last executing test programs: 9m50.544960865s ago: executing program 3 (id=199): sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000014}, 0x4000000) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x185042, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x800000000000006, 0x128202) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x1200000000000000, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1a, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a85a056f5d759ded130e04d528539f3d328973747a75df8a69ea917deb7d6193b3e7772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x6]}}) dup(r1) 9m50.391695637s ago: executing program 3 (id=200): r0 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a00090000000904014cbcda4430000904010101010230000905010960"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000000)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0xd5bc) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r2, r3], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000340)={0x0, 0x0, r2, 0x0, 0x0, 0x0, 0xffffffff, 0x4, {0xffffffff, 0x10, 0x7, 0x400, 0x0, 0x33, 0xd17d, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, "b1eddb851ba62b00d8730000000000000000000800"}}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000340)={0x40, 0x31}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9m47.255766036s ago: executing program 3 (id=219): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) r1 = syz_open_procfs(0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="c4e1fd7f07c74424020600000048b86d2ab7a5a7d17d0d0f23c00f21f835000000000f23f800000000d30f01146c6cb87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c0c4c2393bfe3500042b0000003045f7b300000000430f21e3421d00d5", 0x6e}], 0x1, 0x48, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_SUBDEV_G_EDID(r5, 0xc0285628, &(0x7f0000000240)={0x300, 0x1, 0x71, '\x00', &(0x7f0000000200)=0xa5}) r6 = socket$unix(0x1, 0x5, 0x0) fcntl$lock(r6, 0x5, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x5b4a976f) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000001c0)=0x1, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001800010000000000ffdbdf3502200000ff0000080000000208000100ac1414"], 0x24}}, 0x0) write$cgroup_int(r1, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) ioctl$NILFS_IOCTL_SET_SUINFO(0xffffffffffffffff, 0x40186e8d, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000100)=0x5, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r8 = socket$inet6_udp(0xa, 0x2, 0x0) socket(0x1, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000005f00)={'wlan0\x00'}) 9m46.74469677s ago: executing program 3 (id=223): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) r1 = io_uring_setup(0x289f, &(0x7f00000000c0)={0x0, 0x904b, 0x3000, 0x0, 0x2d6}) poll(&(0x7f0000009b00)=[{r1}], 0x20, 0x72) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d404600000014000000110001"], 0x6c}}, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000000a0a0101002000000000000001000000"], 0x14}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, 0x1, 0x8, 0x201, 0x0, 0x0, {0xf, 0x0, 0x9}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xa97}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4048001}, 0x8004) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x2e0, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {}, {0x2, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x2ac, 0x2, [@TCA_MATCHALL_ACT={0x2a8, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0x1, 0xea, 0x100004}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @remote}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0x128, 0xc, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x80000001, 0x5, 0x0, 0x7fffffff, 0x3}, 0x2}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0xaa, 0x6, "702d7b7ca2605b80fb0bfc581434a99b0850c1e175b9e72d4819877b7effa9a22735ec0257f9035602a8c82a11dcd81f6da90792c83eb930b4651b0842fd8b24ec959c6de4ea9a6fdfff65cf7fc47d67a92fccbcf4fd60e2271bae67b9018d70f2d67b7fcbbfc60cf21233bfcc9ab73d6b2b4e85bed55d04fedeb2f8b470d29a44a7f85406cacfcdfea3e574aeb330772672c017d8cb90971aa75861a28f23ee6cdfb876faaa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x6}}}}, @m_skbedit={0x128, 0x2, 0x0, 0x0, {{0xc}, {0xfffffffffffffdd3, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x8, 0x10000000, 0x7ff, 0x9}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x10001}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}]}, {0xc1, 0x6, "04f1182a84f597cf3b9523440c209d73ff6282fffbe76149d4d47c7f085e00962e0197abc32c39d6c30a5d1b7be4d09795bce6d91a10a26c1a35fc59fbfe2ffe96ec7f206d912712c74135715760f3e6da7c1f87b9a4359bd92c4a106b30e29df4501a7971e68cd5c207fb9a850306331fd3a39ad27e6cd6fef98261cf73c07d26dbc5dd8b3fbb5128be3f63dc090fdb8d78e151445e7a7a17bfe450e03190ce0b6a62bfcdbecf9681515413ed98ca95e4a57d3350cf749b2317a1938d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000200)={0x1d, r5}, 0x10, &(0x7f0000000440)={&(0x7f00000003c0)={0x7, 0x210, 0x800, {0x77359400}, {0x0, 0x2710}, {0x3, 0x1, 0x1, 0x1}, 0x1, @can={{0x3, 0x1, 0x1}, 0x8, 0x1, 0x0, 0x0, "a2c5800a9d126918"}}, 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x48000) 9m46.53329736s ago: executing program 3 (id=225): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000004940)=[{&(0x7f0000003880)="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"}, {&(0x7f0000004980)="3689ac215325a75585eb5cda14cac8cbedeebd3db2fc44bbccefbbb47d145dadd5724130d8a6f886d73cb46e43b4168a94dd98f15810b68dd8582421ba4cd4bbf464a38eccc1cdc20cb1745d0f980af485813c0c505bc9e504833a3fe2bcff3632"}]}}], 0x4000000000000a5, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) (async) r0 = socket(0x11, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2}, 0x14) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) (async, rerun: 32) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000060600ac141414e0000003808a8972bd0b72e4a139697dd2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42e32a097dbd4be5ffca88faca"], 0xdd12}, {&(0x7f0000000440)=ANY=[], 0x10}, {&(0x7f0000007040)={0x270c, 0x3c, 0x100, 0x70bd28, 0x25dfdbfd, "", [@nested={0x4, 0x139}, @typed={0x4, 0x13}, @nested={0x4, 0x12a}, @nested={0x1609, 0x134, 0x0, 0x1, [@typed={0x27, 0x5f, 0x0, 0x0, @binary="37edaaa272e904d234e1cbea72605025fb61bf95f83dcf8ad9fc92ba6e44cb9fa7e00f"}, @nested={0x14a4, 0x77, 0x0, 0x1, [@nested={0x149e, 0x114, 0x0, 0x1, [@typed={0x14, 0xa9, 0x0, 0x0, @ipv6=@mcast1}, @generic="e4b4779b32e8393ce316141ecbfa55b5d3616cd7e4ff450c4ea6573ac5c8da0657e28cf695b196354a98d81003e7ca112a651a61c02cad97279863b58bbfcea2206065e3156e100d53841c32e6a7d4a6378bf9caa6b485e25844", @nested={0x18d, 0x47, 0x0, 0x1, [@generic="dbbafbf3cbd289e74be2bb61c8c16f0834ad1bf83f8d3214ebf269c5c056f943ec51ac028cec7a7574b2919987f7c6ef87cde9b108c1bec2cc05586925f44e5b7e84e569b2668ed8d9052d669ddb1d01844caa90c8a3b5b89d37e475a125795829b239da16e50ec8cce5bc856c522041d1b9b9b5a07ec1117f01afe4484b9599be0f670ecb4d34ddded2ed030bcd13aa2ded0605b284a888eceb409c4b35165c036974a3ecb5b47902", @nested={0x4, 0x88}, @nested={0xd4, 0x100, 0x0, 0x1, [@nested={0xcd, 0xa1, 0x0, 0x1, [@generic="d2491c66919e321c951d32ceb3578309af5114c5e0ff12c087c8c560789a65f77168cd6456afe2e1ac354dd23f5e43c8c4cc98b972dd7fb55834acf91a9befa0c5caa5d8df41e404cb7b9477a9d2db1f2542fe984a03918506b3cc94abe129711bd6143118016196f55d2771cfe8384fda6c829aca95e36c2a5b612c17ee02b1d554466565e3f76c0cf833191b782419e9e5bb14e7c7da091b27674a7a9bedcb9ce3e678c93085c4a1086ce9253428f80d7b933b871b12336d9adce269242f7daf824e9e20ab8b6965"]}]}, @typed={0x8, 0x22, 0x0, 0x0, @fd=r0}]}, @typed={0x8, 0x153, 0x0, 0x0, @uid}, @typed={0x8, 0xea, 0x0, 0x0, @fd=r0}, @nested={0x128c, 0x108, 0x0, 0x1, [@generic="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", @generic="83dcbbb9952ac5e56caade263d8a381047952b72eddf702602afb1e32c05415d353678e278b3d588d767d6ae033664a1317542a30a8a239072145a62d854c7b7c23072d1e7d724c77d907fc95c59877f708cae03bc3f98b7471c2b5700d98f4e58720865648f512c5748141b130243992fe86919419120eee9d275d21bc53416bf6a30d955b7018ebe4a5e", @nested={0x4, 0x12f}, @generic="a86eefdc0d76c7b92e6275ac079ba5ccf093f5c02aad44086a63dbc543bf7129ed93b3cfbe98cb31696d5bdc94ce7b7d678d16ebd6a06f85f3aa73c2c3ad2e6b8bd4436594e39afdc6c50ae8", @generic="85c160e59f3218e1e480e358e0095a486df437eddfb7ac6abe420e8b85f61cfb77bbcd699b858544ddf3bf139ef95263550108b8c9678a35d1a171bf7376fc9cc640aa9fd5400932837444acd4c45245ff851aa3281b1b7f7c718ec59ff228ebc960f663c88c87d3b9a99dd32e54f2cbef6b2209186c0fcfddcbe65052a887b3c44e0133bce0c1f2cc7f68f435e2b5d1bebfae2eea01a537d16137fa46cba41a7ca578d742f4f765c033c23f383ed5861c9ec0600b183fe35565c818", @typed={0x8, 0x153, 0x0, 0x0, @fd=r0}, @generic="78a5f2d352758b2fd9fced4a649915f1e8c068424f0ee34c8c71095a309e45adf6e3aa8205664d3cd7079d410a5ad4ef1a9a0de235263410c57c263531606d8c2a19c20a331250500f0b50e732a167784460ff3e272115fed136f433c87a77bb153f4146b69a99d47f098786024af48edb18a8d46c5e090e28c4c67d921a283da7ed1ec5a8df2297866cc61b3837f840c109dc61cc7ad2a31b3b6fbbdfbc59de4017edc97d5275b85a0682e6a4484069e46f8240d83219097aa43251ad9782bdbd3b0c52015a6ae0ca905e68f258a46a7f54f1cb9db964d5f4235060604349425b85c86c5b2507f3d0"]}]}]}, @nested={0x4, 0x77}, @generic="6f3c7cc23d66e3b9b00d6d3407af866c7fe462442ac8a7de2ddc234eab21043f62c9cd6a28c0ef29bbb5e80b82997363a3933a157b8835a345a5fb9fe5f19a3edaa506e3adbdc527df8b84c29bec8bc07e36ede3a442dd4feada3ceabcf8e13fa6f69038e7497863d5ae5e7b82a9d67f20471a3f6d0773a6f051ae747de5d078a78d2dc7407521cf194e1b82a2d16e0d39661723c70bba5f829fe2a816363e9c9b61b0e8e2371636aa9afff9", @typed={0x8, 0x123, 0x0, 0x0, @u32=0x7ff}, @generic="95d9cf237c8f31d2596dfc6d9c633a4661de7b9da32f7b6aeb67cce08247a21ca2592909eb209eb4686bf8c62b27dfa6a1e8af05a2a7ced959bf8a572a65b646e65171952e069c89b9712560acd2160d551f2c2017ce430837795faa0ee7987dbd7205a7210ce2a7e5b9ad0c15e754259d1da76032ae6795dbd3a6ce78f980a048"]}, @typed={0xc1, 0x56, 0x0, 0x0, @binary="ed1f15c095b7a579c6e866d3124ec073fec247c61fe7183ba4bcd51412e65699f19ccdcbea9b6950e0ac417e8e44b3c4db72f79afc679fbfa789f8d9a60b6dc3631cadec5ce65e9aa8a616bd4277bcefc077e5b6aff188e6153d5b23edb2d5c85b8c89ac06b86988dce8156c462b4537be430c059da1570a8faca86721e2afe02e87b39baf9deb82a4362340c8b801193fd76543f098d62b0e7abcb2ad348376124b3c7fe24ded6e0eac1fa28e970216d1bfa51608af2e46bcd0883c49"}, @generic="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", @generic="8acf1de9b5517ec1744a17914f2c3c6898ae88c54057700d8aabce8273"]}, 0x270c}], 0x3}, 0x20040051) (async, rerun: 32) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x120}}], 0x1, 0x810) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) (async) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xffffffffffffff9c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f00000002c0)=0x6, 0x4) (async) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x10200) (async) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @empty}], 0x10) (async) sendmsg$inet_sctp(r7, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000600)="fd51249d0ffb8c3831005de90990b6f998e48fb7512d0c0daa6bba1c2e4721ef9e4fb40a8c9d7e86f77a99f88bbbc4fd2209dd0848bbc4ba7cf0a636f28b43b8cec782d5fdb9d5f5053e033432325638bc41dfa8f6f8e618d3bf0a7fd4d303af680766789c124d61ef520c3f1bc21fab1023edb6b6ff153477951abae7b82de6a94d7935a661653da1d9210a2c9f5f87b138131174345d3d8d0aed24aebb7d89b7d74104aa44bcf3169d7f940a3100d389ea13e90b0e7a30659ce6dde2b258716bd996c1cd92f4ae0c88d23ec930324a53d63a60", 0xd4}], 0x1, 0x0, 0x0, 0xc044800}, 0x881) (async, rerun: 64) r8 = dup(r7) (rerun: 64) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r8, &(0x7f0000000180)={0x4, 0xffffff95, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) (async) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r8, &(0x7f0000000580)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x10000}}, 0x10) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async, rerun: 32) r9 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) recvmsg(r5, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000500)=""/59, 0x3b}, {&(0x7f0000000b40)=""/245, 0xf5}, {&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/115, 0x73}, {&(0x7f0000000d00)=""/158, 0x9e}, {&(0x7f0000000dc0)=""/213, 0xd5}, {&(0x7f0000000ec0)=""/37, 0x25}, {&(0x7f0000000f00)=""/206, 0xce}, {&(0x7f0000001000)=""/30, 0x1e}], 0x9, &(0x7f0000002840)=""/4096, 0x1000}, 0x12001) (async) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) 9m46.491610318s ago: executing program 3 (id=226): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x38, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x1}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x10000}, @IFLA_TXQLEN={0x8, 0xd, 0x80}]}, 0x38}, 0x1, 0x0, 0x0, 0x240420d1}, 0x4000000) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002200)={'wlan1\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) (async) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x1e, 0x2}, &(0x7f0000000300)) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x1e, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5}, 0x18) (async) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5}, 0x18) sendmmsg(r4, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0xa19afd5e7047374e, 0x4) (async) sendmmsg(r4, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0xa19afd5e7047374e, 0x4) recvmmsg(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000040), 0x10, &(0x7f0000000480)=""/230}}], 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x38, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xfffffff9, 0x2c}}}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4, 0xa}, @NL80211_KEY_IDX={0x5, 0x2, 0x6}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) write$evdev(r7, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) read(r7, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x14) (async) sendmsg$key(0xffffffffffffffff, 0x0, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f0000000000)=0x220882, 0x4) 9m31.300051341s ago: executing program 32 (id=226): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x38, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x1}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x10000}, @IFLA_TXQLEN={0x8, 0xd, 0x80}]}, 0x38}, 0x1, 0x0, 0x0, 0x240420d1}, 0x4000000) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002200)={'wlan1\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) (async) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x1e, 0x2}, &(0x7f0000000300)) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x1e, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5}, 0x18) (async) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5}, 0x18) sendmmsg(r4, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0xa19afd5e7047374e, 0x4) (async) sendmmsg(r4, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0xa19afd5e7047374e, 0x4) recvmmsg(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000040), 0x10, &(0x7f0000000480)=""/230}}], 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x38, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xfffffff9, 0x2c}}}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4, 0xa}, @NL80211_KEY_IDX={0x5, 0x2, 0x6}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) write$evdev(r7, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) read(r7, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x14) (async) sendmsg$key(0xffffffffffffffff, 0x0, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f0000000000)=0x220882, 0x4) 30.807914922s ago: executing program 2 (id=2615): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000100)={'bond0\x00', @ifru_data=0x0}) r1 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) syz_emit_ethernet(0xc2, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000400)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x0, 'lc\x00', 0x28, 0x5, 0x72}, 0x2c) r6 = socket$kcm(0xa, 0x5, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e22, 0x10000, 0xc, 0x9, 0x2}}, 0x44) r8 = io_uring_setup(0x4126, &(0x7f00000007c0)={0x0, 0x0, 0x10000, 0x0, 0x1000000}) io_uring_register$IORING_REGISTER_RING_FDS(r8, 0x13, &(0x7f0000001bc0), 0x2) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x109040, 0x0) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0xc9) r10 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x82002) close(r10) syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) 30.508462632s ago: executing program 0 (id=2618): syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100300000040f055e79841000102030109028e000301080000000b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000d24090201010000000104ee75ff0b89186d5c48d4db"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000cc0)={0x0, &(0x7f0000000840)=[@nested_amd_set_intercept={0x181, 0x30, {0x0, 0x0, 0x7}}, @wr_drn={0x68, 0x20, {0x5, 0x7}}, @in_dx={0x69, 0x20, {0x40c, 0x1}}, @nested_load_code={0x12e, 0x77, {0x0, "b9361001c0b8b6000000ba000000000f3041dad10f6e5d1566bad004b8b1510000efc421e972d282640f3066f30fc77703b931030000b8f3000000ba000000000f30b3f10e01f1f1b881ee3fa38d20c65b0f23c00f21f83502000c000f23f8"}}, @nested_load_syzos={0x136, 0x1b8, {0x3, 0x9bf, [@wr_drn={0x68, 0x20, {0x3, 0x2}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0xab, 0x9, 0xf, 0x8}}, @out_dx={0x6a, 0x28, {0x955d, 0x6, 0x7fffffffffffffff}}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x8, 0x4b, 0x4}}, @nested_amd_vmload={0x182, 0x18, 0x3}, @nested_amd_invlpga={0x17d, 0x20, {0xeeef0000, 0xaa13}}, @code={0xa, 0x68, {"0f0966bad104a812f30097efb911020000b800800000ba000000000f30266664f041815505846c0fc76c74bec4c221bcc3b8010000000f01c10fb0610066450f38805536c74424000b010000c744240200000000ff1c24"}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x5a, 0x621c}}]}}, @nested_load_syzos={0x136, 0x38, {0x1, 0x5, [@uexit={0x0, 0x18, 0x8}]}}, @nested_amd_set_intercept={0x181, 0x30, {0x4, 0x1ff, 0x85e1}}, @nested_amd_invlpga={0x17d, 0x20, {0x3000, 0xcad1}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_vmresume={0x130, 0x18, 0x2}, @uexit={0x0, 0x18, 0xa}, @rdmsr={0x66, 0x18, {0x193}}, @uexit={0x0, 0x18, 0x100000000}, @wrmsr={0x65, 0x20, {0x0, 0x4}}, @wrmsr={0x65, 0x20, {0x277, 0x4}}, @out_dx={0x6a, 0x28, {0x8877, 0x6, 0x8}}, @enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18, 0x1}], 0x437}) ioctl$KVM_GET_STATS_FD_cpu(r0, 0xaece) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a800000010000304017b70000000000000b7b465", @ANYRES32=0x0, @ANYBLOB="00000000000000007800128009000100766c616e000000006800028010000380f8ff0100ffffff7f0800000006000100000000004c0004800c000100000000006a0000000c00050003000000018000000c000100220b0000000000000c00010004000005000000000c000100000000000400000002000100800000000000000008000500", @ANYRES32=r3], 0xa8}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000800)={'bond_slave_1\x00', &(0x7f0000000740)=@ethtool_gstrings={0x1b, 0x1, 0x3, ',FT'}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000080000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[], 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r6) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r9, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_HYPERV_SYNIC2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)) r10 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x20200, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000020000000700000a20000000000a01030000000000000000010000000900010073797ac15500000040000000000000010000000000000200010080000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000038000000050a01020000000000000000010020000c0002400000000000000001"], 0xc0}, 0x1, 0x0, 0x0, 0x60040004}, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r11, 0x5393, &(0x7f0000000000)) 29.244498941s ago: executing program 2 (id=2620): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) open(&(0x7f0000000280)='./file0\x00', 0x2a002, 0x32) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0xb56e2e3f2d9728b3, 0x8, 0x8001, 0x0, 0x9, 0x100000003, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xe) ioctl$KDFONTOP_SET(r6, 0x4b72, 0x0) ioctl$TCSETSW2(r6, 0x80047437, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r5, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x4c00, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f8050006"], 0x80}}, 0x0) 28.944144422s ago: executing program 0 (id=2622): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0xfffffffa, 0x4000}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000280)="ff", 0x1}], 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfc, 0x20}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000000240)={0x10, 0x0, 0xa03, 0x2}, 0xc) socket$netlink(0x10, 0x3, 0x12) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x2) bind$netlink(r7, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000000200)={0x10, 0x0, 0x25dfdc00, 0x200000}, 0xc) r10 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r10, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfb, 0x200}, 0xc) r11 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r11, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc) r12 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r12, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfe, 0x80000}, 0xc) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc) r13 = socket$netlink(0x10, 0x3, 0x4) writev(r13, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 28.852476525s ago: executing program 0 (id=2623): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r2 = socket$inet_sctp(0x2, 0x5, 0x84) (rerun: 32) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, 0x0, 0x0) (async) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007500)=ANY=[@ANYBLOB="300000003e0007012bbd700000000000010700000000fc800e0001806d143e65356e04000000000008000280"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc040) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) (async) syz_emit_ethernet(0x2e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004600002000000000fb02907800000000e09603009404000000009078006400d2"], 