last executing test programs: 12.5182051s ago: executing program 2 (id=1373): r0 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r0, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x97, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6151be0000612f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0c2088be00060001bf3f030b7d27010088a80090000b003e000086dd000986dd", @ANYBLOB="36ed"], 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000340)={0x6, 0x0, [{0x7000, 0x4, &(0x7f0000000100)=""/4}, {0x50000, 0x31, &(0x7f0000000140)=""/49}, {0x8000000, 0x0, &(0x7f0000000180)}, {0x0, 0xd, &(0x7f00000001c0)=""/13}, {0xffffffff, 0x16, &(0x7f0000000200)=""/22}, {0x5000, 0xc7, &(0x7f0000000240)=""/199}]}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'sit0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x8000, 0x7, 0xfffffffc, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x66, 0x0, 0x4, 0x5e55b37311de6d89, 0x0, @multicast2, @empty}}}}) 12.008048717s ago: executing program 2 (id=1378): r0 = fsopen(&(0x7f0000000580)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8e) openat(r1, &(0x7f0000000540)='./file0\x00', 0x142, 0x10) 11.60718946s ago: executing program 2 (id=1380): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0x80000000}, {0x60, 0x8, 0x4}, {0x0, 0x0, 0x8}, {0x2, 0x0, 0x8}, {0x6, 0x0, 0x0, 0x10000000}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x50) poll(&(0x7f0000000200)=[{r1, 0x400}], 0x1, 0x7) request_key(&(0x7f0000000240)='syzkaller\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x81, 0xb6, 0x77, 0x40, 0x61c, 0xc084, 0xda9f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x27, 0x7, 0x0, 0x5, "", [{{0x9, 0x4, 0xa5, 0xf5, 0x2, 0x42, 0xe5, 0x24, 0x60, [], [{{0x9, 0x5, 0xc, 0x0, 0x8, 0x2, 0x9, 0x9}}, {{0x9, 0x5, 0x8, 0x4, 0x40, 0x4, 0x3, 0x4}}]}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 10.663475845s ago: executing program 0 (id=1384): r0 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r0, 0x0, 0x16, &(0x7f0000000000)=0x9, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x4b, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x9, 0x35dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x9, 0x7}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x7, 0x6517ab89, 0xffffffff, 0x2, 0x400401, 0x7, 0x0, 0x3, 0x79c43107}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x20000800) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0x4}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240448a0}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000440)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000480)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000500)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000540)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmmsg$inet(r0, &(0x7f0000000040)=[{{&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000100)="a9050000002074640000000000003552bde5c064c6", 0x15}, {&(0x7f0000000140)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}, 0xf5ffffff}], 0x1, 0x0) 9.02251594s ago: executing program 2 (id=1388): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1, 0xe, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], &(0x7f0000001340)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x1, 0x8, &(0x7f00000014c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000001500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001540)={{r3}, &(0x7f0000001580), &(0x7f00000015c0)=r0}, 0x20) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001600)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x33fe0}, 0x80) 8.958670008s ago: executing program 0 (id=1389): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$video(0x0, 0x3, 0x40) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0xf02, 0xc, 0x2, 0x0, 0xff}) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x48}) io_setup(0x8, &(0x7f0000000680)=0x0) io_submit(r2, 0x1, &(0x7f00000006c0)=[&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x4, 0x4, 0x0, {0x0, 0x2710}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x4, 0x2}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)=@userptr={0x0, 0x1, 0x4, 0x80, 0xffffffff, {0x0}, {}, 0x0, 0x2, {&(0x7f0000401000)}, 0x400000}) socket$netlink(0x10, 0x3, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/devices.allow\x00', 0x2000, 0x2) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280), 0x1c3902, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x2) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x6, 0x8, 0x3, 0x0, 0xa, 0x1, 0xfffffe0000000001, 0x1000fa11, 0xffffffff}, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="2c0000002600090122bd7008faffffff0200000008003f80040000000800030046"], 0x2c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x22008870) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4814}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f00000005c0)={0x0, @frame_sync}) sendmsg$NFT_BATCH(r7, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a70000000090a010400000000000000000a0000020900020073797a310000000008000a40fffffffc0900010073797a310000000008000540000000242c00128028000180090001006c617374000000000400028014ccff40a7000100636f756e746572000400028008000340000001"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x200400d0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) userfaultfd(0x801) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="d50b46c47182c5ae53a6b8f4b8b8ae35f4c3f4daff3fef4e1ac422d2545da4ed615f87775bd14238ca48d837b7c8b29e6147d07cb0ca9c8b716577f8680f16e75eea80bf895d03c702cc549c6b05f08d124637b5e3dc2fb3ab5270fccfb15652a9bb9878b3ac9e3cf3fdd270b1353762b875834ff92f1e94d926e2326230495fb98c4d695b31f33de8e08b50947832c5bfc90d44e969100516880cf8a0d1e1d755d084ae164774910b398ba3ca32f2e2133cc70107c7d98b479bb41362bff4e5655fc03d1f21dead2d0c6243e5a347761fa6c0c9200d260d17d37bb84d90d67df227c4308f2225c5fd6261d4a11f302c902b169108b3db8fa211664e5e0d99152b4a55e0477f0fa0c1353f3aad0b2b5ba41a5b4c0ac2c217ec8c6d4c0a9cb3989c7eb3dab0c1bc16be741e064ae0d7da97e868d8bc928641b964f17a6dd8e552063cc54ba0574ba3e5737aa373905d0944dd92238122620f1823bf10a726d188897cb914d7056d4e60ac37bf58e14da35d4fa98b5485a8e2155f5a708cf48630a01f8e39fe91d67defe48f7bfcb5c25ffa132c0b84d8b593828777b4896f0a77982f92fd233029a0abc3ff135fd67671c52749c99496804f74e68e6b2b99d9bef140bfbf5e7fe5b8b4e07d2f8027f9cd374066a01ff7be1c6d066d10400512df1fca18863613433297e80dd9bf365f8fb84cd651f9af57b0d29a8e551b345b82f65203b6b5647465fcb7589742acbc4da2681bda32b9c1937b7f96d4b9584d0e7d862ec5d436bbf640095ae7cb6f2cd27f78374bf555080167cae040a136853a2f75dd2eb7eb1057390d10d63a617bb454bafb332e5cebcd96e38012538e8b33148aa104a546d1b5b6d01777c8555bc64b7e56b954c7548713837f8b1cfccfaf03e5c6055d96bd732aed9712393e92e778719c3f039b1c47e366dcf78b129d204a7ad2b669879fb75fd623e2b97afc1cbed0e475d952e3d4f21cbfcfc5b5281f2c5da0fd7632d3744d465640a062fc9233748fb8ef7d14bfde9612e060ca87b25985aac1d11334a6fdf857028973cbd2a82c0f01ef47195abba4e1aeaba00eb5603cfbed996e4163ea5e3d58880e176ebfbd540b7e8fefbc00b1cbba56379122ac63a53afb1166efa0ddc27c7700ce6db53d4f4fd2fa43d2cabbc2a778a1ed1ffa44a9c76d1a1b0564c89e8260d16315654606e6e1927ab3689f5c6fe3d477a6ffaa9b43b23efcad02d51e2e1e7eea2f4d6fd7abc6685dbe41231d21147cedf744ff58067a10dd13fc318ac96bf4d766976bbd8398e3d877d71c6805ea1f9099243dbc3c964e3f02bb5e0a4f88e81ce1fddc9e54d8cb96b8db1fe7ca088b02869977e4bc7b46a144812adb17b11259856ed6e8f4821f14e9d4a7b7e33526939db2c1ae8e4ac5fb03a36e120e95222a81c686912e9a86a6b72e74ace07193ea64013a29323118e7c51dbab740852111d3dcaa068f8419bdb54979ca69f261cc08ae7e7db38a6448a49d7ee14ce25005c9621203c532b92dd3f60dee03828ae0ed38cdc38662152ddbbbd89581ded731a56bd196a276c5cbee9ff21ebab7bb54596869fcbc4a56f7776bc1369e1ba0211a0e1a84cdfc74d2772d99a9d7866b8c67b57b34abe1825f9ec79b0be891414f6d707c4a4d5c831245dddd722bfff12e06db7599746ea93b1185e8f2a36765d3e5542071eb99821cd5e63c705dde131b306c9fe1449aa9804c88f297af2063514e05ef313983d0ceb5c700b6f71480c15c6a35dc458b40923fd76bb9f122c80e0b0e4e01b129660dde6980659d21334374fc983dfab53a3e068d5157665a6eb0a834e6b0028515eddae1dd8a7cf6ad413e307ca77dc1588e0afca0b96acbeff4ff7d3e376c309e23273aaf5e411669035f4f0cd4d4d867602acb4d1077764d5c881947cfb3cd7c6fe97f9c874021ec8c92e267be2f10b729b54ddd4ba6c8ce291317bd747b4c3913f829377b8dd6adc2cd7eb45580de62637255f01521d855d942a504cb07a625542a598943838a7e6049b11a44b7687788760d7b60d2fd6307944de25b7b07e95da4b1e157d577de0bd390ef632329952f1eab046a8fdbc94368a0434ba7acf868c170a514ab2c0e5b964d5df6ab4961e3cbe752ca22ecece759c728b8742963b76a5b4071a310b3613349ca8a97006969c83d73d0ed853d1441519aec15c54cf21925751c5ff15df5492019a22c4927596f04bcf53b8f4f33b0151871299cd54162b1b483ee915f8ca7c12bcc81322ba1c7954dbef46440ebc9e5e03a6e5b7f1e8e9f782d820b61b15ec2437a01ccb4418da437dc0c6233c0693ce9f64349ce6c722e17463e0894d7d8929470ffdf94ddb0770a835edddb7625e08179883a0c36598043f397abb842110f698a2e1cd4001002ef0b215bbc24cc1a47bcba7d346628682b36178e52bc6ffe499ea5d2ff61c865e87f737699f91aee15bd5f97fb0d5db755dcf0fa6831f8e4d5ef2c2a0c962f5c7c8ea5ed7b7bcc1297ab532e5ba6c0a8597eca131af3c2ce619d271d64753c524de3d809e499b553bab523191c3f4f04add1af01a16e80e132de87bf45997a0cbc253cc343acfa38515225fc18dc216fbab409bb51ab9de5f25efc692e1519ce6ba5a6b69f6b9af5c2dcf6e83f0a0b48fbeadf27a8b4e76222daf0a89a86acdff6de88f0bb0ae54573460017ba8e226b2eb4d2b9a371f0e6e466b79bd7d86913e881122dfc945516ca01a19d03bb1860d64c99c7e03ac531b45652ef9a3602a790bb6ae408415c59df1c58aa8cbd7fac8a302c0ee74e0733d977cd72a6e9b306b4d1fee6b765d32d73c5eadfe5f88b00e1755620386777ce44959cc2fb6e634dcd76b545d4abd6fdafdc95527f36f0b99fff18244ec42de6574f14cbb7d2b43c092c7b2d1aaf40a529dca4107a08261daa235bb715b729a4b6dedfb9493bea546f3cad7844090ec42cda8b80270709202068514b1fd9fa582ffd9c87dfe3c3743adca0f6a2aa73c69e668760219870593f0fb55918d3b565805add5f5208477f18e9701d3cea06824f38a03c9bb3ab21fc55cfe6e6042bffe79f9027712993df60694322ec538709570e028ddd3a8a1d96d71272b9a45680e34c33cc3fca51651ecbb1dab3a920a66c23b2d10d29d57ad412c6cc966604a0d3e0e80dec1a61b68896925fce508bf02a1cc09bdf1918ca4cf2da93be90f8689d72a57fbc966f95833f5331975d47f948cccfa8f954eea64164216e88e6ba3f88ddf96a528f39e0c5c15ad5491adf75a311cd4831e03be07220bbcde98aad8a43cfaea372436e0e9d1d99f5b02fa53f611676dbc7a6f33f315f3716aa3deee3b358049717576486aec556ccc6ebec9203822cf82d9f8c1df204efbbe96579d463c584ecd55eebbe3d171899f3cd26701ba473f99ea20df550c8ea118bbdcb3861d7f8e6d516c0684639191292e03d7d520d9ba80492994d936a2495cd8a397967537831a2f609f5c23d8db2dd5499185dd93573d74b124c50fef3598f9b0c43815dcc4c57ba09cc595d0281d67cab77e6d3f7a39b0f858f6b5b5036d1be377057e1b89774482c014c5f1fd62813a7c2693f10a83bd5f645e21d07336c5c8ffc4f9abb6adffbfc7e61ab4929afe53f9a5ce0888527d23bc310f1d04223504eb8ec71847431e5e6efb270077333bdb8214f2eae949bfd434f84f43ed25c28fee9d4fed971492af4c0b5e6a50cc1803a9dbf49aa83ce08110385c7eaa490f4d243e1174ee4cae1db954a6d310a6b2a0aa3b108d6fff5fc7b95e198cf2d511d72dd4efa5ebd3489f67c32fd402f1a9981f712ed5720eddf36e0d1978439ec8c386c7aee947a8bc806d3293460c7404150d7dfefb499ca135048047897a68592b919733a39877b1eca2b35c01b2f43951d5b7b2199670003db05212844e885017b931677fb69cc2eeee5f9ae7d3d8958c78e7e596f95d2ff66c3d85ed1d97b7e948a0f9d0c50738c3b141193f7badd8c03fc20026cc993b576d1902878df90b385127a44ed74a08989c359a3519e93af4178d5ac0d638d4ab032e18c04c5032c255593f5ae6b2b0b93c68ed725d52fa42146b5a4a6d2c637d03525d7542ef27bc0c37bb8b4fd1207e8d6c5e09c33bf70697655af5f80c405c14db6053b1b9519b44e7260ab4843640b19b37a8d7f5df65cd4f4c4d5256428c827dc6a14ea6d097d355016856e785165e5a627644b25d81f3cefa7e6c21a18e6f8d719f04a2cb915b49d64dc89f7b5d18d601d128a73ac02d5bee634d82988141bf320d1a6ed0ecd7f3274076f7dc06c223e3b3bd6c9c27ecda1b21f00fb657c82501d434bc8c2d12fe2f68b118cdbf528006611af2d1497f1634410e39b86d98b1204ed8655eacf8459ec4ec4849c81cf2e93a94e5c3c2a6ce672e789842519f41faada235dca1f985a8d4481acba4bfc9200632cd9aaef8f94a49de941215175e4950b9232bfa071e1710e85cec2b632e16f01031331151ca3033edccf4dcaf9c89523c0830d2856e7d9239165aaf473bebd786ed84d3a047d21f5474586b3900df14ceaa75be030d2ce351f4f58e87e0e8176d56ba7a63d7ffb9a53778a55ebac90ccf53ff71c01533e8bb1a3f5ad306609245b74375dc7bc7363d186734bb2252f4a63a7e68951d01ca469611f0446193450ec406f06df6c8a94f44fb4a03ebac3742763012ff9bc352cabc80239a6b7b1e5848c199ab11e968f5524dc24f9a1970c9742e72e0a2c9ccb8b0266b10f4c2e34311b73454ba5f3534ec85fa2a3f8727c2f50d7cf41e3e1dbb4b8720b12a39ce7637c25599ef2c9231780127d245b64dadeaa6d34fe2ca0f410767c366209db50e91f35bbc1734d3ba23b4493465a594f91b6994490619178df655811249d1a34b66fc586fe03f43db1dc15ddd6ffc2837c9bfea3cef92b8c2053d84d416733c77c8ec9a196d579a0fb57208e0e5562b068512b6a22f633f8ac5b5f601acc48c38b65a96d71b0b3be4fb665436336a124ba742985d02868bca635918dfe2db3afa75a03ba7d16a64108912a47e0b02d1fbdf5bea456f6f2f90d46b59946661e0e9900823e1fa0a2f847c3affb10c0a7fb123ea2cd3715fa20870bf6698517b322804344bcecf16074f4131681a52f1dd52140e8f378c0ad62d10f3482e0de344945f2cfa570f302e2d71a35f55c30e7e7af264e543b947ddbaff2763b7e8a6c1307f2415f98423c84909750084967f761a5d3efba15adc212bf3fbc14c1da04a8abcde1052a03491bfc057f4c30ce773d91808f5de08b4775ea6b28116fd762ee5d268a8e38729715ce42a44e31d772c5f93c2f3a8208e4fe6fbe0d53707d5666c39a67470e25350fc7fa255929b0ef0847998eff544bd44523faabd90220af10fd08af2e02f11db0012de9219af07a9d57023a348d4b4bc591617aa9556227028a649cfb2451904570979ba045d732134d911d83915d2c549c3d70e06219e50370499b698aab79cca7fa57a98fb56117c966cc968c0995cad614185c9bd97f09159046c8600254a2b185af723ca3535cad4722c961a620aeabda53dbad0d166b73c8c1ff73d224d3008c1770dc16970355ee204c8b350ec886f6485f54779b287d19183a60080011da1fe15f0d345634f9829d23e90cdffdd36f1192efcdb6dbbab6da2d50aaae5ff6fde84c6dd4b14099ca5b88bad967a78b4a7807570d275be42ff8f0aed0448639b45154adcacde81c5ddef7a8a09e1475200c4af643e4a5780d1f8c024989852138d781d8c4a42bacfcab7d", @ANYRESOCT=r3, @ANYRES16=r4, @ANYRES32=r6, @ANYRES64=r5, @ANYRES16, @ANYBLOB="d3e90d9d70e203c6f6c8132eb27278b5fe6209fbf1bb9a19f56d3d196d817526086a00184abf74f04a4a47583bb301"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="180800"/15, @ANYRES32=r9], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.160652693s ago: executing program 2 (id=1390): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r0, 0xec776000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) rseq(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0x1b200000, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) syz_open_procfs(0x0, 0x0) tkill(r3, 0x4) syz_clone(0x20042400, 0x0, 0xfffffffffffffc3b, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) 7.938861472s ago: executing program 3 (id=1392): socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb47, 0x4, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000002c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf4a, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000340)=@any_dev={0x4043, 0x8a, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x1}}}, &(0x7f0000000380)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, 0x0, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2a}}, 0x14) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) timer_create(0x0, &(0x7f0000001580)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB], 0x50) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) getsockname$packet(r6, &(0x7f0000001680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sched_setattr(0x0, &(0x7f00000016c0)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001700)='cpu.stat\x00', 0x275a, 0x0) syz_open_dev$vim2m(&(0x7f0000001740), 0x5, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001780)='/sys/power/resume', 0xa82, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001840), &(0x7f0000001880), 0x7ff, r7}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000018c0)={r7, &(0x7f0000001900)}, 0x20) 6.910220474s ago: executing program 2 (id=1396): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setrlimit(0x1, &(0x7f0000000140)={0x2, 0x8001}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f00000001c0)=0x2000000) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000040)={'broute\x00', 0x0, 0x1e010000, 0x0, [0x8, 0x401, 0x5, 0x0, 0x911f, 0x100000001]}, &(0x7f0000000200)=0x78) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x20000005) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x10) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000640)={0xfe, "ff78cd8b61163ac18e6500", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000680)={"30ef8c1965c608000000010084d1f71b0000000000090000000000000022a85c", r4, 0xffffffffffffffff}) ppoll(&(0x7f00000006c0)=[{r4, 0x2406}, {r5, 0xe249}, {r4, 0x2000}], 0x3, 0x0, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x8001, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r7 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r7, 0xc0d05640, &(0x7f0000000500)={0xa, @sliced={0x3, [0x3, 0xb, 0x3, 0x800, 0x1, 0x0, 0x0, 0x8, 0x9, 0x10, 0x8004, 0x0, 0x5, 0x400, 0x4, 0x9, 0x8000, 0x7, 0x4, 0x6, 0xfffb, 0xf, 0x0, 0x9, 0x8, 0x4, 0x6c50, 0x8, 0x65, 0xfff9, 0x6, 0x5, 0xffff, 0x8001, 0x80, 0xd7, 0x80, 0x7caf, 0x7, 0x3, 0x7, 0x428, 0x7f, 0x63, 0x12, 0x7f, 0x1, 0x2d00], 0x8001}}) ioctl$BTRFS_IOC_ENCODED_WRITE(r2, 0x40809440, &(0x7f0000000a00)={&(0x7f0000000980)=[{&(0x7f0000000700)="cdada4d190426abdc2cc83aade1bed51f3791cf6e521e0be8848a434c4410b6452c773acd33ae52dea4f81fa4df96863a897083e187b9580807f0825889fd2000ddfba2bbcae82e38d5865c76f269ae7d8d9a05fbe783e3437f2a239aeef8b35c3", 0x61}, {&(0x7f0000000780)="c6b7d44296bfaf353b663facf0d45d4a24991f324ac2ec331df6eff29f02fc132e983241e723fe7f879b14f2a8768575", 0x30}, {&(0x7f00000007c0)="35dfe0dc25b6cb73ebf7bfc45bb162a6386de9cb38c6bff63a00e1f4f3377f8d8f6de4c289f7a618d97e210a5694a3a299b9", 0x32}, {&(0x7f0000000800)="4ee525ea6f46e38b8eaca48e826c865c4bc4ba1500545f187b30a8d297171ccf94486c5d9a76daa1411f2936c0b51299d1ffe7061dbad279a63221fd9f8ef5abc67cdae3c20c1542864113b48bb65858f8cc4df8e439efaafaaece6f06099346ce687379eb6bbae32ec78860ac3531e73119826521214b53a5d8a3337fa58f178c6820916d2e45b4104b5c0c3b38acc8b73150ae5111d5b074de079e4b47ccc0a855dc62d0037fd0c3ae92aa4c36b5d5487a648652e22af6e657bf61cb051b40c4c3fa515ac0e7996738c7", 0xcb}, {&(0x7f0000000900)="49c97eb4694611fdfccba3f7bf937c2963090cba6b36311b8e6362cbfd684b1c8b2d1e87ea78e7d0aa923eb649bd1bba25e2002028d015735be86da32ac01383c6c114586235477a7d5b67b698554abf8c637ad8", 0x54}], 0x5, 0x8001, 0x0, 0x8b, 0xffff, 0x572308ea, 0x0, 0x3}) mount$fuse(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x80d029, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000240), 0x2, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r8, 0xc0745645, &(0x7f00000002c0)={0x2, [0x3, 0x5, 0x0, 0x4, 0x2, 0x6, 0x7, 0x9, 0x10, 0x1, 0x6, 0x9edf, 0x228, 0x385, 0x7b, 0xfff, 0x7, 0xa2, 0x7, 0xb, 0x5, 0x4, 0x1ff, 0x0, 0x4, 0x0, 0xb4, 0x10, 0xffff, 0xd, 0x8d7, 0x6, 0x5, 0x7, 0x6, 0x2, 0x229f, 0x1, 0x8002, 0x9, 0x0, 0x0, 0x423, 0xfff, 0x86, 0x400, 0x3, 0x7], 0x6}) 6.55904125s ago: executing program 3 (id=1397): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) 6.069641814s ago: executing program 0 (id=1398): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x20, 0x4000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xfff1, 0xc}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000100)={0x0, 0x0, 0x10000, 0x1, 0x40055}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea0009058703"], 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) set_mempolicy(0x8006, &(0x7f0000000300)=0xfff, 0x5) socket$nl_generic(0x10, 0x3, 0x10) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000009c0)={0x1, &(0x7f0000000a00)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_usb_connect(0x3, 0x36, &(0x7f0000000a40)=ANY=[@ANYBLOB="1201000068e04d206f0e2c586831010203010902240001000000000904000002ff47d000090509e702008000040905", @ANYRES32], 0x0) syz_open_dev$evdev(&(0x7f0000000a80), 0x40, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1, 0x4, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) bind$netlink(r7, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000000001050500000000000000000a0000003c0002802c00018014000300ff0100000000000000000000000000011400000000000000010c0002800500010000000000080007400000000100"/88], 0x58}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0xf, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x17}, {0x85, 0x0, 0x0, 0x6a}}}, &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) r11 = syz_open_dev$dri(&(0x7f00000006c0), 0x0, 0x0) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000700)={0x1, &(0x7f0000000740)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r13 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000780), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r13, 0xc0184800, &(0x7f00000007c0)={0xe939, r12}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r11, 0xc00c642e, &(0x7f0000000800)={0x0, 0x0, r14}) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r11, 0x100000000) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000840)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r10, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r0, 0x1000001, 0xfffffffe, 0x4b, 0x0, 0x0) 5.740416737s ago: executing program 3 (id=1401): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket(0x1, 0x803, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x14, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200fe80000000000e1208000f0100a10401a80016eaa4000640feffffffffffffffb94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c817bd6c496ddffaa2795edb1e61e0100000000000000cb090000001fb791643a5ee4001b14547df36745d6d930dfe1d9d322fe7c9fd68775730d96a4683f5aeb4edbb57a5025ccca9e00158c89ed6cb4d1ac95e7765e04c2360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b4", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r3, 