last executing test programs: 3m5.601820505s ago: executing program 1 (id=3163): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040), 0x4) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r3 = fcntl$dupfd(r2, 0x406, r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e000000200"/30], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a0000008700", @ANYRES32, @ANYRESHEX=r2], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) setsockopt$inet6_buf(r2, 0x29, 0x39, 0x0, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, 0x0, 0x8000000000005, 0x4002) write$binfmt_elf64(r3, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) r5 = openat$kvm(0x0, &(0x7f0000000240), 0x181002, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000500)={0x2, 0x108000}) syz_kvm_setup_cpu$x86(r6, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r6, 0x4010ae68, &(0x7f0000000040)={0xeeee0000, 0x1000, 0x1}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r7, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r7, 0x40146f2c, &(0x7f0000000000)={0x2, 0x1, 0x3, 0x2000, 0x4}) syz_emit_vhci(0x0, 0xf) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) openat$cgroup_int(r3, 0x0, 0x2, 0x0) r8 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x3e, 0x800000000004, @tid=r8}, 0x0) 3m4.576904033s ago: executing program 1 (id=3166): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000080)={0x0, 0x9, 0x1, [0x2, 0x1, 0x65b6, 0xffffffff, 0x8], [0x401, 0x38f1, 0xb07, 0x1000, 0x5d4b, 0xfe, 0x5, 0x0, 0xa3d, 0x5, 0x7, 0xffffc00000000000, 0x8, 0xb7c, 0x4062, 0x3f3, 0xf, 0x0, 0x6, 0x8, 0x7, 0x8, 0x8, 0x1323fd51, 0x8, 0x1, 0xfffffffffffffff9, 0xffffffff, 0x207, 0xc1, 0x7, 0x7ff, 0x8000000000000000, 0x3, 0x7fff, 0x8, 0xfffffffeffffffff, 0xea3, 0x2, 0x0, 0x7fffffff, 0x4, 0xff, 0x3, 0x8001, 0x1, 0x10001, 0x3ff, 0x905e, 0x2, 0x592c, 0x6, 0xffffffff, 0x70bd, 0x8001, 0x9, 0x1000, 0x4073d62a, 0x825283f, 0x4, 0x10, 0x8000000000000001, 0xffffffff00000000, 0xb22, 0xf5, 0x0, 0xffffffff80000001, 0x400, 0x1, 0x63, 0x20004000, 0x6, 0x7, 0x2, 0x6, 0x37ea, 0xd6e8, 0x8, 0x3, 0xdc91, 0x6, 0xfffffffffffff520, 0x100000000, 0x6, 0x6, 0x5, 0x400, 0x401, 0x2298, 0x10001, 0x3, 0x8000000000000001, 0xff, 0x7, 0x3855, 0xf, 0x80000000, 0xfffffffffffffff9, 0xfffffffffffffff0, 0x0, 0x9, 0x6, 0x8, 0x7fffffffffffffff, 0x4, 0x3, 0x45208b8f, 0x3, 0x10000, 0x8, 0xfffffffffffffffd, 0xe099, 0x9, 0x2, 0x0, 0xffffffff, 0x3, 0x8, 0x2, 0x0, 0x7]}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) 3m4.456871798s ago: executing program 1 (id=3168): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3f, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000003c0)={r2, 0x0, 0x25, 0x7, @void}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, 0x0, {}, {0xafabc05531515610, 0xfff3}, {0xd, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x10005}, 0x4008054) setsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f0000000040)={@remote}, 0x14) timer_settime(r1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) readv(r5, &(0x7f00000018c0), 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000042f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) r8 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000000)=0xd) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000300)=0x3) socket$nl_generic(0x10, 0x3, 0x10) 3m3.96316409s ago: executing program 1 (id=3173): syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x2008088, 0x0, 0xff, 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) readv(r0, &(0x7f0000000980)=[{&(0x7f0000000000)=""/58, 0x3a}], 0x1) write$P9_RMKNOD(r0, &(0x7f0000000080)={0x14, 0x13, 0x1, {0x8, 0x0, 0x2}}, 0x14) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x1, 0xa, 0x606, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x4040040) ptrace(0x10, r2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r4 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000d40)=[{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000012c0)="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", 0xfb0}], 0x1, 0x0, 0x0, 0x20000015}], 0x1, 0x4814) recvmmsg(r4, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000007340)=[{&(0x7f0000002280)=""/4109, 0x100d}], 0x1}, 0x4}], 0x1, 0x400101c3, 0x0) ptrace(0x11, r2) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) move_mount(r5, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 3m3.692946002s ago: executing program 1 (id=3174): mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) unshare(0x2a020400) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="4d3a33166b6591f0440000000b06030000000000000000000200000605000100070000000900020073797a32000000001c0007800900120073797a31000000000900130073797a300000000007e17cb89774d24667c73a7c3a16e5f084"], 0x44}, 0x1, 0x0, 0x0, 0x44080}, 0x4000002) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x58, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x22c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0xff, 0xc, "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"}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_USERDATA={0xc5, 0xc, "a11011da546e6971a211ae5ded13e9fbde3f62a1b3da4eea348ba97934c3976a7dad8155cf9bfaf0beeb7902ec66fbc883bcb048e7770e8ed914dad52ee2d348b5c0efbe987dc57835db7a3f87cbc2dc06c5f8c2811dc5d34c94ffbc381e9c3dfbc54599a62fb6dfe3284a74f2f6263254963d100a4736d7a34920f4b4297a771aada2e8dcc7e122adb648758a71c80a82d0fb06da4e79f86b3f07c6d93d96d85013801ac13089c464f06dac8565af2be9a248ea39892a6e5c7a87643220308577"}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x2ac}, 0x1, 0x0, 0x0, 0x4000}, 0x8004000) 3m3.532772414s ago: executing program 1 (id=3175): syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x62, [{{0x9, 0x2, 0xfffffffffffffe8f}}]}}, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@my=0x0}) select(0x40, &(0x7f00000000c0)={0xc, 0x40, 0x800000000010001, 0x100000000, 0x0, 0x80000d, 0x6, 0x6a}, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@my=0x1, 0xfeffffff}, {@my=0x0, 0x7ffffb}, 0x400, "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"}, 0x418, 0x1}) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000015c0)=ANY=[@ANYBLOB="1201100300000020f3044d074000010203010902240001018130070904000902626e86a0a7bbee050001221104090581032000f00409"], &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00007af000/0x3000)=nil, &(0x7f00007fd000/0x800000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00007bc000/0x3000)=nil, &(0x7f0000a4a000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000180)={0x1}) ioctl$KVM_SET_PIT2(r4, 0x4070aea0, &(0x7f0000000340)={[{0x4fba, 0x7, 0xfd, 0x7, 0x98, 0xf6, 0x1, 0x1, 0x9, 0x2, 0x5, 0x6, 0x8}, {0x10, 0x401, 0xf2, 0xa6, 0x7, 0x6, 0x31, 0x15, 0x1, 0x7, 0x7f, 0xd, 0x201}, {0x80, 0x4c3e, 0x7f, 0xc, 0x4c, 0x8, 0x4, 0x4, 0x1b, 0x7, 0x0, 0x6, 0x6}], 0x8}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r5, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x2, 0x40000041}) getsockopt$inet6_int(r1, 0x29, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4) r6 = dup3(r2, r1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) open$dir(&(0x7f0000000400)='./file0\x00', 0x40, 0x117) truncate(&(0x7f0000000000)='./file0\x00', 0x0) recvfrom$inet6(r6, &(0x7f00000002c0)=""/180, 0xb4, 0x10022, &(0x7f0000000380)={0xa, 0x4e22, 0x10001, @local, 0x3}, 0x1c) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) 3m3.103432867s ago: executing program 32 (id=3175): syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x62, [{{0x9, 0x2, 0xfffffffffffffe8f}}]}}, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@my=0x0}) select(0x40, &(0x7f00000000c0)={0xc, 0x40, 0x800000000010001, 0x100000000, 0x0, 0x80000d, 0x6, 0x6a}, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@my=0x1, 0xfeffffff}, {@my=0x0, 0x7ffffb}, 0x400, "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"}, 0x418, 0x1}) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000015c0)=ANY=[@ANYBLOB="1201100300000020f3044d074000010203010902240001018130070904000902626e86a0a7bbee050001221104090581032000f00409"], &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00007af000/0x3000)=nil, &(0x7f00007fd000/0x800000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00007bc000/0x3000)=nil, &(0x7f0000a4a000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000180)={0x1}) ioctl$KVM_SET_PIT2(r4, 0x4070aea0, &(0x7f0000000340)={[{0x4fba, 0x7, 0xfd, 0x7, 0x98, 0xf6, 0x1, 0x1, 0x9, 0x2, 0x5, 0x6, 0x8}, {0x10, 0x401, 0xf2, 0xa6, 0x7, 0x6, 0x31, 0x15, 0x1, 0x7, 0x7f, 0xd, 0x201}, {0x80, 0x4c3e, 0x7f, 0xc, 0x4c, 0x8, 0x4, 0x4, 0x1b, 0x7, 0x0, 0x6, 0x6}], 0x8}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r5, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x2, 0x40000041}) getsockopt$inet6_int(r1, 0x29, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4) r6 = dup3(r2, r1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) open$dir(&(0x7f0000000400)='./file0\x00', 0x40, 0x117) truncate(&(0x7f0000000000)='./file0\x00', 0x0) recvfrom$inet6(r6, &(0x7f00000002c0)=""/180, 0xb4, 0x10022, &(0x7f0000000380)={0xa, 0x4e22, 0x10001, @local, 0x3}, 0x1c) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) 50.440762645s ago: executing program 3 (id=4005): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x5) r1 = socket$unix(0x1, 0x1, 0x0) semop(0x0, 0x0, 0x17) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_GETBMAPA(r3, 0xc020582c, &(0x7f0000000080)={0x5, 0x8710, 0x10, 0x9b6e, 0x96}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000013000100000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="000200000000000010001a800c000a80050009000000000014003500776c616e31"], 0x44}, 0x1, 0x0, 0x0, 0x54}, 0x0) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) 50.32679158s ago: executing program 3 (id=4008): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmmsg$inet(r0, &(0x7f0000001480)=[{{&(0x7f0000000100)={0x2, 0x10, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r0, &(0x7f0000000c80)="e8", 0x6200, 0x12007856, 0x0, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x2, 0x1000, 0x1}, 0x0, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) write$char_usb(r1, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x80801) chroot(0x0) umount2(0x0, 0x3) 50.218417305s ago: executing program 3 (id=4009): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x17, 0xa, 0x3, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000002380)) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) preadv2(r2, &(0x7f0000000340)=[{&(0x7f0000000200)=""/261, 0x105}], 0x1, 0x102, 0xfffffffd, 0x3b) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x88, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x370}]}, 0x34}}, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f00000005c0), 0x10) recvmmsg(r8, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000480)=[{0x0, 0x38}, {&(0x7f0000000940)=""/161, 0xa1}], 0x2}, 0x9}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001380), 0x4) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001440)={0x0, 0x4, 0x8}, 0xc) r11 = fsmount(0xffffffffffffffff, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001500)={{0x1, 0xffffffffffffffff}, &(0x7f0000001480), &(0x7f00000014c0)}, 0x20) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r14 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r14, r13, &(0x7f00000000c0)=0x5a, 0x5) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000001540)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x11, 0x26, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @exit, @btf_id={0x18, 0xb, 0x3, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000380)=""/4096, 0x41000, 0x8, '\x00', r5, 0x0, r9, 0x8, &(0x7f00000013c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001400)={0x1, 0x0, 0x40, 0x356}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000015c0)=[r10, r11, r12, r13, r15], &(0x7f0000001600)=[{0x5, 0x2, 0x4}, {0x4, 0x2, 0xf}, {0x4, 0x4, 0x3, 0x8}, {0x5, 0x4, 0x1, 0xa}], 0x10, 0x100}, 0x94) 49.828157915s ago: executing program 0 (id=4011): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) r1 = getpid() syz_emit_ethernet(0x7e, &(0x7f0000000c80)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd604dd31800480600fc010000000000000000000000000002fe8000000000000000000000000000aa08004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="2002000c90780000fe07f9893138ee051600d11fdb97c5a7d45f05659b98000000fffffff6000009060000000200000080fe14f988ff384d5e35c7420400000000000000fd000000"], 0x0) r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYRES16=r2], 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000900)={0x44, &(0x7f00000003c0)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$sierra_net(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000001c0)={0x0, 0x6, 0x3, "44175a"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_clone(0xb2168400, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r6, &(0x7f0000000840)=[{&(0x7f0000000000)="580000001400ad", 0x7}, {&(0x7f0000000200)="6bdffc7c820612911a8b98a56d63c896b5d43121c06b060c5c8ad4a18d751b4aeebaf542b59edc24ee964376dbf954380a0bb3cfc1e27242c82de17be409c9aa2344920b52a24edf010000000000000024", 0x51}, {&(0x7f0000000580)="7b00d9d94a99b56c3adc8d5844e932bb65a057dbe0037b23962de01dd193a0b2091d1c7bd939da0f5354c59601bcd0270b2aab42a0ca8cb4fc8dc7ce501d64942493e7abc341e9ff8434d451c2821db3e736889ab3", 0x55}, {&(0x7f0000000180)="6645ef144b9f1f195dc4a2b648f2464f5498473bcf6e95140a6e3a928dbe0bf4f9796c58f336ea", 0x27}, {&(0x7f0000000600)="779e9e1523f8782bd4102f62bf71e17a1065d44f4fdeb4232c4a442adecc77b132366c212d06673258cea44f8aaca2e1912397936198ac1f3c775e456d1b920475a17be51b8557585502efd9b678367e51710876757829c00a41ef09ff9bdd3fd5025ab87476c25afb45545bba75ca0fe7e79832328f660d36ed3c791ee8420188a658ed316d5634017da85f7ffe50ed9924a86f405d26d41f440e7151f58686b5833c174ebe1fbe78571e2c12d185448347eb7922bb322f1fb3b0fc25669dd4d619ab7adb91f8640171a2d4525b617c8bce417929274059d89baf22accc19f1e2e423302a96f8e4570000000000", 0xee}, {&(0x7f0000000e80)="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", 0xe3f}], 0x6) r7 = socket$netlink(0x10, 0x3, 0x15) splice(r5, 0x0, r7, 0x0, 0x80000001, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f0000000800)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r9, &(0x7f0000000a80)={0x14, &(0x7f0000000980)={0x0, 0x22, 0x90, {0x90, 0x30, "82562634e3c662baf4a1893befe36bff0937a16bc9047276863a23d07e0e0f99fc3dfb2f1175c4d662e48760155926980945730a28197f8723e3c732fb1639891b21ddc2e57aaae152c945cbcb8e3a1465ca09d3d0217237bc3885b68e9e1f9d15ea2d305d985177431cf043fdb7201c553a5abb6a89ce6e75bd90b5da1458c3aa28f626d58e43734a1bf4d4c6fa"}}, &(0x7f0000000a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x200a}}}, &(0x7f0000000c40)={0x2c, &(0x7f0000000ac0)=ANY=[@ANYBLOB="20165b0000002444d694a2721c4d30a42b8361504fd5b78e90aa00a135e094284aa9e162728575da33fdf1e0f24b8b1d8169aad3423bc1f0cf5721dc1fafa7294f11035e85b7983dbe1c75418ae44bdd5f3c57a81ea8fd6c6a60b8e3c907126f6c"], &(0x7f0000000b40)={0x0, 0xa, 0x1, 0xf8}, &(0x7f0000000b80)={0x0, 0x8, 0x1}, &(0x7f0000000bc0)={0xc0, 0x5, 0x6, "f0e7360fe803"}, &(0x7f0000000c00)={0x40, 0x5, 0x1, "92"}}) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x240, 0x240, 0x0, 0x350, 0x370, 0x350, 0x4, 0x0, {[{{@arp={@private, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_batadv\x00', 'batadv0\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "bc2e329885ea3654891fbae8c6c66e07212432bde429bcda7deb48d85c6f5e269c2021c8f8dc09af0b3f2e10e8ac79cc67e264613c4be6838ee2daacf7926a6e"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr, @broadcast}}}, {{@arp={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0\x00', 'veth0_to_bond\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) r10 = syz_pidfd_open(r4, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r10, 0xf517, 0x0) setns(r10, 0x24020000) unshare(0x100000) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r5, &(0x7f0000000540)={0xa, 0x4, 0xfa00, {r12}}, 0xc) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 49.331060138s ago: executing program 3 (id=4013): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0x5) r1 = syz_usb_connect(0x3, 0x371, &(0x7f0000000280)=ANY=[@ANYRES64=r0], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b0400000000000000000200000628000480240001800b0001006578746864720000140002800800064000000001080005400000000009000100ffffffff000000000900020073797a3200000000140000001100010000000000000000000300000a"], 0x7c}, 0x1, 0x0, 0x0, 0x10010}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) r4 = open(&(0x7f00000003c0)='.\x00', 0x0, 0x166) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = socket$igmp(0x2, 0x3, 0x2) r6 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r0, 0x1, 0x4) fchdir(r7) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2200, 0x10c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r8}, 0x8) setsockopt$MRT_FLUSH(r5, 0x0, 0xd1, &(0x7f0000000000)=0xfd, 0x4) fcntl$lock(r4, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r4, 0xa9525000) chmod(&(0x7f0000000040)='.\x00', 0x35e) mkdir(0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) 48.084515861s ago: executing program 5 (id=4019): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34611d41, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000052b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005468a9fe52386e52000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000da0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000f7ffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bb33ea699a80e3f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, &(0x7f0000000200), &(0x7f00000002c0)=0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) dup2(r2, r0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x80, 0x2, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x8}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x80}, 0x1, 0x0, 0x0, 0x4811}, 0x8000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="6c0000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c00188008000140a080000008000240000000020800034000000002240001801400018008000100e000000108000200e00000010c0002800500010000000000040016404400108008000140fffff800080002400000000108000140ffff1fc508000140000006870800014000000004080003"], 0xe0}, 0x1, 0x0, 0x0, 0x4040814}, 0x0) 47.649793314s ago: executing program 0 (id=4020): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x6, 0x4, 0x7ffe, 0x8a, 0x260c0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1800}, 0x50) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$packet(0x11, 0x3, 0x300) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a"], 0xe8}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000180)={'tunl0\x00', r5, 0x7800, 0x4e, 0x0, 0x2, {{0x12, 0x4, 0x2, 0x9, 0x48, 0x68, 0x0, 0x5, 0x2f, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x19}, {[@cipso={0x86, 0xc, 0x1, [{0x5, 0x6, "de7ac6d9"}]}, @ssrr={0x89, 0x13, 0x82, [@remote, @multicast2, @dev={0xac, 0x14, 0x14, 0x27}, @private=0xa010100]}, @cipso={0x86, 0x15, 0x3, [{0x5, 0xf, "6f055d82853e6c2a40d6ae74aa"}]}]}}}}}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xb, 0xb}, {0x1, 0xb}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x404c800}, 0x4000000) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05032200d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r9, 0x29, 0x18, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0xe4be, 0x3, 0x80, 0xffffa8fa}]}) 47.469041749s ago: executing program 0 (id=4021): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) r1 = socket(0x1d, 0x2, 0x6) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r4, 0x704c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x10000000) sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @local, @broadcast}}}], 0x20}, 0x200000e0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x6a, 0x1, 0x0, &(0x7f0000000640)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io$sierra_net(r5, 0x0, &(0x7f0000002040)={0x1c, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_RUN(r8, 0xae80, 0x0) 47.118417838s ago: executing program 5 (id=4025): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0xdb, @empty, 0x8}}, 0xffb, 0x203, 0xffff18b6, 0x6, 0x330, 0x80000005, 0xdb}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c23, @empty}}, 0x2, 0x8}, 0x90) sendmsg$inet6(r1, &(0x7f0000000540)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8004, @loopback, 0x7fff}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)="f0", 0x1}], 0x1}, 0x400d4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0x42, @loopback, 0x8000}}, 0xabb6, 0x67, 0xa4f, 0xc4, 0xa, 0x0, 0xa9}, 0x9c) 46.984994796s ago: executing program 5 (id=4026): linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x200) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000008, 0x204031, 0xffffffffffffffff, 0xfc778000) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)=0x0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000280)={&(0x7f0000000200)="0253acf3f1af5a743ea133130c78d2f7e86d7c58b1b91a8c855c68704414500a3a8f40468400bb0535d0813d7f408b745148ea5e0d2fb941939d8ea1103895e6ad77f783", 0x44}) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000001b80)={&(0x7f0000000300)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1400000000000000000000003400000001"], 0x18}, 0x0) r2 = socket(0x2c, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) select(0x40, &(0x7f0000003cc0)={0x5, 0xfffffffffffffff9, 0x2, 0xfffffffffffffffa, 0xffffffff, 0x2, 0x1e545919}, &(0x7f0000003d00)={0x8, 0x9, 0x1, 0xd, 0x80, 0x4, 0x9, 0x100000000006}, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) r4 = syz_open_dev$amidi(&(0x7f0000000000), 0x7, 0x100) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f40)=[{{&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10, 0x0}}], 0x1, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x22882, 0x0) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) close(0x3) r9 = socket(0x2, 0x80805, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r10, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) umount2(&(0x7f00000002c0)='./file0\x00', 0x4) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r10, 0x84, 0x7a, &(0x7f0000000340)={r11, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r9, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x492492492492775, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000040)={r7, 0x6, 0x10}, 0xc) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000000180)={r4, &(0x7f0000000400)='\x02\x00\x00\x00\x00\f\xd3u\xe7g\xbf\xffr\x03\xcaGs\x0f\x87.\xd8\xc0\xaf\xb6\"X\xc0\xb4?\xe3d\x95\xc8z\xc09\x1f\t\xe3\xb9\xbb}]bOJ@&?