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[], 0x3c}], 0x1, 0x0, 0x0, 0x80}, 0x4) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) (async) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x6080, 0x0) (async) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) (async) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x5, &(0x7f00000012c0)=ANY=[@ANYBLOB="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", @ANYRESDEC=r0, @ANYRESDEC=r3], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000140)=r8}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r9, &(0x7f0000000040), 0x0}, 0x20) (async) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$F2FS_IOC_COMPRESS_FILE(0xffffffffffffffff, 0xf518, 0x0) landlock_restrict_self(r6, 0x9) (async) socket$inet6_udp(0xa, 0x2, 0x0) 28.62052229s ago: executing program 0 (id=2625): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x1f) add_key$user(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYRES32, @ANYBLOB, @ANYRES32], 0x50) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x9f, 0x7fff0000}]}) accept4(r2, 0x0, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc2}, &(0x7f0000000180)={0x0, "34fa8f263bcc16a6f423a1b5cdd0a77ab84e2c3504c9405a14cbff940f2aa75db1473267ae0574391894a3836a00b6f9fa4eb2678a8cb1010904425fe63df6ba", 0x19}, 0x48, 0xfffffffffffffffe) request_key(&(0x7f0000001540)='asymmetric\x00', &(0x7f0000001580)={'syz', 0x2}, 0x0, r4) keyctl$set_timeout(0xf, r4, 0x1ff) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000940)=[{0x0, 0x0, &(0x7f00000037c0)=[{&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd", 0x67}, {&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94", 0x12}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0", 0x87}], 0x3, 0x0, 0x0, 0x40088c0}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000002c0)}, 0xf0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000280)={0xb16b}, 0x8) socket(0x10, 0x803, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x0, 0x5}) 28.168494795s ago: executing program 4 (id=2627): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b"], 0x28}}, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="04000000000000000100000000000000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000003fae8a9ad451a707"], 0x48}}, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x55, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x43, 0x1, 0x1, 0xf3, 0x40, 0x1, "", [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x2, 0x6, 0x0, 0x7, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0xfffffffb, 0x8001, 0x7, 0xd6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x3ff, 0x9, 0x8}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x5, 0xf4, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x3, 0x0, 0x1}}}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x81, 0x80, 0x39, 0x20, 0x5}, 0x24, &(0x7f00000001c0)={0x5, 0xf, 0x24, 0x2, [@wireless={0xb, 0x10, 0x1, 0x0, 0xb0, 0x4d, 0xec, 0x217, 0xc}, @ss_container_id={0x14, 0x10, 0x4, 0x8d, "d843f877849f646f1af8c3799b408cc9"}]}, 0x3, [{0x2, &(0x7f0000000280)=@string={0x2}}, {0xbb, &(0x7f0000000380)=@string={0xbb, 0x3, "eba8c2c00afbb773ce0b4ec30e9f8a916499d73eb92a731f40eacdca31b22cd818f98e6db2aadeaf78def96e26c63ffc74b3b7dc74ce052f183279980c59453c3011f03249ea59b7f02ea1b55c8228d2a32e33638d8bfa05bd490af9c7452e93fba5b95315f128e42ac24be28b11662da4edd9655f95282cfb4fc515de1675d26d7cdcc776a09280c27cc3173bdbaafeddb272d6b188c3e622b85c28c81c6cc76de673f08d1cab11e271807d4edc5113ce677c0e01244408c0"}}, {0xf7, &(0x7f0000000440)=@string={0xf7, 0x3, "fcde39da8b484a6b957ef55f81195e964195b9466906393a23ffa6a9b3e9f8472b3fc523cfc55b7dec65a49cae331c3922fee2e4784a5aa63e42d19c97007a54e742ad386ed84398f750153fabbee2820eb719e7b31db32bb01f0fcfffe57f1f78ce8adb1e76a328446ce2b9850e57fa45e095bf17390e5d64ea41319a8691f33645ee7c5e0f6b836f21d21fdb957c576072b05e16c2b1d2ec827f6472ebc12cf61bc08ceaa89718e26e1ef842cbdf1cbee7f3c93c71ec69d6e8e275d2b1ea1f0f0d8490c51c1ebb92bd855d4b4b35055b3baf93f7b2dda93d9b8a12a063ed8700cbe9d4d04bcbf5b2f55be0d597da7dc42d195466"}}]}) sendmsg$can_bcm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x5, 0x609f, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {}, 0x1, @can={{0x3, 0x1}, 0x1, 0x3, 0x0, 0x0, "6ee7ba2197db18bc"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x44801) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000004c0)={"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"}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff02000000017c0000040042800c00018006000600800a000014000280100014800c0016800800b6008847"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x2e}, {&(0x7f0000000b80)="4d14eb8b0cc7e80c5e8954be022211c7c52c74cd20459297467194305a40da3c8ba573ba22987f8b6923cc1f157eabc6dafa03efe8d1e044f5fb446ed8a7a9e0ac7cb406b8c843b7a0ab2c01c3d21be2a4fba2e0d9975d58a15c82b5e7e4f9e394e213462cdbcb9cb52fbebe2796f3adf0344f7e6f4f762bc728f901b4aa2bfdf08336b928992f43e5babdab5bbe5744e49ef1068f87add244db5f2c2a7f466d9a92c31176fd16a0611a9aafe99bfe347a1dd1ca79893da881b91947088d07834a05d6ab1227429a216a876ed89e802134f9ddb9bac22f08fac0ce3bb32b5ea6a1301ba162e9249a", 0xe8}], 0x2}, 0x20004005) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r4, {0x10, 0x9}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 27.657989912s ago: executing program 2 (id=2629): syz_usb_connect$cdc_ncm(0x5, 0x6e, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, 0x0, 0x0) 27.135737672s ago: executing program 0 (id=2630): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_usb_connect$uac2(0x5, 0x94, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x9, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x4, 0x1ccc, 0x5}, @as_header={0x10, 0x24, 0x1, 0x2, 0x1, 0x0, 0x4, 0x8, 0xb8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f0000000700)={0x2c, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="000304001fc100004a04"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac2(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0xa, 0x1a) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) r4 = syz_clone(0xc000, &(0x7f0000000140), 0x0, &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000280)="24bc19df928213d55cc9f9b2de647f31348dc1b729ec5768f4bf4cba971468aefab95c754104c22beaf232b23a07f4d58d7662b4e407c05914edb4efdab90f595d29656264f15bb4ff130a90563dbeb00440d02468bcafa8428971f30f4e338841b8fde315f5b8a6c2d64949ee41a8ff59cf11039b049bfee1b02efd090723060de90c9dfe5e") kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r0, &(0x7f0000000340)={r2, r2, 0x8}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f00005c3000/0x2000)=nil) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r5, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000009c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 25.761346723s ago: executing program 2 (id=2632): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0x5fa, 0xfffffeff, 0x2, {0x1, @raw_data="d1726cfa71d4ed4a810d74ff07ffc9488c698dc4e2b2cff7f2f005ff0fc1da163d964d1ecd6f9f91c61257338d3a02f2243bb2d85ccbaacc4812de079f6b6d42fe5cbbe2b284f9a8e552408c8f46173ce0571ae46e206ba928c34e1c27059ff9d5409ed4440954d1dd4a48452bb880a71684e6270228a478d0e5e4a8de37a918bdf2e18069ff646d4d6edc1ab8b608b5efa46408362badc01775247fd8a0ea6e823c3e0b7cc8438902987e2a0726ec864c6106bb58de94971887df9f5be363eab7f3b1af43096e79"}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000003c0)={0x1, 0x8, 0x4, {0x9, @win={{0x10, 0x0, 0x2, 0x8}, 0x7, 0xe, 0x0, 0x0, 0x0, 0x1}}, 0x4}) syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009bbd8b08e80430ffd1a6012203010902220001000000000904"], 0x0) 25.539846658s ago: executing program 1 (id=2634): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) close(r0) (async) fgetxattr(r0, &(0x7f0000001500)=@random={'system.', 'nl80211\x00'}, 0x0, 0x0) (async) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0xc008) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000280)={0x10000014}) writev(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000fb171366a16e3be0dc001000fff4fd469e33340fe661e4ffa2ff27bde486674217c3f3cc780d5372ceea2165aa6b3b1d12465d79bf3a001d1c252f72696cab81ecb3953c661acbab271733d0b0b16ff946d87ac5f0cb3a421c5e315639ceb3e227e5fe2c314121545b4e8c5e505a3445329e5538fae539c331f6586996d23e8e003699699dbc524d072ec819a28be4e4593a3dcfecaaaab1d6f8f731ff31f1867612197030a6a3cc1804112455a72134032eccf279fd4b3593c73549", @ANYRESHEX=r2, @ANYBLOB="37ec000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r5 = socket(0x25, 0x2, 0xffff) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000180)=@ethtool_sfeatures={0x3b, 0x2, [{0xae9, 0x8}, {0xfffffff6, 0x2}]}}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async) statx(0xffffffffffffffff, 0x0, 0x2000, 0x800, &(0x7f0000002340)) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x189880, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x4780, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) syz_open_dev$video(0x0, 0x8, 0x20202) (async) syz_open_dev$audion(&(0x7f0000000040), 0x100000000021ff, 0x2002) (async) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x101a01) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) 25.443243686s ago: executing program 1 (id=2635): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xfffc}, {0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xfff1, 0xfffa}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x5}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14004810}, 0x24040044) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prlimit64(0x0, 0x7, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000180)={0x1d, r8, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) sendmsg$can_j1939(r7, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x15, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000540)="006187315572b991ec7a3842a38e61d4b9ea5a7575d5e0512bd2a3366ff531b9bec709f3beee52dd04579c310054b7dcc213fbbc354e09295ad7cf58fef163c526afe7f4ac96bbc45510b2c258f6d7fc277d41bf240394d77507de", 0x5b}}, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000180)=@attr_other={0x0, 0x1, 0x1, &(0x7f0000000200)=0xfffffffffffffffd}) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9, '\x00', r2, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r9, &(0x7f0000000280)="4be3eb90b700577dd4704ebd66eb849a7fd56b9e5202c4244485f4aac7a699ad2409aea75cfeb34471eeecdb08551d0db8a6540476ecb033442cd003ab011e997b9c907190a2bc849b5f472f06678400c3416005365417b17c5e2ea14155dea2e8a402bab1f15aa09d07802d45c416ef51cff1c4b4698586ad72ed6caed29bf1c35a6bc99fee0c81c3c20e0da281b9a6d8944d4f8a7f80bcdad19311ccdeb3eca19819edbeccdc121df3d3af75ddb4ebe70dfea43206a90b392c16d516c4982b06bb2d34e68477401b6b5c7a667f35aebba2216d7711edb794b1dd", &(0x7f0000000380)=""/158}, 0x20) r10 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r10, &(0x7f00000008c0)='/', 0x1, 0x0) sendfile(r10, r10, &(0x7f00000001c0), 0x7fa) r11 = socket(0x10, 0x2, 0x0) get_mempolicy(0x0, 0xfffffffffffffffe, 0x5b, &(0x7f0000ffd000/0x2000)=nil, 0x2) r12 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000005440), 0x1, 0x0) writev(r12, &(0x7f00000057c0)=[{0x0, 0x60}, {&(0x7f0000000600)="f83aa7062631ef07a3b43ec9da89d88497e34cb507b7c267d38cc96450dc9313ef45a8dcaaebb8f3fee0380b27a721de938d9daa16ca80bc2af3e73b251a39bd084056dae267dcdfd0374334171a9424752d879eff6d63f117598460889b6e08b63435860ab27761d0d1105a8a45d79201017df1b237f148c38e1b43dff672", 0x7f}, {0x0}], 0x3) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x6, 0x2}, 0x10) 25.228477066s ago: executing program 4 (id=2636): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000020101080000000000000000000000032400198008000100c00c00000800010000000000080001000a000000080002000000000010001640000000080000000200000009100004800c00038008000240cfd680ce38000e80060003400002000006000340000400000c0f029005000100010000000c00028005000100210000000c00028005000100880000003c0019800800020003080000080002004a000000080001008603000008000280"], 0xd8}, 0x1, 0x0, 0x0, 0xc094}, 0x4000) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x100, 0x1, 0x2, 0x3, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_MASTER={0xcc, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x42}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_FLAGS={0x8}]}, 0x100}, 0x1, 0x0, 0x0, 0x40805}, 0x4) 25.019879869s ago: executing program 1 (id=2637): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004580)={0x1, 0x1f, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000010000000000009f09002318110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000ffffff808500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702004100000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000020000000850000008600000018010000202075250000000000202020cb25f8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000060000008500000006000000bf91000000000000b70200000000000085000000d4000000b70000000064000095"], &(0x7f0000004380)='syzkaller\x00', 0x6, 0x20, &(0x7f0000000000)=""/32, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0xb3) 24.980341053s ago: executing program 4 (id=2638): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b001000000000000000000000800000000000004d38526e43ce024239daa45d1e9e79e262e55aefb61792b7ed76088efcc807397689759f834578d3b645be10ecb854067b054fb208f2108e85d887238800000000000000aab1f92ad4786fce21ba206c427d88d95b01390effca5c8693dd8ea9ac6bd4b05cd98b219ff65df374949754140c8d14006328a62611c411047b94b9492de1893bbdcc5e6eb099717ba1c0ef744b81c6d5be043b8023f6dfc58c7924538d591d5ceea1951c595766066cf3e6777114ed7a7d7a4ecbca7ce09d", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c01000013000100000000000000000000000000000000000000000000000001ffffffff0000000000000000000000000000000d040000060a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000000000000000000e3ffffff0100000000000000fffffffffffffffffeffffffffffffff0300000000000000000000000000000000000000000000000000000000000000651700000000000000000000000000000000000000000000feffffff000000000000000000000000840005000a000000000000000000000000000000000000002b00000002000000ac1414aa0000000000000000000000000000000001000400040000007f00000000000000fc0200ffffffff000000000000000000000000002b00000002"], 0x13c}}, 0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) unshare(0xa000200) r4 = semget$private(0x0, 0x3, 0x0) semtimedop(r4, &(0x7f0000000340)=[{0x0, 0x401}, {0x2, 0x2, 0x1000}], 0x2, 0x0) unshare(0x20060400) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x4}]}], {0x14}}, 0xa4}}, 0x0) 24.889518656s ago: executing program 1 (id=2639): r0 = socket$rds(0x15, 0x5, 0x0) fcntl$addseals(r0, 0x409, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="170000000a000000010000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000000010000000000022000000000000001f2a97bbe29d1f5cfd96d2740c00846ebe924a543c4d91b8cd3303b0d0e5e91ce71e820a6a1b2e7a2c172853ba5fd70a616db1419cd1dde52f36a357ea0740c31073710b6dbe35a27f6b7cec8321f6dc625c737a463b998980272adc3943c31f89c6066c1de0008a598abd17b1b00cd1249658baa0ef7dbe4485c2fa37a6c553bae2a133d7d75e19f17980cc29ff1a7c26e2845140b987f96456a6fe5fb464ac56a4585fbe58daaf3d456b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) preadv(r2, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000780)=""/4096, 0x1000}], 0x2, 0x12c, 0x0) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x68000, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendfile(r4, r3, 0x0, 0xf) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r6) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r6, 0x81, 0x1, &(0x7f00000002c0)='(') read$char_usb(r7, &(0x7f0000000300)=""/215, 0xd7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) r9 = fcntl$dupfd(r8, 0x0, r5) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e22, 0x200, @private1, 0x10000100}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r10, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x80000001}, 0x8) bind$inet6(r10, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r10, &(0x7f0000000200)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r10, 0x84, 0x78, &(0x7f00000001c0), 0x4) openat$cgroup_ro(r2, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) sendto$inet6(r8, &(0x7f0000000000)="04", 0x1, 0x20000804, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000004000070127bd7000f6dbdf25037c00000400c2800c00018008000300", @ANYRES32], 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) 24.671943083s ago: executing program 4 (id=2640): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000000740)="170000000200010000ffbe8c5ee17688a2006c000301000a000002a2576e5ed9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000fc0607bdca67a622c45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033ac2dfc060115003901000000000000ea000000000000000062068f5ee50ce5af9b1c56835382e9d969ba5149e9e90539062a80e605007f71174aa964f3c63e5a1b47b63a6323ded241482cfe17c3778a658cfecb61406ae7298f", 0xc0) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r2, 0xf21, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000040)={0x6a, 0x0, 0x20, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000040)={0x6a, 0x0, 0x20, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 24.580624678s ago: executing program 4 (id=2642): syz_usb_connect$cdc_ncm(0x5, 0x6e, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000fddbdf25210000000cffffffffff00000800dc000800000006009800ff010000560400ff"], 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 24.115470658s ago: executing program 2 (id=2644): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000701feffffff02000000017c0000040042800c00018006000600800a00001400028010000b800c000f"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x8, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, 0x2, &(0x7f0000ffb000/0x4000)=nil) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r5, 0x20) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @mcast1, 0xa}, {0xa, 0x0, 0x9, @mcast1}}}, 0x48) pread64(0xffffffffffffffff, 0x0, 0x0, 0x20000000000040) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r6, r6, 0x0, 0x200000) sendto$inet6(0xffffffffffffffff, &(0x7f0000000500)="a4", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x400, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}, 0x1c) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000280)={{{@in=@dev, @in=@loopback}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, 0x0) close(0xffffffffffffffff) r8 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x4000104) 23.543528095s ago: executing program 0 (id=2645): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x5, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@cb_func={0x18, 0x7, 0x4, 0x0, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xff5, &(0x7f0000001840)=""/4085}, 0x94) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40040) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x27, 0x0, 0x801001a, 0x66d, 0xfffe, 0x0, 0x6, 0x0, 0x0, 0x2}}, 0x50) (async) syz_usb_connect(0x3, 0x71, &(0x7f0000000380)=ANY=[@ANYBLOB="12010102b2cbb320dc05010001000102030109025f0002060340000904"], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) (async) chdir(&(0x7f00000003c0)='./bus\x00') 23.062655692s ago: executing program 5 (id=2646): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1800000040000703fcffffff00000100037c000004"], 0x18}, 0x1, 0x0, 0x0, 0x4008011}, 0xc000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth0_virt_wifi\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4) sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000880)={0x14, 0xa, 0xa, 0x201, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20008044}, 0x40) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x6791}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 21.613238452s ago: executing program 1 (id=2647): socket$igmp(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$video4linux(&(0x7f0000003000), 0x7, 0x40) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000003080)={0x0, 0x9e8, 0x8, '\x00', &(0x7f0000003040)=0x6}) r1 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000200)=@mmap={0x1, 0x1, 0x4, 0x1, 0x6, {0x77359400}, {0x1, 0x8, 0x5, 0x9, 0x64, 0x5, ' \x00'}, 0xfffffff7, 0x1, {}, 0x2, 0x0, 0xffffffffffffffff}) close_range(r3, 0xffffffffffffffff, 0x0) syz_usb_connect(0x4, 0x24, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0], 0x0) socket$igmp(0x2, 0x3, 0x2) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_open_dev$video4linux(&(0x7f0000003000), 0x7, 0x40) (async) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000003080)={0x0, 0x9e8, 0x8, '\x00', &(0x7f0000003040)=0x6}) (async) fsopen(&(0x7f0000000000)='exfat\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000200)=@mmap={0x1, 0x1, 0x4, 0x1, 0x6, {0x77359400}, {0x1, 0x8, 0x5, 0x9, 0x64, 0x5, ' \x00'}, 0xfffffff7, 0x1, {}, 0x2}) (async) close_range(r3, 0xffffffffffffffff, 0x0) (async) syz_usb_connect(0x4, 0x24, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0], 0x0) (async) 21.416282486s ago: executing program 5 (id=2648): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x21) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x10201, 0x1, 0xfec00000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, &(0x7f0000000080)=0x10, 0xc00) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f00000000c0)={{0x5e, @empty, 0x4e20, 0x0, 'dh\x00', 0x4, 0x8001, 0x74}, {@rand_addr=0x64010100, 0x4e21, 0x2, 0x5, 0x2, 0x81}}, 0x44) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_open_dev$vcsa(&(0x7f0000000140), 0x61d7337d, 0x155000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@remote, 0x9, 0xf880356c82c258c6, 0x0, 0xd, 0x3, 0xfff7}, 0x20) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x1, &(0x7f00000001c0)=0xd67, 0x4) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x4014, r0}, 0x18) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f00000012c0)={@qipcrtr={0x2a, 0x2, 0x4000}, {&(0x7f0000000280)=""/4096, 0x1000}, &(0x7f0000001280), 0x10}, 0xa0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001380)) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x24, 