last executing test programs: 13.459190191s ago: executing program 2 (id=8591): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040098}, 0x4004) r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x40040) syz_usb_connect(0x5, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be7406d04230807000102030109025200010000000009044000000e0100390a240108000b020102082407010500070e01000606060509000600040007000300390c2402050302060254df000a092402050001031f04092403"], 0x0) ioctl$HIDIOCGUSAGE(r1, 0x501c4814, &(0x7f0000000000)={0x2, 0xffffffff, 0x0, 0xfffff800}) 13.395886565s ago: executing program 4 (id=8592): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/cgroup.procs\x00', 0x2, 0x128) (async) io_setup(0x9, &(0x7f0000001d00)=0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x8, 0x8, 0x5}) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000005c0), 0x10) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) ioctl$VIDIOC_DBG_G_REGISTER(r0, 0xc0385650, &(0x7f0000000400)={{0x0, @addr=0x3}, 0x8, 0x5, 0x8}) (async) sendmmsg$unix(r4, &(0x7f0000001000)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000}}, {{&(0x7f0000000940)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1c000000030000000100400002000000", @ANYRES32=r5, @ANYBLOB="a4f443f5863d103588bb609dba683880b3805f57d7ee0f1c1bace9f4be8c82178d491ac522aa28c6a453e1a43f4dd8952001b9845ef045ce91646beca87ccc98f2eb5abf38c0b857a61c9fd3c481239301030e517435a946458c9e2a7785b2e839cb7a425469140a052fd381bc3810e1f875639188141eb1fda809705b39d97613152c28bc6a83ed2c7ac8fab54982519094a1a45e637d9eaafda174cde7736fe2ab2e9ec30fe32ea8115be7a94b23ec5ebcaae8f5efff931cf8a240db2b5b5fc5f378b48ce5b0827f8d414d6c9597424d", @ANYRES32=r6, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x38, 0x40}}], 0x2, 0x4) recvmmsg(r2, &(0x7f0000003440)=[{{&(0x7f00000000c0)=@xdp, 0x80, &(0x7f0000002980)=[{&(0x7f0000001080)=""/198, 0xc6}], 0x1, &(0x7f0000000180)=""/140, 0x8c}, 0xfffdfff6}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000780)=""/133, 0x85}], 0x1, &(0x7f0000000840)=""/171, 0xb5}, 0x7}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000a00)=""/191, 0xbf}, {&(0x7f0000000540)=""/17, 0x11}, {&(0x7f0000000ac0)=""/129, 0x81}], 0xffffffffffffc44, &(0x7f0000000940)=""/33, 0x21}, 0x1}, {{&(0x7f0000000b80)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000003680), 0x0, &(0x7f0000002140)=""/205, 0xcd}, 0x3}, {{&(0x7f00000006c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000000d40)=[{&(0x7f00000022c0)=""/113, 0x71}, {&(0x7f0000002340)=""/224, 0xe0}, {&(0x7f0000002440)=""/84, 0x54}, {&(0x7f0000002000)=""/183, 0xb7}], 0x4, &(0x7f0000000d80)=""/188, 0xbc}, 0x45}, {{0x0, 0x0, &(0x7f0000002d40)}, 0x95}, {{&(0x7f0000002e00)=@vsock, 0x80, &(0x7f0000002f00)}, 0x5}, {{0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000003080)=""/53, 0x35}], 0x1, &(0x7f0000003100)=""/239, 0xef}, 0x5}], 0x8, 0x10022, 0x0) (async) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) (async) r7 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000405308460100000000000109022400010000e80b090400fd01030000000921fd7ffc0122ea00092a81030002050000"], 0x0) io_getevents(r1, 0x80000100000001, 0x9, &(0x7f0000000e40)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000440)={0x77359400}) (async) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x8, r3, &(0x7f0000000100)="331e767999", 0x5, 0x7, 0x0, 0x2}]) 12.926604468s ago: executing program 1 (id=8594): syz_open_dev$video(0x0, 0x800000020000007, 0x22000) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_usb_connect(0x2, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b003e660102030109022200010000"], 0x0) mkdir(0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/../file0/file0\x00', 0x200) set_mempolicy(0x2, &(0x7f0000000100)=0x3, 0x5) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x1, 0x13) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000040)={'gre0\x00', 0x0, 0x8000, 0x80, 0x97be, 0x6, {{0x5, 0x4, 0x3, 0x1f, 0x14, 0x64, 0x0, 0x8, 0x2f, 0x0, @private=0xa010102, @multicast1}}}}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc00000000001dd3b48897dfbc160000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000010800000000000000000a00000405800100076e00000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="74000000100037042bbd7000fddbdf2500000000", @ANYRES32=r4, @ANYBLOB="080c0400040200005400128009000100626f6e64000000004400028008001c003d0900000800030006"], 0x74}, 0x1, 0x0, 0x0, 0x4040880}, 0x2400c050) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12.709021874s ago: executing program 2 (id=8597): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, 0xff6e}, 0x0, 0x80}) r1 = syz_open_dev$sndctrl(&(0x7f0000000d40), 0x2, 0x800) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000003440)=""/4096) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xe26, 0x101400) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x284440, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockname$packet(r5, 0x0, &(0x7f0000000180)) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r6, 0xaea2, 0x7f) unshare(0xc040400) r7 = timerfd_create(0x7, 0x0) timerfd_settime(r7, 0x3, &(0x7f00000001c0)={{0x0, 0x3938700}}, &(0x7f0000000200)) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x10}]}) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000000)=0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r10, 0x6, 0x1f, 0xffffffffffffffff, &(0x7f0000000300)) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)="e76f3bc40cbc6493cb8a88252c16bdb106fb1a4fdbbd8fcd611ded2564c8fa6074517f34fad72e2a24b7138958d9d12382a4e1954ada33402fb015d82ea7815997e1a2d7bf7bdef5", 0x48}], 0x1}}], 0x1, 0x4008000) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a3a440000102030109023b000101000000090400000302060000052406000005240000000d240f0100000000000000000009"], 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={r9, r11, 0xee01}, 0xc) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0xc0045520, &(0x7f00000000c0)=""/92) 12.596492732s ago: executing program 4 (id=8598): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x44, 0x64, 0xf31, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40054}, 0x4804) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000030a0fdb00000000000000000a0060050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f757465000000080005400000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="50000000100001002dbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="5d4f0000000000001c001a8018000a801400070020010000000000000000000000000000140035"], 0x50}}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x99) futex_waitv(&(0x7f0000001cc0)=[{0x1, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, 0x0) syz_open_dev$hiddev(&(0x7f0000000040), 0x1, 0x24002) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="340000002e0003050000000000000000200000f8ffffffffffffff0008000000", @ANYRES32], 0x34}], 0x1}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x10000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xff2e) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x390, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x2c0, 0x2e8, 0x2e8, 0x2c0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x41}, @private1={0xfc, 0x1, '\x00', 0xfd}, [0xffffff00, 0xff000000, 0x0, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xffffff00, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0x7, 0x7}, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x100, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee0500000000000000ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06d7d4e252c3394fed47bf78c70f607b0178fa5ea3350ebc989f1f34a214e67442ce98bbaa8e0f7323a4ca0a7be6c60c527bac2b500", 0x1, 0x3}}, @common=@inet=@socket1={{0x28}, 0x1}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) syz_usb_control_io$hid(r5, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="00221a2b5aa40bf85edaca830000000000000000005adf2f0f4359856fbbe6d5a441da8eb2f721e3b179d50dca4caa83612296cbe7d3b3c10657fa0718a86227cf8c0169c1da1f40d5c4a7ff900e47840ba167adb04ce4ad3a7e64cf97e320758490b1216aa221877a000400"/120], 0x0}, 0x0) r7 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r7, 0xc018480d, &(0x7f0000000040)={0x2, 0xffffffff, 0x7, 0x452, 0x5, 0x8}) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000100)={0xa04c, 0x53b3, 0xfffffffd, 0x3, 0x1b, "53af0f0b4ecf6c29bf81c173f4a8f5f73eb62f"}) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r8, &(0x7f00000000c0)='2\x00', 0x2) r9 = socket$inet6(0x10, 0x2, 0x4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x81, 0xffffffff}) sendto$inet6(r9, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) 12.0846781s ago: executing program 2 (id=8599): openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$qrtr(0x2a, 0x2, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b', @ANYRES32=r0], 0x24}}, 0x0) 11.928149364s ago: executing program 2 (id=8601): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x8040) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x4044010}, 0x0) recvmsg$unix(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/54, 0x36}], 0x1}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000028006700000a06"], 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=@deltclass={0x24, 0x29, 0x10, 0x70bd2b, 0xffff2127, {0x0, 0x0, 0x0, r6, {0xe, 0xfff1}, {0xf, 0xf}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xf, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @broadcast}, 0x14) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 11.509587221s ago: executing program 1 (id=8602): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0400f9f407000904018002200000000000000000000800010000000000", 0x24) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, 0x0, 0x201, 0x70bd25, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x401}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x101}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfffffbff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000040}, 0x4008811) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8000000) writev(0xffffffffffffffff, 0x0, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000480), 0xa6f81, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x24000085) keyctl$dh_compute(0x17, &(0x7f0000000100), 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000380)=0x1c) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) r3 = dup2(r2, r2) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(r3, &(0x7f00000063c0)={0x2020}, 0x2020) r4 = fsopen(&(0x7f00000003c0)='ubifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000400)='{\x00', &(0x7f0000000440)='\x00', 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007bc0)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_HANDLE={0xc}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb0}}, 0x0) 11.075483524s ago: executing program 2 (id=8603): syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/config\x00') openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) socketpair$unix(0x1, 0x3294731cd32f3436, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) io_uring_setup(0x8d7, &(0x7f0000000240)={0x0, 0x50c, 0x800, 0x1, 0x221}) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902240003000000000904"], 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="925b1d4f0da92b5ca67487a81a06767f4299d19ca2480e70710af359f0306750ded874f19dee3b9bfabd6bf255f9bbac28a4370e924df0adf607ec63c5fa4f1993ee62cfa27e05b057d5993828841ff06a2381787c1541e2bf6afc57a81a2128476c1138978f24e12e10a0fe0cc4bdb43428250972b49f7f6f6541ad3bc019750e80f2fd18df5683060d08f24754fd5d9d986af540f0ed01b8b42b5a8a99ce365fcb535babd1f9db14af56719723bc96f586ba92e6e8fb9a"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r3, 0x0, &(0x7f0000000280)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="400501004a00ce"]}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000800, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getdents(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) r5 = syz_usb_connect(0x0, 0x3d7, &(0x7f00000007c0)=ANY=[@ANYBLOB="120100004cefc008e10593085bfd010203010902c50301000000000904"], 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2000c450) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r7 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r8 = socket(0x8, 0x6, 0x3) sendfile(r8, r7, 0x0, 0x8) read$FUSE(r7, &(0x7f000000b040)={0x2020}, 0x2020) syz_usb_control_io$lan78xx(r5, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[@ANYBLOB="800e00000000"], 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$IORING_OFF_SQES(0x0, 0xfffffffd, 0x1000001, 0x10010, 0xffffffffffffffff, 0x10000000) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000040), &(0x7f0000000200)=0x4) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 10.148484614s ago: executing program 1 (id=8608): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b"], 0x28}}, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x5, 0x0, 0xfffffffe, {0x0, 0xea60}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fae8a9ad451a727"}}, 0x48}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x5, 0x609f, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {}, 0x1, @can={{0x3, 0x1}, 0x1, 0x3, 0x0, 0x0, "6ee7ba2197db18bc"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x44801) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x458, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc10c5541, &(0x7f0000000040)=0x2) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000004c0)={"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"}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff02000000017c0000040042800c00018006000600800a000014000280"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r5 = socket$kcm(0x10, 0x0, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x2e}, {&(0x7f0000000b80)="4d14eb8b0cc7e80c5e8954be022211c7c52c74cd20459297467194305a40da3c8ba573ba22987f8b6923cc1f157eabc6dafa03efe8d1e044f5fb446ed8a7a9e0ac7cb406b8c843b7a0ab2c01c3d21be2a4fba2e0d9975d58a15c82b5e7e4f9e394e213462cdbcb9cb52fbebe2796f3adf0344f7e6f4f762bc728f901b4aa2bfdf08336b928992f43e5babdab5bbe5744e49ef1068f87add244db5f2c2a7f466d9a92c31176fd16a0611a9aafe99bfe347a1dd1ca79893da881b91947088d07834a05d6ab1227429a216a876ed89e802134f9ddb9bac22f08fac0ce3bb32b5ea6a1301ba162e9249a", 0xe8}], 0x2}, 0x20004005) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000076000100fefffffffddbdf25810a000000"], 0x20}}, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x56a, 0x29, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0xa0, 0x9, "", [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x1, 0x2, 0x29, {0x9, 0x21, 0xbb2, 0x5d, 0x1, {0x22, 0x10a}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0x5, 0x67}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x3, 0x6, 0x60, 0xaf, 0x7}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x4, [{0x8d, &(0x7f00000001c0)=@string={0x8d, 0x3, "69cd8a0fbf673409e6144f43f89f077679d1f813a98ca1ff3f4c46f25fd1468856174a77ea5b52afb2b4cc86545ebf355c110ec683036396ba8483938168f6e9a2cb3ceeb2444a86f17509e790fa920cd9926619be5c0752a8daea0ec0179fc6fb7deea87bf18c340373802f283c4400d1c2baac8f8583d552bc08cada12f7462a9e9488879e5fd0ac3148"}}, {0xbf, &(0x7f00000002c0)=@string={0xbf, 0x3, "f3c93a139052626fb1b1462cc54468b873e0587b9ba352d74b01a1cde8c2142f27ef732a13ad79346837c45bae740d8be8a4814a7a28e06316b6f3e49260a01c161471040f26002588b7b8a70484f7e53a38e1809cf5fe0715efea73f8e4c767d77a5934d1b7a20c7ba399115ef2b589b6aef0dd94f4bf58fea6689e26e8f8708a7f9e9d256cb5aa3c1c2077149027c4161ca0ca1661d0d7e6244d79a280dfcc92cb7966a81b1103272526daf261325d9dcfd4e636550f2fda7965e7e3"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1801}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x3001}}]}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r4, {0x10, 0x9}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 10.029511408s ago: executing program 2 (id=8609): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, 0xff6e}, 0x0, 0x80}) r1 = syz_open_dev$sndctrl(&(0x7f0000000d40), 0x2, 0x800) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000003440)=""/4096) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xe26, 0x101400) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x284440, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockname$packet(r5, 0x0, &(0x7f0000000180)) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r6, 0xaea2, 0x7f) unshare(0xc040400) r7 = timerfd_create(0x7, 0x0) timerfd_settime(r7, 0x3, &(0x7f00000001c0)={{0x0, 0x3938700}}, &(0x7f0000000200)) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x10}]}) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000000)=0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r10, 0x6, 0x1f, 0xffffffffffffffff, &(0x7f0000000300)) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)="e76f3bc40cbc6493cb8a88252c16bdb106fb1a4fdbbd8fcd611ded2564c8fa6074517f34fad72e2a24b7138958d9d12382a4e1954ada33402fb015d82ea7815997e1a2d7bf7bdef5", 0x48}], 0x1}}], 0x1, 0x4008000) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a3a440000102030109023b000101000000090400000302060000052406000005240000000d240f0100000000000000000009"], 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={r9, r11, 0xee01}, 0xc) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0xc0045520, &(0x7f00000000c0)=""/92) 9.489762198s ago: executing program 4 (id=8614): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$tun(r2, &(0x7f00000002c0)=ANY=[], 0x33) sendfile(r2, r1, 0x0, 0x10000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="21386dadcf00000000002000020008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x8, 0x8a, 0xfffffffffffffff9, 0x2000000000007, 0x4000000007, 0x43, 0x52e6ac5d, 0x2000ffffffff, 0x9655, 0xfffffffffffffffe, 0xa, 0x9, 0x1, 0x8000000b, 0x80000000000000, 0xcc3, 0x1, 0x8, 0x16, 0x3, 0x100000000, 0x5, 0x9, 0xfffffffffffffffe, 0x3, 0xa}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = memfd_create(&(0x7f0000000300)='\x92n\xff\xb5\xe1\x1f/\xbc\x04\x00\x00\x00\x00', 0x3) fallocate(r5, 0x0, 0x3, 0xffff) copy_file_range(r5, &(0x7f0000000040)=0x369, r5, &(0x7f0000000100)=0x6, 0x80, 0x0) r6 = syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x90, 0xb, "", [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x7, 0x1, 0x3, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x1, 0x2, 0x64}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x1, 0x7, 0x6}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0x85, 0x72, 0xc3, 0x20, 0x3}, 0x25, &(0x7f0000000200)={0x5, 0xf, 0x25, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x1a, 0x4, 0x3, 0x2}, @wireless={0xb, 0x10, 0x1, 0x8, 0x5070966cb7cebc78, 0x8, 0xf, 0x1, 0x66}, @ext_cap={0x7, 0x10, 0x2, 0x24, 0x8, 0x0, 0xaf13}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0x5, 0xfffd}]}, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x80a}}]}) syz_usb_control_io(r6, &(0x7f0000000640)={0x2c, &(0x7f0000000340)={0x40, 0xe, 0xcf, {0xcf, 0x6, "cf4e33380225ea9e9a04a13ea5455557c5aafc02045f630b7f01acdd2d010b521f9022397db5ae977abab9b87b790139deb80a91178f63fc16d2863578fd656e82b811e85d1ea85596bc0f5d6b512307375053e9527477a2753985f87c59dea1e73f27161047f520813a2a5c02f0cbac4108908a9bf1f64207f7b69d626f311a82bc162f54c9a616ca9a91edbde8216b0c2c01510d62cac596b4131089f0228285efc66350fa26e65499160fa17082f27e16a006a735c507040dc1c262e46f6deeaf9cc5c1abd83e5b9a39def4"}}, &(0x7f0000000440)={0x0, 0x3, 0xbb, @string={0xbb, 0x3, "4407140079244b8a3eb8fa2e1a8db2bd4d65b452bd71db69985bd1204e8aec9a6a238a9bd204f85440930a742b9cd08d93dbef546510c9bd0dc7526d2580054b90b769108c0969194b87daddceadc8cfcce05a38523ea6ef45453df64b75c97b3c12e4c8b2665cbf47e66c44b997bd0e24b46bd05512d824f21f4731e3aa85ca4e8b0e8430be27059b13080a91e8f0b4eeead2ea1a6252b001fbca160a4256db3bc5f5726a56d4e8cd97c803ea158fa7483955ad0c0297e623"}}, &(0x7f0000000540)={0x0, 0xf, 0x3f, {0x5, 0xf, 0x3f, 0x6, [@ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x5, 0xf00f, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x5, 0x3, 0x8000}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "190d8ea2ef92a07d7844b90066c4e767"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x2d, 0x65, 0x9}, @ptm_cap={0x3}, @ptm_cap={0x3}]}}, &(0x7f00000005c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x4, 0x1, "4a41d7c7", "5689a0c1"}}, &(0x7f0000000600)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x353b01302bcede35, 0x5, 0x3, 0x6, 0x8, 0x6}}}, &(0x7f0000000b40)={0x84, &(0x7f0000000680)={0x20, 0x14, 0xd3, "28922fe985f8a0cf9e92a8e72f054b9cfd0465351545c910fa83b5ccf9cd69faf683b2f9b90350b0f822cbc3c84340595d625693edb7f34936f69963ff8d2ffdd5692ad27914b87ba309e4108da14910ca3dc8ce99385fc8b9a923d41d1b9b20e551332d2f822348559feda58e81f9d71b3f160720d51851625130a6a9e00bcb22e9424d01c4e9c1cce29b7dc3567c380610062c665cb5ff84e4f78a561bdab4ea1be981fd9727bf8444236c333769ee0d28b6df378387042c51464530d9ea538816d3af11e530c5e145e09c5c827228fc37ef"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x8f}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x28}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x200, 0x20}}, &(0x7f0000000880)={0x40, 0x7, 0x2, 0x81}, &(0x7f00000008c0)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000900)={0x40, 0xb, 0x2, "a10c"}, &(0x7f0000000940)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000980)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, &(0x7f00000009c0)={0x40, 0x17, 0x6, @random="f3c9f1351e75"}, &(0x7f0000000a00)={0x40, 0x19, 0x2, "c11f"}, &(0x7f0000000a40)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000a80)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0x10}, &(0x7f0000000b00)={0x40, 0x21, 0x1, 0x9}}) 8.353871544s ago: executing program 4 (id=8616): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057", 0x72}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="680000000000000017010000020000004f000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d43"], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e20284", 0x4f}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc", 0x2a}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a", 0x3c}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be", 0xbe}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000340)={0x3, 0x2, 0x2, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 7.528714323s ago: executing program 1 (id=8617): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r1 = socket$alg(0x26, 0x5, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x2}, {&(0x7f0000000300)='l3', 0x2}], 0x3, 0x0, 0x0, 0x44841}], 0x1, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) copy_file_range(r4, 0x0, r4, &(0x7f0000000040)=0x8, 0x2, 0x0) 