-1: USB disconnect, device number 54 [ 3296.939406][ T4030] loop4: detected capacity change from 0 to 7 [ 3296.988390][ T4030] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 3296.993770][ T4030] loop4: partition table partially beyond EOD, truncated [ 3297.004786][ T4030] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 3297.031485][ T5698] appleir 0003:05AC:8243.004D: unknown main item tag 0x0 [ 3297.044659][ T5698] appleir 0003:05AC:8243.004D: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 3297.422555][ T4044] binder: 4021:4044 ioctl c0306201 0 returned -14 [ 3304.649985][ C1] sched: DL replenish lagged too much [ 3352.903598][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 3352.963294][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 3389.862419][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 3389.923847][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 3408.771436][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 3408.778439][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P4043/1:b..l [ 3408.787276][ C1] rcu: (detected by 1, t=10502 jiffies, g=392593, q=1570 ncpus=2) [ 3408.795209][ C1] task:fido_id state:R running task stack:26920 pid:4043 tgid:4043 ppid:19840 task_flags:0x400000 flags:0x00080800 [ 3408.810069][ C1] Call Trace: [ 3408.813380][ C1] [ 3408.816345][ C1] __schedule+0x17d9/0x56c0 [ 3408.820932][ C1] ? __lock_acquire+0x683/0x2cf0 [ 3408.825921][ C1] ? __pfx___schedule+0x10/0x10 [ 3408.830813][ C1] ? __lock_acquire+0x683/0x2cf0 [ 3408.835812][ C1] preempt_schedule_irq+0x4d/0xa0 [ 3408.840884][ C1] irqentry_exit+0x14f/0x8f0 [ 3408.845515][ C1] ? trace_irq_disable+0x3b/0x140 [ 3408.850578][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3408.856593][ C1] RIP: 0010:lock_acquire+0x221/0x350 [ 3408.861917][ C1] Code: ff ff ff e8 61 1f 2d 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 4b 7a ca 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 98 e9 b8 [ 3408.881558][ C1] RSP: 0018:ffffc9000391f140 EFLAGS: 00000282 [ 3408.887663][ C1] RAX: f049fac335268900 RBX: 0000000000000000 RCX: 0000000000000046 [ 3408.895663][ C1] RDX: 00000000a69b4a9e RSI: ffffffff8e4b02bd RDI: ffffffff8c4bd980 [ 3408.903667][ C1] RBP: ffffffff8176f27f R08: ffffffff8176f27f R09: 0000000000000000 [ 3408.911756][ C1] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: 0000000000000002 [ 3408.919765][ C1] R13: ffffffff8eb59c60 R14: 0000000000000000 R15: 0000000000000246 [ 3408.927774][ C1] ? unwind_next_frame+0x8f/0x2550 [ 3408.932930][ C1] ? unwind_next_frame+0x8f/0x2550 [ 3408.938083][ C1] ? kasan_save_free_info+0x40/0x50 [ 3408.943317][ C1] ? unwind_next_frame+0x8f/0x2550 [ 3408.948465][ C1] unwind_next_frame+0xac/0x2550 [ 3408.953433][ C1] ? unwind_next_frame+0x8f/0x2550 [ 3408.958587][ C1] ? kasan_save_track+0x3e/0x80 [ 3408.963468][ C1] ? unwind_next_frame+0x8f/0x2550 [ 3408.968608][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 3408.974796][ C1] arch_stack_walk+0x11b/0x150 [ 3408.979597][ C1] ? kasan_save_free_info+0x40/0x50 [ 3408.984826][ C1] stack_trace_save+0xa9/0x100 [ 3408.989630][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 3408.995044][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 