last executing test programs: 7.904762395s ago: executing program 0 (id=2026): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000180)=[{0x20, 0x0, 0x0, 0xfffff010}, {0xb1, 0x0, 0x0, 0xfffbf00c}, {0x6}]}, 0x10) sendmmsg$inet(r2, &(0x7f00000066c0)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x4}], 0x1}}], 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000240)={r5, @in={{0x2, 0x4e20, @empty}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYRES64=r8, @ANYRES64=r7, @ANYRESHEX=r3], 0xb0}, 0x1, 0x0, 0x0, 0x4004085}, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f00000000c0)={'nr0\x00', {0x2, 0x4e24, @empty}}) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f0000000600)=""/165, &(0x7f00000006c0)=0xa5) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f00000003c0)={0x20, 0x11, 0x49, "54c82d38ae10e87d28fd58274112770cb6e1297efa9a8a9695940d646d56135f96fa5d374dab321a6e573b614210959dd9965d7d150fb672bc487489ff5a5420f5a6ee356e35cfbef8"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x53}, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, 0x0, 0x0, 0x0}) r9 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_fuse_handle_req(r9, 0x0, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES8=r9], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xd, 0x6, 0x4, 0x1, 0x20081, r10, 0x10000}, 0x50) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000300)={r6, 0x5}, &(0x7f0000000340)=0x8) 6.560773307s ago: executing program 4 (id=2032): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x2000c0c2) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x2000c0c2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x4) fchdir(r1) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) (async) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) mknodat(r3, &(0x7f0000000100)='./file0/file0\x00', 0x8910, 0x4) getdents64(r2, &(0x7f0000000000)=""/49, 0x31) (async) getdents64(r2, &(0x7f0000000000)=""/49, 0x31) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) rmdir(&(0x7f0000010280)='./file0\x00') r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x44e, 0x120c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x22, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x4, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRESHEX=r4], 0x0}, 0x0) io_uring_setup(0x5923, &(0x7f0000000080)={0x0, 0xe37d, 0x400, 0x3, 0x3a}) (async) io_uring_setup(0x5923, &(0x7f0000000080)={0x0, 0xe37d, 0x400, 0x3, 0x3a}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20044001}, 0x0) recvmmsg(r6, &(0x7f000000b400)=[{{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000003080)=""/4111, 0x100f}], 0x1}, 0x5dd7}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002c80)=""/178, 0xb2}, {&(0x7f00000003c0)=""/187, 0xbb}, {&(0x7f0000002fc0)=""/171, 0xab}, {&(0x7f0000000740)=""/4086, 0xff6}, {&(0x7f00000005c0)=""/46, 0x2e}, {&(0x7f00000002c0)=""/125, 0x7d}], 0x6}, 0x3}, {{0x0, 0x0, 0x0}, 0x4}], 0x3, 0x2, 0x0) (async) recvmmsg(r6, &(0x7f000000b400)=[{{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000003080)=""/4111, 0x100f}], 0x1}, 0x5dd7}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002c80)=""/178, 0xb2}, {&(0x7f00000003c0)=""/187, 0xbb}, {&(0x7f0000002fc0)=""/171, 0xab}, {&(0x7f0000000740)=""/4086, 0xff6}, {&(0x7f00000005c0)=""/46, 0x2e}, {&(0x7f00000002c0)=""/125, 0x7d}], 0x6}, 0x3}, {{0x0, 0x0, 0x0}, 0x4}], 0x3, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x33, &(0x7f0000000000)=0x9, 0x4) setsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f0000000240)=0xf2b, 0x4) (async) setsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f0000000240)=0xf2b, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet6_buf(r5, 0x29, 0x6, &(0x7f0000000040)=""/31, &(0x7f0000000080)=0x1f) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) (async) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) syz_usb_connect$uac2(0x5, 0x10a, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x582, 0x7, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf8, 0x3, 0x1, 0xe4, 0x20, 0x6, {0x8, 0xb, 0x2, 0x1, 0x1, 0x0, 0x20, 0xd0}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x0, 0xc, 0x4c, 0x8}, [@selector_unit={0x6, 0x24, 0xb, 0x0, 0x1, "8e"}, @multiply_unit={0x7, 0x24, 0xc, 0x8, 0x1, 0xf8, 0x8}, @input_terminal={0x10, 0x24, 0x2, 0x6, 0x101, 0x4, 0x2, 0x8, 0x0, 0x3, 0x9, 0x6}, @effect_unit={0x9, 0x24, 0x7, 0x5, 0x4, 0x6, [0x1]}, @extension_unit={0xd, 0x24, 0x9, 0x3, 0x3ff, 0x7, "8317fe566c4e"}, @input_terminal={0x10, 0x24, 0x2, 0x6, 0x202, 0x5, 0x40, 0x3, 0xd, 0x9, 0x80, 0x95}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x3ff, 0xfffa, 0x5}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xa, 0x2, 0x34, 0x2, "abb638", "d7"}]}, {{0x9, 0x5, 0x1, 0x9, 0x50, 0x1, 0x8, 0xbf, {0x8, 0x25, 0x1, 0x82, 0x6, 0x2, 0xf24}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x1}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0x1, 0xf9, 0xf9, 0x10}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x1, 0x2, 0x0, 0xf, "e32faada"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x0, 0x2, 0x8, "f44b0081e60c62ea"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xb5, 0x1, 0xc, 0x2b, "f4", "f22a"}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x9, 0x8, 0x4, {0x8, 0x25, 0x1, 0x2, 0x3f, 0x4, 0xff}}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x201, 0x0, 0x64, 0x8, 0x8, 0xc3}, 0x27, &(0x7f0000001740)={0x5, 0xf, 0x27, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0x1, 0x9, 0x80}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x9, 0xa, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "cde264dfd161decf8071414a686ce386"}]}, 0x4, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x42d}}, {0x2c, &(0x7f0000000340)=@string={0x2c, 0x3, "f32e61640c9ec4ee9df15ef9951426f55f736c5abca9644f6638f85878a79a8f4c781d142978ef28978b"}}, {0xa0, &(0x7f0000000380)=@string={0xa0, 0x3, "038cf974af3571df77d6b887d1d9eb08feb1361ed46af935ba3c2fb6280e001c4049f73be9a9601267128633e4d19cb6ce8f5dbb267033b5ffceb95fb67799f9f9becd337c23feaac669e6285edf2be0866c35112d29da1c936ca8a25f060f3550542d661e589832a441d83ac7511f40b9bcdf537267bb1f48b1bc0de75a042b318a3825613647ea8bbfcf5b430011b6f019c9bb11950fe9bb955c3f6476"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x446}}]}) (async) syz_usb_connect$uac2(0x5, 0x10a, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x582, 0x7, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf8, 0x3, 0x1, 0xe4, 0x20, 0x6, {0x8, 0xb, 0x2, 0x1, 0x1, 0x0, 0x20, 0xd0}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x0, 0xc, 0x4c, 0x8}, [@selector_unit={0x6, 0x24, 0xb, 0x0, 0x1, "8e"}, @multiply_unit={0x7, 0x24, 0xc, 0x8, 0x1, 0xf8, 0x8}, @input_terminal={0x10, 0x24, 0x2, 0x6, 0x101, 0x4, 0x2, 0x8, 0x0, 0x3, 0x9, 0x6}, @effect_unit={0x9, 0x24, 0x7, 0x5, 0x4, 0x6, [0x1]}, @extension_unit={0xd, 0x24, 0x9, 0x3, 0x3ff, 0x7, "8317fe566c4e"}, @input_terminal={0x10, 0x24, 0x2, 0x6, 0x202, 0x5, 0x40, 0x3, 0xd, 0x9, 0x80, 0x95}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x3ff, 0xfffa, 0x5}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xa, 0x2, 0x34, 0x2, "abb638", "d7"}]}, {{0x9, 0x5, 0x1, 0x9, 0x50, 0x1, 0x8, 0xbf, {0x8, 0x25, 0x1, 0x82, 0x6, 0x2, 0xf24}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x1}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0x1, 0xf9, 0xf9, 0x10}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x1, 0x2, 0x0, 0xf, "e32faada"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x0, 0x2, 0x8, "f44b0081e60c62ea"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xb5, 0x1, 0xc, 0x2b, "f4", "f22a"}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x9, 0x8, 0x4, {0x8, 0x25, 0x1, 0x2, 0x3f, 0x4, 0xff}}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x201, 0x0, 0x64, 0x8, 0x8, 0xc3}, 0x27, &(0x7f0000001740)={0x5, 0xf, 0x27, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0x1, 0x9, 0x80}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x9, 0xa, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "cde264dfd161decf8071414a686ce386"}]}, 0x4, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x42d}}, {0x2c, &(0x7f0000000340)=@string={0x2c, 0x3, "f32e61640c9ec4ee9df15ef9951426f55f736c5abca9644f6638f85878a79a8f4c781d142978ef28978b"}}, {0xa0, &(0x7f0000000380)=@string={0xa0, 0x3, "038cf974af3571df77d6b887d1d9eb08feb1361ed46af935ba3c2fb6280e001c4049f73be9a9601267128633e4d19cb6ce8f5dbb267033b5ffceb95fb67799f9f9becd337c23feaac669e6285edf2be0866c35112d29da1c936ca8a25f060f3550542d661e589832a441d83ac7511f40b9bcdf537267bb1f48b1bc0de75a042b318a3825613647ea8bbfcf5b430011b6f019c9bb11950fe9bb955c3f6476"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x446}}]}) 5.985333959s ago: executing program 0 (id=2033): r0 = userfaultfd(0x801) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000ac0fce405d0500904431000000010902120001000080040904"], 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000cfe000/0x4000)=nil, 0x4000}}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x2c}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000dc0)={0x0, &(0x7f00000007c0)=[@nested_vmresume={0x130, 0x18, 0x1}, @nested_amd_stgi={0x17e, 0x10}, @rdmsr={0x66, 0x18, {0xb80}}, @wr_crn={0x67, 0x20, {0x3, 0xfffffffffffffffb}}, @uexit={0x0, 0x18, 0x1}, @uexit={0x0, 0x18, 0x100}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @nested_load_code={0x12e, 0x63, {0x0, "f3410f20e7c744240000000000c74424021e3c0000c7442406000000000f011c24400f30c4417b112b8fe978811cbe2e2666400f3a412a13440f01c3c48185147a0e4f0fc75d0c0f597e00"}}, @wrmsr={0x65, 0x20, {0x8f5, 0x80}}, @set_irq_handler={0xc8, 0x20, {0x5d}}, @nested_load_code={0x12e, 0x7b, {0x0, "c481f8ae1f48b8fd920000000000000f23c00f21f835000007000f23f82e40d9fb67ab66ba410066ed66b824008ec80f01b0f4ff000048b804000000000000000f23c00f21f83502000c000f23f82e66460f38ddaa5e00000066ba4100b8f4000000ef"}}, @wrmsr={0x65, 0x20, {0x382, 0xffffffffffff2dba}}, @rdmsr={0x66, 0x18, {0xc0011031}}], 0x216}) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000e00)=@arm64) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000100)={0x2, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) r6 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r8 = add_key$user(&(0x7f0000000840), &(0x7f0000001f00)={'syz', 0x0}, &(0x7f00000003c0)="01", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000100)={r6, r7, r8}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r10, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_S_CTRL(r10, 0xc008561c, &(0x7f0000000000)={0xf0f046, 0x100410}) ptrace$setregset(0x4205, r9, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0", 0x93}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000300)=0xfffd7000) syz_open_dev$sndctrl(&(0x7f0000000240), 0xd, 0x2) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x4004) 4.358214379s ago: executing program 0 (id=2040): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0xc4, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x70, 0x8, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_FLAGS={0x8}]}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) syz_usb_connect$uac1(0x1, 0x72, &(0x7f0000000380)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x8211, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x2a, 0x0, 0x80, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfff7, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x7, 0x28, 0x20, {0x7, 0x25, 0x1, 0xc, 0x4, 0xaf2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x6, 0x4, 0x6, {0x7, 0x25, 0x1, 0x0, 0x1, 0x8}}}}}}}}]}}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x44c}}, {0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="2403f732513315b1cf38377f3fbe1657b60ac798c8e9ee96fc9658bd2e582c9744171710175e8a914566fe61a87ebc8fac6a6ddf2a892658a17cec194bd7ae02a5c1708d6d8b33f88f8053d9106fad4fbda2e120e89262a8a298ff4e14eba9f7079859b5173b8e4bc7f135e41a6f30c837eb96ef80292fe9fc55334860aa865bb4bf689947447def14dec5fb54fb0900000000000000911d"]}, {0x0, 0x0}, {0x0, 0x0}]}) 3.977380075s ago: executing program 2 (id=2044): r0 = add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000200)='foo#dnserror=1\x00', 0xf, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f00000003c0)=""/4096, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x3}}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4004}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f00000000c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_ublk_setup_io_uring(0x304e, &(0x7f00000003c0)={0x0, 0x7aa6, 0x400, 0x0, 0xf}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xffffffffffffff0f, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x279, 0x0, r10}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x0, 0x1000004, 0x10000003}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x8000, 0x2, 0x144, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x683d, 0x2, 0x1, 0x2000}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x20002, 0x1, 0xffffffef}}], 0x1, &(0x7f0000000340)={0x2e, 0x45, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x0, 0x20, {}, 0x0, 0x0, '\x00', {0x3, 0x5, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$pokeuser(0x6, 0x0, 0x388, 0x1) 3.909795925s ago: executing program 4 (id=2045): openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') r1 = epoll_create1(0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x5}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0xff, 0x7fff8001}]}) signalfd4(0xffffffffffffffff, &(0x7f0000001500)={[0x6]}, 0x8, 0x800) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x80000011}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x80, {0xffffffffffffffff, 0xffffffffffffffff, {}, 0x300, 0x5}}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f00000005c0)={0x40, "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"}) recvmmsg(r6, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000180)=""/184, 0xb8}, {&(0x7f0000000500)=""/145, 0x91}, {&(0x7f0000000340)=""/195, 0xc3}, {&(0x7f0000000440)=""/56, 0x38}, {&(0x7f0000001800)=""/166, 0xa6}, {&(0x7f00000018c0)=""/4091, 0xffb}], 0x6}, 0x2}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x3}], 0x7, 0x100, 0x0) 3.906905266s ago: executing program 1 (id=2046): unshare(0x22020600) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x300}], 0x1) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b3838108480b0310547b01020301090212000100000000090401"], 0x0) r1 = syz_open_dev$I2C(&(0x7f00000001c0), 0x78b5, 0x80) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000040)={&(0x7f0000000380)=[{0x96, 0x4601, 0x7d, &(0x7f00000002c0)="5d365217006a70cba8176eb127992f56f31114ffad30296a1891705a9b36b23590c15fa0abf9e75811839009152d5ed57e47ef6f8db423b038d83db5b5cf0b01a7c77b5f0fbdba140bbc58a73ec7d63280151a6070f36c850479af38b018cc915e04712d755fac5f17f0786ae565073451457426e2a9d67d76cb1737df"}], 0x1}) r2 = syz_usb_connect(0x3, 0x1134, &(0x7f0000000300)={{0x12, 0x1, 0x110, 0xf1, 0x3c, 0xe1, 0x8, 0x6d6, 0x31, 0x1e54, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1122, 0x4, 0x76, 0x7f, 0x90, 0x8, "", [{{0x9, 0x4, 0x63, 0xb7, 0xe, 0x9f, 0x12, 0xe0, 0x7, [@hid_hid={0x9, 0x21, 0x5, 0x8, 0x1, {0x22, 0xa8b}}], [{{0x9, 0x5, 0x3, 0x1, 0x0, 0x0, 0xc1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x81, 0xfccb}]}}, {{0x9, 0x5, 0x9, 0x2, 0x10, 0x1, 0x80, 0xa6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0xb}]}}, {{0x9, 0x5, 0xb, 0x10, 0x10, 0x7, 0xb, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0x3}]}}, {{0x9, 0x5, 0xe, 0x0, 0x0, 0x6, 0xf9, 0xff, [@generic={0xab, 0x8, "07f1b78b39fd406b703d3c409222191b716d23049972fb59d2d00f73afb3f42ac7e39b0628a00298c1cb3c5701b756f0f40d05972707d1909b0cb486e69af3f8f24f89cff3c910fe01a71898359a35d1de7c3cc45872955984bf4185fc24fc7547774cbe32a32efebf565bf3126b197c390231e1e22b523f06c555d695f3a5be3c167a0d8bfb384288dc202eaa39e55b707434f13e11cce374bd488e2f8dc58bd39bd80b47ab7e8d02"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0x7}]}}, {{0x9, 0x5, 0x2, 0x3, 0x200, 0x3, 0x2, 0x0, [@generic={0x1b, 0xd, "ee1aed00c493a95fd16c6391c0f549c775e474fc73b67de04b"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x10, 0x3d, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xf6, 0x74}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x4}]}}, {{0x9, 0x5, 0x9, 0x8, 0x20, 0x7f, 0xfd, 0x7, [@generic={0x93, 0xc, "5311b3f3ca10225a752298b036dbf92a9847fd4c9fd8e541850d1d7c54e4b171b612910d1abd1c409e4fd42664ae2fd7d2e3630e4679ca3f666b2f2a3f363366876544879f3d4068a7b61e942e81aade6c61ec30755341078778a033b3ec17ad9e0dfa5a26d29c56d00cbed0d84a7bc051821a96747fe50ac121a28b9dd0b78efed168d53c34e32f8b5d396ee6f0980690"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x39b, 