0x1, 0x4, 0x3, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xa8}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x80d4) r5 = getpgrp(0xffffffffffffffff) ptrace$getregs(0xc, r5, 0x5, &(0x7f00000014c0)=""/247) io_uring_enter(r2, 0x259e, 0x2135, 0x1, &(0x7f00000015c0)={[0x13f]}, 0x8) r6 = syz_open_dev$vbi(&(0x7f0000001600), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_G_CROP(r6, 0xc038563b, &(0x7f0000001640)={0x1, 0x0, {0x2, 0x1, 0x169, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001700)={'ip6_vti0\x00', &(0x7f0000001680)={'syztnl0\x00', 0x0, 0x29, 0x3, 0x8, 0xfffffff4, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, @local, 0x20, 0x40, 0x7, 0x5}}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=@bloom_filter={0x1e, 0x80000000, 0x0, 0xf, 0x40000, r4, 0x6, '\x00', r7, r2, 0x2, 0x5, 0x4, 0x2}, 0x50) bind$alg(r2, &(0x7f00000017c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(khazad-generic)\x00'}, 0x58) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000001840)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001880), 0x40000, 0x0) r11 = dup3(r4, r10, 0x80000) ioctl$SNDCTL_DSP_SPEED(r11, 0xc0045002, &(0x7f00000018c0)=0x2) ptrace$peekuser(0x3, r5, 0x7) ptrace$ARCH_GET_GS(0x1e, r5, &(0x7f0000001900), 0x1004) r12 = mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x400) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000001e40)={0xbc, 0x0, &(0x7f0000001c80)=[@increfs_done={0x40106308, 0x3}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001a40)={@fd={0x66642a85, 0x0, r8}, @fd={0x66642a85, 0x0, r3}, @ptr={0x70742a85, 0x0, &(0x7f0000001940)=""/237, 0xed, 0x0, 0x8}}, &(0x7f0000001ac0)={0x0, 0x18, 0x30}}}, @enter_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001bc0)={@fda={0x66646185, 0x0, 0x1, 0x37}, @fd={0x66642a85, 0x0, r9}, @ptr={0x70742a85, 0x0, &(0x7f0000001b00)=""/156, 0x9c, 0x2, 0x32}}, &(0x7f0000001c40)={0x0, 0x20, 0x38}}, 0x40}, @release, @free_buffer={0x40086303, r12}], 0xc1, 0x0, &(0x7f0000001d40)="93421919c26659ab1a8a69811c1c484d44290d00ffd49e3eed682108b66b68d0db04d9df19c215407f1b009c51d7be076c62fb34380999fdc8fec90fca6f93fc2fdd4fca80335abdfedcf590adda42e1106cc1fa8cf9eb6711b24e16657cbbcfd4025caa54e80bb6000f518ee88e6f4f406cd287990634f8ba4e4ecfda74bb5e1e03f0a649e644de1007ea4a79038884e7bdea5fbb5d03a3df34781286bdae1734a30c91878a579da46b96b16caa7a05e8840d2e2ee4ab51a41016c66b6181be0e"}) dup3(r4, 0xffffffffffffffff, 0x0) 21.141429273s ago: executing program 1 (id=2649): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14df2d5968bb0751a3f1b2efc2fb5d42ce3ef082565a25116146763f943e7bcaee130a9c296f62a0e2bf5aa222000c8c106d", @ANYRES16=r3, @ANYBLOB="010026bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$sierra_net(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r5, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/180, 0xb4}], 0x1, 0xb3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) r8 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r8, 0x8915, &(0x7f0000000680)={'syzkaller0\x00'}) write$cgroup_subtree(r7, &(0x7f00000000c0)=ANY=[], 0x6a) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000040)={0xa4, 0x0, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x7, 0x7f, 0x8, 0x0, 0x1000, 0xe, 0x7, 0xf3, 0xb, 0x9, 0x7, 0x0, 0x0, 0x6, 0x10, 0xa, 0x4, 0x7f, 0x9f, '\x00', 0x6b}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r9) sendmsg$L2TP_CMD_TUNNEL_CREATE(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000100000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 20.910764743s ago: executing program 5 (id=2650): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004580)={0x1, 0x1f, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000010000000000009f09002318110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000ffffff808500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702005000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000020000000850000008600000018010000202075250000000000202020cb25f8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000060000008500000006000000bf91000000000000b70200000000000085000000d4000000b70000000064000095"], &(0x7f0000004380)='syzkaller\x00', 0x6, 0x20, &(0x7f0000000000)=""/32, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0xb3) 20.57546625s ago: executing program 5 (id=2651): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x4840) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42000, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000300, 0x200000000330, 0x200000000360], 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000800000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newtfilter={0x40, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xd}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FLAGS_GEN={0x8}, @TCA_BPF_FD={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 20.165248929s ago: executing program 4 (id=2652): socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000480)=@file={0x1, './file0\x00'}, 0xffffffd1) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x448000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x0, 0x0) r7 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0xfffffffffffffffe) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x28, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x2}, @register_looper, @free_buffer={0x40086303, r7}, @enter_looper], 0x0, 0x0, 0x0}) writev(r2, &(0x7f0000000240), 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000040)={0xf0f024}) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r9, &(0x7f0000000400)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000440)="87", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}, 0xa}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000022c0)='t', 0x1}], 0x1}}], 0x2, 0x48081) socket$unix(0x1, 0x1, 0x0) 19.574813958s ago: executing program 5 (id=2653): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x6c, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x0, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x10001, 0x20000000, 0x3c, 0x3}, 0x600000000d}}]}, {0x4, 0x6, "a98a1b8847ae9daf746daf5141c369fa08011d3f1ef9ea60aaac314728e8b2114c0b1824d61c6bbcf1d248c8b76f96d681ebcf16ba25f97e657bb86fbef9451b1e0634656c049ead63671e595285fface886de785918e79d422e678fcc572417ccb1490e00ec2abd2ca244707b3568e439426280e8d60c3dc6b1b073aecac204549986d1c2b010f4307cd1541f0c2f0b3db1aea34fdb22ff42efbf89c6613425022374a3d774a237d4545d090157db18c3aac624f829402714adf2a96f4800e475815b99c142f07b6033c6aefa6f50208346618813904d0f1420"}, {0xc}, {0x68}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10008800}, 0x40) syz_emit_ethernet(0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20010840) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004d968119f68f58d94773b9ab884100003c"], 0x0) socket$l2tp(0x2, 0x2, 0x73) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, {0x0, 0x4e22, [0xfffffffc, 0x0, 0xcd7e], [], 0x0, [0x1]}, 0x0, 0x2000}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "06010000"}]}, 0x54}}, 0x20000080) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 19.191891644s ago: executing program 2 (id=2654): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$can_bcm(0x1d, 0x2, 0x2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000280)="b8010000000f01c166b848000f00d00f32b8010000000f01c1650fc72cd365660f38825ec4c4c279006002660f38808a000000000f005c5164b9fd080000b80001c0feba000000000f30", 0x4a}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000180)=@x86={0x40, 0x21, 0xc, 0x0, 0x75, 0x81, 0x10, 0x0, 0xf7, 0x86, 0x9, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xff, 0x0, '\x00', 0x8}) mprotect(&(0x7f0000ff3000/0x6000)=nil, 0x6000, 0x1000003) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r5) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e21, 0x3, @loopback, 0xa5}}, 0x0, 0x0, 0x4a, 0x0, "36488d3c68672392ba5e1481a48a7d777ffa027561ca04a92c76698388da092d7c976eee23519139ec0daee328cda3c269e2f3a3d632040fe87487286a5b83c91bd663926f4cbd7aa2ba54a86d23505d"}, 0xd8) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e23, 0x27bf, @dev={0xfe, 0x80, '\x00', 0x5}, 0x3}, 0x1c) 15.833220922s ago: executing program 5 (id=2655): memfd_create(&(0x7f0000000080)='%\x00', 0x3) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000)=0x3, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2a, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xc, 0xe}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) symlinkat(0x0, 0xffffffffffffffff, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x420200, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5393, &(0x7f0000000000)) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0xfffffffffffffffd) r8 = semget$private(0x0, 0x3, 0x40) semctl$GETZCNT(r8, 0x3, 0xf, 0x0) ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f0000000000)) 4.225634953s ago: executing program 33 (id=2645): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x5, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@cb_func={0x18, 0x7, 0x4, 0x0, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xff5, &(0x7f0000001840)=""/4085}, 0x94) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40040) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x27, 0x0, 0x801001a, 0x66d, 0xfffe, 0x0, 0x6, 0x0, 0x0, 0x2}}, 0x50) (async) syz_usb_connect(0x3, 0x71, &(0x7f0000000380)=ANY=[@ANYBLOB="12010102b2cbb320dc05010001000102030109025f0002060340000904"], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) (async) chdir(&(0x7f00000003c0)='./bus\x00') 3.602474407s ago: executing program 34 (id=2649): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14df2d5968bb0751a3f1b2efc2fb5d42ce3ef082565a25116146763f943e7bcaee130a9c296f62a0e2bf5aa222000c8c106d", @ANYRES16=r3, @ANYBLOB="010026bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$sierra_net(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r5, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/180, 0xb4}], 0x1, 0xb3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) r8 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r8, 0x8915, &(0x7f0000000680)={'syzkaller0\x00'}) write$cgroup_subtree(r7, &(0x7f00000000c0)=ANY=[], 0x6a) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000040)={0xa4, 0x0, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x7, 0x7f, 0x8, 0x0, 0x1000, 0xe, 0x7, 0xf3, 0xb, 0x9, 0x7, 0x0, 0x0, 0x6, 0x10, 0xa, 0x4, 0x7f, 0x9f, '\x00', 0x6b}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r9) sendmsg$L2TP_CMD_TUNNEL_CREATE(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000100000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 0s ago: executing program 35 (id=2652): socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000480)=@file={0x1, './file0\x00'}, 0xffffffd1) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x448000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x0, 0x0) r7 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0xfffffffffffffffe) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x28, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x2}, @register_looper, @free_buffer={0x40086303, r7}, @enter_looper], 0x0, 0x0, 0x0}) writev(r2, &(0x7f0000000240), 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000040)={0xf0f024}) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r9, &(0x7f0000000400)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000440)="87", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}, 0xa}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000022c0)='t', 0x1}], 0x1}}], 0x2, 0x48081) socket$unix(0x1, 0x1, 0x0) kernel console output (not intermixed with test programs): ce number 21 [ 640.009324][ T5789] usb 5-1: USB disconnect, device number 29 [ 640.102929][ T5718] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 640.316733][ T5789] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 640.521739][ T5718] usb 6-1: USB disconnect, device number 119 [ 640.640661][T12844] udevd[12844]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 640.773274][T14529] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 640.782726][ T5789] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 640.808980][T14529] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 640.957488][ T5789] usb 5-1: Using ep0 maxpacket: 32 [ 640.974115][ T5789] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 640.991495][ T5789] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 641.002540][ T5789] usb 5-1: config 1 interface 2 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 641.018678][ T5684] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 641.021066][ T5789] usb 5-1: Duplicate descriptor for config 1 interface 2 altsetting 0, skipping [ 641.036943][ T5789] usb 5-1: too many endpoints for config 1 interface 2 altsetting 1: 255, using maximum allowed: 30 [ 641.052095][ T5789] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 641.079412][ T6018] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 641.094881][ T5789] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 641.105186][ T5789] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.110253][ T6018] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.136927][ T5789] usb 5-1: Product: syz [ 641.141663][ T5789] usb 5-1: Manufacturer: syz [ 641.146278][ T5789] usb 5-1: SerialNumber: syz [ 641.156891][T14538] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2406'. [ 641.200844][ T5684] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 641.244816][ T5684] usb 1-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 641.283385][ T5684] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.319903][ T5684] usb 1-1: Product: ꂣ䛘췇踤싰问센盱籲ⴆ堶都엪㏠뛟쬶쏕쨈῕賩雉ㄼ镧헫똰ᛓ輟ন犪䩡范鱨ꙅ⑚诟ກ溉ᕸ䫆︄埮㘳뛟⽧枯 [ 641.384774][ T5684] usb 1-1: Manufacturer: 髹衜ئ䳖Ꮋ嬛 [ 641.407938][ T5684] usb 1-1: SerialNumber: ӿ [ 641.614729][ T5789] usb 5-1: USB disconnect, device number 30 [ 641.634166][ T6018] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 641.672446][ T6018] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.695371][T12844] udevd[12844]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 641.789237][ T5623] Bluetooth: hci5: command tx timeout [ 641.831640][T14562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 641.849424][T14562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 641.985083][T14564] x_tables: duplicate underflow at hook 4 [ 642.024575][ T6018] netdevsim netdevsim2 netdevsim1 (unregistering): left promiscuous mode [ 642.036040][ T6018] netdevsim netdevsim2 netdevsim1 (unregistering): left allmulticast mode [ 642.051838][ T5684] usb 1-1: interface 1 not found [ 642.085012][ T5684] usb 1-1: USB disconnect, device number 26 [ 642.091911][ T6018] team0: Port device netdevsim1 removed [ 642.113271][ T6018] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 642.132390][ T6018] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.189173][T14564] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 642.274003][T14515] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.295067][T14515] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.315877][T14569] fuse: Bad value for 'user_id' [ 642.331242][T14515] bridge_slave_0: entered allmulticast mode [ 642.341086][T14569] fuse: Bad value for 'user_id' [ 642.367039][T14515] bridge_slave_0: entered promiscuous mode [ 642.413551][ T6018] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 642.424739][ T6018] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.475605][T14515] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.487193][T14515] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.498216][T14515] bridge_slave_1: entered allmulticast mode [ 642.513754][T14515] bridge_slave_1: entered promiscuous mode [ 642.653474][T14515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 642.722234][T14515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 642.892072][T14515] team0: Port device team_slave_0 added [ 642.907053][T14515] team0: Port device team_slave_1 added [ 643.024220][T14515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 643.055339][T14515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 643.089362][ T5684] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 643.098333][T14515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 643.229495][T14515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 643.250896][T14515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 643.286117][ T5684] usb 1-1: Using ep0 maxpacket: 8 [ 643.310049][ T5684] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 643.342194][ T5684] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 643.361558][T14515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 643.385161][ T5684] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.409489][ T9] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 643.435717][ T5684] usb 1-1: Product: syz [ 643.453899][ T5684] usb 1-1: Manufacturer: syz [ 643.486162][ T5684] usb 1-1: SerialNumber: syz [ 643.486405][ T6018] bridge0: port 3(team0) entered disabled state [ 643.516759][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 643.516770][ T29] audit: type=1326 audit(1779219603.729:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14598 comm="syz.1.2418" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc39379ce59 code=0x7ffc0000 [ 643.550306][ T29] audit: type=1326 audit(1779219603.729:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14598 comm="syz.1.2418" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc39379ce59 code=0x7ffc0000 [ 643.556707][ T5684] usb 1-1: config 0 descriptor?? [ 643.585896][T14601] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2418'. [ 643.595990][ T6018] bridge_slave_1: left allmulticast mode [ 643.601961][ T6018] bridge_slave_1: left promiscuous mode [ 643.611532][ T6018] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.621679][ T29] audit: type=1326 audit(1779219603.729:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14598 comm="syz.1.2418" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc39379ce59 code=0x7ffc0000 [ 643.650848][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 643.656148][T14602] netlink: 'syz.1.2418': attribute type 10 has an invalid length. [ 643.671260][ T29] audit: type=1326 audit(1779219603.729:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14598 comm="syz.1.2418" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc39379ce59 code=0x7ffc0000 [ 643.699273][ T6018] bridge_slave_0: left allmulticast mode [ 643.706916][ T6018] bridge_slave_0: left promiscuous mode [ 643.714331][ T6018] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.725906][ T29] audit: type=1326 audit(1779219603.729:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14598 comm="syz.1.2418" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc39379ce59 code=0x7ffc0000 [ 643.754419][ T9] usb 6-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 643.780058][ T29] audit: type=1326 audit(1779219603.729:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14598 comm="syz.1.2418" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc39379ce59 code=0x7ffc0000 [ 643.827066][ T9] usb 6-1: config 4 has an invalid interface number: 3 but max is 2 [ 643.845930][ T29] audit: type=1326 audit(1779219603.729:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14598 comm="syz.1.2418" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc39379ce59 code=0x7ffc0000 [ 643.874715][ T5623] Bluetooth: hci5: command tx timeout [ 643.879455][ T5684] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 643.886587][ T29] audit: type=1326 audit(1779219603.739:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14598 comm="syz.1.2418" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc39379ce59 code=0x7ffc0000 [ 643.929280][ T9] usb 6-1: config 4 has an invalid interface number: 191 but max is 2 [ 643.949768][ T29] audit: type=1326 audit(1779219603.799:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14598 comm="syz.1.2418" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc39379ce59 code=0x7ffc0000 [ 643.970986][ T9] usb 6-1: config 4 has no interface number 0 [ 644.007796][ T9] usb 6-1: config 4 has no interface number 1 [ 644.009396][ T29] audit: type=1326 audit(1779219603.799:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14598 comm="syz.1.2418" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc39379cbc2 code=0x7ffc0000 [ 644.024813][ T9] usb 6-1: config 4 interface 2 altsetting 250 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 644.087158][ T9] usb 6-1: config 4 interface 2 altsetting 250 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 644.109079][ T9] usb 6-1: config 4 interface 2 altsetting 250 endpoint 0xD has an invalid bInterval 165, changing to 11 [ 644.121402][ T9] usb 6-1: config 4 interface 2 altsetting 250 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 644.163564][ T9] usb 6-1: config 4 interface 2 altsetting 250 endpoint 0xE has invalid maxpacket 1080, setting to 64 [ 644.189386][ T9] usb 6-1: config 4 interface 2 altsetting 250 has a duplicate endpoint with address 0x3, skipping [ 644.223937][ T9] usb 6-1: config 4 interface 2 altsetting 250 has a duplicate endpoint with address 0x4, skipping [ 644.245177][ T9] usb 6-1: config 4 interface 3 altsetting 7 has an endpoint descriptor with address 0x13, changing to 0x3 [ 644.278958][ T9] usb 6-1: config 4 interface 3 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 644.308755][ T9] usb 6-1: config 4 interface 3 altsetting 7 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 644.333146][ T9] usb 6-1: config 4 interface 3 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 644.371825][ T9] usb 6-1: config 4 interface 3 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 644.414560][ T9] usb 6-1: config 4 interface 3 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 644.464050][ T9] usb 6-1: config 4 interface 191 altsetting 3 has a duplicate endpoint