3409.000296][ C1] ? __lock_acquire+0x683/0x2cf0 [ 3409.005281][ C1] kasan_save_track+0x3e/0x80 [ 3409.009997][ C1] ? kasan_save_track+0x3e/0x80 [ 3409.014900][ C1] ? kasan_save_free_info+0x40/0x50 [ 3409.020194][ C1] kasan_save_free_info+0x40/0x50 [ 3409.025258][ C1] __kasan_slab_free+0x5c/0x80 [ 3409.030069][ C1] kmem_cache_free_bulk+0x669/0x1180 [ 3409.035459][ C1] mt_destroy_walk+0x144/0x810 [ 3409.040279][ C1] __mt_destroy+0x1c2/0x280 [ 3409.044818][ C1] exit_mmap+0x4d7/0x9f0 [ 3409.049105][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 3409.053937][ C1] ? __pfx_exit_aio+0x10/0x10 [ 3409.058660][ C1] ? arch_uprobe_clear_state+0x1c8/0x240 [ 3409.064340][ C1] ? uprobe_clear_state+0x2ac/0x3e0 [ 3409.069590][ C1] __mmput+0x118/0x420 [ 3409.073714][ C1] setup_new_exec+0x30d/0x360 [ 3409.078469][ C1] load_elf_binary+0xbcf/0x2950 [ 3409.083362][ C1] ? __lock_acquire+0x683/0x2cf0 [ 3409.088347][ C1] ? load_elf_binary+0x9b1/0x2950 [ 3409.093425][ C1] ? load_misc_binary+0x10f/0xc90 [ 3409.098481][ C1] ? lock_acquire+0x106/0x350 [ 3409.103213][ C1] ? __pfx_load_elf_binary+0x10/0x10 [ 3409.108547][ C1] bprm_execve+0x9c7/0x1630 [ 3409.113103][ C1] ? __pfx_bprm_execve+0x10/0x10 [ 3409.118091][ C1] do_execveat_common+0x4f4/0x670 [ 3409.123165][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3409.129264][ C1] __x64_sys_execve+0x97/0xc0 [ 3409.133986][ C1] do_syscall_64+0x174/0x580 [ 3409.138652][ C1] ? trace_irq_disable+0x3b/0x140 [ 3409.143724][ C1] ? clear_bhb_loop+0x40/0x90 [ 3409.148454][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3409.154391][ C1] RIP: 0033:0x7fbea12f2107 [ 3409.158840][ C1] RSP: 002b:00007ffe2953b688 EFLAGS: 00000206 ORIG_RAX: 000000000000003b [ 3409.167298][ C1] RAX: ffffffffffffffda RBX: 000056115a57b140 RCX: 00007fbea12f2107 [ 3409.175306][ C1] RDX: 000056118e5a50e0 RSI: 00007ffe2953b7a0 RDI: 00007ffe2953bfa0 [ 3409.183311][ C1] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 3409.191311][ C1] R10: 0000000000000008 R11: 0000000000000206 R12: 000056118e5a50e0 [ 3409.199311][ C1] R13: 00007ffe2953b7a0 R14: 000000000000000d R15: 0000000000000009 [ 3409.207336][ C1] [ 3409.210383][ C1] rcu: rcu_preempt kthread starved for 5640 jiffies! g392593 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 3409.221607][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 3409.231616][ C1] rcu: RCU grace-period kthread stack dump: [ 3409.237535][ C1] task:rcu_preempt state:R running task stack:27496 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 3409.251098][ C1] Call Trace: [ 3409.254402][ C1] [ 3409.257360][ C1] __schedule+0x17d9/0x56c0 [ 3409.261935][ C1] ? __pfx___schedule+0x10/0x10 [ 3409.266846][ C1] ? schedule+0x90/0x2b0 [ 3409.271153][ C1] schedule+0x164/0x2b0 [ 3409.275374][ C1] schedule_timeout+0x152/0x2c0 [ 3409.280263][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 3409.285679][ C1] ? __pfx_process_timeout+0x10/0x10 [ 3409.291016][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 3409.296865][ C1] ? prepare_to_swait_event+0x322/0x350 [ 3409.302462][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 3409.307374][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 