last executing test programs: 1m59.13481726s ago: executing program 0 (id=434): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x2400) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0x1, 0x4) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0xff00, 'rr\x00'}, 0x2c) r4 = socket(0x840000000002, 0x3, 0x100) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0xfffffffffffffff5, 0x7, {0x7, 0x29, 0x3c, 0x2100039, 0x0, 0x0, 0x1, 0x57, 0x0, 0x0, 0x80}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000240)="ff02040000b5fffffffffffff3ff2f2be82db1af00000000", 0x18) getsockopt$inet6_opts(r5, 0x29, 0x39, 0x0, &(0x7f00000000c0)) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) syz_usb_connect$uac2(0x3, 0x98, &(0x7f0000000080)=ANY=[@ANYBLOB="12010003000000401e0400304000010203010902c6000301003003080b00020109200609040000000101200009240102000626000311240803010001000000000000006b00000c24030402030103"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) sendmmsg$inet(r4, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=[@ip_retopts={{0x10, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4, 0x7f, 0x3, 0x7}]}}}], 0x10}}], 0x2, 0x8000) 1m57.614975413s ago: executing program 0 (id=438): r0 = inotify_init() ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000d40)={0x1, 0x2, {0x910b, @struct={0x3, 0x4}, 0x0, 0x4, 0x4, 0xb0, 0x7, 0xf08, 0x40, @usage=0x6, 0x2, 0x2, [0x5891, 0x4, 0x400, 0x3, 0x0, 0x8]}, {0x3, @usage=0x6, 0x0, 0x4, 0x100000001, 0x0, 0x5, 0x2, 0x8, @usage=0x8, 0x8, 0x4, [0x74c, 0x1, 0x2, 0x3, 0xaec, 0x2]}, {0x4, @struct={0x80000001, 0x3b}, 0x0, 0x4, 0x9, 0x2, 0xc, 0x40, 0x8, @usage=0x790, 0x0, 0x4, [0xce9, 0x4, 0x10, 0x7fff, 0x5, 0x10001]}, {0x7, 0x4, 0x9}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000001140)={r1, 0x6, 0x1, 0x1}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000d00), 0x400000000a882, 0x0) r3 = dup(r2) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$bt_hci(r4, 0x6, 0x2b, &(0x7f0000003580)=""/4117, &(0x7f00000000c0)=0xff8f) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x401}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r3, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f00000000c0)={{0x0, 0xa, 0x100000001, 0x0, 0xffffffffffffffff, 0x7, 0x5, 0x5, 0x6, 0x10000, 0xe9e5, 0x8000, 0x9, 0x1, 0x3}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000001a40)={{r5, 0x4, 0x9, 0x3, 0x5c, 0x14, 0x7fffffffffffffff, 0x10000, 0x6, 0xffffffff, 0x7, 0x9a, 0x9, 0x3, 0xce8c}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r7 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000122f0d40710404030300000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r7) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000b753b5086d049608113a010203010902120001000000009636aaf789c7159d0fde505c766641c38b0fc32d7288ca9c47a9a569e396b4075b886355387e2c498ce0706c4dd3f9f071c49ae26ee6c83f925153d6e0bb9be8db530184ab8c1d3f280deb69704b30027e1cb96f11f6d734cd8332"], 0x0) syz_usb_control_io$cdc_ecm(r8, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fc00000000000000a251a4f45205f1af060004400e1f00000500070088000000060005404e1f0000"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) (fail_nth: 6) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) socket(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000280)={0x1, 0x0, [{0xad4, 0x0, 0x4}]}) 1m53.575960285s ago: executing program 0 (id=448): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000002c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000005b40)=[{{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000540)="7f00", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000ec0)="a7", 0x1}], 0x1}, 0x20c}], 0x2, 0x24004c41) 1m53.396481204s ago: executing program 0 (id=449): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000240)=""/17, 0x11}, {&(0x7f0000000340)=""/183, 0xb7}, {&(0x7f0000000400)=""/240, 0xf0}, {&(0x7f0000000500)=""/91, 0x5b}, {&(0x7f0000000580)=""/175, 0xaf}, {&(0x7f0000000680)=""/185, 0xb9}, {&(0x7f0000000740)=""/30, 0x1e}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/35, 0x23}], 0x9, &(0x7f0000001840)=""/160, 0xa0}, 0x100) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89001) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0xc) 1m52.91535001s ago: executing program 0 (id=451): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') pread64(r0, 0x0, 0x0, 0xa2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket(0x1e, 0x2, 0x0) sendmmsg$sock(r1, 0x0, 0x0, 0x4048040) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35c0, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x1, 0x367}}], 0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 1m51.784659214s ago: executing program 0 (id=457): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) msgget$private(0x0, 0x8) socket$kcm(0x2d, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r4 = socket$tipc(0x1e, 0x5, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x8000, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x1d0, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in6=@private2, 0x0, 0x5, 0x0, 0x0, 0xa}}, [@migrate={0x180, 0x11, [{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2b, 0x2, 0x0, 0x3501, 0x2, 0x2}, {@in=@multicast1, @in=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x33, 0x4, 0x0, 0x34ff, 0x2, 0x2}, {@in6=@empty, @in6=@remote, @in=@private=0xa010102, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x8}, {@in=@private=0xa010102, @in6=@local, @in=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x3f}, 0x3c, 0x0, 0x0, 0x3505, 0x2, 0xa}, {@in=@loopback, @in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x33, 0x4, 0x0, 0x3503, 0xa, 0x2}]}]}, 0x1d0}}, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000180)=@name={0x1e, 0x2, 0x3, {{0x40, 0x2}, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r4, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x74, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001020000102505a1a4400001020301090262000201a20001002400002000240f0100000000000000000000241a0000000905810300000000000904010000020d00000904010102020d0000090582020000"], 0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) fsopen(&(0x7f0000000000)='sockfs\x00', 0x0) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a3000000000e4000000160a01000000000000000000010000010900010073797a30000000000900020073797a3000000000b80003800800014000000000a400038014000100776c616e3000000000000000000000001400010076657468305f746f5f62617461647600140001006d6163766c616e3100000000000000001400010076657468310000000000000000000000140001006772653000000000000000000000000014000100776c616e3100000000000000000000009400010076657468315f766972745f77696669001400010076657468305f746f5f626f6e6400000008000240000000064c020000180a0101000b000000000000010000000900010073797a3000000000e800038008000140000000000000014000000000cc0003801400010069703665727370616e3000000000000014000100776732000000000000000000000000001400010076657468305f6d61637674617000000014000100626f6e645f736c6176655f310000000014000100626f6e645f736c6176655f300000000014000100636169663000000000000000000000001400010070696d726567300000000000000000001400010070696d726567310000000000000000001400010076657468315f746f5f7465616d000000140001007465616d5f736c6176655f300000000008000140000000200900020073797a30000000001001038008000140000008"], 0x378}}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4211, 0x4) 1m49.64708354s ago: executing program 32 (id=457): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) msgget$private(0x0, 0x8) socket$kcm(0x2d, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r4 = socket$tipc(0x1e, 0x5, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x8000, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x1d0, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in6=@private2, 0x0, 0x5, 0x0, 0x0, 0xa}}, [@migrate={0x180, 0x11, [{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2b, 0x2, 0x0, 0x3501, 0x2, 0x2}, {@in=@multicast1, @in=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x33, 0x4, 0x0, 0x34ff, 0x2, 0x2}, {@in6=@empty, @in6=@remote, @in=@private=0xa010102, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x8}, {@in=@private=0xa010102, @in6=@local, @in=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x3f}, 0x3c, 0x0, 0x0, 0x3505, 0x2, 0xa}, {@in=@loopback, @in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x33, 0x4, 0x0, 0x3503, 0xa, 0x2}]}]}, 0x1d0}}, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000180)=@name={0x1e, 0x2, 0x3, {{0x40, 0x2}, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r4, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x74, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001020000102505a1a4400001020301090262000201a20001002400002000240f0100000000000000000000241a0000000905810300000000000904010000020d00000904010102020d0000090582020000"], 0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) fsopen(&(0x7f0000000000)='sockfs\x00', 0x0) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x378}}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4211, 0x4) 10.534613913s ago: executing program 2 (id=878): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0xfffc}, 0x0, [0x9faf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x40000000, 0xfeffffff, 0x0, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x40000000, 0x0, 0xfffffffc, 0x0, 0xffffffff, 0xdc, 0xa, 0x0, 0x2d52c0], [0x0, 0x1, 0x2, 0xb16, 0x0, 0xffffffcb, 0x0, 0x0, 0x0, 0x2000, 0xaaf, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7, 0x0, 0x0, 0x8, 0x1000, 0x0, 0xf, 0x1, 0x2000002, 0x0, 0x0, 0x0, 0xfffffffe, 0x20000100, 0x1, 0x0, 0x0, 0x66bd, 0x0, 0xfefffffd, 0x0, 0x8, 0xd77, 0x0, 0x0, 0xfffff37a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], [0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7, 0x20000, 0xfffffffd, 0x2, 0xe, 0x1, 0x0, 0x0, 0xffffffff, 0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0xd12, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0xfffffffc, 0xfffffffc, 0xc, 0x6, 0x0, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x3, 0x2, 0x0, 0xe, 0x4000000, 0x0, 0x0, 0x8d, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffeffff, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x800, 0x0, 0x40002, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz0\x00', {0x0, 0x1100, 0x0, 0x1f}, 0x4d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4001, 0x0, 0x2, 0xfffffe00, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x7ff, 0xfffffffd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x1, 0x0, 0x401, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4], [0xffffffff, 0x3, 0x10000002, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x800, 0x9262, 0x4, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x400000, 0x1, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x1000, 0x401c, 0x0, 0x0, 0x0, 0x4, 0xfffffffb, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0xfd5], [0x0, 0xfffffff9, 0x0, 0x20000002, 0x0, 0x5, 0x0, 0x0, 0xffffffff, 0x0, 0xfffffffe, 0x800, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x80000, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000, 0x0, 0x0, 0x6, 0x0, 0x3, 0x1000, 0x82, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x100, 0x0, 0x6, 0x6, 0x0, 0x4], [0x81, 0x5, 0x5d30, 0x1, 0x0, 0x100000, 0xdbc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x4, 0x3, 0x0, 0x0, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0xe58b, 0xfffffff9, 0x0, 0x3, 0x0, 0x4, 0x1ff]}, 0x45c) 10.37895922s ago: executing program 2 (id=879): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000340)=[@in={0x2, 0x4e24, @empty}], 0x10) r2 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000107e05192000000000000109022d0001000000000904000005030015000921050000012205000905810320000000070905020310"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r2, 0x81, 0x1, &(0x7f0000000b80)='\x00') ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x1, 'team0\x00', {}, 0x200}) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) ioctl$HIDIOCGRAWINFO(r1, 0x80084803, &(0x7f00000004c0)=""/228) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r5, 0x5b02, 0x0) read$char_usb(r5, 0x0, 0x0) syz_usb_connect(0x5, 0x46, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(r3) read$char_usb(r5, 0x0, 0x0) r6 = dup(r0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) gettid() timer_create(0x3, &(0x7f0000000040)={0x0, 0x11, 0x4, @thr={&(0x7f0000000140)="a998f82b4c70150efd0f18aca53de3abe1fde5c880a85859b9b3559ea0590f90b7a45f135b5de6d14c7b46ab5df98ba6e2f540ddab07efcedb831aacd822013e32277587d708f77f28de045ed815eccbfcbb49355b2c3560802529c2c3cae3edafd2", &(0x7f00000001c0)="5cd31e0bc7aca4f12513ced00a3dfcf33444d0f0bc12b5d96ede9c39e1e82e09794e2137fde1c976e0c3adacf4f798eab093d32187bb6d27fc8d23c0170c2042fdca855cb0a5c395b22da49ee4cb319536a822a22278124729fceb4bbc66b0ecaee174328695337f19bc48a890d3d9b6e4b7b6de84c1dd2329"}}, &(0x7f0000044000)) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) read$FUSE(r6, &(0x7f0000002c00)={0x2020}, 0x2020) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 7.46539661s ago: executing program 2 (id=891): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x2cc}) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/110, 0x6e}], 0x1) syz_clone(0x8000, &(0x7f0000000240), 0x0, &(0x7f0000000300), &(0x7f0000000380), &(0x7f00000003c0)="86747221a259916f0106e9f22f1eb92e") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00'}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000021c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x8d1}], 0x4924a67, 0x80001) recvmmsg(r3, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0x8}], 0x1, 0x40000142, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x4, 0xfffff034}, {0x20, 0xe, 0x0, 0x46}, {0x6}]}, 0x8) sendmmsg(r4, &(0x7f0000001c00), 0x400000000000159, 0x40840) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r5, 0xc01c5869, &(0x7f0000000400)={r3, &(0x7f00000001c0)='wlan0\x00', 0x123c00, &(0x7f0000000280)={@_ha_fsid={[0x5, 0x8]}, {0x1c81, 0xfffb, 0x1, 0x2}}, 0x14ca, &(0x7f00000002c0), &(0x7f0000000340)=0x23}) ioctl$XFS_IOC_PATH_TO_HANDLE(r5, 0xc01c5869, &(0x7f0000000540)={r6, &(0x7f0000000440)='xts(aes)\x00', 0x400, &(0x7f0000000480)={@_ha_fsid={[0x10, 0x5]}, {0x401, 0xffff, 0x5, 0x4}}, 0x0, &(0x7f00000004c0)={@_ha_fsid}, &(0x7f0000000500)=0x5}) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000180)=0x1000000) 7.104783826s ago: executing program 1 (id=892): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_setup(0x0, &(0x7f00000001c0)=0x0) io_destroy(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3, 0x67a7}}, 0x30) umount2(&(0x7f0000000380)='./file0\x00', 0x1) 6.741079645s ago: executing program 1 (id=894): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) close(0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r3, 0x0) ftruncate(r3, 0xc17a) setsockopt$inet6_int(r3, 0x29, 0x2, &(0x7f0000000000), 0x4) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x168, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x134, 0x3, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6d57}, @NFTA_SET_ELEM_EXPRESSIONS={0x20, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x100, 0xb, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x19}]}}}, {0x24, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x18, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x58, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x1}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0xe6}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x4}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0xc2}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 6.570772602s ago: executing program 1 (id=895): r0 = syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0x8401) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8008550e, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x800, 0x5, 0xd000, 0xe, "0062ba7d8200000016001b000200f705096604"}) r2 = syz_open_pts(r1, 0xa0200) r3 = dup3(r2, r1, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x33) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) nanosleep(&(0x7f0000000000)={0x77359400}, &(0x7f0000000080)) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$KVM_CAP_PTP_KVM(r4, 0x4068aea3, &(0x7f00000000c0)) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000040)={0x7, 0x4, 0x2, 0xfff, 0x16, "e533991cd00ee11a"}) munlockall() io_setup(0x8, &(0x7f0000004200)=0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r5, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x2}]) 5.940033115s ago: executing program 2 (id=900): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000003c0)={0x2, 0x1, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x4) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r3, &(0x7f0000001bc0)=[{&(0x7f0000000080)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000000340)="17d8", 0x2}], 0x1, &(0x7f00000001c0)=[@prinfo={0x14, 0x84, 0x5, {0x0, 0x1000}}, @prinfo={0x14, 0x84, 0x5, {0x0, 0x2}}], 0x28}], 0x1, 0x30) 5.427394315s ago: executing program 1 (id=901): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x7e, &(0x7f0000000240)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x1c, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x8, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@empty}, {@broadcast}, {@loopback}, {@private}, {@multicast2}, {@multicast1}, {@dev}]}, @lsrr={0x83, 0x3, 0x10}]}}}}}}}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x8a01) ioctl$DRM_IOCTL_MODE_ADDFB(r3, 0xc01c64ae, &(0x7f0000000080)={0x0, 0x6, 0x5, 0x4, 0x18, 0x18, 0x7}) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000140)=@generic={0x1, 0xa0, 0x8}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') getdents64(r4, &(0x7f0000000340)=""/82, 0x52) r5 = socket(0x2, 0x80805, 0x0) r6 = openat2$dir(0xffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x800, 0x100, 0xc}, 0x18) fchmodat(r6, &(0x7f0000000400)='./file0\x00', 0xd) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="98010100bc520400200012800b0001006772657461700000100002800400120006000e0002000000"], 0x40}, 0x1, 0x8100, 0x0, 0x20000010}, 0x20048000) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r8, &(0x7f0000000500)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000006c0)=""/101, 0x65, 0x0, 0x0, 0x4, 0x3, 0x10000001}}, 0x120) r9 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r9, 0x0) writev(r8, &(0x7f0000000780)=[{&(0x7f00000003c0)="0e000000", 0x4}, {&(0x7f00000006c0), 0x1000000}], 0x2) getsockopt$CAN_RAW_LOOPBACK(r5, 0x65, 0x3, 0x0, &(0x7f0000000240)) syz_open_procfs(0x0, &(0x7f0000000100)='smaps_rollup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xa6426000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x149b82, 0x0) connect(r5, &(0x7f0000000500)=@hci={0x1f, 0x0, 0x1}, 0x80) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x1ff, 0x70, 0x5, 0x5, 0x2c, 0x1, 0x3}, &(0x7f0000000480)=0x9c) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80000}, 0x0) dup(r0) 4.631660496s ago: executing program 3 (id=904): socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x300, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r0], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 4.168026722s ago: executing program 1 (id=908): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8401) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5b", 0x30}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_bcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000680)=""/112, 0x70}], 0x1}, 0x10150) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) socket$tipc(0x1e, 0x5, 0x0) r3 = syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file0/file0\x00', 0x400d, 0x0, 0x1, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) ioctl$int_in(r3, 0x5421, &(0x7f0000000100)=0x6) unshare(0x2a020400) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)='\x00\x00\x00', 0x3) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0xfffffd66, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}}, 0x0) close(r5) socket(0x23, 0x803, 0x0) syz_io_uring_setup(0x68e3, &(0x7f0000000400)={0x0, 0xe1f0, 0x0, 0x0, 0xf9, 0x0, r4}, &(0x7f0000000340), &(0x7f0000000140), &(0x7f00000003c0)) 4.153520187s ago: executing program 3 (id=909): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r1, 0x1, 0x0, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x4477}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}, 0x1, 0x0, 0x2000000}, 0x0) 3.685022367s ago: executing program 3 (id=910): syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000002600)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x6, 0x2, 0x10, 0x7, 0xe, 0x9}, {0x9, 0x5, 0xb, 0x2, 0x200, 0x1, 0x71, 0x9}, {0x9, 0x5, 0xd, 0x3, 0x0, 0x1, 0x2, 0x6}}}}}}]}}, 0x0) socket$netlink(0x10, 0x3, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x8000, 0x5a) socket$can_raw(0x1d, 