last executing test programs: 1m44.757065656s ago: executing program 1 (id=1464): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002880)=@delchain={0x450, 0x65, 0x400, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x424, 0x2, [@TCA_BPF_ACT={0x420, 0x1, [@m_xt={0x120, 0x5, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}]}, {0xed, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa220154db33399242bca9f4fac65c74cb6264c28ac7a50037564c7b417fb61d617d212ab3243c30e0e82d9a12651b74553d539b991a302489af94626e5aac41c53b2"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_simple={0xc4, 0xa, 0x0, 0x0, {{0xb}, {0x4}, {0x95, 0x6, "f2687c5aa78339e616deb3f19827c994141f940d92a804637d54cb155e6be27b3c2ad1ec52a0a08ca0fb9f17a3ef6ce3652e6f0136028c9b46b33e74015138ea6ba9c60c29dd78378bb28567c803e2a63a94c5fba4bb4bb2adcab7d81ccda8c5f8e000b81344003a049b8353b716e0d9c0c6c5fbd0a6ac6532013f1ee7bfec23f8da74544263415dacc108fada4f83a23b"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_tunnel_key={0x158, 0x1b, 0x0, 0x0, {{0xf}, {0x4c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @local}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3ff, 0xe, 0x8, 0x4, 0x1}, 0x2}}]}, {0xdd, 0x6, "da72a81d3f185dffb86a2a0c1a283af31d7cc16e9b39f3c58394749a5e7cf990a8aa66b0640f26aa370eb9d52708765298213bc5a7745359a3b7dea606c209494997403e3f61b96cb903e2e37975650aaee679d8db2b02550982fca6d8ad6912a7514c784a7a20ad5a5c711db53ab794c49f14fff923a18f748938b278742dc1ccbddd5444087f08f3ebb92fce5bc464885cc9dd1f884c1555195968ab8107315c144be23ab095fc8cb6c202a2a7e34081b29c0333069c0257b3a3e91d2a40e1d80a419d11dcba523939e17d7c96f0c8ec82121ef8daa0af5e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x7, 0x2}}}}, @m_connmark={0xe0, 0x9, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1ff, 0x5, 0x7, 0x1, 0x1e1c}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd784, 0x7ff, 0x20000000, 0x9, 0x4}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x4, 0x5, 0x8, 0x1}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x2, 0x20000000, 0x6, 0x6a}, 0x80}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x2, 0xfffffffffffffff7, 0x9, 0x7}, 0x6}}]}, {0x21, 0x6, "b243cf248ea5504cf7e5a67f45c10cd2a166afa2d80373ea83920403cb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x450}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x20}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x1c}}, 0x48000) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}, 0x40000000}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1m44.627759977s ago: executing program 1 (id=1466): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f00)=ANY=[@ANYBLOB="b0010000100001002bbd700000001d88000000000000000000ff64010100ff0100000000000000000000000000010000ecdf000002000a000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1b0}}, 0x4050) 1m44.476744752s ago: executing program 1 (id=1467): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x10}) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0x1) read(r0, &(0x7f0000000080)=""/137, 0x89) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x2, 0x1}}, './file0\x00'}) write$P9_RMKNOD(r2, &(0x7f0000000180)={0x14, 0x13, 0x2, {0x80, 0x0, 0x8}}, 0x14) r3 = syz_open_dev$sndpcmc(&(0x7f00000001c0), 0x2, 0x20000) ioctl$FICLONE(r3, 0x40049409, r2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000200)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000400)=r4) setsockopt$inet_int(r1, 0x0, 0x31, &(0x7f0000000440)=0x7, 0x4) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000500)={0xf000000, 0x5, 0x8001, r2, 0x0, &(0x7f00000004c0)={0x9909d7, 0x1, '\x00', @p_u32=&(0x7f0000000480)=0x5}}) r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000006c0)={0x0, &(0x7f0000000540)=[@in_dx={0x69, 0x20, {0x606b, 0x2}}, @wr_drn={0x68, 0x20, {0x2, 0xf}}, @set_irq_handler={0xc8, 0x20, {0x2, 0x1}}, @cpuid={0x64, 0x18, {0x80000000, 0x785c}}, @in_dx={0x69, 0x20, {0x2a7, 0x5}}, @nested_amd_clgi={0x17f, 0x10}, @uexit={0x0, 0x18, 0x6}, @uexit={0x0, 0x18, 0x62a8118}, @wr_crn={0x67, 0x20, {0x2, 0x8}}, @nested_amd_vmload={0x182, 0x18, 0x1}, @in_dx={0x69, 0x20, {0x7ba, 0x6}}, @nested_amd_vmload={0x182, 0x18, 0x1}, @wrmsr={0x65, 0x20, {0xbc0, 0x4}}], 0x168}) r6 = ioctl$KVM_GET_STATS_FD_cpu(r5, 0xaece) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000700)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000740)=r7) poll(&(0x7f0000000780)=[{r1}], 0x1, 0x6) keyctl$get_keyring_id(0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f00000007c0)={0x20000, 0x1, 0x9, 0x7}, 0x10) ioctl$KVM_CAP_VM_TYPES(r6, 0x4068aea3, &(0x7f0000000800)={0xeb, 0x0, 0x1}) ioctl$SNDCTL_TMR_SOURCE(r6, 0xc0045406) ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f0000000880)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000940)={r2, 0x58, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x3, 0x7, 0x4, 0x9, 0x2840, r6, 0x6, '\x00', r8, r6, 0x2, 0x2, 0x3}, 0x50) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000a00)=0x2, 0x4) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000a40), &(0x7f0000000a80)=0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f0000000ac0)) ioctl$MEDIA_REQUEST_IOC_REINIT(r1, 0x7c81, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b00)={'wlan0\x00'}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000b40)) 1m43.615405554s ago: executing program 1 (id=1471): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000480), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xfffffffd, 0x2752789b59c001a2, 0x400, 0x8, 0x3, 0x0, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) r3 = dup2(r2, r0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r4, 0x0) r5 = epoll_create(0x7) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000100)) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$setregset(0x4205, r7, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r7, 0x1, &(0x7f00000001c0)={&(0x7f00000003c0)="c94522e546f93f6dedf11f1509683b4ff6ed90bb6d8ca47dc829c0daa3feec0f1f88d7547f05841e", 0x28}) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r8, &(0x7f0000000680)={0x20000003}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000000000)) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000640)={0x30, 0x5, 0x0, {0x8800000, 0x0, 0x8, 0x3}}, 0x30) 1m43.469651401s ago: executing program 1 (id=1472): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="b40000000000000779116000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700000085000000060000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x18, &(0x7f000000cf3d)=""/195, 0x0, 0xc, '\x00', 0x0, @fallback=0xd}, 0x59) r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r2, 0x2000009) sendfile(r1, r2, 0x0, 0x20000000000006) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000740)={0x1, 0x10, 0x9, 0x5, 0x2, 0xfffffffffffffc00, 0x1000, 0xfffffffffffffffc, 0x7ffffffb, 0x10001, 0x9}) syz_emit_ethernet(0x3e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00080400fc020000000000000000000000000000fe80000000dbd10000000000000000aa00000000000890"], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80480040}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="6c0000000103010100000000000000001f00000230000f80090006007070747000000000060007400001000008000b007369700008000b007369700006000740000400001400138006000240000800000600014088a800000c000200ffffffff0000cb870800034000000009"], 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000000200)=""/244, 0xf4}, {&(0x7f0000000a00)=""/113, 0x71}, {&(0x7f00000003c0)=""/114, 0x72}, {&(0x7f0000000440)=""/49, 0x31}, {&(0x7f0000000480)=""/15, 0xf}, {&(0x7f00000004c0)=""/195, 0xc3}, {&(0x7f0000000a80)=""/237, 0xed}], 0x7) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) epoll_create(0x7) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0xffffffff, 0x0, 0x4, 0x6, "ee060100000016000057000020000000006000"}) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000080)=0x7) r5 = syz_open_pts(r4, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xd) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x0, 0x1}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x2c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff, 0x40000000}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f0000000300)=0xe, 0x4) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r8, 0x11, 0x67, &(0x7f0000000240)=0x5, 0x4) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) pselect6(0x40, &(0x7f0000000000)={0x9}, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r9, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {r10, 0x7fffffff, 0x12, 0x0, 0x0, @ib={0x1b, 0x8, 0x6, {"78c36cbe7e38dade0099fe4e9d908e9b"}, 0xffff, 0x1ff, 0xfffffffeffffffff}, @in6={0xa, 0x4e22, 0x2, @local, 0x2}}}, 0x118) 1m43.173578389s ago: executing program 1 (id=1474): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x341000, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000000007", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 1m42.877390548s ago: executing program 32 (id=1474): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x341000, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000000007", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 15.326681686s ago: executing program 2 (id=2013): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a38000000060a01eeffffff0000000000020000000900020073797a32000000000900010073797a30000000000c0006400000000000000002"], 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x0) 15.18515792s ago: executing program 2 (id=2015): r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key(0x0, &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0x4, r0) syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x644, 0x800f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xff, 0x20, 0x10, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x30, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xa, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x40, 0xd4, 0x4, {0xa, 0x25, 0x25, 0x6, 0x1, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xfa, 0xa, 0x2, {0xa, 0x25, 0x25, 0x3, 0x4, 0x9}}}}}}}}]}}, 0x0) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r1, 0x1) 13.902401905s ago: executing program 2 (id=2030): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x182, 0x3}, 0x18, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000480)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r3, r2, 0x80000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) landlock_restrict_self(r1, 0xa) write$cgroup_pid(r0, &(0x7f0000000000), 0x12) syz_clone3(&(0x7f00000004c0)={0xe12d480, &(0x7f0000000480), 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 13.741095875s ago: executing program 2 (id=2031): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808fffffeea080006000700000008000400", @ANYRES32=r0, @ANYBLOB="06001c004e21000008000100ac1414", @ANYRES16], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040084) 13.420418636s ago: executing program 2 (id=2035): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_MODULATOR(r0, 0x40445637, &(0x7f0000000140)={0x0, "c42e68848c23f06c24533283c4761272f298e3e99dc1450727d16a1d245b6d11", 0x0, 0x0, 0x1000, 0x4}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000294c0100001e0a05010000000000000000070000000900020073797a31000000000900010073797a3000000000200103801c010080180101802d0001"], 0x1d0}}, 0x0) r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x84000010}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x3, 0x2, 0x204, 0x0, 0x0, {0x1, 0x0, 0x2}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x1a1381, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xd) ioctl$TCFLSH(r3, 0x540b, 0x2) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x92, 0x3, 0xb, 0x7ffffff9}, 0x10) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000000140)={0x1, 0x9, 0x4, &(0x7f0000000100)={0x17, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}}) 7.485587952s ago: executing program 3 (id=2082): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettfilter={0x34, 0x2e, 0x10, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x9, 0xfff2}, {0x5, 0xffe0}, {0x9, 0xc}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000140)=0x2000) ppoll(&(0x7f0000000040)=[{r3, 0x20}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f00000002c0)=0x1) read$dsp(r3, &(0x7f0000000180)=""/67, 0x43) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xe, 0x7}, {0x2, 0xfff1}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1080}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001d00000129bd70010bdbdf2507000000635dad69edd80a692cbf71896512a2d9238bf0988ae7e4f4b7fa4a57abbecb4897d0cfe1837863687f10bdd3456f27ed293eff5707936a4f41", @ANYRES32=r2, @ANYBLOB="080001080a0001000000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x17267beb61f06349) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x3a, 0x30, 0x0, &(0x7f0000000200)="e460cdfbef2408322900119386dd6a00000000072feb311ccd3ec8a755c1e1380081ffad008036e8d5003aff01000000", 0x0, 0x401, 0x44000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x2}, 0x50) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008200122010009058103"], 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000380)={0x55, &(0x7f00000002c0)=ANY=[@ANYRES64=r1], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYRES16=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet6(0xa, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xf) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_usb_control_io(r4, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d4e, 0x103) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x8000) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) 4.188245337s ago: executing program 0 (id=2100): r0 = socket$netlink(0x10, 0x3, 0x14) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x2, 0x201}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000003ac0)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="feee", 0x2}], 0x1, &(0x7f0000002a80)=[{0x28, 0x117, 0x9, "bff5f797f108c32aa20eba0545cd1a5cdf"}], 0x28}, 0x0, 0x24000080, 0x1}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x2000000, 0x10}}}, 0x0) 4.18533027s ago: executing program 3 (id=2101): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) tee(r0, r1, 0x21, 0x1) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x0, r0}, 0x18) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000100)={r0, r2}) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000140)={0x6, 0x4, 0x4, 0x40, 0x400, {0x77359400}, {0x5, 0x2, 0x8, 0x5, 0x80, 0x7, "443dabba"}, 0xfffffffa, 0x4, {}, 0x5}) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000140)={0x6, 0x4, 0x4, 0x40, 0x400, {0x77359400}, {0x5, 0x2, 0x8, 0x5, 0x80, 0x7, "443dabba"}, 0xfffffffa, 0x4, {0xffffffffffffffff}, 0x5, 0x0, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='net_prio.prioidx\x00', 0x0, 0x0) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000280)=@multiplanar_fd={0x6, 0xc, 0x4, 0x2000, 0x0, {0x77359400}, {0x5, 0x8, 0x9, 0x5, 0xf, 0xe, "80c2d6a6"}, 0xc, 0x4, {&(0x7f00000001c0)=[{0x9, 0x334ec3ee, {r3}, 0x195dd42c}, {0x6, 0x3, {r1}, 0x7}]}, 0x0, 0x0, r5}) (async) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000280)=@multiplanar_fd={0x6, 0xc, 0x4, 0x2000, 0x0, {0x77359400}, {0x5, 0x8, 0x9, 0x5, 0xf, 0xe, "80c2d6a6"}, 0xc, 0x4, {&(0x7f00000001c0)=[{0x9, 0x334ec3ee, {r3}, 0x195dd42c}, {0x6, 0x3, {r1}, 0x7}]}, 0x0, 0x0, r5}) ioctl$VIDIOC_G_EDID(r1, 0xc0285628, &(0x7f0000000340)={0x0, 0x8, 0x3, '\x00', &(0x7f0000000300)=0x2}) r7 = dup2(r6, r2) close_range(r6, r7, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r7, 0x54a3) (async) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r7, 0x54a3) socket$nl_route(0x10, 0x3, 0x0) read$FUSE(r5, &(0x7f0000000380)={0x2020}, 0x2020) (async) read$FUSE(r5, &(0x7f0000000380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_genetlink_get_family_id$ethtool(&(0x7f00000023c0), r0) ioctl$TIOCGSERIAL(r5, 0x541e, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002400)=""/140}) (async) ioctl$TIOCGSERIAL(r5, 0x541e, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002400)=""/140}) move_pages(r11, 0x7, &(0x7f0000002540)=[&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002580)=[0x8, 0x7, 0x4a], &(0x7f00000025c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) write$FUSE_INIT(r5, &(0x7f0000002600)={0x50, 0x0, r8, {0x7, 0x2d, 0xe, 0x2, 0x7, 0x9, 0x10001, 0xa, 0x0, 0x0, 0x80, 0xd}}, 0x50) (async) write$FUSE_INIT(r5, &(0x7f0000002600)={0x50, 0x0, r8, {0x7, 0x2d, 0xe, 0x2, 0x7, 0x9, 0x10001, 0xa, 0x0, 0x0, 0x80, 0xd}}, 0x50) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f00000026c0), r5) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000002840)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002800)={&(0x7f0000002700)={0xd8, r12, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'caif0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8000}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfff}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010101}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4040}, 0x800) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000002880)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002940)={r7, 0x58, &(0x7f00000028c0)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002940)={r7, 0x58, &(0x7f00000028c0)}, 0x10) close(r4) r13 = inotify_init() sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f0000002bc0)={&(0x7f0000002980), 0xc, &(0x7f0000002b80)={&(0x7f00000029c0)={0x19c, 0x0, 0x2, 0x5, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_EXPECT_MASK={0x18, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}]}, @CTA_EXPECT_MASTER={0x100, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x13}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2e}}}}]}, @CTA_EXPECT_MASK={0x60, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x5}]}, 0x19c}, 0x1, 0x0, 0x0, 0x800}, 0x91) ioctl$VT_RELDISP(r7, 0x5605) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r13, 0x8010661b, &(0x7f0000002c00)) (async) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r13, 0x8010661b, &(0x7f0000002c00)) r14 = add_key$keyring(&(0x7f0000002cc0), &(0x7f0000002d00)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000002c40), &(0x7f0000002c80)={'syz', 0x0}, 0x0, 0x0, r14) (async) add_key$keyring(&(0x7f0000002c40), &(0x7f0000002c80)={'syz', 0x0}, 0x0, 0x0, r14) write$FUSE_DIRENTPLUS(r7, &(0x7f0000002e80)={0x148, 0x0, r8, [{{0x4, 0x0, 0x7fffffff, 0x4, 0x80000000, 0x5, {0x3, 0x8000000000000000, 0x3e, 0xfffffffffffffffa, 0xfffffffffffffffa, 0xa99d, 0x5, 0x7d39, 0x5, 0x8000, 0x2, 0x0, r10, 0xfffffffc, 0x4}}, {0x1, 0x5, 0x0, 0x24}}, {{0x3, 0x0, 0x3, 0x2, 0x0, 0x7, {0x5, 0x3, 0x6, 0x7, 0xfffffffffffffff9, 0x4, 0xaefc, 0x2, 0x8, 0x4000, 0x4, r9, r10, 0x800, 0x9}}, {0x3, 0x6, 0x2, 0x7dac1a1f, '+-'}}]}, 0x148) 3.812662094s ago: executing program 3 (id=2104): r0 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000000000/0x4000)=nil) r1 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ipvlan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@local, 0x78, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x60842, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x400400, 0x0) splice(r3, &(0x7f0000000080)=0x2a9, r3, &(0x7f00000000c0)=0x2, 0x2, 0x2) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x16) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fff, 0x3}}}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x3f}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x10) 3.536863057s ago: executing program 5 (id=2106): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r0, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x2000) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0xac}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000480)=""/69, 0x45}, {&(0x7f0000004240)=""/4128, 0x1020}, {&(0x7f0000001680)=""/100, 0x64}, {&(0x7f0000001740)=""/72, 0x48}, {&(0x7f00000005c0)=""/48, 0x30}], 0x5}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x8001}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0xd9f}], 0x8, 0x2030, 0x0) 3.307281451s ago: executing program 5 (id=2108): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x289b1fce59f22e63}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd120000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x64}}, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r6, 0xffffc000) unshare(0x2c020400) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0x8, &(0x7f0000000100)=0x9, 0x4) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x40) recvfrom(r5, 0x0, 0x0, 0x0, 0x0, 0x0) 3.261675129s ago: executing program 3 (id=2109): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r0, &(0x7f0000000280), 0x9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="140006000000000005"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000020dd25d2f337d2542d0001090224000100000000090400000103000000092100000001220800090581034bd5db"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x880) ioctl$HIDIOCSREPORT(r4, 0x400c4808, &(0x7f0000000040)={0x1, 0x2, 0x7c60}) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000300)=[{0x0, 0x61}, {&(0x7f00000001c0)="5c8000000000000000ea45a1", 0x20000081}], 0x2, 0x0) fspick(r5, &(0x7f0000000180)='./cgroup/../file0/file0\x00', 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x42, 0x1ff) r8 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x51402, 0x108) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090527bd7000fddbdf25021f00cb", @ANYRES32=r6, @ANYBLOB="0800040064010104060000000003000008000200e0000002080009000600000008"], 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800"], 0x18}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000000300)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r10 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/netlink\x00') read(r10, &(0x7f0000001180)=""/4096, 0x1000) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) rmdir(0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) symlink(0x0, 0x0) move_mount(r8, &(0x7f00000000c0)='./cgroup/cgroup.procs\x00', r7, &(0x7f0000000140)='.