last executing test programs: 10.686286847s ago: executing program 2 (id=1496): r0 = fsopen(&(0x7f0000000200)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0..:\x00', 0x0) dup(0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) listen(r2, 0x5) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "12"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) close(r2) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000800)={0x2c, &(0x7f00000006c0)={0x30f3f8cc8623674a, 0x16, 0x4, "becd5c86"}, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x18, 0x1401, 0x11, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1d}]}, 0x18}, 0x1, 0x0, 0x0, 0x40040800}, 0x48000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xfc, 0x1, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFQA_PAYLOAD={0x16, 0xa, "72fa06dcba1db6aaa7a560043b2438e80593"}, @NFQA_EXP={0xc4, 0xf, 0x0, 0x1, [@CTA_EXPECT_MASTER={0xac, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_HELP_NAME={0xb, 0x6, 'amanda\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7fffffff}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x4}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x5c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8014}, 0x40c0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x145000, 0x0) gettid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) msgget(0x2, 0x624) msgctl$IPC_RMID(0x0, 0x0) 9.639571068s ago: executing program 0 (id=1500): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x0, 0x0, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x94) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000300)={'erspan0\x00', 0x0, 0x7800, 0x1, 0xff, 0x3, {{0xf, 0x4, 0x1, 0x1, 0x3c, 0x65, 0x0, 0xf2, 0x2d, 0x0, @rand_addr=0x64010102, @multicast2, {[@ssrr={0x89, 0x7, 0xab, [@loopback]}, @end, @lsrr={0x83, 0x1f, 0xfd, [@remote, @multicast1, @private=0xa010101, @empty, @multicast2, @multicast1, @loopback]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYRES64=r1, @ANYRES32, @ANYBLOB="0000000000000000b70200000200", @ANYRES32, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r2, 0x0, 0x0, 0x800) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0xd0f, 0x0, 0x25dfdbfc, {0x60, 0x0, 0x0, r8, {}, {0x1, 0x2}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r10, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r11, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_MARK_MASK={0x8}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_ZONE={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x1004}, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) connect(r12, &(0x7f00000001c0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7}, 0x80) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "0e"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 8.614760561s ago: executing program 0 (id=1504): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000026c0)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xd, 0xfff3}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8048}, 0x20004800) 8.444597149s ago: executing program 0 (id=1505): syz_emit_ethernet(0x11, &(0x7f0000000340)={@broadcast, @empty, @void, {@llc_tr={0x11, {@llc={0x2, 0xf0, "11"}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001500)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0xfffffffc, 0x0, 0x800000, 0x3, 0x2, 0x2, 0x3, 0x20000}}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff0, 0xb}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0xff, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d0000000000003f000a00000000000006"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4004890) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x800) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000f40)={'pimreg\x00', 0x6002}) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000180)={0xc02e170c58ffac5b, 0x9, [@link_local, @empty, @remote, @remote, @remote, @remote, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @broadcast]}) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x18, 0x1418, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x200040c0}, 0x400c044) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000001740)='#\xae\xa5\xdb\x7foq\xa3l<\xeb\x1c\xe3\xc0\x95 [#g\xe1\x17rQ)R6l\xfd\xd3\xc6\xa4\xab,C\xce\xc7\x15\xc0\xd42\xfb%\xaf\xca\x7f .\xc3G\x9e\xd7\x1a\x9ec\x8fs.q0#\x1bO\xe1\x10.\x9b\f\xa2\xe9\xbbt\x01\xafP\xff\xaf\xd7\xae/\x1d\x1f\xf9\x04\x81d\xa4\xb1\xa9=\xe4\x88c\xfdJ\xa5\x8b\x9e.(\xa1\xa5\x8d\xd3\x12\x87K\xbf\x02@\xba\x98a?& ;p\xfd\xfcHn\xbd\x02\xb1\x11\x95\x9d\x98\xb3{x\xe6\xd4\'\xc7\x8b\xe4O\xb5\xf8\x19\x82\x1b\xaef\xe3\xb4\x11Y\xbc\xd7\xf3\xd66\x81\x10\xbc\xda\xcf\xc3+(\t7\xaa\xa3\r=\xc0\xc0\x19w[\xb0Xy\xe6\xbd\x82\x00\xb9\x88\x7f\xc8\x90\xf4\xb3\x00\x00\x00\x00\x00\x00\x00\x18\xd9\xcc\xd6\xbb\xea\xb6Y\xe8\xbb8\xe9\x00\xe6\xc4Q>{Y\n\xcc\x1c\xc0=\x1e\xbfWI\xd1\x8c\x11\x1d/\x16\xe3\xd6\x96\x13B!\xd1\xa6\xe8\xfd\xb8\xde\xa5f\xcf\xbb~M\xbd\xc4\xd4<,Cm\x13\xf5\xe2\xb1CUJ\x9c\n', 0x242102, 0x0, 0x4, 0x0, 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x24000040) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x30, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x40, 0x8}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0xc011}, 0x40000) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10000, 0x10000}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x4}, {0xfce0, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x2}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xffec, 0x3}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xffff, 0xd}}]}}]}, 0x54}}, 0x4004000) 8.28345712s ago: executing program 2 (id=1507): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x923]}, 0x8) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x400, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000002100), 0x810005, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080), 0x111, 0x6}}, 0x20) mmap$IORING_OFF_SQ_RING(0x1000000, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, 0x0, &(0x7f0000000280)=0x54) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b0400000000000000000200000028000480240001800a00010072616e676500000014f60182080001400000001208000240000000010900010073797a30000000000900020073797a3200000000140000001100010000000020000000000300000a"], 0x7c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4c850) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32], 0x20) 7.784212894s ago: executing program 1 (id=1510): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x6, &(0x7f0000000300)=0x0) r2 = eventfd2(0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e24, 0x4, @private1, 0x9}}, 0x7, 0x4, 0x2, 0x3, 0x54, 0x6, 0xf5}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) 7.684864512s ago: executing program 2 (id=1511): r0 = syz_usb_connect(0x5, 0x46, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_connect$midi(0x5, 0xcc, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0xa92, 0x1020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xba, 0x1, 0x1, 0x0, 0x30, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x5, 0x1, 0x3, 0x30, 0x8, [@midi_out_jack={0x19, 0x24, 0x3, 0x2, 0xe, 0x9, [{0x0, 0x36}, {0xf, 0x80}, {0xf, 0x1}, {0x5, 0x83}, {0x8, 0x1f}, {0x58, 0x1}, {0x3, 0x1d}, {0x5, 0x4}, {0x9, 0x2}], 0x5}, @midi_out_jack={0x13, 0x24, 0x3, 0x2, 0x80, 0x6, [{0xfc, 0x8}, {0xf9, 0x8}, {0xa6, 0x4}, {0x9, 0xff}, {0x6, 0x5}, {0x8, 0x86}], 0x1}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x22, 0x5}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x81, 0x8}, @ms_header={0x7, 0x24, 0x1, 0x4, 0x7}], [{{0x9, 0x5, 0xd, 0x10, 0x39f, 0xf2, 0x4, 0xff, {0x4}}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0xb1, 0x2, 0x0, {0xf, 0x25, 0x1, 0xb, "8dbe2dec0f9bd09418a5a1"}}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x3, 0x61, 0x0, {0x14, 0x25, 0x1, 0x10, "ab2dbfa0d1e5c051475f7a1a46c12867"}}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0xa1, 0xf6, 0x9, {0x9, 0x25, 0x1, 0x5, "9db69d25ad"}}}, {{0x9, 0x5, 0xf, 0x8, 0x20, 0x7, 0x8a, 0x3, {0xc, 0x25, 0x1, 0x8, "02d81f7183fa9424"}}}]}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x201, 0x2, 0xf0, 0x9, 0x40, 0x9}, 0x9c, &(0x7f0000000240)={0x5, 0xf, 0x9c, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x6, 0x4, 0x689}, @generic={0x6d, 0x10, 0xa, "1693d218e85b11f7d89a98038f90c8ccb672766ad426ef87b23e6e10851a2d121b6edae237a7db2f3b7c57cd28e85d5169396e0abc6f5efdab68ebbb92bb4b13b1b96e898408ba146165020ea48373af56d8b7d397ed17a22367529c689f026a325b05f9ad77acc2ffcf"}, @ssp_cap={0x20, 0x10, 0xa, 0x7, 0x5, 0x68, 0x78f, 0xd, [0xffc000, 0x0, 0xff0000, 0xffffc0, 0xc030]}]}, 0x2, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x205f}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0xc09}}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f000002f000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f000005f000/0x3000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000144000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xfffffffffffffee3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7.240002026s ago: executing program 3 (id=1513): syz_usb_connect(0x5, 0x27, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0) syz_open_dev$I2C(0x0, 0x1, 0x2003) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000001540)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x1000, 0x7, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), r1) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x298, 0x150, 0x168, 0x9, 0x150, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0xa8, 0xf0, 0x0, {0x0, 0x28e}}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2181) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000380)={@mcast1, 0x0}, &(0x7f00000003c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f00000006c0)={0x120, r2, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x47}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}]}, 0x120}, 0x1, 0x0, 0x0, 0x2404c001}, 0x10) 7.151777499s ago: executing program 1 (id=1514): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900180073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1a3a7"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 6.891361665s ago: executing program 1 (id=1516): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x81c0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffb, 0xab, 0xb, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000500)="400600000400b11abcc54f550016422d5c852132c0232566543f80ffd6a90fe0c60e52708c938cf3afe9fbdcb837e027b3e80d89150cc4a555f532f494044b84e0ea138ba2c0222d653595a76c983965db2c8a4dd5169c1489d75fdc90f12556e3c5e0aeb30bce10d52a8d3b870052661b4f7b49b073e9e7156351feaddd4d18dc9c381a0c97f4f62721f586146fcb3e6c342a4230e07e8e26147bf83cf4e62ae74352a1dd63d8e8eaab1f", 0x0, 0x3, 0x3b, 0xffffffffffffffff, 0x0}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x30, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000180)={0x4000, r2}, 0x0) r4 = syz_io_uring_setup(0x31c5, &(0x7f0000000140)={0x0, 0xd73c, 0x2, 0x1}, &(0x7f0000000080), &(0x7f00000003c0), &(0x7f0000000000)) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x20, 0x27, 0x2, 0x0, 0x0, r4}, 0x0, 0x0, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r5, 0x4001af84, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r3, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = gettid() sched_getaffinity(r7, 0x8, &(0x7f0000000000)) ftruncate(r6, 0x1) r8 = syz_ublk_setup_io_uring(0x23, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xffffffff, 0x1e5}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) ftruncate(r0, 0x1) ftruncate(r2, 0x1) 6.425611133s ago: executing program 1 (id=1518): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x3c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$inet(0x2, 0x80001, 0x84) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) 6.305867532s ago: executing program 0 (id=1519): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) ppoll(&(0x7f0000000240)=[{r0, 0x2280}], 0x1, 0x0, 0x0, 0x0) write$P9_RSTATu(r0, &(0x7f0000000280)={0x21f, 0x2, 0x0, {{0x500, 0xdd, 0x0, 0x4, {}, 0x3810000, 0x0, 0x7, 0x0, 0x1b, '\x04nod\xff\x15\t\x00\x00\x00\x00\x00\x00\x00\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, '\xc6GtZ\xc8YR\xbf\xe0\xb0pg>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4', 0x2, '\b\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0xb6, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xff\xff^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89X\x12\xd7\xdc.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\x8a\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00d\t\x03K\xa9\xb5\x1eao\xd1\xf9$\xda\xdc\xd8\xd9\xc1\x12\xe3\x85h\xc8`\xefhR\xcc\x01>vQ\xb8\xd5k\xb3\x0el\xed5\x06\xd1\x06]\xd2\x8fsa\xf8\x01\xe1\xc5\x94\xea\x91\b\x11\xdb\x1a\xb1~\b\xa1)\xb7\x88\xdd8\xa8\xaf2\xfe=\x8e\"\x81\xf0\xf9*m\xfe\x90\x8f\xecv\x99\xa0b\xce\x9ac\xa2\b\x97\t\xba\xb1!\x14C\x03\xa6\xf0}P\b\x8d\xc5a =!Fy-\xb9 ', 0x0, 0x0, 0xee01}}, 0x21e) (fail_nth: 5) 6.137660248s ago: executing program 4 (id=1520): syz_usb_connect(0x5, 0x27, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0) syz_open_dev$I2C(0x0, 0x1, 0x2003) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x80}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0x2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x20}]}]}, 0xfc}}, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000001540)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x1000, 0x7, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), r1) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x298, 0x150, 0x168, 0x9, 0x150, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0xa8, 0xf0, 0x0, {0x0, 0x28e}}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2181) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000380)={@mcast1, 0x0}, &(0x7f00000003c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f00000006c0)={0x120, r2, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x47}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}]}, 0x120}, 0x1, 0x0, 0x0, 0x2404c001}, 0x10) 5.832055543s ago: executing program 2 (id=1521): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file1\x00', 0x40) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="5953fdfffffffddbdf256b00000008000300e9777fe6b83d49b9ffc9f7a4891b35d7e46049a78d061a70a7890b68610516132bb57ccfd5109c95fa4814aaf3157ee79c12d92f3fa681a7f139735e34368daf7850bcec645f7f50c2c34e62851ae30500000012535b187850640a3eb2e6b0e515dc737af347dff142387438f8756faea1fabedbf566e5feba08aaf09d9520c1e2e5832c7c63d69dbde6d3510a37b218ab6f7c93975f", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa0, r0, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0xfff, 0x5e}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'ip6_vti0\x00'}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_vlan\x00'}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'ip_vti0\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'rose0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0xa0}}, 0x4004000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x503}, 0x20}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r5, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000500)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188", 0x8}], 0x1}, 0x8084) syz_usb_connect(0x0, 0x4c, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000202000040d804820000010000000109023a00020100c0320904000001020201000524001001052406000107058103ffff0a09040100020a00000007050202ffff000705"], 0x0) dup(0xffffffffffffffff) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r7, 0x0) syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000013c0)={0x68, r6, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x6, @media='ib\x00'}}}}, 0x68}}, 0x0) 5.578267696s ago: executing program 3 (id=1522): socket$inet(0x2, 0x800, 0x80000001) socket$unix(0x1, 0x1, 0x0) add_key$user(&(0x7f0000002100), 0x0, &(0x7f00000021c0), 0x0, 0xfffffffffffffffe) add_key$user(0x0, &(0x7f0000002340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000100)='X', 0x1, 0x48000, &(0x7f000005ffe4)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x4, 0x8, 0x0, 0x1, 0x3, 0x6, 0x0, 0x0, 0x63, 0xfd, 0x8, 0x1, 0x0, 0x3}, 0xe) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000340)=""/47, 0x2f}, {&(0x7f0000000380)=""/19, 0x13}], 0x2}, 0xffff}], 0x1, 0x406, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f72"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x100000c2}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000580)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x4, @private0, 0x6}, {0xa, 0x4e20, 0x6, @private0, 0x9}, r3, 0x2}}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000c, 0x90012, 0xffffffffffffffff, 0xbb62c000) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x803ffffc, 0x0, 0x8, 0x2, 0x6, 0x3, 0xfffffffb, 0x38, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x8, 0x300000, 0x800c, 0xe, 0x4623f, 0x0, 0x12001, 0x1ff, 0x8000, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8dac, 0x2, 0xe, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x9, 0xa, 0x5], [0x7, 0x1f, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x2fcd0, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x7, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x1, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0xffff, 0x6, 0x96, 0xfbfffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x6, 0x101, 0x5, 0x7, 0x6, 0x2, 0x6, 0x1, 0x8, 0x7, 0x20200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0xe8, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xffffffb9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0xb7, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x5, 0x400004, 0x3, 0x4, 0x3, 0x8, 0x3, 0xbf23, 0x81, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x1ff, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x7, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x800, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0xbef1, 0x1fc, 0x2851, 0x3b, 0x1ffffffe, 0x5, 0x101, 0xa80a, 0x65f413f9, 0x7, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x3, 0x404, 0x4, 0x10, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x4, 0x7, 0x4edf, 0xfffffffd, 0xa, 0x8001, 0x2, 0xf, 0xf, 0x136, 0x6]}, 0x45c) request_key(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000180), &(0x7f0000000540)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) recvmmsg(r4, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x1, 0x20, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0x13, &(0x7f0000000080)=0x6, 0x0) 5.095416966s ago: executing program 0 (id=1523): syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001280)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000240)=@any_dev={0x3, 0x67a, 0x0, 0x0, 0x1000, 0x3, 0xffffffffffffffff, 0x0, 0xa}}}, &(0x7f0000001300)=0x0) syz_ublk_setup_queues(0xffffffffffffffff, r0, &(0x7f0000000180)={0x0, 0xf27b, 0x4000, 0x1, 0x333}, &(0x7f00000015c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x25bd, 0x4, 0x2, 0x11c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x99c5, 0x4000, 0x1, 0xf5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x678, 0x1000, 0x3, 0x1be}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfd76, 0x40, 0x0, 0x38b}}], 0x4, &(0x7f0000002b40)={0x2e, 0x62, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x0, 0x0, '\x00', {0x0, 0x3f6, 0x0, &(0x7f0000001b40)=@buf_512="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"}}, &(0x7f0000002bc0)) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000206010400000000000000000000000605000100070000000900020073797a300000000014000780080006000000000208001340000000000500050002000000050004000000000005000400010000000d000300686173683a6e6574"], 0x64}, 0x1, 0x0, 0x0, 0x48050}, 0x2000c010) r2 = io_uring_setup(0x1612, &(0x7f0000000100)={0x0, 0x0, 0x100}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206010800000000000000000100000a16000300686173683a6e65742c706f72742c6e65740000000500010007000000050005000a0000000900020073797a310000000005000400000000001400078008000840000000f108000640"], 0x64}, 0x1, 0x0, 0x0, 0x24064800}, 0x0) (async, rerun: 64) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0300000004020000040000000a0000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRESHEX], 0x48) (rerun: 64) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000100)=0x56, 0x1) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x8}]}) (async, rerun: 64) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) (rerun: 64) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000013c0)={0x0, 0x1, 0x3000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) (async, rerun: 64) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x65, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x101, 0x7], 0x100000, 0x240046}) (async, rerun: 64) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, &(0x7f00000000c0)) (async, rerun: 32) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async, rerun: 64) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}], 0x0, 0x1}, 0x20) (async) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x300, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000600)={0x28, 0xa, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x370}) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_usb_connect(0x6, 0x8f, &(0x7f0000000000)=ANY=[@ANYRESDEC=r9], 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001400)={&(0x7f0000001840)=ANY=[@ANYBLOB="600000000e0607020000000000000000000000010900020073797a32000000000900020073797a320000000009000273797a310000000005000100070000000900020073797a300000a37885b0afa4db00000900020073797a32000000000500e895754298884abe49c7dc389ca2543f0e2c"], 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x40440c1) (async) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) r10 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r10, &(0x7f0000002a00)=[{&(0x7f0000000100)=@in={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000780)="ac", 0x1}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="30000000000000008400000001000000000000af7a00020000000000000000000400"/44, @ANYRES32=0x0, @ANYBLOB="18"], 0x48}], 0x1, 0x40) 4.497638138s ago: executing program 4 (id=1524): syz_emit_ethernet(0x9a, &(0x7f0000000a40)={@local, @random="c6eb8947e4e4", @void, {@ipv4={0x800, @udp={{0xa, 0x4, 0x1, 0x19, 0x8c, 0x64, 0x0, 0xcc, 0x11, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x11}, {[@rr={0x7, 0x3, 0x68}, @timestamp={0x44, 0x10, 0x9, 0x0, 0xa, [0x2, 0x33, 0x7c2c]}]}}, {0x4e21, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x0, "72e3524000", "4b4450edff621723f951130e8fff0ee8", {"ffad4543128a133d1adfb08281433146", "1c5100fffeffffffffffe900"}}}}}}}, 0x0) (async, rerun: 32) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) (rerun: 32) r1 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x7, 0x5, 0x2, 0x1000008, 0x5, "000064640000001503fe00", '\x00', "00000200", "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc77c7386afe0374831c1f9", "cf6cce2296b3f853e224c4e0"]}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0x80000000}, {0x60, 0x8}, {0x1, 0x0, 0x4}, {0x3, 0x1}, {0x6, 0x0, 0x0, 0x10000000}]}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000380)={0x1, {{0xa, 0xffff, 0x3, @mcast2, 0x711}}, {{0xa, 0x4e20, 0x7fff, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x9}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000001c0)=ANY=[@ANYRES32=r0], 0x90) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r3, &(0x7f0000e79000)=[{&(0x7f00003fb000)}], 0x1, 0x0) (async, rerun: 64) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) (rerun: 64) syz_usb_control_io$uac1(r4, 0x0, 0x0) (async) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) (async) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) (async) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) fcntl$notify(r6, 0x402, 0x80000004) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4) (async) setsockopt$inet6_int(r7, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4) getsockopt$inet6_buf(r7, 0x29, 0x6, 0x0, &(0x7f0000000380)) (async) r8 = syz_open_procfs(0x0, &(0x7f0000001180)='attr\x00') readv(r8, 0x0, 0x0) (async, rerun: 32) r9 = socket$igmp(0x2, 0x3, 0x2) (rerun: 32) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x5e04, 0x4, 0x90, [0x0, 0x0, 0x200000002500], 0x2, 0x0, &(0x7f0000002500)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000002000000fcffffff00"/144]}, 0x108) (async) write$proc_mixer(r5, &(0x7f0000000280)=ANY=[@ANYBLOB='VOLUME \'Line\' 00008'], 0x2a) (async) close(r5) 4.416289907s ago: executing program 3 (id=1525): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002280)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000400)={0x1, 0x0, &(0x7f0000010000), &(0x7f0000020000), &(0x7f0000018000)}) write(r1, &(0x7f0000018000)="000001", 0x3) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000600)={0x1, r1}) write$tun(r1, &(0x7f0000000800)=ANY=[], 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x3a0, 0xffffffff, 0xf0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x3d, {0x6}}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x2, {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) 4.023452637s ago: executing program 3 (id=1526): syz_usb_connect$uac1(0x7, 0x71, &(0x7f0000000040)=ANY=[@ANYBLOB="00406b1d0101"], 0x0) syz_emit_ethernet(0x5e, &(0x7f0000003680)=ANY=[@ANYBLOB="ffffffffff0bc9d3fed8ed2d97ff015a37973786dd80000000000000fe00000007010000000200000000000000000000000000018900907800000000000000000000000000000001ff0100aafc0100"/93], 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x18) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e7cc6120c4108a81ad7d0102030109021b00010000c00509042300010300000009058503"], 0x0) socket$pptp(0x18, 0x1, 0x2) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000dc0)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="001503"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102882333404f17cf8af4390102030109024500013f06400409044207000e0100010a240107000105ff010302070724050107638c0924030500030406810c2402"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020600) r3 = socket(0x1d, 0x2, 0x6) getsockopt$inet_pktinfo(r3, 0x0, 0x8, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) syz_open_dev$vcsa(0x0, 0x1, 0x44c40) pipe2(0x0, 0x4080) r4 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f00000010c0)={0x100095, 0x70, 0x20000, {r4}}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f0000002040)='net/snmp6\x00') read$FUSE(r5, &(0x7f0000000000)={0x2020}, 0xfffffc7a) mount$fuse(0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c0000000906e6010000000000000000020000000900080073797831000000000500010007000000340007801800018014000000000002060004400004000005000700000006000540462200"/92], 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) msgrcv(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) 3.882829438s ago: executing program 2 (id=1527): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0xffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230000) close(0x3) 3.448238363s ago: executing program 4 (id=1528): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x81c0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffb, 0xab, 0xb, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000500)="400600000400b11abcc54f550016422d5c852132c0232566543f80ffd6a90fe0c60e52708c938cf3afe9fbdcb837e027b3e80d89150cc4a555f532f494044b84e0ea138ba2c0222d653595a76c983965db2c8a4dd5169c1489d75fdc90f12556e3c5e0aeb30bce10d52a8d3b870052661b4f7b49b073e9e7156351feaddd4d18dc9c381a0c97f4f62721f586146fcb3e6c342a4230e07e8e26147bf83cf4e62ae74352a1dd63d8e8eaab1f", 0x0, 0x3, 0x3b, 0xffffffffffffffff, 0x0}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x30, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000180)={0x4000, r2}, 0x0) r4 = syz_io_uring_setup(0x31c5, &(0x7f0000000140)={0x0, 0xd73c, 0x2, 0x1}, &(0x7f0000000080), &(0x7f00000003c0), &(0x7f0000000000)) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x20, 0x27, 0x2, 0x0, 0x0, r4}, 0x0, 0x0, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r5, 0x4001af84, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r3, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = gettid() sched_getaffinity(r7, 0x8, &(0x7f0000000000)) ftruncate(r6, 0x1) r8 = syz_ublk_setup_io_uring(0x23, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xffffffff, 0x1e5}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) ftruncate(r0, 0x1) ftruncate(r2, 0x1) 3.384826526s ago: executing program 2 (id=1529): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$binfmt_script(r1, &(0x7f00000004c0)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xd4\bj@5\x1dN\xe3\rf\xe5W\xcers\x04\x84)\xecq\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\xab\xfa\x032-{\x96{\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19n\xc7\xf2\vIR=T\x05)jIeR}\xecNg\x9b\a \x84\x93\x82\x1d1i\xf0\xa1\xe2\xf6L\xe84\xb6\n\x16\xc7\xa1\xf6\x7f\nl\x969\x99>\xf0\xdd\xfe\x06\xdd\xa5\f\xd3E\xdd\xae-\xf1\xfd\xc4@\x85L\x1e\xd2\x18\xc5TN\x0f\xe6@\xa0\xfd\xdaf\x9d<\xdb\xf1<\xff\xf4]\xd1K\xe1xj\x16\xaaQ(:\xa6'}], 0xa, "c3c7b2e1312e0841e5544d48428c89e0"}, 0xee) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x5b) read$watch_queue(r1, &(0x7f00000002c0)=""/1, 0x1) keyctl$revoke(0x3, r4) ioctl$OCFS2_IOC_GROUP_EXTEND(r5, 0x40046f01, &(0x7f0000000200)=0x1) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fsopen(&(0x7f0000000000)='nfs4\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002140)=ANY=[]) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000d80)) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000080)=0x200000000) r7 = dup2(r6, r6) write$vhost_msg_v2(r7, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/116, 0x74, 0x0, 0x1, 0x2}}, 0x48) write(r1, &(0x7f0000000180)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=n', 0x31) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) 3.139121506s ago: executing program 1 (id=1530): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x4010, r0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x48}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r1 = syz_io_uring_setup(0x11f7, &(0x7f00000012c0)={0x0, 0x7071, 0x80000, 0x0, 0x2f6}, &(0x7f0000001240), &(0x7f0000001180), &(0x7f0000001200)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe"], 0x340a) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000002300)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x3100) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x11, 0x0, &(0x7f00000001c0)) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) ioctl$PPPIOCGCHAN(r6, 0x80047437, &(0x7f0000000040)) recvmmsg(r6, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff0f}, 0xd9db}], 0x1, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r4, &(0x7f0000009c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x9}}], 0x1, 0x404c044) 3.039572568s ago: executing program 4 (id=1531): r0 = syz_usb_connect(0x5, 0x46, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_connect$midi(0x5, 0xcc, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0xa92, 0x1020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xba, 0x1, 0x1, 0x0, 0x30, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x5, 0x1, 0x3, 0x30, 0x8, [@midi_out_jack={0x19, 0x24, 0x3, 0x2, 0xe, 0x9, [{0x0, 0x36}, {0xf, 0x80}, {0xf, 0x1}, {0x5, 0x83}, {0x8, 0x1f}, {0x58, 0x1}, {0x3, 0x1d}, {0x5, 0x4}, {0x9, 0x2}], 0x5}, @midi_out_jack={0x13, 0x24, 0x3, 0x2, 0x80, 0x6, [{0xfc, 0x8}, {0xf9, 0x8}, {0xa6, 0x4}, {0x9, 0xff}, {0x6, 0x5}, {0x8, 0x86}], 0x1}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x22, 0x5}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x81, 0x8}, @ms_header={0x7, 0x24, 0x1, 0x4, 0x7}], [{{0x9, 0x5, 0xd, 0x10, 0x39f, 0xf2, 0x4, 0xff, {0x4}}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0xb1, 0x2, 0x0, {0xf, 0x25, 0x1, 0xb, "8dbe2dec0f9bd09418a5a1"}}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x3, 0x61, 0x0, {0x14, 0x25, 0x1, 0x10, "ab2dbfa0d1e5c051475f7a1a46c12867"}}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0xa1, 0xf6, 0x9, {0x9, 0x25, 0x1, 0x5, "9db69d25ad"}}}, {{0x9, 0x5, 0xf, 0x8, 0x20, 0x7, 0x8a, 0x3, {0xc, 0x25, 0x1, 0x8, "02d81f7183fa9424"}}}]}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x201, 0x2, 0xf0, 0x9, 0x40, 0x9}, 0x9c, &(0x7f0000000240)={0x5, 0xf, 0x9c, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x6, 0x4, 0x689}, @generic={0x6d, 0x10, 0xa, "1693d218e85b11f7d89a98038f90c8ccb672766ad426ef87b23e6e10851a2d121b6edae237a7db2f3b7c57cd28e85d5169396e0abc6f5efdab68ebbb92bb4b13b1b96e898408ba146165020ea48373af56d8b7d397ed17a22367529c689f026a325b05f9ad77acc2ffcf"}, @ssp_cap={0x20, 0x10, 0xa, 0x7, 0x5, 0x68, 0x78f, 0xd, [0xffc000, 0x0, 0xff0000, 0xffffc0, 0xc030]}]}, 0x2, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x205f}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0xc09}}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f000002f000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f000005f000/0x3000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000144000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xfffffffffffffee3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.181218177s ago: executing program 3 (id=1532): syz_usb_connect(0x5, 0x27, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0) syz_open_dev$I2C(0x0, 0x1, 0x2003) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000001540)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x1000, 0x7, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), r1) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x298, 0x150, 0x168, 0x9, 0x150, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0xa8, 0xf0, 0x0, {0x0, 0x28e}}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2181) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000380)={@mcast1, 0x0}, &(0x7f00000003c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f00000006c0)={0x120, r2, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x47}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}]}, 0x120}, 0x1, 0x0, 0x0, 0x2404c001}, 0x10) 1.321751417s ago: executing program 0 (id=1533): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xfa6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000040)=@file={0x0, './file0/file0\x00'}, 0x6e) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x29, 0x86, 0x0, 0x10000002, 0x2e, @private2, @private1, 0x7800, 0x80, 0x5, 0x9}}) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) socket$inet(0x2, 0x2, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f0000000780)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c56722f75705f6964ff2f409bf68365cd6626e236b73dbd261c3b8cc688356e88559023b093a26dc3dd0b594fa0f7921d6806d2eed939317f3972b1402191aae300d98ab0f03889d7fdc353800abc565ded3640676b9242fdded46cfa0ecdbf23070d6019ea10977f10186af00dba4077743cc12d5b5b7533734ec710bee78b5427924fcc43d10988e7f8c37cf0668da69f7819bf89466af04d93b534", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x6) syz_fuse_handle_req(r4, &(0x7f000000bb40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000000200)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x29, 0x80000000, 0x2040000, 0xdd2, 0x7, 0xb, 0x0, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000007b40)="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", 0x2000, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x4, {0x3, 0x4, 0x0, {0x1, 0x7ffffffffffffffc, 0x3, 0x2, 0x8, 0x7, 0x2, 0xfffffff9, 0x404, 0x8000, 0x4, 0x0, 0xffffffffffffffff, 0x9, 0x408}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$incfs_metadata(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) 1.229885787s ago: executing program 4 (id=1534): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x60, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x20000804) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x5, 0xfffffe0000000001, 0xfa11, 0x9}, 0x0) unshare(0x8040480) mmap(&(0x7f00005e9000/0x2000)=nil, 0x2000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, &(0x7f0000000140)="a7563f", 0x3, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="5c050000", @ANYRES16=r2, @ANYBLOB="010028bd700000000000010000002c0508803000008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c06000500f9ff00004c00008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff24000200491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675cac0400800600050003000000200004000a000009000000070000000000000000000000000000000003000000b8030980ac000080060001000a00000014000200ff0100000000000000000000000000010500030002000000060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000200000008000200e00000020500030003000000060001000200000008000200e000000105000300030000000600010002000000080002000a0101020500030002000000060001000200000008000200e0000001050003000200000001000080060001000a00000014000200fe8800000000000000000000000001010500030003000000060001000200000008000200ac1414aa050003000000000064000080060001000a00000014000200000000000000000000000000000000000500030000000000060001000a000000140002000000000000000000000000000000000005000300010000000600010002000000080002000000000005000300020000003c010080060001000a0000001400020000000000000000000000ffffe00000010500030003000000060001000200000008000200ac1e00010500030000000000060001000200000008000200ac1414bb0500030001000000060001000a00000014000200200100000000000000000000000000000500030003000000060001000a00000014000200ff0200000000000000000000000000010500030001000000060001000200000008000200e00000020500030002000000060001000a00000014000200ff0100000000000000000000000000010500030001000000060001000200000008000200640101000500030001000000060001000a00000014000200000000000000000000000000000000010500030002000000060001000a00000014000200fc00000000000000000000000000000105000300020000000400008028000080060001000a0000001400020020010000000000000000000000000001050003000000000040000080060001000200000008000200000000000500030001000000060001000a000000140002000000000000000000000000000000000105000300030000001c000080060001000200000008000200ac1e00010500030002000000a0000080060001000a00000014000200fc02000000000000000000000000000005000300000000000600010002000000080002007f0000010500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000a000000140002000000000000000000000000000000000105000300010000000600010002000000080002000a01010105000300030000001400040002004e227f000001000000000000000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002000c000227734136bbd051f5248b73349484079ac37330b66c8c2d38b23324019124000200f1448a8e528a999aa0105b52a5c9c4640383354baf19b5f39af29b59422afd5524000200e7ff7701b926810da1b5902e7a364627b7e5194a545926646ae03e188b880fed2400020067145cfa4d7b699c1e0846a50afd9ba74e30480f6df0e68218cc108c2128c513060006004e21000014000200776730000000"], 0x55c}, 0x1, 0x0, 0x0, 0x4004840}, 0x2000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000280)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b}) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r3) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x4000004) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000300)='./file0/file0\x00', 0xe, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x1000, @empty}}, 0x0, 0x9, 0x80003fc, 0x0, 0xd2, 0x0, 0x9e}, 0x9c) semtimedop(0x0, &(0x7f0000000100)=[{0x0, 0x1000, 0x1000}], 0x1, 0x0) semtimedop(0x0, &(0x7f0000000340)=[{0x3, 0x6, 0x1800}, {0x1}, {0x0, 0x80, 0x3000}, {0x1, 0x6}], 0x4, &(0x7f0000000380)={0x0, 0x3938700}) socket(0x10, 0x803, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000100)={'macsec0\x00', 0x200}) 695.795536ms ago: executing program 1 (id=1535): socket$inet(0x2, 0x800, 0x80000001) socket$unix(0x1, 0x1, 0x0) add_key$user(&(0x7f0000002100), 0x0, &(0x7f00000021c0), 0x0, 0xfffffffffffffffe) add_key$user(0x0, &(0x7f0000002340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000100)='X', 0x1, 0x48000, &(0x7f000005ffe4)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x4, 0x8, 0x0, 0x1, 0x3, 0x6, 0x0, 0x0, 0x63, 0xfd, 0x8, 0x1, 0x0, 0x3}, 0xe) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000340)=""/47, 0x2f}, {&(0x7f0000000380)=""/19, 0x13}], 0x2}, 0xffff}], 0x1, 0x406, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, 0x0, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000580)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x4, @private0, 0x6}, {0xa, 0x4e20, 0x6, @private0, 0x9}, r3, 0x2}}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000c, 0x90012, 0xffffffffffffffff, 0xbb62c000) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x803ffffc, 0x0, 0x8, 0x2, 0x6, 0x3, 0xfffffffb, 0x38, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x8, 0x300000, 0x800c, 0xe, 0x4623f, 0x0, 0x12001, 0x1ff, 0x8000, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8dac, 0x2, 0xe, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x9, 0xa, 0x5], [0x7, 0x1f, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x2fcd0, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x7, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x1, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0xffff, 0x6, 0x96, 0xfbfffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x6, 0x101, 0x5, 0x7, 0x6, 0x2, 0x6, 0x1, 0x8, 0x7, 0x20200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0xe8, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xffffffb9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0xb7, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x5, 0x400004, 0x3, 0x4, 0x3, 0x8, 0x3, 0xbf23, 0x81, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x1ff, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x7, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x800, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0xbef1, 