last executing test programs: 4m29.840710343s ago: executing program 1 (id=1075): r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x194}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x2}) unshare(0x62040200) unshare(0x20000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0xfdff) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$tun(r6, &(0x7f00000002c0)=ANY=[], 0x33) sendfile(r6, r5, 0x0, 0x10000) connect$inet(0xffffffffffffffff, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, 0x0) syz_usb_connect$hid(0x0, 0x6c, 0x0, 0x0) 4m22.967942539s ago: executing program 1 (id=1089): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) 4m22.704419209s ago: executing program 1 (id=1091): r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x194}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x2}) unshare(0x62040200) unshare(0x20000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0xfdff) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$tun(r6, &(0x7f00000002c0)=ANY=[], 0x33) sendfile(r6, r5, 0x0, 0x10000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_usb_connect$hid(0x0, 0x6c, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000300)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x2}) 4m19.286335529s ago: executing program 1 (id=1107): sendmsg$tipc(0xffffffffffffffff, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4080000}, 0x840) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="0002"], 0x18) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001840), 0x3b, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="b000000000000000f9ffffffffffffff03000000000000000100000000000000ccb600000000000007000000000000003b00000003000000010000000000000034fcffffffffffff01000000000000000300000000000000ff7f000000000000000100000000000005000000fdffffff070000000040000000000000", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="018000000000b8df0000000002000000844d793c108331c20000000001"], 0x0, 0x0, 0x0}) getdents64(r5, &(0x7f0000000100)=""/134, 0x86) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m18.712046052s ago: executing program 1 (id=1110): r0 = syz_open_dev$video(&(0x7f0000000280), 0x7fffffff, 0x8280) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, 0x0) 4m18.26597507s ago: executing program 1 (id=1114): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0xfffffffc, 0x6, 0x5, 0x8, 0x2, 0x3ff}, 0x0) mkdir(0x0, 0x22) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r3 = socket(0x2, 0x803, 0xffffffff) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x40004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x6}}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x28b}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15}, 0x94) sendmsg$nl_xfrm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="940100001a001307fdffffff00000000fe8000000000000000000000000000aa00000000000000fffc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x194}}, 0x8000) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48080}, 0xc001) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) socket$kcm(0xa, 0x7, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 4m17.505510714s ago: executing program 32 (id=1114): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0xfffffffc, 0x6, 0x5, 0x8, 0x2, 0x3ff}, 0x0) mkdir(0x0, 0x22) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r3 = socket(0x2, 0x803, 0xffffffff) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x40004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x6}}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x28b}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15}, 0x94) sendmsg$nl_xfrm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="940100001a001307fdffffff00000000fe8000000000000000000000000000aa00000000000000fffc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x194}}, 0x8000) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48080}, 0xc001) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) socket$kcm(0xa, 0x7, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 5.562686537s ago: executing program 0 (id=2505): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x220c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x3) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x560a, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x38e4) listen(r5, 0x1780) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000340)={0xf0f03f, 0x6e}) listen(r7, 0x0) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) recvmsg(r9, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2) r10 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000200)={{0x0, 0xff}, 'port1\x00', 0x909238938053d2dc, 0xc1860, 0x1000000, 0x3, 0x7, 0x0, 0x2, 0x0, 0x0, 0x8}) r11 = dup(r10) clock_nanosleep(0x8, 0x1, &(0x7f0000000080), 0x0) write$UHID_INPUT(r11, &(0x7f0000000000)={0x8, {"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", 0x1000}}, 0x1006) 5.366338133s ago: executing program 0 (id=2506): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000340), 0x8) (async) r2 = syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d00000904010102020d0000090582020002000000090503", @ANYRESHEX], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async, rerun: 32) r3 = syz_usb_connect$uac3(0x1, 0x16f, &(0x7f0000000900)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0xe41, 0x4244, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x15d, 0x3, 0x1, 0x8, 0x40, 0x7, {0x8, 0xb, 0x1, 0x2, 0x1, 0x25, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xc, 0x7b, 0x40}, [@extension_unit={0x15, 0x24, 0xa, 0x1, 0x5, [0x3, 0x1, 0x1, 0x0]}, @output_terminal={0x13, 0x24, 0x3, 0x5, 0x300, 0x5, 0x6, 0x6, 0x3, 0x9, 0x200, 0x2}, @selector_unit={0xb, 0x24, 0xc, 0x2, 0x6, "4d9f2092b05e"}, @power_domain={0x11, 0x24, 0x10, 0x5, 0x7, 0x8, 0x5, "be8dd9f955c37930"}, @input_terminal={0x14, 0x24, 0x2, 0x4, 0x201, 0x1, 0x8, 0x5, 0x6, 0x1, 0x800, 0xff3e}, @extension_unit={0x19, 0x24, 0xa, 0x2, 0x1, [0x3, 0x2, 0x2, 0x2, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x33, 0x7ff, 0xa0, "c1f309c8b9393b"}, @as_header={0x17, 0x24, 0x1, 0x8, 0x9, 0x3, 0x1, 0xca, 0x2, 0x1, 0x40}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x72, 0x6b, 0x11, {0xa, 0x25, 0x25, 0x2341, 0xc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0x1, 0x0, 0x3, 0xfa}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6, 0x3, 0x1e, 0xb, 't\b', '\x00'}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x1c, 0x4, 0x0, 0x5, "71b1cd"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x8, 0x3, 0x2, 0xe1, "9652ccdb102b"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x10, 0x2, 0x9, 0x6, "0a9ef9f0df"}, @as_header={0x17, 0x24, 0x1, 0xa0, 0x3, 0x5, 0x1002, 0x5, 0x34, 0xdf, 0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xb, 0x2, 0xff, {0xa, 0x25, 0x25, 0x6, 0x2, 0xdeaf}}}}}}}}]}}, &(0x7f0000000f40)={0xa, &(0x7f0000000a80)={0xa, 0x6, 0x300, 0xf9, 0x8, 0xc4, 0x40, 0x8}, 0xa6, &(0x7f0000000ac0)={0x5, 0xf, 0xa6, 0x5, [@ssp_cap={0x18, 0x10, 0xa, 0x7, 0x3, 0xae02, 0xf, 0x2, [0x30, 0xff3f00, 0xffff00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x4, 0xd, 0xfff7, 0x2}, @ssp_cap={0x10, 0x10, 0xa, 0xad, 0x1, 0x6, 0xf00, 0x8, [0xc030]}, @generic={0x67, 0x10, 0x1, "4cbe5f6e78835ff2ed146b4b10a102503a6156b82ac0b664064f597db63efaca92ef7cfb893f241f8495c0b5343b0053eaa7937a85ea8d8a29bfc5bf20e2031a8c1baa74bfbc75029e11465626951094e07cc81bd81f25afc50872a7dba350f12709cd62"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x8, 0x7, 0xc000}]}, 0x9, [{0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x443}}, {0xd1, &(0x7f0000000bc0)=@string={0xd1, 0x3, "a37ebe160e987b4376601f67b32f3747cc8fd7e7cae4a2a26163b48d6b732b6566a278b3a52541dea84f50b17bcd3a5bddfc714c960b78a7366b7748aea9a7d855bb8b693980a37dffef04b1009f9bbaa3ac07422a9c00062594960e6390d7f959c0c70bff83c614cdc912b8f92ac2952d403916ebcdba0681a012725e8418282b5dff7e157011ffcdf82c6b810602401afa27bcd8e087ddfcdeb7afb21495255a3ca69d5df5ce1271f5b2424d947237976d672a983a2c13820f4c2c7b0454133178423f893b11d4ab57b1c8127e20"}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0x480a}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x438}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x449}}, {0x6e, &(0x7f0000000dc0)=@string={0x6e, 0x3, "ff594fb95dcdbc721b116555dffbccf71121e4d4d5e599564130a3e513457a2aa8b7ef9d0cfecd08fa8d2d991aba6e37dbd5cc86893db5f8ac66b518db2277c285ff49c2042193ac74583898945a52a5951fbbf1c74eb1865d0e2ce4e98ce2213b705d771efca9c1e7f17529"}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x449}}, {0xae, &(0x7f0000000e80)=@string={0xae, 0x3, "9f591ea32fc8fa9cefe6ca659a4b6e88ead671d4938fa2726ad97e9390941579083034b56835b953cc0293f28d2ddeb52d958e2267c9eb45ff5e44906592ffa183bb0ee641592b29b15339180642408cb8c3afc606236104d9118972dfb98d7e475e70f047f6cbc1dcfbfba725a3579e87298e9c1742c0778a48c6d37b4c2dfd8772ec995b95e2cfbef9b82074a7ea377fefa34483c31c40ab0f35c93e531a4b4c49b7fc5b3584d975bc812b"}}]}) (rerun: 32) syz_usb_control_io$uac3(r3, &(0x7f0000001080)={0x14, &(0x7f0000001000)={0x40, 0x5, 0x28, {0x28, 0x21, "092a27a941c8b6032f382b01c55e70e660660505d1d1cc8b64dde3951f9d29503ae90eeef5eb"}}, &(0x7f0000001040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x422}}}, &(0x7f00000012c0)={0x44, &(0x7f00000010c0)={0x40, 0x0, 0xe, "db59ae6466af8b37e7ab46564774"}, &(0x7f0000001100)={0x0, 0xa, 0x1}, &(0x7f0000001140)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000001180)={0x20, 0x81, 0x2, "c94f"}, &(0x7f00000011c0)={0x20, 0x82, 0x1, '<'}, &(0x7f0000001200)={0x20, 0x83, 0x2, "4797"}, &(0x7f0000001240)={0x20, 0x84, 0x3, "e04691"}, &(0x7f0000001280)={0x20, 0x85, 0x3, "b1da82"}}) (async) r4 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x263, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0x50, 0xd, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x2, 0x9, 0x1, {0x22, 0xb94}}, {{{0x9, 0x5, 0x81, 0x3, 0x48, 0x80, 0x61, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x9, 0x2, 0x8}}]}}}]}}]}}, &(0x7f00000017c0)={0xa, &(0x7f0000000780)={0xa, 0x6, 0x110, 0x6, 0x40, 0x0, 0xff, 0xf}, 0x182, &(0x7f0000001340)={0x5, 0xf, 0x182, 0x6, [@ptm_cap={0x3}, @generic={0xc6, 0x10, 0x2, "a61f871c22cdfeed11ff84089f4be2d13c421789758b53fa6da88a94100fa09e9a3d40d8e2d3a89542cca09a3d96c30e327f801a27d52372361fbd5f5807416427a68a318c2741e3595fc1a6798ee58b3d9018f5aa1b253b7a8e655098283f993a0633b7eb516b7ab7ddbf5cd4ead4dab922888eaa26ed434ab1c1b983e65cc0342c2dad26cc493a6a1271f360bfab020ee85edcf840b80f60fcdb1b21e22e3b8cc0eb015f4c6eddc751afc94635843c171048f5a79237d5dd526ca48814e5880011b9"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0xb, 0x9b, 0x4, 0x8}, @generic={0xa3, 0x10, 0x3, "525e7d653bd51b7052a202b2e0dbf43959fab918e822437421f20c315760584f896bac0a3ec139f6476b7df702823403f3e2d151940429c6665ce040daaf7562e9629377b0aa637ff236fca1bfdc1f2f403c1df0270ed45b0d16e710360932fecbe584230fe43f290f6dfdd1a63c8348bafa4af5ad2853651dc6bce14484f52050b765dc5bdb70d744f22d159832e2b2bd43ee7136563a321e62ebe6931fb34b"}, @ptm_cap={0x3}]}, 0x6, [{0x35, &(0x7f0000001500)=@string={0x35, 0x3, "0b22640f70ad176acb8a59e1c3043cfc1671b568470a7948e4d5a01e0461e95042b5dbb21727f4d1d217e7bbf0e04a53ec13d2"}}, {0xb3, &(0x7f0000001540)=@string={0xb3, 0x3, "bd485a752f0c67bb49eacd2447a58503e87e3f96409c765f5e5416b18e155b756981f298fff3e67503207e0c4b707fc362700ebad3ade7289bf2301122a63e4b2e8fb809e63f0d87e5da8e5901d7ae6edb7c01980ae364a1ec7fdf321bd67665067b8624bbc05b587b1ebebcfbd4ce2288b71be3f369e5b9ac3f835558f49fd77cbc040d2d661125c8248d1db3b23e3e5ee95be31f201524da2ae54896891f9ea42a94483e02ea4090fa8fa83450316c98"}}, {0x65, &(0x7f0000001600)=@string={0x65, 0x3, "4b75ecfb7a0a1585ca0fe940c7257f5ddd2c08fa656cb29f7d13bcb792e96bd518eda6ee1b32c9ee41fdd4584d25ea1b873d9221875301cd5ef1259e845f63056e9c8a28ea7dbb0e6903795f4c8af4a717c4cb1e2da5355ba837b61b01920b36e88f4d"}}, {0x4, &(0x7f0000001680)=@lang_id={0x4, 0x3, 0x455}}, {0x8f, &(0x7f00000016c0)=@string={0x8f, 0x3, "23e9520734fd360b6162ff0f6b0d9c2d79e2ee731a14c9a33eac3ef74dd0cb3240375f6a9cf31cadd70a405a184dd083046c0a768ac8226d6ddaa0125c087ea9e60a967ae7f0ff0958373f8f64e85a0b8a657b89076202a00e48887ccea1d650830a796159a5bad51d9226580bd47bcbb616fec6464f33693d457f29e5099f96ae73c78f295fd75dd17150c68e"}}, {0x4, &(0x7f0000001780)=@lang_id={0x4, 0x3, 0x81a}}]}) syz_usb_control_io$hid(r4, &(0x7f0000001a00)={0x24, &(0x7f0000001840)={0x0, 0x6, 0x48, {0x48, 0x21, "4111278aec087008619c4d053adc55728399afb31ceeb65eceeff927d2e6172aa0c6bfe73a58a1082034103565e587a41abdafa2761bbfd416c9e2ca78fb002f6fe82302355c"}}, &(0x7f00000018c0)={0x0, 0x3, 0x9f, @string={0x9f, 0x3, "4e1b05514c0821423c576967194ba0d69446583b6e2e6afe0c361dd77dcb150c71fa4c7c16cb471ae45680031a00f3d504650b58195f561f41a29e4927f2504be64709c0aa23cdea460b18de799c16de45110d3a922246985ff0fde87d4b33f0474f531f0ac554ebda52dcfd23646e707c65221f1a93f9fc9203465e3ddd27488141ad052eb5cc9657030a84c0fc3ed4cd340df7974656d854e51b9746"}}, &(0x7f0000001980)={0x0, 0x22, 0x17, {[@main=@item_4={0x3, 0x0, 0x9, "f4931e58"}, @local=@item_4={0x3, 0x2, 0x4, "5cc05797"}, @global=@item_4={0x3, 0x1, 0x1, "fe07a90d"}, @global=@item_4={0x3, 0x1, 0x6, "2536d8ed"}, @global=@item_012={0x2, 0x1, 0x7, "fccb"}]}}, &(0x7f00000019c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x90, 0x1, {0x22, 0xef3}}}}, &(0x7f0000001c40)={0x2c, &(0x7f0000001a40)={0x0, 0x11, 0x7, "f20615b43af80d"}, &(0x7f0000001a80)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000001ac0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000001b00)={0x20, 0x1, 0xdf, "34fef3ea53d2ef638e7c83618b045c6f67d3658443c29852529f92819f7de429384083dadf67206f905f2d50881427c95998a1ef283ecf0a14160575aef606cc05a0610cabe9b084a62b5d1b2c34e31712eaac14e73b847f302652b0b61f1a30628707ccbeec967f83391fa3cf5e12e1cac7c4437ebea8791b652e19b74689cd1a67db07778e378606f63aa2e798a9a25e56fdcc262ec1669bf3d4a48d7c92f20f98ff1d83d456e09b78882055b0902b612de836a3773fb5d4fde1c5f1fa29d1092dc9bebf0c447c17e0dc0ba3e99c0b3f7784c0791129a74fdd7bd36e1c26"}, &(0x7f0000001c00)={0x20, 0x3, 0x1, 0x9}}) (async) r5 = syz_open_dev$midi(&(0x7f00000000c0), 0x80fe, 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r5, 0x40045731, &(0x7f0000000140)=0x1) (async) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_connect$hid(0x1, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x45e, 0x7da, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x50, 0x0, "", [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x2, 0x2, {0x9, 0x21, 0xfff7, 0x1, 0x1, {0x22, 0x1df}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x32, 0x40, 0x5}}}}}]}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x8, 0x6, 0x18, 0xff, 0x1}, 0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="050f46002314100401e34c5bc1cf0a4dcec462ea948c8ec08c0b10010c900006000900060a1003020280084006000a1003000a00086105000b10010210610cefe9040fa61c0b"], 0xa, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x861}}, {0xd6, &(0x7f0000000200)=@string={0xd6, 0x3, "acada76c89c159942e863e347f8da032283bac75eec896784e549bdf0438435e0f33b9bbb60bb568f98386d2cbbee651790f2db72b51cb1a38bc866f8e71b6e8b4792368ab56ddb26efd9a1813a644bd0618c7305f783abbb68baec8c8ccaf344460e15a487d819af7517ae2b995122fe07e8300140c88a4b80735190cb25b2cd4b01f39fc743ed53f0ea52b9982295a92d793410f11477542e93d56025ef040872f40703e96246f97655e4b404dba76accf919b630ef9f3863226d5a10f2d7b41ac03e2c99860e7f5561d68fac504f3d89d9769"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x43f}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x441}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x445}}, {0xac, &(0x7f0000000440)=@string={0xac, 0x3, "1549e5ff24c7656f3c64c9c2145e347a298c2411e9b67ddfd997a44cf6212faa27c89b9dcac22ef35e1578a095ee09809b7e632306cecf7678ccd6909b87a0893db8eeaa15c9078d8b731de9cd796d29d6770cd465fe84f18a8ddf6bf2ba500c82b35248e8a4a4fe303f3bcda15418bb151fdcb9bd81ecd910257a4fa83990dee956ff0a2d43550b896bc8243d2f97d4a9642faed0f5645aee2aeb3813ed888fbd99361a4f003b5ba838"}}, {0xd3, &(0x7f0000000500)=@string={0xd3, 0x3, "f1cddd0626bc7679c1edff37270c75fa26ecc2cfa538583dec1d0a730dd42b34d6626e75e8becfc9fdd40105378ba3b90a01397f1054a662a210d9723c8a245ed8bc6228b71c93328b583346a2bfacecc695bf6054593b8eb6f81b6afcca932b18542be63887f0df508a8c719c4aac680b5a81e0ce26586805c198cd30c8295bef9ec48a5effbfeeb57ce812d6a65c91de28cacd9a72db02d9fb321958075eed5551136fb39fe2d0e91263d7ee5ea84ef9893a137e3e276d7aa6fdf436bd8867feb3ee3c13a17cd32a3c65bfc86ed37d53"}}, {0xc8, &(0x7f0000000600)=@string={0xc8, 0x3, "35d04075ef29b3920749c398a40d0bc0963cd8925c36860b8fa9a60160908079eb2d20e15eb95ceffba102b325458df7026f38f6c04b229da4190cb9fd3c7e60772d046fb6c703d640b95b07470b4c26d24f8f6700c3081f030cb25a638281716388d032ee0db793b77869293a35f34e29e671483b72f565e5b6356cfd7239fe92d51bc8ae35a59300331c0706fef678c9d3f314435bb8b6403ffbaaf08ef4327a761277602d81c9c6ed140e3d4b792f0e4ebf2329939235bb01f98608e07df4861f21730265"}}, {0xc, &(0x7f0000000700)=@string={0xc, 0x3, "2d85a01a35c338907f0d"}}]}) r6 = syz_usb_connect$cdc_ecm(0x0, 0x6a, &(0x7f0000002040)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x58, 0x1, 0x1, 0x1, 0x80, 0xc, "", [{{0x9, 0x4, 0x0, 0x79, 0x2, 0x2, 0x6, 0x0, 0xe, {{0x8, 0x24, 0x6, 0x0, 0x0, "cbb038"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xff6e, 0x2, 0x9}, [@obex={0x5, 0x24, 0x15, 0x3}, @mbim={0xc, 0x24, 0x1b, 0xa818, 0x2, 0x7, 0x0, 0xfff, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0xfd, 0x9, 0x6}}], {{0x9, 0x5, 0x82, 0x2, 0x258, 0x7, 0x4, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x4, 0x40, 0x40}}}}}]}}]}}, &(0x7f0000002540)={0xa, &(0x7f00000020c0)={0xa, 0x6, 0x310, 0x2, 0xe7, 0x9, 0x10, 0x7}, 0xaf, &(0x7f0000002100)={0x5, 0xf, 0xaf, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x6, 0x3, 0xf}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "527a063ea485f648749d32a68f7f5eff"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x2, 0x8, 0xff, 0x8, 0xf6}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x9, 0xc, 0x474}, @generic={0x7a, 0x10, 0x0, "443a3534f4ee725fe2bd4bcd63817afd98eb0cdf14f2c944eaae45f5619aba7eede1ba911564130f5a1d5b54f23d41f18805a7be96c481ca0e6a12fa24df4b8e8fee1f443a2cac7a0b43593bed1505e7b9b56f40a812a01e9a398eef27583d4c08e9b115f28d12daa55bcfd6c156b2fc20923ef109097a"}]}, 0x5, [{0xa2, &(0x7f00000021c0)=@string={0xa2, 0x3, "2d3690218490802a12c9048be1fbd93938c78d83e256e03418e51b6e6b0d3e989af87c11340263a94ebb8fd96ebd8be256812544eac56792f2cd034d3fd0226e4fbdb16cd2bff569ea5591270574d795312a8f187d04affa7e303654cedc75afe8d3f1b0ef7ff2aaa6a13511da6b748821ecf97d89d22a34beb5269f2b7505b51547104a59adbd7bda6e7e47bc4f88d360a5554fb0cd09807b1ef4168f66695e"}}, {0xed, &(0x7f0000002280)=@string={0xed, 0x3, "72317ef4521b2139109ae713814792c848b33d48dd50e03719bff5783abce55b05fd37d261c85ccd0a389e42a43c003cbb3e515b66081e3e520bde584fb69838ed8ee3a22a8079661e16ddf9f57423b1a08a92a31b0f87ccc70b8931043eca932325a7eecebe4bcc9b86fe7f4679c32fece1813a75db285c9d283b9b6ea2b4e07e25bd0b926f225360b3faae2b5a43004e0381701ca12ad5ff5e893ace9278ab4b8e50b5c16784c509445b6fbffce11d58e0cbc6b156c4f2cc87d6a3df52c89c51281c397772db77788347500aea21aba99dbaf4c85802ebdfcaaecf318cfdf257f893bc8d31cc781932b4"}}, {0x69, &(0x7f0000002380)=@string={0x69, 0x3, "84e78c534cfb396d65c22386640dc7a877f8925c6430b9f2827345043c2a9f50a668430cc0d1f5248ab23779a0da0a775665072c92cd4b73b48b407b904c38ce96d1233c90f690810f06cefc5ccded384577f072464ad86801fb9ed942d9cab43123fa6df894f4"}}, {0x4, &(0x7f0000002400)=@lang_id={0x4, 0x3, 0x42b}}, {0xe4, &(0x7f0000002440)=@string={0xe4, 0x3, "11925a1ca8082f1ee1ea225f7b6f452f5399cae43eb24f895a36ae80225e9108521d0c25bb662255339ff66429b073896e95ee66661d338ebc8cefa3210769a64be9ff1973fd2e7bcf31ce344a91818e993e8a805abe3cf486d4b21e88a5501d66aed90add90b6e2a5eea6c10e6a6dd5aaf2315d341e92e14784b61ce24987fc56ad0d4609af573271a86aac045056d1e8b7be8a8589907f0b493ca10367ec786244ddf53da28c6073da9ab8b88f9de0257ca88cdb95660ec05ee8f4ed0f1b5040255beeb3610706fef526bf9a8dd3880128903ceb48f4ea9e2a90f591d75c822743"}}]}) syz_usb_control_io$cdc_ecm(r6, &(0x7f00000026c0)={0x14, &(0x7f00000025c0)={0x20, 0x7, 0x9b, {0x9b, 0x0, "8071ee653eeff86865fcf25207e42662a2eebf13b62ed4fffd778e8625773ac4cfa2f9f8e86638a1e09b9a3754a13550d09d45060f1d9493d5f0255f5fcec4916f688bc48561a83f7e4fb3df49ab77fc799091e69799acd36ae898952a1a46d67ca3348384fb42daba0038895c15b1bfe6794e190a08900cd3316502687f0a47301380b9b8127fcd29412fb01f4e54d0af3cefa441e642fa7e"}}, &(0x7f0000002680)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002840)={0x1c, &(0x7f0000002700)={0x0, 0xe, 0x8d, "cf32a57b97c9021c7608734ced0e568850a4ab60ff480ad1420fa3a794667f2dfab03d980a5739314e98e1044e70dd8643a639ffd731c7fadde04fb60b63f2e6c8a4f5f0268ac6e0f9bb4cc91d146c04d1de3a309d67e16ab397db9a506cda9a60e5f3af24aa9a357a6fe5a1a757c0623d6da22792a2ae4c6a6f62c0b43741e00b789d5199fe7bdd42f1617045"}, &(0x7f00000027c0)={0x0, 0xa, 0x1, 0x6c}, &(0x7f0000002800)={0x0, 0x8, 0x1, 0xba}}) (async) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f00000007c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xb, 0x72, 0x1, 0x4, 0x7, 0x40, 0x6, 0xe, 0x0, 0x1004}}, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x1, 0x4, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x200080c8}, 0x40000) (async, rerun: 64) r7 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000001d80)={0x14, &(0x7f0000001c80)={0x20, 0x5, 0xa9, {0xa9, 0x24, "05e22db5b049fd9df3f69d9b3851ecaa4822c2e98b60629a8c2bca1c57a22b068d63f7a988b8841a26b93a93ccae5b42aff630023a085b2d7ff8fc4bcb8ff4b4f9f621e858301c56c1b61748085c0ac926f78a8619ed83988a5a9ee22349088491b25091f02a73cec782663415b8070be6bfdf6c83e84578bd2eb431236c660e6b710ef360636eefc3db1473132580b98114a515cc1803753409de42024f54e6497261b1adea47"}}, &(0x7f0000001d40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001fc0)={0x44, &(0x7f0000001dc0)={0x0, 0x30, 0x15, "009ba73ae9a98cbe65744774809f873615aae7f4a6"}, &(0x7f0000001e00)={0x0, 0xa, 0x1, 0xa0}, &(0x7f0000001e40)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000001e80)={0x20, 0x80, 0x1c, {0x7, 0x870, 0x6, 0xb, 0x1000, 0x1ff, 0x53c9, 0x3b, 0x0, 0x3a5, 0x0, 0x81}}, &(0x7f0000001ec0)={0x20, 0x85, 0x4, 0x9}, &(0x7f0000001f00)={0x20, 0x83, 0x2}, &(0x7f0000001f40)={0x20, 0x87, 0x2, 0x9}, &(0x7f0000001f80)={0x20, 0x89, 0x2, 0x1}}) (async, rerun: 32) setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 32) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) (async, rerun: 64) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (rerun: 64) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) (async) sendmmsg$inet(r7, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="db", 0x1}], 0x1}}], 0x1, 0x40040) r8 = syz_usb_connect$lan78xx(0x2, 0x3f, &(0x7f0000002880)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r8, &(0x7f0000002a80)={0x14, &(0x7f00000028c0)={0x40, 0x8, 0x91, {0x91, 