0x3, 0x1) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f00000000c0)=0x2, 0x4) bind$can_raw(r1, &(0x7f0000000480), 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000000), 0x0) close(r1) (async) close(r1) r2 = openat$cgroup_int(r0, &(0x7f0000000080)='cpu.max.burst\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000100)=0x8, 0x12) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40240) (async) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40240) socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x40102) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x7fff, 0x0, 0x0, 0x8000, 0x10001, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0xb76e, 0xffffffffffffffff, 0x200d, 0x0, 0xf, 0x80000006}, 0x0, 0x0) (async) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x7fff, 0x0, 0x0, 0x8000, 0x10001, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0xb76e, 0xffffffffffffffff, 0x200d, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r3, 0x40045402, &(0x7f0000000040)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r3, 0x40045402, &(0x7f0000000040)=0x1) r5 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) io_uring_enter(r5, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) (async) io_uring_enter(r5, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x0, 0x0, 0x2}}) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x0, 0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000140)={0x3, 0x9dc5, 0x0, 0x0, 0xc}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) 3.217917511s ago: executing program 5 (id=913): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc01cf509, &(0x7f0000000040)={r0, 0x9, 0x2}) syncfs(r1) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) splice(r0, 0x0, r2, 0x0, 0x38, 0x8) 3.122499665s ago: executing program 2 (id=914): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x48) bpf$MAP_DELETE_BATCH(0x18, 0x0, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{}, {r1, r2+60000000}}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000000c0)={0xffffffff, "030000000000000023000000debd12ffff00000000000000000020000400"}) openat$vicodec0(0xffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = socket(0x1, 0x3, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, 0x0, 0x0) shutdown(r3, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r5 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r5, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x5e}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x4004551e, &(0x7f0000000380)={0x9, 0x1, "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"}) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000080)={0x1, 0xa, 0x4, 0xc, 0x0, 0x100, 0x0}) ioctl$USBDEVFS_IOCTL(r4, 0xc00c5512, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000380)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x30, 0x2c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x4, {0x8, 0x6, "cd85b5", 0x7, 0x84, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote}}}}}}}, 0x0) 3.070388987s ago: executing program 5 (id=915): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$video(&(0x7f0000000400), 0x5, 0x40000) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x2000, 0x8000, 0x0, 0x7, {{0x5, 0x4, 0x0, 0x12, 0x14, 0x20, 0x4003, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x41, 0x0}, @multicast1}}}}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000000800d3804942f9ff1f0000004683000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(r5, &(0x7f0000000380)=[{{&(0x7f0000000580)=@nl=@proc, 0x80, &(0x7f0000001900)=[{&(0x7f0000000600)='B', 0xe80}], 0x1}}, {{&(0x7f0000000200)=@nl=@proc, 0x80, &(0x7f0000000340)=[{&(0x7f0000000280)='6', 0x1}], 0x8}}], 0x2, 0x0) r6 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x0, 0x0, @local}, &(0x7f00000004c0)=0x1c, 0x80800) setsockopt$inet6_buf(r6, 0x29, 0x2c, &(0x7f0000001680)="e53a125d3d968f9f37fd859d87581ad7f33cf850113921879111bcae5be6a7f9c770e38f478014ecb5a34ffdb2a1daba04f2898349e58dabd5e41db2d7874904c54a3b1264c2d6453bcf3b5db26e148fb60b0473f8e4c52765dc58cfac4f65bc916c3e215e14c38a1e1766d54060a665b84bcd3d2ffa883a61c891ba29bba855c4b16c160492d3db0fcf50aeeae9105710caa0a6b9ed2b20990893b8b01bab1737894b654284ca963f6b4d0b1807109bb723700ef4f443b8f9bb24a44e22173df8c51d", 0xc3) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsopen(&(0x7f0000000000)='jffs2\x00', 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x2f, 0x0, 0x0) 2.67222717s ago: executing program 4 (id=919): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010000d042abd70000000000000000000", @ANYBLOB="01000000000000002c001280090001"], 0x4c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) read$FUSE(r1, &(0x7f0000000700)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r6, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000001c0)='m', 0xfffffdfc}]) fcntl$lock(r5, 0x24, &(0x7f00000000c0)={0x3, 0x0, 0x10000, 0x40, r3}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r9, 0x4010ae68, &(0x7f0000000000)={0x2000, 0x1000, 0xfffffffc}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6c6f61642064656661756c7420757365723a7b203030303030303030303030303030303031303234200040f802ecf8686bc1a86a4d9bb31e91380b2f032b9abdf3a5d28aa4eb2e6e343ccc65512f189001517ff02ae83c9bfc6f1d00"/102], 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010000100f5fa1eac000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000040028000480080002400000000008000140000000051400030076"], 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) fcntl$lock(r10, 0x26, &(0x7f0000000000)={0x1}) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r12, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x2}) fcntl$lock(r12, 0x6, &(0x7f0000000140)={0x1, 0x0, 0xffff}) close_range(r0, 0xffffffffffffffff, 0x0) 2.588694109s ago: executing program 1 (id=920): openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000bfd2b357620012", 0x32}], 0x1}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ac054402000000002d7b0902240001000000000904000000030002"], 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000002240)={{0x77359400}, {0x77359400}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002600)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f00000001c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x1906) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_SET_RESERVED_SIZE(r7, 0x2275, &(0x7f0000000100)=0x2c0000) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) r9 = eventfd(0x5f0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa6d9d000) readv(0xffffffffffffffff, &(0x7f0000002740)=[{0x0}], 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000002780)=@migrate={0x284, 0x21, 0x400, 0x70bd28, 0x25dfdbfe, {{@in=@local, @in=@rand_addr=0x64010102, 0x4e21, 0x7, 0x4e23, 0xd9f, 0x8, 0x0, 0x0, 0x87, 0x0, r4}, 0x6e6bb4}, [@etimer_thresh={0x8, 0xc, 0xffffffff}, @sa={0x13d, 0x6, {{@in=@dev={0xac, 0x14, 0x14, 0x25}, @in=@broadcast, 0x4e20, 0x40, 0x4e21, 0x4, 0x2, 0x80, 0x0, 0x3a, 0x0, r4}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d2, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {0x3ff, 0x6, 0x6, 0x7, 0x8, 0x4, 0x10, 0x3}, {0x4, 0x4, 0xed, 0xa}, {0x7, 0xe2dc, 0x8}, 0x70bd2b, 0x3506, 0xa, 0x3, 0x2f, 0xb7}}, @algo_auth_trunc={0xdc, 0x14, {{'streebog512-generic\x00'}, 0x480, 0x60, "0336eb2928e7df4c7023fc55586b35d6aea7bc4b1d1f5134c50cca9898614beae3a34f860694a1d8b00cfcd5f536ebb93b731209a7c4d16491fb9605a7b4442f198afe5ac09487a2064c3ac20639f3e6131c401874f00c58f9aa3e8f86787354441cc63da99c6deb9ac495faa63bb580755736379b62b0d426630c5f57500df04a83c2a5d40fb91ea8926d406948dd6f"}}, @replay_esn_val={0x30, 0x17, {0x5, 0x70bd28, 0x70bd26, 0x70bd27, 0x70bd27, 0x3ff}}, @replay_esn_val={0x34, 0x17, {0x6, 0x70bd28, 0x70bd27, 0x70bd2c, 0x70bd2b, 0x0, [0x7fff, 0x800, 0x9, 0x81, 0x9, 0xfffffffe]}}, @lastused={0xc, 0xf, 0x4}]}, 0x284}, 0x1, 0x0, 0x0, 0x200400c5}, 0x4000800) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="50000000150043d629bd7000fddbdf250a010101000000000000000000000000640101000000000000000000000000004e2100004e2100080200a0802c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b0d3be7f362c17ae"], 0x50}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r12 = msgget$private(0x0, 0x600) r13 = getpid() msgctl$IPC_SET(r12, 0x1, &(0x7f0000000140)={{0x2, 0xee00, r5, r4, r5, 0x2, 0x2}, 0x0, 0x0, 0x3, 0x7, 0x4, 0x0, 0x8, 0x8001, 0x40, 0x7, r13}) sendmsg$nl_xfrm(r11, &(0x7f00000024c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002480)={&(0x7f0000002280)=@polexpire={0x1fc, 0x1b, 0x410, 0x70bd27, 0x25dfdbfc, {{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@multicast2, 0x4e24, 0x75, 0x4e20, 0x1, 0x2, 0xe0, 0x80, 0x2c, 0x0, r4}, {0x0, 0x3, 0xfffffffffffffff8, 0x7fff, 0x80, 0x5, 0x2, 0x2}, {0xef, 0x8, 0x8, 0x8}, 0xfffffffe, 0x6e6bb0, 0x0, 0x0, 0x3, 0x2}, 0x3}, [@algo_auth={0x122, 0x1, {{'rmd128-generic\x00'}, 0x6d0, "9f84082f5ac9fd8556cfd6679ea310576163806ebdc5453c32e4d17d53e88eb40639d0de5f0e23f28cc359e25c0886e005ce7b1dda12165cf31009c2681a7865d085ac0713bf62e844189ae78275cb2dd4f60f8fe5ccf44dcfcd5553f9c78ec4d47b7ce91a9fd45147e5fa55d26cfe3c8e98fe3a921edaf6bc7f51637caed8d3930e48413de4268684d767be7831f5964dbe2e451a39e6681fcf27287f8d1f12b08017ceefca5c2a9d947265d337dff035ee0aa6c2e3a3a448fa668cf88ad179c987be354381555fb08106f70f8909a42c0c6bb23bd5a19ce72b"}}, @replay_val={0x10, 0xa, {0x70bd2c, 0x70bd2c, 0x4}}, @extra_flags={0x8, 0x18, 0x782b}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x20000001}, 0x800) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000300)=0x10) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) ioctl$KVM_IOEVENTFD(r8, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x0, 0x0, r9}) 2.236040167s ago: executing program 3 (id=921): timerfd_create(0x0, 0x800) openat$ppp(0xffffffffffffff9c, 0x0, 0x40082, 0x0) r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xcf0b, 0x0, 0x3, 0x11}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, 0x0) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x24048860}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000003060500000000000000800000000006"], 0x14}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) sendmsg$NFT_BATCH(r6, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20}, 0x240000c5) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x2000, 0x0, {0x2, 0x0, 0x10, 0x4, 0xff, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0) 2.189536969s ago: executing program 3 (id=922): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000040)={0xb, @raw_data="c1bc21d16c587c98779fc876b1a121e8d96abc36f9fbc3b63d40c312ee06faf34e6b30f0107e755f592570521b256fad09b246b6826b34225bb7873b9dc7a21fad677e64c7620901f95bae72dcdec77fc2e680e03a4b31385c445b925eadb77abcf3d89901800a986c444c2f5e6de11afefaef972d2eda9f5427919f214d961bb41d822da470b7b4bc82583608864e5ff86443c06cccec096e1627fc456139c14d6f3db628324c7491aae9c1ab4049856aa3d2d91dd4234520cb559f187db564f99744aee69e397a"}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000250019033752a5f76a80000005"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x24044004) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, 0x2e, 0x4, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000e80), r0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setresgid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r3 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_mtu(r3, 0x29, 0x1e, &(0x7f0000000040)=0x5, 0x4) syz_usb_connect(0x3, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000386cfc080d052201655b010203010902120001000000000904fcd4ae725784aa95f61fc0463f4fccb6e25fbfb7dea20c3319d9397a4faecc9f4622de62c3fbcd3e3fbe02a247c498af118829c3fdd563ce37ad348a903c206d6613eb386ac348fe293494ea3121606d2718de1bb6c84661d47b2ba2e9da532417bf7682a9ef0a1399b9440fec9a649f5f7706c409", @ANYRESHEX], 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f0000000040)) r4 = socket(0x2b, 0x80801, 0x1) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000140), 0x10) bind$l2tp6(r4, &(0x7f0000000180)={0xa, 0x0, 0x81, @loopback, 0xa1d, 0x3}, 0x20) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) setregid(0xffffffffffffffff, r6) r7 = add_key(&(0x7f0000000040)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)='@', 0x1, 0xfffffffffffffffc) keyctl$chown(0x4, r7, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x4000, 0x61, 0x10, 0x34}, [@ldst={0x6, 0x0, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) r8 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x600, 0x48b, 0x0, 0x0) 2.134574744s ago: executing program 5 (id=923): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x2eb, @mcast2, 0x7}, 0x1c) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x32) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, &(0x7f00000002c0)=ANY=[], 0xf8) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000280)="f4", 0xfdef}], 0x1) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xf, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa300, 0x4}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x1}, @IFLA_MACSEC_REPLAY_PROTECT={0x5, 0xc, 0x1}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x10}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x20000080) (async) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f00000004c0)="800000800000210ce7decd7a000340008100c56795166d53dae591a5c71ffa42a7401d181aa74683a2a8d84f60815b191c64a533abf927c62049dcd52854", 0x3e, 0x40, &(0x7f0000000180)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @broadcast}, 0x14) (async) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_POLICY={0x8}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x1b, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xb4}}, 0x0) (async) ioctl$KVM_SET_CLOCK(r9, 0x4020aeb2, &(0x7f0000000140)={0x1000100000000, 0x6, 0x8, 0xffff}) 2.13029736s ago: executing program 2 (id=924): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') socket$key(0xf, 0x3, 0x2) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@o_path={&(0x7f00000000c0)='./file0\x00', r3, 0x4000, r3}, 0x18) sync() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x40}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x2b) r5 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0xb}, 0x94) syz_usb_control_io$uac2(r5, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000540)={&(0x7f00000001c0), &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7, 0x1, 0xa}) syz_usb_control_io$hid(r5, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="40084f0000003a45444db441ba8f87f2de0e4872fc8bf45a40f05ee2dd90695e964d4c32c89580d16e26665c3cb71de602a74a933006000000000000009e550e6cce756bd0fcb4d76e82557a2a3105786e85061901"], 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000480)={0x20, 0x3, 0x1, 0x8}}) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000140)={0x0, 0x7, 0x5, &(0x7f0000000100)={0x17, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}}) times(0x0) 2.008144979s ago: executing program 5 (id=925): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = fsopen(&(0x7f0000000000)='jfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000000c0)='resize', &(0x7f0000000100)='0', 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000040), 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r3, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000440)={0x6, 0x0, [{0x400000b0, 0x0, 0xfffffffffffffffb}, {0x8ad, 0x0, 0x80000000}, {0x86e, 0x0, 0x6}, {0x1e0, 0x0, 0x1}, {0xba7}, {0x1a2, 0x0, 0x3}]}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280), 0x0) r6 = accept4(r5, 0x0, 0x0, 0x800) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000300)={0x0, 0xff}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000380)=@assoc_value={r8, 0xfffff001}, 0x8) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000000140)="8d8a239a47c5392729fb576f12615f45294197843801c350a83a2f4f051dce18d1006175ac580ef8632f5cd521f59840ad9a9ad68ea4ad9cede6f5c7a98105d35e6831b988020ce5cf1ad56419fbf2acf92f77a0a31f6415c22e3c2e28f88f8bfad46f063a0ff4eef8cdfc5a0f695022d35888dad558162b8edac3ab0bd6edf5e29bd7fe5bead008a20b1f4ef0accb43a84ccacd312321afadbc44c8d24b8dcf96943094af2d", 0xa6}, {&(0x7f0000000680)="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", 0x96f}], 0x2, 0x0, 0x0, 0x9cde14b4b725c073}], 0x1, 0x448d4) recvmmsg(r6, &(0x7f0000004f00)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000001700)=""/4096, 0x1000}], 0x1}}], 0x1, 0x40000000, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x73, 0x2, {{0x40, 0x0, 0x4}, 0x3}}, 0x18) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x403, 0x0, 0x2000, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f304fdd672bad09dfb040000000001000001f9580dabf95ddc91967c20"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) 1.803273925s ago: executing program 5 (id=926): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x7a}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.684396197s ago: executing program 4 (id=927): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000900142603600e1208000f0000000401a80016002000014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x8000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x18, &(0x7f0000000000)=0xe, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r2 = socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42082, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x8102, 0x0) close(r3) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRESDEC=r2, @ANYRES64=r2, @ANYRES8=r0, @ANYRES16=r2]) socket$netlink(0x10, 0x3, 0x5) sendmsg$inet(r0, &(0x7f0000000440)={&(0x7f0000000200)={0x2, 0x4e22, @empty}, 0x10, 0xffffffffffffffff, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0d000000000000000100000008000000740000000000000007000000440893c000000006071fcee00000027f000001640101020a010101ac1414aaac1414bbffffffff4424479000000009000000020000000e00000005317dcad70000000c00000002000000074410082000000008000001010000000044043e3144075310938ab800000d00000000000000010000004100000010000000000000000100000002000100180000000000000008000000", @ANYRES32=0x0, @ANYBLOB="acbe260000", @ANYRES32=0x0, @ANYBLOB="0a010101ac14143f10000000000000000200000003000000300000000000000007000000940401000194040100070bbcac1efd01ffffffff830f6de0000001e00000020000000000"], 0x114}, 0x4810) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'bridge_slave_0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000340)="ddf4", 0x2}, {0x0}], 0x2) capset(&(0x7f0000000000)={0x20071027}, &(0x7f0000000280)={0x4, 0xfffffa18, 0xffffffff, 0x81, 0xffffffff, 0x1}) 1.333727524s ago: executing program 4 (id=928): symlink(&(0x7f00000049c0)='.