7.410255194s ago: executing program 4 (id=8618): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0400f9f407000904018002200000000000000000000800010000000000", 0x24) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, 0x0, 0x201, 0x70bd25, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x401}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x101}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfffffbff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000040}, 0x4008811) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8000000) writev(0xffffffffffffffff, 0x0, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000480), 0xa6f81, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x24000085) keyctl$dh_compute(0x17, &(0x7f0000000100), 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000380)=0x1c) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) r3 = dup2(r2, r2) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(r3, &(0x7f00000063c0)={0x2020}, 0x2020) r4 = fsopen(&(0x7f00000003c0)='ubifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000400)='{\x00', &(0x7f0000000440)='\x00', 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007bc0)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_HANDLE={0xc}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb0}}, 0x0) 6.656224469s ago: executing program 1 (id=8621): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002400), 0x80000, 0x0) ioctl$KVM_GET_MSRS_sys(r3, 0xc008ae88, &(0x7f0000002440)={0x2, 0x0, [{0x482}, {0x807, 0x0, 0xe4fa}]}) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000002140)={0x50, 0x0, r4, {0x7, 0x27, 0x0, 0x14a4014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) read$FUSE(r2, &(0x7f000000b040)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r5}, 0x10) syz_fuse_handle_req(r2, &(0x7f0000009040)="c9b6cf40d6a9928c6a8c0fdaba1e7bbd4ee597917b02ec4e8ff3bec8d7d8c08f8813039f40175e54e3d66ec19388ed788cf69c0c5b560f0401f1adb4b1f5198fe0bd7627cb9dc384db5b44495ba6094046fb2c8c7d0af7d67dbc3f5ef4aef8ec6bb01c52b6a10d4f9473987d0809b6a84f2ff8aae19a082abcb68b41c291add3ca2204a38c59e28c7c910aaa5a075676e541b6bb91de3854d2f97d3f80dc56c0705e74624a947f2c21ff936c6ba827742a24fd6d9e10b470ceb73a23fc57f5fa27cf073f2d0235e6fa4d1c29f9d0b6509c890ce0e7c3a2a4dd8b6336f02b9d7cc4c8e37f5f5a57f63aeec3228bd15b6d041eab97bccb14ee1ca6fbf7f7ed2e4dd0a32d41cc41c1031424b94621edcea1bddd40f3ad905202dfba3b912efd3468d2ad42b8a01bcb13b288afdc00b7e5857425d7919651160ec15447a26758f20653e69559f0892efc8f0715d8d79f52a44c79aba8ac58dc726ed721eeab3480eaacc2655d4b8831c9aff049c32709ab7adfb24ae767d45468dc0e42bc34b3568ce95e850eaabbf3a1be4d0f9b3e8781a2a9dc06374fe496a755b48abce67fd56de43816d64e883d9db51489ab8a81d1af3a180b6772d2bdac6313d3c183239d4c0bbbe76173f011f144ba71ac8043107f6533b3ef2f44924039b8587485749647315eb7bfe1e412e94f8cdaa937480fdd23769a69e14ea82d741484c99dd1ddd1edfb4faa51431f15531b61e59d68f9d189b27d0bf925970ac66fc35dbe1e430893cc60b28ca6d8e34931bf02154aee6f1fc58d0c0d8e48eaf8079ded67fdd9f19ebfa85d1ab6ec7f54e1963be353b34a6cb7fa35ddb60a9fc6bd1c6f11bf981b5a1bba81513fe447ff7eb2db0d27f1cfd04353e05f37d6c1bd6eb8219ce799338de3518bfec529373e4acfd644212be283856be064bac0f4926c02c0915816615f1f04d1d5136872029afee663f0bf1b6811c594e1465fba59f5727e5a826e3c60576bc2087f21521ffc90dcca39cbec7c0466c8fb7b1bcea7cffb333d2d16daa269d63f4911d10ed24462b37cdceb7c88e819489e1939e5e3cdcc5a858d09803c98d9e5fd617bc92c0880f072c54608f6ea69edba05b4edcd8d3f5e3c926220a191f2aa0d2f0c9158e298bc2e756ee091a0ac48752e4bb56fac67b02eb2c7b3380244ed66648482d8bc2a29bfc26ade0f4a5665282ea408254fd88e2812a184ee9af9c7769fba1ec380043d5cdf6056f89b4d7f12a441c3013b0fe0d8418fc47c13fbf4fc2b4a89496d4ab9d9826d0e586574e8dd15d4eb8b86ed372e37287fc818df5b6993b650fba844d960e3fd62db0bc7b12ab286d6492388a91ae4da6bdece6e101c13100eaba3b9998706fd4defaa3ed2965ce7fe6062b8c58f20c6b44b01121184ee1dda1cb66b3ababecfc0b7a9a12624e0b826c35d0149335149cfb49fbe68d1dbb7eef96d7956dc573d449847ff4bb7ba0ededd00c904130f1252c3dd4bdcdeccf6f8a83e3abfa14d12c753558022efa0704549b0571e31c4bc9f3e485f8d2d88189b4149569ef83e8feb2ad26c263b0f91f8975c86c8fa9c9457da5ef4a8a94844f824873576f722e32b376ba5f3ed0ea9818d86ddc35ba0e7f322594d9a0fea878af5c03d242bc7b0af89091f088245154391e75ab1b6b2730ccd01c28e9ec99428cc22c2d08ae2829537c34ebd1273327d0d18175698f9fe587e968d19f00ff98555fcfe95d00cb3abae32afcd48f3d4cd7c63c45581203a8a3040363d98bf9426493039fce7bb03493ab6e176cb45e2af461e77fc93d1202fe0bc7b77398c52bbc1c1436439f26cb2e17933a0ae309611e46bebd4d84a939d9b040a08cad90c2eda6ddc933edffc8e562aa64658f99a9ec8a47278edb828b5312a95ca34c0af428aac64d3fa1c4045885891fda7666dfb680da4dc2c02becb8303b76987b6d9be01174df88e41a48a42444caeae5e36118564e57209594285bc2915b222f99f016326430c38c9807994cfa1c3c85aa0f6375c716cd7f27be9b2cef6866d07c8ed00bc101a74219182562467ebbd43d2ba78a4b0eae22c67702f318bc55ccd92f5fd11557335f94ff6f38cfe9fbe31d3fac064dcd7d660d02fbeaa26acf8927c1e3bc71d9ed8ef2e93f0a42813526daa1fad36676734103bcc621a114b098295de578bf8d7df9034fb3ba86ea529bf639cde496b5e48145e4a814f894fb3bf3f41b49d0572dad5988348dad7a064b2d76d9092336cb404934790683b2b3576d3b75534df2c36bc78e05ed250b9aaede772a08bf5972444ecf4e447c062d95e556768e264813369465713834f6e239695b6bfca1b6108a09368688e212b7ba556df50c02486bf1b2196da3d4c0553923fe9b1bb4474d0f569bec1f35dce4be0f5e2408efa69aa66dda6bb1ef43295fe005f4a86840bb608796ce14bcc1134013bf741ad1aa70cc6579edbd42478d3054e1f7bdbd5b1131ded725041270e8a46bcc8bbfe89089f87105939deb2a9f10dd60d059679d4514bfbfc94b333c7dde79576426f07f24ab6a57290b0d723bf3bffa2f66fe191d0dee8b292c8c15eb42245b899ddde3c6afbbf0d7c301dd142878dbca579f387931460c8c37e186f60f8d9209dc98f1a27b84ecefd71de077017261ad6cc3072fe57ec589cd9498946fda8a834e3f02e8a91f7ce6e18e76f936f6f39d354b63dccc706e25b1d8b1a4830c46f249b5e5a40042fea920ed57a2415431f83c238113ee7d152c16f0780c502d5c995168e3f91113af11752f10434b8dc5ef0e46a276c683261aa73877ce96ebd0176977e124c5b93bbb02ef97a6f6a13c15c261f23014f4b13c8f18746727206b245bee70d7b94968141f104f0682a3df4242c6a60fa1b70c227306520b1b9fbd6c916b0edf5e2ce5220fc9ef10ab0a10e1bf259e91eb127d5a31b7633f15130fdb44ce2178a20d5dc3f91688090881c061d75b4b59c3b2b7eb7a3dd1564bfa6c883c217cb76c2a7516dec926add0a1886570531c32b6284b1e80fbde88905f67ea5cea41003325327000a7f7249a99986f19f423843e8dc791df8679a2ed2b024d7d8c79112644a4fbd32bef0cd1f9d55025708135ed34cbf52ce3a0af0f8cd985362ef6fceb6c72f241128b16dad7575558badb3847e051f38d7b5ca638a1f454054659d90b2c046e4f9e2ab127f257ccc92f887b3e0c4fb49d159741fc649638180addf3f23e5265015f6dad9b25cb86d8a33b802e55258749ec050d15d0d7d821f9615c7d8c12ce11c63fb1eb118455c4e2167f66e4eaf9dec0dd2f345a7e2bb369a66b0755003a9c89449393f71acd98afdf6347792251d669ff3c64c50d705a67e543cad95655d6a4cce233acdac5ffc96681772be3c04a1b36f5273815af65ef87c7ad0d51462bf337c2389a8eded875f75eeebe5e5efc26933948e623364d0dbad3402f659a93acaaa21bc8f559dca605aa6732d0eced5a21ee8a6403b1f91722fcbada24a3031d6aa221612a36584d5edc6ba0f64096e9b6eae1555a95945b937457c4c74371f474939d3c3f299f691316497951c646f142adbd6ee49182aec388ce2ca560a1f4b7d8a63e5cd25ba91ebc61175a6955895bcddae7bf1cefccac5c93dd669ab65a2f508adbcfd62ec46027efa396b9f69984d6adcb38fdddb616ec38929fedd97677c3d06060309db5a9cb5fc8919f4310f06bb40f1b76bc197798acbf8d3162257071e034174047006796fac6fbc95c28afd881e1197c20fea8b4be5c5de39a292bd1ff3819d4d4f48162ea1a57930d8f324ce54875d3ad09eea95c4c825765842f9bbb1957fa8188578e86081adfc87502e69c8841218b596d71c4ec49afa60408028012d974051559d924f5f8a59ee195fb01994b8710994d8201ae10f6e88e0e418489c47499b7efd2021f56a6c9fba761beaf79acb6087a496afe7524f2260e14a792cf1a1203d4b0cd8a11d2544293b7657fc393014295fa28e409ab8be0a02695223d17d7caf4f44cf5d0f416130067f28f3fc51c88ad7b53e401e658214abcc8f597f22d662144f878573d0370c874287698784b6ba9abf9b22da2eeb0ce8b817f85e429e799a5edd246d72d77228652b80c4949a85cd5131d851d9f9bda9afa0646de5e477e0fa999562cb46758502c7d63dd3e8b6f88c7ea44f41c4212d633f0160e738c6d36128e9e58c154b08460c899a26276dc1257dc5de18495573693674e40faf1dad49db8ac83baecf92f3aa5c23f639cdcf6e6864c14a8d6a3de95906813fd17f83c406ffd1d2d7bc75737b7b00172448b2ff167b9fa43649db32ab4094652cbb2e18c3bdb527f24049878bb44b82135009f9af22d24ffbee4b5289fa61bd0502f019b2f24a08542db818bffb7c1637b4f4cb9043952f88aa69d9431b8df2e3f9ef6e4a5ba58e79acf082bbd871aa0f0feef71ade8f921bb597ea28548f4116a281ab3542b732c4a8e9973409c75a0c6443d83547d0d314cc7bd62128e3b0db9c03c78b9d78ba714627866230414947523a6a239873f932c2b28c09cbdf182e856bf41598998150cbdd6d54f76c227fb1519f5afb0008e31d6a0b87818d0a2ca0dd6e953a5ba1a347dd927acd36f3fa3a68920eb9c36bce6cef857447aa733e4ffb7014e194993eb1399270b64151ddbb15478c2b762a14d1782608fb24199d9d311281c47726f565b3a3b7be584afb03d87cdc5eb8156772694ab422f59cd7b1e359583a7cc0695b9f64e6416c6b52de230afbc160d2e9384501b40645189434d416c0fbb034e9ffc654d0dee7ee7a878f9e559daac7ee5af769aeac7a92e85b1bc7983803d3bb572befe76184a46b76450feccffa753cc6123cba0686440a5ba81236458831031a4ba4c91d7aab3bb2514208a902face1c12b7dfe25318ab5ca2c1ef9769aa06ba0539f6904f95d3c8440617efc7858d3984f566b3390b9b1a0f2ec3c86dd77a0b82958c4b15278ffaf10e47e613545f4cf67ef7e8b31a6bda35022871840ae1536fb65bb11b932936db7a15642359bb6b157893d19e7918b11d3d3072b78c761c1784afa2214c865fc2aed860dcc17b69cfe9189bcd0767a84cb306a59966e5f96514a7d7182e6aa7204bbd1a84092ba645f86b68813debd5a2290acc93388e5eacc17db51d69604733ea9160a0e77ec5317194654313a9a8a0535c0bc49d0837e2821df92e8ee2f154cbea6b87ffc207aab4ea491e8aa75b90f70136d84ea2f5dfd138371dbdf8fe273956cb7411db6df48ebf56105da42b219b9dad387ca7be9ecd90508c62279a53bc9f7e2a845f9da42d8e85d2653854737948ce228b2d76d1b9fe2e0e456fdff24575939b82a3f6e1a4be6ffcf1c493c17dabbfa0859a87d259ae3931fb6da544589b9b6bb7cc93e078813ac94918942bf113aee5742498d86a70fff31d2a69507739317a9aa9e0289f053dad4eec63cd58e833027f0859fb4ab74e8fc742d03b5b6dca1168d3d47fd95b514a567e6518342d52b3c3bb6438b5aeacb95ff9001d2f5480f6a80a0685b5bda2ceba06925ab5ae0986954c3169e92fedaf3f1681247cb114202c0f728296a51396063fc64aad05662bf05a626b90f656b47069ca668bb96208c287e8f793d77d4fb1f1cc14e73406005e11a2c1c46ca7448be534c97738487527d79e284d7a0ae275bd4361ecf4a352e6dc8b8c8c8e132a3edb7d645f4943445f523fb28bbf857218a117f1288afec49f9def9aabc2381b38a315d5c927aeb96fa1ad3eb13b0151dd570f6734f004467171d2cdd609d1d09d115c9b42e1da3472ada98d3e1da90a8f373a98133fa708f5a62c75b5eb1b643c48de72143ffc8761ccffd7f3336b69faa277d364cdf2d4f2bc428bda8b76e4748d5ae02d9850ac6f2ed0ddcb874c25d210163d4da10c0d6cc5218a3558deee5519c94032158bca02fe1c1b8184fdf417e863352b224b7b06267486296ebd4100ad5f1108c78a7056979f5ad6f97794a0460bf371584d9b962034aa7449f4e6b0f925b7a648d4ed7f2442135629b0baee3385882682fde57e5eb9204647a898c566120e4b577ba215ed863f76d5ad9ed19a6b7465952292e7543110eac3dc436a16c85047f3ff10a00c917d5902d296c063c4b173775f2b612e407bce02c8647877abcc07b21b89a60e16ff5c5cdc3708f285d6e411036661e97f628c6c2bef7a6e297f0ea7db2aaceb87d13425e80c28cf095b1dd4e08122e89f58862c6466d79fe7d06e0038a9a1869cba0d1554bffc08b94bf3dc7ec4d108073a4dcb7a6a503b608e777f1ca6b64deec19072052cdab8e7222966170bd35cfa66d3d013c537e723bfa2f634b34edba64ee27ab814bf66c5943e5b7b4d2cbad0550982b2d68ea0633a48f24ef5a59da6e9671717afed4253db66afce693ab08e2b4343d9efd1705802393ba22af5f0e04fc559ddafd78bb1c013b2826cfd77591736cd8a1e079c00f72dc89ee419cf4cc5e867138e35372bb0854df45d2142ce56ea01465d7cf42d3beabbed8602ff568df5d8e53d22bbd897c0aa050165319ba28d6f861a128556e420275562b8a19c0a2112df4490925f52090c6c7ac79b8533936d4020af3ea5d383cc8e4f23cf275194887d42bde7061bc17246a91b735472c4dee6f2d159a4fb2cce10f0727a964658f6d60aa18bd474ce1e88114ce3c2a3acabd74175b82afc6126ed79d8d333ed993e3a0d67afba888c94cb266f906681d9595f2ca21946f32d8f07eb7cfc979cdd56a885e6a5deb1dc54ffbbbac728db4145056cc9b78386f1f17ad16856cc10b04038f0d835a5842584b6a9516a770abd839ade5d379db9889d22d9049dd13010ad612a64128f724f7a643505b8ca50bddc4ec4875beed2f8593b7382645625809bbc3591027d53bde8a16be5bb209cd49e71aaa435c923ef3c4d1aefec7111773b0d58b47efabc7a43b93cb7eab287cefe554a5b59e2a746081d0d875919df356504008374ef184be2f7ef7e644bf5535dedf5b969b30dcedcfbecb83173b0cea015efe45630880c303472daf1dc22b384e65078cb0ae21baa4834fcd4b4f7c995b700117e1448d041a7106277302fabf3a512ad4e802988c43e6cad0b4b74962e195b355b653acfab53d9f38337e46758c0f8c147333d30f8fbb508a889b84d4672e025b0d9adec09fd4e2d62bda0e0c40570d8fcf5487a59380584f7b85a8576985a4423cbdb1503ea4f93d4f3dbb2c384efcac84dd8649e6f09d2ac37e1d8268c3c07db365581c7c3752410909968598b8ea5ea05b68e6013965cc60be6f6b24e493655f5ddd572a84a924803a7df025914f4b57527841928d30c03b09aeee28c8b81860968f53a663f4f56b004e07cc380f5b0b0dad43869faeed5f240ce389a0fb0920073b8d3de611e54d4011f55ba28743a3b51af6293ed1376fcfe3592c877e2d81d14ee882410cf8207476409b5673eb65297155e91cbe089c8c043964063f9b469419bce6e59e0017e0f527d20eab5d9579208df9cc65389ca8fdb3d62618395bb0274b8094799cb4c36632488e79950ac3bd3d982d521614f56df1bd16c1f928481dd4580a796eb7892b3e4a33b748b16f96b1def674c2b70d0315b486a94a979292d635a2ad1fa877927de9355f38a612747fb982bccf12040d9a14a63c34b6f2b3b450a6401d4d0c96a9090ab80d30f7e7af84bade864791455402cbd278427c5a1e84e2e2286c4bf773da614e6705802c130ade8a3a67b309f9db1558372046ec276a34fb50f72c7df40e33f447ab5f0af05eece4e8f654b3c2dad6ea76ef6b694699f4ad8c6fdcbfd8bdc23d0c580631d0c95ac6ae9613dad680939db2ecf9e7a0d4d0f2f2b7f1c1d308cfaccacc2381e97bb278a53b14daf686c0541e56264c33d5176b830ac7d13c28edb2d8e77d7acbced061c4ec315cb1a259966ad997c7c7beae44d4d1b6955842d7fbba0bb0c461bb22db3e15f0fc1cd3fd997dac5e6a4bff6e2eb8310d828f15309b2c8feaa21281963d35ab2d5c099beb806cd384d304449c58d89910105df11225fb893e984734a8e5cba2e553f03ebd5ce4cae24826547df81db3f2bd7d930f785755c8b6311f221da59679ce50479adef1cc5dac984a5d2f9343fe4892b2b5640892892cfd50d0015c1f568792d8919943a578b62585081175237444d9542a2241c967bcfbc3dab4e8961ecad89165eaada2d759e844be5021aed42b971e9ffea8c08a3d6e4073ce4226b4e54b83f3d8ccd207a0cfcf9da7b5e55d1a26a90e03f7c3611c6562b65edb42fe110dc3970b44aa36660d1cdbc882495271f80816350b945aedb0d46ca6d160d5f0096e8263325e257dbb574932e32f1b28ce2b7f5b3ee6ccec64085496bb513ec168b53d79e6ecb72622a70b22e1f9116fa48815709b2080b27b31a6b26dde0701cd74c31b4e33a702f051ae07ad54ce23ae33e6060e5451a4171cc930af2ab70862044c5a0ff9e8aeebd3cc41c62d38e7b79596d3851430dd661b071c319751985d48eeea2afb463d7d9390ed4e68a60f90ad80aeca4b8d283ae0538e590668c857a526a264be238641eeb5f321248d829539efccf03dcefa54c6def8b7d4a8cdf6bc76d71eefaca1a7a33bd4b56e94b8e38f784b742bdd080faca4769e1aa91ff50d9374f3632cb7b66a0042beb802c6cedff0a3634aec072f57d38a6ea61439029ba5d921f57bfbc281d75f5ec322b8f8c90b4d3f65d00ef97dcffe7e07fa01af8e7f8da15532f0c18b73d7a183327aea46680651645782f4f318c00f2355c301fe2e805a22f8586119768b8424735f5495607d170f0818be232cec1d9e40daf79bcd63a26cbead93753b7171bcad462da2af68e9ea9c0b207200f1fcf3793283931603a719e745120273efb541a7af896f6eea7359939d7226896c8023cc963e4e0a7579bc83a37cb8d871324bb3e66b671d8df83d645495740c5b99aaf2edda3018e1895dda6744b1e6623cb62d4b80ac208f69a81caa0277a497e41bf637817518cbe0fcd2028d07be199a126f82641f2fd54e6b20287b912ee8d8dd72db5824ca9e464a94d45beda7f52932d1bb57a28a4e99ac32ea4c3650197613a87e4cec91d82f37069fde871575d3cb2220aaad9277511271a86377da5f2a9f94303e7151acb087ca549fd0cb9b1961954ddb28333a24b510b92cddc057ec5a147ccdd708a2db3c8cb3600756100b38b71f0676f6fc5a7f5912b5e81bf6d2b07e15fb5b1c96459110ceb22ba4f2fb0e531dcaa913a13437cc6276c8b4e1bdbc5365144c7abd2e2a6c93ef102e26b14e576ada244408d9db50aab045f9879bf95425eaa7b11d77e0dc503851c5c278c282aa736103adf5ca2b30724bde27f98e4e7a947f964b7abfe58a3da354e3008a2b86d50223d3077e151ce2e086172002eab7279ac1948361e172073184401d5650181547f1bacc1534f9ab2ad66fd9d200d867de79a92e465dda8d781b15881acc9bfdc53815f3fc3f064c830db3908cdb173e3e1295ea7dca280273ca99073d5663003f14c4f7ac9ef9bc735b2a413daaa7d97101553f90a0d33b043d1f2b0f131d35c9244808bb4b76213ff5c418053a569d760498518d701aae39cfbd7a052b586c53617dfaad1415c1cafbb41640d1650be9297dd42c803d8bfd443916310bb80a74c991cc26331ab70c0c4bc4f2295f069787f6759878e42ffbc76b34493f71d88a109b0813ebfcd24953b2b5f1f5164d9974bab7ed1f4d42f62b8379912dd7e9f35a19951e4d57b0c70fe516cd2059c4ef879d9f9b1191d5bb51b852d3e9462e4528b9c1f7c676e6039d1deb00442a482e297b08a67c79bb818d0316072d8174885de3413ae0505232100f217e424e0106811902d60ecc0e0aaca7c5f00f4f365e1360f10aa645b9215c93668a08be97cacd6b0f9c80ead76478846d12e8f24a53bfab01628afd199b2db332d38d5009d7a1437f0f5b2a0d36b5c98f3a35e5043ffd55bac325d3927888fa5d0e3569d9be002205b501b3e68d661515bb9eac9d4f234e22e4e5bd0b4c4530933aadd99f132794ce48e9a3220d2c17748c012fc5fd93d265cebb3edc3be29a1ba26f2adcf510663c28d29e28774c4ec1190fbfbf614aa8e2745f8605f7d7e94fdd06322454a08833f1a22c77deedb1337e380a8e18f85168e045d1e7cf32fda1a709d3eddf62909a9e580ed8abd605e07dbab79b5bcc2f4533e6fec589b976816471b1f11ac3c89336c52e03b72520995d05275024e9988727f2e1ac9421ccaaa0b736e9f7f296c2d27cbd774d7179f9c6921df68985998034862c15adc452666deb40c0c40cedf16f4d187524a0a5cdff6f7b2531eda54fbe15a7ad1aea46466a51642326c5d7d374fb38475d119027a3714598fe7307de94bece2741b7a742b053682dae9452eed3b820b1386b604fa647e392b35b205019cf1ad317d1441cbee2aea5ca95e56fd5e959689bf96c9f470acb8e4e630b13403e9459242b629fa28e1ba8eacf1ed572b1db735a20ee1a5b8500b6edf66cbe671c5938741ab2b36ccd4e92160f6df9e1d465cdaf3a7746e128e26e0e7a7aa4869b2a482c6e9bf7e58408411016740c547129e4f11d2317af3c5bb55b2468e6d08e75e5039c3bfdc9b6da06e7c27933a8c9d8ad0e4c74a093e6d57c02b1b49e995962c1046b5c8a3df0ea4c20049e300cbe41bd92a0ea5993ef6fd92ea74e28e1cfaf4a8533c224104d6081b64ae08b4e7a23a259b2b03655b987c23687c6e279bab469a3e0881a30620910566982945f8f86229fd614ca2bb2adcbdd49a5c579c0d1bbdefb9e33cd0641bb43f6ca3fab33dc4188e1508e4293e6de932040b895a97bc1f196467ad4a0d4899e6078c014f42521cf39411e2e4f1b5adc26f1f3bb2fcd27b89ac418c8251423de82c4b5980a4e66649b9f3ec48c833c35f8653ca510a0a1b049561e64a6938714c3a1946b3fa5079533698bb8f8f85bea8711ccda5cf01de150b055d3586a890d0654d2b4cfba25c434e2ff492b69798aa197dffbfe2bba77d4b4eea35c42e698221e971a4bca34e59c46084f48f2170b83db6719324ecb55e07a9cf74a84ee0fc3567fa5cd2f3937ad956b4ed2187e2026b7d4166d50fd9c937fb4dd5aa96f2731f1db1dda4eac4e589295ffe9b72a7b9533f6e23c82b57c8361c8cb3b15128235f65c84b99d93383b7398e936884542d0e73bdf37cadfb6c70da47af3c5a3cde0d8e381cdf9ec1a39d2fc963f0d8ee31b76d9668c0171967cb9ef2f15d5bbdbd1058328da7a60bbc7d77efed2de74a2ed5637a8a84e1163325dd22b584b15fe894c9b1ce89d24619a344a8987f6d21b7de7ccf6fad223134e1c389a8e6baa375dd142baf4a8852e984eb6c281cf86e2457a7f85782c7764564af26d331d3ddf4850d24742ef449cd5e32f5957d2ee10e05e7d3312215e4d36ac5c8c4bae3340f074f88a20e18b270b3baf05de1b0363f4c6f2ab9386d6034e8567e4828ad256cd250448c70147c318a621697be402c1e8365d2798084f968a8897242ff6756c2937e4d1300", 0x2000, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x90, 0x0, 0x45, {0x6, 0x0, 0x0, 0xfa0, 0xffffffff, 0x0, {0x8000, 0x0, 0x0, 0x0, 0x22, 0xf7fe, 0x3, 0x0, 0xfffffff7, 0x4000, 0x1, r6, 0x0, 0x0, 0xfffff8af}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002300)=@getsadinfo={0x228, 0x23, 0x1, 0x0, 0x0, 0x0, [@algo_comp={0x130, 0x3, {{'lzs\x00'}, 0x740, "381c1e3ee0e7fedc2dca90597fff14f4f06265022cf521c12b08d61e88c344a24d14f9c5ddbfc7ce6f9e338fec66ae4e4becc07501046c97bccc8cf55f639dd54cbed6bcb9a4068215e70bfcc0de9414d2f1b95cd8d45e1fa6e59b403560bac0e09d450413cfa3a3131e3afce97c44b4b3afe12adb0a7245f01bfb1b087aab227f1dff30acd08c3f7bbbbc71fd23d48edea892a2d679fe41d19e931ec18c3a2d5d3eb07a04cf332e6bcb7b2ea6ba2c0176f5ff8d246615f4affe4c89e30f77e75992af4a48cac2b04f20a104e2a150c5421c452e11007c48276640a5150a8c2040787d58b9edb32e"}}, @sa={0xe4, 0x6, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@remote, 0x4e23, 0x2, 0x4e20, 0x7, 0xa, 0x20, 0xa0, 0x6c, 0x0, r6}, {@in=@broadcast, 0x4d3, 0x3c}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x1, 0xe599, 0x7, 0xb, 0x2, 0x2, 0x9, 0x43f0}, {0x3ff, 0x81c, 0xd, 0x7}, {0x9, 0xd, 0x8}, 0x70bd2d, 0x3507, 0x0, 0x3, 0x5, 0x1}}]}, 0x228}}, 0x0) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r7, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) io_setup(0x8, &(0x7f0000004200)=0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r8, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r9, 0x0}]) r10 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) readv(r10, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/1, 0x1}, {&(0x7f0000000280)=""/48, 0x30}], 0x2) openat$cgroup_ro(r9, &(0x7f0000000040)='blkio.bfq.io_service_time\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 6.455629378s ago: executing program 0 (id=8622): openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$qrtr(0x2a, 0x2, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x24}}, 0x0) 6.279447354s ago: executing program 0 (id=8623): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt(r1, 0x1, 0x9, 0x0, &(0x7f0000000240)) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002240)={0x48, r4, 0x1, 0xfffffffc, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x48}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r6 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r6, r5}) r7 = socket$unix(0x1, 0x0, 0x0) r8 = dup2(r7, r0) close_range(r8, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r9 = syz_usb_connect$cdc_ncm(0x5, 0xa4, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x2, 0x1, 0xf, 0x90, 0xda, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "a3"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x45132d13, 0xd3, 0xaba, 0x3}, {0x6, 0x24, 0x1a, 0x1, 0x1}, [@mbim={0xc, 0x24, 0x1b, 0x9, 0x2, 0x5f, 0x0, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x4000, 0x6, 0xf}, @mdlm={0x15, 0x24, 0x12, 0x1}, @mbim={0xc, 0x24, 0x1b, 0x7, 0xbd6, 0x9, 0x9, 0x0, 0x80}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x84, 0xf}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0xca, 0x9, 0x4a}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x7, 0x40, 0x8}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x1, 0x4, 0x0, 0x7, 0x8, 0x7}, 0x10, &(0x7f0000000280)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x0, 0xeb, 0x8, 0x4, 0x7, 0x7f}]}, 0x6, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x7c, &(0x7f0000000300)=@string={0x7c, 0x3, "b2cf6e226858df3472337423d2139248cfd10cb9070d3417f6cf3ddf4289847578e47442f302602d92a243b14377cc8deac47c3b9601f77d4bdf34cc5c8cc2b83005795ffb450c8588d1afc89cb4136b52d08de00f34904ad1c4d8c85966860042d95598895a5785edfbf1d0e0307d7d9c713cd3dd561d7597cb"}}, {0x16, &(0x7f00000003c0)=@string={0x16, 0x3, "d2d0b2cf8a65c0de91123d0f13d3f06dd18831e0"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x1809}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x3009}}, {0x101, &(0x7f00000004c0)=@string={0x101, 0x3, "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"}}]}) syz_usb_control_io$cdc_ncm(r9, &(0x7f0000000740)={0x14, &(0x7f0000000680)={0x0, 0x24, 0x51, {0x51, 0xc, "7529ff69dc39cbd679d15a9bbc13386333c4cf86f6082cd000e3083f9766ffceddfdaa42174561fabb7c5dfb7eb6ed2173f108e2c6ce8fd32f78b83c5bd3b343a5e25ed32569d3945bdcec6797e994"}}, &(0x7f0000000700)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000a00)={0x44, &(0x7f0000000780)={0x20, 0xc, 