with address 0x3, skipping [ 644.497998][ T9] usb 6-1: config 4 interface 191 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 644.521835][ T9] usb 6-1: config 4 interface 191 altsetting 3 has a duplicate endpoint with address 0x8, skipping [ 644.555467][ T9] usb 6-1: config 4 interface 191 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 644.575151][ T9] usb 6-1: config 4 interface 191 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 644.600429][ T9] usb 6-1: config 4 interface 2 has no altsetting 0 [ 644.617280][ T9] usb 6-1: config 4 interface 3 has no altsetting 0 [ 644.625654][ T9] usb 6-1: config 4 interface 191 has no altsetting 0 [ 644.641578][ T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=022b, bcdDevice=51.56 [ 644.650973][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.660668][ T9] usb 6-1: Product:   [ 644.665390][ T9] usb 6-1: Manufacturer: Н [ 644.686034][ T9] usb 6-1: SerialNumber: 咜徥Ზ걗㔾종잸㮠ꕅ铎ล㖬琜㨬ᕳ [ 644.719038][ T6018] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 644.732450][ T6018] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 644.743441][ T6018] bond0 (unregistering): Released all slaves [ 644.755970][ T6018] bond1 (unregistering): Released all slaves [ 644.772103][ T6018] bond2 (unregistering): (slave veth3): Releasing active interface [ 644.782468][ T6018] bond2 (unregistering): Released all slaves [ 644.800637][ T6018] bond3 (unregistering): Released all slaves [ 644.814922][ T6018] bond4 (unregistering): Released all slaves [ 644.835323][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 644.899670][T11606] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 644.934509][T14515] hsr_slave_0: entered promiscuous mode [ 644.941609][T14515] hsr_slave_1: entered promiscuous mode [ 644.948244][T14515] debugfs: 'hsr0' already exists in 'hsr' [ 644.954261][T14515] Cannot create hsr debugfs directory [ 644.972737][ T6018] P: left promiscuous mode [ 644.996498][T14591] ip6tnl0: Caught tx_queue_len zero misconfig [ 645.013951][ T9] appletouch 6-1:4.2: Could not find int-in endpoint [ 645.021081][ T9] appletouch 6-1:4.2: probe with driver appletouch failed with error -5 [ 645.030819][ T9] usbhid 6-1:4.2: couldn't find an input interrupt endpoint [ 645.048399][T11606] usb 5-1: device descriptor read/64, error -71 [ 645.144914][ T9] usb 6-1: USB disconnect, device number 120 [ 645.303815][T11606] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 645.458257][T11606] usb 5-1: device descriptor read/64, error -71 [ 645.588738][T11606] usb usb5-port1: attempt power cycle [ 645.744529][ T6018] hsr_slave_0: left promiscuous mode [ 645.751108][ T6018] hsr_slave_1: left promiscuous mode [ 645.761187][ T6018] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 645.781003][ T6018] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 645.827308][ T6018] veth1_macvtap: left promiscuous mode [ 645.847002][ T6018] veth0_macvtap: left promiscuous mode [ 645.863139][ T6018] veth1_vlan: left promiscuous mode [ 645.877037][ T6018] veth0_vlan: left promiscuous mode [ 645.950828][T11606] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 645.961304][ T5623] Bluetooth: hci5: command tx timeout [ 645.994381][T11606] usb 5-1: device descriptor read/8, error -71 [ 646.248416][T11606] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 646.280744][T11606] usb 5-1: device descriptor read/8, error -71 [ 646.361707][ T6018] team_slave_1 (unregistering): left promiscuous mode [ 646.368837][ T6018] team_slave_1 (unregistering): left allmulticast mode [ 646.379312][ T6018] team0 (unregistering): Port device team_slave_1 removed [ 646.401782][ T6018] team_slave_0 (unregistering): left promiscuous mode [ 646.408619][T11606] usb usb5-port1: unable to enumerate USB device [ 646.415213][ T6018] team_slave_0 (unregistering): left allmulticast mode [ 646.431847][ T6018] team0 (unregistering): Port device team_slave_0 removed [ 646.632176][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 646.945242][ T5684] gspca_zc3xx: reg_r err -71 [ 647.124934][ T6018] IPVS: stop unused estimator thread 0... [ 647.547555][ T5684] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 647.565666][ T5684] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 647.616510][ T5684] usb 1-1: USB disconnect, device number 27 [ 647.670254][T14658] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2425'. [ 647.720575][T14658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2425'. [ 647.743563][T14515] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 647.806622][T14515] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 647.834363][T14515] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 647.876183][T14515] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 647.907322][T14515] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 647.938181][T14515] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 647.958380][T14515] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 648.013232][T14515] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 648.027661][ T5623] Bluetooth: hci5: command tx timeout [ 648.249298][ T5789] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 648.253919][T14515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 648.329088][T14515] 8021q: adding VLAN 0 to HW filter on device team0 [ 648.367307][ T6018] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.374528][ T6018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 648.412582][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.415215][ T5789] usb 5-1: Using ep0 maxpacket: 16 [ 648.419803][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 648.443400][ T5789] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 648.481254][ T5789] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 648.511700][ T5789] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 648.535108][ T5789] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 648.563145][ T5789] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.598146][ T5789] usb 5-1: config 0 descriptor?? [ 648.641459][T14515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 648.770343][T14515] veth0_vlan: entered promiscuous mode [ 648.802326][T14515] veth1_vlan: entered promiscuous mode [ 648.913030][T14515] veth0_macvtap: entered promiscuous mode [ 648.949777][T14719] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 648.962082][T14515] veth1_macvtap: entered promiscuous mode [ 649.000715][T14515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 649.030267][T14515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 649.052939][T14721] netlink: 'syz.5.2439': attribute type 89 has an invalid length. [ 649.064258][ T6023] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.091834][ T6023] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.104500][T14721] netlink: 'syz.5.2439': attribute type 3 has an invalid length. [ 649.118264][ T5684] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 649.135106][ T6023] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.164597][ T6023] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.307750][ T5684] usb 1-1: Using ep0 maxpacket: 16 [ 649.326234][ T5684] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 649.334807][ T5684] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 649.361430][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 649.371700][ T5684] usb 1-1: config 0 has no interface number 0 [ 649.384596][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 649.409862][ T5684] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 649.450166][ T5684] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.485093][ T5684] usb 1-1: Product: syz [ 649.500752][ T5684] usb 1-1: Manufacturer: syz [ 649.527038][ T5684] usb 1-1: SerialNumber: syz [ 649.543645][ T6026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 649.603821][ T5684] usb 1-1: config 0 descriptor?? [ 649.609555][ T6026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 649.855832][ T5684] uvcvideo 1-1:0.105: Found UVC 0.00 device syz (046d:08d3) [ 649.906934][ T5684] uvcvideo 1-1:0.105: No valid video chain found. [ 650.146262][ T5789] microsoft 0003:045E:07DA.002C: unknown main item tag 0x0 [ 650.174586][ T5789] microsoft 0003:045E:07DA.002C: unknown main item tag 0x0 [ 650.217340][ T5789] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.002C/input/input61 [ 650.280803][ T5789] microsoft 0003:045E:07DA.002C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 650.627941][ T5718] usb 6-1: new low-speed USB device number 121 using dummy_hcd [ 650.717966][ T5684] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 650.777902][ T5718] usb 6-1: device descriptor read/64, error -71 [ 650.888915][ T5684] usb 3-1: Using ep0 maxpacket: 32 [ 650.896790][ T5684] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 650.911997][ T5684] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 650.925333][ T5684] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 650.934519][ T5684] usb 3-1: config 1 has no interface number 0 [ 650.940914][ T5684] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 650.957173][ T5684] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 650.976241][ T5684] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 650.991156][ T5684] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.023218][ T5684] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 651.027966][ T5718] usb 6-1: new low-speed USB device number 122 using dummy_hcd [ 651.167917][ T5718] usb 6-1: device descriptor read/64, error -71 [ 651.219818][ T5684] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 651.287812][ T5718] usb usb6-port1: attempt power cycle [ 651.376367][ T5789] usb 5-1: USB disconnect, device number 35 [ 651.638595][ T46] usb 3-1: USB disconnect, device number 22 [ 651.645107][ T5718] usb 6-1: new low-speed USB device number 123 using dummy_hcd [ 651.655411][ T46] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 651.678329][ T5718] usb 6-1: device descriptor read/8, error -71 [ 651.837909][ T5789] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 651.917966][ T5718] usb 6-1: new low-speed USB device number 124 using dummy_hcd [ 651.938718][ T5718] usb 6-1: device descriptor read/8, error -71 [ 651.989238][ T5789] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 652.000454][ T5789] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 652.012105][ T5789] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 652.022232][ T5789] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 652.030613][ T5789] usb 5-1: Manufacturer: syz [ 652.039003][ T5789] usb 5-1: config 0 descriptor?? [ 652.048241][ T5718] usb usb6-port1: unable to enumerate USB device [ 652.135297][ T5741] usb 1-1: USB disconnect, device number 28 [ 652.456808][ T5789] pyra 0003:1E7D:2CF6.002D: unknown main item tag 0x0 [ 652.464721][ T5789] pyra 0003:1E7D:2CF6.002D: unknown main item tag 0x0 [ 652.472646][ T5789] pyra 0003:1E7D:2CF6.002D: unknown main item tag 0x0 [ 652.482156][ T5789] pyra 0003:1E7D:2CF6.002D: unknown main item tag 0x0 [ 652.490024][ T5789] pyra 0003:1E7D:2CF6.002D: unknown main item tag 0x0 [ 652.497035][ T5789] pyra 0003:1E7D:2CF6.002D: unknown main item tag 0x0 [ 652.505065][ T5789] pyra 0003:1E7D:2CF6.002D: unknown main item tag 0x0 [ 652.516386][ T5789] pyra 0003:1E7D:2CF6.002D: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 652.538397][ T5718] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 652.677779][ T5718] usb 3-1: device descriptor read/64, error -71 [ 652.917771][ T5718] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 653.047728][ T5718] usb 3-1: device descriptor read/64, error -71 [ 653.158225][ T5718] usb usb3-port1: attempt power cycle [ 653.277502][ T5741] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 653.300623][ T46] hid-generic 00A0:0006:0003.002E: unknown main item tag 0x0 [ 653.313118][T14788] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 653.324532][ T46] hid-generic 00A0:0006:0003.002E: hidraw1: HID v0.05 Device [syz0] on syz0 [ 653.451328][ T5741] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 653.461549][ T5741] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.461728][ T5789] pyra 0003:1E7D:2CF6.002D: couldn't init struct pyra_device [ 653.471039][ T5741] usb 1-1: Product: syz [ 653.482746][ T5789] pyra 0003:1E7D:2CF6.002D: couldn't install mouse [ 653.489866][ T5741] usb 1-1: Manufacturer: syz [ 653.489885][ T5741] usb 1-1: SerialNumber: syz [ 653.493056][ T5741] usb 1-1: config 0 descriptor?? [ 653.500266][ T5718] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 653.508151][ T5741] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 653.522744][ T5789] pyra 0003:1E7D:2CF6.002D: probe with driver pyra failed with error -5 [ 653.525937][ T5741] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 653.544023][ T5718] usb 3-1: device descriptor read/8, error -71 [ 653.545983][ T5741] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 653.564340][ T5741] usb 1-1: media controller created [ 653.578595][ T46] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 653.600155][ T5741] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 653.669311][ T5741] DVB: Unable to find symbol mt352_attach() [ 653.711336][T14786] dvb-usb: bulk message failed: -22 (7/0) [ 653.721581][ T5741] DVB: Unable to find symbol nxt6000_attach() [ 653.733441][ T5741] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 653.740003][ T46] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 653.746491][ T5741] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input62 [ 653.764489][ T46] usb 6-1: config 1 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 653.769088][ T5741] dvb-usb: schedule remote query interval to 1000 msecs. [ 653.780357][ T46] usb 6-1: config 1 interface 0 has no altsetting 0 [ 653.799759][ T5718] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 653.805133][ T5741] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 653.824531][ T46] usb 6-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice= 0.40 [ 653.833937][ T46] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.838414][ T5741] dvb-usb: bulk message failed: -22 (7/0) [ 653.850282][ T46] usb 6-1: Product: syz [ 653.850388][T14786] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 653.855588][ T46] usb 6-1: Manufacturer: syz [ 653.864688][ T5741] dvb-usb: bulk message failed: -22 (7/0) [ 653.868833][T14786] block device autoloading is deprecated and will be removed. [ 653.870449][ T5718] usb 3-1: device descriptor read/8, error -71 [ 653.891630][ T46] usb 6-1: SerialNumber: syz [ 653.998980][ T5718] usb usb3-port1: unable to enumerate USB device [ 654.048271][ T5718] usb 1-1: USB disconnect, device number 29 [ 654.104959][ T5718] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 654.152588][ T46] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input63 [ 654.172069][ T4979] bcm5974 6-1:1.0: could not read from device [ 654.186229][ T4979] bcm5974 6-1:1.0: could not read from device [ 654.193885][ T46] usb 6-1: USB disconnect, device number 125 [ 654.202285][ T4979] bcm5974 6-1:1.0: could not read from device [ 654.416065][ T46] usb 5-1: USB disconnect, device number 36 [ 654.767974][ T46] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 654.935175][ T46] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 654.954064][ T46] usb 5-1: config 0 has no interface number 0 [ 654.964369][ T46] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 654.988439][ T46] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 655.006248][ T46] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 655.027205][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.063786][ T46] usb 5-1: config 0 descriptor?? [ 655.074494][T14804] ptrace attach of ""[14811] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[14804] [ 655.544378][ T46] hid_parser_main: 14 callbacks suppressed [ 655.544401][ T46] prodikeys 0003:041E:2801.002F: unknown main item tag 0x0 [ 655.588836][ T46] prodikeys 0003:041E:2801.002F: unknown main item tag 0x0 [ 655.636949][ T46] prodikeys 0003:041E:2801.002F: unknown main item tag 0x4 [ 655.658777][ T46] prodikeys 0003:041E:2801.002F: unknown main item tag 0x0 [ 655.684539][ T46] prodikeys 0003:041E:2801.002F: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.4-1/input1 [ 655.769128][ T46] hid_prodikeys: hid-prodikeys: failed to find output report [ 655.769128][ T46] [ 655.981770][T14853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2472'. [ 656.057467][ T5741] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 656.227482][ T5741] usb 3-1: Using ep0 maxpacket: 16 [ 656.239570][ T5741] usb 3-1: unable to get BOS descriptor or descriptor too short [ 656.248653][ T5741] usb 3-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 656.263269][ T5741] usb 3-1: config 1 interface 0 has no altsetting 0 [ 656.274803][ T5741] usb 3-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.40 [ 656.286225][ T5741] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.294280][ T46] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 656.314997][ T5741] usb 3-1: Product: syz [ 656.324533][ T5741] usb 3-1: Manufacturer: syz [ 656.337888][ T5741] usb 3-1: SerialNumber: syz [ 656.438017][ T46] usb 6-1: Using ep0 maxpacket: 32 [ 656.450122][ T5682] usb 5-1: USB disconnect, device number 37 [ 656.458007][ T46] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 656.479677][ T46] usb 6-1: config 0 has no interface number 0 [ 656.500123][ T46] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 656.512192][ T46] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.525381][ T46] usb 6-1: Product: syz [ 656.531108][ T46] usb 6-1: Manufacturer: syz [ 656.536338][T14799] ALSA: mixer_oss: invalid OSS volume 'WSZ' [ 656.543152][ T46] usb 6-1: SerialNumber: syz [ 656.554963][ T46] usb 6-1: config 0 descriptor?? [ 656.599915][ T5741] usbhid 3-1:1.0: can't add hid device: -22 [ 656.625142][ T5741] usbhid 3-1:1.0: probe with driver usbhid failed with error -22 [ 656.648963][ T5741] usb 3-1: USB disconnect, device number 27 [ 656.678134][ T5789] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 656.710161][T14880] bond2: peer notification delay (315) is not a multiple of miimon (100), value rounded to 300 ms [ 656.730905][T14880] bond2 (unregistering): Released all slaves [ 656.840127][ T5789] usb 1-1: unable to get BOS descriptor or descriptor too short [ 656.861971][ T5789] usb 1-1: config 63 has an invalid interface number: 66 but max is 0 [ 656.879772][ T5789] usb 1-1: config 63 contains an unexpected descriptor of type 0x2, skipping [ 656.890146][ T5789] usb 1-1: config 63 has an invalid descriptor of length 9, skipping remainder of the config [ 656.901013][ T5789] usb 1-1: config 63 has no interface number 0 [ 656.907244][ T5789] usb 1-1: config 63 interface 66 has no altsetting 0 [ 656.917227][ T5789] usb 1-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 656.926756][ T5789] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.935349][ T5789] usb 1-1: Product: syz [ 656.939991][ T5789] usb 1-1: Manufacturer: syz [ 656.944600][ T5789] usb 1-1: SerialNumber: syz [ 656.968250][ T46] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 656.980761][ T46] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 657.097495][ T5741] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 657.164348][ T5789] uvcvideo 1-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 657.172603][ T5789] uvcvideo 1-1:63.66: No valid video chain found. [ 657.182021][ T5789] usb 1-1: USB disconnect, device number 30 [ 657.249987][ T5741] usb 5-1: Using ep0 maxpacket: 8 [ 657.256423][ T5741] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 657.269003][ T5741] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 657.280835][ T5741] usb 5-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 657.290238][ T5741] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.299252][ T5741] usb 5-1: Product: syz [ 657.303454][ T5741] usb 5-1: Manufacturer: syz [ 657.310764][ T5741] usb 5-1: SerialNumber: syz [ 657.578543][ T5741] usb 5-1: USB disconnect, device number 38 [ 657.617595][ T5698] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 657.636667][T12878] udevd[12878]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 657.790595][ T5698] usb 1-1: config 63 has an invalid interface number: 66 but max is 0 [ 657.800728][ T5698] usb 1-1: config 63 contains an unexpected descriptor of type 0x2, skipping [ 657.810220][ T5698] usb 1-1: config 63 has an invalid interface number: 1 but max is 0 [ 657.818743][ T5698] usb 1-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 657.829450][ T5698] usb 1-1: config 63 has 2 interfaces, different from the descriptor's value: 1 [ 657.840105][ T5698] usb 1-1: config 63 has no interface number 0 [ 657.846435][ T5698] usb 1-1: too many endpoints for config 63 interface 1 altsetting 28: 36, using maximum allowed: 30 [ 657.858030][ T5698] usb 1-1: config 63 interface 1 altsetting 28 has 0 endpoint descriptors, different from the interface descriptor's value: 36 [ 657.872467][ T5698] usb 1-1: config 63 interface 66 has no altsetting 0 [ 657.883847][ T5698] usb 1-1: config 63 interface 1 has no altsetting 0 [ 657.891148][ T5698] usb 1-1: New USB device found, idVendor=0471, idProduct=0307, bcdDevice=e4.df [ 657.900720][ T5698] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.151075][ T5698] usb 1-1: string descriptor 0 read error: -71 [ 658.190156][ T5698] uvcvideo 1-1:63.66: Found UVC 0.07 device (0471:0307) [ 658.205344][T14857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 658.223930][ T5698] uvcvideo 1-1:63.66: No valid video chain found. [ 658.234618][T14857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 658.255000][ T5698] usb 1-1: USB disconnect, device number 31 [ 658.274224][ T46] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 658.302135][ T46] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 658.328931][ T46] usb 6-1: USB disconnect, device number 126 [ 658.457745][ T5684] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 658.526677][T14898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2487'. [ 658.621832][ T5684] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 658.631309][ T5684] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.639573][ T5684] usb 5-1: Product: syz [ 658.644114][ T5684] usb 5-1: Manufacturer: syz [ 658.652447][ T5684] usb 5-1: SerialNumber: syz [ 658.660378][ T5684] usb 5-1: config 0 descriptor?? [ 658.763114][T14903] tap0: tun_chr_ioctl cmd 1074025677 [ 658.769300][T14903] tap0: linktype set to 776 [ 658.776390][T14903] tap0: tun_chr_ioctl cmd 2147767507 [ 658.890724][T14905] FAULT_INJECTION: forcing a failure. [ 658.890724][T14905] name failslab, interval 1, probability 0, space 0, times 0 [ 658.905465][T14905] CPU: 0 UID: 0 PID: 14905 Comm: syz.5.2490 Tainted: G L syzkaller #0 PREEMPT(full) [ 658.905494][T14905] Tainted: [L]=SOFTLOCKUP [ 658.905504][T14905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 658.905515][T14905] Call Trace: [ 658.905522][T14905] [ 658.905530][T14905] dump_stack_lvl+0xe8/0x150 [ 658.905556][T14905] should_fail_ex+0x412/0x560 [ 658.905584][T14905] should_failslab+0xa8/0x100 [ 658.905613][T14905] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 658.905637][T14905] ? __alloc_skb+0x186/0x7d0 [ 658.905774][T14905] ? __alloc_skb+0x1d0/0x7d0 [ 658.905794][T14905] ? __local_bh_enable_ip+0xd0/0x130 [ 658.905818][T14905] __alloc_skb+0x1d0/0x7d0 [ 658.905845][T14905] netlink_sendmsg+0x5d4/0xb40 [ 658.905926][T14905] ? __pfx_netlink_sendmsg+0x10/0x10 [ 658.905953][T14905] ? aa_sock_msg_perm+0xf1/0x1b0 [ 658.906053][T14905] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 658.906085][T14905] ? __pfx_netlink_sendmsg+0x10/0x10 [ 658.906108][T14905] sock_write_iter+0x49b/0x4f0 [ 658.906160][T14905] ? __pfx_sock_write_iter+0x10/0x10 [ 658.906200][T14905] do_iter_readv_writev+0x619/0x8c0 [ 658.906228][T14905] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 658.906255][T14905] ? bpf_lsm_file_permission+0x9/0x20 [ 658.906278][T14905] ? security_file_permission+0x75/0x260 [ 658.906334][T14905] ? rw_verify_area+0x255/0x4d0 [ 658.906361][T14905] vfs_writev+0x33c/0x990 [ 658.906389][T14905] ? __pfx_vfs_writev+0x10/0x10 [ 658.906421][T14905] ? __fget_files+0x2a/0x420 [ 658.906446][T14905] ? __fget_files+0x3a0/0x420 [ 658.906466][T14905] ? __fget_files+0x2a/0x420 [ 658.906494][T14905] do_writev+0x154/0x2e0 [ 658.906515][T14905] ? __pfx_do_writev+0x10/0x10 [ 658.906540][T14905] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.906561][T14905] do_syscall_64+0x15f/0xf80 [ 658.906586][T14905] ? trace_irq_disable+0x3b/0x140 [ 658.906610][T14905] ? clear_bhb_loop+0x40/0x90 [ 658.906632][T14905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.906649][T14905] RIP: 0033:0x7f524c39ce59 [ 658.906665][T14905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 658.906680][T14905] RSP: 002b:00007f524a5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 658.906699][T14905] RAX: ffffffffffffffda RBX: 00007f524c615fa0 RCX: 00007f524c39ce59 [ 658.906712][T14905] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000010 [ 658.906724][T14905] RBP: 00007f524a5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 658.906735][T14905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 658.906746][T14905] R13: 00007f524c616038 R14: 00007f524c615fa0 R15: 00007f524c73fa48 [ 658.906775][T14905] [ 659.223421][ T5684] usb 5-1: Firmware version (0.0) predates our first public release. [ 659.232636][ T5684] usb 5-1: Please update to version 0.2 or newer [ 659.305728][ T5684] usb 5-1: USB disconnect, device number 39 [ 659.490814][T14923] netlink: 'syz.0.2495': attribute type 8 has an invalid length. [ 659.737949][ T46] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 659.762432][T14933] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.2498'. [ 659.818136][T14725] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 659.899770][ T46] usb 1-1: unable to get BOS descriptor or descriptor too short [ 659.908474][ T46] usb 1-1: not running at top speed; connect to a high speed hub [ 659.917117][ T46] usb 1-1: config 133 has an invalid interface number: 190 but max is 0 [ 659.926510][ T46] usb 1-1: config 133 has no interface number 0 [ 659.933369][ T46] usb 1-1: config 133 interface 190 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 659.945124][ T46] usb 1-1: config 133 interface 190 has no altsetting 0 [ 659.955075][ T46] usb 1-1: New USB device found, idVendor=083a, idProduct=4507, bcdDevice=31.24 [ 659.964586][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.974562][ T46] usb 1-1: Product: syz [ 659.980529][ T46] usb 1-1: Manufacturer: syz [ 659.985146][ T46] usb 1-1: SerialNumber: syz [ 659.987459][T14725] usb 6-1: Using ep0 maxpacket: 8 [ 659.997156][T14725] usb 6-1: config index 0 descriptor too short (expected 2075, got 27) [ 660.006112][T14725] usb 6-1: config 0 has an invalid interface number: 200 but max is 0 [ 660.008207][T11606] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 660.014495][T14725] usb 6-1: config 0 has no interface number 0 [ 660.031204][T14725] usb 6-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 660.041140][T14725] usb 6-1: config 0 interface 200 has no altsetting 0 [ 660.050215][T14725] usb 6-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 660.059752][T14725] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.068104][T14725] usb 6-1: Product: syz [ 660.072295][T14725] usb 6-1: Manufacturer: syz [ 660.076887][T14725] usb 6-1: SerialNumber: syz [ 660.084561][T14725] usb 6-1: config 0 descriptor?? [ 660.172324][T11606] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 660.183833][T11606] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 660.194955][T11606] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 660.205403][T11606] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.221478][T14936] netlink: 'syz.0.2495': attribute type 8 has an invalid length. [ 660.224114][T14923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.241460][T11606] usb 5-1: config 0 descriptor?? [ 660.259160][T14923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.272439][ T46] usb 1-1: Could not find all expected endpoints [ 660.287229][ T46] usb 1-1: USB disconnect, device number 32 [ 660.360988][T14725] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.200/input/input64 [ 660.385897][T14725] usb 6-1: USB disconnect, device number 127 [ 660.656398][T11606] cm6533_jd 0003:0D8C:0022.0030: unknown main item tag 0x0 [ 660.664304][T11606] cm6533_jd 0003:0D8C:0022.0030: unknown main item tag 0x0 [ 660.689483][T11606] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0030/input/input65 [ 660.721225][T11606] cm6533_jd 0003:0D8C:0022.0030: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 660.777614][ T5684] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 660.841731][T14943] netlink: 'syz.0.2501': attribute type 9 has an invalid length. [ 660.850913][T14943] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.2501'. [ 660.944077][ T5684] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 660.963562][ T5684] usb 3-1: config 1 has no interface number 0 [ 660.976022][T14947] FAULT_INJECTION: forcing a failure. [ 660.976022][T14947] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 660.978005][ T5684] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 661.005296][T14947] CPU: 1 UID: 0 PID: 14947 Comm: syz.5.2502 Tainted: G L syzkaller #0 PREEMPT(full) [ 661.005323][T14947] Tainted: [L]=SOFTLOCKUP [ 661.005329][T14947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 661.005340][T14947] Call Trace: [ 661.005348][T14947] [ 661.005355][T14947] dump_stack_lvl+0xe8/0x150 [ 661.005379][T14947] should_fail_ex+0x412/0x560 [ 661.005406][T14947] _copy_from_iter+0x1d3/0x1670 [ 661.005510][T14947] ? rcu_is_watching+0x15/0xb0 [ 661.005536][T14947] ? __pfx__copy_from_iter+0x10/0x10 [ 661.005564][T14947] ? netlink_sendmsg+0x650/0xb40 [ 661.005587][T14947] ? skb_put+0x11b/0x210 [ 661.005611][T14947] netlink_sendmsg+0x6c0/0xb40 [ 661.005643][T14947] ? __pfx_netlink_sendmsg+0x10/0x10 [ 661.005671][T14947] ? aa_sock_msg_perm+0xf1/0x1b0 [ 661.005696][T14947] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 661.005722][T14947] ? __pfx_netlink_sendmsg+0x10/0x10 [ 661.005744][T14947] sock_write_iter+0x49b/0x4f0 [ 661.005765][T14947] ? __pfx_sock_write_iter+0x10/0x10 [ 661.005802][T14947] do_iter_readv_writev+0x619/0x8c0 [ 661.005831][T14947] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 661.005859][T14947] ? bpf_lsm_file_permission+0x9/0x20 [ 661.005881][T14947] ? security_file_permission+0x75/0x260 [ 661.005902][T14947] ? rw_verify_area+0x255/0x4d0 [ 661.005927][T14947] vfs_writev+0x33c/0x990 [ 661.005953][T14947] ? __pfx_vfs_writev+0x10/0x10 [ 661.005984][T14947] ? __fget_files+0x2a/0x420 [ 661.006005][T14947] ? __fget_files+0x3a0/0x420 [ 661.006022][T14947] ? __fget_files+0x2a/0x420 [ 661.006047][T14947] do_writev+0x154/0x2e0 [ 661.006067][T14947] ? __pfx_do_writev+0x10/0x10 [ 661.006091][T14947] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.006111][T14947] do_syscall_64+0x15f/0xf80 [ 661.006137][T14947] ? trace_irq_disable+0x3b/0x140 [ 661.006160][T14947] ? clear_bhb_loop+0x40/0x90 [ 661.006181][T14947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.006198][T14947] RIP: 0033:0x7f524c39ce59 [ 661.006215][T14947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 661.006228][T14947] RSP: 002b:00007f524a5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 661.006244][T14947] RAX: ffffffffffffffda RBX: 00007f524c615fa0 RCX: 00007f524c39ce59 [ 661.006257][T14947] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000010 [ 661.006268][T14947] RBP: 00007f524a5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 661.006278][T14947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 661.006289][T14947] R13: 00007f524c616038 R14: 00007f524c615fa0 R15: 00007f524c73fa48 [ 661.006317][T14947] [ 661.267108][ T5684] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 661.278771][ T5684] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 661.287865][ T5684] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 661.298665][ T5684] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 65535, setting to 64 [ 661.329115][ T5684] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 661.338417][ T5684] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.365401][ T5684] usb 3-1: Product: syz [ 661.378548][ T5684] usb 3-1: Manufacturer: syz [ 661.393502][ T5684] usb 3-1: SerialNumber: syz [ 661.431234][T14940] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 661.658998][T14940] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 661.666531][T14940] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 661.838466][T11606] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 661.876338][T14940] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 661.908987][ T46] usb 5-1: reset high-speed USB device number 40 using dummy_hcd [ 661.998569][T11606] usb 6-1: Using ep0 maxpacket: 8 [ 662.006470][T11606] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 662.018337][T11606] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 662.027282][T11606] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 662.044876][T11606] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 662.060576][T11606] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 662.071751][T11606] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.094351][T11606] hub 6-1:1.0: bad descriptor, ignoring hub [ 662.101400][T11606] hub 6-1:1.0: probe with driver hub failed with error -5 [ 662.110469][T11606] cdc_wdm 6-1:1.0: skipping garbage [ 662.117322][T11606] cdc_wdm 6-1:1.0: skipping garbage [ 662.133950][T11606] cdc_wdm 6-1:1.0: cdc-wdm1: USB WDM device [ 662.140991][T11606] cdc_wdm 6-1:1.0: Unknown control protocol [ 662.299047][T14940] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 662.312438][T14940] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 662.324067][ T5684] cdc_ncm 3-1:1.1: bind() failure [ 662.533227][T14725] usb 3-1: USB disconnect, device number 28 [ 662.617911][ T5684] usb 6-1: USB disconnect, device number 2 [ 663.099788][T14969] netlink: 188 bytes leftover after parsing attributes in process `syz.5.2510'. [ 663.122985][T14971] SET target dimension over the limit! [ 663.131376][T14969] netlink: 116 bytes leftover after parsing attributes in process `syz.5.2510'. [ 663.150850][T14969] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2510'. [ 663.272744][T14980] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2514'. [ 663.310005][T14980] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2514'. [ 663.369299][ T5682] usb 5-1: USB disconnect, device number 40 [ 663.437484][ T5684] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 663.456769][T14987] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 663.466282][T14987] PKCS7: Only support pkcs7_signedData type [ 663.567487][ T5682] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 663.598553][ T5684] usb 3-1: too many configurations: 65, using maximum allowed: 8 [ 663.615374][ T5684] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 663.637001][ T5684] usb 3-1: config 0 has no interfaces? [ 663.651975][ T5684] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 663.671279][ T5684] usb 3-1: config 0 has no interfaces? [ 663.681160][ T5684] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 663.699573][ T5684] usb 3-1: config 0 has no interfaces? [ 663.710744][ T5684] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 663.729290][ T5684] usb 3-1: config 0 has no interfaces? [ 663.744013][T14989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.759735][ T5684] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 663.775701][ T5684] usb 3-1: config 0 has no interfaces? [ 663.781700][T14989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.791599][ T5684] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 663.805479][ T5684] usb 3-1: config 0 has no interfaces? [ 663.817868][ T5684] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 663.834134][ T5684] usb 3-1: config 0 has no interfaces? [ 663.845010][ T5684] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 663.856356][ T5684] usb 3-1: config 0 has no interfaces? [ 663.863119][ T5684] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 663.866426][ T5682] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 663.877111][ T5684] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.890135][ T5682] usb 5-1: can't read configurations, error -71 [ 663.940348][ T5684] usb 3-1: config 0 descriptor?? [ 664.000837][T14994] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2517'. [ 664.014541][T14994] hsr_slave_0 (unregistering): left promiscuous mode [ 664.206254][ T46] usb 3-1: USB disconnect, device number 29 [ 664.418192][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 664.418209][ T29] audit: type=1326 audit(1779219624.629:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15000 comm="syz.5.2520" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524c39ce59 code=0x7ffc0000 [ 664.474553][ T29] audit: type=1326 audit(1779219624.639:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15000 comm="syz.5.2520" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524c39ce59 code=0x7ffc0000 [ 664.525731][ T29] audit: type=1326 audit(1779219624.679:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15000 comm="syz.5.2520" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f524c39ce59 code=0x7ffc0000 [ 664.575855][ T29] audit: type=1326 audit(1779219624.679:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15000 comm="syz.5.2520" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524c39ce59 code=0x7ffc0000 [ 664.614907][ T29] audit: type=1326 audit(1779219624.679:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15000 comm="syz.5.2520" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f524c39ce59 code=0x7ffc0000 [ 664.643530][ T29] audit: type=1326 audit(1779219624.679:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15000 comm="syz.5.2520" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524c39ce59 code=0x7ffc0000 [ 664.672235][ T29] audit: type=1326 audit(1779219624.679:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15000 comm="syz.5.2520" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f524c39ce59 code=0x7ffc0000 [ 664.722555][ T29] audit: type=1326 audit(1779219624.679:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15000 comm="syz.5.2520" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524c39ce59 code=0x7ffc0000 [ 664.776792][ T29] audit: type=1326 audit(1779219624.679:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15000 comm="syz.5.2520" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f524c39ce59 code=0x7ffc0000 [ 664.830267][ T29] audit: type=1326 audit(1779219624.679:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15000 comm="syz.5.2520" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524c39ce59 code=0x7ffc0000 [ 665.274084][T15015] SET target dimension over the limit! [ 665.566579][T15023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 665.596675][T15023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 665.690049][T15028] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2529'. [ 665.797725][ T46] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 665.840191][T15032] libceph: resolve '0..' (ret=-3): failed [ 665.928119][ T46] usb 1-1: device descriptor read/64, error -71 [ 666.098186][ T5682] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 666.167735][ T46] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 666.257723][ T5682] usb 3-1: Using ep0 maxpacket: 16 [ 666.267294][ T5682] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 666.281901][ T5682] usb 3-1: config 0 has an invalid descriptor of length 49, skipping remainder of the config [ 666.301873][ T5682] usb 3-1: config 0 has no interface number 0 [ 666.308587][ T46] usb 1-1: device descriptor read/64, error -71 [ 666.323196][ T5682] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 666.338975][ T5682] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.372461][ T5682] usb 3-1: Product: syz [ 666.382585][ T5682] usb 3-1: Manufacturer: syz [ 666.388770][ T5682] usb 3-1: SerialNumber: syz [ 666.401462][ T5682] usb 3-1: config 0 descriptor?? [ 666.415943][ T5682] uvcvideo 3-1:0.105: Found Unit with invalid ID 0 [ 666.429043][ T46] usb usb1-port1: attempt power cycle [ 666.570404][T15040] kvm: pic: non byte write [ 666.635740][ T5682] uvcvideo 3-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 666.665079][ T5682] uvcvideo 3-1:0.105: No valid video chain found. [ 666.725376][ T5682] usb 3-1: USB disconnect, device number 30 [ 666.768382][ T46] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 666.810706][ T46] usb 1-1: device descriptor read/8, error -71 [ 666.916846][T15051] Cannot find add_set index 0 as target [ 666.964218][T15053] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2536'. [ 666.974410][T15054] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2536'. [ 666.983322][T15053] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2536'. [ 667.058075][ T46] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 667.078832][ T46] usb 1-1: device descriptor read/8, error -71 [ 667.188675][ T46] usb usb1-port1: unable to enumerate USB device [ 667.447723][ T5684] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 667.500895][T15069] : entered promiscuous mode [ 667.607535][ T5684] usb 5-1: device descriptor read/64, error -71 [ 667.747975][ T46] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 667.887500][ T5684] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 667.910376][ T46] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 667.921506][ T46] usb 6-1: config 0 has no interface number 0 [ 667.930970][ T46] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 667.941422][ T46] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.950415][ T46] usb 6-1: Product: syz [ 667.954870][ T46] usb 6-1: Manufacturer: syz [ 667.960453][ T46] usb 6-1: SerialNumber: syz [ 667.969767][ T46] usb 6-1: config 0 descriptor?? [ 668.037729][ T5684] usb 5-1: device descriptor read/64, error -71 [ 668.168081][ T5684] usb usb5-port1: attempt power cycle [ 668.527494][ T5684] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 668.548319][ T5684] usb 5-1: device descriptor read/8, error -71 [ 668.594931][ T46] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 668.607255][ T46] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 668.620579][ T46] asix 6-1:0.251: probe with driver asix failed with error -71 [ 668.630217][T15077] FAULT_INJECTION: forcing a failure. [ 668.630217][T15077] name failslab, interval 1, probability 0, space 0, times 0 [ 668.635075][ T46] usb 6-1: USB disconnect, device number 3 [ 668.649250][T15077] CPU: 0 UID: 0 PID: 15077 Comm: syz.0.2545 Tainted: G L syzkaller #0 PREEMPT(full) [ 668.649279][T15077] Tainted: [L]=SOFTLOCKUP [ 668.649286][T15077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 668.649296][T15077] Call Trace: [ 668.649304][T15077] [ 668.649311][T15077] dump_stack_lvl+0xe8/0x150 [ 668.649338][T15077] should_fail_ex+0x412/0x560 [ 668.649366][T15077] should_failslab+0xa8/0x100 [ 668.649394][T15077] __kmalloc_cache_noprof+0x88/0x660 [ 668.649417][T15077] ? tcf_proto_create+0x65/0x330 [ 668.649520][T15077] tcf_proto_create+0x65/0x330 [ 668.649544][T15077] tc_new_tfilter+0x12ff/0x1780 [ 668.649586][T15077] ? __pfx_tc_new_tfilter+0x10/0x10 [ 668.649619][T15077] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 668.649694][T15077] ? __pfx_tc_new_tfilter+0x10/0x10 [ 668.649711][T15077] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 