\x00', 0x12) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) lchown(0x0, 0x0, 0x0) 3.140030497s ago: executing program 0 (id=2111): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000200)={0x1, @vbi={0x280, 0x0, 0x36314752, 0x0, [0x0, 0x5000000]}}) 2.97732182s ago: executing program 0 (id=2112): userfaultfd(0x1) (async) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x6a9}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) r1 = syz_open_procfs(0x0, &(0x7f0000001040)='net/nf_conntrack_expect\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r3) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r3) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x40, r4, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4c045}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xc8, r4, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x24008800}, 0x5) 2.928470297s ago: executing program 0 (id=2113): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003c00), r0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000040c0)={0x0, 0x0, &(0x7f0000004080)={&(0x7f0000003c40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000ffdbdf2518000000180001801400020067656e65766530000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x40008000) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/fib_triestat\x00') preadv(r2, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000040)={0x0, 0x0, r2}) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x44840}, 0x4890) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r7, &(0x7f00000002c0)="05031411d3fc220000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) r9 = syz_open_dev$usbmon(&(0x7f0000000080), 0x38e, 0x20800) ioctl$MON_IOCT_RING_SIZE(r9, 0x9204, 0x200000c96bd) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="1ba0000016001d", 0x7, 0x0, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000fb92a42478cf0f63595ed6debd641f000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000010900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000638000000180a0101000b000000000000010000000900010073797a30000000000900020073797a30000000000c00038008000240000000001400000010"], 0xc0}}, 0x4000001) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) 2.652965901s ago: executing program 4 (id=2115): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000880)={0x53, 0xfffffffffffffffe, 0x4, 0x5, @scatter={0x0, 0x0, 0x0}, &(0x7f0000001a00)="bc74c48f", 0x0, 0x1, 0x1, 0x2, 0x0}) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) (async) keyctl$clear(0x3, 0xfffffffffffffffd) (async) add_key$keyring(&(0x7f000000f880), 0x0, 0x0, 0x0, 0xfffffffffffffffb) (async) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000001c0)=@security={'security\x00', 0x3a, 0x4, 0x338, 0xffffffff, 0x2a0, 0x0, 0x1a8, 0x90, 0xffffffff, 0x110, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ip={@empty, @private, 0x0, 0x0, 'vlan0\x00', 'vlan0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xa1}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x39}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) 2.497305741s ago: executing program 4 (id=2116): socket$inet6_udp(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0xfffffe14) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, 0x0, 0x20c01, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) read$FUSE(r3, 0x0, 0x0) write$FUSE_INIT(r3, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x2b, 0xfffffffe, 0x30004004, 0x0, 0xfffe, 0x6, 0xfffffffe, 0x0, 0x0, 0x1, 0x100}}, 0x50) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000009340)={0x8, 0x0, &(0x7f00000002c0)=[@increfs], 0x0, 0x0, 0x0}) file_getattr(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1000) r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r5 = fcntl$dupfd(r2, 0x406, r2) ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000000140)={&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000003880)=""/4089, 0xff9}) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48004000, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r1, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) creat(&(0x7f0000000140)='./file0\x00', 0x34) 2.2293961s ago: executing program 5 (id=2117): ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5}) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x10, 0x9]}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0xfd7f0000) 2.093640359s ago: executing program 0 (id=2118): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x10000010}) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) syz_usb_connect(0x3, 0x3f, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000001000ffff25bd70df2500010000000012", @ANYRES32=0x0, @ANYBLOB="7a0a0500212b0000440012800b000100697036746e6c000034000280140003"], 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000000) 1.729011718s ago: executing program 5 (id=2119): r0 = io_uring_setup(0x6e1e, &(0x7f0000000100)={0x0, 0x23d4, 0x800, 0xffffffff, 0x100083}) r1 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000)=r1, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0xc, &(0x7f0000000040)={0x0, 0x51f2, 0xdb00, 0x10000008, 0x29}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r3, &(0x7f0000000840)={0x35b, 0x2, 0x2, {{0x51f, 0x21a, 0x0, 0xffffffff, {}, 0x2810000, 0x8, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\xfd\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pg>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x83\x00\xb5\x00\x00+YN\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1\x00\x00\x00\x00\x00\x00\x00\x00', 0x103, '\x00\x00\x9f\xd2\x8f43\xb6\x02\"K\xdd_MR\xb8=a\xcb\v!\x89A\x16\x95\xef\xe2\xefH\xb2\x11\x1d\x1c6\x04\x82\xe6\xc7\x8e\x1e{\xb8\x8e7\x9d*\xec\xff\xfe\xc3\xa1\x9e^\x17<\x8b\x04\xcfr\f\xa4+\xfd3\x8c\xb7\x0f\xdaP+\x89/\xb0\xdd\x83{\x9e\xc6S\x05\x0f\r|\xdcE\x99\x7f\xa6w;\xbf\xe1\xbdp\xee\x03\xe4\xaf\xb4\x99\xa2\x9b\xd3\xde\xce/F@\xf8V\x02\x1c\xde\xe9\xdcoR\x1e{\xc0jv\xa9\x1eg\xba\x8d\xf3\xcc%:\xbcY\x1a\x15\a\x7f\x89\x92\xeaWv\x80\xff\xec\x87\xa9\x06\xd0(\x8am\xbf2\xa2$\x01T6{\x1e\x05v\x1a;\xac\xde\xab\xba\x82\xb3\xccLFl\xe0\x0e&\x81\xb2\xffk\x94\"\xd8\x01\b\n\x96\xc8\xc8r\xa6\xad\xd7\xd7 D3\x82\xaea\xb3U89\xde#4]\v\xdd\xcc\t\x878\x97\x03\xf81\xa0\x948\x91\xf0\xfa\x9eo\x9b\xb5w\x86\xd9R\xc2\x9a\x8c\xbd\xb8M\xd5\xed~\xd8\xab\xf6\x0f\xacKC\x1b\xbfo\x0e\xc9\x006\xf5\xe4', 0x91, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8r\x9aE\x1b4\a\xdb\xda\xb2\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00\x13\x12D\xf7s=\xa4*&%\x00\x00\x00_\ro \xe5\xfd\xac\xfb\xa5l\xf3\xe7\xa3\xc0\x14\x19N\x13\xa4\x92G\x7f\x92\'\xe4{\x1a^,)\xee\xec\x05}d\xc2\xb5\x9e\\\xa6\a\x1e\x06l\xa4\x86,\xff\b\x9f\xd5\x9fo\xb8\x8cLi\x14\xd0\x9a\xf7\xf6'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0x0, 0x0, 0xee01}}, 0x35b) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socket$xdp(0x2c, 0x3, 0x0) r4 = syz_open_dev$sndctrl(0x0, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000002700)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xfc9, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) ptrace(0x10, r7) ptrace$setregs(0xd, r7, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r7, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x2, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000002680)=[0x0], 0x1}) ioctl$TCXONC(r5, 0x540a, 0x0) ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000000)) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00000001c0)=0x9) 1.490876839s ago: executing program 4 (id=2120): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x2c91, 0x4) sendmsg$sock(r0, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x4e20, 0x81, @loopback, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@mark={{0x14, 0x29, 0x51, 0x107}}], 0x18}, 0x4c040) 1.346333015s ago: executing program 5 (id=2121): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x501, 0x0, 0x0, {{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x2000000}}, [@offload={0xc, 0x1c, {r1, 0x4}}]}, 0xc4}}, 0x0) 1.25751776s ago: executing program 0 (id=2122): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000280)={{0x3, 0x5, 0x263f, 0x0, '\x00', 0x20000000}, 0x0, [0x0, 0x5, 0x80, 0xfffdffffffffbffd, 0x1000, 0x0, 0x0, 0x3, 0x6e, 0x7, 0x0, 0x200000000000001, 0x100000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000c19, 0xfffffffffffffff8, 0x7, 0x5, 0x0, 0x2, 0x6, 0x41, 0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0x1b, 0x10, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0xd451, 0x500000000000000, 0x0, 0x0, 0x0, 0x100, 0xc1, 0x3, 0x80100000000000, 0x0, 0x0, 0x3, 0x0, 0xe411, 0x10000, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x10000000, 0x400, 0x0, 0x0, 0x7f, 0x0, 0x40000000000000, 0x9, 0x0, 0xd86, 0x2, 0xfffffffffffffffe, 0xffffffffffff8001, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x8001, 0x2, 0x0, 0x80000001, 0x0, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0x1, 0x4, 0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x400, 0x8000000003, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x4, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff]}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x200000000000) ftruncate(0xffffffffffffffff, 0xc17a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x441c2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r4, &(0x7f0000001f80)=""/4102, 0x1006) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x1, 0x8, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x20040000) setsockopt$inet6_tcp_int(r2, 0x6, 0x4, &(0x7f0000000100)=0x1, 0x4) getsockopt$inet6_tcp_int(r2, 0x6, 0x4, 0x0, &(0x7f0000000040)) ftruncate(r1, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r6, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r5, r1, 0x0, 0x578410eb) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8003, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETCARRIER(r7, 0x400454e2, &(0x7f0000000000)=0x1) openat$kvm(0xffffffffffffff9c, 0x0, 0x2002, 0x0) r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x10) ioctl$KVM_SET_TSC_KHZ_cpu(r11, 0xaea2, 0xfffffffffffffffc) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000640)=0x8000) 1.257122311s ago: executing program 4 (id=2123): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1801000016000100000000000000000064010100000000000000000000000000000000000000000000000000000000010000000000030000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80000000000000000000000000002c000004"], 0x118}, 0x1, 0x0, 0x0, 0x40040}, 0x10000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e22, 0xfffffffb, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="280000970000000029000000040000002b01"], 0x28}, 0x4004004) 1.126731357s ago: executing program 5 (id=2124): r0 = socket$unix(0x1, 0x2, 0x0) syz_usb_connect(0x5, 0x46, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000e75f9208c0070515c5b8010203010902340001000080000904ba00038e4ee2000905000000041a06010905010300001007c109050c04400006030f07059acb"], 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344}, 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000040)={0x41424344, 0x41424344}, 0x7, 0xfffffffd) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4417d290ddada01ca48b8a9884315c2c245040f23c00f21f835000002000f23f8c4a2e0f3db0f07d2c74424001e09000000442402e4000000654c0fc72ef3410fc777d365d20fc7700066b8502466ef", 0x50}], 0x1, 0x8, 0x0, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x141000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r5, 0x405, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) write(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r9, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) r10 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$BTRFS_IOC_GET_FEATURES(r10, 0x80189439, 0x0) write$tun(r6, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1032) r11 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r11, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="071101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) socket(0x9, 0x80001, 0x24) ioctl$I2C_RDWR(r12, 0x707, &(0x7f00000000c0)={&(0x7f0000001a80)=[{0x1, 0xa000, 0x0, 0x0}, {0x6, 0x1811, 0x0, 0x0}, {0xdf8e, 0x4000, 0x0, 0x0}], 0x3}) ioctl$BTRFS_IOC_GET_FEATURES(r3, 0x80189439, &(0x7f0000000100)) pread64(r3, &(0x7f0000000400)=""/229, 0xe5, 0xb1) pidfd_send_signal(r3, 0x7, &(0x7f0000000080)={0x4003b, 0x8000, 0x7fff}, 0x0) syz_emit_ethernet(0x1eb, &(0x7f0000000200)=ANY=[@ANYBLOB="49a188da23acd5d460bdee3c88a81200810021000800441301d5006500009f0690787f000001ac1414bb441c2560000007e5000003ff000000090000248c800000017fffffff94040000440ef72ff643fe38fd478d7a92ff070ba3ffffffff7f00000100071b6e7f000001ac1414bbac1414bb000000007f000001ac1414bb0044245f030000000000000003ac1414bb000000017f00000100000006e00000010000000200004e214e24", @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="6010000790780f4a00fe03831312b8d8d54a3bc232187e076e7ff2cb8bb51312c55e6d22e5a58a57a5d587b258f51cd5fe0cf989c32539ed05ae3b0300000ef7a6a0b7eef61566bddd869500ddf4d450274981f481d3a1c9dcef937b928a7d01c8fdced5ea14066223301dfeacdaf35ef4d349c20b21065bf0723cce537c349221ca0afea29ab1786eb7174c19715ce50e7931a3f9cccdcbbafbeac086cfeb44433bd7eda4571d2796cf631332c7ba2b081d688baa88f3c9f6711924d730e60ef2a8932ab1ef66272b1d211b60b2a0850d0a492a3434834ec4bd2048254a6cec1dda6f432e68b60ab178b991b328397bf9cf11e90fff003becfa45e8fd02d5ad0234ec7f4396cc0b0539df5122a05436410aa3f8a0f9ec638ef820495f556d2b5a2c0115d59d8d03fef94096f94504d67e097db856d876cca7b11668dea1f6c5138a3710cf512489"], 0x0) 1.05727244s ago: executing program 4 (id=2125): r0 = socket$netlink(0x10, 0x3, 0x14) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x2, 0x201}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000003ac0)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="feee0c7abe", 0x5}], 0x1, &(0x7f0000002a80)=[{0x28, 0x117, 0x9, "bff5f797f108c32aa20eba0545cd1a5cdf"}], 0x28}, 0x0, 0x24000080, 0x1}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x128}}}, 0x0) 989.625096ms ago: executing program 3 (id=2126): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x35e4, 0x2}, 0x18, 0x0) getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) landlock_restrict_self(r2, 0x8) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x3ec0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x2a, &(0x7f0000000000), 0x4) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0xfffffe3e) readv(r4, &(0x7f0000001ac0)=[{&(0x7f0000000ac0)=""/4096, 0x1000}], 0x1) close(r1) 832.737971ms ago: executing program 2 (id=2035): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_MODULATOR(r0, 0x40445637, &(0x7f0000000140)={0x0, "c42e68848c23f06c24533283c4761272f298e3e99dc1450727d16a1d245b6d11", 0x0, 0x0, 0x1000, 0x4}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000294c0100001e0a05010000000000000000070000000900020073797a31000000000900010073797a3000000000200103801c010080180101802d0001"], 0x1d0}}, 0x0) r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x84000010}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x3, 0x2, 0x204, 0x0, 0x0, {0x1, 0x0, 0x2}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x1a1381, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xd) ioctl$TCFLSH(r3, 0x540b, 0x2) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x92, 0x3, 0xb, 0x7ffffff9}, 0x10) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000000140)={0x1, 0x9, 0x4, &(0x7f0000000100)={0x17, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}}) 235.625µs ago: executing program 3 (id=2127): ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r1}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000040)='user\x00', &(0x7f0000000080)=@secondary) keyctl$instantiate(0xc, 0x0, &(0x7f0000000000)=ANY=[], 0x1d, r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000018c0)=@deltaction={0xf8, 0x31, 0x1, 0x70bd28, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc21}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0xf8}}, 0x4c850) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)=0x0) keyctl$chown(0x4, r2, r3, 0xee00) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000bc0)=@filter={'filter\x00', 0x2, 0x4, 0x358, 0xffffffff, 0xd0, 0xd0, 0x0, 0xfeffffff, 0xffffffff, 0x340, 0x340, 0x340, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [], [], 'macsec0\x00', 'bond_slave_0\x00'}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@rand_addr=' \x01\x00', @empty, [], [], 'sit0\x00', 'dvmrp0\x00', {}, {}, 0x2b}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "177bc60d6843b93e904a44a64aa4964e002fb83129254387e3e340eaf860"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001780)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) write$UHID_INPUT(r6, &(0x7f0000000280)={0x8, {"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", 0x1000}}, 0x1006) r7 = socket$nl_generic(0x10, 0x3, 0x10) fgetxattr(r7, &(0x7f0000000080)=@known='trusted.overlay.impure\x00', &(0x7f0000000740)=""/4096, 0x1000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) inotify_init1(0x800) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1a, 