0xa4, "b67181306a47e236b787a59ebcf85724f2e89eb051a5902260d0accd79b003741f2aadf1918ec66ef17e0decea0230b44c4440a1d5262a0bec7e5fce40c26bf96d01ac63e4a77aa5e9ee291f7cf61b2f090b6a953af1255d5d2d9bdc37fcb9f0ce9227c244d88d75a8ae1de57b9b291c0296f24e70a9baae539f950383ddd40bfb19633ef53ecb87fed0e57c09e8cac5f0b0a37f798006e4687ea9e817ef19011d7863ae"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000008c0)={0x20, 0x80, 0x1c, {0x2, 0x8, 0x200, 0x1, 0x3, 0x6, 0x2d3, 0x81, 0x26f, 0x401, 0x0, 0x8}}, &(0x7f0000000900)={0x20, 0x85, 0x4, 0x101}, &(0x7f0000000940)={0x20, 0x83, 0x2}, &(0x7f0000000980)={0x20, 0x87, 0x2, 0x7f}, &(0x7f00000009c0)={0x20, 0x89, 0x2, 0x1}}) 5.535666334s ago: executing program 1 (id=8624): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x44, 0x64, 0xf31, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40054}, 0x4804) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000030a0fdb00000000000000000a0060050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f757465000000080005400000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="50000000100001002dbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="5d4f0000000000001c001a8018000a801400070020010000000000000000000000000000140035"], 0x50}}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x99) futex_waitv(&(0x7f0000001cc0)=[{0x1, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, 0x0) syz_open_dev$hiddev(&(0x7f0000000040), 0x1, 0x24002) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="340000002e0003050000000000000000200000f8ffffffffffffff0008000000", @ANYRES32], 0x34}], 0x1}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x10000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xff2e) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x390, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x2c0, 0x2e8, 0x2e8, 0x2c0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x41}, @private1={0xfc, 0x1, '\x00', 0xfd}, [0xffffff00, 0xff000000, 0x0, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xffffff00, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x33, 0x7, 0x7}, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x100, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee0500000000000000ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06d7d4e252c3394fed47bf78c70f607b0178fa5ea3350ebc989f1f34a214e67442ce98bbaa8e0f7323a4ca0a7be6c60c527bac2b500", 0x1, 0x3}}, @common=@inet=@socket1={{0x28}, 0x1}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) syz_usb_control_io$hid(r5, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="00221a2b5aa40bf85edaca830000000000000000005adf2f0f4359856fbbe6d5a441da8eb2f721e3b179d50dca4caa83612296cbe7d3b3c10657fa0718a86227cf8c0169c1da1f40d5c4a7ff900e47840ba167adb04ce4ad3a7e64cf97e320758490b1216aa221877a000400"/120], 0x0}, 0x0) r7 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r7, 0xc018480d, &(0x7f0000000040)={0x2, 0xffffffff, 0x7, 0x452, 0x5, 0x8}) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000100)={0xa04c, 0x53b3, 0xfffffffd, 0x3, 0x1b, "53af0f0b4ecf6c29bf81c173f4a8f5f73eb62f"}) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r8, &(0x7f00000000c0)='2\x00', 0x2) r9 = socket$inet6(0x10, 0x2, 0x4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x81, 0xffffffff}) sendto$inet6(r9, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) 5.344804445s ago: executing program 4 (id=8625): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x7fffffff, 0x2, 0x7, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5a, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xd, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x4a, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0x2000bf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0xffffff49, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x4, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x1, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0xfd, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x5, 0x8, 0x30b1d693, 0x5, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000040), 0x7f, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x3, 0x40000043, 0x32314247, 0x8, 0x0, 0xfffefff3, 0x1, 0xfeedcafe, 0x2, 0x1, 0x2, 0x1}}) syz_emit_ethernet(0x46, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "132d92", 0x10, 0x3a, 0xff, @private2, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xf5}}}}}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="c01800002000010a00000000000000000a0000002c01018028014880ed00a90013466820cd76bb221fbb4acd690c6a8b9c760a61eeec7793b579aefdb936d00f403d3f04637cdb9ac70e28c5dd66ddedde2d0930650e6821f9a26a4a193c1d06a3e75523f901e44fe087ae32c836c6d6ddba3af8e9a2beae8936168f9fa38c395f5cf7408df69c60bf584bee86a6312e9ce866e456c3eda6f2924082d78a2f385bdbd0c9afb54758c102bf13094645fb6aa34d424ec776691fee3d25307f61fed2752babf7c686e8a3d9b59a8343bcf4121bf5cf400a0c1070855fac565cad8968a97ce0a12a1161054d82d0a240b7dedf9ba3cc63e9d1c3b9a8402f7d5b4cafcd48928a3d4a76498900000014007c00ff01000000000000000000000000000108003d00", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000280)={0x0, 0xe0, "06d475d042646603e9fc3cc2d9fcf89b80af9313270d01bfd16237cb87f98ca73f38cb166cb5c8c5e3a1835aa12bead1edfcd229afb563d86a0f1741448e8474ce4d4947ca74016297294895d64914c930367b6d1dee72e28bfb6fafc44d74b20c7e8d1969525cdd897b751a832b2007dca05f476ed94c1a6d3642096e80599fb85a9d75526eb03d3b1ca0693878583de69571864f088410387d1eb1d955d13b0a05c634e6e42642de6c77122d008f99d109dc120e066517008d706c7f8403dbb671b83d2042075076d855f6eb4eeb9655ddace55ba17bfaa991e3af362b7861"}, &(0x7f0000000380)=0xe8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000880)={r2, 0x5, 0x1, "1d"}, 0x9) 4.832011881s ago: executing program 3 (id=8627): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x103802, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) r2 = accept4(r0, 0x0, 0x0, 0x800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x54, 0x0, 0x2, 0x5, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @broadcast}}}]}]}, 0x54}}, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b3", 0x40}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x80fe) 4.67763365s ago: executing program 3 (id=8628): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r1 = socket$alg(0x26, 0x5, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x800) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) copy_file_range(r3, 0x0, r3, &(0x7f0000000040)=0x8, 0x2, 0x0) 3.480934283s ago: executing program 3 (id=8629): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r1, &(0x7f0000000000)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f00000000c0)="004cf494e612", 0x6}], 0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r10, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x41, '\x00', 0x10000, 0x5, 0xc0000000, 0x51}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xa, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) syz_emit_ethernet(0x1b9, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x1ac, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xf5, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x5, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x9, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f80889"}]}}}}}}, 0x0) 3.177869573s ago: executing program 0 (id=8630): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, 0x0, 0x1, {0x0, 0x0, 0x1}, 0xfe}, 0x18) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 2.921620569s ago: executing program 0 (id=8631): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91", 0x3) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x2fff) 2.67942892s ago: executing program 3 (id=8632): openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$qrtr(0x2a, 0x2, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x24}}, 0x0) 2.472501001s ago: executing program 3 (id=8633): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newtfilter={0x54, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r2, {0xd, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x1, 0x2, 0x4}, {0x7}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) (fail_nth: 11) 2.224360136s ago: executing program 0 (id=8634): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0400f9f407000904018002200000000000000000000800010000000000", 0x24) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, 0x0, 0x201, 0x70bd25, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x401}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x101}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfffffbff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000040}, 0x4008811) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8000000) writev(0xffffffffffffffff, 0x0, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000480), 0xa6f81, 0x0) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r3, r3}, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000380)=0x1c) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) r4 = dup2(r2, r2) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(r4, &(0x7f00000063c0)={0x2020}, 0x2020) r5 = fsopen(&(0x7f00000003c0)='ubifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000400)='{\x00', &(0x7f0000000440)='\x00', 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007bc0)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_HANDLE={0xc}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb0}}, 0x0) 1.284564723s ago: executing program 3 (id=8635): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x146b, 0x902, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x3, "", [{{0x9, 0x4, 0x0, 0xb, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xc259, 0xf8, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xb4, 0x84, 0xfe}}}}}]}}]}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x1000003, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) quotactl_fd$Q_GETFMT(r3, 0xffffffff80000402, 0xffffffffffffffff, &(0x7f0000000040)) read(r4, &(0x7f0000000840)=""/40, 0x28) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000000f000/0x3000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) preadv(r3, &(0x7f0000001200)=[{&(0x7f0000000080)=""/4097, 0xffffff51}], 0x1, 0x3f, 0x6a76) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)={0x40, 0x8, 0x36, {0x36, 0x8, "83efb930f0187ff0478fa22a61a54607b71ea9e43d359c479ca31a1413491fef7c7b08fc0a59a737f52509e38bf7914077366b48"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 0 (id=8636): r0 = getpgrp(0x0) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r0, &(0x7f0000000040), 0x4003) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004041) io_uring_setup(0x1978, &(0x7f0000000040)={0x0, 0xca72, 0x1cc90, 0x0, 0x20002fb}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130, 0xfffffffffffffff5, 0x3, {0x100000001, 0xffff, 0x0, '\x00', {0x2, 0xf602, 0x6, 0xfffffff3, 0x0, 0x0, 0x2000, '\x00', 0xfffffffffffffffe, 0x0, 0x1ff, 0x0, {0x65b}, {0x5, 0x2}, {0x7fffffffffffffff, 0x4}, {0x5, 0xffffffff}, 0x20060, 0x0, 0x7fff}}}}) socket$packet(0x11, 0x3, 0x300) socket$kcm(0x2, 0xa, 0x2) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/40, 0x28}], 0x1, 0x38, 0x9) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000080)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) madvise(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x14) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f00000000c0)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x9, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000001800", [0x0, 0x2000000000001]}}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c00000002030300000000000000000000010000080001000125"], 0x1c}, 0x1, 0x0, 0x0, 0x20004840}, 0x20000010) sendmsg$NFQNL_MSG_VERDICT_BATCH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000030301010000000000000000000000e00b00020000000000000100013bb1e2df17a07423b7a7e5e86c5243ba0658422b55e4ed4b001f20fbf096c45fcdf9e63a6f6d6d8525e3360f45240b453befef702e7328f93ca8686ce2d772b370e98f01e51b28e2c199e42945e3579b6250ae9f099ff18e3120d669f35aa2d56466108a148fd33e31e8af856432ef923a72e42cc0ebfa886a0b72708807978aaf6f85f1c2833427989057d3a3f8c4d530195af8773f42a5c8092a957abbc33eff249ee943e09103c4566ee27c4d6f0015e0fc4a469fbba15735c3e39203b25449cc1f69510d14ca7c3be8aaeeb623f2cca8c95601a5515b5744df735c978390b4d7b502a1d614e1a5df1bf4e965014c5e3807c925cd6734e6a1f90ef2c2793a8dd75acb7a2d"], 0x20}, 0x1, 0x0, 0x0, 0x94f7cfd7d57de2ec}, 0x40044) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x2, &(0x7f0000595000/0x2000)=nil, 0x7) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f000025a000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x42, 0x38}) kernel console output (not intermixed with test programs): 1696.185537][T10627] CPU: 1 UID: 0 PID: 10627 Comm: syz.0.8244 Tainted: G L syzkaller #0 PREEMPT(full) [ 1696.185565][T10627] Tainted: [L]=SOFTLOCKUP [ 1696.185572][T10627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1696.185581][T10627] Call Trace: [ 1696.185589][T10627] [ 1696.185596][T10627] dump_stack_lvl+0xe8/0x150 [ 1696.185630][T10627] should_fail_ex+0x40c/0x560 [ 1696.185654][T10627] ? create_io_worker+0x27/0x5c0 [ 1696.185674][T10627] should_failslab+0xa8/0x100 [ 1696.185695][T10627] __kmalloc_cache_noprof+0xa8/0x660 [ 1696.185721][T10627] ? create_io_worker+0xab/0x5c0 [ 1696.185737][T10627] ? create_io_worker+0xab/0x5c0 [ 1696.185758][T10627] ? create_io_worker+0x27/0x5c0 [ 1696.185776][T10627] create_io_worker+0xab/0x5c0 [ 1696.185797][T10627] io_wq_enqueue+0x675/0x8a0 [ 1696.185814][T10627] ? io_wq_enqueue+0x332/0x8a0 [ 1696.185829][T10627] ? __pfx_io_wq_work_match_item+0x10/0x10 [ 1696.185852][T10627] io_submit_sqes+0x147a/0x2310 [ 1696.185905][T10627] __se_sys_io_uring_enter+0x35b/0x1bb0 [ 1696.185937][T10627] ? __fget_files+0x3a2/0x420 [ 1696.185958][T10627] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 1696.185981][T10627] ? fput+0xa0/0xd0 [ 1696.186004][T10627] ? ksys_write+0x242/0x270 [ 1696.186025][T10627] ? __pfx_ksys_write+0x10/0x10 [ 1696.186048][T10627] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 1696.186071][T10627] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1696.186089][T10627] do_syscall_64+0x174/0x580 [ 1696.186112][T10627] ? clear_bhb_loop+0x40/0x90 [ 1696.186134][T10627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1696.186150][T10627] RIP: 0033:0x7fc49fd9ce59 [ 1696.186166][T10627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1696.186181][T10627] RSP: 002b:00007fc4a0d32028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1696.186199][T10627] RAX: ffffffffffffffda RBX: 00007fc4a0015fa0 RCX: 00007fc49fd9ce59 [ 1696.186211][T10627] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 1696.186222][T10627] RBP: 00007fc4a0d32090 R08: 0000000000000000 R09: 0000000000000000 [ 1696.186233][T10627] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 1696.186243][T10627] R13: 00007fc4a0016038 R14: 00007fc4a0015fa0 R15: 00007fc4a013fa48 [ 1696.186272][T10627] [ 1696.244297][ T5731] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1696.474553][T10638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1696.487102][T10638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1696.664450][T28206] usb 4-1: new low-speed USB device number 45 using dummy_hcd [ 1696.728031][T10650] input: syz1 as /devices/virtual/input/input172 [ 1696.778287][ T5731] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1696.812247][ T5731] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1696.837665][T28206] usb 4-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 1696.844324][ T5731] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1696.868309][T28206] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 1696.869226][ T5731] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1696.897170][ T5731] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1696.903821][T28206] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 255, setting to 8 [ 1696.908058][ T5731] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1696.947011][ T5731] usb 5-1: Manufacturer: syz [ 1696.959886][T28206] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1696.990395][T28206] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1697.003596][ T5731] usb 5-1: config 0 descriptor?? [ 1697.017894][T10640] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1697.147959][T25144] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1697.161593][T25144] Bluetooth: hci4: Injecting HCI hardware error event [ 1697.171683][ T9239] Bluetooth: hci4: hardware error 0x00 [ 1697.194292][T28205] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1697.269477][T28206] usb 4-1: string descriptor 0 read error: -71 [ 1697.313550][T10674] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8251'. [ 1697.366841][T10674] bond0: ARP target 128.0.0.0 is already present [ 1697.392072][T28205] usb 2-1: Using ep0 maxpacket: 16 [ 1697.431098][T28205] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1697.457449][ T5731] appleir 0003:05AC:8243.0063: unknown main item tag 0x0 [ 1697.466032][T28205] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1697.469830][T10674] bond0: option arp_ip_target: invalid value (128) [ 1697.530326][T28206] usb 4-1: USB disconnect, device number 45 [ 1697.543257][T28205] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1697.564928][T28205] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1697.616657][T28205] usb 2-1: config 0 descriptor?? [ 1697.657753][ T5731] appleir 0003:05AC:8243.0063: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 1697.770376][ T5731] usb 5-1: USB disconnect, device number 120 [ 1697.850636][T28205] usbhid 2-1:0.0: can't add hid device: -71 [ 1697.906304][T28205] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1698.004100][T28205] usb 2-1: USB disconnect, device number 60 [ 1698.048466][T10712] fido_id[10712]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1698.639181][T10738] netlink: 212916 bytes leftover after parsing attributes in process `syz.4.8254'. [ 1698.847486][T10744] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8256'. [ 1698.859526][T28205] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 1699.046595][T28205] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1699.078317][T28205] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1699.111350][T28205] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1699.143287][T28205] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1699.164319][T28205] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1699.177236][T28205] usb 2-1: Product: syz [ 1699.208577][T28205] usb 2-1: Manufacturer: syz [ 1699.222838][T28205] usb 2-1: SerialNumber: syz [ 1699.243148][T28205] usb 2-1: config 0 descriptor?? [ 1699.261882][T10735] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1699.306832][ T9239] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1699.348540][T10761] loop9: detected capacity change from 0 to 7 [ 1699.391692][T10761] Dev loop9: unable to read RDB block 7 [ 1699.410302][T10766] input: syz1 as /devices/virtual/input/input174 [ 1699.415574][T28205] rc_core: IR keymap rc-streamzap not found [ 1699.438739][T10761] loop9: unable to read partition table [ 1699.447609][T28205] Registered IR keymap rc-empty [ 1699.466622][T28205] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1699.487343][T10761] loop9: partition table beyond EOD, truncated [ 1699.505765][T10761] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1699.519616][T28205] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input173 [ 1700.073156][T10791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1700.109332][T10791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1700.256303][T10791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1700.275718][T10791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1700.660081][T10812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8267'. [ 1700.814497][T25031] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1700.826066][T10821] FAULT_INJECTION: forcing a failure. [ 1700.826066][T10821] name failslab, interval 1, probability 0, space 0, times 0 [ 1700.842356][T10821] CPU: 1 UID: 0 PID: 10821 Comm: syz.3.8268 Tainted: G L syzkaller #0 PREEMPT(full) [ 1700.842385][T10821] Tainted: [L]=SOFTLOCKUP [ 1700.842391][T10821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1700.842402][T10821] Call Trace: [ 1700.842411][T10821] [ 1700.842419][T10821] dump_stack_lvl+0xe8/0x150 [ 1700.842445][T10821] should_fail_ex+0x40c/0x560 [ 1700.842472][T10821] should_failslab+0xa8/0x100 [ 1700.842493][T10821] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1700.842517][T10821] ? kmem_cache_alloc_noprof+0x150/0x5f0 [ 1700.842537][T10821] ? radix_tree_node_alloc+0x7e/0x3a0 [ 1700.842558][T10821] ? radix_tree_node_alloc+0x7e/0x3a0 [ 1700.842585][T10821] radix_tree_node_alloc+0x7e/0x3a0 [ 1700.842613][T10821] idr_get_free+0x28f/0xa10 [ 1700.842645][T10821] idr_alloc_u32+0x18a/0x330 [ 1700.842674][T10821] ? __pfx_idr_alloc_u32+0x10/0x10 [ 1700.842698][T10821] ? tcf_exts_init_ex+0x414/0x7b0 [ 1700.842723][T10821] basic_change+0x3de/0xfb0 [ 1700.842747][T10821] ? tcf_chain_tp_insert_unique+0x141/0xfd0 [ 1700.842776][T10821] ? __pfx_basic_change+0x10/0x10 [ 1700.842818][T10821] tc_new_tfilter+0x10c4/0x1850 [ 1700.842863][T10821] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1700.842896][T10821] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1700.842935][T10821] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1700.842953][T10821] rtnetlink_rcv_msg+0x802/0xc00 [ 1700.842974][T10821] ? netlink_sendmsg+0x5d4/0xb40 [ 1700.842995][T10821] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1700.843017][T10821] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1700.843039][T10821] ? __lock_acquire+0x683/0x2cf0 [ 1700.843070][T10821] netlink_rcv_skb+0x226/0x4a0 [ 1700.843088][T10821] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1700.843113][T10821] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1700.843143][T10821] ? netlink_deliver_tap+0x2e/0x1b0 [ 1700.843160][T10821] ? netlink_deliver_tap+0x2e/0x1b0 [ 1700.843182][T10821] netlink_unicast+0x7bb/0x940 [ 1700.843217][T10821] netlink_sendmsg+0x813/0xb40 [ 1700.843243][T10821] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1700.843272][T10821] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1700.843298][T10821] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1700.843314][T10821] sock_sendmsg_nosec+0x13a/0x180 [ 1700.843338][T10821] ____sys_sendmsg+0x54e/0x850 [ 1700.843361][T10821] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1700.843388][T10821] ? import_iovec+0x73/0xa0 [ 1700.843409][T10821] ___sys_sendmsg+0x2a5/0x360 [ 1700.843425][T10821] ? __lock_acquire+0x683/0x2cf0 [ 