0x10, 0xc, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x24fe5641201c3f89, 0x6, 0x9}]}}, {{0x9, 0x5, 0x8, 0x1, 0x0, 0xff, 0x5, 0x1, [@generic={0x4b, 0x6, "86ae079178eb612db48f0b956226e0cd434fc4cd899139a61a05c393a4d50ce682907d7abb0bab8fadca390bf7b141caa0c9dc8c35be7feca57dad0e1448630bb229453577dcf8f54a"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x6, 0x6, 0xff, [@generic={0x2d, 0x1, "6574a20b9e87b2eeea221750411528180d3c32bbfb85ceac9dc3df5993af2c7ba2bb97a558637c9b4b3aca"}, @generic={0x8f, 0x1, "2b14295186a352be1f3fce203c19d5b95799b41fbee437cde4d4f2142c095cabfaa40e6896a464e0a7d8c4cfedae08b3e6637badf355f90cab67e7832ee655b9b92e3f0b12d2f6109c2b24e6b1eeea94cd1e67d974cc74e169b75da4ef23ad9de054d209e3c57b646dc6a516dc96eb4cff52c8141b9afc6a7332e1015e96ed241f7c048fbb43badbb9ee137ab5"}]}}, {{0x9, 0x5, 0xa, 0xb, 0x7f7, 0x5, 0x2, 0xff, [@generic={0xf, 0x30, "3efce9122c20c671c2ff281222"}, @generic={0x72, 0x21, "52ee232478365f8707712266b4f9ebd4f745e0f9f4b41bdffbff4d0e8211cacde5a8d0b73b4fbc023d02b38dca84398f6a6cbd4dc87b63eb710f27a573f0972fb38d36570caba08941b6bcc5b0f434751b6ea6aa2da429e3ece271c1b51bda4691133c7e08ba9d3fcf0bff6d36e043ef"}]}}, {{0x9, 0x5, 0xf, 0x3, 0x20, 0x0, 0x3e, 0x1, [@generic={0xda, 0x10, "ddd82614d7ee75ac33ac3bbfc2f2250846da5654bc7203592273f40bea9c372abb8d67d61f0e3bb17d5a332b7c11bb3986b13b523565f0da619bf4971371471148926475607dae127cf4ee6940bd07891e91071f4b726f490b9948c7d41aeeecaaa8cf7fc689dc09acfc2f41ebcd8fcf7195e20247d5b928e06538d248e38e7a7ced77379ff3213a59c5ae342a0dd3c4ff95d2718dfbb7a4b91d143b53d34ec9c2144d7ca79df755f8380fe5ea3bd8744e6d2eef06f71096da945e12ae80f4a25e6f1ae7d3453c3b8b724eb713ceaf1ed325cf60c1894446"}, @generic={0x54, 0x21, "5bc5b7b6986ae43551f3da32020f6de5da32e4835a7fcd09e4ccb5eb528fadc0055beb28db2fcae898f0217b1f75875cbacb872ec8bd52f05a260234cb6e5a0c8c74c1ac0d76a143643546ea1c86c85c106c"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x6, 0xb0, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x50, 0x100}, @generic={0x41, 0x7, "dd02a28d0902665fb13d33e9ec6504bd12dab9a7f075354dd3c2441aa5dc32164bf4894e97beb9117fb197eca28c97895f5136ef98c0f612fbc250588c95e1"}]}}, {{0x9, 0x5, 0x80, 0x4, 0x8, 0x4, 0x7, 0x3, [@generic={0xa6, 0x23, "e7f7659da4181b94cfa1ef4567a3f0845e22af59aea8128741af5bc1d653c9ff27cd3b4d7ca09eaa81baf49a1d7100d52c699d6eccbaad5596cff56aa6727dd463e59fdfc504cdb0fc746a92eb8f988c2496968e1b318a5ff56a1baa2f14a6760048c6dfaad9154611007b19760e7a447936193340be27bf0ca386bfb13a733e77d180dbd6f8faaaa5090eca45143ffb842e1f946b16c54e3a003f380c0223615752ddf9"}, @generic={0x35, 0x21, "c411e7cdd2c79fdab7c48fce36d14c6e9a6abf37e88eec74e07627709f082735f5067827ae5e66d15fdf511d87e02e45fe1f81"}]}}]}}, {{0x9, 0x4, 0xf0, 0x8, 0xe, 0xb9, 0x80, 0xb7, 0x2, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "f21da8b781d8"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x7c, 0xf62b, 0x0, 0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x7, 0x4, 0x6, 0x1}, @mdlm={0x15, 0x24, 0x12, 0x9}, @obex={0x5, 0x24, 0x15, 0x6}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x1}]}], [{{0x9, 0x5, 0xd, 0x0, 0x10, 0xe, 0x9, 0x6, [@generic={0x23, 0x9, "575abfb7f35ff01d71a6cca5f3ae41059ecdfdaa6a604ec70154777b4586181af1"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0xfffa}]}}, {{0x9, 0x5, 0x80, 0x10, 0x40, 0x10, 0xa, 0x5, [@generic={0xe6, 0x2, "5b078b29472eb8ef4d6736c8300a20a0be7911255ce6dff574b58dbeecfc598f1fe1f8d94bd897aadf9ebd87057a6e4a3ffdbc25b71170c854fe2503347af276b223337a600c2c3fc4a450597c59f5b5c2add0e227cdd1b5cbf6fe115dc2b3330acd164499af1f0f7e71b2d1328644635b379d174bc8f0ef77c84215c039a8492738a84764d35d9b81138afe40c622b5fd15a9b7d1e346b42342d0f108d12ec5856905f335eed24cb009ab9db843888716214abffb6009f39113efbf76990a1a78c9b3ba1d987408f26f4ee0af1f87f14488d14e9d2ebd15ea1141c67087db39d1c9c545"}]}}, {{0x9, 0x5, 0x8, 0x8, 0x8, 0x8, 0x5, 0x4, [@generic={0x15, 0x10, "5c026a111c8fbb8409f8d216056ec064d1228e"}]}}, {{0x9, 0x5, 0x3, 0xc, 0x20, 0x4, 0x7f, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0x8}]}}, {{0x9, 0x5, 0xf, 0x3, 0x400, 0xfb, 0x4, 0x1, [@generic={0x5, 0x22, "5103ef"}]}}, {{0x9, 0x5, 0x9, 0x8, 0x20, 0xc8, 0xe3, 0x8, [@generic={0x9f, 0x23, "3dff51bfe3f7c156ff97eb6a1ebb1ead40c82ab23085b21d9896e3b35eb4e83975afc22da46f68b52dde5923975814159208ae03cbd648dfdc359e7c5e5945628bcd2d69a2b524a23fd24acc21517d735d2a4aa551242113e4e19b6a32ae625c54dfae30d6458eaaf79e0b1775aacf610b4470afe98d65ef6947991859e63caa573aa81869cba5d0fa2806bbad8e9c198d6c25036c3c123f400c43fa98"}, @generic={0x5a, 0x4, "52423940abb429051d322486c859dd6c71e5bc6149a07c4a00222233514499ea4953e9bc35827476f905cf73b76a5922dc8cebbc61d9206703f2ed259e65567d5d04a66f667f0e300d06bcfd52f3b40f056933003d4431e5"}]}}, {{0x9, 0x5, 0xa, 0xc, 0x40, 0x10, 0x0, 0x9, [@generic={0x53, 0x23, "9a5c3874e90d5535ad2e7b4ea46001b8c482674cb990eed626bef7f5f495291d07efcaee8c46f586ec705fa50e68a55bbf353ad07aa90b45c67fbaf49e2d7d09c803e9daac38342ea097cb3ca1f370439f"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x200, 0x4, 0x9, 0x0, [@generic={0xe1, 0x0, "99c06d7126bb584540bfd6b154c6792563a957ae24905ba76a36adf76e87eaef27e67a9253737a358f97e4e999f17bde8e774f0e3caed144b05aafccd798f0b35a70bae6482e59d61a223ed3ea2944e550b299aff06eba3238da223a96f80b86f37045071d945bc8cd313bd7ba6f5e28a935588c64b96a5b4b061af660b7ee9bbea981d7b88c3cac7eae6193ab4e7294cbf8a347cc28c4ac7b71f589169fe79268ab544a6ce34dd050814dd876e829c25abfaf97bf01eede0a5a50bdb06ad1ad2275ea9a3d67f04b68f71ba22dfb277940f7afe43ad9a1def5a8bbf9899bf7"}]}}, {{0x9, 0x5, 0x80, 0x8, 0x10, 0xa, 0x2, 0x0, [@generic={0xe6, 0x7, "b7f4908c7a86f3e903a3cec4e74448e48c8ec2a32fb6708b6527d676d95d06fe138a5c86ecaf871867843dfc32e28d33fef03c23d5857aff47cd76ffe0e526278fa8f47859297e597318987c68eadb602c6874e447e6424025aa0ffd6885f294ac31fc64191863aa70f28dd8324c32a7994a244fb8e190270fa849a02bc0724ab1a28d86db9eac90a0053fb4a1aad0411ef7d1be5caf63e908847038392ff5a5180b4bbf16e94be0c873e71b4556f9e8b9845873a04a2343365ddde01b2aff9ef0943601d08c19d808dd6928cc639ee01e1b19c03a32867aa69e3a59c74b8e1c7cc92206"}]}}, {{0x9, 0x5, 0x40, 0x10, 0x40, 0x1, 0xec, 0x7f, [@generic={0xe0, 0x11, "45e1cc8617999ef51fe2b21f3d74486ef38a0e63468361d1acbf388e4e0183ae0e8ca796dfc6fe7a5cf3263e31649e04a68de55caedaefe5a6e09e1f173ef5a95820bc5fd6c0ef9f15c37f71135d9cf302ab48d25223cd2a88a619f179718822cc2e4a42d1c2570b834f11a2df7977c75932ad39edbe9f8547797410a899c47eba37c158ee515fcb8cf85c5d789d2f67fb1a8b2767262a9477d2a2bcf2adb41e8ae18e54087905f14fc36d1a5e6bf3a238c73eefd618b33b6d7b5f1bf0cc3c08c560582b554ea05c1b9334ce689458c38b0d20b7d6a8556db9e1e80d52ec"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0x3, 0x7, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x3}]}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x6, 0x62, 0x6, [@generic={0xff, 0x6, "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"}]}}, {{0x9, 0x5, 0x4, 0x2, 0x8, 0x8, 0x10, 0x6d, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x3}, @generic={0xc6, 0x21, "95676d988ed53256f5f04b8e585a58451e03978846386b4a4a7e5af6c7ff42d2a25a424c9d5a73d161219b9ed20bf9b9dbe8fa7fe051e83ae9de7966f639059d66d8807c51d1ca61419e2a3c06c04cc95780d292e808c58b2e9a166a76f6b7f0a970be5412e1685a615f82a879166c669c13d820fef772821a4e48b3ab190f40a533a02910b2343b67004c18a7b6376509acd73d85311d1ff3933db3287bd7735edc1933a8b0bd718c65b8b5f957946aed59a4f4d911733ce8896dd2624f6044c420475b"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0xc, 0x4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x91, 0x400}, @generic={0xd1, 0x22, "0dad03c66efdb53443c4a7984cea8ca831864c12b5fa1dc80f90fdbdba6ed678b572579b6b3d324af523a53ee89e7f358e54bd04ba443b151a80e27743b5d7b4ef9a5e23af4cf5accac6440ec751539ba660432c7c080fcddb40a313310165b399c012ed9758177324effd63c39069ed1009c3307160093b3bacab2e00b731ae0cb223fb7cf0847a5384a220905fdbd8aa60d0812cdb1ad3b594fba5b467f7a1f19ba3dafea1de57c78e64128fdfabc4ff33cfc12acc2f6db8cf4b31ddd34bd34e51c8ca95904234aef2d3c6fdaf3f"}]}}]}}, {{0x9, 0x4, 0xb1, 0xf6, 0x1, 0xf2, 0x63, 0xa6, 0xf5, [@uac_control={{0xa, 0x24, 0x1, 0x9, 0x31}, [@processing_unit={0x7, 0x24, 0x7, 0x2, 0x6}, @processing_unit={0xc, 0x24, 0x7, 0x6, 0x3, 0x5, "b7dc7de57a"}, @selector_unit={0xb, 0x24, 0x5, 0x3, 0x7, "97706ae43e3f"}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x101, 0x4, 0x4, 0x8}]}], [{{0x9, 0x5, 0x7, 0x6, 0x8, 0x0, 0x2, 0xfa, [@generic={0xcb, 0x30, "7bbeb9586930e3ac1d73befe63ae0c0eccc99e893da8c58e0bf5fbd0d6628d6d819af65515de48c6a902a92deb9e16d699d0f16db8edbbf223ad9089e71d53bcff29f955a27cefdc3f7f7fde10d51330abb4854c613fb4eddca3b58f39a6300c210eb05b58776e891eeb53c1f28cca1856b1b80ed7ef1969d3b455968e71beaae044556e0fb3387465de964360d5e757ed7a96b35662bf476eb36686ed14ca867ad7b0a940d2bd7cfdc4408d7adeafe68448ec4336dfb97704035e08435186891b7314319b32427240"}]}}]}}, {{0x9, 0x4, 0x55, 0xd1, 0x4, 0xff, 0x6, 0x6, 0x40, [@uac_control={{0xa, 0x24, 0x1, 0x5, 0x2a}, [@mixer_unit={0x5, 0x24, 0x4, 0x1, 0x9}, @feature_unit={0xb, 0x24, 0x6, 0x1, 0x4, 0x2, [0x2, 0x6], 0x2}, @selector_unit={0x7, 0x24, 0x5, 0x4, 0xfe, "06e9"}, @feature_unit={0x9, 0x24, 0x6, 0x5, 0x5, 0x1, [0x3], 0x83}]}, @hid_hid={0x9, 0x21, 0x1, 0x3, 0x1, {0x22, 0xd47}}], [{{0x9, 0x5, 0x8, 0x10, 0x8, 0xfb, 0x5, 0x8, [@generic={0x46, 0x31, "bda859ff7393f4677592ad5e1cd6d13abfef1a6d4283f99f310d04fc2f201934c0c56902a82b89ddfef59a35dfe79084291718d724bd08a6ae04981b2b341387eb69a4f7"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x200, 0x7, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x6}]}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0xa, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x5}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x8, 0xb0, 0x0, [@generic={0xbd, 0x3, "cd0e5748f6753a62d588c7f4f5b0e657152ca91b15e31c0f96753ae8fc184a585c930c9eed6927cb4e0bd0ed23dd1ea26fa5659dfd93702bcaeb93d6ff674d7ef2f25e27f1c68d5d2240be2b6046bb66b6a1f8ff7acbb1d9d5fa341592965d1fc3791e101eda0f60cccdb90c27a9b795082c928d2f4166ec099f34846f9045addcf4f970f625e5438ac43ffa419411ffda4be5acee2466a47ed081ce17a42e2521e56d1e8c5403f3b95c6aa8f582f86003dd2f57f94f2ba12cb15f"}]}}]}}]}}]}}, &(0x7f0000001900)={0xa, &(0x7f0000001440)={0xa, 0x6, 0x250, 0x81, 0xf, 0x4, 0x58c39e8f525710f8, 0x6}, 0x5c, &(0x7f0000001480)={0x5, 0xf, 0x5c, 0x4, [@generic={0x28, 0x10, 0x2, "2d023ada17829bcfb2775fb914412149611672c535ef6c722a52d8bd0003271360a268e414"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "d0b90733bfbe42e0b7d2faab1ed0ac23"}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0xd, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "db5b51912fb3ee653c0c67ffd554c270"}]}, 0x7, [{0x4, &(0x7f0000001500)=@lang_id={0x4, 0x3, 0x2009}}, {0x4, &(0x7f0000001540)=@lang_id={0x4, 0x3, 0x1801}}, {0x102, &(0x7f0000001580)=@string={0x102, 0x3, "e67dad5610486d99fab427056750de930a0afb37df3ec09b3c5a2728c452f3711abc751d277922d3ab9dad823d01d3ca8cd937bc2556c878d516fae945c0e4fb70177f1023a4ea5ce8a0252ac408c259583dd787cc5c5c325776b66ce57cff8d1efee1081d306d72ce24ba78ed605762dfd0a378ac36b151376d79a64fc8ac476438cf077d2433f9eefe0fa9a9be71acaa064c5458820285229f886907fef9b41b088798cbe2ff595d9e2522c06af77210e3a53b9a86afd81057af860ef093f0f692fe4972b0901eeef8df56d119ecfa4a6b80de3f2cb16b1318305b90994e7de0ca607bde944e8a34c79732127902f04151a7a95c611dd6cb83df7b0c657351"}}, {0x42, &(0x7f00000016c0)=@string={0x42, 0x3, "a31c618826d8a6cb27c1feece674dbcf96cf73cee0b51adea75f4f585ebbe4d132135452329a79eaa1e262114b291c41ebe186497c6233b5afcf8f020bf3c541"}}, {0xf0, &(0x7f0000001740)=@string={0xf0, 0x3, "091ac3d7de3e30db21565a0ad5639f2bf0f9a00076aab4b07dbee256574d2b74d7869bd851539a8ce221f19a6587d863f5c684bd561cb750b10a72cf2a0c34a28e180c8b86b21d989361d4888834153d188333010c4f6fb4e5a5a748a99ae3c88087ae2a3d15005cca4151c2671e770b7eacc3b46ee7e9ad63afe0863c829af93d9b84b1c0e907158cc64575a92bc4d13f375af5c9964edb67bc96d3b6fc2cb4922679d2c474aeff064a94922c92bd1f443bfa56f0545abac23cfdc579098584d1af8abf429c73abec90ee78f27d4334fdb09b676f2c962f0aee2b3f8d0c32a5a726190a110e5cfda844243e37c0"}}, {0x60, &(0x7f0000001840)=@string={0x60, 0x3, "19e64ea4bb8deda67aad719ecfec8688c9338a039200ee95aa4ecbe519655fe25026aed85f1759ceac6b5242fc99e017ff0750543ebebb79f6c19418e968cefeaf602a44c4b548573f1814875a8400a248c1bf29e6442ae8c79826f2840a"}}, {0x4, &(0x7f00000018c0)=@lang_id={0x4}}]}) syz_usb_control_io$hid(r2, &(0x7f0000001980)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40000) read(r3, 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000500)='/proc/sys/net/ipv4/tcp_recovery\x00', 0x1, 0x0) pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000140)="ec3a", 0x2}], 0xa, 0x9, 0x26d0d5f1) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r0) syz_usb_connect$uac2(0x5, 0xdf, &(0x7f00000019c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x46d, 0x8ae, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcd, 0x3, 0x1, 0x8, 0x20, 0x2, {0x8, 0xb, 0x2, 0x2, 0x1, 0xa}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x6, 0x6, 0x1a, 0x8}, [@selector_unit={0x9, 0x24, 0xb, 0x60, 0x4, "e296dc80"}, @source_unit={0x8, 0x24, 0xa, 0x4, 0x0, 0x2, 0x6, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x2, 0xf9, 0x0, 0x0, 0xb, 0x3, 0x9}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x27, 0xf5, 0x4, {0x8, 0x25, 0x1, 0x0, 0xf, 0x81, 0x74e3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x7, 0x3, 0x2, 0x3, "c1d07aa4c2da0f45e6"}, @as_header={0x10, 0x24, 0x1, 0x93, 0x8, 0x0, 0x0, 0x0, 0x5, 0x2}, @as_header={0x10, 0x24, 0x1, 0x8, 0xb, 0x2, 0x1, 0x4, 0x10000}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0xd7}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x8, 0x0, 0xe8, {0x8, 0x25, 0x1, 0x82, 0x18, 0xf7, 0x7956}}}}}}}}]}}, &(0x7f0000001d00)={0xa, &(0x7f0000001ac0)={0xa, 0x6, 0x201, 0x0, 0x2, 0x8, 0x40, 0x80}, 0xd0, &(0x7f0000001b00)={0x5, 0xf, 0xd0, 0x2, [@generic={0xb7, 0x10, 0x4, "54e19fde82e803bafc231c2e38f5fe1a43b759120ac9c988575faf66e3fb234f1a87e23df5080c678a7175a30eb8ef94a09e8f76708857667f99f6868e78e17d3ba07d95a79daa3849a3713a3a8aabf711dc80645b37514f39295476b6a4b31141e39b89fd441dfb48ececc58f343525b4d73f1912c989adf87ce4fb5abcfbece1e5ccfca1c15675c039cb95ed0a38f1759f55c84320103166a4ec313293eb7313324109aaa2eeb889d67435ad62b4243875fe47"}, @ss_container_id={0x14, 0x10, 0x4, 0x72, "1a42af1fb43ceae84625fcb77c04481d"}]}, 0x2, [{0xb7, &(0x7f0000001c00)=@string={0xb7, 0x3, "83ac63f8fd4d40124724a8bfb274a7f2c32befc77f94d41c0076e82b5131a76067df8f48f646ee7acb6077590122e06ac6b2298f8612ab664100655da1a3b208336752245d478e888afbf9d8073022993e63f8bd6385ffe1510b30217131a822764ba6901fed8bbc7d3520d53dd2b1369935b67a8f9ded2e247df8dbeba66a9108c63b918dc27dc7e0bcd57675aa5ef60928366d814d0805cfa549300cbe7bff6fab20c44ccc550c7b0509bff58674e0680aa576bb"}}, {0x4, &(0x7f0000001cc0)=@lang_id={0x4, 0x3, 0x1413}}]}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x70, r5, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf7}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xc5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000080}, 0x44800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x4, 0x3, 0xc, 0x8, 0x3, @empty, @empty, 0x700, 0x7800, 0x401, 0x8}}) ioctl$EVIOCGKEYCODE(r6, 0x80084504, 0x0) 3.558930122s ago: executing program 3 (id=2047): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400002000000000000200000008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000040c0001800800014000000004540000000c0a01010000000000000000020000000900020073797a31000000000900010073797a30000000002800038024000080100001800c0001000000e4ff0000000010000a800c000100", @ANYRES64], 0x100}, 0x1, 0x0, 0x0, 0x8894}, 0x0) 3.534447866s ago: executing program 4 (id=2048): socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x800) socket$netlink(0x10, 0x3, 0x8000000004) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040000) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) r2 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x89882) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000040)=0x85) r3 = socket$inet(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000300)=0x5, 0x4) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r3, &(0x7f0000000040)="ee", 0xffffffffffffff75, 0x20004010, 0x0, 0x0) 3.165166695s ago: executing program 3 (id=2049): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = getpgrp(0xffffffffffffffff) sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0xe979) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/rcu_expedited', 0x2002, 0x8) r4 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r4, 0x40045731, &(0x7f0000000040)={0x1}) syz_usb_connect(0x0, 0x57, &(0x7f0000000300)=ANY=[@ANYBLOB="12010102882333404f17318af4390102030109024500013f06400409044207000e0100010a240107000105ff0103020707240501"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) syz_open_dev$video(&(0x7f0000000080), 