0x2, 0x400) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3000000010000108000000000000201ef220a04c2dca0000000000", @ANYRES32=0x0, @ANYBLOB="900000000008000008000a00", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x4000880) syz_open_dev$vim2m(&(0x7f0000000000), 0x4541b6bf, 0x2) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x1, 0x4) 0s ago: executing program 4 (id=2128): r0 = socket(0xa, 0x2400000001, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4021e}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004090}, 0x2000000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2000c081) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000080200000008001e00010000"], 0x24}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="6c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800e00010069703665727370616e00000038000280140006002001000000000000000000000000000214000700fc0200000000000000000000000000000400120008000100f0c21b6d845646207f5ec9df9f51c1ce6942dbf5f2b44ce4cdb876"], 0x6c}}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000034000)={0x3, {{0xa, 0x4e23, 0x3, @mcast2, 0x10000000}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000003c0)={0x3, {{0xa, 0x0, 0x1, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x4, {{0xa, 0x4e24, 0x3, @mcast1, 0x5}}, {{0xa, 0x4e21, 0x8b5f, @private1={0xfc, 0x1, '\x00', 0x1}, 0xe57}}}, 0x108) kernel console output (not intermixed with test programs): _getsockopt+0x51d/0x7e0 [ 599.882019][T11109] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 599.882060][T11109] ? __fget_files+0x3a0/0x420 [ 599.882080][T11109] ? __fget_files+0x2a/0x420 [ 599.882107][T11109] __x64_sys_getsockopt+0x1a4/0x240 [ 599.882138][T11109] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.882158][T11109] do_syscall_64+0x174/0x580 [ 599.882178][T11109] ? clear_bhb_loop+0x40/0x90 [ 599.882200][T11109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.882217][T11109] RIP: 0033:0x7f1507d9ce59 [ 599.882235][T11109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 599.882250][T11109] RSP: 002b:00007f1508d1b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 599.882270][T11109] RAX: ffffffffffffffda RBX: 00007f1508015fa0 RCX: 00007f1507d9ce59 [ 599.882282][T11109] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 599.882292][T11109] RBP: 00007f1508d1b090 R08: 0000200000000700 R09: 0000000000000000 [ 599.882303][T11109] R10: 0000200000000680 R11: 0000000000000246 R12: 0000000000000002 [ 599.882314][T11109] R13: 00007f1508016038 R14: 00007f1508015fa0 R15: 00007f150813fa48 [ 599.882344][T11109] [ 600.226806][ T77] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.237647][ T77] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.325804][ T5806] usb 1-1: selecting invalid altsetting 0 [ 600.359629][T11112] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1692'. [ 600.547761][ T5806] usb 1-1: USB disconnect, device number 63 [ 600.634553][ T8476] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 600.718864][ T5679] udevd[5679]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 600.785224][ T8476] usb 3-1: Using ep0 maxpacket: 8 [ 600.811001][ T8476] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 600.841634][ T8476] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 600.881321][ T8476] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.921041][ T8476] usb 3-1: config 0 descriptor?? [ 601.148464][ T8476] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 601.162423][ T5752] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 601.182616][ T8476] usb 3-1: USB disconnect, device number 57 [ 601.324508][ T10] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 601.332216][ T5752] usb 1-1: Using ep0 maxpacket: 16 [ 601.342327][ T5752] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 601.351824][ T5752] usb 1-1: config 0 has no interface number 0 [ 601.361529][ T5752] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 601.377280][ T5752] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 601.397395][ T5752] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 601.407706][ T5752] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.419671][ T5752] usb 1-1: Product: syz [ 601.426766][ T5752] usb 1-1: Manufacturer: syz [ 601.432612][ T5752] usb 1-1: SerialNumber: syz [ 601.444613][ T5752] usb 1-1: config 0 descriptor?? [ 601.452137][T11128] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 601.460398][T11128] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 601.491703][ T10] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 601.502201][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.516577][ T10] usb 5-1: Product: syz [ 601.523380][ T10] usb 5-1: Manufacturer: syz [ 601.532299][ T10] usb 5-1: SerialNumber: syz [ 601.699091][T11136] netlink: 'syz.5.1700': attribute type 10 has an invalid length. [ 601.714330][T11136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 601.731965][T11136] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 601.747830][T11128] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 601.782138][T11128] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 601.798082][T11136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 601.838643][T11136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 601.886292][T11136] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 601.902565][ T10] rtl8150 5-1:1.0: couldn't reset the device [ 601.913820][ T10] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 601.932694][T11136] bond0 (unregistering): Released all slaves [ 601.985148][ T10] usb 5-1: USB disconnect, device number 50 [ 602.001312][ T5752] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 602.084585][ T8476] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 602.268196][ T8476] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 602.335883][ T8476] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 602.372721][ T8476] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 602.526563][ T8476] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 602.620143][ T8476] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.651819][ T8476] usb 4-1: Product: syz [ 602.657463][ T8476] usb 4-1: Manufacturer: syz [ 602.663841][ T8476] usb 4-1: SerialNumber: syz [ 602.704536][ T8476] usb 4-1: config 0 descriptor?? [ 602.933254][T11158] ªªªªª»: renamed from virt_wifi0 [ 603.312651][ T8476] usb 4-1: 0:0 : invalid sync pipe. is_playback 1, ep 0b, bSynchAddress ff [ 603.578063][ T8476] usb 4-1: USB disconnect, device number 46 [ 603.690710][ T5686] udevd[5686]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 603.825541][ T5752] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x8001: -71 [ 603.850460][ T5752] asix 1-1:0.34: probe with driver asix failed with error -71 [ 603.885608][ T5613] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 603.916968][ T5752] usb 1-1: USB disconnect, device number 64 [ 604.077184][ T5613] usb 3-1: Using ep0 maxpacket: 8 [ 604.093320][ T5613] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 604.124458][ T5613] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 604.149090][ T5613] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.193725][ T5613] usb 3-1: config 0 descriptor?? [ 604.446681][ T5613] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 604.460303][T11185] No such timeout policy "syz1" [ 604.510569][ T5613] usb 3-1: USB disconnect, device number 58 [ 604.533826][T11185] No such timeout policy "syz1" [ 604.590036][T11185] No such timeout policy "syz1" [ 604.621408][T11185] No such timeout policy "syz1" [ 604.650479][T11185] No such timeout policy "syz1" [ 604.655748][T11192] overlay: Unknown parameter '\-' [ 604.674243][T11185] No such timeout policy "syz1" [ 604.698929][T11196] Cannot find del_set index 1 as target [ 604.708682][T11185] No such timeout policy "syz1" [ 604.736136][T11185] No such timeout policy "syz1" [ 604.761496][T11185] No such timeout policy "syz1" [ 604.773991][T11185] No such timeout policy "syz1" [ 605.129123][T11207] loop4: detected capacity change from 0 to 2640 [ 605.147332][T11207] buffer_io_error: 11 callbacks suppressed [ 605.147352][T11207] Buffer I/O error on dev loop4, logical block 0, async page read [ 605.177553][T11207] Buffer I/O error on dev loop4, logical block 0, async page read [ 605.201149][T11207] Buffer I/O error on dev loop4, logical block 0, async page read [ 605.231952][T11207] Buffer I/O error on dev loop4, logical block 0, async page read [ 605.255815][T11207] Buffer I/O error on dev loop4, logical block 0, async page read [ 605.263926][T11207] Buffer I/O error on dev loop4, logical block 0, async page read [ 605.282704][T11207] Buffer I/O error on dev loop4, logical block 0, async page read [ 605.296105][T11207] Buffer I/O error on dev loop4, logical block 0, async page read [ 605.324570][T11207] ldm_validate_partition_table(): Disk read failed. [ 605.341352][T11207] Buffer I/O error on dev loop4, logical block 0, async page read [ 605.349920][T11207] Buffer I/O error on dev loop4, logical block 0, async page read [ 605.366340][T11207] Dev loop4: unable to read RDB block 0 [ 605.384241][T11207] loop4: unable to read partition table [ 605.395381][T11207] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 606.174861][ T10] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 606.210848][T11240] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1739'. [ 606.365611][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 606.372164][T11246] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1742'. [ 606.414460][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 606.445568][T11246] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1742'. [ 606.456643][ T10] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 606.471917][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.504495][ T10] usb 5-1: config 0 descriptor?? [ 606.525466][T11252] netlink: 'syz.3.1744': attribute type 4 has an invalid length. [ 606.562778][T11252] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1744'. [ 606.597253][T11253] syzkaller0: entered promiscuous mode [ 606.628728][T11253] syzkaller0: entered allmulticast mode [ 606.656480][T11246] tipc: Enabled bearer , priority 0 [ 606.754871][ T10] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 606.813917][ T10] usb 5-1: USB disconnect, device number 51 [ 606.827906][T11245] tipc: Resetting bearer [ 606.933414][T11245] tipc: Disabling bearer [ 607.130232][T11267] loop5: detected capacity change from 0 to 7 [ 607.146171][ C0] blk_print_req_error: 15 callbacks suppressed [ 607.146191][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 607.162648][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 607.176993][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 607.188472][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 607.199837][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 607.210474][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 607.220218][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 607.229539][T11267] ldm_validate_partition_table(): Disk read failed. [ 607.241861][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 607.258985][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 607.268589][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 607.279402][T11267] Dev loop5: unable to read RDB block 0 [ 607.297862][T11267] loop5: unable to read partition table [ 607.340336][T11267] loop5: partition table beyond EOD, truncated [ 607.373150][T11267] loop_reread_partitions: partition scan of loop5 (úù) failed (rc=-5) [ 607.517906][T11273] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 607.534707][ T10] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 607.721465][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 607.737437][ T10] usb 1-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 607.763846][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.784660][ T10] usb 1-1: Product: syz [ 607.804017][ T10] usb 1-1: Manufacturer: syz [ 607.816354][ T10] usb 1-1: SerialNumber: syz [ 607.847842][ T10] usb 1-1: config 0 descriptor?? [ 607.873409][T11288] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1752'. [ 607.893834][T11290] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 607.894846][ T10] ums-onetouch 1-1:0.0: USB Mass Storage device detected [ 608.089061][T11298] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1754'. [ 608.154489][ T5806] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 608.261178][ T10] usb 1-1: USB disconnect, device number 65 [ 608.324489][ T5806] usb 5-1: Using ep0 maxpacket: 32 [ 608.339142][ T5806] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 608.370132][ T5806] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 608.403591][ T5806] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 608.440131][ T5806] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 608.501878][ T5806] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 608.524178][ T5806] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.554814][ T5806] usb 5-1: Product: syz [ 608.574200][ T5806] usb 5-1: Manufacturer: syz [ 608.594037][ T5806] usb 5-1: SerialNumber: syz [ 608.648527][ C1] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 608.696005][ T5806] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input20 [ 608.884553][ T5806] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 608.898920][ T5806] (id 0x00) [ 608.997667][ T5806] rc_core: IR keymap rc-imon-pad not found [ 609.005215][ T5752] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 609.020819][ T5806] Registered IR keymap rc-empty [ 609.035527][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 609.043380][ T5806] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 609.059075][ T5806] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 609.106764][ T5806] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 609.146285][ T5806] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input21 [ 609.168400][ T5806] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:52> initialized [ 609.184663][ T5752] usb 4-1: Using ep0 maxpacket: 8 [ 609.207300][ T5752] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 609.239211][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 609.251601][ T5752] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.276556][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 609.318565][ T10] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 609.341911][ T5752] pvrusb2: Hardware description: Terratec Grabster AV400 [ 609.372338][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.393152][ T5752] pvrusb2: ********** [ 609.413854][ T5752] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 609.439382][ T10] usb 6-1: config 0 descriptor?? [ 609.459292][ T5752] pvrusb2: Important functionality might not be entirely working. [ 609.475584][ T5752] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 609.489064][ T5752] pvrusb2: ********** [ 609.509401][ T2366] pvrusb2: Invalid write control endpoint [ 609.596348][ T2366] pvrusb2: Invalid write control endpoint [ 609.607389][ T2366] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 609.622406][ T2366] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 609.633284][ T2366] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 609.643772][ T2366] pvrusb2: Device being rendered inoperable [ 609.650899][ T2366] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 609.661398][ T2366] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 609.681109][ T10] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 609.687428][ T2366] pvrusb2: Attached sub-driver cx25840 [ 609.713172][ T2366] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 609.724965][ T10] usb 6-1: USB disconnect, device number 6 [ 609.736933][T11330] tipc: Enabled bearer , priority 10 [ 609.757909][ T2366] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 609.772535][ T24] IPVS: starting estimator thread 0... [ 609.793313][T11333] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 609.811199][T11311] netlink: 'syz.3.1759': attribute type 3 has an invalid length. [ 609.825902][T11311] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 609.890881][ T8476] usb 4-1: USB disconnect, device number 47 [ 609.900109][T11332] IPVS: using max 28 ests per chain, 67200 per kthread [ 609.929934][ T29] audit: type=1326 audit(1781018382.719:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11336 comm="syz.2.1768" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494359ce59 code=0x7ffc0000 [ 609.958710][ T29] audit: type=1326 audit(1781018382.719:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11336 comm="syz.2.1768" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494359ce59 code=0x7ffc0000 [ 609.986878][ T29] audit: type=1326 audit(1781018382.719:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11336 comm="syz.2.1768" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f494359ce59 code=0x7ffc0000 [ 610.014139][ T29] audit: type=1326 audit(1781018382.719:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11336 comm="syz.2.1768" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494359ce59 code=0x7ffc0000 [ 610.039323][ T29] audit: type=1326 audit(1781018382.719:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11336 comm="syz.2.1768" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f494359ce59 code=0x7ffc0000 [ 610.074863][ T5752] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 610.082699][ T29] audit: type=1326 audit(1781018382.719:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11336 comm="syz.2.1768" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494359ce59 code=0x7ffc0000 [ 610.110098][ T29] audit: type=1326 audit(1781018382.719:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11336 comm="syz.2.1768" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f494359ce59 code=0x7ffc0000 [ 610.135093][ T29] audit: type=1326 audit(1781018382.719:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11336 comm="syz.2.1768" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494359ce59 code=0x7ffc0000 [ 610.159556][ T29] audit: type=1326 audit(1781018382.719:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11336 comm="syz.2.1768" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f494359ce59 code=0x7ffc0000 [ 610.188417][ T29] audit: type=1326 audit(1781018382.719:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11336 comm="syz.2.1768" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494359ce59 code=0x7ffc0000 [ 610.192917][ T8476] usb 5-1: USB disconnect, device number 52 [ 610.213044][T11343] imon:send_packet: error submitting urb(-19) [ 610.254636][T11343] imon:vfd_write: send packet #2 failed [ 610.286805][ T5752] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 610.323265][ T5752] usb 1-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 610.351849][ T5752] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.392885][ T5752] usb 1-1: config 0 descriptor?? [ 610.410936][ T5752] smsusb:smsusb_probe: board id=8, interface number 0 [ 610.427188][ T5752] smsusb:smsusb_probe: Device initialized with return code -19 [ 610.579374][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802f4dc000: rx timeout, send abort [ 610.744602][ T8476] tipc: Node number set to 105403183 [ 611.079626][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802f4dd400: rx timeout, send abort [ 611.090246][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802f4dc000: abort rx timeout. Force session deactivation [ 611.241375][T11372] FAULT_INJECTION: forcing a failure. [ 611.241375][T11372] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 611.255270][T11372] CPU: 0 UID: 0 PID: 11372 Comm: syz.5.1777 Tainted: G L syzkaller #0 PREEMPT(full) [ 611.255292][T11372] Tainted: [L]=SOFTLOCKUP [ 611.255297][T11372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 611.255304][T11372] Call Trace: [ 611.255309][T11372] [ 611.255314][T11372] dump_stack_lvl+0xe8/0x150 [ 611.255335][T11372] should_fail_ex+0x412/0x560 [ 611.255353][T11372] _copy_to_user+0x31/0xb0 [ 611.255369][T11372] simple_read_from_buffer+0xe1/0x170 [ 611.255388][T11372] proc_fail_nth_read+0x1bb/0x230 [ 611.255405][T11372] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 611.255422][T11372] ? rw_verify_area+0x2a6/0x4d0 [ 611.255438][T11372] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 611.255454][T11372] vfs_read+0x20c/0xa70 [ 611.255473][T11372] ? __pfx___mutex_lock+0x10/0x10 [ 611.255487][T11372] ? __pfx_vfs_read+0x10/0x10 [ 611.255504][T11372] ? __fget_files+0x2a/0x420 [ 611.255521][T11372] ? __fget_files+0x3a0/0x420 [ 611.255534][T11372] ? __fget_files+0x2a/0x420 [ 611.255553][T11372] ksys_read+0x150/0x270 [ 611.255571][T11372] ? __pfx_ksys_read+0x10/0x10 [ 611.255592][T11372] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.255605][T11372] do_syscall_64+0x174/0x580 [ 611.255617][T11372] ? trace_irq_disable+0x3b/0x140 [ 611.255634][T11372] ? clear_bhb_loop+0x40/0x90 [ 611.255656][T11372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.255668][T11372] RIP: 0033:0x7f1507d5d68e [ 611.255680][T11372] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 611.255690][T11372] RSP: 002b:00007f1508d1afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 611.255704][T11372] RAX: ffffffffffffffda RBX: 00007f1508d1b6c0 RCX: 00007f1507d5d68e [ 611.255712][T11372] RDX: 000000000000000f RSI: 00007f1508d1b0a0 RDI: 0000000000000008 [ 611.255719][T11372] RBP: 00007f1508d1b090 R08: 0000000000000000 R09: 0000000000000000 [ 611.255726][T11372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 611.255733][T11372] R13: 00007f1508016038 R14: 00007f1508015fa0 R15: 00007f150813fa48 [ 611.255751][T11372] [ 611.587996][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802f4dd400: abort rx timeout. Force session deactivation [ 612.034739][ T24] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 612.194502][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 612.206334][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 612.218112][ T24] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 612.234340][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.255735][ T24] usb 6-1: config 0 descriptor?? [ 612.284576][ T5613] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 612.440000][ T5613] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 612.457701][ T5613] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.467824][ T5613] usb 3-1: Product: syz [ 612.472214][ T5613] usb 3-1: Manufacturer: syz [ 612.477360][ T5613] usb 3-1: SerialNumber: syz [ 612.507606][ T24] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 612.520086][ T5613] usb 3-1: config 0 descriptor?? [ 612.544206][ T24] usb 6-1: USB disconnect, device number 7 [ 612.747961][ T24] usb 1-1: USB disconnect, device number 66 [ 612.933837][ T5613] usb 3-1: Firmware version (0.0) predates our first public release. [ 612.943297][ T5613] usb 3-1: Please update to version 0.2 or newer [ 613.137668][T11388] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 613.137668][T11388] Please contact the netfilter-devel mailing list or update your nftables rules. [ 613.241355][ T5613] usb 3-1: USB disconnect, device number 59 [ 613.355133][ T8476] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 613.458903][T11403] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1790'. [ 613.544479][ T8476] usb 6-1: Using ep0 maxpacket: 16 [ 613.553274][ T8476] usb 6-1: config 3 has an invalid interface number: 231 but max is 0 [ 613.563183][ T8476] usb 6-1: config 3 has no interface number 0 [ 613.569758][ T8476] usb 6-1: config 3 interface 231 altsetting 6 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 613.582337][ T8476] usb 6-1: config 3 interface 231 has no altsetting 0 [ 613.594187][ T8476] usb 6-1: New USB device found, idVendor=0bfd, idProduct=000b, bcdDevice=a9.3d [ 613.608426][ T8476] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.619792][ T8476] usb 6-1: Product: syz [ 613.624201][ T8476] usb 6-1: Manufacturer: syz [ 613.629667][ T8476] usb 6-1: SerialNumber: syz [ 613.634648][T11409] binder: 11408:11409 ioctl c0306201 200000000080 returned -14 [ 613.761536][T11412] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1794'. [ 613.822437][T11416] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1796'. [ 613.868668][T11417] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 614.020209][T11420] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.027706][T11420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 614.036845][T11420] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.044311][T11420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 614.134611][ T5613] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 614.178692][T11420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 614.298678][ T5613] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 614.324639][T11425] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1799'. [ 614.326079][ T5613] usb 3-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 614.358120][T11420] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 614.380400][ T5613] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.411357][ T5613] usb 3-1: config 0 descriptor?? [ 614.433334][ T5613] smsusb:smsusb_probe: board id=8, interface number 0 [ 614.460740][ T5613] smsusb:smsusb_probe: Device initialized with return code -19 [ 614.651492][ T5613] usb 3-1: USB disconnect, device number 60 [ 614.700777][T11429] netlink: 'syz.4.1801': attribute type 6 has an invalid length. [ 614.725817][T11431] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1800'. [ 614.751849][T11429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1801'. [ 614.814479][T11430] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[5684] was attempted by "\x09   Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ @ | €  @ ›  P    À |     \x0a( \x0a \x0a \x07 @ \x09  syz1 , \x0a \x0a \x07\x09  syz1 \x09  syz2    !ˆ     \x0a( \x0a ^ÿÕ \x09  syz0  @ , \x0a æÿ  \x09  syz0 \x09  syz2    pagemap \x0al \x0a\x09  \x09  [ 615.007380][T11436] bridge0: port 3(geneve0) entered blocking state [ 615.154026][T11436] bridge0: port 3(geneve0) entered disabled state [ 615.171284][T11436] geneve0: entered allmulticast mode [ 615.202086][T11436] geneve0: entered promiscuous mode [ 615.220393][T11436] bridge0: port 3(geneve0) entered blocking state [ 615.227068][T11436] bridge0: port 3(geneve0) entered forwarding state [ 615.485385][ T10] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 615.646643][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 615.662085][ T10] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 615.679259][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 615.696022][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 615.705917][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 615.724099][ T10] usb 1-1: SerialNumber: syz [ 615.814676][ T8476] kvaser_usb 6-1:3.231: error -ENODEV: Cannot get usb endpoint(s) [ 615.850743][ T8476] usb 6-1: USB disconnect, device number 8 [ 615.857096][ T5752] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 615.960277][T11438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.976480][T11438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.000606][ T24] usb 1-1: USB disconnect, device number 67 [ 616.017266][ T5752] usb 5-1: device descriptor read/64, error -71 [ 616.064854][ T5613] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 616.065673][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 616.176732][T11466] overlay: Unknown parameter 'ä-CV5dëøgÉq¿Þ‹hâ»ÁšÍM¹ÿ38‘Š–j²®#Ø¢ÕØ2žºÔ–ÛQ·²E·‡omöÆÐs'óÀ9(Såçƒà]±[(3ü3Óµ0ò^{2×ÔrN‹aÏ‚\lïG+X¹JÙð´tnG¨j§þG*3Ý]‡WŒ¼ƒ5n‡í—†¾Oä»ÔœKêTñ ‘ìÁ¹EؽÅøùüËc}vgœi…ùÍ«+G ‹äò‘Á*©^ÅØA7ï„ö¼7Ø)b' [ 616.177765][T11472] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 616.224459][ T5613] usb 3-1: Using ep0 maxpacket: 32 [ 616.243382][ T5613] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 616.262746][ T5613] usb 3-1: config 0 has no interface number 0 [ 616.276300][ T5613] usb 3-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 616.286993][ T5613] usb 3-1: config 0 interface 89 has no altsetting 0 [ 616.296006][ T5752] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 616.298657][ T5613] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 616.326280][ T5613] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.335031][ T5613] usb 3-1: Product: syz [ 616.335055][ T5613] usb 3-1: Manufacturer: syz [ 616.335071][ T5613] usb 3-1: SerialNumber: syz [ 616.345975][ T5613] usb 3-1: config 0 descriptor?? [ 616.359850][ T5613] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 616.379623][ T5613] em28xx 3-1:0.89: Video interface 89 found: [ 616.380041][T11478] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1820'. [ 616.445215][ T5752] usb 5-1: device descriptor read/64, error -71 [ 616.514782][ T10] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 616.556323][ T5752] usb usb5-port1: attempt power cycle [ 616.662212][T11490] Cannot find del_set index 1 as target [ 616.686913][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 616.710760][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 616.719473][T11492] FAULT_INJECTION: forcing a failure. [ 616.719473][T11492] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 616.731987][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.741723][T11492] CPU: 0 UID: 0 PID: 11492 Comm: syz.5.1826 Tainted: G L syzkaller #0 PREEMPT(full) [ 616.741753][T11492] Tainted: [L]=SOFTLOCKUP [ 616.741761][T11492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 616.741771][T11492] Call Trace: [ 616.741779][T11492] [ 616.741787][T11492] dump_stack_lvl+0xe8/0x150 [ 616.741815][T11492] should_fail_ex+0x412/0x560 [ 616.741844][T11492] prepare_alloc_pages+0x22a/0x650 [ 616.741883][T11492] __alloc_frozen_pages_noprof+0x12f/0x380 [ 616.741918][T11492] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 616.741950][T11492] ? __pfx_policy_nodemask+0x10/0x10 [ 616.741980][T11492] alloc_pages_mpol+0x235/0x490 [ 616.742006][T11492] folio_alloc_mpol_noprof+0x39/0x160 [ 616.742042][T11492] vma_alloc_folio_noprof+0xe1/0x1e0 [ 616.742066][T11492] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 616.742098][T11492] do_wp_page+0x118a/0x4cc0 [ 616.742127][T11492] ? __pte_offset_map+0x29/0x240 [ 616.742161][T11492] ? __pfx_do_wp_page+0x10/0x10 [ 616.742180][T11492] ? do_raw_spin_lock+0x12b/0x2f0 [ 616.742210][T11492] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 616.742247][T11492] handle_mm_fault+0x1698/0x3170 [ 616.742284][T11492] ? handle_mm_fault+0xf1/0x3170 [ 616.742317][T11492] ? __pfx_handle_mm_fault+0x10/0x10 [ 616.742363][T11492] ? lock_mm_and_find_vma+0xa7/0x340 [ 616.742394][T11492] do_user_addr_fault+0x75b/0x1340 [ 616.742431][T11492] exc_page_fault+0x6a/0xc0 [ 616.742455][T11492] asm_exc_page_fault+0x26/0x30 [ 616.742474][T11492] RIP: 0010:__put_user_nocheck_4+0x3/0x10 [ 616.742496][T11492] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb <89> 01 31 c9 0f 01 ca e9 91 84 03 00 90 90 90 90 90 90 90 90 90 90 [ 616.742512][T11492] RSP: 0018:ffffc900054e78b8 EFLAGS: 00050246 [ 616.742529][T11492] RAX: 0000000000000020 RBX: 0000000000000020 RCX: 0000200000004030 [ 616.742542][T11492] RDX: ffff888029103e00 RSI: 0000000000000000 RDI: 00000000ffffffff [ 616.742553][T11492] RBP: ffffc900054e7a30 R08: ffffffff903036f7 R09: 1ffffffff20606de [ 616.742566][T11492] R10: dffffc0000000000 R11: fffffbfff20606df R12: 1ffff92000a9cf24 [ 616.742578][T11492] R13: 0000000000000000 R14: 0000200000004000 R15: dffffc0000000000 [ 616.742622][T11492] ____sys_recvmsg+0x2be/0x4a0 [ 616.742651][T11492] ? __pfx_____sys_recvmsg+0x10/0x10 [ 616.742688][T11492] ? import_iovec+0x73/0xa0 [ 616.742714][T11492] ___sys_recvmsg+0x215/0x590 [ 616.742742][T11492] ? __pfx____sys_recvmsg+0x10/0x10 [ 616.742802][T11492] do_recvmmsg+0x334/0x800 [ 616.742832][T11492] ? __pfx_do_recvmmsg+0x10/0x10 [ 616.742864][T11492] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 616.742905][T11492] __x64_sys_recvmmsg+0x198/0x250 [ 616.742931][T11492] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 616.742961][T11492] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.742982][T11492] do_syscall_64+0x174/0x580 [ 616.743000][T11492] ? trace_irq_disable+0x3b/0x140 [ 616.743028][T11492] ? clear_bhb_loop+0x40/0x90 [ 616.743052][T11492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.743071][T11492] RIP: 0033:0x7f1507d9ce59 [ 616.743089][T11492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 616.743103][T11492] RSP: 002b:00007f1508d1b028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 616.743120][T11492] RAX: ffffffffffffffda RBX: 00007f1508015fa0 RCX: 00007f1507d9ce59 [ 616.743132][T11492] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000004 [ 616.743144][T11492] RBP: 00007f1508d1b090 R08: 0000000000000000 R09: 0000000000000000 [ 616.743156][T11492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 616.743166][T11492] R13: 00007f1508016038 R14: 00007f1508015fa0 R15: 00007f150813fa48 [ 616.743196][T11492] [ 617.151682][ T10] usb 4-1: config 0 descriptor?? [ 617.206416][ T10] smsusb:smsusb_probe: board id=8, interface number 0 [ 617.218945][ T10] smsusb:smsusb_probe: Device initialized with return code -19 [ 617.245310][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 617.257370][ T5752] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 617.285337][ T5752] usb 5-1: device descriptor read/8, error -71 [ 617.349791][ T5613] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 617.424915][ T8476] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 617.524487][ T5752] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 617.545151][ T5752] usb 5-1: device descriptor read/8, error -71 [ 617.554898][ T10] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 617.586260][ T8476] usb 6-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 617.595272][ T8476] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 617.606859][ T8476] usb 6-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 617.616086][ T8476] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.624188][ T8476] usb 6-1: Product: syz [ 617.628492][ T8476] usb 6-1: Manufacturer: syz [ 617.633106][ T8476] usb 6-1: SerialNumber: syz [ 617.640603][ T8476] usb 6-1: config 0 descriptor?? [ 617.649068][ T8476] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 617.656132][ T5752] usb usb5-port1: unable to enumerate USB device [ 617.716503][ T10] usb 1-1: config 1 interface 0 has no altsetting 0 [ 617.726714][ T10] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.40 [ 617.735897][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.744015][ T10] usb 1-1: Product: syz [ 617.748369][ T10] usb 1-1: Manufacturer: syz [ 617.753014][ T10] usb 1-1: SerialNumber: syz [ 618.016786][ T10] usbhid 1-1:1.0: can't add hid device: -71 [ 618.035215][ T10] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 618.050975][ T10] usb 1-1: USB disconnect, device number 68 [ 618.077325][T11508] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1831'. [ 618.165751][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 618.173658][ T5613] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 618.187974][ T5613] em28xx 3-1:0.89: board has no eeprom [ 618.254547][ T5613] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 618.261928][ T5613] em28xx 3-1:0.89: analog set to bulk mode. [ 618.268328][ T5806] em28xx 3-1:0.89: Registering V4L2 extension [ 618.283443][ T5613] usb 3-1: USB disconnect, device number 61 [ 618.300422][ T5613] em28xx 3-1:0.89: Disconnecting em28xx [ 618.319382][ T5806] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 618.327281][ T5806] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 618.335085][ T5806] em28xx 3-1:0.89: No AC97 audio processor [ 618.350170][ T5806] usb 3-1: Decoder not found [ 618.355181][ T5806] em28xx 3-1:0.89: failed to create media graph [ 618.362281][ T5806] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 618.378848][ T5806] em28xx 3-1:0.89: Registering snapshot button... [ 618.391627][ T5806] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input22 [ 618.403940][ T5806] em28xx 3-1:0.89: Remote control support is not available for this card. [ 618.413903][ T5613] em28xx 3-1:0.89: Closing input extension [ 618.421425][ T5613] em28xx 3-1:0.89: Deregistering snapshot button [ 618.447762][ T5613] em28xx 3-1:0.89: Freeing device [ 618.894748][T11526] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1837'. [ 618.926687][T11526] 8021q: adding VLAN 0 to HW filter on device bond4 [ 619.054468][ T5613] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 619.145132][ T5806] usb 4-1: USB disconnect, device number 48 [ 619.221555][ T5613] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 619.249646][ T5613] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 619.269374][ T5613] usb 3-1: Product: syz [ 619.277852][ T5613] usb 3-1: SerialNumber: syz [ 619.296964][ T5613] usb 3-1: config 0 descriptor?? [ 619.305094][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 619.614548][ T5806] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 619.677552][ T8476] usb 6-1: USB disconnect, device number 9 [ 619.777410][ T5806] usb 1-1: config 0 has no interfaces? [ 619.786740][ T5806] usb 1-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 619.798341][ T5806] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.818084][ T5806] usb 1-1: config 0 descriptor?? [ 620.065687][T11535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.096326][T11535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.116979][T11546] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1843'. [ 620.129306][T11546] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1843'. [ 620.143119][T11546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1843'. [ 620.161412][T11547] ip6gretap1: entered promiscuous mode [ 620.174479][T11547] ip6gretap1: entered allmulticast mode [ 620.268186][ T5806] usb 1-1: USB disconnect, device number 69 [ 620.355016][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 621.185083][T11572] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 621.275478][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 621.319589][T11575] bridge0: port 3(geneve0) entered blocking state [ 621.378290][T11575] bridge0: port 3(geneve0) entered disabled state [ 621.402587][T11575] geneve0: entered allmulticast mode [ 621.439860][T11575] geneve0: entered promiscuous mode [ 621.462429][T11575] bridge0: port 3(geneve0) entered blocking state [ 621.469070][T11575] bridge0: port 3(geneve0) entered forwarding state [ 621.476706][ T8476] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 621.646697][ T8476] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 621.674872][ T8476] usb 1-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 621.690316][T11583] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1857'. [ 621.704945][ T8476] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.705471][T11583] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1857'. [ 621.746741][ T8476] usb 1-1: config 0 descriptor?? [ 621.764253][ T8476] smsusb:smsusb_probe: board id=8, interface number 0 [ 621.792069][ T8476] smsusb:smsusb_probe: Device initialized with return code -19 [ 621.853784][ T5806] usb 3-1: USB disconnect, device number 62 [ 622.325788][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 622.463437][T11598] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1861'. [ 622.984539][ T8476] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 623.044297][T11604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1863'. [ 623.156163][ T8476] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 623.188728][ T8476] usb 4-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 623.209797][ T8476] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.276651][ T8476] usb 4-1: config 0 descriptor?? [ 623.307304][ T8476] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 623.384844][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 623.548683][ T5759] usb 4-1: USB disconnect, device number 49 [ 623.720491][T11618] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 623.875575][T11623] netlink: 'syz.2.1869': attribute type 6 has an invalid length. [ 623.964460][T11625] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 624.077851][ T5752] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 624.147346][ T10] usb 1-1: USB disconnect, device number 70 [ 624.248931][ T5752] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 624.286175][ T5725] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 624.298448][ T5752] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 624.311676][T11636] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1874'. [ 624.315966][ T5752] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 624.331337][ T5752] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.345522][T11621] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 624.372197][ T5752] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 624.402977][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.409495][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.434485][ T8476] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 624.442211][ T5725] usb 3-1: device descriptor read/64, error -71 [ 624.449038][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.586223][ T5752] usb 5-1: USB disconnect, device number 57 [ 624.615829][ T8476] usb 4-1: Using ep0 maxpacket: 16 [ 624.627241][ T8476] usb 4-1: unable to get BOS descriptor or descriptor too short [ 624.636820][ T8476] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 624.659511][ T8476] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 624.678294][ T8476] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 624.690395][ T8476] usb 4-1: too many endpoints for config 1 interface 1 altsetting 151: 235, using maximum allowed: 30 [ 624.702794][ T8476] usb 4-1: config 1 interface 1 altsetting 151 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 624.714042][ T5725] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 624.722525][ T8476] usb 4-1: config 1 interface 1 altsetting 151 has 1 endpoint descriptor, different from the interface descriptor's value: 235 [ 624.737187][ T8476] usb 4-1: config 1 interface 1 has no altsetting 1 [ 624.746543][ T8476] usb 4-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 624.755826][ T8476] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.763903][ T8476] usb 4-1: Product: syz [ 624.768269][ T8476] usb 4-1: Manufacturer: syz [ 624.773147][ T8476] usb 4-1: SerialNumber: syz [ 624.864510][ T5725] usb 3-1: device descriptor read/64, error -71 [ 624.887916][T11641] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1877'. [ 624.921277][T11641] 8021q: adding VLAN 0 to HW filter on device bond2 [ 624.938690][T11641] macvlan3: entered promiscuous mode [ 624.944151][T11641] macvlan3: entered allmulticast mode [ 624.950768][T11641] bond2: entered promiscuous mode [ 624.959313][T11641] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 624.969427][T11641] bond2: left promiscuous mode [ 624.974933][ T5725] usb usb3-port1: attempt power cycle [ 625.113284][ T8476] usb 4-1: 1:151 : invalid UAC_AS_GENERAL desc [ 625.148312][ T8476] usb 4-1: 0:2 : does not exist [ 625.262719][ T8476] usb 4-1: USB disconnect, device number 50 [ 625.335434][ T5725] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 625.375247][ T5725] usb 3-1: device descriptor read/8, error -71 [ 625.434695][ T5806] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 625.555043][ T5759] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 625.559125][T11663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1886'. [ 625.571950][T11664] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 625.579881][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 625.614511][ T5725] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 625.617597][ T5806] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 625.635142][ T5806] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 625.635231][ T5725] usb 3-1: device descriptor read/8, error -71 [ 625.656613][ T5806] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 625.667057][ T5806] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.676762][ C1] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 625.714579][ T5759] usb 5-1: Using ep0 maxpacket: 32 [ 625.721708][ T5759] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 625.730448][ T5759] usb 5-1: config 0 has no interface number 0 [ 625.736715][ T5759] usb 5-1: config 0 interface 184 has no altsetting 0 [ 625.746400][ T5759] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 625.756754][ T5759] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.764940][ T5759] usb 5-1: Product: syz [ 625.770398][ T5759] usb 5-1: Manufacturer: syz [ 625.775073][ T5759] usb 5-1: SerialNumber: syz [ 625.782475][ T5759] usb 5-1: config 0 descriptor?? [ 625.785533][ T5725] usb usb3-port1: unable to enumerate USB device [ 625.814497][ T5613] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 625.899720][ T5806] usb 6-1: usb_control_msg returned -32 [ 625.905454][ T5806] usbtmc 6-1:16.0: can't read capabilities [ 625.915393][ T8476] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 625.990417][ T5613] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 626.003106][ T5613] usb 4-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 626.012294][ T5613] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.022510][ T5613] usb 4-1: config 0 descriptor?? [ 626.033603][ T5613] smsusb:smsusb_probe: board id=8, interface number 0 [ 626.040906][ T5613] smsusb:smsusb_probe: Device initialized with return code -19 [ 626.078300][ T8476] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 626.088730][ T8476] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 626.097998][ T8476] usb 1-1: config 1 has no interface number 1 [ 626.105900][ T8476] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 626.119394][ T8476] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 626.132854][ T8476] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 626.142578][ T8476] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.150857][ T8476] usb 1-1: Product: syz [ 626.155408][ T8476] usb 1-1: Manufacturer: syz [ 626.160046][ T8476] usb 1-1: SerialNumber: syz [ 626.168638][T11666] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 626.265750][T11668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.275087][T11668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.298403][T11668] usbtmc 6-1:16.0: send_request_dev_dep_msg_in returned -90 [ 626.379210][T11669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.389891][T11669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.403780][ T5759] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 626.406956][ T8476] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 626.423902][ T5759] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 626.425759][ T8476] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 626.436073][ T5759] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 626.453824][ T5759] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 626.469283][ T5759] usb 5-1: USB disconnect, device number 58 [ 626.529749][ T8476] usb 1-1: USB disconnect, device number 71 [ 626.539476][ T5752] usb 6-1: USB disconnect, device number 10 [ 626.594877][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 626.630067][ T5871] udevd[5871]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 627.009390][T11673] syzkaller0: entered promiscuous mode [ 627.015495][T11673] syzkaller0: entered allmulticast mode [ 627.033298][T11673] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1889'. [ 627.197002][T11680] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1890'. [ 627.595044][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 627.638373][T11692] syzkaller0: entered promiscuous mode [ 627.656839][T11692] syzkaller0: entered allmulticast mode [ 627.658729][T11671] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1888'. [ 627.681061][T11671] binder: 11670:11671 ioctl 54a0 0 returned -22 [ 627.688498][T11671] binder: 11670:11671 ioctl c0189373 200000000180 returned -22 [ 627.698353][T11671] binder_alloc: 11670: binder_alloc_buf, no vma [ 627.779282][T11696] binder: 11695:11696 ioctl 40046210 0 returned -14 [ 627.794563][ T5759] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 627.874591][ T809] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 627.934521][ T5759] usb 5-1: device descriptor read/64, error -71 [ 628.035841][ T809] usb 3-1: too many configurations: 36, using maximum allowed: 8 [ 628.053970][ T809] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 628.063741][ T809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.072051][ T809] usb 3-1: Product: syz [ 628.075087][ T5752] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 628.076535][ T809] usb 3-1: Manufacturer: syz [ 628.088799][ T809] usb 3-1: SerialNumber: syz [ 628.101049][ T809] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 628.121140][ T5613] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 628.194495][ T5759] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 628.236904][ T5752] usb 1-1: Using ep0 maxpacket: 32 [ 628.245432][ T5752] usb 1-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 628.255260][ T5752] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.283789][ T5752] usb 1-1: selecting invalid altsetting 3 [ 628.290262][ T5752] comedi comedi5: could not set alternate setting 3 in high speed [ 628.298203][ T5752] usbduxsigma 1-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 628.319602][ T5752] usbduxsigma 1-1:128.0: probe with driver usbduxsigma failed with error -22 [ 628.337875][ T5759] usb 5-1: device descriptor read/64, error -71 [ 628.359359][ T29] kauditd_printk_skb: 596 callbacks suppressed [ 628.359379][ T29] audit: type=1326 audit(1781018401.149:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11687 comm="syz.2.1895" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494359ce59 code=0x7ffc0000 [ 628.393809][ T29] audit: type=1326 audit(1781018401.149:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11687 comm="syz.2.1895" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f494359ce59 code=0x7ffc0000 [ 628.418819][ T29] audit: type=1326 audit(1781018401.159:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11687 comm="syz.2.1895" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494359ce59 code=0x7ffc0000 [ 628.445519][ T29] audit: type=1326 audit(1781018401.159:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11687 comm="syz.2.1895" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494359ce59 code=0x7ffc0000 [ 628.471242][ T29] audit: type=1326 audit(1781018401.179:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11687 comm="syz.2.1895" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f494355d68e code=0x7ffc0000 [ 628.474887][ T5759] usb usb5-port1: attempt power cycle [ 628.512897][T11693] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1895'. [ 628.543557][ T29] audit: type=1326 audit(1781018401.179:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11687 comm="syz.2.1895" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494359ce59 code=0x7ffc0000 [ 628.574249][T11698] random: crng reseeded on system resumption [ 628.575169][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 628.595635][ T5725] usb 4-1: USB disconnect, device number 51 [ 628.617951][ T29] audit: type=1326 audit(1781018401.179:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11687 comm="syz.2.1895" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494359ce59 code=0x7ffc0000 [ 628.677723][ T29] audit: type=1326 audit(1781018401.179:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11687 comm="syz.2.1895" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f494359ce59 code=0x7ffc0000 [ 628.827618][T11701] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1898'. [ 628.885858][ T5759] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 628.910045][T11702] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 628.961124][ T5759] usb 5-1: device descriptor read/8, error -71 [ 629.204631][ T5759] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 629.213182][ T5613] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 629.238297][ T5613] ath9k_htc: Failed to initialize the device [ 629.266947][ T5759] usb 5-1: device descriptor read/8, error -71 [ 629.334249][ T5613] usb 3-1: ath9k_htc: USB layer deinitialized [ 629.396497][ T5759] usb usb5-port1: unable to enumerate USB device [ 629.674902][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 630.656353][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 630.788694][ T5752] usb 1-1: USB disconnect, device number 72 [ 631.022856][T11710] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1901'. [ 631.036328][T11710] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1901'. [ 631.675800][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 632.012802][ T809] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 632.215767][ T809] usb 5-1: too many configurations: 126, using maximum allowed: 8 [ 632.237947][ T809] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 632.251518][ T809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.260029][ T809] usb 5-1: Product: syz [ 632.264793][ T809] usb 5-1: Manufacturer: syz [ 632.269477][ T809] usb 5-1: SerialNumber: syz [ 632.489249][T11716] program syz.4.1903 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 632.627536][ T77] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.636501][ T77] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.692646][ T77] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.741749][ T77] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.751475][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 632.811996][ T5613] usb 3-1: USB disconnect, device number 67 [ 632.975176][T11725] FAULT_INJECTION: forcing a failure. [ 632.975176][T11725] name failslab, interval 1, probability 0, space 0, times 0 [ 633.005410][T11725] CPU: 0 UID: 0 PID: 11725 Comm: syz.2.1906 Tainted: G L syzkaller #0 PREEMPT(full) [ 633.005444][T11725] Tainted: [L]=SOFTLOCKUP [ 633.005451][T11725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 633.005462][T11725] Call Trace: [ 633.005470][T11725] [ 633.005480][T11725] dump_stack_lvl+0xe8/0x150 [ 633.005509][T11725] should_fail_ex+0x412/0x560 [ 633.005539][T11725] should_failslab+0xa8/0x100 [ 633.005562][T11725] __kmalloc_noprof+0xe8/0x760 [ 633.005589][T11725] ? sock_kmalloc+0xd6/0x160 [ 633.005609][T11725] ? hash_recvmsg+0x130/0x840 [ 633.005637][T11725] sock_kmalloc+0xd6/0x160 [ 633.005661][T11725] hash_recvmsg+0x1d4/0x840 [ 633.005690][T11725] ? __pfx_hash_recvmsg+0x10/0x10 [ 633.005713][T11725] sock_recvmsg_nosec+0x10c/0x140 [ 633.005741][T11725] ____sys_recvmsg+0x3e3/0x4a0 [ 633.005771][T11725] ? __pfx_____sys_recvmsg+0x10/0x10 [ 633.005805][T11725] ? import_iovec+0x73/0xa0 [ 633.005832][T11725] ___sys_recvmsg+0x215/0x590 [ 633.005859][T11725] ? __pfx____sys_recvmsg+0x10/0x10 [ 633.005917][T11725] do_recvmmsg+0x334/0x800 [ 633.005949][T11725] ? __pfx_do_recvmmsg+0x10/0x10 [ 633.005982][T11725] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 633.006024][T11725] __x64_sys_recvmmsg+0x198/0x250 [ 633.006047][T11725] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 633.006086][T11725] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.006111][T11725] do_syscall_64+0x174/0x580 [ 633.006132][T11725] ? trace_irq_disable+0x3b/0x140 [ 633.006160][T11725] ? clear_bhb_loop+0x40/0x90 [ 633.006185][T11725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.006204][T11725] RIP: 0033:0x7f494359ce59 [ 633.006224][T11725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 633.006241][T11725] RSP: 002b:00007f49443ed028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 633.006262][T11725] RAX: ffffffffffffffda RBX: 00007f4943815fa0 RCX: 00007f494359ce59 [ 633.006276][T11725] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000004 [ 633.006289][T11725] RBP: 00007f49443ed090 R08: 0000000000000000 R09: 0000000000000000 [ 633.006301][T11725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 633.006312][T11725] R13: 00007f4943816038 R14: 00007f4943815fa0 R15: 00007f494393fa48 [ 633.006343][T11725] [ 633.255484][T11730] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 633.270720][T11729] tipc: Started in network mode [ 633.275903][T11729] tipc: Node identity ac141441, cluster identity 4711 [ 633.285731][T11729] tipc: Enabled bearer , priority 10 [ 633.374751][ T5759] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 633.403646][T11736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1912'. [ 633.554823][ T5759] usb 6-1: Using ep0 maxpacket: 8 [ 633.561752][ T5759] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 633.572839][ T5759] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 633.575029][ T5725] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 633.586119][ T5759] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.604808][ T5759] usb 6-1: config 0 descriptor?? [ 633.736301][ T5725] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 633.744429][ T5613] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 633.747612][ T5725] usb 1-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 633.765529][ T5725] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.774522][ T5806] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 633.783453][ T5725] usb 1-1: config 0 descriptor?? [ 633.793710][ T5725] smsusb:smsusb_probe: board id=8, interface number 0 [ 633.801476][ T5725] smsusb:smsusb_probe: Device initialized with return code -19 [ 633.814821][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 633.855578][ T5759] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 633.876537][ T5759] usb 6-1: USB disconnect, device number 11 [ 633.917356][ T5613] usb 3-1: too many configurations: 36, using maximum allowed: 8 [ 633.944008][ T5613] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 633.955999][ T5613] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.964233][ T5613] usb 3-1: Product: syz [ 633.971641][ T5613] usb 3-1: Manufacturer: syz [ 633.976596][ T5613] usb 3-1: SerialNumber: syz [ 633.981408][ T5806] usb 4-1: unable to get BOS descriptor or