0x1, "643e3f8df590f70abb9d176dec7aa30eecb2763152f2a33a8ee44337155a2233fd73319d9f6cb1e4d7714b72a37a9126a95eff047d36fd266340a6f7633289e2952b3b6f2d51b01dafb8aa4ded345d760b6dd3bcbfa805df022b63abcdff972fb8613d60898287d487750724e9fe0e3dd49b5175a94647f7727d9e8441d65a9c20b64172e1a11c15ca2647a9d57d27"}}, &(0x7f0000002980)={0x0, 0x3, 0xdc, @string={0xdc, 0x3, "9d824c04cf16dd074a7a08b6171e4b325ab243e2e3d3a75922c3c7bb363706cb122a252100a46d7edca964300ac7826ead4844552d2e01f8a46007adc57eb305eb33e15080b7c626f21af05324efc2420b133162bade71602a85dbb47ffaad876d31a1bfc2017b43ec1c94c9da07c600d56dc420ef007f18e92a3bbb36f8132fb355f0c5ce4d0c7ff9b0ff04b62b31c5e5323c4fb18b5dd3c8fcf1bcdfd1dd19353596cb2badedefa626ff8d688418003d079312d722261f457c3c9172a2fe6dd42fba3028f6e9bdcda6ec70f5d89615eb6fc85434d3db9f9b72"}}}, &(0x7f0000002c80)={0x34, &(0x7f0000002ac0)={0x40, 0x5, 0x59, "848794d83b6ea3cef6f140104914e98612d12fe5b025705bedd2e1ea27e70c35eb506ae3a6deda6572b1a7da86351dafbe0b98ebe63c5bc5843231e30adcc0b3f70f2e27baa2ffdbfcbc39b5eb01fa5fba48f9bed135dba5bd"}, &(0x7f0000002b40)={0x0, 0xa, 0x1}, &(0x7f0000002b80)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000002bc0)={0xc0, 0xa1, 0x4, 0x7}, &(0x7f0000002c00)={0x40, 0xa0, 0x4, 0x9}, &(0x7f0000002c40)={0xc0, 0xa2, 0x2f, "c89a72b0b6615c65699db6dfaf254dd420debd1c948b734bd907301d9c04f2ddb4318731bb532436e8a874af92478d"}}) (async) sendmmsg(r7, &(0x7f0000004440)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="d1", 0x1}], 0x1, &(0x7f0000000640)=ANY=[], 0x10}}], 0x1, 0x4044044) (async) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) 4.962007018s ago: executing program 4 (id=2511): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x80489439, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x20040051}, 0x8000) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x191081) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r6, 0xc0505350, &(0x7f0000000140)={{0x1, 0x1}, {0x8, 0x2}, 0x8, 0x4, 0x6}) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, 0x0) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x2, 0x40000333}, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r7, 0x4b66, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1f00000039000100faff07000400000001"], 0x20}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 3.828301927s ago: executing program 0 (id=2513): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000200)=0x5a6, 0x4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x2, 0x60b924, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x6, 0xb}, {0x1b, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048060}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[], 0x158}}, 0x0) unshare(0x20020000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000008c0)=[{0x16}]}) fsetxattr$trusted_overlay_redirect(r2, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="020000000400000008000000ff03000080000000", @ANYRES32, @ANYBLOB="00d4c51ab6ff"], 0x50) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) quotactl_fd$Q_QUOTAOFF(r3, 0xffffffff80000302, r6, 0x0) r7 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0xfffff000) r8 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, &(0x7f0000000080)={&(0x7f0000000040)=[r10], 0x0, 0x1, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r8, 0xc01864cb, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0, r9, r10], &(0x7f0000000140)=[0x2, 0x52b8000000000000, 0xffffffffffffffd1, 0x1, 0x3000000000], 0x3}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r7, 0xc02064cc, &(0x7f0000000080)={r10, 0x0, 0x4, 0x8, 0x2}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000140)=ANY=[], 0x32600) r12 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r12, 0xc008561c, &(0x7f0000000400)={0xf0f02a, 0x105}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) 3.755928443s ago: executing program 4 (id=2514): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) time(0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newtfilter={0x478, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x448, 0x2, [@TCA_FLOW_POLICE={0x444, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x6, 0x7, 0x7, 0x7, {0x4, 0x1, 0xfe00, 0xfe42, 0x4, 0x7}, {0x17, 0x2, 0xcb, 0x1, 0x800, 0x8002}, 0x7, 0xa6, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x4, 0x4000e4ff, 0x6, 0xfffffff1, 0x796, 0x5, 0xd2c1, 0x7ff, 0x20, 0x6, 0x9, 0x101, 0x5, 0x2, 0x9, 0xc, 0x800, 0x695, 0x401, 0x2, 0x7, 0x1000, 0x343d41f0, 0x4, 0x3, 0x3, 0x3, 0xc94, 0xa0, 0x1, 0x5, 0x81a, 0x1666, 0x80c, 0xb, 0xce3a, 0x21f1, 0x81, 0x5f82, 0x5ff, 0x3, 0xed, 0x4, 0x81, 0x401, 0x1, 0x5fb2, 0x8, 0xfffffe01, 0xc, 0x6, 0x2, 0x0, 0x7, 0x1, 0xffffffff, 0xb1e5, 0x0, 0x8, 0x4, 0x1, 0x0, 0x3, 0x9, 0x3, 0x1, 0xc24, 0x2, 0x5, 0x1f, 0x7, 0x0, 0x4, 0x3, 0x2, 0x4d, 0xffffffff, 0x4, 0x1, 0x6, 0x40, 0x1, 0x3, 0x2, 0x5, 0x1ff, 0x101, 0x8, 0xf48, 0x9, 0xffffffff, 0x200, 0x5, 0x76, 0x6, 0x3, 0x8000, 0x6, 0x9, 0x80000000, 0x6, 0x8001, 0xbe39, 0x7b7, 0x5, 0x7ff, 0xb, 0x4, 0x1, 0x8, 0x9, 0xb, 0x6, 0xdfcf, 0x0, 0x442ff558, 0xb481, 0x6, 0x3, 0x4, 0xe, 0x10000, 0x0, 0x31fe, 0xfffff2c1, 0xb, 0x3, 0x6, 0x7b, 0x21d, 0x6, 0xc, 0x10, 0xf91, 0x0, 0x62e, 0x2, 0xfffffffc, 0x5d8, 0x4, 0x5, 0x7, 0x8, 0x3, 0x7, 0x9, 0x5, 0xfffffff7, 0x0, 0x2, 0x80000000, 0x400009, 0x5, 0x8, 0x3, 0x0, 0x200, 0xdff, 0x7, 0x9, 0x223ec3e9, 0xdaa, 0x0, 0x101, 0x1000, 0x4, 0x8, 0x8, 0x13, 0xb, 0x4, 0xfffffffb, 0x491, 0xfffffffb, 0xfffffff9, 0x9c, 0x3, 0x1, 0x4005, 0x5, 0x8001, 0x6, 0x10001, 0x1, 0x3, 0xffff, 0x4, 0x38, 0x401, 0x2, 0x10, 0x3, 0x3, 0xbd, 0x9, 0x4, 0x5, 0x81, 0x81, 0x3, 0x202, 0x5, 0x9, 0x81, 0x6, 0x8, 0x79, 0x6, 0x8, 0xffffffff, 0xea58, 0x29dc6e7b, 0x53ad, 0x7, 0xd77, 0xfb, 0x8, 0x5, 0x0, 0x0, 0x12, 0x4e, 0xf, 0xbb4f, 0x7, 0xe4, 0xbcba, 0x80, 0x8, 0xc6, 0x0, 0x81, 0x10000, 0x70, 0xffffffff, 0x4, 0x80, 0x8, 0x3ff, 0xffffffff, 0x5, 0x7, 0x6, 0x5, 0x8001, 0x6ab0, 0x401, 0x40000007, 0xd, 0x81, 0x7, 0x5, 0xf417, 0x6, 0x5]}]}]}}]}, 0x478}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x5, &(0x7f00000000c0)=0x85, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) linkat(0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000) syz_emit_ethernet(0x4e, &(0x7f00000020c0)=ANY=[], 0x0) 3.502388185s ago: executing program 4 (id=2515): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2800491, &(0x7f0000000a40)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x4, 0x0, 0x0) (async) syz_mount_image$fuse(&(0x7f0000000180), &(0x7f00000010c0)='./file0\x00', 0x2070823, &(0x7f0000000180)=ANY=[], 0x2, 0x0, 0x0) (async, rerun: 64) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b80000001300100000000000fbdbdf25fc000000000000000000000000000000fc000000000000000000000000000001000000044e2400000a0060203b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000400000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000feffffffffffffff00000000000000000000000000000000000000000000000009000000000000000001020000000000f58a6589c11cd02adfbd6e54650458482c0072f2fe5e708121f4dd08497c15ca31ad2747c5d86037acfb3d3c59733ba406eed64b3862e4536367f52c1b7e256929688f48c3e05effc17f763dd64756b0dbb1d60094a354d74ddfa64321576b6b464381290e3f4cfedf86003b577cd5c6075bce724b2bdceab38d842989"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) (async, rerun: 64) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}, 0x1, 0x0, 0x0, 0x40000000}, 0x4008000) (async, rerun: 64) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b800000019000100fcffffff10000000ffffffff000000000000000000000000e000000100000000000000000000000000000000f7fb20000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000080000000000000090000000000000800000000000000000000000000000000000000000000000000000000002000001000000000000009000000000000008000000000000000000000000000000000000000000000000201000300000000"], 0xb8}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) (async) openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) (async) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x30, r6, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x3, 0x1, 0x1}}}}, 0x30}}, 0x0) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r6, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x10000, 0x4, 0x1, 0x62d6}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4000805) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) 3.34000619s ago: executing program 4 (id=2516): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x4, 0x8}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x101001, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f0000000200)={{0x8, 0x9}, 'port0\x00', 0x8, 0xc00, 0x8, 0x7, 0x5, 0x8, 0x8000, 0x0, 0x4, 0xff}) dup3(r1, r0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xfe, 0x0, 0x6}]}) r4 = syz_usb_connect$hid(0x3, 0x97, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040300f1101000000000001d90224000100004000090400000b0300040009212000fe012228000905810300020308c3"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000000c0)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x3d1, {0x9, 0x21, 0xfffe}}}, &(0x7f0000000040)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r3, 0xffffffffffffffff, 0x0) 3.33954072s ago: executing program 3 (id=2517): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x2400, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x108}}, 0x0) 3.215375115s ago: executing program 2 (id=2518): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x324}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.205876094s ago: executing program 3 (id=2519): ioprio_set$uid(0x3, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$inet(r0, 0x0, 0x8000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) sendto$inet6(r1, &(0x7f00000002c0)='\x00', 0x1, 0x2000c850, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0x100a, 0x1, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/200, 0xfffffffffffffecd, 0x0, 0x0}, &(0x7f0000001380)=0x40) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000280)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x3d, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0x1, 0x9, 0x5, 0x0, 0x3, 0x2, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000380)=@arm64={0x7, 0xb, 0x4, '\x00', 0x1}) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xfec00000, 0x0, 0x3c, 0x8, 0x0, 0x1, 0x2, 0x0, 0x8, 0x9, 0x10}, {0x25000, 0x0, 0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7}, {0x58000, 0x5000, 0xc, 0xff, 0x16, 0x4, 0x0, 0xfc, 0x3, 0x81, 0x0, 0xfc}, {0x30000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x9, 0x3, 0x6}, {0xeeee8000, 0xffff1000, 0x9, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, 0xc8}, {0x0, 0x0, 0xa, 0xfe, 0x0, 0x0, 0x3, 0x0, 0xff, 0x0, 0x80}, {0x6000, 0xb000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xca, 0x26}, {0x80a0000, 0xfffe}, {0x1}, 0xddf8ffdb, 0x0, 0xeeee0000, 0x50, 0x0, 0xf801, 0x54000, [0x0, 0x4, 0x1]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) setxattr(&(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) set_mempolicy(0x4005, 0x0, 0x9) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x2, 'lo\x00', 0x3}, 0x18) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) 2.866794969s ago: executing program 0 (id=2520): openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x1e3002, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f00000004c0), 0x1, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xfff2, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0xffffffffffffffd5}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xffe0, 0x10}}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x44}}, 0x2) pread64(r1, &(0x7f00000000c0)=""/105, 0x69, 0x7) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRESDEC=r1, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r0], 0x54}}, 0x0) 2.819905001s ago: executing program 3 (id=2521): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x200000000000000, 0x600, 0x10000) 2.731374657s ago: executing program 3 (id=2522): r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x8000000) r1 = semget(0x3, 0x1, 0x3c4) semtimedop(r1, &(0x7f0000000600)=[{0x4, 0x0, 0x800}, {0x3, 0x2, 0x1800}], 0x2, 0x0) unshare(0x60040000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) fdatasync(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd69846e4400083c0100000000000000000000000000000000ff02000000000000000000000000000187000000000010"], 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0002000001, 0xfa11, 0x3}, 0x0) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write$vhost_msg_v2(r6, &(0x7f0000000180)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x48) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)) recvmsg(r2, &(0x7f00000000c0)={&(0x7f00000002c0)=@isdn, 0x80, &(0x7f0000000900), 0x0, &(0x7f0000000200)=""/108, 0x6c}, 0x40002041) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRESOCT=r0, @ANYRES16=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r7 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) lseek(r7, 0x0, 0x1) memfd_secret(0x0) 2.668822363s ago: executing program 0 (id=2523): clock_adjtime(0x0, &(0x7f0000000000)={0x3, 0xae, 0x6, 0x7a, 0x3, 0x2, 0x8000000000000001, 0x2, 0x200, 0x7f9, 0x7fffffffffffffff, 0x3, 0x100000001, 0x0, 0x5, 0xffffffffffffff33, 0xe7, 0x3, 0xfffffffffffffff9, 0x7, 0x7, 0x8, 0x9, 0x5, 0x6, 0x4}) r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$FICLONE(r0, 0x40049409, r0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000000140)) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000180)=[@mss], 0x1) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@cgroup=r3, 0x9, 0x0, 0x7, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0]}, 0x40) r6 = dup2(r1, r1) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000340)={r1, 0x7, 0x6b, 0x10}) pread64(r4, &(0x7f0000000380)=""/47, 0x2f, 0x5) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) statx(r6, &(0x7f0000000440)='./file0\x00', 0x0, 0x20, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r4, &(0x7f0000000580)={0x6f, 0x7d, 0x1, {{0x0, 0x4e, 0xff, 0x8, {0x81, 0x4, 0x4}, 0x20000, 0x3ff, 0xfff, 0x8, 0xc, '/dev/video2\x00', 0x1, ',', 0xc, '/dev/video2\x00', 0x2, ',@'}, 0xc, '/dev/video2\x00', 0xee01, r10, r11}}, 0x6f) writev(r6, &(0x7f0000000780)=[{&(0x7f0000000600)="b83933f475ffbf02a0c2dad3161de6be132e3e2ea2d0a4495bda5921a04ad457a8d63ab12398b616e23cc5ddc0316cd42788d49fd575e2f6aaf61b8edc500824ba22c9eb803dcfe0f2d33a7db1f06814e25b339c69b67cbeba9d05dbd90a52a6b01d889d6133a15aefe210", 0x6b}, {&(0x7f0000000680)="8e54c054", 0x4}, {&(0x7f00000006c0)="19f781e58feacbd83fa46aa4408dea7af89c91abd8af5ee22e8d165dd6fec888581fbe23036c118e4a6dd42083a9ec321a624038878daecc97d92d85e7b383e77cd2a45c90997afc122173463c05970b3f0cbb2e4cf9ce112936b554b3e8adb93d46a2987565335c3685ddff8b1d8536c4a27c524c6c4b9ed70ffce1e4c0f8c9e8fc559be2ad6972746933c8943d1bab", 0x90}], 0x3) r13 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000007c0), 0x300, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r13, 0x5201) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000800)={0x401, 0xc, 0x3, 0x0, 0x8}) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000840)={0x6, "925f9e8b7f308a80e4ae802cb7fa26affa8389bb9938c5a9f88ae5d979e6839a", 0x3, 0x8, 0x85c, 0x34c, 0x4, 0x0, 0x6}) read(0xffffffffffffffff, &(0x7f00000008c0)=""/187, 0xbb) clock_adjtime(0x1, &(0x7f0000000980)={0x7, 0x1ff, 0x6, 0x8, 0xfffffffffffff912, 0x9, 0x4, 0xf, 0xa69, 0x5, 0x5, 0x3, 0x1c, 0x8000000000000000, 0xe9b, 0x5, 0x1, 0xc, 0x9, 0x7403, 0xe3e6, 0xffffffff, 0xfffffffffffffffe, 0xfffffffffffff800, 0x4, 0x2}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000a80)=0x5, 0x4) ioctl$XFS_IOC_GOINGDOWN(r6, 0x8004587d, &(0x7f0000000ac0)=0x9) r14 = socket$tipc(0x1e, 0x5, 0x0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000b00), 0x3) r15 = socket$alg(0x26, 0x5, 0x0) r16 = accept$alg(r15, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002300)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b80)="02e0714accfabf050e170737b1a557df9ca79db6c046c0eccbc68de4c17ce72c1668dbcefd41c3bf66faeb541813f5a6a04eab8af53aa08393bc925a77b95ba672c04ee78b69f5691c68f85df110717a6ea1539f24eeb60be7a0082e17274c42e141b11ad4325a7174732fa984540c986e3e6f", 0x73}, {&(0x7f0000000c00)="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", 0x1000}], 0x2, &(0x7f0000001d80)=[@rights={{0x34, 0x1, 0x1, [r1, r0, r1, r1, r16, r14, 0xffffffffffffffff, r13, r4]}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}, @rights={{0x18, 0x1, 0x1, [r13, r6]}}], 0x70, 0x80}}, {{&(0x7f0000001e00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002080)=[{&(0x7f0000001e80)="1598dd7f63c764569e45d9c9e63e8bd9fa19071b3c153baf150f3d6347fe7bc22a2c2603fc06a8dd3a4b46ade096bba371d4", 0x32}, {&(0x7f0000001ec0)="c3d72b5d228f145961e7642a259e068fddf61030e93d8190877da5aa1f7bce8ac5985ff0415c6d3c407e36ceb2f71d3c8eba5723fd6bb1875230336cce3197b1a1dd468e39976b496bd86077a4ddee6db806c0ca0d5003d7f0f16068d8e05e2e70199e63e3d487c8861ff2636d9fcb085762b9fe90ab1715d0223d5344eab11808c2af9f30426e28fda00286a8efb37b68e4426df8c32da2ed1207ef4b516c331c8f564d88cb6491b352281a56e9227c451d990888d24d7dd075dc3ac5fdf0ffb47548ca0942208c79e7ac94af2a8620705bb2d075650c60ed5e30f307736a74e3465bcf8498e7aea31af43d686e9480615a67ba51b7a5", 0xf7}, {&(0x7f0000001fc0)="f02e7af5d9dfd409fd0d97e8fdfe1d3de0575ee947789c5d5e0153bea012fb12ecd55abc4d98abcdc1cadc1885fefceafeac4d132a9b69cbbb320c0f07ba0775f0ae832f8be5695071612c279282a9a7e7bd4236419c5a137e183113e9cf6404b77459cbdcb245e17f5b60cdcef28a38050089cf1b3e09003ef6fc98169a3c442a15bf0baf13", 0x86}], 0x3, &(0x7f00000021c0)=[@rights={{0x1c, 0x1, 0x1, [r14, 0xffffffffffffffff, r14]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r16, r4, r0, r14, r13, r2, r6]}}, @rights={{0x38, 0x1, 0x1, [r16, r7, r6, r6, r4, r15, r0, r7, r5, r6]}}, @rights={{0x18, 0x1, 0x1, [r4, r1]}}, @rights={{0x1c, 0x1, 0x1, [r3, 0xffffffffffffffff, r14]}}, @rights={{0x1c, 0x1, 0x1, [r15, r14, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r11, r12}}}, @cred={{0x1c, 0x1, 0x2, {r8, r11}}}], 0x120, 0x4800}}], 0x2, 0x4004000) 2.631837901s ago: executing program 0 (id=2524): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xd250}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x80}}, 0x20000084) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) r1 = syz_usb_connect(0x5, 0x207, &(0x7f0000009a00)=ANY=[@ANYBLOB="12011003a9372540f30c1010db26010203010902f50101030250070904"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000140), 0x80000000, 0x185880) ioctl$SNDRV_PCM_IOCTL_FORWARD(r2, 0x40084149, &(0x7f0000000180)) syz_usb_disconnect(r1) syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0xe0, 0x4}}]}}, 0x0) close(r0) 2.044222471s ago: executing program 5 (id=2526): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet(0x2, 0x1, 0x6) setsockopt$sock_attach_bpf(r1, 0x1, 0x4a, &(0x7f0000000640), 0x4) ioctl$sock_ifreq(r0, 0x8929, &(0x7f0000000040)={'\x00', @ifru_mtu=0x4}) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f00000000c0)={@remote, @private0, @empty, 0x40003, 0x40, 0x5, 0x100, 0x0, 0x590043, r4}) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) tee(r5, r6, 0xe, 0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="3e1c1ad7ceb68c6f219b124f8d60f2f9f9a5d315e3228a094b3a05b1b2d91a88255bc72fedbc6f002f6f9d919a1cace62d947e4fe5104bfaeb2c20915622077c6fddd56fa49563d82993a8d5b7f9df4b810d40ce5fd060496ba3cd06a64d63b6d102b59fb5932c6e2c6019ff89ea7fcd4a5dad1f1c44e0c8c0332b98f2108f4ef7026ea7c618884e6e255995c59d4d1ba24915c160ff82ef97067f02d74d81be2d0f0fc66b0b807006f8e421b627ed6bda12d2f660f4595d97a42754d358cfc33cce73456848438115df22a8cbe7a100a72c569918cc8cc478888e32268983ef5ff318f454df07da303eb47ca5c6c270acc1fd924f26", 0xf6) syz_emit_ethernet(0x5e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0000000000000000000101fe8000000000000000000000008bfb6ac113a65da077f88326030000aa8900907800000000000000000300000000000000000000010000000000000000000000000000000100"/107], 0x0) r7 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$kcm(r7, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="7163d14f", 0x4}], 0x1}, 0x4004885) 1.903366052s ago: executing program 5 (id=2527): madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000009c0)=[{{&(0x7f0000000340)=@qipcrtr, 0x80, &(0x7f0000000b00)=[{&(0x7f00000003c0)=""/49, 0x31}, {&(0x7f0000000680)=""/145, 0x91}, {&(0x7f0000000a40)=""/74, 0x4a}, {&(0x7f0000000ac0)=""/44, 0x2c}], 0x4, &(0x7f00000004c0)=""/109, 0x6d}, 0x7}, {{&(0x7f0000000540)=@qipcrtr, 0x80, &(0x7f0000000880)=[{&(0x7f00000005c0)=""/138, 0x8a}, {&(0x7f0000000780)=""/237, 0xed}], 0x2, &(0x7f00000008c0)=""/199, 0xc7}, 0xffff0000}], 0x2, 0x2, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) socket(0x15, 0x5, 0x800) (async, rerun: 32) r2 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) (async, rerun: 64) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) (async, rerun: 64) r3 = accept(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e1", 0x12}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) (async) recvmsg(r3, &(0x7f000000b680)={0x0, 0xffffffffffffffc3, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 32) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (rerun: 32) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async, rerun: 64) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (rerun: 64) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b87a000f00d80f300f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x64}], 0x1, 0x14, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) (async) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f000050b000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x34, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) socket$alg(0x26, 0x5, 0x0) 1.786700477s ago: executing program 5 (id=2528): syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x49, 0xe, &(0x7f0000000380)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r4, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0x100000000000020a, 0x0, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000006a000105fefdfbffffdbdf250000000000000004080005"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, &(0x7f0000000440)=@svm={0x1, 0x1, 0x1080, {0xd000}, {"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"}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x3) close(r5) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0x101, 0x5479, 0x103d, 0x200000000006, 0x0, 0x32a, 0x1, 0x1, 0x1, 0x40000000009, 0x8000000000005, 0x800000068], 0x8080000, 0xdd1}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0x9, 0x1, {0xffffffffffffffff}, {}, 0x0, 0x151}) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000bed000/0x4000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f00001a1000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r2}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x30bd, 