\x0e\xf5\xf2\x8c\x0eRH6\xe8\x10\xc4q\xcf\x81\xe5\xd2\x8f4\xcd6\xe3\xaf\xb2\xb8\x80|\xbd\xa3\x8e\f\xbfF\x01\x9d>\x12\x00\x12\x9b\xc7h9<\xe9Q\xccg\x06\xa3\xb8\xcf\xd4\x05\x7f\x81\x00$\xf3\xa2\x156\x8c\xa6\xc5\xfa\xfa\xabP\x81\xa0\xdbQ\xb5\xdcZ/\xd8(\xe2\xd2r\xdcm \n\xc8\xfb\x1c\x9a\xba\xfd\x1a\xcb\xbc\x12O\x14', 0x400, &(0x7f00000000c0)={@_ha_fsid={[0x800, 0x5]}, {0x7, 0x1080, 0x6b71, 0x2}}, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0xfffffffe}) set_mempolicy(0x6005, &(0x7f00000004c0)=0x5, 0x7ff) 46.923199551s ago: executing program 5 (id=4027): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x8) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = fsopen(&(0x7f00000029c0)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) munlockall() (async) munlockall() setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) (async) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) 46.248227035s ago: executing program 3 (id=4032): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) syz_open_dev$vbi(&(0x7f0000000080), 0x0, 0x2) r1 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x155557f8}) syz_usb_control_io$uac3(r1, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000400)=ANY=[@ANYBLOB="200604000000e971ec7b9bb4a937b4c806e04f7f17ed0adb54f394f3abde2835514ea2a28ea22178c8691f1bb9fa1a5800ac02243498312fd5258e7dcde893586e995f0b09977b8b6eb7fb203c5745d0878dcc1ede01a9c4d8507b743730ce565e2848b51c011be6d5eb252c6b74a4a0199e1b4761b3c344f11ebb405a9ff4e856f27bad2b217772fd6a11377246d70d0631c2309f0981093658502b5bbf9d5e6ae48b0bea9021b1eabd5c2b97dce13714c9b4ca8290154ac3366d46b8dd498a5f0e1905cb429704a8ade8f252b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000b40)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x10, 0x6, 0x16f8, 0x438, 0x1538, 0xf0, 0x438, 0x1538, 0x1628, 0x16f8, 0x1628, 0x1628, 0x1628, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000000000000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, @ipv4=@empty, 0xe, 0x3f}}}, {{@ipv6={@dev, @loopback, [0x0, 0x0, 0x0, 0xffffffff], [], 'pimreg0\x00', 'veth1_macvtap\x00', {0xff}}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x7}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @private2, @loopback, @mcast2, @local, @private1, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @empty, @private1, @private1, @loopback, @loopback]}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x15}, [0xffffffff, 0x0, 0xff, 0xff000000], [0xff000000, 0x0, 0xff], 'syz_tun\x00', 'pimreg1\x00', {0xff}, {}, 0x2f, 0x81, 0x1, 0x8}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x1, 0x0, './cgroup.cpu/syz0\x00', 0xe, {0x6}}}]}, @common=@unspec=@MARK={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [], [0x0, 0xffffff00], 'bond_slave_1\x00', 'gretap0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@empty, 0x0, 0x29}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1758) 45.848641354s ago: executing program 5 (id=4035): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x29, 0x81, 0x1, 0x2, 0x58, @dev={0xfe, 0x80, '\x00', 0x3e}, @loopback, 0x8, 0x8, 0x101, 0xf8000000}}) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) syz_usbip_server_init(0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="02000000000000000082f4628b3763ef224100"/29, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000010000000100"/28], 0x50) r1 = fsopen(&(0x7f0000000140)='vxfs\x00', 0x0) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x18bdb, 0x325967a86616b452) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000680)={'#! ', './file0', [{0x20, '#! '}], 0xa, "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"}, 0x202) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x2, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) fallocate(r2, 0x3, 0x0, 0xffffffff000) r3 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0022ce474000000000000093a3f86480825714d38f5bfa77569322932334a43ca97afbe646a8e0b077af7ea3936d9142bbb652bfa52d455ecc7ae12dc1b259e805a56897f01820d032a77001d1b5824dbb857fc26cc73d71c3e8a23a29434557ef2e9ba7ea507075f20d7a0e9e95a8f98f26d9406fab1099de19c65492f095617a116e42fc1e4497af1f18aaeaffc48ae35f9ae667823a3083154a0e2301bc055b5a650000"], 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000640)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="000404000000e8c7d131"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xa8282, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r4, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001d00), 0x2e03, 0x0) ioctl$PTP_CLOCK_GETCAPS(r5, 0x43403d0e, &(0x7f0000001d40)) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000000000)={0x480000000, 0x101, 0x1}) ioctl$XFS_IOC_FSGETXATTRA(r1, 0x801c582d, &(0x7f00000000c0)) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x89, 0x0, &(0x7f00000000c0)=0xfffffffffffffde1) write$binfmt_misc(r6, &(0x7f0000000240), 0xfffffecc) socket$nl_route(0x10, 0x3, 0x0) 45.642061112s ago: executing program 4 (id=4036): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0xdb, @empty, 0x8}}, 0xffb, 0x203, 0xffff18b6, 0x6, 0x330, 0x80000005, 0xdb}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c23, @empty}}, 0x2, 0x8}, 0x90) sendmsg$inet6(r1, &(0x7f0000000540)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8004, @loopback, 0x7fff}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)="f0", 0x1}], 0x1}, 0x400d4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0x42, @loopback, 0x8000}}, 0xabb6, 0x67, 0xa4f, 0xc4, 0xa, 0x0, 0xa9}, 0x9c) 45.398738843s ago: executing program 4 (id=4037): r0 = fsopen(&(0x7f0000000300)='sysfs\x00', 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000040)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000340)={{r0}, r2, 0x0, @unused=[0x0, 0x101, 0x0, 0x8], @name="8a4376f597862aa8b1f10a58b9f7ee383ab24d6187795173d4bc72863b36369b2c591977a9b95700f7e547b07aff409cda5f35f5eeabe5b3a75176357bbeb64acf7cdcd3eec4635ed656262aa567cf198b4c9349e89df21fb8f1ecce1ab76315ff7fb25783c4d17d69b937d6c23351fa1496f6141e7bc9b234691819ab30377dee6bbc87155cd6b5df8f09260081cc4a39a2a0ba6695caf2311fb8f1dd5a831a4cfcc9b61a0ff1120408da792ceec43760e28312b975a96216597606c053626e138f1b3fc3562d58aa30ae39af280208659b874b8e49c26595b0f643b8af0e7d0370570dfe8900c28740a765fbd5fc1b69d40e931f888c32976e19d6ce5f3eaff1bd3369bb54ceed4a3ffee4b3dc66b7c135ccec27c039ddf791fc984ddfebaa26a584fb1b6d16510adf7c82758add3ccc6777d4c423a3ca2fde984f711d0ea17bcb9148bbd4605164edbc6e17745e41165d2422bc8500463f0d51add886daffc2d8cc95e3fd966784334c2352ab9da1af9844b2cf8080cfe79f3a9c898cea94499a67aa8448cedc8083da4bfd1c454b35a705c6539b7571fc68fec822b09bd3a98126cb7919e19c9d4cfd2fe7a790d3c1e88287de00f99578bba3c9358e76518e833e1593a5b0a14186ef5b0c6a2a6f3d6949e6dd485e08bc6230cb2bbd4583af27342e90c9f02025089f32145d34322b5a38e2f8bae268440e4655fea55291b04ed46026343c508fcc0946109265c8dba1dbe129f11044fa6ef8e0f43b3af9a8f80ec6702f813c65314d352bf86cd77810dc25c4adfac941586b95f011ccca1b28875074e747e7280095bf1caeb2c14e71c68de5bee2171b25b03473db37e8858c52bca8e62db23749650aa4c7bf14b10f39530f35706b23f7b988598846c9fac90fee6b268077b52e4fb49cca29c5f37e90555669fb762df7b95509b46714c8127bf38ab7f94cc72293a330f2ca271f3cca0f696c38998d891a17e74abd8f53733f064caf7e624fb09266fc87898be885975c915c58e40b5a9f9b8c43e719daf9f15e42b4fd3d98c588304df7077f264fe19ac45abb223fddfa7c8c9778812ef51053f2eacce7701f887244c2dcb27434618ed5cf9752aa06d2c99973017857f7e19f38564aba74a9a8a708f7449f9530439d0f339417ed5c7505e439767047d01edaafc5708109e8be676aed2c369f2abba7d90019de5641d6641e5a5ea47f81db82e1b4ac2d57190a6311d993f81e51797a7ce1c3254333e2b2ea9071e5ba360b55c126867b4aa0792f1337c51230719ed4110ff1b0564d7ec1d2aa6ca49085c74b29b6bb6063ea66d0ca67f67d71ed3437788bfd385919cf6b2a0af18dffecd2ae0c00d4bdccdaad6cc284eb6d2797250e86cc7e6602894c1bf3e71bd2254f2f1ba45f38d968e5a59db7d18f1dc1dfc045fab825f9a6968eabe1e9cbb0004c1a5bb3a5f6596e3c0de1231d6b3969b17cef53eb8045a314e8be01ba146b36b349f4338571d8d89a62df33c4e23ee1a0ddbee7975f061ca474d3654d7bf3c6c95fd4660053ba208c8e8a63196ca2ca7fb21694922db590503ebc0cbd7edd84748ae2db1551a9ab5f88e7f6832239465b630473f1f8a69c4ffaff9f4bd33cf02d17eaa9fd1e295691690eab5767eaf6965bd003bbf0c8d3b6356a40df01e03bb8c213bb59f619b0ec0c9a6f856cba165612ac0a0cced685131fd9ac01507b09c4a9dd1ea63d3482be237432e91fa29d3940e1e37d6bf7b4866207f5094ee5363786913507443495513ee8e61cac0f51b5a58685a0d566d0213aae521ee6572f3cd24bfcf304ed1c3939be9dac10ebedcb5b84c8ec3f84e38954f52be0adbeaca9b7c89ed24ecff5357be5458b45fdf1cd0fda518b6a7c327835ee231bdebd38d3ff2073e5d5f7cca5d5c2cb6dcda143a864242e222292981b081b22db9a9b97dbd2a500617a9ed419c3827fe970f311e60260b27268fcb07e29225bf8fc7a3027fa9c5bbdab6c4f44f702f7e4eb686d33ca271d3e150c85cc964d4822c7aeba14710b95743dfab1921da0576d15a10bf75f9b13d5384d5b87512bf5cd29ec3cf1d8f360b63925f0907730b340f96ecd833f25bfe1cb816865710e04a4cedad8a98f01086af8b6982eb5753eba1c7f57d50c98a026b89b811312109352c13d951901ce3c4000395036f20516489c574464744bd6f92c5e06eca563c98f390fd7bf7968849ca90c5e90f61779174ed556d2b83e941d38505842516ecc615e6b4d20e9b43a8965d261d815edc0b239a09df818f9d898df7b8d5b51b7ab971eceed5e0418ca257b91cfa6fc2c398d14044c13ca269181a71db2bcd7c43d9354a6a65ada36e5234b4196125e5de73e37de1a0ee6e233bac4c811c4185c5072d8b132cd07312770f836981456fa67b4c4912e6d2b069dc329ce4aef4e295dd64a9a1595d93bb1657fe4ace46f47ae18077047a0f64be5595cd575eb8f177b867dea9be56de823de0b2212d1731d656b8ec571347993bdf832cc6ccd98f654409b573719e8c8f2974068888eae8195000dd793a7c50bdb0b17864d6f0f9f0666c3a51ced4292f1142eaf1d2a60d84ce931d64918a15de6f0945e93c098eb20c8fc840ddc64ed46d951cda1972b388b7970af21f2a76f540ff035f49c86670ca60969dc704314eddd86fbb4c71aef64bb820b9949e2cc0409a95e1b239b280de64bc1ae04db68f8df509d532da11d5083914574b6352bc24fa07ebacc008179c6fb6fb11a2e59c808b2916ee786e4c91d131b5a97f136534a039151a12f78d5024f5b6c00132c681761fde70d72cd12cec95b8017f58bae19612f62d606ca40aa923898423c510991c5ac1a6ced86fb66efea1e660c8b2738ea90eea91ebc3f2d1a49d9e23f0f07fbf2e35e8a6def636ae1a64f97b4fc9d2ae49cf0d9b9a44fbfec49c96b9b26c114300816c49fc2e000d491285b130273bd9596158e38647c1bc40a7fd819a9c8dfa62c8c4835d6a53d47545a19750414fe74d2e1b4a8be8a4db605c822c1e3af5549406be7a19dafa8fd4ecd50bb1a0e1a3c8ce75a2be47e9dcb5aca13b26668ad1607ef113b143f5bbba19466437086302fa9dfa49c6e7eaeeede665e6a6fb527220156cfbac033b2669968c91307f2a7843fecbf9f327be7eb00795eafbb5ccfdcd3374dcd6905ea079c6f3727a4ad0f3513babfd2b061677570b65b4ddbaff95bf841c033ee087788ad467e24700ccd59d77032c83df8d31822b8269734fb206e83a545a3867104be48b605e8ddd230c93cd3adb4cbc6ad05f63b29d365611d0e91805f2167bc562f33e9bfb7807f1eeaa5f3a6dc1a495dea7076964436e07fe0a86788ac9dd00be1353ef96bd7a1faab13f9253e8a1740957e6d42e1679c5467fd618f363ebf97254aad8e2e9cefc7db96af7b86a803734e1a3c10e2ad2e3cc959b7483278ceaf7414726b719856fc0ca9c888fd5bdd3cdfc87ef854894ad7fed1400bdc28e8ef5d10d00dcdbf7fa55c169edd37c7673d1b4209acdd00e578a2390607ae03edfef2854a5b2bb4c5062ef7f7d276da4f51acb5a14b9f2083fdac88415cdc2233f2ade927eb870f2b4f7715c54242acb404e739c775d8ec79be5ec7bff616915b0cef72b9a95ceb7fffb1bf25d5bd7988c0602b48c93150f5332eb14a467ac7998f09860e31b4817fc34c7168872a61124e8ec7762611c01245ca0512e12dd781384808d683216b6ecb10cf518645eccbea54ba187e0972d294de0a9d6715a2f4f8e7e416213e7e9181f057d61a3485fdabe1eeb649b5efb020cff25b4e3e67a8d80577754f12566bc4d3dee8efadae9492baf4ec8c153977fd2998f1fd5fa398249039e1f3fd6887beaadf85e8c967759ff5263291f17d15c8e6c8fe407ae770658be993c5c6ec1a21058a9332eb2da1b958bd99fcc29362db0e1e0932e7b5350af2401ce4bb2650b2a68c2ddecb5bd022d01448925a3c364d51cde58003755f1a9d4f03da7dca94fdfe4b875e299279470c68d16965b9bb5bd2e90df33ec3638f5dd062706dde602a47e8701cf6db2f0e00bfe25c0c647adbbc8e329b7532d89bfbd5469a961e8d6b1d3a37da1e26ab9a5b002e6eb71d8cdd4fb514f50db6f089320bc0015bdca39cd1b1b75233db4ffaef220de987a09ca01271b7f782f0db2ddfcbae6dca340e9bc5c398376987c492487b0db985f3d54b6c3b67948d7db975c8f8ee5863b634231023be308876e42ea2fe7cc25a99bdeebb0b6fbb2789ff9be9a3b5612ee144f05f954484e87e5bbe7fc7f97573f529e47abcd2c5aabadd15cdcb280a9419906e84d6a6068ec4f215d27038706d05fd4f84e7970a06b34b2e32a0211652d9e29364efab1d486ab27a5da7fbe0db624336360552366217906bcc56c4fc1d2abfe952cabb83cd8d140f45fe1b0290f1db0db389454d3f29cddcf828aa696b37b3f2f182d174482a37bfd4c34a1e8710dcec33dc314e6c79329a0c14aa8b59361d3d9d748ad26e957751b57bd4f1525010d14e1bf83219cc6b5981fd53c26a0764e8117bf8e158943e6af555f2c02ddc7ad8a0d8a4c50febc00d9b1ffe2f25f4bee61abec2ac8058680d30e177f7cb364b132eae8ad3d27d6ecb12b91fbb41ec1aae469226a3402434e1899fec6a51df0114e3bae482eb90566036f4160cccdeb9fcc363ac7f743e4c9709ba573d440c17ba0776d405a927e8834fb46436d9f4c4a82e0ad061717c5241556532139367a2c85c622f2504b8cf3e63f06cc2cdf68449c1ca373e6303d0e928655387908005cd075bfca3390398074f61e2d728e1a48299e06810a9104c9ef041ba05a6a28505bfd602d4e9a744d40ed89dc7e91b0dda38ba3b5ae1e6c03f03de7e0f451492f027ab68c996d225d42118ec42cfb27b57babe38ee0e48db6c1863596026e5e2207743166e1331303a3f3cf089debb489712d8b2c3ebba851b0dca8db64db1d20e9b2eb3cf6271e29b19f0e2d2d36ed31cc5e600beaf22775eed1fa2a75bdd8d2d1ffd89a8941c5214ac380cb69f5f7ac6d77bf24e09b0239fdb44ae9bffa22a25382af839fd2db31590f713bbf4792f28ddc5a75c7b8d558b81cb77bfcf96e380b39ec5f7ea71173ce40ac661f4d758015ea0e718a35f774e055d66dfb7f6dbfe06938fe1f840199eb45170e7a021ee8aa4ad628a682c196a7888d150dc2630286a31ea6ec3f43e7e3f12570cde8836e9f46bf34b3f9c22a27c0ab9792a2d5244e08bf19e7171528d96c8db9b3904fee4bae22f3656abe16ad33c1a7c34abbf2ee1ff0c7818db25d494c3ccc597dad7d4a348b85f984bf005fd8a5b7799bba87b7444271f3c1e559230b756e7ed6aef6f8226012164d9c39717eee13422e3402138bd181a8a1a7cf85b41e20daec0c69ea818dee23dd386486a9ef93a9319371b9e7c41013ac9bdbfbeda74d390bd8844e3fad77891663be3f607efdef13f8c5dd668997ad9ea586745a187b8acea442913da41061c1f52a1dbd0751740f5ec3bbb4222d3a8f9bfad431c6932be70f39e62b213031f45d722590b8fb5f3b7dbf50179b30bb151af681fdcbfab45a1ce5f323a935ceb163593e47126ea748151924c2490f8030fda8593e8cc8670ae77130f17c954a1425a7bf3e94f6b1b3fd20540b6866839eeb231cbb613425dd82e590f4910b588647a15164fc972681cdf97aaa6"}) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, 0x0, 0x0, 0x0) 45.212808437s ago: executing program 4 (id=4038): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0xf5, {0x1}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x200}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x7c}}, 0x0) 45.206085187s ago: executing program 4 (id=4039): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x7ffffffe, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20004055) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r0, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x2000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000680)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1241, 0xf767, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0xa0, 0x5, "", [{{0x9, 0x4, 0x0, 0x80, 0x1, 0x3, 0x1, 0x1, 0x3, {0x9, 0x21, 0x4, 0x58, 0x1, {0x22, 0xdc8}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x8, 0x0, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x7, 0x8, 0x2}}]}}}]}}]}}, &(0x7f0000000b40)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x200, 0x0, 0x7, 0x8, 0xff, 0x2}, 0x138, &(0x7f0000000700)={0x5, 0xf, 0x138, 0x5, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "995e1ebe8016cd7ed6e3224e0589876c"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x0, 0x3, 0x101}, @generic={0xf2, 0x10, 0xb, "5fb1a2affbe567f159475f6d8aa6250858002db133dccd6ec20b490b536a994496d44546bc2c8db273c1ed5a8dc6ed59b5f48505f53540fcb224222a715ba22f1c321d08567dd1c68426e4e8083b4838dfa23b69a62cb6cc8fdaf55735569dcea2e1aad47b281acc2633b65d357289f5ff80b55920f3f0e07e77b0d4ebdc44d329c7af1dfd3b801ca057750789f15b2f2c5c40837bf26e1de8b9e07f45256a8058c4bffedab16568d838cf857fb2fbfd4c02863cec6d978eec6c60fcc9fb33579c39424a1759235d6688ed1db62614ee5f74f61ca59e8f9bc82099dd12e59966813a18a5dadf9a8521e2c7e858d9dc"}, @ssp_cap={0x20, 0x10, 0xa, 0xc, 0x5, 0xa0a7, 0xf00, 0x9, [0x0, 0x1fe3f00, 0x3f, 0xc000, 0x3f00]}]}, 0x6, [{0xca, &(0x7f0000000c00)=ANY=[@ANYBLOB="ca038d9bca7d0f231cd4d4b1f07576d17c0dd8734ef560a8bec875d4457aa1929af894c8f0bb9648653b0751dbca9a27eae6fac586f2930485e25cc7592a140d8a2b4d514167c3c0a15f092503ba9693e66488dd437172da985716bed7c3ee6c4fffe649037a273207e036f284ff3fdad6fddfc3c56d9a0b7df5ef29f343a6c5837343fd44339fbc8ef23d3652dbc6f7e7b806b30291de243dc3b5e331395e26b476d392528c96d854bc1158f1f7f60d7c8db02c5f2f0afaaf0c9fcf10d191365269efc19fb4eb083c2193996eeafc4580aa9efbd2ac2af562c86d289b79b8"]}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f0000000980)=@lang_id={0x4}}, {0x21, &(0x7f0000000bc0)=ANY=[@ANYBLOB="21030a43bf9a2b3dff12cea5b3dec446313e7eb487bbdf230000000000006f5b377f3adb3fcacd9bdaef3f91f0aae098c0b9cd2c95bebe4526"]}, {0xdf, &(0x7f0000000fc0)=ANY=[@ANYBLOB="df039a990bd018601303292e7b31ff9a6c0b718075f399b29f47e46bb2c37c857660ec5addc3d65437e0d8bc86b116c8a28679576e015c03ded34325308dfb104c9797f627da5da7e72013b9815e3bd7e1cc4e6055093c4f707bb3c166efbe91272d5a3867596b8b6dc64badba1278fa52287ef0a439dedadba038d1c400a9c1e0c7002859a6fd319520fbe024017d76b582143797a602eaf3d13010e38fb7b9ed5450164714880f56d2fe21d341192a7cba8c833a546920f666ac2bcd449c2fb41297b10158ac81d056cca85b7655c57fb1dfe206f7fc0f250cfd3f29c53fd650bd69b01e5fd8"]}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x406}}]}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) 44.280433185s ago: executing program 0 (id=4040): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x7ffffffe, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20004055) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r0, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x2000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000680)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1241, 0xf767, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0xa0, 0x5, "", [{{0x9, 0x4, 0x0, 0x80, 0x1, 0x3, 0x1, 0x1, 0x3, {0x9, 0x21, 0x4, 0x58, 0x1, {0x22, 0xdc8}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x8, 0x0, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x7, 0x8, 0x2}}]}}}]}}]}}, &(0x7f0000000b40)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x200, 0x0, 0x7, 0x8, 0xff, 0x2}, 0x138, &(0x7f0000000700)={0x5, 0xf, 0x138, 0x5, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "995e1ebe8016cd7ed6e3224e0589876c"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x0, 0x3, 0x101}, @generic={0xf2, 0x10, 0xb, "5fb1a2affbe567f159475f6d8aa6250858002db133dccd6ec20b490b536a994496d44546bc2c8db273c1ed5a8dc6ed59b5f48505f53540fcb224222a715ba22f1c321d08567dd1c68426e4e8083b4838dfa23b69a62cb6cc8fdaf55735569dcea2e1aad47b281acc2633b65d357289f5ff80b55920f3f0e07e77b0d4ebdc44d329c7af1dfd3b801ca057750789f15b2f2c5c40837bf26e1de8b9e07f45256a8058c4bffedab16568d838cf857fb2fbfd4c02863cec6d978eec6c60fcc9fb33579c39424a1759235d6688ed1db62614ee5f74f61ca59e8f9bc82099dd12e59966813a18a5dadf9a8521e2c7e858d9dc"}, @ssp_cap={0x20, 0x10, 0xa, 0xc, 0x5, 0xa0a7, 0xf00, 0x9, [0x0, 0x1fe3f00, 0x3f, 0xc000, 0x3f00]}]}, 0x6, [{0xca, &(0x7f0000000c00)=ANY=[@ANYBLOB="ca038d9bca7d0f231cd4d4b1f07576d17c0dd8734ef560a8bec875d4457aa1929af894c8f0bb9648653b0751dbca9a27eae6fac586f2930485e25cc7592a140d8a2b4d514167c3c0a15f092503ba9693e66488dd437172da985716bed7c3ee6c4fffe649037a273207e036f284ff3fdad6fddfc3c56d9a0b7df5ef29f343a6c5837343fd44339fbc8ef23d3652dbc6f7e7b806b30291de243dc3b5e331395e26b476d392528c96d854bc1158f1f7f60d7c8db02c5f2f0afaaf0c9fcf10d191365269efc19fb4eb083c2193996eeafc4580aa9efbd2ac2af562c86d289b79b8"]}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f0000000980)=@lang_id={0x4}}, {0x21, &(0x7f0000000bc0)=ANY=[@ANYBLOB="21030a43bf9a2b3dff12cea5b3dec446313e7eb487bbdf230000000000006f5b377f3adb3fcacd9bdaef3f91f0aae098c0b9cd2c95bebe4526"]}, {0xdf, &(0x7f0000000fc0)=ANY=[@ANYBLOB="df039a990bd018601303292e7b31ff9a6c0b718075f399b29f47e46bb2c37c857660ec5addc3d65437e0d8bc86b116c8a28679576e015c03ded34325308dfb104c9797f627da5da7e72013b9815e3bd7e1cc4e6055093c4f707bb3c166efbe91272d5a3867596b8b6dc64badba1278fa52287ef0a439dedadba038d1c400a9c1e0c7002859a6fd319520fbe024017d76b582143797a602eaf3d13010e38fb7b9ed5450164714880f56d2fe21d341192a7cba8c833a546920f666ac2bcd449c2fb41297b10158ac81d056cca85b7655c57fb1dfe206f7fc0f250cfd3f29c53fd650bd69b01e5fd8"]}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x406}}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f001000000010104200000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108000200ac1e00010800074000000000080008400000000280000d8014000380060001"], 0x1f0}}, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) 43.820708004s ago: executing program 3 (id=4041): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, 0x0, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="240000002500090122bd7008f900000008003f8004002280080003004700000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x340, 0x340, 0x0, 0x340, 0x270, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'ipvlan1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [0x0, 0x0, 0xff000000], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mbind(&(0x7f00007af000/0x4000)=nil, 0x4000, 0x1, 0x0, 0xfffffffe, 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x8000, 0x0, 0x5, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r8 = open(&(0x7f0000000200)='./file0\x00', 0x210080, 0x100) ioctl$HIDIOCGREPORTINFO(r8, 0xc00c4809, &(0x7f0000000280)={0x2, 0x200, 0x3}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r11, &(0x7f0000000040)=ANY=[@ANYBLOB="63686115ff07102326cd21266e6765686174"], 0x1d) socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r1, @ANYRES32=r0, @ANYRES16=r4, @ANYRES16=r7, @ANYRES64=r9], 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000840)={r9, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0xffff, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) 43.34727432s ago: executing program 2 (id=4042): syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x8001) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x141042, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000140009052cbd7000fdffffff02180000", @ANYRES32=r1, @ANYBLOB="0800e00000021400060001000000b54500000000008008000000ac4835e71c835148d23d86a3278378e5cd30962e748adf87e50e8ae31e30b0b4c1f809c0dfc85b15d8caf78ccf1d8b8eb58e47f796819e1ae39db85d97000000000000000000000000000000000000000000fc00"], 0x3c}, 0x1, 0x0, 0x0, 0x871ac4b30833d133}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf8}, 0x2080) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0xd40, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r8 = memfd_create(&(0x7f0000000000)=',\xea\x00\xd4\xd7\x02\x8dmbs\x0f\xb9\x80\xb9\x13\x92\'\x94N\xc3\xe0m\xa4\x01\x00\x00\x00\x00\x00\x00\x00-\xb3\x8d\xa1v\xe5\x8a0h7\xa4\xed\x94 \x05q\xa4d\xda0y\xed\xdb\xf4\xeb\x85\x9b\xde\b\xa6\x1f\xaa\f\xa0\x16\xd3\xd6\x98\xf44Q\xae\x8c)\xcd\x1b\xecB\x0f', 0x4) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r10, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000540)={0x50, r9, 0x1, 0x70bd22, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x34, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x18, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}]}, 0x50}}, 0x10) sendmsg$NL80211_CMD_FLUSH_PMKSA(r5, &(0x7f00000003c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r9, 0x4, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x34}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x4001) ftruncate(r8, 0x7000000) r12 = dup(r8) read$FUSE(r12, &(0x7f0000000600)={0x2020}, 0xfdf1) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000400)={@local, @mcast1, @empty, 0x24, 0x8, 0xf, 0x500, 0x3, 0x4000001}) r13 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="340000000002010200000000000000000a00000a04000380040001801800028014000180080003007f0000010800020064010102"], 0x34}, 0x1, 0x0, 0x0, 0x4004800}, 0x40040) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r13], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 43.071528142s ago: executing program 2 (id=4043): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) (fail_nth: 13) 42.808616499s ago: executing program 2 (id=4044): syz_open_dev$dri(&(0x7f0000000040), 0x17dc0a99, 0x2000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000001000000800000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000db00001400000009000100626f6e6400000000040002800a000100aaaaaaaaaabb0000"], 0x40}}, 0x0) 42.715529966s ago: executing program 2 (id=4045): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x6f00, 0x0, 0x500}}], 0x600, 0x0, 0x0) 42.598480199s ago: executing program 2 (id=4046): syz_usb_control_io$uac2(0xffffffffffffffff, &(0x7f00000001c0)={0x14, &(0x7f0000000000)={0x20, 0x10, 0x86, {0x86, 0xf, "8109f65b033c4f5552dd5382e8bdcd5ed402fed599ef78d179b6d0861da86f3cf9b5fa68dd3c3d891d3852f7fe2ab6ddc9e3bce3043c5bd9fad9a87ed1ecc16e510ad682cc1ad4808477a9c72592f55968fb4f35a39ddfee005276bf3923b8f0c411aae50faf34aa34dc8f03e377fdf9f515cbdfd5034aedf017af7e00d7a787fe476d75"}}, &(0x7f00000000c0)={0x0, 0x3, 0xe3, @string={0xe3, 0x3, "dad97caa38567d5562922e969ab0376e6e7a9315cbc3b950f8f4cd8c9108edc36a0b573d80a9c877b2ae8739f17b3193276f1ddd6241e414ebe33f88f93242edc43da0e821b1087b0aed0e6b1cf48d22ec5d7b79b48d189da36b04fd1f3071371e0c26e9483e96421db5f993422cd92e106eab9e29fa96bdc3e4183ec10dae87872c834abe09e7bc2d99f2c27b208780d566f188510c40fb2893e4a731be8c90589a9f853f5871024f13eee9f116ff1d6862d9ed3f07d410e1d521c70475db6ead433fca9a66b7a912de7d3ee2074662afa51c327e8176d0b05dc6aeb7924a3478"}}}, &(0x7f0000000400)={0x44, &(0x7f0000000200)={0x40, 0x17, 0x2b, "2d7fc84bcd8882be85e4e01a8bf7c6c99ba461ecf4cc79fae18ff1be0d485ef38b75704665a8e8732e27c0"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000002c0)={0x20, 0x81, 0x2, "d3c6"}, &(0x7f0000000300)={0x20, 0x82, 0x2, "4b8b"}, &(0x7f0000000340)={0x20, 0x83, 0x1, '/'}, &(0x7f0000000380)={0x20, 0x84, 0x4, "c48e0922"}, &(0x7f00000003c0)={0x20, 0x85, 0x3, "bf0401"}}) r0 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x6, 0x2, 0x0, 0x0, 0x10, 0x86}, {0x9, 0x5, 0xa, 0x2, 0x10, 0xe, 0x81, 0x7}, {0x9, 0x5, 0xc, 0x3, 0x8, 0x9, 0x6, 0x9}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000540)={0x14, &(0x7f00000004c0)={0x20, 0x21, 0xe, {0xe, 0x5, "e723a0a874486c4d59a950b5"}}, &(0x7f0000000500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40a}}}, &(0x7f0000000a40)={0x1c, &(0x7f0000000580)={0x0, 0x12, 0xc, "e7c0a06de1b98e375924b531"}, &(0x7f00000005c0)={0xa1, 0x1, 