0x1fc, 0x2851, 0x3b, 0x1ffffffe, 0x5, 0x101, 0xa80a, 0x65f413f9, 0x7, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x3, 0x404, 0x4, 0x10, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x4, 0x7, 0x4edf, 0xfffffffd, 0xa, 0x8001, 0x2, 0xf, 0xf, 0x136, 0x6]}, 0x45c) request_key(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000180), &(0x7f0000000540)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) recvmmsg(r4, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x1, 0x20, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0x13, &(0x7f0000000080)=0x6, 0x0) 121.678682ms ago: executing program 4 (id=1536): socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0xf, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000002c0)=r4, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000700)="d80000001a0081044e81f782db4cb904021d08004f1e81f8d8150019001105142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aebfb0daa7b0cd39e4edbb57a5025ccca9e020000000000000040fad95667e006dcbd63951f215ce3bb9ad809d5e1cace81017f5b5cef443dc3ed0bffece0b42a9ecbee5de6ccd40dd6e4", 0xd8}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r5 = dup(0xffffffffffffffff) inotify_rm_watch(r5, 0x0) ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f0000000040)) r6 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000002200)={0x28, 0x0, 0x0, @my=0x0}, 0x10, 0x800) bind$vsock_stream(r6, 0x0, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r8 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r7, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000002140)={0x50, 0x0, r9, {0x7, 0x27, 0x0, 0x14a4014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) read$FUSE(r7, &(0x7f000000b040)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r7, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r10}, 0x10) syz_fuse_handle_req(r7, 0x0, 0x0, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004980)={0x90, 0xfffffffffffffff5, 0x4, {0x80000000000001, 0x100000000002, 0x5, 0x1ff, 0x800, 0x8, {0x5, 0x3, 0x10001, 0x3ffffffffffffff, 0x7ba, 0x2, 0xf2a1, 0x0, 0x4, 0x2000, 0x3, r11, r12, 0xffffffff, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open_by_handle_at(r8, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c000000810000000000000006"], 0xfeffffff) r13 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r13, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) 0s ago: executing program 3 (id=1537): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902240001000000000904"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x8000040000000002, 0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6cedbd6c}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffffff38}]}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xb8}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f00000002c0)='bridge0\x00') ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000300)='bridge0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'veth0_to_bridge\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000500eb000000000000009f000100000000009794b2b55819b61190c1c300000000000000"], &(0x7f00000000c0)='GPL\x00', 0x2}, 0x90) ioctl$sock_ifreq(r2, 0x89a2, &(0x7f0000000380)={'bridge0\x00', @ifru_ivalue=0x4}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000003c0)={'bridge0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000400)={'veth0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000440)={'veth0_to_bridge\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000480)={'veth0\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) bind$packet(r4, &(0x7f00000004c0)={0x11, 0x300, r3}, 0x14) write(r4, &(0x7f0000000500)="00112233445566778899aabb080045000028000100004011f77dc0a80001c0a8000200500050001400"/54, 0x36) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e20, 0xfffff496, @empty}}, 0x5, 0x400}, 0x90) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$panthor(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r8, 0xc01864c1, &(0x7f0000000280)) kernel console output (not intermixed with test programs): fx_genl_rcv_msg+0x10/0x10 [ 439.251288][T10292] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 439.251333][T10292] ? down_read+0x2be/0x330 [ 439.251362][T10292] genl_rcv+0x28/0x40 [ 439.251394][T10292] netlink_unicast+0x7bd/0x940 [ 439.251432][T10292] netlink_sendmsg+0x813/0xb40 [ 439.251472][T10292] ? __pfx_netlink_sendmsg+0x10/0x10 [ 439.251510][T10292] ? apparmor_socket_sendmsg+0x98/0x360 [ 439.251549][T10292] ? __pfx_netlink_sendmsg+0x10/0x10 [ 439.251578][T10292] sock_sendmsg_nosec+0x13a/0x180 [ 439.251614][T10292] ____sys_sendmsg+0x54e/0x850 [ 439.251644][T10292] ? __pfx_____sys_sendmsg+0x10/0x10 [ 439.251683][T10292] ? import_iovec+0x73/0xa0 [ 439.251712][T10292] ___sys_sendmsg+0x2a5/0x360 [ 439.251737][T10292] ? __lock_acquire+0x6df/0x2e50 [ 439.251765][T10292] ? __pfx____sys_sendmsg+0x10/0x10 [ 439.251830][T10292] ? __fget_files+0x2a/0x420 [ 439.251860][T10292] ? __fget_files+0x3a2/0x420 [ 439.251901][T10292] __x64_sys_sendmsg+0x1b1/0x290 [ 439.251931][T10292] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 439.251987][T10292] do_syscall_64+0x166/0x520 [ 439.252021][T10292] ? trace_irq_disable+0x3b/0x140 [ 439.252042][T10292] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.252067][T10292] ? clear_bhb_loop+0x70/0xc0 [ 439.252096][T10292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.252125][T10292] RIP: 0033:0x7fac8b39e159 [ 439.252147][T10292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 439.252167][T10292] RSP: 002b:00007fac8c246028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 439.252192][T10292] RAX: ffffffffffffffda RBX: 00007fac8b625fa0 RCX: 00007fac8b39e159 [ 439.252210][T10292] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 439.252226][T10292] RBP: 00007fac8c246090 R08: 0000000000000000 R09: 0000000000000000 [ 439.252241][T10292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 439.252255][T10292] R13: 00007fac8b626038 R14: 00007fac8b625fa0 R15: 00007fac8b74fa48 [ 439.252291][T10292] [ 439.494079][ T7500] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 439.704910][ T7500] usb 5-1: Using ep0 maxpacket: 8 [ 439.710704][ T7500] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 439.721350][ T7500] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 439.730297][ T7500] usb 5-1: config 179 has no interface number 0 [ 439.730352][ T7500] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 439.730382][ T7500] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 439.730412][ T7500] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 439.730441][ T7500] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 439.730479][ T7500] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 439.730527][ T7500] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.826983][T10286] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 440.182389][ T7500] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input70 [ 440.250281][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.257097][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.615982][T10307] ip6gre1: entered allmulticast mode [ 440.622380][ T3312] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 440.827693][T10286] ip6t_srh: unknown srh match flags 4000 [ 441.284248][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 441.284261][ T5718] usb 5-1: USB disconnect, device number 93 [ 441.284384][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 441.361112][T10326] netlink: 'syz.1.1287': attribute type 16 has an invalid length. [ 441.372414][T10326] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1287'. [ 441.553580][ T7500] usb 1-1: new full-speed USB device number 88 using dummy_hcd [ 441.712030][ T7500] usb 1-1: unable to get BOS descriptor or descriptor too short [ 441.720514][ T7500] usb 1-1: not running at top speed; connect to a high speed hub [ 441.720567][ T7500] usb 1-1: New USB device found, idVendor=0499, idProduct=105c, bcdDevice= 0.40 [ 441.739559][ T7500] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 441.782211][ T7500] usb 1-1: string descriptor 0 read error: -22 [ 441.782381][ T7500] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.824810][T10328] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 441.836693][ T7500] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 442.294063][T10342] vivid-000: disconnect [ 442.733953][ T5714] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 442.903368][ T5714] usb 2-1: Using ep0 maxpacket: 16 [ 442.909357][ T5714] usb 2-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 442.921741][ T5714] usb 2-1: config 166 has an invalid interface number: 177 but max is 1 [ 442.931861][ T5714] usb 2-1: config 166 has an invalid interface number: 34 but max is 1 [ 442.940497][ T5714] usb 2-1: config 166 has no interface number 0 [ 442.947134][ T5714] usb 2-1: config 166 has no interface number 1 [ 442.953737][ T5714] usb 2-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 442.965226][ T5714] usb 2-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 442.965280][ T5714] usb 2-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 442.965311][ T5714] usb 2-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 442.965342][ T5714] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 442.965373][ T5714] usb 2-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 442.965401][ T5714] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 442.965430][ T5714] usb 2-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 442.965459][ T5714] usb 2-1: config 166 interface 177 has no altsetting 0 [ 442.965478][ T5714] usb 2-1: config 166 interface 34 has no altsetting 0 [ 443.024569][ T5714] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.036126][ T5714] usb 2-1: Product: syz [ 443.036151][ T5714] usb 2-1: Manufacturer: syz [ 443.036174][ T5714] usb 2-1: SerialNumber: syz [ 443.088996][T10343] vivid-000: reconnect [ 443.329404][ T5714] ums-realtek 2-1:166.177: USB Mass Storage device detected [ 443.501653][ T5714] ums-realtek 2-1:166.34: USB Mass Storage device detected [ 443.610781][ T5714] ums-realtek 2-1:166.34: probe with driver ums-realtek failed with error -5 [ 443.631176][ T5714] uvcvideo 2-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 443.631233][ T5714] uvcvideo 2-1:166.34: No valid video chain found. [ 443.686198][ T5714] usb 2-1: USB disconnect, device number 88 [ 444.068923][ T5714] usb 1-1: USB disconnect, device number 88 [ 444.381983][T10358] input: syz1 as /devices/virtual/input/input71 [ 444.483628][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 444.687449][T10366] ip6gre1: entered allmulticast mode [ 444.714190][ T2230] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 445.065582][T10372] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1293'. [ 445.081978][T10372] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1293'. [ 445.599635][T10377] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1298'. [ 446.613821][ T5718] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 446.688082][ T7500] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 446.753478][ T5718] usb 2-1: device descriptor read/64, error -71 [ 446.843492][ T7500] usb 1-1: Using ep0 maxpacket: 32 [ 446.849663][ T7500] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 446.860423][ T7500] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.860473][ T7500] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.860520][ T7500] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.898079][ T7500] usb 1-1: config 0 descriptor?? [ 446.914526][ T7500] hub 1-1:0.0: USB hub found [ 446.993603][ T5718] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 447.063780][ T7502] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 447.133502][ T5718] usb 2-1: device descriptor read/64, error -71 [ 447.213983][ T7502] usb 3-1: Using ep0 maxpacket: 32 [ 447.220483][ T7502] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 447.238333][ T7502] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.238413][ T7502] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.238488][ T7502] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.255098][ T5718] usb usb2-port1: attempt power cycle [ 447.281516][ T7502] usb 3-1: config 0 descriptor?? [ 447.301010][ T7502] hub 3-1:0.0: USB hub found [ 447.311219][T10397] nvme_fabrics: unknown parameter or missing value '#! 1R?&n%~[6=p͊yz\Uj@5NfWrs)q' in ctrl creation request [ 447.559943][T10399] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1304'. [ 447.594332][ T5718] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 447.621517][ T5718] usb 2-1: device descriptor read/8, error -71 [ 447.629706][ T7500] hub 1-1:0.0: config failed, can't read hub descriptor (err -90) [ 447.856513][ T5718] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 447.885381][ T5718] usb 2-1: device descriptor read/8, error -71 [ 447.994013][ T5718] usb usb2-port1: unable to enumerate USB device [ 448.397917][ T7502] hub 3-1:0.0: config failed, can't read hub descriptor (err -90) [ 448.643825][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 448.873763][ T7505] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 449.023885][ T7505] usb 5-1: Using ep0 maxpacket: 16 [ 449.030187][ T7505] usb 5-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 449.042309][ T7505] usb 5-1: config 166 has an invalid interface number: 177 but max is 1 [ 449.042357][ T7505] usb 5-1: config 166 has an invalid interface number: 34 but max is 1 [ 449.042431][ T7505] usb 5-1: config 166 has no interface number 0 [ 449.042456][ T7505] usb 5-1: config 166 has no interface number 1 [ 449.042525][ T7505] usb 5-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 449.042583][ T7505] usb 5-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 449.042624][ T7505] usb 5-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 449.042656][ T7505] usb 5-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 449.042689][ T7505] usb 5-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 449.042755][ T7505] usb 5-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 449.042794][ T7505] usb 5-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 255, changing to 11 [ 449.042846][ T7505] usb 5-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid maxpacket 59391, setting to 1024 [ 449.042912][ T7505] usb 5-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 449.042948][ T7505] usb 5-1: config 166 interface 177 has no altsetting 0 [ 449.042975][ T7505] usb 5-1: config 166 interface 34 has no altsetting 0 [ 449.166367][ T7505] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.166432][ T7505] usb 5-1: Product: syz [ 449.166449][ T7505] usb 5-1: Manufacturer: syz [ 449.166467][ T7505] usb 5-1: SerialNumber: syz [ 449.222982][T10397] nvme nvme0: failed to connect socket: -512 [ 449.508619][ T7505] ums-realtek 5-1:166.177: USB Mass Storage device detected [ 449.716759][ T7505] ums-realtek 5-1:166.34: USB Mass Storage device detected [ 449.734584][T10406] nvme_fabrics: unknown parameter or missing value '#! 1R?&n%~[6=p͊yz\Uj@5NfWrs)q' in ctrl creation request [ 449.864381][ T7505] ums-realtek 5-1:166.34: probe with driver ums-realtek failed with error -5 [ 449.886431][ T7505] uvcvideo 5-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 449.894459][ T7505] uvcvideo 5-1:166.34: No valid video chain found. [ 449.966162][ T7505] usb 5-1: USB disconnect, device number 94 [ 450.483731][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 450.538071][T10408] nvme nvme0: failed to connect socket: -111 [ 451.773343][ T7505] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 451.934202][ T7505] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 451.945760][ T7505] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 451.945892][ T7505] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.966394][ T7505] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 451.966473][ T7505] usb 4-1: Manufacturer: syz [ 452.010827][ T7505] usb 4-1: config 0 descriptor?? [ 452.403479][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 452.483738][ T7505] rc_core: IR keymap rc-hauppauge not found [ 452.483786][ T7505] Registered IR keymap rc-empty [ 452.496837][ T7505] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 452.515243][ T7505] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input72 [ 452.649915][ T7500] usbhid 1-1:0.0: can't add hid device: -32 [ 452.650127][ T7500] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 452.863977][ T7500] usb 4-1: USB disconnect, device number 96 [ 453.338170][T10423] fuse: Unknown parameter 'grop_id' [ 453.451877][ T7502] usbhid 3-1:0.0: can't add hid device: -32 [ 453.452025][ T7502] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 453.495585][ T7500] usb 1-1: USB disconnect, device number 89 [ 454.126088][T10455] usb usb7: usbfs: process 10455 (syz.4.1314) did not claim interface 0 before use [ 454.135222][ T5717] usb 3-1: USB disconnect, device number 99 [ 454.523496][ T7500] usb 4-1: new full-speed USB device number 97 using dummy_hcd [ 454.571164][ T31] audit: type=1326 audit(1788552997.479:1710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10443 comm="syz.0.1312" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f46d179e159 code=0x0 [ 454.989209][T10454] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 455.397992][T10471] FAULT_INJECTION: forcing a failure. [ 455.397992][T10471] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 455.398074][T10471] CPU: 0 UID: 0 PID: 10471 Comm: syz.1.1319 Not tainted syzkaller #0 PREEMPT(full) [ 455.398102][T10471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 455.398118][T10471] Call Trace: [ 455.398128][T10471] [ 455.398139][T10471] dump_stack_lvl+0xe8/0x150 [ 455.398179][T10471] should_fail_ex+0x410/0x560 [ 455.398225][T10471] _copy_from_user+0x2d/0xb0 [ 455.398254][T10471] ___sys_sendmsg+0x1c6/0x360 [ 455.398281][T10471] ? __lock_acquire+0x6df/0x2e50 [ 455.398311][T10471] ? __pfx____sys_sendmsg+0x10/0x10 [ 455.398374][T10471] ? __fget_files+0x2a/0x420 [ 455.398405][T10471] ? __fget_files+0x3a2/0x420 [ 455.398446][T10471] __x64_sys_sendmsg+0x1b1/0x290 [ 455.398477][T10471] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 455.398525][T10471] do_syscall_64+0x166/0x520 [ 455.398560][T10471] ? trace_irq_disable+0x3b/0x140 [ 455.398583][T10471] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.398607][T10471] ? clear_bhb_loop+0x70/0xc0 [ 455.398637][T10471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.398661][T10471] RIP: 0033:0x7f0fc119e159 [ 455.398683][T10471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 455.398704][T10471] RSP: 002b:00007f0fc2100028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 455.398731][T10471] RAX: ffffffffffffffda RBX: 00007f0fc1425fa0 RCX: 00007f0fc119e159 [ 455.398755][T10471] RDX: 0000000000000000 RSI: 00002000001a0000 RDI: 0000000000000003 [ 455.398770][T10471] RBP: 00007f0fc2100090 R08: 0000000000000000 R09: 0000000000000000 [ 455.398786][T10471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 455.398801][T10471] R13: 00007f0fc1426038 R14: 00007f0fc1425fa0 R15: 00007f0fc154fa48 [ 455.398836][T10471] [ 455.565714][ T7505] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 455.753384][ T7505] usb 3-1: Using ep0 maxpacket: 8 [ 455.763668][ T7505] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 455.786657][ T7505] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 455.786713][ T7505] usb 3-1: config 0 has no interface number 0 [ 455.786808][ T7505] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 455.786841][ T7505] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 455.786910][ T7505] usb 3-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 455.786946][ T7505] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 455.786980][ T7505] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 455.883150][ T7505] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.883200][ T7505] usb 3-1: Product: syz [ 455.883295][ T7505] usb 3-1: Manufacturer: syz [ 455.883318][ T7505] usb 3-1: SerialNumber: syz [ 455.943374][ T7505] usb 3-1: config 0 descriptor?? [ 456.211931][ T7505] iowarrior 3-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 456.422819][T10469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.436073][T10469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.444779][T10473] FAULT_INJECTION: forcing a failure. [ 456.444779][T10473] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 456.444835][T10473] CPU: 1 UID: 0 PID: 10473 Comm: syz.1.1320 Not tainted syzkaller #0 PREEMPT(full) [ 456.444862][T10473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 456.444889][T10473] Call Trace: [ 456.444926][T10473] [ 456.444964][T10473] dump_stack_lvl+0xe8/0x150 [ 456.445061][T10473] should_fail_ex+0x410/0x560 [ 456.445175][T10473] _copy_from_user+0x2d/0xb0 [ 456.445251][T10473] kstrtouint_from_user+0xd6/0x180 [ 456.445349][T10473] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 456.445459][T10473] ? lock_acquire+0x115/0x350 [ 456.445528][T10473] proc_fail_nth_write+0x8e/0x210 [ 456.445625][T10473] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 456.445751][T10473] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 456.445836][T10473] vfs_write+0x296/0xba0 [ 456.445943][T10473] ? __pfx_vfs_write+0x10/0x10 [ 456.446039][T10473] ? __fget_files+0x2a/0x420 [ 456.446125][T10473] ? __fget_files+0x3a2/0x420 [ 456.446182][T10473] ? __fget_files+0x2a/0x420 [ 456.446285][T10473] ksys_write+0x150/0x270 [ 456.446387][T10473] ? __pfx_ksys_write+0x10/0x10 [ 456.446521][T10473] do_syscall_64+0x166/0x520 [ 456.446609][T10473] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.446683][T10473] ? clear_bhb_loop+0x70/0xc0 [ 456.446758][T10473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.446816][T10473] RIP: 0033:0x7f0fc115e98e [ 456.446865][T10473] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 456.446924][T10473] RSP: 002b:00007f0fc20fffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 456.446974][T10473] RAX: ffffffffffffffda RBX: 00007f0fc21006c0 RCX: 00007f0fc115e98e [ 456.447028][T10473] RDX: 0000000000000001 RSI: 00007f0fc21000a0 RDI: 0000000000000004 [ 456.447062][T10473] RBP: 00007f0fc2100090 R08: 0000000000000000 R09: 0000000000000000 [ 456.447105][T10473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 456.447138][T10473] R13: 00007f0fc1426038 R14: 00007f0fc1425fa0 R15: 00007f0fc154fa48 [ 456.447218][T10473] [ 456.584143][ T7529] usb 3-1: USB disconnect, device number 100 [ 456.885806][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 457.399192][ T7500] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 457.399265][ T7500] usb 4-1: no configurations [ 457.399306][ T7500] usb 4-1: can't read configurations, error -22 [ 458.233696][ T7500] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 458.383743][ T7500] usb 4-1: Using ep0 maxpacket: 32 [ 458.390586][ T7500] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 458.401642][ T7500] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.411471][ T7505] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 458.425114][ T7500] usb 4-1: config 0 descriptor?? [ 458.434660][ T7500] gspca_main: sunplus-2.14.0 probing 041e:400b [ 458.563548][ T7505] usb 5-1: Using ep0 maxpacket: 32 [ 458.571600][ T7505] usb 5-1: unable to get BOS descriptor or descriptor too short [ 458.571709][ T7505] usb 5-1: New USB device found, idVendor=0a67, idProduct=5011, bcdDevice= 0.40 [ 458.592825][ T7505] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 458.603163][ T7505] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 458.613752][ T7502] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 458.629159][ T7505] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.629206][ T7505] usb 5-1: Product: syz [ 458.629266][ T7505] usb 5-1: Manufacturer: syz [ 458.629288][ T7505] usb 5-1: SerialNumber: syz [ 458.774401][ T7502] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 458.791461][ T7502] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.800099][ T7502] usb 1-1: Product: syz [ 458.804505][ T7502] usb 1-1: Manufacturer: syz [ 458.810980][ T7502] usb 1-1: SerialNumber: syz [ 458.862808][ T10] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 458.920305][T10493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.928270][T10493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.023126][T10502] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 459.023159][T10502] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 459.040294][ T7533] usb 3-1: new full-speed USB device number 101 using dummy_hcd [ 459.061318][T10502] vhci_hcd vhci_hcd.0: Device attached [ 459.099292][ T5714] usb 1-1: USB disconnect, device number 90 [ 459.120778][T10505] vhci_hcd vhci_hcd.0: port 0 already used [ 459.127813][ T7505] usb 5-1: 0:1 : does not exist [ 459.162246][T10503] vhci_hcd: connection closed [ 459.179668][ T13] vhci_hcd vhci_hcd.1: stop threads [ 459.182613][ T13] vhci_hcd vhci_hcd.1: release socket [ 459.182818][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 459.226322][ T7505] usb 5-1: USB disconnect, device number 95 [ 459.236721][ T7533] usb 3-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=a4.72 [ 459.266604][ T7533] usb 3-1: config 2 has an invalid descriptor of length 64, skipping remainder of the config [ 459.271792][ T7533] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.297599][ T5763] udevd[5763]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 459.356847][ T7500] gspca_sunplus: reg_r err -71 [ 459.356956][ T7500] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 459.373399][ T7500] usb 4-1: USB disconnect, device number 98 [ 459.905307][T10516] IPVS: set_ctl: invalid protocol: 115 224.0.0.2:20003 [ 459.933033][ T10] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 459.933304][ T10] ath9k_htc: Failed to initialize the device [ 459.953090][ T5714] usb 1-1: ath9k_htc: USB layer deinitialized [ 459.962531][T10517] nvme_rdma: malformed src address passed: 1270.0.1 [ 459.966651][T10523] netlink: 'syz.1.1334': attribute type 1 has an invalid length. [ 460.089887][T10523] 8021q: adding VLAN 0 to HW filter on device bond3 [ 460.182236][T10524] bond3: (slave gretap1): making interface the new active one [ 460.196141][T10524] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 460.270356][ T7533] usb 3-1: string descriptor 0 read error: -71 [ 460.279921][ T7533] cypress_m8 3-1:2.0: HID->COM RS232 Adapter converter detected [ 460.293625][ T5714] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 460.308434][ T7533] cyphidcom ttyUSB0: required endpoint is missing [ 460.321805][ T7533] usb 3-1: USB disconnect, device number 101 [ 460.340379][ T7533] cypress_m8 3-1:2.0: device disconnected [ 460.469018][ T5714] usb 1-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 460.490469][ T5714] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 460.490533][ T5714] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1289, setting to 1024 [ 460.490582][ T5714] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 460.490632][ T5714] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.660271][T10532] loop5: detected capacity change from 0 to 7 [ 460.678956][T10532] Dev loop5: unable to read RDB block 7 [ 460.687183][T10532] loop5: unable to read partition table [ 460.697539][T10532] loop5: partition table beyond EOD, truncated [ 460.698674][T10532] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 460.871059][T10532] fuse: Bad value for 'fd' [ 461.075746][ T5717] usb 1-1: USB disconnect, device number 91 [ 461.081229][ T5625] Bluetooth: hci5: Reading Intel version command failed (-71) [ 461.494289][T10545] kAFS: unable to lookup cell '(,c' [ 462.006616][ T5717] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 462.185116][ T5717] usb 2-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 462.198186][ T5717] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 462.223840][ T5717] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.223975][ T5717] usb 2-1: Product: syz [ 462.224071][ T5717] usb 2-1: Manufacturer: syz [ 462.224112][ T5717] usb 2-1: SerialNumber: syz [ 462.270674][ T5717] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 462.467087][T10561] FAULT_INJECTION: forcing a failure. [ 462.467087][T10561] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 462.469276][T10561] CPU: 0 UID: 0 PID: 10561 Comm: syz.3.1347 Not tainted syzkaller #0 PREEMPT(full) [ 462.469308][T10561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 462.469323][T10561] Call Trace: [ 462.469337][T10561] [ 462.469348][T10561] dump_stack_lvl+0xe8/0x150 [ 462.469388][T10561] should_fail_ex+0x410/0x560 [ 462.469428][T10561] prepare_alloc_pages+0x223/0x600 [ 462.469521][T10561] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 462.469629][T10561] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 462.469709][T10561] ? __pfx_policy_nodemask+0x10/0x10 [ 462.469770][T10561] ? trace_kmem_cache_alloc+0x29/0xe0 [ 462.469873][T10561] ? kmem_cache_alloc_node_noprof+0x3be/0x610 [ 462.469981][T10561] alloc_pages_mpol+0x21e/0x390 [ 462.470068][T10561] alloc_pages_noprof+0xb1/0x2b0 [ 462.470154][T10561] alloc_skb_with_frags+0x264/0x760 [ 462.470254][T10561] sock_alloc_send_pskb+0x878/0x990 [ 462.470374][T10561] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 462.470481][T10561] ? iov_iter_advance+0x8b/0x1c0 [ 462.470548][T10561] tun_get_user+0x8fb/0x44d0 [ 462.470813][T10561] ? aa_file_perm+0x18b/0x15f0 [ 462.470893][T10561] ? aa_file_perm+0x4ed/0x15f0 [ 462.470973][T10561] ? __pfx_tun_get_user+0x10/0x10 [ 462.471071][T10561] ? __lock_acquire+0x6df/0x2e50 [ 462.471145][T10561] ? kstrtoull+0x137/0x1d0 [ 462.471249][T10561] ? ref_tracker_alloc+0x341/0x4b0 [ 462.471308][T10561] ? lock_acquire+0x115/0x350 [ 462.471366][T10561] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 462.471441][T10561] ? lock_acquire+0x115/0x350 [ 462.471504][T10561] ? tun_get+0x1c/0x2f0 [ 462.471602][T10561] ? tun_get+0x1c/0x2f0 [ 462.471687][T10561] ? tun_get+0x1c/0x2f0 [ 462.471793][T10561] tun_chr_write_iter+0x113/0x200 [ 462.471898][T10561] vfs_write+0x612/0xba0 [ 462.471998][T10561] ? __pfx_vfs_write+0x10/0x10 [ 462.472115][T10561] ? __fget_files+0x2a/0x420 [ 462.472214][T10561] ksys_write+0x150/0x270 [ 462.472302][T10561] ? __pfx_ksys_write+0x10/0x10 [ 462.472437][T10561] do_syscall_64+0x166/0x520 [ 462.472540][T10561] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.472606][T10561] ? clear_bhb_loop+0x70/0xc0 [ 462.472684][T10561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.472749][T10561] RIP: 0033:0x7fe2d6d9e159 [ 462.472819][T10561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 462.472874][T10561] RSP: 002b:00007fe2d7cdb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 462.472939][T10561] RAX: ffffffffffffffda RBX: 00007fe2d7025fa0 RCX: 00007fe2d6d9e159 [ 462.472983][T10561] RDX: 0000000000000fce RSI: 0000200000000840 RDI: 0000000000000004 [ 462.473026][T10561] RBP: 00007fe2d7cdb090 R08: 0000000000000000 R09: 0000000000000000 [ 462.473068][T10561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.473109][T10561] R13: 00007fe2d7026038 R14: 00007fe2d7025fa0 R15: 00007fe2d714fa48 [ 462.473196][T10561] [ 462.799154][T10564] usb usb7: usbfs: process 10564 (syz.4.1346) did not claim interface 0 before use [ 462.978162][ T5717] gspca_mr97310a: reg write [19] error -71 [ 462.978418][ T5717] mr97310a 2-1:1.0: probe with driver mr97310a failed with error -71 [ 463.028094][ T5717] usb 2-1: USB disconnect, device number 93 [ 463.106384][T10570] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 463.293520][ T7529] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 463.457870][ T7529] usb 1-1: Using ep0 maxpacket: 8 [ 463.474762][ T7529] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 463.488103][ T7529] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 463.488204][ T7529] usb 1-1: config 0 has no interface number 0 [ 463.488305][ T7529] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 463.488404][ T7529] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 463.488468][ T7529] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 463.488536][ T7529] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 463.488604][ T7529] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 463.588217][ T7529] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.588317][ T7529] usb 1-1: Product: syz [ 463.588405][ T7529] usb 1-1: Manufacturer: syz [ 463.588445][ T7529] usb 1-1: SerialNumber: syz [ 463.647784][ T7529] usb 1-1: config 0 descriptor?? [ 463.705393][ T7533] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 463.832514][T10581] sctp: [Deprecated]: syz.3.1353 (pid 10581) Use of int in max_burst socket option deprecated. [ 463.832514][T10581] Use struct sctp_assoc_value instead [ 463.903489][ T7533] usb 5-1: Using ep0 maxpacket: 8 [ 463.910791][ T7533] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 463.924268][ T7533] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 463.924361][ T7533] usb 5-1: config 0 has no interface number 0 [ 463.924463][ T7533] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 463.924527][ T7533] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 463.924595][ T7533] usb 5-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 463.924659][ T7533] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 463.924719][ T7533] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 464.012250][ T7529] iowarrior 1-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 464.034465][ T7533] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.045204][ T7533] usb 5-1: Product: syz [ 464.045246][ T7533] usb 5-1: Manufacturer: syz [ 464.045275][ T7533] usb 5-1: SerialNumber: syz [ 464.096140][ T7533] usb 5-1: config 0 descriptor?? [ 464.197072][ T7505] usb 1-1: USB disconnect, device number 92 [ 464.350335][ T7533] iowarrior 5-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 464.627909][T10576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.629093][T10576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.679253][ T7533] usb 5-1: USB disconnect, device number 96 [ 465.503418][ T7505] usb 3-1: new full-speed USB device number 102 using dummy_hcd [ 465.657141][ T7505] usb 3-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 465.666512][ T7505] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 465.666583][ T7505] usb 3-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 465.692584][ T7505] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.692615][ T7505] usb 3-1: Product: syz [ 465.692632][ T7505] usb 3-1: Manufacturer: syz [ 465.692648][ T7505] usb 3-1: SerialNumber: syz [ 465.884241][T10617] FAULT_INJECTION: forcing a failure. [ 465.884241][T10617] name failslab, interval 1, probability 0, space 0, times 0 [ 465.899581][T10617] CPU: 1 UID: 0 PID: 10617 Comm: syz.0.1361 Not tainted syzkaller #0 PREEMPT(full) [ 465.899615][T10617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 465.899630][T10617] Call Trace: [ 465.899641][T10617] [ 465.899652][T10617] dump_stack_lvl+0xe8/0x150 [ 465.899692][T10617] should_fail_ex+0x410/0x560 [ 465.899735][T10617] should_failslab+0xa8/0x100 [ 465.899765][T10617] __kmalloc_cache_noprof+0xa3/0x600 [ 465.899805][T10617] ? __kmalloc_cache_noprof+0x14d/0x600 [ 465.899841][T10617] ? sctp_add_bind_addr+0x8c/0x370 [ 465.899868][T10617] ? sctp_add_bind_addr+0x8c/0x370 [ 465.899904][T10617] sctp_add_bind_addr+0x8c/0x370 [ 465.899939][T10617] sctp_copy_local_addr_list+0x31a/0x4e0 [ 465.900063][T10617] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 465.900095][T10617] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 465.900127][T10617] ? sctp_v6_is_any+0x64/0x80 [ 465.900208][T10617] ? sctp_copy_one_addr+0x93/0x360 [ 465.900242][T10617] sctp_bind_addr_copy+0xb3/0x3c0 [ 465.900273][T10617] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 465.900326][T10617] sctp_connect_new_asoc+0x2ff/0x6b0 [ 465.900364][T10617] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 465.900408][T10617] ? __local_bh_enable_ip+0xd6/0x140 [ 465.900437][T10617] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 465.900485][T10617] ? security_sctp_bind_connect+0x7e/0x2c0 [ 465.900520][T10617] sctp_sendmsg+0x159b/0x2d00 [ 465.900572][T10617] ? __pfx_sctp_sendmsg+0x10/0x10 [ 465.900611][T10617] ? __lock_acquire+0x6df/0x2e50 [ 465.900649][T10617] ? aa_sock_msg_perm+0xf5/0x210 [ 465.900674][T10617] ? sock_rps_record_flow+0x19/0x350 [ 465.900769][T10617] ? inet_sendmsg+0x298/0x320 [ 465.900799][T10617] ? __pfx_inet_sendmsg+0x10/0x10 [ 465.900828][T10617] sock_sendmsg_nosec+0x10e/0x180 [ 465.900863][T10617] ____sys_sendmsg+0x54e/0x850 [ 465.900894][T10617] ? __pfx_____sys_sendmsg+0x10/0x10 [ 465.900929][T10617] ? import_iovec+0x73/0xa0 [ 465.900957][T10617] ___sys_sendmsg+0x2a5/0x360 [ 465.900982][T10617] ? __lock_acquire+0x6df/0x2e50 [ 465.901009][T10617] ? __pfx____sys_sendmsg+0x10/0x10 [ 465.901040][T10617] ? kstrtouint+0x6e/0xe0 [ 465.901094][T10617] ? __fget_files+0x2a/0x420 [ 465.901124][T10617] ? __fget_files+0x3a2/0x420 [ 465.901162][T10617] __sys_sendmmsg+0x273/0x4d0 [ 465.901191][T10617] ? __pfx___sys_sendmmsg+0x10/0x10 [ 465.901225][T10617] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 465.901274][T10617] ? ksys_write+0x242/0x270 [ 465.901307][T10617] ? __pfx_ksys_write+0x10/0x10 [ 465.901345][T10617] __x64_sys_sendmmsg+0xa0/0xc0 [ 465.901372][T10617] do_syscall_64+0x166/0x520 [ 465.901407][T10617] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.901430][T10617] ? clear_bhb_loop+0x70/0xc0 [ 465.901465][T10617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.901487][T10617] RIP: 0033:0x7f46d179e159 [ 465.901508][T10617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.901527][T10617] RSP: 002b:00007f46d265b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 465.901552][T10617] RAX: ffffffffffffffda RBX: 00007f46d1a25fa0 RCX: 00007f46d179e159 [ 465.901569][T10617] RDX: 0000000000000002 RSI: 0000200000000ac0 RDI: 0000000000000004 [ 465.901583][T10617] RBP: 00007f46d265b090 R08: 0000000000000000 R09: 0000000000000000 [ 465.901597][T10617] R10: 0000000000010005 R11: 0000000000000246 R12: 0000000000000002 [ 465.901612][T10617] R13: 00007f46d1a26038 R14: 00007f46d1a25fa0 R15: 00007f46d1b4fa48 [ 465.901646][T10617] [ 466.613905][ T5714] usb 5-1: new full-speed USB device number 97 using dummy_hcd [ 466.704475][T10626] netlink: 'syz.3.1363': attribute type 1 has an invalid length. [ 466.704526][T10626] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1363'. [ 466.730560][T10626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1363'. [ 466.786279][ T5714] usb 5-1: unable to get BOS descriptor or descriptor too short [ 466.795308][ T5714] usb 5-1: not running at top speed; connect to a high speed hub [ 466.796206][ T5714] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 466.804745][ T5714] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 466.829977][T10626] netlink: 'syz.3.1363': attribute type 1 has an invalid length. [ 466.830062][T10626] netlink: 'syz.3.1363': attribute type 2 has an invalid length. [ 466.850518][ T5714] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.850599][ T5714] usb 5-1: Product: syz [ 466.850637][ T5714] usb 5-1: Manufacturer: syz [ 466.850683][ T5714] usb 5-1: SerialNumber: syz [ 467.007814][T10626] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 467.164496][ T5714] cdc_ncm 5-1:1.0: bind() failure [ 467.198129][ T5714] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 467.198238][ T5714] cdc_ncm 5-1:1.1: bind() failure [ 467.251976][ T5714] usb 5-1: USB disconnect, device number 97 [ 467.595509][T10635] usb usb7: usbfs: process 10635 (syz.3.1365) did not claim interface 0 before use [ 467.763598][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 468.247725][T10641] vivid-003: disconnect [ 469.009050][T10645] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1371'. [ 469.070258][ T31] audit: type=1326 audit(1788553011.979:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10644 comm="syz.3.1371" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d6d9e159 code=0x7ffc0000 [ 469.070354][ T31] audit: type=1326 audit(1788553011.979:1712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10644 comm="syz.3.1371" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d6d9e159 code=0x7ffc0000 [ 469.119169][ T31] audit: type=1326 audit(1788553012.019:1713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10644 comm="syz.3.1371" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d6d9e159 code=0x7ffc0000 [ 469.125041][ T31] audit: type=1326 audit(1788553012.039:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10644 comm="syz.3.1371" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe2d6d9e159 code=0x7ffc0000 [ 469.125095][ T31] audit: type=1326 audit(1788553012.039:1716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10644 comm="syz.3.1371" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d6d9e159 code=0x7ffc0000 [ 469.125139][ T31] audit: type=1326 audit(1788553012.039:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10644 comm="syz.3.1371" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d6d9e159 code=0x7ffc0000 [ 469.169309][ T31] audit: type=1326 audit(1788553012.019:1714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10644 comm="syz.3.1371" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d6d9e159 code=0x7ffc0000 [ 469.179447][ T31] audit: type=1326 audit(1788553012.079:1718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10644 comm="syz.3.1371" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d6d9e159 