0xc000, 0x8, 0x68}) bpf$PROG_LOAD(0x5, &(0x7f0000002600)={0x12, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x3b6, &(0x7f0000002200)=ANY=[@ANYBLOB="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"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r8, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) 1.523323715s ago: executing program 2 (id=2529): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xffffffffffffffbd, 0x19, 0x1, 0x70bd28, 0x0, {{@in=@local, @in=@local, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x1}, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x6f6) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r8, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x1fff, 0x80}, 0x8) r9 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @broadcast}, {{0x4e20, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x36) 1.360376257s ago: executing program 2 (id=2530): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000200)=0x5a6, 0x4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x2, 0x60b924, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x6, 0xb}, {0x1b, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048060}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[], 0x158}}, 0x0) unshare(0x20020000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000008c0)=[{0x16}]}) fsetxattr$trusted_overlay_redirect(r2, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="020000000400000008000000ff03000080000000", @ANYRES32, @ANYBLOB="00d4c51ab6ff"], 0x50) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) quotactl_fd$Q_QUOTAOFF(r3, 0xffffffff80000302, r6, 0x0) r7 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0xfffff000) r8 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, &(0x7f0000000080)={&(0x7f0000000040)=[r10], 0x0, 0x1, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r8, 0xc01864cb, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0, r9, r10], &(0x7f0000000140)=[0x2, 0x52b8000000000000, 0xffffffffffffffd1, 0x1, 0x3000000000], 0x3}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r7, 0xc02064cc, &(0x7f0000000080)={r10, 0x0, 0x4, 0x8, 0x2}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000140)=ANY=[], 0x32600) r12 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r12, 0xc008561c, &(0x7f0000000400)={0xf0f02a, 0x105}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) 976.080347ms ago: executing program 3 (id=2531): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x400041, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') write$FUSE_DIRENT(r1, &(0x7f0000000180)=ANY=[@ANYRESOCT=r4, @ANYRES16=r3, @ANYRESHEX=0x0, @ANYRESDEC=r1, @ANYRES64=r4, @ANYRES32=r4, @ANYRESHEX=r3, @ANYRES16=r0], 0x130) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000080)={r3, 0x1, 0x6, @multicast}, 0x10) pwrite64(r1, 0x0, 0x0, 0x239c1317) 882.30515ms ago: executing program 3 (id=2532): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffffffffff0b, 0xcc, &(0x7f0000006680)) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffffffffff0b, 0xcc, &(0x7f0000006680)) pivot_root(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/168, 0xa8}], 0x1, 0x2004, 0x80) (async) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/168, 0xa8}], 0x1, 0x2004, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f00000003c0)=[@in6={0xa, 0x4e23, 0xa, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}]}, &(0x7f0000000040)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f00000003c0)=[@in6={0xa, 0x4e23, 0xa, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}]}, &(0x7f0000000040)=0x10) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da00090589"], 0x0) shutdown(r4, 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000080)={r5, 0x8001}, &(0x7f00000000c0)=0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x10, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@call={0x85, 0x0, 0x0, 0x2a}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 828.918799ms ago: executing program 5 (id=2533): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRESOCT=r0, @ANYRES8=r0, @ANYRES8=r1], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x24000054) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x401}) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000380)={r5, 0x1}, 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000180)={r5}, 0x8) 728.577945ms ago: executing program 5 (id=2534): mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x200500) mmap$usbfs(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x8010, r0, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r2, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x73}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x801) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_MAP(r3, 0xc0286415, &(0x7f00000001c0)={&(0x7f0000ffd000/0x2000)=nil, 0x0, 0x1, 0x80}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r1) sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xf8, r5, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x70, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x16}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pim6reg1\x00'}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000400), 0x8000, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x200, 0x0) ioctl$TUNSETOFFLOAD(r7, 0x400454d0, 0x4) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, r8, 0x1, 0x70bd25, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x1, 0x9, @udp='udp:syz2\x00'}}}, ["", ""]}, 0x34}}, 0x4008040) (fail_nth: 6) ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f0000000640)={0x0, 0x8001, 0x4, '\x00', &(0x7f0000000600)=0xd8}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x40002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20008000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x54, r2, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_IE={0x2e, 0x2a, [@dsss={0x3, 0x1, 0x8}, @rann={0x7e, 0x15, {{0x1}, 0x89, 0xb1, @device_a, 0x72, 0x42, 0x6}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @mesh_chsw={0x76, 0x6, {0x8, 0x5, 0x28, 0x3}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x880}, 0x0) readahead(r3, 0x0, 0x10001) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000840), 0x107000, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r6, 0x3b88, &(0x7f0000000880)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r10, 0x3b85, &(0x7f00000008c0)={0x28, 0x1, r11, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000001}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000940)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x1c, r2, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000c40), &(0x7f0000000c80)=0x4) 239.68916ms ago: executing program 5 (id=2535): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b7403340861a22753635f10203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000380)={0x0, 0xe, 0x2, '#\t'}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 238.134403ms ago: executing program 2 (id=2536): syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="04230d04c9"], 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2, 0x80805, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x5, 0x8, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_query, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x80000000}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f0000000240)='syzkaller\x00', 0x19, 0x79, &(0x7f0000000340)=""/121, 0x41000, 0x4, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x1, 0xe, 0x2, 0xfffffbff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f00000005c0)=[0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000600)=[{0x1, 0x1, 0x0, 0xb}], 0x10, 0x9}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x9, 0x79, 0x10, 0x30}, [@ldst={0x5, 0x2, 0x0, 0x0, 0xef8b2f9b19d50099, 0x0, 0xfffffffffffffff0}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r2}, 0x94) r4 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0xfe, 0x1, "000064640000001503fe614386f400", '\x00', "0f00", "0100", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386afe0374831c1f9", "cf6cce2296b3f853e224c4e0"]}) setsockopt(r1, 0x0, 0x80, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000070000000000000000000a40000000160a05000000000000000000020000000900010073797a300000000014000380080001400000000008000240000000030900020073797a300000000014000000110001"], 0x68}}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r3], 0x70}}, 0x24044884) 232.312128ms ago: executing program 4 (id=2537): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x5, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x9, 0x3, 0x8401, 0x300}, {0x9, 0x8, 0x8, 0x40}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x4, 0x300}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 72.5443ms ago: executing program 2 (id=2538): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x94, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@generic="fa2209c7e38111bc76e5869970ab4c9c56e5e3e5ba3585a26ff07702c7bb9d9c6a7fb84c3a7a3beeefdef2923f6efd5c26a942bcbee95088419c94b6171b5dc5026b769ff46295252854bfffbc8f4499c0d77c61aa4f6f369f85ffd08496fd49742f2a6168325eeef66b43005e628f9c9f3bff164271b30dad332950e253da46"]}, 0x94}, 0x1, 0x0, 0x0, 0x42800}, 0x0) 14.542941ms ago: executing program 2 (id=2539): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x324}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 0s ago: executing program 4 (id=2540): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x5, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x9, 0x3, 0x8401}, {0x9, 0x8, 0x8, 0x40}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x4, 0x300}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (fail_nth: 8) kernel console output (not intermixed with test programs): 0x15c/0x940 [ 468.062068][T12867] ? __pfx___ip6_local_out+0x10/0x10 [ 468.062109][T12867] ? ip6_local_out+0x16e/0x190 [ 468.062130][T12867] ? ip6_send_skb+0x10f/0x390 [ 468.062153][T12867] ip6_send_skb+0x1d5/0x390 [ 468.062179][T12867] rawv6_push_pending_frames+0x65e/0x810 [ 468.062252][T12867] ? ip6_append_data+0x1b7/0x280 [ 468.062276][T12867] ? __pfx_rawv6_push_pending_frames+0x10/0x10 [ 468.062302][T12867] ? __pfx_raw6_getfrag+0x10/0x10 [ 468.062329][T12867] rawv6_sendmsg+0x1387/0x18e0 [ 468.062362][T12867] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 468.062398][T12867] ? aa_sk_perm+0x6d5/0x900 [ 468.062425][T12867] ? tomoyo_socket_sendmsg_permission+0x215/0x300 [ 468.062447][T12867] ? __pfx_aa_sk_perm+0x10/0x10 [ 468.062468][T12867] ? sock_rps_record_flow+0x19/0x350 [ 468.062484][T12867] ? __pfx_inet_sendmsg+0x10/0x10 [ 468.062502][T12867] ? inet_sendmsg+0x2f4/0x370 [ 468.062518][T12867] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 468.062540][T12867] ? __pfx_inet_sendmsg+0x10/0x10 [ 468.062558][T12867] __sys_sendto+0x5de/0x710 [ 468.062583][T12867] ? __pfx___sys_sendto+0x10/0x10 [ 468.062601][T12867] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 468.062639][T12867] ? __fget_files+0x3a0/0x420 [ 468.062670][T12867] ? ksys_write+0x242/0x270 [ 468.062694][T12867] ? __pfx_ksys_write+0x10/0x10 [ 468.062722][T12867] __x64_sys_sendto+0xde/0x100 [ 468.062743][T12867] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.062762][T12867] do_syscall_64+0x15f/0xf80 [ 468.062783][T12867] ? trace_irq_disable+0x3b/0x140 [ 468.062805][T12867] ? clear_bhb_loop+0x40/0x90 [ 468.062827][T12867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.062843][T12867] RIP: 0033:0x7f5e5279ce59 [ 468.062860][T12867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 468.062881][T12867] RSP: 002b:00007f5e535d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 468.062899][T12867] RAX: ffffffffffffffda RBX: 00007f5e52a15fa0 RCX: 00007f5e5279ce59 [ 468.062910][T12867] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 468.062920][T12867] RBP: 00007f5e535d0090 R08: 0000200000000180 R09: 000000000000001c [ 468.062931][T12867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 468.062941][T12867] R13: 00007f5e52a16038 R14: 00007f5e52a15fa0 R15: 00007f5e52b3fa48 [ 468.062971][T12867] [ 468.416728][T12768] usb 3-1: new full-speed USB device number 80 using dummy_hcd [ 468.458466][T12768] usb 3-1: device descriptor read/8, error -71 [ 468.570025][T12768] usb usb3-port1: unable to enumerate USB device [ 468.624631][T12767] usbhid 5-1:0.0: can't add hid device: -71 [ 468.632582][T12767] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 468.642372][T12767] usb 5-1: USB disconnect, device number 94 [ 468.839504][ T29] usb 4-1: new full-speed USB device number 110 using dummy_hcd [ 468.886781][T12882] FAULT_INJECTION: forcing a failure. [ 468.886781][T12882] name failslab, interval 1, probability 0, space 0, times 0 [ 468.915977][T12882] CPU: 0 UID: 0 PID: 12882 Comm: syz.0.2172 Tainted: G L syzkaller #0 PREEMPT(full) [ 468.916004][T12882] Tainted: [L]=SOFTLOCKUP [ 468.916010][T12882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 468.916016][T12882] Call Trace: [ 468.916021][T12882] [ 468.916026][T12882] dump_stack_lvl+0xe8/0x150 [ 468.916043][T12882] should_fail_ex+0x412/0x560 [ 468.916059][T12882] should_failslab+0xa8/0x100 [ 468.916074][T12882] ? skb_clone+0x212/0x3a0 [ 468.916088][T12882] kmem_cache_alloc_noprof+0x87/0x650 [ 468.916101][T12882] ? __netlink_lookup+0xc6/0x8b0 [ 468.916118][T12882] skb_clone+0x212/0x3a0 [ 468.916133][T12882] __netlink_deliver_tap+0x404/0x850 [ 468.916151][T12882] ? netlink_deliver_tap+0x2e/0x1b0 [ 468.916164][T12882] netlink_deliver_tap+0x19c/0x1b0 [ 468.916177][T12882] netlink_unicast+0x730/0x8e0 [ 468.916193][T12882] netlink_sendmsg+0x813/0xb40 [ 468.916210][T12882] ? __pfx_netlink_sendmsg+0x10/0x10 [ 468.916225][T12882] ? aa_sock_msg_perm+0xf1/0x1b0 [ 468.916239][T12882] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 468.916252][T12882] ____sys_sendmsg+0x972/0x9f0 [ 468.916266][T12882] ? __might_fault+0xaf/0x130 [ 468.916281][T12882] ? __pfx_____sys_sendmsg+0x10/0x10 [ 468.916298][T12882] ? import_iovec+0x73/0xa0 [ 468.916313][T12882] ___sys_sendmsg+0x2a5/0x360 [ 468.916325][T12882] ? __lock_acquire+0x6b5/0x2cf0 [ 468.916338][T12882] ? __pfx____sys_sendmsg+0x10/0x10 [ 468.916367][T12882] ? __fget_files+0x2a/0x420 [ 468.916378][T12882] ? __fget_files+0x3a0/0x420 [ 468.916393][T12882] __x64_sys_sendmsg+0x1bd/0x2a0 [ 468.916407][T12882] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 468.916425][T12882] ? __pfx_ksys_write+0x10/0x10 [ 468.916448][T12882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.916458][T12882] do_syscall_64+0x15f/0xf80 [ 468.916472][T12882] ? trace_irq_disable+0x3b/0x140 [ 468.916487][T12882] ? clear_bhb_loop+0x40/0x90 [ 468.916499][T12882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.916508][T12882] RIP: 0033:0x7fb6c459ce59 [ 468.916518][T12882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 468.916526][T12882] RSP: 002b:00007fb6c53ac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 468.916538][T12882] RAX: ffffffffffffffda RBX: 00007fb6c4815fa0 RCX: 00007fb6c459ce59 [ 468.916545][T12882] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000003 [ 468.916551][T12882] RBP: 00007fb6c53ac090 R08: 0000000000000000 R09: 0000000000000000 [ 468.916557][T12882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 468.916563][T12882] R13: 00007fb6c4816038 R14: 00007fb6c4815fa0 R15: 00007fb6c493fa48 [ 468.916578][T12882] [ 469.001031][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 21293, setting to 64 [ 469.307740][ T29] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 469.349525][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.366697][ T29] usb 4-1: Product: syz [ 469.378052][ T29] usb 4-1: Manufacturer: syz [ 469.387142][ T29] usb 4-1: SerialNumber: syz [ 469.404448][ T29] usb 4-1: config 0 descriptor?? [ 469.433653][T12875] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 469.495114][ T29] hub 4-1:0.0: bad descriptor, ignoring hub [ 469.503859][ T29] hub 4-1:0.0: probe with driver hub failed with error -5 [ 469.559542][ T29] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input93 [ 469.665654][T12886] netlink: zone id is out of range [ 469.715746][T12886] netlink: zone id is out of range [ 469.773415][ T30] audit: type=1326 audit(1778942365.624:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12893 comm="syz.0.2174" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c459ce59 code=0x7ffc0000 [ 469.914925][ T30] audit: type=1326 audit(1778942365.624:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12893 comm="syz.0.2174" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fb6c459ce59 code=0x7ffc0000 [ 470.062694][ T30] audit: type=1326 audit(1778942365.624:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12893 comm="syz.0.2174" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c459ce59 code=0x7ffc0000 [ 470.093396][T12908] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2178'. [ 470.159160][T12886] netlink: zone id is out of range [ 470.182928][ T30] audit: type=1326 audit(1778942365.624:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12893 comm="syz.0.2174" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c459ce59 code=0x7ffc0000 [ 470.212194][T12886] netlink: zone id is out of range [ 470.217411][ T30] audit: type=1326 audit(1778942365.624:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12893 comm="syz.0.2174" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c459ce59 code=0x7ffc0000 [ 470.247987][T12886] netlink: set zone limit has 4 unknown bytes [ 470.317259][ T30] audit: type=1326 audit(1778942365.624:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12893 comm="syz.0.2174" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c459ce59 code=0x7ffc0000 [ 470.350225][ T30] audit: type=1326 audit(1778942365.624:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12893 comm="syz.0.2174" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6c459ce59 code=0x7ffc0000 [ 470.409565][ T30] audit: type=1326 audit(1778942365.624:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12893 comm="syz.0.2174" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb6c455d68e code=0x7ffc0000 [ 470.459571][ T30] audit: type=1326 audit(1778942365.624:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12893 comm="syz.0.2174" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb6c455d68e code=0x7ffc0000 [ 470.485147][ T30] audit: type=1326 audit(1778942365.624:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12893 comm="syz.0.2174" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb6c455d68e code=0x7ffc0000 [ 472.533029][T12969] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 4, id = 0 [ 472.975839][T12978] netlink: 'syz.5.2197': attribute type 21 has an invalid length. [ 473.370890][T12982] FAULT_INJECTION: forcing a failure. [ 473.370890][T12982] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 473.409989][T12982] CPU: 1 UID: 0 PID: 12982 Comm: syz.2.2199 Tainted: G L syzkaller #0 PREEMPT(full) [ 473.410017][T12982] Tainted: [L]=SOFTLOCKUP [ 473.410022][T12982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 473.410030][T12982] Call Trace: [ 473.410035][T12982] [ 473.410040][T12982] dump_stack_lvl+0xe8/0x150 [ 473.410057][T12982] should_fail_ex+0x412/0x560 [ 473.410074][T12982] _copy_to_iter+0x404/0x17d0 [ 473.410095][T12982] ? __pfx__copy_to_iter+0x10/0x10 [ 473.410108][T12982] ? fput+0xa0/0xd0 [ 473.410119][T12982] ? __pfx_bpf_map_show_fdinfo+0x10/0x10 [ 473.410155][T12982] ? seq_show+0x597/0x6f0 [ 473.410173][T12982] seq_read_iter+0xbf5/0xe10 [ 473.410206][T12982] seq_read+0x367/0x480 [ 473.410229][T12982] ? __pfx_seq_read+0x10/0x10 [ 473.410256][T12982] ? rw_verify_area+0x2a6/0x4d0 [ 473.410277][T12982] ? __pfx_seq_read+0x10/0x10 [ 473.410294][T12982] vfs_read+0x20c/0xa70 [ 473.410317][T12982] ? __pfx___mutex_lock+0x10/0x10 [ 473.410333][T12982] ? __pfx_vfs_read+0x10/0x10 [ 473.410346][T12982] ? __fget_files+0x2a/0x420 [ 473.410362][T12982] ? __fget_files+0x3a0/0x420 [ 473.410372][T12982] ? __fget_files+0x2a/0x420 [ 473.410387][T12982] ksys_read+0x150/0x270 [ 473.410401][T12982] ? __pfx_ksys_read+0x10/0x10 [ 473.410418][T12982] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.410428][T12982] do_syscall_64+0x15f/0xf80 [ 473.410441][T12982] ? trace_irq_disable+0x3b/0x140 [ 473.410455][T12982] ? clear_bhb_loop+0x40/0x90 [ 473.410467][T12982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.410476][T12982] RIP: 0033:0x7fa6c4b9ce59 [ 473.410487][T12982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.410495][T12982] RSP: 002b:00007fa6c598e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 473.410507][T12982] RAX: ffffffffffffffda RBX: 00007fa6c4e15fa0 RCX: 00007fa6c4b9ce59 [ 473.410514][T12982] RDX: 0000000000002020 RSI: 0000200000002080 RDI: 0000000000000006 [ 473.410520][T12982] RBP: 00007fa6c598e090 R08: 0000000000000000 R09: 0000000000000000 [ 473.410526][T12982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.410532][T12982] R13: 00007fa6c4e16038 R14: 00007fa6c4e15fa0 R15: 00007fa6c4f3fa48 [ 473.410547][T12982] [ 473.766806][ T1179] usb 4-1: USB disconnect, device number 110 [ 474.229484][ T1179] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 474.438009][ T1179] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 474.464144][ T1179] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 474.541192][ T1179] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 474.560535][ T1179] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 474.596318][ T1179] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 474.607902][T12785] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 474.703001][ T1179] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 474.771859][ T1179] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 474.852562][T12785] usb 1-1: Using ep0 maxpacket: 32 [ 474.863440][ T1179] usb 6-1: Product: syz [ 474.876881][T12785] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 474.900309][ T1179] usb 6-1: Manufacturer: syz [ 474.908807][T12785] usb 1-1: config 0 has no interface number 0 [ 474.911338][T12801] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 474.954445][ T1179] cdc_wdm 6-1:1.0: skipping garbage [ 474.997484][T12785] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 475.019523][ T1179] cdc_wdm 6-1:1.0: skipping garbage [ 475.038879][T12785] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.071767][T12785] usb 1-1: Product: syz [ 475.087285][ T1179] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 475.100497][T12801] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 475.123965][T12801] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 475.129680][T12785] usb 1-1: Manufacturer: syz [ 