3409.313583][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 3409.318910][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 3409.324169][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 3409.330029][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 3409.334676][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 3409.339920][ C1] ? __kthread_parkme+0x71/0x1f0 [ 3409.344906][ C1] ? __kthread_parkme+0x196/0x1f0 [ 3409.349983][ C1] kthread+0x388/0x470 [ 3409.354104][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 3409.359344][ C1] ? __pfx_kthread+0x10/0x10 [ 3409.363985][ C1] ret_from_fork+0x514/0xb70 [ 3409.368629][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 3409.373793][ C1] ? __switch_to+0xc89/0x1420 [ 3409.378508][ C1] ? __pfx_kthread+0x10/0x10 [ 3409.383138][ C1] ret_from_fork_asm+0x1a/0x30 [ 3409.387946][ C1] [ 3409.390994][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 3409.397337][ C1] Sending NMI from CPU 1 to CPUs 0: [ 3409.402579][ C0] NMI backtrace for cpu 0 [ 3409.402599][ C0] CPU: 0 UID: 0 PID: 3227 Comm: kworker/R-bat_e Tainted: G L syzkaller #0 PREEMPT(full) [ 3409.402635][ C0] Tainted: [L]=SOFTLOCKUP [ 3409.402646][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 3409.402663][ C0] Workqueue: bat_events batadv_tt_purge [ 3409.402765][ C0] RIP: 0010:__lock_acquire+0x12c/0x2cf0 [ 3409.402798][ C0] Code: f5 28 5c 8f 48 0f af f0 85 db 0f 85 58 01 00 00 85 ed 0f 84 50 01 00 00 83 fd 31 0f 83 07 01 00 00 48 83 bc 24 20 01 00 00 00 <0f> 84 38 01 00 00 48 8d 0c ad 00 00 00 00 48 01 e9 41 8b 84 ce 98 [ 3409.402815][ C0] RSP: 0018:ffffc90000006890 EFLAGS: 00000046 [ 3409.402830][ C0] RAX: 000000000000e407 RBX: 0000000000000000 RCX: ffffffff94156510 [ 3409.402843][ C0] RDX: 0000000000000000 RSI: 000000000000091f RDI: 0000000000000001 [ 3409.402855][ C0] RBP: 0000000000000004 R08: 0000000000000001 R09: 0000000000000001 [ 3409.402866][ C0] R10: 0000000000000000 R11: ffff8880540fa2c0 R12: 0000000000000000 [ 3409.402878][ C0] R13: 0000000000000000 R14: ffff888032af3e00 R15: 0000000000000046 [ 3409.402890][ C0] FS: 0000000000000000(0000) GS:ffff888124f56000(0000) knlGS:0000000000000000 [ 3409.402905][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3409.402918][ C0] CR2: 00007fb62a997ff8 CR3: 000000007c0e6000 CR4: 00000000003526f0 [ 3409.402934][ C0] Call Trace: [ 3409.402942][ C0] [ 3409.402949][ C0] ? __lock_acquire+0x683/0x2cf0 [ 3409.402977][ C0] ? __lock_acquire+0x683/0x2cf0 [ 3409.403004][ C0] ? __lock_acquire+0x683/0x2cf0 [ 3409.403030][ C0] ? advance_sched+0xc2/0xc80 [ 3409.403052][ C0] lock_acquire+0x106/0x350 [ 3409.403075][ C0] ? advance_sched+0xc2/0xc80 [ 3409.403095][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 3409.403119][ C0] _raw_spin_lock+0x2e/0x40 [ 3409.403141][ C0] ? advance_sched+0xc2/0xc80 [ 3409.403159][ C0] advance_sched+0xc2/0xc80 [ 3409.403181][ C0] ? __pfx_advance_sched+0x10/0x10 [ 3409.403201][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 3409.403221][ C0] ? __pfx_advance_sched+0x10/0x10 [ 3409.403240][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 3409.403267][ C0] hrtimer_interrupt+0x448/0x910 [ 