\x00', &(0x7f00000059c0)='./file0\x00') r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x25, &(0x7f0000000000)={0x1, 0xffffffffffffffff, 0x0, {0x5, 0x7}, 0x1}, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3e, 0x0, 0x0) 1.137559191s ago: executing program 4 (id=929): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xe84, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0xffe4, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000001, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x1, 0x4, 0x5}, {0x4a7, 0x1ff, 0x4, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x7, 0xfffffffd, 0x5}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8}, {0x0, 0x5, 0x1437, 0x0, 0xee57, 0x9}, {0x77d, 0x8, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x0, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x5, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x9, 0x3, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x8, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x8, 0x1, 0x1ff, 0x40}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0xfffffffb, 0xeac}, {0x9, 0x2, 0xd77, 0x8, 0x113, 0x8d3f}, {0x10000, 0xffffffff, 0x4, 0x92a4, 0x9, 0x10}, {0x1a4a13f0, 0x9, 0xe, 0x3, 0xad47, 0x2}, {0x7, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x4, 0x200, 0x9, 0x1, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0xffff, 0x9, 0x44, 0xc, 0x1}, {0x6, 0x10, 0xf, 0x80002, 0x6, 0x44}, {0xf23, 0x3ff, 0x0, 0x4000009, 0xffffffff}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x9, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x400, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x1, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x1}, {0x3, 0x7, 0x4, 0x4, 0x1c716ddc, 0x2}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x2, 0x6, 0x3, 0x2}, {0x62, 0xf4, 0x5, 0x4, 0x4, 0x6f}, {0x5, 0x4, 0x53, 0x8, 0xc0000000, 0x7}, {0x2, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x2, 0x1000, 0x9, 0x9}, {0xe, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0xe3f6, 0x8, 0xfffffff7, 0x1, 0x6, 0xc}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f1, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x8, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x7, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x8, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0xb, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x2, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x3, 0x5, 0x3ff, 0x3649}, {0x800007, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc5, 0x3, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffffffff, 0x4, 0xfc, 0x7, 0x6, 0x10}, {0xf, 0xfffffffe, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0x10001, 0x6, 0x1, 0x9, 0xfffffff8}, {0x3, 0xa, 0x7, 0x9, 0x10, 0x1}, {0x5, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x3}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x2, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x94, 0x4, 0x40000088}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0x5, 0x7, 0x5, 0x2, 0x1ff, 0x80000001}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0xffffffff, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x10000007, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x5, 0x3, 0x4, 0x9, 0xfffffffa}, {0x2, 0x3, 0x3, 0x6, 0x800, 0x7}, {0x0, 0x0, 0x3, 0x2, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0xc851, 0x3}, {0x6, 0x731, 0xfffffffc, 0x4, 0x3, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x0, 0x9, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffffa, 0x1, 0x3, 0x40, 0x2}, {0x1, 0x4, 0x80000000, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x5a, 0x96, 0x81, 0x0, 0x101, 0x7}, {0x4, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b4, 0x1, 0x800}, {0x61, 0x29, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xc, 0xd594, 0x9, 0x7}, {0x8, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6f}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xb, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xb, 0x10000, 0x1, 0x8000, 0xfffff830}, {0x3, 0x4, 0x2, 0x1, 0x3, 0x2b4}, {0x3cd2dbce, 0x929a, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x9, 0xe61, 0xc5c3, 0x3, 0x1}, {0x4, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x0, 0x6, 0x10001, 0x40ce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x9, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0xcf}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0x4}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x4}, {}, {0x1}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x1, 0x1}, {0x4}, {0x4}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {}, {}, {0x2}, {0x5, 0x1}, {}, {0x2}, {0x9baeccaf277094c4, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x81}, 0x800) 896.404611ms ago: executing program 4 (id=930): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES8=r0, @ANYBLOB="80420000000000f025ad3c8f001400030076657468305f746f5f626f6e6400000008003a"], 0x44}, 0x1, 0x0, 0x0, 0x80c1}, 0x2400081d) (async) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES8=r0, @ANYBLOB="80420000000000f025ad3c8f001400030076657468305f746f5f626f6e6400000008003a"], 0x44}, 0x1, 0x0, 0x0, 0x80c1}, 0x2400081d) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x5420, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x12b100, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000340)={'nicvf0\x00', 0x7101}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x1) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) ioctl$XFS_IOC_ERROR_CLEARALL(r3, 0x40085875) (async) ioctl$XFS_IOC_ERROR_CLEARALL(r3, 0x40085875) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'ip6tnl0\x00', {}, 0x100}) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x800010, &(0x7f0000003700)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1c00}}]}}, 0x0, 0x0, 0x0) (async) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x800010, &(0x7f0000003700)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1c00}}]}}, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="02000000010000000000000004000000000000000800000000000000200000000000000068dd04c593d3d096b7206b3c"], 0x24, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) write$sequencer(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="810500000000000094"], 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10, 0x1416, 0x1}, 0x10}}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x10, 0x1416, 0x1}, 0x10}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) openat$apparmor_thread_exec(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) r6 = openat$apparmor_thread_exec(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r6, &(0x7f0000000180)={'stack ', 'nicvf0\x00'}, 0xd) 591.0366ms ago: executing program 4 (id=931): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x101100, 0x0) r1 = openat$userio(0xffffffffffffff9c, 0x0, 0x22242, 0x0) writev(r1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000800) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000000)={0x0, 0x0, r0}) syz_fuse_handle_req(r2, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x10, 0x0, 0x1, 0x0, 0x0) syz_usb_connect(0x5, 0x27, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000100)={&(0x7f00000002c0)=[{0x9, 0x3011, 0x1, &(0x7f00000000c0)='\x00'}, {0x8f1, 0xa001, 0x0, 0x0}, {0x8, 0x1000, 0x0, 0x0}], 0x3}) 491.674077ms ago: executing program 3 (id=932): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETPERSIST(r6, 0x400454cb, 0x1) close_range(r5, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0) pselect6(0x40, &(0x7f0000000140)={0x0, 0x0, 0x1fd, 0x7c, 0xfffffffffffffffd, 0x6, 0x4, 0x5}, 0x0, &(0x7f0000000180)={0x8000000000003ff, 0x6, 0xffffffffffffffff, 0x6, 0x6, 0xf, 0x80000006, 0xfffffffffffffffc}, 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r7, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) r8 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r8, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x20, 0x1ffd, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe28b, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x4000, 0x40000002, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x64, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x2, 0x0, 0x0}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r0) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r9, &(0x7f0000000000)={&(0x7f0000000040)={0x1d, r10, 0x2000000}, 0x10, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="0400000000000000", @ANYRES64=r10, @ANYBLOB], 0x48}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'gre0\x00', &(0x7f0000000400)={'syztnl1\x00', r10, 0x7, 0x700, 0x2, 0x1, {{0x6, 0x4, 0x3, 0x0, 0x18, 0x66, 0x0, 0x9, 0x29, 0x0, @remote, @broadcast, {[@noop]}}}}}) 0s ago: executing program 5 (id=933): syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x88400) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) set_thread_area(&(0x7f0000000000)={0xffffffff, 0x0, 0x402, 0x1}) r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r0, 0x0, &(0x7f0000000380)='\x00', 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='htcp', 0x4) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) geteuid() kernel console output (not intermixed with test programs): ice [ 238.685707][ T5679] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 238.873015][ T8451] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.038019][ T8454] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 239.091432][ T8461] loop5: detected capacity change from 0 to 7 [ 239.119152][ T8461] Dev loop5: unable to read RDB block 7 [ 239.135025][ T8461] loop5: unable to read partition table [ 239.140857][ T8461] loop5: partition table beyond EOD, truncated [ 239.147063][ T8461] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 239.523738][ T10] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 239.559417][ T30] audit: type=1800 audit(1782068569.405:1163): pid=8471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.663" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 239.837172][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 239.863437][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 239.895146][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 239.916633][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 239.951988][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 239.971679][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.990459][ T10] usb 2-1: config 0 descriptor?? [ 240.047203][ T5679] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 240.055269][ T5679] usb 4-1: config 0 has no interface number 0 [ 240.061404][ T5679] usb 4-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 240.093610][ T5679] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 240.106246][ T5679] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 240.404826][ T10] plantronics 0003:047F:FFFF.0016: ignoring exceeding usage max [ 240.440840][ T10] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 240.721755][ T5679] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 240.730856][ T5679] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 240.742435][ T5679] usb 4-1: Product: syz [ 240.746717][ T5679] usb 4-1: SerialNumber: syz [ 240.757790][ T5679] usb 4-1: config 0 descriptor?? [ 240.954754][ T5679] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 241.003832][ T5679] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input17 [ 241.208380][ T24] usb 4-1: USB disconnect, device number 30 [ 241.286005][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -2 [ 241.305162][ T24] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 241.331472][ T30] audit: type=1326 audit(1782068571.165:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8472 comm="syz.2.666" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 241.366819][ T8488] netlink: 'syz.4.669': attribute type 21 has an invalid length. [ 241.428409][ T30] audit: type=1326 audit(1782068571.165:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8472 comm="syz.2.666" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=283 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 241.470524][ T30] audit: type=1326 audit(1782068571.165:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8472 comm="syz.2.666" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 241.529024][ T30] audit: type=1326 audit(1782068571.165:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8472 comm="syz.2.666" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 241.589085][ T30] audit: type=1326 audit(1782068571.165:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8472 comm="syz.2.666" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 241.709318][ T30] audit: type=1326 audit(1782068571.165:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8472 comm="syz.2.666" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 241.828636][ T30] audit: type=1326 audit(1782068571.165:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8472 comm="syz.2.666" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 241.893629][ T30] audit: type=1326 audit(1782068571.165:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8472 comm="syz.2.666" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 241.917817][ T30] audit: type=1326 audit(1782068571.165:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8472 comm="syz.2.666" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 241.941972][ T30] audit: type=1326 audit(1782068571.165:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8472 comm="syz.2.666" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 241.982326][ T24] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 242.095872][ T5679] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 242.143740][ T5686] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 242.433216][ T5686] usb 5-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 242.442434][ T5686] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.457327][ T5686] usb 5-1: Product: syz [ 242.463940][ T5686] usb 5-1: Manufacturer: syz [ 242.471048][ T5686] usb 5-1: SerialNumber: syz [ 242.483686][ T5686] usb 5-1: config 0 descriptor?? [ 242.645088][ T5701] usb 2-1: USB disconnect, device number 48 [ 242.652528][ T4940] Bluetooth: hci1: command 0x0406 tx timeout [ 242.796915][ T8509] FAULT_INJECTION: forcing a failure. [ 242.796915][ T8509] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.810069][ T8509] CPU: 1 UID: 0 PID: 8509 Comm: syz.1.674 Tainted: G L syzkaller #0 PREEMPT(full) [ 242.810101][ T8509] Tainted: [L]=SOFTLOCKUP [ 242.810108][ T8509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 242.810136][ T8509] Call Trace: [ 242.810144][ T8509] [ 242.810151][ T8509] dump_stack_lvl+0xe8/0x150 [ 242.810176][ T8509] should_fail_ex+0x40c/0x560 [ 242.810200][ T8509] _copy_from_user+0x2d/0xb0 [ 242.810230][ T8509] get_compat_msghdr+0xb3/0x4c0 [ 242.810252][ T8509] ? is_bpf_text_address+0x292/0x2b0 [ 242.810274][ T8509] ? __pfx_get_compat_msghdr+0x10/0x10 [ 242.810294][ T8509] ? rcu_is_watching+0x15/0xb0 [ 242.810315][ T8509] ? rcu_is_watching+0x15/0xb0 [ 242.810337][ T8509] ___sys_sendmsg+0x201/0x360 [ 242.810356][ T8509] ? rcu_is_watching+0x15/0xb0 [ 242.810377][ T8509] ? __pfx____sys_sendmsg+0x10/0x10 [ 242.810401][ T8509] ? kstrtoull+0x12f/0x1d0 [ 242.810432][ T8509] ? __fget_files+0x2a/0x420 [ 242.810458][ T8509] ? __fget_files+0x3a2/0x420 [ 242.810489][ T8509] __sys_sendmmsg+0x2de/0x4d0 [ 242.810511][ T8509] ? __pfx___sys_sendmmsg+0x10/0x10 [ 242.810545][ T8509] ? fput+0xa0/0xd0 [ 242.810570][ T8509] ? ksys_write+0x242/0x270 [ 242.810593][ T8509] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 242.810616][ T8509] __do_fast_syscall_32+0x23e/0x6f0 [ 242.810635][ T8509] ? do_fast_syscall_32+0x33/0x70 [ 242.810653][ T8509] ? asm_int80_emulation+0x1a/0x20 [ 242.810673][ T8509] ? do_int80_emulation+0x29f/0x550 [ 242.810692][ T8509] ? trace_irq_disable+0x3b/0x140 [ 242.810720][ T8509] do_fast_syscall_32+0x33/0x70 [ 242.810738][ T8509] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 242.810760][ T8509] RIP: 0023:0xf7f340ec [ 242.810776][ T8509] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 242.810792][ T8509] RSP: 002b:00000000f53f650c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 242.810814][ T8509] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000740 [ 242.810828][ T8509] RDX: 0000000000000002 RSI: 000000000401eb94 RDI: 0000000000000000 [ 242.810839][ T8509] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 242.810849][ T8509] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 242.810861][ T8509] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 242.810884][ T8509] [ 242.817942][ T8497] netlink: 68 bytes leftover after parsing attributes in process `syz.4.671'. [ 243.099200][ T8512] loop5: detected capacity change from 0 to 7 [ 243.106609][ T8497] tipc: Enabling of bearer rejected, failed to enable media [ 243.116941][ T8512] Dev loop5: unable to read RDB block 7 [ 243.127548][ T8512] loop5: unable to read partition table [ 243.141790][ T8512] loop5: partition table beyond EOD, truncated [ 243.176980][ T8512] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 243.441251][ T8518] netlink: 12 bytes leftover after parsing attributes in process `syz.2.677'. [ 243.486821][ T8518] vlan3: entered allmulticast mode [ 243.492272][ T8518] bridge2: entered allmulticast mode [ 243.505834][ T8518] bridge2: port 1(erspan0) entered blocking state [ 243.520653][ T8518] bridge2: port 1(erspan0) entered disabled state [ 243.528140][ T8518] erspan0: entered allmulticast mode [ 243.535163][ T8518] erspan0: entered promiscuous mode [ 243.541894][ T8518] bridge2: port 1(erspan0) entered blocking state [ 243.548567][ T8518] bridge2: port 1(erspan0) entered forwarding state [ 243.595841][ T8523] netlink: 'syz.1.680': attribute type 15 has an invalid length. [ 243.603648][ T8523] netlink: 666 bytes leftover after parsing attributes in process `syz.1.680'. [ 243.632198][ T5679] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 243.642604][ T5679] usb 6-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 243.654227][ T5679] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 243.663424][ T5679] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.672282][ T8518] bridge2: port 1(erspan0) entered disabled state [ 243.696718][ T8523] loop2: detected capacity change from 0 to 7 [ 243.715787][ T8523] Dev loop2: unable to read RDB block 7 [ 243.724016][ T8518] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.731916][ T8523] loop2: unable to read partition table [ 243.744430][ T8523] loop2: partition table beyond EOD, truncated [ 243.763721][ T8523] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 243.787494][ T4990] Dev loop2: unable to read RDB block 7 [ 243.793128][ T4990] loop2: unable to read partition table [ 243.799151][ T4990] loop2: partition table beyond EOD, truncated [ 243.843209][ T8497] netlink: 24 bytes leftover after parsing attributes in process `syz.4.671'. [ 243.854180][ T8497] netlink: 24 bytes leftover after parsing attributes in process `syz.4.671'. [ 243.926838][ T8530] FAULT_INJECTION: forcing a failure. [ 243.926838][ T8530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.939943][ T8530] CPU: 1 UID: 0 PID: 8530 Comm: syz.2.682 Tainted: G L syzkaller #0 PREEMPT(full) [ 243.939970][ T8530] Tainted: [L]=SOFTLOCKUP [ 243.940012][ T8530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 243.940026][ T8530] Call Trace: [ 243.940036][ T8530] [ 243.940045][ T8530] dump_stack_lvl+0xe8/0x150 [ 243.940073][ T8530] should_fail_ex+0x40c/0x560 [ 243.940102][ T8530] _copy_from_user+0x2d/0xb0 [ 243.940126][ T8530] snd_seq_oss_write+0x6e2/0x950 [ 243.940175][ T8530] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 243.940206][ T8530] ? apparmor_file_permission+0x1f4/0x300 [ 243.940243][ T8530] ? security_file_permission+0x75/0x260 [ 243.940266][ T8530] odev_write+0x5a/0x80 [ 243.940283][ T8530] vfs_writev+0x4bb/0x990 [ 243.940325][ T8530] ? __pfx_odev_write+0x10/0x10 [ 243.940351][ T8530] ? __pfx_vfs_writev+0x10/0x10 [ 243.940384][ T8530] ? lock_release+0x4b/0x3c0 [ 243.940406][ T8530] ? __mutex_unlock_slowpath+0x731/0x900 [ 243.940422][ T8530] ? __fget_files+0x3a2/0x420 [ 243.940444][ T8530] ? __fget_files+0x2a/0x420 [ 243.940491][ T8530] do_writev+0x154/0x2e0 [ 243.940520][ T8530] ? __pfx_do_writev+0x10/0x10 [ 243.940555][ T8530] ? rcu_is_watching+0x15/0xb0 [ 243.940574][ T8530] __do_fast_syscall_32+0x23e/0x6f0 [ 243.940590][ T8530] ? do_fast_syscall_32+0x33/0x70 [ 243.940605][ T8530] ? asm_int80_emulation+0x1a/0x20 [ 243.940640][ T8530] ? do_int80_emulation+0x29f/0x550 [ 243.940660][ T8530] ? trace_irq_disable+0x3b/0x140 [ 243.940692][ T8530] do_fast_syscall_32+0x33/0x70 [ 243.940716][ T8530] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 243.940742][ T8530] RIP: 0023:0xf707f0ec [ 243.940757][ T8530] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 243.940789][ T8530] RSP: 002b:00000000f546d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 243.940812][ T8530] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000840 [ 243.940827][ T8530] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 243.940839][ T8530] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 243.940851][ T8530] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 243.940869][ T8530] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 243.940887][ T8530] [ 244.271486][ T10] usb 6-1: USB disconnect, device number 15 [ 244.527431][ T5686] usb 5-1: f81604_read: reg: 100e failed: -EPROTO [ 244.541829][ T5686] usb 5-1: f81604_read: reg: 200f failed: -EPROTO [ 244.562305][ T5686] usb 5-1: USB disconnect, device number 36 [ 244.593028][ T5686] usb 5-1: f81604_read: reg: 100f failed: -ENODEV [ 244.628684][ T5285] usb 5-1: f81604_read: reg: 200f failed: -ENODEV [ 244.689527][ T5686] usb 5-1: f81604_read: reg: 200f failed: -ENODEV [ 244.803817][ T24] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 244.812992][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.821025][ T24] usb 4-1: Product: syz [ 244.828582][ T24] usb 4-1: config 0 descriptor?? [ 244.853668][ T9] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 244.915994][ T24] usb 4-1: can't set config #0, error -71 [ 244.922943][ T24] usb 4-1: USB disconnect, device number 31 [ 245.159366][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 245.171443][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 245.182896][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 245.196412][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 245.217826][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 245.238545][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.314686][ T9] usb 3-1: config 0 descriptor?? [ 245.661691][ T8569] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 245.751458][ T9] plantronics 0003:047F:FFFF.0017: ignoring exceeding usage max [ 245.832566][ T9] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 246.149568][ T5701] usb 3-1: USB disconnect, device number 40 [ 246.323489][ T8600] fuse: Bad value for 'fd' [ 246.356610][ T8601] fuse: Bad