0x4008941a, &(0x7f0000000400)) sendmsg$nl_route_sched(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000005c0)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000740)="27030200590214000600002fb96dbcf706e10500000088a8ffff86ddee1611d4b8bf4a31accb", 0x26}], 0x1}, 0x80) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r8) getsockname$packet(r1, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000800)=0x14) sendmsg$AUDIT_USER_TTY(r1, &(0x7f0000000840)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="30000000640404002dbd7000fcdbdf253a7ab07dfe0fd39fb0ebc7161bb0ad075fa06e7ef45abe96751bbd2eee000000"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x800) r9 = openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$6lowpan_enable(r9, &(0x7f0000000940)='1', 0x1) write$6lowpan_control(r0, &(0x7f0000000980)='connect aa:aa:aa:aa:aa:10 2', 0x1b) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000002f00091b"], 0x1c}}, 0x4080040) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r10) 5.552249488s ago: executing program 4 (id=1402): r0 = syz_open_dev$usbmon(&(0x7f0000000240), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000280), 0x20000007c, 0x80001) r2 = dup3(r0, r1, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000500)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000640)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000006c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5a}}}, &(0x7f0000000700)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, 0x0, &(0x7f0000000780)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffbe, 0x20, 0x2001, 0x10010003, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfdffed7c, 0x400, 0x0, 0x146, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x4020, 0x3, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x400, 0x3, 0x366, 0x0, r9}}], 0xf000, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f00000004c0)=0x1, 0x4) 5.043814308s ago: executing program 1 (id=1403): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000005a0586a59d11ad81af7d74566294cf5219101e8f507b55645206306a27e5ebae7d69ffd06b980df4d6f9cd7f7e29a2885857179355618d138c24e4d85655f347d4f249275ec0965b8464ad804a173446cf5db282a587ba3510"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x1c, &(0x7f0000000740)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000840)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r2, 0x62, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000009c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) 4.469096628s ago: executing program 3 (id=1404): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000047c0), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000004800)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000004840)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000004880)={0x0, 0x0, &(0x7f00000048c0)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000004940)={0x0, 0x0, &(0x7f0000004980)={&(0x7f00000049c0)=@newtfilter={0x884, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x3}, {0xffff, 0xffff}, {0x300}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x84c, 0x2, [@TCA_CGROUP_POLICE={0x848, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x20000000, 0x9, 0x3, 0x5, {0x7, 0x2, 0x3, 0x6, 0x4824, 0x94}, {0x1, 0x1, 0x5, 0xfffa, 0x1, 0x7}, 0x6, 0xa1aa, 0x7}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0x1, 0x0, 0xe3a1, 0x9, 0x2, 0x1693, 0x9, 0xffffffff, 0xffffffff, 0x10000, 0x80, 0xfffffe01, 0x3, 0x1ff, 0x5, 0x8, 0x5, 0x2, 0x80000000, 0x1, 0x7, 0x3, 0xb3, 0xfffffbfb, 0xc, 0xfc4, 0x5, 0x2, 0x5, 0x9, 0x34e, 0x3, 0x8, 0x3ff, 0x3, 0x9, 0x7, 0x7fffffff, 0x4, 0x6, 0x97f, 0xde, 0xd, 0x7, 0x2, 0x481d, 0x7fffffff, 0x0, 0x5, 0x4a09, 0xa63, 0x7fe, 0x3, 0x9, 0xcb, 0x3, 0x7, 0xffff45cc, 0x7, 0x8, 0x1, 0x2, 0xcbb, 0x8, 0x8662, 0x3, 0x9, 0x5, 0xffff, 0x27, 0xfffffffa, 0x8000, 0x1, 0x2, 0xfff, 0x8, 0x5, 0x1400000, 0x2, 0x40, 0x48, 0xa64, 0x40, 0x8, 0x2, 0xf, 0x0, 0x2, 0x7, 0x9, 0x400, 0x10000, 0x0, 0x5, 0x9, 0x7, 0x2, 0x6, 0x0, 0x3, 0x4, 0x2, 0x1, 0x2, 0x17141ccd, 0x3, 0x80000001, 0xfffffffb, 0xffffffe7, 0xff, 0x0, 0x20000000, 0x2, 0x6, 0x5, 0x9, 0x4b, 0x6, 0x8, 0x8, 0x200, 0x218d, 0x4, 0x4, 0x3ff, 0x1, 0xff, 0x3, 0x0, 0x2, 0x4, 0x1000, 0x6, 0x2, 0xffff2238, 0x9, 0xeaa8, 0x4, 0x8, 0x6, 0x9, 0xfe0c, 0xffffffff, 0xffffff81, 0x7, 0x8, 0x8001, 0x1000, 0xfff, 0x9, 0x1, 0x5, 0xfffffff7, 0x37, 0x78, 0x4, 0x9, 0x5, 0x5, 0x2, 0x2, 0x800, 0x62e, 0x5, 0xbb, 0x84, 0x3, 0x6, 0xc17e, 0x3, 0x6, 0xffffffff, 0xb, 0x3, 0x8, 0x1, 0x0, 0xef, 0xfffffffe, 0x8, 0x6, 0x9ad1, 0x5, 0x3, 0x4, 0x5, 0xb, 0xe, 0xfffffc01, 0x5, 0x39, 0x2, 0xb, 0x7fff, 0x74, 0x200, 0x200003, 0x0, 0xe1, 0x974, 0x2, 0x9, 0xfffffff9, 0x2, 0x9, 0x7, 0x2e, 0xfffffffa, 0x5fb, 0x7fffffff, 0x271a, 0x5, 0x2, 0x7, 0x56, 0x2, 0x5, 0xdd3, 0x4, 0x9, 0x9, 0x1, 0x4, 0xf, 0x400, 0x2, 0x800, 0x7, 0x0, 0xfffffffe, 0x1, 0x3, 0x3, 0x8, 0x3718, 0x4, 0xf, 0x8, 0x6, 0x1ff, 0x20000, 0x8, 0x7, 0x3, 0xfffffff8, 0x4, 0x0, 0x6, 0x5d, 0x49, 0x2, 0x8, 0x2, 0x3ff, 0xffffffff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x2, 0x8, 0x4d2a, 0x1, 0x5, 0x9, 0x0, 0x3, 0x8000, 0xffffba77, 0x9, 0x5, 0x4, 0x7, 0x3, 0xf, 0x4f09, 0x4, 0x8000, 0x5, 0x10001, 0x1000, 0x0, 0x2, 0x3, 0x2, 0x8, 0xec, 0x800, 0x7f, 0x7, 0x1, 0x8, 0x0, 0xebe, 0x4, 0x5, 0x8e0, 0xfffffff9, 0x402a, 0x5, 0x1, 0x80000000, 0xcfc, 0x8, 0xffffff01, 0x9, 0x6, 0x1, 0x80000001, 0xffffffff, 0x8, 0x9, 0xffffffff, 0x7, 0xb90f, 0x7ff, 0x20, 0x0, 0x1, 0x5, 0x4, 0x1, 0xb1, 0x11d, 0x7e, 0x3, 0x800, 0x1, 0x2, 0x3, 0xccb, 0x7, 0x2, 0x9, 0xfffffff7, 0x6, 0x7b, 0x80, 0x304, 0x3, 0xc7, 0x8, 0x5, 0x1, 0x9, 0x2, 0x5, 0x0, 0x7, 0xfffffffa, 0x2, 0xa2, 0x8001, 0x3, 0xa, 0xd563, 0x7fff, 0x1, 0x53e468b3, 0x5, 0x3, 0x314, 0x400, 0x4, 0xffff, 0x800, 0xb, 0x5, 0x1, 0x7d, 0x0, 0xea34, 0x0, 0x7, 0x68d, 0x2, 0x6, 0x200, 0x10000, 0x793d, 0x7, 0x876d, 0xfffff800, 0x5, 0xfff, 0x6, 0x5, 0x0, 0xfffffff9, 0x1, 0x5, 0x5c88, 0x6, 0x80, 0x75e, 0x9, 0x8, 0x1ff, 0x7fffffff, 0x7, 0x81, 0xffffffff, 0x35, 0x0, 0x81, 0x101, 0x100, 0x52, 0x0, 0x9, 0x0, 0xfffffc00, 0xfffffffc, 0x6, 0x7fffffff, 0x9, 0x5, 0x6, 0x400, 0x6, 0x8001, 0x7, 0xfffff144, 0x5, 0x6, 0x200, 0x5, 0x4, 0x9, 0x7, 0x1, 0x9, 0xfff, 0xe, 0x7, 0x4, 0x3, 0x601f, 0x7fe, 0x6, 0x9, 0x7, 0x3, 0x7, 0x400, 0x9, 0x3, 0x8, 0x9, 0x9, 0x9, 0x3, 0x0, 0x3ee, 0x4, 0x62cb, 0x3ff, 0x2, 0x52, 0xfffffff9, 0xffffffff, 0xb62, 0x1, 0x10000, 0x9c8, 0x1, 0x80000001, 0x6eb, 0x4cc7, 0x2, 0x800004, 0xbd9e, 0xfff, 0x7, 0x8, 0x2, 0x4, 0x1, 0x400, 0x3, 0xbf, 0x5, 0x5, 0x80000000, 0x2, 0x8, 0xfffffb1a, 0x81, 0x3, 0x7, 0x9e80, 0x100, 0x10, 0xc, 0x0, 0x2, 0x1, 0x5000000, 0x80000001, 0x8, 0x8d80, 0x4609, 0x3, 0x46b, 0x9, 0x4, 0x7, 0x6, 0x6, 0x200, 0x8, 0x8, 0x0, 0x1ff]}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x57}}]}, 0x884}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 4.328197529s ago: executing program 1 (id=1405): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@empty, 0x0, 0x4, 0x1, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x4}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000240)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) unshare(0x2040400) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000340)={0x1, r3}) ioctl$DMA_BUF_SET_NAME_A(r5, 0x40086203, &(0x7f0000000380)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000005c0)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x3, 0x7, 0x5, 0x8, 0x4c74, 0x10000, 0x7, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x1007, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x200, 0x1fd, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x3, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x40007fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x6, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f0000000a40)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@gettfilter={0x24, 0x2e, 0x1, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0x7}, {0xffe0}, {0x0, 0xfff2}}}, 0x24}}, 0x40000d0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(r7, 0x24, &(0x7f0000000a80)={0x1, 0x0, 0x7, 0x800005fffffffffe}) write$binfmt_script(r8, &(0x7f0000000ac0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) preadv(r8, &(0x7f0000000b00)=[{&(0x7f0000000b40)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000c00)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r8, &(0x7f0000000c40)={0x0, 0x18, 0x0}, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 4.232190699s ago: executing program 0 (id=1406): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r0, 0xec776000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) rseq(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0x1b200000, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) syz_open_procfs(0x0, 0x0) tkill(r3, 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) 4.087785418s ago: executing program 4 (id=1407): socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb47, 0x4, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000002c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf4a, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000340)=@any_dev={0x4043, 0x8a, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x1}}}, &(0x7f0000000380)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, 0x0, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2a}}, 0x14) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) timer_create(0x0, &(0x7f0000001580)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB], 0x50) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) getsockname$packet(r6, &(0x7f0000001680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sched_setattr(0x0, &(0x7f00000016c0)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001700)='cpu.stat\x00', 0x275a, 0x0) syz_open_dev$vim2m(&(0x7f0000001740), 0x5, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001780)='/sys/power/resume', 0xa82, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001840), &(0x7f0000001880), 0x7ff, r7}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000018c0)={r7, &(0x7f0000001900)}, 0x20) 3.078031579s ago: executing program 0 (id=1408): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$video(0x0, 0x3, 0x40) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0xf02, 0xc, 0x2, 0x0, 0xff}) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x48}) io_setup(0x8, &(0x7f0000000680)=0x0) io_submit(r2, 0x1, &(0x7f00000006c0)=[&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x4, 0x4, 0x0, {0x0, 0x2710}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x4, 0x2}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)=@userptr={0x0, 0x1, 0x4, 0x80, 0xffffffff, {0x0}, {}, 0x0, 0x2, {&(0x7f0000401000)}, 0x400000}) socket$netlink(0x10, 0x3, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/devices.allow\x00', 0x2000, 0x2) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280), 0x1c3902, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x2) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x6, 0x8, 0x3, 0x0, 0xa, 0x1, 0xfffffe0000000001, 0x1000fa11, 0xffffffff}, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="2c0000002600090122bd7008faffffff0200000008003f80040000000800030046"], 0x2c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x22008870) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4814}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f00000005c0)={0x0, @frame_sync}) sendmsg$NFT_BATCH(r7, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a70000000090a010400000000000000000a0000020900020073797a310000000008000a40fffffffc0900010073797a310000000008000540000000242c00128028000180090001006c617374000000000400028014ccff40a7000100636f756e746572000400028008000340000001"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x200400d0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) userfaultfd(0x801) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="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", @ANYRESOCT=r3, @ANYRES16=r4, @ANYRES32=r6, @ANYRES64=r5, @ANYRES16, @ANYBLOB="d3e90d9d70e203c6f6c8132eb27278b5fe6209fbf1bb9a19f56d3d196d817526086a00184abf74f04a4a47583bb301"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="180800"/15, @ANYRES32=r9], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.918888541s ago: executing program 4 (id=1409): openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x20842, 0x4) lstat(&(0x7f0000000200)='./file0\x00', 0x0) utime(&(0x7f0000000240)='./file0\x00', 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000280)) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) listen(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}}, 0x0, 0x0, 0xc, 0x0, "9ecf3315567f14d56a87d134cc409e2a652dbbf6c50480937c6fa85af81bc6fc54b71f03985ac33e31d612d976a6efcda8853b8a4430503621f06679995d916cb4361795dd7dbae51d07384b7c2e6949"}, 0xd8) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000540)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00@\x00', 0x28, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, {[], {{0x4e24, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "f704000000000000009ae5d322348df7"}]}}}}}}}}, 0x0) 2.664379982s ago: executing program 1 (id=1410): unshare(0x8000000) r0 = semget$private(0x0, 0x0, 0x25e) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f00000005c0)={0x9, @output={0x0, 0x1, {0x1ff, 0x3}, 0x0, 0x6}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f0000000080)=[{r2}, {r2, 0x63}, {r2, 0x400}], 0x3, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000100)={[0xfff]}, 0x8) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000180)=@filter={'filter\x00', 0x4, 0x4, 0x3e0, 0xffffffff, 0x1e8, 0xd0, 0xd0, 0xfeffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @loopback}, [0x47e128f2bce82ddb, 0xff], [0xff, 0xffffff00, 0xff, 0xffffff00], 'veth0_to_bond\x00', 'veth1_vlan\x00', {0xff}, {}, 0x6, 0x5, 0x1, 0x51}, 0x2f2, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x3, 0x800}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x1, 0x4, 0x0, [0x4004, 0x5, 0x0, 0x5, 0x7, 0x7, 0x101, 0x3, 0x7ff, 0x50de, 0x4, 0x5, 0x1000, 0x4, 0xffff], 0xd}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff], [0x0, 0xff, 0x0, 0xffffff00], 'veth1_virt_wifi\x00', 'wlan1\x00', {}, {}, 0xae, 0xb, 0x6, 0x6}, 0x0, 0xf8, 0x128, 0x0, {}, [@common=@ipv6header={{0x28}, {0x25, 0x80}}, @common=@hl={{0x28}, {0x1, 0x5}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x2001, 0x5, 0x1}, {0x4, 0x0, 0x6}, 0x6, 0x817e}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f00000006c0)='asymmetric\x00', 0x0, &(0x7f0000000700)="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", 0x1d8, 0xfffffffffffffffe) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x4]) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x43, 0x1000}], 0x1, 0x0) unshare(0x8000000) 2.408227128s ago: executing program 4 (id=1411): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="1400efff1000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000078000000060a010400000000000000000500000008000b400000000050000480240001800b00010074756e6e656c000014000280080001400000000108000240000000092800018008000100667764001c0002800800024000000015080003400000000a08000140000001090900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.374133974s ago: executing program 3 (id=1412): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x800) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x750, 0x0, 0x0, 'queue0\x00', 0x5}) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904"], 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000380)={0x2c, &(0x7f00000003c0)={0x40, 0xd, 0x1, "1d"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000440)={0x20, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f00000002c0)={0x0, 0x0, {0x3}}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000180)={0x7, 0x4, 0x0, 0x40000000, 0x23, 0x7}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000006800)={0x80, 0x8, 0x2, 0x3842, 0x7, 0x8}) 2.192300758s ago: executing program 1 (id=1413): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)={0x38, r1, 0xc4fc9e906872338b, 0x0, 0xf0ffff, {{0x5}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x6, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x4}]}]}]}, 0x38}, 0x1, 0x0, 0x10000000}, 0x0) 1.964288993s ago: executing program 4 (id=1414): openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f00000000c0)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f00000002c0)=0xf2b, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000300)=""/9, 0x0) pipe(0x0) syz_clone(0x22000, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpu.stat\x00', 0x275a, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000000440)="01000000020001000003", 0xa) connect$inet6(r1, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$sndctrl(&(0x7f0000000500), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0xc1105511, &(0x7f0000000540)={0xb, 0x3, 0x8, 0xfff, 'syz1\x00', 0x53}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0xc1105511, &(0x7f0000000580)) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = dup(r3) syz_ublk_setup_queues(r8, r7, &(0x7f0000000180)={0x0, 0xfb87, 0x100, 0x0, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x40, 0x6, 0x15e, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa348, 0x4, 0x10000000, 0x32b, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x1, 0x3, 0x0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x2000, 0x82, 0x80ba}}], 0x1, &(0x7f0000000340)={0x2e, 0x75, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x700, 0x1, {}, 0x1f, 0x0, '\x00', {0xffe9, 0x1, 0x0, 0x0}}, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0xa, {0x2, 0x1ff, 0x15, 0x9, 0x8, 0x1}}) 1.852013966s ago: executing program 1 (id=1415): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000005a0586a59d11ad81af7d74566294cf5219101e8f507b55645206306a27e5ebae7d69ffd06b980df4d6f9cd7f7e29a2885857179355618d138c24e4d85655f347d4f249275ec0965b8464ad804a173446cf5db282a587ba3510"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x1c, &(0x7f0000000740)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000840)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.204393101s ago: executing program 1 (id=1416): socket$tipc(0x1e, 0x2, 0x0) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000082}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$rds(0x15, 0x5, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x42, 0x0) close(r2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x8, 0xffff, 0x11, @ipv4={'\x00', '\xff\xff', @loopback}, @local, 0x8, 0x1, 0x7, 0xffffffff}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, 0x0, &(0x7f0000000640)='syzkaller\x00', 0x10000, 0x0, 0x0, 0x41100, 0x65, '\x00', r3, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400900}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c00000007060108e8ff00000000000000000000050001"], 0x1c}, 0x1, 0x0, 0x0, 0x40854}, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000780)={{0xa, 0x4000, 0x5, 0x1}, 'syz1\x00', 0x24}) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000c80)=ANY=[@ANYBLOB="03"], 0x4) 847.164768ms ago: executing program 0 (id=1417): unshare(0x22020600) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000280), 0x20000007c, 0x80001) r2 = dup3(r0, r1, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000500)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000640)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000006c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5a}}}, &(0x7f0000000700)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, 0x0, &(0x7f0000000780)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffbe, 0x20, 0x2001, 0x10010003, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfdffed7c, 0x400, 0x0, 0x146, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x4020, 0x3, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x400, 0x3, 0x366, 0x0, r9}}], 0xf000, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f00000004c0)=0x1, 0x4) 23.678518ms ago: executing program 3 (id=1418): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000000040000", @ANYRES32=0x0, @ANYBLOB='\x00'/18, @ANYBLOB], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3c) writev(r3, &(0x7f0000000d00)=[{&(0x7f0000000d40)="06c3", 