0x7f, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r7, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r8) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x59, 0xa, 0x100, "3258c5c0d651aa231b002800000000000000000000000900", 0x56595559}) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a5f74756e"], 0x38}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffe5a093f5b5f234ffffffffaabbccddee79576bddf16fdf70f2faff88ca5b500028003a0000000000000100000100001267000000"], 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000200)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0003001000000002800000121f", 0x2e}], 0x1}, 0x20008000) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000240)={0x3, 0xb3eb87fdc0c6a685, 0xfa00, {{0xa, 0x4e26, 0x7, @loopback, 0x2000009}, {0xa, 0x4e23, 0x6, @empty, 0x7ffffffc}, 0xffffffffffffffff, 0x80d}}, 0x48) ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0x1d2) r10 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r10, 0x4080aebf, &(0x7f0000003ec0)=@svm={0x0, 0x1, 0x1080, {0x1ffe, 0x7}, {"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"}}) ioctl$KVM_RUN(r10, 0xae80, 0x0) 2.815464903s ago: executing program 0 (id=2050): r0 = userfaultfd(0x801) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000ac0fce405d0500904431000000010902120001000080040904"], 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000cfe000/0x4000)=nil, 0x4000}}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x2c}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000dc0)={0x0, &(0x7f00000007c0)=[@nested_vmresume={0x130, 0x18, 0x1}, @nested_amd_stgi={0x17e, 0x10}, @rdmsr={0x66, 0x18, {0xb80}}, @wr_crn={0x67, 0x20, {0x3, 0xfffffffffffffffb}}, @uexit={0x0, 0x18, 0x1}, @uexit={0x0, 0x18, 0x100}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @nested_load_code={0x12e, 0x63, {0x0, "f3410f20e7c744240000000000c74424021e3c0000c7442406000000000f011c24400f30c4417b112b8fe978811cbe2e2666400f3a412a13440f01c3c48185147a0e4f0fc75d0c0f597e00"}}, @wrmsr={0x65, 0x20, {0x8f5, 0x80}}, @set_irq_handler={0xc8, 0x20, {0x5d}}, @nested_load_code={0x12e, 0x7b, {0x0, "c481f8ae1f48b8fd920000000000000f23c00f21f835000007000f23f82e40d9fb67ab66ba410066ed66b824008ec80f01b0f4ff000048b804000000000000000f23c00f21f83502000c000f23f82e66460f38ddaa5e00000066ba4100b8f4000000ef"}}, @wrmsr={0x65, 0x20, {0x382, 0xffffffffffff2dba}}, @rdmsr={0x66, 0x18, {0xc0011031}}], 0x216}) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000e00)=@arm64) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000100)={0x2, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) r6 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r8 = add_key$user(&(0x7f0000000840), &(0x7f0000001f00)={'syz', 0x0}, &(0x7f00000003c0)="01", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000100)={r6, r7, r8}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r10, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_S_CTRL(r10, 0xc008561c, &(0x7f0000000000)={0xf0f046, 0x100410}) ptrace$setregset(0x4205, r9, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0", 0x93}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000300)=0xfffd7000) syz_open_dev$sndctrl(&(0x7f0000000240), 0xd, 0x2) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x4004) 2.73089061s ago: executing program 2 (id=2051): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000fb0000000000000000000500000a20000000000a010400000000000000000500000a0900010073797a30000000005c000000030a010400000000000000000500000a0900010073797a30000000000900030073797a30000000002800048008000140000000000800024000000001140003006e657464657673696d3000000000000008000a400000000260000000060a01fc74f64900000000000500000a0900010073797a30000000000900020073797a300000000034000480300001800e000100696d6d6564696174650000001c0002800800014000000000100002800c000280080001800000000114000000110001"], 0x104}}, 0x0) 2.346984645s ago: executing program 2 (id=2052): r0 = epoll_create1(0x80000) r1 = socket(0x1, 0x80802, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r4, 0xd, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044848}, 0x20048000) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r6, &(0x7f0000000100)={0xa000000d}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @loopback}}, 0x0, 0x0, 0x24, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000040)=0x3ff, 0x4) connect$inet(r7, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r7, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x80000000}) epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000140)={0x60000008}) 2.255986199s ago: executing program 1 (id=2053): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 1.889491402s ago: executing program 1 (id=2054): r0 = epoll_create1(0x80000) r1 = socket(0x1, 0x80802, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r4, 0xd, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044848}, 0x20048000) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r6, &(0x7f0000000100)={0xa000000d}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @loopback}}, 0x0, 0x0, 0x24, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000040)=0x3ff, 0x4) connect$inet(r7, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r7, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x80000000}) r8 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r0, &(0x7f00000000c0)={0xf0000018}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000140)={0x60000008}) 1.469029024s ago: executing program 3 (id=2055): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000001060010010000"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) 1.369236009s ago: executing program 2 (id=2056): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000010000000000200000008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000030c0001800800014000000004440000000e0a01010000000000000000020000000900020073797a31000000000900010073797a30"], 0xf0}}, 0x0) 1.149126017s ago: executing program 3 (id=2057): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000000ac0)={0x14, 0x11, 0x8, 0x301, 0x70bd27, 0x25d7dbf8, {0x1, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x6d09847b7b7fd904}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@security={'security\x00', 0x3a, 0x4, 0x338, 0xffffffff, 0x110, 0x0, 0x1a8, 0x110, 0xffffffff, 0x110, 0x2a0, 0x2a0, 0x90, 0x4, 0x0, {[{{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ip={@empty, @private, 0x0, 0x0, 'vlan0\x00', 'vlan0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) 1.103246918s ago: executing program 0 (id=2058): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba", 0x10}], 0x1}], 0x1, 0x40800) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @loopback, 0xb98}, 0xfffffffffffffeb7, 0x0}, 0x440e0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 999.752954ms ago: executing program 1 (id=2059): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8402, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000500)="2e66f30f090f011b6766c7442400f88d9a116766c7442402ce0000006766c744240600000000670f011c2464650f01c8dbc6b8e4000f00d866b8000000000f23d80f21f86635400000200f23f8f30fa7e8b8e6008ed80f01c9", 0x59}], 0x1, 0x13, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0, 0x9}], 0x1, 0x1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) modify_ldt$write2(0x11, &(0x7f0000000200)={0xd8a, 0x0, 0x2000, 0x0, 0x3, 0x1, 0x1, 0x1}, 0x10) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000340)={0x100, 0x0, 0x0, 'queue1\x00', 0x5}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"/323], 0x90}, 0x1, 0x0, 0x0, 0x40081}, 0x400c856) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) r6 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x189083) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r6, 0x40045702, &(0x7f0000000040)) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r6, 0xc0305710, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x1, 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x1, 0x2, 0x0, 0x1}, 0x6}) close(0x3) openat$sequencer(0xffffffffffffff9c, &(0x7f0000003480), 0x81402, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) pipe(&(0x7f0000000440)) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r9, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r8, 0x0}]) write$binfmt_aout(r7, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r7, 0x40045431, &(0x7f00000000c0)={0x8, 0x0, 0x7f, 0x6, 0x1, "ec720d001ef6be99b473d27aef0100008000"}) 975.37667ms ago: executing program 4 (id=2060): set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf) r0 = socket$inet6(0xa, 0x3, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x3a8, 0x0, 0xffffffff, 0xffffffff, 0x158, 0xffffffff, 0x2d8, 0xffffffff, 0xffffffff, 0x2d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x1100, 0xffffffff], [0xffffff00, 0x0, 0xffffff00, 0xffffff00], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x7}, 0x0, 0x130, 0x158, 0x0, {}, [@common=@frag={{0x30}, {[0x4e30], 0xcf50, 0x2, 0x2}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x15, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x2}}}, {{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @dev}, [0xffffffff, 0xffffff00], [], 'erspan0\x00', 'gretap0\x00', {}, {}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x150, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x11, 0x7, 0x3ff}, {0x2}}}, @common=@inet=@multiport={{0x50}, {0x1, 0x1, [0x4e23, 0x4e21, 0x4e23, 0x4e23, 0x4e22, 0x4e24, 0x4e22, 0x4e20, 0x4e24, 0x4e24, 0x4e21, 0x4e21, 0x4e23, 0x4e24, 0x4e24], [0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1]}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x408) 861.724578ms ago: executing program 2 (id=2061): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000011100100000d000000aa00000000000054"], 0x30}, 0x0) 861.188784ms ago: executing program 3 (id=2062): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000fc0000000000000000000500000a20000000000a010400000000000000000500000a0900010073797a30000000005c000000030a010400000000000000000500000a0900010073797a30000000000900030073797a30000000002800048008000140000000000800024000000001140003006e657464657673696d3000000000000008000a400000000260000000060a01fc74f64900000000000500000a0900010073797a30000000000900020073797a300000000034000480300001800e000100696d6d6564696174650000001c0002800800014000000000100002800c000280080001800000000114000000110001"], 0x104}}, 0x0) 710.141694ms ago: executing program 2 (id=2063): r0 = syz_open_dev$dvb_frontend(&(0x7f00000000c0), 0x0, 0x882) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x88, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048014) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="800066180a000200aaaaaaaaaa0c0000"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x7, 0x4, 0x806, 0x4}, 0x2, 0x4017, &(0x7f00000021c0)={{0x3, 0x2, 0x9, 0x4c}}, 0x3317, 0x0, 0x8}}) r6 = socket$inet6(0xa, 0x4, 0x15278441) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90f24fc60", 0x14}], 0x1}, 0x0) sendmmsg(r7, &(0x7f0000000f40)=[{{&(0x7f0000000340)=@in={0x2, 0x4e21, @empty}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="0745509fe994f535cb2c6ac903a33ad02d18775d883eea20575572f9b2a6c7f907f7853f886a79a9bf1b16", 0x2b}, {&(0x7f0000000500)="85b1022a41ee93c3db81e04cc75a5c84308a49c40ea22563e3f870051a0e2e96dc6baafe402923b0a1ae92f15484d5705b99ab6e6572c693f8f91a787c28a11d727886c8053a80cf995f603adca7e1c5b55c205fc5cbc89e", 0x58}], 0x2, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x1b8}}, {{&(0x7f0000000940)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4, 0x1, 0x1, 0x3, {0xa, 0x2, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}}}, 0x80, &(0x7f0000000dc0)=[{&(0x7f00000009c0)="9afd048a611c07a1b3763584b037f8feb0fb8eccdc6846624d6081568848c21496be1926e17671c982f7cdfb992735118dcd95fd42a90fa91039b12f8127f521e33aa14b4e165d3e450868cb04d73c6d80c9f4c29be9f784d7b82537d8be22e3a15105a728f8a2526e6454bbbc5c3521849259b9af640caa2109d81aa2469756158d570249e08b772ffb6bc1ad758b2eafe3cbad8df0f952da6ba12c8b1dde73892e42e87e3b4a4693b976b246294f", 0xaf}, {&(0x7f0000000a80)="e4e9787972f604585c0738b0956174cf6baf8ad342a5b666a244bfa266a937aa8a10abb98da16080581e555490346f66e26bec97faf7acb3efb00548c2cec2be29226bf2ebf79e06ce414226edf1955aa9692e74b78688d83b30059352387258de0d1effff8cee9fb1c3397db9c3ef19e3e70d44006c5625ba005a2fc6dafd421a09beb388170bfa03d5ecd436c82d54ecf9eecc1fed39ea026294d9ae0f137f68cf717e01d106fafc09803f760d1ef38f55773d", 0xb4}, {&(0x7f0000000b80)="ac39fbe9a242dcf6376873f7d56bf1714974bea7940d310b", 0x18}, {&(0x7f0000000bc0)="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", 0xfb}, {&(0x7f0000000cc0)="d8b9789ffd6394c4b7d81363516a672d101454ee33d8753c9217cb65933e246919f454165cd1e5e30eedbc84a719e3c580f1cbb73090e4e2907bded6b90bbd730ce0647ab3b7fb40afd4ec4d2b36dc7fab53e59213d983b2e1d3f55c22cc102280bc758c1574ee91ac86de6ba9436f06b421002f61b2714427e3a3f410f2b6358bdc125683d06852ebb88358005a06ccecbcc51a6187c65a76b20672677bab3129a94f064de0d6469f853ed8ce6ccca36567480b7881ba6f70b1e3d6077a6b72c2f42a1ebce26a19b832f49632dbb96617c27318198aed63c1", 0xd9}], 0x5, &(0x7f0000000e40)=[{0x100, 0x3a, 0x3, "36c12a01b2dc74402601287021d9ecd8449a19aab0ef3f382b1d65d7cea550aa82e28ca5443795b753b694b15931dd6cfde21cc77a0a25940ba5d5f0c3f3d394dcb57dd4733598ebbcf82251ae11d53564876f85188f262963c9827fabed64493d1dde791e21b3af4326e603b5d06c24006fff5669fa7f37c25d7bdfd759faa54b92a52cc3edea35cf771f95ce66e68154e1e2707f83c341147d06bfc4a019f1688181d11292d3117569571d118e077cec83c8869e90e518bfbc028fecb5269af7a34b7a78ca4ad9660632e652146a0b4ab76ea38d3d8833bb446ce93eead1031bfdb2e469b838e87513"}], 0x100}}], 0x2, 0x4000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x1c, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x1, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r4, @ANYRESHEX=r3, @ANYRESDEC, @ANYRESHEX, @ANYRES8=r1, @ANYRES16=r3, @ANYRES64=r1, @ANYRES8=r6], 0x1c}, 0x1, 0x0, 0x0, 0x4801d}, 0x20000804) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004084) r9 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r9, 0xc03064ca, &(0x7f0000000140)={0x0, 0x0}) r10 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000000040)={0x84, @local, 0x4e1f, 0xfffffffe, 'sh\x00', 0x11, 0x10000004, 0x8}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r10, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010101, 0x4e21, 0x3, 'sh\x00', 0x23, 0x81, 0x3e}, {@loopback, 0x4e23, 0x10000, 0x1cb, 0x12d65, 0x90c}}, 0x44) ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000000)={0x30a32c0, 0x2, @ofdm={0x1, 0x1b, 0xc, 0x1e, 0x3, 0x6}}) 703.078456ms ago: executing program 4 (id=2064): ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000080)={0x7ae, 0xffffffffffffffff, 'id1\x00'}) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0xf51, &(0x7f00000001c0)={0x0, 0xbbda, 0x13500}, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@ipv6_getroute={0x24, 0x1a, 0x501, 0x70bd2a, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x9}, [@RTA_OIF={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x2) dup3(r1, r6, 0x80000) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000001c000000000000001c000004000000"]) 642.411541ms ago: executing program 3 (id=2065): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba", 0x10}], 0x1}], 0x1, 0x40800) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f00000000c0)={0x3, 0xfffffff9, 0x820, 0x4, 0x0, "4b480f8b000a0000000000f64a00001ae400", 0x388, 0x1005}) readv(r3, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/16, 0x10}], 0x1) 463.620694ms ago: executing program 4 (id=2066): r0 = syz_open_dev$dvb_frontend(&(0x7f00000000c0), 0x0, 0x882) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x88, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048014) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="800066180a000200aaaaaaaaaa0c0000"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x7, 0x4, 0x806, 0x4}, 0x2, 0x4017, &(0x7f00000021c0)={{0x3, 0x2, 0x9, 0x4c}}, 0x3317, 0x0, 0x8}}) r6 = socket$inet6(0xa, 0x4, 0x15278441) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90f24fc60", 0x14}], 0x1}, 0x0) sendmmsg(r7, &(0x7f0000000f40)=[{{&(0x7f0000000340)=@in={0x2, 0x4e21, @empty}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="0745509fe994f535cb2c6ac903a33ad02d18775d883eea20575572f9b2a6c7f907f7853f886a79a9bf1b16", 0x2b}, {&(0x7f0000000500)="85b1022a41ee93c3db81e04cc75a5c84308a49c40ea22563e3f870051a0e2e96dc6baafe402923b0a1ae92f15484d5705b99ab6e6572c693f8f91a787c28a11d727886c8053a80cf995f603adca7e1c5b55c205fc5cbc89e", 