0x400, "5678ce85f7b626890c0104fe59c32687e11d226251f0b223fa65d2bf49f83e5f8768a1c41ec853a0c3754cdfbde18de74beb66738a281dde77021f386bf79e42dc2976f5d04e13ffdfde3505d62a4b7d7ac57eace6f056197f675b742ced2c40d0d637a3640d6c621d7a803e04d9e92283bc2c6d94715106c48081c01d828eeb35ef456295ebc00aba2981a1ffed684dcf57c8a66479667d4ea6b1e8871798c7a207ee4cfe27623a3b4e563527de5bf3b3ab8749637f42b6aef5e5b4cf7001a6458fb219396f5354b278045e3fbfc2432ece5c03d740db6fbc19a904d6c27fbdda0a9c1d34eba0219a5dc855efde160463a6d88ec287928273bd3559ed3ee331fc145a92305dd916b82f8ba7badfe640d87e0bb32c2974b319659ca484981b978a3031104b4207b14162c8acad88ff1270693ec28b233d2f0e71b88baa574744915dc9e3b26d2f634127a83b6be97914128c873da388e15e34581a50bd2112b3a57439322180cd839948b329fcaeacb124b1f0c39b2ad608077e67750a7dd3cab2747a39b6f365dc7c35c6e66905f5bd13f51cf596a7cb4cca00c687348ca21c21952e09c8d3c4f249bff02718cef259336696f76e7354c50cfa535777c363d0b2acdc8df416e7e75ef2682eec3e508d58798e03290cbb0d5ac1622604d43e211807a6446167cc18164d633ff4d5ecd4fda0cfd3043d92c808b2a8446fff7dd7a96d815d9e3647c32987a483a98b0868f508e2acf1f7ed65bd9cf596dce5701131d6592d5e2bad7050f65115e4ab30087eaed1da8594ae550bebb37dc81b2ee306e5ed04475f0f7438e4143965f4982e0531cbab9c40a48988f75836166bc6cf8ce0117ff3ca11ed6039577413e4a8f4d0c7d68b22d3a3c7e86c07fc213a0e331ac5750f8beecb997e535e255798641eb618e70561d4d2dddf9b6e31de0747d2e789ebed44aaa7ab2a00069cb280091de19f4114fa1eed4359a5331c14440fc3306a09fa04dbd6723f8c38573060e6e68cde1a70fe451cab68dfb285b07b2a867c9edc24eee9167537dc6362136c220d79e0ad0bbec7e41bbec836eb578d9d8edcebeccdfb6677cd165ee8d023cbf2318330b6e4dce0ecf6b80e3b74f3aa324ef8a8221b1c444ca0ddc1fa35559e299fe08eda316e3a9a6a89f9fb28d764680b121bcb05c525b649b3d340a25cdf20918ade73b08bd9e183316e3e0177482595435fc4fb0976575db8139e1215fcac9e4e98943ea8687e2a53fcdedb0d2e7b332402d721ce2a85e52ab118b585214d7e9d58880133c91ed90a37df097d9eddf57c7ffc9a729037130487d7d91b571c5a5e6fc68f752509dc034550c3bdc533ae911bd16395c8a2868b0cce2fcbc0f63375212ea425dae4ddf1a70243d5032b985a0718d064642298e02ec61b8ba6393d7c999372cbba36e076fd6397eeb58843"}, &(0x7f0000000a00)={0x21, 0x0, 0x4, "de82ba2e"}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a80), 0x282, 0x0) write$tun(r1, &(0x7f0000000ac0)={@void, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @local, @empty, @rand_addr=0x64010100}}, 0x1c) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000b00)) r3 = socket$inet6(0xa, 0x5, 0x9cc) newfstatat(0xffffffffffffff9c, &(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001f80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001f40)={&(0x7f0000000c40)={0x12f8, 0x1f, 0x300, 0x70bd29, 0x25dfdbff, {0xa}, [@generic="b57c8090d0dd2ee0d0b30453648a5cd060433d57be1e7044fd15cce227472b98db171abf0a5cbded45e127a83a70eeba5a861369165bb963a766b9047567a7f43638908bf29309f06adaf411f9ea31b993f07462314fcc59db3a22e1", @nested={0xab, 0x14b, 0x0, 0x1, [@typed={0x8, 0xd2, 0x0, 0x0, @uid=r4}, @typed={0x8, 0xb9, 0x0, 0x0, @ipv4=@multicast1}, @generic="1000c1e7c1796d2884f7d0bdf1176f302a9ba7eea4ddcbb529a4ac9a353f4d8983c5a2fb6b2ba13922549291037d561179eed8907d9a52165098afea36ba26041de42b3b7b940b39fab5f018f2d3c9561a454ae593bfceaac3bf4128fa3f98b9d6f4e3ff192126ee6c4fd8", @typed={0x2b, 0x11f, 0x0, 0x0, @binary="ef494916acfba2826bc6336410808bc0f1448f32d83ae8a941c66fc5fd20e78c23aa0f42eb4334"}]}, @generic="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", @nested={0xb8, 0x2c, 0x0, 0x1, [@nested={0x4, 0x47}, @generic="af8958f2cb4e496ac97270fdb0c2902cfb90f14e462bb895904badf84204a208ed8b50767a8065f738446ee17e7de10912e362e0cf92fe2f17f274025f3277ac901189b67ff05ea998f298005ea794bb9b6507a06cce3c7ff0e8023827252915b49a0fd004b1355b86a5a4d31b14318e441e2188e6ea23ae34177baa5a31533bfa479f725f141773d437664263f7472bbdfc63cb0a02c8c368b18589c335fb049f92f3b4dee9dd8fd5bf5ade", @nested={0x4, 0x1a}]}, @nested={0x6b, 0x31, 0x0, 0x1, [@generic="710a59a6fffb31d47331bf6aa1f5d9e686ad4a5a0b73212d5f165ce2639a8eb954b8a143a8686f0b0d024de672141ebd8c7e0e95e4b1e1bd4a26b171acf81f89cd763dee6505c3111b841aacdab5d70276a55e894671cb2177fa98d153cf256bab8eff8a42e930"]}, @nested={0x14, 0x9c, 0x0, 0x1, [@nested={0x4, 0x111}, @typed={0x5, 0x104, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x2f}]}, @nested={0xa2, 0x105, 0x0, 0x1, [@nested={0x4, 0x4a}, @nested={0x4, 0x51}, @typed={0x13, 0x39, 0x0, 0x0, @binary="f1caa031ae3e0028e7eb6cff21fe5c"}, @nested={0x4, 0x1d}, @generic="781df330423435b9de4d181634fa215eff5989b8caaf7039bb522c27848fcdf7bda749de8680ee68ab025c4282c3a0f993eb9dc7ccaafa3cc80ff6f930ee82dd42c7eb89fe2d57e10952e40ebdd01ddfba3b2f95a22086661f49fae6617434c00e3f2111aa917ff25004d2b295f310e2a796b38fc52568e2bab93e8e8699"]}]}, 0x12f8}, 0x1, 0x0, 0x0, 0x8808}, 0x4) syz_usb_ep_write(r0, 0x8, 0x23, &(0x7f0000001fc0)="06049a6a02cd65c04c44f48639726c9c8f765e2b69685dd9a036517068989497e3ff73") r5 = socket$inet6(0xa, 0x6, 0x8) ioctl$sock_ifreq(r5, 0x8918, &(0x7f0000002000)={'ip6gre0\x00', @ifru_map={0x8, 0xfffffffffffffff8, 0x1000, 0x2, 0x3, 0x4b}}) (async) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000002040), 0x400000, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r6, 0x80304d65, &(0x7f0000002080)) (async) fcntl$getownex(r2, 0x10, &(0x7f00000020c0)={0x0, 0x0}) process_vm_readv(r7, &(0x7f0000003240)=[{&(0x7f0000002100)=""/4096, 0x1000}, {&(0x7f0000003100)=""/22, 0x16}, {&(0x7f0000003140)=""/226, 0xe2}], 0x3, &(0x7f0000003640)=[{&(0x7f0000003280)=""/133, 0x85}, {&(0x7f0000003340)=""/198, 0xc6}, {&(0x7f0000003440)=""/216, 0xd8}, {&(0x7f0000003540)=""/225, 0xe1}], 0x4, 0x0) (async) syz_usb_control_io$sierra_net(r0, &(0x7f0000003700)={0x14, &(0x7f0000003680)={0x20, 0x7, 0xa, {0xa, 0xd, "7360d68fb5f8df49"}}, &(0x7f00000036c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c6b}}}, &(0x7f0000003c40)={0x1c, &(0x7f0000003740)={0x40, 0x12, 0x69, "77f75c776f4a16bdd517b3dc7dda9c502852eb5f4ae6f349164c0b0684eb568fd211a8f0336b845e6079a0e64c227491ed0389f3aecea4c1ae4c0839ec63bc4eaa01f67cee17ecaf05822214494b8acacb2917c6b04591e1331377ccd26c573ceb8d8275a140b8f018"}, &(0x7f00000037c0)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000003c00)={0x21, 0x0, 0x3, "e6ba98"}}) (async) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000003c80)={0x0, 0x5}, &(0x7f0000003cc0)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000003d00)={r8, 0x7f}, 0x8) (async) ioctl$TUNSETOWNER(r1, 0x400454cc, r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000003d40)={'wlan0\x00'}) unshare(0x10040000) (async) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000003d80)={{0x1, 0x1, 0x18, r3, {0xfff}}, './file1\x00'}) ioctl$BTRFS_IOC_RM_DEV(r9, 0x5000940b, &(0x7f0000003dc0)={{r10}, "c77c0718a243501c04b118218a406c7b9522f29fa4ae775cf6b4879fb2841ae38f0d6a59ca22a7124d01cf8d52a841d07e4bb66ca2e6ae85e8dd8bf21a1d1c94fc7222eb0853608e3191120e08490e33c364d707dff9736be5facc8365d08cb22a56c1a411aa88859c9ad10f5f49f3d920584f83819312752f7ca2c26003b78ff2dc8ef628d1b71f34cc4bea583dc68bd811b4b981e0b8071859bfbd1d853b8fcbd35810f7d7cc19bca99feb902b1a58dac98f66071e626a7ea5e03d6ea38721f46f9adcf464e8b664007a6114b18bdee0eae53e353372969d695eecb7db2f7dbd1a0e175a00a0a6508b4d190ac20f6adc21d7d40a08af9ee22d269c544d1cf4f1a607aa9f8ba3b2a27f368050162a4734f337fb02a13f644d49fb58b30ebb8772856ba898a92367a65c26246d87ca637279be96bf91a0a175d36e52a42ab012576319425f07a269e13c75651a4af99fbf468f04e5efbd50d648f8231086468aa7860c85cc9caa0f4199dce293b0ba548fead65bade548f59df2f580de07b704c4090086c50cb6a2570512f72f21fff995ee2f594cfa2b0f81ceb20683a2af1e45fc9c6299a8ed1b64ca82a1d631d1c1344b1b2a5c71a55f82a27121eebabb9208ba717c85177bda6d6eaa1d9a3a9dcd0b7e9b047b4235e70acc0b6f465c4542d0048b36514706735dd8e71fd93c504a0dae3ed7df88f6185c5d541f59958f789845c28401758a6db792d9f7829001916050569f0098d75e6229947d6f3daf2ff90598a06bc46a833a6fb5be21b9a489d584e0a2df397fdabeb1a8a2f2ad4119ff6f71aecb4812ff8481a655df54d4de993a98284398eb80ee4bcb19addf90c11cc65e3147350bc201ee6983647c01dbac9a26b13344f9a1c3c9398f67ae944a62f943a07e55f896f76d7f47291fd736507b76a36d73929e7fe2f72c144cb5fb6cb7da37acac885da093ddbb5092d673831c037b5c0d13d315314ee87262e4fc17f6ef2cd4e5f742f954b1d16ae294dceb573df310978daa560f310b2151ca90aa9975c4d533616ab455b763ad0ce71e5484be0d160a4f1fcc1d9505a415cc1c1d66bf36afaca1b3c2fb49e54b74ee694228acc9a364e0081298d0489b09b1f500fa2d4a03e84e3b5fdc8ba92ffb1c9019df43cdd3dd5b07ed985c6c99513762a3e49c3aa280dfd0650ccab36502171e3bd7437bb77be7f52daa1dfaa3fb49c584a1e537b4e74a8d0025cc1b30d826c4b453c160d3879a590bfd471d91200373601843bf5a56ac9ffde9eea717321207c3209002321ef76d6a66bf2472da322f996abed6aa0fdc73dbf54811770eeb7541fcbcbf2669fd5fa699b7ed42961c7efa8fa1cf17061c556df214e2982db773e6ee519d121ddb9534efd590d821e659e5ecde0200c639e5af6907602c204b5f7fd9f3c1be0143e339675c3b065c2b2d1af0e757b50425b3ea4ebf6c3776d6006738901ca7540c2455331d37a00606f623b3a431e11e3f4d77bdb56a8338d7bd749cfea88d39d058086a4cd105753eed94a5169415da50b8e0d4b836a8ea9b4411e1bb7cc298983c2dba2b2448f47baf63fd5b45f041e99e8707a2a08ba48da916db41e5d08b45adb795a33b59e0071fc94cf42d253e0bd4c9c1bb68d736a9d9f840ba23f8da316a50a58ce054594c117634cf5b4b441d7cee10bc9f7846b9cc693192026f9590cbbfa60ff5f107d0073ca02e04f5322bfe4d101c1c694471c8192040d51411a8df1ea6827c912d77196d2a8fd0f20ab4d302b336ffb0b05736d55c8f4b769265b9c7a7951cace21cb71759119f6e465ee4771622accdddd0ae4a1d6b4364c9d73be5393632ce1b73eef7566565019f9606790704871934e2f14d61a6b5c96fc9955da9c8d7bb4dc88157e960d3dcefa484aec0cefadeed93927153b22c9f64fa1dd676da5d4b7406b9abd1176b28644c5b37779f7698375dbdd710c7feaad04afb36574f3da93d9a8ea3442644cd1ec7a48a423ed237757021ff0c1ac80a8046f86d252d55ba0e994cbd947b5ca3d7aa96761b58f2e36c7787e8bab086d7323a4b270c0b5f9ac20c3e6e4e6947e9b92391f08bc13fcd17cc845bfe01018c908c37fb942dae3c6db7d2e15cdf9a2cc1b1a5c90c4d99aea3343b39fd2dc1eeea771e39c2d7a9d9e2dff1a093323a5b530640af10b90d2a97585db3d41938086ba6057d2e046542ea5bca3deced834a811e442efa1bcf5f858f59dd48f47782dd34caf54e97dda9008ec8dd2b63a67b035479fe6409f5f706ac475b4aab1ed41fd2deeb0afbd457091aae8259ab6831c518e46c95e211d322756df23bedbfbf3488a18f54ae407d9e2d81707c42a81ce91ec2b9ecc2d37681fa0e2ba2ecb37e9d77d00fd6144447756205c615a12fa25b3927cd265bd63f5553ab2e79113ef53c13d851a23fa1e75e1bdb8543ffa1c8c0d1c252c9ac9704286c2319af3439d32f67da2793c71b20d43795d14f2b2640976555f8b7fd04e5e646b0139b80d8745d2c024a56eda2f2fbb5ab70095978060c66662ff56150ef92af49223395a1d0ec1ec5e6be05aa15fa9f94fee1d80e6a346af3159a4b6da9b4b375ea7dc10295f2613debb176acfdd79ffc846c19e68237b0377e2c4d478d013663246d77da38e1bd1c209480b6d713bdc4a16ce91a65330349f40eb7c9b227b764ccee9c10310900fe1da3c7b02d46106cc458a0ef5f563a01a994dcc87460907be217310c18e67e7b6b82c37d203f0251f88b75c9a223222690ddd0f231db07d458794241949d78109da783a74b450ffe7c46e539a241984b4ff119d7d9451bf3eb4c41a97213bc081aa10756d59eb710673ff401589bd4f11d6666fe9090f636a2ec1836a7878fd37b260cb7137f3304458ef823af1ff3a31da348d00e6a829d66209030ab41578d733b55fc13fbd11d988c7b7f5bf37e0f51a8fed3c1e17ffb93ffe3649ff66b6688424987db618694d1ca18edc346972b49394a25503212d9fab12e07d1fa55eaf956d5272a6df2d7f657a7d22d3e226c2cd9a2ab4e30717198baa4f2860c388178f974f9b30ef1f550ba71e691504e2ff839732736bca0eeb5b8cf23cc93212f50407185c803286ea746bdad106c5f7ddf7578bb83cd875e9ca3aa4ae875010e308cb228fb4c898a2d03e27406ac81e5a57fb957c9c1b3023a6a06a56e2ae327a0fe31967606c68c702ef55e9390d575f4dc757ed7cface2b254f3739ed06be3c831aaad74f395bc4c441bba91e1ae5df9d6fd4c0d662a617e56cced60c3f745455c452f2f2a4508e166c258f07d03a9571fd359247f1feaccccc64eaec2cda5a319c41ea8f977514bbf2624fc044c641d86472e6d22119a2f52a28c4af048e28137db3d2005de83e2532a3514386085e05ba6c4bad9b7150a8cf977be4c04092b3184b7a5edc56f5370c90f26f0ff4e1bc3671dae6683dc7311bd07d9f38d3ae06ee670fed5b8245bce9f525a7dca9f5c9d88ff87ff664ddb1e20f68fcd888012602b50cf419128ca85be107eebbff61de855644fb3b15678ca14137d06ab9f886d2fe69eda2e775adb5965fba92c8cbb7cc6a6f70682a9a4a13a0d45110b41f8b85995bdda21a46d281d9696c1f6fbc09924dc887bc8ee368f85b0580af14b047d7e49911d64a7a863906e2ff80e47365e341f754b1e31542310346cac851d4b5f76a8f7dc8f862ac0ce1fe982b4ea0b091855ae9e301a3d63f5cdab8cd7c78a2a3e5aada0265728277552ac3e936586ca07eaa8a3a244a37283d6766bc5d3c13557bac08bf64fa2860b546a3c5b55b22905469925e9586f37d5680692578890654b427e35fa55a78bfe804d701ed7732b9436a211aeb3d689d6704cb068c4f631c4b26c79d65da582f04e35b13ab45ab40b798040b329e36f77441cb76c37ef91e2097240a90210eab0a563cc36a3d9fb9466a23fc8e43029fe26f81dd97ccd2c028fa9207529ef614f4a79a48febb67073dd634538be481873050b98cf278773c11f281205f6f218038c5ddaef97cbbdd5470a451f9f11ae08fe991320af4668f5ab263bd78e604a82a3c442227af9c0dd4e78a4be41db1e336cef54667c1cb5b68c48445b7c5f591e87af5ae9d09e88764cc1d802a5adf515d616a383d8c2ccfa3714eeab84aa65cb745379151df3958f7c39df76c31c68d4ba1738e2ff6f7647ad3f11763417955bd16c52f7740ed894b96490cf2aa74918497195539f0e4f69b43c8095900600bfeaa8ac3648209df67f8b238fe1e99ef9ae9a3aba65e6de6cb16745b0069aac7e9e351c0588fb56ae906ff61c1c13cdf18a98f1061612c06b933b5b6423b3cf7b59a4c3bd3519552c898e0f6d50471058de180224a14be1c1421ef46d03430628f1f1ca8eec0fddd710d3da687ec0062c8192087a7804fba4732239bd797a6b1304a7c5a0db2c0d0eecb2a8e47b309b57c7b5cf831b3353569a299a482b69f8b4ca2ee650261640923f071133910ce5097692a0a6ed4e1cd10869267faa083d6445cf24ebba37f7eb6f82321f00a7ba9a3721d997617c693d8758c866a084ea87be3ccb23ed0887cbf54b6f2cb3970d63075d431a829f4c3341598be7f8521d9cc48704fbd96a16391158dfc439038ad636566e80f87e7757b70a82733167f5f364ebf6906d8eeb2405d6509d203d701485318ca496ed46982cc56a4bc3a7124e3efab7c87942a6f70da5ea0e3aad893fc80a0c88b366de089803656c13d2375e8e8f53b77f56565b4183d21e5073bb4a45a95d027e7df2e64a507ddc796871ac904dc9ac5373986146b3ea1deda379920c2180426d082f9cb80d27d1d4dd7fe5d16b44bb3a8ca730b9df61589044dcfebf62fd0dd899d760bb520d0726aa0f716750813771ab2364db4d88c59158113cfe58efd432222da211ab5ac1804a295d5e794354912259b8b62b160941beb7577713a24840a3bf13143aa6ec8b0db59512624714b90a1599f41a5c3094ed68f3b2680bdcbea6654d4dff03636f9ecefe29af6b8b738d0df4909780468f993caf0a9dcdf5ffe3d69964164d84b5b5994180d72801b36e8100fdbc9595f20dbf5cbfd44e56d6c8ab5b338e3a7b143b6c74e8744055a8505c5d94bc924656b1cce6f9c84ab99e5dc208c28634d9b9fcf1597f61aee5fed52b8255406d99f04659fb458153e0be14df2c9da1180ed0bc1fd337cfdeb55cc334b82bc77b7718e5365dfed490e6061c4de94fae4d659c966cceef8af1ea1db571e73495ba8bc72cd690046fcafa3b6d509786140a023ffd6c16e3c3f8ca003f301a54b990d6f11ba2f0132efc5f87e478f4e1517442733a7382855d63c95e8035ff1b256d38f971162b27b2083562d5db1e021a9a0739d252aec2d753c513b591d4d0801f030a293905200347cd08ddcb944d58fd21ca7a21faecd6c0bbfe86afcce4d443011bc318a09fc4f2aaa000a1c35988a38de80faa83e3c3d027c1ed02bdb41252737e9f11a2ca56f439d320a71368172fc3ae4ba531d2f059b8488982c7df122454162911768a0c0645d2456d5848c08b3141039598f5fc4acd22650bedd287b052bb5afce7dd4458921c3bcbcdbc90348e4a5044c5ed528b103c5d778e6d21cc9ed857e1b2774c8d70670f9bbb38b17234f338d966ddcd1b1e6dd4ce964a7132f8a5b9907838640666d32fdbe8277b8b64b47001745c57e937ec2e1532d443a90486503832e5836b3b6335e1f151282c93e208e27e7ca9ea7ae0863ab66c8be02b604b0e5006b2ab85e7"}) (async) getresuid(&(0x7f0000004dc0)=0x0, &(0x7f0000004e00), &(0x7f0000004e40)) quotactl_fd$Q_GETQUOTA(r10, 0xffffffff80000702, r11, &(0x7f0000004e80)) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000004f00), 0x800, 0x0) 42.129147042s ago: executing program 4 (id=4047): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, 0x0, &(0x7f0000000280)='GPL\x00'}, 0x94) r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "a800b043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x4, 0x4}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70", 0x33}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15", 0xad}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4", 0xbd}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473e", 0xdc}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 41.919825268s ago: executing program 0 (id=4048): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f000050d000/0x4000)=nil, &(0x7f00007c7000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0x10023}) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x2008800, &(0x7f00000010c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r1, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0x0, r2, {0x7, 0x2b, 0xfffffffe, 0x30004004, 0x0, 0xfffe, 0x6, 0xfffffffe, 0x0, 0x0, 0x1, 0x100}}, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) write$tcp_congestion(r3, &(0x7f0000000200)='illinois\x00', 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902120001000000000904"], 0x0) syz_usb_connect$cdc_ncm(0x0, 0x87, &(0x7f0000000240)={{0x12, 0x1, 0x100, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x9, 0x0, 0x7, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "6e1b516e"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x2, 0x80, 0x8}, {0x6, 0x24, 0x1a, 0x3, 0x20}, [@mdlm={0x15, 0x24, 0x12, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x8ef46dbd2cc01d3e, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x2, 0x2, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x6, 0x0, 0x80}}}}}}}]}}, &(0x7f0000000900)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x340, 0x6, 0x5, 0x0, 0x40, 0x8}, 0x10e, &(0x7f0000000340)={0x5, 0xf, 0x10e, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x5, 0x7, 0x1}, @ssp_cap={0x14, 0x10, 0xa, 0x5, 0x2, 0x200, 0xf00f, 0x1, [0xff003f, 0x3ff6]}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x0, 0xa, 0x5}, @ptm_cap={0x3}, @generic={0xe1, 0x10, 0x4, "ff1d397dd2d640c85af5d554a0e7b69ddf09b0a423921abe6bdea705f696c7017cc3004bdab3c6ff8fb1a7e3d9a02932b42b0a171b77122ae2f9a2488f9800fae7e013b095a81971320d4faaa45202f28feb816ebf33f775c5d5f6e157a6020c3b9e9df5e7f5f8c068837b0036ef91522700af2ef615827771f9ddfe1d46cf5c4bb08c3244714c768b56c4bc690323b3a15d6c0a2e3c620dd537be6c81b9c8b37dd9d428ee679470114faa970326f9685a58d08691de978b02495fc0896eff48cd93f74b65eec732da2c68664896492615c063c0ca1b0bd537e9b367a52b"}]}, 0x9, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x80c}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0xc04}}, {0x20, &(0x7f0000000500)=@string={0x20, 0x3, "8c74149df5e2bcbb8b2ec767c144e32197eb14eaf43770779b69fa5aa6d2"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x420}}, {0x75, &(0x7f0000000580)=@string={0x75, 0x3, "f7d93490239684f87ea6b2aa238701feb397f0697051c27d7f37deb9f6043544172e6886f3233d71cb3f464f7eb3ad8661d86e0f163f0c6cffdd463cdec10da5d08ed1017f3bbf0698bc40692040c40f98fb738eb04456d1d775dfb11bc1fa8612ff6e18b55f68b4c1bfd8348de07fa080d639"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x446}}, {0xaa, &(0x7f0000000640)=@string={0xaa, 0x3, "7def9bca43673e6a431bf9bf8598b15bee29be9c322e03d32ec12164a855f5c59a6f881eb3cb21eb60dc5ffee94718800f2e0935a9aeed534ad878ab05d96be844ee2b495481403ae185f661388d542ca978a9d4aa5b662e6a6a306bb04dc2a12d9fdf897753ef6f9388fd404336668a59bb689b0388b07ff9818855e03bf7fbc7027ac5a16f8d42147bac1f0f8547bb2fc84e8acb91cd50140e960fd5e24f9bc9dbfb7810a65838"}}, {0xcb, &(0x7f0000000700)=@string={0xcb, 0x3, "08718c68ac25dbe9cabfe90ac4c3c9b7ac8f69f70bef2cf815be223f2aa57daf1c7da61c027a242fb9b71c1bc9b73ddfd283deaba2b69df20956b2c119d1234f92771b50ac2ef5d90f41e81393bed9da4f46b8c27942c965d159ff0be3c47b3b71c7e9658a3f466e956930f92f9d687eb8902621c41fa0f4d8300f0fcc5e164b9e4db62d1dea8954a35d7412608c8df5fec98ff2080c0752f07d4a9ffb64abef7625e2739ab2e7b257a5f3db3ef1009075ef6101e0361555632419ac433e595918e233b37d49778d9e"}}, {0xdc, &(0x7f00000009c0)=ANY=[@ANYBLOB="dc0384d122cef28da31a28247188f84d8d79d3bacf032ad6f36ae20e37b9b358d5de6de92a901df2187bb630f670c76830d1603e8ede5d23fa8efdedf741a1c4f58fe5d19ac42c1797738c9c2daee080f5d8adbeef1d0704600549d3caeaceef431e98fd8e31677b13dcafb5524f3c14997069e7035a85dc5f3aa606625a182f4151b0dc4597ac6068db969587327f5adfd205285902f43e2452b0d87b11656b0ac00bb81933d58f3659181048edd0293791ebddd29ef85435b9c0932fa41d86e0e6413ec7675f483c3f1d58a10a02c528d41f64c282df492f72de4560"]}]}) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0xae00) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000200), &(0x7f0000000240)=0x8) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000040)={&(0x7f0000000180)=[{0x6, 0x0, 0x4e, &(0x7f00000001c0)="9fbae97b18e54cffc6804433f329e43710ca0305e3546b0dd155c4c2a7beb59874cf7c6ab528aaf75bc3ca56914fc475a769662f17f9b6fb03c708df1d5455453e878ffaae743930408382728264"}], 0x1000016b}) 41.415396045s ago: executing program 5 (id=4049): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="340000000100030d2dbc7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00080000030200001400140064766d72703100"/28], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x16c3035550932880) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/fscaps', 0x103042, 0xb1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="37ec000024000400140012800b0001006970766c616e0000", @ANYRES32, @ANYBLOB="08001f"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x24004004) copy_file_range(r1, &(0x7f0000000000)=0x9, r2, 0x0, 0x200, 0x0) r3 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newqdisc={0xc4, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r4, {}, {0xe, 0xffff}, {0xffe0, 0x9}}, [@TCA_STAB={0xa0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x6, 0xfffb, 0x2, 0x2, 0x6, 0x100, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0xb7, 0x1, 0x10, 0x0, 0x2, 0x9, 0x80000001, 0x3}}, {0xa, 0x2, [0x9, 0x8, 0x7]}}, {{0x1c, 0x1, {0x8, 0x1, 0x1d30, 0x7, 0x1, 0x2, 0x4, 0x1}}, {0x6, 0x2, [0x87]}}, {{0x1c, 0x1, {0x8e, 0xfe, 0xffff, 0x6, 0x0, 0x9, 0x5, 0x5}}, {0xe, 0x2, [0xff, 0x2, 0x100, 0xfffc, 0x7fff]}}]}]}, 0xc4}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x50, 0x2c, 0xf3f, 0x70bd2b, 0x25dfdbbd, {0x0, 0x0, 0x0, r4, {0xc, 0xc}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x3ffe, 0x0, 0x0, {{0x7, 0x4, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x134}}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r4, 0x4, 0x6, 0x0, 0x8, 0x21, @empty, @rand_addr=' \x01\x00', 0x7a0, 0x20, 0x7, 0x6}}) r5 = socket(0x200000000000011, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) getpid() r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) preadv(r7, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_DMA(r7, 0xc0406429, &(0x7f00000002c0)={0x0, 0x8, &(0x7f00000001c0)=[0x4435, 0x7, 0x0, 0x3, 0x5, 0x9, 0x7, 0x371], &(0x7f0000000200)=[0x8, 0x9, 0x7, 0x5, 0x10000], 0x4, 0x4, 0x8, &(0x7f0000000240)=[0x7, 0x6, 0x8cb, 0x2], &(0x7f0000000280)=[0xfffffffb, 0xfff, 0x2fc, 0x6, 0x9]}) sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x4008800) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x10020, 0x0, 0x0) accept4(r6, 0x0, 0x0, 0x800) r8 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0x19) r9 = dup(r8) write$dsp(r9, &(0x7f00000001c0)="6df45a", 0x3) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r10, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x40, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r11 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r11, &(0x7f00000016c0)=[{{&(0x7f0000000680)={0x2, 0x4e24, @local}, 0xb, 0x0}}], 0x1, 0x4084) 41.412293945s ago: executing program 4 (id=4050): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, r6}) syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r4) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', 0x8, 0x1) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00}) fsopen(0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) userfaultfd(0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x1800) r8 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) 41.180929991s ago: executing program 2 (id=4051): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20980, 0x0) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x38) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000080)={0xf010004, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90d, 0x16, '\x00', @string=0x0}}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x85, 0x6, 0x0, 0x0, 0x10003, 0x3d, 0x400200cc4, 0xffd, 0x4, 0x9, 0x8001, 0x4, 0x2, 0xfffffffffffffffc, 0x6a, 0x8d], 0x60000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x100000000000000) 40.106992421s ago: executing program 0 (id=4052): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x8c}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xe}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x93}]}}}]}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 0s ago: executing program 33 (id=4052): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x8c}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xe}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x93}]}}}]}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x8080}, 0x0) kernel console output (not intermixed with test programs): dump_stack_lvl+0xe8/0x150 [ 647.308483][T17677] should_fail_ex+0x40c/0x560 [ 647.308509][T17677] should_failslab+0xa8/0x100 [ 647.308530][T17677] __kmalloc_noprof+0xe8/0x750 [ 647.308548][T17677] ? get_pid_task+0x20/0x1f0 [ 647.308561][T17677] ? tomoyo_realpath_from_path+0xef/0x640 [ 647.308579][T17677] tomoyo_realpath_from_path+0xef/0x640 [ 647.308593][T17677] ? lock_release+0x4b/0x3c0 [ 647.308618][T17677] ? tomoyo_path_number_perm+0x219/0x5f0 [ 647.308638][T17677] tomoyo_path_number_perm+0x246/0x5f0 [ 647.308657][T17677] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 647.308676][T17677] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 647.308696][T17677] ? preempt_count_add+0x91/0x190 [ 647.308718][T17677] ? sb_end_write+0xe5/0x190 [ 647.308741][T17677] ? vfs_write+0x9ce/0xba0 [ 647.308761][T17677] ? hook_file_ioctl+0x1f0/0x5c0 [ 647.308791][T17677] ? ksys_write+0x1fc/0x270 [ 647.308809][T17677] security_file_ioctl+0xc3/0x2a0 [ 647.308828][T17677] __se_sys_ioctl+0x47/0x170 [ 647.308848][T17677] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.308865][T17677] do_syscall_64+0x174/0x580 [ 647.308885][T17677] ? trace_irq_disable+0x3b/0x140 [ 647.308911][T17677] ? clear_bhb_loop+0x40/0x90 [ 647.308930][T17677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.308947][T17677] RIP: 0033:0x7f6d71d9ce59 [ 647.308964][T17677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 647.308979][T17677] RSP: 002b:00007f6d72c1a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 647.308998][T17677] RAX: ffffffffffffffda RBX: 00007f6d72015fa0 RCX: 00007f6d71d9ce59 [ 647.309011][T17677] RDX: 00002000000000c0 RSI: 00000000c1105511 RDI: 0000000000000003 [ 647.309023][T17677] RBP: 00007f6d72c1a090 R08: 0000000000000000 R09: 0000000000000000 [ 647.309034][T17677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 647.309045][T17677] R13: 00007f6d72016038 R14: 00007f6d72015fa0 R15: 00007f6d7213fa48 [ 647.309064][T17677] [ 647.309095][T17677] ERROR: Out of memory at tomoyo_realpath_from_path. [ 647.314308][T17679] netlink: 165 bytes leftover after parsing attributes in process `syz.4.3708'. [ 647.458404][ T8036] usb 6-1: device descriptor read/64, error -71 [ 647.531300][T17685] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 647.598504][ T24] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 647.705004][ T8036] usb usb6-port1: attempt power cycle [ 647.770723][ T5705] uclogic 0003:5543:0005.002B: unknown main item tag 0x0 [ 647.779509][ T5705] uclogic 0003:5543:0005.002B: unknown main item tag 0x0 [ 647.787003][ T5705] uclogic 0003:5543:0005.002B: unknown main item tag 0x0 [ 647.790032][ T24] usb 3-1: config 0 interface 0 altsetting 12 bulk endpoint 0x6 has invalid maxpacket 1023 [ 647.794432][ T5705] uclogic 0003:5543:0005.002B: unknown main item tag 0x0 [ 647.809131][ T24] usb 3-1: config 0 interface 0 altsetting 12 endpoint 0x82 has invalid wMaxPacketSize 0 [ 647.813786][ T5705] uclogic 0003:5543:0005.002B: unknown main item tag 0x0 [ 647.813827][ T5705] uclogic 0003:5543:0005.002B: unknown main item tag 0x0 [ 647.842413][ T5705] uclogic 0003:5543:0005.002B: unknown main item tag 0x0 [ 647.846513][ T24] usb 3-1: config 0 interface 0 altsetting 12 bulk endpoint 0x82 has invalid maxpacket 0 [ 647.849512][ T5705] uclogic 0003:5543:0005.002B: unknown main item tag 0x0 [ 647.849546][ T5705] uclogic 0003:5543:0005.002B: unknown main item tag 0x0 [ 647.869039][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 647.876832][ T5705] uclogic 0003:5543:0005.002B: unknown main item tag 0x0 [ 647.894986][ T24] usb 3-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 647.899335][T17691] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3714'. [ 647.908949][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.917749][ T5705] uclogic 0003:5543:0005.002B: hidraw0: USB HID v1.01 Device [syz] on usb-dummy_hcd.0-1/input0 [ 647.926186][ T24] usb 3-1: Product: syz [ 647.949097][ T24] usb 3-1: Manufacturer: syz [ 647.954931][ T24] usb 3-1: SerialNumber: syz [ 647.967196][ T24] usb 3-1: config 0 descriptor?? [ 647.974387][T17680] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 648.048407][ T8036] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 648.081429][ T8036] usb 6-1: device descriptor read/8, error -71 [ 648.129928][T17694] syzkaller0: entered promiscuous mode [ 648.153186][T17694] syzkaller0: entered allmulticast mode [ 648.220874][ T5705] usb 1-1: USB disconnect, device number 34 [ 648.266272][T17698] FAULT_INJECTION: forcing a failure. [ 648.266272][T17698] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 648.315467][T17698] CPU: 1 UID: 0 PID: 17698 Comm: syz.4.3717 Tainted: G L syzkaller #0 PREEMPT(full) [ 648.315496][T17698] Tainted: [L]=SOFTLOCKUP [ 648.315502][T17698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 648.315511][T17698] Call Trace: [ 648.315518][T17698] [ 648.315526][T17698] dump_stack_lvl+0xe8/0x150 [ 648.315549][T17698] should_fail_ex+0x40c/0x560 [ 648.315576][T17698] _copy_from_user+0x2d/0xb0 [ 648.315597][T17698] ___sys_recvmsg+0x173/0x5a0 [ 648.315622][T17698] ? __pfx____sys_recvmsg+0x10/0x10 [ 648.315644][T17698] ? __fget_files+0x2a/0x420 [ 648.315661][T17698] ? rcu_is_watching+0x15/0xb0 [ 648.315687][T17698] ? rcu_is_watching+0x15/0xb0 [ 648.315702][T17698] ? lock_release+0x4b/0x3c0 [ 648.315725][T17698] ? __might_fault+0xcb/0x130 [ 648.315743][T17698] do_recvmmsg+0x31a/0x7f0 [ 648.315768][T17698] ? __pfx_do_recvmmsg+0x10/0x10 [ 648.315795][T17698] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 648.315818][T17698] ? __fget_files+0x3a2/0x420 [ 648.315837][T17698] __x64_sys_recvmmsg+0x198/0x250 [ 648.315859][T17698] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 648.315882][T17698] ? rcu_is_watching+0x15/0xb0 [ 648.315899][T17698] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.315922][T17698] do_syscall_64+0x174/0x580 [ 648.315941][T17698] ? trace_irq_disable+0x3b/0x140 [ 648.315965][T17698] ? clear_bhb_loop+0x40/0x90 [ 648.315983][T17698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.316000][T17698] RIP: 0033:0x7f1538b9ce59 [ 648.316016][T17698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 648.316029][T17698] RSP: 002b:00007f1539997028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 648.316048][T17698] RAX: ffffffffffffffda RBX: 00007f1538e15fa0 RCX: 00007f1538b9ce59 [ 648.316060][T17698] RDX: 03fffffffffffde9 RSI: 0000200000008bc0 RDI: 0000000000000003 [ 648.316071][T17698] RBP: 00007f1539997090 R08: 0000000000000000 R09: 0000000000000000 [ 648.316082][T17698] R10: 0000000000010002 R11: 0000000000000246 R12: 0000000000000002 [ 648.316092][T17698] R13: 00007f1538e16038 R14: 00007f1538e15fa0 R15: 00007f1538f3fa48 [ 648.316109][T17698] [ 648.598386][ T8036] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 648.630867][ T8036] usb 6-1: device descriptor read/8, error -71 [ 648.690310][T17704] FAULT_INJECTION: forcing a failure. [ 648.690310][T17704] name failslab, interval 1, probability 0, space 0, times 0 [ 648.697678][T17706] netlink: 'syz.3.3720': attribute type 39 has an invalid length. [ 648.714863][T17704] CPU: 0 UID: 0 PID: 17704 Comm: syz.4.3719 Tainted: G L syzkaller #0 PREEMPT(full) [ 648.714893][T17704] Tainted: [L]=SOFTLOCKUP [ 648.714900][T17704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 648.714910][T17704] Call Trace: [ 648.714918][T17704] [ 648.714925][T17704] dump_stack_lvl+0xe8/0x150 [ 648.714950][T17704] should_fail_ex+0x40c/0x560 [ 648.714977][T17704] should_failslab+0xa8/0x100 [ 648.715001][T17704] __kmalloc_cache_node_noprof+0x8c/0x690 [ 648.715095][T17704] ? __get_vm_area_node+0x136/0x300 [ 648.715117][T17704] ? tomoyo_check_open_permission+0x38e/0x470 [ 648.715142][T17704] __get_vm_area_node+0x136/0x300 [ 648.715162][T17704] __vmalloc_node_range_noprof+0x358/0x1730 [ 648.715182][T17704] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 648.715206][T17704] ? rcu_is_watching+0x15/0xb0 [ 648.715227][T17704] ? rcu_is_watching+0x15/0xb0 [ 648.715244][T17704] ? rcu_is_watching+0x15/0xb0 [ 648.715261][T17704] ? lock_release+0x4b/0x3c0 [ 648.715287][T17704] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 648.715305][T17704] ? rcu_is_watching+0x15/0xb0 [ 648.715322][T17704] ? trace_irq_enable+0x3b/0x140 [ 648.715344][T17704] ? irqentry_exit+0x218/0x8f0 [ 648.715364][T17704] ? trace_irq_disable+0x3b/0x140 [ 648.715386][T17704] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 648.715407][T17704] __vmalloc_noprof+0xd2/0x120 [ 648.715427][T17704] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 648.715450][T17704] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 648.715472][T17704] ? bpf_prog_alloc+0x2a/0x1a0 [ 648.715495][T17704] bpf_prog_alloc+0x3c/0x1a0 [ 648.715518][T17704] bpf_prog_load+0x7f8/0x1c00 [ 648.715548][T17704] ? __pfx_bpf_prog_load+0x10/0x10 [ 648.715576][T17704] ? __might_fault+0xcb/0x130 [ 648.715597][T17704] __sys_bpf+0xd0d/0xd90 [ 648.715623][T17704] ? __pfx___sys_bpf+0x10/0x10 [ 648.715655][T17704] ? ksys_write+0x242/0x270 [ 648.715676][T17704] ? __pfx_ksys_write+0x10/0x10 [ 648.715708][T17704] __x64_sys_bpf+0xba/0xd0 [ 648.715729][T17704] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.715748][T17704] do_syscall_64+0x174/0x580 [ 648.715771][T17704] ? clear_bhb_loop+0x40/0x90 [ 648.715790][T17704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.715806][T17704] RIP: 0033:0x7f1538b9ce59 [ 648.715825][T17704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 648.715840][T17704] RSP: 002b:00007f1539997028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 648.715859][T17704] RAX: ffffffffffffffda RBX: 00007f1538e15fa0 RCX: 00007f1538b9ce59 [ 648.715873][T17704] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 648.715884][T17704] RBP: 00007f1539997090 R08: 0000000000000000 R09: 0000000000000000 [ 648.715894][T17704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 648.715905][T17704] R13: 00007f1538e16038 R14: 00007f1538e15fa0 R15: 00007f1538f3fa48 [ 648.715925][T17704] [ 648.715936][T17704] syz.4.3719: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 648.815686][ T8036] usb usb6-port1: unable to enumerate USB device [ 649.133989][T17704] ,cpuset=syz4,mems_allowed=0-1 [ 649.143527][T17704] CPU: 0 UID: 0 PID: 17704 Comm: syz.4.3719 Tainted: G L syzkaller #0 PREEMPT(full) [ 649.143557][T17704] Tainted: [L]=SOFTLOCKUP [ 649.143564][T17704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 649.143574][T17704] Call Trace: [ 649.143582][T17704] [ 649.143589][T17704] dump_stack_lvl+0xe8/0x150 [ 649.143613][T17704] warn_alloc+0x249/0x340 [ 649.143637][T17704] ? __pfx_warn_alloc+0x10/0x10 [ 649.143656][T17704] ? __get_vm_area_node+0x136/0x300 [ 649.143675][T17704] ? __get_vm_area_node+0x2af/0x300 [ 649.143695][T17704] __vmalloc_node_range_noprof+0x37d/0x1730 [ 649.143714][T17704] ? rcu_is_watching+0x15/0xb0 [ 649.143736][T17704] ? rcu_is_watching+0x15/0xb0 [ 649.143753][T17704] ? rcu_is_watching+0x15/0xb0 [ 649.143771][T17704] ? lock_release+0x4b/0x3c0 [ 649.143797][T17704] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 649.143816][T17704] ? rcu_is_watching+0x15/0xb0 [ 649.143834][T17704] ? trace_irq_enable+0x3b/0x140 [ 649.143857][T17704] ? irqentry_exit+0x218/0x8f0 [ 649.143878][T17704] ? trace_irq_disable+0x3b/0x140 [ 649.143900][T17704] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 649.143922][T17704] __vmalloc_noprof+0xd2/0x120 [ 649.143941][T17704] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 649.143965][T17704] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 649.143988][T17704] ? bpf_prog_alloc+0x2a/0x1a0 [ 649.144021][T17704] bpf_prog_alloc+0x3c/0x1a0 [ 649.144044][T17704] bpf_prog_load+0x7f8/0x1c00 [ 649.144072][T17704] ? __pfx_bpf_prog_load+0x10/0x10 [ 649.144100][T17704] ? __might_fault+0xcb/0x130 [ 649.144121][T17704] __sys_bpf+0xd0d/0xd90 [ 649.144147][T17704] ? __pfx___sys_bpf+0x10/0x10 [ 649.144181][T17704] ? ksys_write+0x242/0x270 [ 649.144202][T17704] ? __pfx_ksys_write+0x10/0x10 [ 649.144224][T17704] __x64_sys_bpf+0xba/0xd0 [ 649.144245][T17704] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.144263][T17704] do_syscall_64+0x174/0x580 [ 649.144285][T17704] ? clear_bhb_loop+0x40/0x90 [ 649.144303][T17704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.144319][T17704] RIP: 0033:0x7f1538b9ce59 [ 649.144335][T17704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 649.144347][T17704] RSP: 002b:00007f1539997028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 649.144365][T17704] RAX: ffffffffffffffda RBX: 00007f1538e15fa0 RCX: 00007f1538b9ce59 [ 649.144378][T17704] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 649.144389][T17704] RBP: 00007f1539997090 R08: 0000000000000000 R09: 0000000000000000 [ 649.144401][T17704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 649.144411][T17704] R13: 00007f1538e16038 R14: 00007f1538e15fa0 R15: 00007f1538f3fa48 [ 649.144430][T17704] [ 649.144438][T17704] Mem-Info: [ 649.288233][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 649.288249][ T30] audit: type=1326 audit(1781705259.249:3574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17711 comm="syz.3.3723" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6d71d9ce59 code=0x0 [ 649.293268][T17704] active_anon:9926 inactive_anon:0 isolated_anon:0 [ 649.293268][T17704] active_file:12976 inactive_file:3971 isolated_file:0 [ 649.293268][T17704] unevictable:954 dirty:532 writeback:0 [ 649.293268][T17704] slab_reclaimable:8510 slab_unreclaimable:158715 [ 649.293268][T17704] mapped:31467 shmem:2554 pagetables:1742 [ 649.293268][T17704] sec_pagetables:0 bounce:0 [ 649.293268][T17704] kernel_misc_reclaimable:0 [ 649.293268][T17704] free:1279578 free_pcp:11340 free_cma:0 [ 649.581803][ T24] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 649.590722][T17704] Node 0 active_anon:37756kB inactive_anon:0kB active_file:51896kB inactive_file:15752kB unevictable:2280kB isolated(anon):0kB isolated(file):0kB mapped:129960kB dirty:2124kB writeback:0kB shmem:6632kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13724kB pagetables:6628kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 649.642715][T17704] Node 1 active_anon:2048kB inactive_anon:0kB active_file:8kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:4kB writeback:0kB shmem:3584kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 649.723948][T17704] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 649.764026][T17704] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 649.770084][T17704] Node 0 DMA32 free:1253652kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37756kB inactive_anon:0kB active_file:51896kB inactive_file:15752kB unevictable:2280kB writepending:2124kB zspages:0kB present:3129332kB managed:2552428kB mlocked:0kB bounce:0kB free_pcp:45652kB local_pcp:25108kB free_cma:0kB [ 649.809834][T17704] lowmem_reserve[]: 0 0 0 0 0 [ 649.815835][T17704] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 649.852746][T17704] lowmem_reserve[]: 0 0 0 0 0 [ 649.868830][T17704] Node 1 Normal free:3846040kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:2048kB inactive_anon:0kB active_file:8kB inactive_file:132kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:4276kB local_pcp:0kB free_cma:0kB [ 649.906589][T17704] lowmem_reserve[]: 0 0 0 0 0 [ 649.906936][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 649.911596][T17704] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 649.911698][T17704] Node 0 [ 649.922907][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=c211, bcdDevice= 0.00 [ 649.940870][T17704] DMA32: 4858*4kB (U) 4786*8kB (UME) 3150*16kB (UME) 931*32kB (UME) 576*64kB (UME) 696*128kB (UME) 447*256kB (UME) 223*512kB (UME) 81*1024kB (UME) 9*2048kB (UME) 161*4096kB (UM) = 1253304kB [ 649.948605][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.980285][ T24] usb 1-1: config 0 descriptor?? [ 649.984789][T17704] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 650.011696][ T5705] usb 3-1: USB disconnect, device number 18 [ 650.040065][T17704] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 2*16kB (UM) 3*32kB (UM) 2*64kB (UM) 3*128kB (UM) 3*256kB (UM) 3*512kB (UM) 1*1024kB (U) 2*2048kB (UM) 937*4096kB (UM) = 3846040kB [ 650.075975][T17704] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 650.092076][T17704] Node 0 hugepages_total=4 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 650.106728][T17704] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 650.121556][T17704] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 650.171861][T17704] 19497 total pagecache pages [ 650.204410][T17704] 0 pages in swap cache [ 650.212415][T17704] Free swap = 124996kB [ 650.220133][T17704] Total swap = 124996kB [ 650.225529][T17704] 2097051 pages RAM [ 650.230710][T17704] 0 pages HighMem/MovableOnly [ 650.235665][T17704] 427164 pages reserved [ 650.275158][T17704] 0 pages cma reserved [ 650.462756][ T30] audit: type=1326 audit(1781705260.419:3575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17735 comm="syz.2.3731" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f300a39ce59 code=0x0 [ 650.575314][ T24] logitech 0003:046D:C211.002C: hidraw0: USB HID v7f.fd Device [HID 046d:c211] on usb-dummy_hcd.0-1/input0 [ 650.592741][ T24] logitech 0003:046D:C211.002C: no inputs found [ 650.760655][ T24] usb 1-1: USB disconnect, device number 35 [ 651.728778][ T24] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 651.788730][ T5616] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 651.888597][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 651.899487][ T24] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 651.927296][ T24] usb 4-1: config 179 has no interface number 0 [ 651.944507][ T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 651.957918][ T5718] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 651.978137][ T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 652.008618][ T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 652.021745][ T5616] usb 6-1: Using ep0 maxpacket: 32 [ 652.039587][ T5616] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 652.050619][ T5616] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.071654][ T24] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 652.085919][ T5616] usb 6-1: config 0 descriptor?? [ 652.107031][ T24] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 652.125253][ T24] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 652.135225][ T5718] usb 1-1: device descriptor read/64, error -71 [ 652.145394][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.169006][T17769] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 652.312577][ T5616] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 652.332179][ T5616] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 652.371568][ T5616] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 652.381015][ T5718] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 652.403844][ T5616] usb 6-1: media controller created [ 652.436808][ T24] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input62 [ 652.471198][ T5616] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 652.518549][ T5718] usb 1-1: device descriptor read/64, error -71 [ 652.575016][ T5616] az6027: usb out operation failed. (-71) [ 652.584714][ T5616] az6027: usb out operation failed. (-71) [ 652.592323][ T5616] stb0899_attach: Driver disabled by Kconfig [ 652.600249][ T5616] az6027: no front-end attached [ 652.600249][ T5616] [ 652.609192][ T5616] az6027: usb out operation failed. (-71) [ 652.638558][ T5616] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 652.651643][ T5718] usb usb1-port1: attempt power cycle [ 652.670612][ T5616] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input63 [ 652.691427][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 652.691441][ T5678] usb 4-1: USB disconnect, device number 122 [ 652.708333][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 652.748451][ T5616] dvb-usb: schedule remote query interval to 400 msecs. [ 652.764756][ T5616] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 652.784863][ T5616] usb 6-1: USB disconnect, device number 23 [ 652.835079][ T5616] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 653.008359][ T5718] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 653.051094][ T5718] usb 1-1: device descriptor read/8, error -71 [ 653.103386][T17804] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20004 [ 653.398812][ T5718] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 653.439096][ T5718] usb 1-1: device descriptor read/8, error -71 [ 653.549451][ T5718] usb usb1-port1: unable to enumerate USB device [ 653.633836][T17820] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3756'. [ 653.942090][T17829] syzkaller0: entered promiscuous mode [ 653.978983][T17829] syzkaller0: entered allmulticast mode [ 654.850838][T17851] vlan1: entered allmulticast mode [ 655.138508][ T5705] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 655.328692][ T5705] usb 3-1: Using ep0 maxpacket: 32 [ 655.376685][ T5705] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 655.419948][ T5705] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 655.454522][ T5705] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 655.503383][ T5705] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 655.529198][ T5705] usb 3-1: Product: syz [ 655.535810][ T5705] usb 3-1: Manufacturer: syz [ 655.587262][ T5705] hub 3-1:4.0: USB hub found [ 655.812163][T17870] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3770'. [ 655.849812][ T5705] hub 3-1:4.0: 2 ports detected [ 656.057085][ T5705] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 656.107215][ T5705] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 656.167413][T17880] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 656.216778][ T5705] usb 3-1: USB disconnect, device number 19 [ 656.636441][T17880] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 657.149461][ T8434] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 657.230736][T17892] macsec2: entered promiscuous mode [ 657.276696][T17892] geneve1: entered promiscuous mode [ 657.285186][T17892] macsec2: entered allmulticast mode [ 657.308064][T17892] geneve1: entered allmulticast mode [ 657.340240][ T8434] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 657.350407][T17892] geneve1: left allmulticast mode [ 657.363047][ T8434] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 657.374683][T17892] geneve1: left promiscuous mode [ 657.404014][ T8434] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 657.436544][ T8434] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 657.478505][ T8434] usb 3-1: config 0 interface 0 has no altsetting 0 [ 657.480944][ T5718] usb 1-1: new low-speed USB device number 40 using dummy_hcd [ 657.541077][ T8434] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 657.586786][ T8434] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 657.612196][ T8434] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 657.663378][ T8434] usb 3-1: config 0 interface 0 has no altsetting 0 [ 657.678455][ T5718] usb 1-1: Invalid ep0 maxpacket: 64 [ 657.701925][ T8434] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 657.728012][ T8434] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 657.756478][ T8434] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 657.793204][ T8434] usb 3-1: config 0 interface 0 has no altsetting 0 [ 657.844217][ T5718] usb 1-1: new low-speed USB device number 41 using dummy_hcd [ 657.850917][ T8434] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 657.877105][ T8434] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 657.897312][ T8434] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 657.914886][ T8434] usb 3-1: config 0 interface 0 has no altsetting 0 [ 657.926671][ T8434] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 657.942961][ T8434] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 657.955067][ T8434] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 657.975312][ T8434] usb 3-1: config 0 interface 0 has no altsetting 0 [ 658.009771][ T8434] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 658.031792][T17900] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3781'. [ 658.069328][ T8434] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 658.090636][ T5718] usb 1-1: Invalid ep0 maxpacket: 64 [ 658.099061][T17900] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 658.116236][ T8434] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 658.151573][ T8434] usb 3-1: config 0 interface 0 has no altsetting 0 [ 658.182869][ T5718] usb usb1-port1: attempt power cycle [ 658.187188][ T8434] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 658.225591][ T8434] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 658.255835][ T8434] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 658.270330][ T8434] usb 3-1: config 0 interface 0 has no altsetting 0 [ 658.355114][T17913] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 658.367413][ T8434] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 658.406112][ T8434] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 658.428368][ T8434] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 658.468817][ T8434] usb 3-1: config 0 interface 0 has no altsetting 0 [ 658.491356][ T8434] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 658.501605][ T8434] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 658.513469][ T8434] usb 3-1: Product: syz [ 658.518775][ T8434] usb 3-1: Manufacturer: syz [ 658.524216][ T8434] usb 3-1: SerialNumber: syz [ 658.554759][ T8434] usb 3-1: config 0 descriptor?? [ 658.578374][ T5718] usb 1-1: new low-speed USB device number 42 using dummy_hcd [ 658.604165][ T8434] yurex 3-1:0.0: Could not find endpoints [ 658.621641][ T5718] usb 1-1: Invalid ep0 maxpacket: 64 [ 658.760448][ T5718] usb 1-1: new low-speed USB device number 43 using dummy_hcd [ 658.799863][ T5718] usb 1-1: Invalid ep0 maxpacket: 64 [ 658.823071][ T5718] usb usb1-port1: unable to enumerate USB device [ 658.978720][ T5616] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 659.217399][ T5616] usb 6-1: unable to get BOS descriptor or descriptor too short [ 659.248579][ T5616] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 659.274949][ T5616] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 659.340545][ T5616] usb 6-1: New USB device found, idVendor=1235, idProduct=821d, bcdDevice= 0.40 [ 659.380880][ T5616] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.406191][ T5616] usb 6-1: Product: syz [ 659.415058][ T5616] usb 6-1: Manufacturer: syz [ 659.432506][ T5616] usb 6-1: SerialNumber: syz [ 659.510573][T17935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.541742][T17935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.854188][ T5616] usb 6-1: Focusrite vendor-specific interface not found [ 659.954964][ T5616] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 659.979934][ T5616] usb 6-1: USB disconnect, device number 24 [ 660.020866][ T8852] udevd[8852]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 660.354167][T17948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3795'. [ 660.573132][T17953] netlink: 'syz.0.3797': attribute type 39 has an invalid length. [ 660.771491][ T5718] usb 3-1: USB disconnect, device number 20 [ 660.937504][T17966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.957708][T17966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.023248][T17971] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3801'. [ 661.043595][ T5705] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 661.268500][ T5705] usb 6-1: Using ep0 maxpacket: 32 [ 661.280320][ T5705] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 8 [ 661.294946][ T5705] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 54, changing to 9 [ 661.326285][ T5705] usb 6-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 661.384864][ T30] audit: type=1326 audit(1781705271.349:3576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17978 comm="syz.3.3807" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6d71d9ce59 code=0x0 [ 661.423916][ T5705] usb 6-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 661.454231][ T5705] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.474291][ T5705] usb 6-1: Product: syz [ 661.481394][ T5705] usb 6-1: Manufacturer: syz [ 661.486594][ T5705] usb 6-1: SerialNumber: syz [ 661.496804][T17960] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 661.624328][T17983] bond1: (slave macvlan1): Device is not bonding slave [ 661.634111][T17983] bond1: option active_slave: invalid value (macvlan1) [ 661.643598][T17983] bond1 (unregistering): Released all slaves [ 661.670345][T17989] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3809'. [ 661.715473][T17960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.756521][T17960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.810874][ T5705] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 661.833029][ T5705] usb 6-1: MIDIStreaming interface descriptor not found [ 661.855180][ T5705] usb 6-1: too many endpoints [ 661.984946][ T5705] usb 6-1: USB disconnect, device number 25 [ 662.040377][ T9134] udevd[9134]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 662.372268][T18009] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3817'. [ 662.410508][T18009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3817'. [ 662.520750][T18015] netlink: 'syz.2.3818': attribute type 39 has an invalid length. [ 662.668803][ T5678] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 662.687510][T18021] netlink: 388 bytes leftover after parsing attributes in process `syz.3.3822'. [ 662.903759][ T5678] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 662.918051][ T5678] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 662.930364][ T5705] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 662.960956][ T5678] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 662.976737][ T5678] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 662.992273][ T5678] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 663.018691][ T5678] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 663.031047][ T5678] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 663.041920][ T5678] usb 1-1: Product: syz [ 663.047218][ T5678] usb 1-1: Manufacturer: syz [ 663.063290][ T5678] cdc_wdm 1-1:1.0: skipping garbage [ 663.069869][ T5678] cdc_wdm 1-1:1.0: skipping garbage [ 663.077637][ T5678] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 663.084974][ T5678] cdc_wdm 1-1:1.0: Unknown control protocol [ 663.108512][ T5705] usb 6-1: Using ep0 maxpacket: 32 [ 663.116984][ T5705] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 663.133919][ T5705] usb 6-1: config 0 interface 0 has no altsetting 0 [ 663.143013][ T5705] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 663.154219][ T5705] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.166297][ T5705] usb 6-1: config 0 descriptor?? [ 663.407838][ T5705] usbhid 6-1:0.0: can't add hid device: -71 [ 663.441679][ T5705] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 663.467408][ T5705] usb 6-1: USB disconnect, device number 26 [ 663.618423][ T5616] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 663.657005][ T8436] usb 1-1: USB disconnect, device number 44 [ 663.788403][ T5616] usb 3-1: Using ep0 maxpacket: 32 [ 663.802203][ T5616] usb 3-1: config 1 has an invalid interface number: 33 but max is 2 [ 663.820342][ T5616] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 663.848469][ T5616] usb 3-1: config 1 has no interface number 2 [ 663.875447][ T5616] usb 3-1: config 1 interface 1 altsetting 1 has an invalid endpoint descriptor of length 4, skipping [ 663.900314][ T5616] usb 3-1: config 1 interface 1 has no altsetting 0 [ 663.921700][ T5616] usb 3-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 663.946966][ T5616] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.967166][ T5616] usb 3-1: Product: syz [ 663.977331][ T5616] usb 3-1: Manufacturer: syz [ 663.993959][ T5616] usb 3-1: SerialNumber: syz [ 664.031331][T18049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.042153][T18049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.223738][ T5616] usb 3-1: interface 2 not found [ 664.231835][ T5616] usb 3-1: selecting invalid altsetting 0 [ 664.248570][ T5616] usb 3-1: selecting invalid altsetting 0 [ 664.256669][ T5616] usbtest 3-1:1.1: probe with driver usbtest failed with error -22 [ 664.267876][ T5616] usb 3-1: selecting invalid altsetting 0 [ 664.275411][ T5616] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 664.286033][ T5616] usb 3-1: selecting invalid altsetting 0 [ 664.292372][ T5616] snd-ua101 3-1:1.1: probe with driver snd-ua101 failed with error -22 [ 664.304865][ T5616] usb 3-1: USB disconnect, device number 21 [ 664.477123][T18051] FAULT_INJECTION: forcing a failure. [ 664.477123][T18051] name failslab, interval 1, probability 0, space 0, times 0 [ 664.491790][T18051] CPU: 1 UID: 0 PID: 18051 Comm: syz.3.3835 Tainted: G L syzkaller #0 PREEMPT(full) [ 664.491819][T18051] Tainted: [L]=SOFTLOCKUP [ 664.491826][T18051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 664.491837][T18051] Call Trace: [ 664.491845][T18051] [ 664.491852][T18051] dump_stack_lvl+0xe8/0x150 [ 664.491890][T18051] should_fail_ex+0x40c/0x560 [ 664.491917][T18051] should_failslab+0xa8/0x100 [ 664.491941][T18051] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 664.491960][T18051] ? rcu_is_watching+0x15/0xb0 [ 664.491979][T18051] ? __alloc_skb+0x1d7/0x7a0 [ 664.491998][T18051] ? trace_irq_enable+0x3b/0x140 [ 664.492023][T18051] __alloc_skb+0x1d7/0x7a0 [ 664.492044][T18051] netlink_ack+0x136/0xb30 [ 664.492068][T18051] ? __pfx_genl_rcv_msg+0x10/0x10 [ 664.492086][T18051] ? ref_tracker_free+0x689/0x830 [ 664.492102][T18051] ? __pfx_nl80211_post_doit+0x10/0x10 [ 664.492242][T18051] ? __pfx_ref_tracker_free+0x10/0x10 [ 664.492262][T18051] netlink_rcv_skb+0x2a4/0x4a0 [ 664.492284][T18051] ? __pfx_genl_rcv_msg+0x10/0x10 [ 664.492302][T18051] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 664.492328][T18051] ? down_read+0x2be/0x330 [ 664.492357][T18051] genl_rcv+0x28/0x40 [ 664.492372][T18051] netlink_unicast+0x7bb/0x940 [ 664.492396][T18051] netlink_sendmsg+0x813/0xb40 [ 664.492420][T18051] ? __pfx_netlink_sendmsg+0x10/0x10 [ 664.492441][T18051] ? aa_sock_msg_perm+0xf1/0x1b0 [ 664.492464][T18051] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 664.492480][T18051] ? __pfx_netlink_sendmsg+0x10/0x10 [ 664.492501][T18051] ____sys_sendmsg+0x9b9/0xa20 [ 664.492524][T18051] ? __pfx_____sys_sendmsg+0x10/0x10 [ 664.492543][T18051] ? lock_release+0x4b/0x3c0 [ 664.492565][T18051] ? import_iovec+0x73/0xa0 [ 664.492584][T18051] ___sys_sendmsg+0x2a5/0x360 [ 664.492603][T18051] ? rcu_is_watching+0x15/0xb0 [ 664.492618][T18051] ? get_pid_task+0x20/0x1f0 [ 664.492635][T18051] ? __pfx____sys_sendmsg+0x10/0x10 [ 664.492657][T18051] ? rcu_is_watching+0x15/0xb0 [ 664.492682][T18051] ? __fget_files+0x2a/0x420 [ 664.492698][T18051] ? __fget_files+0x3a2/0x420 [ 664.492714][T18051] __x64_sys_sendmsg+0x1b1/0x290 [ 664.492734][T18051] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 664.492759][T18051] ? rcu_is_watching+0x15/0xb0 [ 664.492775][T18051] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.492793][T18051] do_syscall_64+0x174/0x580 [ 664.492812][T18051] ? trace_irq_disable+0x3b/0x140 [ 664.492833][T18051] ? clear_bhb_loop+0x40/0x90 [ 664.492851][T18051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.492867][T18051] RIP: 0033:0x7f6d71d9ce59 [ 664.492895][T18051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 664.492910][T18051] RSP: 002b:00007f6d72c1a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 664.492928][T18051] RAX: ffffffffffffffda RBX: 00007f6d72015fa0 RCX: 00007f6d71d9ce59 [ 664.492941][T18051] RDX: 0000000000000840 RSI: 0000200000000300 RDI: 0000000000000003 [ 664.492952][T18051] RBP: 00007f6d72c1a090 R08: 0000000000000000 R09: 0000000000000000 [ 664.492963][T18051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 664.492974][T18051] R13: 00007f6d72016038 R14: 00007f6d72015fa0 R15: 00007f6d7213fa48 [ 664.492993][T18051] [ 665.036734][T18057] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 665.227834][T18064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3838'. [ 665.247472][T18060] tipc: Started in network mode [ 665.298675][T18060] tipc: Node identity 080211, cluster identity 4711 [ 665.354607][T18060] tipc: Enabled bearer , priority 0 [ 665.392146][T18069] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3840'. [ 665.398385][ T5616] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 665.580910][ T5616] usb 3-1: not running at top speed; connect to a high speed hub [ 665.631379][ T5616] usb 3-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 665.728386][ T5705] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 665.741520][ T5616] usb 3-1: config 1 interface 0 has no altsetting 0 [ 665.799235][ T5616] usb 3-1: New USB device found, idVendor=1241, idProduct=f767, bcdDevice= 0.40 [ 665.826139][ T5616] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.868494][ T5616] usb 3-1: Manufacturer: ј [ 665.874504][ T5616] usb 3-1: SerialNumber: 䌊骿㴫ዿꗎ䛄㸱둾뮇⏟ [ 665.927679][ T5705] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 665.958632][ T5705] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 666.002605][ T5705] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 666.091067][T18063] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3839'. [ 666.132277][T18063] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3839'. [ 666.173027][ T5705] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 666.181942][T18063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3839'. [ 666.266519][T18089] FAULT_INJECTION: forcing a failure. [ 666.266519][T18089] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 666.286416][ T5705] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.309209][ T5616] usbhid 3-1:1.0: can't add hid device: -71 [ 666.317448][ T5705] usb 1-1: Product: syz [ 666.330764][ T5616] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 666.332058][T18089] CPU: 0 UID: 0 PID: 18089 Comm: syz.3.3846 Tainted: G L syzkaller #0 PREEMPT(full) [ 666.332090][T18089] Tainted: [L]=SOFTLOCKUP [ 666.332096][T18089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 666.332106][T18089] Call Trace: [ 666.332115][T18089] [ 666.332123][T18089] dump_stack_lvl+0xe8/0x150 [ 666.332146][T18089] should_fail_ex+0x40c/0x560 [ 666.332173][T18089] _copy_from_iter+0x1d3/0x1660 [ 666.332190][T18089] ? skb_set_owner_w+0x263/0x3d0 [ 666.332217][T18089] ? __pfx__copy_from_iter+0x10/0x10 [ 666.332237][T18089] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 666.332261][T18089] skb_copy_datagram_from_iter+0xe6/0x720 [ 666.332375][T18089] ? skb_put+0x112/0x210 [ 666.332396][T18089] tun_get_user+0xc71/0x4350 [ 666.332461][T18089] ? is_bpf_text_address+0x292/0x2b0 [ 666.332490][T18089] ? lock_release+0x4b/0x3c0 [ 666.332513][T18089] ? arch_stack_walk+0xfb/0x150 [ 666.332535][T18089] ? aa_file_perm+0x4ed/0x15f0 [ 666.332551][T18089] ? __pfx_tun_get_user+0x10/0x10 [ 666.332572][T18089] ? kstrtoull+0x12f/0x1d0 [ 666.332596][T18089] ? ref_tracker_alloc+0x341/0x4b0 [ 666.332612][T18089] ? get_pid_task+0x20/0x1f0 [ 666.332627][T18089] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 666.332644][T18089] ? tun_get+0x1c/0x2f0 [ 666.332661][T18089] ? tun_get+0x1c/0x2f0 [ 666.332678][T18089] ? rcu_is_watching+0x15/0xb0 [ 666.332694][T18089] ? tun_get+0x1c/0x2f0 [ 666.332710][T18089] ? lock_release+0x4b/0x3c0 [ 666.332731][T18089] ? apparmor_file_permission+0x1f4/0x300 [ 666.332751][T18089] ? tun_get+0x1c/0x2f0 [ 666.332770][T18089] tun_chr_write_iter+0x113/0x200 [ 666.332789][T18089] vfs_write+0x612/0xba0 [ 666.332807][T18089] ? taprio_dequeue+0x26/0x540 [ 666.332832][T18089] ? __pfx_vfs_write+0x10/0x10 [ 666.332855][T18089] ? __fget_files+0x2a/0x420 [ 666.332948][T18089] ksys_write+0x150/0x270 [ 666.332976][T18089] ? __pfx_ksys_write+0x10/0x10 [ 666.332996][T18089] ? rcu_is_watching+0x15/0xb0 [ 666.333014][T18089] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.333033][T18089] do_syscall_64+0x174/0x580 [ 666.333054][T18089] ? clear_bhb_loop+0x40/0x90 [ 666.333072][T18089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.333088][T18089] RIP: 0033:0x7f6d71d9ce59 [ 666.333105][T18089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 666.333120][T18089] RSP: 002b:00007f6d72c1a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 666.333138][T18089] RAX: ffffffffffffffda RBX: 00007f6d72015fa0 RCX: 00007f6d71d9ce59 [ 666.333150][T18089] RDX: 000000000000fdef RSI: 0000200000000100 RDI: 0000000000000003 [ 666.333161][T18089] RBP: 00007f6d72c1a090 R08: 0000000000000000 R09: 0000000000000000 [ 666.333172][T18089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 666.333182][T18089] R13: 00007f6d72016038 R14: 00007f6d72015fa0 R15: 00007f6d7213fa48 [ 666.333198][T18089] [ 666.334739][ T5705] usb 1-1: Manufacturer: syz [ 666.792324][ T5678] tipc: Node number set to 134353152 [ 666.874807][ T5616] usb 3-1: USB disconnect, device number 22 [ 667.067622][ T5705] usb 1-1: SerialNumber: syz [ 667.083733][ T5705] usb 1-1: config 0 descriptor?? [ 667.142121][T18061] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 667.171296][T18061] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 667.204026][T18097] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3851'. [ 667.230057][T18097] bridge_slave_0: default FDB implementation only supports local addresses [ 667.258002][T18097] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3851'. [ 667.349732][ T5705] usb 1-1: ucan: probing device on interface #0 [ 667.445219][T18101] syzkaller0: entered promiscuous mode [ 667.461908][T18101] syzkaller0: entered allmulticast mode [ 668.490299][ T5718] usb 4-1: new full-speed USB device number 123 using dummy_hcd [ 668.613596][T18124] tipc: Enabled bearer , priority 10 [ 668.692158][ T5718] usb 4-1: not running at top speed; connect to a high speed hub [ 668.746908][ T5718] usb 4-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 668.820252][ T5705] usb 1-1: ucan: failed to retrieve device info [ 668.828360][ T5705] usb 1-1: ucan: probe failed; try to update the device firmware [ 668.882750][ T5718] usb 4-1: config 1 interface 0 has no altsetting 0 [ 668.943018][ T5718] usb 4-1: New USB device found, idVendor=1241, idProduct=f767, bcdDevice= 0.40 [ 668.984427][ T5718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.996798][ T5718] usb 4-1: Manufacturer: ј [ 669.005911][ T5718] usb 4-1: SerialNumber: 䌊骿㴫ዿꗎ䛄㸱둾뮇⏟ [ 669.167753][T18133] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 669.170797][T18132] netlink: 'syz.2.3865': attribute type 1 has an invalid length. [ 669.234432][T18119] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3860'. [ 669.249076][T18119] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3860'. [ 669.264006][T18119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3860'. [ 669.304913][T18136] FAULT_INJECTION: forcing a failure. [ 669.304913][T18136] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 669.305422][ T5718] usbhid 4-1:1.0: can't add hid device: -71 [ 669.321695][T18136] CPU: 0 UID: 0 PID: 18136 Comm: syz.2.3866 Tainted: G L syzkaller #0 PREEMPT(full) [ 669.321721][T18136] Tainted: [L]=SOFTLOCKUP [ 669.321727][T18136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 669.321736][T18136] Call Trace: [ 669.321747][T18136] [ 669.321754][T18136] dump_stack_lvl+0xe8/0x150 [ 669.321775][T18136] should_fail_ex+0x40c/0x560 [ 669.321799][T18136] strncpy_from_user+0x36/0x2c0 [ 669.321820][T18136] do_getname+0x77/0x250 [ 669.321844][T18136] user_path_at+0x2a/0x160 [ 669.321861][T18136] __se_sys_mount+0x2dc/0x420 [ 669.321879][T18136] ? __pfx___se_sys_mount+0x10/0x10 [ 669.321898][T18136] ? rcu_is_watching+0x15/0xb0 [ 669.321915][T18136] ? __x64_sys_mount+0x20/0xc0 [ 669.321930][T18136] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.321947][T18136] do_syscall_64+0x174/0x580 [ 669.321967][T18136] ? trace_irq_disable+0x3b/0x140 [ 669.322082][T18136] ? clear_bhb_loop+0x40/0x90 [ 669.322101][T18136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.322118][T18136] RIP: 0033:0x7f300a39ce59 [ 669.322136][T18136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 669.322150][T18136] RSP: 002b:00007f300b2a7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 669.322168][T18136] RAX: ffffffffffffffda RBX: 00007f300a615fa0 RCX: 00007f300a39ce59 [ 669.322180][T18136] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000000 [ 669.322190][T18136] RBP: 00007f300b2a7090 R08: 0000000000000000 R09: 0000000000000000 [ 669.322200][T18136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 669.322208][T18136] R13: 00007f300a616038 R14: 00007f300a615fa0 R15: 00007f300a73fa48 [ 669.322232][T18136] [ 669.617979][ T5718] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 669.636283][ T5718] usb 4-1: USB disconnect, device number 123 [ 669.644547][T18141] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3868'. [ 669.655769][ T8036] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 669.818393][ T8036] usb 6-1: Using ep0 maxpacket: 16 [ 669.829785][ T8036] usb 6-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 669.846932][ T8036] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.868142][ T8036] usb 6-1: config 0 descriptor?? [ 669.948401][ T5678] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 670.128396][ T5678] usb 3-1: Using ep0 maxpacket: 8 [ 670.186684][ T5616] usb 1-1: USB disconnect, device number 45 [ 670.301724][T18157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 670.343047][T18130] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 670.357619][T18157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 670.377915][ T5678] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 670.412440][T16260] bridge_slave_1: left allmulticast mode [ 670.413359][ T5678] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 670.437153][T16260] bridge_slave_1: left promiscuous mode [ 670.445617][T18157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 670.459972][ T5678] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 670.470717][ T8036] usbhid 6-1:0.0: can't add hid device: -71 [ 670.481483][T16260] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.493228][ T5678] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 670.499934][ T8036] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 670.520682][ T5678] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 670.545271][T18157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 670.560992][T16260] bridge_slave_0: left allmulticast mode [ 670.571970][T16260] bridge_slave_0: left promiscuous mode [ 670.597592][T16260] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.613465][ T8036] usb 6-1: USB disconnect, device number 27 [ 670.640934][T16260] pim6reg: left allmulticast mode [ 670.686632][ T5678] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 670.706163][ T5678] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.773780][T18167] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 670.782980][T18167] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 670.800566][T18167] vhci_hcd vhci_hcd.0: Device attached [ 670.886373][T18170] __nla_validate_parse: 2 callbacks suppressed [ 670.886423][T18170] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3877'. [ 671.004686][T16260] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 671.053966][T16260] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 671.068605][ T8036] usb 34-1: SetAddress Request (6) to port 0 [ 671.068963][T16260] bond0 (unregistering): Released all slaves [ 671.080184][ T8036] usb 34-1: new SuperSpeed USB device number 6 using vhci_hcd [ 671.093564][T16260] bond1 (unregistering): Released all slaves [ 671.111735][T16260] bond2 (unregistering): Released all slaves [ 671.139182][ T5678] usb 3-1: GET_CAPABILITIES returned 0 [ 671.147695][ T5678] usbtmc 3-1:16.0: can't read capabilities [ 671.286693][T16260] : left promiscuous mode [ 671.419770][T16260] tipc: Disabling bearer [ 671.422592][ T8434] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 671.427167][T16260] tipc: Left network mode [ 671.578396][ T8434] usb 1-1: device descriptor read/64, error -71 [ 671.623527][T18186] netlink: 1532 bytes leftover after parsing attributes in process `syz.5.3881'. [ 671.634480][T18186] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3881'. [ 671.657315][T16260] hsr_slave_0: left promiscuous mode [ 671.668784][T16260] hsr_slave_1: left promiscuous mode [ 671.677081][T16260] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 671.694571][T16260] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 671.708077][ T5718] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 671.722817][T16260] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 671.737395][T16260] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 671.775104][T18187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3867'. [ 671.803062][T16260] veth1_macvtap: left promiscuous mode [ 671.822365][T16260] veth0_macvtap: left promiscuous mode [ 671.833933][T16260] veth1_vlan: left promiscuous mode [ 671.843575][T16260] veth0_vlan: left promiscuous mode [ 671.870104][ T8434] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 671.871221][ T5718] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 