descriptor too short [ 633.999003][ T5613] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 634.007699][ T5806] usb 4-1: not running at top speed; connect to a high speed hub [ 634.027061][ T24] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 634.040437][ T5806] usb 4-1: New USB device found, idVendor=0e41, idProduct=4642, bcdDevice= 0.40 [ 634.055172][ T5806] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.066574][ T5806] usb 4-1: Product: syz [ 634.070803][ T5806] usb 4-1: Manufacturer: syz [ 634.076692][ T5806] usb 4-1: SerialNumber: syz [ 634.091659][ T5806] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 634.137205][ T5806] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 634.147634][ T5806] snd_usb_pod 4-1:1.0: Line 6 BassPODxt Live found [ 634.154234][ T5806] usb 4-1: selecting invalid altsetting 1 [ 634.160128][ T5806] snd_usb_pod 4-1:1.0: set_interface failed [ 634.166490][ T5806] snd_usb_pod 4-1:1.0: Line 6 BassPODxt Live now disconnected [ 634.174214][ T5806] snd_usb_pod 4-1:1.0: probe with driver snd_usb_pod failed with error -22 [ 634.188461][ T5806] snd_usb_pod 4-1:1.1: Line 6 BassPODxt Live found [ 634.295305][ T5759] usb 3-1: USB disconnect, device number 68 [ 634.310110][ T5806] snd_usb_pod 4-1:1.1: endpoint not available, using fallback values [ 634.323239][ T5806] snd_usb_pod 4-1:1.1: invalid control EP [ 634.341303][ T5806] snd_usb_pod 4-1:1.1: cannot start listening: -22 [ 634.358813][ T5806] snd_usb_pod 4-1:1.1: Line 6 BassPODxt Live now disconnected [ 634.374327][ T5806] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 634.400041][T11749] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1915'. [ 634.409694][ T5725] tipc: Node number set to 2886997057 [ 634.415399][ T5806] snd_usb_pod 4-1:1.2: Line 6 BassPODxt Live found [ 634.503031][T11751] wireguard0: entered promiscuous mode [ 634.508890][ T5806] snd_usb_pod 4-1:1.2: set_interface failed [ 634.511352][T11751] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 634.515727][ T5806] snd_usb_pod 4-1:1.2: Line 6 BassPODxt Live now disconnected [ 634.545928][T11751] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 634.553812][ T5806] snd_usb_pod 4-1:1.2: probe with driver snd_usb_pod failed with error -71 [ 634.570411][ T5806] usb 4-1: USB disconnect, device number 52 [ 634.609525][ T5884] udevd[5884]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 634.634674][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 634.757641][ T809] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 634.787321][ T809] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 634.821105][ T809] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 634.835189][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.861521][ T809] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 634.907844][ T809] usb 5-1: USB disconnect, device number 63 [ 634.942063][T11760] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 635.020553][T11763] netlink: 'syz.5.1919': attribute type 5 has an invalid length. [ 635.060458][T11763] netlink: 'syz.5.1919': attribute type 5 has an invalid length. [ 635.087806][T11767] tipc: Started in network mode [ 635.114546][ T24] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 635.123175][T11767] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 635.123936][ T24] ath9k_htc: Failed to initialize the device [ 635.162075][ T5759] usb 3-1: ath9k_htc: USB layer deinitialized [ 635.163227][T11767] tipc: Enabled bearer , priority 10 [ 635.240887][T11773] xt_TCPMSS: Only works on TCP SYN packets [ 635.527064][ T809] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 635.685194][ T809] usb 4-1: Using ep0 maxpacket: 16 [ 635.699744][ T809] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 635.727042][ T809] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 635.740240][T11782] openvswitch: netlink: ct_state flags 2c1414ac unsupported [ 635.748166][ T809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.757718][T11781] openvswitch: netlink: ct_state flags 2c1414ac unsupported [ 635.765522][ T809] usb 4-1: Product: syz [ 635.769756][ T809] usb 4-1: Manufacturer: syz [ 635.784449][ T809] usb 4-1: SerialNumber: syz [ 635.798273][ T809] usb 4-1: config 0 descriptor?? [ 635.815511][ T809] hub 4-1:0.0: bad descriptor, ignoring hub [ 635.821531][ T809] hub 4-1:0.0: probe with driver hub failed with error -5 [ 635.841989][ T809] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 635.852875][T11781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 635.879266][T11781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 635.888738][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 636.051225][ T10] usb 1-1: USB disconnect, device number 73 [ 636.096346][ T24] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 636.178707][ T5759] usb 4-1: USB disconnect, device number 53 [ 636.257257][ T24] usb 5-1: no configurations [ 636.272408][ T24] usb 5-1: can't read configurations, error -22 [ 636.274999][ T10] tipc: Node number set to 10136234 [ 636.405541][ T24] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 636.478583][T11809] bridge0: port 3(geneve0) entered blocking state [ 636.485543][T11808] netlink: 'syz.2.1930': attribute type 6 has an invalid length. [ 636.493616][T11809] bridge0: port 3(geneve0) entered disabled state [ 636.500436][T11809] geneve0: entered allmulticast mode [ 636.508096][T11809] geneve0: entered promiscuous mode [ 636.587560][ T24] usb 5-1: no configurations [ 636.602544][ T24] usb 5-1: can't read configurations, error -22 [ 636.621749][ T24] usb usb5-port1: attempt power cycle [ 636.629800][T11813] netlink: 'syz.0.1933': attribute type 1 has an invalid length. [ 636.653762][T11813] netlink: 288 bytes leftover after parsing attributes in process `syz.0.1933'. [ 636.672895][T11816] binder_alloc: 11815: binder_alloc_buf, no vma [ 636.875942][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 636.974627][ T24] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 637.019582][ T24] usb 5-1: no configurations [ 637.038554][ T24] usb 5-1: can't read configurations, error -22 [ 637.074288][T11833] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1942'. [ 637.185724][ T24] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 637.216596][ T24] usb 5-1: no configurations [ 637.224818][ T24] usb 5-1: can't read configurations, error -22 [ 637.238156][ T24] usb usb5-port1: unable to enumerate USB device [ 637.264642][ T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 637.363630][T11842] netlink: 'syz.0.1945': attribute type 10 has an invalid length. [ 637.378897][T11842] team0: Port device dummy0 added [ 637.388465][T11842] SET target dimension over the limit! [ 637.395261][T11842] netlink: 'syz.0.1945': attribute type 10 has an invalid length. [ 637.415690][T11842] team0: Port device dummy0 removed [ 637.426747][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 637.444773][ T5759] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 637.446560][ T10] usb 6-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 637.479226][T11834] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1941'. [ 637.481089][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.490679][T11834] binder: 11832:11834 ioctl 54a0 0 returned -22 [ 637.511329][T11834] binder: 11832:11834 ioctl c0189373 200000000180 returned -22 [ 637.520411][T11834] binder_alloc: 11832: binder_alloc_buf, no vma [ 637.521566][ T10] usb 6-1: config 0 descriptor?? [ 637.540720][ T10] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 637.577497][T11845] qrtr: Invalid version 48 [ 637.607189][ T5759] usb 3-1: Using ep0 maxpacket: 32 [ 637.614823][ T5759] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 637.631972][ T5759] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 637.645231][T11845] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 637.656033][ T5759] usb 3-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 637.666175][T11845] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 637.673819][ T5759] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.682956][ T5759] usb 3-1: Product: syz [ 637.689239][ T5759] usb 3-1: Manufacturer: syz [ 637.693974][ T5759] usb 3-1: SerialNumber: syz [ 637.781239][ T10] usb 6-1: USB disconnect, device number 12 [ 637.934922][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 637.938154][ T5759] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 637.981621][ T5759] usb 3-1: disable ehci-hcd to run US-144 [ 637.991219][ T5759] usb 3-1: USB disconnect, device number 69 [ 638.037009][ T5885] udevd[5885]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 638.095285][ T809] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 638.244953][ T809] usb 1-1: Using ep0 maxpacket: 32 [ 638.252430][ T809] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 638.263739][ T809] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 638.273613][ T809] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 638.283023][ T809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.294119][ T809] usb 1-1: config 0 descriptor?? [ 638.309408][ T809] hub 1-1:0.0: USB hub found [ 638.521438][ T809] hub 1-1:0.0: 1 port detected [ 638.568498][T11861] loop4: detected capacity change from 0 to 2640 [ 638.583952][T11861] buffer_io_error: 36 callbacks suppressed [ 638.583974][T11861] Buffer I/O error on dev loop4, logical block 0, async page read [ 638.598604][T11861] Buffer I/O error on dev loop4, logical block 0, async page read [ 638.617174][T11861] Buffer I/O error on dev loop4, logical block 0, async page read [ 638.630747][T11864] FAULT_INJECTION: forcing a failure. [ 638.630747][T11864] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 638.632938][T11861] Buffer I/O error on dev loop4, logical block 0, async page read [ 638.645889][T11864] CPU: 0 UID: 0 PID: 11864 Comm: syz.2.1954 Tainted: G L syzkaller #0 PREEMPT(full) [ 638.645918][T11864] Tainted: [L]=SOFTLOCKUP [ 638.645925][T11864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 638.645944][T11864] Call Trace: [ 638.645952][T11864] [ 638.645959][T11864] dump_stack_lvl+0xe8/0x150 [ 638.645986][T11864] should_fail_ex+0x412/0x560 [ 638.646011][T11864] _copy_from_user+0x2d/0xb0 [ 638.646034][T11864] ___sys_recvmsg+0x175/0x590 [ 638.646060][T11864] ? __pfx____sys_recvmsg+0x10/0x10 [ 638.646083][T11864] ? __fget_files+0x2a/0x420 [ 638.646132][T11864] do_recvmmsg+0x334/0x800 [ 638.646158][T11864] ? __pfx_do_recvmmsg+0x10/0x10 [ 638.646188][T11864] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 638.646225][T11864] __x64_sys_recvmmsg+0x198/0x250 [ 638.646247][T11864] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 638.646273][T11864] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.646293][T11864] do_syscall_64+0x174/0x580 [ 638.646313][T11864] ? clear_bhb_loop+0x40/0x90 [ 638.646335][T11864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.646352][T11864] RIP: 0033:0x7f494359ce59 [ 638.646369][T11864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 638.646384][T11864] RSP: 002b:00007f49443ed028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 638.646405][T11864] RAX: ffffffffffffffda RBX: 00007f4943815fa0 RCX: 00007f494359ce59 [ 638.646417][T11864] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000004 [ 638.646428][T11864] RBP: 00007f49443ed090 R08: 0000000000000000 R09: 0000000000000000 [ 638.646439][T11864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 638.646449][T11864] R13: 00007f4943816038 R14: 00007f4943815fa0 R15: 00007f494393fa48 [ 638.646478][T11864] [ 638.843605][T11861] Buffer I/O error on dev loop4, logical block 0, async page read [ 638.853723][T11861] Buffer I/O error on dev loop4, logical block 0, async page read [ 638.890762][T11861] Buffer I/O error on dev loop4, logical block 0, async page read [ 638.899830][T11861] Buffer I/O error on dev loop4, logical block 0, async page read [ 638.908600][T11861] ldm_validate_partition_table(): Disk read failed. [ 638.918255][T11861] Buffer I/O error on dev loop4, logical block 0, async page read [ 638.939568][T11861] Buffer I/O error on dev loop4, logical block 0, async page read [ 638.951003][T11861] Dev loop4: unable to read RDB block 0 [ 638.960635][T11861] loop4: unable to read partition table [ 638.968352][T11861] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 638.989890][T11868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1956'. [ 639.005649][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.239945][ T24] hub 1-1:0.0: activate --> -90 [ 639.436645][ T5759] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 639.443329][T11855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 639.467263][T11855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.624773][ T5759] usb 3-1: Using ep0 maxpacket: 16 [ 639.644529][ T5759] usb 3-1: config index 0 descriptor too short (expected 16420, got 36) [ 639.669483][ T5759] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 639.694269][ T5759] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 639.705017][T11884] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1963'. [ 639.734069][T11870] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1958'. [ 639.734446][ T5759] usb 3-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 639.784978][T11883] binder: 11869:11883 ioctl 54a0 0 returned -22 [ 639.785735][ T5759] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.808904][T11883] binder: 11869:11883 ioctl c0189373 200000000180 returned -22 [ 639.837203][T11870] binder_alloc: 11869: binder_alloc_buf, no vma [ 639.862116][ T5759] usb 3-1: config 0 descriptor?? [ 640.015476][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 640.331471][T11895] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1965'. [ 640.363246][T11889] input: syz0 as /devices/virtual/input/input23 [ 640.378336][T11895] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1965'. [ 640.405251][ C1] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 640.498149][ T24] hub 1-1:0.0: hub_ext_port_status failed (err = -32) [ 640.537894][T11897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1960'. [ 640.855042][ T809] usb 1-1: USB disconnect, device number 74 [ 641.145364][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 641.177764][T11907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1969'. [ 641.283302][T11909] netlink: 'syz.4.1970': attribute type 1 has an invalid length. [ 641.396345][T11909] 8021q: adding VLAN 0 to HW filter on device bond5 [ 641.434471][ T809] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 641.595537][ T809] usb 4-1: device descriptor read/64, error -71 [ 641.854555][ T809] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 641.895480][ T8476] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 641.910914][ T29] audit: type=1326 audit(1781018414.689:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11927 comm="syz.4.1977" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1779ce59 code=0x7ffc0000 [ 641.936740][ T29] audit: type=1326 audit(1781018414.699:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11927 comm="syz.4.1977" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1779ce59 code=0x7ffc0000 [ 641.963045][ T29] audit: type=1326 audit(1781018414.749:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11927 comm="syz.4.1977" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5e1779ce59 code=0x7ffc0000 [ 641.988999][ T29] audit: type=1326 audit(1781018414.749:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11927 comm="syz.4.1977" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1779ce59 code=0x7ffc0000 [ 642.013581][ T29] audit: type=1326 audit(1781018414.749:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11927 comm="syz.4.1977" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1779ce59 code=0x7ffc0000 [ 642.039257][ T809] usb 4-1: device descriptor read/64, error -71 [ 642.039267][ T29] audit: type=1326 audit(1781018414.779:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11927 comm="syz.4.1977" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5e1779ce59 code=0x7ffc0000 [ 642.070425][ T29] audit: type=1326 audit(1781018414.779:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11927 comm="syz.4.1977" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1779ce59 code=0x7ffc0000 [ 642.086140][ T8476] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 642.107822][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 642.118633][ T29] audit: type=1326 audit(1781018414.779:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11927 comm="syz.4.1977" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f5e1779ce59 code=0x7ffc0000 [ 642.150846][ T8476] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 642.168189][ T8476] usb 1-1: config 0 has no interfaces? [ 642.173769][ T8476] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 642.177340][ T809] usb usb4-port1: attempt power cycle [ 642.185035][ T8476] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.218046][ T29] audit: type=1326 audit(1781018414.779:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11927 comm="syz.4.1977" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1779ce59 code=0x7ffc0000 [ 642.246237][ T24] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 642.263643][ T8476] usb 1-1: config 0 descriptor?? [ 642.289049][T11930] __nla_validate_parse: 1 callbacks suppressed [ 642.289069][T11930] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1978'. [ 642.301102][ T29] audit: type=1326 audit(1781018414.779:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11927 comm="syz.4.1977" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1779ce59 code=0x7ffc0000 [ 642.404965][ T24] usb 5-1: device descriptor read/64, error -71 [ 642.485515][ T5759] usbhid 3-1:0.0: can't add hid device: -71 [ 642.500076][ T5759] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 642.520272][ T5759] usb 3-1: USB disconnect, device number 70 [ 642.576696][T11921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 642.594735][ T809] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 642.598298][T11921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 642.619018][ T809] usb 4-1: device descriptor read/8, error -71 [ 642.649545][ T8476] usb 1-1: USB disconnect, device number 75 [ 642.655746][ T5725] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 642.684445][ T24] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 642.817730][ T5725] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 642.834439][ T24] usb 5-1: device descriptor read/64, error -71 [ 642.835295][ T5725] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 642.864455][ T809] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 642.865942][ T5725] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 642.896533][ T809] usb 4-1: device descriptor read/8, error -71 [ 642.906270][ T5725] usb 6-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 642.924525][ T5725] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.943136][ T5725] usb 6-1: Product: syz [ 642.949072][ T5725] usb 6-1: Manufacturer: syz [ 642.956738][ T24] usb usb5-port1: attempt power cycle [ 642.964246][ T5725] usb 6-1: SerialNumber: syz [ 642.984800][T11934] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1980'. [ 643.006866][ T809] usb usb4-port1: unable to enumerate USB device [ 643.200660][ T5725] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 643.208091][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 643.247347][ T5725] usb 6-1: 0:2 : does not exist [ 643.314757][ T24] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 643.367490][ T24] usb 5-1: device descriptor read/8, error -71 [ 643.392363][ T5725] usb 6-1: USB disconnect, device number 13 [ 643.626740][ T24] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 643.664502][ T8476] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 643.665353][ T24] usb 5-1: device descriptor read/8, error -71 [ 643.699009][T11947] binder_alloc: 11946: binder_alloc_buf, no vma [ 643.814768][ T24] usb usb5-port1: unable to enumerate USB device [ 643.828706][ T8476] usb 1-1: unable to get BOS descriptor or descriptor too short [ 643.846244][ T8476] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 643.862543][ T8476] usb 1-1: config 1 has no interface number 0 [ 643.875772][ T8476] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 643.895144][ T8476] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 643.917854][ T8476] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 643.945299][ T8476] usb 1-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 643.963471][ T8476] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.976762][ T8476] usb 1-1: Product: syz [ 643.984201][ T8476] usb 1-1: Manufacturer: syz [ 643.992019][ T8476] usb 1-1: SerialNumber: syz [ 644.225324][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 644.412892][T11960] FAULT_INJECTION: forcing a failure. [ 644.412892][T11960] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 644.429076][T11960] CPU: 1 UID: 0 PID: 11960 Comm: syz.3.1988 Tainted: G L syzkaller #0 PREEMPT(full) [ 644.429110][T11960] Tainted: [L]=SOFTLOCKUP [ 644.429118][T11960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 644.429130][T11960] Call Trace: [ 644.429139][T11960] [ 644.429148][T11960] dump_stack_lvl+0xe8/0x150 [ 644.429182][T11960] should_fail_ex+0x412/0x560 [ 644.429212][T11960] _copy_to_user+0x31/0xb0 [ 644.429241][T11960] simple_read_from_buffer+0xe1/0x170 [ 644.429275][T11960] proc_fail_nth_read+0x1bb/0x230 [ 644.429307][T11960] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 644.429337][T11960] ? rw_verify_area+0x2a6/0x4d0 [ 644.429365][T11960] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 644.429393][T11960] vfs_read+0x20c/0xa70 [ 644.429427][T11960] ? __pfx___mutex_lock+0x10/0x10 [ 644.429452][T11960] ? __pfx_vfs_read+0x10/0x10 [ 644.429481][T11960] ? __fget_files+0x2a/0x420 [ 644.429509][T11960] ? __fget_files+0x3a0/0x420 [ 644.429533][T11960] ? __fget_files+0x2a/0x420 [ 644.429567][T11960] ksys_read+0x150/0x270 [ 644.429598][T11960] ? __pfx_ksys_read+0x10/0x10 [ 644.429635][T11960] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.429659][T11960] do_syscall_64+0x174/0x580 [ 644.429680][T11960] ? trace_irq_disable+0x3b/0x140 [ 644.429712][T11960] ? clear_bhb_loop+0x40/0x90 [ 644.429737][T11960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.429757][T11960] RIP: 0033:0x7f1f2935d68e [ 644.429778][T11960] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 644.429795][T11960] RSP: 002b:00007f1f2a2e3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 644.429817][T11960] RAX: ffffffffffffffda RBX: 00007f1f2a2e46c0 RCX: 00007f1f2935d68e [ 644.429832][T11960] RDX: 000000000000000f RSI: 00007f1f2a2e40a0 RDI: 0000000000000004 [ 644.429845][T11960] RBP: 00007f1f2a2e4090 R08: 0000000000000000 R09: 0000000000000000 [ 644.429857][T11960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 644.429877][T11960] R13: 00007f1f29616038 R14: 00007f1f29615fa0 R15: 00007f1f2973fa48 [ 644.429910][T11960] [ 645.204863][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 645.316564][ T24] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 645.476378][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 645.486630][ T24] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 645.497753][ T24] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 645.512541][ T24] usb 4-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 645.524049][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.532325][ T24] usb 4-1: Product: syz [ 645.537155][ T24] usb 4-1: Manufacturer: syz [ 645.541937][ T24] usb 4-1: SerialNumber: syz [ 645.581277][T11988] netlink: 'syz.2.1999': attribute type 7 has an invalid length. [ 645.604502][T11988] netlink: 'syz.2.1999': attribute type 7 has an invalid length. [ 645.764511][ T24] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 645.835852][ T24] usb 4-1: disable ehci-hcd to run US-144 [ 645.862025][ T24] usb 4-1: USB disconnect, device number 58 [ 645.989266][ T5884] udevd[5884]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 646.058853][T11996] binder: 11995:11996 ioctl c0306201 200000000180 returned -14 [ 646.117942][T11993] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2000'. [ 646.129079][T11993] binder: 11992:11993 ioctl 54a0 0 returned -22 [ 646.136529][T11993] binder: 11992:11993 ioctl c0189373 200000000180 returned -22 [ 646.146838][T11993] binder_alloc: 11992: binder_alloc_buf, no vma [ 646.237260][T11998] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2002'. [ 646.314706][ T5752] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 646.406565][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 646.435872][ T8476] usb 1-1: USB disconnect, device number 76 [ 646.526826][ T5752] usb 6-1: unable to get BOS descriptor or descriptor too short [ 646.546616][ T5752] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 646.565294][ T5752] usb 6-1: can't read configurations, error -71 [ 646.755049][T12016] loop3: detected capacity change from 0 to 2640 [ 646.776516][T12016] buffer_io_error: 11 callbacks suppressed [ 646.776536][T12016] Buffer I/O error on dev loop3, logical block 0, async page read [ 646.817127][T12016] Buffer I/O error on dev loop3, logical block 0, async page read [ 646.833161][T12016] Buffer I/O error on dev loop3, logical block 0, async page read [ 646.841590][T12016] Buffer I/O error on dev loop3, logical block 0, async page read [ 646.915749][T12016] Buffer I/O error on dev loop3, logical block 0, async page read [ 646.927032][T12019] loop3: detected capacity change from 2640 to 524287992 [ 646.935679][T12016] Buffer I/O error on dev loop3, logical block 0, async page read [ 646.946237][T12016] Buffer I/O error on dev loop3, logical block 0, async page read [ 646.955088][T12016] Buffer I/O error on dev loop3, logical block 0, async page read [ 646.963998][T12016] ldm_validate_partition_table(): Disk read failed. [ 646.971587][T12016] Buffer I/O error on dev loop3, logical block 0, async page read [ 646.980143][T12016] Buffer I/O error on dev loop3, logical block 0, async page read [ 646.989324][T12016] Dev loop3: unable to read RDB block 0 [ 646.996106][T12016] loop3: unable to read partition table [ 647.003228][T12016] loop_reread_partitions: partition scan of loop3 (ir¡c‡’ úÒVUŸX¨») failed (rc=-5) [ 647.230736][T12025] binder: 12024:12025 ioctl c0306201 0 returned -14 [ 647.328189][T12030] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 647.345176][T12030] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 647.374993][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 647.706018][ T8476] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 647.864578][ T8476] usb 3-1: Using ep0 maxpacket: 32 [ 647.880152][ T8476] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 647.902517][ T8476] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 647.928505][ T8476] usb 3-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 647.938178][ T8476] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.946550][ T8476] usb 3-1: Product: syz [ 647.950923][ T8476] usb 3-1: Manufacturer: syz [ 647.956012][ T8476] usb 3-1: SerialNumber: syz [ 648.154741][ T5759] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 648.181996][ T8476] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 648.260974][ T8476] usb 3-1: disable ehci-hcd to run US-144 [ 648.278395][ T8476] usb 3-1: USB disconnect, device number 71 [ 648.323319][ T5759] usb 4-1: config 1 has an invalid descriptor of length 115, skipping remainder of the config [ 648.337520][ T5759] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 648.357817][ T5759] usb 4-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 648.360033][ T5885] udevd[5885]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 648.377796][ T5759] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.395265][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 648.401533][ T5759] usb 4-1: Product: syz [ 648.422842][ T5759] usb 4-1: Manufacturer: syz [ 648.433027][ T5759] usb 4-1: SerialNumber: syz [ 648.623068][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 648.623088][ T29] audit: type=1326 audit(1781018421.409:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12066 comm="syz.5.2028" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1507d9ce59 code=0x0 [ 648.668811][ T5759] usb 4-1: 0:1 : does not exist [ 648.678537][ T5759] usb 4-1: unit 6 not found! [ 648.699714][ T5759] usb 4-1: unit 2 not found! [ 648.741215][T12067] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2028'. [ 648.767580][ T5759] usb 4-1: USB disconnect, device number 59 [ 648.802054][ T5885] udevd[5885]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 648.856661][ T8476] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 648.889196][ T5688] cgroup: fork rejected by pids controller in /syz2 [ 649.038045][ T8476] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 649.071760][ T8476] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 649.090892][ T8476] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 649.107536][ T8476] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.133589][T12069] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 649.179133][ T8476] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 649.365612][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.562606][ T809] usb 1-1: USB disconnect, device number 77 [ 649.752176][ T5724] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.053689][ T5724] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.106721][ T5759] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 650.140759][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 650.154540][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 650.168318][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 650.179297][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 650.190218][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 650.303307][ T5724] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.316392][ T5759] usb 5-1: Using ep0 maxpacket: 32 [ 650.325345][ T5759] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 650.343928][T12112] netlink: 'syz.3.2045': attribute type 10 has an invalid length. [ 650.352041][ T5759] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 650.363921][T12107] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.365889][ T5759] usb 5-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 650.383117][T12112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 650.403861][ T5759] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.420478][T12112] batadv0: entered promiscuous mode [ 650.425264][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 650.430990][ T5759] usb 5-1: Product: syz [ 650.446731][T12112] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 650.457350][ T5759] usb 5-1: Manufacturer: syz [ 650.462026][ T5759] usb 5-1: SerialNumber: syz [ 650.533741][T12113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 650.547537][T12113] bond_slave_0: left promiscuous mode [ 650.552532][T12115] netlink: 'syz.0.2046': attribute type 30 has an invalid length. [ 650.562499][T12115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2046'. [ 650.573310][T12113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 650.583662][T12113] bond_slave_1: left promiscuous mode [ 650.590881][T12113] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 650.599941][T12113] batadv0: left promiscuous mode [ 650.610723][T12113] bond0 (unregistering): Released all slaves [ 650.639011][T12115] bond0: option arp_missed_max: mode dependency failed, not supported in mode balance-alb(6) [ 650.709485][ T5759] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 650.739604][ T5724] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.821994][ T5759] usb 5-1: disable ehci-hcd to run US-144 [ 650.841154][ T5759] usb 5-1: USB disconnect, device number 72 [ 650.952044][T12126] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2048'. [ 650.968883][ T5885] udevd[5885]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 650.988998][T12126] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2048'. [ 651.004510][T12126] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2048'. [ 651.348794][ T5724] bridge_slave_1: left allmulticast mode [ 651.355108][ T5724] bridge_slave_1: left promiscuous mode [ 651.363876][ T5724] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.364797][ T8476] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 651.487043][ T5759] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 651.525080][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 651.536707][ T8476] usb 6-1: Using ep0 maxpacket: 16 [ 651.559610][ T8476] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 651.576729][ T8476] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 651.586232][ T8476] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.595041][ T8476] usb 6-1: Product: syz [ 651.599446][ T8476] usb 6-1: Manufacturer: syz [ 651.604148][ T8476] usb 6-1: SerialNumber: syz [ 651.611807][ T8476] usb 6-1: config 0 descriptor?? [ 651.621599][ T8476] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 651.631082][ T8476] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 651.665506][ T5724] bond0 (unregistering): (slave veth5): Releasing backup interface [ 651.668942][ T5759] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 651.698245][ T5759] usb 1-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 651.712690][ T5724] bond0 (unregistering): Released all slaves [ 651.713914][ T5759] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.749964][ T5759] usb 1-1: config 0 descriptor?? [ 651.753602][ T5724] bond1 (unregistering): Released all slaves [ 651.768913][ T5759] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 651.939870][ T5724] tipc: Disabling bearer [ 651.948545][ T5724] tipc: Left network mode [ 652.033160][ T8476] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 652.205895][ T24] usb 1-1: USB disconnect, device number 78 [ 652.231393][ T8476] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 652.239640][ T4949] Bluetooth: hci4: command tx timeout [ 652.245848][ T8476] em28xx 6-1:0.0: board has no eeprom [ 652.345709][T12157] SET target dimension over the limit! [ 652.359823][ T8476] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 652.407906][ T8476] em28xx 6-1:0.0: dvb set to bulk mode. [ 652.440734][ T5725] em28xx 6-1:0.0: Binding DVB extension [ 652.497788][ T8476] usb 6-1: USB disconnect, device number 16 [ 652.515256][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 652.536306][ T8476] em28xx 6-1:0.0: Disconnecting em28xx [ 652.922965][ T5725] em28xx 6-1:0.0: Registering input extension [ 652.963266][ T8476] em28xx 6-1:0.0: Closing input extension [ 653.144485][ T5752] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 653.256706][ T8476] em28xx 6-1:0.0: Freeing device [ 653.305716][ T5752] usb 4-1: Using ep0 maxpacket: 32 [ 653.337259][ T5752] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 653.351429][ T5752] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 653.372281][ T5752] usb 4-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 653.398980][ T5752] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.420143][T12197] binder_alloc: 12196: binder_alloc_buf, no vma [ 653.431491][ T5752] usb 4-1: Product: syz [ 653.443798][ T5752] usb 4-1: Manufacturer: syz [ 653.449804][ T5752] usb 4-1: SerialNumber: syz [ 653.502052][T12110] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.510280][T12110] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.522486][T12110] bridge_slave_0: entered allmulticast mode [ 653.535078][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 653.555487][T12110] bridge_slave_0: entered promiscuous mode [ 653.617238][ T5724] hsr_slave_0: left promiscuous mode [ 653.627293][ T5724] hsr_slave_1: left promiscuous mode [ 653.639838][ T5724] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 653.651855][ T5724] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 653.663578][ T5724] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 653.688789][ T5752] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 653.697475][ T5724] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 653.756494][ T5724] veth1_macvtap: left promiscuous mode [ 653.769295][ T5724] veth0_macvtap: left promiscuous mode [ 653.785819][ T5724] veth1_vlan: left promiscuous mode [ 653.791284][ T5724] veth0_vlan: left promiscuous mode [ 653.819397][ T5752] usb 4-1: disable ehci-hcd to run US-144 [ 653.838628][ T5752] usb 4-1: USB disconnect, device number 60 [ 653.943095][ T5885] udevd[5885]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 653.948961][T12208] FAULT_INJECTION: forcing a failure. [ 653.948961][T12208] name failslab, interval 1, probability 0, space 0, times 0 [ 653.980036][ T809] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 654.006988][T12208] CPU: 1 UID: 0 PID: 12208 Comm: syz.0.2071 Tainted: G L syzkaller #0 PREEMPT(full) [ 654.007022][T12208] Tainted: [L]=SOFTLOCKUP [ 654.007029][T12208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 654.007041][T12208] Call Trace: [ 654.007049][T12208] [ 654.007058][T12208] dump_stack_lvl+0xe8/0x150 [ 654.007088][T12208] should_fail_ex+0x412/0x560 [ 654.007118][T12208] should_failslab+0xa8/0x100 [ 654.007145][T12208] __kmalloc_noprof+0xe8/0x760 [ 654.007175][T12208] ? sock_kmalloc+0xd6/0x160 [ 654.007196][T12208] ? hash_recvmsg+0x130/0x840 [ 654.007225][T12208] sock_kmalloc+0xd6/0x160 [ 654.007251][T12208] hash_recvmsg+0x1d4/0x840 [ 654.007282][T12208] ? __pfx_hash_recvmsg+0x10/0x10 [ 654.007307][T12208] sock_recvmsg_nosec+0x10c/0x140 [ 654.007338][T12208] ____sys_recvmsg+0x3e3/0x4a0 [ 654.007370][T12208] ? __pfx_____sys_recvmsg+0x10/0x10 [ 654.007410][T12208] ? import_iovec+0x73/0xa0 [ 654.007440][T12208] ___sys_recvmsg+0x215/0x590 [ 654.007469][T12208] ? __pfx____sys_recvmsg+0x10/0x10 [ 654.007523][T12208] ? __fget_files+0x2a/0x420 [ 654.007581][T12208] do_recvmmsg+0x334/0x800 [ 654.007612][T12208] ? __pfx_do_recvmmsg+0x10/0x10 [ 654.007647][T12208] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 654.007690][T12208] __x64_sys_recvmmsg+0x198/0x250 [ 654.007717][T12208] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 654.007753][T12208] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.007777][T12208] do_syscall_64+0x174/0x580 [ 654.007797][T12208] ? trace_irq_disable+0x3b/0x140 [ 654.007826][T12208] ? clear_bhb_loop+0x40/0x90 [ 654.007853][T12208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.007872][T12208] RIP: 0033:0x7f8c61d9ce59 [ 654.007893][T12208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 654.007911][T12208] RSP: 002b:00007f8c62c82028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 654.007933][T12208] RAX: ffffffffffffffda RBX: 00007f8c62015fa0 RCX: 00007f8c61d9ce59 [ 654.007949][T12208] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000004 [ 