3409.403299][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 3409.403319][ C0] sysvec_apic_timer_interrupt+0x52/0xc0 [ 3409.403346][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3409.403366][ C0] RIP: 0010:deref_stack_reg+0x196/0x220 [ 3409.403386][ C0] Code: 46 49 8d 40 08 4c 39 e0 0f 97 c1 4c 39 f0 0f 96 c0 20 c8 3c 01 75 30 4c 89 c7 49 89 f7 e8 12 07 00 00 49 89 c6 48 8b 5c 24 08 <48> 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 24 e2 bc 00 [ 3409.403401][ C0] RSP: 0018:ffffc90000006e38 EFLAGS: 00000202 [ 3409.403417][ C0] RAX: ffff888057e3a698 RBX: ffffc90000006f68 RCX: 0000000000000001 [ 3409.403430][ C0] RDX: ffffc90000006f68 RSI: dffffc0000000000 RDI: ffffc90000007fe8 [ 3409.403445][ C0] RBP: ffffc90000000000 R08: ffffc90000007fe8 R09: 0000000000000000 [ 3409.403458][ C0] R10: ffffc90000006f78 R11: fffff52000000df1 R12: 1ffff92000000de6 [ 3409.403473][ C0] R13: 1ffff92000000de7 R14: ffff888057e3a698 R15: dffffc0000000000 [ 3409.403495][ C0] ? deref_stack_reg+0x18e/0x220 [ 3409.403515][ C0] unwind_next_frame+0x19bd/0x2550 [ 3409.403536][ C0] ? handle_softirqs+0x225/0x840 [ 3409.403556][ C0] ? unwind_next_frame+0x8f/0x2550 [ 3409.403576][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 3409.403612][ C0] arch_stack_walk+0x11b/0x150 [ 3409.403632][ C0] ? do_softirq+0x76/0xd0 [ 3409.403652][ C0] stack_trace_save+0xa9/0x100 [ 3409.403673][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 3409.403696][ C0] ? NF_HOOK+0xa2/0x6e0 [ 3409.403752][ C0] kasan_save_track+0x3e/0x80 [ 3409.403775][ C0] ? kasan_save_track+0x3e/0x80 [ 3409.403802][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 3409.403825][ C0] ? kmem_cache_alloc_noprof+0x2a0/0x5f0 [ 3409.403845][ C0] ? skb_clone+0x212/0x3a0 [ 3409.403863][ C0] ? br_flood+0x616/0x8d0 [ 3409.403905][ C0] ? br_handle_frame_finish+0x1175/0x1990 [ 3409.403931][ C0] ? br_nf_hook_thresh+0x3dd/0x4c0 [ 3409.403957][ C0] ? br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 3409.403986][ C0] ? br_nf_pre_routing_ipv6+0x382/0x6f0 [ 3409.404014][ C0] ? br_handle_frame+0x127f/0x1510 [ 3409.404040][ C0] ? __netif_receive_skb_core+0x989/0x30b0 [ 3409.404062][ C0] ? process_backlog+0x706/0x1860 [ 3409.404085][ C0] ? __napi_poll+0xaa/0x330 [ 3409.404106][ C0] ? net_rx_action+0x61d/0xf50 [ 3409.404128][ C0] ? handle_softirqs+0x225/0x840 [ 3409.404166][ C0] __kasan_slab_alloc+0x6c/0x80 [ 3409.404191][ C0] kmem_cache_alloc_noprof+0x2a0/0x5f0 [ 3409.404211][ C0] ? kmem_cache_alloc_noprof+0x150/0x5f0 [ 3409.404231][ C0] ? skb_clone+0x212/0x3a0 [ 3409.404247][ C0] ? skb_clone+0x212/0x3a0 [ 3409.404266][ C0] skb_clone+0x212/0x3a0 [ 3409.404284][ C0] br_flood+0x616/0x8d0 [ 3409.404315][ C0] br_handle_frame_finish+0x1175/0x1990 [ 3409.404342][ C0] ? kasan_save_track+0x4f/0x80 [ 3409.404368][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 3409.404398][ C0] ? ip6t_do_table+0x1d1/0x15b0 [ 3409.404438][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 3409.404458][ C0] ? nf_hook_slow+0x176/0x220 [ 3409.404481][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 3409.404508][ C0] br_nf_hook_thresh+0x3dd/0x4c0 [ 3409.404534][ C0] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 