code=0x7ffc0000 [ 469.206119][ T31] audit: type=1326 audit(1788553012.099:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10644 comm="syz.3.1371" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d6d9e159 code=0x7ffc0000 [ 469.235477][ T31] audit: type=1326 audit(1788553012.139:1720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10644 comm="syz.3.1371" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe2d6d9e159 code=0x7ffc0000 [ 469.721825][ T10] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 469.893462][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 469.895361][ T10] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 469.911950][ T10] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 469.912003][ T10] usb 2-1: config 0 has no interface number 0 [ 469.912161][ T10] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 469.912212][ T10] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 469.972150][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.972213][ T10] usb 2-1: Product: syz [ 469.972284][ T10] usb 2-1: Manufacturer: syz [ 469.972346][ T10] usb 2-1: SerialNumber: syz [ 470.022608][ T10] usb 2-1: config 0 descriptor?? [ 470.311266][ T10] radio-si470x 2-1:0.35: this is not a si470x device. [ 470.513091][T10647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.532982][T10647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.553262][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 470.573256][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 470.812530][ T7505] snd-usb-caiaq 3-1:1.0: can't set alt interface. [ 470.812611][ T7505] usb 3-1: unable to init card! (ret=-5) [ 470.828638][ T7505] snd-usb-caiaq 3-1:1.0: probe with driver snd-usb-caiaq failed with error -5 [ 470.856759][ T10] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 471.259310][T10638] vivid-003: reconnect [ 471.310427][ T10] usb 2-1: USB disconnect, device number 94 [ 471.483253][ T0] NOHZ tick-stop error: local softirq work is pending, handler #204!!! [ 471.751610][ T7505] usb 3-1: USB disconnect, device number 102 [ 472.253703][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 472.344809][ T5718] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 472.513535][ T5718] usb 5-1: Using ep0 maxpacket: 16 [ 472.521177][ T5718] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 472.539492][ T5718] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.552329][ T5718] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.563606][ T5718] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 472.578615][ T5718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.594559][ T5718] usb 5-1: config 0 descriptor?? [ 473.045507][ T5718] hid_parser_main: 4005 callbacks suppressed [ 473.054771][ T5718] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 473.101287][ T5718] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0012/input/input73 [ 473.103252][ T0] NOHZ tick-stop error: local softirq work is pending, handler #204!!! [ 473.221114][ T5718] microsoft 0003:045E:07DA.0012: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 473.262336][ T10] usb 5-1: USB disconnect, device number 98 [ 473.571850][T10679] fido_id[10679]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 473.871403][T10684] dlm: non-version read from control device 8224 [ 474.113786][ T7505] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 474.246574][ T7505] usb 3-1: device descriptor read/64, error -71 [ 474.493563][ T7505] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 474.503534][ T7529] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 474.585455][T10699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1385'. [ 474.585556][T10699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 474.593763][T10699] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 474.611581][T10699] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 474.611646][T10699] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 474.627301][ T7505] usb 3-1: device descriptor read/64, error -71 [ 474.683958][ T7529] usb 5-1: Using ep0 maxpacket: 8 [ 474.693088][ T7529] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 474.713874][ T7529] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 474.713975][ T7529] usb 5-1: Product: syz [ 474.715393][ T7529] usb 5-1: Manufacturer: syz [ 474.721276][ T7529] usb 5-1: SerialNumber: syz [ 474.734098][ T7529] usb 5-1: config 0 descriptor?? [ 474.742977][ T7505] usb usb3-port1: attempt power cycle [ 474.751980][ T7529] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 474.847901][T10701] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1386'. [ 475.083890][ T7505] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 475.119228][ T7505] usb 3-1: device descriptor read/8, error -71 [ 475.311221][T10710] netlink: 'syz.3.1389': attribute type 88 has an invalid length. [ 475.323185][T10692] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1382'. [ 475.353517][ T7505] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 475.378050][ T7505] usb 3-1: device descriptor read/8, error -71 [ 475.490372][ T7505] usb usb3-port1: unable to enumerate USB device [ 475.524125][ T7529] gspca_zc3xx: reg_r err -110 [ 475.529102][ T7529] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 475.894277][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 476.171963][T10711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.198565][T10711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.508068][T10731] kAFS: unable to lookup cell '(,c' [ 477.341950][ T7500] usb 5-1: USB disconnect, device number 99 [ 477.495231][ T7529] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 477.513267][ T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!! [ 477.683863][ T7529] usb 1-1: Using ep0 maxpacket: 16 [ 477.690404][ T7529] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 477.711744][ T7529] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.711878][ T7529] usb 1-1: config 0 interface 0 has no altsetting 0 [ 477.712628][ T7529] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.735830][ T7529] usb 1-1: config 0 descriptor?? [ 477.752600][T10754] netlink: 'syz.4.1399': attribute type 1 has an invalid length. [ 477.928240][T10754] 8021q: adding VLAN 0 to HW filter on device bond2 [ 477.973247][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 478.044811][T10736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1395'. [ 478.110449][T10758] bond2: (slave geneve2): making interface the new active one [ 478.123486][ T7529] usbhid 1-1:0.0: can't add hid device: -71 [ 478.129719][ T7529] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 478.162636][T10758] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 478.177344][T10760] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 478.185160][ T59] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.185207][ T59] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.185242][ T59] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.185277][ T59] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.217573][ T7529] usb 1-1: USB disconnect, device number 93 [ 478.873247][ T0] NOHZ tick-stop error: local softirq work is pending, handler #206!!! [ 478.983834][T10771] usb usb7: usbfs: process 10771 (syz.1.1405) did not claim interface 0 before use [ 479.353569][T10773] netlink: 336 bytes leftover after parsing attributes in process `syz.0.1406'. [ 479.353708][T10773] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1406'. [ 479.632448][T10779] FAULT_INJECTION: forcing a failure. [ 479.632448][T10779] name failslab, interval 1, probability 0, space 0, times 0 [ 479.632506][T10779] CPU: 0 UID: 0 PID: 10779 Comm: syz.4.1408 Not tainted syzkaller #0 PREEMPT(full) [ 479.632534][T10779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 479.632550][T10779] Call Trace: [ 479.632560][T10779] [ 479.632571][T10779] dump_stack_lvl+0xe8/0x150 [ 479.632611][T10779] should_fail_ex+0x410/0x560 [ 479.632653][T10779] should_failslab+0xa8/0x100 [ 479.632684][T10779] __kmalloc_node_noprof+0x100/0x720 [ 479.632718][T10779] ? __get_vm_area_node+0x200/0x2f0 [ 479.632749][T10779] ? __get_vm_area_node+0x283/0x2f0 [ 479.632779][T10779] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 479.632811][T10779] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 479.632855][T10779] __vmalloc_node_range_noprof+0x5b4/0x1540 [ 479.632890][T10779] ? __lock_acquire+0x6df/0x2e50 [ 479.632939][T10779] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 479.632983][T10779] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 479.633009][T10779] __vmalloc_noprof+0xd2/0x120 [ 479.633041][T10779] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 479.633071][T10779] bpf_prog_alloc_no_stats+0x47/0x560 [ 479.633095][T10779] ? bpf_prog_alloc+0x2a/0x1a0 [ 479.633123][T10779] bpf_prog_alloc+0x3c/0x1a0 [ 479.633151][T10779] bpf_prog_load+0x7f8/0x1c20 [ 479.633225][T10779] ? __pfx_bpf_prog_load+0x10/0x10 [ 479.633275][T10779] __sys_bpf+0xd0d/0xd90 [ 479.633307][T10779] ? __pfx___sys_bpf+0x10/0x10 [ 479.633343][T10779] ? __fget_files+0x2a/0x420 [ 479.633391][T10779] ? ksys_write+0x242/0x270 [ 479.633427][T10779] ? __pfx_ksys_write+0x10/0x10 [ 479.633474][T10779] __x64_sys_bpf+0xba/0xd0 [ 479.633500][T10779] do_syscall_64+0x166/0x520 [ 479.633535][T10779] ? trace_irq_disable+0x3b/0x140 [ 479.633557][T10779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.633582][T10779] ? clear_bhb_loop+0x70/0xc0 [ 479.633610][T10779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.633634][T10779] RIP: 0033:0x7f7b0cd9e159 [ 479.633656][T10779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 479.633677][T10779] RSP: 002b:00007f7b0dd07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 479.633703][T10779] RAX: ffffffffffffffda RBX: 00007f7b0d025fa0 RCX: 00007f7b0cd9e159 [ 479.633720][T10779] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 479.633736][T10779] RBP: 00007f7b0dd07090 R08: 0000000000000000 R09: 0000000000000000 [ 479.633752][T10779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 479.633766][T10779] R13: 00007f7b0d026038 R14: 00007f7b0d025fa0 R15: 00007f7b0d14fa48 [ 479.633802][T10779] [ 479.725051][ T7529] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 479.817129][T10779] warn_alloc: 33 callbacks suppressed [ 479.817182][T10779] syz.4.1408: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 479.817413][T10779] CPU: 1 UID: 0 PID: 10779 Comm: syz.4.1408 Not tainted syzkaller #0 PREEMPT(full) [ 479.817478][T10779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 479.817520][T10779] Call Trace: [ 479.817543][T10779] [ 479.817565][T10779] dump_stack_lvl+0xe8/0x150 [ 479.817659][T10779] warn_alloc+0x24d/0x270 [ 479.817771][T10779] ? __pfx_warn_alloc+0x10/0x10 [ 479.817880][T10779] ? __kmalloc_node_noprof+0x4d7/0x720 [ 479.817968][T10779] ? __get_vm_area_node+0x200/0x2f0 [ 479.818042][T10779] ? __get_vm_area_node+0x283/0x2f0 [ 479.818117][T10779] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 479.818200][T10779] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 479.818299][T10779] __vmalloc_node_range_noprof+0x969/0x1540 [ 479.818398][T10779] ? __lock_acquire+0x6df/0x2e50 [ 479.818531][T10779] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 479.818641][T10779] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 479.818703][T10779] __vmalloc_noprof+0xd2/0x120 [ 479.818784][T10779] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 479.818856][T10779] bpf_prog_alloc_no_stats+0x47/0x560 [ 479.818915][T10779] ? bpf_prog_alloc+0x2a/0x1a0 [ 479.818997][T10779] bpf_prog_alloc+0x3c/0x1a0 [ 479.819068][T10779] bpf_prog_load+0x7f8/0x1c20 [ 479.819162][T10779] ? __pfx_bpf_prog_load+0x10/0x10 [ 479.819311][T10779] __sys_bpf+0xd0d/0xd90 [ 479.819398][T10779] ? __pfx___sys_bpf+0x10/0x10 [ 479.819495][T10779] ? __fget_files+0x2a/0x420 [ 479.819614][T10779] ? ksys_write+0x242/0x270 [ 479.819702][T10779] ? __pfx_ksys_write+0x10/0x10 [ 479.819825][T10779] __x64_sys_bpf+0xba/0xd0 [ 479.819905][T10779] do_syscall_64+0x166/0x520 [ 479.820030][T10779] ? trace_irq_disable+0x3b/0x140 [ 479.820086][T10779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.820152][T10779] ? clear_bhb_loop+0x70/0xc0 [ 479.820226][T10779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.820290][T10779] RIP: 0033:0x7f7b0cd9e159 [ 479.820347][T10779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 479.820400][T10779] RSP: 002b:00007f7b0dd07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 479.820468][T10779] RAX: ffffffffffffffda RBX: 00007f7b0d025fa0 RCX: 00007f7b0cd9e159 [ 479.820510][T10779] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 479.820544][T10779] RBP: 00007f7b0dd07090 R08: 0000000000000000 R09: 0000000000000000 [ 479.820586][T10779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 479.820626][T10779] R13: 00007f7b0d026038 R14: 00007f7b0d025fa0 R15: 00007f7b0d14fa48 [ 479.820713][T10779] [ 479.820745][T10779] Mem-Info: [ 479.820778][T10779] active_anon:24757 inactive_anon:8 isolated_anon:0 [ 479.820778][T10779] active_file:17 inactive_file:61698 isolated_file:0 [ 479.820778][T10779] unevictable:0 dirty:403 writeback:0 [ 479.820778][T10779] slab_reclaimable:10709 slab_unreclaimable:103274 [ 479.820778][T10779] mapped:32094 shmem:17495 pagetables:1551 [ 479.820778][T10779] sec_pagetables:0 bounce:0 [ 479.820778][T10779] kernel_misc_reclaimable:0 [ 479.820778][T10779] free:1274509 free_pcp:9272 free_cma:0 [ 479.820941][T10779] Node 0 active_anon:99028kB inactive_anon:32kB active_file:68kB inactive_file:246528kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:128324kB dirty:1612kB writeback:0kB shmem:69980kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13952kB pagetables:6088kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 479.821125][T10779] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:264kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:52kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 479.821276][T10779] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 479.821436][T10779] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 479.821543][T10779] Node 0 DMA32 free:1145388kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:99028kB inactive_anon:32kB active_file:68kB inactive_file:246528kB unevictable:0kB writepending:1612kB zspages:504kB present:3129332kB managed:2546704kB mlocked:0kB bounce:0kB free_pcp:37088kB local_pcp:17352kB free_cma:0kB [ 479.821717][T10779] lowmem_reserve[]: 0 0 0 0 0 [ 479.821833][T10779] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 479.822014][T10779] lowmem_reserve[]: 0 0 0 0 0 [ 479.984432][ T7529] usb 1-1: New USB device found, idVendor=0af0, idProduct=6711, bcdDevice= 0.00 [ 480.020908][ T7529] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 480.021079][ T7529] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 480.021153][ T7529] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 480.021223][ T7529] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 480.075561][ T7529] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 480.075638][ T7529] usb 1-1: Product: syz [ 480.075679][ T7529] usb 1-1: Manufacturer: syz [ 480.442867][T10779] Node 1 Normal free:3937288kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:264kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 480.443100][T10779] lowmem_reserve[]: 0 0 0 0 0 [ 480.443209][T10779] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 480.443553][T10779] Node 0 DMA32: 210*4kB (UME) 889*8kB (UME) 364*16kB (UME) 327*32kB (UME) 119*64kB (UME) 97*128kB (UME) 37*256kB (UME) 22*512kB (UME) 15*1024kB (UME) 6*2048kB (UM) 257*4096kB (UM) = 1145328kB [ 480.444027][T10779] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 480.444334][T10779] Node 1 Normal: 4*4kB (UM) 9*8kB (UM) 11*16kB (U) 0*32kB 8*64kB (UM) 2*128kB (UM) 4*256kB (UM) 4*512kB (UM) 1*1024kB (M) 2*2048kB (UM) 959*4096kB (M) = 3937288kB [ 480.444819][T10779] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 480.444900][T10779] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 480.444975][T10779] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 480.445021][T10779] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 480.445073][T10779] 79207 total pagecache pages [ 480.445105][T10779] 0 pages in swap cache [ 480.445128][T10779] Free swap = 124828kB [ 480.445150][T10779] Total swap = 124996kB [ 480.445179][T10779] 2097051 pages RAM [ 480.445201][T10779] 0 pages HighMem/MovableOnly [ 480.445223][T10779] 428759 pages reserved [ 480.445252][T10779] 0 pages cma reserved [ 480.815137][ T7529] hso 1-1:1.0: Can't find INT IN endpoint [ 481.117755][ T7529] usb 1-1: USB disconnect, device number 94 [ 481.154580][ T7500] usb 5-1: new full-speed USB device number 100 using dummy_hcd [ 481.315246][ T7500] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 481.335734][ T7500] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.335778][ T7500] usb 5-1: Product: syz [ 481.335798][ T7500] usb 5-1: Manufacturer: syz [ 481.335817][ T7500] usb 5-1: SerialNumber: syz [ 481.377872][ T7500] usb 5-1: config 0 descriptor?? [ 481.610638][ T7500] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 481.631477][ T7529] usb 4-1: new low-speed USB device number 99 using dummy_hcd [ 481.794237][ T7529] usb 4-1: Invalid ep0 maxpacket: 32 [ 481.967984][ T7529] usb 4-1: new low-speed USB device number 100 using dummy_hcd [ 482.092763][T10793] kAFS: unable to lookup cell '(,c' [ 482.133762][ T7529] usb 4-1: Invalid ep0 maxpacket: 32 [ 482.147377][ T7529] usb usb4-port1: attempt power cycle [ 482.515387][ T7529] usb 4-1: new low-speed USB device number 101 using dummy_hcd [ 482.558194][ T7529] usb 4-1: Invalid ep0 maxpacket: 32 [ 482.737366][ T7529] usb 4-1: new low-speed USB device number 102 using dummy_hcd [ 482.792902][ T7529] usb 4-1: Invalid ep0 maxpacket: 32 [ 482.799393][ T7529] usb usb4-port1: unable to enumerate USB device [ 483.060213][ T7500] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 483.083367][ T7500] usb 5-1: USB disconnect, device number 100 [ 483.149596][T10802] FAULT_INJECTION: forcing a failure. [ 483.149596][T10802] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 483.150430][T10802] CPU: 1 UID: 0 PID: 10802 Comm: syz.1.1417 Not tainted syzkaller #0 PREEMPT(full) [ 483.150459][T10802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 483.150480][T10802] Call Trace: [ 483.150490][T10802] [ 483.150500][T10802] dump_stack_lvl+0xe8/0x150 [ 483.150539][T10802] should_fail_ex+0x410/0x560 [ 483.150581][T10802] _copy_to_user+0x31/0xb0 [ 483.150609][T10802] simple_read_from_buffer+0xe1/0x170 [ 483.150645][T10802] proc_fail_nth_read+0x1bb/0x230 [ 483.150686][T10802] ? common_file_perm+0x20e/0x2b0 [ 483.150715][T10802] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 483.150753][T10802] ? rw_verify_area+0x24a/0x4c0 [ 483.150788][T10802] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 483.150823][T10802] vfs_read+0x213/0xa80 [ 483.150861][T10802] ? __pfx___mutex_lock+0x10/0x10 [ 483.150897][T10802] ? __pfx_vfs_read+0x10/0x10 [ 483.150931][T10802] ? __fget_files+0x2a/0x420 [ 483.150966][T10802] ? __fget_files+0x3a2/0x420 [ 483.150996][T10802] ? __fget_files+0x2a/0x420 [ 483.151035][T10802] ksys_read+0x150/0x270 [ 483.151070][T10802] ? __pfx_ksys_read+0x10/0x10 [ 483.151115][T10802] do_syscall_64+0x166/0x520 [ 483.151150][T10802] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.151174][T10802] ? clear_bhb_loop+0x70/0xc0 [ 483.151202][T10802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.151232][T10802] RIP: 0033:0x7f0fc115e98e [ 483.151253][T10802] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 483.151274][T10802] RSP: 002b:00007f0fc20fffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 483.151298][T10802] RAX: ffffffffffffffda RBX: 00007f0fc21006c0 RCX: 00007f0fc115e98e [ 483.151314][T10802] RDX: 000000000000000f RSI: 00007f0fc21000a0 RDI: 0000000000000005 [ 483.151329][T10802] RBP: 00007f0fc2100090 R08: 0000000000000000 R09: 0000000000000000 [ 483.151343][T10802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 483.151356][T10802] R13: 00007f0fc1426038 R14: 00007f0fc1425fa0 R15: 00007f0fc154fa48 [ 483.151392][T10802] [ 483.827292][T10804] input: syz1 as /devices/virtual/input/input74 [ 483.937551][T10810] xt_bpf: check failed: parse error [ 483.945838][T10810] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1421'. [ 483.969334][T10810] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 484.293796][ T7529] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 484.463572][ T7529] usb 5-1: Using ep0 maxpacket: 16 [ 484.483363][ T7529] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 484.508659][ T7529] usb 5-1: config 0 has an invalid descriptor of length 112, skipping remainder of the config [ 484.513440][ T7529] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 484.513525][ T7529] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 484.513635][ T7529] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25191, setting to 1024 [ 484.562893][ T7529] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.563020][ T7529] usb 5-1: Product: syz [ 484.563400][ T7529] usb 5-1: Manufacturer: syz [ 484.563442][ T7529] usb 5-1: SerialNumber: syz [ 484.590405][ T7529] usb 5-1: config 0 descriptor?? [ 484.613338][ T7500] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 484.793545][ T31] kauditd_printk_skb: 183 callbacks suppressed [ 484.793618][ T31] audit: type=1326 audit(1788553027.699:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10821 comm="syz.2.1426" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac8b39e159 code=0x7ffc0000 [ 484.825212][ T7505] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 484.840384][ T31] audit: type=1326 audit(1788553027.749:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10821 comm="syz.2.1426" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac8b39e159 code=0x7ffc0000 [ 484.853572][ T31] audit: type=1326 audit(1788553027.749:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10821 comm="syz.2.1426" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac8b39e159 code=0x7ffc0000 [ 484.853709][ T31] audit: type=1326 audit(1788553027.749:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10821 comm="syz.2.1426" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac8b39e159 code=0x7ffc0000 [ 484.853832][ T31] audit: type=1326 audit(1788553027.749:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10821 comm="syz.2.1426" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7fac8b39e159 code=0x7ffc0000 [ 484.853949][ T31] audit: type=1326 audit(1788553027.749:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10821 comm="syz.2.1426" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac8b39e159 code=0x7ffc0000 [ 484.874204][ T7529] appledisplay: Apple Cinema Display connected [ 484.886779][ T31] audit: type=1326 audit(1788553027.779:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10821 comm="syz.2.1426" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac8b39e159 code=0x7ffc0000 [ 484.890296][ T31] audit: type=1326 audit(1788553027.779:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10821 comm="syz.2.1426" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac8b39e159 code=0x7ffc0000 [ 484.919766][ T31] audit: type=1326 audit(1788553027.839:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10821 comm="syz.2.1426" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fac8b39e159 code=0x7ffc0000 [ 484.920270][ T31] audit: type=1326 audit(1788553027.839:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10821 comm="syz.2.1426" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac8b39e159 code=0x7ffc0000 [ 485.054919][ T7505] usb 4-1: Using ep0 maxpacket: 32 [ 485.086045][ T7505] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 485.096742][ T7505] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.096809][ T7505] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.096895][ T7505] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.128138][ T7500] usb 3-1: unable to get BOS descriptor or descriptor too short [ 485.128210][ T7500] usb 3-1: New USB device found, idVendor=046d, idProduct=4002, bcdDevice= 0.40 [ 485.146319][ T7500] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 485.146380][ T7500] usb 3-1: can't read configurations, error -71 [ 485.162495][ T7505] usb 4-1: config 0 descriptor?? [ 485.172647][ T7505] hub 4-1:0.0: USB hub found [ 485.267530][ T10] usb 5-1: USB disconnect, device number 101 [ 485.268596][ C1] usb 5-1: appledisplay_complete - usb_submit_urb failed with result -19 [ 485.318877][ T10] appledisplay: Apple Cinema Display disconnected [ 485.520148][T10837] nvme_fabrics: unknown parameter or missing value '#! 1R?&n%~[6=p͊yz\Uj@5NfWrs)q' in ctrl creation request [ 485.659510][ T7505] hub 4-1:0.0: config failed, can't read hub descriptor (err -90) [ 485.713907][ T7529] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 485.905865][ T7529] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 485.928612][T10837] nvme nvme0: failed to connect socket: -111 [ 486.029863][ T7529] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.030052][ T7529] usb 2-1: Product: syz [ 486.034510][ T7529] usb 2-1: Manufacturer: syz [ 486.034557][ T7529] usb 2-1: SerialNumber: syz [ 486.661382][ T7529] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 486.672538][ T7529] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 487.135268][ T7500] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 487.324815][ T7500] usb 1-1: unable to get BOS descriptor or descriptor too short [ 487.341179][ T7500] usb 1-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 487.362111][ T7500] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 36, changing to 7 [ 487.388074][ T7500] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.396536][ T7500] usb 1-1: Product: syz [ 487.396590][ T7500] usb 1-1: Manufacturer: syz [ 487.396609][ T7500] usb 1-1: SerialNumber: syz [ 487.745126][ T7500] usb 1-1: 1:1 : sample bitwidth 62 in over sample bytes 2 [ 487.752870][ T7500] usb 1-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 487.801780][T10858] input: syz1 as /devices/virtual/input/input75 [ 487.810530][ T7500] usb 1-1: unit 2 not found! [ 487.810556][ T7500] usb 1-1: unit 236 not found! [ 487.936710][ T7500] usb 1-1: USB disconnect, device number 95 [ 488.229445][ T5775] udevd[5775]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 488.546383][ T7529] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 488.546559][ T7529] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 488.608778][ T7529] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 488.799725][ T7529] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 489.933691][ T7529] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 490.105310][ T7529] usb 5-1: Using ep0 maxpacket: 8 [ 490.113564][ T7529] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 490.149244][ T7529] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 490.197386][ T7529] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.197513][ T7529] usb 5-1: Product: syz [ 490.203612][ T7529] usb 5-1: Manufacturer: syz [ 490.203657][ T7529] usb 5-1: SerialNumber: syz [ 490.235564][ T7529] usb 5-1: config 0 descriptor?? [ 490.631638][T10871] FAULT_INJECTION: forcing a failure. [ 490.631638][T10871] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 490.631751][T10871] CPU: 1 UID: 0 PID: 10871 Comm: syz.4.1438 Not tainted syzkaller #0 PREEMPT(full) [ 490.631779][T10871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 490.631795][T10871] Call Trace: [ 490.631805][T10871] [ 490.631816][T10871] dump_stack_lvl+0xe8/0x150 [ 490.631857][T10871] should_fail_ex+0x410/0x560 [ 490.631900][T10871] _copy_to_user+0x31/0xb0 [ 490.631931][T10871] simple_read_from_buffer+0xe1/0x170 [ 490.631970][T10871] proc_fail_nth_read+0x1bb/0x230 [ 490.632006][T10871] ? common_file_perm+0x20e/0x2b0 [ 490.632034][T10871] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 490.632075][T10871] ? rw_verify_area+0x24a/0x4c0 [ 490.632119][T10871] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 490.632154][T10871] vfs_read+0x213/0xa80 [ 490.632194][T10871] ? __pfx___mutex_lock+0x10/0x10 [ 490.632232][T10871] ? __pfx_vfs_read+0x10/0x10 [ 490.632267][T10871] ? __fget_files+0x2a/0x420 [ 490.632303][T10871] ? __fget_files+0x3a2/0x420 [ 490.632333][T10871] ? __fget_files+0x2a/0x420 [ 490.632373][T10871] ksys_read+0x150/0x270 [ 490.632410][T10871] ? __pfx_ksys_read+0x10/0x10 [ 490.632457][T10871] do_syscall_64+0x166/0x520 [ 490.632493][T10871] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.632519][T10871] ? clear_bhb_loop+0x70/0xc0 [ 490.632548][T10871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.632573][T10871] RIP: 0033:0x7f7b0cd5e98e [ 490.632595][T10871] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 490.632617][T10871] RSP: 002b:00007f7b0dd06fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 490.632644][T10871] RAX: ffffffffffffffda RBX: 00007f7b0dd076c0 RCX: 00007f7b0cd5e98e [ 490.632662][T10871] RDX: 000000000000000f RSI: 00007f7b0dd070a0 RDI: 000000000000000d [ 490.632678][T10871] RBP: 00007f7b0dd07090 R08: 0000000000000000 R09: 0000000000000000 [ 490.632694][T10871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.632709][T10871] R13: 00007f7b0d026038 R14: 00007f7b0d025fa0 R15: 00007f7b0d14fa48 [ 490.632745][T10871] [ 490.708781][ T7529] usb 2-1: USB disconnect, device number 95 [ 490.857633][ C0] raw-gadget.2 gadget.3: ignoring, device is not running [ 490.866369][ C0] raw-gadget.2 gadget.3: ignoring, device is not running [ 490.866623][ T7505] usbhid 4-1:0.0: can't add hid device: -32 [ 490.866730][ T7505] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 490.954401][ T7505] usb 4-1: USB disconnect, device number 103 [ 491.110208][T10873] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 491.376336][ T5714] usb 5-1: USB disconnect, device number 102 [ 491.915049][T10891] input: syz1 as /devices/virtual/input/input76 [ 491.923599][ T5714] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 492.004700][ T7505] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 492.061086][T10879] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 492.084288][ T5714] usb 4-1: Using ep0 maxpacket: 32 [ 492.090404][ T5714] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 492.102194][ T5714] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.102248][ T5714] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.102319][ T5714] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.141572][ T5714] usb 4-1: config 0 descriptor?? [ 492.213723][ T7505] usb 3-1: Using ep0 maxpacket: 32 [ 492.220011][ T7505] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 492.231243][ T7505] usb 3-1: config index 0 descriptor too short (expected 27632, got 27) [ 492.231298][ T7505] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 492.231373][ T7505] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 492.231404][ T7505] usb 3-1: config 1 has no interface number 0 [ 492.231453][ T7505] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 492.231524][ T7505] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 492.231576][ T7505] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.331303][ T7505] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 492.529012][ T7505] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 492.559427][T10887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.569983][T10887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.660796][ T5714] savu 0003:1E7D:2D5A.0013: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 492.843559][ T7505] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 492.860798][ T5714] usb 4-1: USB disconnect, device number 104 [ 492.990981][ T5717] usb 3-1: USB disconnect, device number 109 [ 492.999409][ T7505] usb 5-1: Using ep0 maxpacket: 16 [ 493.007840][ T7505] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 493.018587][ T7505] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.018642][ T7505] usb 5-1: config 0 interface 0 has no altsetting 0 [ 493.018686][ T7505] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.048123][ T5717] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 493.087770][ T7505] usb 5-1: config 0 descriptor?? [ 493.189067][T10907] fido_id[10907]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 493.309436][T10897] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1449'. [ 493.334779][ T7505] usbhid 5-1:0.0: can't add hid device: -71 [ 493.341051][ T7505] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 493.377600][ T7505] usb 5-1: USB disconnect, device number 103 [ 493.550831][T10909] input: syz0 as /devices/virtual/input/input77 [ 493.665982][T10909] netlink: 'syz.0.1451': attribute type 21 has an invalid length. [ 493.893643][ T7505] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 493.935667][T10909] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1451'. [ 493.935812][T10909] netlink: 'syz.0.1451': attribute type 1 has an invalid length. [ 493.935903][T10909] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1451'. [ 494.056709][ T7505] usb 4-1: Using ep0 maxpacket: 32 [ 494.062589][ T7505] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 494.073506][ T7505] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 494.081733][ T7505] usb 4-1: config 0 has no interface number 0 [ 494.081815][ T7505] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 494.081850][ T7505] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 494.113746][ T7505] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.121896][ T7505] usb 4-1: Product: syz [ 494.126643][ T7505] usb 4-1: Manufacturer: syz [ 494.131405][ T7505] usb 4-1: SerialNumber: syz [ 494.164715][ T7505] usb 4-1: config 0 descriptor?? [ 494.253535][ T7533] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 494.377421][ T7505] radio-si470x 4-1:0.35: this is not a si470x device. [ 494.432913][ T7533] usb 3-1: unable to get BOS descriptor or descriptor too short [ 494.433362][ T7533] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 494.456239][ T7533] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 494.456403][ T7533] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 494.493859][ T7533] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.493990][ T7533] usb 3-1: Product: syz [ 494.495088][ T7533] usb 3-1: Manufacturer: syz [ 494.502051][ T7533] usb 3-1: SerialNumber: syz [ 494.586693][T10915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.590659][ T7533] usb 3-1: selecting invalid altsetting 1 [ 494.592648][ T7533] usb 3-1: unit 6 not found! [ 494.595923][T10915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.670716][T10925] fuse: Bad value for 'fd' [ 494.676740][T10925] bond0: Error: Cannot enslave bond to itself. [ 494.923924][ T7505] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 494.932868][ T5714] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 494.967048][ T7529] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 495.094444][ T5714] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 495.105387][ T5714] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 495.105442][ T5714] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 495.105505][ T5714] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 495.141770][ T5714] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.150312][ T5714] usb 5-1: Product: syz [ 495.150335][ T5714] usb 5-1: Manufacturer: syz [ 495.150353][ T5714] usb 5-1: SerialNumber: syz [ 495.166857][ T7529] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 495.190549][ T5714] cdc_mbim 5-1:1.0: skipping garbage [ 495.190594][ T5714] usb 5-1: selecting invalid altsetting 1 [ 495.217432][ T7529] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 495.217561][ T7529] usb 1-1: Product: syz [ 495.224775][ T7529] usb 1-1: Manufacturer: syz [ 495.224830][ T7529] usb 1-1: SerialNumber: syz [ 495.235356][ T7529] usb 1-1: config 0 descriptor?? [ 495.260133][ T7529] ch341 1-1:0.0: ch341-uart converter detected [ 495.407020][ T5714] cdc_mbim 5-1:1.0: bind() failure [ 495.431882][ T5714] usb 5-1: USB disconnect, device number 104 [ 495.460250][ T5717] usb 4-1: USB disconnect, device number 105 [ 495.592731][ T7529] usb 1-1: failed to receive control message: -121 [ 495.601914][ T7529] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 495.726564][ T7533] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 495.836616][T10923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1456'. [ 495.863721][ T7505] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 495.878552][ T5714] usb 1-1: USB disconnect, device number 96 [ 495.890016][ T5714] ch341 1-1:0.0: device disconnected [ 496.011269][ T7533] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 496.026412][ T7505] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 496.047128][ T7505] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.047314][ T7505] usb 2-1: Product: syz [ 496.047351][ T7505] usb 2-1: Manufacturer: syz [ 496.047401][ T7505] usb 2-1: SerialNumber: syz [ 496.056298][ T7533] usb 3-1: USB disconnect, device number 110 [ 496.085775][ T7505] usb 2-1: config 0 descriptor?? [ 496.111522][ T7505] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 496.150814][ T7505] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 496.161225][ T7505] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 496.161287][ T7505] usb 2-1: media controller created [ 496.195969][ T7505] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 496.204804][ T5714] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 496.240216][ T5760] udevd[5760]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 496.320813][ T7505] DVB: Unable to find symbol mt352_attach() [ 496.363646][ T5714] usb 4-1: Using ep0 maxpacket: 32 [ 496.370316][ T5714] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 496.384279][ T5714] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 496.384334][ T5714] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 496.384382][ T5714] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.417940][T10930] netlink: 'syz.1.1461': attribute type 1 has an invalid length. [ 496.431149][ T5714] usb 4-1: config 0 descriptor?? [ 496.524474][ T7505] DVB: Unable to find symbol nxt6000_attach() [ 496.530726][ T7505] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 496.556551][ T7505] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input78 [ 496.571944][ T7505] dvb-usb: schedule remote query interval to 1000 msecs. [ 496.572015][ T7505] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 496.572040][ T7505] dvb-usb: bulk message failed: -22 (7/0) [ 496.572063][ T7505] dvb-usb: bulk message failed: -22 (7/0) [ 496.637000][ T7505] usb 2-1: USB disconnect, device number 96 [ 496.780512][ T7505] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 496.860554][T10935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.871598][T10935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.921225][ T5714] savu 0003:1E7D:2D5A.0014: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 496.934799][ T7500] usb 1-1: new full-speed USB device number 97 using dummy_hcd [ 496.951660][ T7529] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 497.094961][ T7500] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 497.105723][ T7500] usb 1-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 497.105794][ T7500] usb 1-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 497.105852][ T7500] usb 1-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 497.132411][ T7529] usb 5-1: Using ep0 maxpacket: 32 [ 497.152900][ T7529] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 497.165166][ T7500] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 497.165214][ T7500] usb 1-1: SerialNumber: syz [ 497.184451][ T7505] usb 4-1: USB disconnect, device number 106 [ 497.196839][ T7529] usb 5-1: config index 0 descriptor too short (expected 27632, got 27) [ 497.196971][ T7529] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 497.203338][ T7529] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 497.203410][ T7529] usb 5-1: config 1 has no interface number 0 [ 497.203532][ T7529] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 497.203608][ T7529] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 497.203738][ T7529] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.342605][T10948] fido_id[10948]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 497.360619][ T7529] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 497.494582][T10955] program syz.1.1469 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 497.518678][ T7500] rndis_host 1-1:253.0: RNDIS init failed, -71 [ 497.525709][ T7500] rndis_host 1-1:253.0: probe with driver rndis_host failed with error -71 [ 497.551163][ T7500] usb 1-1: USB disconnect, device number 97 [ 497.574178][ T7529] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 497.868946][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 497.954240][ T7505] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 498.003847][ T7529] usb 5-1: USB disconnect, device number 105 [ 498.009712][ T7529] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 498.113464][ T7505] usb 2-1: Using ep0 maxpacket: 32 [ 498.115041][ T7505] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 498.118266][ T7505] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 498.118334][ T7505] usb 2-1: config 0 has no interface number 0 [ 498.118450][ T7505] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 498.118534][ T7505] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 498.128775][ T7505] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.128805][ T7505] usb 2-1: Product: syz [ 498.128823][ T7505] usb 2-1: Manufacturer: syz [ 498.128840][ T7505] usb 2-1: SerialNumber: syz [ 498.163622][ T7500] usb 1-1: new full-speed USB device number 98 using dummy_hcd [ 498.173051][ T7505] usb 2-1: config 0 descriptor?? [ 498.315579][ T7500] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 498.320329][ T7500] usb 1-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 498.320513][ T7500] usb 1-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 498.320664][ T7500] usb 1-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 498.343086][ T7500] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 498.343125][ T7500] usb 1-1: SerialNumber: syz [ 498.391984][ T7505] radio-si470x 2-1:0.35: this is not a si470x device. [ 498.610748][T10957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.682890][T10957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.779280][T10943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.798720][T10943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.876633][T10965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.886237][T10965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.936176][ T7505] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 499.054699][ T7500] rndis_host 1-1:253.0: RNDIS init failed, -71 [ 499.061607][ T7500] rndis_host 1-1:253.0: probe with driver rndis_host failed with error -71 [ 499.074445][ T5714] usb 4-1: new full-speed USB device number 107 using dummy_hcd [ 499.100338][ T7500] usb 1-1: USB disconnect, device number 98 [ 499.158428][T10969] IPVS: set_ctl: invalid protocol: 98 127.0.0.1:19996 [ 499.234638][ T5714] usb 4-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=18.d2 [ 499.246993][ T5714] usb 4-1: config 1 has an invalid interface number: 68 but max is 0 [ 499.257931][ T5714] usb 4-1: config 1 has no interface number 0 [ 499.266383][ T5714] usb 4-1: config 1 interface 68 has no altsetting 0 [ 499.276647][ T5714] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.284981][ T5714] usb 4-1: Product: syz [ 499.289468][ T5714] usb 4-1: Manufacturer: syz [ 499.295270][ T5714] usb 4-1: SerialNumber: syz [ 499.513985][ T5714] ttusbir 4-1:1.68: cannot find expected altsetting [ 499.523019][T10971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1475'. [ 499.539992][ T5714] usb 4-1: USB disconnect, device number 107 [ 499.692436][ T7502] usb 2-1: USB disconnect, device number 97 [ 499.921261][T10977] input: syz1 as /devices/virtual/input/input81 [ 499.973354][ T5714] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 500.115679][ T7529] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 500.133774][ T5714] usb 1-1: Using ep0 maxpacket: 16 [ 500.139932][ T5714] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 500.150464][ T5714] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.150501][ T5714] usb 1-1: config 0 interface 0 has no altsetting 0 [ 500.150537][ T5714] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.185720][ T5714] usb 1-1: config 0 descriptor?? [ 500.265874][T10986] kAFS: unable to lookup cell '(,c' [ 500.289738][ T7529] usb 5-1: Using ep0 maxpacket: 8 [ 500.305829][ T7529] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 500.353374][ T7529] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 500.353512][ T7529] usb 5-1: config 0 has no interface number 0 [ 500.361869][ T7529] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 500.363791][ T7529] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 500.363852][ T7529] usb 5-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 500.363937][ T7529] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 500.364013][ T7529] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 500.445204][ T7529] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.445328][ T7529] usb 5-1: Product: syz [ 500.448936][ T7529] usb 5-1: Manufacturer: syz [ 500.448991][ T7529] usb 5-1: SerialNumber: syz [ 500.463646][ T7529] usb 5-1: config 0 descriptor?? [ 500.533345][ T7505] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 500.657074][ T5714] mcp2221 0003:04D8:00DD.0015: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 500.686344][ T7505] usb 4-1: Using ep0 maxpacket: 32 [ 500.710425][ T7505] usb 4-1: New USB device found, idVendor=0a92, idProduct=1020, bcdDevice= 0.40 [ 500.722042][ T7505] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 927, setting to 64 [ 500.722123][ T7505] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 500.722175][ T7505] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 500.767289][T10979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.767740][T10979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.799716][ T7505] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.799786][ T7505] usb 4-1: Product: syz [ 500.799823][ T7505] usb 4-1: Manufacturer: ఉ [ 500.799846][ T7505] usb 4-1: SerialNumber: syz [ 500.878205][ T7529] iowarrior 5-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 500.932446][ T7529] usb 5-1: USB disconnect, device number 106 [ 501.044050][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 501.108596][ T7505] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 501.116269][ T7505] usb 4-1: MIDIStreaming interface descriptor not found [ 501.215045][ T7505] usb 4-1: USB disconnect, device number 108 [ 501.258336][T10973] i2c i2c-1: unsupported multi-msg i2c transaction [ 501.406119][T10973] ip_tables: iptables: counters copy to user failed while replacing table [ 501.552025][ T5714] usb 1-1: USB disconnect, device number 99 [ 501.696500][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.696586][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.724895][ T5817] udevd[5817]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 501.819334][T11007] FAULT_INJECTION: forcing a failure. [ 501.819334][T11007] name failslab, interval 1, probability 0, space 0, times 0 [ 501.819498][T11007] CPU: 1 UID: 0 PID: 11007 Comm: syz.4.1486 Not tainted syzkaller #0 PREEMPT(full) [ 501.819586][T11007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 501.819629][T11007] Call Trace: [ 501.819660][T11007] [ 501.819677][T11007] dump_stack_lvl+0xe8/0x150 [ 501.819827][T11007] should_fail_ex+0x410/0x560 [ 501.819935][T11007] ? __alloc_skb+0x1db/0x7a0 [ 501.819990][T11007] should_failslab+0xa8/0x100 [ 501.820075][T11007] ? __alloc_skb+0x1db/0x7a0 [ 501.820121][T11007] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 501.820217][T11007] ? __alloc_skb+0x18d/0x7a0 [ 501.820274][T11007] ? __alloc_skb+0x1db/0x7a0 [ 501.820343][T11007] __alloc_skb+0x1db/0x7a0 [ 501.820411][T11007] xfrm_alloc_compat+0x1a6/0x1740 [ 501.820614][T11007] ? __pfx_xfrm_alloc_compat+0x10/0x10 [ 501.820681][T11007] xfrm_nlmsg_multicast+0xda/0x1f0 [ 501.820809][T11007] xfrm_send_policy_notify+0xed2/0x1c00 [ 501.820913][T11007] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 501.820999][T11007] ? lock_acquire+0x115/0x350 [ 501.821129][T11007] ? lockdep_hardirqs_on+0x7b/0x110 [ 501.821230][T11007] ? __local_bh_enable_ip+0xd6/0x140 [ 501.821298][T11007] ? km_policy_notify+0x28/0x200 [ 501.821407][T11007] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 501.821485][T11007] km_policy_notify+0x121/0x200 [ 501.821577][T11007] ? km_policy_notify+0x28/0x200 [ 501.821665][T11007] xfrm_add_policy+0x4a1/0x690 [ 501.821777][T11007] ? __pfx_xfrm_add_policy+0x10/0x10 [ 501.821863][T11007] ? apparmor_capable+0x126/0x170 [ 501.821951][T11007] ? __nla_parse+0x40/0x60 [ 501.822037][T11007] xfrm_user_rcv_msg+0x7a8/0xf30 [ 501.822137][T11007] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 501.822290][T11007] ? __mutex_trylock_common+0x15f/0x270 [ 501.822349][T11007] ? __pfx___mutex_trylock_common+0x10/0x10 [ 501.822444][T11007] ? rcu_is_watching+0x16/0xb0 [ 501.822533][T11007] ? trace_contention_end+0x3d/0x140 [ 501.822631][T11007] netlink_rcv_skb+0x226/0x4a0 [ 501.822709][T11007] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 501.822809][T11007] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 501.822924][T11007] ? netlink_deliver_tap+0x2e/0x1b0 [ 501.822998][T11007] ? netlink_deliver_tap+0x2e/0x1b0 [ 501.823077][T11007] xfrm_netlink_rcv+0x79/0x90 [ 501.823162][T11007] netlink_unicast+0x7bd/0x940 [ 501.823256][T11007] netlink_sendmsg+0x813/0xb40 [ 501.823347][T11007] ? __pfx_netlink_sendmsg+0x10/0x10 [ 501.823435][T11007] ? apparmor_socket_sendmsg+0x98/0x360 [ 501.823529][T11007] ? __pfx_netlink_sendmsg+0x10/0x10 [ 501.823602][T11007] sock_sendmsg_nosec+0x13a/0x180 [ 501.823688][T11007] ____sys_sendmsg+0x54e/0x850 [ 501.823772][T11007] ? __pfx_____sys_sendmsg+0x10/0x10 [ 501.823889][T11007] ? import_iovec+0x73/0xa0 [ 501.823958][T11007] ___sys_sendmsg+0x2a5/0x360 [ 501.824023][T11007] ? __lock_acquire+0x6df/0x2e50 [ 501.824096][T11007] ? __pfx____sys_sendmsg+0x10/0x10 [ 501.824254][T11007] ? __fget_files+0x2a/0x420 [ 501.824332][T11007] ? __fget_files+0x3a2/0x420 [ 501.824437][T11007] __x64_sys_sendmsg+0x1b1/0x290 [ 501.824511][T11007] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 501.824631][T11007] do_syscall_64+0x166/0x520 [ 501.824717][T11007] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.824807][T11007] ? clear_bhb_loop+0x70/0xc0 [ 501.824872][T11007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.824937][T11007] RIP: 0033:0x7f7b0cd9e159 [ 501.824997][T11007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 501.825050][T11007] RSP: 002b:00007f7b0dd07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 501.825118][T11007] RAX: ffffffffffffffda RBX: 00007f7b0d025fa0 RCX: 00007f7b0cd9e159 [ 501.825163][T11007] RDX: 0000000000000800 RSI: 0000200000000ac0 RDI: 0000000000000003 [ 501.825212][T11007] RBP: 00007f7b0dd07090 R08: 0000000000000000 R09: 0000000000000000 [ 501.825261][T11007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 501.825295][T11007] R13: 00007f7b0d026038 R14: 00007f7b0d025fa0 R15: 00007f7b0d14fa48 [ 501.825390][T11007] [ 502.574061][T11018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1489'. [ 502.638265][T11021] loop5: detected capacity change from 0 to 7 [ 502.678696][T11021] Dev loop5: unable to read RDB block 7 [ 502.684607][T11021] loop5: unable to read partition table [ 502.684816][T11021] loop5: partition table beyond EOD, truncated [ 502.687969][T11021] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 502.763966][ T7529] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 502.927356][ T7533] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 502.951365][ T7529] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 502.973588][ T7529] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.973685][ T7529] usb 2-1: Product: syz [ 502.973725][ T7529] usb 2-1: Manufacturer: syz [ 502.978769][ T7529] usb 2-1: SerialNumber: syz [ 502.995703][ T7529] usb 2-1: config 0 descriptor?? [ 503.125641][ T7533] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 503.149918][ T7533] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 503.155262][ T7533] usb 1-1: config 0 has no interface number 0 [ 503.188591][ T7533] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.188717][ T7533] usb 1-1: Product: syz [ 503.196754][ T7533] usb 1-1: Manufacturer: syz [ 503.196811][ T7533] usb 1-1: SerialNumber: syz [ 503.226101][ T7533] usb 1-1: config 0 descriptor?? [ 503.462366][T11013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.471100][T11013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.506577][ T7533] dvb_usb_ec168 1-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 503.519581][ T5676] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 503.535242][ T7533] usb 1-1: USB disconnect, device number 100 [ 503.713835][ T5676] usb 3-1: Using ep0 maxpacket: 32 [ 503.722129][ T5676] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 503.734585][ T5676] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 503.742837][ T5676] usb 3-1: config 0 has no interface number 0 [ 503.752900][ T5676] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.753633][ T5676] usb 3-1: Product: syz [ 503.753686][ T5676] usb 3-1: Manufacturer: syz [ 503.753736][ T5676] usb 3-1: SerialNumber: syz [ 503.762723][ T5676] usb 3-1: config 0 descriptor?? [ 503.813387][ T7505] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 503.833458][ T5714] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 503.973621][ T7505] usb 4-1: Using ep0 maxpacket: 8 [ 503.975153][ T7505] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 503.982905][ T7505] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 503.982989][ T7505] usb 4-1: Product: syz [ 503.983034][ T7505] usb 4-1: Manufacturer: syz [ 503.983078][ T7505] usb 4-1: SerialNumber: syz [ 503.985896][ T5714] usb 5-1: Using ep0 maxpacket: 32 [ 503.995025][ T5714] usb 5-1: New USB device found, idVendor=0a92, idProduct=1020, bcdDevice= 0.40 [ 504.001781][ T5714] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 927, setting to 64 [ 504.001820][ T5714] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 504.001850][ T5714] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 504.020413][ T5714] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.020502][ T5714] usb 5-1: Product: syz [ 504.020550][ T5714] usb 5-1: Manufacturer: ఉ [ 504.020594][ T5714] usb 5-1: SerialNumber: syz [ 504.028628][ T7505] usb 4-1: config 0 descriptor?? [ 504.067394][ T7505] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 504.116828][ T7529] usb 2-1: non-Atmel transceiver xxxx3d3a [ 504.220254][ T5676] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 504.220409][ T5676] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 504.260580][T11045] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 504.313167][ T5714] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 504.315738][ T5714] usb 5-1: MIDIStreaming interface descriptor not found [ 504.341692][ T7529] usb 2-1: Firmware version (0.0) predates our first public release. [ 504.341886][ T7529] usb 2-1: Please update to version 0.2 or newer [ 504.359557][ T7529] usb 2-1: atusb_probe: initialization failed, error = -19 [ 504.413719][ T7529] usb 2-1: USB disconnect, device number 98 [ 504.485726][T11040] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1499'. [ 504.529471][ T5714] usb 5-1: USB disconnect, device number 107 [ 504.700014][ T5817] udevd[5817]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 504.859173][ T5676] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 504.872285][ T5676] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 504.893747][T11040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.902253][T11040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.916456][ T5676] usb 3-1: USB disconnect, device number 111 [ 504.987346][ T7505] gspca_zc3xx: reg_w_i err -71 [ 504.987470][ T7505] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 505.030022][ T7505] usb 4-1: USB disconnect, device number 109 [ 505.710287][T11069] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1506'. [ 505.790805][T11073] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1507'. [ 506.685246][T11067] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1505'. [ 506.823894][ T5714] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 506.834668][T11091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1514'. [ 506.905772][ T5676] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 506.978552][ T5714] usb 3-1: Using ep0 maxpacket: 32 [ 506.988226][ T5714] usb 3-1: New USB device found, idVendor=0a92, idProduct=1020, bcdDevice= 0.40 [ 506.998182][ T5714] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 927, setting to 64 [ 506.998221][ T5714] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 506.998252][ T5714] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 507.025479][ T5714] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.025567][ T5714] usb 3-1: Product: syz [ 507.025611][ T5714] usb 3-1: Manufacturer: ఉ [ 507.025662][ T5714] usb 3-1: SerialNumber: syz [ 507.095039][ T5676] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 507.124010][ T5676] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.124150][ T5676] usb 4-1: Product: syz [ 507.124281][ T5676] usb 4-1: Manufacturer: syz [ 507.124337][ T5676] usb 4-1: SerialNumber: syz [ 507.167828][ T5676] usb 4-1: config 0 descriptor?? [ 507.188043][ T5676] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 507.212222][ T5676] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 507.230603][ T5676] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 507.241230][ T5676] usb 4-1: media controller created [ 507.281229][ T5676] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 507.331412][ T5714] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 507.339512][ T5714] usb 3-1: MIDIStreaming interface descriptor not found [ 507.482443][T11103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1517'. [ 507.508571][T11088] netlink: 'syz.3.1513': attribute type 1 has an invalid length. [ 507.693147][ T5676] DVB: Unable to find symbol mt352_attach() [ 507.715079][ T5714] usb 3-1: USB disconnect, device number 112 [ 507.809011][T11111] FAULT_INJECTION: forcing a failure. [ 507.809011][T11111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 507.826712][T11111] CPU: 1 UID: 0 PID: 11111 Comm: syz.0.1519 Not tainted syzkaller #0 PREEMPT(full) [ 507.826748][T11111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 507.826764][T11111] Call Trace: [ 507.826773][T11111] [ 507.826784][T11111] dump_stack_lvl+0xe8/0x150 [ 507.826824][T11111] should_fail_ex+0x410/0x560 [ 507.826871][T11111] _copy_from_user+0x2d/0xb0 [ 507.826899][T11111] snd_seq_oss_write+0x6e2/0x950 [ 507.827077][T11111] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 507.827120][T11111] ? security_file_permission+0x75/0x260 [ 507.827160][T11111] odev_write+0x5a/0x80 [ 507.827186][T11111] ? __pfx_odev_write+0x10/0x10 [ 507.827209][T11111] vfs_write+0x296/0xba0 [ 507.827252][T11111] ? __pfx_vfs_write+0x10/0x10 [ 507.827294][T11111] ? __fget_files+0x2a/0x420 [ 507.827327][T11111] ? __fget_files+0x2a/0x420 [ 507.827356][T11111] ? __fget_files+0x3a2/0x420 [ 507.827384][T11111] ? __fget_files+0x2a/0x420 [ 507.827421][T11111] ksys_write+0x150/0x270 [ 507.827454][T11111] ? __pfx_ksys_write+0x10/0x10 [ 507.827496][T11111] do_syscall_64+0x166/0x520 [ 507.827526][T11111] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.827549][T11111] ? clear_bhb_loop+0x70/0xc0 [ 507.827575][T11111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.827592][T11111] RIP: 0033:0x7f46d179e159 [ 507.827610][T11111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 507.827626][T11111] RSP: 002b:00007f46d263a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 507.827645][T11111] RAX: ffffffffffffffda RBX: 00007f46d1a26090 RCX: 00007f46d179e159 [ 507.827659][T11111] RDX: 000000000000021e RSI: 0000200000000280 RDI: 0000000000000003 [ 507.827671][T11111] RBP: 00007f46d263a090 R08: 0000000000000000 R09: 0000000000000000 [ 507.827683][T11111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.827694][T11111] R13: 00007f46d1a26128 R14: 00007f46d1a26090 R15: 00007f46d1b4fa48 [ 507.827722][T11111] [ 507.903326][ T5676] DVB: Unable to find symbol nxt6000_attach() [ 507.903344][ T5676] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 508.097942][ T5676] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input84 [ 508.104756][ T7505] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 508.135812][ T5676] dvb-usb: schedule remote query interval to 1000 msecs. [ 508.145905][ T5676] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 508.157609][ T5676] dvb-usb: bulk message failed: -22 (7/0) [ 508.157737][ T5676] dvb-usb: bulk message failed: -22 (7/0) [ 508.204202][ T5676] usb 4-1: USB disconnect, device number 110 [ 508.255346][ T7505] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 508.271693][ T7505] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.279962][ T5817] udevd[5817]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 508.281317][ T7505] usb 5-1: Product: syz [ 508.281340][ T7505] usb 5-1: Manufacturer: syz [ 508.281357][ T7505] usb 5-1: SerialNumber: syz [ 508.317121][ T7505] usb 5-1: config 0 descriptor?? [ 508.370479][ T7505] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 508.399357][ T7505] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 508.406346][ T7505] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 508.406494][ T7505] usb 5-1: media controller created [ 508.471115][ T7505] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 508.567239][T11112] netlink: 'syz.4.1520': attribute type 1 has an invalid length. [ 508.580530][ T5676] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 