0x2}, {&(0x7f0000000d80)="ee993abf99d826c3107b1259f25b162e724318d5d0c450141df0608f0f4f51cef8c8e8a49edb5af15fc39f35bbd0157324e55b9cd5f17e0a310913b385f189d13027c20b60d962cf7548082713069833a794bcffcd5f6daba24f91232f678cd091bcae6ec94991775faffbaf2645fd5a38a66a85eaac7006c9feee4f0f1ae0eb6374378f0acf90b6cc9e04c4c5bc5875bcdf80f18879ffd4a823bed96903405e4ac629733e48576a6e28e775fa1bd30190342fc3ea2fa690f84c78cd494d7ea7d50dbff1f362f3ed52cd7ae86e10efc957f23a0dd5cbc7ce0edbf2eb0c7dd53cf1f1cf10dd42790050f0e38d51a822e303802eeeaf8fa3875b7943f61f4530262b8775b7d31a2c3aa2ac6fe44e614e9d4c2abd00ea17142e7216632baca316fe7731dee60a8847b5d1207edf990bf254c5695ca9f2e35933864ded45bc6b109b5d2db3a19af0066d07798b044c2c228d3ce5c5f2b40499580a6a5dbd15f90bcf4ef8126cd4b818c84d27ca3bed4ee9d149afca7bc927b9df102e98a49add9a9c52ec950d679e4f40726736d974a2c4e9118c36238fe7aa057dee0f4433d587d4f3fb2cc39c8f9578eb80a4c5f3150d7a0f7aefa4eb8aecc70560880b0a7c6a835251427613c57dabddda6c8d407b1f2785f2a18918d5d5184c2156889d8c9be6c8e6e979a4987375d9566c1bf23d9b262fc4532c79afc3f1ae57bc3f8c838564ca2ea50ae26a6b9fa977f47bd2dbfebfc15dc602028520e37166c31adad67d17227963b970128477b107e5c4aaccc3d2feceaadecc3b1186765b52c72e9f70afa268a6213bd78d283f643f7b3769ad9a518336a79c45e9500887c469efea14102777a55ecbdac7aad31cc44f192b287e1366cee23125cd35b9adb7da8b3e1ce29931536957231818a2af645375b050bf82ad896afee5a98149861abbcbfe74f411d39897fcf2b61f4d8616224bcc082f68b0faf923093b38c87ca4d42d80e69f37bde9b8ed7c014c77010fae5007d7a229bcd72d2283cb47aacc2a7ca72066839bbd81ab58a98ba1b751e61c44f60157c549d872f3a36c1b99982fd51f329be6ed59379275d01a311a95cdb65b5f851699f9f2903a88fa63eb22453ec95082d3cd804fba64f67272b0ec4e322bcaa0d40a5d86398438e09352a3f2f2428009b5c4cede8720463c61765ae9a46f51827430d05755b1de5ee8a1835b5ec06890d921c63b0ac1c97f8bfc786c13cb3d88603ae5779076e0083ac0374870f32f299faff14cd86b78da9f56388d50e57d92e24bf6db454cb1579e6590f520be854baded354f235b0452b0fad58a67e8ed8cb0dad6c64c9b964ac18aab442b1c579b56287a1cceb23bd2885f93b8912217522f4e0139b2e0a65c117a0fa6aa8beba3298fbeca3ecc72c43eafe0a59e1e6c0a7810d2e0119203ae0990c69519f1cccaf553f20d7401881b579c3d5d23eb2cadab61dcfe231c62982091a2a1d733c5e2d768dc700655b834d83e58af85b9e87808c66e0a67903a0fbe940774ecbec6b069bbf4d72ad1f7adbae9bfbfe52fdea6397918fb5736e338ebb9329a7528f5b54ca3d5db39bf1c7e086096ff2d3abf275137e8c83e8fe1acf1f1bf9247e94855abd99d9ee8a2fa57b942a5fcf23db702286d5acf19147cfe51faa9ffbbf0562d344af117161ddad99603a50c2c896c1f9c3123dcec6844555b38bf3e7a52fcfeb3278035912763401edd4efb5d5744d5afbdf65d4df37f718c36166d43d03ff9ec61a16b91d6f8beffc1de631b5adcaa26d71829c92476f30ec4ca9c719c93611c4ba869dc044923fb8fa7e8e1e5fafc33a64deb307e3dc1e4d440118ba3d1cce4694a95eb9f1dae0f22a151f2de0a680c943f09928a20ffdea468d457a6206c13c5481a63101bdbc60f7a24b8e2c01e75b29466cace3e1347521995de18cac59392b0ab71285115528186e8f5d5ad0c4f46966515c2ba7f692aa6d4c87ebd93f4d286a32d3501545dde40f2be11891d5f0860d62320838ea95d35973e73466cc7f74ce1f06051de75abe44d6e0d72cb5d05a147c9f57bc37b1a5e03cd95194541636d2d9eb6e8d051d3a4d209b8db5c38999e10ab71309e005526beef8d81e385a00acfc9c6ce1ec7c4c36753c0622145e23ce7b8422d97248fb6ff22a0a58998", 0x600}, {&(0x7f0000001380)="4c7911315ed07e13be5391e38b57247dcbfa424aae", 0x15}], 0x3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, 0x0, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(r0, 0x0, 0x24000000) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r4, @ANYBLOB="0a00180003030303030300004ffff691c440273a7de8f85899c4822be7882007b1c951180f0ad531127346693d80892808d4c583f30e49eb2b43d64fe642c3dc"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000001300000008000300", @ANYRES32=r4, @ANYBLOB="0a00060008021100000100000600100001000000060012000100000004001300d757c50000d067e9de5f3ec50303e2cc6a776f7add86c6207e2d542a"], 0x3c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r8, 0x0, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000840)) sendmsg$FOU_CMD_ADD(r7, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) bind$packet(r9, &(0x7f00000005c0)={0x11, 0x300, r4, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) write(r9, &(0x7f0000000600)="080211000001080211000000080045000028000000004000", 0x18) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 4 (id=1419): socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb47, 0x4, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000002c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf4a, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000340)=@any_dev={0x4043, 0x8a, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x1}}}, &(0x7f0000000380)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, 0x0, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2a}}, 0x14) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) timer_create(0x0, &(0x7f0000001580)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB], 0x50) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) getsockname$packet(r6, &(0x7f0000001680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sched_setattr(0x0, &(0x7f00000016c0)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001700)='cpu.stat\x00', 0x275a, 0x0) syz_open_dev$vim2m(&(0x7f0000001740), 0x5, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001780)='/sys/power/resume', 0xa82, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001840), &(0x7f0000001880), 0x7ff, r7}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000018c0)={r7, &(0x7f0000001900)}, 0x20) kernel console output (not intermixed with test programs): ode_getfile+0x129/0x200 [ 322.576074][ T8870] io_uring_create+0x57a/0x980 [ 322.576104][ T8870] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 322.576130][ T8870] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 322.576152][ T8870] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 322.576194][ T8870] ? __pfx_ksys_write+0x10/0x10 [ 322.576218][ T8870] do_syscall_64+0x166/0x520 [ 322.576234][ T8870] ? trace_irq_disable+0x3b/0x140 [ 322.576270][ T8870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.576291][ T8870] ? clear_bhb_loop+0x70/0xc0 [ 322.576314][ T8870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.576333][ T8870] RIP: 0033:0x7fe702b9f559 [ 322.576354][ T8870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.576366][ T8870] RSP: 002b:00007fe703a60ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 322.576381][ T8870] RAX: ffffffffffffffda RBX: 0000200000000808 RCX: 00007fe702b9f559 [ 322.576392][ T8870] RDX: 0000200000000888 RSI: 0000200000000808 RDI: 00000000000003c9 [ 322.576414][ T8870] RBP: 0000200000000800 R08: 0000200000000340 R09: 0000000000000000 [ 322.576427][ T8870] R10: 0000200000000890 R11: 0000000000000206 R12: 0000200000000888 [ 322.576447][ T8870] R13: 0000200000000890 R14: 00007fe703a60fd8 R15: 0000000000000000 [ 322.576475][ T8870] [ 322.820142][ T5699] usb 1-1: USB disconnect, device number 17 [ 322.899607][ T8872] netlink: 80 bytes leftover after parsing attributes in process `syz.1.972'. [ 322.899634][ T8872] openvswitch: netlink: Missing key (keys=40, expected=80) [ 322.983268][ T8874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.973'. [ 322.987003][ T8874] netlink: 20 bytes leftover after parsing attributes in process `syz.2.973'. [ 322.987030][ T8874] netlink: 20 bytes leftover after parsing attributes in process `syz.2.973'. [ 323.556128][ T8889] FAULT_INJECTION: forcing a failure. [ 323.556128][ T8889] name failslab, interval 1, probability 0, space 0, times 0 [ 323.556156][ T8889] CPU: 0 UID: 0 PID: 8889 Comm: syz.0.977 Tainted: G L syzkaller #0 PREEMPT(full) [ 323.556178][ T8889] Tainted: [L]=SOFTLOCKUP [ 323.556184][ T8889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 323.556193][ T8889] Call Trace: [ 323.556218][ T8889] [ 323.556225][ T8889] dump_stack_lvl+0xe8/0x150 [ 323.556257][ T8889] should_fail_ex+0x410/0x560 [ 323.556283][ T8889] should_failslab+0xa8/0x100 [ 323.556306][ T8889] __kmalloc_cache_noprof+0x9e/0x600 [ 323.556325][ T8889] ? rcu_is_watching+0x16/0xb0 [ 323.556355][ T8889] ? vhost_task_create+0x123/0x380 [ 323.556373][ T8889] ? vhost_task_create+0x123/0x380 [ 323.556397][ T8889] vhost_task_create+0x123/0x380 [ 323.556417][ T8889] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 323.556439][ T8889] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 323.556462][ T8889] ? __pfx_vhost_task_create+0x10/0x10 [ 323.556479][ T8889] ? register_lock_class+0x31/0x2e0 [ 323.556505][ T8889] ? __pfx_vhost_task_fn+0x10/0x10 [ 323.556530][ T8889] ? kasan_quarantine_put+0xbb/0x1f0 [ 323.556555][ T8889] kvm_mmu_post_init_vm+0x147/0x2b0 [ 323.556609][ T8889] kvm_arch_vcpu_ioctl_run+0x79/0x18b0 [ 323.556644][ T8889] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 323.556691][ T8889] kvm_vcpu_ioctl+0xa61/0xfd0 [ 323.556724][ T8889] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 323.556757][ T8889] ? __fget_files+0x2a/0x420 [ 323.556775][ T8889] ? __fget_files+0x2a/0x420 [ 323.556791][ T8889] ? __fget_files+0x2a/0x420 [ 323.556809][ T8889] ? bpf_lsm_file_ioctl+0x9/0x20 [ 323.556830][ T8889] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 323.556851][ T8889] __se_sys_ioctl+0xfc/0x170 [ 323.556873][ T8889] do_syscall_64+0x166/0x520 [ 323.556889][ T8889] ? trace_irq_disable+0x3b/0x140 [ 323.556909][ T8889] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.556925][ T8889] ? clear_bhb_loop+0x70/0xc0 [ 323.556944][ T8889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.556959][ T8889] RIP: 0033:0x7f2264f9f559 [ 323.556974][ T8889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.556988][ T8889] RSP: 002b:00007f2265ea8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 323.557028][ T8889] RAX: ffffffffffffffda RBX: 00007f2265226090 RCX: 00007f2264f9f559 [ 323.557044][ T8889] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 323.557053][ T8889] RBP: 00007f2265ea8090 R08: 0000000000000000 R09: 0000000000000000 [ 323.557062][ T8889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.557071][ T8889] R13: 00007f2265226128 R14: 00007f2265226090 R15: 00007f226534fa48 [ 323.557095][ T8889] [ 323.629871][ T12] usb 4-1: Failed to submit usb control message: -110 [ 323.629955][ T12] usb 4-1: unable to send the bmi data to the device: -110 [ 323.630008][ T12] usb 4-1: unable to get target info from device [ 323.630047][ T12] usb 4-1: could not get target info (-110) [ 323.630104][ T12] usb 4-1: could not probe fw (-110) [ 324.276205][ T8899] FAULT_INJECTION: forcing a failure. [ 324.276205][ T8899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 324.276232][ T8899] CPU: 0 UID: 0 PID: 8899 Comm: syz.4.981 Tainted: G L syzkaller #0 PREEMPT(full) [ 324.276252][ T8899] Tainted: [L]=SOFTLOCKUP [ 324.276259][ T8899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 324.276268][ T8899] Call Trace: [ 324.276274][ T8899] [ 324.276280][ T8899] dump_stack_lvl+0xe8/0x150 [ 324.276307][ T8899] should_fail_ex+0x410/0x560 [ 324.276330][ T8899] _copy_to_user+0x31/0xb0 [ 324.276353][ T8899] simple_read_from_buffer+0xe1/0x170 [ 324.276400][ T8899] proc_fail_nth_read+0x1bb/0x230 [ 324.276431][ T8899] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 324.276461][ T8899] ? rw_verify_area+0x24a/0x4c0 [ 324.276485][ T8899] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 324.276512][ T8899] vfs_read+0x213/0xa80 [ 324.276539][ T8899] ? __pfx___mutex_lock+0x10/0x10 [ 324.276578][ T8899] ? __pfx_vfs_read+0x10/0x10 [ 324.276595][ T8899] ? __fget_files+0x2a/0x420 [ 324.276609][ T8899] ? __fget_files+0x3a2/0x420 [ 324.276622][ T8899] ? __fget_files+0x2a/0x420 [ 324.276639][ T8899] ? fdget+0x1ac/0x250 [ 324.276658][ T8899] ksys_read+0x150/0x270 [ 324.276675][ T8899] ? __pfx_ksys_read+0x10/0x10 [ 324.276690][ T8899] ? __pfx_v4l2_ioctl+0x10/0x10 [ 324.276714][ T8899] do_syscall_64+0x166/0x520 [ 324.276729][ T8899] ? trace_irq_disable+0x3b/0x140 [ 324.276749][ T8899] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.276769][ T8899] ? clear_bhb_loop+0x70/0xc0 [ 324.276787][ T8899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.276801][ T8899] RIP: 0033:0x7fe702b5fd8e [ 324.276814][ T8899] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 324.276858][ T8899] RSP: 002b:00007fe703a60fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 324.276879][ T8899] RAX: ffffffffffffffda RBX: 00007fe703a616c0 RCX: 00007fe702b5fd8e [ 324.276894][ T8899] RDX: 000000000000000f RSI: 00007fe703a610a0 RDI: 0000000000000004 [ 324.276906][ T8899] RBP: 00007fe703a61090 R08: 0000000000000000 R09: 0000000000000000 [ 324.276918][ T8899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.276929][ T8899] R13: 00007fe702e26038 R14: 00007fe702e25fa0 R15: 00007fe702f4fa48 [ 324.276958][ T8899] [ 324.831568][ T8905] openvswitch: netlink: Message has 70 unknown bytes. [ 324.831603][ T8905] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.010127][ T8911] loop8: detected capacity change from 0 to 16384 [ 325.106700][ T5699] usb 4-1: USB disconnect, device number 29 [ 325.319664][ T8912] loop8: detected capacity change from 16384 to 16383 [ 325.432932][ T8918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.989'. [ 325.452762][ T8918] netlink: 20 bytes leftover after parsing attributes in process `syz.2.989'. [ 325.453555][ T8918] netlink: 20 bytes leftover after parsing attributes in process `syz.2.989'. [ 325.512682][ T8909] syzkaller0: entered promiscuous mode [ 325.512712][ T8909] syzkaller0: entered allmulticast mode [ 325.939027][ T8926] futex_wake_op: syz.3.991 tries to shift op by 144; fix this program [ 326.145065][ T8931] netlink: 'syz.1.993': attribute type 10 has an invalid length. [ 326.429366][ T8933] netlink: 20 bytes leftover after parsing attributes in process `syz.3.995'. [ 326.707021][ T8938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.994'. [ 326.910929][ T8945] openvswitch: netlink: Message has 70 unknown bytes. [ 326.910957][ T8945] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 326.933497][ T5714] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 326.967663][ T5066] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 327.088383][ T5714] usb 4-1: New USB device found: idVendor=045e, idProduct=0775, bcdDevice=1.00 [ 327.089533][ T5714] usb 4-1: config index 0 descriptor too short (expected 36363, got 53) [ 327.089554][ T5714] usb 4-1: config 53 has an invalid descriptor of length 0, skipping remainder of the config [ 327.089568][ T5714] usb 4-1: config 53 has 0 interfaces, different from the descriptor's value: 11 [ 327.094283][ T5714] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 327.094312][ T5714] usb 4-1: Product: syz [ 327.094328][ T5714] usb 4-1: Manufacturer: syz [ 327.129846][ T5066] usb 3-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 327.178642][ T5066] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.185730][ T5066] usb 3-1: config 0 descriptor?? [ 327.449643][ T5066] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 327.712839][ T5066] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 327.712866][ T5066] [drm] Initialized udl on minor 1 [ 327.736271][ T8963] netlink: 12 bytes leftover after parsing attributes in process `syz.3.998'. [ 329.349855][ T8975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1007'. [ 329.408429][ T8975] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1007'. [ 329.408459][ T8975] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1007'. [ 329.417972][ T5698] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 329.610931][ T5698] usb 5-1: unable to get BOS descriptor or descriptor too short [ 329.611942][ T5698] usb 5-1: not running at top speed; connect to a high speed hub [ 329.611978][ T5698] usb 5-1: New USB device found: idVendor=0caa, idProduct=3001, bcdDevice=3e.c2 [ 329.615555][ T5698] usb 5-1: config 160 has an invalid descriptor of length 0, skipping remainder of the config [ 329.615580][ T5698] usb 5-1: config 160 has 0 interfaces, different from the descriptor's value: 1 [ 329.670364][ T5698] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.670390][ T5698] usb 5-1: Product: syz [ 329.670404][ T5698] usb 5-1: Manufacturer: syz [ 329.670423][ T5698] usb 5-1: SerialNumber: syz [ 330.105622][ T5714] usb 4-1: USB disconnect, device number 30 [ 330.457696][ T192] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 330.604840][ T5698] usb 5-1: USB disconnect, device number 29 [ 330.617722][ T192] usb 2-1: Using ep0 maxpacket: 32 [ 330.618491][ T192] usb 2-1: New USB device found: idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 330.619639][ T192] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 330.619663][ T192] usb 2-1: config 0 has no interface number 0 [ 330.619719][ T192] usb 2-1: config 0 interface 12 has no altsetting 0 [ 330.684517][ T192] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.684563][ T192] usb 2-1: Product: syz [ 330.684579][ T192] usb 2-1: Manufacturer: syz [ 330.684596][ T192] usb 2-1: SerialNumber: syz [ 330.715470][ T192] usb 2-1: config 0 descriptor?? [ 332.814020][ T9010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1018'. [ 332.833580][ T9010] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1018'. [ 332.833614][ T9010] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1018'. [ 332.960854][ T5066] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffff92 [ 332.961332][ T5066] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 333.049904][ T5066] usb 3-1: USB disconnect, device number 34 [ 333.086246][ T5699] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 333.304686][ T5699] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 333.419407][ T53] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 333.754366][ T9015] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1020'. [ 333.879373][ T5066] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 334.044129][ T5066] usb 3-1: New USB device found: idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 334.064901][ T5066] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.064931][ T5066] usb 3-1: Product: syz [ 334.064948][ T5066] usb 3-1: Manufacturer: syz [ 334.064964][ T5066] usb 3-1: SerialNumber: syz [ 334.095064][ T5066] usb 3-1: config 0 descriptor?? [ 334.109634][ T5066] ch341 3-1:0.0: ch341-uart converter detected [ 334.849663][ T192] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 334.849723][ T192] f81534 2-1:0.12: f81534_calc_num_ports: read failed: -71 [ 334.849804][ T192] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 334.888112][ T192] usb 2-1: USB disconnect, device number 30 [ 335.350544][ T5066] usb 3-1: failed to send control message: -110 [ 335.350604][ T5066] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 336.009033][ T9048] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1027'. [ 336.605307][ T5714] usb 3-1: USB disconnect, device number 35 [ 336.606954][ T5714] ch341 3-1:0.0: device disconnected [ 336.902858][ T9053] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 337.217819][ T5698] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 337.368373][ T5698] usb 3-1: Using ep0 maxpacket: 16 [ 337.373303][ T5698] usb 3-1: New USB device found: idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 337.409104][ T5698] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 337.409130][ T5698] usb 3-1: Product: syz [ 337.409145][ T5698] usb 3-1: Manufacturer: syz [ 337.409160][ T5698] usb 3-1: SerialNumber: syz [ 337.456814][ T5698] usb 3-1: config 0 descriptor?? [ 338.067291][ T5698] usb 3-1: USB disconnect, device number 36 [ 338.413219][ T5835] udevd[5835]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 338.904890][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 338.904913][ T30] audit: type=1326 audit(1792955059.513:3116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9080 comm="syz.4.1039" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe702b9f559 code=0x7ffc0000 [ 338.904963][ T30] audit: type=1326 audit(1792955059.513:3117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9080 comm="syz.4.1039" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe702b9f559 code=0x7ffc0000 [ 338.938190][ T30] audit: type=1326 audit(1792955059.523:3118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9080 comm="syz.4.1039" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe702b9f559 code=0x7ffc0000 [ 338.938329][ T30] audit: type=1326 audit(1792955059.533:3119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9080 comm="syz.4.1039" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe702b9f559 code=0x7ffc0000 [ 338.938446][ T30] audit: type=1326 audit(1792955059.533:3120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9080 comm="syz.4.1039" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe702b9f559 code=0x7ffc0000 [ 338.938546][ T30] audit: type=1326 audit(1792955059.533:3121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9080 comm="syz.4.1039" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe702b9f559 code=0x7ffc0000 [ 338.938653][ T30] audit: type=1326 audit(1792955059.533:3122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9080 comm="syz.4.1039" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe702b9f559 code=0x7ffc0000 [ 338.938748][ T30] audit: type=1326 audit(1792955059.533:3123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9080 comm="syz.4.1039" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe702b9f559 code=0x7ffc0000 [ 338.938867][ T30] audit: type=1326 audit(1792955059.543:3125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9080 comm="syz.4.1039" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe702b9f559 code=0x7ffc0000 [ 338.938930][ T30] audit: type=1326 audit(1792955059.533:3124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9080 comm="syz.4.1039" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe702b9f559 code=0x7ffc0000 [ 339.010152][ T5066] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 339.322545][ T5066] usb 3-1: New USB device found: idVendor=08ca, idProduct=0110, bcdDevice=1.00 [ 339.323666][ T5066] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 339.326128][ T5066] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.326156][ T5066] usb 3-1: Product: syz [ 339.326172][ T5066] usb 3-1: Manufacturer: syz [ 339.326190][ T5066] usb 3-1: SerialNumber: syz [ 339.394932][ T5066] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 339.711759][ T5727] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 339.980378][ T5727] usb 4-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 340.021941][ T5727] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.040504][ T5727] usb 4-1: config 0 descriptor?? [ 340.127867][ T5066] gspca_mr97310a: reg write [21] error -110 [ 340.127969][ T5066] mr97310a 3-1:1.0: probe with driver mr97310a failed with error -110 [ 340.298755][ T5727] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 340.530364][ T5714] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 340.550164][ T5727] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 340.550180][ T5727] [drm] Initialized udl on minor 1 [ 340.677775][ T5714] usb 5-1: Using ep0 maxpacket: 16 [ 340.685359][ T5714] usb 5-1: New USB device found: idVendor=0763, idProduct=2001, bcdDevice=0.40 [ 340.767683][ T5714] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.767705][ T5714] usb 5-1: Product: syz [ 340.767734][ T5714] usb 5-1: Manufacturer: syz [ 340.767750][ T5714] usb 5-1: SerialNumber: syz [ 340.776319][ T9079] xt_CONNSECMARK: invalid mode: 0 [ 341.474448][ T5714] usb 5-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 341.474496][ T5714] usb 5-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 341.495200][ T5714] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 341.718324][ T5714] usb 5-1: USB disconnect, device number 30 [ 341.824483][ T5698] usb 3-1: USB disconnect, device number 37 [ 342.073568][ T9099] tipc: Enabled bearer , priority 10 [ 342.133437][ T5648] udevd[5648]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 342.660955][ T9107] netlink: 'syz.0.1046': attribute type 3 has an invalid length. [ 342.660978][ T9107] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1046'. [ 343.079307][ T24] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 343.199618][ T5698] tipc: Node number set to 3808037149 [ 343.228428][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 343.230064][ T24] usb 3-1: New USB device found: idVendor=0e8d, idProduct=00a7, bcdDevice=b5.42 [ 343.236628][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 343.236679][ T24] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 343.285491][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.285512][ T24] usb 3-1: Product: syz [ 343.285522][ T24] usb 3-1: Manufacturer: syz [ 343.285532][ T24] usb 3-1: SerialNumber: syz [ 343.327928][ T24] usb 3-1: config 0 descriptor?? [ 343.549489][ T9110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.554196][ T9110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.582670][ T24] usb 3-1: USB disconnect, device number 38 [ 344.169750][ T5714] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 344.327650][ T5714] usb 3-1: Using ep0 maxpacket: 8 [ 344.331984][ T5714] usb 3-1: New USB device found: idVendor=0e41, idProduct=4156, bcdDevice=0.40 [ 344.366662][ T5714] usb 3-1: config 1 has an invalid descriptor of length 72, skipping remainder of the config [ 344.366710][ T5714] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 344.403679][ T5714] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.403707][ T5714] usb 3-1: Product: syz [ 344.403721][ T5714] usb 3-1: SerialNumber: syz [ 344.709280][ T9110] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1048'. [ 345.253193][ T5714] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 345.253259][ T5714] usb 3-1: MIDIStreaming interface descriptor not found [ 345.461787][ T9135] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 345.539220][ T9134] trusted_key: encrypted_key: insufficient parameters specified [ 345.588264][ T5727] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 345.588708][ T5727] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 345.595139][ T5727] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 345.625254][ T5727] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 345.639729][ T5727] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 345.658984][ T5698] usb 4-1: USB disconnect, device number 31 [ 346.117449][ T5714] usb 3-1: USB disconnect, device number 39 [ 346.486756][ T9138] openvswitch: netlink: Message has 70 unknown bytes. [ 346.486792][ T9138] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 346.847504][ T5636] udevd[5636]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 346.934181][ T9149] loop0: detected capacity change from 0 to 4096 [ 346.980468][ T9126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.980871][ T9126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.111149][ T9149] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 347.124030][ T9149] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 347.124048][ T9149] ldm_validate_privheads(): Cannot find PRIVHEAD 2. [ 347.124118][ T9149] loop0: [ 347.220669][ T5698] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 347.403914][ T5698] usb 2-1: Using ep0 maxpacket: 32 [ 347.410310][ T5698] usb 2-1: New USB device found: idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 347.427334][ T5698] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 347.427353][ T5698] usb 2-1: config 0 has no interface number 0 [ 347.452483][ T5698] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.452503][ T5698] usb 2-1: Product: syz [ 347.452513][ T5698] usb 2-1: Manufacturer: syz [ 347.452523][ T5698] usb 2-1: SerialNumber: syz [ 347.465957][ T5698] usb 2-1: config 0 descriptor?? [ 347.493043][ T5698] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 347.783359][ T5698] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 347.804064][ T5698] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 347.909391][ T9164] FAULT_INJECTION: forcing a failure. [ 347.909391][ T9164] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 347.909421][ T9164] CPU: 0 UID: 0 PID: 9164 Comm: syz.3.1063 Tainted: G L syzkaller #0 PREEMPT(full) [ 347.909443][ T9164] Tainted: [L]=SOFTLOCKUP [ 347.909449][ T9164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 347.909459][ T9164] Call Trace: [ 347.909465][ T9164] [ 347.909472][ T9164] dump_stack_lvl+0xe8/0x150 [ 347.909525][ T9164] should_fail_ex+0x410/0x560 [ 347.909552][ T9164] _copy_from_iter+0x1d3/0x1660 [ 347.909573][ T9164] ? __alloc_frozen_pages_noprof+0x24a/0x400 [ 347.909597][ T9164] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 347.909620][ T9164] ? __pfx__copy_from_iter+0x10/0x10 [ 347.909640][ T9164] ? __pfx___mutex_lock+0x10/0x10 [ 347.909658][ T9164] ? policy_nodemask+0x2cc/0x8e0 [ 347.909680][ T9164] ? aa_file_perm+0x18b/0x15f0 [ 347.909704][ T9164] ? alloc_pages_mpol+0x256/0x390 [ 347.909729][ T9164] copy_page_from_iter+0x219/0x2d0 [ 347.909764][ T9164] anon_pipe_write+0xdb2/0x1a90 [ 347.909802][ T9164] ? __pfx_anon_pipe_write+0x10/0x10 [ 347.909830][ T9164] ? apparmor_file_permission+0x1fb/0x2b0 [ 347.909855][ T9164] ? bpf_lsm_file_permission+0x9/0x20 [ 347.909879][ T9164] ? security_file_permission+0x75/0x260 [ 347.909910][ T9164] vfs_write+0x612/0xba0 [ 347.909934][ T9164] ? __pfx_vfs_write+0x10/0x10 [ 347.909954][ T9164] ? __fget_files+0x3a2/0x420 [ 347.909969][ T9164] ? __fget_files+0x2a/0x420 [ 347.909988][ T9164] ? fdget+0x1ac/0x250 [ 347.910009][ T9164] ksys_write+0x150/0x270 [ 347.910028][ T9164] ? __pfx_ksys_write+0x10/0x10 [ 347.910055][ T9164] do_syscall_64+0x166/0x520 [ 347.910071][ T9164] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.910088][ T9164] ? clear_bhb_loop+0x70/0xc0 [ 347.910107][ T9164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.910123][ T9164] RIP: 0033:0x7f4adeb9f559 [ 347.910137][ T9164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.910151][ T9164] RSP: 002b:00007f4adf9df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 347.910169][ T9164] RAX: ffffffffffffffda RBX: 00007f4adee25fa0 RCX: 00007f4adeb9f559 [ 347.910181][ T9164] RDX: 0000000000000009 RSI: 0000200000000540 RDI: 0000000000000004 [ 347.910190][ T9164] RBP: 00007f4adf9df090 R08: 0000000000000000 R09: 0000000000000000 [ 347.910200][ T9164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.910210][ T9164] R13: 00007f4adee26038 R14: 00007f4adee25fa0 R15: 00007f4adef4fa48 [ 347.910235][ T9164] [ 348.292595][ T9160] macsec0: entered allmulticast mode [ 348.655817][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 348.656545][ T192] usb 2-1: USB disconnect, device number 31 [ 348.701590][ T50] IPVS: starting estimator thread 0... [ 348.719981][ T192] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 348.751578][ T192] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 348.753025][ T192] quatech2 2-1:0.51: device disconnected [ 348.807834][ T9169] IPVS: using max 28 ests per chain, 67200 per kthread [ 349.732337][ T9174] xt_CONNSECMARK: invalid mode: 0 [ 349.777865][ T5698] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 349.930672][ T5698] usb 4-1: New USB device found: idVendor=0b48, idProduct=2003, bcdDevice=18.d2 [ 349.933371][ T5698] usb 4-1: config 1 has an invalid interface number: 68 but max is 0 [ 349.933402][ T5698] usb 4-1: config 1 has no interface number 0 [ 349.933448][ T5698] usb 4-1: config 1 interface 68 has no altsetting 0 [ 349.957364][ T5698] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.957396][ T5698] usb 4-1: Product: syz [ 349.957413][ T5698] usb 4-1: Manufacturer: syz [ 349.957429][ T5698] usb 4-1: SerialNumber: syz [ 350.155228][ T9182] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1069'. [ 350.317717][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 352.029949][ T192] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 352.292531][ T192] usb 2-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 352.296519][ T192] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 352.296563][ T192] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 352.296577][ T192] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 352.296592][ T192] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 352.296618][ T192] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.614650][ T5698] ttusbir 4-1:1.68: cannot find expected altsetting [ 352.650423][ T5698] usb 4-1: USB disconnect, device number 32 [ 352.782101][ T9184] netlink: 'syz.1.1068': attribute type 6 has an invalid length. [ 352.834759][ T9184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1068'. [ 352.958333][ T192] gud 2-1:1.0: probe with driver gud failed with error -71 [ 352.990735][ T192] usb 2-1: USB disconnect, device number 32 [ 353.340491][ T30] kauditd_printk_skb: 172 callbacks suppressed [ 353.340512][ T30] audit: type=1326 audit(1792955073.943:3298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9218 comm="syz.3.1077" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4adeb9f559 code=0x7ffc0000 [ 353.340558][ T30] audit: type=1326 audit(1792955073.943:3299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9218 comm="syz.3.1077" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4adeb9f559 code=0x7ffc0000 [ 353.340600][ T30] audit: type=1326 audit(1792955073.943:3300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9218 comm="syz.3.1077" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4adeb9f559 code=0x7ffc0000 [ 353.340643][ T30] audit: type=1326 audit(1792955073.943:3301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9218 comm="syz.3.1077" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4adeb9f559 code=0x7ffc0000 [ 353.344759][ T30] audit: type=1326 audit(1792955073.943:3302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9218 comm="syz.3.1077" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f4adeb9f559 code=0x7ffc0000 [ 353.345108][ T30] audit: type=1326 audit(1792955073.953:3303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9218 comm="syz.3.1077" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4adeb9f559 code=0x7ffc0000 [ 353.345451][ T30] audit: type=1326 audit(1792955073.953:3304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9218 comm="syz.3.1077" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4adeb9f559 code=0x7ffc0000 [ 353.347277][ T30] audit: type=1326 audit(1792955073.953:3305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9218 comm="syz.3.1077" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4adeb9f559 code=0x7ffc0000 [ 353.347313][ T30] audit: type=1326 audit(1792955073.953:3306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9218 comm="syz.3.1077" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4adeb9f559 code=0x7ffc0000 [ 353.347341][ T30] audit: type=1326 audit(1792955073.953:3307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9218 comm="syz.3.1077" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4adeb9f559 code=0x7ffc0000 [ 353.761974][ T9225] FAULT_INJECTION: forcing a failure. [ 353.761974][ T9225] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 353.762014][ T9225] CPU: 0 UID: 0 PID: 9225 Comm: syz.4.1080 Tainted: G L syzkaller #0 PREEMPT(full) [ 353.762044][ T9225] Tainted: [L]=SOFTLOCKUP [ 353.762052][ T9225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 353.762065][ T9225] Call Trace: [ 353.762074][ T9225] [ 353.762083][ T9225] dump_stack_lvl+0xe8/0x150 [ 353.762123][ T9225] should_fail_ex+0x410/0x560 [ 353.762156][ T9225] _copy_from_iter+0x1d3/0x1660 [ 353.762191][ T9225] ? _copy_from_iter+0x21b/0x1660 [ 353.762219][ T9225] ? sock_alloc_send_pskb+0xc87/0xd90 [ 353.762246][ T9225] ? __pfx__copy_from_iter+0x10/0x10 [ 353.762278][ T9225] ? __pfx__copy_from_iter+0x10/0x10 [ 353.762314][ T9225] copy_page_from_iter+0x219/0x2d0 [ 353.762346][ T9225] skb_copy_datagram_from_iter+0x2f4/0x720 [ 353.762394][ T9225] tun_get_user+0x1510/0x4470 [ 353.762437][ T9225] ? aa_file_perm+0x18b/0x15f0 [ 353.762469][ T9225] ? aa_file_perm+0x4ed/0x15f0 [ 353.762495][ T9225] ? __pfx_tun_get_user+0x10/0x10 [ 353.762524][ T9225] ? __lock_acquire+0x747/0x2de0 [ 353.762555][ T9225] ? kstrtoull+0x137/0x1d0 [ 353.762586][ T9225] ? ref_tracker_alloc+0x172/0x530 [ 353.762616][ T9225] ? lock_acquire+0x115/0x350 [ 353.762641][ T9225] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 353.762676][ T9225] ? lock_acquire+0x115/0x350 [ 353.762704][ T9225] ? tun_get+0x1c/0x2f0 [ 353.762737][ T9225] ? tun_get+0x1c/0x2f0 [ 353.762761][ T9225] ? tun_get+0x1c/0x2f0 [ 353.762790][ T9225] tun_chr_write_iter+0x113/0x200 [ 353.762817][ T9225] vfs_write+0x612/0xba0 [ 353.762851][ T9225] ? __pfx_vfs_write+0x10/0x10 [ 353.762879][ T9225] ? __fget_files+0x3a2/0x420 [ 353.762901][ T9225] ? __fget_files+0x2a/0x420 [ 353.762927][ T9225] ? fdget+0x1ac/0x250 [ 353.762956][ T9225] ksys_write+0x150/0x270 [ 353.762983][ T9225] ? __pfx_ksys_write+0x10/0x10 [ 353.763020][ T9225] do_syscall_64+0x166/0x520 [ 353.763042][ T9225] ? trace_irq_disable+0x3b/0x140 [ 353.763070][ T9225] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.763092][ T9225] ? clear_bhb_loop+0x70/0xc0 [ 353.763119][ T9225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.763140][ T9225] RIP: 0033:0x7fe702b9f559 [ 353.763161][ T9225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.763180][ T9225] RSP: 002b:00007fe703a61028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 353.763204][ T9225] RAX: ffffffffffffffda RBX: 00007fe702e25fa0 RCX: 00007fe702b9f559 [ 353.763221][ T9225] RDX: 000000000000fdef RSI: 0000200000000740 RDI: 0000000000000005 [ 353.763236][ T9225] RBP: 00007fe703a61090 R08: 0000000000000000 R09: 0000000000000000 [ 353.763250][ T9225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 353.763263][ T9225] R13: 00007fe702e26038 R14: 00007fe702e25fa0 R15: 00007fe702f4fa48 [ 353.763298][ T9225] [ 354.346752][ T5066] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 354.499191][ T5066] usb 1-1: New USB device found: idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 354.500403][ T5066] usb 1-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 354.505476][ T5066] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.505494][ T5066] usb 1-1: Product: syz [ 354.505504][ T5066] usb 1-1: Manufacturer: syz [ 354.505514][ T5066] usb 1-1: SerialNumber: syz [ 354.582506][ T5066] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 354.582560][ T5066] dvb-usb: bulk message failed: -22 (3/0) [ 354.624340][ T5066] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 354.643927][ T5066] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 354.643966][ T5066] usb 1-1: media controller created [ 354.662510][ T192] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 354.738798][ T5066] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 354.807638][ T192] usb 4-1: Using ep0 maxpacket: 16 [ 354.809068][ T192] usb 4-1: New USB device found: idVendor=0763, idProduct=2001, bcdDevice=0.40 [ 354.850963][ T192] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.850984][ T192] usb 4-1: Product: syz [ 354.850995][ T192] usb 4-1: Manufacturer: syz [ 354.851006][ T192] usb 4-1: SerialNumber: syz [ 355.065978][ T5066] DVB: Unable to find symbol mt352_attach() [ 355.065991][ T5066] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 355.083413][ T5066] dvb-usb: bulk message failed: -22 (3/0) [ 355.101086][ T5066] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 355.132166][ T5066] usb 1-1: USB disconnect, device number 18 [ 355.302988][ T9234] openvswitch: netlink: Message has 70 unknown bytes. [ 355.303024][ T9234] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 355.329456][ T5066] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 355.506879][ T192] usb 4-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 355.506911][ T192] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 355.523158][ T192] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 355.616261][ T192] usb 4-1: USB disconnect, device number 33 [ 355.749842][ T5648] udevd[5648]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 356.353176][ T9258] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1089'. [ 356.629868][ T5066] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 356.791975][ T5066] usb 1-1: Using ep0 maxpacket: 32 [ 356.800541][ T5066] usb 1-1: New USB device found: idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 356.817289][ T5066] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.829728][ T5066] usb 1-1: config 0 descriptor?? [ 356.844824][ T5066] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 357.250895][ T192] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 357.269668][ T9271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1095'. [ 357.287486][ T9271] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1095'. [ 357.287602][ T9271] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1095'. [ 357.411209][ T192] usb 2-1: unable to get BOS descriptor or descriptor too short [ 357.412155][ T192] usb 2-1: not running at top speed; connect to a high speed hub [ 357.412178][ T192] usb 2-1: New USB device found: idVendor=061c, idProduct=c084, bcdDevice=da.9f [ 357.416334][ T192] usb 2-1: config 39 has an invalid interface number: 165 but max is 0 [ 357.416358][ T192] usb 2-1: config 39 has no interface number 0 [ 357.416406][ T192] usb 2-1: config 39 interface 165 has no altsetting 0 [ 357.469152][ T192] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.469188][ T192] usb 2-1: Product: syz [ 357.469206][ T192] usb 2-1: Manufacturer: syz [ 357.469225][ T192] usb 2-1: SerialNumber: syz [ 357.831961][ T5066] gspca_vc032x: reg_w err -71 [ 357.831998][ T5066] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.832021][ T5066] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.832031][ T5066] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.832040][ T5066] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.832049][ T5066] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.832059][ T5066] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.832067][ T5066] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.832076][ T5066] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.832085][ T5066] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.832094][ T5066] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.832102][ T5066] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.832111][ T5066] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.832119][ T5066] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.832128][ T5066] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.832137][ T5066] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.832145][ T5066] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.832152][ T5066] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.832160][ T5066] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.832166][ T5066] gspca_vc032x: Unknown sensor... [ 357.832234][ T5066] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 357.962515][ T5066] usb 1-1: USB disconnect, device number 19 [ 358.715738][ T192] usb 2-1: USB disconnect, device number 33 [ 359.373646][ T9290] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.374706][ T9290] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.644528][ T9314] ip_tables: iptables: counters copy to user failed while replacing table [ 362.033973][ T9336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1116'. [ 362.624932][ T9344] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1117'. [ 362.696617][ T9343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1117'. [ 362.696994][ T9343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1117'. [ 362.697153][ T9343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1117'. [ 362.697301][ T9343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1117'. [ 362.697454][ T9343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1117'. [ 362.746658][ T9343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1117'. [ 362.746906][ T9343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1117'. [ 362.747064][ T9343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1117'. [ 362.821715][ T5714] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 362.947679][ T5714] usb 1-1: device descriptor read/64, error -71 [ 363.199816][ T5714] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 363.349160][ T5714] usb 1-1: device descriptor read/64, error -71 [ 363.398481][ T9349] openvswitch: netlink: Message has 70 unknown bytes. [ 