0x58}], 0x2, &(0x7f0000000fc0)=ANY=[@ANYBLOB="180000000000000029000000030000008398630077ff94ee4800000000000000060000008800000085ba83d3071e10fd8f80ca24d075e67d2f012fe289981258c8753f91ecc00f83bb2b6a248405408ee1660ced499a00b48181bf42f2021a21ce000000900000000000000009010000ff0100001b0b2b37932458c54b3004f689bff044190e4a5e2a7e993aef28ccba52a46bfbe9224c13d31e8625b1e4cf1fda90ca769ff7952c2885a09d755454ab01f75dd8776a2c130185bb13f48b170aa5fe9d1ef5a46378116cb2433e29f4284842be95132c073bc49e253b60beefb745bc75dc0039d3e06de48d2cd8dd1c800000000018000000000000001701000008000000098c54000000000030000000000000001100000000000000629394d7374db39647a1ab05a13da205864409865b1c452cb19f33962153910080000000000000000000000000000000a72808f30e297714db967fc5633293eee6c578ad889679d8faf334b6fb2e4d7eb17c8a002f677d8154eef1f58c4f5da4f8683f05a564831c8d8d5ea8645dcd01000b4917b02fdea0ee60d928b4b0eedf612d4d0f4d71fe17ce26d1a3a818dacfb72e091300b2b34c8076d7281e007ca4"], 0x1b8}}, {{&(0x7f0000000940)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4, 0x1, 0x1, 0x3, {0xa, 0x2, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}}}, 0x80, &(0x7f0000000dc0)=[{&(0x7f00000009c0)="9afd048a611c07a1b3763584b037f8feb0fb8eccdc6846624d6081568848c21496be1926e17671c982f7cdfb992735118dcd95fd42a90fa91039b12f8127f521e33aa14b4e165d3e450868cb04d73c6d80c9f4c29be9f784d7b82537d8be22e3a15105a728f8a2526e6454bbbc5c3521849259b9af640caa2109d81aa2469756158d570249e08b772ffb6bc1ad758b2eafe3cbad8df0f952da6ba12c8b1dde73892e42e87e3b4a4693b976b246294f", 0xaf}, {&(0x7f0000000a80)="e4e9787972f604585c0738b0956174cf6baf8ad342a5b666a244bfa266a937aa8a10abb98da16080581e555490346f66e26bec97faf7acb3efb00548c2cec2be29226bf2ebf79e06ce414226edf1955aa9692e74b78688d83b30059352387258de0d1effff8cee9fb1c3397db9c3ef19e3e70d44006c5625ba005a2fc6dafd421a09beb388170bfa03d5ecd436c82d54ecf9eecc1fed39ea026294d9ae0f137f68cf717e01d106fafc09803f760d1ef38f55773d", 0xb4}, {&(0x7f0000000b80)="ac39fbe9a242dcf6376873f7d56bf1714974bea7940d310b", 0x18}, {&(0x7f0000000bc0)="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", 0xfb}, {&(0x7f0000000cc0)="d8b9789ffd6394c4b7d81363516a672d101454ee33d8753c9217cb65933e246919f454165cd1e5e30eedbc84a719e3c580f1cbb73090e4e2907bded6b90bbd730ce0647ab3b7fb40afd4ec4d2b36dc7fab53e59213d983b2e1d3f55c22cc102280bc758c1574ee91ac86de6ba9436f06b421002f61b2714427e3a3f410f2b6358bdc125683d06852ebb88358005a06ccecbcc51a6187c65a76b20672677bab3129a94f064de0d6469f853ed8ce6ccca36567480b7881ba6f70b1e3d6077a6b72c2f42a1ebce26a19b832f49632dbb96617c27318198aed63c1", 0xd9}], 0x5, &(0x7f0000000e40)=[{0x100, 0x3a, 0x3, "36c12a01b2dc74402601287021d9ecd8449a19aab0ef3f382b1d65d7cea550aa82e28ca5443795b753b694b15931dd6cfde21cc77a0a25940ba5d5f0c3f3d394dcb57dd4733598ebbcf82251ae11d53564876f85188f262963c9827fabed64493d1dde791e21b3af4326e603b5d06c24006fff5669fa7f37c25d7bdfd759faa54b92a52cc3edea35cf771f95ce66e68154e1e2707f83c341147d06bfc4a019f1688181d11292d3117569571d118e077cec83c8869e90e518bfbc028fecb5269af7a34b7a78ca4ad9660632e652146a0b4ab76ea38d3d8833bb446ce93eead1031bfdb2e469b838e87513"}], 0x100}}], 0x2, 0x4000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x1c, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x1, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r4, @ANYRESHEX=r3, @ANYRESDEC, @ANYRESHEX, @ANYRES8=r1, @ANYRES16=r3, @ANYRES64=r1, @ANYRES8=r6], 0x1c}, 0x1, 0x0, 0x0, 0x4801d}, 0x20000804) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004084) r9 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r9, 0xc03064ca, &(0x7f0000000140)={0x0, 0x0}) r10 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000000040)={0x84, @local, 0x4e1f, 0xfffffffe, 'sh\x00', 0x11, 0x10000004, 0x8}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r10, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010101, 0x4e21, 0x3, 'sh\x00', 0x23, 0x81, 0x3e}, {@loopback, 0x4e23, 0x10000, 0x1cb, 0x12d65, 0x90c}}, 0x44) ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000000)={0x30a32c0, 0x2, @ofdm={0x1, 0x1b, 0xc, 0x1e, 0x3, 0x6}}) 357.053504ms ago: executing program 0 (id=2067): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x3f}, 0x16) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="28000000100001002abd70000000000000000000", @ANYRES32=r3, @ANYBLOB="802100000000000008000d"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r6, 0x8982, &(0x7f0000000140)) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) io_setup(0xe70, &(0x7f0000000500)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x80402, 0x0) io_submit(0x0, 0x0, &(0x7f0000000140)) close(r7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x29, 0x5, 0x8, 0xffff, 0x11, @ipv4={'\x00', '\xff\xff', @loopback}, @local, 0x8, 0x1, 0x7}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x10000, 0x0, 0x0, 0x41100, 0x65, '\x00', r8, 0x0, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400900}, 0x94) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r9, 0x40045569, 0x1) ioctl$UI_SET_EVBIT(r9, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r9, 0x40045569, 0xf) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000100)={{0x100, 0x1, 0x8}, 'syz1\x00', 0x19}) ioctl$UI_DEV_CREATE(r9, 0x5501) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r7, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x52, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000003c0), &(0x7f0000000500), 0x8, 0x3e, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f0000000700)={r7, 0x0, 0x25, 0x1, @val=@tcx={@void, @value=r0}}, 0x1c) 352.309012ms ago: executing program 1 (id=2068): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000110010010000"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) 0s ago: executing program 1 (id=2069): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x102}, [@ldst={0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x92}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000100)=""/56) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r2 = dup2(r1, r1) ioctl$USBDEVFS_RELEASE_PORT(r2, 0x80045519, &(0x7f0000000040)=0x1) socket$nl_rdma(0x10, 0x3, 0x14) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000480)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@private=0xa010100, @in6=@mcast1, 0x4e20, 0x0, 0x4e24, 0xd, 0xa, 0xa0, 0xc0, 0x93, 0x0, r3}, {0xc85, 0x0, 0x5, 0x4, 0x3, 0x6, 0x0, 0x3}, {0x6, 0xb, 0x3ff, 0x5}, 0x9, 0x6e6bb7, 0x2, 0x0, 0x2, 0x3}, {{@in=@local, 0x4d5, 0x6c}, 0x2, @in=@loopback, 0x0, 0x3, 0x2, 0xf4, 0x0, 0x5, 0x5}}, 0xe8) unshare(0x6020400) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) fcntl$lock(r4, 0x5, &(0x7f0000000200)={0x0, 0x1, 0x1000000007ffd, 0x402}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl(r6, 0x4048aec9, &(0x7f0000000200)="060000000000000000000000007f00"/72) ioctl(r6, 0x4048aec9, &(0x7f0000000300)="0600"/72) ioctl(r6, 0x400caed0, &(0x7f0000000100)="0100000000000000ffffffff") ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1, &(0x7f00000000c0)={@mcast2, r7}, 0x14) kernel console output (not intermixed with test programs): 4294967295 subj=unconfined pid=11211 comm="syz.0.1648" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6adab9e159 code=0x7ffc0000 [ 472.091466][ T31] audit: type=1326 audit(1789990989.346:1900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11211 comm="syz.0.1648" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f6adab9e159 code=0x7ffc0000 [ 472.091838][ T31] audit: type=1326 audit(1789990989.346:1901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11211 comm="syz.0.1648" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6adab9e159 code=0x7ffc0000 [ 472.092118][ T31] audit: type=1326 audit(1789990989.346:1902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11211 comm="syz.0.1648" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6adab9e159 code=0x7ffc0000 [ 472.264014][T11214] vivid-000: ================= START STATUS ================= [ 472.264030][T11214] vivid-000: Radio HW Seek Mode: Bounded [ 472.264046][T11214] vivid-000: Radio Programmable HW Seek: false [ 472.264059][T11214] vivid-000: RDS Rx I/O Mode: Block I/O [ 472.264071][T11214] vivid-000: Generate RBDS Instead of RDS: false [ 472.264083][T11214] vivid-000: RDS Reception: true [ 472.264095][T11214] vivid-000: RDS Program Type: 0 inactive [ 472.264109][T11214] vivid-000: RDS PS Name: inactive [ 472.264124][T11214] vivid-000: RDS Radio Text: inactive [ 472.264138][T11214] vivid-000: RDS Traffic Announcement: false inactive [ 472.264153][T11214] vivid-000: RDS Traffic Program: false inactive [ 472.264168][T11214] vivid-000: RDS Music: false inactive [ 472.264185][T11214] vivid-000: ================== END STATUS ================== [ 473.085472][ T5737] usb 4-1: USB disconnect, device number 72 [ 474.621444][T11274] FAULT_INJECTION: forcing a failure. [ 474.621444][T11274] name failslab, interval 1, probability 0, space 0, times 0 [ 474.621473][T11274] CPU: 1 UID: 0 PID: 11274 Comm: syz.4.1663 Tainted: G L syzkaller #0 PREEMPT(full) [ 474.621491][T11274] Tainted: [L]=SOFTLOCKUP [ 474.621496][T11274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 474.621503][T11274] Call Trace: [ 474.621509][T11274] [ 474.621515][T11274] dump_stack_lvl+0xe8/0x150 [ 474.621539][T11274] should_fail_ex+0x410/0x560 [ 474.621557][T11274] should_failslab+0xa8/0x100 [ 474.621572][T11274] ? ptlock_alloc+0x20/0x70 [ 474.621588][T11274] kmem_cache_alloc_noprof+0xa1/0x600 [ 474.621607][T11274] ? ptlock_alloc+0x20/0x70 [ 474.621625][T11274] ptlock_alloc+0x20/0x70 [ 474.621641][T11274] pte_alloc_one+0x7a/0x370 [ 474.621657][T11274] __pte_alloc+0x25/0x1a0 [ 474.621668][T11274] ? mm_alloc_pmd+0x246/0x400 [ 474.621710][T11274] userfaultfd_poison+0x841/0x1b30 [ 474.621732][T11274] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 474.621752][T11274] ? __pfx_userfaultfd_poison+0x10/0x10 [ 474.621767][T11274] ? hook_file_ioctl+0x1f2/0x600 [ 474.621792][T11274] userfaultfd_ioctl+0x20c/0x560 [ 474.621810][T11274] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 474.621825][T11274] ? ksys_write+0x1fc/0x270 [ 474.621845][T11274] ? bpf_lsm_file_ioctl+0x9/0x20 [ 474.621861][T11274] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 474.621877][T11274] __se_sys_ioctl+0xfc/0x170 [ 474.621891][T11274] do_syscall_64+0x166/0x520 [ 474.621906][T11274] ? trace_irq_disable+0x3b/0x140 [ 474.621918][T11274] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.621930][T11274] ? clear_bhb_loop+0x70/0xc0 [ 474.621945][T11274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.621956][T11274] RIP: 0033:0x7fe55959e159 [ 474.621970][T11274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 474.621981][T11274] RSP: 002b:00007fe55a3ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 474.621997][T11274] RAX: ffffffffffffffda RBX: 00007fe559825fa0 RCX: 00007fe55959e159 [ 474.622006][T11274] RDX: 0000200000000040 RSI: 00000000c020aa08 RDI: 0000000000000003 [ 474.622015][T11274] RBP: 00007fe55a3ff090 R08: 0000000000000000 R09: 0000000000000000 [ 474.622022][T11274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 474.622037][T11274] R13: 00007fe559826038 R14: 00007fe559825fa0 R15: 00007fe55994fa48 [ 474.622056][T11274] [ 475.211121][T11283] __nla_validate_parse: 4 callbacks suppressed [ 475.211175][T11283] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1667'. [ 476.020394][T11297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1672'. [ 476.618896][ T5697] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 476.740595][T11312] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 476.791477][ T5697] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 476.852559][ T5697] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 476.852581][ T5697] usb 4-1: Product: syz [ 476.852590][ T5697] usb 4-1: SerialNumber: syz [ 476.922784][ T5697] usb 4-1: config 0 descriptor?? [ 477.296959][ T5697] usb 4-1: USB disconnect, device number 73 [ 478.910373][T11330] FAULT_INJECTION: forcing a failure. [ 478.910373][T11330] name failslab, interval 1, probability 0, space 0, times 0 [ 478.910416][T11330] CPU: 1 UID: 0 PID: 11330 Comm: syz.1.1680 Tainted: G L syzkaller #0 PREEMPT(full) [ 478.910443][T11330] Tainted: [L]=SOFTLOCKUP [ 478.910451][T11330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 478.910462][T11330] Call Trace: [ 478.910468][T11330] [ 478.910474][T11330] dump_stack_lvl+0xe8/0x150 [ 478.910498][T11330] should_fail_ex+0x410/0x560 [ 478.910515][T11330] should_failslab+0xa8/0x100 [ 478.910532][T11330] __kvmalloc_node_noprof+0x176/0x820 [ 478.910548][T11330] ? __rhashtable_init_noprof+0x545/0xaf0 [ 478.910562][T11330] ? __rhashtable_init_noprof+0x545/0xaf0 [ 478.910582][T11330] __rhashtable_init_noprof+0x545/0xaf0 [ 478.910598][T11330] __rhltable_init_noprof+0x26/0x70 [ 478.910613][T11330] nf_tables_newtable+0x6a7/0x1990 [ 478.910719][T11330] nfnetlink_rcv+0x1288/0x28c0 [ 478.910753][T11330] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 478.910778][T11330] ? ref_tracker_free+0x689/0x830 [ 478.910806][T11330] ? skb_clone+0x246/0x3a0 [ 478.910824][T11330] ? __netlink_deliver_tap+0x811/0x860 [ 478.910846][T11330] ? netlink_deliver_tap+0x2e/0x1b0 [ 478.910862][T11330] ? netlink_deliver_tap+0x2e/0x1b0 [ 478.910882][T11330] netlink_unicast+0x7bd/0x940 [ 478.910904][T11330] netlink_sendmsg+0x813/0xb40 [ 478.910915][T11330] ? __lock_acquire+0x747/0x2de0 [ 478.910932][T11330] ? __pfx_netlink_sendmsg+0x10/0x10 [ 478.910948][T11330] ? apparmor_socket_sendmsg+0x98/0x360 [ 478.910964][T11330] ? __pfx_netlink_sendmsg+0x10/0x10 [ 478.910975][T11330] sock_sendmsg_nosec+0x13a/0x180 [ 478.910989][T11330] ____sys_sendmsg+0x54e/0x850 [ 478.911008][T11330] ? __pfx_____sys_sendmsg+0x10/0x10 [ 478.911029][T11330] ? import_iovec+0x73/0xa0 [ 478.911045][T11330] ___sys_sendmsg+0x2a5/0x360 [ 478.911060][T11330] ? __lock_acquire+0x747/0x2de0 [ 478.911081][T11330] ? __pfx____sys_sendmsg+0x10/0x10 [ 478.911099][T11330] ? __schedule+0x17f1/0x58f0 [ 478.911129][T11330] ? __fget_files+0x2a/0x420 [ 478.911144][T11330] ? __fget_files+0x3a2/0x420 [ 478.911164][T11330] __x64_sys_sendmsg+0x1b1/0x290 [ 478.911181][T11330] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 478.911208][T11330] do_syscall_64+0x166/0x520 [ 478.911222][T11330] ? trace_irq_disable+0x3b/0x140 [ 478.911234][T11330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.911247][T11330] ? clear_bhb_loop+0x70/0xc0 [ 478.911261][T11330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.911273][T11330] RIP: 0033:0x7fe14819e159 [ 478.911287][T11330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.911302][T11330] RSP: 002b:00007fe148fab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 478.911317][T11330] RAX: ffffffffffffffda RBX: 00007fe148425fa0 RCX: 00007fe14819e159 [ 478.911326][T11330] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 478.911334][T11330] RBP: 00007fe148fab090 R08: 0000000000000000 R09: 0000000000000000 [ 478.911343][T11330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 478.911350][T11330] R13: 00007fe148426038 R14: 00007fe148425fa0 R15: 00007fe14854fa48 [ 478.911369][T11330] [ 478.987657][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 480.011830][T11346] FAULT_INJECTION: forcing a failure. [ 480.011830][T11346] name failslab, interval 1, probability 0, space 0, times 0 [ 480.011872][T11346] CPU: 0 UID: 0 PID: 11346 Comm: syz.2.1686 Tainted: G L syzkaller #0 PREEMPT(full) [ 480.011900][T11346] Tainted: [L]=SOFTLOCKUP [ 480.011908][T11346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 480.011919][T11346] Call Trace: [ 480.011928][T11346] [ 480.011938][T11346] dump_stack_lvl+0xe8/0x150 [ 480.011974][T11346] should_fail_ex+0x410/0x560 [ 480.012005][T11346] should_failslab+0xa8/0x100 [ 480.012034][T11346] __kmalloc_noprof+0xfe/0x720 [ 480.012056][T11346] ? load_elf_binary+0x377/0x2ea0 [ 480.012121][T11346] ? load_elf_binary+0x377/0x2ea0 [ 480.012154][T11346] load_elf_binary+0x377/0x2ea0 [ 480.012181][T11346] ? __lock_acquire+0x747/0x2de0 [ 480.012210][T11346] ? put_binfmt_handler+0x2f/0x340 [ 480.012231][T11346] ? load_misc_binary+0x23f/0x15d0 [ 480.012260][T11346] ? load_misc_binary+0x91c/0x15d0 [ 480.012288][T11346] ? __pfx_load_elf_binary+0x10/0x10 [ 480.012332][T11346] bprm_execve+0x930/0x1590 [ 480.012378][T11346] ? __pfx_bprm_execve+0x10/0x10 [ 480.012406][T11346] ? do_raw_spin_unlock+0xf5/0x200 [ 480.012466][T11346] ? alloc_bprm+0x582/0x640 [ 480.012488][T11346] do_execveat_common+0x4f4/0x670 [ 480.012517][T11346] __x64_sys_execveat+0xc7/0xf0 [ 480.012541][T11346] do_syscall_64+0x166/0x520 [ 480.012565][T11346] ? trace_irq_disable+0x3b/0x140 [ 