668.649738][T15077] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 668.649760][T15077] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 668.649780][T15077] ? ref_tracker_free+0x693/0x840 [ 668.649836][T15077] ? __pfx_ref_tracker_free+0x10/0x10 [ 668.649858][T15077] ? __asan_memcpy+0x40/0x70 [ 668.649886][T15077] ? __skb_clone+0x63/0x7a0 [ 668.649919][T15077] netlink_rcv_skb+0x232/0x4b0 [ 668.649945][T15077] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 668.649966][T15077] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 668.650000][T15077] ? netlink_deliver_tap+0x2e/0x1b0 [ 668.650023][T15077] ? netlink_deliver_tap+0x2e/0x1b0 [ 668.650051][T15077] netlink_unicast+0x75c/0x8e0 [ 668.650082][T15077] netlink_sendmsg+0x813/0xb40 [ 668.650113][T15077] ? __pfx_netlink_sendmsg+0x10/0x10 [ 668.650140][T15077] ? aa_sock_msg_perm+0xf1/0x1b0 [ 668.650165][T15077] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 668.650191][T15077] ____sys_sendmsg+0x972/0x9f0 [ 668.650245][T15077] ? __might_fault+0xaf/0x130 [ 668.650271][T15077] ? __pfx_____sys_sendmsg+0x10/0x10 [ 668.650303][T15077] ? import_iovec+0x73/0xa0 [ 668.650331][T15077] ___sys_sendmsg+0x2a5/0x360 [ 668.650354][T15077] ? __lock_acquire+0x6b5/0x2cf0 [ 668.650386][T15077] ? __pfx____sys_sendmsg+0x10/0x10 [ 668.650442][T15077] ? __fget_files+0x2a/0x420 [ 668.650462][T15077] ? __fget_files+0x3a0/0x420 [ 668.650492][T15077] __x64_sys_sendmsg+0x1bd/0x2a0 [ 668.650519][T15077] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 668.650551][T15077] ? __pfx_ksys_write+0x10/0x10 [ 668.650583][T15077] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.650602][T15077] do_syscall_64+0x15f/0xf80 [ 668.650627][T15077] ? trace_irq_disable+0x3b/0x140 [ 668.650651][T15077] ? clear_bhb_loop+0x40/0x90 [ 668.650672][T15077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.650689][T15077] RIP: 0033:0x7fb542b9ce59 [ 668.650706][T15077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 668.650720][T15077] RSP: 002b:00007fb54398e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 668.650739][T15077] RAX: ffffffffffffffda RBX: 00007fb542e15fa0 RCX: 00007fb542b9ce59 [ 668.650751][T15077] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 668.650763][T15077] RBP: 00007fb54398e090 R08: 0000000000000000 R09: 0000000000000000 [ 668.650774][T15077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 668.650783][T15077] R13: 00007fb542e16038 R14: 00007fb542e15fa0 R15: 00007fb542f3fa48 [ 668.650811][T15077] [ 668.797456][ T5684] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 669.031179][ T5684] usb 5-1: device descriptor read/8, error -71 [ 669.157839][ T5684] usb usb5-port1: unable to enumerate USB device [ 669.196112][T15084] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 669.247604][T11606] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 669.253780][T15090] FAULT_INJECTION: forcing a failure. [ 669.253780][T15090] name failslab, interval 1, probability 0, space 0, times 0 [ 669.270631][T15090] CPU: 0 UID: 0 PID: 15090 Comm: syz.5.2549 Tainted: G L syzkaller #0 PREEMPT(full) [ 669.270649][T15090] Tainted: [L]=SOFTLOCKUP [ 669.270653][T15090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 669.270659][T15090] Call Trace: [ 669.270664][T15090] [ 669.270668][T15090] dump_stack_lvl+0xe8/0x150 [ 669.270685][T15090] should_fail_ex+0x412/0x560 [ 669.270702][T15090] should_failslab+0xa8/0x100 [ 669.270720][T15090] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 669.270735][T15090] ? __alloc_skb+0x1d0/0x7d0 [ 669.270748][T15090] ? __local_bh_enable_ip+0xd0/0x130 [ 669.270761][T15090] __alloc_skb+0x1d0/0x7d0 [ 669.270776][T15090] netlink_dump+0x1d8/0xe10 [ 669.270791][T15090] ? __netlink_lookup+0xc6/0x8b0 [ 669.270814][T15090] ? __netlink_lookup+0x7e4/0x8b0 [ 669.270831][T15090] ? __pfx_netlink_dump+0x10/0x10 [ 669.270850][T15090] ? netlink_lookup+0x30/0x200 [ 669.270862][T15090] ? netlink_lookup+0x30/0x200 [ 669.270873][T15090] ? netlink_lookup+0x30/0x200 [ 669.270888][T15090] __netlink_dump_start+0x5cb/0x7e0 [ 669.270905][T15090] netlink_diag_handler_dump+0x19e/0x240 [ 669.270981][T15090] ? __pfx_netlink_diag_handler_dump+0x10/0x10 [ 669.270993][T15090] ? __pfx_netlink_diag_dump+0x10/0x10 [ 669.271003][T15090] ? __pfx_netlink_diag_dump_done+0x10/0x10 [ 669.271015][T15090] ? sock_diag_lock_handler+0x19/0x290 [ 669.271065][T15090] ? sock_diag_lock_handler+0x19/0x290 [ 669.271080][T15090] sock_diag_rcv_msg+0x4cc/0x600 [ 669.271094][T15090] netlink_rcv_skb+0x232/0x4b0 [ 669.271108][T15090] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 669.271121][T15090] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 669.271140][T15090] ? netlink_deliver_tap+0x2e/0x1b0 [ 669.271153][T15090] ? netlink_deliver_tap+0x2e/0x1b0 [ 669.271169][T15090] netlink_unicast+0x75c/0x8e0 [ 669.271187][T15090] netlink_sendmsg+0x813/0xb40 [ 669.271205][T15090] ? __pfx_netlink_sendmsg+0x10/0x10 [ 669.271220][T15090] ? aa_sock_msg_perm+0xf1/0x1b0 [ 669.271235][T15090] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 669.271250][T15090] ? __pfx_netlink_sendmsg+0x10/0x10 [ 669.271262][T15090] sock_write_iter+0x49b/0x4f0 [ 669.271275][T15090] ? __pfx_sock_write_iter+0x10/0x10 [ 669.271299][T15090] do_iter_readv_writev+0x619/0x8c0 [ 669.271317][T15090] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 669.271333][T15090] ? bpf_lsm_file_permission+0x9/0x20 [ 669.271348][T15090] ? security_file_permission+0x75/0x260 [ 669.271360][T15090] ? rw_verify_area+0x255/0x4d0 [ 669.271375][T15090] vfs_writev+0x33c/0x990 [ 669.271390][T15090] ? __pfx_vfs_writev+0x10/0x10 [ 669.271408][T15090] ? __fget_files+0x2a/0x420 [ 669.271422][T15090] ? __fget_files+0x3a0/0x420 [ 669.271433][T15090] ? __fget_files+0x2a/0x420 [ 669.271448][T15090] do_writev+0x154/0x2e0 [ 669.271460][T15090] ? __pfx_do_writev+0x10/0x10 [ 669.271474][T15090] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.271485][T15090] do_syscall_64+0x15f/0xf80 [ 669.271500][T15090] ? trace_irq_disable+0x3b/0x140 [ 669.271515][T15090] ? clear_bhb_loop+0x40/0x90 [ 669.271527][T15090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.271537][T15090] RIP: 0033:0x7f524c39ce59 [ 669.271548][T15090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 669.271556][T15090] RSP: 002b:00007f524a5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 669.271567][T15090] RAX: ffffffffffffffda RBX: 00007f524c615fa0 RCX: 00007f524c39ce59 [ 669.271575][T15090] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000010 [ 669.271581][T15090] RBP: 00007f524a5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 669.271587][T15090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 669.271593][T15090] R13: 00007f524c616038 R14: 00007f524c615fa0 R15: 00007f524c73fa48 [ 669.271609][T15090] [ 669.717916][T11606] usb 3-1: Using ep0 maxpacket: 32 [ 669.725228][T11606] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 215, changing to 11 [ 669.737024][T11606] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 1844, setting to 1024 [ 669.749059][T11606] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 669.762558][T11606] usb 3-1: config 0 interface 0 has no altsetting 0 [ 669.770222][T11606] usb 3-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 669.779742][T11606] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.794305][T11606] usb 3-1: config 0 descriptor?? [ 669.800559][T15079] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 670.025653][T15079] openvswitch: netlink: nsh attr 7 is out of range max 3 [ 670.033814][T15079] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 670.049561][T11606] usb 3-1: string descriptor 0 read error: -71 [ 670.065710][T11606] usbhid 3-1:0.0: can't add hid device: -71 [ 670.072319][T11606] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 670.083591][T11606] usb 3-1: USB disconnect, device number 31 [ 670.109395][ T46] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 670.187520][T14725] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 670.258386][T15098] __nla_validate_parse: 2 callbacks suppressed [ 670.258398][T15098] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2553'. [ 670.268338][ T46] usb 6-1: Using ep0 maxpacket: 16 [ 670.275429][T15098] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2553'. [ 670.283992][ T46] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 670.305072][ T46] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 670.314842][ T46] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.327761][T14725] usb 1-1: device descriptor read/64, error -71 [ 670.334390][ T46] usb 6-1: config 0 descriptor?? [ 670.343444][ T46] pxrc 6-1:0.0: Could not find endpoint [ 670.551717][ T5698] usb 6-1: USB disconnect, device number 4 [ 670.567454][T14725] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 670.649173][ T5684] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 670.698373][T15102] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2555'. [ 670.709826][T15103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2555'. [ 670.727874][T14725] usb 1-1: device descriptor read/64, error -71 [ 670.790075][T15111] FAULT_INJECTION: forcing a failure. [ 670.790075][T15111] name failslab, interval 1, probability 0, space 0, times 0 [ 670.803480][T15111] CPU: 1 UID: 0 PID: 15111 Comm: syz.1.2557 Tainted: G L syzkaller #0 PREEMPT(full) [ 670.803508][T15111] Tainted: [L]=SOFTLOCKUP [ 670.803514][T15111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 670.803524][T15111] Call Trace: [ 670.803531][T15111] [ 670.803539][T15111] dump_stack_lvl+0xe8/0x150 [ 670.803564][T15111] should_fail_ex+0x412/0x560 [ 670.803593][T15111] should_failslab+0xa8/0x100 [ 670.803621][T15111] __kmalloc_cache_noprof+0x88/0x660 [ 670.803644][T15111] ? tcf_exts_init_ex+0x10e/0x7c0 [ 670.803734][T15111] tcf_exts_init_ex+0x10e/0x7c0 [ 670.803754][T15111] ? __kmalloc_cache_noprof+0x31c/0x660 [ 670.803778][T15111] ? __kmalloc_cache_noprof+0x15b/0x660 [ 670.803803][T15111] cls_bpf_change+0x2a4/0xd90 [ 670.803828][T15111] ? __pfx___mutex_lock+0x10/0x10 [ 670.803855][T15111] ? __pfx_cls_bpf_change+0x10/0x10 [ 670.803896][T15111] tc_new_tfilter+0xff8/0x1780 [ 670.803922][T15111] ? __pfx_tc_new_tfilter+0x10/0x10 [ 670.803938][T15111] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 670.803959][T15111] ? __pfx_tc_new_tfilter+0x10/0x10 [ 670.803968][T15111] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 670.803982][T15111] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 670.803994][T15111] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 670.804005][T15111] ? ref_tracker_free+0x693/0x840 [ 670.804020][T15111] ? __pfx_ref_tracker_free+0x10/0x10 [ 670.804032][T15111] ? __asan_memcpy+0x40/0x70 [ 670.804043][T15111] ? __skb_clone+0x63/0x7a0 [ 670.804062][T15111] netlink_rcv_skb+0x232/0x4b0 [ 670.804083][T15111] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 670.804104][T15111] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 670.804134][T15111] ? netlink_deliver_tap+0x2e/0x1b0 [ 670.804147][T15111] ? netlink_deliver_tap+0x2e/0x1b0 [ 670.804163][T15111] netlink_unicast+0x75c/0x8e0 [ 670.804181][T15111] netlink_sendmsg+0x813/0xb40 [ 670.804199][T15111] ? __pfx_netlink_sendmsg+0x10/0x10 [ 670.804221][T15111] ? aa_sock_msg_perm+0xf1/0x1b0 [ 670.804235][T15111] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 670.804251][T15111] ____sys_sendmsg+0x972/0x9f0 [ 670.804265][T15111] ? __might_fault+0xaf/0x130 [ 670.804285][T15111] ? __pfx_____sys_sendmsg+0x10/0x10 [ 670.804303][T15111] ? import_iovec+0x73/0xa0 [ 670.804320][T15111] ___sys_sendmsg+0x2a5/0x360 [ 670.804333][T15111] ? __lock_acquire+0x6b5/0x2cf0 [ 670.804347][T15111] ? __pfx____sys_sendmsg+0x10/0x10 [ 670.804378][T15111] ? __fget_files+0x2a/0x420 [ 670.804389][T15111] ? __fget_files+0x3a0/0x420 [ 670.804405][T15111] __x64_sys_sendmsg+0x1bd/0x2a0 [ 670.804420][T15111] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 670.804439][T15111] ? __pfx_ksys_write+0x10/0x10 [ 670.804457][T15111] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.804468][T15111] do_syscall_64+0x15f/0xf80 [ 670.804481][T15111] ? trace_irq_disable+0x3b/0x140 [ 670.804496][T15111] ? clear_bhb_loop+0x40/0x90 [ 670.804508][T15111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.804518][T15111] RIP: 0033:0x7fc39379ce59 [ 670.804529][T15111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 670.804538][T15111] RSP: 002b:00007fc394710028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 670.804549][T15111] RAX: ffffffffffffffda RBX: 00007fc393a15fa0 RCX: 00007fc39379ce59 [ 670.804557][T15111] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 670.804563][T15111] RBP: 00007fc394710090 R08: 0000000000000000 R09: 0000000000000000 [ 670.804569][T15111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 670.804575][T15111] R13: 00007fc393a16038 R14: 00007fc393a15fa0 R15: 00007fc393b3fa48 [ 670.804590][T15111] [ 670.807588][ T5684] usb 5-1: Using ep0 maxpacket: 16 [ 670.875197][T15113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2558'. [ 670.880499][T14725] usb usb1-port1: attempt power cycle [ 670.919461][T15113] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2558'. [ 670.928676][ T5684] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 671.209177][ T5684] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 671.220736][ T5684] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 671.230523][ T5684] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 671.240219][ T5684] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 671.254660][ T5684] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 671.268341][ T5684] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 671.278351][ T5684] usb 5-1: Manufacturer: syz [ 671.306719][ T5684] usb 5-1: config 0 descriptor?? [ 671.466590][T15129] ipip0: entered promiscuous mode [ 671.477505][T14725] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 671.486919][T15129] ipip0: entered allmulticast mode [ 671.508467][T14725] usb 1-1: device descriptor read/8, error -71 [ 671.633043][ T5684] rc_core: IR keymap rc-hauppauge not found [ 671.650824][ T5684] Registered IR keymap rc-empty [ 671.670275][ T5684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 671.698398][ T5684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 671.719803][ T5684] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 671.734797][ T5684] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input66 [ 671.752107][ T5684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 671.777545][T14725] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 671.785450][ T5684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 671.829040][ T5684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 671.836935][T14725] usb 1-1: device descriptor read/8, error -71 [ 671.857669][ T5684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 671.887722][ T5684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 671.900192][T15141] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2567'. [ 671.917796][ T5684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 671.937476][ T5741] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 671.941109][T15098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2553'. [ 671.945196][ T5684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 671.964499][T14725] usb usb1-port1: unable to enumerate USB device [ 671.997632][ T5684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 672.027674][ T5684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 672.047761][ T5684] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 672.069503][ T5684] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 672.078699][ T5684] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 672.093844][ T5684] usb 5-1: USB disconnect, device number 47 [ 672.127488][ T5741] usb 3-1: Using ep0 maxpacket: 8 [ 672.144614][ T5741] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 672.168003][ T5741] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 672.187954][ T5741] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 672.207430][ T5741] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 672.227166][ T5741] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 672.236409][ T5741] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.250078][ T5741] hub 3-1:1.0: bad descriptor, ignoring hub [ 672.256035][ T5741] hub 3-1:1.0: probe with driver hub failed with error -5 [ 672.264075][ T5741] cdc_wdm 3-1:1.0: skipping garbage [ 672.269683][ T5741] cdc_wdm 3-1:1.0: skipping garbage [ 672.276135][ T5741] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 672.282105][ T5741] cdc_wdm 3-1:1.0: Unknown control protocol [ 672.637862][ T46] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 672.733817][T15147] FAULT_INJECTION: forcing a failure. [ 672.733817][T15147] name failslab, interval 1, probability 0, space 0, times 0 [ 672.746818][T15147] CPU: 0 UID: 0 PID: 15147 Comm: syz.4.2569 Tainted: G L syzkaller #0 PREEMPT(full) [ 672.746835][T15147] Tainted: [L]=SOFTLOCKUP [ 672.746839][T15147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 672.746845][T15147] Call Trace: [ 672.746850][T15147] [ 672.746855][T15147] dump_stack_lvl+0xe8/0x150 [ 672.746872][T15147] should_fail_ex+0x412/0x560 [ 672.746889][T15147] should_failslab+0xa8/0x100 [ 672.746906][T15147] __kmalloc_cache_noprof+0x88/0x660 [ 672.746920][T15147] ? cls_bpf_change+0x269/0xd90 [ 672.746937][T15147] cls_bpf_change+0x269/0xd90 [ 672.746950][T15147] ? __pfx___mutex_lock+0x10/0x10 [ 672.746966][T15147] ? __pfx_cls_bpf_change+0x10/0x10 [ 672.747000][T15147] tc_new_tfilter+0xff8/0x1780 [ 672.747041][T15147] ? __pfx_tc_new_tfilter+0x10/0x10 [ 672.747071][T15147] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 672.747093][T15147] ? __pfx_tc_new_tfilter+0x10/0x10 [ 672.747102][T15147] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 672.747116][T15147] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 672.747128][T15147] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 672.747140][T15147] ? ref_tracker_free+0x693/0x840 [ 672.747154][T15147] ? __pfx_ref_tracker_free+0x10/0x10 [ 672.747166][T15147] ? __asan_memcpy+0x40/0x70 [ 672.747178][T15147] ? __skb_clone+0x63/0x7a0 [ 672.747196][T15147] netlink_rcv_skb+0x232/0x4b0 [ 672.747210][T15147] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 672.747223][T15147] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 672.747242][T15147] ? netlink_deliver_tap+0x2e/0x1b0 [ 672.747255][T15147] ? netlink_deliver_tap+0x2e/0x1b0 [ 672.747271][T15147] netlink_unicast+0x75c/0x8e0 [ 672.747288][T15147] netlink_sendmsg+0x813/0xb40 [ 672.747306][T15147] ? __pfx_netlink_sendmsg+0x10/0x10 [ 672.747321][T15147] ? aa_sock_msg_perm+0xf1/0x1b0 [ 672.747335][T15147] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 672.747356][T15147] ____sys_sendmsg+0x972/0x9f0 [ 672.747380][T15147] ? __might_fault+0xaf/0x130 [ 672.747405][T15147] ? __pfx_____sys_sendmsg+0x10/0x10 [ 672.747435][T15147] ? import_iovec+0x73/0xa0 [ 672.747461][T15147] ___sys_sendmsg+0x2a5/0x360 [ 672.747484][T15147] ? __lock_acquire+0x6b5/0x2cf0 [ 672.747507][T15147] ? __pfx____sys_sendmsg+0x10/0x10 [ 672.747574][T15147] ? __fget_files+0x2a/0x420 [ 672.747594][T15147] ? __fget_files+0x3a0/0x420 [ 672.747625][T15147] __x64_sys_sendmsg+0x1bd/0x2a0 [ 672.747653][T15147] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 672.747687][T15147] ? __pfx_ksys_write+0x10/0x10 [ 672.747720][T15147] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.747740][T15147] do_syscall_64+0x15f/0xf80 [ 672.747765][T15147] ? trace_irq_disable+0x3b/0x140 [ 672.747790][T15147] ? clear_bhb_loop+0x40/0x90 [ 672.747813][T15147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.747831][T15147] RIP: 0033:0x7fe1beb9ce59 [ 672.747848][T15147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 672.747863][T15147] RSP: 002b:00007fe1bfb27028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 672.747882][T15147] RAX: ffffffffffffffda RBX: 00007fe1bee15fa0 RCX: 00007fe1beb9ce59 [ 672.747896][T15147] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 672.747907][T15147] RBP: 00007fe1bfb27090 R08: 0000000000000000 R09: 0000000000000000 [ 672.747919][T15147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 672.747929][T15147] R13: 00007fe1bee16038 R14: 00007fe1bee15fa0 R15: 00007fe1bef3fa48 [ 672.747960][T15147] [ 673.101308][ T46] usb 6-1: unable to get BOS descriptor or descriptor too short [ 673.109991][ T46] usb 6-1: not running at top speed; connect to a high speed hub [ 673.119254][ T46] usb 6-1: config 133 has an invalid interface number: 190 but max is 0 [ 673.128330][ T46] usb 6-1: config 133 has no interface number 0 [ 673.134722][ T46] usb 6-1: config 133 interface 190 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 673.146533][ T46] usb 6-1: config 133 interface 190 has no altsetting 0 [ 673.160105][ T46] usb 6-1: New USB device found, idVendor=083a, idProduct=4507, bcdDevice=31.24 [ 673.192181][ T46] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.241459][ T46] usb 6-1: Product: syz [ 673.255999][ T46] usb 6-1: Manufacturer: syz [ 673.264436][ T46] usb 6-1: SerialNumber: syz [ 673.350293][T15156] FAULT_INJECTION: forcing a failure. [ 673.350293][T15156] name failslab, interval 1, probability 0, space 0, times 0 [ 673.364129][T15156] CPU: 1 UID: 0 PID: 15156 Comm: syz.4.2572 Tainted: G L syzkaller #0 PREEMPT(full) [ 673.364158][T15156] Tainted: [L]=SOFTLOCKUP [ 673.364164][T15156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 673.364176][T15156] Call Trace: [ 673.364184][T15156] [ 673.364192][T15156] dump_stack_lvl+0xe8/0x150 [ 673.364222][T15156] should_fail_ex+0x412/0x560 [ 673.364252][T15156] should_failslab+0xa8/0x100 [ 673.364280][T15156] __kmalloc_cache_noprof+0x88/0x660 [ 673.364303][T15156] ? rcu_is_watching+0x15/0xb0 [ 673.364324][T15156] ? __netlink_diag_dump+0x165/0x650 [ 