508.676571][ T7505] DVB: Unable to find symbol mt352_attach() [ 508.716331][ T5714] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 508.796237][ T7505] DVB: Unable to find symbol nxt6000_attach() [ 508.796277][ T7505] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 508.816543][ T7505] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input86 [ 508.829293][ T7505] dvb-usb: schedule remote query interval to 1000 msecs. [ 508.829335][ T7505] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 508.829353][ T7505] dvb-usb: bulk message failed: -22 (7/0) [ 508.829370][ T7505] dvb-usb: bulk message failed: -22 (7/0) [ 508.850362][ T7505] usb 5-1: USB disconnect, device number 108 [ 508.870428][ T5714] usb 3-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 508.874940][ T5714] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 508.875059][ T5714] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 508.875132][ T5714] usb 3-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 508.875212][ T5714] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 508.875347][ T5714] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.940709][T11115] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 508.960991][ T5714] ims_pcu 3-1:1.0: Second endpoint on data interface is not BULK IN [ 508.961077][ T5714] ims_pcu 3-1:1.0: probe with driver ims_pcu failed with error -22 [ 509.055514][ T7505] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 509.291776][ T7505] usb 3-1: USB disconnect, device number 113 [ 510.084112][ T7505] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 510.235249][ T7505] usb 4-1: Using ep0 maxpacket: 32 [ 510.237149][ T7505] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 510.240809][ T7505] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 510.240837][ T7505] usb 4-1: config 0 has no interface number 0 [ 510.240880][ T7505] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 510.240910][ T7505] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 510.257692][ T7505] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.257778][ T7505] usb 4-1: Product: syz [ 510.257823][ T7505] usb 4-1: Manufacturer: syz [ 510.257869][ T7505] usb 4-1: SerialNumber: syz [ 510.316777][ T7505] usb 4-1: config 0 descriptor?? [ 510.534189][ T7505] radio-si470x 4-1:0.35: this is not a si470x device. [ 510.742212][T11144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.761764][T11144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.836409][ T7529] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 511.003753][ T7529] usb 3-1: Using ep0 maxpacket: 32 [ 511.011200][ T7529] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 511.028765][ T7529] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.028869][ T7529] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 511.029019][ T7529] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.074128][ T7505] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 511.074707][ T7529] usb 3-1: config 0 descriptor?? [ 511.110644][ T7529] hub 3-1:0.0: USB hub found [ 511.313419][ T5714] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 511.463399][ T5714] usb 5-1: Using ep0 maxpacket: 32 [ 511.471896][ T5714] usb 5-1: New USB device found, idVendor=0a92, idProduct=1020, bcdDevice= 0.40 [ 511.490555][ T5714] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 927, setting to 64 [ 511.490615][ T5714] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 511.490680][ T5714] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 511.527039][T11161] nvme_fabrics: unknown parameter or missing value '#! 1R?&n%~[6=p͊yz\Uj@5NfWrs)q' in ctrl creation request [ 511.560642][ T5714] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.560692][ T5714] usb 5-1: Product: syz [ 511.560729][ T5714] usb 5-1: Manufacturer: ఉ [ 511.560752][ T5714] usb 5-1: SerialNumber: syz [ 511.642435][ T7500] usb 4-1: USB disconnect, device number 111 [ 511.865383][ T7529] hub 3-1:0.0: config failed, can't read hub descriptor (err -90) [ 511.918619][ T5714] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 511.926256][ T5714] usb 5-1: MIDIStreaming interface descriptor not found [ 512.150282][ T5714] usb 5-1: USB disconnect, device number 109 [ 512.353329][ T7502] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 512.490779][ T5674] udevd[5674]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 512.524370][ T7502] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 512.541631][ T7502] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.550594][ T7502] usb 4-1: Product: syz [ 512.550647][ T7502] usb 4-1: Manufacturer: syz [ 512.550669][ T7502] usb 4-1: SerialNumber: syz [ 512.581560][ T7502] usb 4-1: config 0 descriptor?? [ 512.596927][ T7502] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 512.647029][ T7502] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 512.657890][ T7502] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 512.679179][ T7502] usb 4-1: media controller created [ 512.776964][ T7502] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 512.909882][T11167] netlink: 'syz.3.1532': attribute type 1 has an invalid length. [ 512.966843][T11170] netlink: 'syz.0.1533': attribute type 4 has an invalid length. [ 513.047330][T11173] netlink: 'syz.0.1533': attribute type 4 has an invalid length. [ 513.105124][T11174] fuse: Unknown parameter 'Vr/up_id/@ef&6' [ 513.130111][T11172] usb usb7: usbfs: process 11172 (syz.4.1534) did not claim interface 0 before use [ 513.141642][T11174] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 513.141671][T11174] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 513.217555][T11174] vhci_hcd vhci_hcd.0: Device attached [ 513.262933][T11177] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(14) [ 513.262957][T11177] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 513.263526][T11177] vhci_hcd vhci_hcd.0: Device attached [ 513.354904][ T7502] DVB: Unable to find symbol mt352_attach() [ 513.370108][T11181] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(13) [ 513.370133][T11181] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 513.393071][T11181] vhci_hcd vhci_hcd.0: Device attached [ 513.407604][T11174] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(18) [ 513.407625][T11174] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 513.414846][ T5714] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 513.416971][T11174] vhci_hcd vhci_hcd.0: Device attached [ 513.517731][T11170] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(17) [ 513.517757][T11170] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 513.533308][T11170] vhci_hcd vhci_hcd.0: Device attached [ 513.575827][T11161] nvme nvme0: failed to connect socket: -512 [ 513.622077][T11170] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(21) [ 513.622098][T11170] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 513.625369][T11170] vhci_hcd vhci_hcd.0: Device attached [ 513.733593][T11170] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(23) [ 513.733626][T11170] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 513.733976][T11170] vhci_hcd vhci_hcd.0: Device attached [ 513.789958][T11173] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(25) [ 513.789989][T11173] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 513.790234][T11173] vhci_hcd vhci_hcd.0: Device attached [ 513.880499][T11190] vhci_hcd: connection closed [ 513.881032][T11185] vhci_hcd: connection closed [ 513.886403][T11183] vhci_hcd: connection closed [ 513.896960][T11187] vhci_hcd: connection closed [ 513.915311][ T50] vhci_hcd vhci_hcd.0: stop threads [ 513.920169][ T50] vhci_hcd vhci_hcd.0: release socket [ 513.934640][T11178] vhci_hcd: connection closed [ 513.935013][T11175] vhci_hcd: connection reset by peer [ 513.948515][T11194] vhci_hcd: connection closed [ 513.962636][ T50] vhci_hcd vhci_hcd.0: disconnect device [ 513.967976][ T50] vhci_hcd vhci_hcd.0: stop threads [ 513.968002][ T50] vhci_hcd vhci_hcd.0: release socket [ 513.980626][T11196] vhci_hcd: connection closed [ 514.032537][ T50] vhci_hcd vhci_hcd.0: disconnect device [ 514.046400][ T50] vhci_hcd vhci_hcd.0: stop threads [ 514.046471][ T50] vhci_hcd vhci_hcd.0: release socket [ 514.046638][ T50] vhci_hcd vhci_hcd.0: disconnect device [ 514.066671][ T50] vhci_hcd vhci_hcd.0: stop threads [ 514.066775][ T50] vhci_hcd vhci_hcd.0: release socket [ 514.072244][ T50] vhci_hcd vhci_hcd.0: disconnect device [ 514.130491][ T7502] DVB: Unable to find symbol nxt6000_attach() [ 514.136907][ T7502] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 514.150291][ T7502] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input88 [ 514.163350][ T50] vhci_hcd vhci_hcd.0: stop threads [ 514.163392][ T50] vhci_hcd vhci_hcd.0: release socket [ 514.163447][ T50] vhci_hcd vhci_hcd.0: disconnect device [ 514.171505][ T50] vhci_hcd vhci_hcd.0: stop threads [ 514.171562][ T50] vhci_hcd vhci_hcd.0: release socket [ 514.171711][ T50] vhci_hcd vhci_hcd.0: disconnect device [ 514.188803][ T50] vhci_hcd vhci_hcd.0: stop threads [ 514.188879][ T50] vhci_hcd vhci_hcd.0: release socket [ 514.189027][ T50] vhci_hcd vhci_hcd.0: disconnect device [ 514.190735][ T50] vhci_hcd vhci_hcd.0: stop threads [ 514.190789][ T50] vhci_hcd vhci_hcd.0: release socket [ 514.190929][ T50] vhci_hcd vhci_hcd.0: disconnect device [ 514.241416][ T7502] dvb-usb: schedule remote query interval to 1000 msecs. [ 514.248928][ T7502] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 514.259198][ T7502] dvb-usb: bulk message failed: -22 (7/0) [ 514.265383][ T7502] dvb-usb: bulk message failed: -22 (7/0) [ 514.274654][ T7502] usb 4-1: USB disconnect, device number 112 [ 514.363978][T11202] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1536'. [ 514.455027][ T7502] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 514.485532][ C1] ------------[ cut here ]------------ [ 514.485545][ C1] DEBUG_LOCKS_WARN_ON(1) [ 514.485618][ C1] WARNING: kernel/locking/lockdep.c:238 at __lock_acquire+0x3b7/0x2e50, CPU#1: syz-executor/5632 [ 514.505918][ C1] Modules linked in: [ 514.509833][ C1] CPU: 1 UID: 0 PID: 5632 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 514.519316][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 514.529387][ C1] RIP: 0010:__lock_acquire+0x3be/0x2e50 [ 514.534979][ C1] Code: fa 18 00 74 04 31 c0 eb 2d 90 e8 9d 85 37 03 85 c0 74 1c 83 3d 56 26 d7 0e 00 75 13 48 8d 3d e9 2e da 0e 48 c7 c6 cd d2 59 8e <67> 48 0f b9 3a 90 31 c0 48 8b 3c 24 0f b6 98 c4 00 00 00 49 8b 46 [ 514.554598][ C1] RSP: 0018:ffffc90000a18998 EFLAGS: 00010046 [ 514.560692][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffff88807fc8ddc0 [ 514.568692][ C1] RDX: 8000000000000100 RSI: ffffffff8e59d2cd RDI: ffffffff907d5020 [ 514.576697][ C1] RBP: 0000000000000000 R08: 0000000000000100 R09: 1ffffffff20f48f0 [ 514.584685][ C1] R10: dffffc0000000000 R11: fffffbfff20f48f1 R12: 0000000000000dcc [ 514.592699][ C1] R13: ffff88807fc8e970 R14: ffff88807fc8e9c0 R15: 0000000000000002 [ 514.600696][ C1] FS: 0000555555c24500(0000) GS:ffff888124dd9000(0000) knlGS:0000000000000000 [ 514.609650][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 514.616278][ C1] CR2: 00002000001df030 CR3: 0000000059b8e000 CR4: 00000000003526f0 [ 514.624285][ C1] Call Trace: [ 514.627584][ C1] [ 514.630451][ C1] ? __lock_acquire+0x6df/0x2e50 [ 514.635415][ C1] ? look_up_lock_class+0x57/0x110 [ 514.640560][ C1] ? register_lock_class+0x31/0x2e0 [ 514.645811][ C1] lock_acquire+0x115/0x350 [ 514.650338][ C1] ? tcp_tsq_handler+0x29/0x200 [ 514.655292][ C1] _raw_spin_lock+0x2e/0x40 [ 514.659895][ C1] ? tcp_tsq_handler+0x29/0x200 [ 514.664767][ C1] tcp_tsq_handler+0x29/0x200 [ 514.669466][ C1] tcp_tsq_workfn+0x384/0x410 [ 514.674162][ C1] ? __pfx_tcp_tsq_workfn+0x10/0x10 [ 514.679389][ C1] ? rcu_is_watching+0x16/0xb0 [ 514.684179][ C1] ? process_scheduled_works+0x97a/0x1630 [ 514.689929][ C1] process_scheduled_works+0xc3d/0x1630 [ 514.695514][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 514.701515][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 514.706571][ C1] ? assign_work+0x3cf/0x5d0 [ 514.711186][ C1] bh_worker+0x451/0x870 [ 514.715484][ C1] tasklet_action+0xc/0x70 [ 514.719928][ C1] handle_softirqs+0x226/0x860 [ 514.724721][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 514.729521][ C1] __irq_exit_rcu+0xcb/0x220 [ 514.734142][ C1] irq_exit_rcu+0x9/0x30 [ 514.738407][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 514.744078][ C1] [ 514.747038][ C1] [ 514.749990][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 514.756017][ C1] RIP: 0010:finish_task_switch+0x413/0xc60 [ 514.761851][ C1] Code: 04 00 00 41 c7 84 24 20 0e 00 00 00 00 00 00 e9 db 06 00 00 49 83 c4 48 4c 89 e7 e8 f7 fd 50 0a e8 d2 00 3a 00 fb 4c 8b 65 c8 <49> 8d bc 24 10 17 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 514.781476][ C1] RSP: 0018:ffffc90003e67980 EFLAGS: 00000202 [ 514.787601][ C1] RAX: 00000000002ab9b3 RBX: ffff8880b873c8e0 RCX: 8000000000000001 [ 514.795595][ C1] RDX: 0000000000000000 RSI: ffffffff8e474a01 RDI: ffffffff8c6d9480 [ 514.803607][ C1] RBP: ffffc90003e679d0 R08: ffffffff907a167f R09: 1ffffffff20f42cf [ 514.811608][ C1] R10: dffffc0000000000 R11: fffffbfff20f42d0 R12: ffff88807fc8ddc0 [ 514.819603][ C1] R13: ffff8880b873c8a8 R14: dffffc0000000000 R15: 1ffff110170e791c [ 514.827610][ C1] __schedule+0x17e3/0x58f0 [ 514.832159][ C1] ? __pfx___schedule+0x10/0x10 [ 514.837056][ C1] ? lock_acquire+0x115/0x350 [ 514.841763][ C1] ? schedule+0x90/0x2b0 [ 514.846035][ C1] schedule+0x164/0x2b0 [ 514.850218][ C1] do_nanosleep+0x21e/0x6a0 [ 514.854759][ C1] ? do_nanosleep+0x7e/0x6a0 [ 514.859376][ C1] ? __pfx_do_nanosleep+0x10/0x10 [ 514.864424][ C1] ? __asan_memset+0x22/0x50 [ 514.869042][ C1] ? __hrtimer_setup+0x1b7/0x260 [ 514.874008][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 514.879237][ C1] hrtimer_nanosleep+0x18f/0x3a0 [ 514.884215][ C1] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 514.889703][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 514.894954][ C1] __se_sys_clock_nanosleep+0x35b/0x3b0 [ 514.900535][ C1] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 514.906639][ C1] do_syscall_64+0x166/0x520 [ 514.911264][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.917353][ C1] ? clear_bhb_loop+0x70/0xc0 [ 514.922053][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.927964][ C1] RIP: 0033:0x7f0fc115e98e [ 514.932405][ C1] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 514.952037][ C1] RSP: 002b:00007f0fc154fd28 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 514.960480][ C1] RAX: ffffffffffffffda RBX: 0000555555c24500 RCX: 00007f0fc115e98e [ 514.968504][ C1] RDX: 00007f0fc154fd80 RSI: 0000000000000000 RDI: 0000000000000000 [ 514.976513][ C1] RBP: 00007f0fc154fdec R08: 0000000000000000 R09: 0000000000000000 [ 514.984515][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 514.992512][ C1] R13: 00000000000927c0 R14: 000000000007d93b R15: 00007f0fc154fe40 [ 515.000518][ C1] [ 515.003574][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 515.010875][ C1] CPU: 1 UID: 0 PID: 5632 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 515.020354][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 515.030439][ C1] Call Trace: [ 515.033747][ C1] [ 515.036644][ C1] vpanic+0x56d/0xa60 [ 515.040703][ C1] ? __pfx__printk+0x10/0x10 [ 515.045317][ C1] ? __pfx_vpanic+0x10/0x10 [ 515.049874][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 515.055185][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 515.060414][ C1] panic+0xc5/0xd0 [ 515.064168][ C1] ? __pfx_panic+0x10/0x10 [ 515.068619][ C1] __warn+0x315/0x4c0 [ 515.072629][ C1] ? __lock_acquire+0x3b7/0x2e50 [ 515.077592][ C1] ? __lock_acquire+0x3b7/0x2e50 [ 515.082552][ C1] __report_bug+0x276/0x570 [ 515.087207][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 515.092551][ C1] ? __lock_acquire+0x3b7/0x2e50 [ 515.097532][ C1] ? __pfx___report_bug+0x10/0x10 [ 515.102623][ C1] report_bug_entry+0x19b/0x290 [ 515.107542][ C1] ? __lock_acquire+0x3be/0x2e50 [ 515.112507][ C1] ? __lock_acquire+0x3c3/0x2e50 [ 515.117470][ C1] handle_bug+0xce/0x200 [ 515.121743][ C1] exc_invalid_op+0x1a/0x50 [ 515.126271][ C1] asm_exc_invalid_op+0x1a/0x20 [ 515.131143][ C1] RIP: 0010:__lock_acquire+0x3be/0x2e50 [ 515.136715][ C1] Code: fa 18 00 74 04 31 c0 eb 2d 90 e8 9d 85 37 03 85 c0 74 1c 83 3d 56 26 d7 0e 00 75 13 48 8d 3d e9 2e da 0e 48 c7 c6 cd d2 59 8e <67> 48 0f b9 3a 90 31 c0 48 8b 3c 24 0f b6 98 c4 00 00 00 49 8b 46 [ 515.156345][ C1] RSP: 0018:ffffc90000a18998 EFLAGS: 00010046 [ 515.162444][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffff88807fc8ddc0 [ 515.170444][ C1] RDX: 8000000000000100 RSI: ffffffff8e59d2cd RDI: ffffffff907d5020 [ 515.178444][ C1] RBP: 0000000000000000 R08: 0000000000000100 R09: 1ffffffff20f48f0 [ 515.186453][ C1] R10: dffffc0000000000 R11: fffffbfff20f48f1 R12: 0000000000000dcc [ 515.194454][ C1] R13: ffff88807fc8e970 R14: ffff88807fc8e9c0 R15: 0000000000000002 [ 515.202458][ C1] ? __lock_acquire+0x3a3/0x2e50 [ 515.207429][ C1] ? __lock_acquire+0x6df/0x2e50 [ 515.212392][ C1] ? look_up_lock_class+0x57/0x110 [ 515.217560][ C1] ? register_lock_class+0x31/0x2e0 [ 515.222790][ C1] lock_acquire+0x115/0x350 [ 515.227345][ C1] ? tcp_tsq_handler+0x29/0x200 [ 515.232237][ C1] _raw_spin_lock+0x2e/0x40 [ 515.236772][ C1] ? tcp_tsq_handler+0x29/0x200 [ 515.241649][ C1] tcp_tsq_handler+0x29/0x200 [ 515.246352][ C1] tcp_tsq_workfn+0x384/0x410 [ 515.251086][ C1] ? __pfx_tcp_tsq_workfn+0x10/0x10 [ 515.256310][ C1] ? rcu_is_watching+0x16/0xb0 [ 515.261100][ C1] ? process_scheduled_works+0x97a/0x1630 [ 515.266846][ C1] process_scheduled_works+0xc3d/0x1630 [ 515.272433][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 515.278437][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 515.283500][ C1] ? assign_work+0x3cf/0x5d0 [ 515.288134][ C1] bh_worker+0x451/0x870 [ 515.292445][ C1] tasklet_action+0xc/0x70 [ 515.296896][ C1] handle_softirqs+0x226/0x860 [ 515.301696][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 515.306490][ C1] __irq_exit_rcu+0xcb/0x220 [ 515.311106][ C1] irq_exit_rcu+0x9/0x30 [ 515.315374][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 515.321044][ C1] [ 515.323996][ C1] [ 515.326947][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 515.332951][ C1] RIP: 0010:finish_task_switch+0x413/0xc60 [ 515.338793][ C1] Code: 04 00 00 41 c7 84 24 20 0e 00 00 00 00 00 00 e9 db 06 00 00 49 83 c4 48 4c 89 e7 e8 f7 fd 50 0a e8 d2 00 3a 00 fb 4c 8b 65 c8 <49> 8d bc 24 10 17 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 515.358428][ C1] RSP: 0018:ffffc90003e67980 EFLAGS: 00000202 [ 515.364528][ C1] RAX: 00000000002ab9b3 RBX: ffff8880b873c8e0 RCX: 8000000000000001 [ 515.372525][ C1] RDX: 0000000000000000 RSI: ffffffff8e474a01 RDI: ffffffff8c6d9480 [ 515.380523][ C1] RBP: ffffc90003e679d0 R08: ffffffff907a167f R09: 1ffffffff20f42cf [ 515.388517][ C1] R10: dffffc0000000000 R11: fffffbfff20f42d0 R12: ffff88807fc8ddc0 [ 515.396540][ C1] R13: ffff8880b873c8a8 R14: dffffc0000000000 R15: 1ffff110170e791c [ 515.404578][ C1] __schedule+0x17e3/0x58f0 [ 515.409241][ C1] ? __pfx___schedule+0x10/0x10 [ 515.414150][ C1] ? lock_acquire+0x115/0x350 [ 515.418867][ C1] ? schedule+0x90/0x2b0 [ 515.423143][ C1] schedule+0x164/0x2b0 [ 515.427341][ C1] do_nanosleep+0x21e/0x6a0 [ 515.431898][ C1] ? do_nanosleep+0x7e/0x6a0 [ 515.436516][ C1] ? __pfx_do_nanosleep+0x10/0x10 [ 515.441564][ C1] ? __asan_memset+0x22/0x50 [ 515.446180][ C1] ? __hrtimer_setup+0x1b7/0x260 [ 515.451150][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 515.456382][ C1] hrtimer_nanosleep+0x18f/0x3a0 [ 515.461354][ C1] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 515.466848][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 515.472083][ C1] __se_sys_clock_nanosleep+0x35b/0x3b0 [ 515.477682][ C1] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 515.483793][ C1] do_syscall_64+0x166/0x520 [ 515.488417][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.494505][ C1] ? clear_bhb_loop+0x70/0xc0 [ 515.499215][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.505132][ C1] RIP: 0033:0x7f0fc115e98e [ 515.509579][ C1] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 515.529296][ C1] RSP: 002b:00007f0fc154fd28 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 515.537766][ C1] RAX: ffffffffffffffda RBX: 0000555555c24500 RCX: 00007f0fc115e98e [ 515.545848][ C1] RDX: 00007f0fc154fd80 RSI: 0000000000000000 RDI: 0000000000000000 [ 515.553850][ C1] RBP: 00007f0fc154fdec R08: 0000000000000000 R09: 0000000000000000 [ 515.561860][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 515.569866][ C1] R13: 00000000000927c0 R14: 000000000007d93b R15: 00007f0fc154fe40 [ 515.577888][ C1] [ 515.581558][ C1] Kernel Offset: disabled [ 515.585906][ C1] Rebooting in 86400 seconds..