475.167576][T12801] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 475.177675][ T1179] cdc_wdm 6-1:1.0: Unknown control protocol [ 475.208666][T12785] usb 1-1: SerialNumber: syz [ 475.231665][T12801] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 475.232392][T12785] usb 1-1: config 0 descriptor?? [ 475.270383][T12801] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.304067][T12801] usb 5-1: Product: syz [ 475.318317][T12801] usb 5-1: Manufacturer: syz [ 475.333381][T12801] usb 5-1: SerialNumber: syz [ 475.362153][T12801] usb 5-1: config 0 descriptor?? [ 475.387941][T13006] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 475.405386][T13006] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 475.422552][T12801] usb 5-1: ucan: probing device on interface #0 [ 475.729543][T12785] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 475.762972][T12785] usb 1-1: selecting invalid altsetting 1 [ 475.797261][T12785] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 475.851180][T12785] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 475.874902][T12785] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 475.895110][T12785] usb 1-1: media controller created [ 475.938713][T13012] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2208'. [ 475.962535][T12785] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 475.988026][T12801] usb 5-1: ucan: device reported invalid device info [ 476.012295][T12801] usb 5-1: ucan: probe failed; try to update the device firmware [ 476.109313][T12785] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 476.136305][T12785] zl10353_read_register: readreg error (reg=127, ret==-71) [ 476.164400][T12785] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 476.290189][T12785] usb 1-1: USB disconnect, device number 91 [ 476.612056][T13030] tipc: Started in network mode [ 476.617181][T13030] tipc: Node identity ce2d95fd8d9f, cluster identity 4711 [ 476.627445][T13030] tipc: Enabled bearer , priority 0 [ 476.659514][T13030] syzkaller0: entered promiscuous mode [ 476.667301][T13030] syzkaller0: entered allmulticast mode [ 476.736655][T13030] tipc: Resetting bearer [ 476.748484][T13029] tipc: Resetting bearer [ 476.759735][T12792] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 476.798814][T13029] tipc: Disabling bearer [ 476.920996][T12792] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.947535][T12792] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.982250][T12792] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 476.996880][T12792] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 477.006711][T12792] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.025530][T12792] usb 3-1: config 0 descriptor?? [ 477.134411][T12801] usb 6-1: USB disconnect, device number 27 [ 477.465383][T12792] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 477.612303][T12792] usb 3-1: USB disconnect, device number 81 [ 477.721615][T12801] usb 5-1: USB disconnect, device number 95 [ 478.059208][T12767] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 478.149243][ T29] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 478.209304][T12767] usb 6-1: Using ep0 maxpacket: 32 [ 478.220364][T12767] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 478.231331][T12767] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.243285][T12767] usb 6-1: config 0 descriptor?? [ 478.254385][T12767] as10x_usb: device has been detected [ 478.262602][T12767] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 478.282226][T12767] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 478.310659][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.328321][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.342102][ T29] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 478.354398][T12767] as10x_usb: error during firmware upload part1 [ 478.360954][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.370390][T12767] Registered device nBox DVB-T Dongle [ 478.384555][ T29] usb 3-1: config 0 descriptor?? [ 478.485359][T13080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2232'. [ 478.544697][T13080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2232'. [ 478.612919][T13075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.633865][T13075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.673857][T13082] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2233'. [ 479.046828][ T29] usb 3-1: string descriptor 0 read error: -22 [ 479.079392][T12792] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 479.169567][ T1179] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 479.239222][T12792] usb 1-1: Using ep0 maxpacket: 8 [ 479.246172][T12792] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 479.255758][ T29] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0021/input/input94 [ 479.292898][T12785] usb 6-1: USB disconnect, device number 28 [ 479.300656][T12792] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 479.310675][T12792] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.325716][ T29] uclogic 0003:256C:006D.0021: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 479.345083][T12792] usb 1-1: config 0 descriptor?? [ 479.379488][ T1179] usb 5-1: Using ep0 maxpacket: 32 [ 479.395208][ T1179] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 479.409308][ T1179] usb 5-1: config 0 has no interface number 0 [ 479.427880][ T1179] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 479.429653][T12769] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 479.437615][ T1179] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.455743][ T1179] usb 5-1: Product: syz [ 479.460161][ T1179] usb 5-1: Manufacturer: syz [ 479.472187][ T9] usb 3-1: USB disconnect, device number 82 [ 479.485945][ T1179] usb 5-1: SerialNumber: syz [ 479.507750][T12785] Unregistered device nBox DVB-T Dongle [ 479.514392][T12785] as10x_usb: device has been disconnected [ 479.529701][ T1179] usb 5-1: config 0 descriptor?? [ 479.588903][T12792] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 479.619988][T12769] usb 4-1: Using ep0 maxpacket: 32 [ 479.631129][T12769] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 479.642131][T12769] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 479.654443][T12769] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 479.665782][T12769] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 479.682099][T12769] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 479.692098][T12769] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.700240][T12769] usb 4-1: Product: syz [ 479.704461][T12769] usb 4-1: Manufacturer: syz [ 479.709248][T12769] usb 4-1: SerialNumber: syz [ 479.725081][ C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 479.743129][T12769] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input95 [ 479.824898][T13085] bond4: Unable to set down delay as MII monitoring is disabled [ 479.838116][T13085] bond4 (unregistering): Released all slaves [ 479.945572][ T1179] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 479.974186][ T1179] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 479.979806][T12769] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 480.013265][T12769] (id 0x00) [ 480.139157][T12769] rc_core: IR keymap rc-imon-pad not found [ 480.147791][T12769] Registered IR keymap rc-empty [ 480.156998][T12769] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 480.176319][T12769] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 480.225004][T12769] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 480.269680][T12769] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input96 [ 480.301276][ T9] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 480.345120][T12769] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:111> initialized [ 480.383882][T13107] input: syz1 as /devices/virtual/input/input97 [ 480.402741][T13089] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2235'. [ 480.451964][T12769] usb 4-1: USB disconnect, device number 111 [ 480.524922][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 480.596911][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 480.614195][ T9] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 480.614225][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 480.614244][ T9] usb 6-1: SerialNumber: syz [ 480.669458][T12792] usb 1-1: USB disconnect, device number 92 [ 480.823384][ T1179] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 480.841481][T13112] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2242'. [ 480.860121][ T1179] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 480.894556][ T1179] usb 5-1: USB disconnect, device number 96 [ 480.925255][T13114] loop9: detected capacity change from 0 to 7 [ 480.940808][ T9] usb 6-1: 0:2 : does not exist [ 480.965253][T13114] Dev loop9: unable to read RDB block 7 [ 480.976896][T13114] loop9: unable to read partition table [ 480.989407][T13114] loop9: partition table beyond EOD, truncated [ 481.007632][T13114] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 481.039084][ T9] usb 6-1: USB disconnect, device number 29 [ 481.115233][ T5634] udevd[5634]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 481.146997][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 481.147039][ T30] audit: type=1326 audit(1778942377.024:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13119 comm="syz.3.2245" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb1939ce59 code=0x0 [ 481.384765][T13125] FAULT_INJECTION: forcing a failure. [ 481.384765][T13125] name failslab, interval 1, probability 0, space 0, times 0 [ 481.398372][T13125] CPU: 1 UID: 0 PID: 13125 Comm: syz.2.2246 Tainted: G L syzkaller #0 PREEMPT(full) [ 481.398397][T13125] Tainted: [L]=SOFTLOCKUP [ 481.398403][T13125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 481.398412][T13125] Call Trace: [ 481.398419][T13125] [ 481.398426][T13125] dump_stack_lvl+0xe8/0x150 [ 481.398450][T13125] should_fail_ex+0x412/0x560 [ 481.398474][T13125] should_failslab+0xa8/0x100 [ 481.398499][T13125] __kmalloc_cache_noprof+0x88/0x660 [ 481.398519][T13125] ? basic_init+0x50/0x130 [ 481.398618][T13125] basic_init+0x50/0x130 [ 481.398630][T13125] tcf_proto_create+0x248/0x330 [ 481.398676][T13125] tc_new_tfilter+0x12ff/0x1780 [ 481.398726][T13125] ? __pfx_tc_new_tfilter+0x10/0x10 [ 481.398747][T13125] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 481.398798][T13125] ? __pfx_tc_new_tfilter+0x10/0x10 [ 481.398811][T13125] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 481.398822][T13125] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 481.398834][T13125] ? netlink_sendmsg+0x5d4/0xb40 [ 481.398847][T13125] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 481.398858][T13125] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 481.398873][T13125] ? __lock_acquire+0x6b5/0x2cf0 [ 481.398890][T13125] netlink_rcv_skb+0x232/0x4b0 [ 481.398903][T13125] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 481.398915][T13125] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 481.398933][T13125] ? netlink_deliver_tap+0x2e/0x1b0 [ 481.398948][T13125] ? netlink_deliver_tap+0x2e/0x1b0 [ 481.398971][T13125] netlink_unicast+0x75c/0x8e0 [ 481.398998][T13125] netlink_sendmsg+0x813/0xb40 [ 481.399020][T13125] ? __pfx_netlink_sendmsg+0x10/0x10 [ 481.399041][T13125] ? aa_sock_msg_perm+0xf1/0x1b0 [ 481.399062][T13125] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 481.399085][T13125] ____sys_sendmsg+0x972/0x9f0 [ 481.399114][T13125] ? __might_fault+0xaf/0x130 [ 481.399139][T13125] ? __pfx_____sys_sendmsg+0x10/0x10 [ 481.399169][T13125] ? import_iovec+0x73/0xa0 [ 481.399188][T13125] ___sys_sendmsg+0x2a5/0x360 [ 481.399200][T13125] ? __lock_acquire+0x6b5/0x2cf0 [ 481.399212][T13125] ? __pfx____sys_sendmsg+0x10/0x10 [ 481.399241][T13125] ? __fget_files+0x2a/0x420 [ 481.399252][T13125] ? __fget_files+0x3a0/0x420 [ 481.399268][T13125] __x64_sys_sendmsg+0x1bd/0x2a0 [ 481.399282][T13125] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 481.399299][T13125] ? __pfx_ksys_write+0x10/0x10 [ 481.399317][T13125] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.399327][T13125] do_syscall_64+0x15f/0xf80 [ 481.399341][T13125] ? trace_irq_disable+0x3b/0x140 [ 481.399355][T13125] ? clear_bhb_loop+0x40/0x90 [ 481.399367][T13125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.399376][T13125] RIP: 0033:0x7fa6c4b9ce59 [ 481.399387][T13125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 481.399395][T13125] RSP: 002b:00007fa6c598e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 481.399406][T13125] RAX: ffffffffffffffda RBX: 00007fa6c4e15fa0 RCX: 00007fa6c4b9ce59 [ 481.399414][T13125] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 481.399420][T13125] RBP: 00007fa6c598e090 R08: 0000000000000000 R09: 0000000000000000 [ 481.399425][T13125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 481.399431][T13125] R13: 00007fa6c4e16038 R14: 00007fa6c4e15fa0 R15: 00007fa6c4f3fa48 [ 481.399446][T13125] [ 481.868665][T13128] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2247'. [ 481.914132][T13128] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2247'. [ 481.947809][T13128] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2247'. [ 481.958385][T13131] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2248'. [ 481.993383][T13130] vlan0: entered allmulticast mode [ 482.008549][T13130] bond0: entered allmulticast mode [ 482.115181][T13140] input: syz1 as /devices/virtual/input/input98 [ 482.142759][T13131] bond0 (unregistering): Released all slaves [ 482.312901][T13144] FAULT_INJECTION: forcing a failure. [ 482.312901][T13144] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 482.346645][T13144] CPU: 1 UID: 0 PID: 13144 Comm: syz.4.2251 Tainted: G L syzkaller #0 PREEMPT(full) [ 482.346687][T13144] Tainted: [L]=SOFTLOCKUP [ 482.346691][T13144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 482.346697][T13144] Call Trace: [ 482.346703][T13144] [ 482.346709][T13144] dump_stack_lvl+0xe8/0x150 [ 482.346726][T13144] should_fail_ex+0x412/0x560 [ 482.346742][T13144] prepare_alloc_pages+0x22a/0x650 [ 482.346761][T13144] __alloc_frozen_pages_noprof+0x12f/0x380 [ 482.346777][T13144] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 482.346798][T13144] __alloc_pages_noprof+0x10/0x100 [ 482.346812][T13144] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 482.346827][T13144] ? __kmalloc_noprof+0x37d/0x760 [ 482.346858][T13144] ? copy_splice_read+0x16f/0xaa0 [ 482.346876][T13144] ? __kmalloc_noprof+0x1b8/0x760 [ 482.346894][T13144] copy_splice_read+0x19f/0xaa0 [ 482.346911][T13144] ? __pfx_copy_splice_read+0x10/0x10 [ 482.346923][T13144] ? look_up_lock_class+0x57/0x110 [ 482.346938][T13144] ? register_lock_class+0x31/0x2e0 [ 482.346950][T13144] ? file_end_write+0xd8/0x250 [ 482.346962][T13144] ? direct_splice_actor+0x10c/0x160 [ 482.346974][T13144] ? __pfx_shmem_file_splice_read+0x10/0x10 [ 482.346990][T13144] splice_direct_to_actor+0x4a0/0xc70 [ 482.347019][T13144] ? __pfx_direct_splice_actor+0x10/0x10 [ 482.347040][T13144] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 482.347066][T13144] do_splice_direct+0x195/0x290 [ 482.347079][T13144] ? __pfx_do_splice_direct+0x10/0x10 [ 482.347095][T13144] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 482.347139][T13144] ? bpf_lsm_file_permission+0x9/0x20 [ 482.347154][T13144] ? security_file_permission+0x75/0x260 [ 482.347167][T13144] ? rw_verify_area+0x255/0x4d0 [ 482.347183][T13144] do_sendfile+0x535/0x7d0 [ 482.347194][T13144] ? __pfx_vfs_write+0x10/0x10 [ 482.347209][T13144] ? __pfx_do_sendfile+0x10/0x10 [ 482.347219][T13144] ? __fget_files+0x3a0/0x420 [ 482.347235][T13144] __se_sys_sendfile64+0x144/0x1a0 [ 482.347246][T13144] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 482.347259][T13144] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.347269][T13144] do_syscall_64+0x15f/0xf80 [ 482.347282][T13144] ? trace_irq_disable+0x3b/0x140 [ 482.347296][T13144] ? clear_bhb_loop+0x40/0x90 [ 482.347307][T13144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.347316][T13144] RIP: 0033:0x7f4bc759ce59 [ 482.347327][T13144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 482.347335][T13144] RSP: 002b:00007f4bc843d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 482.347347][T13144] RAX: ffffffffffffffda RBX: 00007f4bc7815fa0 RCX: 00007f4bc759ce59 [ 482.347354][T13144] RDX: 0000000000000000 RSI: 000000000000000c RDI: 000000000000000d [ 482.347360][T13144] RBP: 00007f4bc843d090 R08: 0000000000000000 R09: 0000000000000000 [ 482.347366][T13144] R10: 0000000100000002 R11: 0000000000000246 R12: 0000000000000002 [ 482.347371][T13144] R13: 00007f4bc7816038 R14: 00007f4bc7815fa0 R15: 00007f4bc793fa48 [ 482.347386][T13144] [ 482.779683][T12769] usb 4-1: new full-speed USB device number 112 using dummy_hcd [ 482.930929][T12769] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 482.942533][T12769] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 482.953822][T12769] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 482.983685][T12769] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 483.014646][T13156] FAULT_INJECTION: forcing a failure. [ 483.014646][T13156] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 483.057501][T13156] CPU: 0 UID: 0 PID: 13156 Comm: syz.0.2256 Tainted: G L syzkaller #0 PREEMPT(full) [ 483.057528][T13156] Tainted: [L]=SOFTLOCKUP [ 483.057534][T13156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 483.057544][T13156] Call Trace: [ 483.057551][T13156] [ 483.057558][T13156] dump_stack_lvl+0xe8/0x150 [ 483.057582][T13156] should_fail_ex+0x412/0x560 [ 483.057608][T13156] _copy_to_user+0x31/0xb0 [ 483.057632][T13156] simple_read_from_buffer+0xe1/0x170 [ 483.057655][T13156] proc_fail_nth_read+0x1bb/0x230 [ 483.057677][T13156] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 483.057691][T13156] ? rw_verify_area+0x2a6/0x4d0 [ 483.057704][T13156] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 483.057716][T13156] vfs_read+0x20c/0xa70 [ 483.057732][T13156] ? __pfx___mutex_lock+0x10/0x10 [ 483.057747][T13156] ? __pfx_vfs_read+0x10/0x10 [ 483.057760][T13156] ? __fget_files+0x2a/0x420 [ 483.057773][T13156] ? __fget_files+0x3a0/0x420 [ 483.057783][T13156] ? __fget_files+0x2a/0x420 [ 483.057797][T13156] ksys_read+0x150/0x270 [ 483.057811][T13156] ? __pfx_ksys_read+0x10/0x10 [ 483.057827][T13156] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.057838][T13156] do_syscall_64+0x15f/0xf80 [ 483.057850][T13156] ? trace_irq_disable+0x3b/0x140 [ 483.057864][T13156] ? clear_bhb_loop+0x40/0x90 [ 483.057875][T13156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.057884][T13156] RIP: 0033:0x7fb6c455d68e [ 483.057894][T13156] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 483.057910][T13156] RSP: 002b:00007fb6c53abfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 483.057922][T13156] RAX: ffffffffffffffda RBX: 00007fb6c53ac6c0 RCX: 00007fb6c455d68e [ 483.057928][T13156] RDX: 000000000000000f RSI: 00007fb6c53ac0a0 RDI: 0000000000000004 [ 483.057936][T13156] RBP: 00007fb6c53ac090 R08: 0000000000000000 R09: 0000000000000000 [ 483.057942][T13156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 483.057948][T13156] R13: 00007fb6c4816038 R14: 00007fb6c4815fa0 R15: 00007fb6c493fa48 [ 483.057963][T13156] [ 483.311961][ T9] hid_parser_main: 138 callbacks suppressed [ 483.311977][ T9] hid-generic 0006:0008:0001.0022: unknown main item tag 0x0 [ 483.325666][ T9] hid-generic 0006:0008:0001.0022: unknown main item tag 0x0 [ 483.336522][ T9] hid-generic 0006:0008:0001.0022: unknown main item tag 0x0 [ 483.344262][ T9] hid-generic 0006:0008:0001.0022: unknown main item tag 0x0 [ 483.351913][ T9] hid-generic 0006:0008:0001.0022: unknown main item tag 0x0 [ 483.361198][ T9] hid-generic 0006:0008:0001.0022: unknown main item tag 0x0 [ 483.361244][ T9] hid-generic 0006:0008:0001.0022: unknown main item tag 0x0 [ 483.361267][ T9] hid-generic 0006:0008:0001.0022: unknown main item tag 0x0 [ 483.361289][ T9] hid-generic 0006:0008:0001.0022: unknown main item tag 0x0 [ 483.361310][ T9] hid-generic 0006:0008:0001.0022: unknown main item tag 0x0 [ 483.376597][ T9] hid-generic 0006:0008:0001.0022: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 483.427202][T12769] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.483147][T13163] syzkaller0: entered allmulticast mode [ 483.550679][T12769] usb 4-1: config 0 descriptor?? [ 483.554023][T13140] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 483.665157][T13172] netlink: 'syz.0.2260': attribute type 10 has an invalid length. [ 483.666694][T13172] syz_tun: entered promiscuous mode [ 483.987283][T12769] elan 0003:04F3:0755.0023: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 484.009983][ T29] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 484.170961][ T29] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 484.185458][ T29] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 484.207879][ T29] usb 1-1: config 0 has no interface number 0 [ 484.224630][ T29] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 484.241174][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.250094][ T29] usb 1-1: Product: syz [ 484.254807][ T29] usb 1-1: Manufacturer: syz [ 484.260535][ T29] usb 1-1: SerialNumber: syz [ 484.278150][ T29] usb 1-1: config 0 descriptor?? [ 484.329167][T12769] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 484.479231][T12769] usb 3-1: Using ep0 maxpacket: 16 [ 484.494123][T12769] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 484.522727][T12769] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 484.551307][T12769] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 484.572084][T12769] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.590688][T12769] usb 3-1: Product: syz [ 484.600634][T12769] usb 3-1: Manufacturer: syz [ 484.611344][T12769] usb 3-1: SerialNumber: syz [ 484.633501][T12769] usb 3-1: config 0 descriptor?? [ 484.639234][T12767] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 484.660329][T12769] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 484.684139][T12769] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 484.694805][ T29] uvcvideo 1-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 484.710117][ T29] uvcvideo 1-1:0.64: No valid video chain found. [ 484.822861][T12767] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 484.845788][T12767] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 484.877958][T12767] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 484.906151][T12767] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 484.942843][T12767] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 