673.364345][T15156] ? trace_kmalloc+0x2a/0xf0 [ 673.364372][T15156] __netlink_diag_dump+0x165/0x650 [ 673.364403][T15156] netlink_diag_dump+0xef/0x230 [ 673.364427][T15156] netlink_dump+0x702/0xe10 [ 673.364462][T15156] ? __pfx_netlink_dump+0x10/0x10 [ 673.364505][T15156] ? netlink_lookup+0x30/0x200 [ 673.364527][T15156] ? netlink_lookup+0x30/0x200 [ 673.364548][T15156] ? netlink_lookup+0x30/0x200 [ 673.364576][T15156] __netlink_dump_start+0x5cb/0x7e0 [ 673.364608][T15156] netlink_diag_handler_dump+0x19e/0x240 [ 673.364632][T15156] ? __pfx_netlink_diag_handler_dump+0x10/0x10 [ 673.364654][T15156] ? __pfx_netlink_diag_dump+0x10/0x10 [ 673.364672][T15156] ? __pfx_netlink_diag_dump_done+0x10/0x10 [ 673.364696][T15156] ? sock_diag_lock_handler+0x19/0x290 [ 673.364718][T15156] ? sock_diag_lock_handler+0x19/0x290 [ 673.364745][T15156] sock_diag_rcv_msg+0x4cc/0x600 [ 673.364772][T15156] netlink_rcv_skb+0x232/0x4b0 [ 673.364797][T15156] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 673.364821][T15156] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 673.364858][T15156] ? netlink_deliver_tap+0x2e/0x1b0 [ 673.364882][T15156] ? netlink_deliver_tap+0x2e/0x1b0 [ 673.364911][T15156] netlink_unicast+0x75c/0x8e0 [ 673.364945][T15156] netlink_sendmsg+0x813/0xb40 [ 673.364978][T15156] ? __pfx_netlink_sendmsg+0x10/0x10 [ 673.365005][T15156] ? aa_sock_msg_perm+0xf1/0x1b0 [ 673.365032][T15156] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 673.365058][T15156] ? __pfx_netlink_sendmsg+0x10/0x10 [ 673.365081][T15156] sock_write_iter+0x49b/0x4f0 [ 673.365103][T15156] ? __pfx_sock_write_iter+0x10/0x10 [ 673.365144][T15156] do_iter_readv_writev+0x619/0x8c0 [ 673.365173][T15156] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 673.365203][T15156] ? bpf_lsm_file_permission+0x9/0x20 [ 673.365227][T15156] ? security_file_permission+0x75/0x260 [ 673.365248][T15156] ? rw_verify_area+0x255/0x4d0 [ 673.365275][T15156] vfs_writev+0x33c/0x990 [ 673.365304][T15156] ? __pfx_vfs_writev+0x10/0x10 [ 673.365338][T15156] ? __fget_files+0x2a/0x420 [ 673.365363][T15156] ? __fget_files+0x3a0/0x420 [ 673.365382][T15156] ? __fget_files+0x2a/0x420 [ 673.365411][T15156] do_writev+0x154/0x2e0 [ 673.365433][T15156] ? __pfx_do_writev+0x10/0x10 [ 673.365461][T15156] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.365480][T15156] do_syscall_64+0x15f/0xf80 [ 673.365514][T15156] ? clear_bhb_loop+0x40/0x90 [ 673.365536][T15156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.365554][T15156] RIP: 0033:0x7fe1beb9ce59 [ 673.365571][T15156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 673.365585][T15156] RSP: 002b:00007fe1bfb27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 673.365604][T15156] RAX: ffffffffffffffda RBX: 00007fe1bee15fa0 RCX: 00007fe1beb9ce59 [ 673.365617][T15156] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000010 [ 673.365629][T15156] RBP: 00007fe1bfb27090 R08: 0000000000000000 R09: 0000000000000000 [ 673.365640][T15156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 673.365651][T15156] R13: 00007fe1bee16038 R14: 00007fe1bee15fa0 R15: 00007fe1bef3fa48 [ 673.365681][T15156] [ 673.447145][T15153] trusted_key: encrypted_key: insufficient parameters specified [ 673.737203][T15159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 673.791251][T15159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 673.831897][T15143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 673.850211][T15143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 673.891030][ T46] usb 6-1: Could not find all expected endpoints [ 673.913602][ T46] usb 6-1: USB disconnect, device number 5 [ 674.067535][ T5684] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 674.231091][ T5684] usb 5-1: unable to get BOS descriptor or descriptor too short [ 674.247053][ T5684] usb 5-1: config 63 has an invalid interface number: 66 but max is 0 [ 674.273202][ T5684] usb 5-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 674.318202][ T5684] usb 5-1: config 63 has no interface number 0 [ 674.341889][ T5684] usb 5-1: config 63 interface 66 has no altsetting 0 [ 674.376238][ T5684] usb 5-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 674.392636][ T5684] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.401538][ T5684] usb 5-1: Product: syz [ 674.405735][ T5684] usb 5-1: Manufacturer: syz [ 674.410669][ T5684] usb 5-1: SerialNumber: syz [ 674.537627][T15179] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2578'. [ 674.646986][T15187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.661275][T15179] netlink: 956 bytes leftover after parsing attributes in process `syz.5.2578'. [ 674.682875][ T5684] uvcvideo 5-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 674.689849][T15187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 674.717633][ T5684] uvcvideo 5-1:63.66: No valid video chain found. [ 674.751862][ T5684] usb 5-1: USB disconnect, device number 48 [ 674.839047][T15190] netlink: 'syz.1.2579': attribute type 10 has an invalid length. [ 674.965181][T15192] FAULT_INJECTION: forcing a failure. [ 674.965181][T15192] name failslab, interval 1, probability 0, space 0, times 0 [ 675.043679][T15194] netlink: 'syz.1.2579': attribute type 10 has an invalid length. [ 675.077529][T15192] CPU: 0 UID: 0 PID: 15192 Comm: syz.0.2581 Tainted: G L syzkaller #0 PREEMPT(full) [ 675.077560][T15192] Tainted: [L]=SOFTLOCKUP [ 675.077566][T15192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 675.077577][T15192] Call Trace: [ 675.077585][T15192] [ 675.077593][T15192] dump_stack_lvl+0xe8/0x150 [ 675.077620][T15192] should_fail_ex+0x412/0x560 [ 675.077650][T15192] should_failslab+0xa8/0x100 [ 675.077680][T15192] __kmalloc_cache_noprof+0x88/0x660 [ 675.077705][T15192] ? tcf_exts_init_ex+0x10e/0x7c0 [ 675.077736][T15192] tcf_exts_init_ex+0x10e/0x7c0 [ 675.077759][T15192] ? __kmalloc_cache_noprof+0x31c/0x660 [ 675.077784][T15192] ? __kmalloc_cache_noprof+0x15b/0x660 [ 675.077812][T15192] cls_bpf_change+0x2a4/0xd90 [ 675.077838][T15192] ? __pfx___mutex_lock+0x10/0x10 [ 675.077870][T15192] ? __pfx_cls_bpf_change+0x10/0x10 [ 675.077916][T15192] tc_new_tfilter+0xff8/0x1780 [ 675.077961][T15192] ? __pfx_tc_new_tfilter+0x10/0x10 [ 675.077994][T15192] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 675.078032][T15192] ? __pfx_tc_new_tfilter+0x10/0x10 [ 675.078049][T15192] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 675.078076][T15192] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 675.078099][T15192] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 675.078120][T15192] ? ref_tracker_free+0x693/0x840 [ 675.078147][T15192] ? __pfx_ref_tracker_free+0x10/0x10 [ 675.078167][T15192] ? __asan_memcpy+0x40/0x70 [ 675.078185][T15192] ? __skb_clone+0x63/0x7a0 [ 675.078213][T15192] netlink_rcv_skb+0x232/0x4b0 [ 675.078237][T15192] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 675.078259][T15192] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 675.078294][T15192] ? netlink_deliver_tap+0x2e/0x1b0 [ 675.078317][T15192] ? netlink_deliver_tap+0x2e/0x1b0 [ 675.078356][T15192] netlink_unicast+0x75c/0x8e0 [ 675.078389][T15192] netlink_sendmsg+0x813/0xb40 [ 675.078421][T15192] ? __pfx_netlink_sendmsg+0x10/0x10 [ 675.078448][T15192] ? aa_sock_msg_perm+0xf1/0x1b0 [ 675.078472][T15192] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 675.078499][T15192] ____sys_sendmsg+0x972/0x9f0 [ 675.078524][T15192] ? __might_fault+0xaf/0x130 [ 675.078554][T15192] ? __pfx_____sys_sendmsg+0x10/0x10 [ 675.078588][T15192] ? import_iovec+0x73/0xa0 [ 675.078618][T15192] ___sys_sendmsg+0x2a5/0x360 [ 675.078642][T15192] ? __lock_acquire+0x6b5/0x2cf0 [ 675.078666][T15192] ? __pfx____sys_sendmsg+0x10/0x10 [ 675.078727][T15192] ? __fget_files+0x2a/0x420 [ 675.078747][T15192] ? __fget_files+0x3a0/0x420 [ 675.078778][T15192] __x64_sys_sendmsg+0x1bd/0x2a0 [ 675.078806][T15192] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 675.078838][T15192] ? __pfx_ksys_write+0x10/0x10 [ 675.078870][T15192] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.078889][T15192] do_syscall_64+0x15f/0xf80 [ 675.078914][T15192] ? trace_irq_disable+0x3b/0x140 [ 675.078939][T15192] ? clear_bhb_loop+0x40/0x90 [ 675.078962][T15192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.078978][T15192] RIP: 0033:0x7fb542b9ce59 [ 675.078995][T15192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 675.079009][T15192] RSP: 002b:00007fb54398e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 675.079029][T15192] RAX: ffffffffffffffda RBX: 00007fb542e15fa0 RCX: 00007fb542b9ce59 [ 675.079042][T15192] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 675.079053][T15192] RBP: 00007fb54398e090 R08: 0000000000000000 R09: 0000000000000000 [ 675.079064][T15192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 675.079075][T15192] R13: 00007fb542e16038 R14: 00007fb542e15fa0 R15: 00007fb542f3fa48 [ 675.079105][T15192] [ 675.108414][T11606] usb 3-1: USB disconnect, device number 32 [ 675.138541][ T5684] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 675.332817][ T5684] usb 5-1: unable to get BOS descriptor or descriptor too short [ 675.336564][ T5684] usb 5-1: not running at top speed; connect to a high speed hub [ 675.383317][T15194] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 675.499583][ T5684] usb 5-1: config 63 has an invalid interface number: 66 but max is 0 [ 675.560339][ T5684] usb 5-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 675.581602][ T5684] usb 5-1: config 63 has no interface number 0 [ 675.589607][ T5684] usb 5-1: config 63 interface 66 has no altsetting 0 [ 675.606775][ T5684] usb 5-1: string descriptor 0 read error: -22 [ 675.613411][ T5684] usb 5-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 675.652105][ T5684] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.689699][ T5684] uvcvideo 5-1:63.66: Found UVC 0.07 device (174f:8acf) [ 675.715954][T15198] FAULT_INJECTION: forcing a failure. [ 675.715954][T15198] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 675.737167][ T5684] uvcvideo 5-1:63.66: No valid video chain found. [ 675.755835][T15198] CPU: 1 UID: 0 PID: 15198 Comm: syz.0.2583 Tainted: G L syzkaller #0 PREEMPT(full) [ 675.755853][T15198] Tainted: [L]=SOFTLOCKUP [ 675.755858][T15198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 675.755864][T15198] Call Trace: [ 675.755869][T15198] [ 675.755873][T15198] dump_stack_lvl+0xe8/0x150 [ 675.755891][T15198] should_fail_ex+0x412/0x560 [ 675.755908][T15198] _copy_from_user+0x2d/0xb0 [ 675.755924][T15198] kstrtouint_from_user+0xd6/0x180 [ 675.755998][T15198] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 675.756019][T15198] proc_fail_nth_write+0x8e/0x210 [ 675.756040][T15198] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 675.756066][T15198] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 675.756089][T15198] vfs_write+0x29a/0xb90 [ 675.756119][T15198] ? __pfx_vfs_write+0x10/0x10 [ 675.756144][T15198] ? __fget_files+0x2a/0x420 [ 675.756169][T15198] ? __fget_files+0x3a0/0x420 [ 675.756187][T15198] ? __fget_files+0x2a/0x420 [ 675.756215][T15198] ksys_write+0x150/0x270 [ 675.756242][T15198] ? __pfx_ksys_write+0x10/0x10 [ 675.756273][T15198] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.756293][T15198] do_syscall_64+0x15f/0xf80 [ 675.756319][T15198] ? clear_bhb_loop+0x40/0x90 [ 675.756341][T15198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.756359][T15198] RIP: 0033:0x7fb542b5d68e [ 675.756376][T15198] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 675.756390][T15198] RSP: 002b:00007fb54398dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 675.756410][T15198] RAX: ffffffffffffffda RBX: 00007fb54398e6c0 RCX: 00007fb542b5d68e [ 675.756423][T15198] RDX: 0000000000000001 RSI: 00007fb54398e0a0 RDI: 0000000000000011 [ 675.756434][T15198] RBP: 00007fb54398e090 R08: 0000000000000000 R09: 0000000000000000 [ 675.756446][T15198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 675.756457][T15198] R13: 00007fb542e16038 R14: 00007fb542e15fa0 R15: 00007fb542f3fa48 [ 675.756487][T15198] [ 675.961687][ T5684] usb 5-1: USB disconnect, device number 49 [ 676.030399][ T5682] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 676.079035][T15190] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.234257][T15208] loop4: detected capacity change from 0 to 2640 [ 676.244204][T15208] buffer_io_error: 48 callbacks suppressed [ 676.244220][T15208] Buffer I/O error on dev loop4, logical block 0, async page read [ 676.291053][T15208] Buffer I/O error on dev loop4, logical block 0, async page read [ 676.317112][T15208] Buffer I/O error on dev loop4, logical block 0, async page read [ 676.342121][T15208] Buffer I/O error on dev loop4, logical block 0, async page read [ 676.366398][T15208] Buffer I/O error on dev loop4, logical block 0, async page read [ 676.393078][T15208] Buffer I/O error on dev loop4, logical block 0, async page read [ 676.398179][T11606] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 676.418580][T15208] Buffer I/O error on dev loop4, logical block 0, async page read [ 676.452630][T15208] Buffer I/O error on dev loop4, logical block 0, async page read [ 676.497728][T15208] ldm_validate_partition_table(): Disk read failed. [ 676.506553][T15208] Buffer I/O error on dev loop4, logical block 0, async page read [ 676.527197][T15208] Buffer I/O error on dev loop4, logical block 0, async page read [ 676.537115][ T5789] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 676.566374][T15208] Dev loop4: unable to read RDB block 0 [ 676.577059][T11606] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 676.587985][T15208] loop4: unable to read partition table [ 676.601619][T11606] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 676.619176][T15208] loop_reread_partitions: partition scan of loop4 (3 ) failed (rc=-5) [ 676.620298][T11606] usb 3-1: config 0 has no interface number 0 [ 676.659760][T11606] usb 3-1: config 0 interface 106 altsetting 0 endpoint 0x1 has an invalid bInterval 255, changing to 11 [ 676.691442][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 676.691454][ T29] audit: type=1326 audit(1779219636.909:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15212 comm="syz.4.2587" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe1beb9ce59 code=0x0 [ 676.771376][T11606] usb 3-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 59391, setting to 1024 [ 676.802546][T11606] usb 3-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 676.881633][T11606] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 676.911035][T11606] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.950501][T11606] usb 3-1: config 0 descriptor?? [ 676.969583][T15196] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 677.066099][T11606] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 677.215380][ T5698] usb 3-1: USB disconnect, device number 33 [ 677.227671][ T6015] usb 3-1: Failed to submit usb control message: -71 [ 677.246010][T15228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.258792][ T6015] usb 3-1: unable to send the bmi data to the device: -71 [ 677.279358][ T6015] usb 3-1: unable to get target info from device [ 677.281214][T15228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 677.314541][ T6015] usb 3-1: could not get target info (-71) [ 677.332909][ T6015] usb 3-1: could not probe fw (-71) [ 677.357784][ T5684] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 677.497551][ T5741] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 677.552726][ T5684] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 677.561993][ T5684] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.581678][ T5684] usb 5-1: Product: 、 [ 677.593665][ T5684] usb 5-1: Manufacturer: 葚蝙⒍扅諒떂歋ƍ [ 677.614513][ T5684] usb 5-1: SerialNumber: 騪艘쭪礰䘳㙃杶䃅ᡐ왥휖㸋穫놉퍟㝻ג寜귫ᔈᬻ韬퍂混ผ텺ẅꀋ렷蚱∋骢⋃鉍떬Ὠ쬸ꏱ§壀赁괕㩥ࠠ쉸❇ᒒ굏ꂯჭ꾚鸂∰嗉罯氨搮䛘ﰍ鹜铿驟脯賫ୈ翶钜㗾偒흏輙㗒✴庪솂罊骬㛉檪嵗Ҹ꘢ᭃ䍲嫷쒭䖞ⱄ☩Ꙟߡ [ 677.677504][ T5741] usb 6-1: Using ep0 maxpacket: 16 [ 677.686923][ T5741] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 677.695525][T15242] openvswitch: netlink: Flow actions attr not present in new flow. [ 677.711023][ T5741] usb 6-1: config 0 has no interface number 0 [ 677.731731][ T5741] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 677.772744][ T5741] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 677.806740][ T5741] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 677.822344][ T5741] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 677.855175][ T5741] usb 6-1: Product: syz [ 677.872590][ T5741] usb 6-1: SerialNumber: syz [ 677.930485][ T5741] usb 6-1: config 0 descriptor?? [ 677.962238][ T5741] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 677.995359][ T5741] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input67 [ 678.096957][T15248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.133241][T15248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.156123][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 678.163337][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 678.171190][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 678.178722][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 678.186024][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 678.193877][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 678.201125][ T5698] usb 6-1: USB disconnect, device number 6 [ 678.207065][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 678.207088][ C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 678.259010][ T5698] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 678.577736][T11606] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 678.738230][T11606] usb 3-1: Using ep0 maxpacket: 32 [ 678.745434][T11606] usb 3-1: config 0 has too many interfaces: 193, using maximum allowed: 32 [ 678.756927][T11606] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 193 [ 678.768228][T11606] usb 3-1: config 0 has no interface number 0 [ 678.774463][T11606] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 678.786493][T11606] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 678.796990][T11606] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00 [ 678.807203][T11606] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.822461][T11606] usb 3-1: config 0 descriptor?? [ 679.027297][ T29] audit: type=1326 audit(1779219639.239:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15267 comm="syz.5.2605" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524c39ce59 code=0x7ffc0000 [ 679.076879][ T29] audit: type=1326 audit(1779219639.239:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15267 comm="syz.5.2605" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f524c33e1d9 code=0x7ffc0000 [ 679.109895][ T29] audit: type=1326 audit(1779219639.239:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15267 comm="syz.5.2605" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f524c33e1d9 code=0x7ffc0000 [ 679.190064][ T29] audit: type=1326 audit(1779219639.239:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15267 comm="syz.5.2605" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f524c33e1d9 code=0x7ffc0000 [ 679.253455][T15270] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2606'. [ 679.266086][ T29] audit: type=1326 audit(1779219639.239:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15267 comm="syz.5.2605" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f524c33e1d9 code=0x7ffc0000 [ 679.322390][T11606] corsair 0003:1B1C:1B34.0031: unknown main item tag 0x0 [ 679.334160][T11606] corsair 0003:1B1C:1B34.0031: unknown main item tag 0x0 [ 679.344640][T11606] corsair 0003:1B1C:1B34.0031: failed to start in urb: -90 [ 679.375086][T11606] corsair 0003:1B1C:1B34.0031: hidraw0: USB HID v0.00 Device [HID 1b1c:1b34] on usb-dummy_hcd.2-1/input1 [ 679.413231][ T29] audit: type=1326 audit(1779219639.239:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15267 comm="syz.5.2605" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f524c33e1d9 code=0x7ffc0000 [ 679.503937][ T29] audit: type=1326 audit(1779219639.239:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15267 comm="syz.5.2605" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f524c33e1d9 code=0x7ffc0000 [ 679.588489][ T29] audit: type=1326 audit(1779219639.239:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15267 comm="syz.5.2605" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f524c33e1d9 code=0x7ffc0000 [ 679.662474][ T29] audit: type=1326 audit(1779219639.239:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15267 comm="syz.5.2605" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f524c33e1d9 code=0x7ffc0000 [ 679.720034][ T5789] usb 3-1: USB disconnect, device number 34 [ 680.122271][ T5684] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 680.133644][ T5684] usb 5-1: MIDIStreaming interface descriptor not found [ 680.234638][T15295] loop4: detected capacity change from 0 to 2640 [ 680.265540][T15295] ldm_validate_partition_table(): Disk read failed. [ 680.296473][T15295] Dev loop4: unable to read RDB block 0 [ 680.311595][T15295] loop4: unable to read partition table [ 680.325955][T15295] loop_reread_partitions: partition scan of loop4 (3 ) failed (rc=-5) [ 680.347928][ T5684] usb 5-1: USB disconnect, device number 50 [ 680.625990][ T5741] IPVS: starting estimator thread 0... [ 680.697629][ T5698] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 680.727462][T15311] IPVS: using max 56 ests per chain, 134400 per kthread [ 680.837758][ T5698] usb 6-1: device descriptor read/64, error -71 [ 680.868985][ T5682] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 680.879404][T15313] netlink: 'syz.4.2617': attribute type 13 has an invalid length. [ 680.901139][T15313] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2617'. [ 681.039935][ T5682] usb 1-1: unable to get BOS descriptor or descriptor too short [ 681.049486][ T5682] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 681.061293][ T5682] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 