1700.843446][T10821] ? __pfx____sys_sendmsg+0x10/0x10 [ 1700.843498][T10821] ? __fget_files+0x2a/0x420 [ 1700.843514][T10821] ? __fget_files+0x3a2/0x420 [ 1700.843540][T10821] __x64_sys_sendmsg+0x1b1/0x290 [ 1700.843560][T10821] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1700.843596][T10821] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1700.843614][T10821] do_syscall_64+0x174/0x580 [ 1700.843635][T10821] ? trace_irq_disable+0x3b/0x140 [ 1700.843658][T10821] ? clear_bhb_loop+0x40/0x90 [ 1700.843679][T10821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1700.843695][T10821] RIP: 0033:0x7f6be7b9ce59 [ 1700.843712][T10821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1700.843727][T10821] RSP: 002b:00007f6be8b1f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1700.843745][T10821] RAX: ffffffffffffffda RBX: 00007f6be7e15fa0 RCX: 00007f6be7b9ce59 [ 1700.843757][T10821] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1700.843767][T10821] RBP: 00007f6be8b1f090 R08: 0000000000000000 R09: 0000000000000000 [ 1700.843778][T10821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1700.843789][T10821] R13: 00007f6be7e16038 R14: 00007f6be7e15fa0 R15: 00007f6be7f3fa48 [ 1700.843817][T10821] [ 1701.246796][T25031] usb 1-1: Using ep0 maxpacket: 16 [ 1701.248335][T28204] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1701.264656][T25031] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1701.284252][T25031] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1701.302788][T25031] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1701.355187][T25031] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1701.388438][T25031] usb 1-1: config 0 descriptor?? [ 1701.427364][T28204] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1701.437635][T28204] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1701.447434][T28204] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1701.457404][T28204] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1701.467919][T28204] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1701.477106][T28204] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1701.489817][T28204] usb 5-1: config 0 descriptor?? [ 1701.535010][T10830] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8270'. [ 1701.555168][T10825] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8270'. [ 1701.645497][T25031] usbhid 1-1:0.0: can't add hid device: -71 [ 1701.687759][T25031] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1701.699757][T28204] hdpvr 5-1:0.0: firmware version 0x1e dated [ 1701.712545][ T5731] usb 2-1: USB disconnect, device number 61 [ 1701.794435][T25031] usb 1-1: USB disconnect, device number 71 [ 1701.957364][T10871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1701.999176][T10871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1702.343238][T10894] hub 8-0:1.0: USB hub found [ 1702.343390][T10901] input: syz1 as /devices/virtual/input/input175 [ 1702.362029][T10894] hub 8-0:1.0: 1 port detected [ 1702.378192][T28204] hdpvr 5-1:0.0: Could not setup controls [ 1702.401582][T28204] hdpvr 5-1:0.0: registering videodev failed [ 1702.508227][T28204] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -71 [ 1702.565874][T28204] usb 5-1: USB disconnect, device number 121 [ 1702.654898][ T5731] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1702.824475][ T5731] usb 4-1: Using ep0 maxpacket: 16 [ 1702.845848][ T5731] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 1702.863786][ T5731] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1702.911357][ T5731] usb 4-1: config 0 has no interface number 0 [ 1702.955946][ T5731] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1702.996337][ T5731] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1703.077374][ T5731] usb 4-1: config 0 interface 255 has no altsetting 0 [ 1703.138776][ T5731] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 1703.159476][T10929] loop9: detected capacity change from 0 to 7 [ 1703.191277][T10929] Dev loop9: unable to read RDB block 7 [ 1703.210739][T10929] loop9: unable to read partition table [ 1703.232756][ T5731] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1703.276042][T10929] loop9: partition table beyond EOD, truncated [ 1703.290582][ T5731] usb 4-1: Product: syz [ 1703.301845][ T5731] usb 4-1: Manufacturer: syz [ 1703.316972][ T5731] usb 4-1: SerialNumber: syz [ 1703.330948][T10929] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1703.355051][ T5731] usb 4-1: config 0 descriptor?? [ 1704.518648][T10943] netlink: 'syz.4.8278': attribute type 6 has an invalid length. [ 1704.903602][T10981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1704.940742][T10981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1705.407785][ T5731] usb 4-1: USB disconnect, device number 46 [ 1705.580456][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 1705.580473][ T30] audit: type=1326 audit(1782365904.320:9558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10996 comm="syz.0.8281" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49fd9ce59 code=0x7ffc0000 [ 1705.648673][ T30] audit: type=1326 audit(1782365904.320:9559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10996 comm="syz.0.8281" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49fd9ce59 code=0x7ffc0000 [ 1705.720472][ T30] audit: type=1326 audit(1782365904.320:9560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10996 comm="syz.0.8281" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7fc49fd9ce59 code=0x7ffc0000 [ 1705.770170][ T30] audit: type=1326 audit(1782365904.320:9561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10996 comm="syz.0.8281" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49fd9ce59 code=0x7ffc0000 [ 1705.923210][ T30] audit: type=1326 audit(1782365904.320:9562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10996 comm="syz.0.8281" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc49fd9ce59 code=0x7ffc0000 [ 1706.007736][ T30] audit: type=1326 audit(1782365904.320:9563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10996 comm="syz.0.8281" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49fd9ce59 code=0x7ffc0000 [ 1706.024925][T11009] input: syz1 as /devices/virtual/input/input176 [ 1706.054300][ T30] audit: type=1326 audit(1782365904.380:9564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10996 comm="syz.0.8281" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc49fd9ce59 code=0x7ffc0000 [ 1706.115295][ T30] audit: type=1326 audit(1782365904.390:9565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10996 comm="syz.0.8281" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49fd9ce59 code=0x7ffc0000 [ 1706.203669][ T30] audit: type=1326 audit(1782365904.430:9566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10996 comm="syz.0.8281" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc49fd9ce59 code=0x7ffc0000 [ 1706.229834][ T5731] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1706.253860][ T30] audit: type=1326 audit(1782365904.430:9567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10996 comm="syz.0.8281" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49fd9ce59 code=0x7ffc0000 [ 1706.395787][ T5731] usb 4-1: Using ep0 maxpacket: 16 [ 1706.415616][ T5731] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1706.431429][ T5731] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1706.461103][ T5731] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1706.485295][ T5731] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1706.520069][ T5731] usb 4-1: config 0 descriptor?? [ 1706.761989][ T5731] usbhid 4-1:0.0: can't add hid device: -71 [ 1706.807442][ T5731] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1706.856026][ T5731] usb 4-1: USB disconnect, device number 47 [ 1707.510744][T11048] kernel profiling enabled (shift: 0) [ 1708.090736][T11063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1708.104440][ T5731] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1708.130363][T11063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1708.347659][ T5731] usb 4-1: Using ep0 maxpacket: 32 [ 1708.367797][ T5731] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1708.395824][ T5731] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1708.420677][ T5731] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1708.450974][ T5731] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1708.484579][ T5731] usb 4-1: config 0 descriptor?? [ 1708.795327][T11083] input: syz1 as /devices/virtual/input/input177 [ 1708.940781][ T5731] ft260 0003:0403:6030.0064: item fetching failed at offset 0/2 [ 1708.964421][T25031] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1708.974859][ T5731] ft260 0003:0403:6030.0064: failed to parse HID [ 1708.994023][ T5731] ft260 0003:0403:6030.0064: probe with driver ft260 failed with error -22 [ 1709.138743][T25046] usb 4-1: USB disconnect, device number 48 [ 1709.146230][T25031] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 1709.179978][T25031] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1709.221539][T25031] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1709.245711][T25031] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1709.277727][T25031] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1709.301516][T25031] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1709.338584][T25031] usb 2-1: config 0 descriptor?? [ 1709.774857][T25031] plantronics 0003:047F:FFFF.0065: reserved main item tag 0xd [ 1709.822490][T25031] plantronics 0003:047F:FFFF.0065: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1710.046822][T11078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1710.072857][T11078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1710.101436][T25046] usb 2-1: USB disconnect, device number 62 [ 1710.134313][T25031] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1710.314481][T25031] usb 4-1: Using ep0 maxpacket: 16 [ 1710.324546][T28204] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1710.336339][T25031] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1710.353912][T25031] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1710.382138][T25031] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1710.391678][T25031] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1710.409804][T25031] usb 4-1: config 0 descriptor?? [ 1710.486470][T28204] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1710.495453][T28204] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1710.508971][T28204] usb 1-1: New USB device found, idVendor=18d1, idProduct=2d05, bcdDevice= 0.40 [ 1710.521085][T28204] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1710.533989][T28204] usb 1-1: Product: syz [ 1710.538805][T28204] usb 1-1: Manufacturer: syz [ 1710.547565][T28204] usb 1-1: SerialNumber: syz [ 1710.614788][ T5731] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1710.635544][T25031] usbhid 4-1:0.0: can't add hid device: -71 [ 1710.661445][T25031] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1710.704835][T25031] usb 4-1: USB disconnect, device number 49 [ 1710.784430][ T5731] usb 5-1: device descriptor read/64, error -71 [ 1710.819852][T28204] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1710.843936][T28204] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1710.860673][T28204] usb 1-1: 2:1 : invalid channels 0 [ 1710.971168][T28204] usb 1-1: USB disconnect, device number 72 [ 1711.044960][ T5731] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1711.197180][ T5731] usb 5-1: device descriptor read/64, error -71 [ 1711.335303][ T5731] usb usb5-port1: attempt power cycle [ 1711.516537][T11208] input: syz1 as /devices/virtual/input/input179 [ 1711.696524][ T5731] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1711.725907][ T5731] usb 5-1: device descriptor read/8, error -71 [ 1711.959347][T11228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1711.973325][T11228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1711.986210][ T5731] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1712.035143][ T5731] usb 5-1: device descriptor read/8, error -71 [ 1712.125024][T11228] netlink: 80 bytes leftover after parsing attributes in process `syz.2.8313'. [ 1712.143381][T11228] netlink: 80 bytes leftover after parsing attributes in process `syz.2.8313'. [ 1712.152951][T28204] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1712.155153][ T5731] usb usb5-port1: unable to enumerate USB device [ 1712.317841][T28204] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 1712.326158][T28204] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1712.339019][T28204] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1712.360873][T28204] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1712.389025][T28204] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1712.398527][T28204] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1712.422151][T28204] usb 4-1: config 0 descriptor?? [ 1712.843095][T11223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1712.865522][T11223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1712.928782][T28204] plantronics 0003:047F:FFFF.0066: reserved main item tag 0xd [ 1712.968265][T11246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1712.979178][T11246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1713.013388][T28204] plantronics 0003:047F:FFFF.0066: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1713.106334][T11246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1713.130425][T11253] bond6: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 1713.141753][T11246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1713.169886][T11253] bond6 (unregistering): Released all slaves [ 1713.255509][T11223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1713.288389][T11223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1713.346131][T28205] usb 4-1: USB disconnect, device number 50 [ 1713.460399][T11347] FAULT_INJECTION: forcing a failure. [ 1713.460399][T11347] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1713.489290][T11347] CPU: 0 UID: 0 PID: 11347 Comm: syz.1.8318 Tainted: G L syzkaller #0 PREEMPT(full) [ 1713.489320][T11347] Tainted: [L]=SOFTLOCKUP [ 1713.489326][T11347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1713.489334][T11347] Call Trace: [ 1713.489341][T11347] [ 1713.489348][T11347] dump_stack_lvl+0xe8/0x150 [ 1713.489371][T11347] should_fail_ex+0x40c/0x560 [ 1713.489396][T11347] _copy_from_user+0x2d/0xb0 [ 1713.489414][T11347] ___sys_recvmsg+0x173/0x5a0 [ 1713.489437][T11347] ? __pfx____sys_recvmsg+0x10/0x10 [ 1713.489457][T11347] ? __fget_files+0x2a/0x420 [ 1713.489486][T11347] ? __fget_files+0x3a2/0x420 [ 1713.489506][T11347] do_recvmmsg+0x31a/0x7f0 [ 1713.489529][T11347] ? __pfx_do_recvmmsg+0x10/0x10 [ 1713.489557][T11347] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1713.489580][T11347] ? __fget_files+0x3a2/0x420 [ 1713.489603][T11347] __x64_sys_recvmmsg+0x198/0x250 [ 1713.489623][T11347] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1713.489649][T11347] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1713.489668][T11347] do_syscall_64+0x174/0x580 [ 1713.489689][T11347] ? trace_irq_disable+0x3b/0x140 [ 1713.489712][T11347] ? clear_bhb_loop+0x40/0x90 [ 1713.489733][T11347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1713.489750][T11347] RIP: 0033:0x7fb7c8f9ce59 [ 1713.489767][T11347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1713.489782][T11347] RSP: 002b:00007fb7c9de7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1713.489800][T11347] RAX: ffffffffffffffda RBX: 00007fb7c9215fa0 RCX: 00007fb7c8f9ce59 [ 1713.489820][T11347] RDX: 0000000000003aa0 RSI: 00002000000047c0 RDI: 0000000000000004 [ 1713.489831][T11347] RBP: 00007fb7c9de7090 R08: 0000000000000000 R09: 0000000000000000 [ 1713.489840][T11347] R10: 0000000060002000 R11: 0000000000000246 R12: 0000000000000001 [ 1713.489849][T11347] R13: 00007fb7c9216038 R14: 00007fb7c9215fa0 R15: 00007fb7c933fa48 [ 1713.489864][T11347] [ 1713.860499][T11349] loop9: detected capacity change from 0 to 7 [ 1713.867988][T11349] Dev loop9: unable to read RDB block 7 [ 1713.883789][T11349] loop9: unable to read partition table [ 1713.894267][T25031] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1713.910059][T11349] loop9: partition table beyond EOD, truncated [ 1713.930542][T11349] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1714.064478][T25031] usb 5-1: Using ep0 maxpacket: 16 [ 1714.070745][T11356] input: syz1 as /devices/virtual/input/input181 [ 1714.082397][T25031] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1714.103614][T25031] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1714.132038][T25031] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1714.146405][T25031] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1714.170703][T25031] usb 5-1: config 0 descriptor?? [ 1714.386973][T25031] usbhid 5-1:0.0: can't add hid device: -71 [ 1714.394776][T11372] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1714.411919][T25031] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1714.436227][T25031] usb 5-1: USB disconnect, device number 126 [ 1714.474516][ T5731] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1714.508069][T11382] bridge_slave_0: left allmulticast mode [ 1714.516382][T11382] bridge_slave_0: left promiscuous mode [ 1714.522925][T11382] bridge0: port 1(bridge_slave_0) entered disabled state [ 1714.546345][T11382] bridge_slave_1: left allmulticast mode [ 1714.557598][T11382] bridge_slave_1: left promiscuous mode [ 1714.576580][T11382] bridge0: port 2(bridge_slave_1) entered disabled state [ 1714.602105][T11382] bond0: (slave bond_slave_0): Releasing backup interface [ 1714.617459][T11382] bond0: (slave bond_slave_1): Releasing backup interface [ 1714.628229][T11382] team0: Port device team_slave_0 removed [ 1714.635882][T11382] team0: Port device team_slave_1 removed [ 1714.636966][ T5731] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1714.642155][T11382] net_ratelimit: 6 callbacks suppressed [ 1714.642168][T11382] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1714.652355][ T5731] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1714.684012][ T5731] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1714.694042][ T5731] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1714.707133][ T5731] usb 2-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 1714.717299][ T5731] usb 2-1: New USB device strings: Mfr=28, Product=2, SerialNumber=3 [ 1714.727042][ T5731] usb 2-1: Product: syz [ 1714.731758][ T5731] usb 2-1: Manufacturer: syz [ 1714.736498][ T5731] usb 2-1: SerialNumber: syz [ 1714.744099][ T5731] usb 2-1: config 0 descriptor?? [ 1714.763713][ T5731] kvaser_usb 2-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 1714.775542][ T5731] kvaser_usb 2-1:0.0: error -EMSGSIZE: Failed to initialize card [ 1714.783779][ T5731] kvaser_usb 2-1:0.0: probe with driver kvaser_usb failed with error -90 [ 1714.952032][T11397] input: syz1 as /devices/virtual/input/input182 [ 1715.355369][T11420] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8330'. [ 1715.365869][T11406] bridge0: entered promiscuous mode [ 1715.378716][T11406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1715.390213][T11420] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1715.401888][T11406] 8021q: adding VLAN 0 to HW filter on device team0 [ 1715.678974][T11424] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8331'. [ 1715.866143][T11406] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1715.878899][T11406] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1716.038095][T11406] veth1_vlan: left promiscuous mode [ 1716.089970][T11406] veth0_vlan: left promiscuous mode [ 1716.109522][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 1716.109538][ T30] audit: type=1326 audit(1782365914.850:9631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11436 comm="syz.0.8335" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc49fd9ce59 code=0x0 [ 1716.171272][T11406] veth0_vlan: entered promiscuous mode [ 1716.188230][T11406] veth1_vlan: entered promiscuous mode [ 1716.259799][T11406] veth1_macvtap: left promiscuous mode [ 1716.275566][ T30] audit: type=1326 audit(1782365915.020:9632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11439 comm="syz.2.8336" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b2bf9ce59 code=0x7ffc0000 [ 1716.343404][T11406] veth0_macvtap: left promiscuous mode [ 1716.382238][ T30] audit: type=1326 audit(1782365915.020:9633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11439 comm="syz.2.8336" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b2bf9ce59 code=0x7ffc0000 [ 1716.472771][ T30] audit: type=1326 audit(1782365915.020:9634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11439 comm="syz.2.8336" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f0b2bf9ce59 code=0x7ffc0000 [ 1716.563882][T11406] veth0_macvtap: entered promiscuous mode [ 1716.570351][ T30] audit: type=1326 audit(1782365915.020:9635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11439 comm="syz.2.8336" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b2bf9ce59 code=0x7ffc0000 [ 1716.607176][T11406] veth1_macvtap: entered promiscuous mode [ 1716.687242][T11443] input: syz1 as /devices/virtual/input/input183 [ 1716.715590][ T30] audit: type=1326 audit(1782365915.020:9636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11439 comm="syz.2.8336" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0b2bf9ce59 code=0x7ffc0000 [ 1716.778152][T11406] geneve1: left promiscuous mode [ 1716.799715][T11406] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 1716.817417][T11406] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1716.833220][T11406] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1716.835309][ T30] audit: type=1326 audit(1782365915.020:9637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11439 comm="syz.2.8336" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b2bf9ce59 code=0x7ffc0000 [ 1716.889093][ T30] audit: type=1326 audit(1782365915.020:9638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11439 comm="syz.2.8336" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f0b2bf9ce59 code=0x7ffc0000 [ 1716.973255][ T30] audit: type=1326 audit(1782365915.020:9639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11439 comm="syz.2.8336" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b2bf9ce59 code=0x7ffc0000 [ 1717.018954][ T30] audit: type=1326 audit(1782365915.020:9640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11439 