363.398508][ T9349] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 363.458017][ T5714] usb usb1-port1: attempt power cycle [ 363.817643][ T5714] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 363.868606][ T5714] usb 1-1: device descriptor read/8, error -71 [ 364.121211][ T5714] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 364.141705][ T5714] usb 1-1: device descriptor read/8, error -71 [ 364.248514][ T5714] usb usb1-port1: unable to enumerate USB device [ 364.335176][ T9360] kvm: pic: non byte write [ 364.474207][ T9366] program syz.3.1123 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 366.119211][ T5739] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 366.167680][ T5699] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 366.269826][ T5739] usb 2-1: New USB device found: idVendor=0755, idProduct=2626, bcdDevice=0.40 [ 366.284655][ T5739] usb 2-1: config 1 interface 0 altsetting 56 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 366.284691][ T5739] usb 2-1: config 1 interface 0 has no altsetting 0 [ 366.317612][ T5699] usb 3-1: Using ep0 maxpacket: 16 [ 366.317818][ T5739] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.317833][ T5739] usb 2-1: Product: ࡃ [ 366.317842][ T5739] usb 2-1: Manufacturer: ࠔ [ 366.317852][ T5739] usb 2-1: SerialNumber: syz [ 366.318163][ T5699] usb 3-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 366.319438][ T5699] usb 3-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 366.319473][ T5699] usb 3-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 366.319515][ T5699] usb 3-1: config 253 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 366.323811][ T5699] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 366.323836][ T5699] usb 3-1: SerialNumber: syz [ 366.712952][ T5699] rndis_host 3-1:253.0: skipping garbage [ 366.713260][ T5699] rndis_host 3-1:253.0: probe with driver rndis_host failed with error -22 [ 366.756284][ T5699] usb 3-1: USB disconnect, device number 40 [ 366.800808][ T5634] udevd[5634]: setting mode of /dev/bus/usb/003/040 to 020664 failed: No such file or directory [ 366.800931][ T5634] udevd[5634]: setting owner of /dev/bus/usb/003/040 to uid=0, gid=0 failed: No such file or directory [ 366.907662][ T5066] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 367.065346][ T5066] usb 5-1: New USB device found: idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 367.080234][ T5066] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 367.080270][ T5066] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.080288][ T5066] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.126929][ T5066] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 367.126950][ T5066] usb 5-1: Manufacturer: syz [ 367.149415][ T5066] usb 5-1: config 0 descriptor?? [ 367.179126][ T5066] igorplugusb 5-1:0.0: endpoint incorrect [ 367.283923][ T5739] usbhid 2-1:1.0: can't add hid device: -71 [ 367.284033][ T5739] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 367.324253][ T5739] usb 2-1: USB disconnect, device number 34 [ 367.772825][ T9394] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 367.772845][ T9394] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 368.421308][ T9404] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 368.550975][ T9407] syzkaller1: entered promiscuous mode [ 368.550995][ T9407] syzkaller1: entered allmulticast mode [ 368.608741][ T9404] __nla_validate_parse: 25 callbacks suppressed [ 368.608789][ T9404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1133'. [ 368.954425][ T5739] usb 5-1: USB disconnect, device number 31 [ 369.793671][ T9422] openvswitch: netlink: Message has 70 unknown bytes. [ 369.793708][ T9422] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 370.093257][ T9412] netlink: 'syz.1.1135': attribute type 1 has an invalid length. [ 370.168687][ T9412] bond1: entered promiscuous mode [ 370.172462][ T9412] 8021q: adding VLAN 0 to HW filter on device bond1 [ 370.205111][ T53] Bluetooth: hci4: Ignoring connect complete event for invalid link type [ 370.455178][ T9412] bond1: (slave bridge1): making interface the new active one [ 370.455209][ T9412] bridge1: entered promiscuous mode [ 370.475953][ T9412] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 371.846493][ T9423] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 371.867754][ T5699] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 371.894779][ T9445] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1146'. [ 371.894801][ T9445] openvswitch: netlink: EtherType 0 is less than min 600 [ 372.018557][ T5699] usb 1-1: Using ep0 maxpacket: 8 [ 372.019334][ T5699] usb 1-1: New USB device found: idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 372.019905][ T5699] usb 1-1: config 0 has no interfaces? [ 372.019949][ T5699] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.058331][ T5699] usb 1-1: config 0 descriptor?? [ 372.647726][ T5699] usb 3-1: new low-speed USB device number 41 using dummy_hcd [ 372.777697][ T5699] usb 3-1: device descriptor read/64, error -71 [ 372.937331][ T5727] usb 1-1: USB disconnect, device number 24 [ 373.017926][ T5699] usb 3-1: new low-speed USB device number 42 using dummy_hcd [ 373.147652][ T5699] usb 3-1: device descriptor read/64, error -71 [ 373.263788][ T5699] usb usb3-port1: attempt power cycle [ 373.460431][ T9460] netlink: 'syz.1.1149': attribute type 39 has an invalid length. [ 373.514863][ T9461] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1149'. [ 373.601621][ T5699] usb 3-1: new low-speed USB device number 43 using dummy_hcd [ 373.618390][ T5699] usb 3-1: device descriptor read/8, error -71 [ 373.831052][ T9467] FAULT_INJECTION: forcing a failure. [ 373.831052][ T9467] name failslab, interval 1, probability 0, space 0, times 0 [ 373.831096][ T9467] CPU: 1 UID: 0 PID: 9467 Comm: syz.0.1153 Tainted: G L syzkaller #0 PREEMPT(full) [ 373.831118][ T9467] Tainted: [L]=SOFTLOCKUP [ 373.831123][ T9467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 373.831136][ T9467] Call Trace: [ 373.831142][ T9467] [ 373.831149][ T9467] dump_stack_lvl+0xe8/0x150 [ 373.831179][ T9467] should_fail_ex+0x410/0x560 [ 373.831203][ T9467] should_failslab+0xa8/0x100 [ 373.831224][ T9467] ? skb_clone+0x212/0x3a0 [ 373.831241][ T9467] kmem_cache_alloc_noprof+0x9c/0x600 [ 373.831261][ T9467] ? skb_clone+0x212/0x3a0 [ 373.831281][ T9467] skb_clone+0x212/0x3a0 [ 373.831300][ T9467] __netlink_deliver_tap+0x355/0x6e0 [ 373.831328][ T9467] ? netlink_deliver_tap+0x2e/0x1b0 [ 373.831350][ T9467] netlink_deliver_tap+0x19c/0x1b0 [ 373.831371][ T9467] netlink_unicast+0x8c1/0xa80 [ 373.831401][ T9467] netlink_sendmsg+0x7f0/0xb20 [ 373.831426][ T9467] ? __pfx_netlink_sendmsg+0x10/0x10 [ 373.831450][ T9467] ? aa_sock_msg_perm+0x144/0x210 [ 373.831471][ T9467] ? apparmor_socket_sendmsg+0x98/0x360 [ 373.831488][ T9467] ? __pfx_netlink_sendmsg+0x10/0x10 [ 373.831508][ T9467] sock_sendmsg_nosec+0x14e/0x190 [ 373.831529][ T9467] __sys_sendto+0x408/0x5a0 [ 373.831552][ T9467] ? ksys_write+0x1e6/0x270 [ 373.831571][ T9467] ? __pfx___sys_sendto+0x10/0x10 [ 373.831592][ T9467] ? __mutex_unlock_slowpath+0x731/0x900 [ 373.831618][ T9467] ? fdget+0x1ac/0x250 [ 373.831642][ T9467] ? __pfx_ksys_write+0x10/0x10 [ 373.831663][ T9467] __x64_sys_sendto+0xde/0x100 [ 373.831689][ T9467] do_syscall_64+0x166/0x520 [ 373.831703][ T9467] ? trace_irq_disable+0x3b/0x140 [ 373.831724][ T9467] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.831740][ T9467] ? clear_bhb_loop+0x70/0xc0 [ 373.831765][ T9467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.831783][ T9467] RIP: 0033:0x7f2264f9f559 [ 373.831798][ T9467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.831811][ T9467] RSP: 002b:00007f2265ec9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 373.831828][ T9467] RAX: ffffffffffffffda RBX: 00007f2265225fa0 RCX: 00007f2264f9f559 [ 373.831839][ T9467] RDX: 00000000000000a8 RSI: 0000200000000500 RDI: 0000000000000003 [ 373.831849][ T9467] RBP: 00007f2265ec9090 R08: 0000000000000000 R09: 0000000000000000 [ 373.831859][ T9467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.831869][ T9467] R13: 00007f2265226038 R14: 00007f2265225fa0 R15: 00007f226534fa48 [ 373.831893][ T9467] [ 373.868159][ T5699] usb 3-1: new low-speed USB device number 44 using dummy_hcd [ 373.897467][ T5699] usb 3-1: device descriptor read/8, error -71 [ 373.999555][ T5699] usb usb3-port1: unable to enumerate USB device [ 374.609779][ T30] kauditd_printk_skb: 240 callbacks suppressed [ 374.609812][ T30] audit: type=1326 audit(1792955095.213:3548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9470 comm="syz.0.1155" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2264f9f559 code=0x7ffc0000 [ 374.609861][ T30] audit: type=1326 audit(1792955095.213:3549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9470 comm="syz.0.1155" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2264f9f559 code=0x7ffc0000 [ 374.610394][ T30] audit: type=1326 audit(1792955095.223:3551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9470 comm="syz.0.1155" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2264f9f559 code=0x7ffc0000 [ 374.611870][ T30] audit: type=1326 audit(1792955095.223:3550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9470 comm="syz.0.1155" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2264f9f559 code=0x7ffc0000 [ 374.611905][ T30] audit: type=1326 audit(1792955095.223:3552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9470 comm="syz.0.1155" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2264f9f559 code=0x7ffc0000 [ 374.611934][ T30] audit: type=1326 audit(1792955095.223:3553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9470 comm="syz.0.1155" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2264f9f559 code=0x7ffc0000 [ 374.611962][ T30] audit: type=1326 audit(1792955095.223:3554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9470 comm="syz.0.1155" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2264f9f559 code=0x7ffc0000 [ 374.686941][ T30] audit: type=1326 audit(1792955095.263:3555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9470 comm="syz.0.1155" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2264f9f559 code=0x7ffc0000 [ 374.687082][ T30] audit: type=1326 audit(1792955095.263:3556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9470 comm="syz.0.1155" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2264f9f559 code=0x7ffc0000 [ 374.746848][ T30] audit: type=1326 audit(1792955095.353:3558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9470 comm="syz.0.1155" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2264f9f559 code=0x7ffc0000 [ 376.197658][ T24] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 376.347695][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 376.360680][ T24] usb 1-1: New USB device found: idVendor=0763, idProduct=2001, bcdDevice=0.40 [ 376.442045][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.442071][ T24] usb 1-1: Product: syz [ 376.442087][ T24] usb 1-1: Manufacturer: syz [ 376.442097][ T24] usb 1-1: SerialNumber: syz [ 377.030452][ T9471] warning: `syz.0.1155' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 377.146318][ T24] usb 1-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 377.146609][ T24] usb 1-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 377.165166][ T24] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 377.226901][ T9500] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[5650] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[9500] [ 377.285785][ T9499] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1162'. [ 377.423662][ T24] usb 1-1: USB disconnect, device number 25 [ 377.607853][ T192] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 377.656259][ T5648] udevd[5648]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 377.764430][ T192] usb 3-1: Using ep0 maxpacket: 16 [ 377.765773][ T192] usb 3-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 377.799524][ T192] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 377.799576][ T192] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.862257][ T192] usb 3-1: config 0 descriptor?? [ 377.928254][ T192] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 378.172757][ T9308] syz.4.1104 (9308) used greatest stack depth: 15392 bytes left [ 378.467721][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 378.476033][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.476182][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.573191][ T192] usb 3-1: USB disconnect, device number 45 [ 380.887776][ T24] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 381.056219][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 381.076855][ T24] usb 1-1: not running at top speed; connect to a high speed hub [ 381.076889][ T24] usb 1-1: New USB device found: idVendor=061c, idProduct=c084, bcdDevice=da.9f [ 381.126443][ T24] usb 1-1: config 39 has an invalid interface number: 165 but max is 0 [ 381.126472][ T24] usb 1-1: config 39 has no interface number 0 [ 381.126513][ T24] usb 1-1: config 39 interface 165 has no altsetting 0 [ 381.182018][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.182048][ T24] usb 1-1: Product: syz [ 381.182070][ T24] usb 1-1: Manufacturer: syz [ 381.182081][ T24] usb 1-1: SerialNumber: syz [ 381.489037][ T5727] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 381.661484][ T5727] usb 5-1: New USB device found: idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 381.662043][ T5727] usb 5-1: config 0 has no interfaces? [ 381.662077][ T5727] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.704257][ T5727] usb 5-1: config 0 descriptor?? [ 381.739849][ T24] usb 1-1: USB disconnect, device number 26 [ 381.813610][ T9355] syz.4.1120 (9355) used greatest stack depth: 15336 bytes left [ 382.051303][ T30] kauditd_printk_skb: 172 callbacks suppressed [ 382.051317][ T30] audit: type=1326 audit(1792955102.663:3730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9543 comm="syz.1.1177" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd31659f559 code=0x0 [ 382.951156][ T5727] usb 5-1: USB disconnect, device number 32 [ 384.548311][ T24] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 384.747193][ T24] usb 1-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 384.749068][ T24] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 384.749149][ T24] usb 1-1: config 1 has no interface number 0 [ 384.800423][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.800444][ T24] usb 1-1: Product: syz [ 384.800454][ T24] usb 1-1: Manufacturer: syz [ 384.800465][ T24] usb 1-1: SerialNumber: syz [ 384.878457][ T24] usb 1-1: 3:1 : does not exist [ 384.878483][ T24] usb 1-1: 3:2 : does not exist [ 384.971842][ T9580] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1190'. [ 385.450764][ T9580] FAULT_INJECTION: forcing a failure. [ 385.450764][ T9580] name failslab, interval 1, probability 0, space 0, times 0 [ 385.450791][ T9580] CPU: 0 UID: 0 PID: 9580 Comm: syz.1.1190 Tainted: G L syzkaller #0 PREEMPT(full) [ 385.450811][ T9580] Tainted: [L]=SOFTLOCKUP [ 385.450816][ T9580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 385.450826][ T9580] Call Trace: [ 385.450831][ T9580] [ 385.450837][ T9580] dump_stack_lvl+0xe8/0x150 [ 385.450864][ T9580] should_fail_ex+0x410/0x560 [ 385.450904][ T9580] should_failslab+0xa8/0x100 [ 385.450941][ T9580] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 385.450994][ T9580] ? __d_alloc+0x37/0x820 [ 385.451016][ T9580] ? __d_alloc+0x37/0x820 [ 385.451046][ T9580] __d_alloc+0x37/0x820 [ 385.451074][ T9580] d_alloc+0x4b/0x190 [ 385.451089][ T9580] ? lookup_one_qstr_excl+0xc4/0x360 [ 385.451110][ T9580] lookup_one_qstr_excl+0xd8/0x360 [ 385.451126][ T9580] ? lookup_noperm_common+0x245/0x430 [ 385.451144][ T9580] start_dirop+0x5c/0x90 [ 385.451159][ T9580] simple_start_creating+0xcc/0x110 [ 385.451178][ T9580] ? __pfx_simple_start_creating+0x10/0x10 [ 385.451196][ T9580] ? mntput+0x65/0xc0 [ 385.451226][ T9580] debugfs_start_creating+0xca/0x1b0 [ 385.451269][ T9580] debugfs_create_dir+0x24/0x350 [ 385.451295][ T9580] ieee80211_debugfs_recreate_netdev+0x1cc/0x14b0 [ 385.451325][ T9580] ? __pfx_ieee80211_debugfs_recreate_netdev+0x10/0x10 [ 385.451363][ T9580] drv_remove_interface+0x1e6/0x580 [ 385.451391][ T9580] ieee80211_do_stop+0x1bff/0x2450 [ 385.451424][ T9580] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 385.451460][ T9580] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 385.451490][ T9580] ieee80211_stop+0x1ab/0x200 [ 385.451507][ T9580] ? __pfx_ieee80211_stop+0x10/0x10 [ 385.451526][ T9580] __dev_close_many+0x361/0x6e0 [ 385.451554][ T9580] ? __pfx___dev_close_many+0x10/0x10 [ 385.451578][ T9580] ? trace_contention_end+0x3d/0x140 [ 385.451613][ T9580] netif_close_many+0x249/0x660 [ 385.451640][ T9580] ? __pfx_netif_close_many+0x10/0x10 [ 385.451662][ T9580] ? nl80211_del_interface+0x9b/0x140 [ 385.451687][ T9580] netif_close+0x160/0x220 [ 385.451708][ T9580] ? __pfx_netif_close+0x10/0x10 [ 385.451730][ T9580] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 385.451756][ T9580] dev_close+0xf7/0x210 [ 385.451782][ T9580] nl80211_del_interface+0xcd/0x140 [ 385.451803][ T9580] genl_family_rcv_msg_doit+0x233/0x340 [ 385.451826][ T9580] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 385.451852][ T9580] ? bpf_lsm_capable+0x9/0x20 [ 385.451876][ T9580] ? security_capable+0x7e/0x2c0 [ 385.451898][ T9580] genl_rcv_msg+0x614/0x7a0 [ 385.451918][ T9580] ? __pfx_genl_rcv_msg+0x10/0x10 [ 385.451933][ T9580] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 385.451957][ T9580] ? __pfx_nl80211_del_interface+0x10/0x10 [ 385.451974][ T9580] ? __pfx_nl80211_post_doit+0x10/0x10 [ 385.452009][ T9580] netlink_rcv_skb+0x226/0x4a0 [ 385.452032][ T9580] ? __pfx_genl_rcv_msg+0x10/0x10 [ 385.452049][ T9580] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 385.452082][ T9580] ? down_read+0x2b9/0x320 [ 385.452105][ T9580] genl_rcv+0x28/0x40 [ 385.452119][ T9580] netlink_unicast+0x8ef/0xa80 [ 385.452151][ T9580] netlink_sendmsg+0x7f0/0xb20 [ 385.452177][ T9580] ? __pfx_netlink_sendmsg+0x10/0x10 [ 385.452202][ T9580] ? aa_sock_msg_perm+0x144/0x210 [ 385.452224][ T9580] ? apparmor_socket_sendmsg+0x98/0x360 [ 385.452242][ T9580] ? __pfx_netlink_sendmsg+0x10/0x10 [ 385.452263][ T9580] sock_sendmsg_nosec+0x14e/0x190 [ 385.452292][ T9580] ____sys_sendmsg+0x54e/0x850 [ 385.452312][ T9580] ? __pfx_____sys_sendmsg+0x10/0x10 [ 385.452335][ T9580] ? import_iovec+0x73/0xa0 [ 385.452359][ T9580] ___sys_sendmsg+0x2a5/0x360 [ 385.452373][ T9580] ? __lock_acquire+0x747/0x2de0 [ 385.452396][ T9580] ? __pfx____sys_sendmsg+0x10/0x10 [ 385.452457][ T9580] ? __fget_files+0x3a2/0x420 [ 385.452480][ T9580] ? __fget_files+0x2a/0x420 [ 385.452513][ T9580] __x64_sys_sendmsg+0x1b1/0x290 [ 385.452532][ T9580] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 385.452564][ T9580] do_syscall_64+0x166/0x520 [ 385.452580][ T9580] ? trace_irq_disable+0x3b/0x140 [ 385.452607][ T9580] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.452623][ T9580] ? clear_bhb_loop+0x70/0xc0 [ 385.452643][ T9580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.452659][ T9580] RIP: 0033:0x7fd31659f559 [ 385.452674][ T9580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.452688][ T9580] RSP: 002b:00007fd3174d9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 385.452705][ T9580] RAX: ffffffffffffffda RBX: 00007fd316825fa0 RCX: 00007fd31659f559 [ 385.452717][ T9580] RDX: 0000000000000000 RSI: 0000200000003ec0 RDI: 000000000000000a [ 385.452728][ T9580] RBP: 00007fd3174d9090 R08: 0000000000000000 R09: 0000000000000000 [ 385.452738][ T9580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.452747][ T9580] R13: 00007fd316826038 R14: 00007fd316825fa0 R15: 00007fd31694fa48 [ 385.452773][ T9580] [ 385.501280][ T9585] FAULT_INJECTION: forcing a failure. [ 385.501280][ T9585] name failslab, interval 1, probability 0, space 0, times 0 [ 385.501308][ T9585] CPU: 0 UID: 0 PID: 9585 Comm: syz.4.1192 Tainted: G L syzkaller #0 PREEMPT(full) [ 385.501329][ T9585] Tainted: [L]=SOFTLOCKUP [ 385.501335][ T9585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 385.501358][ T9585] Call Trace: [ 385.501363][ T9585] [ 385.501370][ T9585] dump_stack_lvl+0xe8/0x150 [ 385.501398][ T9585] should_fail_ex+0x410/0x560 [ 385.501422][ T9585] should_failslab+0xa8/0x100 [ 385.501443][ T9585] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 385.501460][ T9585] kmem_cache_alloc_noprof+0x9c/0x600 [ 385.501475][ T9585] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 385.501490][ T9585] ? kmem_cache_alloc_noprof+0x151/0x600 [ 385.501505][ T9585] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 385.501526][ T9585] __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 385.501550][ T9585] mmu_topup_memory_caches+0x21/0x1a0 [ 385.501570][ T9585] kvm_mmu_load+0x9d/0x21e0 [ 385.501596][ T9585] ? __pfx_pic_unlock+0x10/0x10 [ 385.501613][ T9585] ? pic_update_irq+0x576/0x7f0 [ 385.501632][ T9585] ? vmx_get_rflags+0x219/0x400 [ 385.501647][ T9585] ? kvm_apic_accept_pic_intr+0x8d/0x130 [ 385.501672][ T9585] ? kvm_cpu_has_extint+0xaf/0x340 [ 385.501693][ T9585] vcpu_run+0x4f5b/0x7a90 [ 385.501762][ T9585] ? __pfx_vcpu_run+0x10/0x10 [ 385.501779][ T9585] ? lock_acquire+0x115/0x350 [ 385.501804][ T9585] ? vmx_unhandleable_emulation_required+0x77/0x230 [ 385.501826][ T9585] kvm_arch_vcpu_ioctl_run+0xe83/0x18b0 [ 385.501846][ T9585] ? kvm_arch_vcpu_ioctl_run+0x1f5/0x18b0 [ 385.501864][ T9585] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 385.501887][ T9585] kvm_vcpu_ioctl+0xa61/0xfd0 [ 385.501910][ T9585] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 385.501945][ T9585] ? __fget_files+0x2a/0x420 [ 385.501962][ T9585] ? __fget_files+0x2a/0x420 [ 385.501978][ T9585] ? __fget_files+0x2a/0x420 [ 385.501996][ T9585] ? bpf_lsm_file_ioctl+0x9/0x20 [ 385.502018][ T9585] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 385.502036][ T9585] __se_sys_ioctl+0xfc/0x170 [ 385.502058][ T9585] do_syscall_64+0x166/0x520 [ 385.502074][ T9585] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.502090][ T9585] ? clear_bhb_loop+0x70/0xc0 [ 385.502109][ T9585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.502124][ T9585] RIP: 0033:0x7fe702b9f559 [ 385.502137][ T9585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.502151][ T9585] RSP: 002b:00007fe703a61028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 385.502167][ T9585] RAX: ffffffffffffffda RBX: 00007fe702e25fa0 RCX: 00007fe702b9f559 [ 385.502178][ T9585] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 385.502187][ T9585] RBP: 00007fe703a61090 R08: 0000000000000000 R09: 0000000000000000 [ 385.502197][ T9585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 385.502206][ T9585] R13: 00007fe702e26038 R14: 00007fe702e25fa0 R15: 00007fe702f4fa48 [ 385.502230][ T9585] [ 386.869051][ T5714] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 386.896456][ T192] usb 1-1: USB disconnect, device number 27 [ 387.045567][ T5714] usb 4-1: New USB device found: idVendor=0d49, idProduct=7000, bcdDevice=0.01 [ 387.071832][ T5714] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 387.071873][ T5714] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 387.071889][ T5714] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 387.071907][ T5714] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 387.143847][ T5714] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.143884][ T5714] usb 4-1: Product: syz [ 387.143919][ T5714] usb 4-1: Manufacturer: syz [ 387.143933][ T5714] usb 4-1: SerialNumber: syz [ 387.185933][ T5714] ums-onetouch 4-1:1.0: USB Mass Storage device detected [ 387.713116][ T24] usb 4-1: USB disconnect, device number 34 [ 388.788040][ T5714] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 388.896184][ T9613] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 388.962169][ T5714] usb 1-1: New USB device found: idVendor=28bd, idProduct=1903, bcdDevice=0.00 [ 388.973392][ T5714] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 388.973489][ T5714] usb 1-1: config 0 has no interface number 0 [ 388.976737][ T24] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 388.986555][ T5714] usb 1-1: config 0 interface 34 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 388.986632][ T5714] usb 1-1: config 0 interface 34 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 388.986687][ T5714] usb 1-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 388.986793][ T5714] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.068789][ T5714] usb 1-1: config 0 descriptor?? [ 389.129558][ T9613] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 389.147622][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 389.148386][ T24] usb 3-1: New USB device found: idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 389.150244][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 389.150267][ T24] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 389.150302][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.207180][ T24] usb 3-1: config 0 descriptor?? [ 389.314489][ T9616] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.343238][ T9613] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 389.423998][ T9614] ip_tables: iptables: counters copy to user failed while replacing table [ 389.426999][ T24] usb 3-1: USB disconnect, device number 46 [ 389.493255][ T9613] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 389.614409][ T5714] uclogic 0003:28BD:1903.0007: interface is invalid, ignoring [ 389.963471][ T5727] usb 1-1: USB disconnect, device number 28 [ 390.538442][ T5727] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 390.687699][ T5727] usb 4-1: Using ep0 maxpacket: 16 [ 390.688581][ T5727] usb 4-1: New USB device found: idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 390.749684][ T5727] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.749706][ T5727] usb 4-1: Product: syz [ 390.749717][ T5727] usb 4-1: Manufacturer: syz [ 390.749728][ T5727] usb 4-1: SerialNumber: syz [ 391.093401][ T5727] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 391.121105][ T5727] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 391.121338][ T5727] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 391.121368][ T5727] usb 4-1: media controller created [ 391.189678][ T5727] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 391.315893][ T5727] zl10353_read_register: readreg error (reg=127, ret==-71) [ 391.632431][ T5727] dvb_usb_gl861 4-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 391.663289][ T5727] usb 4-1: USB disconnect, device number 35 [ 392.312041][ T9655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1210'. [ 393.500423][ T9672] FAULT_INJECTION: forcing a failure. [ 393.500423][ T9672] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 393.500454][ T9672] CPU: 0 UID: 0 PID: 9672 Comm: syz.3.1215 Tainted: G L syzkaller #0 PREEMPT(full) [ 393.500476][ T9672] Tainted: [L]=SOFTLOCKUP [ 393.500482][ T9672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 393.500492][ T9672] Call Trace: [ 393.500498][ T9672] [ 393.500505][ T9672] dump_stack_lvl+0xe8/0x150 [ 393.500536][ T9672] should_fail_ex+0x410/0x560 [ 393.500561][ T9672] _copy_from_iter+0x1d3/0x1660 [ 393.500582][ T9672] ? __alloc_skb+0x27a/0x7a0 [ 393.500606][ T9672] ? __alloc_skb+0x27a/0x7a0 [ 393.500631][ T9672] ? __alloc_skb+0x27a/0x7a0 [ 393.500653][ T9672] ? __pfx__copy_from_iter+0x10/0x10 [ 393.500671][ T9672] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 393.500688][ T9672] ? __alloc_skb+0x27a/0x7a0 [ 393.500710][ T9672] ? __alloc_skb+0x27a/0x7a0 [ 393.500736][ T9672] ? netlink_sendmsg+0x64f/0xb20 [ 393.500758][ T9672] ? skb_put+0x112/0x210 [ 393.500784][ T9672] netlink_sendmsg+0x6bb/0xb20 [ 393.500809][ T9672] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.500834][ T9672] ? aa_sock_msg_perm+0x144/0x210 [ 393.500862][ T9672] ? apparmor_socket_sendmsg+0x98/0x360 [ 393.500880][ T9672] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.500901][ T9672] sock_sendmsg_nosec+0x14e/0x190 [ 393.500923][ T9672] ____sys_sendmsg+0x54e/0x850 [ 393.500942][ T9672] ? __pfx_____sys_sendmsg+0x10/0x10 [ 393.500964][ T9672] ? import_iovec+0x73/0xa0 [ 393.500989][ T9672] ___sys_sendmsg+0x2a5/0x360 [ 393.501026][ T9672] ? __lock_acquire+0x747/0x2de0 [ 393.501060][ T9672] ? __pfx____sys_sendmsg+0x10/0x10 [ 393.501124][ T9672] ? __fget_files+0x3a2/0x420 [ 393.501141][ T9672] ? __fget_files+0x2a/0x420 [ 393.501163][ T9672] __x64_sys_sendmsg+0x1b1/0x290 [ 393.501181][ T9672] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 393.501212][ T9672] do_syscall_64+0x166/0x520 [ 393.501228][ T9672] ? trace_irq_disable+0x3b/0x140 [ 393.501250][ T9672] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.501266][ T9672] ? clear_bhb_loop+0x70/0xc0 [ 393.501286][ T9672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.501301][ T9672] RIP: 0033:0x7f4adeb9f559 [ 393.501316][ T9672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.501330][ T9672] RSP: 002b:00007f4adf9df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 393.501361][ T9672] RAX: ffffffffffffffda RBX: 00007f4adee25fa0 RCX: 00007f4adeb9f559 [ 393.501372][ T9672] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 393.501382][ T9672] RBP: 00007f4adf9df090 R08: 0000000000000000 R09: 0000000000000000 [ 393.501413][ T9672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.501423][ T9672] R13: 00007f4adee26038 R14: 00007f4adee25fa0 R15: 00007f4adef4fa48 [ 393.501447][ T9672] [ 394.422289][ T9652] ip6gre1: entered promiscuous mode [ 394.422308][ T9652] ip6gre1: entered allmulticast mode [ 396.536362][ T30] audit: type=1326 audit(1792955117.143:3731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9703 comm="syz.4.1225" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe702b9f559 code=0x7ffc0000 [ 396.563547][ T30] audit: type=1326 audit(1792955117.183:3732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9703 comm="syz.4.1225" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe702b9f559 code=0x7ffc0000 [ 396.594995][ T30] audit: type=1326 audit(1792955117.203:3733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9703 comm="syz.4.1225" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe702b9f559 code=0x7ffc0000 [ 396.626641][ T30] audit: type=1326 audit(1792955117.243:3734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9703 comm="syz.4.1225" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe702b9f559 code=0x7ffc0000 [ 396.669194][ T30] audit: type=1326 audit(1792955117.283:3735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9703 comm="syz.4.1225" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe702b9f559 code=0x7ffc0000 [ 396.669362][ T30] audit: type=1326 audit(1792955117.283:3736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9703 comm="syz.4.1225" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe702b9f559 code=0x7ffc0000 [ 396.670053][ T30] audit: type=1326 audit(1792955117.283:3737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9703 comm="syz.4.1225" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe702b9f559 code=0x7ffc0000 [ 396.757371][ T30] audit: type=1326 audit(1792955117.373:3738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9703 comm="syz.4.1225" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe702b9f559 code=0x7ffc0000 [ 396.757427][ T30] audit: type=1326 audit(1792955117.373:3739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9703 comm="syz.4.1225" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe702b9f559 code=0x7ffc0000 [ 396.816251][ T30] audit: type=1326 audit(1792955117.423:3740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9703 comm="syz.4.1225" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe702b9f559 code=0x7ffc0000 [ 397.683632][ T9706] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1226'. [ 398.518623][ T5727] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 398.688142][ T5727] usb 5-1: Using ep0 maxpacket: 16 [ 398.708665][ T5727] usb 5-1: New USB device found: idVendor=0763, idProduct=2001, bcdDevice=0.40 [ 398.792467][ T5727] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.792494][ T5727] usb 5-1: Product: syz [ 398.792508][ T5727] usb 5-1: Manufacturer: syz [ 398.792521][ T5727] usb 5-1: SerialNumber: syz [ 398.887985][ T192] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 399.047992][ T192] usb 4-1: unable to get BOS descriptor or descriptor too short [ 399.048046][ T192] usb 4-1: New USB device found: idVendor=041e, idProduct=3237, bcdDevice=0.40 [ 399.052427][ T192] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 399.052454][ T192] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 399.119139][ T192] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.119169][ T192] usb 4-1: Product: syz [ 399.119184][ T192] usb 4-1: Manufacturer: syz [ 399.119208][ T192] usb 4-1: SerialNumber: syz [ 399.737785][ T5714] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 399.891465][ T5714] usb 1-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 399.934167][ T5714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.934197][ T5714] usb 1-1: Product: syz [ 399.934214][ T5714] usb 1-1: Manufacturer: syz [ 399.935583][ T5714] usb 1-1: SerialNumber: syz [ 400.293947][ T5727] usb 5-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 400.294300][ T5727] usb 5-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 400.321788][ T5727] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 400.426191][ T5714] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 400.426247][ T5714] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 400.887287][ T5727] usb 5-1: USB disconnect, device number 33 [ 401.319933][ T5648] udevd[5648]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 401.553615][ T5714] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 401.553666][ T5714] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 401.600579][ T5714] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 401.632806][ T5714] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 402.123489][ T53] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 402.235544][ T192] usb 4-1: unit 4 not found! [ 402.591475][ T192] usb 4-1: USB disconnect, device number 36 [ 402.953679][ T5634] udevd[5634]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 403.078092][ T5699] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 403.247705][ T5699] usb 2-1: New USB device found: idVendor=054c, idProduct=0002, bcdDevice=0.00 [ 403.254267][ T5699] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 167, changing to 11 [ 403.254306][ T5699] usb 2-1: config 0 interface 0 has no altsetting 0 [ 403.254341][ T5699] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.306461][ T5699] usb 2-1: config 0 descriptor?? [ 403.959611][ T5699] sony 0003:054C:0002.0008: not enough values in HID_OUTPUT_REPORT 0 field 0 [ 403.984629][ T5699] sony 0003:054C:0002.0008: hidraw0: USB HID v0.04 Joystick [HID 054c:0002] on usb-dummy_hcd.1-1/input0 [ 403.984654][ T5699] sony 0003:054C:0002.0008: failed to claim input [ 404.436064][ T9752] Option 'dnserror' to dns_resolver key: bad/missing value [ 409.187707][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 409.468914][ T9761] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1238'. [ 409.806233][ T192] usb 1-1: USB disconnect, device number 29 [ 410.463507][ T192] usb 2-1: USB disconnect, device number 35 [ 411.082779][ T9778] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1243'. [ 412.093673][ T9791] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1248'. [ 412.657181][ T9795] syzkaller0: entered promiscuous mode [ 412.657197][ T9795] syzkaller0: entered allmulticast mode [ 412.760858][ T9798] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 412.845766][ T9798] fuse: Bad value for 'fd' [ 412.898330][ T5698] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 413.038245][ T5698] usb 3-1: device descriptor read/64, error -71 [ 413.307742][ T5698] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 413.458824][ T5698] usb 3-1: device descriptor read/64, error -71 [ 413.568319][ T5698] usb usb3-port1: attempt power cycle [ 413.622190][ T9816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1254'. [ 413.917656][ T5698] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 413.962508][ T5698] usb 3-1: device descriptor read/8, error -71 [ 414.228546][ T5698] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 414.249488][ T5698] usb 3-1: device descriptor read/8, error -71 [ 414.358149][ T5698] usb usb3-port1: unable to enumerate USB device [ 417.291699][ T9844] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1264'. [ 419.253713][ T9863] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 419.422134][ T30] kauditd_printk_skb: 172 callbacks suppressed [ 419.422158][ T30] audit: type=1326 audit(1792955140.023:3913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9864 comm="syz.2.1273" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5545b9f559 code=0x0 [ 419.630107][ T9872] FAULT_INJECTION: forcing a failure. [ 419.630107][ T9872] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 419.630617][ T9872] CPU: 1 UID: 0 PID: 9872 Comm: syz.1.1274 Tainted: G L syzkaller #0 PREEMPT(full) [ 419.630646][ T9872] Tainted: [L]=SOFTLOCKUP [ 419.630653][ T9872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 419.630664][ T9872] Call Trace: [ 419.630672][ T9872] [ 419.630680][ T9872] dump_stack_lvl+0xe8/0x150 [ 419.630716][ T9872] should_fail_ex+0x410/0x560 [ 419.630747][ T9872] _copy_to_user+0x31/0xb0 [ 419.630776][ T9872] simple_read_from_buffer+0xe1/0x170 [ 419.630801][ T9872] proc_fail_nth_read+0x1bb/0x230 [ 419.630831][ T9872] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 419.630860][ T9872] ? rw_verify_area+0x24a/0x4c0 [ 419.630883][ T9872] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 419.630911][ T9872] vfs_read+0x213/0xa80 [ 419.630955][ T9872] ? __pfx___mutex_lock+0x10/0x10 [ 419.630978][ T9872] ? __pfx_vfs_read+0x10/0x10 [ 419.631002][ T9872] ? __fget_files+0x2a/0x420 [ 419.631021][ T9872] ? __fget_files+0x3a2/0x420 [ 419.631041][ T9872] ? __fget_files+0x2a/0x420 [ 419.631065][ T9872] ? fdget+0x1ac/0x250 [ 419.631092][ T9872] ksys_read+0x150/0x270 [ 419.631117][ T9872] ? __pfx_ksys_read+0x10/0x10 [ 419.631176][ T9872] do_syscall_64+0x166/0x520 [ 419.631199][ T9872] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.631222][ T9872] ? clear_bhb_loop+0x70/0xc0 [ 419.631249][ T9872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.631271][ T9872] RIP: 0033:0x7fd31655fd8e [ 419.631292][ T9872] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 419.631310][ T9872] RSP: 002b:00007fd3174d8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 419.631333][ T9872] RAX: ffffffffffffffda RBX: 00007fd3174d96c0 RCX: 00007fd31655fd8e [ 419.631349][ T9872] RDX: 000000000000000f RSI: 00007fd3174d90a0 RDI: 0000000000000006 [ 419.631363][ T9872] RBP: 00007fd3174d9090 R08: 0000000000000000 R09: 0000000000000000 [ 419.631376][ T9872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.631390][ T9872] R13: 00007fd316826038 R14: 00007fd316825fa0 R15: 00007fd31694fa48 [ 419.631425][ T9872] [ 419.979284][ T9874] xt_CT: You must specify a L4 protocol and not use inversions on it [ 420.663106][ T5714] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 420.827374][ T5714] usb 4-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 420.827408][ T5714] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 420.841141][ T5714] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 420.841203][ T5714] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 420.841230][ T5714] usb 4-1: config 0 interface 0 has no altsetting 0 [ 420.885838][ T5714] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 420.885891][ T5714] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 420.885918][ T5714] usb 4-1: config 0 interface 0 has no altsetting 0 [ 420.940341][ T5714] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 420.940404][ T5714] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 420.940431][ T5714] usb 4-1: config 0 interface 0 has no altsetting 0 [ 420.978947][ T5714] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 420.978998][ T5714] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 420.979020][ T5714] usb 4-1: config 0 interface 0 has no altsetting 0 [ 420.981116][ T5714] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 420.981150][ T5714] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 420.981170][ T5714] usb 4-1: config 0 interface 0 has no altsetting 0 [ 420.987081][ T5714] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 420.987116][ T5714] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 420.987135][ T5714] usb 4-1: config 0 interface 0 has no altsetting 0 [ 421.015440][ T5714] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 421.015518][ T5714] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 421.015593][ T5714] usb 4-1: config 0 interface 0 has no altsetting 0 [ 421.112062][ T5714] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 421.112124][ T5714] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 421.112149][ T5714] usb 4-1: config 0 interface 0 has no altsetting 0 [ 421.163892][ T5714] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 421.163924][ T5714] usb 4-1: Product: syz [ 421.163940][ T5714] usb 4-1: Manufacturer: syz [ 421.163954][ T5714] usb 4-1: SerialNumber: syz [ 421.213245][ T5714] usb 4-1: config 0 descriptor?? [ 421.312657][ T5714] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 421.542719][ T5739] usb 4-1: USB disconnect, device number 37 [ 421.564005][ T5739] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 423.157951][ T5739] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 423.318899][ T5739] usb 4-1: New USB device found: idVendor=14e1, idProduct=6000, bcdDevice=0.00 [ 423.353027][ T5739] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.353053][ T5739] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 423.353071][ T5739] usb 4-1: config 0 interface 0 has no altsetting 0 [ 423.353095][ T5739] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.400199][ T5739] usb 4-1: config 0 descriptor?? [ 423.477613][ T192] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 423.635597][ T192] usb 3-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 423.656563][ T192] usb 3-1: config index 0 descriptor too short (expected 65432, got 110) [ 423.656595][ T192] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 423.696642][ T192] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.696663][ T192] usb 3-1: Product: syz [ 423.696674][ T192] usb 3-1: Manufacturer: syz [ 423.696701][ T192] usb 3-1: SerialNumber: syz [ 424.077078][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 424.118458][ T24] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 424.608480][ T24] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 424.806373][ T24] usb 2-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 