484.994053][T12767] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 485.013586][T12767] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 485.027053][T12767] usb 5-1: Product: syz [ 485.032484][T12767] usb 5-1: Manufacturer: syz [ 485.048602][T13172] netlink: 'syz.0.2260': attribute type 10 has an invalid length. [ 485.091162][T12767] cdc_wdm 5-1:1.0: skipping garbage [ 485.122619][T12767] cdc_wdm 5-1:1.0: skipping garbage [ 485.137587][T13172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 485.156982][T12767] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 485.170323][T13172] bond0: entered promiscuous mode [ 485.199186][ T29] usb 4-1: reset full-speed USB device number 112 using dummy_hcd [ 485.201222][T13172] bond_slave_0: entered promiscuous mode [ 485.227503][T12767] cdc_wdm 5-1:1.0: Unknown control protocol [ 485.256023][T13172] bond_slave_1: entered promiscuous mode [ 485.276714][T13172] team0: Port device bond0 added [ 485.303814][T12767] usb 1-1: USB disconnect, device number 93 [ 485.426170][T12769] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 485.438012][T12769] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 485.662052][ T30] audit: type=1800 audit(1778942381.544:1315): pid=13195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2268" name="/" dev="fuse" ino=1 res=0 errno=0 [ 485.930047][T12785] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 486.020440][T12801] usb 4-1: USB disconnect, device number 112 [ 486.062709][T13203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2269'. [ 486.103697][T12785] usb 6-1: config 0 has an invalid interface number: 70 but max is 0 [ 486.122970][T12785] usb 6-1: config 0 has no interface number 0 [ 486.138270][T12785] usb 6-1: config 0 interface 70 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 486.175063][T12785] usb 6-1: config 0 interface 70 altsetting 5 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 486.207891][T12785] usb 6-1: config 0 interface 70 altsetting 5 endpoint 0x83 has invalid maxpacket 42809, setting to 64 [ 486.223748][T13203] ip6erspan0: entered allmulticast mode [ 486.250370][T12785] usb 6-1: config 0 interface 70 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 486.282260][T12785] usb 6-1: config 0 interface 70 has no altsetting 0 [ 486.300295][T12785] usb 6-1: New USB device found, idVendor=110a, idProduct=1150, bcdDevice=55.9e [ 486.316375][T12785] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.329691][T13204] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 486.337594][T12785] usb 6-1: Product: syz [ 486.345352][T12785] usb 6-1: Manufacturer: syz [ 486.357698][T12785] usb 6-1: SerialNumber: syz [ 486.398485][T12785] usb 6-1: config 0 descriptor?? [ 486.430009][T13195] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 486.499456][T12769] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 486.519623][T12769] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 486.627222][ T30] audit: type=1800 audit(1778942382.504:1316): pid=13210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2272" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 486.706600][T12785] ti_usb_3410_5052 6-1:0.70: TI USB 3410 1 port adapter converter detected [ 486.741185][T12785] usb 6-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 486.786479][T12785] usb 6-1: USB disconnect, device number 30 [ 486.801416][T12785] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 486.827287][T12785] ti_usb_3410_5052 6-1:0.70: device disconnected [ 487.426211][T13213] binder: transaction release 98 bad handle 1, ret = -22 [ 487.579914][T12769] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 487.601400][T12769] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 487.629298][T12769] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 487.665693][T12769] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 487.854636][ T1179] usb 5-1: USB disconnect, device number 97 [ 487.966961][T12769] usb 3-1: USB disconnect, device number 83 [ 488.238779][T13228] netlink: 'syz.4.2280': attribute type 10 has an invalid length. [ 488.283130][T13228] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 488.308016][T13228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2280'. [ 488.882603][T13249] input: syz1 as /devices/virtual/input/input99 [ 489.220832][T13257] netlink: 'syz.4.2287': attribute type 4 has an invalid length. [ 489.473023][T13269] tipc: Enabled bearer , priority 10 [ 489.542937][T13269] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2290'. [ 489.580543][T13269] batadv_slave_0: Caught tx_queue_len zero misconfig [ 490.367027][T13293] loop9: detected capacity change from 0 to 4096 [ 490.625602][T12769] tipc: Node number set to 1135777277 [ 490.731184][T13297] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2296'. [ 491.730218][T13323] lo: Caught tx_queue_len zero misconfig [ 491.988708][T13335] FAULT_INJECTION: forcing a failure. [ 491.988708][T13335] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 492.011791][T13335] CPU: 0 UID: 0 PID: 13335 Comm: syz.4.2307 Tainted: G L syzkaller #0 PREEMPT(full) [ 492.011818][T13335] Tainted: [L]=SOFTLOCKUP [ 492.011825][T13335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 492.011835][T13335] Call Trace: [ 492.011842][T13335] [ 492.011850][T13335] dump_stack_lvl+0xe8/0x150 [ 492.011875][T13335] should_fail_ex+0x412/0x560 [ 492.011902][T13335] _copy_from_user+0x2d/0xb0 [ 492.011926][T13335] ppp_get_filter+0xa6/0x1d0 [ 492.012034][T13335] ? __pfx_ppp_get_filter+0x10/0x10 [ 492.012054][T13335] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 492.012088][T13335] ppp_ioctl+0xeae/0x1b20 [ 492.012110][T13335] ? __pfx_ppp_ioctl+0x10/0x10 [ 492.012129][T13335] ? __fget_files+0x2a/0x420 [ 492.012157][T13335] ? __fget_files+0x3a0/0x420 [ 492.012174][T13335] ? __fget_files+0x2a/0x420 [ 492.012196][T13335] ? bpf_lsm_file_ioctl+0x9/0x20 [ 492.012219][T13335] ? __pfx_ppp_ioctl+0x10/0x10 [ 492.012235][T13335] __se_sys_ioctl+0xfc/0x170 [ 492.012261][T13335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.012279][T13335] do_syscall_64+0x15f/0xf80 [ 492.012301][T13335] ? trace_irq_disable+0x3b/0x140 [ 492.012324][T13335] ? clear_bhb_loop+0x40/0x90 [ 492.012345][T13335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.012361][T13335] RIP: 0033:0x7f4bc759ce59 [ 492.012378][T13335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.012392][T13335] RSP: 002b:00007f4bc843d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 492.012411][T13335] RAX: ffffffffffffffda RBX: 00007f4bc7815fa0 RCX: 00007f4bc759ce59 [ 492.012423][T13335] RDX: 0000200000000180 RSI: 0000000040107446 RDI: 0000000000000003 [ 492.012434][T13335] RBP: 00007f4bc843d090 R08: 0000000000000000 R09: 0000000000000000 [ 492.012444][T13335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 492.012454][T13335] R13: 00007f4bc7816038 R14: 00007f4bc7815fa0 R15: 00007f4bc793fa48 [ 492.012482][T13335] [ 492.329341][T12785] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 492.509192][ T9] usb 6-1: new low-speed USB device number 31 using dummy_hcd [ 492.518970][T12785] usb 3-1: unable to get BOS descriptor or descriptor too short [ 492.527819][T12785] usb 3-1: not running at top speed; connect to a high speed hub [ 492.536649][T12785] usb 3-1: config 1 has an invalid descriptor of length 115, skipping remainder of the config [ 492.552976][T12785] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 492.599325][ T1179] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 492.612112][T12785] usb 3-1: string descriptor 0 read error: -22 [ 492.618594][T12785] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 492.633824][T12785] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.675376][T12785] usb 3-1: 0:2 : does not exist [ 492.729713][T12792] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 492.759664][ T1179] usb 5-1: Using ep0 maxpacket: 8 [ 492.766673][ T1179] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 492.782284][ T1179] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 492.806257][ T1179] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 492.849613][ T1179] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 492.881149][ T1179] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 492.890734][T12792] usb 1-1: Using ep0 maxpacket: 16 [ 492.906109][ T1179] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.939936][T12792] usb 1-1: config 0 has no interfaces? [ 492.948869][T12792] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 492.959617][T12792] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 492.971637][T12792] usb 1-1: Manufacturer: syz [ 492.994806][T12792] usb 1-1: config 0 descriptor?? [ 493.126887][ T1179] usb 5-1: GET_CAPABILITIES returned 0 [ 493.143875][ T1179] usbtmc 5-1:16.0: can't read capabilities [ 493.334267][ T1179] usb 5-1: USB disconnect, device number 98 [ 493.568444][T13365] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2306'. [ 493.711411][ T9] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 493.889496][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 493.897231][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 493.907175][ T9] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 493.936875][ T9] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 90, changing to 7 [ 493.960948][T13368] syz_tun: entered allmulticast mode [ 493.970834][T13367] syz_tun: left allmulticast mode [ 493.981730][ T9] usb 6-1: New USB device found, idVendor=047f, idProduct=c010, bcdDevice= 0.40 [ 493.996358][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.013764][ T9] usb 6-1: Product: syz [ 494.026365][ T9] usb 6-1: Manufacturer: syz [ 494.045710][ T9] usb 6-1: SerialNumber: syz [ 494.132305][T13370] FAULT_INJECTION: forcing a failure. [ 494.132305][T13370] name failslab, interval 1, probability 0, space 0, times 0 [ 494.146150][T13370] CPU: 1 UID: 0 PID: 13370 Comm: syz.4.2319 Tainted: G L syzkaller #0 PREEMPT(full) [ 494.146177][T13370] Tainted: [L]=SOFTLOCKUP [ 494.146181][T13370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 494.146187][T13370] Call Trace: [ 494.146192][T13370] [ 494.146197][T13370] dump_stack_lvl+0xe8/0x150 [ 494.146218][T13370] should_fail_ex+0x412/0x560 [ 494.146243][T13370] should_failslab+0xa8/0x100 [ 494.146268][T13370] ? skb_clone+0x212/0x3a0 [ 494.146290][T13370] kmem_cache_alloc_noprof+0x87/0x650 [ 494.146311][T13370] ? __netlink_lookup+0xc6/0x8b0 [ 494.146330][T13370] skb_clone+0x212/0x3a0 [ 494.146345][T13370] __netlink_deliver_tap+0x404/0x850 [ 494.146363][T13370] ? netlink_deliver_tap+0x2e/0x1b0 [ 494.146383][T13370] netlink_deliver_tap+0x19c/0x1b0 [ 494.146406][T13370] netlink_unicast+0x730/0x8e0 [ 494.146444][T13370] netlink_sendmsg+0x813/0xb40 [ 494.146470][T13370] ? __pfx_netlink_sendmsg+0x10/0x10 [ 494.146488][T13370] ? aa_sock_msg_perm+0xf1/0x1b0 [ 494.146501][T13370] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 494.146515][T13370] ? __pfx_netlink_sendmsg+0x10/0x10 [ 494.146534][T13370] sock_sendmsg+0x3fb/0x450 [ 494.146560][T13370] ? __pfx_sock_sendmsg+0x10/0x10 [ 494.146590][T13370] ? __asan_memset+0x22/0x50 [ 494.146609][T13370] ? iov_iter_bvec+0xb8/0x180 [ 494.146626][T13370] splice_to_socket+0xae2/0x11f0 [ 494.146649][T13370] ? __pfx_splice_to_socket+0x10/0x10 [ 494.146688][T13370] ? look_up_lock_class+0x57/0x110 [ 494.146713][T13370] ? register_lock_class+0x31/0x2e0 [ 494.146736][T13370] ? __pfx_splice_to_socket+0x10/0x10 [ 494.146756][T13370] direct_splice_actor+0x101/0x160 [ 494.146774][T13370] splice_direct_to_actor+0x53a/0xc70 [ 494.146791][T13370] ? __pfx_direct_splice_actor+0x10/0x10 [ 494.146806][T13370] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 494.146825][T13370] do_splice_direct+0x195/0x290 [ 494.146849][T13370] ? __pfx_do_splice_direct+0x10/0x10 [ 494.146870][T13370] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 494.146893][T13370] ? bpf_lsm_file_permission+0x9/0x20 [ 494.146914][T13370] ? security_file_permission+0x75/0x260 [ 494.146925][T13370] ? rw_verify_area+0x255/0x4d0 [ 494.146942][T13370] do_sendfile+0x535/0x7d0 [ 494.146952][T13370] ? __pfx_vfs_write+0x10/0x10 [ 494.146967][T13370] ? __pfx_do_sendfile+0x10/0x10 [ 494.146983][T13370] ? __fget_files+0x3a0/0x420 [ 494.147012][T13370] __se_sys_sendfile64+0x144/0x1a0 [ 494.147033][T13370] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 494.147058][T13370] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.147071][T13370] do_syscall_64+0x15f/0xf80 [ 494.147084][T13370] ? trace_irq_disable+0x3b/0x140 [ 494.147098][T13370] ? clear_bhb_loop+0x40/0x90 [ 494.147109][T13370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.147118][T13370] RIP: 0033:0x7f4bc759ce59 [ 494.147134][T13370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 494.147149][T13370] RSP: 002b:00007f4bc843d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 494.147167][T13370] RAX: ffffffffffffffda RBX: 00007f4bc7815fa0 RCX: 00007f4bc759ce59 [ 494.147178][T13370] RDX: 0000000000000000 RSI: 000000000000000e RDI: 000000000000000f [ 494.147188][T13370] RBP: 00007f4bc843d090 R08: 0000000000000000 R09: 0000000000000000 [ 494.147198][T13370] R10: 0000000100000002 R11: 0000000000000246 R12: 0000000000000002 [ 494.147208][T13370] R13: 00007f4bc7816038 R14: 00007f4bc7815fa0 R15: 00007f4bc793fa48 [ 494.147226][T13370] [ 494.853112][ T9] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 494.866631][T12785] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 494.938928][ T9] usb 6-1: USB disconnect, device number 32 [ 494.951998][T12785] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 494.993542][T12785] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 495.134030][T12785] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 495.277213][T12785] usb 3-1: USB disconnect, device number 84 [ 495.309373][T12769] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 495.346245][ T9] usb 1-1: USB disconnect, device number 94 [ 495.493387][T12769] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 495.547187][T12769] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.617644][T12769] usb 5-1: Product: syz [ 495.630915][T12769] usb 5-1: Manufacturer: syz [ 495.644500][T12769] usb 5-1: SerialNumber: syz [ 495.764069][T12769] usb 5-1: config 0 descriptor?? [ 495.801116][T12769] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 496.205260][T13374] netlink: 'syz.4.2321': attribute type 4 has an invalid length. [ 496.572154][T13396] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 496.639745][T12769] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 496.653930][T13396] bond2 (unregistering): Released all slaves [ 496.820154][T12769] usb 6-1: device descriptor read/64, error -71 [ 496.859694][T12791] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 496.897042][T12766] usb 5-1: USB disconnect, device number 99 [ 497.039974][T12791] usb 4-1: Using ep0 maxpacket: 8 [ 497.046913][T12791] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 497.069285][T12769] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 497.079514][T12791] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 497.110896][T12791] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 497.161489][T12791] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 497.186563][T13408] program syz.2.2331 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 497.210501][T12769] usb 6-1: device descriptor read/64, error -71 [ 497.218645][T13411] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2332'. [ 497.230655][T12791] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 497.253158][ T30] audit: type=1326 audit(1778942393.134:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13410 comm="syz.0.2332" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb6c459ce59 code=0x0 [ 497.297082][T12791] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.330996][T12769] usb usb6-port1: attempt power cycle [ 497.561121][T12791] usb 4-1: GET_CAPABILITIES returned 0 [ 497.586914][T12791] usbtmc 4-1:16.0: can't read capabilities [ 497.680163][T12769] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 497.711417][T12769] usb 6-1: device descriptor read/8, error -71 [ 497.778955][T12791] usb 4-1: USB disconnect, device number 113 [ 497.959432][T12769] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 497.990332][T12769] usb 6-1: device descriptor read/8, error -71 [ 498.109497][T12769] usb usb6-port1: unable to enumerate USB device [ 498.280935][T13432] fuse: Unknown parameter 'Wn~> J}^M~r)Ψ{R 0_ p mxZtʥ3 [ 500.083232][T13459] dump_stack_lvl+0xe8/0x150 [ 500.083256][T13459] should_fail_ex+0x412/0x560 [ 500.083280][T13459] _copy_from_user+0x2d/0xb0 [ 500.083302][T13459] sg_new_write+0x5d2/0x890 [ 500.083445][T13459] ? __pfx_sg_new_write+0x10/0x10 [ 500.083492][T13459] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 500.083518][T13459] sg_ioctl+0x1207/0x2220 [ 500.083545][T13459] ? __pfx_sg_ioctl+0x10/0x10 [ 500.083566][T13459] ? __fget_files+0x2a/0x420 [ 500.083586][T13459] ? __fget_files+0x2a/0x420 [ 500.083603][T13459] ? __fget_files+0x3a0/0x420 [ 500.083618][T13459] ? __fget_files+0x2a/0x420 [ 500.083639][T13459] ? bpf_lsm_file_ioctl+0x9/0x20 [ 500.083662][T13459] ? __pfx_sg_ioctl+0x10/0x10 [ 500.083683][T13459] __se_sys_ioctl+0xfc/0x170 [ 500.083705][T13459] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.083721][T13459] do_syscall_64+0x15f/0xf80 [ 500.083741][T13459] ? trace_irq_disable+0x3b/0x140 [ 500.083764][T13459] ? clear_bhb_loop+0x40/0x90 [ 500.083783][T13459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.083798][T13459] RIP: 0033:0x7fa6c4b9ce59 [ 500.083815][T13459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 500.083828][T13459] RSP: 002b:00007fa6c598e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 500.083847][T13459] RAX: ffffffffffffffda RBX: 00007fa6c4e15fa0 RCX: 00007fa6c4b9ce59 [ 500.083859][T13459] RDX: 00002000000005c0 RSI: 0000000000002285 RDI: 0000000000000003 [ 500.083869][T13459] RBP: 00007fa6c598e090 R08: 0000000000000000 R09: 0000000000000000 [ 500.083879][T13459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 500.083889][T13459] R13: 00007fa6c4e16038 R14: 00007fa6c4e15fa0 R15: 00007fa6c4f3fa48 [ 500.083915][T13459] [ 500.292987][T12791] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 500.459357][T12791] usb 4-1: Using ep0 maxpacket: 32 [ 500.470629][T12791] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.498111][T12791] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.531197][T12791] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 500.568994][T12791] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 500.587569][T12791] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.600078][T12791] usb 4-1: config 0 descriptor?? [ 500.719982][T12785] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 500.756134][T13476] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2353'. [ 500.882096][T13480] netlink: 'syz.0.2354': attribute type 13 has an invalid length. [ 500.895444][T12785] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 500.914434][T12785] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 500.937437][T12785] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 500.956513][T12785] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 500.974398][T12785] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 500.996762][T12785] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.015824][T12785] usb 3-1: config 0 descriptor?? [ 501.055352][T12791] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0024/input/input101 [ 501.098522][T13480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2354'. [ 501.225440][T12791] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0024/input/input102 [ 501.334741][T12791] kye 0003:0458:5011.0024: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 501.430360][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.436913][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.527645][T12785] usbhid 3-1:0.0: can't add hid device: -71 [ 501.536380][T12785] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 501.551840][T12785] usb 3-1: USB disconnect, device number 85 [ 501.589164][T12769] usb 1-1: new full-speed USB device number 95 using dummy_hcd [ 501.721095][T12769] usb 1-1: device descriptor read/64, error -71 [ 501.959297][T12769] usb 1-1: new full-speed USB device number 96 using dummy_hcd [ 502.061563][T13505] tc_dump_action: action bad kind [ 502.090235][T12769] usb 1-1: device descriptor read/64, error -71 [ 502.172069][T13508] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2363'. [ 502.189301][T12785] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 502.200592][T12769] usb usb1-port1: attempt power cycle [ 502.393195][T12785] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 502.417976][T12785] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 502.442742][T12785] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 502.466648][T12785] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 502.478915][T12785] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 502.493003][T12785] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 502.502916][T12785] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 502.511548][T12785] usb 5-1: Product: syz [ 502.516177][T12785] usb 5-1: Manufacturer: syz [ 502.534328][T12785] cdc_wdm 5-1:1.0: skipping garbage [ 502.542780][T12785] cdc_wdm 5-1:1.0: skipping garbage [ 502.551500][T12785] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 502.552994][T12769] usb 1-1: new full-speed USB device number 97 using dummy_hcd [ 502.557647][T12785] cdc_wdm 5-1:1.0: Unknown control protocol [ 502.600197][T12769] usb 1-1: device descriptor read/8, error -71 [ 502.859901][T12769] usb 1-1: new full-speed USB device number 98 using dummy_hcd [ 502.889663][T12769] usb 1-1: device descriptor read/8, error -71 [ 503.009437][T12769] usb usb1-port1: unable to enumerate USB device [ 503.034968][T12785] usb 4-1: USB disconnect, device number 114 [ 503.446256][T13521] syzkaller0: entered promiscuous mode [ 503.569184][T12791] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 503.739228][T12791] usb 3-1: Using ep0 maxpacket: 8 [ 503.755705][T12791] usb 3-1: unable to get BOS descriptor or descriptor too short [ 503.780070][T12791] usb 3-1: config 4 interface 0 has no altsetting 0 [ 503.801075][T12791] usb 3-1: string descriptor 0 read error: -22 [ 503.816663][T12791] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 503.841108][T12791] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 503.885218][T12791] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 503.928916][T12791] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 