value for 'fd' [ 247.283725][ T10] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 247.558048][ T10] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 247.572916][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.581605][ T10] usb 3-1: Product: syz [ 247.586087][ T10] usb 3-1: Manufacturer: syz [ 247.590716][ T10] usb 3-1: SerialNumber: syz [ 247.597590][ T10] usb 3-1: config 0 descriptor?? [ 247.613841][ T9] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 247.667781][ T5679] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 247.783539][ T5701] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 247.806514][ T8606] netlink: 68 bytes leftover after parsing attributes in process `syz.2.694'. [ 247.815613][ T8606] tipc: Enabling of bearer rejected, failed to enable media [ 247.834064][ T9] usb 6-1: device descriptor read/64, error -71 [ 248.136362][ T9] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 248.293850][ T9] usb 6-1: device descriptor read/64, error -71 [ 248.403903][ T9] usb usb6-port1: attempt power cycle [ 248.463135][ T8606] netlink: 24 bytes leftover after parsing attributes in process `syz.2.694'. [ 248.472782][ T8606] netlink: 24 bytes leftover after parsing attributes in process `syz.2.694'. [ 248.854040][ T9] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 248.904225][ T9] usb 6-1: device descriptor read/8, error -71 [ 248.925348][ T10] usb 3-1: f81604_read: reg: 100e failed: -EPROTO [ 248.937408][ T10] usb 3-1: f81604_read: reg: 200f failed: -EPROTO [ 248.946020][ T10] usb 3-1: USB disconnect, device number 41 [ 248.953186][ T10] usb 3-1: f81604_read: reg: 100f failed: -ENODEV [ 248.970639][ T5285] usb 3-1: f81604_read: reg: 200f failed: -ENODEV [ 248.986072][ T5285] usb 3-1: f81604_read: reg: 200f failed: -ENODEV [ 249.029928][ T5679] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 249.040165][ T5679] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 249.049246][ T5679] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 249.062095][ T5679] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.140627][ T5701] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 249.151639][ T5701] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 249.166243][ T5701] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 249.182836][ T5701] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.193740][ T9] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 249.244388][ T9] usb 6-1: device descriptor read/8, error -71 [ 249.261651][ T10] usb 3-1: f81604_read: reg: 200f failed: -ENODEV [ 249.272642][ T8613] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 249.363936][ T9] usb usb6-port1: unable to enumerate USB device [ 249.381731][ T5701] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 249.717727][ T8644] netlink: 4 bytes leftover after parsing attributes in process `syz.1.701'. [ 249.878226][ T8650] netlink: 'syz.2.702': attribute type 15 has an invalid length. [ 249.896411][ T8650] netlink: 666 bytes leftover after parsing attributes in process `syz.2.702'. [ 249.955881][ T8650] loop2: detected capacity change from 0 to 7 [ 249.962747][ T8650] loop2: [ 249.969319][ T8650] loop2: partition table partially beyond EOD, truncated [ 250.045593][ T5679] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 250.273485][ T10] usb 4-1: USB disconnect, device number 32 [ 250.318403][ T24] usb 5-1: USB disconnect, device number 37 [ 250.702222][ T5679] usb 2-1: Using ep0 maxpacket: 16 [ 250.864086][ T9] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 250.872851][ T10] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 251.133794][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 251.140787][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 251.152656][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 251.164006][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 251.175997][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 251.189524][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 251.198975][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.207370][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.219130][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.229636][ T10] usb 4-1: config 0 descriptor?? [ 251.234830][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 251.247770][ T9] usb 3-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 251.259260][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.282875][ T9] usb 3-1: config 0 descriptor?? [ 251.391339][ T5679] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 251.401755][ T5679] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 251.411203][ T5701] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 251.482210][ T8678] netlink: 'syz.5.710': attribute type 21 has an invalid length. [ 251.596649][ T8640] netlink: 40 bytes leftover after parsing attributes in process `syz.1.701'. [ 251.621672][ T8640] netlink: 260 bytes leftover after parsing attributes in process `syz.1.701'. [ 251.710881][ T9] belkin 0003:1020:0006.0018: unknown main item tag 0x0 [ 251.719240][ T9] belkin 0003:1020:0006.0018: unknown main item tag 0x0 [ 251.726419][ T9] belkin 0003:1020:0006.0018: unknown main item tag 0x0 [ 251.733434][ T9] belkin 0003:1020:0006.0018: unknown main item tag 0x0 [ 251.740469][ T9] belkin 0003:1020:0006.0018: unknown main item tag 0x0 [ 251.747531][ T9] belkin 0003:1020:0006.0018: unknown main item tag 0x0 [ 251.766893][ T10] plantronics 0003:047F:FFFF.0019: ignoring exceeding usage max [ 251.778163][ T9] belkin 0003:1020:0006.0018: unknown main item tag 0x0 [ 251.789360][ T9] belkin 0003:1020:0006.0018: unknown main item tag 0x0 [ 251.797738][ T9] belkin 0003:1020:0006.0018: unknown main item tag 0x0 [ 251.804848][ T9] belkin 0003:1020:0006.0018: unknown main item tag 0x0 [ 251.812273][ T10] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 251.827682][ T9] belkin 0003:1020:0006.0018: hidraw1: USB HID v0.0a Device [HID 1020:0006] on usb-dummy_hcd.2-1/input0 [ 252.104003][ T5701] usb 5-1: Using ep0 maxpacket: 32 [ 252.758302][ T5701] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 252.808000][ T8698] loop5: detected capacity change from 0 to 7 [ 252.814341][ T9] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 252.822625][ T8698] Dev loop5: unable to read RDB block 7 [ 252.828464][ T8698] loop5: unable to read partition table [ 252.834774][ T8698] loop5: partition table beyond EOD, truncated [ 252.841008][ T8698] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 252.981845][ T5679] usb 2-1: string descriptor 0 read error: -71 [ 252.988143][ T5679] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 252.997220][ T5679] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.092461][ T5679] usb 2-1: can't set config #1, error -71 [ 253.099376][ T5679] usb 2-1: USB disconnect, device number 49 [ 253.109602][ T9] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 253.132062][ T9] usb 6-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 253.141565][ T9] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 253.152911][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.371019][ T9] usb 6-1: USB disconnect, device number 20 [ 253.538234][ T5700] usb 4-1: reset high-speed USB device number 33 using dummy_hcd [ 253.571080][ T5679] usb 3-1: USB disconnect, device number 42 [ 253.602732][ T8712] netlink: 'syz.3.721': attribute type 21 has an invalid length. [ 253.635905][ T8714] capability: warning: `syz.2.722' uses deprecated v2 capabilities in a way that may be insecure [ 253.656570][ T5701] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 253.665669][ T5701] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 253.673860][ T5701] usb 5-1: Product: syz [ 253.678051][ T5701] usb 5-1: Manufacturer: syz [ 253.683426][ T5701] usb 5-1: SerialNumber: syz [ 253.712808][ T5701] usb 5-1: config 0 descriptor?? [ 253.772555][ T8674] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 253.895798][ T5701] hub 5-1:0.0: bad descriptor, ignoring hub [ 253.901809][ T5701] hub 5-1:0.0: probe with driver hub failed with error -5 [ 254.163980][ T5708] usb 5-1: USB disconnect, device number 38 [ 254.280252][ T8737] netlink: 12 bytes leftover after parsing attributes in process `syz.4.728'. [ 254.315542][ T8737] ipvlan2: entered allmulticast mode [ 254.326731][ T8737] dummy0: entered allmulticast mode [ 254.348393][ T8739] netlink: 4 bytes leftover after parsing attributes in process `syz.3.725'. [ 254.674365][ T5679] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 254.890697][ T5700] usb 4-1: device descriptor read/64, error -71 [ 254.898759][ T5701] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 255.220474][ T5700] usb 4-1: reset high-speed USB device number 33 using dummy_hcd [ 255.438759][ T5700] usb 4-1: device reset changed ep0 maxpacket size! [ 255.445758][ T24] usb 4-1: USB disconnect, device number 33 [ 255.547573][ T5701] usb 2-1: Using ep0 maxpacket: 8 [ 255.658127][ T24] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 255.936203][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.944908][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.970169][ T8749] vlan4: entered promiscuous mode [ 255.982034][ T8749] bond0: entered promiscuous mode [ 255.987610][ T8749] bond_slave_0: entered promiscuous mode [ 255.993468][ T8749] bond_slave_1: entered promiscuous mode [ 256.148096][ T8753] netlink: 'syz.2.734': attribute type 21 has an invalid length. [ 256.221415][ T5701] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 256.229739][ T5701] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 256.237851][ T5701] usb 2-1: config 0 has no interface number 0 [ 256.244005][ T5701] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0x59, changing to 0x9 [ 256.255501][ T5701] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 256.331083][ T5700] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 256.338787][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 256.451164][ T5679] usb 5-1: config 1 interface 0 has no altsetting 0 [ 256.662716][ T7922] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 256.882458][ T5701] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 256.891618][ T5701] usb 2-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 256.900773][ T5701] usb 2-1: Product: syz [ 256.905083][ T5701] usb 2-1: Manufacturer: syz [ 256.911112][ T5701] usb 2-1: config 0 descriptor?? [ 256.992091][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.002221][ T24] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 257.218172][ T8759] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 257.290346][ T8760] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 257.302240][ T8760] netlink: 'syz.3.736': attribute type 10 has an invalid length. [ 257.323442][ T5679] usb 5-1: New USB device found, idVendor=05ac, idProduct=0216, bcdDevice= 0.40 [ 257.332548][ T5679] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.340576][ T5679] usb 5-1: Product: ᐊ [ 257.344772][ T5679] usb 5-1: Manufacturer: ᇟ貉硵ʇ䊸홈龌쌐势킞鱑啕陳빬८嘒䃻時爧葽䅛䏘䧍밊眆瑋ѿ쀳䒠䜞穄乘秋晴␓︔亏꣖䇡⊶㖺靘脽抩義ԓ婢⮋ᳵЈ顨姫ꋌ䬙 [ 257.363926][ T5679] usb 5-1: SerialNumber: 浄ᅿ鈖帑蘉哺힅⍲劘㼫⡧芨輸⛰ꤲ拸垿縜嘅㝦‶繳ퟩ⢤ [ 257.376538][ T24] usb 4-1: string descriptor 0 read error: -71 [ 257.382912][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 257.391987][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.402993][ T10] usb 2-1: USB disconnect, device number 50 [ 257.436747][ T5679] usb 5-1: can't set config #1, error -71 [ 257.443636][ T5679] usb 5-1: USB disconnect, device number 39 [ 257.449929][ T24] usb 4-1: can't set config #1, error -71 [ 257.469287][ T24] usb 4-1: USB disconnect, device number 34 [ 257.657112][ T5700] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 257.668640][ T5700] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 257.679537][ T5700] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 257.689295][ T5700] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 257.702195][ T5700] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 257.711250][ T5700] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.722123][ T8768] netlink: 'syz.4.739': attribute type 15 has an invalid length. [ 257.723015][ T5700] usb 6-1: config 0 descriptor?? [ 257.735852][ T8768] netlink: 666 bytes leftover after parsing attributes in process `syz.4.739'. [ 257.752997][ T8768] loop2: detected capacity change from 0 to 7 [ 257.760886][ T8768] loop2: [ 257.764222][ T8768] loop2: partition table partially beyond EOD, truncated [ 257.779395][ T4990] loop2: [ 257.782619][ T4990] loop2: partition table partially beyond EOD, truncated [ 258.000706][ T7922] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 258.011190][ T7922] usb 3-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 258.021962][ T7922] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 258.034860][ T7922] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 258.049707][ T7922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.228364][ T7922] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 258.294381][ T7922] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 258.342563][ T5700] plantronics 0003:047F:FFFF.001A: ignoring exceeding usage max [ 258.362283][ T5700] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 258.394022][ T10] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 258.471964][ T5700] usb 3-1: USB disconnect, device number 43 [ 258.574968][ T10] usb 2-1: device descriptor read/64, error -71 [ 258.853844][ T10] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 259.058321][ T8786] netlink: 'syz.2.745': attribute type 21 has an invalid length. [ 259.074148][ T10] usb 2-1: device descriptor read/64, error -71 [ 259.193906][ T10] usb usb2-port1: attempt power cycle [ 259.276719][ T8794] fuse: Bad value for 'fd' [ 259.329746][ T8796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.748'. [ 259.342222][ T8796] ipvlan2: entered allmulticast mode [ 259.347871][ T8796] dummy0: entered allmulticast mode [ 259.644211][ T10] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 259.694421][ T10] usb 2-1: device descriptor read/8, error -71 [ 259.705945][ T5700] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 259.764016][ T5686] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 259.984254][ T10] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 260.034434][ T10] usb 2-1: device descriptor read/8, error -71 [ 260.043661][ T5686] usb 3-1: config 1 interface 0 has no altsetting 0 [ 260.053441][ T5686] usb 3-1: New USB device found, idVendor=05ac, idProduct=0216, bcdDevice= 0.40 [ 260.062837][ T5686] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.070937][ T5686] usb 3-1: Product: ᐊ [ 260.075254][ T5686] usb 3-1: Manufacturer: ᇟ貉硵ʇ䊸홈龌쌐势킞鱑啕陳빬८嘒䃻時爧葽䅛䏘䧍밊眆瑋ѿ쀳䒠䜞穄乘秋晴␓︔亏꣖䇡⊶㖺靘脽抩義ԓ婢⮋ᳵЈ顨姫ꋌ䬙 [ 260.094505][ T5686] usb 3-1: SerialNumber: 浄ᅿ鈖帑蘉哺힅⍲劘㼫⡧芨輸⛰ꤲ拸垿縜嘅㝦‶繳ퟩ⢤ [ 260.154243][ T10] usb usb2-port1: unable to enumerate USB device [ 260.330844][ T5686] appletouch 3-1:1.0: Failed to read mode from device. [ 260.343679][ T5686] appletouch 3-1:1.0: probe with driver appletouch failed with error -5 [ 260.367144][ T5686] usb 3-1: USB disconnect, device number 44 [ 260.434396][ T5708] usb 6-1: USB disconnect, device number 21 [ 260.517154][ T8802] netlink: 80 bytes leftover after parsing attributes in process `syz.5.750'. [ 260.743981][ T8806] netlink: 4 bytes leftover after parsing attributes in process `syz.3.751'. [ 261.043605][ T5700] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 261.052284][ T5700] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 261.062443][ T5700] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 261.094207][ T5700] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 261.107422][ T5700] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 261.720551][ T5700] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 261.729682][ T5700] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 261.737837][ T5700] usb 5-1: Product: syz [ 261.742049][ T5700] usb 5-1: Manufacturer: syz [ 261.805443][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 261.805509][ T30] audit: type=1326 audit(1782068591.655:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8815 comm="syz.5.755" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f540ec code=0x0 [ 261.960040][ T8194] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 261.968630][ T5700] cdc_wdm 5-1:1.0: skipping garbage [ 261.973877][ T5700] cdc_wdm 5-1:1.0: skipping garbage [ 261.982179][ T5700] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 261.988149][ T5700] cdc_wdm 5-1:1.0: Unknown control protocol [ 262.025997][ T8822] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 262.042237][ T5708] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 262.393194][ T5708] usb 5-1: USB disconnect, device number 40 [ 262.918865][ T8826] netlink: 'syz.5.757': attribute type 21 has an invalid length. [ 262.928696][ T8828] syz.1.758 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 263.344803][ T5708] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 263.404910][ T5700] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 263.627858][ T5708] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 263.636254][ T5708] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.646616][ T5708] usb 5-1: config 0 has no interface number 0 [ 263.654785][ T5708] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 263.664096][ T5708] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.672153][ T5708] usb 5-1: Product: syz [ 263.677041][ T5708] usb 5-1: Manufacturer: syz [ 263.681740][ T5708] usb 5-1: SerialNumber: syz [ 263.687991][ T5708] usb 5-1: config 0 descriptor?? [ 264.024524][ T8839] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.032062][ T8839] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.076651][ T8850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.099079][ T8850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.200595][ T8194] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 264.209706][ T8194] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.228850][ T8194] usb 3-1: Product: syz [ 264.236905][ T8194] usb 3-1: Manufacturer: syz [ 264.241733][ T8194] usb 3-1: SerialNumber: syz [ 264.262211][ T8194] usb 3-1: config 0 descriptor?? [ 264.488169][ T8839] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.530114][ T8839] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.540834][ T8866] netlink: 'syz.3.764': attribute type 21 has an invalid length. [ 264.757991][ T8194] usb 3-1: ignoring: probably an ADSL modem [ 264.814072][ T8866] netlink: 132 bytes leftover after parsing attributes in process `syz.3.764'. [ 264.882855][ T7082] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.897074][ T7082] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.916363][ T7082] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.933677][ T7082] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.165037][ T5708] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 265.181331][ T5708] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 82 [ 265.191667][ T5700] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 265.202275][ T5700] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.212803][ T5700] usb 6-1: Product: syz [ 265.222955][ T5708] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 265.233046][ T5700] usb 6-1: Manufacturer: syz [ 265.238483][ T5700] usb 6-1: SerialNumber: syz [ 265.246192][ T5700] usb 6-1: config 0 descriptor?? [ 265.277950][ T8194] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 265.378722][ T5708] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 265.400646][ T5708] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 265.430195][ T5708] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 265.452028][ T5708] usb 5-1: USB disconnect, device number 41 [ 265.470888][ T5708] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 265.493958][ T5708] keyspan 5-1:0.133: device disconnected [ 265.534751][ T24] usb 3-1: USB disconnect, device number 45 [ 265.577916][ T30] audit: type=1326 audit(1782068595.455:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8872 comm="syz.1.767" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f340ec code=0x0 [ 266.033738][ T5708] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 266.169284][ T8835] netlink: 24 bytes leftover after parsing attributes in process `syz.5.760'. [ 266.209501][ T8835] netlink: 24 bytes leftover after parsing attributes in process `syz.5.760'. [ 266.227490][ T5708] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 266.282089][ T5708] usb 5-1: config 1 has no interface number 0 [ 266.341208][ T5708] usb 5-1: config 1 interface 1 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 266.364750][ T5708] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 