681.080078][ T5682] usb 1-1: New USB device found, idVendor=55f0, idProduct=98e7, bcdDevice= 0.41 [ 681.094169][ T5682] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.103283][ T5682] usb 1-1: Product: syz [ 681.110415][ T5698] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 681.111015][ T5682] usb 1-1: Manufacturer: syz [ 681.129156][ T5682] usb 1-1: SerialNumber: syz [ 681.257589][ T5698] usb 6-1: device descriptor read/64, error -71 [ 681.368163][ T5698] usb usb6-port1: attempt power cycle [ 681.368343][T15310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2618'. [ 681.432904][T15310] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2618'. [ 681.499166][T15310] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2618'. [ 681.511868][T15318] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 681.512074][T15318] tipc: Enabled bearer , priority 10 [ 681.686622][ T5682] usb 1-1: USB disconnect, device number 41 [ 681.747494][ T5698] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 681.783293][ T5698] usb 6-1: device descriptor read/8, error -71 [ 682.027485][ T5698] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 682.069346][ T5698] usb 6-1: device descriptor read/8, error -71 [ 682.188340][ T5698] usb usb6-port1: unable to enumerate USB device [ 682.364479][T15335] m>e5n: entered promiscuous mode [ 682.590617][T15345] loop4: detected capacity change from 0 to 2640 [ 682.621885][T15345] buffer_io_error: 32 callbacks suppressed [ 682.633771][T15345] Buffer I/O error on dev loop4, logical block 0, async page read [ 682.644395][T15345] Buffer I/O error on dev loop4, logical block 0, async page read [ 682.658085][T15345] Buffer I/O error on dev loop4, logical block 0, async page read [ 682.668930][T15345] Buffer I/O error on dev loop4, logical block 0, async page read [ 682.696643][T15345] Buffer I/O error on dev loop4, logical block 0, async page read [ 682.714265][T15345] Buffer I/O error on dev loop4, logical block 0, async page read [ 682.726032][T15345] Buffer I/O error on dev loop4, logical block 0, async page read [ 682.735220][T15345] Buffer I/O error on dev loop4, logical block 0, async page read [ 682.745542][T15345] ldm_validate_partition_table(): Disk read failed. [ 682.755465][T15345] Buffer I/O error on dev loop4, logical block 0, async page read [ 682.764411][T15345] Buffer I/O error on dev loop4, logical block 0, async page read [ 682.813167][T15345] Dev loop4: unable to read RDB block 0 [ 682.830949][T15345] loop4: unable to read partition table [ 682.850630][T15345] loop_reread_partitions: partition scan of loop4 (3 ) failed (rc=-5) [ 683.073897][T15349] batman_adv: batadv0: Interface deactivated: dummy0 [ 683.357483][ T5684] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 683.424856][ T6018] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 683.446076][ T6018] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.465111][ T6018] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 683.477765][ T6018] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.494075][ T6018] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 683.506792][ T6018] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.517246][ T6018] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 683.528196][ T6018] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.560613][ T5684] usb 5-1: not running at top speed; connect to a high speed hub [ 683.579896][ T5684] usb 5-1: config 1 interface 0 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 683.590239][ T5684] usb 5-1: config 1 interface 0 altsetting 7 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 683.603136][ T5684] usb 5-1: config 1 interface 0 has no altsetting 0 [ 683.613542][ T5684] usb 5-1: language id specifier not provided by device, defaulting to English [ 683.629683][ T5684] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 683.644110][ T5684] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.654618][ T5684] usb 5-1: Product: 䢋歊纕念ᦁ陞镁䚹٩㨹Ｃꦦ䟸㼫⏅엏絛旬鲤㎮㤜︢䩸Ꙛ䈾鳑—呺䋧㢭顃僷㼕뺫苢뜎ᶳ⮳ᾰ켏὿칸瘞⢣汄맢຅練뾕㤗崎ㅁ蚚䔶糮ཞ荫Ⅿῒ闛坼牠庰숖튱苬摿ⳁ᯶賀꣪ᢗ滢쭂᳟짳焼槬痢뇒Ὺഏ還᳅묞붒嶅䭋Ե㭛鎯닷꧝鬽ኊ掠蟭쬀퓩䯐韕線ⷄ吙 [ 683.697579][ T5683] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 683.711941][ T5684] usb 5-1: Manufacturer: ꣫샂﬊玷௎썎鼎醊饤㻗⪹έ쫍눱落涎ꪲ꿞滹옦ﰿ덴카⼅㈘项夌㱅ᄰ㋰띙⻰떡艜툨⺣挳讍׺䦽金䗇錮ꗻ厹숪ᆋⵦ旙镟Ⱘ俻ᗅᛞ퉵籭쟜ꁶ肒糂ៃﺪ닝홲袱렢⡜᳈읬᲍ᆫ燢綀ፑ柎๼␁ࡄ [ 683.750413][ T5684] usb 5-1: SerialNumber: syz [ 683.765962][T15350] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 683.899864][ T5683] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 683.922672][ T5683] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 683.955742][ T5683] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 683.995944][ T5683] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 684.006439][ T5683] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.025013][T15349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2627'. [ 684.038333][ T5683] usb 6-1: config 0 descriptor?? [ 684.043390][T15349] batman_adv: batadv0: Removing interface: dummy0 [ 684.317938][ T5789] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 684.481605][ T5789] usb 1-1: unable to get BOS descriptor or descriptor too short [ 684.484065][ T5683] plantronics 0003:047F:FFFF.0032: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 684.492132][ T5789] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 684.549244][ T5789] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 684.569007][ T5789] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.587251][ T5789] usb 1-1: Product: syz [ 684.597687][ T5789] usb 1-1: Manufacturer: syz [ 684.607685][ T5789] usb 1-1: SerialNumber: syz [ 685.271543][ T5684] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 685.335118][ T5684] usb 5-1: USB disconnect, device number 51 [ 685.630382][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.648257][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.727729][ T5741] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 685.734415][ T29] kauditd_printk_skb: 231 callbacks suppressed [ 685.734431][ T29] audit: type=1326 audit(1779219645.949:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15384 comm="syz.1.2635" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc39379ce59 code=0x7ffc0000 [ 685.775348][ T29] audit: type=1326 audit(1779219645.989:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15384 comm="syz.1.2635" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fc39379ce59 code=0x7ffc0000 [ 685.809482][T15352] usb 6-1: string descriptor 0 read error: -71 [ 685.812100][T15385] vcan0: tx address claim with dlc 91 [ 685.853188][ T29] audit: type=1326 audit(1779219645.989:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15384 comm="syz.1.2635" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc39379ce59 code=0x7ffc0000 [ 685.907470][ T5741] usb 3-1: Using ep0 maxpacket: 8 [ 685.910354][ T29] audit: type=1326 audit(1779219645.989:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15384 comm="syz.1.2635" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc39379ce59 code=0x7ffc0000 [ 685.919218][ T5741] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 685.948900][ T29] audit: type=1326 audit(1779219645.989:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15384 comm="syz.1.2635" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc39379ce59 code=0x7ffc0000 [ 685.975746][ T29] audit: type=1326 audit(1779219645.989:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15384 comm="syz.1.2635" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc39379ce59 code=0x7ffc0000 [ 686.023086][ T5741] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 686.026479][T15387] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2636'. [ 686.042481][ T5741] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 686.060422][ T5741] usb 3-1: Product: syz [ 686.070889][ T29] audit: type=1326 audit(1779219645.989:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15384 comm="syz.1.2635" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc39379ce59 code=0x7ffc0000 [ 686.072169][ T5741] usb 3-1: Manufacturer: syz [ 686.131439][ T5741] usb 3-1: SerialNumber: syz [ 686.142502][ T29] audit: type=1326 audit(1779219645.989:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15384 comm="syz.1.2635" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc39379ce59 code=0x7ffc0000 [ 686.166093][ T5741] usb 3-1: config 0 descriptor?? [ 686.195247][ T5741] imon_raw 3-1:0.0: IR endpoint missing [ 686.203088][ T29] audit: type=1326 audit(1779219645.989:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15384 comm="syz.1.2635" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc39379ce59 code=0x7ffc0000 [ 686.235475][ T29] audit: type=1326 audit(1779219645.989:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15384 comm="syz.1.2635" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc39379ce59 code=0x7ffc0000 [ 686.455502][ T5682] usb 3-1: USB disconnect, device number 35 [ 686.616022][ T5683] usb 6-1: USB disconnect, device number 11 [ 687.584861][ T5789] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 687.662994][ T5789] usb 1-1: 2:1 : bogus bTerminalLink 2 [ 687.905098][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 688.266633][ T5789] usb 1-1: USB disconnect, device number 42 [ 688.953848][T12844] udevd[12844]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 689.027867][T15416] veth0_virt_wifi: entered promiscuous mode [ 689.052500][T15416] macsec2: entered promiscuous mode [ 689.074289][T15416] macsec2: entered allmulticast mode [ 689.194095][T15416] veth0_virt_wifi: entered allmulticast mode [ 689.287968][T15416] veth0_virt_wifi: left allmulticast mode [ 689.318499][T15416] veth0_virt_wifi: left promiscuous mode [ 689.443490][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 689.588854][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 690.155025][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 690.956641][ T5789] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 691.089760][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 691.089778][ T29] audit: type=1326 audit(1779219651.299:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15434 comm="syz.5.2651" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524c39ce59 code=0x7ffc0000 [ 691.219339][ T29] audit: type=1326 audit(1779219651.299:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15434 comm="syz.5.2651" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524c39ce59 code=0x7ffc0000 [ 691.270495][ T29] audit: type=1326 audit(1779219651.309:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15434 comm="syz.5.2651" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f524c39ce59 code=0x7ffc0000 [ 691.419975][ T5789] usb 1-1: Using ep0 maxpacket: 32 [ 691.457524][ T29] audit: type=1326 audit(1779219651.309:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15434 comm="syz.5.2651" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524c39ce59 code=0x7ffc0000 [ 691.511612][ T5789] usb 1-1: unable to get BOS descriptor or descriptor too short [ 691.567881][ T5789] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 691.586267][ T5789] usb 1-1: config 6 has 1 interface, different from the descriptor's value: 2 [ 691.620925][ T5789] usb 1-1: config 6 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 691.914434][ T29] audit: type=1326 audit(1779219651.309:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15434 comm="syz.5.2651" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524c39ce59 code=0x7ffc0000 [ 692.071005][ T5789] usb 1-1: config 6 interface 0 has no altsetting 0 [ 694.015396][T15442] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.2653'. [ 694.380328][ T29] audit: type=1326 audit(1779219651.319:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15434 comm="syz.5.2651" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f524c39ce59 code=0x7ffc0000 [ 694.558733][ T5789] usb 1-1: string descriptor 0 read error: -71 [ 694.683773][ T5789] usb 1-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 695.198562][ T5789] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.287521][ T29] audit: type=1326 audit(1779219651.319:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15434 comm="syz.5.2651" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524c39ce59 code=0x7ffc0000 [ 696.887591][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 702.007566][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 706.852513][ T29] audit: type=1326 audit(1779219651.349:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15434 comm="syz.5.2651" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f524c39ce59 code=0x7ffc0000 [ 707.113668][ T29] audit: type=1326 audit(1779219651.359:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15434 comm="syz.5.2651" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524c39ce59 code=0x7ffc0000 [ 707.397313][ T5789] usb 1-1: can't set config #6, error -71 [ 707.488161][ T29] audit: type=1326 audit(1779219651.359:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15434 comm="syz.5.2651" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524c39ce59 code=0x7ffc0000 [ 707.693210][ T5789] usb 1-1: USB disconnect, device number 43 [ 710.086648][ T29] audit: type=1326 audit(1779219651.359:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15434 comm="syz.5.2651" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f524c39ce59 code=0x7ffc0000 [ 713.697368][ C1] sched: DL replenish lagged too much [ 716.212688][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 716.314620][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 723.483346][ T29] audit: type=1326 audit(1779219651.359:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15434 comm="syz.5.2651" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524c39ce59 code=0x7ffc0000 [ 728.502569][ T29] audit: type=1326 audit(1779219651.359:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15434 comm="syz.5.2651" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f524c39ce59 code=0x7ffc0000 [ 748.534504][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.549238][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.308893][ T29] audit: type=1326 audit(1779219651.359:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15434 comm="syz.5.2651" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524c39ce59 code=0x7ffc0000 [ 774.604172][ T5623] Bluetooth: hci5: command 0x0406 tx timeout [ 816.318352][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 816.332808][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 831.697306][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 831.704278][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9760/1:b..l P11998/1:b..l [ 831.713847][ C0] rcu: (detected by 0, t=10503 jiffies, g=117205, q=583136 ncpus=2) [ 831.721926][ C0] task:syz.1.1703 state:R running task stack:26872 pid:11998 tgid:11998 ppid:5637 task_flags:0x40044c flags:0x00080002 [ 831.736613][ C0] Call Trace: [ 831.739890][ C0] [ 831.742826][ C0] __schedule+0x1821/0x5740 [ 831.747349][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 831.752536][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 831.757542][ C0] ? __pfx___schedule+0x10/0x10 [ 831.762375][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 831.767726][ C0] preempt_schedule_common+0x82/0xd0 [ 831.772988][ C0] preempt_schedule_thunk+0x16/0x30 [ 831.778168][ C0] _raw_spin_unlock+0x3f/0x50 [ 831.782821][ C0] __zap_vma_range+0x3d17/0x4b40 [ 831.787760][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 831.793027][ C0] ? mas_find+0xb0e/0xd30 [ 831.797410][ C0] ? unmap_vmas+0x1bd/0x530 [ 831.801895][ C0] unmap_vmas+0x379/0x530 [ 831.806212][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 831.811049][ C0] exit_mmap+0x280/0x9e0 [ 831.815272][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 831.820020][ C0] ? uprobe_clear_state+0x53/0x3f0 [ 831.825115][ C0] ? __pfx_exit_aio+0x10/0x10 [ 831.829785][ C0] ? uprobe_clear_state+0x2bc/0x3f0 [ 831.834958][ C0] __mmput+0x118/0x430 [ 831.839003][ C0] exit_mm+0x1f6/0x2d0 [ 831.843056][ C0] do_exit+0x6a2/0x22c0 [ 831.847195][ C0] ? __pfx_do_exit+0x10/0x10 [ 831.851772][ C0] do_group_exit+0x21b/0x2d0 [ 831.856344][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 831.861521][ C0] get_signal+0x1284/0x1330 [ 831.866021][ C0] arch_do_signal_or_restart+0xbc/0x840 [ 831.871560][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 831.876741][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 831.882900][ C0] ? __se_sys_clock_nanosleep+0x35b/0x3b0 [ 831.888606][ C0] exit_to_user_mode_loop+0x8c/0x4d0 [ 831.893872][ C0] ? rcu_is_watching+0x15/0xb0 [ 831.898616][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.904660][ C0] do_syscall_64+0x33e/0xf80 [ 831.909228][ C0] ? trace_irq_disable+0x3b/0x140 [ 831.914232][ C0] ? clear_bhb_loop+0x40/0x90 [ 831.918883][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.924747][ C0] RIP: 00fb:0x294e66b3c7c44cb4 [ 831.929488][ C0] RSP: 002b:0000000000000000 EFLAGS: 00000202 ORIG_RAX: ce3d5c200518e753 [ 831.937874][ C0] RAX: 6d02b596a6d6b2c6 RBX: 46b00e13ac8c17fa RCX: 1d6d567492f1521e [ 831.945824][ C0] RDX: eb30e365dd53f3a0 RSI: c553273f825e1cf7 RDI: b331ef28487276fd [ 831.953772][ C0] RBP: 9c8c87e20081ee76 R08: cf9d780a350b4549 R09: c7e58b697db8ef3d [ 831.961720][ C0] R10: d68d02d45a22dc24 R11: 19b4d49ef33da9ed R12: 39cb75b6fa6cb3d1 [ 831.969667][ C0] R13: a8d7b5dbf29d588f R14: 9b8908dcbb4f02b4 R15: 107b9d1451766018 [ 831.977620][ C0] [ 831.980615][ C0] task:syz-executor state:R running task stack:22152 pid:9760 tgid:9760 ppid:1 task_flags:0x40054c flags:0x00080003 [ 831.994056][ C0] Call Trace: [ 831.997308][ C0] [ 832.000219][ C0] __schedule+0x1821/0x5740 [ 832.004717][ C0] ? __pfx___schedule+0x10/0x10 [ 832.009551][ C0] preempt_schedule_irq+0x4d/0xa0 [ 832.014566][ C0] irqentry_exit+0x14f/0x760 [ 832.019155][ C0] ? trace_irq_disable+0x3b/0x140 [ 832.024170][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 832.030135][ C0] RIP: 0010:lock_release+0x7f/0x3c0 [ 832.035323][ C0] Code: 56 19 8f 0e 00 0f 84 1c 02 00 00 65 8b 05 39 cf 97 11 85 c0 0f 85 0d 02 00 00 65 4c 8b 3d 81 89 97 11 41 83 bf 8c 0b 00 00 00 <0f> 85 f7 01 00 00 49 81 3e 80 43 fd 93 0f 84 ea 01 00 00 9c 5b fa [ 832.054914][ C0] RSP: 0018:ffffc9000658f470 EFLAGS: 00000246 [ 832.060963][ C0] RAX: 0000000000000000 RBX: ffffffff90c62d01 RCX: 0000000080000001 [ 832.068915][ C0] RDX: ffffc9000658f501 RSI: ffffffff8c28b640 RDI: ffffffff8c28b600 [ 832.076868][ C0] RBP: dffffc0000000000 R08: ffffc9000658fd70 R09: 0000000000000000 [ 832.084814][ C0] R10: ffffc9000658f5f8 R11: fffff52000cb1ec1 R12: ffffc9000658fd80 [ 832.092758][ C0] R13: ffffffff8176f256 R14: ffffffff8e95cca0 R15: ffff8880304d1ec0 [ 832.100708][ C0] ? unwind_next_frame+0xa6/0x2550 [ 832.105829][ C0] ? deref_stack_reg+0x19f/0x230 [ 832.110746][ C0] ? unwind_next_frame+0xa6/0x2550 [ 832.115835][ C0] unwind_next_frame+0x1bba/0x2550 [ 832.120927][ C0] ? unwind_next_frame+0xa6/0x2550 [ 832.126014][ C0] ? get_signal+0x1284/0x1330 [ 832.130665][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 832.136796][ C0] arch_stack_walk+0x11b/0x150 [ 832.141555][ C0] ? arch_do_signal_or_restart+0xbc/0x840 [ 832.147257][ C0] stack_trace_save+0xa9/0x100 [ 832.151999][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 832.157348][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 832.162529][ C0] kasan_save_track+0x3e/0x80 [ 832.167183][ C0] ? kasan_save_track+0x3e/0x80 [ 832.172009][ C0] ? kasan_save_free_info+0x46/0x50 [ 832.177183][ C0] ? __kasan_slab_free+0x5c/0x80 [ 832.182100][ C0] ? kmem_cache_free+0x182/0x650 [ 832.187013][ C0] ? __fput+0x6c5/0xa60 [ 832.191145][ C0] ? task_work_run+0x1d9/0x270 [ 832.195905][ C0] ? do_exit+0x70f/0x22c0 [ 832.200209][ C0] ? do_group_exit+0x21b/0x2d0 [ 832.204950][ C0] ? get_signal+0x1284/0x1330 [ 832.209624][ C0] ? __fput+0x6c5/0xa60 [ 832.213752][ C0] kasan_save_free_info+0x46/0x50 [ 832.218751][ C0] __kasan_slab_free+0x5c/0x80 [ 832.223493][ C0] kmem_cache_free+0x182/0x650 [ 832.228232][ C0] ? apparmor_file_free_security+0xc4/0xf0 [ 832.234024][ C0] __fput+0x6c5/0xa60 [ 832.237988][ C0] task_work_run+0x1d9/0x270 [ 832.242559][ C0] ? __pfx_task_work_run+0x10/0x10 [ 832.247651][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 832.252747][ C0] do_exit+0x70f/0x22c0 [ 832.256886][ C0] ? __pfx_do_exit+0x10/0x10 [ 832.261454][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 832.266462][ C0] do_group_exit+0x21b/0x2d0 [ 832.271028][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 832.276205][ C0] get_signal+0x1284/0x1330 [ 832.280691][ C0] arch_do_signal_or_restart+0xbc/0x840 [ 832.286234][ C0] ? __pfx___x64_sys_wait4+0x10/0x10 [ 832.291496][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 832.297636][ C0] exit_to_user_mode_loop+0x8c/0x4d0 [ 832.302896][ C0] ? rcu_is_watching+0x15/0xb0 [ 832.307636][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.313678][ C0] do_syscall_64+0x33e/0xf80 [ 832.318246][ C0] ? trace_irq_disable+0x3b/0x140 [ 832.323249][ C0] ? clear_bhb_loop+0x40/0x90 [ 832.327920][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.333797][ C0] RIP: 0033:0x7fe1beb5d68e [ 832.338198][ C0] RSP: 002b:00007fe1bef3fd48 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 832.346589][ C0] RAX: fffffffffffffe00 RBX: 0000555587e76500 RCX: 00007fe1beb5d68e [ 832.354536][ C0] RDX: 0000000040000000 RSI: 00007fe1bef3fdec RDI: ffffffffffffffff [ 832.362491][ C0] RBP: 00007fe1bef3fdec R08: 0000000000000000 R09: 0000000000000000 [ 832.370443][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000108 [ 832.378394][ C0] R13: 0000555587e89a00 R14: 00000000000a8f75 R15: 00007fe1bef3fe40 [ 832.386350][ C0] [ 832.763648][ T29] audit: type=1326 audit(1779219651.359:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15434 comm="syz.5.2651" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524c39ce59 code=0x7ffc0000