503.947245][T12791] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 503.973563][T12791] usb 3-1: media controller created [ 504.014246][T12791] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 504.805093][ T9] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 504.984826][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 504.993177][ T9] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 505.003631][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 505.034517][ T9] usb 1-1: config 0 has no interface number 0 [ 505.041953][ T9] usb 1-1: config 0 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 505.073552][ T9] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 505.103442][T12791] zl10353_read_register: readreg error (reg=127, ret==0) [ 505.116583][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.160799][ T9] usb 1-1: config 0 descriptor?? [ 505.642747][T12785] usb 5-1: USB disconnect, device number 100 [ 506.564362][T13536] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2371'. [ 506.660341][T13537] netlink: 'syz.5.2371': attribute type 1 has an invalid length. [ 506.696406][T12791] usb 3-1: USB disconnect, device number 86 [ 506.819867][T13543] netlink: 'syz.2.2373': attribute type 10 has an invalid length. [ 507.447741][T12791] usb 1-1: USB disconnect, device number 99 [ 507.604412][T13546] FAULT_INJECTION: forcing a failure. [ 507.604412][T13546] name failslab, interval 1, probability 0, space 0, times 0 [ 507.618936][T13546] CPU: 0 UID: 0 PID: 13546 Comm: syz.0.2374 Tainted: G L syzkaller #0 PREEMPT(full) [ 507.618953][T13546] Tainted: [L]=SOFTLOCKUP [ 507.618957][T13546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 507.618964][T13546] Call Trace: [ 507.618970][T13546] [ 507.618976][T13546] dump_stack_lvl+0xe8/0x150 [ 507.618992][T13546] should_fail_ex+0x412/0x560 [ 507.619008][T13546] should_failslab+0xa8/0x100 [ 507.619026][T13546] ? skb_clone+0x212/0x3a0 [ 507.619048][T13546] kmem_cache_alloc_noprof+0x87/0x650 [ 507.619065][T13546] ? dev_queue_xmit_nit+0x2d/0xad0 [ 507.619089][T13546] skb_clone+0x212/0x3a0 [ 507.619108][T13546] ? dev_queue_xmit_nit+0x268/0xad0 [ 507.619128][T13546] dev_queue_xmit_nit+0x29a/0xad0 [ 507.619146][T13546] ? dev_queue_xmit_nit+0x2d/0xad0 [ 507.619171][T13546] dev_hard_start_xmit+0x1c1/0x830 [ 507.619206][T13546] __dev_queue_xmit+0x14d9/0x3950 [ 507.619224][T13546] ? direct_splice_actor+0x101/0x160 [ 507.619246][T13546] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.619264][T13546] ? __dev_queue_xmit+0x2b6/0x3950 [ 507.619288][T13546] ? __pfx___dev_queue_xmit+0x10/0x10 [ 507.619305][T13546] ? __copy_skb_header+0xa3/0x4a0 [ 507.619328][T13546] ? skb_clone+0x246/0x3a0 [ 507.619343][T13546] __netlink_deliver_tap+0x5ad/0x850 [ 507.619362][T13546] ? netlink_deliver_tap+0x2e/0x1b0 [ 507.619375][T13546] netlink_deliver_tap+0x19c/0x1b0 [ 507.619388][T13546] netlink_unicast+0x730/0x8e0 [ 507.619405][T13546] netlink_sendmsg+0x813/0xb40 [ 507.619421][T13546] ? __pfx_netlink_sendmsg+0x10/0x10 [ 507.619436][T13546] ? aa_sock_msg_perm+0xf1/0x1b0 [ 507.619449][T13546] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 507.619462][T13546] ? __pfx_netlink_sendmsg+0x10/0x10 [ 507.619475][T13546] sock_sendmsg+0x3fb/0x450 [ 507.619489][T13546] ? __pfx_sock_sendmsg+0x10/0x10 [ 507.619505][T13546] ? __asan_memset+0x22/0x50 [ 507.619516][T13546] ? iov_iter_bvec+0xb8/0x180 [ 507.619530][T13546] splice_to_socket+0xae2/0x11f0 [ 507.619552][T13546] ? __pfx_splice_to_socket+0x10/0x10 [ 507.619582][T13546] ? look_up_lock_class+0x57/0x110 [ 507.619603][T13546] ? register_lock_class+0x31/0x2e0 [ 507.619616][T13546] ? __pfx_splice_to_socket+0x10/0x10 [ 507.619628][T13546] direct_splice_actor+0x101/0x160 [ 507.619641][T13546] splice_direct_to_actor+0x53a/0xc70 [ 507.619658][T13546] ? __pfx_direct_splice_actor+0x10/0x10 [ 507.619673][T13546] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 507.619692][T13546] do_splice_direct+0x195/0x290 [ 507.619705][T13546] ? __pfx_do_splice_direct+0x10/0x10 [ 507.619717][T13546] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 507.619731][T13546] ? bpf_lsm_file_permission+0x9/0x20 [ 507.619743][T13546] ? security_file_permission+0x75/0x260 [ 507.619755][T13546] ? rw_verify_area+0x255/0x4d0 [ 507.619769][T13546] do_sendfile+0x535/0x7d0 [ 507.619780][T13546] ? __pfx_vfs_write+0x10/0x10 [ 507.619796][T13546] ? __pfx_do_sendfile+0x10/0x10 [ 507.619808][T13546] ? __fget_files+0x3a0/0x420 [ 507.619824][T13546] __se_sys_sendfile64+0x144/0x1a0 [ 507.619835][T13546] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 507.619849][T13546] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.619859][T13546] do_syscall_64+0x15f/0xf80 [ 507.619873][T13546] ? trace_irq_disable+0x3b/0x140 [ 507.619887][T13546] ? clear_bhb_loop+0x40/0x90 [ 507.619898][T13546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.619908][T13546] RIP: 0033:0x7fb6c459ce59 [ 507.619920][T13546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 507.619928][T13546] RSP: 002b:00007fb6c53ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 507.619940][T13546] RAX: ffffffffffffffda RBX: 00007fb6c4815fa0 RCX: 00007fb6c459ce59 [ 507.619947][T13546] RDX: 0000000000000000 RSI: 000000000000000d RDI: 000000000000000e [ 507.619952][T13546] RBP: 00007fb6c53ac090 R08: 0000000000000000 R09: 0000000000000000 [ 507.619958][T13546] R10: 0000000100000002 R11: 0000000000000246 R12: 0000000000000002 [ 507.619964][T13546] R13: 00007fb6c4816038 R14: 00007fb6c4815fa0 R15: 00007fb6c493fa48 [ 507.619979][T13546] [ 509.901686][T13537] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 509.903211][T13538] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 509.917617][T13543] syz_tun: left promiscuous mode [ 509.934956][T13544] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2373'. [ 510.236170][T13564] input: syz1 as /devices/virtual/input/input103 [ 510.379757][T12766] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 510.402032][T13569] FAULT_INJECTION: forcing a failure. [ 510.402032][T13569] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 510.419415][T13569] CPU: 1 UID: 0 PID: 13569 Comm: syz.3.2382 Tainted: G L syzkaller #0 PREEMPT(full) [ 510.419442][T13569] Tainted: [L]=SOFTLOCKUP [ 510.419448][T13569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 510.419457][T13569] Call Trace: [ 510.419464][T13569] [ 510.419471][T13569] dump_stack_lvl+0xe8/0x150 [ 510.419497][T13569] should_fail_ex+0x412/0x560 [ 510.419519][T13569] _copy_from_iter+0x1d3/0x1670 [ 510.419543][T13569] ? sock_alloc_send_pskb+0x896/0x990 [ 510.419572][T13569] ? __pfx__copy_from_iter+0x10/0x10 [ 510.419600][T13569] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 510.419625][T13569] skb_copy_datagram_from_iter+0xf5/0x710 [ 510.419652][T13569] ? skb_put+0x11b/0x210 [ 510.419674][T13569] tun_get_user+0xc5e/0x43e0 [ 510.419856][T13569] ? aa_file_perm+0x192/0x15e0 [ 510.419875][T13569] ? aa_file_perm+0x50e/0x15e0 [ 510.419890][T13569] ? __pfx_tun_get_user+0x10/0x10 [ 510.419907][T13569] ? __lock_acquire+0x6b5/0x2cf0 [ 510.419922][T13569] ? kstrtoull+0x12f/0x1d0 [ 510.419941][T13569] ? ref_tracker_alloc+0x35c/0x4c0 [ 510.419959][T13569] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 510.419975][T13569] ? tun_get+0x1c/0x2f0 [ 510.419990][T13569] ? tun_get+0x1c/0x2f0 [ 510.420007][T13569] ? tun_get+0x1c/0x2f0 [ 510.420021][T13569] ? tun_get+0x1c/0x2f0 [ 510.420038][T13569] tun_chr_write_iter+0x113/0x200 [ 510.420054][T13569] vfs_write+0x61d/0xb90 [ 510.420077][T13569] ? __pfx_vfs_write+0x10/0x10 [ 510.420099][T13569] ? __fget_files+0x2a/0x420 [ 510.420119][T13569] ksys_write+0x150/0x270 [ 510.420136][T13569] ? __pfx_ksys_write+0x10/0x10 [ 510.420157][T13569] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.420171][T13569] do_syscall_64+0x15f/0xf80 [ 510.420188][T13569] ? trace_irq_disable+0x3b/0x140 [ 510.420206][T13569] ? clear_bhb_loop+0x40/0x90 [ 510.420221][T13569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.420233][T13569] RIP: 0033:0x7feb1939ce59 [ 510.420245][T13569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.420257][T13569] RSP: 002b:00007feb1a2df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 510.420271][T13569] RAX: ffffffffffffffda RBX: 00007feb19615fa0 RCX: 00007feb1939ce59 [ 510.420280][T13569] RDX: 000000000000fdef RSI: 0000200000000080 RDI: 0000000000000005 [ 510.420288][T13569] RBP: 00007feb1a2df090 R08: 0000000000000000 R09: 0000000000000000 [ 510.420296][T13569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.420305][T13569] R13: 00007feb19616038 R14: 00007feb19615fa0 R15: 00007feb1973fa48 [ 510.420328][T13569] [ 510.799782][T12766] usb 3-1: device descriptor read/64, error -71 [ 511.039198][T12766] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 511.049268][T12791] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 511.130105][T12785] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 511.169280][T12766] usb 3-1: device descriptor read/64, error -71 [ 511.219286][T12791] usb 1-1: Using ep0 maxpacket: 32 [ 511.226260][T12791] usb 1-1: config 0 has an invalid interface number: 247 but max is 0 [ 511.235622][T12791] usb 1-1: config 0 has no interface number 0 [ 511.243490][T12791] usb 1-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 511.252716][T12791] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 511.269121][T12791] usb 1-1: Product: syz [ 511.273361][T12791] usb 1-1: Manufacturer: syz [ 511.279503][T12766] usb usb3-port1: attempt power cycle [ 511.281247][T12791] usb 1-1: config 0 descriptor?? [ 511.299478][T12785] usb 4-1: Using ep0 maxpacket: 32 [ 511.311845][T12785] usb 4-1: config 6 has an invalid interface number: 47 but max is 0 [ 511.345821][T12785] usb 4-1: config 6 has an invalid descriptor of length 210, skipping remainder of the config [ 511.366419][T12785] usb 4-1: config 6 has no interface number 0 [ 511.373520][T12785] usb 4-1: too many endpoints for config 6 interface 47 altsetting 148: 61, using maximum allowed: 30 [ 511.391339][T12785] usb 4-1: config 6 interface 47 altsetting 148 has 0 endpoint descriptors, different from the interface descriptor's value: 61 [ 511.411830][T12785] usb 4-1: config 6 interface 47 has no altsetting 0 [ 511.422721][T12785] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=d3.7e [ 511.438292][T12785] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.448426][T12785] usb 4-1: Product: syz [ 511.452936][T12785] usb 4-1: Manufacturer: syz [ 511.457576][T12785] usb 4-1: SerialNumber: syz [ 511.486704][T13591] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2392'. [ 511.503219][T12801] usb 1-1: USB disconnect, device number 100 [ 511.630213][T12766] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 511.656936][T13596] input: syz1 as /devices/virtual/input/input104 [ 511.665332][T12766] usb 3-1: device descriptor read/8, error -71 [ 511.861118][T12785] usbtest 4-1:6.47: couldn't get endpoints, -22 [ 511.877700][T12785] usbtest 4-1:6.47: probe with driver usbtest failed with error -22 [ 511.901805][T12785] usb 4-1: USB disconnect, device number 115 [ 511.909177][T12766] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 511.930365][T12766] usb 3-1: device descriptor read/8, error -71 [ 512.055855][T12766] usb usb3-port1: unable to enumerate USB device [ 512.359350][T12766] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 512.511008][T12766] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 512.525645][T12766] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 512.535964][T12766] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.545872][T12766] usb 6-1: Product: syz [ 512.561603][T12766] usb 6-1: Manufacturer: syz [ 512.572542][T12766] usb 6-1: SerialNumber: syz [ 512.587116][T12766] usb 6-1: config 0 descriptor?? [ 512.612049][T12766] garmin_gps 6-1:0.0: Garmin GPS usb/tty converter detected [ 512.630799][T12766] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 512.651050][T12766] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22 [ 512.815146][T13608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.840898][T13608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.930438][T13621] netlink: 179596 bytes leftover after parsing attributes in process `syz.3.2400'. [ 512.972507][T12791] usb 6-1: USB disconnect, device number 37 [ 512.986120][T12791] garmin_gps 6-1:0.0: device disconnected [ 513.176451][T13629] tipc: Can't bind to reserved service type 0 [ 513.293295][T13634] input: syz1 as /devices/virtual/input/input105 [ 513.859224][T12801] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 514.009217][T12801] usb 6-1: Using ep0 maxpacket: 16 [ 514.025721][T12801] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 514.036827][T12801] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 514.048589][T12801] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 514.058243][T12801] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.066751][T12801] usb 6-1: Product: syz [ 514.071514][T12801] usb 6-1: Manufacturer: syz [ 514.076218][T12801] usb 6-1: SerialNumber: syz [ 514.122978][T12801] usb 6-1: 0:2 : does not exist [ 514.178311][T13648] SET target dimension over the limit! [ 514.277010][ T5634] udevd[5634]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 514.348780][T12785] usb 6-1: USB disconnect, device number 38 [ 514.402170][T13656] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2413'. [ 514.550816][T12791] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 514.656500][T13663] input: syz1 as /devices/virtual/input/input106 [ 514.720696][T12791] usb 5-1: Using ep0 maxpacket: 32 [ 514.728652][T12791] usb 5-1: unable to get BOS descriptor or descriptor too short [ 514.738008][T12791] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 514.749172][T12791] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 90, changing to 7 [ 514.763440][T12791] usb 5-1: New USB device found, idVendor=047f, idProduct=c010, bcdDevice= 0.40 [ 514.772977][T12791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.781475][T12791] usb 5-1: Product: syz [ 514.793619][T12791] usb 5-1: Manufacturer: syz [ 514.801353][T12791] usb 5-1: SerialNumber: syz [ 514.851400][T13665] syzkaller0: left promiscuous mode [ 514.856845][T13665] syzkaller0: left allmulticast mode [ 514.949542][T13668] tipc: Enabling of bearer rejected, failed to enable media [ 515.056939][T13672] FAULT_INJECTION: forcing a failure. [ 515.056939][T13672] name failslab, interval 1, probability 0, space 0, times 0 [ 515.084477][T13672] CPU: 1 UID: 0 PID: 13672 Comm: syz.5.2420 Tainted: G L syzkaller #0 PREEMPT(full) [ 515.084503][T13672] Tainted: [L]=SOFTLOCKUP [ 515.084508][T13672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 515.084518][T13672] Call Trace: [ 515.084524][T13672] [ 515.084531][T13672] dump_stack_lvl+0xe8/0x150 [ 515.084556][T13672] should_fail_ex+0x412/0x560 [ 515.084582][T13672] should_failslab+0xa8/0x100 [ 515.084606][T13672] __kmalloc_cache_noprof+0x88/0x660 [ 515.084628][T13672] ? xfrm_policy_alloc+0x78/0x2b0 [ 515.084733][T13672] xfrm_policy_alloc+0x78/0x2b0 [ 515.084748][T13672] xfrm_policy_construct+0x39/0x6b0 [ 515.084827][T13672] xfrm_add_policy+0x286/0x820 [ 515.084850][T13672] ? __pfx_xfrm_add_policy+0x10/0x10 [ 515.084866][T13672] ? apparmor_capable+0x126/0x170 [ 515.084887][T13672] ? __nla_parse+0x40/0x60 [ 515.084911][T13672] xfrm_user_rcv_msg+0x7ae/0xc40 [ 515.084931][T13672] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 515.084980][T13672] ? __pfx___mutex_trylock_common+0x10/0x10 [ 515.085005][T13672] ? rcu_is_watching+0x15/0xb0 [ 515.085023][T13672] ? trace_contention_end+0x3d/0x140 [ 515.085036][T13672] ? __mutex_lock+0x319/0x1550 [ 515.085054][T13672] netlink_rcv_skb+0x232/0x4b0 [ 515.085068][T13672] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 515.085079][T13672] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 515.085098][T13672] ? netlink_deliver_tap+0x2e/0x1b0 [ 515.085110][T13672] ? netlink_deliver_tap+0x2e/0x1b0 [ 515.085123][T13672] xfrm_netlink_rcv+0x79/0x90 [ 515.085134][T13672] netlink_unicast+0x75c/0x8e0 [ 515.085150][T13672] netlink_sendmsg+0x813/0xb40 [ 515.085167][T13672] ? __pfx_netlink_sendmsg+0x10/0x10 [ 515.085181][T13672] ? aa_sock_msg_perm+0xf1/0x1b0 [ 515.085194][T13672] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 515.085209][T13672] ____sys_sendmsg+0x972/0x9f0 [ 515.085223][T13672] ? __might_fault+0xaf/0x130 [ 515.085238][T13672] ? __pfx_____sys_sendmsg+0x10/0x10 [ 515.085255][T13672] ? import_iovec+0x73/0xa0 [ 515.085271][T13672] ___sys_sendmsg+0x2a5/0x360 [ 515.085283][T13672] ? __lock_acquire+0x6b5/0x2cf0 [ 515.085295][T13672] ? __pfx____sys_sendmsg+0x10/0x10 [ 515.085324][T13672] ? __fget_files+0x2a/0x420 [ 515.085335][T13672] ? __fget_files+0x3a0/0x420 [ 515.085353][T13672] __x64_sys_sendmsg+0x1bd/0x2a0 [ 515.085374][T13672] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 515.085391][T13672] ? __pfx_ksys_write+0x10/0x10 [ 515.085409][T13672] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.085419][T13672] do_syscall_64+0x15f/0xf80 [ 515.085434][T13672] ? clear_bhb_loop+0x40/0x90 [ 515.085445][T13672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.085455][T13672] RIP: 0033:0x7f5e5279ce59 [ 515.085465][T13672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 515.085473][T13672] RSP: 002b:00007f5e535d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 515.085485][T13672] RAX: ffffffffffffffda RBX: 00007f5e52a15fa0 RCX: 00007f5e5279ce59 [ 515.085492][T13672] RDX: 000000002c000010 RSI: 0000200000000180 RDI: 0000000000000007 [ 515.085498][T13672] RBP: 00007f5e535d0090 R08: 0000000000000000 R09: 0000000000000000 [ 515.085504][T13672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 515.085509][T13672] R13: 00007f5e52a16038 R14: 00007f5e52a15fa0 R15: 00007f5e52b3fa48 [ 515.085524][T13672] [ 515.461977][T12791] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 515.476456][T12785] hid-generic 9100:9000000:1000000.0025: reserved main item tag 0xd [ 515.496882][T12785] hid_parser_main: 12 callbacks suppressed [ 515.496896][T12785] hid-generic 9100:9000000:1000000.0025: unknown main item tag 0x0 [ 515.514660][T12791] usb 5-1: USB disconnect, device number 101 [ 515.576951][T12785] hid-generic 9100:9000000:1000000.0025: unknown main item tag 0x0 [ 515.626087][T12785] hid-generic 9100:9000000:1000000.0025: unknown main item tag 0x0 [ 515.675037][T12785] hid-generic 9100:9000000:1000000.0025: unknown main item tag 0x0 [ 515.723891][T12785] hid-generic 9100:9000000:1000000.0025: unknown main item tag 0x0 [ 515.764191][T12785] hid-generic 9100:9000000:1000000.0025: unknown main item tag 0x0 [ 515.811700][T12785] hid-generic 9100:9000000:1000000.0025: unknown main item tag 0x0 [ 515.871413][T12785] hid-generic 9100:9000000:1000000.0025: unknown main item tag 0x0 [ 515.929158][T12785] hid-generic 9100:9000000:1000000.0025: unknown main item tag 0x0 [ 515.972147][T12785] hid-generic 9100:9000000:1000000.0025: unknown main item tag 0x0 [ 516.112936][ T30] audit: type=1326 audit(1778942411.984:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13688 comm="syz.3.2426" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb1939ce59 code=0x7ffc0000 [ 516.170578][ T30] audit: type=1326 audit(1778942411.994:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13688 comm="syz.3.2426" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feb1935d68e code=0x7ffc0000 [ 516.195782][ T30] audit: type=1326 audit(1778942411.994:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13688 comm="syz.3.2426" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb1939ce59 code=0x7ffc0000 [ 516.228552][ T30] audit: type=1326 audit(1778942412.014:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13688 comm="syz.3.2426" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb1939ce59 code=0x7ffc0000 [ 516.256666][T13694] input: syz1 as /devices/virtual/input/input108 [ 516.264051][T12785] hid-generic 9100:9000000:1000000.0025: hidraw0: HID v8000.00 Device [syz0] on syz1 [ 516.297533][ T30] audit: type=1326 audit(1778942412.014:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13688 comm="syz.3.2426" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7feb1939ce59 code=0x7ffc0000 [ 516.406060][ T30] audit: type=1326 audit(1778942412.034:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13688 comm="syz.3.2426" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb1939ce59 code=0x7ffc0000 [ 516.443289][ T30] audit: type=1326 audit(1778942412.034:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13688 comm="syz.3.2426" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb1939ce59 code=0x7ffc0000 [ 516.491057][ T30] audit: type=1326 audit(1778942412.034:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13688 comm="syz.3.2426" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feb1939ce59 code=0x7ffc0000 [ 516.577072][ T30] audit: type=1326 audit(1778942412.034:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13688 comm="syz.3.2426" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb1939ce59 code=0x7ffc0000 [ 516.654445][T13705] cgroup: fork rejected by pids controller in /syz3 [ 516.663552][ T30] audit: type=1326 audit(1778942412.034:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13688 comm="syz.3.2426" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb1939ce59 code=0x7ffc0000 [ 516.751828][T13706] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2431'. [ 516.825045][T13706] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2431'. [ 516.836811][T13709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2431'. [ 516.889695][T13709] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2431'. [ 516.924084][T13709] netlink: 'syz.4.2431': attribute type 15 has an invalid length. [ 517.014799][T13709] netlink: 'syz.4.2431': attribute type 18 has an invalid length. [ 517.362989][ T5645] bond0: (slave syz_tun): Releasing backup interface [ 517.404769][ T5645] syz_tun (unregistering): left allmulticast mode [ 517.499699][T12785] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 517.679513][T12785] usb 6-1: Using ep0 maxpacket: 8 [ 517.691970][T12785] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 517.720630][T12785] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 517.753228][T12785] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 517.778768][T12785] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 517.814853][T12785] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 517.857949][T12785] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.095703][T12785] usb 6-1: GET_CAPABILITIES returned 0 [ 518.114552][T12785] usbtmc 6-1:16.0: can't read capabilities [ 518.204682][ T57] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.239803][ T57] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.263193][ T57] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 518.305098][T12785] usb 6-1: USB disconnect, device number 39 [ 518.448191][T13729] netlink: 'syz.2.2437': attribute type 4 has an invalid length. [ 518.506210][T13728] netlink: 'syz.2.2437': attribute type 4 has an invalid length. [ 518.636909][ T57] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.683718][ T57] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.723712][ T57] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 518.934322][ T57] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.947751][ T57] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.006362][ T57] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 519.249017][ T57] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 519.291157][ T57] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.322783][ T57] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 519.509163][T12801] usb 5-1: new low-speed USB device number 102 using dummy_hcd [ 519.531705][ T5632] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 519.546312][ T5632] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 519.556448][ T5632] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 519.579022][ T5632] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 519.589163][ T5632] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 519.629268][T12766] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 519.656545][ T5640] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 519.687089][ T5640] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 519.697807][ T5640] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 519.715714][ T5640] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 519.728479][ T5640] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 519.769145][T12766] usb 6-1: device descriptor read/64, error -71 [ 519.781367][T12801] usb 5-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 519.793102][T12801] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 519.865217][T12801] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 255, setting to 8 [ 519.921717][T12801] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 519.967462][T12801] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.032157][T13736] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 520.040037][T12766] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 520.189556][T12766] usb 6-1: device descriptor read/64, error -71 [ 520.247290][ T57] bridge_slave_1: left promiscuous mode [ 520.262768][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.278038][T12801] usb 5-1: string descriptor 0 read error: -71 [ 520.295328][ T57] bridge_slave_0: left promiscuous mode [ 520.320013][T12766] usb usb6-port1: attempt power cycle [ 520.327953][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.456892][T12801] usb 5-1: USB disconnect, device number 102 [ 520.689402][T12766] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 520.722727][T12766] usb 6-1: device descriptor read/8, error -71 [ 520.778718][ T57] bond3 (unregistering): (slave geneve3): Releasing active interface [ 520.941333][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 520.955392][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 520.973065][T12766] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 521.000043][T12766] usb 6-1: device descriptor read/8, error -71 [ 521.001503][ T57] bond0 (unregistering): Released all slaves [ 521.055164][ T57] bond1 (unregistering): Released all slaves [ 521.085366][ T57] bond2 (unregistering): Released all slaves [ 521.111675][ T57] bond3 (unregistering): Released all slaves [ 521.129716][T12766] usb usb6-port1: unable to enumerate USB device [ 521.139952][ T57] bond4 (unregistering): Released all slaves [ 521.182057][T13756] syzkaller0: entered promiscuous mode [ 521.187683][T13756] syzkaller0: entered allmulticast mode [ 521.202311][ T5288] 8021q: adding VLAN 0 to HW filter on device eth5 [ 521.394027][ T57] tipc: Left network mode [ 521.734042][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 521.734059][ T30] audit: type=1326 audit(1778942417.604:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13776 comm="syz.0.2447" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb6c459ce59 code=0x0 [ 521.828579][ T5632] Bluetooth: hci4: command tx timeout [ 522.209599][T12785] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 522.380052][T12785] usb 5-1: Using ep0 maxpacket: 8 [ 522.412524][T12785] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 522.457970][T12785] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 522.488906][T12785] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 522.510976][T12785] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 522.526402][T12785] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 522.535728][T12785] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.615020][ T5288] 8021q: adding VLAN 0 to HW filter on device eth6 [ 522.796103][T12785] usb 5-1: GET_CAPABILITIES returned 0 [ 522.827281][T12785] usbtmc 5-1:16.0: can't read capabilities [ 522.843845][T13742] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.857100][T13742] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.878178][T13810] FAULT_INJECTION: forcing a failure. [ 522.878178][T13810] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 522.888251][T13742] bridge_slave_0: entered allmulticast mode [ 522.919832][T13742] bridge_slave_0: entered promiscuous mode [ 522.929515][T13810] CPU: 1 UID: 0 PID: 13810 Comm: syz.2.2452 Tainted: G L syzkaller #0 PREEMPT(full) [ 522.929540][T13810] Tainted: [L]=SOFTLOCKUP [ 522.929546][T13810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 522.929556][T13810] Call Trace: [ 522.929563][T13810] [ 522.929569][T13810] dump_stack_lvl+0xe8/0x150 [ 522.929595][T13810] should_fail_ex+0x412/0x560 [ 522.929629][T13810] strncpy_from_user+0x36/0x2b0 [ 522.929651][T13810] path_setxattrat+0x191/0x440 [ 522.929680][T13810] ? __pfx_path_setxattrat+0x10/0x10 [ 522.929699][T13810] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 522.929738][T13810] ? ksys_write+0x242/0x270 [ 522.929757][T13810] ? __pfx_ksys_write+0x10/0x10 [ 522.929776][T13810] __x64_sys_fsetxattr+0xbc/0xe0 [ 522.929792][T13810] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.929806][T13810] do_syscall_64+0x15f/0xf80 [ 522.929822][T13810] ? trace_irq_disable+0x3b/0x140 [ 522.929840][T13810] ? clear_bhb_loop+0x40/0x90 [ 522.929854][T13810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.929866][T13810] RIP: 0033:0x7fa6c4b9ce59 [ 522.929878][T13810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 522.929889][T13810] RSP: 002b:00007fa6c598e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 522.929903][T13810] RAX: ffffffffffffffda RBX: 00007fa6c4e15fa0 RCX: 00007fa6c4b9ce59 [ 522.929912][T13810] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 522.929920][T13810] RBP: 00007fa6c598e090 R08: 0000000000000002 R09: 0000000000000000 [ 522.929928][T13810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 522.929935][T13810] R13: 00007fa6c4e16038 R14: 00007fa6c4e15fa0 R15: 00007fa6c4f3fa48 [ 522.929954][T13810] [ 523.151509][T13742] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.178371][ T29] usb 5-1: USB disconnect, device number 103 [ 523.186014][T13742] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.195376][T13742] bridge_slave_1: entered allmulticast mode [ 523.231717][T13742] bridge_slave_1: entered promiscuous mode [ 523.303247][T13742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 523.352337][T13742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 523.409481][T13820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2455'. [ 523.470257][T13742] team0: Port device team_slave_0 added [ 523.478985][T13742] team0: Port device team_slave_1 added [ 523.520043][ T9] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 523.535835][T13742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.560603][T13742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.598364][T13742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.669755][ T9] usb 3-1: device descriptor read/64, error -71 [ 523.674369][T13742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.684617][T13742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.765132][T13742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.901846][ T5632] Bluetooth: hci4: command tx timeout [ 523.909419][ T9] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 524.059623][ T9] usb 3-1: device descriptor read/64, error -71 [ 524.073857][T13742] hsr_slave_0: entered promiscuous mode [ 524.080609][T13742] hsr_slave_1: entered promiscuous mode [ 524.110221][ T5288] 8021q: adding VLAN 0 to HW filter on device eth7 [ 524.192288][ T9] usb usb3-port1: attempt power cycle [ 524.347665][T13859] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2462'. [ 524.388116][T13859] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2462'. [ 524.526264][T13860] tipc: New replicast peer: 255.255.255.255 [ 524.549245][ T9] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 524.570796][T13860] tipc: Enabled bearer , priority 10 [ 524.602001][ T9] usb 3-1: device descriptor read/8, error -71 [ 524.839287][ T9] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 524.900891][ T9] usb 3-1: device descriptor read/8, error -71 [ 524.915589][ T57] hsr_slave_0: left promiscuous mode [ 524.971802][ T57] hsr_slave_1: left promiscuous mode [ 525.022631][ T9] usb usb3-port1: unable to enumerate USB device [ 525.878349][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 525.904646][T13870] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 525.924636][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 526.029169][ T5632] Bluetooth: hci4: command tx timeout [ 526.078873][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 526.118422][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 527.274236][ T5288] 8021q: adding VLAN 0 to HW filter on device eth8 [ 527.870572][T12769] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 528.034672][T12769] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 528.047199][T12769] usb 1-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 528.061543][ T5632] Bluetooth: hci4: command tx timeout [ 528.073565][T12769] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.086879][ T57] IPVS: stop unused estimator thread 0... [ 528.097040][T12769] usb 1-1: config 0 descriptor?? [ 528.112473][T13901] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 528.689537][T12766] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 528.859761][T12766] usb 3-1: Using ep0 maxpacket: 8 [ 528.889924][T12766] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 528.925096][T12766] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 528.952554][T12766] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 528.993578][T12766] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 529.035998][T12766] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 529.081611][T12766] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.277084][T12769] usbhid 1-1:0.0: can't add hid device: -71 [ 529.293069][T12769] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 529.363557][T12769] usb 1-1: USB disconnect, device number 101 [ 529.383454][T12766] usb 3-1: GET_CAPABILITIES returned 0 [ 529.397773][T13925] fuse: Unknown parameter 'eI7dZ҆a5OI'ǂ' [ 529.405475][T12766] usbtmc 3-1:16.0: can't read capabilities [ 529.595850][T12766] usb 3-1: USB disconnect, device number 95 [ 530.026596][T13742] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 530.048708][T13742] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 530.061314][T13742] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 530.091551][T13742] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 530.106068][T13742] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 530.130207][T13742] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 530.143310][T13742] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 530.156158][T13742] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 530.511248][T13742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 530.551699][T13971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2479'. [ 530.552764][T13742] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.718918][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.726189][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.818949][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.826100][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.151263][T12766] usb 1-1: new full-speed USB device number 102 using dummy_hcd [ 531.353741][T13742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 531.547579][ T30] audit: type=1800 audit(1778942427.424:1373): pid=14001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2483" name="/" dev="fuse" ino=1 res=0 errno=0 [ 531.613336][T13742] veth0_vlan: entered promiscuous mode [ 531.644101][T13742] veth1_vlan: entered promiscuous mode [ 531.738646][T13742] veth0_macvtap: entered promiscuous mode [ 531.782853][T13742] veth1_macvtap: entered promiscuous mode [ 531.835755][T13742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 531.849257][ T1179] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 531.887756][T13742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 531.937124][ T57] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.972415][ T57] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.017783][ T57] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.027402][ T1179] usb 3-1: Using ep0 maxpacket: 8 [ 532.044313][ T1179] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 532.054734][ T57] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.074220][ T1179] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 532.114573][ T1179] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 532.147599][ T1179] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 532.228890][ T1179] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 532.320803][ T1179] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.470382][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 532.513807][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 532.578742][ T1179] usb 3-1: GET_CAPABILITIES returned 0 [ 532.598152][ T1179] usbtmc 3-1:16.0: can't read capabilities [ 532.644205][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 532.667868][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 532.843391][T12766] usb 3-1: USB disconnect, device number 96 [ 533.079582][ T1179] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 533.231292][ T1179] usb 5-1: device descriptor read/64, error -71 [ 533.492651][ T1179] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 533.659361][ T1179] usb 5-1: device descriptor read/64, error -71 [ 533.789550][ T1179] usb usb5-port1: attempt power cycle [ 533.985791][T14059] IPVS: set_ctl: invalid protocol: 217 172.20.20.45:20000 [ 534.151989][ T1179] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 534.239821][ T1179] usb 5-1: device descriptor read/8, error -71 [ 534.489584][ T1179] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 534.497530][T12792] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 534.529884][ T1179] usb 5-1: device descriptor read/8, error -71 [ 534.639203][T12766] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 534.663404][ T1179] usb usb5-port1: unable to enumerate USB device [ 534.676929][T12792] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 534.688909][T12792] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 534.702932][T12792] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 534.719272][T12792] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 534.733102][T12792] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 534.756597][T12792] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 534.779497][T12792] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 534.788444][T12792] usb 1-1: Product: syz [ 534.805293][T12792] usb 1-1: Manufacturer: syz [ 534.850859][T12766] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 534.867195][T12792] cdc_wdm 1-1:1.0: skipping garbage [ 534.888641][T12792] cdc_wdm 1-1:1.0: skipping garbage [ 534.893790][T12766] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.925869][T12766] usb 3-1: config 0 descriptor?? [ 534.979426][T12766] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 534.991435][T12792] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 535.004441][T12792] cdc_wdm 1-1:1.0: Unknown control protocol [ 535.101655][T14079] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 535.197910][T12766] gspca_cpia1: usb_control_msg 05, error -71 [ 535.241870][T12766] gspca_cpia1: usb_control_msg 01, error -71 [ 535.252475][T12766] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 535.255869][T14080] bridge1: entered promiscuous mode [ 535.284767][T12766] usb 3-1: USB disconnect, device number 97 [ 535.760334][T12766] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 535.817903][T14100] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2498'. [ 535.932088][T12766] usb 6-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 535.963783][T12766] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.993017][T12766] usb 6-1: config 0 descriptor?? [ 536.021923][T12766] pwc: Samsung MPC-C10 USB webcam detected. [ 536.224507][T12766] pwc: send_video_command error -71 [ 536.245770][T12766] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 536.284944][T12766] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 536.304557][T12792] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 536.348236][T12766] usb 6-1: USB disconnect, device number 44 [ 536.479813][T12792] usb 5-1: Using ep0 maxpacket: 8 [ 536.494818][T12792] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 536.515210][T12792] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 536.540180][T12792] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 536.565630][T12792] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 536.597556][T12792] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 536.617175][T12792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.873587][T12792] usb 5-1: GET_CAPABILITIES returned 0 [ 536.893327][T12792] usbtmc 5-1:16.0: can't read capabilities [ 536.899419][T12801] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 537.071610][T12801] usb 3-1: config 1 interface 0 has no altsetting 0 [ 537.110172][T12801] usb 3-1: string descriptor 0 read error: -22 [ 537.112437][T12792] usb 5-1: USB disconnect, device number 108 [ 537.134801][T12801] usb 3-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.40 [ 537.164517][T12801] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.313443][T14114] IPVS: You probably need to specify IP address on multicast interface. [ 537.327059][ T29] usb 1-1: USB disconnect, device number 103 [ 537.330635][T14114] IPVS: Error connecting to the multicast addr [ 537.691356][T14136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2503'. [ 537.703935][T14136] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2503'. [ 537.713482][T14136] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2503'. [ 537.767940][T12801] hid_parser_main: 2018 callbacks suppressed [ 537.767962][T12801] hid_mf 0003:0079:1801.0026: unknown main item tag 0x0 [ 537.812216][T12801] hid_mf 0003:0079:1801.0026: unknown main item tag 0x0 [ 537.839506][T12801] hid_mf 0003:0079:1801.0026: unknown main item tag 0x0 [ 537.859309][ T29] usb 1-1: new full-speed USB device number 104 using dummy_hcd [ 537.872625][T12801] hid_mf 0003:0079:1801.0026: unknown main item tag 0x0 [ 537.889246][T12801] hid_mf 0003:0079:1801.0026: unknown main item tag 0x0 [ 537.908339][T12801] hid_mf 0003:0079:1801.0026: unknown main item tag 0x0 [ 537.926954][T12801] hid_mf 0003:0079:1801.0026: unknown main item tag 0x0 [ 537.945146][T12801] hid_mf 0003:0079:1801.0026: unknown main item tag 0x0 [ 537.969893][T12801] hid_mf 0003:0079:1801.0026: unknown main item tag 0x0 [ 538.000594][T12801] hid_mf 0003:0079:1801.0026: unknown main item tag 0x0 [ 538.031688][ T29] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 538.068527][ T29] usb 1-1: config 1 has no interface number 0 [ 538.092639][ T29] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 538.133369][ T29] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 538.155421][T12801] hid_mf 0003:0079:1801.0026: unbalanced collection at end of report description [ 538.173488][ T29] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 538.185469][T12801] hid_mf 0003:0079:1801.0026: HID parse failed. [ 538.196041][ T29] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 538.207213][T12801] hid_mf 0003:0079:1801.0026: probe with driver hid_mf failed with error -22 [ 538.238292][ T29] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 26232, setting to 64 [ 538.261397][ T29] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 538.278252][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.308765][ T29] usb 1-1: Product: syz [ 538.319173][ T29] usb 1-1: Manufacturer: syz [ 538.329893][ T29] usb 1-1: SerialNumber: syz [ 538.351623][T14133] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 538.569847][T14132] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 538.603005][T14133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.638044][T14133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.679671][T14133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.711568][T14133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.742127][T14133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.770071][T14133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.809795][T14133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.834670][T14132] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 538.856916][T14133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.902676][T14133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.951364][T14133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.041574][ T29] cdc_ncm 1-1:1.1: failed GET_NTB_PARAMETERS [ 539.060937][ T29] cdc_ncm 1-1:1.1: bind() failure [ 539.099454][ T29] usb 1-1: USB disconnect, device number 104 [ 539.231505][ T30] audit: type=1326 audit(1778942435.114:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14158 comm="syz.0.2513" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb6c459ce59 code=0x0 [ 539.624451][ T30] audit: type=1326 