comm="syz.2.8336" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0b2bf9ce59 code=0x7ffc0000 [ 1717.069785][T11406] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1717.091206][T11406] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1717.117313][T11406] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1717.157986][T11406] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1717.195686][T11406] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1717.220208][T11406] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1717.252298][T11406] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1717.276952][T11406] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1717.290980][T11406] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1717.301913][T11406] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1717.309796][T11406] ip6tnl2: left allmulticast mode [ 1717.321026][T11406] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1717.329341][T11406] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1717.341263][T11406] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1717.357291][T26462] bridge0: port 1(bridge_slave_0) entered blocking state [ 1717.364408][T26462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1717.403829][T26462] bridge0: port 2(bridge_slave_1) entered blocking state [ 1717.410954][T26462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1717.509626][T11458] FAULT_INJECTION: forcing a failure. [ 1717.509626][T11458] name failslab, interval 1, probability 0, space 0, times 0 [ 1717.535107][T11458] CPU: 0 UID: 0 PID: 11458 Comm: syz.0.8339 Tainted: G L syzkaller #0 PREEMPT(full) [ 1717.535135][T11458] Tainted: [L]=SOFTLOCKUP [ 1717.535141][T11458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1717.535151][T11458] Call Trace: [ 1717.535159][T11458] [ 1717.535166][T11458] dump_stack_lvl+0xe8/0x150 [ 1717.535191][T11458] should_fail_ex+0x40c/0x560 [ 1717.535217][T11458] should_failslab+0xa8/0x100 [ 1717.535236][T11458] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 1717.535259][T11458] ? local_lock_release+0x9c/0x160 [ 1717.535284][T11458] ? __alloc_skb+0x1d7/0x7a0 [ 1717.535304][T11458] ? __alloc_skb+0x1d7/0x7a0 [ 1717.535331][T11458] __alloc_skb+0x1d7/0x7a0 [ 1717.535357][T11458] netlink_ack+0x136/0xb30 [ 1717.535373][T11458] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1717.535395][T11458] ? ref_tracker_free+0x689/0x830 [ 1717.535423][T11458] ? __pfx_ref_tracker_free+0x10/0x10 [ 1717.535443][T11458] ? __asan_memcpy+0x40/0x70 [ 1717.535472][T11458] netlink_rcv_skb+0x2a4/0x4a0 [ 1717.535491][T11458] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1717.535514][T11458] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1717.535544][T11458] ? netlink_deliver_tap+0x2e/0x1b0 [ 1717.535561][T11458] ? netlink_deliver_tap+0x2e/0x1b0 [ 1717.535583][T11458] netlink_unicast+0x7bb/0x940 [ 1717.535617][T11458] netlink_sendmsg+0x813/0xb40 [ 1717.535643][T11458] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1717.535665][T11458] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1717.535690][T11458] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1717.535706][T11458] sock_sendmsg_nosec+0x13a/0x180 [ 1717.535730][T11458] ____sys_sendmsg+0x54e/0x850 [ 1717.535753][T11458] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1717.535779][T11458] ? import_iovec+0x73/0xa0 [ 1717.535800][T11458] ___sys_sendmsg+0x2a5/0x360 [ 1717.535816][T11458] ? __lock_acquire+0x683/0x2cf0 [ 1717.535837][T11458] ? __pfx____sys_sendmsg+0x10/0x10 [ 1717.535887][T11458] ? __fget_files+0x2a/0x420 [ 1717.535902][T11458] ? __fget_files+0x3a2/0x420 [ 1717.535928][T11458] __x64_sys_sendmsg+0x1b1/0x290 [ 1717.535948][T11458] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1717.535983][T11458] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1717.536030][T11458] do_syscall_64+0x174/0x580 [ 1717.536052][T11458] ? trace_irq_disable+0x3b/0x140 [ 1717.536076][T11458] ? clear_bhb_loop+0x40/0x90 [ 1717.536097][T11458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1717.536114][T11458] RIP: 0033:0x7fc49fd9ce59 [ 1717.536130][T11458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1717.536145][T11458] RSP: 002b:00007fc4a0d11028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1717.536163][T11458] RAX: ffffffffffffffda RBX: 00007fc4a0016090 RCX: 00007fc49fd9ce59 [ 1717.536176][T11458] RDX: 0000000024040004 RSI: 0000200000000180 RDI: 0000000000000003 [ 1717.536187][T11458] RBP: 00007fc4a0d11090 R08: 0000000000000000 R09: 0000000000000000 [ 1717.536198][T11458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1717.536208][T11458] R13: 00007fc4a0016128 R14: 00007fc4a0016090 R15: 00007fc4a013fa48 [ 1717.536236][T11458] [ 1717.864830][T28205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1717.917786][T25043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1718.093218][T11473] syzkaller0: entered promiscuous mode [ 1718.099219][T11473] syzkaller0: entered allmulticast mode [ 1718.117071][T28230] usb 2-1: USB disconnect, device number 63 [ 1718.165646][T26464] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1718.173745][T26464] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1718.207098][T25035] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1718.216339][T28205] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1718.324704][T28204] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1718.327374][T25043] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1718.385587][T28205] usb 4-1: Using ep0 maxpacket: 8 [ 1718.393216][T28205] usb 4-1: config 11 has an invalid interface number: 226 but max is 0 [ 1718.416092][T28205] usb 4-1: config 11 has no interface number 0 [ 1718.429596][T28205] usb 4-1: config 11 interface 226 altsetting 5 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1718.453121][T28205] usb 4-1: config 11 interface 226 has no altsetting 0 [ 1718.465868][T11509] input: syz1 as /devices/virtual/input/input184 [ 1718.491820][T11509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1718.506200][T28205] usb 4-1: New USB device found, idVendor=0079, idProduct=595a, bcdDevice=13.19 [ 1718.507192][T25043] usb 5-1: Using ep0 maxpacket: 32 [ 1718.521545][T28205] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1718.544487][T28205] usb 4-1: Product: syz [ 1718.555532][T28205] usb 4-1: Manufacturer: syz [ 1718.566886][T28205] usb 4-1: SerialNumber: syz [ 1718.574065][T25043] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1718.582485][T11513] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 1718.585745][T25043] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1718.616495][T25043] usb 5-1: config 0 descriptor?? [ 1718.824136][T25043] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1718.850693][T25043] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1718.863994][T25043] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1718.873893][T25043] usb 5-1: media controller created [ 1718.904968][T28230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1718.912908][T25043] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1719.144875][T28230] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1719.595771][T25043] az6027: usb out operation failed. (-71) [ 1719.603041][T25043] az6027: usb out operation failed. (-71) [ 1719.611613][T25043] stb0899_attach: Driver disabled by Kconfig [ 1719.618645][T25043] az6027: no front-end attached [ 1719.618645][T25043] [ 1719.627700][T25043] az6027: usb out operation failed. (-71) [ 1719.636727][T25043] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1719.652343][T25043] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input185 [ 1719.690162][T25043] dvb-usb: schedule remote query interval to 400 msecs. [ 1719.746560][T25043] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1719.802942][T25043] usb 5-1: USB disconnect, device number 127 [ 1719.809746][T25046] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1719.954908][T25035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1719.965737][T25046] usb 1-1: Using ep0 maxpacket: 16 [ 1719.983862][T25046] usb 1-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 1720.027992][T25046] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1720.036969][T25043] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1720.053614][T25046] usb 1-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 1720.078783][T25046] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1720.192001][T25046] usb 1-1: config 0 descriptor?? [ 1720.529594][T28205] usb 4-1: USB disconnect, device number 51 [ 1720.825952][T25046] bigben 0003:146B:0902.0067: unexpected rdesc, please submit for review [ 1720.878067][T25046] bigben 0003:146B:0902.0067: ignoring exceeding usage max [ 1720.917322][T25046] bigben 0003:146B:0902.0067: unknown main item tag 0x1 [ 1720.959846][T25046] bigben 0003:146B:0902.0067: hidraw0: USB HID vc2.59 Device [HID 146b:0902] on usb-dummy_hcd.0-1/input0 [ 1720.989224][T28205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1721.001113][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1721.020154][T25046] bigben 0003:146B:0902.0067: missing HID_OUTPUT_REPORT 0 [ 1721.056033][T25046] bigben 0003:146B:0902.0067: no output report found [ 1722.032743][T28205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1722.184467][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1723.064685][T28205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1723.074397][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1723.294964][T11629] input: syz1 as /devices/virtual/input/input186 [ 1723.458850][T11635] xt_hashlimit: size too large, truncated to 1048576 [ 1723.654081][T28230] usb 1-1: USB disconnect, device number 73 [ 1724.027974][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1724.105330][T28205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1724.194325][T25046] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1724.276114][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 1724.276129][ T30] audit: type=1326 audit(1782365923.020:9694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11658 comm="syz.4.8371" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd1a99ce59 code=0x7ffc0000 [ 1724.309909][ T30] audit: type=1326 audit(1782365923.050:9695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11658 comm="syz.4.8371" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7fbd1a99ce59 code=0x7ffc0000 [ 1724.384699][ T30] audit: type=1326 audit(1782365923.050:9696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11658 comm="syz.4.8371" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd1a99ce59 code=0x7ffc0000 [ 1724.427477][T25046] usb 1-1: Using ep0 maxpacket: 32 [ 1724.440793][T25046] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1724.444502][ T30] audit: type=1326 audit(1782365923.050:9697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11658 comm="syz.4.8371" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbd1a99ce59 code=0x7ffc0000 [ 1724.451879][T25046] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1724.513619][T25046] usb 1-1: config 0 descriptor?? [ 1724.524326][ T30] audit: type=1326 audit(1782365923.050:9698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11658 comm="syz.4.8371" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd1a99ce59 code=0x7ffc0000 [ 1724.583514][ T30] audit: type=1326 audit(1782365923.050:9699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11658 comm="syz.4.8371" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd1a99ce59 code=0x7ffc0000 [ 1724.626330][T28205] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 1724.634813][ T30] audit: type=1326 audit(1782365923.050:9700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11658 comm="syz.4.8371" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fbd1a99ce59 code=0x7ffc0000 [ 1724.676497][ T30] audit: type=1326 audit(1782365923.050:9701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11658 comm="syz.4.8371" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd1a99ce59 code=0x7ffc0000 [ 1724.742784][T25046] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1724.743338][ T30] audit: type=1326 audit(1782365923.050:9702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11658 comm="syz.4.8371" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd1a99ce59 code=0x7ffc0000 [ 1724.798735][T25046] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1724.827216][T25046] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1724.834922][T25046] usb 1-1: media controller created [ 1724.844381][T28205] usb 2-1: config 4 has an invalid interface number: 88 but max is 0 [ 1724.852722][T28205] usb 2-1: config 4 has no interface number 0 [ 1724.861926][T28205] usb 2-1: config 4 interface 88 altsetting 119 has a duplicate endpoint with address 0xB, skipping [ 1724.872932][T28205] usb 2-1: config 4 interface 88 altsetting 119 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 1724.897825][T25046] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1724.903252][ T30] audit: type=1326 audit(1782365923.090:9703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11658 comm="syz.4.8371" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbd1a99ce59 code=0x7ffc0000 [ 1724.942288][T28205] usb 2-1: config 4 interface 88 altsetting 119 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1724.964278][T28205] usb 2-1: config 4 interface 88 has no altsetting 0 [ 1724.989630][T25035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1724.999760][T25043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1725.038215][T26464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1725.049619][T25043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1725.060582][T25035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1725.157749][T25035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1725.166871][T28205] usb 2-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=af.e7 [ 1725.177459][T28205] usb 2-1: New USB device strings: Mfr=8, Product=0, SerialNumber=3 [ 1725.203562][T28205] usb 2-1: Manufacturer: syz [ 1725.208558][T28205] usb 2-1: SerialNumber: syz [ 1725.252225][T11660] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1725.493348][T25046] az6027: usb out operation failed. (-71) [ 1725.499933][T11660] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 1725.506458][T11660] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1725.511670][T25046] az6027: usb out operation failed. (-71) [ 1725.551373][T25046] stb0899_attach: Driver disabled by Kconfig [ 1725.559742][T25046] az6027: no front-end attached [ 1725.559742][T25046] [ 1725.567491][T25046] az6027: usb out operation failed. (-71) [ 1725.574848][T11660] vhci_hcd vhci_hcd.0: Device attached [ 1725.577834][T25046] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1725.615825][T25046] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input187 [ 1725.652974][T25046] dvb-usb: schedule remote query interval to 400 msecs. [ 1725.662006][T25046] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1725.700377][T25046] usb 1-1: USB disconnect, device number 74 [ 1725.831400][T25046] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1725.844608][T28205] usb 36-1: SetAddress Request (2) to port 0 [ 1725.860513][T28205] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1726.184702][T28230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1727.225592][T25035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1727.994534][T25031] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1728.115958][T25046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1728.165334][T25031] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1728.197642][T25031] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1728.207158][T25031] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1728.230355][T25031] usb 1-1: Product: syz [ 1728.234939][T25031] usb 1-1: Manufacturer: syz [ 1728.240108][T25031] usb 1-1: SerialNumber: syz [ 1728.264754][T28230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1728.391342][T11668] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8372'. [ 1728.491410][T25031] usblp 1-1:1.0: usblp1: USB Unidirectional printer dev 75 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1728.547742][T11686] vhci_hcd: connection reset by peer [ 1728.566892][ T8502] vhci_hcd vhci_hcd.1: stop threads [ 1728.600648][ T8502] vhci_hcd vhci_hcd.1: release socket [ 1728.630676][ T8502] vhci_hcd vhci_hcd.1: disconnect device [ 1728.664804][T25043] usb 2-1: USB disconnect, device number 64 [ 1728.708329][T11743] input: syz1 as /devices/virtual/input/input188 [ 1728.845023][T28230] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1729.014297][T28230] usb 5-1: Using ep0 maxpacket: 16 [ 1729.027977][T28230] usb 5-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 1729.052128][T28230] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1729.080489][T28230] usb 5-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 1729.117055][T28230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1729.142930][T28230] usb 5-1: config 0 descriptor?? [ 1729.194520][T28204] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1729.344388][T28204] usb 2-1: Using ep0 maxpacket: 32 [ 1729.352790][T28204] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1729.377110][T28204] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1729.400636][T28204] usb 2-1: config 0 descriptor?? [ 1729.616229][T28204] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1729.638543][T28204] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1729.657648][T28204] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1729.667093][T28204] usb 2-1: media controller created [ 1729.696261][T28230] bigben 0003:146B:0902.0068: unexpected rdesc, please submit for review [ 1729.709641][T28204] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1729.720061][T28230] bigben 0003:146B:0902.0068: ignoring exceeding usage max [ 1729.737660][T28230] bigben 0003:146B:0902.0068: unknown main item tag 0x1 [ 1729.770779][T28230] bigben 0003:146B:0902.0068: hidraw0: USB HID vc2.59 Device [HID 146b:0902] on usb-dummy_hcd.4-1/input0 [ 1729.783939][T28230] bigben 0003:146B:0902.0068: missing HID_OUTPUT_REPORT 0 [ 1729.819663][T28230] bigben 0003:146B:0902.0068: no output report found [ 1730.105466][T26462] net_ratelimit: 1 callbacks suppressed [ 1730.105482][T26462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1730.119203][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1730.119850][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.130754][T28230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1730.134353][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.159474][T28206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1730.344643][T28230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1730.378542][T28204] az6027: usb out operation failed. (-71) [ 1730.418107][T28204] az6027: usb out operation failed. (-71) [ 1730.435058][T28204] stb0899_attach: Driver disabled by Kconfig [ 1730.456856][T28204] az6027: no front-end attached [ 1730.456856][T28204] [ 1730.490603][T28204] az6027: usb out operation failed. (-71) [ 1730.506409][T28204] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1730.545251][T28204] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input189 [ 1730.611007][T28204] dvb-usb: schedule remote query interval to 400 msecs. [ 1730.638378][T28204] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1730.673803][T25043] usb 1-1: USB disconnect, device number 75 [ 1730.726007][T25043] usblp1: removed [ 1730.737002][T28204] usb 2-1: USB disconnect, device number 65 [ 1730.744917][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1730.970738][T28204] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1730.988794][T28205] usb 36-1: device descriptor read/8, error -110 [ 1731.058041][T11824] netlink: 92 bytes leftover after parsing attributes in process `syz.1.8389'. [ 1731.373346][T11840] netlink: 92 bytes leftover after parsing attributes in process `syz.1.8392'. [ 1731.390717][T28204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1731.405402][T28205] usb usb36-port1: attempt power cycle [ 1731.636073][T11842] input: syz1 as /devices/virtual/input/input190 [ 1731.889103][T28230] usb 5-1: USB disconnect, device number 2 [ 1731.976234][T28205] usb usb36-port1: unable to enumerate USB device [ 1732.426845][T28230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1732.666315][T25031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1732.729628][T27600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1733.164312][T28230] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1733.229253][T25031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1733.325105][T28230] usb 2-1: Using ep0 maxpacket: 16 [ 1733.347245][T28230] usb 2-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 1733.377977][T28230] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1733.398522][T28230] usb 2-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 1733.409614][T28230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1733.436217][T28230] usb 2-1: config 0 descriptor?? [ 1733.510288][T11930] input: syz1 as /devices/virtual/input/input191 [ 1734.011797][T28230] bigben 0003:146B:0902.0069: unexpected rdesc, please submit for review [ 1734.035158][T28230] bigben 0003:146B:0902.0069: ignoring exceeding usage max [ 1734.048996][T28230] bigben 0003:146B:0902.0069: unknown main item tag 0x1 [ 1734.086936][T28230] bigben 0003:146B:0902.0069: hidraw0: USB HID vc2.59 Device [HID 146b:0902] on usb-dummy_hcd.1-1/input0 [ 1734.136823][T28230] bigben 0003:146B:0902.0069: missing HID_OUTPUT_REPORT 0 [ 1734.163491][T28230] bigben 0003:146B:0902.0069: no output report found [ 1734.334479][T28205] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1734.494379][T28205] usb 5-1: Using ep0 maxpacket: 8 [ 1734.509299][T28205] usb 5-1: config 1 has an invalid descriptor of length 209, skipping remainder of the config [ 1734.538440][T28205] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1734.584108][T28205] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1734.602467][T28205] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1734.610821][T28205] usb 5-1: Product: syz [ 1734.615600][T28205] usb 5-1: Manufacturer: syz [ 1734.621322][T28205] usb 5-1: SerialNumber: syz [ 1734.662250][T28205] cdc_ether 5-1:1.0: missing cdc ether descriptor [ 1734.689139][T28205] usbtest 5-1:1.0: couldn't get endpoints, -22 [ 1734.702322][T28205] usbtest 5-1:1.0: probe with driver usbtest failed with error -22 [ 