480.012585][T11346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.012606][T11346] ? clear_bhb_loop+0x70/0xc0 [ 480.012629][T11346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.012649][T11346] RIP: 0033:0x7f61ed39e159 [ 480.012669][T11346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 480.012686][T11346] RSP: 002b:00007f61ee1c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 480.012709][T11346] RAX: ffffffffffffffda RBX: 00007f61ed625fa0 RCX: 00007f61ed39e159 [ 480.012724][T11346] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 480.012737][T11346] RBP: 00007f61ee1c8090 R08: 0000000000001000 R09: 0000000000000000 [ 480.012750][T11346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 480.012762][T11346] R13: 00007f61ed626038 R14: 00007f61ed625fa0 R15: 00007f61ed74fa48 [ 480.012794][T11346] [ 480.388598][T11348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1687'. [ 480.869852][ T5761] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 481.017735][ T5737] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 481.041795][ T5761] usb 4-1: Using ep0 maxpacket: 8 [ 481.042658][ T5761] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 481.046479][ T5761] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 481.046500][ T5761] usb 4-1: config 179 has no interface number 0 [ 481.046526][ T5761] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 481.046541][ T5761] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 481.046556][ T5761] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 481.046578][ T5761] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 481.046594][ T5761] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 481.046619][ T5761] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.155641][T11350] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 481.170296][ T5737] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 481.214019][ T5737] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 481.214050][ T5737] usb 5-1: Product: syz [ 481.214065][ T5737] usb 5-1: SerialNumber: syz [ 481.217075][ T5737] usb 5-1: config 0 descriptor?? [ 481.377825][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 481.378111][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 481.606938][ T5737] usb 5-1: USB disconnect, device number 62 [ 482.144101][ T5737] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 482.215474][ T2112] usb 4-1: USB disconnect, device number 74 [ 482.215507][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 482.215556][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 482.318461][ T5737] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 482.319729][ T5737] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.348023][ T5737] usb 3-1: config 0 descriptor?? [ 482.352322][ T5737] cp210x 3-1:0.0: cp210x converter detected [ 482.872206][ T5737] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 483.129908][ T5737] usb 3-1: cp210x converter now attached to ttyUSB0 [ 483.326812][ T5737] usb 3-1: USB disconnect, device number 78 [ 483.388878][ T5737] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 483.406553][ T5737] cp210x 3-1:0.0: device disconnected [ 483.907482][T11384] fuse: Unknown parameter 'g-_id' [ 484.318843][T11390] FAULT_INJECTION: forcing a failure. [ 484.318843][T11390] name failslab, interval 1, probability 0, space 0, times 0 [ 484.318870][T11390] CPU: 0 UID: 0 PID: 11390 Comm: syz.1.1701 Tainted: G L syzkaller #0 PREEMPT(full) [ 484.318888][T11390] Tainted: [L]=SOFTLOCKUP [ 484.318893][T11390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 484.318900][T11390] Call Trace: [ 484.318907][T11390] [ 484.318913][T11390] dump_stack_lvl+0xe8/0x150 [ 484.318935][T11390] should_fail_ex+0x410/0x560 [ 484.318966][T11390] should_failslab+0xa8/0x100 [ 484.318983][T11390] __kmalloc_noprof+0xfe/0x720 [ 484.318995][T11390] ? rw_verify_area+0x24a/0x4c0 [ 484.319012][T11390] ? load_elf_binary+0x7aa/0x2ea0 [ 484.319027][T11390] ? load_elf_binary+0x7aa/0x2ea0 [ 484.319045][T11390] load_elf_binary+0x7aa/0x2ea0 [ 484.319061][T11390] ? __lock_acquire+0x747/0x2de0 [ 484.319080][T11390] ? put_binfmt_handler+0x2f/0x340 [ 484.319093][T11390] ? load_misc_binary+0x23f/0x15d0 [ 484.319114][T11390] ? __pfx_load_elf_binary+0x10/0x10 [ 484.319139][T11390] bprm_execve+0x930/0x1590 [ 484.319165][T11390] ? __pfx_bprm_execve+0x10/0x10 [ 484.319181][T11390] ? do_raw_spin_unlock+0xf5/0x200 [ 484.319199][T11390] ? alloc_bprm+0x582/0x640 [ 484.319213][T11390] do_execveat_common+0x4f4/0x670 [ 484.319229][T11390] __x64_sys_execveat+0xc7/0xf0 [ 484.319243][T11390] do_syscall_64+0x166/0x520 [ 484.319259][T11390] ? trace_irq_disable+0x3b/0x140 [ 484.319276][T11390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.319294][T11390] ? clear_bhb_loop+0x70/0xc0 [ 484.319317][T11390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.319337][T11390] RIP: 0033:0x7fe14819e159 [ 484.319349][T11390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 484.319360][T11390] RSP: 002b:00007fe148fab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 484.319375][T11390] RAX: ffffffffffffffda RBX: 00007fe148425fa0 RCX: 00007fe14819e159 [ 484.319384][T11390] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 484.319392][T11390] RBP: 00007fe148fab090 R08: 0000000000001000 R09: 0000000000000000 [ 484.319400][T11390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 484.319408][T11390] R13: 00007fe148426038 R14: 00007fe148425fa0 R15: 00007fe14854fa48 [ 484.319428][T11390] [ 484.887418][T11393] FAULT_INJECTION: forcing a failure. [ 484.887418][T11393] name failslab, interval 1, probability 0, space 0, times 0 [ 484.887446][T11393] CPU: 1 UID: 0 PID: 11393 Comm: syz.2.1702 Tainted: G L syzkaller #0 PREEMPT(full) [ 484.887465][T11393] Tainted: [L]=SOFTLOCKUP [ 484.887470][T11393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 484.887478][T11393] Call Trace: [ 484.887483][T11393] [ 484.887489][T11393] dump_stack_lvl+0xe8/0x150 [ 484.887513][T11393] should_fail_ex+0x410/0x560 [ 484.887534][T11393] should_failslab+0xa8/0x100 [ 484.887557][T11393] ? ptlock_alloc+0x20/0x70 [ 484.887583][T11393] kmem_cache_alloc_noprof+0xa1/0x600 [ 484.887615][T11393] ? ptlock_alloc+0x20/0x70 [ 484.887639][T11393] ptlock_alloc+0x20/0x70 [ 484.887655][T11393] pte_alloc_one+0x7a/0x370 [ 484.887671][T11393] __pte_alloc+0x25/0x1a0 [ 484.887682][T11393] ? mm_alloc_pmd+0x246/0x400 [ 484.887701][T11393] userfaultfd_poison+0x841/0x1b30 [ 484.887723][T11393] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 484.887744][T11393] ? __pfx_userfaultfd_poison+0x10/0x10 [ 484.887760][T11393] ? hook_file_ioctl+0x1f2/0x600 [ 484.887785][T11393] userfaultfd_ioctl+0x20c/0x560 [ 484.887803][T11393] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 484.887818][T11393] ? ksys_write+0x1fc/0x270 [ 484.887839][T11393] ? bpf_lsm_file_ioctl+0x9/0x20 [ 484.887856][T11393] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 484.887872][T11393] __se_sys_ioctl+0xfc/0x170 [ 484.887886][T11393] do_syscall_64+0x166/0x520 [ 484.887901][T11393] ? trace_irq_disable+0x3b/0x140 [ 484.887917][T11393] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.887929][T11393] ? clear_bhb_loop+0x70/0xc0 [ 484.887943][T11393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.887955][T11393] RIP: 0033:0x7f61ed39e159 [ 484.887969][T11393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 484.887980][T11393] RSP: 002b:00007f61ee1c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 484.887994][T11393] RAX: ffffffffffffffda RBX: 00007f61ed625fa0 RCX: 00007f61ed39e159 [ 484.888003][T11393] RDX: 0000200000000040 RSI: 00000000c020aa08 RDI: 0000000000000003 [ 484.888011][T11393] RBP: 00007f61ee1c8090 R08: 0000000000000000 R09: 0000000000000000 [ 484.888020][T11393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 484.888027][T11393] R13: 00007f61ed626038 R14: 00007f61ed625fa0 R15: 00007f61ed74fa48 [ 484.888047][T11393] [ 485.242201][T11395] ip6gre4: entered allmulticast mode [ 485.245326][ T12] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 485.926385][T11409] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1708'. [ 486.036255][T11402] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 486.357947][ T5737] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 486.487727][ T5737] usb 3-1: device descriptor read/64, error -71 [ 486.508286][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 486.508985][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 486.727816][ T5737] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 486.858901][ T5737] usb 3-1: device descriptor read/64, error -71 [ 486.972499][ T5737] usb usb3-port1: attempt power cycle [ 487.307931][ T5737] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 487.328814][ T5737] usb 3-1: device descriptor read/8, error -71 [ 487.437670][ T5761] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 487.568901][ T5737] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 487.588747][ T5737] usb 3-1: device descriptor read/8, error -71 [ 487.588930][ T5761] usb 2-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 0.00 [ 487.590626][ T5761] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 487.590660][ T5761] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 487.651109][ T5761] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.651131][ T5761] usb 2-1: Product: syz [ 487.651140][ T5761] usb 2-1: Manufacturer: syz [ 487.651148][ T5761] usb 2-1: SerialNumber: syz [ 487.688181][ T2112] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 487.705939][ T5737] usb usb3-port1: unable to enumerate USB device [ 487.713880][ T5761] kobil_sct 2-1:1.0: KOBIL USB smart card terminal converter detected [ 487.738174][ T5761] usb 2-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 487.817774][ T5740] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 487.854162][ T2112] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 487.870261][ T2112] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 487.870290][ T2112] usb 4-1: config 0 has no interfaces? [ 487.870326][ T2112] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.906991][ T2112] usb 4-1: config 0 descriptor?? [ 487.978443][ T5740] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 487.980219][ T5740] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.987209][ T5740] usb 1-1: config 0 descriptor?? [ 488.029206][ T5740] pwc: Samsung MPC-C10 USB webcam detected. [ 488.124061][ T2112] usb 2-1: USB disconnect, device number 70 [ 488.230075][ T2112] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 488.238732][ T2112] kobil_sct 2-1:1.0: device disconnected [ 488.451255][T11443] FAULT_INJECTION: forcing a failure. [ 488.451255][T11443] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 488.451303][T11443] CPU: 1 UID: 0 PID: 11443 Comm: syz.3.1715 Tainted: G L syzkaller #0 PREEMPT(full) [ 488.451322][T11443] Tainted: [L]=SOFTLOCKUP [ 488.451327][T11443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 488.451335][T11443] Call Trace: [ 488.451340][T11443] [ 488.451346][T11443] dump_stack_lvl+0xe8/0x150 [ 488.451369][T11443] should_fail_ex+0x410/0x560 [ 488.451387][T11443] prepare_alloc_pages+0x223/0x600 [ 488.451406][T11443] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 488.451425][T11443] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 488.451441][T11443] ? try_to_migrate+0x324/0x400 [ 488.451509][T11443] ? __pfx_try_to_migrate+0x10/0x10 [ 488.451527][T11443] __alloc_pages_noprof+0x10/0x100 [ 488.451541][T11443] __folio_alloc_noprof+0x1b/0x120 [ 488.451555][T11443] migrate_pages_batch+0xb1f/0x4f50 [ 488.451586][T11443] ? __pfx_alloc_migration_target+0x10/0x10 [ 488.451600][T11443] ? queue_folios_pte_range+0xd62/0xf10 [ 488.451617][T11443] ? __pfx_migrate_pages_batch+0x10/0x10 [ 488.451644][T11443] ? irqentry_exit+0x218/0x910 [ 488.451660][T11443] ? lockdep_hardirqs_on+0x7b/0x110 [ 488.451673][T11443] ? irqentry_exit+0x218/0x910 [ 488.451686][T11443] ? trace_irq_disable+0x3b/0x140 [ 488.451707][T11443] ? migrate_pages+0x25b/0x2920 [ 488.451723][T11443] ? kasan_check_range+0x93/0x2c0 [ 488.451741][T11443] migrate_pages+0x1b9f/0x2920 [ 488.451765][T11443] ? __pfx_alloc_migration_target+0x10/0x10 [ 488.451782][T11443] ? __walk_page_range+0x6c1/0x720 [ 488.451799][T11443] ? __pfx_migrate_pages+0x10/0x10 [ 488.451817][T11443] ? queue_pages_test_walk+0x3dc/0x410 [ 488.451836][T11443] ? walk_page_range_mm_unsafe+0x595/0x680 [ 488.451859][T11443] ? __pfx___up_read+0x10/0x10 [ 488.451880][T11443] do_migrate_pages+0x656/0x8b0 [ 488.451901][T11443] ? __pfx_do_migrate_pages+0x10/0x10 [ 488.451922][T11443] ? rcu_is_watching+0x16/0xb0 [ 488.451940][T11443] ? security_capable+0xb9/0x2c0 [ 488.451963][T11443] __se_sys_migrate_pages+0xaa2/0xc90 [ 488.451979][T11443] ? fput+0xa0/0xd0 [ 488.451993][T11443] ? __pfx___se_sys_migrate_pages+0x10/0x10 [ 488.452006][T11443] ? ksys_write+0x242/0x270 [ 488.452023][T11443] ? __pfx_ksys_write+0x10/0x10 [ 488.452046][T11443] do_syscall_64+0x166/0x520 [ 488.452060][T11443] ? trace_irq_disable+0x3b/0x140 [ 488.452071][T11443] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.452083][T11443] ? clear_bhb_loop+0x70/0xc0 [ 488.452098][T11443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.452109][T11443] RIP: 0033:0x7fc523d9e159 [ 488.452122][T11443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 488.452132][T11443] RSP: 002b:00007fc524b90028 EFLAGS: 00000246 ORIG_RAX: 0000000000000100 [ 488.452148][T11443] RAX: ffffffffffffffda RBX: 00007fc524026090 RCX: 00007fc523d9e159 [ 488.452157][T11443] RDX: 0000200000000040 RSI: 0000000000000003 RDI: 0000000000000462 [ 488.452165][T11443] RBP: 00007fc524b90090 R08: 0000000000000000 R09: 0000000000000000 [ 488.452173][T11443] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 488.452180][T11443] R13: 00007fc524026128 R14: 00007fc524026090 R15: 00007fc52414fa48 [ 488.452199][T11443] [ 488.914967][ T5740] pwc: send_video_command error -71 [ 488.914991][ T5740] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 488.915104][ T5740] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 488.955103][ T5740] usb 1-1: USB disconnect, device number 69 [ 489.138301][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 489.775383][T11451] ip6gre6: entered allmulticast mode [ 489.807961][ T8660] ip6_tunnel: ip6gre6 xmit: Local address not yet configured! [ 489.992438][ T31] kauditd_printk_skb: 12 callbacks suppressed [ 489.992453][ T31] audit: type=1326 audit(1789991007.246:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11456 comm="syz.4.1723" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe55959e159 code=0x0 [ 490.354554][T11466] program syz.2.1724 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 490.516678][ T5737] usb 4-1: USB disconnect, device number 75 [ 491.031467][T11473] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1727'. [ 491.171464][T11477] FAULT_INJECTION: forcing a failure. [ 491.171464][T11477] name failslab, interval 1, probability 0, space 0, times 0 [ 491.171502][T11477] CPU: 1 UID: 0 PID: 11477 Comm: syz.0.1729 Tainted: G L syzkaller #0 PREEMPT(full) [ 491.171531][T11477] Tainted: [L]=SOFTLOCKUP [ 491.171539][T11477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 491.171550][T11477] Call Trace: [ 491.171556][T11477] [ 491.171562][T11477] dump_stack_lvl+0xe8/0x150 [ 491.171586][T11477] should_fail_ex+0x410/0x560 [ 491.171603][T11477] should_failslab+0xa8/0x100 [ 491.171618][T11477] ? alloc_empty_file+0x5b/0x1d0 [ 491.171633][T11477] kmem_cache_alloc_noprof+0xa1/0x600 [ 491.171650][T11477] ? unwind_get_return_address+0x4d/0x90 [ 491.171664][T11477] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 491.171677][T11477] ? arch_stack_walk+0xfb/0x150 [ 491.171689][T11477] ? alloc_empty_file+0x5b/0x1d0 [ 491.171707][T11477] alloc_empty_file+0x5b/0x1d0 [ 491.171722][T11477] path_openat+0xa2/0x1d60 [ 491.171733][T11477] ? stack_trace_save+0xa9/0x100 [ 491.171744][T11477] ? __pfx_stack_trace_save+0x10/0x10 [ 491.171755][T11477] ? do_getname_kernel+0x54/0x230 [ 491.171768][T11477] ? kmem_cache_alloc_noprof+0xf1/0x600 [ 491.171785][T11477] ? stack_depot_save_flags+0x33/0x7f0 [ 491.171806][T11477] do_file_open+0x23e/0x4a0 [ 491.171817][T11477] ? __x64_sys_execveat+0xc7/0xf0 [ 491.171827][T11477] ? do_syscall_64+0x166/0x520 [ 491.171842][T11477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.171857][T11477] ? __pfx_do_file_open+0x10/0x10 [ 491.171901][T11477] ? do_open_execat+0xad/0x590 [ 491.171934][T11477] do_open_execat+0x12b/0x590 [ 491.171965][T11477] ? __pfx_do_open_execat+0x10/0x10 [ 491.171992][T11477] ? do_getname_kernel+0x97/0x230 [ 491.172021][T11477] ? do_getname_kernel+0x183/0x230 [ 491.172049][T11477] bprm_open_interpreter+0x85/0xb0 [ 491.172082][T11477] load_elf_binary+0x1c88/0x2ea0 [ 491.172111][T11477] ? __lock_acquire+0x747/0x2de0 [ 491.172144][T11477] ? put_binfmt_handler+0x2f/0x340 [ 491.172166][T11477] ? load_misc_binary+0x23f/0x15d0 [ 491.172204][T11477] ? __pfx_load_elf_binary+0x10/0x10 [ 491.172248][T11477] bprm_execve+0x930/0x1590 [ 491.172291][T11477] ? __pfx_bprm_execve+0x10/0x10 [ 491.172319][T11477] ? do_raw_spin_unlock+0xf5/0x200 [ 491.172372][T11477] ? alloc_bprm+0x582/0x640 [ 491.172395][T11477] do_execveat_common+0x4f4/0x670 [ 491.172431][T11477] __x64_sys_execveat+0xc7/0xf0 [ 491.172455][T11477] do_syscall_64+0x166/0x520 [ 491.172477][T11477] ? trace_irq_disable+0x3b/0x140 [ 491.172498][T11477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.172519][T11477] ? clear_bhb_loop+0x70/0xc0 [ 491.172545][T11477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.172565][T11477] RIP: 0033:0x7f6adab9e159 [ 491.172586][T11477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 491.172603][T11477] RSP: 002b:00007f6adbaa8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 491.172625][T11477] RAX: ffffffffffffffda RBX: 00007f6adae25fa0 RCX: 00007f6adab9e159 [ 491.172640][T11477] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 491.172652][T11477] RBP: 00007f6adbaa8090 R08: 0000000000001000 R09: 0000000000000000 [ 491.172664][T11477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 491.172676][T11477] R13: 00007f6adae26038 R14: 00007f6adae25fa0 R15: 00007f6adaf4fa48 [ 491.172710][T11477] [ 491.848843][T11481] TC_ACT_REPEAT abuse ? [ 492.108810][ T5737] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 492.181519][ T2112] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 492.289088][ T5737] usb 1-1: Using ep0 maxpacket: 8 [ 492.296533][ T5737] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 492.311527][ T2112] usb 5-1: device descriptor read/64, error -71 [ 492.313140][ T5737] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 492.313159][ T5737] usb 1-1: config 0 has an invalid interface number: 149 but max is -1 [ 492.313171][ T5737] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 492.313182][ T5737] usb 1-1: config 0 has no interface number 0 [ 492.313201][ T5737] usb 1-1: too many endpoints for config 0 interface 149 altsetting 215: 148, using maximum allowed: 30 [ 492.313222][ T5737] usb 1-1: config 0 interface 149 altsetting 215 has an endpoint descriptor with address 0x74, changing to 0x4 [ 492.313237][ T5737] usb 1-1: config 0 interface 149 altsetting 215 endpoint 0x4 has an invalid bInterval 121, changing to 10 [ 492.313252][ T5737] usb 1-1: config 0 interface 149 altsetting 215 endpoint 0x4 has invalid maxpacket 26477, setting to 1024 [ 492.313267][ T5737] usb 1-1: config 0 interface 149 altsetting 215 has 1 endpoint descriptor, different from the interface descriptor's value: 148 [ 492.313283][ T5737] usb 1-1: config 0 interface 149 has no altsetting 0 [ 492.391904][ T5737] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.391936][ T5737] usb 1-1: Product: syz [ 492.391951][ T5737] usb 1-1: Manufacturer: syz [ 492.391965][ T5737] usb 1-1: SerialNumber: syz [ 492.452786][ T5737] usb 1-1: config 0 descriptor?? [ 492.454505][T11481] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 492.473762][ T5737] hub 1-1:0.149: bad descriptor, ignoring hub [ 492.473782][ T5737] hub 1-1:0.149: probe with driver hub failed with error -5 [ 492.549729][ T2112] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 492.679654][ T2112] usb 5-1: device descriptor read/64, error -71 [ 492.760434][T11481] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1730'. [ 492.789930][ T2112] usb usb5-port1: attempt power cycle [ 492.878802][ T5709] usb 1-1: USB disconnect, device number 70 [ 493.072804][T11505] syzkaller1: entered promiscuous mode [ 493.072829][T11505] syzkaller1: entered allmulticast mode [ 493.137773][ T2112] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 493.162324][ T2112] usb 5-1: device descriptor read/8, error -71 [ 493.347775][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 493.428031][ T2112] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 493.449639][ T2112] usb 5-1: device descriptor read/8, error -71 [ 493.509762][T11504] [U] [ 493.575981][ T2112] usb usb5-port1: unable to enumerate USB device [ 493.617860][ C0] ip6_tunnel: ip6gre6 xmit: Local address not yet configured! [ 493.959822][T11528] program syz.0.1742 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 494.057653][ T5737] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 495.451169][ T5761] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 495.512802][T11542] ip6gre7: entered allmulticast mode [ 495.530115][ T8662] ip6_tunnel: ip6gre7 xmit: Local address not yet configured! [ 495.533906][T11544] netlink: 'syz.0.1749': attribute type 12 has an invalid length. [ 495.598755][ T5761] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 495.600950][ T5761] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 495.600984][ T5761] usb 2-1: config 0 has no interfaces? [ 495.601014][ T5761] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.643632][ T5761] usb 2-1: config 0 descriptor?? [ 495.754362][ T31] audit: type=1326 audit(1789991013.006:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11539 comm="syz.4.1748" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe55959e159 code=0x7ffc0000 [ 495.754454][ T31] audit: type=1326 audit(1789991013.006:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11539 comm="syz.4.1748" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe55959e159 code=0x7ffc0000 [ 495.754498][ T31] audit: type=1326 audit(1789991013.006:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11539 comm="syz.4.1748" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fe55959e159 code=0x7ffc0000 [ 495.994072][ T31] audit: type=1326 audit(1789991013.246:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11539 comm="syz.4.1748" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe55959e159 code=0x7ffc0000 [ 496.022592][ T31] audit: type=1326 audit(1789991013.256:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11539 comm="syz.4.1748" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe55959e159 code=0x7ffc0000 [ 496.739655][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 496.757850][ T5761] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 496.908673][ T5761] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 496.916454][ T5761] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 496.946158][ T5761] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.946220][ T5761] usb 5-1: Product: syz [ 496.946237][ T5761] usb 5-1: Manufacturer: syz [ 496.946251][ T5761] usb 5-1: SerialNumber: syz [ 497.201565][ T5761] cdc_ncm 5-1:1.0: bind() failure [ 497.229474][ T5761] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 497.229528][ T5761] cdc_ncm 5-1:1.1: bind() failure [ 497.266348][ T5761] usb 5-1: USB disconnect, device number 67 [ 497.342203][T11570] fuse: Unknown parameter 'gd' [ 497.636638][T11575] program syz.3.1757 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 498.230686][T11582] program syz.4.1760 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 498.363628][ T2112] usb 2-1: USB disconnect, device number 71 [ 498.614991][T11586] ip6gre5: entered allmulticast mode [ 498.655604][ T1111] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 499.031832][T11590] bond4: down delay (8) is not a multiple of miimon (5), value rounded to 5 ms [ 499.031860][T11590] bond4: entered allmulticast mode [ 499.037412][T11594] bond4: down delay (8) is not a multiple of miimon (5), value rounded to 5 ms [ 499.217833][ C1] ip6_tunnel: ip6gre7 xmit: Local address not yet configured! [ 499.381721][T11611] netlink: 'syz.0.1770': attribute type 1 has an invalid length. [ 499.449297][T11611] bond2: entered promiscuous mode [ 499.449778][T11611] 8021q: adding VLAN 0 to HW filter on device bond2 [ 499.512462][T11611] 8021q: adding VLAN 0 to HW filter on device bond2 [ 499.512919][T11611] bond2: (slave ip6gre5): The slave device specified does not support setting the MAC address [ 499.512941][T11611] bond2: (slave ip6gre5): Setting fail_over_mac to active for active-backup mode [ 499.549157][T11611] bond2: (slave ip6gre5): making interface the new active one [ 499.549184][T11611] ip6gre5: entered promiscuous mode [ 499.552728][T11611] bond2: (slave ip6gre5): Enslaving as an active interface with an up link [ 499.847804][ T2112] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 499.873924][T11618] FAULT_INJECTION: forcing a failure. [ 499.873924][T11618] name failslab, interval 1, probability 0, space 0, times 0 [ 499.873964][T11618] CPU: 1 UID: 0 PID: 11618 Comm: syz.2.1773 Tainted: G L syzkaller #0 PREEMPT(full) [ 499.873993][T11618] Tainted: [L]=SOFTLOCKUP [ 499.874001][T11618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 499.874013][T11618] Call Trace: [ 499.874022][T11618] [ 499.874030][T11618] dump_stack_lvl+0xe8/0x150 [ 499.874063][T11618] should_fail_ex+0x410/0x560 [ 499.874092][T11618] should_failslab+0xa8/0x100 [ 499.874119][T11618] __kmalloc_noprof+0xfe/0x720 [ 499.874138][T11618] ? rcu_is_watching+0x16/0xb0 [ 499.874160][T11618] ? tomoyo_realpath_from_path+0xef/0x640 [ 499.874187][T11618] ? tomoyo_realpath_from_path+0xef/0x640 [ 499.874220][T11618] tomoyo_realpath_from_path+0xef/0x640 [ 499.874257][T11618] ? tomoyo_path_number_perm+0x219/0x5f0 [ 499.874280][T11618] tomoyo_path_number_perm+0x246/0x5f0 [ 499.874306][T11618] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 499.874328][T11618] ? __lock_acquire+0x747/0x2de0 [ 499.874365][T11618] ? hook_file_ioctl+0x1f2/0x600 [ 499.874420][T11618] ? __fget_files+0x2a/0x420 [ 499.874451][T11618] ? __fget_files+0x2a/0x420 [ 499.874474][T11618] ? __fget_files+0x3a2/0x420 [ 499.874498][T11618] ? __fget_files+0x2a/0x420 [ 499.874528][T11618] security_file_ioctl+0xc3/0x2a0 [ 499.874553][T11618] __se_sys_ioctl+0x47/0x170 [ 499.874579][T11618] do_syscall_64+0x166/0x520 [ 499.874604][T11618] ? trace_irq_disable+0x3b/0x140 [ 499.874624][T11618] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.874646][T11618] ? clear_bhb_loop+0x70/0xc0 [ 499.874672][T11618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.874692][T11618] RIP: 0033:0x7f61ed39e159 [ 499.874713][T11618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 499.874731][T11618] RSP: 002b:00007f61ee1c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 499.874754][T11618] RAX: ffffffffffffffda RBX: 00007f61ed625fa0 RCX: 00007f61ed39e159 [ 499.874769][T11618] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 499.874787][T11618] RBP: 00007f61ee1c8090 R08: 0000000000000000 R09: 0000000000000000 [ 499.874800][T11618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 499.874812][T11618] R13: 00007f61ed626038 R14: 00007f61ed625fa0 R15: 00007f61ed74fa48 [ 499.874846][T11618] [ 499.874870][T11618] ERROR: Out of memory at tomoyo_realpath_from_path. [ 500.027782][ T2112] usb 4-1: Using ep0 maxpacket: 16 [ 500.028528][ T2112] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 500.033139][ T2112] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 500.046666][ T2112] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 500.046694][ T2112] usb 4-1: Manufacturer: syz [ 500.094351][ T2112] usb 4-1: config 0 descriptor?? [ 501.159095][ T2112] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 501.217939][ C0] ip6_tunnel: ip6gre6 xmit: Local address not yet configured! [ 501.329018][ T2112] usb 1-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 501.330153][ T2112] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 501.330194][ T2112] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 501.330208][ T2112] usb 1-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 501.336413][ T2112] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.336434][ T2112] usb 1-1: Product: syz [ 501.336442][ T2112] usb 1-1: Manufacturer: syz [ 501.336451][ T2112] usb 1-1: SerialNumber: syz [ 501.416421][ T2112] usb-storage 1-1:1.0: USB Mass Storage device detected [ 501.432983][ T2112] usb-storage 1-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 501.435504][ T2112] scsi host1: usb-storage 1-1:1.0 [ 501.458541][T11658] program syz.2.1784 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 501.461281][ T5709] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 501.602051][T11641] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1780'. [ 501.608876][T11641] netlink: 'syz.0.1780': attribute type 1 has an invalid length. [ 501.621922][ T5709] usb 2-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 501.653718][ T5709] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 501.653739][ T5709] usb 2-1: config 0 has no interface number 0 [ 501.653767][ T5709] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.653783][ T5709] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 501.653796][ T5709] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 501.653823][ T5709] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.659511][ T5709] usb 2-1: config 0 descriptor?? [ 501.752508][ T2112] usb 1-1: USB disconnect, device number 71 [ 501.859877][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.859934][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.348798][ C0] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 502.771218][ T5709] usbhid 2-1:0.1: can't add hid device: -71 [ 502.771329][ T5709] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 502.798575][ T5709] usb 2-1: USB disconnect, device number 72 [ 502.968438][T11675] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1788'. [ 503.360841][T11692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1794'. [ 503.798209][T11704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.798478][T11704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.983899][T11709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1801'. [ 504.017745][ T5709] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 504.070166][ T5761] input: syz0 as /devices/virtual/misc/uhid/0005:0003:0386.0016/input/input98 [ 504.190247][ T5709] usb 3-1: Using ep0 maxpacket: 16 [ 504.191156][ T5709] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 504.192870][ T5709] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.192892][ T5709] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.192906][ T5709] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 504.192932][ T5709] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.195957][ T5761] hid-generic 0005:0003:0386.0016: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 504.276032][ T5709] usb 3-1: config 0 descriptor?? [ 504.406910][ T5737] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 504.538006][ T5697] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 504.557643][ T5737] usb 1-1: Using ep0 maxpacket: 16 [ 504.558560][ T5737] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 504.559282][ T5737] usb 1-1: config 0 has no interfaces? [ 504.598686][ T5737] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.598714][ T5737] usb 1-1: Product: syz [ 504.598730][ T5737] usb 1-1: Manufacturer: syz [ 504.598745][ T5737] usb 1-1: SerialNumber: syz [ 504.617220][ T5737] usb 1-1: config 0 descriptor?? [ 504.689231][ T5697] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 504.696463][ T5697] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 504.696525][ T5697] usb 5-1: Product: syz [ 504.696540][ T5697] usb 5-1: SerialNumber: syz [ 504.753946][ T5697] usb 5-1: config 0 descriptor?? [ 504.768807][ T5709] hid_parser_main: 4 callbacks suppressed [ 504.768851][ T5709] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 504.768871][ T5709] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 504.768888][ T5709] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 504.768903][ T5709] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 504.768918][ T5709] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 504.840859][ T5709] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0017/input/input99 [ 504.865265][ T5709] microsoft 0003:045E:07DA.0017: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 504.930284][ T5737] usb 1-1: USB disconnect, device number 72 [ 505.102424][ T5697] usb 5-1: USB disconnect, device number 68 [ 505.218741][ T5761] usb 3-1: USB disconnect, device