671.913425][ T5718] usb 4-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 671.946513][ T5718] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.975678][T18194] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3882'. [ 671.990276][ T5718] usb 4-1: config 0 descriptor?? [ 672.032855][ T5718] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 672.049919][ T8434] usb 1-1: device descriptor read/64, error -71 [ 672.189486][ T8434] usb usb1-port1: attempt power cycle [ 672.318785][ T5718] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 672.541843][ T5718] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 672.564681][ T5718] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 672.597006][ T5718] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 672.635924][ T5718] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 672.666852][ T5718] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.687201][ T5718] usb 6-1: Product: syz [ 672.696803][ T5718] usb 6-1: Manufacturer: syz [ 672.713659][ T5718] usb 6-1: SerialNumber: syz [ 672.723958][ T8434] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 672.748070][ T5718] usb 6-1: config 0 descriptor?? [ 672.761728][ T8434] usb 1-1: device descriptor read/8, error -71 [ 672.783146][T18195] raw-gadget.8 gadget.5: fail, usb_ep_enable returned -22 [ 672.795622][T18195] raw-gadget.8 gadget.5: fail, usb_ep_enable returned -22 [ 672.809975][ T5718] usb 6-1: ucan: probing device on interface #0 [ 672.949658][T16260] IPVS: stop unused estimator thread 0... [ 673.151416][ T8434] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 673.179486][ T8434] usb 1-1: device descriptor read/8, error -71 [ 673.299177][ T8434] usb usb1-port1: unable to enumerate USB device [ 673.433445][T18198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 673.460954][T18198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 673.510930][T18198] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3883'. [ 673.512075][ T5616] usb 3-1: USB disconnect, device number 23 [ 673.549412][T18198] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3883'. [ 673.568499][T18198] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3883'. [ 673.656276][ T24] usb 4-1: USB disconnect, device number 124 [ 673.806750][T18168] vhci_hcd: connection reset by peer [ 673.844417][ T6793] vhci_hcd vhci_hcd.0: stop threads [ 673.880152][ T6793] vhci_hcd vhci_hcd.0: release socket [ 673.908009][ T6793] vhci_hcd vhci_hcd.0: disconnect device [ 674.079813][ T5718] usb 6-1: ucan: failed to retrieve device info [ 674.104772][ T5718] usb 6-1: ucan: probe failed; try to update the device firmware [ 674.248478][ T5705] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 674.670216][ T5705] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 674.683041][ T5705] usb 3-1: config 0 has no interface number 0 [ 674.696856][ T5705] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 674.710261][ T8436] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 674.723671][ T5705] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.734682][ T5705] usb 3-1: Product: syz [ 674.743198][ T5705] usb 3-1: Manufacturer: syz [ 674.750434][ T5705] usb 3-1: SerialNumber: syz [ 674.761745][ T5705] usb 3-1: config 0 descriptor?? [ 674.818472][ T5616] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 674.948764][ T8436] usb 4-1: device descriptor read/64, error -71 [ 674.975496][ T5705] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 674.991316][ T5616] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 675.003152][ T5616] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 675.008762][ T5705] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 675.035774][ T5616] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 675.037167][ T5705] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 675.070097][ T5705] usb 3-1: media controller created [ 675.070115][ T5616] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 675.070141][ T5616] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 675.094846][ T5705] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 675.128061][ T5616] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 675.146556][ T5616] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 675.164399][ T5616] usb 1-1: Product: syz [ 675.170757][ T5616] usb 1-1: Manufacturer: syz [ 675.179602][ T5616] cdc_wdm 1-1:1.0: skipping garbage [ 675.188146][ T5616] cdc_wdm 1-1:1.0: skipping garbage [ 675.198059][ T5616] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 675.209726][ T5616] cdc_wdm 1-1:1.0: Unknown control protocol [ 675.256449][ T8436] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 675.363987][ T5616] usb 6-1: USB disconnect, device number 28 [ 675.430580][T18210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 675.446870][T18212] sctp: [Deprecated]: syz.5.3888 (pid 18212) Use of int in max_burst socket option deprecated. [ 675.446870][T18212] Use struct sctp_assoc_value instead [ 675.479712][ T8436] usb 4-1: device descriptor read/64, error -71 [ 675.482501][T18210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 675.606192][ T8436] usb usb4-port1: attempt power cycle [ 675.783291][ T5616] usb 1-1: USB disconnect, device number 50 [ 675.988590][ T8436] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 676.020245][ T8436] usb 4-1: device descriptor read/8, error -71 [ 676.158553][ T8036] usb 34-1: device descriptor read/8, error -110 [ 676.302255][ T5705] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 676.339086][ T8436] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 676.423199][ T5705] usb 3-1: USB disconnect, device number 24 [ 676.559945][ T8036] usb usb34-port1: attempt power cycle [ 676.607594][ T8436] usb 4-1: device descriptor read/8, error -71 [ 676.658817][ T5718] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 676.733016][ T8436] usb usb4-port1: unable to enumerate USB device [ 676.820093][ T5718] usb 1-1: not running at top speed; connect to a high speed hub [ 676.838065][ T5718] usb 1-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 676.860901][ T5718] usb 1-1: config 1 interface 0 has no altsetting 0 [ 676.878208][ T5718] usb 1-1: New USB device found, idVendor=1241, idProduct=f767, bcdDevice= 0.40 [ 676.897547][ T5718] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.911687][ T5718] usb 1-1: Manufacturer: ј [ 676.917902][ T5718] usb 1-1: SerialNumber: 䌊骿㴫ዿꗎ䛄㸱둾뮇⏟ [ 676.928602][ T5705] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 676.963403][T18241] fuse: Unknown parameter 'vd' [ 676.983906][T18242] netlink: 'syz.5.3897': attribute type 16 has an invalid length. [ 676.994336][T18242] netlink: 'syz.5.3897': attribute type 17 has an invalid length. [ 677.026022][T18239] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.046469][T18239] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.078898][ T5705] usb 3-1: device descriptor read/64, error -71 [ 677.139493][ T8036] usb usb34-port1: unable to enumerate USB device [ 677.160522][T18220] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3892'. [ 677.188034][T18220] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3892'. [ 677.216457][T18220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3892'. [ 677.234121][T18242] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.242975][T18242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 677.270787][T18242] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.279928][T18242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 677.308555][T17593] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 677.320294][ T5718] usbhid 1-1:1.0: can't add hid device: -71 [ 677.329675][ T5718] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 677.367107][ T5718] usb 1-1: USB disconnect, device number 51 [ 677.431301][ T5705] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 677.544772][T17593] usb 6-1: no configurations [ 677.557048][T17593] usb 6-1: can't read configurations, error -22 [ 677.638673][ T5705] usb 3-1: device descriptor read/64, error -71 [ 677.708646][T17593] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 677.788722][ T5705] usb usb3-port1: attempt power cycle [ 677.871566][T17593] usb 6-1: no configurations [ 677.891710][T17593] usb 6-1: can't read configurations, error -22 [ 677.917598][T17593] usb usb6-port1: attempt power cycle [ 678.176296][ T30] audit: type=1326 audit(1781705288.139:3577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18260 comm="syz.3.3904" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6d71d9ce59 code=0x0 [ 678.225883][ T5705] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 678.243346][T18263] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3904'. [ 678.266052][T18263] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3904'. [ 678.278416][T17593] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 678.279880][ T5705] usb 3-1: device descriptor read/8, error -71 [ 678.321200][T17593] usb 6-1: no configurations [ 678.329820][T17593] usb 6-1: can't read configurations, error -22 [ 678.469083][T17593] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 678.499752][T17593] usb 6-1: no configurations [ 678.505848][T17593] usb 6-1: can't read configurations, error -22 [ 678.515564][T17593] usb usb6-port1: unable to enumerate USB device [ 678.623575][ T5705] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 678.649318][ T5705] usb 3-1: device descriptor read/8, error -71 [ 678.696862][T18265] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 678.769518][ T5705] usb usb3-port1: unable to enumerate USB device [ 678.826952][T18269] FAULT_INJECTION: forcing a failure. [ 678.826952][T18269] name failslab, interval 1, probability 0, space 0, times 0 [ 678.845911][T18269] CPU: 1 UID: 0 PID: 18269 Comm: syz.4.3907 Tainted: G L syzkaller #0 PREEMPT(full) [ 678.845937][T18269] Tainted: [L]=SOFTLOCKUP [ 678.845942][T18269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 678.845952][T18269] Call Trace: [ 678.845960][T18269] [ 678.845968][T18269] dump_stack_lvl+0xe8/0x150 [ 678.845989][T18269] should_fail_ex+0x40c/0x560 [ 678.846006][T18269] should_failslab+0xa8/0x100 [ 678.846022][T18269] __kmalloc_noprof+0xe8/0x750 [ 678.846034][T18269] ? tomoyo_encode+0x2ad/0x570 [ 678.846045][T18269] tomoyo_encode+0x2ad/0x570 [ 678.846054][T18269] tomoyo_realpath_from_path+0x5fa/0x640 [ 678.846065][T18269] ? tomoyo_path_number_perm+0x219/0x5f0 [ 678.846078][T18269] tomoyo_path_number_perm+0x246/0x5f0 [ 678.846090][T18269] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 678.846103][T18269] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 678.846115][T18269] ? preempt_count_add+0x91/0x190 [ 678.846130][T18269] ? rcu_is_watching+0x15/0xb0 [ 678.846142][T18269] ? hook_file_ioctl+0x1f0/0x5c0 [ 678.846158][T18269] ? lock_release+0x4b/0x3c0 [ 678.846174][T18269] ? __fget_files+0x2a/0x420 [ 678.846204][T18269] ? __fget_files+0x3a2/0x420 [ 678.846213][T18269] ? __fget_files+0x2a/0x420 [ 678.846222][T18269] security_file_ioctl+0xc3/0x2a0 [ 678.846236][T18269] __se_sys_ioctl+0x47/0x170 [ 678.846249][T18269] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.846258][T18269] do_syscall_64+0x174/0x580 [ 678.846272][T18269] ? trace_irq_disable+0x3b/0x140 [ 678.846286][T18269] ? clear_bhb_loop+0x40/0x90 [ 678.846297][T18269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.846306][T18269] RIP: 0033:0x7f1538b9ce59 [ 678.846317][T18269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 678.846325][T18269] RSP: 002b:00007f1539997028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 678.846337][T18269] RAX: ffffffffffffffda RBX: 00007f1538e15fa0 RCX: 00007f1538b9ce59 [ 678.846344][T18269] RDX: 00002000000001c0 RSI: 00000000c01464a6 RDI: 0000000000000003 [ 678.846350][T18269] RBP: 00007f1539997090 R08: 0000000000000000 R09: 0000000000000000 [ 678.846356][T18269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 678.846361][T18269] R13: 00007f1538e16038 R14: 00007f1538e15fa0 R15: 00007f1538f3fa48 [ 678.846371][T18269] [ 678.846388][T18269] ERROR: Out of memory at tomoyo_realpath_from_path. [ 679.336917][T18272] sg_write: data in/out 49116/154 bytes for SCSI command 0x0-- guessing data in; [ 679.336917][T18272] program syz.3.3909 not setting count and/or reply_len properly [ 679.401158][T18272] sg_write: data in/out 1799398584/111 bytes for SCSI command 0x8e-- guessing data in; [ 679.401158][T18272] program syz.3.3909 not setting count and/or reply_len properly [ 679.648565][T17593] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 679.726348][T18290] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3916'. [ 679.768602][T18290] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 679.870898][T17593] usb 1-1: Using ep0 maxpacket: 8 [ 679.896688][T17593] usb 1-1: unable to get BOS descriptor or descriptor too short [ 679.942443][T17593] usb 1-1: config 117 has an invalid interface number: 163 but max is 0 [ 679.981524][T17593] usb 1-1: config 117 has no interface number 0 [ 679.990474][T18296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.003754][T17593] usb 1-1: too many endpoints for config 117 interface 163 altsetting 4: 159, using maximum allowed: 30 [ 680.022718][T18298] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 680.028168][T18296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.047936][T17593] usb 1-1: config 117 interface 163 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 159 [ 680.056754][T18296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.082293][ T5678] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 680.091298][T17593] usb 1-1: config 117 interface 163 has no altsetting 0 [ 680.102176][T17593] usb 1-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=5d.24 [ 680.114088][T18296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.128882][T17593] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.149286][T17593] usb 1-1: Product: syz [ 680.149307][T17593] usb 1-1: Manufacturer: syz [ 680.149323][T17593] usb 1-1: SerialNumber: syz [ 680.360291][T17593] f81534a_ctrl 1-1:117.163: probe with driver f81534a_ctrl failed with error -71 [ 680.375118][T17593] usb 1-1: USB disconnect, device number 52 [ 680.383109][ T29] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 680.450382][ T5678] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 680.468124][ T5678] usb 3-1: config 0 has no interfaces? [ 680.475251][ T5678] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 680.486116][ T5678] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.497198][ T5678] usb 3-1: config 0 descriptor?? [ 680.540497][ T29] usb 6-1: Using ep0 maxpacket: 32 [ 680.553331][ T29] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 680.565597][ T29] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 680.577999][ T29] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 680.591858][ T29] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 81 [ 680.610335][ T29] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 680.621756][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.632892][ T29] usb 6-1: config 0 descriptor?? [ 680.726296][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 680.740707][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 680.754190][ T5705] usb 3-1: USB disconnect, device number 29 [ 680.863661][T18300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.876091][T18300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.915768][ T5678] usb 6-1: USB disconnect, device number 33 [ 681.096721][T18309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.109573][T18309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.342150][T18323] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3923'. [ 681.563044][ T8036] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 681.768442][ T8036] usb 4-1: device descriptor read/64, error -71 [ 681.824845][T18333] FAULT_INJECTION: forcing a failure. [ 681.824845][T18333] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 681.846728][T18333] CPU: 0 UID: 0 PID: 18333 Comm: syz.5.3930 Tainted: G L syzkaller #0 PREEMPT(full) [ 681.846748][T18333] Tainted: [L]=SOFTLOCKUP [ 681.846752][T18333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 681.846758][T18333] Call Trace: [ 681.846764][T18333] [ 681.846770][T18333] dump_stack_lvl+0xe8/0x150 [ 681.846786][T18333] should_fail_ex+0x40c/0x560 [ 681.846803][T18333] _copy_from_user+0x2d/0xb0 [ 681.846817][T18333] restore_altstack+0xae/0x4f0 [ 681.846827][T18333] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 681.846845][T18333] ? __pfx_restore_altstack+0x10/0x10 [ 681.846859][T18333] ? rcu_is_watching+0x15/0xb0 [ 681.846873][T18333] ? trace_irq_enable+0x3b/0x140 [ 681.846891][T18333] __ia32_sys_rt_sigreturn+0x2bd/0x8c0 [ 681.846909][T18333] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 681.846925][T18333] ? _raw_spin_unlock_irq+0x2e/0x50 [ 681.846940][T18333] ? signal_setup_done+0x22f/0x310 [ 681.846961][T18333] ? arch_do_signal_or_restart+0x4f4/0x860 [ 681.846981][T18333] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 681.847001][T18333] ? __task_pid_nr_ns+0x28/0x470 [ 681.847015][T18333] ? rcu_is_watching+0x15/0xb0 [ 681.847032][T18333] ? rcu_is_watching+0x15/0xb0 [ 681.847049][T18333] ? __secure_computing+0xe7/0x2b0 [ 681.847064][T18333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.847082][T18333] do_syscall_64+0x174/0x580 [ 681.847101][T18333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.847112][T18333] ? clear_bhb_loop+0x40/0x90 [ 681.847123][T18333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.847133][T18333] RIP: 0033:0x7f5267f3e1d9 [ 681.847143][T18333] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 681.847152][T18333] RSP: 002b:00007f5268dada80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 681.847163][T18333] RAX: ffffffffffffffda RBX: 00007f5268215fa0 RCX: 00007f5267f3e1d9 [ 681.847170][T18333] RDX: 00007f5268dada80 RSI: 00007f5268dadbb0 RDI: 0000000000000021 [ 681.847176][T18333] RBP: 00007f5268dae090 R08: 0000000000000007 R09: 0000000000000009 [ 681.847183][T18333] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 681.847188][T18333] R13: 00007f5268216038 R14: 00007f5268215fa0 R15: 00007f526833fa48 [ 681.847198][T18333] [ 682.228499][ T8036] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 682.294178][T18336] FAULT_INJECTION: forcing a failure. [ 682.294178][T18336] name failslab, interval 1, probability 0, space 0, times 0 [ 682.313936][T18336] CPU: 0 UID: 0 PID: 18336 Comm: syz.5.3932 Tainted: G L syzkaller #0 PREEMPT(full) [ 682.313964][T18336] Tainted: [L]=SOFTLOCKUP [ 682.313970][T18336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 682.313980][T18336] Call Trace: [ 682.313987][T18336] [ 682.313994][T18336] dump_stack_lvl+0xe8/0x150 [ 682.314017][T18336] should_fail_ex+0x40c/0x560 [ 682.314039][T18336] should_failslab+0xa8/0x100 [ 682.314060][T18336] __kmalloc_cache_noprof+0x88/0x660 [ 682.314078][T18336] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 682.314096][T18336] ? netdevice_event+0x3aa/0x8a0 [ 682.314216][T18336] netdevice_event+0x3aa/0x8a0 [ 682.314351][T18336] ? rcu_is_watching+0x15/0xb0 [ 682.314442][T18336] ? __up_read+0x284/0x900 [ 682.314458][T18336] ? __pfx_netdevice_event+0x10/0x10 [ 682.314475][T18336] ? __pfx_del_netdev_upper_ips+0x10/0x10 [ 682.314491][T18336] ? __pfx_upper_device_filter+0x10/0x10 [ 682.314507][T18336] ? __pfx_add_netdev_ips+0x10/0x10 [ 682.314522][T18336] ? __pfx_is_eth_port_of_netdev_filter+0x10/0x10 [ 682.314543][T18336] notifier_call_chain+0x1a5/0x3d0 [ 682.314569][T18336] __netdev_upper_dev_unlink+0x1e0/0x780 [ 682.314643][T18336] ? __pfx___netdev_upper_dev_unlink+0x10/0x10 [ 682.314679][T18336] ? __mutex_trylock_common+0x15f/0x270 [ 682.314695][T18336] ? netdev_upper_dev_unlink+0x8b/0xe0 [ 682.314714][T18336] netdev_upper_dev_unlink+0x99/0xe0 [ 682.314732][T18336] ? __pfx_netdev_upper_dev_unlink+0x10/0x10 [ 682.314754][T18336] unregister_vlan_dev+0x327/0x4c0 [ 682.314925][T18336] vlan_ioctl_handler+0x2d3/0x630 [ 682.314946][T18336] ? __pfx___mutex_lock+0x10/0x10 [ 682.314966][T18336] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 682.314983][T18336] ? hook_file_ioctl+0x1f0/0x5c0 [ 682.315010][T18336] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 682.315027][T18336] sock_ioctl+0x612/0x7e0 [ 682.315042][T18336] ? __pfx_sock_ioctl+0x10/0x10 [ 682.315056][T18336] ? ksys_write+0x1fc/0x270 [ 682.315077][T18336] ? bpf_lsm_file_ioctl+0x9/0x20 [ 682.315095][T18336] ? __pfx_sock_ioctl+0x10/0x10 [ 682.315107][T18336] __se_sys_ioctl+0xfc/0x170 [ 682.315126][T18336] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.315141][T18336] do_syscall_64+0x174/0x580 [ 682.315159][T18336] ? trace_irq_disable+0x3b/0x140 [ 682.315178][T18336] ? clear_bhb_loop+0x40/0x90 [ 682.315195][T18336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.315209][T18336] RIP: 0033:0x7f5267f9ce59 [ 682.315223][T18336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 682.315236][T18336] RSP: 002b:00007f5268dae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 682.315254][T18336] RAX: ffffffffffffffda RBX: 00007f5268215fa0 RCX: 00007f5267f9ce59 [ 682.315265][T18336] RDX: 0000200000000300 RSI: 0000000000008983 RDI: 0000000000000004 [ 682.315276][T18336] RBP: 00007f5268dae090 R08: 0000000000000000 R09: 0000000000000000 [ 682.315284][T18336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 682.315293][T18336] R13: 00007f5268216038 R14: 00007f5268215fa0 R15: 00007f526833fa48 [ 682.315307][T18336] [ 682.498951][ T8036] usb 4-1: device descriptor read/64, error -71 [ 683.003774][ T8036] usb usb4-port1: attempt power cycle [ 683.378751][T18355] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3935'. [ 683.458597][ T8036] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 683.476025][T18359] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 683.569017][ T8036] usb 4-1: device descriptor read/8, error -71 [ 683.723782][T18361] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.733434][T18361] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.754851][ T5705] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 683.858346][ T8036] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 683.923449][ T8036] usb 4-1: device descriptor read/8, error -71 [ 684.006326][ T5705] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 684.058465][ T8036] usb usb4-port1: unable to enumerate USB device [ 684.119574][ T5705] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 684.228897][T18361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 684.242503][ T5705] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 684.382325][ T5705] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 684.396982][T18361] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 684.454059][ T5705] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.507997][ T5705] usb 6-1: Product: syz [ 684.527695][ T5705] usb 6-1: Manufacturer: syz [ 684.544768][ T5705] usb 6-1: SerialNumber: syz [ 684.590437][ T5705] usb 6-1: config 0 descriptor?? [ 684.615888][T18355] raw-gadget.5 gadget.5: fail, usb_ep_enable returned -22 [ 684.657105][T18355] raw-gadget.5 gadget.5: fail, usb_ep_enable returned -22 [ 684.787368][ T5705] usb 6-1: ucan: probing device on interface #0 [ 684.957834][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.986700][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.028098][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.071528][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.278890][T18363] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 685.461141][T18363] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 685.517923][T18363] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 685.557577][T18363] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 685.587559][T18363] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.610549][T18367] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 685.634993][T18363] usb 1-1: config 0 descriptor?? [ 685.789935][T18367] usb 3-1: Using ep0 maxpacket: 8 [ 685.812721][T18367] usb 3-1: unable to get BOS descriptor set [ 685.833396][T18367] usb 3-1: too many configurations: 128, using maximum allowed: 8 [ 685.853488][T18367] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 685.876700][T18367] usb 3-1: can't read configurations, error -61 [ 685.894490][T18402] netlink: 'syz.3.3949': attribute type 1 has an invalid length. [ 685.927011][T18402] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 