424.838832][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.838852][ T24] usb 2-1: Product: syz [ 424.838863][ T24] usb 2-1: Manufacturer: syz [ 424.838872][ T24] usb 2-1: SerialNumber: syz [ 425.288499][ T24] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 425.506822][ T192] rtl8150 3-1:1.0: couldn't reset the device [ 425.507141][ T192] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 425.611461][ T192] usb 3-1: USB disconnect, device number 51 [ 426.074508][ T5739] usbhid 4-1:0.0: can't add hid device: -71 [ 426.074634][ T5739] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 426.126000][ T5739] usb 4-1: USB disconnect, device number 38 [ 426.400330][ T24] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 426.402896][ T24] ath9k_htc: Failed to initialize the device [ 426.514607][ T24] usb 2-1: ath9k_htc: USB layer deinitialized [ 426.572205][ T5698] usb 2-1: USB disconnect, device number 36 [ 427.083938][ T9940] FAULT_INJECTION: forcing a failure. [ 427.083938][ T9940] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 427.083965][ T9940] CPU: 0 UID: 0 PID: 9940 Comm: syz.3.1296 Tainted: G L syzkaller #0 PREEMPT(full) [ 427.083985][ T9940] Tainted: [L]=SOFTLOCKUP [ 427.083990][ T9940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 427.083999][ T9940] Call Trace: [ 427.084005][ T9940] [ 427.084011][ T9940] dump_stack_lvl+0xe8/0x150 [ 427.084038][ T9940] should_fail_ex+0x410/0x560 [ 427.084061][ T9940] _copy_from_user+0x2d/0xb0 [ 427.084083][ T9940] do_sock_getsockopt+0x1fa/0x640 [ 427.084111][ T9940] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 427.084144][ T9940] ? __fget_files+0x3a2/0x420 [ 427.084158][ T9940] ? __fget_files+0x2a/0x420 [ 427.084177][ T9940] __x64_sys_getsockopt+0x1a4/0x240 [ 427.084206][ T9940] do_syscall_64+0x166/0x520 [ 427.084245][ T9940] ? trace_irq_disable+0x3b/0x140 [ 427.084272][ T9940] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.084296][ T9940] ? clear_bhb_loop+0x70/0xc0 [ 427.084314][ T9940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.084328][ T9940] RIP: 0033:0x7f4adeb9f559 [ 427.084360][ T9940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.084378][ T9940] RSP: 002b:00007f4adf9df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 427.084401][ T9940] RAX: ffffffffffffffda RBX: 00007f4adee25fa0 RCX: 00007f4adeb9f559 [ 427.084416][ T9940] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003 [ 427.084428][ T9940] RBP: 00007f4adf9df090 R08: 0000200000002300 R09: 0000000000000000 [ 427.084442][ T9940] R10: 00002000000012c0 R11: 0000000000000246 R12: 0000000000000001 [ 427.084454][ T9940] R13: 00007f4adee26038 R14: 00007f4adee25fa0 R15: 00007f4adef4fa48 [ 427.084485][ T9940] [ 427.667113][ T9943] FAULT_INJECTION: forcing a failure. [ 427.667113][ T9943] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 427.667139][ T9943] CPU: 1 UID: 0 PID: 9943 Comm: syz.3.1297 Tainted: G L syzkaller #0 PREEMPT(full) [ 427.667160][ T9943] Tainted: [L]=SOFTLOCKUP [ 427.667165][ T9943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 427.667174][ T9943] Call Trace: [ 427.667179][ T9943] [ 427.667186][ T9943] dump_stack_lvl+0xe8/0x150 [ 427.667213][ T9943] should_fail_ex+0x410/0x560 [ 427.667236][ T9943] _copy_from_user+0x2d/0xb0 [ 427.667257][ T9943] iommufd_vfio_ioctl+0x2a8/0x1450 [ 427.667274][ T9943] ? kasan_quarantine_put+0xbb/0x1f0 [ 427.667293][ T9943] ? __pfx_iommufd_vfio_ioctl+0x10/0x10 [ 427.667311][ T9943] ? tomoyo_path_number_perm+0x219/0x5f0 [ 427.667335][ T9943] ? tomoyo_path_number_perm+0x219/0x5f0 [ 427.667364][ T9943] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 427.667385][ T9943] ? vfs_write+0x9ce/0xba0 [ 427.667411][ T9943] iommufd_fops_ioctl+0x126/0x600 [ 427.667435][ T9943] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 427.667461][ T9943] ? ksys_write+0x1fc/0x270 [ 427.667504][ T9943] ? bpf_lsm_file_ioctl+0x9/0x20 [ 427.667531][ T9943] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 427.667559][ T9943] __se_sys_ioctl+0xfc/0x170 [ 427.667586][ T9943] do_syscall_64+0x166/0x520 [ 427.667605][ T9943] ? trace_irq_disable+0x3b/0x140 [ 427.667631][ T9943] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.667652][ T9943] ? clear_bhb_loop+0x70/0xc0 [ 427.667677][ T9943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.667697][ T9943] RIP: 0033:0x7f4adeb9f559 [ 427.667716][ T9943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.667733][ T9943] RSP: 002b:00007f4adf9df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 427.667754][ T9943] RAX: ffffffffffffffda RBX: 00007f4adee25fa0 RCX: 00007f4adeb9f559 [ 427.667769][ T9943] RDX: 0000200000000200 RSI: 0000000000003b71 RDI: 0000000000000003 [ 427.667781][ T9943] RBP: 00007f4adf9df090 R08: 0000000000000000 R09: 0000000000000000 [ 427.667794][ T9943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.667806][ T9943] R13: 00007f4adee26038 R14: 00007f4adee25fa0 R15: 00007f4adef4fa48 [ 427.667835][ T9943] [ 428.628222][ T9956] xt_connbytes: Forcing CT accounting to be enabled [ 428.628276][ T9956] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 428.708346][ T5706] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 428.708371][ T5706] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 428.772784][ T5706] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 429.279765][ T9957] fido_id[9957]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 430.224717][ T9972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1308'. [ 430.660943][ T24] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 430.830984][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 430.855063][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 430.855118][ T24] usb 4-1: New USB device found: idVendor=1235, idProduct=8215, bcdDevice=0.40 [ 430.907146][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.907349][ T24] usb 4-1: Product: syz [ 430.907366][ T24] usb 4-1: Manufacturer: syz [ 430.907380][ T24] usb 4-1: SerialNumber: syz [ 431.230720][ T9975] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1310'. [ 431.412736][ T24] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 431.416104][ T24] usb 4-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8215); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 431.417105][ T24] usb 4-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 431.548097][ T24] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 431.594804][ T24] usb 4-1: USB disconnect, device number 39 [ 431.728980][ T9925] udevd[9925]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 433.879159][T10012] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1320'. [ 433.879181][T10012] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1320'. [ 434.062760][ T30] audit: type=1326 audit(1792955154.673:3914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10014 comm="syz.4.1322" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe702b9f559 code=0x7ffc0000 [ 434.062814][ T30] audit: type=1326 audit(1792955154.673:3915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10014 comm="syz.4.1322" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe702b9f559 code=0x7ffc0000 [ 434.063150][ T30] audit: type=1326 audit(1792955154.673:3916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10014 comm="syz.4.1322" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe702b9f559 code=0x7ffc0000 [ 434.063306][ T30] audit: type=1326 audit(1792955154.673:3917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10014 comm="syz.4.1322" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe702b9f559 code=0x7ffc0000 [ 434.119961][ T30] audit: type=1326 audit(1792955154.733:3918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10014 comm="syz.4.1322" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe702b9f559 code=0x7ffc0000 [ 434.120613][ T30] audit: type=1326 audit(1792955154.733:3919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10014 comm="syz.4.1322" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe702b9f559 code=0x7ffc0000 [ 434.222344][ T30] audit: type=1326 audit(1792955154.833:3920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10014 comm="syz.4.1322" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe702b9f559 code=0x7ffc0000 [ 434.254509][ T30] audit: type=1326 audit(1792955154.863:3921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10014 comm="syz.4.1322" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe702b9f559 code=0x7ffc0000 [ 434.254812][ T30] audit: type=1326 audit(1792955154.863:3922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10014 comm="syz.4.1322" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe702b9f559 code=0x7ffc0000 [ 434.254854][ T30] audit: type=1326 audit(1792955154.863:3923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10014 comm="syz.4.1322" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe702b9f559 code=0x7ffc0000 [ 434.639807][T10009] IPVS: set_ctl: invalid protocol: 0 172.20.20.11:20003 [ 436.017657][ T5739] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 436.190909][ T5739] usb 4-1: New USB device found: idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 436.225584][ T5739] usb 4-1: config 0 has an invalid interface number: 83 but max is 0 [ 436.225606][ T5739] usb 4-1: config 0 has an invalid descriptor of length 106, skipping remainder of the config [ 436.225621][ T5739] usb 4-1: config 0 has no interface number 0 [ 436.225648][ T5739] usb 4-1: config 0 interface 83 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 436.304431][ T5739] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.304454][ T5739] usb 4-1: Product: syz [ 436.304465][ T5739] usb 4-1: Manufacturer: syz [ 436.304489][ T5739] usb 4-1: SerialNumber: syz [ 436.332917][ T5739] usb 4-1: config 0 descriptor?? [ 436.353297][ T5739] redrat3 4-1:0.83: Couldn't find all endpoints [ 436.708016][T10040] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 439.070984][T10059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1331'. [ 439.091641][T10059] Cannot find add_set index 4 as target [ 439.919050][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.919133][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.069464][T10069] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1334'. [ 440.446809][ T5706] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 440.510099][ T5706] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 442.235288][ T5698] usb 4-1: USB disconnect, device number 40 [ 443.596413][T10095] syzkaller0: entered promiscuous mode [ 443.596428][T10095] syzkaller0: entered allmulticast mode [ 443.707784][T10098] netlink: ct family unspecified [ 444.037631][ T5706] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 444.187816][ T5706] usb 2-1: Using ep0 maxpacket: 16 [ 444.188420][ T5706] usb 2-1: New USB device found: idVendor=1235, idProduct=000a, bcdDevice=0.40 [ 444.189456][ T5706] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 174, changing to 11 [ 444.189478][ T5706] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 1024 [ 444.191631][ T5706] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.191648][ T5706] usb 2-1: Product: syz [ 444.191660][ T5706] usb 2-1: Manufacturer: syz [ 444.191670][ T5706] usb 2-1: SerialNumber: syz [ 444.238136][T10101] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 444.592703][T10111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.595319][T10111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.751187][T10112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.774287][T10112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.859126][T10101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.892555][T10101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.123259][ T5706] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 445.638128][ T5706] usb 2-1: USB disconnect, device number 37 [ 445.880604][ T5698] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 446.031677][ T5698] usb 4-1: New USB device found: idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 446.036156][ T5698] usb 4-1: config 0 has no interfaces? [ 446.036183][ T5698] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.068290][ T5698] usb 4-1: config 0 descriptor?? [ 446.219403][T10129] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 446.396959][T10133] udevd[10133]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 446.571355][T10137] kernel read not supported for file /file0 (pid: 10137 comm: syz.2.1352) [ 446.596430][ T30] kauditd_printk_skb: 136 callbacks suppressed [ 446.596457][ T30] audit: type=1800 audit(1792955167.183:4060): pid=10137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1352" name="file0" dev="mqueue" ino=38951 res=0 errno=-22 [ 446.964101][ T5727] usb 4-1: USB disconnect, device number 41 [ 447.078527][ T5706] usb 3-1: new low-speed USB device number 52 using dummy_hcd [ 447.240817][ T5706] usb 3-1: unable to get BOS descriptor or descriptor too short [ 447.240851][ T5706] usb 3-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 447.242287][ T5706] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 5 [ 447.242340][ T5706] usb 3-1: config 1 interface 0 altsetting 15 endpoint 0x82 is Bulk; changing to Interrupt [ 447.242357][ T5706] usb 3-1: config 1 interface 0 altsetting 15 endpoint 0x3 is Bulk; changing to Interrupt [ 447.242377][ T5706] usb 3-1: config 1 interface 0 altsetting 15 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 447.242395][ T5706] usb 3-1: config 1 interface 0 has no altsetting 0 [ 447.322214][ T5706] usb 3-1: string descriptor 0 read error: -22 [ 447.322300][ T5706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.356262][T10141] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 447.356378][T10141] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 447.376620][ T5698] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 447.392580][ T5706] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 447.447945][ T192] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 447.557579][ T5698] usb 1-1: Using ep0 maxpacket: 16 [ 447.566283][ T5698] usb 1-1: New USB device found: idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 447.597844][ T192] usb 2-1: Using ep0 maxpacket: 32 [ 447.598448][ T192] usb 2-1: New USB device found: idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 447.606213][ T192] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.639098][ T5698] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.639121][ T5698] usb 1-1: Product: syz [ 447.639131][ T5698] usb 1-1: Manufacturer: syz [ 447.639141][ T5698] usb 1-1: SerialNumber: syz [ 447.660373][ T192] usb 2-1: config 0 descriptor?? [ 447.683743][ T192] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 447.880064][ T5727] usb 3-1: USB disconnect, device number 52 [ 448.106017][ T5698] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 448.139005][T10148] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1356'. [ 448.167950][ T5698] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 448.169053][ T5698] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 448.169124][ T5698] usb 1-1: media controller created [ 448.206484][T10148] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1356'. [ 448.268403][ T5698] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 448.339766][ T5698] zl10353_read_register: readreg error (reg=127, ret==-71) [ 448.494352][ T5698] dvb_usb_gl861 1-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 448.518270][ T5698] usb 1-1: USB disconnect, device number 30 [ 448.932946][T10150] syzkaller0: entered promiscuous mode [ 448.932964][T10150] syzkaller0: entered allmulticast mode [ 449.333096][ T192] gspca_vc032x: reg_w err -71 [ 449.333110][ T192] gspca_vc032x: I2c Bus Busy Wait 00 [ 449.333118][ T192] gspca_vc032x: I2c Bus Busy Wait 00 [ 449.333125][ T192] gspca_vc032x: I2c Bus Busy Wait 00 [ 449.333133][ T192] gspca_vc032x: I2c Bus Busy Wait 00 [ 449.333140][ T192] gspca_vc032x: I2c Bus Busy Wait 00 [ 449.333146][ T192] gspca_vc032x: I2c Bus Busy Wait 00 [ 449.333152][ T192] gspca_vc032x: I2c Bus Busy Wait 00 [ 449.333158][ T192] gspca_vc032x: I2c Bus Busy Wait 00 [ 449.333164][ T192] gspca_vc032x: I2c Bus Busy Wait 00 [ 449.333171][ T192] gspca_vc032x: I2c Bus Busy Wait 00 [ 449.333178][ T192] gspca_vc032x: I2c Bus Busy Wait 00 [ 449.333184][ T192] gspca_vc032x: I2c Bus Busy Wait 00 [ 449.333190][ T192] gspca_vc032x: I2c Bus Busy Wait 00 [ 449.333196][ T192] gspca_vc032x: I2c Bus Busy Wait 00 [ 449.333203][ T192] gspca_vc032x: I2c Bus Busy Wait 00 [ 449.333209][ T192] gspca_vc032x: I2c Bus Busy Wait 00 [ 449.333216][ T192] gspca_vc032x: I2c Bus Busy Wait 00 [ 449.333222][ T192] gspca_vc032x: I2c Bus Busy Wait 00 [ 449.333228][ T192] gspca_vc032x: Unknown sensor... [ 449.333278][ T192] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 449.387050][ T5698] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 449.476455][ T192] usb 2-1: USB disconnect, device number 38 [ 449.558448][ T5698] usb 3-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 449.563438][ T5698] usb 3-1: config index 0 descriptor too short (expected 65183, got 72) [ 449.593351][ T5698] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.593370][ T5698] usb 3-1: Product: syz [ 449.593381][ T5698] usb 3-1: Manufacturer: syz [ 449.593392][ T5698] usb 3-1: SerialNumber: syz [ 449.663824][ T5697] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 449.883645][ C0] usb 3-1: ath: unknown panic pattern! [ 450.569213][ T192] usb 3-1: USB disconnect, device number 53 [ 450.718164][ T5697] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 450.718299][ T5697] ath9k_htc: Failed to initialize the device [ 450.724144][ T192] usb 3-1: ath9k_htc: USB layer deinitialized [ 451.536560][T10175] kernel read not supported for file /file0 (pid: 10175 comm: syz.1.1364) [ 451.536749][ T30] audit: type=1800 audit(1792955172.143:4061): pid=10175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1364" name="file0" dev="mqueue" ino=39044 res=0 errno=-22 [ 451.721684][ T30] audit: type=1326 audit(1792955172.333:4062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10180 comm="syz.0.1365" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2264f9f559 code=0x7ffc0000 [ 451.751443][ T30] audit: type=1326 audit(1792955172.363:4064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10180 comm="syz.0.1365" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2264f9f559 code=0x7ffc0000 [ 451.798140][ T30] audit: type=1326 audit(1792955172.333:4063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10180 comm="syz.0.1365" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2264f9f559 code=0x7ffc0000 [ 451.798188][ T30] audit: type=1326 audit(1792955172.413:4065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10180 comm="syz.0.1365" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2264f9f559 code=0x7ffc0000 [ 451.798226][ T30] audit: type=1326 audit(1792955172.413:4066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10180 comm="syz.0.1365" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2264f9f559 code=0x7ffc0000 [ 451.880527][ T30] audit: type=1326 audit(1792955172.493:4067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10180 comm="syz.0.1365" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f2264f9f559 code=0x7ffc0000 [ 451.880902][ T30] audit: type=1326 audit(1792955172.493:4068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10180 comm="syz.0.1365" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2264f9f559 code=0x7ffc0000 [ 451.881042][ T30] audit: type=1326 audit(1792955172.493:4069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10180 comm="syz.0.1365" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2264f9f559 code=0x7ffc0000 [ 451.882590][ T30] audit: type=1326 audit(1792955172.493:4070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10180 comm="syz.0.1365" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2264f9f559 code=0x7ffc0000 [ 451.883302][ T30] audit: type=1326 audit(1792955172.493:4071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10180 comm="syz.0.1365" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f2264f9f559 code=0x7ffc0000 [ 452.503917][T10190] syzkaller0: entered promiscuous mode [ 452.503936][T10190] syzkaller0: entered allmulticast mode [ 452.564791][T10192] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1371'. [ 452.596532][T10192] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1371'. [ 452.596552][T10192] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1371'. [ 453.246579][T10203] kernel read not supported for file /file0 (pid: 10203 comm: syz.2.1378) [ 454.349026][ T5697] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 454.523457][ T5697] usb 3-1: unable to get BOS descriptor or descriptor too short [ 454.525314][ T5697] usb 3-1: not running at top speed; connect to a high speed hub [ 454.525337][ T5697] usb 3-1: New USB device found: idVendor=061c, idProduct=c084, bcdDevice=da.9f [ 454.569151][ T5697] usb 3-1: config 39 has an invalid interface number: 165 but max is 0 [ 454.569183][ T5697] usb 3-1: config 39 has no interface number 0 [ 454.569214][ T5697] usb 3-1: config 39 interface 165 has no altsetting 0 [ 454.601393][ T5697] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.601423][ T5697] usb 3-1: Product: syz [ 454.601438][ T5697] usb 3-1: Manufacturer: syz [ 454.601530][ T5697] usb 3-1: SerialNumber: syz [ 454.689766][T10228] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1383'. [ 