3409.404578][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 3409.404605][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 3409.404631][ C0] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 3409.404648][ C0] ? lock_acquire+0x106/0x350 [ 3409.404673][ C0] br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 3409.404702][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 3409.404732][ C0] br_nf_pre_routing_ipv6+0x382/0x6f0 [ 3409.404760][ C0] ? br_nf_pre_routing_ipv6+0x43d/0x6f0 [ 3409.404794][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 3409.404823][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 3409.404859][ C0] ? br_nf_pre_routing+0x720/0x14b0 [ 3409.404888][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 3409.404913][ C0] br_handle_frame+0x127f/0x1510 [ 3409.404943][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 3409.404970][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 3409.404996][ C0] ? kasan_quarantine_put+0xbb/0x1f0 [ 3409.405017][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 3409.405045][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 3409.405070][ C0] __netif_receive_skb_core+0x989/0x30b0 [ 3409.405097][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 3409.405124][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 3409.405146][ C0] ? ip6_rcv_finish+0x265/0x280 [ 3409.405174][ C0] ? NF_HOOK+0x336/0x3c0 [ 3409.405202][ C0] ? process_backlog+0x3c3/0x1860 [ 3409.405228][ C0] ? process_backlog+0x3c3/0x1860 [ 3409.405250][ C0] ? process_backlog+0x3c3/0x1860 [ 3409.405275][ C0] process_backlog+0x706/0x1860 [ 3409.405299][ C0] ? __lock_acquire+0x683/0x2cf0 [ 3409.405324][ C0] ? process_backlog+0x3c3/0x1860 [ 3409.405354][ C0] __napi_poll+0xaa/0x330 [ 3409.405377][ C0] net_rx_action+0x61d/0xf50 [ 3409.405405][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 3409.405441][ C0] handle_softirqs+0x225/0x840 [ 3409.405463][ C0] ? do_softirq+0x76/0xd0 [ 3409.405484][ C0] ? batadv_tt_local_purge+0x2c1/0x340 [ 3409.405506][ C0] do_softirq+0x76/0xd0 [ 3409.405525][ C0] [ 3409.405531][ C0] [ 3409.405538][ C0] __local_bh_enable_ip+0xf8/0x130 [ 3409.405559][ C0] batadv_tt_local_purge+0x2c1/0x340 [ 3409.405584][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 3409.405604][ C0] batadv_tt_purge+0x35/0xa10 [ 3409.405627][ C0] ? rcu_is_watching+0x15/0xb0 [ 3409.405655][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 3409.405674][ C0] process_scheduled_works+0xa8e/0x14e0 [ 3409.405706][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 3409.405724][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 3409.405748][ C0] ? assign_work+0x3af/0x5d0 [ 3409.405768][ C0] rescuer_thread+0x7b6/0x10b0 [ 3409.405799][ C0] ? rescuer_thread+0xb8/0x10b0 [ 3409.405829][ C0] kthread+0x388/0x470 [ 3409.405853][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 3409.405875][ C0] ? __pfx_kthread+0x10/0x10 [ 3409.405898][ C0] ret_from_fork+0x514/0xb70 [ 3409.405925][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 3409.405949][ C0] ? __switch_to+0xc89/0x1420 [ 3409.405971][ C0] ? __pfx_kthread+0x10/0x10 [ 3409.405996][ C0] ret_from_fork_asm+0x1a/0x30 [ 3409.406019][ C0]