1734.802728][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 1734.802744][ T30] audit: type=1326 audit(1782365933.540:9733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11967 comm="syz.0.8411" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc49fd9ce59 code=0x0 [ 1735.124286][T25031] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1735.274717][T25031] usb 4-1: Using ep0 maxpacket: 16 [ 1735.281449][T25031] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1735.291825][T25031] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1735.309739][T25031] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1735.319189][T25031] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1735.327284][T25031] usb 4-1: Product: syz [ 1735.331477][T25031] usb 4-1: Manufacturer: syz [ 1735.336214][T25031] usb 4-1: SerialNumber: syz [ 1735.346878][T25031] cdc_ncm 4-1:1.0: skipping garbage [ 1735.352116][T25031] usb 4-1: selecting invalid altsetting 1 [ 1735.382380][T28204] usb 5-1: USB disconnect, device number 3 [ 1735.546659][T28205] net_ratelimit: 4 callbacks suppressed [ 1735.546676][T28205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1735.590168][T11995] FAULT_INJECTION: forcing a failure. [ 1735.590168][T11995] name failslab, interval 1, probability 0, space 0, times 0 [ 1735.606180][T11995] CPU: 0 UID: 0 PID: 11995 Comm: syz.4.8416 Tainted: G L syzkaller #0 PREEMPT(full) [ 1735.606207][T11995] Tainted: [L]=SOFTLOCKUP [ 1735.606213][T11995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1735.606221][T11995] Call Trace: [ 1735.606227][T11995] [ 1735.606234][T11995] dump_stack_lvl+0xe8/0x150 [ 1735.606261][T11995] should_fail_ex+0x40c/0x560 [ 1735.606287][T11995] should_failslab+0xa8/0x100 [ 1735.606308][T11995] __kmalloc_noprof+0xfe/0x720 [ 1735.606333][T11995] ? iter_file_splice_write+0x1ea/0x1240 [ 1735.606350][T11995] ? iter_file_splice_write+0x1ea/0x1240 [ 1735.606371][T11995] iter_file_splice_write+0x1ea/0x1240 [ 1735.606387][T11995] ? __lock_acquire+0x683/0x2cf0 [ 1735.606407][T11995] ? kfree+0x1c5/0x640 [ 1735.606422][T11995] ? copy_splice_read+0x92a/0xaa0 [ 1735.606438][T11995] ? copy_splice_read+0x92a/0xaa0 [ 1735.606454][T11995] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1735.606467][T11995] ? direct_splice_actor+0x49/0x160 [ 1735.606481][T11995] ? direct_splice_actor+0x49/0x160 [ 1735.606503][T11995] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1735.606516][T11995] direct_splice_actor+0x101/0x160 [ 1735.606532][T11995] splice_direct_to_actor+0x57b/0xcb0 [ 1735.606558][T11995] ? __pfx_direct_splice_actor+0x10/0x10 [ 1735.606571][T11995] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1735.606591][T11995] do_splice_direct+0x195/0x290 [ 1735.606606][T11995] ? __pfx_do_splice_direct+0x10/0x10 [ 1735.606620][T11995] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1735.606638][T11995] ? rw_verify_area+0x203/0x4c0 [ 1735.606664][T11995] do_sendfile+0x52e/0x7c0 [ 1735.606687][T11995] ? __pfx_do_sendfile+0x10/0x10 [ 1735.606704][T11995] ? __fget_files+0x3a2/0x420 [ 1735.606723][T11995] __se_sys_sendfile64+0x144/0x1a0 [ 1735.606742][T11995] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 1735.606764][T11995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1735.606778][T11995] do_syscall_64+0x174/0x580 [ 1735.606795][T11995] ? trace_irq_disable+0x3b/0x140 [ 1735.606814][T11995] ? clear_bhb_loop+0x40/0x90 [ 1735.606829][T11995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1735.606842][T11995] RIP: 0033:0x7fbd1a99ce59 [ 1735.606854][T11995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1735.606865][T11995] RSP: 002b:00007fbd1b869028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1735.606879][T11995] RAX: ffffffffffffffda RBX: 00007fbd1ac15fa0 RCX: 00007fbd1a99ce59 [ 1735.606889][T11995] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1735.606896][T11995] RBP: 00007fbd1b869090 R08: 0000000000000000 R09: 0000000000000000 [ 1735.606904][T11995] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000001 [ 1735.606911][T11995] R13: 00007fbd1ac16038 R14: 00007fbd1ac15fa0 R15: 00007fbd1ad3fa48 [ 1735.606932][T11995] [ 1735.912323][ T7540] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1735.923489][T25046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1735.940299][T11976] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8413'. [ 1735.949539][T11976] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1735.962267][T28230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1736.002164][T25031] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 1736.011951][T25031] cdc_ncm 4-1:1.0: bind() failure [ 1736.025491][T25031] usb 4-1: USB disconnect, device number 52 [ 1736.229330][T12015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8418'. [ 1736.287174][T28230] usb 2-1: USB disconnect, device number 66 [ 1736.589982][T28204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1736.823650][T12042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1736.896413][T12042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1737.063484][T12052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1737.104733][T12052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1737.196942][T12052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8423'. [ 1737.624743][T28230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1738.435881][T27602] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1738.674676][T28204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1738.985656][T25043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1739.224464][T28204] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1739.374596][T12095] hub 8-0:1.0: USB hub found [ 1739.379692][T12095] hub 8-0:1.0: 1 port detected [ 1739.394594][T28204] usb 4-1: Using ep0 maxpacket: 16 [ 1739.412053][T28204] usb 4-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 1739.439759][T28204] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1739.461025][T28204] usb 4-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 1739.491857][T28204] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1739.533062][T28204] usb 4-1: config 0 descriptor?? [ 1739.654335][T25043] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1739.765559][T12112] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8435'. [ 1739.835180][T25043] usb 2-1: Using ep0 maxpacket: 16 [ 1739.870280][T25043] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 1739.909398][T25043] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1739.952058][T25043] usb 2-1: config 0 has no interface number 0 [ 1739.980417][T25043] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1740.005782][T25043] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1740.052942][T25043] usb 2-1: config 0 interface 255 has no altsetting 0 [ 1740.090929][T12132] netlink: 'syz.2.8436': attribute type 6 has an invalid length. [ 1740.098932][T25031] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1740.109292][T25043] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 1740.142199][T25043] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1740.160000][T25043] usb 2-1: Product: syz [ 1740.170778][T25043] usb 2-1: Manufacturer: syz [ 1740.182680][T25043] usb 2-1: SerialNumber: syz [ 1740.200619][T25043] usb 2-1: config 0 descriptor?? [ 1740.274335][T25031] usb 5-1: Using ep0 maxpacket: 8 [ 1740.282701][T25031] usb 5-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 114, changing to 10 [ 1740.304087][T25031] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1740.333472][T25031] usb 5-1: New USB device found, idVendor=05ac, idProduct=025a, bcdDevice= 0.40 [ 1740.369308][T25031] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1740.394064][T25031] usb 5-1: Product: syz [ 1740.400277][T28204] bigben 0003:146B:0902.006A: unexpected rdesc, please submit for review [ 1740.415691][T25031] usb 5-1: Manufacturer: syz [ 1740.427100][T28204] bigben 0003:146B:0902.006A: ignoring exceeding usage max [ 1740.434362][T25031] usb 5-1: SerialNumber: syz [ 1740.497700][T28204] bigben 0003:146B:0902.006A: unknown main item tag 0x1 [ 1740.528295][T28204] bigben 0003:146B:0902.006A: hidraw0: USB HID vc2.59 Device [HID 146b:0902] on usb-dummy_hcd.3-1/input0 [ 1740.542075][T28204] bigben 0003:146B:0902.006A: missing HID_OUTPUT_REPORT 0 [ 1740.549703][T28204] bigben 0003:146B:0902.006A: no output report found [ 1740.705381][T12112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1740.745233][T28204] net_ratelimit: 3 callbacks suppressed [ 1740.745251][T28204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1740.763973][T12112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1740.902047][T25031] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input193 [ 1740.939077][ T4976] bcm5974 5-1:1.0: could not read from device [ 1740.953896][ T4976] bcm5974 5-1:1.0: could not read from device [ 1740.982805][ T4976] bcm5974 5-1:1.0: could not read from device [ 1741.001494][T25031] usb 5-1: USB disconnect, device number 4 [ 1741.064680][T25046] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1741.228045][T25046] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1741.262227][T25046] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1741.300748][T25046] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1741.340705][T25046] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1741.378066][T25046] usb 1-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 1741.395941][T25046] usb 1-1: New USB device strings: Mfr=28, Product=2, SerialNumber=3 [ 1741.422921][T25046] usb 1-1: Product: syz [ 1741.440321][T25046] usb 1-1: Manufacturer: syz [ 1741.461433][T25046] usb 1-1: SerialNumber: syz [ 1741.491143][T25046] usb 1-1: config 0 descriptor?? [ 1741.519671][T25046] kvaser_usb 1-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 1741.560814][T25046] kvaser_usb 1-1:0.0: error -EMSGSIZE: Failed to initialize card [ 1741.599849][T25046] kvaser_usb 1-1:0.0: probe with driver kvaser_usb failed with error -90 [ 1741.718602][T12180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1741.746754][T12180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1741.797607][T28230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1742.031659][T25046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1742.252411][T25043] usb 2-1: USB disconnect, device number 67 [ 1742.279883][T28230] usb 1-1: USB disconnect, device number 76 [ 1742.470820][T28206] usb 4-1: USB disconnect, device number 53 [ 1742.825076][T28230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1742.979744][T12302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8463'. [ 1743.234852][T25046] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1743.434368][T25046] usb 5-1: Using ep0 maxpacket: 16 [ 1743.449560][T25046] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1743.473309][T12324] hub 8-0:1.0: USB hub found [ 1743.487233][T25046] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1743.491788][T12324] hub 8-0:1.0: 1 port detected [ 1743.507417][T25046] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1743.546170][T25046] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1743.589557][T25046] usb 5-1: config 0 descriptor?? [ 1743.683591][T12333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1743.715620][T12333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1743.754977][T28230] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1743.800133][T12340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1743.823915][T12340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1743.865911][T28204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1743.924574][T28230] usb 4-1: Using ep0 maxpacket: 16 [ 1743.937233][T28230] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 1743.977712][T28230] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1744.003221][T28230] usb 4-1: config 0 has no interface number 0 [ 1744.013846][T28230] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1744.025749][T28230] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1744.058509][T25046] nzxt-smart2 0003:1E71:2009.006B: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 1744.094062][T28230] usb 4-1: config 0 interface 255 has no altsetting 0 [ 1744.141541][T28230] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 1744.188070][T27600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1744.200178][T28230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1744.257750][T28230] usb 4-1: Product: syz [ 1744.282882][T28230] usb 4-1: Manufacturer: syz [ 1744.325297][T28230] usb 4-1: SerialNumber: syz [ 1744.333030][T12306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1744.352866][T28230] usb 4-1: config 0 descriptor?? [ 1744.369688][T12306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1744.758613][T28206] usb 5-1: USB disconnect, device number 5 [ 1744.905269][T28204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1745.064734][T25046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1745.468562][T27600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1745.536708][ T30] audit: type=1326 audit(1782365944.280:9734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12377 comm="syz.4.8472" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd1a99ce59 code=0x0 [ 1745.944696][T28204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1746.078605][T12399] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8475'. [ 1746.104539][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1746.274863][T12407] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8476'. [ 1746.454697][T28204] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1746.545414][T28230] usb 4-1: USB disconnect, device number 54 [ 1746.589103][T12416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8478'. [ 1746.635059][T28204] usb 2-1: Using ep0 maxpacket: 16 [ 1746.645710][T28204] usb 2-1: config 166 has an invalid interface number: 177 but max is 1 [ 1746.667102][T28204] usb 2-1: config 166 has an invalid interface number: 34 but max is 1 [ 1746.691258][T28204] usb 2-1: config 166 has no interface number 0 [ 1746.710217][T28204] usb 2-1: config 166 has no interface number 1 [ 1746.736437][T28204] usb 2-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1746.780090][T28204] usb 2-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1746.812669][T28204] usb 2-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1746.850905][T28204] usb 2-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1746.866691][T28204] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 1746.882603][T28204] usb 2-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1746.893612][T28204] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1746.918827][T28204] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1746.934866][T28204] usb 2-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1746.949607][T28204] usb 2-1: config 166 interface 177 has no altsetting 0 [ 1746.963694][T28204] usb 2-1: config 166 interface 34 has no altsetting 0 [ 1746.991419][T28230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1747.006701][T28204] usb 2-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 1747.021370][T28204] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1747.044345][T28204] usb 2-1: Product: syz [ 1747.044418][T25046] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1747.083840][T28204] usb 2-1: Manufacturer: syz [ 1747.098353][T28204] usb 2-1: SerialNumber: syz [ 1747.237215][T25046] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1747.263315][T25046] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1747.295857][T25046] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1747.311389][T25046] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1747.348460][T25046] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1747.379077][T28204] ums-realtek 2-1:166.177: USB Mass Storage device detected [ 1747.422944][T25046] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1747.474552][T25046] usb 4-1: config 0 descriptor?? [ 1747.583847][T28204] ums-realtek 2-1:166.34: USB Mass Storage device detected [ 1747.659318][T28204] ums-realtek 2-1:166.34: probe with driver ums-realtek failed with error -5 [ 1747.698598][T25046] hdpvr 4-1:0.0: firmware version 0x1e dated [ 1747.704643][T28204] uvcvideo 2-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 1747.725447][T28204] uvcvideo 2-1:166.34: No valid video chain found. [ 1747.763122][T28204] usb 2-1: USB disconnect, device number 68 [ 1747.952015][T12476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1747.993506][T12476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1748.025943][T28205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1748.114436][T25031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1748.452006][T25046] hdpvr 4-1:0.0: Could not setup controls [ 1748.482968][T25046] hdpvr 4-1:0.0: registering videodev failed [ 1748.499690][T12491] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 1748.537618][T25046] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -71 [ 1748.552270][T25046] usb 4-1: USB disconnect, device number 55 [ 1748.694498][T25031] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 1748.866353][T25031] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1748.887550][T25031] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1748.914460][T25031] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1748.943094][T25031] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1748.963041][T25031] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1748.987502][T25031] usb 5-1: Product: syz [ 1749.004471][T25046] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1749.013946][T25031] usb 5-1: Manufacturer: syz [ 1749.039008][T25031] usb 5-1: SerialNumber: syz [ 1749.064706][T28204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1749.096977][T25031] usb 5-1: config 0 descriptor?? [ 1749.118930][T12486] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1749.184681][T25046] usb 2-1: Using ep0 maxpacket: 16 [ 1749.200293][T25046] usb 2-1: config index 0 descriptor too short (expected 5650, got 18) [ 1749.239637][T25046] usb 2-1: config 3 has an invalid interface number: 20 but max is 0 [ 1749.271309][T25046] usb 2-1: config 3 has no interface number 0 [ 1749.294504][T25031] rc_core: IR keymap rc-streamzap not found [ 1749.300934][T25046] usb 2-1: config 3 interface 20 has no altsetting 0 [ 1749.312477][T25031] Registered IR keymap rc-empty [ 1749.323050][T25046] usb 2-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice=27.b1 [ 1749.339983][T25031] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1749.353258][T25046] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1749.374322][T25046] usb 2-1: Product: syz [ 1749.402103][T25031] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input194 [ 1749.415988][T25046] usb 2-1: Manufacturer: syz [ 1749.424339][T25046] usb 2-1: SerialNumber: syz [ 1749.649354][T12517] FAULT_INJECTION: forcing a failure. [ 1749.649354][T12517] name failslab, interval 1, probability 0, space 0, times 0 [ 1749.695812][T12517] CPU: 0 UID: 0 PID: 12517 Comm: syz.1.8490 Tainted: G L syzkaller #0 PREEMPT(full) [ 1749.695839][T12517] Tainted: [L]=SOFTLOCKUP [ 1749.695848][T12517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1749.695857][T12517] Call Trace: [ 1749.695864][T12517] [ 1749.695871][T12517] dump_stack_lvl+0xe8/0x150 [ 1749.695895][T12517] should_fail_ex+0x40c/0x560 [ 1749.695918][T12517] ? seq_read_iter+0x1ea/0xca0 [ 1749.695939][T12517] should_failslab+0xa8/0x100 [ 1749.695959][T12517] __kvmalloc_node_noprof+0x176/0x860 [ 1749.695978][T12517] ? aa_file_perm+0x18b/0x15f0 [ 1749.696000][T12517] ? seq_read_iter+0x1ea/0xca0 [ 1749.696027][T12517] seq_read_iter+0x1ea/0xca0 [ 1749.696061][T12517] seq_read+0x367/0x480 [ 1749.696080][T12517] ? kstrtoull+0x12f/0x1d0 [ 1749.696108][T12517] ? __pfx_seq_read+0x10/0x10 [ 1749.696137][T12517] ? apparmor_file_permission+0x1f4/0x300 [ 1749.696175][T12517] ? __pfx_seq_read+0x10/0x10 [ 1749.696193][T12517] proc_reg_read+0x1e9/0x2e0 [ 1749.696217][T12517] vfs_readv+0x57c/0x850 [ 1749.696243][T12517] ? __pfx_proc_reg_read+0x10/0x10 [ 1749.696265][T12517] ? __pfx_vfs_readv+0x10/0x10 [ 1749.696301][T12517] ? __fget_files+0x2a/0x420 [ 1749.696322][T12517] ? __fget_files+0x3a2/0x420 [ 1749.696338][T12517] ? __fget_files+0x2a/0x420 [ 1749.696362][T12517] __x64_sys_preadv+0x19c/0x2b0 [ 1749.696385][T12517] ? __pfx___x64_sys_preadv+0x10/0x10 [ 1749.696414][T12517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1749.696432][T12517] do_syscall_64+0x174/0x580 [ 1749.696455][T12517] ? trace_irq_disable+0x3b/0x140 [ 1749.696478][T12517] ? clear_bhb_loop+0x40/0x90 [ 1749.696499][T12517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1749.696516][T12517] RIP: 0033:0x7fb7c8f9ce59 [ 1749.696532][T12517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1749.696546][T12517] RSP: 002b:00007fb7c9de7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1749.696564][T12517] RAX: ffffffffffffffda RBX: 00007fb7c9215fa0 RCX: 00007fb7c8f9ce59 [ 1749.696577][T12517] RDX: 0000000000000001 RSI: 0000200000000200 RDI: 0000000000000007 [ 1749.696588][T12517] RBP: 00007fb7c9de7090 R08: 0000000000000000 R09: 0000000000000000 [ 1749.696598][T12517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1749.696608][T12517] R13: 00007fb7c9216038 R14: 00007fb7c9215fa0 R15: 00007fb7c933fa48 [ 1749.696638][T12517] [ 1749.716079][T12541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8492'. [ 1749.982699][T12542] hub 8-0:1.0: USB hub found [ 1749.989990][T12542] hub 8-0:1.0: 1 port detected [ 1750.134084][T12548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1750.170993][T12548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1750.236896][T12540] bridge0: port 2(bridge_slave_1) entered disabled state [ 1750.244271][T12540] bridge0: port 1(bridge_slave_0) entered disabled state [ 1750.463285][T12540] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1750.520660][T12540] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1750.881001][T12540] veth1_vlan: left allmulticast mode [ 1750.930313][T12541] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1751.033039][T12541] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1751.153777][ T8502] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1751.171714][ T8502] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1751.214813][ T8502] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1751.229708][T25046] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:3.20/input/input195 [ 1751.287358][ T8502] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1751.313771][ T4976] bcm5974 2-1:3.20: could not read from device [ 1751.339141][ T4976] bcm5974 2-1:3.20: could not read from device [ 1751.362527][ T4976] bcm5974 2-1:3.20: could not read from device [ 1751.387055][ T4976] bcm5974 2-1:3.20: could not read from device [ 1751.406464][T25046] usb 2-1: USB disconnect, device number 69 [ 1751.825217][T28205] usb 5-1: USB disconnect, device number 6 [ 1752.043456][T12589] netlink: 'syz.3.8494': attribute type 10 has an invalid length. [ 1752.210653][T12595] FAULT_INJECTION: forcing a failure. [ 1752.210653][T12595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1752.255532][T12595] CPU: 1 UID: 0 PID: 12595 Comm: syz.0.8496 Tainted: G L syzkaller #0 PREEMPT(full) [ 1752.255561][T12595] Tainted: [L]=SOFTLOCKUP [ 1752.255567][T12595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1752.255578][T12595] Call Trace: [ 1752.255584][T12595] [ 1752.255592][T12595] dump_stack_lvl+0xe8/0x150 [ 1752.255616][T12595] should_fail_ex+0x40c/0x560 [ 1752.255643][T12595] _copy_from_user+0x2d/0xb0 [ 1752.255661][T12595] get_timespec64+0x96/0x1b0 [ 1752.255680][T12595] ? __pfx_get_timespec64+0x10/0x10 [ 1752.255708][T12595] io_parse_user_time+0xba/0x350 [ 1752.255727][T12595] ? __kmalloc_noprof+0x396/0x720 [ 1752.255751][T12595] ? __pfx_io_parse_user_time+0x10/0x10 [ 1752.255767][T12595] ? io_uring_alloc_async_data+0x78/0x120 [ 1752.255794][T12595] __io_timeout_prep+0x3d0/0x780 [ 1752.255813][T12595] ? io_task_refs_refill+0xba/0x180 [ 1752.255837][T12595] io_submit_sqes+0xbde/0x2310 [ 1752.255888][T12595] __se_sys_io_uring_enter+0x35b/0x1bb0 [ 1752.255919][T12595] ? __fget_files+0x3a2/0x420 [ 1752.255940][T12595] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 1752.255963][T12595] ? fput+0xa0/0xd0 [ 1752.255987][T12595] ? ksys_write+0x242/0x270 [ 1752.256008][T12595] ? __pfx_ksys_write+0x10/0x10 [ 1752.256032][T12595] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 1752.256055][T12595] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1752.256074][T12595] do_syscall_64+0x174/0x580 [ 1752.256095][T12595] ? trace_irq_disable+0x3b/0x140 [ 1752.256118][T12595] ? clear_bhb_loop+0x40/0x90 [ 1752.256138][T12595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1752.256155][T12595] RIP: 0033:0x7fc49fd9ce59 [ 1752.256172][T12595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1752.256186][T12595] RSP: 002b:00007fc4a0d31fb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1752.256205][T12595] RAX: ffffffffffffffda RBX: 0000200000000200 RCX: 00007fc49fd9ce59 [ 1752.256217][T12595] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000003 [ 1752.256227][T12595] RBP: 0000200000000340 R08: 0000000000000000 R09: 0000000000000008 [ 1752.256238][T12595] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 1752.256248][T12595] R13: 00007fc4a0016038 R14: 00007fc4a0015fa0 R15: 00007fc4a013fa48 [ 1752.256276][T12595] [ 1752.638939][T12589] team0 (unregistering): Port device team_slave_0 removed [ 1752.727287][T12578] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1752.857977][T12589] team0 (unregistering): Port device team_slave_1 removed [ 1754.314508][T25046] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 1754.476210][T25046] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1754.501748][T25046] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1754.528055][T25046] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1754.557210][T25046] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1754.589234][T25046] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1754.610069][T25046] usb 4-1: Product: syz [ 1754.619408][T25046] usb 4-1: Manufacturer: syz [ 1754.629380][T25046] usb 4-1: SerialNumber: syz [ 1754.643791][T25046] usb 4-1: config 0 descriptor?? [ 1754.672299][T12638] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1754.756414][T12656] FAULT_INJECTION: forcing a failure. [ 1754.756414][T12656] name failslab, interval 1, probability 0, space 0, times 0 [ 1754.769634][T25046] rc_core: IR keymap rc-streamzap not found [ 1754.775712][T25046] Registered IR keymap rc-empty [ 1754.780683][T12656] CPU: 0 UID: 0 PID: 12656 Comm: syz.4.8508 Tainted: G L syzkaller #0 PREEMPT(full) [ 1754.780699][T12656] Tainted: [L]=SOFTLOCKUP [ 1754.780702][T12656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1754.780708][T12656] Call Trace: [ 1754.780713][T12656] [ 1754.780718][T12656] dump_stack_lvl+0xe8/0x150 [ 1754.780734][T12656] should_fail_ex+0x40c/0x560 [ 1754.780750][T12656] should_failslab+0xa8/0x100 [ 1754.780763][T12656] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1754.780778][T12656] ? mas_alloc_nodes+0x291/0x350 [ 1754.780792][T12656] ? mas_alloc_nodes+0x291/0x350 [ 1754.780807][T12656] mas_alloc_nodes+0x291/0x350 [ 1754.780822][T12656] mas_preallocate+0x2cf/0x630 [ 1754.780836][T12656] ? rcu_is_watching+0x15/0xb0 [ 1754.780849][T12656] ? __pfx_mas_preallocate+0x10/0x10 [ 1754.780866][T12656] ? anon_vma_name+0x61/0x210 [ 1754.780877][T12656] ? __mas_set_range+0x11a/0x3a0 [ 1754.780890][T12656] __split_vma+0x318/0xa50 [ 1754.780902][T12656] ? kernel_text_address+0xa5/0xe0 [ 1754.780916][T12656] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1754.780930][T12656] ? arch_stack_walk+0xfb/0x150 [ 1754.780943][T12656] ? __pfx___split_vma+0x10/0x10 [ 1754.780958][T12656] ? __lock_acquire+0x683/0x2cf0 [ 1754.780970][T12656] ? ima_match_policy+0x106/0x21c0 [ 1754.780982][T12656] vms_gather_munmap_vmas+0x322/0x1370 [ 1754.780998][T12656] ? mtree_range_walk+0x707/0x8b0 [ 1754.781010][T12656] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1754.781025][T12656] ? mas_find+0xa23/0xcf0 [ 1754.781041][T12656] mmap_region+0x8f9/0x2310 [ 1754.781052][T12656] ? up_write+0x19f/0x4a0 [ 1754.781067][T12656] ? process_measurement+0x14fb/0x1c10 [ 1754.781083][T12656] ? kasan_quarantine_put+0xbb/0x1f0 [ 1754.781098][T12656] ? __pfx_mmap_region+0x10/0x10 [ 1754.781108][T12656] ? __lock_acquire+0x683/0x2cf0 [ 1754.781121][T12656] ? __lock_acquire+0x683/0x2cf0 [ 1754.781140][T12656] ? __lock_acquire+0x683/0x2cf0 [ 1754.781178][T12656] ? mm_get_unmapped_area+0xd3/0x100 [ 1754.781193][T12656] ? shmem_get_unmapped_area+0x2cf/0x8f0 [ 1754.781209][T12656] ? cap_mmap_addr+0xaf/0x100 [ 1754.781219][T12656] ? bpf_lsm_mmap_addr+0x9/0x50 [ 1754.781237][T12656] ? security_mmap_addr+0x71/0x240 [ 1754.781248][T12656] ? shmem_mapping+0xd/0x50 [ 1754.781257][T12656] ? memfd_check_seals_mmap+0xc5/0x200 [ 1754.781268][T12656] do_mmap+0xc3b/0x10c0 [ 1754.781285][T12656] ? __pfx_do_mmap+0x10/0x10 [ 1754.781296][T12656] ? down_write_killable+0x180/0x240 [ 1754.781307][T12656] ? __pfx_down_write_killable+0x10/0x10 [ 1754.781316][T12656] ? apparmor_mmap_file+0x2da/0x3e0 [ 1754.781333][T12656] vm_mmap_pgoff+0x272/0x4e0 [ 1754.781348][T12656] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1754.781359][T12656] ? __fget_files+0x2a/0x420 [ 1754.781371][T12656] ? __fget_files+0x3a2/0x420 [ 1754.781379][T12656] ? __fget_files+0x2a/0x420 [ 1754.781390][T12656] ksys_mmap_pgoff+0x4dc/0x760 [ 1754.781404][T12656] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1754.781414][T12656] do_syscall_64+0x174/0x580 [ 1754.781427][T12656] ? trace_irq_disable+0x3b/0x140 [ 1754.781442][T12656] ? clear_bhb_loop+0x40/0x90 [ 1754.781453][T12656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1754.781463][T12656] RIP: 0033:0x7fbd1a99ce59 [ 1754.781472][T12656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1754.781481][T12656] RSP: 002b:00007fbd1b869028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1754.781492][T12656] RAX: ffffffffffffffda RBX: 00007fbd1ac15fa0 RCX: 00007fbd1a99ce59 [ 1754.781499][T12656] RDX: 0000000000000002 RSI: 0000000000004000 RDI: 0000200000001000 [ 1754.781506][T12656] RBP: 00007fbd1b869090 R08: 0000000000000003 R09: 0000000100000000 [ 1754.781512][T12656] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 1754.781518][T12656] R13: 00007fbd1ac16038 R14: 00007fbd1ac15fa0 R15: 00007fbd1ad3fa48 [ 1754.781533][T12656] [ 1755.158475][T25046] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1755.173892][T25046] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input196 [ 1756.339791][T12728] hub 8-0:1.0: USB hub found [ 1756.360100][T12728] hub 8-0:1.0: 1 port detected [ 1756.404601][T25046] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1756.564417][T25046] usb 1-1: Using ep0 maxpacket: 8 [ 1756.618625][T25046] usb 1-1: config 1 has an invalid descriptor of length 209, skipping remainder of the config [ 1756.674391][ T5731] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1756.682795][T25046] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1756.740457][T25046] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1756.762013][T25046] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1756.788051][T25046] usb 1-1: Product: syz [ 1756.814807][T25046] usb 1-1: Manufacturer: syz [ 1756.835011][T25046] usb 1-1: SerialNumber: syz [ 1756.854451][ T5731] usb 2-1: Using ep0 maxpacket: 16 [ 1756.888551][ T5731] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 1756.911264][T25046] cdc_ether 1-1:1.0: missing cdc ether descriptor [ 1756.921226][ T5731] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1756.952846][T25046] usbtest 1-1:1.0: couldn't get endpoints, -22 [ 1756.999602][T25046] usbtest 1-1:1.0: probe with driver usbtest failed with error -22 [ 1757.009791][ T5731] usb 2-1: config 0 has no interface number 0 [ 1757.040350][ T5731] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1757.164158][T28230] usb 4-1: USB disconnect, device number 56 [ 1757.207834][ T5731] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1757.313209][ T5731] usb 2-1: config 0 interface 255 has no altsetting 0 [ 1757.416357][ T5731] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 1757.481609][ T5731] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1757.523054][ T5731] usb 2-1: Product: syz [ 1757.543137][ T5731] usb 2-1: Manufacturer: syz [ 1757.578479][ T5731] usb 2-1: SerialNumber: syz [ 1757.642242][ T5731] usb 2-1: config 0 descriptor?? [ 1757.736237][T12770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8521'. [ 1757.756330][T28204] usb 1-1: USB disconnect, device number 77 [ 1757.831819][T12770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8521'. [ 1759.075711][T12799] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8527'. [ 1759.195486][T12803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1759.244992][T12803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1759.313232][T12803] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1759.495154][T12813] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8528'. [ 1759.536570][T12813] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8528'. [ 1759.551463][ T5731] usb 2-1: USB disconnect, device number 70 [ 1760.074474][T28204] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 1760.247181][T28204] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1760.274994][T28204] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1760.316682][T28204] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1760.340769][T28204] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1760.353970][T28204] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1760.367118][T28204] usb 5-1: Product: syz [ 1760.378962][T28204] usb 5-1: Manufacturer: syz [ 1760.387089][T28204] usb 5-1: SerialNumber: syz [ 1760.413141][T28204] usb 5-1: config 0 descriptor?? [ 1760.426867][T12825] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1760.534606][T28204] rc_core: IR keymap rc-streamzap not found [ 1760.547931][T28204] Registered IR keymap rc-empty [ 1760.578764][T28204] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1760.609059][T28204] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input197 [ 1760.656694][T12852] bridge_slave_1: left allmulticast mode [ 1760.670086][T12852] bridge_slave_1: left promiscuous mode [ 1760.689485][T12852] bridge0: port 2(bridge_slave_1) entered disabled state [ 1760.751184][T12852] bridge_slave_0: left allmulticast mode [ 1760.785782][T12852] bridge_slave_0: left promiscuous mode [ 1760.810824][T12852] bridge0: port 1(bridge_slave_0) entered disabled state [ 1761.674706][ T5731] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1761.724644][T25031] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1761.789545][T12907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8539'. [ 1761.866007][ T5731] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1761.880385][ T5731] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1761.890355][T25031] usb 2-1: Using ep0 maxpacket: 8 [ 1761.895928][ T5731] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1761.912831][T25031] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1761.923441][ T5731] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1761.935328][T25031] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 1761.945230][ T5731] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1761.975063][T25031] usb 2-1: New USB device found, idVendor=0df6, idProduct=003d, bcdDevice=65.d5 [ 1761.985060][T25031] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1761.995762][ T5731] usb 4-1: config 0 descriptor?? [ 1762.035154][T25031] usb 2-1: Product: syz [ 1762.048381][T25031] usb 2-1: SerialNumber: syz [ 1762.076337][T25031] usb 2-1: config 0 descriptor?? [ 1762.306370][T12919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8542'. [ 1762.346077][T12919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8542'. [ 1762.477287][ T5731] plantronics 0003:047F:FFFF.006C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1762.805704][ T5731] usb 5-1: USB disconnect, device number 7 [ 1763.020749][T12947] FAULT_INJECTION: forcing a failure. [ 1763.020749][T12947] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1763.056953][T12947] CPU: 1 UID: 0 PID: 12947 Comm: syz.2.8546 Tainted: G L syzkaller #0 PREEMPT(full) [ 1763.056981][T12947] Tainted: [L]=SOFTLOCKUP [ 1763.056987][T12947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1763.056998][T12947] Call Trace: [ 1763.057005][T12947] [ 1763.057012][T12947] dump_stack_lvl+0xe8/0x150 [ 1763.057038][T12947] should_fail_ex+0x40c/0x560 [ 1763.057064][T12947] _copy_from_user+0x2d/0xb0 [ 1763.057083][T12947] do_sock_getsockopt+0x200/0x7e0 [ 1763.057105][T12947] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1763.057135][T12947] ? __fget_files+0x3a2/0x420 [ 1763.057150][T12947] ? __fget_files+0x2a/0x420 [ 1763.057172][T12947] __x64_sys_getsockopt+0x1a4/0x240 [ 1763.057193][T12947] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1763.057210][T12947] do_syscall_64+0x174/0x580 [ 1763.057232][T12947] ? trace_irq_disable+0x3b/0x140 [ 1763.057256][T12947] ? clear_bhb_loop+0x40/0x90 [ 1763.057276][T12947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1763.057292][T12947] RIP: 0033:0x7f0b2bf9ce59 [ 1763.057309][T12947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1763.057323][T12947] RSP: 002b:00007f0b2ced9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1763.057342][T12947] RAX: ffffffffffffffda RBX: 00007f0b2c215fa0 RCX: 00007f0b2bf9ce59 [ 1763.057355][T12947] RDX: 0000000000002714 RSI: 0000200000000114 RDI: 0000000000000003 [ 1763.057366][T12947] RBP: 00007f0b2ced9090 R08: 0000200000000000 R09: 0000000000000000 [ 1763.057377][T12947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1763.057388][T12947] R13: 00007f0b2c216038 R14: 00007f0b2c215fa0 R15: 00007f0b2c33fa48 [ 1763.057414][T12947] [ 1763.579566][ T30] audit: type=1326 audit(1782365962.320:9735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12959 comm="syz.0.8550" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc49fd9ce59 code=0x0 [ 1763.738445][ C0] plantronics 0003:047F:FFFF.006C: usb_submit_urb(ctrl) failed: -1 [ 1764.004427][ T5731] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1764.171446][ T5731] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1764.183895][ T5731] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1764.195645][ T5731] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1764.205531][ T5731] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1764.219819][ T5731] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1764.229576][ T5731] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1764.253642][ T5731] usb 5-1: config 0 descriptor?? [ 1764.322193][T12976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1764.334743][T12976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1764.475514][T25031] usb 2-1: USB disconnect, device number 71 [ 1764.550807][T28204] usb 4-1: USB disconnect, device number 57 [ 1764.675531][T25043] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1764.693241][T12967] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1764.857218][T25043] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 1764.882468][T25043] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1764.933395][T25043] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1764.951566][T25043] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1764.981751][T25043] usb 1-1: Product: syz [ 1765.001271][T25043] usb 1-1: Manufacturer: syz [ 1765.014325][T25043] usb 1-1: SerialNumber: syz [ 1765.059478][T25043] rtl8150 1-1:1.0: couldn't find required endpoints [ 1765.071782][T25043] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 1765.154502][T25031] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1765.263196][T12985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1765.278790][T12985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1765.310403][T25043] usb 1-1: USB disconnect, device number 78 [ 1765.339315][T25031] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1765.397652][T25031] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1765.410095][T25031] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1765.453199][T25031] usb 2-1: Product: syz [ 1765.492250][T25031] usb 2-1: Manufacturer: syz [ 1765.513374][T25031] usb 2-1: SerialNumber: syz [ 1765.780700][T25031] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 72 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1766.021434][T28204] usb 2-1: USB disconnect, device number 72 [ 1766.061613][T28204] usblp0: removed [ 1766.153964][ T30] audit: type=1326 audit(1782365964.890:9736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13059 comm="syz.0.8564" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc49fd9ce59 code=0x0 [ 1766.722094][ T5731] usbhid 5-1:0.0: can't add hid device: -71 [ 1766.746550][ T5731] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1766.799777][ T5731] usb 5-1: USB disconnect, device number 8 [ 1766.967506][ T30] audit: type=1326 audit(1782365965.710:9737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13070 comm="syz.2.8566" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0b2bf9ce59 code=0x0 [ 1767.574741][ T5731] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1767.734523][ T5731] usb 1-1: Using ep0 maxpacket: 32 [ 1767.766873][ T5731] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 1767.812605][ T5731] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1767.851432][ T5731] usb 1-1: New USB device found, idVendor=056a, idProduct=0097, bcdDevice= 0.40 [ 1767.912805][ T5731] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1767.950307][ T5731] usb 1-1: Product: 廱큲㨂졳괡༆ꆉ穰쒭ḋ薼し튛㇅ጴ¼錧쨾忊ཌ叚ₗꊕℌ鱛鿋받ᰌ훟큕緷퓱䳱泮潒ᗀ癏Õ姒⥳껊오餯鴅쎧潃儢춨鐍▸鈧킱仿伛誳篹ꓺ懿܆㔺擣긄ᑨ양廙ᐜ痕诶ᮖ猢뉫ᘘ᧦컡㽑㬽3ⶁ캐ꢠꬉ朣鲅龛㿣ப᷻䂔哣브額묺ҥ虋遒๷潾ﮒ둺ꐑ剹委떒牙껿ꞕ튷큭 [ 1768.058386][ T5731] usb 1-1: Manufacturer: ࠒ [ 1768.080714][ T5731] usb 1-1: SerialNumber: syz [ 1768.334426][T28205] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1768.351435][ T5731] usbhid 1-1:1.0: can't add hid device: -71 [ 1768.372321][ T5731] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 1768.422954][ T5731] usb 1-1: USB disconnect, device number 79 [ 1768.514736][T28205] usb 2-1: Using ep0 maxpacket: 16 [ 1768.525207][T28205] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1768.559546][T28205] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1768.568930][T28205] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1768.583895][T28205] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1768.598459][T28205] usb 2-1: config 0 descriptor?? [ 1769.028467][T28205] nzxt-smart2 0003:1E71:2009.006D: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 1769.222607][T13116] netlink: 1340 bytes leftover after parsing attributes in process `syz.1.8570'. [ 1769.299773][T13116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1769.327213][T13116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1769.394548][ T5731] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1769.567757][ T5731] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1769.604644][ T5731] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1769.635009][ T5731] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1769.652054][T28205] usb 2-1: USB disconnect, device number 73 [ 1769.658435][ T5731] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1769.694092][ T5731] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1769.724422][ T5731] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1769.769246][ T5731] usb 1-1: config 0 descriptor?? [ 1770.193237][T13159] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1770.313249][T13190] netlink: 'syz.1.8579': attribute type 6 has an invalid length. [ 1770.838359][T13232] Invalid argument reading file caps for ./file0 [ 1771.654064][T13264] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8586'. [ 1771.942532][T13268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1772.002771][T13268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1772.125978][ T5731] usbhid 1-1:0.0: can't add hid device: -71 [ 1772.145323][ T5731] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1772.207868][ T5731] usb 1-1: USB disconnect, device number 80 [ 1772.267981][T13278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8588'. [ 1772.422968][ T30] audit: type=1326 audit(1782365971.160:9738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13282 comm="syz.0.8589" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc49fd9ce59 code=0x0 [ 1772.598209][T13287] syzkaller0: entered promiscuous mode [ 1772.614008][T13287] syzkaller0: entered allmulticast mode [ 1772.798611][T13292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1772.859142][T13292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1773.414399][T28205] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1773.436656][T13320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1773.446754][T13320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1773.464332][T28204] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 