266.382273][ T5708] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 266.393435][ T5708] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 7 [ 266.409887][ T5708] usb 5-1: config 1 interface 1 has no altsetting 2 [ 266.424712][ T5708] usb 5-1: New USB device found, idVendor=0e41, idProduct=5058, bcdDevice= 0.40 [ 266.439756][ T5708] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.475007][ T5708] usb 5-1: Product: syz [ 266.482594][ T5708] usb 5-1: Manufacturer: syz [ 266.488688][ T5708] usb 5-1: SerialNumber: syz [ 266.565134][ T5740] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 266.713654][ T5740] usb 3-1: device descriptor read/64, error -71 [ 266.798244][ T8883] netlink: 'syz.1.771': attribute type 21 has an invalid length. [ 266.856385][ T5700] usb 6-1: f81604_read: reg: 100e failed: -EPROTO [ 266.911676][ T5700] usb 6-1: f81604_read: reg: 200f failed: -EPROTO [ 266.935468][ T5700] usb 6-1: USB disconnect, device number 22 [ 266.949354][ T5700] usb 6-1: f81604_read: reg: 100f failed: -ENODEV [ 266.967687][ T5740] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 267.011526][ T5285] usb 6-1: f81604_read: reg: 200f failed: -ENODEV [ 267.136815][ T5740] usb 3-1: device descriptor read/64, error -71 [ 267.284859][ T5740] usb usb3-port1: attempt power cycle [ 267.304717][ T5700] usb 6-1: f81604_read: reg: 200f failed: -ENODEV [ 267.645525][ T8194] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 267.665861][ T5740] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 267.727667][ T5740] usb 3-1: device descriptor read/8, error -71 [ 267.825438][ T8194] usb 4-1: Using ep0 maxpacket: 16 [ 267.862300][ T8194] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 267.877115][ T24] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 267.888904][ T8914] FAULT_INJECTION: forcing a failure. [ 267.888904][ T8914] name failslab, interval 1, probability 0, space 0, times 0 [ 267.905055][ T8194] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 267.918318][ T8914] CPU: 0 UID: 0 PID: 8914 Comm: syz.5.775 Tainted: G L syzkaller #0 PREEMPT(full) [ 267.918343][ T8914] Tainted: [L]=SOFTLOCKUP [ 267.918349][ T8914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 267.918361][ T8914] Call Trace: [ 267.918366][ T8914] [ 267.918373][ T8914] dump_stack_lvl+0xe8/0x150 [ 267.918393][ T8914] should_fail_ex+0x40c/0x560 [ 267.918413][ T8914] should_failslab+0xa8/0x100 [ 267.918429][ T8914] __kmalloc_cache_noprof+0x88/0x660 [ 267.918453][ T8914] ? sctp_add_bind_addr+0x8c/0x370 [ 267.918475][ T8914] sctp_add_bind_addr+0x8c/0x370 [ 267.918496][ T8914] sctp_copy_local_addr_list+0x31a/0x4e0 [ 267.918518][ T8914] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 267.918538][ T8914] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 267.918563][ T8914] ? sctp_v4_is_any+0x35/0x60 [ 267.918585][ T8914] ? sctp_copy_one_addr+0x93/0x360 [ 267.918606][ T8914] sctp_bind_addr_copy+0xb3/0x3c0 [ 267.918627][ T8914] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 267.918646][ T8914] sctp_connect_new_asoc+0x2ff/0x6b0 [ 267.918663][ T8914] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 267.918677][ T8914] ? lock_release+0x4b/0x3c0 [ 267.918692][ T8914] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 267.918706][ T8914] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 267.918722][ T8914] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 267.918742][ T8914] ? security_sctp_bind_connect+0x7e/0x2c0 [ 267.918764][ T8914] sctp_sendmsg+0x159b/0x2d00 [ 267.918778][ T8914] ? _parse_integer_limit+0x1ae/0x1f0 [ 267.918799][ T8914] ? __pfx_sctp_sendmsg+0x10/0x10 [ 267.918816][ T8914] ? aa_sk_perm+0x6d5/0x900 [ 267.918832][ T8914] ? __pfx_aa_sk_perm+0x10/0x10 [ 267.918844][ T8914] ? sock_rps_record_flow+0x19/0x350 [ 267.918867][ T8914] ? inet_sendmsg+0x298/0x320 [ 267.918887][ T8914] ? __might_fault+0xaf/0x130 [ 267.918907][ T8914] ? __pfx_inet_sendmsg+0x10/0x10 [ 267.918928][ T8914] sock_sendmsg_nosec+0x10e/0x180 [ 267.918949][ T8914] __sys_sendto+0x408/0x5a0 [ 267.918962][ T8914] ? lock_release+0x4b/0x3c0 [ 267.918976][ T8914] ? __pfx___sys_sendto+0x10/0x10 [ 267.918994][ T8914] ? __fget_files+0x3a2/0x420 [ 267.919019][ T8914] ? ksys_write+0x242/0x270 [ 267.919037][ T8914] __ia32_sys_sendto+0xdd/0x100 [ 267.919058][ T8914] __do_fast_syscall_32+0x23e/0x6f0 [ 267.919075][ T8914] ? do_fast_syscall_32+0x33/0x70 [ 267.919089][ T8914] ? asm_int80_emulation+0x1a/0x20 [ 267.919104][ T8914] ? do_int80_emulation+0x29f/0x550 [ 267.919120][ T8914] do_fast_syscall_32+0x33/0x70 [ 267.919134][ T8914] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 267.919153][ T8914] RIP: 0023:0xf7f540ec [ 267.919167][ T8914] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 267.919180][ T8914] RSP: 002b:00000000f541650c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 267.919196][ T8914] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 267.919207][ T8914] RDX: 0000000000000001 RSI: 00000000a154b0c0 RDI: 0000000080000000 [ 267.919217][ T8914] RBP: 0000000000000010 R08: 0000000000000000 R09: 0000000000000000 [ 267.919226][ T8914] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 267.919235][ T8914] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 267.919250][ T8914] [ 268.258667][ T8194] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 268.266913][ T8194] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 268.275094][ T8194] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 268.283960][ T8194] usb 4-1: config 0 has no interface number 0 [ 268.290109][ T8194] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 268.301146][ T8194] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 268.311002][ T8194] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 268.320847][ T8194] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 268.333915][ T8194] usb 4-1: config 0 interface 125 has no altsetting 0 [ 268.416580][ T5708] usb 5-1: 1:0 : does not exist [ 268.421481][ T5708] usb 5-1: 2:1 : incorrect wMaxPacketSize for BADD profile [ 268.428913][ T5740] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 268.436679][ T5708] usb 5-1: 1:3 : does not exist [ 268.441611][ T5708] usb 5-1: incorrect wMaxPacketSize 0x210 for BADD profile [ 268.487269][ T5740] usb 3-1: device descriptor read/8, error -71 [ 268.532037][ T5708] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 268.541904][ T5708] snd_usb_podhd 5-1:1.1: Line 6 POD HD400 found [ 268.548384][ T5708] usb 5-1: selecting invalid altsetting 5 [ 268.559727][ T5708] snd_usb_podhd 5-1:1.1: set_interface failed [ 268.566053][ T5708] snd_usb_podhd 5-1:1.1: Line 6 POD HD400 now disconnected [ 268.573486][ T5708] snd_usb_podhd 5-1:1.1: probe with driver snd_usb_podhd failed with error -22 [ 268.594656][ T5740] usb usb3-port1: unable to enumerate USB device [ 268.647019][ T5633] udevd[5633]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 268.668858][ T5708] usb 5-1: USB disconnect, device number 42 [ 268.683491][ T8917] team0: Port device syz_tun added [ 268.809599][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 269.120676][ T8194] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 269.129939][ T8194] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.137934][ T8194] usb 4-1: Product: syz [ 269.142089][ T8194] usb 4-1: Manufacturer: syz [ 269.146678][ T8194] usb 4-1: SerialNumber: syz [ 269.167558][ T8194] usb 4-1: config 0 descriptor?? [ 269.283707][ T5740] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 269.360969][ T24] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 269.368925][ T24] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 269.381985][ T24] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 269.421781][ T24] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 269.438360][ T24] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 269.452126][ T24] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 269.473682][ T5740] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 269.503022][ T24] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 269.522922][ T5740] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.536278][ T24] usb 2-1: config 168 interface 0 has no altsetting 0 [ 269.548740][ T5740] usb 5-1: Dual-Role OTG device on HNP port [ 269.555013][ T5740] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 269.611163][ T5740] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.623240][ T5740] usb 5-1: Product: syz [ 269.630168][ T5740] usb 5-1: Manufacturer: syz [ 269.650031][ T5740] usb 5-1: SerialNumber: syz [ 269.661723][ T5740] cdc_mbim 5-1:1.0: skipping garbage [ 269.668782][ T5740] cdc_mbim 5-1:1.0: skipping garbage [ 269.674572][ T5740] usb 5-1: selecting invalid altsetting 1 [ 269.715457][ T24] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 269.733139][ T24] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 269.780206][ T24] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 269.842757][ T24] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 269.898250][ T24] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 269.946550][ T24] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 269.968904][ T8944] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 269.996301][ T24] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 270.046083][ T24] usb 2-1: config 168 interface 0 has no altsetting 0 [ 270.143043][ T5740] cdc_mbim 5-1:1.0: bind() failure [ 270.170507][ T5740] usb 5-1: USB disconnect, device number 43 [ 270.181094][ T24] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 270.188938][ T24] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 270.201312][ T24] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 270.215750][ T24] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 270.227732][ T24] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 270.239240][ T24] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 270.255729][ T24] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 270.269250][ T24] usb 2-1: config 168 interface 0 has no altsetting 0 [ 270.399970][ T8953] netlink: 'syz.1.783': attribute type 21 has an invalid length. [ 270.510806][ T8957] loop5: detected capacity change from 0 to 7 [ 270.529146][ T24] usb 2-1: string descriptor 0 read error: -71 [ 270.535891][ T24] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 270.548743][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.558470][ T8957] Dev loop5: unable to read RDB block 7 [ 270.603769][ T8957] loop5: unable to read partition table [ 270.620790][ T24] usb 2-1: can't set config #168, error -71 [ 270.636770][ T8957] loop5: partition table beyond EOD, truncated [ 270.656711][ T24] usb 2-1: USB disconnect, device number 55 [ 270.673433][ C1] usb 4-1: async_complete: urb error -71 [ 270.674381][ T8957] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 270.786471][ C1] usb 4-1: async_complete: urb error -71 [ 270.792213][ C1] usb 4-1: async_complete: urb error -71 [ 270.797916][ C1] usb 4-1: async_complete: urb error -71 [ 270.807644][ T8194] get_1284_register: usb error -71 [ 270.817574][ T8194] usb 4-1: USB disconnect, device number 35 [ 271.000222][ T8968] loop2: detected capacity change from 0 to 7 [ 271.026659][ T8968] Dev loop2: unable to read RDB block 7 [ 271.036692][ T8968] loop2: unable to read partition table [ 271.058672][ T8968] loop2: partition table beyond EOD, truncated [ 271.080763][ T8968] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 271.213743][ T8194] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 271.358815][ T8194] usb 4-1: device descriptor read/64, error -71 [ 271.613690][ T8194] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 271.693676][ T5740] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 271.753945][ T8194] usb 4-1: device descriptor read/64, error -71 [ 271.813909][ T5708] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 271.854106][ T5740] usb 2-1: Using ep0 maxpacket: 32 [ 271.864960][ T5740] usb 2-1: unable to get BOS descriptor or descriptor too short [ 271.873110][ T8983] FAULT_INJECTION: forcing a failure. [ 271.873110][ T8983] name fail_futex, interval 1, probability 0, space 0, times 1 [ 271.883362][ T8194] usb usb4-port1: attempt power cycle [ 271.886598][ T8983] CPU: 0 UID: 0 PID: 8983 Comm: syz.2.793 Tainted: G L syzkaller #0 PREEMPT(full) [ 271.886696][ T8983] Tainted: [L]=SOFTLOCKUP [ 271.886720][ T8983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 271.886756][ T8983] Call Trace: [ 271.886779][ T8983] [ 271.886802][ T8983] dump_stack_lvl+0xe8/0x150 [ 271.886882][ T8983] should_fail_ex+0x40c/0x560 [ 271.886962][ T8983] futex_lock_pi_atomic+0xe2/0x970 [ 271.887061][ T8983] futex_lock_pi+0x30a/0xab0 [ 271.887146][ T8983] ? __pfx_futex_lock_pi+0x10/0x10 [ 271.887240][ T8983] ? fpu__restore_sig+0xc25/0x1200 [ 271.887333][ T8983] ? trace_irq_enable+0x3b/0x140 [ 271.887460][ T8983] ? rcu_is_watching+0x15/0xb0 [ 271.887554][ T8983] ? __pfx_futex_wake_mark+0x10/0x10 [ 271.887654][ T8983] ? __asan_memset+0x22/0x50 [ 271.887747][ T8983] do_futex+0x330/0x4e0 [ 271.887818][ T8983] ? __pfx_do_futex+0x10/0x10 [ 271.887897][ T8983] __se_sys_futex_time32+0x3ab/0x440 [ 271.887984][ T8983] ? __ia32_compat_sys_rt_sigreturn+0x237/0x270 [ 271.888053][ T8983] ? __pfx___se_sys_futex_time32+0x10/0x10 [ 271.888134][ T8983] ? __pfx___ia32_compat_sys_rt_sigreturn+0x10/0x10 [ 271.888209][ T8983] ? rcu_is_watching+0x15/0xb0 [ 271.888268][ T8983] ? __ia32_sys_futex_time32+0x21/0xf0 [ 271.888356][ T8983] do_int80_emulation+0x19a/0x550 [ 271.888415][ T8983] ? trace_irq_disable+0x3b/0x140 [ 271.888499][ T8983] ? asm_int80_emulation+0x1a/0x20 [ 271.888557][ T8983] ? clear_bhb_loop+0x40/0x90 [ 271.888624][ T8983] ? clear_bhb_loop+0x40/0x90 [ 271.888695][ T8983] asm_int80_emulation+0x1a/0x20 [ 271.888762][ T8983] RIP: 0023:0xf707f0ec [ 271.888826][ T8983] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 271.888889][ T8983] RSP: 002b:00000000f546d50c EFLAGS: 00000206 ORIG_RAX: 00000000000000f0 [ 271.888970][ T8983] RAX: ffffffffffffffda RBX: 000000008000cffc RCX: 0000000000000086 [ 271.889016][ T8983] RDX: 00000000fffffffe RSI: 0000000000000000 RDI: 0000000000000000 [ 271.889052][ T8983] RBP: 00000000fffffffc R08: 0000000000000000 R09: 0000000000000000 [ 271.889095][ T8983] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 271.889130][ T8983] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 271.889200][ T8983] [ 271.903103][ T5740] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 272.209766][ T5740] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 272.223771][ T5708] usb 5-1: device descriptor read/64, error -71 [ 272.236119][ T5740] usb 2-1: config 1 has no interface number 0 [ 272.253569][ T5740] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 272.269486][ T5740] usb 2-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 272.293715][ T5740] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.301742][ T5740] usb 2-1: Product: syz [ 272.307465][ T5740] usb 2-1: Manufacturer: syz [ 272.323564][ T5740] usb 2-1: SerialNumber: syz [ 272.393733][ T8194] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 272.434563][ T8194] usb 4-1: device descriptor read/8, error -71 [ 272.473631][ T5708] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 272.558436][ T5740] usb 2-1: unknown sample rate [ 272.598381][ T5740] usb 2-1: USB disconnect, device number 56 [ 272.605310][ T5708] usb 5-1: device descriptor read/64, error -71 [ 272.627361][ T5633] udevd[5633]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 272.714190][ T5708] usb usb5-port1: attempt power cycle [ 272.763824][ T8194] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 272.785184][ T8194] usb 4-1: device descriptor read/8, error -71 [ 272.811166][ T8989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.796'. [ 272.822770][ T8989] netlink: 272 bytes leftover after parsing attributes in process `syz.2.796'. [ 272.833287][ T8989] netlink: 272 bytes leftover after parsing attributes in process `syz.2.796'. [ 272.843824][ T5700] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 272.906076][ T8194] usb usb4-port1: unable to enumerate USB device [ 273.015380][ T5700] usb 6-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 273.027186][ T5700] usb 6-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 273.039245][ T5700] usb 6-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 273.053736][ T5708] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 273.064251][ T5700] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 273.073941][ T5700] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 273.082325][ T5700] usb 6-1: SerialNumber: syz [ 273.085055][ T5708] usb 5-1: device descriptor read/8, error -71 [ 273.144357][ T5740] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 273.295397][ T5740] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 273.305951][ T5740] usb 3-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 273.315518][ T5740] usb 3-1: config 220 interface 1 altsetting 5 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 273.327397][ T5740] usb 3-1: config 220 interface 1 altsetting 5 endpoint 0x8F has an invalid bInterval 102, changing to 10 [ 273.338822][ T5740] usb 3-1: config 220 interface 1 altsetting 5 endpoint 0x8F has invalid maxpacket 24624, setting to 1024 [ 273.350216][ T5740] usb 3-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 273.363419][ T5708] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 273.371037][ T5740] usb 3-1: config 220 interface 0 has no altsetting 0 [ 273.377879][ T5740] usb 3-1: config 220 interface 1 has no altsetting 0 [ 273.386562][ T5740] usb 3-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=6c.b9 [ 273.395678][ T5740] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.403884][ T5740] usb 3-1: Product: syz [ 273.408162][ T5740] usb 3-1: Manufacturer: syz [ 273.412835][ T5740] usb 3-1: SerialNumber: syz [ 273.422757][ T8194] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 273.431251][ T5708] usb 5-1: device descriptor read/8, error -71 [ 273.530911][ T5700] rndis_host 6-1:253.0: RNDIS init failed, -71 [ 273.534893][ T5708] usb usb5-port1: unable to enumerate USB device [ 273.539986][ T5700] rndis_host 6-1:253.0: probe with driver rndis_host failed with error -71 [ 273.556033][ T5700] usb 6-1: USB disconnect, device number 23 [ 273.729880][ T8194] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.744071][ T8194] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 273.757977][ T8194] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 273.768281][ T8194] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.780833][ T8194] usb 2-1: Product: syz [ 273.785460][ T8194] usb 2-1: Manufacturer: syz [ 273.790693][ T8194] usb 2-1: SerialNumber: syz [ 273.796730][ T5740] usb 3-1: selecting invalid altsetting 0 [ 273.807649][ T5740] uvcvideo 3-1:220.0: probe with driver uvcvideo failed with error -22 [ 273.818137][ T5740] usb 3-1: selecting invalid altsetting 0 [ 273.824732][ T5740] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 273.837231][ T5740] usb 3-1: USB disconnect, device number 50 [ 273.847788][ T8194] cdc_mbim 2-1:1.0: skipping garbage [ 274.049912][ T8993] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 274.145034][ T9003] loop2: detected capacity change from 0 to 7 [ 274.155279][ T9003] Dev loop2: unable to read RDB block 7 [ 274.160874][ T9003] loop2: unable to read partition table [ 274.167301][ T9003] loop2: partition table beyond EOD, truncated [ 274.176629][ T9003] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 274.420884][ T9011] sch_tbf: burst 25 is lower than device ip6gre0 mtu (1448) ! [ 274.713617][ T5740] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 274.731824][ T8993] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 274.822205][ T8194] cdc_mbim 2-1:1.0: setting tx_max = 184 [ 274.831803][ T8194] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 274.844035][ T8194] wwan wwan0: port wwan0mbim0 attached [ 274.856449][ T8194] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, ba:44:1f:9e:50:ce [ 274.893591][ T5740] usb 6-1: Using ep0 maxpacket: 8 [ 274.900500][ T5740] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 274.910359][ T5740] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 274.921727][ T5740] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 274.932454][ T5740] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 274.943163][ T5740] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 274.956948][ T5740] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 274.967237][ T5740] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.154650][ T8863] usb 2-1: USB disconnect, device number 57 [ 275.174337][ T8863] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 275.185271][ T5740] usb 6-1: GET_CAPABILITIES