audit(1778942435.504:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14168 comm="syz.4.2516" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4bc759ce59 code=0x0 [ 539.695006][ T1179] usb 3-1: USB disconnect, device number 98 [ 539.868020][T14176] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 540.109487][ T1179] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 540.147346][T14179] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2520'. [ 540.270380][ T1179] usb 3-1: Using ep0 maxpacket: 8 [ 540.279310][ T1179] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 540.299444][ T1179] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 540.312984][ T1179] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 540.330682][ T1179] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 540.358071][ T1179] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 540.368545][ T1179] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.590006][ T29] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 540.600541][ T1179] usb 3-1: GET_CAPABILITIES returned 0 [ 540.617532][ T1179] usbtmc 3-1:16.0: can't read capabilities [ 540.761510][ T29] usb 1-1: unable to get BOS descriptor or descriptor too short [ 540.784683][ T29] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 540.812761][ T29] usb 1-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 540.826897][T12785] usb 3-1: USB disconnect, device number 99 [ 540.843311][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.873461][ T29] usb 1-1: Product: syz [ 540.891188][ T29] usb 1-1: Manufacturer: syz [ 540.910024][ T29] usb 1-1: SerialNumber: syz [ 541.240562][T14205] [U]  [ 541.353405][ T29] usb 1-1: reset high-speed USB device number 105 using dummy_hcd [ 541.639538][ T30] audit: type=1326 audit(1778942437.514:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14210 comm="syz.2.2530" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa6c4b9ce59 code=0x0 [ 541.889297][ T29] usb 1-1: device descriptor read/64, error -71 [ 541.996921][T14214] batadv_slave_1: entered promiscuous mode [ 542.007744][T14213] batadv_slave_1: left promiscuous mode [ 542.150129][ T29] usb 1-1: reset high-speed USB device number 105 using dummy_hcd [ 542.196576][T14224] FAULT_INJECTION: forcing a failure. [ 542.196576][T14224] name failslab, interval 1, probability 0, space 0, times 0 [ 542.210017][T14224] CPU: 0 UID: 0 PID: 14224 Comm: syz.5.2534 Tainted: G L syzkaller #0 PREEMPT(full) [ 542.210043][T14224] Tainted: [L]=SOFTLOCKUP [ 542.210050][T14224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 542.210060][T14224] Call Trace: [ 542.210067][T14224] [ 542.210075][T14224] dump_stack_lvl+0xe8/0x150 [ 542.210100][T14224] should_fail_ex+0x412/0x560 [ 542.210127][T14224] should_failslab+0xa8/0x100 [ 542.210157][T14224] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 542.210180][T14224] ? __alloc_skb+0x1d0/0x7d0 [ 542.210200][T14224] ? __local_bh_enable_ip+0xd0/0x130 [ 542.210221][T14224] __alloc_skb+0x1d0/0x7d0 [ 542.210245][T14224] tipc_nl_compat_doit+0x18a/0x650 [ 542.210362][T14224] ? __lock_acquire+0x6b5/0x2cf0 [ 542.210385][T14224] ? __pfx_tipc_nl_compat_doit+0x10/0x10 [ 542.210410][T14224] ? apparmor_capable+0x126/0x170 [ 542.210429][T14224] ? bpf_lsm_capable+0x9/0x20 [ 542.210445][T14224] ? security_capable+0x7e/0x2c0 [ 542.210472][T14224] tipc_nl_compat_recv+0x8d3/0xcf0 [ 542.210495][T14224] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 542.210512][T14224] ? __mutex_trylock_common+0x158/0x260 [ 542.210534][T14224] ? __pfx___mutex_trylock_common+0x10/0x10 [ 542.210554][T14224] ? __pfx___tipc_nl_bearer_enable+0x10/0x10 [ 542.210577][T14224] ? __pfx_tipc_nl_compat_bearer_enable+0x10/0x10 [ 542.210605][T14224] ? genl_family_rcv_msg_attrs_parse+0xe9/0x2f0 [ 542.210631][T14224] genl_family_rcv_msg_doit+0x22a/0x330 [ 542.210654][T14224] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 542.210681][T14224] ? __lock_acquire+0x6b5/0x2cf0 [ 542.210707][T14224] genl_rcv_msg+0x61c/0x7a0 [ 542.210730][T14224] ? __pfx_genl_rcv_msg+0x10/0x10 [ 542.210747][T14224] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 542.210780][T14224] netlink_rcv_skb+0x232/0x4b0 [ 542.210803][T14224] ? __pfx_genl_rcv_msg+0x10/0x10 [ 542.210822][T14224] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 542.210858][T14224] ? down_read+0x270/0x2e0 [ 542.210874][T14224] ? genl_rcv+0xd/0x40 [ 542.210892][T14224] genl_rcv+0x28/0x40 [ 542.210908][T14224] netlink_unicast+0x75c/0x8e0 [ 542.210938][T14224] netlink_sendmsg+0x813/0xb40 [ 542.210969][T14224] ? __pfx_netlink_sendmsg+0x10/0x10 [ 542.210994][T14224] ? aa_sock_msg_perm+0xf1/0x1b0 [ 542.211016][T14224] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 542.211041][T14224] ____sys_sendmsg+0x972/0x9f0 [ 542.211073][T14224] ? __pfx_____sys_sendmsg+0x10/0x10 [ 542.211104][T14224] ? import_iovec+0x73/0xa0 [ 542.211131][T14224] ___sys_sendmsg+0x2a5/0x360 [ 542.211152][T14224] ? __lock_acquire+0x6b5/0x2cf0 [ 542.211174][T14224] ? __pfx____sys_sendmsg+0x10/0x10 [ 542.211230][T14224] ? __fget_files+0x2a/0x420 [ 542.211249][T14224] ? __fget_files+0x3a0/0x420 [ 542.211283][T14224] __x64_sys_sendmsg+0x1bd/0x2a0 [ 542.211307][T14224] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 542.211338][T14224] ? __pfx_ksys_write+0x10/0x10 [ 542.211369][T14224] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.211387][T14224] do_syscall_64+0x15f/0xf80 [ 542.211416][T14224] ? trace_irq_disable+0x3b/0x140 [ 542.211438][T14224] ? clear_bhb_loop+0x40/0x90 [ 542.211458][T14224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.211474][T14224] RIP: 0033:0x7f5e5279ce59 [ 542.211491][T14224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 542.211505][T14224] RSP: 002b:00007f5e535d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 542.211521][T14224] RAX: ffffffffffffffda RBX: 00007f5e52a15fa0 RCX: 00007f5e5279ce59 [ 542.211533][T14224] RDX: 0000000004008040 RSI: 00002000000005c0 RDI: 0000000000000004 [ 542.211544][T14224] RBP: 00007f5e535d0090 R08: 0000000000000000 R09: 0000000000000000 [ 542.211554][T14224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 542.211563][T14224] R13: 00007f5e52a16038 R14: 00007f5e52a15fa0 R15: 00007f5e52b3fa48 [ 542.211591][T14224] [ 542.671791][T12785] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 542.681329][ T29] usb 1-1: unable to get BOS descriptor or descriptor too short [ 542.709509][ T29] usb 1-1: device firmware changed [ 542.770209][ T29] usb 1-1: USB disconnect, device number 105 [ 542.832145][T14233] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2538'. [ 542.863005][T12785] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 542.873071][T12785] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 542.883691][T12785] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 128, setting to 64 [ 542.896168][T12785] usb 4-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 542.907105][T12785] usb 4-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 542.915952][T12785] usb 4-1: Manufacturer: syz [ 542.924775][T12785] usb 4-1: config 0 descriptor?? [ 542.935144][T12785] smsusb:smsusb_probe: board id=9, interface number 0 [ 542.944999][T12785] smsusb:siano_media_device_register: media controller created [ 542.956009][T12785] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed [ 542.963691][T12792] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 542.971562][T12785] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed [ 542.982406][T12785] ------------[ cut here ]------------ [ 542.987891][T12785] !PageLargeKmalloc(page) [ 542.987915][T12785] WARNING: mm/slub.c:6475 at free_large_kmalloc+0x9b/0x110, CPU#0: kworker/0:13/12785 [ 543.001929][T12785] Modules linked in: [ 543.006240][T12785] CPU: 0 UID: 0 PID: 12785 Comm: kworker/0:13 Tainted: G L syzkaller #0 PREEMPT(full) [ 543.017426][T12785] Tainted: [L]=SOFTLOCKUP [ 543.022939][T12785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 543.028785][T14237] FAULT_INJECTION: forcing a failure. [ 543.028785][T14237] name failslab, interval 1, probability 0, space 0, times 0 [ 543.033614][T12785] Workqueue: usb_hub_wq hub_event [ 543.051631][T12785] RIP: 0010:free_large_kmalloc+0x9b/0x110 [ 543.053400][T14237] CPU: 1 UID: 0 PID: 14237 Comm: syz.4.2540 Tainted: G L syzkaller #0 PREEMPT(full) [ 543.053425][T14237] Tainted: [L]=SOFTLOCKUP [ 543.053430][T14237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 543.053440][T14237] Call Trace: [ 543.053447][T14237] [ 543.053454][T14237] dump_stack_lvl+0xe8/0x150 [ 543.053478][T14237] should_fail_ex+0x412/0x560 [ 543.053504][T14237] should_failslab+0xa8/0x100 [ 543.053529][T14237] __kmalloc_cache_noprof+0x88/0x660 [ 543.053551][T14237] ? basic_init+0x50/0x130 [ 543.053576][T14237] basic_init+0x50/0x130 [ 543.053596][T14237] tcf_proto_create+0x248/0x330 [ 543.053621][T14237] tc_new_tfilter+0x12ff/0x1780 [ 543.053666][T14237] ? __pfx_tc_new_tfilter+0x10/0x10 [ 543.053702][T14237] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 543.053736][T14237] ? __pfx_tc_new_tfilter+0x10/0x10 [ 543.053758][T14237] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 543.053780][T14237] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 543.053800][T14237] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 543.053817][T14237] ? ref_tracker_free+0x693/0x840 [ 543.053840][T14237] ? __pfx_ref_tracker_free+0x10/0x10 [ 543.053869][T14237] netlink_rcv_skb+0x232/0x4b0 [ 543.053891][T14237] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 543.053911][T14237] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 543.053944][T14237] ? netlink_deliver_tap+0x2e/0x1b0 [ 543.053963][T14237] ? netlink_deliver_tap+0x2e/0x1b0 [ 543.053988][T14237] netlink_unicast+0x75c/0x8e0 [ 543.054018][T14237] netlink_sendmsg+0x813/0xb40 [ 543.054047][T14237] ? __pfx_netlink_sendmsg+0x10/0x10 [ 543.054071][T14237] ? aa_sock_msg_perm+0xf1/0x1b0 [ 543.054093][T14237] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 543.054116][T14237] ____sys_sendmsg+0x972/0x9f0 [ 543.054138][T14237] ? __might_fault+0xaf/0x130 [ 543.054163][T14237] ? __pfx_____sys_sendmsg+0x10/0x10 [ 543.054192][T14237] ? import_iovec+0x73/0xa0 [ 543.054218][T14237] ___sys_sendmsg+0x2a5/0x360 [ 543.054238][T14237] ? __lock_acquire+0x6b5/0x2cf0 [ 543.054259][T14237] ? __pfx____sys_sendmsg+0x10/0x10 [ 543.054312][T14237] ? __fget_files+0x2a/0x420 [ 543.054335][T14237] ? __fget_files+0x3a0/0x420 [ 543.054377][T14237] __x64_sys_sendmsg+0x1bd/0x2a0 [ 543.054401][T14237] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 543.054431][T14237] ? __pfx_ksys_write+0x10/0x10 [ 543.054460][T14237] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.054477][T14237] do_syscall_64+0x15f/0xf80 [ 543.054499][T14237] ? trace_irq_disable+0x3b/0x140 [ 543.054522][T14237] ? clear_bhb_loop+0x40/0x90 [ 543.054542][T14237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.054557][T14237] RIP: 0033:0x7f4bc759ce59 [ 543.054576][T14237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.054589][T14237] RSP: 002b:00007f4bc843d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 543.054606][T14237] RAX: ffffffffffffffda RBX: 00007f4bc7815fa0 RCX: 00007f4bc759ce59 [ 543.054618][T14237] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 543.054628][T14237] RBP: 00007f4bc843d090 R08: 0000000000000000 R09: 0000000000000000 [ 543.054638][T14237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 543.054647][T14237] R13: 00007f4bc7816038 R14: 00007f4bc7815fa0 R15: 00007f4bc793fa48 [ 543.054673][T14237] [ 543.239246][ T29] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 543.241500][T12785] Code: 8b 43 30 83 f8 ff 74 13 25 00 00 00 ff 3d 00 00 00 f8 75 74 c7 43 30 ff ff ff ff 48 89 df 89 ee 5b 41 5e 5d e9 36 d8 fc ff 90 <0f> 0b 90 48 89 df 48 c7 c6 cd 68 fc 8d 5b 41 5e 5d e9 df 4b 02 ff [ 543.389134][ T29] usb 3-1: Using ep0 maxpacket: 8 [ 543.390800][T12785] RSP: 0018:ffffc900038deb20 EFLAGS: 00010206 [ 543.413038][ T29] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 543.415474][T12785] [ 543.415485][T12785] RAX: 00000000ff000000 RBX: ffffea00017f7880 RCX: 0000000000000001 [ 543.415500][T12785] RDX: ffffc900196e5000 RSI: ffff88805fde2000 RDI: ffffea00017f7880 [ 543.415515][T12785] RBP: 0000000000000000 R08: ffff888070597603 R09: 1ffff1100e0b2ec0 [ 543.422636][ T29] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 543.431398][T12785] R10: dffffc0000000000 R11: ffffed100e0b2ec1 R12: 1ffff11006077c82 [ 543.431420][T12785] R13: 0000000000000000 R14: ffff888070597660 R15: dffffc0000000000 [ 543.431433][T12785] FS: 0000000000000000(0000) GS:ffff88812528a000(0000) knlGS:0000000000000000 [ 543.431448][T12785] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 543.431459][T12785] CR2: 00007fea25dea540 CR3: 000000002c832000 CR4: 00000000003526f0 [ 543.431474][T12785] Call Trace: [ 543.431483][T12785] [ 543.431494][T12785] usb_free_urb+0xd0/0x120 [ 543.431520][T12785] smsusb_term_device+0x1d7/0x3e0 [ 543.435041][ T29] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 543.442423][T12785] smsusb_probe+0x1aba/0x2280 [ 543.468207][ T29] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 543.476166][T12785] ? __pfx_smsusb_probe+0x10/0x10 [ 543.476211][T12785] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 543.476236][T12785] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 543.511278][ T29] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 543.514120][T12785] ? __pm_runtime_set_status+0x9d4/0xcd0 [ 543.518870][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.523641][T12785] usb_probe_interface+0x659/0xc70 [ 543.596425][T12785] ? __pfx_usb_probe_interface+0x10/0x10 [ 543.602099][T12785] really_probe+0x267/0xaf0 [ 543.606692][T12785] __driver_probe_device+0x1ef/0x380 [ 543.612042][T12785] driver_probe_device+0x4f/0x240 [ 543.617083][T12785] __device_attach_driver+0x279/0x430 [ 543.622518][T12785] bus_for_each_drv+0x258/0x2f0 [ 543.627415][T12785] ? __pfx___device_attach_driver+0x10/0x10 [ 543.633361][T12785] ? __pfx_bus_for_each_drv+0x10/0x10 [ 543.638786][T12785] ? lockdep_hardirqs_on+0x7a/0x110 [ 543.644498][T12785] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 543.650737][T12785] __device_attach+0x2c5/0x450 [ 543.655534][T12785] ? __pfx___device_attach+0x10/0x10 [ 543.661648][T12785] ? _raw_spin_unlock+0x28/0x50 [ 543.667102][T12785] device_initial_probe+0xa1/0xd0 [ 543.672220][T12785] bus_probe_device+0x12a/0x220 [ 543.677093][T12785] device_add+0x7e9/0xbb0 [ 543.681498][T12785] usb_set_configuration+0x1a87/0x2110 [ 543.687004][T12785] usb_generic_driver_probe+0x8d/0x150 [ 543.692654][T12785] usb_probe_device+0x1c4/0x3b0 [ 543.697549][T12785] ? __pfx_usb_probe_device+0x10/0x10 [ 543.703002][T12785] really_probe+0x267/0xaf0 [ 543.707536][T12785] __driver_probe_device+0x1ef/0x380 [ 543.712919][T12785] driver_probe_device+0x4f/0x240 [ 543.717977][T12785] __device_attach_driver+0x279/0x430 [ 543.723457][T12785] bus_for_each_drv+0x258/0x2f0 [ 543.728333][T12785] ? __pfx___device_attach_driver+0x10/0x10 [ 543.734359][T12785] ? __pfx_bus_for_each_drv+0x10/0x10 [ 543.739877][T12785] ? lockdep_hardirqs_on+0x7a/0x110 [ 543.745518][T12785] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 543.751996][T12785] __device_attach+0x2c5/0x450 [ 543.756801][T12785] ? __pfx___device_attach+0x10/0x10 [ 543.762184][T12785] ? _raw_spin_unlock+0x28/0x50 [ 543.767067][T12785] device_initial_probe+0xa1/0xd0 [ 543.772155][T12785] bus_probe_device+0x12a/0x220 [ 543.777038][T12785] device_add+0x7e9/0xbb0 [ 543.781455][T12785] usb_new_device+0xa08/0x16f0 [ 543.786252][T12785] ? __pfx_usb_new_device+0x10/0x10 [ 543.791562][T12785] ? _raw_spin_unlock_irq+0x23/0x50 [ 543.796813][T12785] hub_event+0x2a1c/0x4f30 [ 543.801415][T12785] ? __pfx_hub_event+0x10/0x10 [ 543.806200][T12785] ? process_scheduled_works+0xa70/0x1860 [ 543.811984][T12785] ? process_scheduled_works+0xa70/0x1860 [ 543.817723][T12785] ? process_scheduled_works+0xa70/0x1860 [ 543.823655][T12785] process_scheduled_works+0xb5d/0x1860 [ 543.829290][T12785] ? __pfx_process_scheduled_works+0x10/0x10 [ 543.835300][T12785] ? assign_work+0x3d5/0x5e0 [ 543.839947][T12785] worker_thread+0xa53/0xfc0 [ 543.844627][T12785] kthread+0x389/0x470 [ 543.849223][T12785] ? __pfx_worker_thread+0x10/0x10 [ 543.854360][T12785] ? __pfx_kthread+0x10/0x10 [ 543.858959][T12785] ret_from_fork+0x514/0xb70 [ 543.864039][T12785] ? __pfx_ret_from_fork+0x10/0x10 [ 543.869236][T12785] ? __switch_to+0xc79/0x1410 [ 543.873944][T12785] ? __pfx_kthread+0x10/0x10 [ 543.878564][T12785] ret_from_fork_asm+0x1a/0x30 [ 543.883420][T12785] [ 543.886475][T12785] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 543.893767][T12785] CPU: 0 UID: 0 PID: 12785 Comm: kworker/0:13 Tainted: G L syzkaller #0 PREEMPT(full) [ 543.904891][T12785] Tainted: [L]=SOFTLOCKUP [ 543.909221][T12785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 543.919290][T12785] Workqueue: usb_hub_wq hub_event [ 543.924346][T12785] Call Trace: [ 543.927635][T12785] [ 543.930581][T12785] vpanic+0x56c/0xa60 [ 543.934618][T12785] ? __pfx__printk+0x10/0x10 [ 543.939230][T12785] ? __pfx_vpanic+0x10/0x10 [ 543.943747][T12785] ? is_bpf_text_address+0x292/0x2b0 [ 543.949049][T12785] ? is_bpf_text_address+0x26/0x2b0 [ 543.954289][T12785] panic+0xc5/0xd0 [ 543.958006][T12785] ? __pfx_panic+0x10/0x10 [ 543.962420][T12785] ? ret_from_fork_asm+0x1a/0x30 [ 543.967348][T12785] __warn+0x315/0x4c0 [ 543.971322][T12785] ? free_large_kmalloc+0x9b/0x110 [ 543.976447][T12785] ? free_large_kmalloc+0x9b/0x110 [ 543.981569][T12785] __report_bug+0x29a/0x540 [ 543.986168][T12785] ? device_initial_probe+0xa1/0xd0 [ 543.991378][T12785] ? bus_probe_device+0x12a/0x220 [ 543.996405][T12785] ? device_add+0x7e9/0xbb0 [ 544.000909][T12785] ? free_large_kmalloc+0x9b/0x110 [ 544.006013][T12785] ? __pfx___report_bug+0x10/0x10 [ 544.011034][T12785] ? usb_new_device+0xa08/0x16f0 [ 544.015964][T12785] ? hub_event+0x2a1c/0x4f30 [ 544.020550][T12785] ? process_scheduled_works+0xb5d/0x1860 [ 544.026272][T12785] ? smscore_unregister_device+0x651/0x780 [ 544.032330][T12785] ? free_large_kmalloc+0x9b/0x110 [ 544.037436][T12785] report_bug+0x16a/0x220 [ 544.041761][T12785] ? free_large_kmalloc+0x9b/0x110 [ 544.046864][T12785] ? free_large_kmalloc+0x9d/0x110 [ 544.051968][T12785] handle_bug+0x9c/0x200 [ 544.056199][T12785] exc_invalid_op+0x1a/0x50 [ 544.060698][T12785] asm_exc_invalid_op+0x1a/0x20 [ 544.065547][T12785] RIP: 0010:free_large_kmalloc+0x9b/0x110 [ 544.071260][T12785] Code: 8b 43 30 83 f8 ff 74 13 25 00 00 00 ff 3d 00 00 00 f8 75 74 c7 43 30 ff ff ff ff 48 89 df 89 ee 5b 41 5e 5d e9 36 d8 fc ff 90 <0f> 0b 90 48 89 df 48 c7 c6 cd 68 fc 8d 5b 41 5e 5d e9 df 4b 02 ff [ 544.090856][T12785] RSP: 0018:ffffc900038deb20 EFLAGS: 00010206 [ 544.096913][T12785] RAX: 00000000ff000000 RBX: ffffea00017f7880 RCX: 0000000000000001 [ 544.104887][T12785] RDX: ffffc900196e5000 RSI: ffff88805fde2000 RDI: ffffea00017f7880 [ 544.112863][T12785] RBP: 0000000000000000 R08: ffff888070597603 R09: 1ffff1100e0b2ec0 [ 544.120837][T12785] R10: dffffc0000000000 R11: ffffed100e0b2ec1 R12: 1ffff11006077c82 [ 544.128803][T12785] R13: 0000000000000000 R14: ffff888070597660 R15: dffffc0000000000 [ 544.136783][T12785] usb_free_urb+0xd0/0x120 [ 544.141199][T12785] smsusb_term_device+0x1d7/0x3e0 [ 544.146219][T12785] smsusb_probe+0x1aba/0x2280 [ 544.150901][T12785] ? __pfx_smsusb_probe+0x10/0x10 [ 544.155924][T12785] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 544.161466][T12785] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 544.167273][T12785] ? __pm_runtime_set_status+0x9d4/0xcd0 [ 544.172904][T12785] usb_probe_interface+0x659/0xc70 [ 544.178022][T12785] ? __pfx_usb_probe_interface+0x10/0x10 [ 544.183647][T12785] really_probe+0x267/0xaf0 [ 544.188152][T12785] __driver_probe_device+0x1ef/0x380 [ 544.193436][T12785] driver_probe_device+0x4f/0x240 [ 544.198460][T12785] __device_attach_driver+0x279/0x430 [ 544.203828][T12785] bus_for_each_drv+0x258/0x2f0 [ 544.208669][T12785] ? __pfx___device_attach_driver+0x10/0x10 [ 544.214552][T12785] ? __pfx_bus_for_each_drv+0x10/0x10 [ 544.219915][T12785] ? lockdep_hardirqs_on+0x7a/0x110 [ 544.225117][T12785] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 544.230923][T12785] __device_attach+0x2c5/0x450 [ 544.235685][T12785] ? __pfx___device_attach+0x10/0x10 [ 544.240962][T12785] ? _raw_spin_unlock+0x28/0x50 [ 544.245812][T12785] device_initial_probe+0xa1/0xd0 [ 544.250830][T12785] bus_probe_device+0x12a/0x220 [ 544.255680][T12785] device_add+0x7e9/0xbb0 [ 544.260013][T12785] usb_set_configuration+0x1a87/0x2110 [ 544.265490][T12785] usb_generic_driver_probe+0x8d/0x150 [ 544.270947][T12785] usb_probe_device+0x1c4/0x3b0 [ 544.275799][T12785] ? __pfx_usb_probe_device+0x10/0x10 [ 544.281167][T12785] really_probe+0x267/0xaf0 [ 544.285670][T12785] __driver_probe_device+0x1ef/0x380 [ 544.290950][T12785] driver_probe_device+0x4f/0x240 [ 544.295976][T12785] __device_attach_driver+0x279/0x430 [ 544.301348][T12785] bus_for_each_drv+0x258/0x2f0 [ 544.306192][T12785] ? __pfx___device_attach_driver+0x10/0x10 [ 544.312080][T12785] ? __pfx_bus_for_each_drv+0x10/0x10 [ 544.317448][T12785] ? lockdep_hardirqs_on+0x7a/0x110 [ 544.322647][T12785] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 544.328452][T12785] __device_attach+0x2c5/0x450 [ 544.333216][T12785] ? __pfx___device_attach+0x10/0x10 [ 544.338495][T12785] ? _raw_spin_unlock+0x28/0x50 [ 544.343343][T12785] device_initial_probe+0xa1/0xd0 [ 544.348362][T12785] bus_probe_device+0x12a/0x220 [ 544.353206][T12785] device_add+0x7e9/0xbb0 [ 544.357599][T12785] usb_new_device+0xa08/0x16f0 [ 544.362388][T12785] ? __pfx_usb_new_device+0x10/0x10 [ 544.367593][T12785] ? _raw_spin_unlock_irq+0x23/0x50 [ 544.372793][T12785] hub_event+0x2a1c/0x4f30 [ 544.377244][T12785] ? __pfx_hub_event+0x10/0x10 [ 544.381999][T12785] ? process_scheduled_works+0xa70/0x1860 [ 544.387719][T12785] ? process_scheduled_works+0xa70/0x1860 [ 544.393437][T12785] ? process_scheduled_works+0xa70/0x1860 [ 544.399412][T12785] process_scheduled_works+0xb5d/0x1860 [ 544.404974][T12785] ? __pfx_process_scheduled_works+0x10/0x10 [ 544.410945][T12785] ? assign_work+0x3d5/0x5e0 [ 544.415534][T12785] worker_thread+0xa53/0xfc0 [ 544.420141][T12785] kthread+0x389/0x470 [ 544.424203][T12785] ? __pfx_worker_thread+0x10/0x10 [ 544.429298][T12785] ? __pfx_kthread+0x10/0x10 [ 544.433881][T12785] ret_from_fork+0x514/0xb70 [ 544.438462][T12785] ? __pfx_ret_from_fork+0x10/0x10 [ 544.443562][T12785] ? __switch_to+0xc79/0x1410 [ 544.448234][T12785] ? __pfx_kthread+0x10/0x10 [ 544.452815][T12785] ret_from_fork_asm+0x1a/0x30 [ 544.457585][T12785] [ 544.461156][T12785] Kernel Offset: disabled [ 544.465479][T12785] Rebooting in 86400 seconds..