455.296876][T10232] syzkaller0: entered promiscuous mode [ 455.296894][T10232] syzkaller0: entered allmulticast mode [ 455.669203][ T5697] usb 3-1: USB disconnect, device number 54 [ 456.237596][ T5727] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 456.354646][T10248] syzkaller0: entered promiscuous mode [ 456.354687][T10248] syzkaller0: entered allmulticast mode [ 456.388264][ T5727] usb 2-1: Using ep0 maxpacket: 8 [ 456.391980][ T5727] usb 2-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 456.412816][ T5727] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 456.412919][ T5727] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 456.412952][ T5727] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 456.412979][ T5727] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 456.413004][ T5727] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 456.413046][ T5727] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.727202][T10251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1389'. [ 456.745093][ T5727] usb 2-1: usb_control_msg returned -32 [ 456.745151][ T5727] usbtmc 2-1:16.0: can't read capabilities [ 456.761553][T10251] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1389'. [ 456.761582][T10251] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1389'. [ 456.988925][ T5727] usb 2-1: USB disconnect, device number 39 [ 457.301908][ T30] kauditd_printk_skb: 101 callbacks suppressed [ 457.301929][ T30] audit: type=1326 audit(1792955177.913:4173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10255 comm="syz.2.1390" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5545b9f559 code=0x7ffc0000 [ 457.337356][ T30] audit: type=1326 audit(1792955177.943:4174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10255 comm="syz.2.1390" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5545b9f559 code=0x7ffc0000 [ 457.387555][ T30] audit: type=1326 audit(1792955177.993:4175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10255 comm="syz.2.1390" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f5545b9f559 code=0x7ffc0000 [ 457.387607][ T30] audit: type=1326 audit(1792955177.993:4176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10255 comm="syz.2.1390" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5545b9f559 code=0x7ffc0000 [ 457.387646][ T30] audit: type=1326 audit(1792955177.993:4177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10255 comm="syz.2.1390" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5545b9f559 code=0x7ffc0000 [ 457.472434][ T30] audit: type=1326 audit(1792955178.083:4178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10255 comm="syz.2.1390" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5545b9f559 code=0x7ffc0000 [ 457.472486][ T30] audit: type=1326 audit(1792955178.083:4179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10255 comm="syz.2.1390" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5545b9f559 code=0x7ffc0000 [ 457.473203][ T30] audit: type=1326 audit(1792955178.083:4180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10255 comm="syz.2.1390" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5545b9f559 code=0x7ffc0000 [ 457.548955][ T30] audit: type=1326 audit(1792955178.083:4181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10255 comm="syz.2.1390" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f5545b9f559 code=0x7ffc0000 [ 457.549004][ T30] audit: type=1326 audit(1792955178.113:4182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10255 comm="syz.2.1390" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5545b9f559 code=0x7ffc0000 [ 457.930073][T10265] ip6gretap0: entered promiscuous mode [ 458.162178][ T53] Bluetooth: hci1: unexpected event for opcode 0x203b [ 458.617288][T10272] FAULT_INJECTION: forcing a failure. [ 458.617288][T10272] name failslab, interval 1, probability 0, space 0, times 0 [ 458.617313][T10272] CPU: 0 UID: 0 PID: 10272 Comm: syz.1.1395 Tainted: G L syzkaller #0 PREEMPT(full) [ 458.617332][T10272] Tainted: [L]=SOFTLOCKUP [ 458.617337][T10272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 458.617345][T10272] Call Trace: [ 458.617350][T10272] [ 458.617357][T10272] dump_stack_lvl+0xe8/0x150 [ 458.617382][T10272] should_fail_ex+0x410/0x560 [ 458.617405][T10272] should_failslab+0xa8/0x100 [ 458.617423][T10272] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 458.617438][T10272] kmem_cache_alloc_noprof+0x9c/0x600 [ 458.617451][T10272] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 458.617464][T10272] ? kmem_cache_alloc_noprof+0x151/0x600 [ 458.617501][T10272] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 458.617528][T10272] __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 458.617560][T10272] mmu_topup_memory_caches+0x21/0x1a0 [ 458.617584][T10272] kvm_mmu_load+0x9d/0x21e0 [ 458.617605][T10272] ? __pfx_pic_unlock+0x10/0x10 [ 458.617628][T10272] ? pic_update_irq+0x576/0x7f0 [ 458.617651][T10272] ? vmx_get_rflags+0x219/0x400 [ 458.617670][T10272] ? kvm_apic_accept_pic_intr+0x8d/0x130 [ 458.617699][T10272] ? kvm_cpu_has_extint+0xaf/0x340 [ 458.617732][T10272] vcpu_run+0x4f5b/0x7a90 [ 458.617821][T10272] ? __pfx_vcpu_run+0x10/0x10 [ 458.617842][T10272] ? lock_acquire+0x115/0x350 [ 458.617873][T10272] ? vmx_unhandleable_emulation_required+0x77/0x230 [ 458.617900][T10272] kvm_arch_vcpu_ioctl_run+0xe83/0x18b0 [ 458.617925][T10272] ? kvm_arch_vcpu_ioctl_run+0x1f5/0x18b0 [ 458.617948][T10272] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 458.617977][T10272] kvm_vcpu_ioctl+0xa61/0xfd0 [ 458.618005][T10272] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 458.618047][T10272] ? __fget_files+0x2a/0x420 [ 458.618069][T10272] ? __fget_files+0x2a/0x420 [ 458.618089][T10272] ? __fget_files+0x2a/0x420 [ 458.618112][T10272] ? bpf_lsm_file_ioctl+0x9/0x20 [ 458.618137][T10272] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 458.618160][T10272] __se_sys_ioctl+0xfc/0x170 [ 458.618188][T10272] do_syscall_64+0x166/0x520 [ 458.618206][T10272] ? trace_irq_disable+0x3b/0x140 [ 458.618230][T10272] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.618250][T10272] ? clear_bhb_loop+0x70/0xc0 [ 458.618274][T10272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.618292][T10272] RIP: 0033:0x7fd31659f559 [ 458.618311][T10272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 458.618327][T10272] RSP: 002b:00007fd3174d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 458.618347][T10272] RAX: ffffffffffffffda RBX: 00007fd316825fa0 RCX: 00007fd31659f559 [ 458.618362][T10272] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 458.618374][T10272] RBP: 00007fd3174d9090 R08: 0000000000000000 R09: 0000000000000000 [ 458.618386][T10272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 458.618398][T10272] R13: 00007fd316826038 R14: 00007fd316825fa0 R15: 00007fd31694fa48 [ 458.618428][T10272] [ 459.627704][ T5706] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 459.631377][T10286] netlink: 'syz.1.1400': attribute type 89 has an invalid length. [ 459.683954][T10287] syzkaller0: entered promiscuous mode [ 459.683969][T10287] syzkaller0: entered allmulticast mode [ 459.787849][ T5706] usb 1-1: Using ep0 maxpacket: 32 [ 459.791636][ T5706] usb 1-1: New USB device found: idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 459.795251][ T5706] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 459.795276][ T5706] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 459.795301][ T5706] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 459.795336][ T5706] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 459.795351][ T5706] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 459.795370][ T5706] usb 1-1: config 0 interface 0 has no altsetting 0 [ 459.894846][ T5706] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 459.894875][ T5706] usb 1-1: Product: syz [ 459.894885][ T5706] usb 1-1: Manufacturer: syz [ 459.894895][ T5706] usb 1-1: SerialNumber: syz [ 459.924930][ T5706] usb 1-1: config 0 descriptor?? [ 459.971055][ T5706] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 459.994508][ T5706] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 460.310518][T10282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.311056][T10282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.366086][T10282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1398'. [ 460.366104][T10282] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1398'. [ 460.774772][ T5706] usb 1-1: USB disconnect, device number 31 [ 460.811350][ T5706] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 462.502216][T10314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1408'. [ 462.552433][T10314] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1408'. [ 462.552455][T10314] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1408'. [ 463.350475][ T5706] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 463.498721][ T5706] usb 4-1: New USB device found: idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 463.503523][ T5706] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 463.503543][ T5706] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 463.554861][ T5706] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.554880][ T5706] usb 4-1: Product: syz [ 463.554891][ T5706] usb 4-1: Manufacturer: syz [ 463.554901][ T5706] usb 4-1: SerialNumber: syz [ 463.589974][ T5706] usb 4-1: config 0 descriptor?? [ 463.625289][ T5706] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 464.257332][ T5706] gspca_sunplus: reg_r err -71 [ 464.257418][ T5706] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 464.292010][ T5706] usb 4-1: USB disconnect, device number 42 [ 465.629277][T10346] ------------[ cut here ]------------ [ 465.629291][T10346] sp->magic != HWSIM_STA_MAGIC [ 465.629301][T10346] WARNING: drivers/net/wireless/virtual/mac80211_hwsim_main.c:258 at mac80211_hwsim_tx+0x1d04/0x25b0, CPU#0: syz.3.1418/10346 [ 465.652721][T10346] Modules linked in: [ 465.656621][T10346] CPU: 0 UID: 0 PID: 10346 Comm: syz.3.1418 Tainted: G L syzkaller #0 PREEMPT(full) [ 465.667669][T10346] Tainted: [L]=SOFTLOCKUP [ 465.672005][T10346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 465.682138][T10346] RIP: 0010:mac80211_hwsim_tx+0x1d04/0x25b0 [ 465.688121][T10346] Code: e8 03 42 0f b6 04 20 84 c0 0f 85 0b 08 00 00 45 0f b6 8d 71 08 00 00 4c 89 ee 67 48 0f b9 3a e9 c4 f4 ff ff e8 4d da 7e fa 90 <0f> 0b 90 e9 27 f5 ff ff e8 3f da 7e fa 90 0f 0b 90 48 8b 7c 24 20 [ 465.707789][T10346] RSP: 0018:ffffc9000dc46b80 EFLAGS: 00010287 [ 465.713855][T10346] RAX: ffffffff874a2c93 RBX: 0000000000000000 RCX: 0000000000080000 [ 465.721873][T10346] RDX: ffffc9001218f000 RSI: 000000000000018c RDI: 000000000000018d [ 465.729872][T10346] RBP: ffffc9000dc46d10 R08: ffff88807e73a64f R09: 0000000000000000 [ 465.737865][T10346] R10: ffff88807e73a640 R11: ffffffff874a0f90 R12: dffffc0000000000 [ 465.745831][T10346] R13: 00000000ffffffff R14: 0000000000000000 R15: 1ffff92001b88dbc [ 465.753828][T10346] FS: 00007f4adf99d6c0(0000) GS:ffff88812363c000(0000) knlGS:0000000000000000 [ 465.762780][T10346] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 465.769385][T10346] CR2: 0000200000443000 CR3: 000000001df70000 CR4: 00000000003526f0 [ 465.777356][T10346] Call Trace: [ 465.780659][T10346] [ 465.783608][T10346] ? __pfx_mac80211_hwsim_tx+0x10/0x10 [ 465.789109][T10346] ieee80211_tx_frags+0x3df/0x890 [ 465.794158][T10346] ? __pfx_ieee80211_tx_frags+0x10/0x10 [ 465.799742][T10346] __ieee80211_xmit_fast+0xabf/0x2160 [ 465.805156][T10346] ? __flow_hash_from_keys+0x431/0x6c0 [ 465.810656][T10346] ? cfg80211_classify8021d+0x67e/0x1220 [ 465.816310][T10346] ? __pfx___ieee80211_xmit_fast+0x10/0x10 [ 465.822150][T10346] ? lock_acquire+0x115/0x350 [ 465.826840][T10346] ? ieee80211_downgrade_queue+0x432/0x5b0 [ 465.832693][T10346] ? ieee80211_mesh_xmit_fast+0x902/0xe20 [ 465.838436][T10346] ieee80211_mesh_xmit_fast+0xa6d/0xe20 [ 465.843992][T10346] ? lock_acquire+0x115/0x350 [ 465.848694][T10346] ? __pfx_ieee80211_mesh_xmit_fast+0x10/0x10 [ 465.854785][T10346] ? __ieee80211_subif_start_xmit+0x2c5/0x1840 [ 465.860972][T10346] __ieee80211_subif_start_xmit+0x663/0x1840 [ 465.866973][T10346] ? sock_alloc_send_pskb+0xc69/0xd90 [ 465.872367][T10346] ? vfs_write+0x612/0xba0 [ 465.876816][T10346] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 465.883433][T10346] ieee80211_subif_start_xmit+0xee/0x560 [ 465.889120][T10346] ? __netif_skb_features+0xabc/0x1060 [ 465.894600][T10346] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 465.900875][T10346] ? __pfx___netif_skb_features+0x10/0x10 [ 465.906595][T10346] ? __lock_acquire+0x747/0x2de0 [ 465.911581][T10346] dev_hard_start_xmit+0x2cd/0x830 [ 465.916711][T10346] __dev_queue_xmit+0x14d1/0x3920 [ 465.921813][T10346] ? __dev_queue_xmit+0x29b/0x3920 [ 465.926942][T10346] ? _copy_from_iter+0x21b/0x1660 [ 465.931990][T10346] ? __pfx___dev_queue_xmit+0x10/0x10 [ 465.937383][T10346] ? __pfx__copy_from_iter+0x10/0x10 [ 465.942751][T10346] ? __pfx_packet_parse_headers+0x10/0x10 [ 465.948514][T10346] ? packet_xmit+0x68/0x330 [ 465.953023][T10346] ? skb_put+0x112/0x210 [ 465.957288][T10346] packet_sendmsg+0x3f1b/0x51b0 [ 465.962193][T10346] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 465.967632][T10346] ? lock_acquire+0x115/0x350 [ 465.972315][T10346] ? aa_file_perm+0x18b/0x15f0 [ 465.977082][T10346] ? __pfx_packet_sendmsg+0x10/0x10 [ 465.982303][T10346] ? aa_sk_perm+0x6ff/0x8f0 [ 465.986921][T10346] ? __pfx_aa_sk_perm+0x10/0x10 [ 465.991816][T10346] ? aa_sock_msg_perm+0x144/0x210 [ 465.996868][T10346] ? apparmor_socket_sendmsg+0x98/0x360 [ 466.002436][T10346] ? __pfx_packet_sendmsg+0x10/0x10 [ 466.007678][T10346] sock_sendmsg_nosec+0x14e/0x190 [ 466.012725][T10346] sock_write_iter+0x2de/0x3e0 [ 466.017539][T10346] ? __pfx_sock_write_iter+0x10/0x10 [ 466.022832][T10346] ? bpf_lsm_file_permission+0x9/0x20 [ 466.028226][T10346] ? security_file_permission+0x75/0x260 [ 466.033886][T10346] vfs_write+0x612/0xba0 [ 466.038205][T10346] ? __pfx_vfs_write+0x10/0x10 [ 466.042990][T10346] ? __fget_files+0x3a2/0x420 [ 466.047695][T10346] ? __fget_files+0x2a/0x420 [ 466.052307][T10346] ? fdget+0x1ac/0x250 [ 466.056374][T10346] ksys_write+0x150/0x270 [ 466.060719][T10346] ? __pfx_ksys_write+0x10/0x10 [ 466.065581][T10346] do_syscall_64+0x166/0x520 [ 466.070238][T10346] ? trace_irq_disable+0x3b/0x140 [ 466.075283][T10346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.081384][T10346] ? clear_bhb_loop+0x70/0xc0 [ 466.086093][T10346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.092015][T10346] RIP: 0033:0x7f4adeb9f559 [ 466.096457][T10346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 466.116096][T10346] RSP: 002b:00007f4adf99d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 466.124535][T10346] RAX: ffffffffffffffda RBX: 00007f4adee26180 RCX: 00007f4adeb9f559 [ 466.132523][T10346] RDX: 0000000000000018 RSI: 0000200000000600 RDI: 000000000000000c [ 466.140514][T10346] RBP: 00007f4adec36b20 R08: 0000000000000000 R09: 0000000000000000 [ 466.148540][T10346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 466.156511][T10346] R13: 00007f4adee26218 R14: 00007f4adee26180 R15: 00007f4adef4fa48 [ 466.164521][T10346] [ 466.167585][T10346] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 466.174860][T10346] CPU: 0 UID: 0 PID: 10346 Comm: syz.3.1418 Tainted: G L syzkaller #0 PREEMPT(full) [ 466.185885][T10346] Tainted: [L]=SOFTLOCKUP [ 466.190220][T10346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 466.200310][T10346] Call Trace: [ 466.203608][T10346] [ 466.206532][T10346] vpanic+0x56d/0xa60 [ 466.210516][T10346] ? __pfx__printk+0x10/0x10 [ 466.215116][T10346] ? __pfx_vpanic+0x10/0x10 [ 466.219618][T10346] ? is_bpf_text_address+0x292/0x2b0 [ 466.224923][T10346] ? is_bpf_text_address+0x26/0x2b0 [ 466.230144][T10346] panic+0xc5/0xd0 [ 466.233870][T10346] ? __pfx_panic+0x10/0x10 [ 466.238306][T10346] __warn+0x315/0x4c0 [ 466.242301][T10346] ? mac80211_hwsim_tx+0x1d04/0x25b0 [ 466.247615][T10346] ? mac80211_hwsim_tx+0x1d04/0x25b0 [ 466.252910][T10346] __report_bug+0x276/0x570 [ 466.257414][T10346] ? mac80211_hwsim_tx+0x1d04/0x25b0 [ 466.262712][T10346] ? __pfx___report_bug+0x10/0x10 [ 466.267749][T10346] ? ieee80211_encrypt_tx_skb+0x2fc/0x3f0 [ 466.273479][T10346] ? mac80211_hwsim_tx+0x1d04/0x25b0 [ 466.278765][T10346] report_bug+0x16b/0x220 [ 466.283108][T10346] ? mac80211_hwsim_tx+0x1d04/0x25b0 [ 466.288404][T10346] ? mac80211_hwsim_tx+0x1d06/0x25b0 [ 466.293700][T10346] handle_bug+0x9c/0x200 [ 466.297947][T10346] exc_invalid_op+0x1a/0x50 [ 466.302447][T10346] asm_exc_invalid_op+0x1a/0x20 [ 466.307289][T10346] RIP: 0010:mac80211_hwsim_tx+0x1d04/0x25b0 [ 466.313178][T10346] Code: e8 03 42 0f b6 04 20 84 c0 0f 85 0b 08 00 00 45 0f b6 8d 71 08 00 00 4c 89 ee 67 48 0f b9 3a e9 c4 f4 ff ff e8 4d da 7e fa 90 <0f> 0b 90 e9 27 f5 ff ff e8 3f da 7e fa 90 0f 0b 90 48 8b 7c 24 20 [ 466.332774][T10346] RSP: 0018:ffffc9000dc46b80 EFLAGS: 00010287 [ 466.338838][T10346] RAX: ffffffff874a2c93 RBX: 0000000000000000 RCX: 0000000000080000 [ 466.346807][T10346] RDX: ffffc9001218f000 RSI: 000000000000018c RDI: 000000000000018d [ 466.354779][T10346] RBP: ffffc9000dc46d10 R08: ffff88807e73a64f R09: 0000000000000000 [ 466.362744][T10346] R10: ffff88807e73a640 R11: ffffffff874a0f90 R12: dffffc0000000000 [ 466.370719][T10346] R13: 00000000ffffffff R14: 0000000000000000 R15: 1ffff92001b88dbc [ 466.378691][T10346] ? __pfx_mac80211_hwsim_tx+0x10/0x10 [ 466.384149][T10346] ? mac80211_hwsim_tx+0x1d03/0x25b0 [ 466.389449][T10346] ? __pfx_mac80211_hwsim_tx+0x10/0x10 [ 466.394916][T10346] ieee80211_tx_frags+0x3df/0x890 [ 466.399968][T10346] ? __pfx_ieee80211_tx_frags+0x10/0x10 [ 466.405547][T10346] __ieee80211_xmit_fast+0xabf/0x2160 [ 466.410932][T10346] ? __flow_hash_from_keys+0x431/0x6c0 [ 466.416410][T10346] ? cfg80211_classify8021d+0x67e/0x1220 [ 466.422063][T10346] ? __pfx___ieee80211_xmit_fast+0x10/0x10 [ 466.427879][T10346] ? lock_acquire+0x115/0x350 [ 466.432570][T10346] ? ieee80211_downgrade_queue+0x432/0x5b0 [ 466.438381][T10346] ? ieee80211_mesh_xmit_fast+0x902/0xe20 [ 466.444112][T10346] ieee80211_mesh_xmit_fast+0xa6d/0xe20 [ 466.449662][T10346] ? lock_acquire+0x115/0x350 [ 466.454342][T10346] ? __pfx_ieee80211_mesh_xmit_fast+0x10/0x10 [ 466.460431][T10346] ? __ieee80211_subif_start_xmit+0x2c5/0x1840 [ 466.466591][T10346] __ieee80211_subif_start_xmit+0x663/0x1840 [ 466.472585][T10346] ? sock_alloc_send_pskb+0xc69/0xd90 [ 466.477955][T10346] ? vfs_write+0x612/0xba0 [ 466.482364][T10346] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 466.488799][T10346] ieee80211_subif_start_xmit+0xee/0x560 [ 466.494467][T10346] ? __netif_skb_features+0xabc/0x1060 [ 466.499933][T10346] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 466.506204][T10346] ? __pfx___netif_skb_features+0x10/0x10 [ 466.511916][T10346] ? __lock_acquire+0x747/0x2de0 [ 466.516874][T10346] dev_hard_start_xmit+0x2cd/0x830 [ 466.522014][T10346] __dev_queue_xmit+0x14d1/0x3920 [ 466.527044][T10346] ? __dev_queue_xmit+0x29b/0x3920 [ 466.532170][T10346] ? _copy_from_iter+0x21b/0x1660 [ 466.537190][T10346] ? __pfx___dev_queue_xmit+0x10/0x10 [ 466.542567][T10346] ? __pfx__copy_from_iter+0x10/0x10 [ 466.547860][T10346] ? __pfx_packet_parse_headers+0x10/0x10 [ 466.553582][T10346] ? packet_xmit+0x68/0x330 [ 466.558098][T10346] ? skb_put+0x112/0x210 [ 466.562341][T10346] packet_sendmsg+0x3f1b/0x51b0 [ 466.567190][T10346] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 466.572571][T10346] ? lock_acquire+0x115/0x350 [ 466.577256][T10346] ? aa_file_perm+0x18b/0x15f0 [ 466.582045][T10346] ? __pfx_packet_sendmsg+0x10/0x10 [ 466.587236][T10346] ? aa_sk_perm+0x6ff/0x8f0 [ 466.591764][T10346] ? __pfx_aa_sk_perm+0x10/0x10 [ 466.596612][T10346] ? aa_sock_msg_perm+0x144/0x210 [ 466.601647][T10346] ? apparmor_socket_sendmsg+0x98/0x360 [ 466.607183][T10346] ? __pfx_packet_sendmsg+0x10/0x10 [ 466.612372][T10346] sock_sendmsg_nosec+0x14e/0x190 [ 466.617400][T10346] sock_write_iter+0x2de/0x3e0 [ 466.622169][T10346] ? __pfx_sock_write_iter+0x10/0x10 [ 466.627453][T10346] ? bpf_lsm_file_permission+0x9/0x20 [ 466.632860][T10346] ? security_file_permission+0x75/0x260 [ 466.638514][T10346] vfs_write+0x612/0xba0 [ 466.642763][T10346] ? __pfx_vfs_write+0x10/0x10 [ 466.647529][T10346] ? __fget_files+0x3a2/0x420 [ 466.652211][T10346] ? __fget_files+0x2a/0x420 [ 466.656797][T10346] ? fdget+0x1ac/0x250 [ 466.660868][T10346] ksys_write+0x150/0x270 [ 466.665193][T10346] ? __pfx_ksys_write+0x10/0x10 [ 466.670041][T10346] do_syscall_64+0x166/0x520 [ 466.674624][T10346] ? trace_irq_disable+0x3b/0x140 [ 466.679648][T10346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.685707][T10346] ? clear_bhb_loop+0x70/0xc0 [ 466.690380][T10346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.696270][T10346] RIP: 0033:0x7f4adeb9f559 [ 466.700679][T10346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 466.720279][T10346] RSP: 002b:00007f4adf99d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 466.728685][T10346] RAX: ffffffffffffffda RBX: 00007f4adee26180 RCX: 00007f4adeb9f559 [ 466.736663][T10346] RDX: 0000000000000018 RSI: 0000200000000600 RDI: 000000000000000c [ 466.744627][T10346] RBP: 00007f4adec36b20 R08: 0000000000000000 R09: 0000000000000000 [ 466.752593][T10346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 466.760578][T10346] R13: 00007f4adee26218 R14: 00007f4adee26180 R15: 00007f4adef4fa48 [ 466.768558][T10346] [ 466.772241][T10346] Kernel Offset: disabled [ 466.776575][T10346] Rebooting in 86400 seconds..