returned 0 [ 275.202456][ T5740] usbtmc 6-1:16.0: can't read capabilities [ 275.348695][ T8863] wwan wwan0: port wwan0mbim0 disconnected [ 275.458234][ T9013] netlink: 8 bytes leftover after parsing attributes in process `syz.5.805'. [ 275.598244][ T8194] usb 6-1: USB disconnect, device number 24 [ 275.673728][ T5708] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 275.769761][ T9051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.809'. [ 275.782118][ T9051] lo: entered allmulticast mode [ 275.794538][ T9050] lo: left allmulticast mode [ 275.832449][ T9055] loop2: detected capacity change from 0 to 7 [ 275.839527][ T9055] Dev loop2: unable to read RDB block 7 [ 275.845680][ T9055] loop2: unable to read partition table [ 275.851589][ T9055] loop2: partition table beyond EOD, truncated [ 275.870360][ T9055] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 275.918619][ T5708] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 275.933642][ T5708] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.949428][ T5708] usb 4-1: Product: syz [ 275.954061][ T5708] usb 4-1: Manufacturer: syz [ 275.967947][ T9061] netlink: 4 bytes leftover after parsing attributes in process `syz.4.810'. [ 275.977030][ T5708] usb 4-1: SerialNumber: syz [ 275.984721][ T5708] usb 4-1: config 0 descriptor?? [ 276.040812][ T9063] netlink: 'syz.1.813': attribute type 13 has an invalid length. [ 276.106148][ T9063] bridge0: port 3(vlan2) entered disabled state [ 276.119024][ T9063] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.126502][ T9063] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.270530][ T9063] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.284728][ T8863] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 276.300947][ T9063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.543799][ T8863] usb 5-1: Using ep0 maxpacket: 16 [ 276.579968][ T8863] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 276.617213][ T7080] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.626335][ T7080] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.636144][ T8863] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 276.636160][ T7080] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.655538][ T7080] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.664641][ T5700] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 276.812480][ T9032] netlink: 24 bytes leftover after parsing attributes in process `syz.3.808'. [ 276.823962][ T5700] usb 3-1: Using ep0 maxpacket: 8 [ 276.835725][ T9032] netlink: 24 bytes leftover after parsing attributes in process `syz.3.808'. [ 276.853010][ T5700] usb 3-1: config 5 has an invalid interface number: 48 but max is 1 [ 276.878326][ T5700] usb 3-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 276.910348][ T5700] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 276.932609][ T5700] usb 3-1: config 5 has no interface number 0 [ 276.945050][ T5700] usb 3-1: too many endpoints for config 5 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 276.967821][ T5700] usb 3-1: config 5 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 276.995519][ T5700] usb 3-1: config 5 interface 48 has no altsetting 0 [ 277.008472][ T5700] usb 3-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=e2.5c [ 277.021424][ T5700] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.033601][ T5740] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 277.033671][ T5700] usb 3-1: Product: syz [ 277.051877][ T5700] usb 3-1: Manufacturer: syz [ 277.057120][ T5700] usb 3-1: SerialNumber: syz [ 277.217512][ T5740] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 277.242787][ T5740] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.262916][ T5740] usb 6-1: Product: syz [ 277.271505][ T5740] usb 6-1: Manufacturer: syz [ 277.291878][ T5740] usb 6-1: SerialNumber: syz [ 277.306834][ T5708] usb 4-1: f81604_read: reg: 100e failed: -EPROTO [ 277.326120][ T5740] usb 6-1: config 0 descriptor?? [ 277.398830][ T9077] 8021q: adding VLAN 0 to HW filter on device bond1 [ 277.416754][ T9065] netlink: 'syz.2.812': attribute type 21 has an invalid length. [ 277.443582][ T5708] usb 4-1: f81604_read: reg: 200f failed: -EPROTO [ 277.450954][ T9065] netlink: 132 bytes leftover after parsing attributes in process `syz.2.812'. [ 277.500853][ T5708] usb 4-1: USB disconnect, device number 40 [ 277.571507][ T5708] usb 4-1: f81604_read: reg: 100f failed: -ENODEV [ 277.605546][ T5285] usb 4-1: f81604_read: reg: 200f failed: -ENODEV [ 277.629736][ T5708] usb 4-1: f81604_read: reg: 200f failed: -ENODEV [ 278.113688][ T5708] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 278.172139][ T9074] netlink: 24 bytes leftover after parsing attributes in process `syz.5.816'. [ 278.205437][ T9074] netlink: 24 bytes leftover after parsing attributes in process `syz.5.816'. [ 278.293772][ T5708] usb 2-1: Using ep0 maxpacket: 32 [ 278.318383][ T5708] usb 2-1: config 5 has an invalid interface number: 47 but max is 0 [ 278.346467][ T5708] usb 2-1: config 5 has no interface number 0 [ 278.367274][ T5708] usb 2-1: too many endpoints for config 5 interface 47 altsetting 112: 114, using maximum allowed: 30 [ 278.401069][ T5708] usb 2-1: config 5 interface 47 altsetting 112 has 0 endpoint descriptors, different from the interface descriptor's value: 114 [ 278.452467][ T5708] usb 2-1: config 5 interface 47 has no altsetting 0 [ 278.499815][ T5708] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice=89.53 [ 278.526163][ T5708] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.553849][ T5708] usb 2-1: Product: syz [ 278.571016][ T5708] usb 2-1: Manufacturer: syz [ 278.588520][ T5708] usb 2-1: SerialNumber: syz [ 278.702579][ T5740] usb 6-1: f81604_read: reg: 100e failed: -EPROTO [ 278.750117][ T5740] usb 6-1: f81604_read: reg: 200f failed: -EPROTO [ 278.780914][ T5740] usb 6-1: USB disconnect, device number 25 [ 278.793687][ T24] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 278.820586][ T5740] usb 6-1: f81604_read: reg: 100f failed: -ENODEV [ 278.941144][ T5740] usb 6-1: f81604_read: reg: 200f failed: -ENODEV [ 278.984491][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 279.012092][ T24] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 279.053755][ T24] usb 4-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 279.106641][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 279.131621][ T24] usb 4-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 279.175656][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.224988][ T24] usb 4-1: config 0 descriptor?? [ 279.239015][ T5700] cytherm 3-1:5.48: Cypress thermometer device now attached [ 279.262064][ T24] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 279.283320][ T5700] usb 3-1: USB disconnect, device number 51 [ 279.294000][ T8863] usb 5-1: string descriptor 0 read error: -71 [ 279.298453][ T5700] cytherm 3-1:5.48: Cypress thermometer now disconnected [ 279.328738][ T8863] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 279.346812][ T8863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.384138][ T8863] usb 5-1: can't set config #1, error -71 [ 279.432136][ T8863] usb 5-1: USB disconnect, device number 48 [ 279.507503][ T9096] netlink: 'syz.4.823': attribute type 2 has an invalid length. [ 279.745706][ T30] audit: type=1326 audit(1782068609.625:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9105 comm="syz.2.827" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 279.778279][ T30] audit: type=1326 audit(1782068609.645:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9105 comm="syz.2.827" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 279.806132][ T30] audit: type=1326 audit(1782068609.645:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9105 comm="syz.2.827" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 279.831924][ T30] audit: type=1326 audit(1782068609.645:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9105 comm="syz.2.827" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 279.857307][ T30] audit: type=1326 audit(1782068609.645:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9105 comm="syz.2.827" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=308 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 279.883156][ T30] audit: type=1326 audit(1782068609.645:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9105 comm="syz.2.827" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 279.908107][ T30] audit: type=1326 audit(1782068609.645:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9105 comm="syz.2.827" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 279.927723][ T8863] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 279.932907][ T5700] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 279.972912][ T30] audit: type=1326 audit(1782068609.645:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9105 comm="syz.2.827" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 279.997720][ T30] audit: type=1326 audit(1782068609.645:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9105 comm="syz.2.827" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 280.022157][ T30] audit: type=1326 audit(1782068609.645:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9105 comm="syz.2.827" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 280.095224][ T8863] usb 5-1: Using ep0 maxpacket: 16 [ 280.105170][ T8863] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.123785][ T5700] usb 6-1: Using ep0 maxpacket: 16 [ 280.124411][ T8863] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.137394][ T5700] usb 6-1: config 6 has an invalid interface number: 218 but max is 1 [ 280.142187][ T8863] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 280.157560][ T8863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.169531][ T5700] usb 6-1: config 6 has no interface number 0 [ 280.188559][ T5700] usb 6-1: config 6 interface 1 altsetting 6 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 280.211510][ T5700] usb 6-1: config 6 interface 1 altsetting 6 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 280.222932][ T5700] usb 6-1: config 6 interface 1 altsetting 6 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 280.234298][ T5700] usb 6-1: config 6 interface 1 altsetting 6 has a duplicate endpoint with address 0xF, skipping [ 280.245838][ T5700] usb 6-1: config 6 interface 1 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 280.256902][ T5700] usb 6-1: config 6 interface 1 altsetting 6 has a duplicate endpoint with address 0xB, skipping [ 280.268066][ T5700] usb 6-1: config 6 interface 1 altsetting 6 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 280.280364][ T5700] usb 6-1: config 6 interface 1 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 280.292299][ T5700] usb 6-1: config 6 interface 218 has no altsetting 0 [ 280.299547][ T5700] usb 6-1: config 6 interface 1 has no altsetting 0 [ 280.309424][ T5700] usb 6-1: New USB device found, idVendor=04e8, idProduct=689a, bcdDevice=b8.65 [ 280.318839][ T5700] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.327069][ T5700] usb 6-1: Product: syz [ 280.331416][ T5700] usb 6-1: Manufacturer: syz [ 280.336266][ T5700] usb 6-1: SerialNumber: syz [ 280.572238][ T5700] usb 6-1: USB disconnect, device number 26 [ 280.586616][ T8863] mcp2221 0003:04D8:00DD.001B: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 280.788349][ T5700] usb 5-1: USB disconnect, device number 49 [ 281.002769][ T5708] speedtch 2-1:5.47: speedtch_bind: wrong device class 71 [ 281.011926][ T5708] speedtch 2-1:5.47: usbatm_usb_probe: bind failed: -19! [ 281.021338][ T5708] usb 2-1: USB disconnect, device number 58 [ 281.110802][ T9118] netlink: 56 bytes leftover after parsing attributes in process `syz.2.831'. [ 281.148522][ T9118] bridge0: entered allmulticast mode [ 281.202281][ T9122] FAULT_INJECTION: forcing a failure. [ 281.202281][ T9122] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.215644][ T9122] CPU: 1 UID: 0 PID: 9122 Comm: syz.1.833 Tainted: G L syzkaller #0 PREEMPT(full) [ 281.215677][ T9122] Tainted: [L]=SOFTLOCKUP [ 281.215686][ T9122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 281.215699][ T9122] Call Trace: [ 281.215707][ T9122] [ 281.215716][ T9122] dump_stack_lvl+0xe8/0x150 [ 281.215744][ T9122] should_fail_ex+0x40c/0x560 [ 281.215771][ T9122] _copy_from_iter+0x1d3/0x1660 [ 281.215802][ T9122] ? rcu_is_watching+0x15/0xb0 [ 281.215828][ T9122] ? __pfx__copy_from_iter+0x10/0x10 [ 281.215854][ T9122] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 281.215896][ T9122] ? netlink_sendmsg+0x650/0xb40 [ 281.215920][ T9122] ? skb_put+0x112/0x210 [ 281.215942][ T9122] netlink_sendmsg+0x6c0/0xb40 [ 281.215970][ T9122] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.215994][ T9122] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 281.216021][ T9122] ? __import_iovec+0x5d7/0x7e0 [ 281.216053][ T9122] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.216076][ T9122] sock_sendmsg_nosec+0x13a/0x180 [ 281.216107][ T9122] ____sys_sendmsg+0x54e/0x850 [ 281.216132][ T9122] ? __pfx_____sys_sendmsg+0x10/0x10 [ 281.216161][ T9122] ___sys_sendmsg+0x2a5/0x360 [ 281.216184][ T9122] ? get_pid_task+0x20/0x1f0 [ 281.216206][ T9122] ? __pfx____sys_sendmsg+0x10/0x10 [ 281.216226][ T9122] ? __mutex_trylock_common+0x15f/0x270 [ 281.216253][ T9122] ? get_pid_task+0x20/0x1f0 [ 281.216271][ T9122] ? get_pid_task+0x20/0x1f0 [ 281.216306][ T9122] ? __fget_files+0x2a/0x420 [ 281.216335][ T9122] ? __fget_files+0x3a2/0x420 [ 281.216376][ T9122] __sys_sendmsg+0x177/0x240 [ 281.216400][ T9122] ? __pfx___sys_sendmsg+0x10/0x10 [ 281.216427][ T9122] ? rcu_is_watching+0x15/0xb0 [ 281.216461][ T9122] __do_fast_syscall_32+0x23e/0x6f0 [ 281.216485][ T9122] ? do_fast_syscall_32+0x33/0x70 [ 281.216506][ T9122] ? asm_int80_emulation+0x1a/0x20 [ 281.216526][ T9122] ? do_int80_emulation+0x29f/0x550 [ 281.216546][ T9122] ? trace_irq_disable+0x3b/0x140 [ 281.216599][ T9122] do_fast_syscall_32+0x33/0x70 [ 281.216622][ T9122] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 281.216647][ T9122] RIP: 0023:0xf7f340ec [ 281.216665][ T9122] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 281.216683][ T9122] RSP: 002b:00000000f53f650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 281.216707][ T9122] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 281.216722][ T9122] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 281.216735][ T9122] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 281.216747][ T9122] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 281.216760][ T9122] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 281.216782][ T9122] [ 281.546353][ T8194] usb 4-1: USB disconnect, device number 41 [ 281.555811][ T9126] netlink: 'syz.4.836': attribute type 21 has an invalid length. [ 281.591802][ T9127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.835'. [ 281.663617][ T5700] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 281.818865][ T9139] fuse: Bad value for 'fd' [ 281.833858][ T5700] usb 6-1: Using ep0 maxpacket: 8 [ 281.841944][ T5700] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.869797][ T5700] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.914830][ T5700] usb 6-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 281.935608][ T5700] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.958416][ T5700] usb 6-1: config 0 descriptor?? [ 281.994091][ T9150] FAULT_INJECTION: forcing a failure. [ 281.994091][ T9150] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 282.008230][ T9150] CPU: 1 UID: 0 PID: 9150 Comm: syz.4.843 Tainted: G L syzkaller #0 PREEMPT(full) [ 282.008265][ T9150] Tainted: [L]=SOFTLOCKUP [ 282.008273][ T9150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 282.008285][ T9150] Call Trace: [ 282.008293][ T9150] [ 282.008302][ T9150] dump_stack_lvl+0xe8/0x150 [ 282.008331][ T9150] should_fail_ex+0x40c/0x560 [ 282.008361][ T9150] _copy_from_user+0x2d/0xb0 [ 282.008401][ T9150] input_event_from_user+0xfe/0x290 [ 282.008417][ T9150] ? __pfx_input_event_from_user+0x10/0x10 [ 282.008432][ T9150] ? rcu_is_watching+0x15/0xb0 [ 282.008451][ T9150] evdev_write+0x2c7/0x4c0 [ 282.008475][ T9150] ? __pfx_evdev_write+0x10/0x10 [ 282.008497][ T9150] ? bpf_lsm_file_permission+0x9/0x20 [ 282.008519][ T9150] ? security_file_permission+0x75/0x260 [ 282.008540][ T9150] ? rw_verify_area+0x203/0x4c0 [ 282.008556][ T9150] ? __pfx_evdev_write+0x10/0x10 [ 282.008577][ T9150] vfs_write+0x296/0xba0 [ 282.008596][ T9150] ? __pfx_vfs_write+0x10/0x10 [ 282.008610][ T9150] ? lock_release+0x4b/0x3c0 [ 282.008623][ T9150] ? __mutex_unlock_slowpath+0x731/0x900 [ 282.008639][ T9150] ? __fget_files+0x2a/0x420 [ 282.008660][ T9150] ? __fget_files+0x3a2/0x420 [ 282.008681][ T9150] ? __fget_files+0x2a/0x420 [ 282.008705][ T9150] ksys_write+0x150/0x270 [ 282.008721][ T9150] ? __pfx_ksys_write+0x10/0x10 [ 282.008737][ T9150] ? rcu_is_watching+0x15/0xb0 [ 282.008754][ T9150] __do_fast_syscall_32+0x23e/0x6f0 [ 282.008769][ T9150] ? do_fast_syscall_32+0x33/0x70 [ 282.008783][ T9150] ? asm_int80_emulation+0x1a/0x20 [ 282.008797][ T9150] ? do_int80_emulation+0x29f/0x550 [ 282.008811][ T9150] ? trace_irq_disable+0x3b/0x140 [ 282.008858][ T9150] do_fast_syscall_32+0x33/0x70 [ 282.008879][ T9150] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 282.008909][ T9150] RIP: 0023:0xf701f0ec [ 282.008922][ T9150] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 282.008936][ T9150] RSP: 002b:00000000f540d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 282.008953][ T9150] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 282.008963][ T9150] RDX: 0000000000000918 RSI: 0000000000000000 RDI: 0000000000000000 [ 282.008972][ T9150] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 282.008981][ T9150] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 282.008990][ T9150] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 282.009004][ T9150] [ 282.381233][ T9157] loop2: detected capacity change from 0 to 7 [ 282.389723][ T9157] Dev loop2: unable to read RDB block 7 [ 282.395511][ T9157] loop2: unable to read partition table [ 282.401604][ T9157] loop2: partition table beyond EOD, truncated [ 282.408260][ T9157] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 282.540981][ T9161] netlink: 8 bytes leftover after parsing attributes in process `syz.5.832'. [ 282.563886][ T5708] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 282.633086][ T5700] hid_parser_main: 28 callbacks suppressed [ 282.633113][ T5700] cherry 0003:046A:0027.001C: unknown main item tag 0x2 [ 282.647143][ T5700] cherry 0003:046A:0027.001C: unknown main item tag 0x0 [ 282.655300][ T5700] cherry 0003:046A:0027.001C: unknown main item tag 0x0 [ 282.696905][ T5700] cherry 0003:046A:0027.001C: unknown main item tag 0x0 [ 282.715882][ T5700] cherry 0003:046A:0027.001C: unknown main item tag 0x0 [ 282.737458][ T5708] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 282.747862][ T5700] cherry 0003:046A:0027.001C: unknown main item tag 0x0 [ 282.759370][ T5700] cherry 0003:046A:0027.001C: unknown main item tag 0x0 [ 282.764585][ T5708] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 282.768082][ T5700] cherry 0003:046A:0027.001C: unknown main item tag 0x0 [ 282.787797][ T5708] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 282.808647][ T5700] cherry 0003:046A:0027.001C: unknown main item tag 0x0 [ 282.818112][ T5708] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.850560][ T9155] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 282.859673][ T5700] cherry 0003:046A:0027.001C: unknown main item tag 0x0 [ 282.879807][ T5708] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 282.896599][ T5700] cherry 0003:046A:0027.001C: hidraw0: USB HID v0.00 Device [HID 046a:0027] on usb-dummy_hcd.5-1/input0 [ 282.976188][ T9174] fuse: Bad value for 'fd' [ 283.190901][ T5708] usb 5-1: USB disconnect, device number 50 [ 283.303596][ T8194] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 283.462561][ T8194] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 283.472022][ T8194] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.480484][ T8194] usb 4-1: Product: syz [ 283.485282][ T8194] usb 4-1: Manufacturer: syz [ 283.490035][ T8194] usb 4-1: SerialNumber: syz [ 283.501564][ T8194] usb 4-1: config 0 descriptor?? [ 283.518725][ T8194] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 283.528483][ T9164] syz.2.847 (9164): drop_caches: 2 [ 283.534234][ T8194] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 283.544458][ T8194] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 283.554416][ T8194] usb 4-1: media controller created [ 283.585551][ T8194] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 283.636242][ T8194] DVB: Unable to find symbol mt352_attach() [ 283.673621][ T8194] DVB: Unable to find