1773.576727][T28205] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1773.586671][T28205] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1773.596964][T28205] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1773.607467][T28205] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1773.617768][T28205] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1773.627232][T28205] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1773.636716][T28204] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1773.648455][T28204] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1773.659193][T28205] usb 4-1: config 0 descriptor?? [ 1773.667101][T28204] usb 2-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 1773.678725][T28204] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1773.687045][T28204] usb 2-1: Product: syz [ 1773.691227][T28204] usb 2-1: Manufacturer: syz [ 1773.696370][T28204] usb 2-1: SerialNumber: syz [ 1773.703328][T28204] usb 2-1: config 0 descriptor?? [ 1773.784751][T25043] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1773.869402][T28205] hdpvr 4-1:0.0: firmware version 0x1e dated [ 1773.920925][T13308] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8594'. [ 1773.937172][T25043] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1773.981998][T25043] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1774.007067][T25043] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1774.011783][T13308] bond7: peer notification delay (2365) is not a multiple of miimon (6), value rounded to 2364 ms [ 1774.037309][T25043] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1774.052564][T28204] usb 2-1: USB disconnect, device number 74 [ 1774.075804][T25043] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1774.104620][T13375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8599'. [ 1774.124366][T25043] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1774.139526][T13378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1774.157676][T25043] usb 5-1: config 0 descriptor?? [ 1774.164943][T13378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1774.250597][T13386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1774.261751][T13386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1774.380908][T13386] syzkaller0: entered promiscuous mode [ 1774.389433][T13386] syzkaller0: entered allmulticast mode [ 1774.481634][T28205] hdpvr 4-1:0.0: Could not setup controls [ 1774.490192][T28205] hdpvr 4-1:0.0: registering videodev failed [ 1774.533494][T28205] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -71 [ 1774.550250][T28205] usb 4-1: USB disconnect, device number 58 [ 1774.581957][T13325] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1775.207527][T13424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1775.248946][T13424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1775.297493][T13424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1775.345340][T13424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1775.390639][T13424] sctp: [Deprecated]: syz.2.8603 (pid 13424) Use of int in max_burst socket option. [ 1775.390639][T13424] Use struct sctp_assoc_value instead [ 1775.507659][T13437] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1776.146812][T13472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8608'. [ 1776.197254][T13469] bridge0: port 1(bridge_slave_0) entered disabled state [ 1776.208199][T13476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1776.241060][T13476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1776.385935][T13469] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1776.408690][T13469] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1776.613938][T25043] usbhid 5-1:0.0: can't add hid device: -71 [ 1776.652986][T25043] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1776.687298][T25043] usb 5-1: USB disconnect, device number 9 [ 1777.294003][T25144] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1777.320420][T25144] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1777.330501][T25144] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1777.342659][T25144] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1777.352908][T25144] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1777.518971][T13470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8608'. [ 1777.587086][T13472] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1777.626722][T13472] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1777.787474][ T7532] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1777.838213][ T7532] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1777.876190][ T7532] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1777.962369][ T7532] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1778.114690][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1778.351097][T28230] usb 3-1: USB disconnect, device number 6 [ 1779.464297][T25144] Bluetooth: hci0: command tx timeout [ 1780.130883][T13509] bridge0: port 1(bridge_slave_0) entered blocking state [ 1780.158774][T13509] bridge0: port 1(bridge_slave_0) entered disabled state [ 1780.175331][T25046] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1780.193011][T13509] bridge_slave_0: entered allmulticast mode [ 1780.213787][T13509] bridge_slave_0: entered promiscuous mode [ 1780.334278][T25046] usb 1-1: Using ep0 maxpacket: 16 [ 1780.351813][T25046] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 1780.370596][T25046] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 1780.408283][T25046] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1780.448678][T25046] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1780.465018][T25046] usb 1-1: Product: 탒쾲斊ኑ༽팓淰裑 [ 1780.481820][T25046] usb 1-1: Manufacturer: 쾲≮塨㓟㍲⍴Ꮢ䢒퇏뤌ഇ᜴쿶襂疄䉴˳ⵠꊒ녃睃跌쓪㭼Ɩ緷찴豜룂԰役䗻蔌톈좯뒜欓큒㐏䪐쓑죘晙†顕媉蕗ﯭ탱ム絽熜팼囝甝쮗 [ 1780.558225][T25046] usb 1-1: SerialNumber: ᠉ [ 1780.609623][T13509] bridge0: port 2(bridge_slave_1) entered blocking state [ 1780.631932][T13509] bridge0: port 2(bridge_slave_1) entered disabled state [ 1780.649690][T13509] bridge_slave_1: entered allmulticast mode [ 1780.676761][T13509] bridge_slave_1: entered promiscuous mode [ 1780.987780][T13509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1781.028226][T25043] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1781.035264][T13509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1781.044762][T13718] netlink: 348 bytes leftover after parsing attributes in process `syz.4.8625'. [ 1781.243290][T25043] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1781.304044][T25043] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1781.341830][T25043] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1781.371006][ T7532] vlan2: left allmulticast mode [ 1781.381258][ T7532] macvtap0: left allmulticast mode [ 1781.388754][T25043] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1781.403224][ T7532] vlan2: left promiscuous mode [ 1781.419115][ T7532] macvtap0: left promiscuous mode [ 1781.433871][T25043] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1781.454341][ T7532] bridge0: port 3(vlan2) entered disabled state [ 1781.474857][T25043] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1781.507076][T25043] usb 2-1: config 0 descriptor?? [ 1781.544523][T25144] Bluetooth: hci0: command tx timeout [ 1781.952821][T13690] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1782.037833][ T7532] bond3 (unregistering): (slave geneve2): Releasing active interface [ 1782.181306][ T7532] bond0 (unregistering): Released all slaves [ 1782.241595][ T7532] bond1 (unregistering): Released all slaves [ 1782.326397][ T7532] bond2 (unregistering): Released all slaves [ 1782.350945][ T7532] bond3 (unregistering): Released all slaves [ 1782.388812][ T7532] bond4 (unregistering): Released all slaves [ 1782.425260][ T7532] bond5 (unregistering): Released all slaves [ 1782.455748][ T7532] bond6 (unregistering): Released all slaves [ 1782.508265][T13509] team0: Port device team_slave_0 added [ 1782.630418][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1782.659931][T13509] team0: Port device team_slave_1 added [ 1782.693278][ T7532] : left promiscuous mode [ 1782.808311][T13705] vivid-000: kernel_thread() failed [ 1782.892750][ T7532] tipc: Left network mode [ 1782.893805][T13509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1782.921026][T25046] cdc_ncm 1-1:1.0: bind() failure [ 1782.943164][T25046] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1782.957979][T13509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1782.985962][T25046] cdc_ncm 1-1:1.1: bind() failure [ 1783.006153][T13509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1783.029587][T13796] netlink: 'syz.3.8629': attribute type 1 has an invalid length. [ 1783.032747][T25046] usb 1-1: USB disconnect, device number 81 [ 1783.130057][T13509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1783.170832][T13509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1783.220355][T13509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1783.581609][T13509] hsr_slave_0: entered promiscuous mode [ 1783.600884][T13509] hsr_slave_1: entered promiscuous mode [ 1783.648033][T25144] Bluetooth: hci0: command tx timeout [ 1783.733540][ T7532] hsr_slave_0: left promiscuous mode [ 1783.744527][T25043] usbhid 2-1:0.0: can't add hid device: -71 [ 1783.766880][T25043] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1783.779556][ T7532] hsr_slave_1: left promiscuous mode [ 1783.821888][T25043] usb 2-1: USB disconnect, device number 75 [ 1784.538013][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1784.993171][ T7532] IPVS: stop unused estimator thread 0... [ 1785.258274][T28230] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1785.418439][ T7532] bridge_slave_1: left allmulticast mode [ 1785.435254][ T7532] bridge_slave_1: left promiscuous mode [ 1785.445530][T28230] usb 4-1: Using ep0 maxpacket: 16 [ 1785.473967][T28230] usb 4-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 1785.497911][ T7532] bridge0: port 2(bridge_slave_1) entered disabled state [ 1785.504252][T28230] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1785.524509][T28230] usb 4-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 1785.549180][T28230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1785.580631][T28230] usb 4-1: config 0 descriptor?? [ 1785.606957][ T7532] x9: left allmulticast mode [ 1785.636806][ T7532] x9: left promiscuous mode [ 1785.666108][ T7532] bridge0: port 1(1x9) entered disabled state [ 1785.716445][T25144] Bluetooth: hci0: command tx timeout [ 1786.281505][T28230] bigben 0003:146B:0902.006E: unexpected rdesc, please submit for review [ 1786.313361][T28230] bigben 0003:146B:0902.006E: ignoring exceeding usage max [ 1786.343191][T28230] bigben 0003:146B:0902.006E: unknown main item tag 0x1 [ 1786.436592][T28230] bigben 0003:146B:0902.006E: hidraw0: USB HID vc2.59 Device [HID 146b:0902] on usb-dummy_hcd.3-1/input0 [ 1786.458653][T13977] loop9: detected capacity change from 0 to 7 [ 1786.493092][T28230] bigben 0003:146B:0902.006E: missing HID_OUTPUT_REPORT 0 [ 1786.522343][T13977] Dev loop9: unable to read RDB block 7 [ 1786.524361][T28230] bigben 0003:146B:0902.006E: no output report found [ 1786.554729][T13977] loop9: unable to read partition table [ 1786.599627][T13977] loop9: partition table beyond EOD, truncated [ 1786.600143][T13982] ================================================================== [ 1786.613868][T13982] BUG: KASAN: slab-use-after-free in report_descriptor_read+0xb5/0x100 [ 1786.622117][T13982] Read of size 40 at addr ffff88807fdee380 by task fido_id/13982 [ 1786.629827][T13982] [ 1786.632150][T13982] CPU: 1 UID: 0 PID: 13982 Comm: fido_id Tainted: G L syzkaller #0 PREEMPT(full) [ 1786.632174][T13982] Tainted: [L]=SOFTLOCKUP [ 1786.632181][T13982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1786.632191][T13982] Call Trace: [ 1786.632198][T13982] [ 1786.632205][T13982] dump_stack_lvl+0xe8/0x150 [ 1786.632227][T13982] print_address_description+0x55/0x1e0 [ 1786.632246][T13982] ? report_descriptor_read+0xb5/0x100 [ 1786.632268][T13982] print_report+0x58/0x70 [ 1786.632283][T13982] kasan_report+0x117/0x150 [ 1786.632302][T13982] ? report_descriptor_read+0xb5/0x100 [ 1786.632326][T13982] kasan_check_range+0x264/0x2c0 [ 1786.632343][T13982] ? report_descriptor_read+0xb5/0x100 [ 1786.632365][T13982] __asan_memcpy+0x29/0x70 [ 1786.632385][T13982] report_descriptor_read+0xb5/0x100 [ 1786.632408][T13982] ? __pfx_sysfs_kf_bin_read+0x10/0x10 [ 1786.632431][T13982] kernfs_fop_read_iter+0x434/0x6a0 [ 1786.632453][T13982] vfs_read+0x595/0xa80 [ 1786.632474][T13982] ? __pfx_vfs_read+0x10/0x10 [ 1786.632492][T13982] ? do_sys_openat2+0x14e/0x200 [ 1786.632518][T13982] ? kmem_cache_free+0x182/0x650 [ 1786.632533][T13982] ? fd_install+0x94/0x3d0 [ 1786.632560][T13982] ksys_read+0x150/0x270 [ 1786.632578][T13982] ? __pfx_ksys_read+0x10/0x10 [ 1786.632598][T13982] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1786.632615][T13982] do_syscall_64+0x174/0x580 [ 1786.632635][T13982] ? trace_irq_disable+0x3b/0x140 [ 1786.632657][T13982] ? clear_bhb_loop+0x40/0x90 [ 1786.632674][T13982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1786.632691][T13982] RIP: 0033:0x7f101aca7407 [ 1786.632706][T13982] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1786.632720][T13982] RSP: 002b:00007ffc92b1d470 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 1786.632738][T13982] RAX: ffffffffffffffda RBX: 00007f101b47a880 RCX: 00007f101aca7407 [ 1786.632750][T13982] RDX: 0000000000001000 RSI: 00007ffc92b1d4c0 RDI: 0000000000000004 [ 1786.632761][T13982] RBP: 000055c5d96be730 R08: 0000000000000000 R09: 0000000000000000 [ 1786.632771][T13982] R10: 0000000000000000 R11: 0000000000000202 R12: 000055c5d96bd930 [ 1786.632783][T13982] R13: 00007ffc92b1d4c0 R14: 0000000000000004 R15: 000055c5bab3c4d8 [ 1786.632800][T13982] [ 1786.632807][T13982] [ 1786.859557][T13982] Allocated by task 28230: [ 1786.863945][T13982] kasan_save_track+0x3e/0x80 [ 1786.868597][T13982] __kasan_kmalloc+0x93/0xb0 [ 1786.873159][T13982] __kmalloc_node_track_caller_noprof+0x4c3/0x730 [ 1786.879550][T13982] kmemdup_noprof+0x2b/0x70 [ 1786.884024][T13982] hid_open_report+0x1fa/0xf00 [ 1786.888763][T13982] bigben_probe+0xc0/0x7f0 [ 1786.893153][T13982] hid_device_probe+0x42c/0x7c0 [ 1786.897997][T13982] really_probe+0x254/0xae0 [ 1786.902487][T13982] __driver_probe_device+0x1e8/0x360 [ 1786.907744][T13982] driver_probe_device+0x4f/0x240 [ 1786.912743][T13982] __device_attach_driver+0x270/0x410 [ 1786.918113][T13982] bus_for_each_drv+0x258/0x2f0 [ 1786.922949][T13982] __device_attach+0x2c4/0x450 [ 1786.927686][T13982] device_initial_probe+0xa1/0xd0 [ 1786.932685][T13982] bus_probe_device+0x12a/0x220 [ 1786.937505][T13982] device_add+0x7d7/0xb80 [ 1786.941809][T13982] hid_add_device+0x272/0x3e0 [ 1786.946460][T13982] usbhid_probe+0x9d4/0xde0 [ 1786.950936][T13982] usb_probe_interface+0x653/0xc60 [ 1786.956034][T13982] really_probe+0x254/0xae0 [ 1786.960511][T13982] __driver_probe_device+0x1e8/0x360 [ 1786.965769][T13982] driver_probe_device+0x4f/0x240 [ 1786.970766][T13982] __device_attach_driver+0x270/0x410 [ 1786.976110][T13982] bus_for_each_drv+0x258/0x2f0 [ 1786.980934][T13982] __device_attach+0x2c4/0x450 [ 1786.985668][T13982] device_initial_probe+0xa1/0xd0 [ 1786.990666][T13982] bus_probe_device+0x12a/0x220 [ 1786.995487][T13982] device_add+0x7d7/0xb80 [ 1786.999788][T13982] usb_set_configuration+0x1ad8/0x2180 [ 1787.005222][T13982] usb_generic_driver_probe+0x8d/0x150 [ 1787.010654][T13982] usb_probe_device+0x1c3/0x3b0 [ 1787.015475][T13982] really_probe+0x254/0xae0 [ 1787.019950][T13982] __driver_probe_device+0x1e8/0x360 [ 1787.025207][T13982] driver_probe_device+0x4f/0x240 [ 1787.030208][T13982] __device_attach_driver+0x270/0x410 [ 1787.035557][T13982] bus_for_each_drv+0x258/0x2f0 [ 1787.040379][T13982] __device_attach+0x2c4/0x450 [ 1787.045117][T13982] device_initial_probe+0xa1/0xd0 [ 1787.050117][T13982] bus_probe_device+0x12a/0x220 [ 1787.054939][T13982] device_add+0x7d7/0xb80 [ 1787.059242][T13982] usb_new_device+0x99d/0x1620 [ 1787.063983][T13982] hub_event+0x28e8/0x4d30 [ 1787.068374][T13982] process_scheduled_works+0xa8e/0x14e0 [ 1787.073895][T13982] worker_thread+0xa47/0xfb0 [ 1787.078458][T13982] kthread+0x388/0x470 [ 1787.082500][T13982] ret_from_fork+0x514/0xb70 [ 1787.087061][T13982] ret_from_fork_asm+0x1a/0x30 [ 1787.091801][T13982] [ 1787.094098][T13982] The buggy address belongs to the object at ffff88807fdee380 [ 1787.094098][T13982] which belongs to the cache kmalloc-64 of size 64 [ 1787.107948][T13982] The buggy address is located 0 bytes inside of [ 1787.107948][T13982] freed 64-byte region [ffff88807fdee380, ffff88807fdee3c0) [ 1787.121455][T13982] [ 1787.123757][T13982] The buggy address belongs to the physical page: [ 1787.130152][T13982] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7fdee [ 1787.138883][T13982] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1787.145981][T13982] page_type: f5(slab) [ 1787.149942][T13982] raw: 00fff00000000000 ffff88813fe258c0 dead000000000100 dead000000000122 [ 1787.158496][T13982] raw: 0000000000000000 0000000800200020 00000000f5000000 0000000000000000 [ 1787.167051][T13982] page dumped because: kasan: bad access detected [ 1787.173443][T13982] page_owner tracks the page as allocated [ 1787.179127][T13982] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6068, tgid 6062 (syz.4.113), ts 112245578831, free_ts 85548965008 [ 1787.199671][T13982] post_alloc_hook+0x1f9/0x250 [ 1787.204414][T13982] get_page_from_freelist+0x21fa/0x2270 [ 1787.209935][T13982] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1787.215714][T13982] allocate_slab+0x79/0x5e0 [ 1787.220190][T13982] refill_objects+0x2d5/0x350 [ 1787.224838][T13982] __pcs_replace_empty_main+0x2bf/0x6b0 [ 1787.230356][T13982] __kmalloc_noprof+0x485/0x720 [ 1787.235184][T13982] hash_netportnet4_resize+0xa59/0x1b80 [ 1787.240723][T13982] call_ad+0x439/0xb50 [ 1787.244765][T13982] ip_set_ad+0x824/0x9d0 [ 1787.248980][T13982] nfnetlink_rcv_msg+0xcc2/0x12b0 [ 1787.253978][T13982] netlink_rcv_skb+0x226/0x4a0 [ 1787.258715][T13982] nfnetlink_rcv+0x2b9/0x28c0 [ 1787.263366][T13982] netlink_unicast+0x7bb/0x940 [ 1787.268105][T13982] netlink_sendmsg+0x813/0xb40 [ 1787.272859][T13982] sock_sendmsg_nosec+0x13a/0x180 [ 1787.277861][T13982] page last free pid 5632 tgid 5632 stack trace: [ 1787.284156][T13982] __free_frozen_pages+0xc1e/0xd10 [ 1787.289254][T13982] __slab_free+0x274/0x2c0 [ 1787.293640][T13982] qlist_free_all+0x99/0x100 [ 1787.298203][T13982] kasan_quarantine_reduce+0x148/0x160 [ 1787.303640][T13982] __kasan_slab_alloc+0x22/0x80 [ 1787.308460][T13982] kmem_cache_alloc_noprof+0x2a0/0x5f0 [ 1787.313900][T13982] do_getname+0x2e/0x250 [ 1787.318119][T13982] do_readlinkat+0xc8/0x510 [ 1787.322591][T13982] __x64_sys_readlink+0x7f/0x90 [ 1787.327416][T13982] do_syscall_64+0x174/0x580 [ 1787.331982][T13982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1787.337846][T13982] [ 1787.340143][T13982] Memory state around the buggy address: [ 1787.345743][T13982] ffff88807fdee280: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 1787.353778][T13982] ffff88807fdee300: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 1787.361808][T13982] >ffff88807fdee380: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1787.369838][T13982] ^ [ 1787.373881][T13982] ffff88807fdee400: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1787.381915][T13982] ffff88807fdee480: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 1787.389946][T13982] ================================================================== [ 1787.405126][T13977] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1787.577913][T13982] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1787.585139][T13982] CPU: 1 UID: 0 PID: 13982 Comm: fido_id Tainted: G L syzkaller #0 PREEMPT(full) [ 1787.595804][T13982] Tainted: [L]=SOFTLOCKUP [ 1787.600108][T13982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1787.610144][T13982] Call Trace: [ 1787.613407][T13982] [ 1787.616319][T13982] vpanic+0x56c/0xa60 [ 1787.620290][T13982] ? __pfx_vpanic+0x10/0x10 [ 1787.624775][T13982] ? __pfx___schedule+0x10/0x10 [ 1787.629619][T13982] panic+0xc5/0xd0 [ 1787.633324][T13982] ? __pfx_panic+0x10/0x10 [ 1787.637725][T13982] ? preempt_schedule_common+0x82/0xd0 [ 1787.643170][T13982] ? report_descriptor_read+0xb5/0x100 [ 1787.648614][T13982] check_panic_on_warn+0x89/0xb0 [ 1787.653538][T13982] ? report_descriptor_read+0xb5/0x100 [ 1787.658981][T13982] end_report+0x73/0x170 [ 1787.663208][T13982] ? report_descriptor_read+0xb5/0x100 [ 1787.668649][T13982] kasan_report+0x128/0x150 [ 1787.673137][T13982] ? report_descriptor_read+0xb5/0x100 [ 1787.678585][T13982] kasan_check_range+0x264/0x2c0 [ 1787.683507][T13982] ? report_descriptor_read+0xb5/0x100 [ 1787.688953][T13982] __asan_memcpy+0x29/0x70 [ 1787.693352][T13982] report_descriptor_read+0xb5/0x100 [ 1787.698621][T13982] ? __pfx_sysfs_kf_bin_read+0x10/0x10 [ 1787.704067][T13982] kernfs_fop_read_iter+0x434/0x6a0 [ 1787.709254][T13982] vfs_read+0x595/0xa80 [ 1787.713398][T13982] ? __pfx_vfs_read+0x10/0x10 [ 1787.718055][T13982] ? do_sys_openat2+0x14e/0x200 [ 1787.722895][T13982] ? kmem_cache_free+0x182/0x650 [ 1787.727810][T13982] ? fd_install+0x94/0x3d0 [ 1787.732216][T13982] ksys_read+0x150/0x270 [ 1787.736442][T13982] ? __pfx_ksys_read+0x10/0x10 [ 1787.741201][T13982] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1787.747249][T13982] do_syscall_64+0x174/0x580 [ 1787.751823][T13982] ? trace_irq_disable+0x3b/0x140 [ 1787.756833][T13982] ? clear_bhb_loop+0x40/0x90 [ 1787.761492][T13982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1787.767366][T13982] RIP: 0033:0x7f101aca7407 [ 1787.771764][T13982] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1787.791356][T13982] RSP: 002b:00007ffc92b1d470 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 1787.799759][T13982] RAX: ffffffffffffffda RBX: 00007f101b47a880 RCX: 00007f101aca7407 [ 1787.807717][T13982] RDX: 0000000000001000 RSI: 00007ffc92b1d4c0 RDI: 0000000000000004 [ 1787.815669][T13982] RBP: 000055c5d96be730 R08: 0000000000000000 R09: 0000000000000000 [ 1787.823636][T13982] R10: 0000000000000000 R11: 0000000000000202 R12: 000055c5d96bd930 [ 1787.831586][T13982] R13: 00007ffc92b1d4c0 R14: 0000000000000004 R15: 000055c5bab3c4d8 [ 1787.839547][T13982] [ 1787.842803][T13982] Kernel Offset: disabled [ 1787.847110][T13982] Rebooting in 86400 seconds..