654.007963][T12208] RBP: 00007f8c62c82090 R08: 0000000000000000 R09: 0000000000000000 [ 654.007976][T12208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 654.007989][T12208] R13: 00007f8c62016038 R14: 00007f8c62015fa0 R15: 00007f8c6213fa48 [ 654.008021][T12208] [ 654.321981][ T4949] Bluetooth: hci4: command tx timeout [ 654.398356][ T809] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 654.409642][ T809] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 654.419494][ T809] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 654.428740][ T809] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.441967][ T809] usb 6-1: config 0 descriptor?? [ 654.548848][T12210] binder: 12209:12210 ioctl c00c6211 0 returned -14 [ 654.664821][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.667287][ T809] cm6533_jd 0003:0D8C:0022.0012: unknown main item tag 0x0 [ 654.703801][T12221] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2075'. [ 654.711806][ T809] cm6533_jd 0003:0D8C:0022.0012: unknown main item tag 0x0 [ 654.768321][ T809] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0D8C:0022.0012/input/input25 [ 654.875042][ T809] cm6533_jd 0003:0D8C:0022.0012: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 654.935273][ T809] usb 6-1: USB disconnect, device number 17 [ 655.124011][T12225] fido_id[12225]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 655.175732][ T5724] team0 (unregistering): Port device team_slave_1 removed [ 655.231064][ T5724] team0 (unregistering): Port device team_slave_0 removed [ 655.459066][T12110] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.473343][T12110] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.485625][T12110] bridge_slave_1: entered allmulticast mode [ 655.496994][T12110] bridge_slave_1: entered promiscuous mode [ 655.506183][ T5294] 8021q: adding VLAN 0 to HW filter on device eth5 [ 655.595306][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 655.704965][T12110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 655.718092][ T5752] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 655.739380][T12110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 655.874481][ T5752] usb 4-1: Using ep0 maxpacket: 32 [ 655.882507][ T5752] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 655.903501][ T5752] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 655.917056][ T5752] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 655.919633][T12110] team0: Port device team_slave_0 added [ 655.926628][ T5752] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.930602][ T5752] usb 4-1: config 0 descriptor?? [ 655.932799][ T5759] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 655.948389][ T5752] hub 4-1:0.0: USB hub found [ 655.964169][T12110] team0: Port device team_slave_1 added [ 656.046547][T12110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 656.060494][ T5724] IPVS: stop unused estimator thread 0... [ 656.070739][T12110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 656.136512][ T5759] usb 1-1: Using ep0 maxpacket: 32 [ 656.140962][T12110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 656.148540][ T5759] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 656.187224][T12110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 656.208757][T12110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 656.213085][ T5759] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 656.308240][ T5759] usb 1-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 656.320420][ T5759] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.327767][T12110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 656.339973][ T5759] usb 1-1: Product: syz [ 656.344379][ T5759] usb 1-1: Manufacturer: syz [ 656.355421][ T5759] usb 1-1: SerialNumber: syz [ 656.395052][ T4949] Bluetooth: hci4: command tx timeout [ 656.635481][ T5759] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 656.724785][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 656.748656][T12110] hsr_slave_0: entered promiscuous mode [ 656.770698][T12110] hsr_slave_1: entered promiscuous mode [ 656.789256][T12110] debugfs: 'hsr0' already exists in 'hsr' [ 656.806851][ T5759] usb 1-1: disable ehci-hcd to run US-144 [ 656.814464][T12110] Cannot create hsr debugfs directory [ 656.857502][ T5759] usb 1-1: USB disconnect, device number 79 [ 657.364445][ T24] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 657.534652][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 657.546621][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 657.566207][ T24] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 657.593996][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 657.613206][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 657.628136][ T24] usb 5-1: SerialNumber: syz [ 657.734963][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 657.793171][ T5294] 8021q: adding VLAN 0 to HW filter on device eth6 [ 657.986199][ T5725] usb 5-1: USB disconnect, device number 73 [ 658.309478][ T5752] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 658.357841][ T5752] usbhid 4-1:0.0: can't add hid device: -71 [ 658.395689][ T5752] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 658.475550][ T4949] Bluetooth: hci4: command tx timeout [ 658.483240][ T5752] usb 4-1: USB disconnect, device number 61 [ 658.660567][T12309] xt_CT: You must specify a L4 protocol and not use inversions on it [ 658.765404][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.084955][ T29] audit: type=1800 audit(1781018431.869:1043): pid=12333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2104" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 659.260904][T12339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2107'. [ 659.260978][T12110] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 659.309602][T12110] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 659.331993][T12110] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 659.385354][T12110] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 659.428789][T12110] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 659.485185][T12110] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 659.507389][T12110] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 659.534460][T12110] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 659.705610][ T24] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 659.845058][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.878985][T12110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 659.885994][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 659.893281][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 219, changing to 11 [ 659.908582][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50507, setting to 1024 [ 659.956722][ T24] usb 4-1: New USB device found, idVendor=25dd, idProduct=f3d2, bcdDevice=d2.37 [ 659.977301][T12110] 8021q: adding VLAN 0 to HW filter on device team0 [ 659.989040][ T24] usb 4-1: New USB device strings: Mfr=84, Product=45, SerialNumber=0 [ 660.006777][T12371] x_tables: unsorted entry at hook 3 [ 660.008051][ T24] usb 4-1: Product: syz [ 660.018705][ T24] usb 4-1: Manufacturer: syz [ 660.019940][T10951] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.030588][T10951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 660.051063][ T24] usb 4-1: config 0 descriptor?? [ 660.069579][T10951] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.077124][T10951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 660.085493][T12345] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 660.248326][T12110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 660.465638][T12110] veth0_vlan: entered promiscuous mode [ 660.518007][T12110] veth1_vlan: entered promiscuous mode [ 660.559905][ T24] hid-generic 0003:25DD:F3D2.0013: hiddev0,hidraw0: USB HID v0.00 Device [syz syz] on usb-dummy_hcd.3-1/input0 [ 660.610723][T12393] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2118'. [ 660.648261][T12110] veth0_macvtap: entered promiscuous mode [ 660.703851][T12393] ip6tnl1: entered allmulticast mode [ 660.734719][T12110] veth1_macvtap: entered promiscuous mode [ 660.796319][T12345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2109'. [ 660.806274][T12110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 660.825304][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 660.850086][T12345] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2109'. [ 660.861131][T12110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 660.905999][T12345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.915070][ T5724] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.927274][ T5724] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.936335][T12345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.959066][T10944] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.967108][ T5752] usb 4-1: USB disconnect, device number 62 [ 661.008685][T10944] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.373614][T10946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.409473][T10946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.577514][T10944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.610335][T10944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.844645][ T24] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 661.877861][T12428] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2035'. [ 661.894945][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 662.014693][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 662.026041][ T24] usb 6-1: config 0 has an invalid interface number: 186 but max is 0 [ 662.035935][ T24] usb 6-1: config 0 has no interface number 0 [ 662.042405][ T24] usb 6-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 662.060884][ T24] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 662.092661][ T24] usb 6-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 662.142755][ T24] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 662.179386][ T24] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 662.190142][ T5613] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 662.220113][ T24] usb 6-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 662.263191][ T24] usb 6-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 662.280542][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.289890][ T24] usb 6-1: Product: syz [ 662.294227][ T24] usb 6-1: Manufacturer: syz [ 662.299782][ T24] usb 6-1: SerialNumber: syz [ 662.319141][ T24] usb 6-1: config 0 descriptor?? [ 662.369085][ T5613] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 662.381336][ T5613] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.401011][ T5613] usb 3-1: Product: syz [ 662.414478][ T5613] usb 3-1: Manufacturer: syz [ 662.422544][ T5613] usb 3-1: SerialNumber: syz [ 662.447341][ T5613] usb 3-1: config 0 descriptor?? [ 662.462768][ T5613] hub 3-1:0.0: bad descriptor, ignoring hub [ 662.473562][ T5613] hub 3-1:0.0: probe with driver hub failed with error -5 [ 662.567641][T12417] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2124'. [ 662.613745][T12417] bridge0: port 3(geneve0) entered disabled state [ 662.623077][T12417] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.659885][T12438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 662.750500][ T5613] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 662.818187][T12438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 662.842914][ T5613] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 662.859014][ T5613] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 662.871541][ T5613] usb 3-1: media controller created [ 662.915194][T12417] ------------[ cut here ]------------ [ 662.920804][T12417] usb 3-1: BOGUS control dir, pipe 80004880 doesn't match bRequestType c0 [ 662.926505][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 662.929488][T12417] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1053/0x18b0, CPU#1: syz.5.2124/12417 [ 662.951508][T12417] Modules linked in: [ 662.956080][T12417] CPU: 1 UID: 0 PID: 12417 Comm: syz.5.2124 Tainted: G L syzkaller #0 PREEMPT(full) [ 662.967187][T12417] Tainted: [L]=SOFTLOCKUP [ 662.971621][T12417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 662.981961][T12417] RIP: 0010:usb_submit_urb+0x1115/0x18b0 [ 662.987733][T12417] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c1 f2 ff ff 89 e9 [ 663.007875][T12417] RSP: 0018:ffffc90003f87948 EFLAGS: 00010246 [ 663.014133][T12417] RAX: 0000000000000000 RBX: ffff88803576f500 RCX: 0000000080004880 [ 663.022206][T12417] RDX: ffff888035992420 RSI: ffffffff8c80c3a0 RDI: ffffffff903da2f0 [ 663.030324][T12417] RBP: 1ffff1100425e480 R08: 00000000000000c0 R09: 0000000000000000 [ 663.038670][T12417] R10: ffffc90003f87a40 R11: fffff520007f0f54 R12: ffff888050fc5100 [ 663.046738][T12417] R13: ffff8880212f2400 R14: 0000000080004880 R15: ffff888035992420 [ 663.054794][T12417] FS: 00007f1508d1b6c0(0000) GS:ffff8881253a0000(0000) knlGS:0000000000000000 [ 663.063791][T12417] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 663.070583][T12417] CR2: 000000110c40296e CR3: 00000000354f0000 CR4: 00000000003526f0 [ 663.078675][T12417] Call Trace: [ 663.082111][T12417] [ 663.085126][T12417] ? __init_swait_queue_head+0xa9/0x150 [ 663.090742][T12417] usb_start_wait_urb+0x13f/0x5b0 [ 663.096199][T12417] ? rcu_is_watching+0x15/0xb0 [ 663.101139][T12417] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 663.106754][T12417] ? trace_kmalloc+0x2a/0xf0 [ 663.111394][T12417] usb_control_msg+0x234/0x3e0 [ 663.116250][T12417] dib0700_i2c_xfer+0xbb2/0xf80 [ 663.121259][T12417] __i2c_transfer+0x79a/0x1f70 [ 663.126292][T12417] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 663.132161][T12417] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 663.138033][T12417] ? i2c_transfer+0xc8/0x2d0 [ 663.142770][T12417] i2c_transfer+0x1cc/0x2d0 [ 663.147343][T12417] i2cdev_ioctl_rdwr+0x460/0x740 [ 663.152365][T12417] i2cdev_ioctl+0x6a5/0x880 [ 663.157150][T12417] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 663.162305][T12417] ? __fget_files+0x3a0/0x420 [ 663.167123][T12417] ? __fget_files+0x2a/0x420 [ 663.171800][T12417] ? bpf_lsm_file_ioctl+0x9/0x20 [ 663.176815][T12417] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 663.181898][T12417] __se_sys_ioctl+0xfc/0x170 [ 663.186679][T12417] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.192785][T12417] do_syscall_64+0x174/0x580 [ 663.197512][T12417] ? trace_irq_disable+0x3b/0x140 [ 663.202778][T12417] ? clear_bhb_loop+0x40/0x90 [ 663.207789][T12417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.213756][T12417] RIP: 0033:0x7f1507d9ce59 [ 663.218505][T12417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 663.238462][T12417] RSP: 002b:00007f1508d1b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 663.247304][T12417] RAX: ffffffffffffffda RBX: 00007f1508015fa0 RCX: 00007f1507d9ce59 [ 663.255522][T12417] RDX: 00002000000000c0 RSI: 0000000000000707 RDI: 000000000000000c [ 663.263639][T12417] RBP: 00007f1507e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 663.271700][T12417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 663.279944][T12417] R13: 00007f1508016038 R14: 00007f1508015fa0 R15: 00007f150813fa48 [ 663.288030][T12417] [ 663.291087][T12417] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 663.298374][T12417] CPU: 1 UID: 0 PID: 12417 Comm: syz.5.2124 Tainted: G L syzkaller #0 PREEMPT(full) [ 663.309328][T12417] Tainted: [L]=SOFTLOCKUP [ 663.313686][T12417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 663.323741][T12417] Call Trace: [ 663.327035][T12417] [ 663.330075][T12417] vpanic+0x56c/0xa60 [ 663.334090][T12417] ? __pfx__printk+0x10/0x10 [ 663.338685][T12417] ? __pfx_vpanic+0x10/0x10 [ 663.343200][T12417] ? is_bpf_text_address+0x292/0x2b0 [ 663.348569][T12417] ? is_bpf_text_address+0x26/0x2b0 [ 663.353961][T12417] panic+0xc5/0xd0 [ 663.357687][T12417] ? __pfx_panic+0x10/0x10 [ 663.362223][T12417] __warn+0x315/0x4c0 [ 663.366241][T12417] ? usb_submit_urb+0x1053/0x18b0 [ 663.371318][T12417] ? usb_submit_urb+0x1053/0x18b0 [ 663.376381][T12417] __report_bug+0x29a/0x540 [ 663.380948][T12417] ? usb_submit_urb+0x1053/0x18b0 [ 663.385989][T12417] ? __pfx___report_bug+0x10/0x10 [ 663.391018][T12417] ? lockdep_hardirqs_on+0x7a/0x110 [ 663.396218][T12417] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 663.402079][T12417] report_bug_entry+0x19a/0x290 [ 663.407071][T12417] ? usb_submit_urb+0x1115/0x18b0 [ 663.412108][T12417] ? usb_submit_urb+0x111a/0x18b0 [ 663.417138][T12417] handle_bug+0xce/0x200 [ 663.421433][T12417] exc_invalid_op+0x1a/0x50 [ 663.425946][T12417] asm_exc_invalid_op+0x1a/0x20 [ 663.430797][T12417] RIP: 0010:usb_submit_urb+0x1115/0x18b0 [ 663.436460][T12417] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c1 f2 ff ff 89 e9 [ 663.456430][T12417] RSP: 0018:ffffc90003f87948 EFLAGS: 00010246 [ 663.462552][T12417] RAX: 0000000000000000 RBX: ffff88803576f500 RCX: 0000000080004880 [ 663.470526][T12417] RDX: ffff888035992420 RSI: ffffffff8c80c3a0 RDI: ffffffff903da2f0 [ 663.478514][T12417] RBP: 1ffff1100425e480 R08: 00000000000000c0 R09: 0000000000000000 [ 663.486510][T12417] R10: ffffc90003f87a40 R11: fffff520007f0f54 R12: ffff888050fc5100 [ 663.494508][T12417] R13: ffff8880212f2400 R14: 0000000080004880 R15: ffff888035992420 [ 663.502505][T12417] ? usb_submit_urb+0x10a4/0x18b0 [ 663.507538][T12417] ? __init_swait_queue_head+0xa9/0x150 [ 663.513101][T12417] usb_start_wait_urb+0x13f/0x5b0 [ 663.518129][T12417] ? rcu_is_watching+0x15/0xb0 [ 663.522896][T12417] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 663.528446][T12417] ? trace_kmalloc+0x2a/0xf0 [ 663.533048][T12417] usb_control_msg+0x234/0x3e0 [ 663.537814][T12417] dib0700_i2c_xfer+0xbb2/0xf80 [ 663.542670][T12417] __i2c_transfer+0x79a/0x1f70 [ 663.547427][T12417] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 663.553248][T12417] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 663.559073][T12417] ? i2c_transfer+0xc8/0x2d0 [ 663.563690][T12417] i2c_transfer+0x1cc/0x2d0 [ 663.568263][T12417] i2cdev_ioctl_rdwr+0x460/0x740 [ 663.573255][T12417] i2cdev_ioctl+0x6a5/0x880 [ 663.577765][T12417] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 663.582793][T12417] ? __fget_files+0x3a0/0x420 [ 663.587472][T12417] ? __fget_files+0x2a/0x420 [ 663.592067][T12417] ? bpf_lsm_file_ioctl+0x9/0x20 [ 663.597088][T12417] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 663.602134][T12417] __se_sys_ioctl+0xfc/0x170 [ 663.606847][T12417] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.612943][T12417] do_syscall_64+0x174/0x580 [ 663.617569][T12417] ? trace_irq_disable+0x3b/0x140 [ 663.622606][T12417] ? clear_bhb_loop+0x40/0x90 [ 663.627330][T12417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.633275][T12417] RIP: 0033:0x7f1507d9ce59 [ 663.637710][T12417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 663.657334][T12417] RSP: 002b:00007f1508d1b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 663.666037][T12417] RAX: ffffffffffffffda RBX: 00007f1508015fa0 RCX: 00007f1507d9ce59 [ 663.674020][T12417] RDX: 00002000000000c0 RSI: 0000000000000707 RDI: 000000000000000c [ 663.682010][T12417] RBP: 00007f1507e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 663.690008][T12417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 663.697992][T12417] R13: 00007f1508016038 R14: 00007f1508015fa0 R15: 00007f150813fa48 [ 663.705992][T12417] [ 663.709312][T12417] Kernel Offset: disabled [ 663.713650][T12417] Rebooting in 86400 seconds..