symbol nxt6000_attach() [ 283.679929][ T8194] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 283.702051][ T8194] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input19 [ 283.715253][ T9176] digitv: more than 2 i2c messages at a time is not handled yet. TODO. [ 283.727761][ T9176] dvb-usb: bulk message failed: -22 (7/0) [ 283.735769][ T8194] dvb-usb: schedule remote query interval to 1000 msecs. [ 283.755712][ T8194] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 283.780335][ T8194] dvb-usb: bulk message failed: -22 (7/0) [ 283.797229][ T8194] dvb-usb: bulk message failed: -22 (7/0) [ 284.143647][ T24] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 284.191537][ T8194] usb 6-1: USB disconnect, device number 27 [ 284.266463][ T5708] usb 4-1: USB disconnect, device number 42 [ 284.299222][ T5708] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 284.334939][ T24] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 284.353881][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 284.364717][ T24] usb 5-1: config 0 has no interface number 0 [ 284.373773][ T24] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 284.394017][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.404230][ T24] usb 5-1: config 0 descriptor?? [ 284.417933][ T24] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 284.433647][ T5672] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 284.563651][ T8194] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 284.606913][ T5672] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 284.623576][ T5672] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 284.643736][ T5672] usb 3-1: config 0 has no interface number 0 [ 284.660725][ T5672] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 284.676206][ T5672] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.700360][ T5672] usb 3-1: config 0 descriptor?? [ 284.732627][ T5672] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 284.747228][ T8194] usb 6-1: unable to get BOS descriptor or descriptor too short [ 284.755881][ T8194] usb 6-1: not running at top speed; connect to a high speed hub [ 284.765282][ T8194] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 284.776833][ T8194] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 284.788907][ T8194] usb 6-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 284.798266][ T8194] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.806448][ T8194] usb 6-1: Product: syz [ 284.811199][ T8194] usb 6-1: Manufacturer: syz [ 284.815962][ T8194] usb 6-1: SerialNumber: syz [ 284.971738][ T9198] tap0: tun_chr_ioctl cmd 1074025677 [ 284.997737][ T9198] tap0: linktype set to 769 [ 285.071490][ T9208] netlink: 'syz.3.858': attribute type 1 has an invalid length. [ 285.210753][ T9208] bond1: entered promiscuous mode [ 285.239770][ T9208] 8021q: adding VLAN 0 to HW filter on device bond1 [ 285.371255][ T9211] vlan0: entered allmulticast mode [ 285.406891][ T9211] bond1: entered allmulticast mode [ 285.424516][ T9214] tap0: tun_chr_ioctl cmd 1074025677 [ 285.434394][ T9214] tap0: linktype set to 769 [ 285.483828][ T7078] usb 5-1: Failed to submit usb control message: -110 [ 285.518071][ T7078] usb 5-1: unable to send the bmi data to the device: -110 [ 285.535654][ T7078] usb 5-1: unable to get target info from device [ 285.552439][ T9213] bond1: (slave bridge2): making interface the new active one [ 285.575999][ T7078] usb 5-1: could not get target info (-110) [ 285.599583][ T7078] usb 5-1: could not probe fw (-110) [ 285.618863][ T9213] bridge2: entered promiscuous mode [ 285.640086][ T9213] bridge2: entered allmulticast mode [ 285.677284][ T9213] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 285.804361][ T7082] usb 3-1: Failed to submit usb control message: -110 [ 285.812572][ T7082] usb 3-1: unable to send the bmi data to the device: -110 [ 285.857701][ T7082] usb 3-1: unable to get target info from device [ 285.896248][ T7082] usb 3-1: could not get target info (-110) [ 285.904048][ T5672] usb 2-1: new low-speed USB device number 59 using dummy_hcd [ 285.932591][ T7082] usb 3-1: could not probe fw (-110) [ 286.084034][ T5672] usb 2-1: Invalid ep0 maxpacket: 32 [ 286.233590][ T5672] usb 2-1: new low-speed USB device number 60 using dummy_hcd [ 286.233633][ T24] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 286.307054][ T5700] usb 5-1: USB disconnect, device number 51 [ 286.405145][ T5672] usb 2-1: Invalid ep0 maxpacket: 32 [ 286.417167][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 286.427233][ T24] usb 4-1: config 10 has an invalid interface number: 25 but max is 0 [ 286.435794][ T5672] usb usb2-port1: attempt power cycle [ 286.443447][ T24] usb 4-1: config 10 has no interface number 0 [ 286.450814][ T24] usb 4-1: config 10 interface 25 has no altsetting 0 [ 286.460844][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=df9b, bcdDevice=26.44 [ 286.480362][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.499180][ T24] usb 4-1: Product: syz [ 286.511600][ T24] usb 4-1: Manufacturer: syz [ 286.517458][ T24] usb 4-1: SerialNumber: syz [ 286.622772][ T8194] usb 6-1: 3:0: failed to get current value for ch 0 (-71) [ 286.638556][ T8194] usb 6-1: 3:0: cannot get min/max values for control 2 (id 3) [ 286.656387][ T8194] usb 6-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 286.667035][ T8194] usb 6-1: [3] FU [LFE Playback Volume] ch = 1, val = 0/1/1 [ 286.675322][ T8194] usb 6-1: 3:0: cannot get min/max values for control 3 (id 3) [ 286.700381][ T8194] usb 6-1: 3:0: cannot get min/max values for control 4 (id 3) [ 286.730994][ T8194] usb 6-1: 3:0: cannot get min/max values for control 5 (id 3) [ 286.772678][ T8194] usb 6-1: 3:0: failed to get current value for ch 0 (-71) [ 286.803270][ T8194] usb 6-1: 3:0: cannot get min/max values for control 8 (id 3) [ 286.815029][ T5672] usb 2-1: new low-speed USB device number 61 using dummy_hcd [ 286.868951][ T5672] usb 2-1: Invalid ep0 maxpacket: 32 [ 286.912311][ T8194] usb 6-1: 3:0: cannot get min/max values for control 3 (id 3) [ 286.955424][ T8194] usb 6-1: 3:0: cannot get min/max values for control 5 (id 3) [ 287.026277][ T5672] usb 2-1: new low-speed USB device number 62 using dummy_hcd [ 287.065209][ T8194] usb 6-1: USB disconnect, device number 28 [ 287.075519][ T5672] usb 2-1: Invalid ep0 maxpacket: 32 [ 287.099722][ T5672] usb usb2-port1: unable to enumerate USB device [ 287.188749][ T6167] udevd[6167]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 287.613632][ T5672] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 287.678461][ T8194] usb 3-1: USB disconnect, device number 52 [ 287.795066][ T5672] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 287.825355][ T5672] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 287.843196][ T5672] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 287.859742][ T5672] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.878362][ T9229] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 287.902849][ T5672] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 288.074952][ T8194] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 288.130068][ T5672] usb 6-1: USB disconnect, device number 29 [ 288.245895][ T8194] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 288.271513][ T8194] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 288.298106][ T8194] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 288.314269][ T8194] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.331712][ T8194] usb 3-1: Product: syz [ 288.341189][ T8194] usb 3-1: Manufacturer: syz [ 288.349916][ T8194] usb 3-1: SerialNumber: syz [ 288.587589][ T8194] usb 3-1: 0:1 : does not exist [ 288.595447][ T8194] usb 3-1: BAAD SPEAKER p_chmask mismatch [ 288.646149][ T8194] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 288.662955][ T8194] usb 3-1: USB disconnect, device number 53 [ 288.691966][ T6167] udevd[6167]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 288.933626][ T5672] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 289.037008][ T24] usb 4-1: USB disconnect, device number 43 [ 289.103583][ T5672] usb 2-1: Using ep0 maxpacket: 8 [ 289.111079][ T5672] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 289.129564][ T5672] usb 2-1: config 0 has no interface number 0 [ 289.135826][ T5672] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 289.171882][ T5672] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 289.171923][ T5672] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 289.171953][ T5672] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 289.171997][ T5672] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 289.172023][ T5672] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.182464][ T5672] usb 2-1: config 0 descriptor?? [ 289.210572][ T5672] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 289.429070][ T9256] fuse: Bad value for 'fd' [ 289.445064][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 289.445083][ T30] audit: type=1326 audit(1782068619.315:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9241 comm="syz.1.868" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f340ec code=0x7ffc0000 [ 289.536208][ T30] audit: type=1326 audit(1782068619.325:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9241 comm="syz.1.868" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f340ec code=0x7ffc0000 [ 289.630655][ T30] audit: type=1326 audit(1782068619.325:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9241 comm="syz.1.868" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=470 compat=1 ip=0xf7f340ec code=0x7ffc0000 [ 289.675424][ T5708] usb 2-1: USB disconnect, device number 63 [ 289.675482][ C0] ldusb 2-1:0.55: usb_submit_urb failed (-19) [ 289.722029][ T5708] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 289.722040][ T9258] ldusb: No device or device unplugged -19 [ 289.740428][ T30] audit: type=1326 audit(1782068619.325:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9241 comm="syz.1.868" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f340ec code=0x7ffc0000 [ 289.819250][ T30] audit: type=1326 audit(1782068619.325:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9241 comm="syz.1.868" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f340ec code=0x7ffc0000 [ 289.856436][ T30] audit: type=1326 audit(1782068619.325:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9241 comm="syz.1.868" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf7f340ec code=0x7ffc0000 [ 289.909391][ T30] audit: type=1326 audit(1782068619.455:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9241 comm="syz.1.868" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f340ec code=0x7ffc0000 [ 289.984069][ T30] audit: type=1326 audit(1782068619.455:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9241 comm="syz.1.868" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f34117 code=0x7ffc0000 [ 290.085891][ T30] audit: type=1326 audit(1782068619.455:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9241 comm="syz.1.868" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f340ec code=0x7ffc0000 [ 290.126498][ T9262] loop5: detected capacity change from 0 to 7 [ 290.147705][ T9262] Dev loop5: unable to read RDB block 7 [ 290.167246][ T9262] loop5: unable to read partition table [ 290.168645][ T30] audit: type=1326 audit(1782068619.455:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9241 comm="syz.1.868" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f34117 code=0x7ffc0000 [ 290.213299][ T9262] loop5: partition table beyond EOD, truncated [ 290.241060][ T9262] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 290.264830][ T9242] ldusb: No device or device unplugged -19 [ 290.426480][ T9265] macsec1: entered promiscuous mode [ 290.452444][ T9265] veth1_to_hsr: entered promiscuous mode [ 290.478610][ T9265] macsec1: entered allmulticast mode [ 290.501900][ T9265] veth1_to_hsr: entered allmulticast mode [ 290.552320][ T9269] FAULT_INJECTION: forcing a failure. [ 290.552320][ T9269] name failslab, interval 1, probability 0, space 0, times 0 [ 290.604002][ T9269] CPU: 0 UID: 0 PID: 9269 Comm: syz.4.875 Tainted: G L syzkaller #0 PREEMPT(full) [ 290.604038][ T9269] Tainted: [L]=SOFTLOCKUP [ 290.604046][ T9269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 290.604060][ T9269] Call Trace: [ 290.604068][ T9269] [ 290.604077][ T9269] dump_stack_lvl+0xe8/0x150 [ 290.604107][ T9269] should_fail_ex+0x40c/0x560 [ 290.604135][ T9269] should_failslab+0xa8/0x100 [ 290.604159][ T9269] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 290.604191][ T9269] ? rcu_is_watching+0x15/0xb0 [ 290.604215][ T9269] ? __alloc_skb+0x1d7/0x7a0 [ 290.604234][ T9269] ? trace_irq_enable+0x3b/0x140 [ 290.604268][ T9269] __alloc_skb+0x1d7/0x7a0 [ 290.604290][ T9269] mpls_netconf_notify_devconf+0x46/0x100 [ 290.604315][ T9269] mpls_dev_notify+0xb52/0xd30 [ 290.604338][ T9269] ? ovs_netdev_get_vport+0x11c/0x120 [ 290.604363][ T9269] notifier_call_chain+0x1a5/0x3d0 [ 290.604388][ T9269] unregister_netdevice_many_notify+0x17de/0x2150 [ 290.604425][ T9269] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 290.604454][ T9269] ? __mutex_lock+0x1092/0x1550 [ 290.604485][ T9269] unregister_netdevice_queue+0x2f5/0x340 [ 290.604513][ T9269] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 290.604544][ T9269] ppp_release+0x102/0x140 [ 290.604566][ T9269] ? __pfx_ppp_release+0x10/0x10 [ 290.604586][ T9269] __fput+0x418/0xa50 [ 290.604629][ T9269] fput_close_sync+0x11f/0x240 [ 290.604658][ T9269] ? __pfx_fput_close_sync+0x10/0x10 [ 290.604690][ T9269] ? do_raw_spin_unlock+0xf5/0x210 [ 290.604724][ T9269] __ia32_sys_close+0x7e/0x110 [ 290.604783][ T9269] __do_fast_syscall_32+0x23e/0x6f0 [ 290.604869][ T9269] ? do_fast_syscall_32+0x33/0x70 [ 290.604941][ T9269] ? asm_int80_emulation+0x1a/0x20 [ 290.605002][ T9269] ? do_int80_emulation+0x29f/0x550 [ 290.605061][ T9269] ? trace_irq_disable+0x3b/0x140 [ 290.605134][ T9269] do_fast_syscall_32+0x33/0x70 [ 290.605199][ T9269] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 290.605272][ T9269] RIP: 0023:0xf701f0ec [ 290.605318][ T9269] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 290.605369][ T9269] RSP: 002b:00000000f53cb50c EFLAGS: 00000206 ORIG_RAX: 0000000000000006 [ 290.605425][ T9269] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 290.605465][ T9269] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 290.605498][ T9269] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 290.605530][ T9269] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 290.605563][ T9269] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 290.605628][ T9269] [ 290.633716][ T9273] input: syz0 as /devices/virtual/input/input21 [ 291.024336][ T8194] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 291.138824][ T9280] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 291.174975][ T8194] usb 3-1: Using ep0 maxpacket: 16 [ 291.195177][ T8194] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.195217][ T8194] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 291.195246][ T8194] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 291.195287][ T8194] usb 3-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 291.195313][ T8194] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.196984][ T8194] usb 3-1: config 0 descriptor?? [ 291.614192][ T8194] nintendo 0003:057E:2019.001D: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.2-1/input0 [ 291.693843][ T808] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 291.743601][ T8863] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 291.853612][ T808] usb 5-1: Using ep0 maxpacket: 16 [ 291.861785][ T808] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 291.876891][ T808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 291.945214][ T808] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 291.953729][ T8863] usb 6-1: Using ep0 maxpacket: 8 [ 291.955271][ T808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.973627][ T808] usb 5-1: Product: syz [ 291.979661][ T808] usb 5-1: Manufacturer: syz [ 291.987526][ T8863] usb 6-1: config 1 has an invalid interface number: 216 but max is 0 [ 292.002888][ T808] usb 5-1: SerialNumber: syz [ 292.020862][ T808] usb 5-1: config 0 descriptor?? [ 292.038530][ T8863] usb 6-1: config 1 has no interface number 0 [ 292.051206][ T808] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 292.077576][ T9302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.080054][ T808] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 292.086238][ T8863] usb 6-1: config 1 interface 216 has no altsetting 0 [ 292.147150][ T8863] usb 6-1: New USB device found, idVendor=03f0, idProduct=1efa, bcdDevice=d9.f7 [ 292.148070][ T9302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.192810][ T8863] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.221285][ T8863] usb 6-1: Product: syz [ 292.228815][ T8863] usb 6-1: Manufacturer: syz [ 292.238777][ T8863] usb 6-1: SerialNumber: syz [ 292.546723][ T8863] usb 6-1: USB disconnect, device number 30 [ 292.655611][ T808] em28xx 5-1:0.0: chip ID is em2870 [ 292.698318][ T9308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.889'. [ 293.023613][ T24] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 293.033191][ T8194] nintendo 0003:057E:2019.001D: Failed to get joycon info; ret=-71 [ 293.067291][ T8194] nintendo 0003:057E:2019.001D: Failed to retrieve controller info; ret=-71 [ 293.108683][ T8194] nintendo 0003:057E:2019.001D: Failed to initialize controller; ret=-71 [ 293.130255][ T8194] nintendo 0003:057E:2019.001D: probe - fail = -71 [ 293.147178][ T8194] nintendo 0003:057E:2019.001D: probe with driver nintendo failed with error -71 [ 293.188335][ T8194] usb 3-1: USB disconnect, device number 54 [ 293.214554][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 293.364563][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 293.384955][ T24] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 293.408369][ T9308] netlink: 40 bytes leftover after parsing attributes in process `syz.3.889'. [ 293.450881][ T9308] netlink: 260 bytes leftover after parsing attributes in process `syz.3.889'. [ 293.477361][ T8194] usb 5-1: USB disconnect, device number 52 [ 293.484808][ T8194] em28xx 5-1:0.0: Disconnecting em28xx [ 293.507801][ T8194] em28xx 5-1:0.0: Freeing device [ 294.361941][ T9326] could not allocate digest TFM handle _!5(iHP,omxę*71U"~ 2.