686.038465][T18367] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 686.158763][ T5705] usb 6-1: ucan: failed to retrieve device info [ 686.170791][ T5705] usb 6-1: ucan: probe failed; try to update the device firmware [ 686.193171][T18363] hid_parser_main: 242 callbacks suppressed [ 686.193207][T18363] cp2112 0003:10C4:EA90.002D: unknown main item tag 0x0 [ 686.234784][T18363] cp2112 0003:10C4:EA90.002D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 686.249158][T18367] usb 3-1: Using ep0 maxpacket: 8 [ 686.254218][T18367] usb 3-1: unable to get BOS descriptor set [ 686.272737][T18367] usb 3-1: too many configurations: 128, using maximum allowed: 8 [ 686.331083][T18367] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 686.391521][T18367] usb 3-1: can't read configurations, error -61 [ 686.409437][T18367] usb usb3-port1: attempt power cycle [ 686.464526][T18383] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3944'. [ 686.599488][T18383] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3944'. [ 686.619040][T18363] cp2112 0003:10C4:EA90.002D: error requesting version [ 686.631385][T18416] tipc: Enabling of bearer rejected, failed to enable media [ 686.662449][T18363] cp2112 0003:10C4:EA90.002D: probe with driver cp2112 failed with error -71 [ 686.684602][T18416] : renamed from lo (while UP) [ 686.699745][T18363] usb 1-1: USB disconnect, device number 53 [ 686.759898][T18367] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 686.800008][T18367] usb 3-1: Using ep0 maxpacket: 8 [ 686.834894][T18367] usb 3-1: unable to get BOS descriptor set [ 686.853925][T18367] usb 3-1: too many configurations: 128, using maximum allowed: 8 [ 686.872045][T18367] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 686.883482][T18367] usb 3-1: can't read configurations, error -61 [ 687.018474][T18367] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 687.050234][T18367] usb 3-1: Using ep0 maxpacket: 8 [ 687.059388][T18367] usb 3-1: unable to get BOS descriptor set [ 687.066869][T18367] usb 3-1: too many configurations: 128, using maximum allowed: 8 [ 687.080488][T18367] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 687.091185][T18367] usb 3-1: can't read configurations, error -61 [ 687.100147][T18367] usb usb3-port1: unable to enumerate USB device [ 687.488732][T18367] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 687.650141][T18367] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 687.663388][T18367] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.679051][T18367] usb 4-1: config 0 descriptor?? [ 687.692313][ T30] audit: type=1326 audit(1781705297.659:3578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18434 comm="syz.0.3958" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e6d59ce59 code=0x7ffc0000 [ 687.764552][ T30] audit: type=1326 audit(1781705297.699:3579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18434 comm="syz.0.3958" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e6d59ce59 code=0x7ffc0000 [ 687.821218][ T30] audit: type=1326 audit(1781705297.699:3580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18434 comm="syz.0.3958" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f1e6d59ce59 code=0x7ffc0000 [ 687.859618][ T30] audit: type=1326 audit(1781705297.699:3581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18434 comm="syz.0.3958" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e6d59ce59 code=0x7ffc0000 [ 687.897680][ T30] audit: type=1326 audit(1781705297.699:3582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18434 comm="syz.0.3958" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e6d59ce59 code=0x7ffc0000 [ 687.956778][T18367] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 687.967602][T18439] netlink: 'syz.4.3960': attribute type 89 has an invalid length. [ 687.979333][T18367] [drm:udl_init] *ERROR* Selecting channel failed [ 688.015988][T18367] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 688.027880][ T30] audit: type=1326 audit(1781705297.699:3583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18434 comm="syz.0.3958" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f1e6d59ce59 code=0x7ffc0000 [ 688.064247][T18367] [drm] Initialized udl on minor 2 [ 688.078181][T18367] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 688.090266][ T30] audit: type=1326 audit(1781705297.699:3584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18434 comm="syz.0.3958" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e6d59ce59 code=0x7ffc0000 [ 688.128828][T18363] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 688.129983][T18367] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 688.145824][T18372] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 688.158626][T18372] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 688.171478][T18367] usb 4-1: USB disconnect, device number 7 [ 688.180982][T18372] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 688.195747][ T30] audit: type=1326 audit(1781705297.699:3585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18434 comm="syz.0.3958" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f1e6d59ce59 code=0x7ffc0000 [ 688.229130][ T30] audit: type=1326 audit(1781705297.699:3586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18434 comm="syz.0.3958" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e6d59ce59 code=0x7ffc0000 [ 688.333900][ T30] audit: type=1326 audit(1781705297.699:3587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18434 comm="syz.0.3958" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f1e6d59ce59 code=0x7ffc0000 [ 688.378507][T18372] usb 6-1: USB disconnect, device number 34 [ 688.405724][T18363] usb 1-1: config 2 has an invalid interface number: 174 but max is 0 [ 688.452819][T18363] usb 1-1: config 2 has no interface number 0 [ 688.462974][T18442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 688.487659][T18363] usb 1-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 688.520033][T18442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.538745][T18363] usb 1-1: config 2 interface 174 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1023 [ 688.571047][T18363] usb 1-1: config 2 interface 174 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 103 [ 688.589821][T18363] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 688.628395][T18363] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.652275][T18363] usb 1-1: Product: syz [ 688.658007][T18363] usb 1-1: Manufacturer: syz [ 688.663609][T18363] usb 1-1: SerialNumber: syz [ 688.701227][T18456] FAULT_INJECTION: forcing a failure. [ 688.701227][T18456] name failslab, interval 1, probability 0, space 0, times 0 [ 688.716059][T18456] CPU: 0 UID: 0 PID: 18456 Comm: syz.3.3966 Tainted: G L syzkaller #0 PREEMPT(full) [ 688.716077][T18456] Tainted: [L]=SOFTLOCKUP [ 688.716082][T18456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 688.716089][T18456] Call Trace: [ 688.716095][T18456] [ 688.716101][T18456] dump_stack_lvl+0xe8/0x150 [ 688.716118][T18456] should_fail_ex+0x40c/0x560 [ 688.716138][T18456] should_failslab+0xa8/0x100 [ 688.716153][T18456] __kmalloc_noprof+0xe8/0x750 [ 688.716165][T18456] ? get_pid_task+0x20/0x1f0 [ 688.716174][T18456] ? tomoyo_realpath_from_path+0xef/0x640 [ 688.716184][T18456] tomoyo_realpath_from_path+0xef/0x640 [ 688.716198][T18456] ? lock_release+0x4b/0x3c0 [ 688.716216][T18456] ? tomoyo_path_number_perm+0x219/0x5f0 [ 688.716229][T18456] tomoyo_path_number_perm+0x246/0x5f0 [ 688.716241][T18456] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 688.716253][T18456] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 688.716265][T18456] ? preempt_count_add+0x91/0x190 [ 688.716280][T18456] ? rcu_is_watching+0x15/0xb0 [ 688.716292][T18456] ? hook_file_ioctl+0x1f0/0x5c0 [ 688.716313][T18456] ? lock_release+0x4b/0x3c0 [ 688.716331][T18456] ? __fget_files+0x2a/0x420 [ 688.716340][T18456] ? __fget_files+0x3a2/0x420 [ 688.716349][T18456] ? __fget_files+0x2a/0x420 [ 688.716358][T18456] security_file_ioctl+0xc3/0x2a0 [ 688.716371][T18456] __se_sys_ioctl+0x47/0x170 [ 688.716384][T18456] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.716394][T18456] do_syscall_64+0x174/0x580 [ 688.716407][T18456] ? trace_irq_disable+0x3b/0x140 [ 688.716421][T18456] ? clear_bhb_loop+0x40/0x90 [ 688.716432][T18456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.716442][T18456] RIP: 0033:0x7f6d71d9ce59 [ 688.716456][T18456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 688.716464][T18456] RSP: 002b:00007f6d72c1a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 688.716476][T18456] RAX: ffffffffffffffda RBX: 00007f6d72015fa0 RCX: 00007f6d71d9ce59 [ 688.716483][T18456] RDX: 0000200000001980 RSI: 0000000080186e84 RDI: 0000000000000003 [ 688.716490][T18456] RBP: 00007f6d72c1a090 R08: 0000000000000000 R09: 0000000000000000 [ 688.716496][T18456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 688.716502][T18456] R13: 00007f6d72016038 R14: 00007f6d72015fa0 R15: 00007f6d7213fa48 [ 688.716511][T18456] [ 688.716518][T18456] ERROR: Out of memory at tomoyo_realpath_from_path. [ 688.765026][T18437] raw-gadget.6 gadget.0: fail, usb_ep_enable returned -22 [ 689.061624][T18437] raw-gadget.6 gadget.0: fail, usb_ep_enable returned -22 [ 689.096561][T18459] FAULT_INJECTION: forcing a failure. [ 689.096561][T18459] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 689.112441][T18459] CPU: 0 UID: 0 PID: 18459 Comm: syz.3.3968 Tainted: G L syzkaller #0 PREEMPT(full) [ 689.112467][T18459] Tainted: [L]=SOFTLOCKUP [ 689.112472][T18459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 689.112482][T18459] Call Trace: [ 689.112488][T18459] [ 689.112496][T18459] dump_stack_lvl+0xe8/0x150 [ 689.112517][T18459] should_fail_ex+0x40c/0x560 [ 689.112542][T18459] _copy_from_user+0x2d/0xb0 [ 689.112560][T18459] __copy_msghdr+0x390/0x590 [ 689.112583][T18459] ___sys_sendmsg+0x213/0x360 [ 689.112602][T18459] ? rcu_is_watching+0x15/0xb0 [ 689.112617][T18459] ? get_pid_task+0x20/0x1f0 [ 689.112632][T18459] ? __pfx____sys_sendmsg+0x10/0x10 [ 689.112654][T18459] ? rcu_is_watching+0x15/0xb0 [ 689.112680][T18459] ? __fget_files+0x2a/0x420 [ 689.112695][T18459] ? __fget_files+0x3a2/0x420 [ 689.112713][T18459] __x64_sys_sendmsg+0x1b1/0x290 [ 689.112733][T18459] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 689.112756][T18459] ? rcu_is_watching+0x15/0xb0 [ 689.112772][T18459] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.112788][T18459] do_syscall_64+0x174/0x580 [ 689.112805][T18459] ? trace_irq_disable+0x3b/0x140 [ 689.112828][T18459] ? clear_bhb_loop+0x40/0x90 [ 689.112846][T18459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.112863][T18459] RIP: 0033:0x7f6d71d9ce59 [ 689.112876][T18459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 689.112890][T18459] RSP: 002b:00007f6d72c1a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 689.112907][T18459] RAX: ffffffffffffffda RBX: 00007f6d72015fa0 RCX: 00007f6d71d9ce59 [ 689.112920][T18459] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 689.112931][T18459] RBP: 00007f6d72c1a090 R08: 0000000000000000 R09: 0000000000000000 [ 689.112940][T18459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 689.112949][T18459] R13: 00007f6d72016038 R14: 00007f6d72015fa0 R15: 00007f6d7213fa48 [ 689.112965][T18459] [ 689.489298][T18467] veth0_to_team: entered allmulticast mode [ 689.838962][ T29] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 690.011720][ T29] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 690.046756][ T29] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 690.084644][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.126489][ T29] usb 3-1: config 0 descriptor?? [ 690.170712][ T29] pwc: Askey VC010 type 2 USB webcam detected. [ 690.252606][T18489] netlink: 148 bytes leftover after parsing attributes in process `syz.5.3976'. [ 690.569547][ T29] pwc: recv_control_msg error -32 req 02 val 2b00 [ 690.579684][ T29] pwc: recv_control_msg error -32 req 02 val 2700 [ 690.599622][ T29] pwc: recv_control_msg error -32 req 02 val 2c00 [ 690.622689][ T29] pwc: recv_control_msg error -32 req 04 val 1000 [ 690.642070][ T29] pwc: recv_control_msg error -32 req 04 val 1300 [ 690.652154][T18496] loop5: detected capacity change from 0 to 7 [ 690.654936][ T29] pwc: recv_control_msg error -32 req 04 val 1400 [ 690.672157][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 690.684670][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 690.702264][ T29] pwc: recv_control_msg error -32 req 02 val 2000 [ 690.714995][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 690.727600][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 690.779014][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 690.791103][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 690.801901][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 690.814281][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 690.836518][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 690.847905][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 690.860168][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 690.874625][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 690.895627][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 690.908970][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 690.921307][T18496] ldm_validate_partition_table(): Disk read failed. [ 690.933371][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 690.946053][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 690.958140][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 690.970096][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 690.980736][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 690.994341][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 691.007755][T18496] Dev loop5: unable to read RDB block 0 [ 691.020106][T18496] loop5: unable to read partition table [ 691.030373][T18496] loop5: partition table beyond EOD, truncated [ 691.071716][T18496] loop_reread_partitions: partition scan of loop5 (ɍn/C>|n˨,l-"@Iy}c9GQaG%x?1) failed (rc=-5) [ 691.261618][T18363] usb 1-1: probing VID:PID(0424:012C) [ 691.271016][T18363] usb 1-1: vub300 testing BULK IN EndPoint(0) 8E [ 691.316757][T18363] usb 1-1: vub300 testing BULK IN EndPoint(1) 82 [ 691.368159][T18363] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs [ 691.427193][T18363] vub300 1-1:2.174: probe with driver vub300 failed with error -22 [ 691.504201][T18363] usb 1-1: USB disconnect, device number 54 [ 691.722602][T18508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.779446][T18508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.798413][T18372] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 691.938417][T18363] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 691.980598][T18372] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 692.018340][T18372] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 692.041557][T18372] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 692.078361][T18372] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 692.112954][T18372] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.128415][T18372] usb 6-1: config 0 descriptor?? [ 692.178364][T18363] usb 1-1: Using ep0 maxpacket: 8 [ 692.191542][T18363] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 692.220237][T18363] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 692.248359][T18363] usb 1-1: config 0 has no interface number 0 [ 692.268669][T18363] usb 1-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 692.289267][T18363] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 692.303324][T18363] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 692.317932][T18363] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 692.336972][T18363] usb 1-1: config 0 interface 52 has no altsetting 0 [ 692.345710][T18363] usb 1-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 692.404391][T18363] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.442345][T18363] usb 1-1: config 0 descriptor?? [ 692.597648][T18372] plantronics 0003:047F:FFFF.002E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 692.676270][ T29] pwc: recv_control_msg error -71 req 02 val 2100 [ 692.690316][T18363] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input65 [ 692.712217][ T29] pwc: recv_control_msg error -71 req 04 val 1500 [ 692.729147][ T29] pwc: recv_control_msg error -71 req 02 val 2500 [ 692.756968][ T29] pwc: recv_control_msg error -71 req 02 val 2400 [ 692.877750][T18367] usb 6-1: USB disconnect, device number 35 [ 692.892578][ T29] pwc: recv_control_msg error -71 req 02 val 2600 [ 692.910258][ T5678] usb 1-1: USB disconnect, device number 55 [ 692.924769][ T4970] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -19 [ 692.994925][ T29] pwc: recv_control_msg error -71 req 02 val 2900 [ 693.046188][ T29] pwc: recv_control_msg error -71 req 02 val 2800 [ 693.094044][ T29] pwc: recv_control_msg error -71 req 04 val 1100 [ 693.129290][ T29] pwc: recv_control_msg error -71 req 04 val 1200 [ 693.200631][ T29] pwc: Registered as video103. [ 693.220622][ T29] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input66 [ 693.254309][ T29] usb 3-1: USB disconnect, device number 34 [ 693.638348][ T29] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 693.830586][ T29] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 693.864210][ T29] usb 3-1: can't read configurations, error -61 [ 693.968525][ T5678] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 694.055739][T18535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 694.067611][ T29] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 694.078746][T18535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 694.140963][T18537] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 694.199015][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 694.199031][ T30] audit: type=1326 audit(1781705304.129:3590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18540 comm="syz.0.3993" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1e6d59ce59 code=0x0 [ 694.270376][ T29] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 694.280587][ T29] usb 3-1: can't read configurations, error -61 [ 694.287898][ T29] usb usb3-port1: attempt power cycle [ 694.290486][ T5678] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 694.310143][ T5678] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 694.318665][T18372] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 694.323421][ T5678] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 694.347038][ T5678] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.365787][ T5678] usb 6-1: config 0 descriptor?? [ 694.508352][T18372] usb 4-1: Using ep0 maxpacket: 16 [ 694.517288][T18372] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 694.534623][T18372] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 694.549498][T18367] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 694.559620][T18372] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 694.578683][T18372] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 694.590054][T18372] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.602059][T18372] usb 4-1: config 0 descriptor?? [ 694.678455][ T29] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 694.711598][ T29] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 694.723239][ T29] usb 3-1: can't read configurations, error -61 [ 694.748353][T18367] usb 1-1: Using ep0 maxpacket: 16 [ 694.756908][T18367] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 694.771904][T18367] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 694.792503][T18367] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 694.810900][T18367] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.820259][T18367] usb 1-1: Product: syz [ 694.825581][T18367] usb 1-1: Manufacturer: syz [ 694.831610][T18367] usb 1-1: SerialNumber: syz [ 694.844608][T18367] usb 1-1: config 0 descriptor?? [ 694.864258][T18367] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 694.874358][ T5678] playstation 0003:054C:0DF2.002F: unknown main item tag 0x0 [ 694.876023][ T29] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 694.893581][ T5678] playstation 0003:054C:0DF2.002F: unknown main item tag 0x0 [ 694.908791][ T5678] playstation 0003:054C:0DF2.002F: unknown main item tag 0x0 [ 694.921217][ T5678] playstation 0003:054C:0DF2.002F: unknown main item tag 0x0 [ 694.933164][ T5678] playstation 0003:054C:0DF2.002F: unknown main item tag 0x0 [ 694.935199][T18367] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 694.945562][ T5678] playstation 0003:054C:0DF2.002F: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.5-1/input0 [ 695.002026][ T29] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 695.018356][ T29] usb 3-1: can't read configurations, error -61 [ 695.034033][ T29] usb usb3-port1: unable to enumerate USB device [ 695.119293][T18372] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0030/input/input67 [ 695.149342][T18372] microsoft 0003:045E:07DA.0030: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 695.206241][ T5678] playstation 0003:054C:0DF2.002F: Invalid byte count transferred, expected 20 got 0 [ 695.234724][ T5678] playstation 0003:054C:0DF2.002F: Failed to retrieve DualSense pairing info: -22 [ 695.251888][ T5678] playstation 0003:054C:0DF2.002F: Failed to get MAC address from DualSense [ 695.264121][ T5678] playstation 0003:054C:0DF2.002F: Failed to create dualsense. [ 695.297568][ T5678] playstation 0003:054C:0DF2.002F: probe with driver playstation failed with error -22 [ 695.333757][T18533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3989'. [ 695.350442][T18533] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3989'. [ 695.443426][ T29] usb 6-1: USB disconnect, device number 36 [ 695.537706][T18369] usb 4-1: USB disconnect, device number 8 [ 695.630531][T18367] em28xx 1-1:0.0: chip ID is em2874 [ 695.837192][T18570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4002'. [ 695.851669][T18570] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4002'. [ 695.865130][T18570] netlink: 'syz.4.4002': attribute type 6 has an invalid length. [ 695.882489][T18546] bridge0: port 3(veth1_vlan) entered blocking state [ 695.897168][T18570] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 695.902787][T18546] bridge0: port 3(veth1_vlan) entered disabled state [ 695.920262][T18546] veth1_vlan: entered allmulticast mode [ 695.927627][T18546] veth1_vlan: left allmulticast mode [ 695.954633][T16260] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 695.979241][T16260] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 696.014982][T16260] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 696.033743][T16260] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 696.052873][T18576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4004'. [ 696.193183][T18367] usb 1-1: USB disconnect, device number 56 [ 696.211078][T18367] em28xx 1-1:0.0: Disconnecting em28xx [ 696.232926][T18367] em28xx 1-1:0.0: Freeing device [ 696.300720][T18583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4007'. [ 696.638409][ T5678] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 696.908458][ T5678] usb 3-1: Using ep0 maxpacket: 8 [ 696.932513][ T5678] usb 3-1: unable to get BOS descriptor or descriptor too short [ 696.964797][ T5678] usb 3-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice= 0.40 [ 696.988692][ T5678] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.002581][ T5678] usb 3-1: Product: syz [ 697.010549][ T5678] usb 3-1: Manufacturer: syz [ 697.018634][ T10] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 697.034817][ T5678] usb 3-1: SerialNumber: syz [ 697.232666][T18595] fuse: Bad value for 'fd' [ 697.388700][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 697.410838][ T10] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 697.433796][ T10] usb 1-1: config 0 has no interface number 0 [ 697.465298][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 697.467505][T18602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.491539][ T5678] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 697.504986][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.506496][T18602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 697.518828][ T10] usb 1-1: Product: syz [ 697.535636][ T5678] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 697.556309][ T10] usb 1-1: Manufacturer: syz [ 697.565836][ T5678] usb 3-1: unit 4 not found! [ 697.575702][ T5705] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 697.596880][ T10] usb 1-1: SerialNumber: syz [ 697.621614][ T10] usb 1-1: config 0 descriptor?? [ 697.663864][ T5678] usb 3-1: USB disconnect, device number 39 [ 697.738440][ T5705] usb 4-1: device descriptor read/64, error -71 [ 697.864361][T18593] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4011'. [ 697.998665][ T5705] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 698.181876][ T5705] usb 4-1: device descriptor read/64, error -71 [ 698.301183][ T5705] usb usb4-port1: attempt power cycle [ 698.329223][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 698.329252][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 698.342987][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 698.343144][ T10] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 698.347158][ T10] usb 1-1: USB disconnect, device number 57 [ 698.482264][T18617] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 698.738772][ T5705] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 698.753158][T18621] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4019'. [ 698.759132][ T5705] usb 4-1: device descriptor read/8, error -71 [ 698.771457][T18621] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4019'. [ 698.824396][T18621] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4019'. [ 698.963832][T18623] syzkaller0: entered promiscuous mode [ 698.963849][T18623] syzkaller0: entered allmulticast mode [ 699.078523][ T5705] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 699.307313][ T5705] usb 4-1: device descriptor read/8, error -71 [ 699.378713][T18367] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 699.431451][ T5705] usb usb4-port1: unable to enumerate USB device [ 699.666749][T18367] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 699.703090][T18367] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.748645][T18367] usb 1-1: Product: syz [ 699.771126][T18367] usb 1-1: Manufacturer: syz [ 699.798986][T18367] usb 1-1: SerialNumber: syz [ 699.821638][T18367] usb 1-1: config 0 descriptor?? [ 699.879760][T18640] 8021q: VLANs not supported on ip_vti0 [ 700.071984][T18643] netlink: 'syz.4.4029': attribute type 4 has an invalid length. [ 700.157964][T18367] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 700.448087][T18647] __nla_validate_parse: 1 callbacks suppressed [ 700.448101][T18647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4031'. [ 700.615812][T18658] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 700.625358][T18658] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4034'. [ 700.709099][T18369] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 700.742817][T18660] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 700.751387][T18660] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 700.779452][ T5678] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 700.794883][T18367] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 700.811336][T18660] vhci_hcd vhci_hcd.0: Device attached [ 700.826177][T18664] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(7) [ 700.835033][T18664] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 700.858468][T18664] vhci_hcd vhci_hcd.0: Device attached [ 700.886030][T18660] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(6) [ 700.897427][T18660] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 700.919066][T18660] vhci_hcd vhci_hcd.0: Device attached [ 700.940152][T18369] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 700.967295][T18369] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 700.984360][T18369] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 701.002272][T18660] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(10) [ 701.009403][T18369] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 701.010144][T18660] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 701.062363][T18369] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.080098][T18369] usb 3-1: Product: syz [ 701.086800][T18369] usb 3-1: Manufacturer: syz [ 701.091525][ T5678] usb 4-1: unable to get BOS descriptor or descriptor too short [ 701.092831][T18369] usb 3-1: SerialNumber: syz [ 701.130901][T18369] usb 3-1: config 0 descriptor?? [ 701.140942][ T5678] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 701.143312][T18660] vhci_hcd vhci_hcd.0: Device attached [ 701.192885][ T5705] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 701.196454][T18650] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 701.213999][T18650] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 701.244052][T18369] usb 3-1: ucan: probing device on interface #0 [ 701.288835][ T5678] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 701.317311][ T5678] usb 4-1: string descriptor 0 read error: -22 [ 701.337478][ T5678] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 701.351137][ T5678] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.409973][T18681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 701.439540][T18681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 701.450089][T18367] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 701.476098][ T5678] usb 4-1: selecting invalid altsetting 1 [ 701.487218][ T5678] usb 4-1: unit 6 not found! [ 701.660955][T18367] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 701.682271][T18367] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 701.702494][T18367] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 701.730237][T18367] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.763371][T18367] usb 6-1: config 0 descriptor?? [ 702.141342][ T5678] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 702.249062][T18364] usb 1-1: USB disconnect, device number 58 [ 702.270460][ T5678] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 702.292628][ T5678] usb 4-1: USB disconnect, device number 13 [ 702.579869][T18369] usb 3-1: ucan: failed to retrieve device info [ 702.579894][T18369] usb 3-1: ucan: probe failed; try to update the device firmware [ 702.862762][T18691] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4041'. [ 702.906693][T18364] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 703.098487][T18369] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 703.199328][ T5678] usb 3-1: USB disconnect, device number 40 [ 703.288128][T18364] usb 1-1: not running at top speed; connect to a high speed hub [ 703.290823][T18364] usb 1-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 703.290855][T18364] usb 1-1: config 1 interface 0 has no altsetting 0 [ 703.314632][T18693] netlink: 'syz.2.4042': attribute type 1 has an invalid length. [ 703.388010][T18369] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 703.388049][T18369] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 703.388067][T18369] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 703.390141][T18369] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 703.390161][T18369] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.390171][T18369] usb 4-1: Product: syz [ 703.390179][T18369] usb 4-1: Manufacturer: syz [ 703.390187][T18369] usb 4-1: SerialNumber: syz [ 703.391539][T18369] usb 4-1: config 0 descriptor?? [ 703.405708][T18691] raw-gadget.5 gadget.3: fail, usb_ep_enable returned -22 [ 703.405797][T18691] raw-gadget.5 gadget.3: fail, usb_ep_enable returned -22 [ 703.406915][T18369] usb 4-1: ucan: probing device on interface #0 [ 703.533647][T18695] FAULT_INJECTION: forcing a failure. [ 703.533647][T18695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 703.700946][T18695] CPU: 1 UID: 0 PID: 18695 Comm: syz.2.4043 Tainted: G L syzkaller #0 PREEMPT(full) [ 703.700965][T18695] Tainted: [L]=SOFTLOCKUP [ 703.700969][T18695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 703.700975][T18695] Call Trace: [ 703.700979][T18695] [ 703.700984][T18695] dump_stack_lvl+0xe8/0x150 [ 703.701000][T18695] should_fail_ex+0x40c/0x560 [ 703.701018][T18695] _copy_from_user+0x2d/0xb0 [ 703.701031][T18695] ___sys_recvmsg+0x173/0x5a0 [ 703.701047][T18695] ? __pfx____sys_recvmsg+0x10/0x10 [ 703.701062][T18695] ? __fget_files+0x2a/0x420 [ 703.701072][T18695] ? rcu_is_watching+0x15/0xb0 [ 703.701085][T18695] ? rcu_is_watching+0x15/0xb0 [ 703.701094][T18695] ? lock_release+0x4b/0x3c0 [ 703.701109][T18695] ? __might_fault+0xcb/0x130 [ 703.701120][T18695] do_recvmmsg+0x31a/0x7f0 [ 703.701135][T18695] ? __pfx_do_recvmmsg+0x10/0x10 [ 703.701151][T18695] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 703.701165][T18695] ? __fget_files+0x3a2/0x420 [ 703.701176][T18695] __x64_sys_recvmmsg+0x198/0x250 [ 703.701190][T18695] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 703.701204][T18695] ? rcu_is_watching+0x15/0xb0 [ 703.701213][T18695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.701223][T18695] do_syscall_64+0x174/0x580 [ 703.701235][T18695] ? trace_irq_disable+0x3b/0x140 [ 703.701249][T18695] ? clear_bhb_loop+0x40/0x90 [ 703.701260][T18695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.701269][T18695] RIP: 0033:0x7f300a39ce59 [ 703.701279][T18695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 703.701288][T18695] RSP: 002b:00007f300b2a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 703.701299][T18695] RAX: ffffffffffffffda RBX: 00007f300a615fa0 RCX: 00007f300a39ce59 [ 703.701307][T18695] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000004 [ 703.701313][T18695] RBP: 00007f300b2a7090 R08: 0000000000000000 R09: 0000000000000000 [ 703.701319][T18695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 703.701325][T18695] R13: 00007f300a616038 R14: 00007f300a615fa0 R15: 00007f300a73fa48 [ 703.701335][T18695] [ 703.749423][T18364] usb 1-1: New USB device found, idVendor=1241, idProduct=f767, bcdDevice= 0.40 [ 703.749480][T18364] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.749514][T18364] usb 1-1: Manufacturer: ј [ 703.749541][T18364] usb 1-1: SerialNumber: 䌊骿㴫ዿꗎ䛄㸱둾뮇⏟ [ 703.967370][T18687] netlink: 260 bytes leftover after parsing attributes in process `syz.0.4040'. [ 703.967468][T18687] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4040'. [ 703.967489][T18687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4040'. [ 704.032345][T18364] usbhid 1-1:1.0: can't add hid device: -71 [ 704.032484][T18364] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 704.039354][T18364] usb 1-1: USB disconnect, device number 59 [ 704.321136][T18363] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 704.470725][T18363] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 704.470788][T18363] usb 3-1: config 1 has no interface number 0 [ 704.470862][T18363] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 704.470921][T18363] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 704.470956][T18363] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16 [ 704.473217][T18363] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 704.473275][T18363] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.473307][T18363] usb 3-1: Product: syz [ 704.473322][T18363] usb 3-1: Manufacturer: syz [ 704.473371][T18363] usb 3-1: SerialNumber: syz [ 704.478810][T18702] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 704.480686][T18363] usb 3-1: Error in usbnet_get_endpoints (-22) [ 704.738657][T18369] usb 4-1: ucan: failed to retrieve device info [ 704.738682][T18369] usb 4-1: ucan: probe failed; try to update the device firmware [ 704.992612][T18709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 704.992941][T18709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 705.085501][T18367] usbhid 6-1:0.0: can't add hid device: -71 [ 705.120137][T18673] vhci_hcd: connection closed [ 705.120425][T18667] vhci_hcd: connection closed [ 705.120718][T18669] vhci_hcd: connection closed [ 705.130563][T18661] vhci_hcd: connection reset by peer [ 705.163898][T13483] vhci_hcd vhci_hcd.5: stop threads [ 705.169941][T18367] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 705.188689][T13483] vhci_hcd vhci_hcd.5: release socket [ 705.203974][T18715] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4049'. [ 705.215412][T18715] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4049'. [ 705.241909][T13483] vhci_hcd vhci_hcd.5: disconnect device [ 705.262992][T18367] usb 6-1: USB disconnect, device number 37 [ 705.296313][T13483] vhci_hcd vhci_hcd.5: stop threads [ 705.333043][T18370] usb 3-1: USB disconnect, device number 41 [ 705.349591][T13483] vhci_hcd vhci_hcd.5: release socket [ 705.621208][T13483] vhci_hcd vhci_hcd.5: disconnect device [ 705.722169][T13483] vhci_hcd vhci_hcd.5: stop threads [ 706.439288][T18662] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 706.486818][T13483] vhci_hcd vhci_hcd.5: release socket [ 706.621322][T13483] vhci_hcd vhci_hcd.5: disconnect device [ 706.650782][T13483] vhci_hcd vhci_hcd.5: stop threads [ 706.726837][T13483] vhci_hcd vhci_hcd.5: release socket [ 718.174415][T13483] vhci_hcd vhci_hcd.5: disconnect device [ 719.011299][ C0] sched: DL replenish lagged too much [ 744.593325][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 744.604071][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 760.294132][T18368] usb 4-1: USB disconnect, device number 14 [ 813.434353][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 820.045087][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 836.474110][ T5705] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 870.758661][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 871.051491][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 921.288160][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 921.295145][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P15833/1:b..l [ 921.303187][ C1] rcu: (detected by 1, t=10503 jiffies, g=125005, q=804 ncpus=2) [ 921.311029][ C1] task:syz-executor state:R running task stack:22928 pid:15833 tgid:15833 ppid:15814 task_flags:0x400140 flags:0x00080000 [ 921.324537][ C1] Call Trace: [ 921.327826][ C1] [ 921.330761][ C1] __schedule+0x17d9/0x56c0 [ 921.335287][ C1] ? kasan_save_track+0x3e/0x80 [ 921.340151][ C1] ? kasan_save_free_info+0x40/0x50 [ 921.345358][ C1] ? __kasan_slab_free+0x5c/0x80 [ 921.350307][ C1] ? vfs_statx+0x12e/0x200 [ 921.354752][ C1] ? __pfx___schedule+0x10/0x10 [ 921.359611][ C1] ? unwind_next_frame+0x8f/0x2550 [ 921.364756][ C1] preempt_schedule_irq+0x4d/0xa0 [ 921.369793][ C1] irqentry_exit+0x14f/0x8f0 [ 921.374391][ C1] ? trace_irq_disable+0x3b/0x140 [ 921.379432][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 921.385420][ C1] RIP: 0010:debug_lockdep_rcu_enabled+0xd/0x40 [ 921.391585][ C1] Code: 8d 67 48 0f b9 3a 90 eb ca cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 31 c0 83 3d 93 6c 87 04 00 <74> 1d 83 3d 6a 9e 87 04 00 74 14 65 48 8b 0d 68 25 91 07 31 c0 83 [ 921.411197][ C1] RSP: 0018:ffffc90005237918 EFLAGS: 00000202 [ 921.417275][ C1] RAX: 0000000000000000 RBX: ffffc900052379d8 RCX: ffffc90005237b08 [ 921.425257][ C1] RDX: ffffc90005237a01 RSI: dffffc0000000000 RDI: ffffc900052379d0 [ 921.433247][ C1] RBP: 1ffffffff2194f01 R08: ffffc90005237af0 R09: 0000000000000000 [ 921.441327][ C1] R10: ffffc90005237a18 R11: fffff52000a46f45 R12: ffffc90005230000 [ 921.449348][ C1] R13: ffffffff8176a21f R14: ffffc900052379c8 R15: ffffc90005237b00 [ 921.457518][ C1] ? unwind_next_frame+0x8f/0x2550 [ 921.462657][ C1] unwind_next_frame+0x1b5d/0x2550 [ 921.467831][ C1] ? stack_trace_save+0xa9/0x100 [ 921.472885][ C1] ? unwind_next_frame+0x8f/0x2550 [ 921.478016][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 921.484186][ C1] arch_stack_walk+0x11b/0x150 [ 921.488962][ C1] ? save_stack+0x122/0x230 [ 921.493500][ C1] stack_trace_save+0xa9/0x100 [ 921.498363][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 921.503752][ C1] ? stack_depot_save_flags+0x33/0x800 [ 921.509321][ C1] save_stack+0x122/0x230 [ 921.513693][ C1] ? __pfx_save_stack+0x10/0x10 [ 921.518553][ C1] ? page_ext_get+0x22/0x2e0 [ 921.523165][ C1] ? lock_release+0x4b/0x3c0 [ 921.527771][ C1] ? page_ext_get+0x22/0x2e0 [ 921.532375][ C1] __reset_page_owner+0x71/0x1f0 [ 921.537333][ C1] __free_frozen_pages+0xc0d/0xd20 [ 921.542523][ C1] ? __free_slab+0x172/0x280 [ 921.547131][ C1] __slab_free+0x274/0x2c0 [ 921.551558][ C1] qlist_free_all+0x99/0x100 [ 921.556157][ C1] ? do_getname+0x2e/0x250 [ 921.560584][ C1] kasan_quarantine_reduce+0x148/0x160 [ 921.566049][ C1] __kasan_slab_alloc+0x22/0x80 [ 921.570911][ C1] kmem_cache_alloc_noprof+0x2b8/0x650 [ 921.576383][ C1] ? do_getname+0x2e/0x250 [ 921.580813][ C1] ? kmem_cache_alloc_noprof+0x156/0x650 [ 921.586465][ C1] do_getname+0x2e/0x250 [ 921.590720][ C1] ? __se_sys_unlink+0x12/0x140 [ 921.595584][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.601659][ C1] __se_sys_unlink+0x1e/0x140 [ 921.606352][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.612431][ C1] do_syscall_64+0x174/0x580 [ 921.617036][ C1] ? trace_irq_disable+0x3b/0x140 [ 921.622074][ C1] ? clear_bhb_loop+0x40/0x90 [ 921.626759][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.632658][ C1] RIP: 0033:0x7f5267f9bf47 [ 921.637173][ C1] RSP: 002b:00007f526833ecb8 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 921.645598][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5267f9bf47 [ 921.653578][ C1] RDX: 00007f526833ece0 RSI: 00007f526833ed70 RDI: 00007f526833ed70 [ 921.661562][ C1] RBP: 00007f526833ed70 R08: 00007f526833fd70 R09: 00000000ffffffff [ 921.669546][ C1] R10: 0000000000000100 R11: 0000000000000206 R12: 00007f526833fe00 [ 921.677524][ C1] R13: 00007f52680321ca R14: 00000000000ac80d R15: 00007f526833fe40 [ 921.685510][ C1] [ 921.688537][ C1] rcu: rcu_preempt kthread starved for 451 jiffies! g125005 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 921.699642][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 921.709614][ C1] rcu: RCU grace-period kthread stack dump: [ 921.715511][ C1] task:rcu_preempt state:R running task stack:28408 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 921.729013][ C1] Call Trace: [ 921.732307][ C1] [ 921.735242][ C1] __schedule+0x17d9/0x56c0 [ 921.739759][ C1] ? rcu_is_watching+0x15/0xb0 [ 921.744533][ C1] ? rcu_is_watching+0x15/0xb0 [ 921.749303][ C1] ? __pfx___schedule+0x10/0x10 [ 921.754167][ C1] ? schedule+0x90/0x360 [ 921.758415][ C1] ? rcu_is_watching+0x15/0xb0 [ 921.763188][ C1] ? lock_release+0x4b/0x3c0 [ 921.767882][ C1] schedule+0x164/0x360 [ 921.772046][ C1] schedule_timeout+0x152/0x2c0 [ 921.776922][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 921.782309][ C1] ? __pfx_process_timeout+0x10/0x10 [ 921.787623][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 921.793441][ C1] ? prepare_to_swait_event+0x322/0x350 [ 921.799003][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 921.803873][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 921.810030][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 921.815324][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 921.820540][ C1] ? trace_irq_enable+0x3b/0x140 [ 921.825488][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 921.830090][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 921.835315][ C1] ? __kthread_parkme+0x71/0x1f0 [ 921.840272][ C1] ? __kthread_parkme+0x196/0x1f0 [ 921.845405][ C1] kthread+0x388/0x470 [ 921.849478][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 921.854688][ C1] ? __pfx_kthread+0x10/0x10 [ 921.859283][ C1] ret_from_fork+0x514/0xb70 [ 921.863883][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 921.869085][ C1] ? __switch_to+0xc89/0x1420 [ 921.873781][ C1] ? __pfx_kthread+0x10/0x10 [ 921.878390][ C1] ret_from_fork_asm+0x1a/0x30 [ 921.883172][ C1] [ 921.886195][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 921.892528][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 921.903033][ C1] Tainted: [L]=SOFTLOCKUP [ 921.907365][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 921.917426][ C1] RIP: 0010:ipv6_find_hdr+0xb9/0x1110 [ 921.922842][ C1] Code: f8 f2 49 89 44 1d 08 41 c7 44 1d 10 f8 f2 f8 f3 e8 5c f8 52 f7 4c 89 f1 49 8d be d0 00 00 00 48 89 f8 48 c1 e8 03 80 3c 18 00 <4c> 89 74 24 08 74 0a e8 ab 16 c0 f7 48 8b 4c 24 08 4c 8b b1 d0 00 [ 921.942459][ C1] RSP: 0018:ffffc90000a08680 EFLAGS: 00000246 [ 921.948716][ C1] RAX: 1ffff1104591855a RBX: dffffc0000000000 RCX: ffff88822c8c2a00 [ 921.956701][ C1] RDX: 0000000000000100 RSI: ffffc90000a08850 RDI: ffff88822c8c2ad0 [ 921.964681][ C1] RBP: ffffc90000a087f0 R08: ffffc90000a08840 R09: 0000000000000002 [ 921.972669][ C1] R10: 000000000000000a R11: 0000000000000100 R12: ffffc90000a08850 [ 921.980653][ C1] R13: 1ffff920001410e0 R14: ffff88822c8c2a00 R15: ffffc90000a08860 [ 921.988651][ C1] FS: 0000000000000000(0000) GS:ffff888125372000(0000) knlGS:0000000000000000 [ 921.997678][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 922.004358][ C1] CR2: 000055557752da38 CR3: 000000000e746000 CR4: 00000000003526f0 [ 922.012342][ C1] Call Trace: [ 922.015629][ C1] [ 922.018478][ C1] ? ip6t_do_table+0x1d1/0x15b0 [ 922.023437][ C1] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 922.028697][ C1] ? ip6t_do_table+0x1d1/0x15b0 [ 922.033563][ C1] ? trace_irq_enable+0x3b/0x140 [ 922.038510][ C1] ? ip6t_do_table+0x1d1/0x15b0 [ 922.043369][ C1] ? ip6t_do_table+0x1d1/0x15b0 [ 922.048268][ C1] ? __pfx_ipv6_find_hdr+0x10/0x10 [ 922.053488][ C1] ? ip6t_do_table+0x13c4/0x15b0 [ 922.058525][ C1] ? nf_nat_ipv6_fn+0x229/0x2f0 [ 922.063408][ C1] nft_do_chain_inet+0x139/0x4b0 [ 922.068615][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 922.074099][ C1] ? nf_nat_ipv6_local_in+0x157/0x660 [ 922.079688][ C1] ? __pfx_nf_nat_ipv6_local_in+0x10/0x10 [ 922.085460][ C1] ? NF_HOOK+0x9e/0x3c0 [ 922.089733][ C1] ? rcu_is_watching+0x15/0xb0 [ 922.094506][ C1] ? lock_acquire+0x5f/0x350 [ 922.099107][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 922.104586][ C1] nf_hook_slow+0xc5/0x220 [ 922.109280][ C1] NF_HOOK+0x21f/0x3c0 [ 922.113357][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 922.118743][ C1] ? NF_HOOK+0x9e/0x3c0 [ 922.122924][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 922.127525][ C1] ? rcu_is_watching+0x15/0xb0 [ 922.132295][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 922.137801][ C1] ? rcu_is_watching+0x15/0xb0 [ 922.142576][ C1] ip6_input+0x16a/0x270 [ 922.146927][ C1] ? ip6_input+0x23/0x270 [ 922.151272][ C1] NF_HOOK+0x336/0x3c0 [ 922.155348][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 922.160553][ C1] ? NF_HOOK+0x9e/0x3c0 [ 922.164714][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 922.169317][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 922.174530][ C1] process_backlog+0x774/0x1860 [ 922.179398][ C1] ? process_backlog+0x3c3/0x1860 [ 922.184431][ C1] __napi_poll+0xaa/0x330 [ 922.188766][ C1] net_rx_action+0x61d/0xf50 [ 922.193449][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 922.198587][ C1] ? lapic_next_event+0x11/0x20 [ 922.203448][ C1] ? rcu_is_watching+0x15/0xb0 [ 922.208221][ C1] handle_softirqs+0x225/0x840 [ 922.212994][ C1] ? __irq_exit_rcu+0xca/0x220 [ 922.217772][ C1] __irq_exit_rcu+0xca/0x220 [ 922.222454][ C1] irq_exit_rcu+0x9/0x30 [ 922.226703][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 922.232693][ C1] [ 922.235626][ C1] [ 922.238558][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 922.244722][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 922.250385][ C1] Code: 4c 7e 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 b7 1f 00 fb f4 7c 03 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 922.270018][ C1] RSP: 0018:ffffc90000197e40 EFLAGS: 00000246 [ 922.276099][ C1] RAX: ffff888125372000 RBX: ffffffff819a5f8c RCX: 0000000080000001 [ 922.284080][ C1] RDX: 0000000000000001 RSI: ffffffff8c292100 RDI: ffffffff819a5f8c [ 922.292059][ C1] RBP: ffffc90000197f10 R08: ffff8880b87338db R09: 1ffff110170e671b [ 922.300297][ C1] R10: dffffc0000000000 R11: ffffed10170e671c R12: 0000000000000000 [ 922.308283][ C1] R13: 1ffff11003bd0000 R14: 1ffff92000032fd0 R15: dffffc0000000000 [ 922.316274][ C1] ? do_idle+0x1cc/0x540 [ 922.320545][ C1] ? do_idle+0x1cc/0x540 [ 922.324805][ C1] default_idle+0x9/0x20 [ 922.329058][ C1] default_idle_call+0x72/0xb0 [ 922.333836][ C1] do_idle+0x1cc/0x540 [ 922.338011][ C1] ? __pfx_do_idle+0x10/0x10 [ 922.342612][ C1] ? do_idle+0x4d1/0x540 [ 922.346866][ C1] cpu_startup_entry+0x43/0x60 [ 922.351642][ C1] start_secondary+0x101/0x110 [ 922.356419][ C1] common_startup_64+0x13e/0x157 [ 922.361367][ C1] [ 926.559423][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 926.570449][ T1325] ieee802154 phy1 wpan1: encryption failed: -22