>~e>/y [ 294.700171][ T9334] Invalid logical block size (1048576) [ 294.923654][ T808] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 295.107731][ T808] usb 5-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 295.141952][ T808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.169764][ T808] usb 5-1: Product: syz [ 295.203799][ T808] usb 5-1: Manufacturer: syz [ 295.223007][ T808] usb 5-1: SerialNumber: syz [ 295.261828][ T808] usb 5-1: config 0 descriptor?? [ 295.487395][ T808] usb 5-1: f81604_read: reg: 105 failed: -EPROTO [ 295.507803][ T808] f81604 5-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 295.540071][ T808] f81604 5-1:0.0: probe with driver f81604 failed with error -71 [ 295.623296][ T808] usb 5-1: USB disconnect, device number 53 [ 295.659592][ T9354] usb usb1: check_ctrlrecip: process 9354 (syz.5.899) requesting ep 01 but needs 81 [ 295.750845][ T9357] netlink: 32 bytes leftover after parsing attributes in process `syz.1.901'. [ 295.787267][ T5700] hid_parser_main: 48 callbacks suppressed [ 295.787849][ T9357] UHID_CREATE from different security context by process 595 (syz.1.901), this is not allowed. [ 295.806843][ T5700] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 295.826930][ T5700] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 295.859183][ T5700] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 295.870229][ T9354] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 295.897851][ T5700] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 295.927158][ T5700] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 295.951667][ T9345] netlink: 8 bytes leftover after parsing attributes in process `syz.5.899'. [ 295.953812][ T5700] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 296.004876][ T5700] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 296.048601][ T5700] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 296.071536][ T24] usb 4-1: string descriptor 0 read error: -71 [ 296.077929][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 296.093691][ T5700] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 296.122666][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.131308][ T5700] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 296.179429][ T5700] hid-generic 0000:0000:0004.001E: hidraw0: HID v0.03 Device [syz1] on syz0 [ 296.190804][ T24] usb 4-1: can't set config #1, error -71 [ 296.204479][ T9362] loop2: detected capacity change from 0 to 7 [ 296.227993][ T24] usb 4-1: USB disconnect, device number 44 [ 296.249004][ T9362] Dev loop2: unable to read RDB block 7 [ 296.257931][ T9365] openvswitch: netlink: Duplicate or invalid key (type 0). [ 296.284474][ T9362] loop2: unable to read partition table [ 296.313176][ T9362] loop2: partition table beyond EOD, truncated [ 296.314021][ T9365] openvswitch: netlink: Actions may not be safe on all matching packets [ 296.351637][ T9362] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 296.546130][ T9367] netlink: 12 bytes leftover after parsing attributes in process `syz.3.904'. [ 296.614647][ T9367] vlan1: entered promiscuous mode [ 296.651212][ T9367] bridge0: port 4(vlan1) entered blocking state [ 296.668608][ T9367] bridge0: port 4(vlan1) entered disabled state [ 296.694477][ T9367] vlan1: entered allmulticast mode [ 296.710985][ T9367] bond0: entered allmulticast mode [ 296.729928][ T9357] netlink: 'syz.1.901': attribute type 29 has an invalid length. [ 296.739473][ T9367] bond_slave_0: entered allmulticast mode [ 296.753408][ T9367] bond_slave_1: entered allmulticast mode [ 296.782382][ T9367] bridge0: port 4(vlan1) entered blocking state [ 296.788813][ T9367] bridge0: port 4(vlan1) entered forwarding state [ 296.803676][ T24] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 296.945979][ T9375] FAULT_INJECTION: forcing a failure. [ 296.945979][ T9375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 296.966606][ T24] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 296.977984][ T9375] CPU: 1 UID: 0 PID: 9375 Comm: syz.5.907 Tainted: G L syzkaller #0 PREEMPT(full) [ 296.978017][ T9375] Tainted: [L]=SOFTLOCKUP [ 296.978026][ T9375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 296.978039][ T9375] Call Trace: [ 296.978047][ T9375] [ 296.978054][ T9375] dump_stack_lvl+0xe8/0x150 [ 296.978083][ T9375] should_fail_ex+0x40c/0x560 [ 296.978110][ T9375] _copy_from_user+0x2d/0xb0 [ 296.978142][ T9375] compat_i2cdev_ioctl+0x1ee/0x5c0 [ 296.978177][ T9375] ? lock_release+0x4b/0x3c0 [ 296.978196][ T9375] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 296.978227][ T9375] ? __fget_files+0x3a2/0x420 [ 296.978260][ T9375] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 296.978291][ T9375] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 296.978318][ T9375] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 296.978343][ T9375] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 296.978365][ T9375] ? __fget_files+0x3a2/0x420 [ 296.978410][ T9375] ? fput+0xa0/0xd0 [ 296.978439][ T9375] ? ksys_write+0x242/0x270 [ 296.978463][ T9375] ? rcu_is_watching+0x15/0xb0 [ 296.978488][ T9375] __do_fast_syscall_32+0x23e/0x6f0 [ 296.978510][ T9375] ? do_fast_syscall_32+0x33/0x70 [ 296.978530][ T9375] ? asm_int80_emulation+0x1a/0x20 [ 296.978550][ T9375] ? do_int80_emulation+0x29f/0x550 [ 296.978570][ T9375] ? trace_irq_disable+0x3b/0x140 [ 296.978602][ T9375] do_fast_syscall_32+0x33/0x70 [ 296.978621][ T9375] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 296.978647][ T9375] RIP: 0023:0xf7f540ec [ 296.978664][ T9375] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 296.978681][ T9375] RSP: 002b:00000000f541650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 296.978703][ T9375] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000720 [ 296.978716][ T9375] RDX: 0000000080001000 RSI: 0000000000000000 RDI: 0000000000000000 [ 296.978730][ T9375] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 296.978742][ T9375] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 296.978754][ T9375] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 296.978774][ T9375] [ 297.201450][ T24] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 297.211480][ T24] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 297.221300][ T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 297.230370][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.261847][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 297.279143][ T9375] netlink: 4 bytes leftover after parsing attributes in process `syz.5.907'. [ 297.305583][ T24] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 297.342147][ T5800] udevd[5800]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 297.383603][ T8194] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 297.507223][ T24] usb 5-1: USB disconnect, device number 54 [ 297.535072][ T8194] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 297.545601][ T8194] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 297.574444][ T8194] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 297.593936][ T8194] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 297.606728][ T8194] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 297.629512][ T8194] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 297.642308][ T8194] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 297.660715][ T8194] usb 2-1: Product: syz [ 297.670096][ T8194] usb 2-1: Manufacturer: syz [ 297.693582][ T5700] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 297.706318][ T8194] cdc_wdm 2-1:1.0: skipping garbage [ 297.720837][ T8194] cdc_wdm 2-1:1.0: skipping garbage [ 297.732621][ T8194] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 297.753633][ T8194] cdc_wdm 2-1:1.0: Unknown control protocol [ 297.875590][ T5700] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 297.891833][ T5700] usb 4-1: config 1 has no interface number 0 [ 297.912811][ T5700] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 16 [ 297.934327][ T5700] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 297.947781][ T5700] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 297.957077][ T5700] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.965212][ T5700] usb 4-1: Product: syz [ 297.969492][ T5700] usb 4-1: Manufacturer: syz [ 297.977527][ T5700] usb 4-1: SerialNumber: syz [ 297.984902][ T9383] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 298.000939][ T5700] usb 4-1: Error in usbnet_get_endpoints (-22) [ 298.064391][ T9395] vlan0: entered promiscuous mode [ 298.083587][ T9395] bond0: entered promiscuous mode [ 298.088715][ T9395] bond_slave_0: entered promiscuous mode [ 298.105339][ T9395] bond_slave_1: entered promiscuous mode [ 298.114803][ T9397] usb usb8: usbfs: process 9397 (syz.2.914) did not claim interface 12 before use [ 298.124284][ T9395] vlan2: entered promiscuous mode [ 298.182466][ T9400] bridge_slave_1: default FDB implementation only supports local addresses [ 298.216508][ T5700] usb 4-1: USB disconnect, device number 45 [ 298.290305][ T9405] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 298.297962][ T9405] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 298.443801][ T9409] netlink: 32 bytes leftover after parsing attributes in process `syz.4.919'. [ 298.467750][ T8194] usb 2-1: USB disconnect, device number 64 [ 298.519521][ T9411] netlink: 'syz.1.920': attribute type 10 has an invalid length. [ 298.553141][ T9412] trusted_key: encrypted_key: insufficient parameters specified [ 298.884043][ T8194] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 299.054359][ T8194] usb 2-1: Using ep0 maxpacket: 16 [ 299.061516][ T8194] usb 2-1: too many configurations: 123, using maximum allowed: 8 [ 299.071406][ T8194] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.083574][ T8194] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.095382][ T8194] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.096223][ T9425] sctp: [Deprecated]: syz.5.925 (pid 9425) Use of struct sctp_assoc_value in delayed_ack socket option. [ 299.096223][ T9425] Use struct sctp_sack_info instead [ 299.110053][ T8194] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.126074][ T9428] fuse: Bad value for 'fd' [ 299.142821][ T8194] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.154473][ T8194] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.169185][ T8194] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.181047][ T8194] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.192373][ T8194] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 299.193949][ T8853] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 299.209179][ T8194] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 299.225186][ T8194] usb 2-1: SerialNumber: syz [ 299.237655][ T8194] usb 2-1: config 0 descriptor?? [ 299.253147][ T8194] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input22 [ 299.383592][ T8853] usb 4-1: Using ep0 maxpacket: 8 [ 299.409145][ T8853] usb 4-1: config 0 has an invalid interface number: 252 but max is 0 [ 299.422022][ T8853] usb 4-1: config 0 has no interface number 0 [ 299.429096][ T8853] usb 4-1: too many endpoints for config 0 interface 252 altsetting 212: 174, using maximum allowed: 30 [ 299.447447][ T8853] usb 4-1: config 0 interface 252 altsetting 212 has 0 endpoint descriptors, different from the interface descriptor's value: 174 [ 299.472417][ T8853] usb 4-1: config 0 interface 252 has no altsetting 0 [ 299.482789][ T9435] netlink: 'syz.4.927': attribute type 21 has an invalid length. [ 299.500611][ T8853] usb 4-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=5b.65 [ 299.512878][ T8853] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.532680][ T8853] usb 4-1: Product: syz [ 299.552153][ T8853] usb 4-1: Manufacturer: syz [ 299.560607][ T8853] usb 4-1: SerialNumber: syz [ 299.584865][ T5672] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 299.598491][ T8853] usb 4-1: config 0 descriptor?? [ 299.770565][ T5672] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 299.788050][ T5672] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.819235][ T5672] usb 3-1: Product: syz [ 299.836398][ T5672] usb 3-1: Manufacturer: syz [ 299.852361][ T5672] usb 3-1: SerialNumber: syz [ 299.859988][ T8853] pegasus 4-1:0.252: Missing or invalid endpoints [ 299.909310][ T5672] usb 3-1: config 0 descriptor?? [ 299.916358][ T8853] usb 4-1: USB disconnect, device number 46 [ 299.951437][ T5672] hub 3-1:0.0: bad descriptor, ignoring hub [ 299.978745][ T5672] hub 3-1:0.0: probe with driver hub failed with error -5 [ 300.199679][ T5672] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 300.228204][ T5672] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 300.242628][ T9446] 8021q: VLANs not supported on ip6tnl0 [ 300.252850][ T5672] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 300.263012][ T9445] fuse: blksize only supported for fuseblk [ 300.273403][ T9446] fuse: blksize only supported for fuseblk [ 300.279496][ T5672] usb 3-1: media controller created [ 300.305829][ T30] kauditd_printk_skb: 538 callbacks suppressed [ 300.305849][ T30] audit: type=1400 audit(1782068630.185:1748): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="nicvf0" pid=9444 comm="syz.4.930" [ 300.347073][ T5672] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 300.447043][ T5672] DVB: Unable to find symbol dib7000p_attach() [ 300.469873][ T5672] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 300.575051][ T5672] rc_core: IR keymap rc-dib0700-rc5 not found [ 300.600508][ T5672] Registered IR keymap rc-empty [ 300.620294][ T5672] dvb-usb: could not initialize remote control. [ 300.630332][ T5672] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 300.774427][ T5700] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 300.933632][ T808] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 300.957208][ T5700] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 300.979564][ T5700] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.003200][ T5700] usb 5-1: Product: syz [ 301.018088][ T5700] usb 5-1: Manufacturer: syz [ 301.033971][ T5700] usb 5-1: SerialNumber: syz [ 301.059452][ T5700] usb 5-1: config 0 descriptor?? [ 301.095567][ T808] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 301.109604][ T5700] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 301.148290][ T808] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 301.160541][ T5700] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 301.185202][ T808] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 301.199838][ T5700] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 301.226529][ T808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.238147][ T5700] usb 5-1: media controller created [ 301.272968][ T9453] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 301.300884][ T9450] ------------[ cut here ]------------ [ 301.306596][ T9450] usb 3-1: BOGUS control dir, pipe 80003780 doesn't match bRequestType c0 [ 301.315345][ T9450] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1057/0x18b0, CPU#0: syz.4.931/9450 [ 301.325632][ T9450] Modules linked in: [ 301.329564][ T9450] CPU: 0 UID: 0 PID: 9450 Comm: syz.4.931 Tainted: G L syzkaller #0 PREEMPT(full) [ 301.340438][ T9450] Tainted: [L]=SOFTLOCKUP [ 301.344953][ T9450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 301.355188][ T9450] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 301.360894][ T9450] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89 [ 301.380632][ T9450] RSP: 0018:ffffc90009e8f778 EFLAGS: 00010246 [ 301.386873][ T9450] RAX: 0000000000000000 RBX: ffff8880270ba300 RCX: 0000000080003780 [ 301.395149][ T9450] RDX: ffff88802be76120 RSI: ffffffff8c81afc0 RDI: ffffffff903f6830 [ 301.403192][ T9450] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000 [ 301.411258][ T9450] R10: ffffc90009e8f860 R11: fffff520013d1f18 R12: 1ffff11005764074 [ 301.419417][ T9450] R13: ffff88802bb203a0 R14: ffff88802be76120 R15: 0000000080003780 [ 301.427487][ T9450] FS: 0000000000000000(0000) GS:ffff888125253000(0063) knlGS:00000000f540db40 [ 301.436526][ T9450] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 301.443165][ T9450] CR2: 000000002d916ff8 CR3: 000000007701a000 CR4: 00000000003526f0 [ 301.451389][ T9450] Call Trace: [ 301.454781][ T9450] [ 301.457766][ T9450] usb_start_wait_urb+0x13f/0x5b0 [ 301.462856][ T9450] ? rcu_is_watching+0x15/0xb0 [ 301.465648][ T5700] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 301.467845][ T9450] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 301.481749][ T9450] ? trace_kmalloc+0x2a/0xf0 [ 301.486506][ T9450] usb_control_msg+0x234/0x3e0 [ 301.491325][ T9450] dib0700_i2c_xfer+0xbb9/0xf80 [ 301.496403][ T9450] __i2c_transfer+0x7be/0x1fe0 [ 301.501260][ T9450] ? trace_irq_enable+0x3b/0x140 [ 301.506324][ T9450] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 301.512214][ T9450] ? rt_mutex_lock_nested+0x156/0x1c0 [ 301.517741][ T9450] ? i2c_transfer+0xc8/0x2d0 [ 301.522386][ T9450] i2c_transfer+0x1cc/0x2d0 [ 301.527015][ T9450] i2cdev_ioctl_rdwr+0x460/0x740 [ 301.532005][ T9450] compat_i2cdev_ioctl+0x59f/0x5c0 [ 301.537273][ T9450] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 301.542980][ T9450] ? __fget_files+0x3a2/0x420 [ 301.547749][ T9450] ? __fget_files+0x2a/0x420 [ 301.552564][ T9450] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 301.558263][ T9450] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 301.564021][ T9450] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 301.570161][ T9450] ? kmem_cache_free+0x182/0x650 [ 301.575231][ T9450] ? __se_sys_futex_time32+0x3ab/0x440 [ 301.580734][ T9450] ? rcu_is_watching+0x15/0xb0 [ 301.585631][ T9450] ? rcu_is_watching+0x15/0xb0 [ 301.590431][ T9450] __do_fast_syscall_32+0x23e/0x6f0 [ 301.595732][ T9450] ? do_fast_syscall_32+0x33/0x70 [ 301.600792][ T9450] ? asm_int80_emulation+0x1a/0x20 [ 301.606003][ T9450] ? do_int80_emulation+0x29f/0x550 [ 301.611238][ T9450] do_fast_syscall_32+0x33/0x70 [ 301.616179][ T9450] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 301.622589][ T9450] RIP: 0023:0xf701f0ec [ 301.626753][ T9450] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 301.646701][ T9450] RSP: 002b:00000000f540d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 301.655242][ T9450] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000707 [ 301.663285][ T9450] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 301.671358][ T9450] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 301.679405][ T9450] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 301.687469][ T9450] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 301.695541][ T9450] [ 301.698617][ T9450] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 301.705939][ T9450] CPU: 0 UID: 0 PID: 9450 Comm: syz.4.931 Tainted: G L syzkaller #0 PREEMPT(full) [ 301.716784][ T9450] Tainted: [L]=SOFTLOCKUP [ 301.721131][ T9450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 301.731212][ T9450] Call Trace: [ 301.734520][ T9450] [ 301.737476][ T9450] vpanic+0x56c/0xa60 [ 301.741493][ T9450] ? __pfx__printk+0x10/0x10 [ 301.746117][ T9450] ? __pfx_vpanic+0x10/0x10 [ 301.750668][ T9450] ? is_bpf_text_address+0x292/0x2b0 [ 301.755979][ T9450] ? is_bpf_text_address+0x26/0x2b0 [ 301.761260][ T9450] panic+0xc5/0xd0 [ 301.765068][ T9450] ? __pfx_panic+0x10/0x10 [ 301.769554][ T9450] __warn+0x315/0x4c0 [ 301.773589][ T9450] ? usb_submit_urb+0x1057/0x18b0 [ 301.778678][ T9450] ? usb_submit_urb+0x1057/0x18b0 [ 301.783748][ T9450] __report_bug+0x331/0x530 [ 301.788296][ T9450] ? stack_depot_save_flags+0x250/0x800 [ 301.793903][ T9450] ? usb_submit_urb+0x1057/0x18b0 [ 301.798988][ T9450] ? __pfx___report_bug+0x10/0x10 [ 301.804078][ T9450] ? rcu_is_watching+0x15/0xb0 [ 301.808911][ T9450] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 301.814932][ T9450] ? stack_depot_save_flags+0x3ec/0x800 [ 301.820532][ T9450] report_bug_entry+0x19a/0x290 [ 301.825425][ T9450] ? usb_submit_urb+0x1100/0x18b0 [ 301.830515][ T9450] ? usb_submit_urb+0x1105/0x18b0 [ 301.835735][ T9450] handle_bug+0xce/0x200 [ 301.840021][ T9450] exc_invalid_op+0x1a/0x50 [ 301.844581][ T9450] asm_exc_invalid_op+0x1a/0x20 [ 301.849475][ T9450] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 301.855140][ T9450] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89 [ 301.874773][ T9450] RSP: 0018:ffffc90009e8f778 EFLAGS: 00010246 [ 301.880867][ T9450] RAX: 0000000000000000 RBX: ffff8880270ba300 RCX: 0000000080003780 [ 301.888858][ T9450] RDX: ffff88802be76120 RSI: ffffffff8c81afc0 RDI: ffffffff903f6830 [ 301.896852][ T9450] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000 [ 301.904851][ T9450] R10: ffffc90009e8f860 R11: fffff520013d1f18 R12: 1ffff11005764074 [ 301.912853][ T9450] R13: ffff88802bb203a0 R14: ffff88802be76120 R15: 0000000080003780 [ 301.920868][ T9450] ? usb_submit_urb+0x1091/0x18b0 [ 301.925941][ T9450] usb_start_wait_urb+0x13f/0x5b0 [ 301.931014][ T9450] ? rcu_is_watching+0x15/0xb0 [ 301.935810][ T9450] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 301.941401][ T9450] ? trace_kmalloc+0x2a/0xf0 [ 301.946038][ T9450] usb_control_msg+0x234/0x3e0 [ 301.950838][ T9450] dib0700_i2c_xfer+0xbb9/0xf80 [ 301.955720][ T9450] __i2c_transfer+0x7be/0x1fe0 [ 301.960534][ T9450] ? trace_irq_enable+0x3b/0x140 [ 301.965528][ T9450] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 301.971392][ T9450] ? rt_mutex_lock_nested+0x156/0x1c0 [ 301.976800][ T9450] ? i2c_transfer+0xc8/0x2d0 [ 301.981450][ T9450] i2c_transfer+0x1cc/0x2d0 [ 301.986008][ T9450] i2cdev_ioctl_rdwr+0x460/0x740 [ 301.991009][ T9450] compat_i2cdev_ioctl+0x59f/0x5c0 [ 301.996178][ T9450] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 302.001856][ T9450] ? __fget_files+0x3a2/0x420 [ 302.006571][ T9450] ? __fget_files+0x2a/0x420 [ 302.011228][ T9450] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 302.016816][ T9450] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 302.022315][ T9450] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 302.028322][ T9450] ? kmem_cache_free+0x182/0x650 [ 302.033304][ T9450] ? __se_sys_futex_time32+0x3ab/0x440 [ 302.038805][ T9450] ? rcu_is_watching+0x15/0xb0 [ 302.043598][ T9450] ? rcu_is_watching+0x15/0xb0 [ 302.048402][ T9450] __do_fast_syscall_32+0x23e/0x6f0 [ 302.053627][ T9450] ? do_fast_syscall_32+0x33/0x70 [ 302.058680][ T9450] ? asm_int80_emulation+0x1a/0x20 [ 302.063832][ T9450] ? do_int80_emulation+0x29f/0x550 [ 302.069050][ T9450] do_fast_syscall_32+0x33/0x70 [ 302.073951][ T9450] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 302.080317][ T9450] RIP: 0023:0xf701f0ec [ 302.084415][ T9450] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 302.104057][ T9450] RSP: 002b:00000000f540d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 302.112517][ T9450] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000707 [ 302.120525][ T9450] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 302.129080][ T9450] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 302.137086][ T9450] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 302.145079][ T9450] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 302.153114][ T9450] [ 302.156769][ T9450] Kernel Offset: disabled [ 302.161103][ T9450] Rebooting in 86400 seconds..