number 83 [ 505.459718][ T5740] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 505.597949][ T5740] usb 2-1: device descriptor read/64, error -71 [ 505.838333][ T5740] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 505.896545][T11728] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1806'. [ 505.985427][ T5740] usb 2-1: device descriptor read/64, error -71 [ 506.088572][ T5740] usb usb2-port1: attempt power cycle [ 506.447701][ T5740] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 506.472600][ T5740] usb 2-1: device descriptor read/8, error -71 [ 506.487745][ T5697] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 506.656225][ T5697] usb 5-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 506.667597][ T5697] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 506.667660][ T5697] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 506.667674][ T5697] usb 5-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 506.712939][ T5740] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 506.768812][ T5740] usb 2-1: device descriptor read/8, error -71 [ 506.878138][ T5740] usb usb2-port1: unable to enumerate USB device [ 506.968898][ T5697] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.968921][ T5697] usb 5-1: Product: syz [ 506.968930][ T5697] usb 5-1: Manufacturer: syz [ 506.968939][ T5697] usb 5-1: SerialNumber: syz [ 506.978010][ C1] ip6_tunnel: ip6gre7 xmit: Local address not yet configured! [ 507.150511][ T5697] usb-storage 5-1:1.0: USB Mass Storage device detected [ 507.227893][ T5697] usb-storage 5-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 507.231546][ T5697] scsi host1: usb-storage 5-1:1.0 [ 507.385770][ T31] audit: type=1326 audit(1789991024.636:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11745 comm="syz.2.1813" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ed39e159 code=0x7ffc0000 [ 507.385807][ T31] audit: type=1326 audit(1789991024.636:1922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11745 comm="syz.2.1813" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ed39e159 code=0x7ffc0000 [ 507.439877][ T31] audit: type=1326 audit(1789991024.696:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11745 comm="syz.2.1813" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f61ed39e159 code=0x7ffc0000 [ 507.439916][ T31] audit: type=1326 audit(1789991024.696:1924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11745 comm="syz.2.1813" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ed39e159 code=0x7ffc0000 [ 507.439940][ T31] audit: type=1326 audit(1789991024.696:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11745 comm="syz.2.1813" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ed39e159 code=0x7ffc0000 [ 507.453991][ T31] audit: type=1326 audit(1789991024.706:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11745 comm="syz.2.1813" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f61ed39e159 code=0x7ffc0000 [ 507.454028][ T31] audit: type=1326 audit(1789991024.706:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11745 comm="syz.2.1813" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ed39e159 code=0x7ffc0000 [ 507.511647][ T31] audit: type=1326 audit(1789991024.716:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11745 comm="syz.2.1813" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ed39e159 code=0x7ffc0000 [ 507.528573][T11737] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1810'. [ 507.543816][ T31] audit: type=1326 audit(1789991024.776:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11745 comm="syz.2.1813" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f61ed39e159 code=0x7ffc0000 [ 507.543865][ T31] audit: type=1326 audit(1789991024.776:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11745 comm="syz.2.1813" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ed39e159 code=0x7ffc0000 [ 507.550697][T11737] netlink: 'syz.4.1810': attribute type 1 has an invalid length. [ 507.833221][ T5737] usb 5-1: USB disconnect, device number 69 [ 508.154725][T11754] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1814'. [ 508.155157][T11754] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1814'. [ 508.241553][T11756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1815'. [ 508.241599][T11756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1815'. [ 509.119598][T11769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1819'. [ 509.127768][ T5697] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 509.232512][T11772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1820'. [ 509.232554][T11772] netlink: 'syz.4.1820': attribute type 30 has an invalid length. [ 509.292072][ T5697] usb 1-1: Using ep0 maxpacket: 8 [ 509.293476][ T5697] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 509.295119][ T5697] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 509.295141][ T5697] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 509.295155][ T5697] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 509.295169][ T5697] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 509.295195][ T5697] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.433831][T11772] vxlan0: entered promiscuous mode [ 509.433852][T11772] vxlan0: entered allmulticast mode [ 509.559069][ T5697] usb 1-1: GET_CAPABILITIES returned 0 [ 509.559124][ T5697] usbtmc 1-1:16.0: can't read capabilities [ 509.791461][T11765] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 509.831270][T11765] netlink: 'syz.0.1817': attribute type 10 has an invalid length. [ 510.081183][T11774] bridge0: port 3(team0) entered disabled state [ 510.083561][T11774] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.084221][T11774] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.177884][ C0] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 510.532891][T11783] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1823'. [ 510.955741][T11774] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 511.019705][T11774] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 511.975735][T11765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 512.004510][T11765] team0: Port device bond0 added [ 512.004835][T11793] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1825'. [ 512.030187][ T8648] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 512.030214][ T8648] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.030237][ T8648] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 512.030252][ T8648] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.030271][ T8648] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 512.030293][ T8648] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.030313][ T8648] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 512.030328][ T8648] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.108164][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 512.108443][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 512.202968][ T5709] usb 1-1: USB disconnect, device number 73 [ 512.304040][T11796] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1826'. [ 513.098795][T11814] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1832'. [ 513.577758][T11834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.578351][T11834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.616309][T11829] binder: 11828:11829 ioctl c018620c 200000000000 returned -22 [ 514.127714][ T5709] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 514.288661][ T5709] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 514.289769][ T5709] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 514.289794][ T5709] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 514.289806][ T5709] usb 1-1: config 1 has no interface number 1 [ 514.289830][ T5709] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 514.289854][ T5709] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 514.295291][ T5709] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.295311][ T5709] usb 1-1: Product: syz [ 514.295320][ T5709] usb 1-1: Manufacturer: syz [ 514.295328][ T5709] usb 1-1: SerialNumber: syz [ 514.302546][T11845] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 514.614164][T11845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.614524][T11845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.669564][T11845] input: syz0 as /devices/virtual/input/input100 [ 514.897427][ T5709] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 514.903895][ T5709] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 515.068145][ T5709] usb 1-1: USB disconnect, device number 74 [ 515.394719][ T8791] udevd[8791]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 515.649986][T11862] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1846'. [ 516.021597][T11870] FAULT_INJECTION: forcing a failure. [ 516.021597][T11870] name failslab, interval 1, probability 0, space 0, times 0 [ 516.021628][T11870] CPU: 1 UID: 0 PID: 11870 Comm: syz.4.1849 Tainted: G L syzkaller #0 PREEMPT(full) [ 516.021646][T11870] Tainted: [L]=SOFTLOCKUP [ 516.021651][T11870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 516.021659][T11870] Call Trace: [ 516.021665][T11870] [ 516.021671][T11870] dump_stack_lvl+0xe8/0x150 [ 516.021706][T11870] should_fail_ex+0x410/0x560 [ 516.021727][T11870] should_failslab+0xa8/0x100 [ 516.021745][T11870] __kmalloc_cache_node_noprof+0xaa/0x620 [ 516.021760][T11870] ? __get_vm_area_node+0x155/0x2f0 [ 516.021775][T11870] ? __get_vm_area_node+0x155/0x2f0 [ 516.021794][T11870] __get_vm_area_node+0x155/0x2f0 [ 516.021813][T11870] __vmalloc_node_range_noprof+0x343/0x1540 [ 516.021831][T11870] ? bpf_check+0x10ee/0x2e10 [ 516.021847][T11870] ? rcu_is_watching+0x16/0xb0 [ 516.021870][T11870] ? lockdep_hardirqs_on+0x7b/0x110 [ 516.021889][T11870] ? trace_irq_disable+0x3b/0x140 [ 516.021903][T11870] ? bpf_check+0x106b/0x2e10 [ 516.021916][T11870] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 516.021936][T11870] ? security_capable+0xb9/0x2c0 [ 516.021953][T11870] ? bpf_check+0x10ee/0x2e10 [ 516.021964][T11870] __vmalloc_noprof+0xd2/0x120 [ 516.021980][T11870] ? bpf_check+0x10ee/0x2e10 [ 516.021994][T11870] bpf_check+0x10ee/0x2e10 [ 516.022012][T11870] ? ktime_get_with_offset+0x93/0x2d0 [ 516.022032][T11870] ? __pfx_bpf_check+0x10/0x10 [ 516.022046][T11870] ? bpf_obj_name_cpy+0x194/0x1e0 [ 516.022065][T11870] bpf_prog_load+0x14d6/0x1c20 [ 516.022086][T11870] ? __pfx_bpf_prog_load+0x10/0x10 [ 516.022116][T11870] __sys_bpf+0xd0d/0xd90 [ 516.022134][T11870] ? __pfx___sys_bpf+0x10/0x10 [ 516.022154][T11870] ? __fget_files+0x2a/0x420 [ 516.022181][T11870] ? ksys_write+0x242/0x270 [ 516.022203][T11870] ? __pfx_ksys_write+0x10/0x10 [ 516.022223][T11870] __x64_sys_bpf+0xba/0xd0 [ 516.022237][T11870] do_syscall_64+0x166/0x520 [ 516.022251][T11870] ? trace_irq_disable+0x3b/0x140 [ 516.022262][T11870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.022275][T11870] ? clear_bhb_loop+0x70/0xc0 [ 516.022290][T11870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.022302][T11870] RIP: 0033:0x7fe55959e159 [ 516.022315][T11870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 516.022325][T11870] RSP: 002b:00007fe55a3ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 516.022339][T11870] RAX: ffffffffffffffda RBX: 00007fe559825fa0 RCX: 00007fe55959e159 [ 516.022349][T11870] RDX: 0000000000000023 RSI: 000020000000e000 RDI: 0000000000000005 [ 516.022357][T11870] RBP: 00007fe55a3ff090 R08: 0000000000000000 R09: 0000000000000000 [ 516.022365][T11870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 516.022372][T11870] R13: 00007fe559826038 R14: 00007fe559825fa0 R15: 00007fe55994fa48 [ 516.022392][T11870] [ 516.026496][T11870] syz.4.1849: vmalloc error: size 544, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 516.026565][T11870] CPU: 1 UID: 0 PID: 11870 Comm: syz.4.1849 Tainted: G L syzkaller #0 PREEMPT(full) [ 516.026586][T11870] Tainted: [L]=SOFTLOCKUP [ 516.026591][T11870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 516.026598][T11870] Call Trace: [ 516.026604][T11870] [ 516.026610][T11870] dump_stack_lvl+0xe8/0x150 [ 516.026633][T11870] warn_alloc+0x24d/0x270 [ 516.026645][T11870] ? __kasan_kmalloc+0x22/0xb0 [ 516.026662][T11870] ? __pfx_warn_alloc+0x10/0x10 [ 516.026673][T11870] ? __get_vm_area_node+0x155/0x2f0 [ 516.026701][T11870] ? __get_vm_area_node+0x2a9/0x2f0 [ 516.026721][T11870] __vmalloc_node_range_noprof+0x36b/0x1540 [ 516.026740][T11870] ? rcu_is_watching+0x16/0xb0 [ 516.026763][T11870] ? lockdep_hardirqs_on+0x7b/0x110 [ 516.026780][T11870] ? trace_irq_disable+0x3b/0x140 [ 516.026793][T11870] ? bpf_check+0x106b/0x2e10 [ 516.026808][T11870] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 516.026829][T11870] ? security_capable+0xb9/0x2c0 [ 516.026845][T11870] ? bpf_check+0x10ee/0x2e10 [ 516.026857][T11870] __vmalloc_noprof+0xd2/0x120 [ 516.026873][T11870] ? bpf_check+0x10ee/0x2e10 [ 516.026888][T11870] bpf_check+0x10ee/0x2e10 [ 516.026907][T11870] ? ktime_get_with_offset+0x93/0x2d0 [ 516.026923][T11870] ? __pfx_bpf_check+0x10/0x10 [ 516.026937][T11870] ? bpf_obj_name_cpy+0x194/0x1e0 [ 516.026956][T11870] bpf_prog_load+0x14d6/0x1c20 [ 516.026977][T11870] ? __pfx_bpf_prog_load+0x10/0x10 [ 516.027006][T11870] __sys_bpf+0xd0d/0xd90 [ 516.027025][T11870] ? __pfx___sys_bpf+0x10/0x10 [ 516.027044][T11870] ? __fget_files+0x2a/0x420 [ 516.027071][T11870] ? ksys_write+0x242/0x270 [ 516.027089][T11870] ? __pfx_ksys_write+0x10/0x10 [ 516.027108][T11870] __x64_sys_bpf+0xba/0xd0 [ 516.027123][T11870] do_syscall_64+0x166/0x520 [ 516.027137][T11870] ? trace_irq_disable+0x3b/0x140 [ 516.027148][T11870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.027160][T11870] ? clear_bhb_loop+0x70/0xc0 [ 516.027175][T11870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.027189][T11870] RIP: 0033:0x7fe55959e159 [ 516.027203][T11870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 516.027213][T11870] RSP: 002b:00007fe55a3ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 516.027227][T11870] RAX: ffffffffffffffda RBX: 00007fe559825fa0 RCX: 00007fe55959e159 [ 516.027236][T11870] RDX: 0000000000000023 RSI: 000020000000e000 RDI: 0000000000000005 [ 516.027244][T11870] RBP: 00007fe55a3ff090 R08: 0000000000000000 R09: 0000000000000000 [ 516.027252][T11870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 516.027261][T11870] R13: 00007fe559826038 R14: 00007fe559825fa0 R15: 00007fe55994fa48 [ 516.027292][T11870] [ 516.059070][T11870] Mem-Info: [ 516.059086][T11870] active_anon:10264 inactive_anon:193 isolated_anon:0 [ 516.059086][T11870] active_file:243 inactive_file:70691 isolated_file:0 [ 516.059086][T11870] unevictable:0 dirty:15 writeback:0 [ 516.059086][T11870] slab_reclaimable:11166 slab_unreclaimable:99428 [ 516.059086][T11870] mapped:31830 shmem:4664 pagetables:1489 [ 516.059086][T11870] sec_pagetables:0 bounce:0 [ 516.059086][T11870] kernel_misc_reclaimable:0 [ 516.059086][T11870] free:1283588 free_pcp:12268 free_cma:0 [ 516.059136][T11870] Node 0 active_anon:41056kB inactive_anon:772kB active_file:972kB inactive_file:282412kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:127200kB dirty:60kB writeback:0kB shmem:18656kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13228kB pagetables:5804kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 516.059220][T11870] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:352kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 516.059266][T11870] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 516.059320][T11870] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 516.059354][T11870] Node 0 DMA32 free:1166264kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:41056kB inactive_anon:772kB active_file:972kB inactive_file:282412kB unevictable:0kB writepending:60kB zspages:0kB present:3129332kB managed:2546952kB mlocked:0kB bounce:0kB free_pcp:49068kB local_pcp:21252kB free_cma:0kB [ 516.059410][T11870] lowmem_reserve[]: 0 0 0 0 0 [ 516.059445][T11870] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 516.059496][T11870] lowmem_reserve[]: 0 0 0 0 0 [ 516.059532][T11870] Node 1 Normal free:3952728kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:352kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 516.059585][T11870] lowmem_reserve[]: 0 0 0 0 0 [ 516.059629][T11870] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 516.059746][T11870] Node 0 DMA32: 2487*4kB (UME) 2767*8kB (UM) 1745*16kB (UM) 1084*32kB (UME) 646*64kB (UM) 397*128kB (UM) 136*256kB (ME) 53*512kB (UM) 4*1024kB (M) 10*2048kB (UME) 218*4096kB (UM) = 1166308kB [ 516.207014][T11870] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 516.242283][T11870] Node 1 Normal: 2*4kB (M) 10*8kB (UM) 14*16kB (UM) 23*32kB (UM) 13*64kB (UM) 10*128kB (UM) 10*256kB (UM) 7*512kB (UM) 3*1024kB (UM) 2*2048kB (U) 961*4096kB (UM) = 3952728kB [ 516.273478][T11870] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 516.273500][T11870] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 516.273515][T11870] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 516.273529][T11870] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 516.273544][T11870] 75953 total pagecache pages [ 516.273552][T11870] 0 pages in swap cache [ 516.273559][T11870] Free swap = 124996kB [ 516.273567][T11870] Total swap = 124996kB [ 516.293907][T11870] 2097051 pages RAM [ 516.293921][T11870] 0 pages HighMem/MovableOnly [ 516.293929][T11870] 428697 pages reserved [ 516.293936][T11870] 0 pages cma reserved [ 516.577840][ C0] ip6_tunnel: ip6gre6 xmit: Local address not yet configured! [ 517.217849][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 517.217860][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 517.587694][ T5709] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 517.680236][T11888] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1855'. [ 517.748709][ T5709] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 517.753189][ T5709] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 517.753220][ T5709] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 517.756195][ T5709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.756223][ T5709] usb 5-1: Product: syz [ 517.756238][ T5709] usb 5-1: Manufacturer: syz [ 517.756253][ T5709] usb 5-1: SerialNumber: syz [ 517.847310][ T5709] usb 5-1: 0:2 : does not exist [ 517.944746][T11896] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1858'. [ 518.037057][ T5709] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 518.168046][ T5709] usb 5-1: USB disconnect, device number 70 [ 518.251414][ T8859] udevd[8859]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 518.294920][T11905] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 518.437736][ T5737] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 518.556639][T11914] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 518.587657][ T5737] usb 1-1: Using ep0 maxpacket: 16 [ 518.588282][ T5737] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 518.589420][ T5737] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 518.589445][ T5737] usb 1-1: config 0 has no interface number 0 [ 518.589488][ T5737] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 518.589513][ T5737] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 518.596888][ T5737] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 518.596918][ T5737] usb 1-1: Product: syz [ 518.596932][ T5737] usb 1-1: SerialNumber: syz [ 518.620008][ T5737] usb 1-1: config 0 descriptor?? [ 518.683210][ T5737] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 518.702519][ T5737] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input101 [ 520.127741][ T2112] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 520.130376][T11932] No buffer was provided with the request [ 520.401541][ T2112] usb 2-1: New USB device found, idVendor=0830, idProduct=0001, bcdDevice= 0.00 [ 520.403119][ T2112] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 520.403181][ T2112] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.446818][ T2112] usb 2-1: config 0 descriptor?? [ 520.463380][ T2112] usb 2-1: active config #0 != 1 ?? [ 520.773906][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 520.776177][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 520.776414][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 520.776635][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 520.776855][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 520.777073][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 520.777292][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 520.777521][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 520.777919][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 520.778140][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 520.788392][ T5737] usb 1-1: USB disconnect, device number 75 [ 520.789070][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 520.886262][ T5737] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 521.177124][T11942] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1872'. [ 521.325219][ T5761] usb 2-1: USB disconnect, device number 77 [ 521.531044][T11952] ip6gre6: entered allmulticast mode [ 521.534956][ T12] ip6_tunnel: ip6gre6 xmit: Local address not yet configured! [ 521.717818][ T5737] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 521.867673][ T5737] usb 5-1: Using ep0 maxpacket: 32 [ 521.870182][ T5737] usb 5-1: unable to get BOS descriptor or descriptor too short [ 521.870239][ T5737] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 521.871644][ T5737] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 521.871671][ T5737] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 521.871691][ T5737] usb 5-1: config 14 has no interface number 0 [ 521.871707][ T5737] usb 5-1: config 14 has no interface number 1 [ 521.871773][ T5737] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 521.871797][ T5737] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 521.871821][ T5737] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 521.871847][ T5737] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 521.871873][ T5737] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 521.871897][ T5737] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 521.871921][ T5737] usb 5-1: config 14 interface 57 has no altsetting 0 [ 521.871937][ T5737] usb 5-1: config 14 interface 228 has no altsetting 0 [ 521.874563][ T5737] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.874589][ T5737] usb 5-1: Product: syz [ 521.874604][ T5737] usb 5-1: Manufacturer: syz [ 521.874618][ T5737] usb 5-1: SerialNumber: syz [ 522.322164][ T5737] legousbtower 5-1:14.57: interrupt endpoints not found [ 522.337827][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 522.337827][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 522.572265][T11969] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1883'. [ 522.572329][T11969] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 522.630738][T11971] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1884'. [ 522.729682][ T5737] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 522.733852][ T5737] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 522.857958][ T5709] usb 2-1: new full-speed USB device number 78 using dummy_hcd [ 522.908014][T11973] sctp: [Deprecated]: syz.2.1885 (pid 11973) Use of int in max_burst socket option deprecated. [ 522.908014][T11973] Use struct sctp_assoc_value instead [ 522.977828][ C1] ip6_tunnel: ip6gre7 xmit: Local address not yet configured! [ 522.997623][ T5709] usb 2-1: device descriptor read/64, error -71 [ 523.228090][ T5709] usb 2-1: new full-speed USB device number 79 using dummy_hcd [ 523.357739][ T5709] usb 2-1: device descriptor read/64, error -71 [ 523.437787][ T5737] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 523.468119][ T5709] usb usb2-port1: attempt power cycle [ 523.590398][ T5737] usb 3-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 523.602360][ T5737] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.602415][ T5737] usb 3-1: Product: syz [ 523.602429][ T5737] usb 3-1: Manufacturer: syz [ 523.602443][ T5737] usb 3-1: SerialNumber: syz [ 523.618205][ T5737] usb 3-1: UAS is ignored for this device, using usb-storage instead [ 523.618621][ T5737] usb 3-1: UAS is ignored for this device, using usb-storage instead [ 523.618638][ T5737] usb-storage 3-1:1.0: USB Mass Storage device detected [ 523.643908][ T5737] usb-storage 3-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 523.666220][ T5737] scsi host1: usb-storage 3-1:1.0 [ 523.808923][ T5709] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 523.828604][ T5709] usb 2-1: device descriptor read/8, error -71 [ 523.918472][T11996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.919366][T11996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.931031][T11997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.931580][T11997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.968160][T11997] netlink: 'syz.3.1891': attribute type 30 has an invalid length. [ 524.000112][ T5737] usb 1-1: new full-speed USB device number 76 using dummy_hcd [ 524.020334][T11944] usb 5-1: LEGO USB Tower reset control request failed [ 524.087651][ T5709] usb 2-1: new full-speed USB device number 81 using dummy_hcd [ 524.110204][ T5709] usb 2-1: device descriptor read/8, error -71 [ 524.158349][ T5737] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 524.159245][ T5737] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 524.159272][ T5737] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 524.159292][ T5737] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 524.159320][ T5737] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 524.159334][ T5737] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 524.159350][ T5737] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 524.159381][ T5737] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.162487][ T5737] usb 1-1: config 0 descriptor?? [ 524.163531][T11992] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 524.227967][ T5709] usb usb2-port1: unable to enumerate USB device [ 524.369731][ T5737] usblp 1-1:0.0: usblp1: USB Bidirectional printer dev 76 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 524.415972][T11992] usb 5-1: LEGO USB Tower reset control request failed [ 524.423511][T11992] trusted_key: encrypted_key: master key parameter 'defaɳQ0:syz' is invalid [ 524.425481][T11992] netlink: 284 bytes leftover after parsing attributes in process `syz.0.1889'. [ 524.531034][ T5737] usb 5-1: USB disconnect, device number 71 [ 524.553595][ T5737] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 524.930880][ T5709] usb 3-1: USB disconnect, device number 84 [ 525.143418][ T5761] usb 1-1: USB disconnect, device number 76 [ 525.158465][ T5761] usblp1: removed [ 525.398243][T12015] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1895'. [ 525.537946][ C0] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 525.659540][ T5697] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 525.838654][ T5697] usb 1-1: Using ep0 maxpacket: 16 [ 525.841076][ T5697] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 525.842746][ T5697] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 525.842779][ T5697] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 525.842801][ T5697] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 525.842844][ T5697] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.845393][ T5697] usb 1-1: config 0 descriptor?? [ 525.938124][ C1] ip6_tunnel: ip6gre6 xmit: Local address not yet configured! [ 526.067272][T12026] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 526.088148][ T5697] usbhid 1-1:0.0: can't add hid device: -71 [ 526.088259][ T5697] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 526.100550][ T5697] usb 1-1: USB disconnect, device number 77 [ 526.395373][ T31] kauditd_printk_skb: 19 callbacks suppressed [ 526.395397][ T31] audit: type=1800 audit(1789991043.646:1950): pid=12035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1900" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 526.973657][T12049] erspan0: entered promiscuous mode [ 527.163502][T12054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1907'. [ 527.457840][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 529.937745][ T5737] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 530.087655][ T5737] usb 2-1: Using ep0 maxpacket: 8 [ 530.088439][ T5737] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 530.096756][ T5737] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.096775][ T5737] usb 2-1: Product: syz [ 530.096784][ T5737] usb 2-1: Manufacturer: syz [ 530.096793][ T5737] usb 2-1: SerialNumber: syz [ 530.143280][ T5737] usb 2-1: config 0 descriptor?? [ 530.158177][ T5737] gspca_main: se401-2.14.0 probing 047d:5003 [ 530.351502][T12090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1919'. [ 530.860391][T12108] program syz.4.1926 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 530.861955][T12105] program syz.4.1926 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 530.908824][T12108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.929152][T12108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.996921][T12107] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 531.012635][T12109] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1926'. [ 531.157719][ T5761] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 531.180200][ T5737] gspca_se401: read req failed req 0x06 error -19 [ 531.183437][ T5737] usb 2-1: USB disconnect, device number 82 [ 531.307722][ T5761] usb 5-1: Using ep0 maxpacket: 16 [ 531.308472][ T5761] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 531.313338][ T5761] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 531.313872][ T5761] usb 5-1: config 0 interface 0 has no altsetting 0 [ 531.313915][ T5761] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.334299][ T5761] usb 5-1: config 0 descriptor?? [ 532.027820][ T5697] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 532.141982][T12128] 8021q: adding VLAN 0 to HW filter on device bond3 [ 532.179009][ T5697] usb 2-1: Using ep0 maxpacket: 16 [ 532.181321][ T5697] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 532.182731][ T5697] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 532.182751][ T5697] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 532.198782][ T5697] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.198808][ T5697] usb 2-1: Product: syz [ 532.198822][ T5697] usb 2-1: Manufacturer: syz [ 532.198835][ T5697] usb 2-1: SerialNumber: syz [ 532.229087][ T5697] usb 2-1: config 0 descriptor?? [ 532.236336][ T5697] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 532.236369][ T5697] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 532.335522][T12130] bond3: (slave ip6erspan0): making interface the new active one [ 532.363126][T12130] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 532.496064][T12123] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1931'. [ 532.620261][ T5697] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 532.622059][ T5697] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 532.622423][ T5697] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 532.622439][ T5697] em28xx 2-1:0.0: No AC97 audio processor [ 532.640977][ T5697] usb 2-1: USB disconnect, device number 83 [ 532.650020][ T5697] em28xx 2-1:0.0: Disconnecting em28xx [ 532.684750][ T5697] em28xx: Freeing device [ 532.704715][ T8859] udevd[8859]: setting owner of /dev/bus/usb/002/083 to uid=0, gid=0 failed: No such file or directory [ 532.745490][T12134] nvme_fabrics: unknown parameter or missing value '#! ./file0 ) A̢pdJM' in ctrl creation request [ 533.057875][ T5740] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 533.122235][T12144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.124185][T12144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.211301][T12144] netlink: 'syz.3.1938': attribute type 32 has an invalid length. [ 533.226792][ T5740] usb 3-1: Using ep0 maxpacket: 16 [ 533.235695][ T5740] usb 3-1: unable to get BOS descriptor or descriptor too short [ 533.235750][ T5740] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.40 [ 533.237264][ T5740] usb 3-1: config 1 interface 0 altsetting 218 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 533.237330][ T5740] usb 3-1: config 1 interface 0 has no altsetting 0 [ 533.278721][ T5740] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.278751][ T5740] usb 3-1: Product: syz [ 533.279041][ T5740] usb 3-1: Manufacturer: syz [ 533.279128][ T5740] usb 3-1: SerialNumber: syz [ 533.437671][ T5737] usb 2-1: new low-speed USB device number 84 using dummy_hcd [ 533.499861][T12152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.500550][T12154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.503894][T12152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.504757][T12154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.512035][T12137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.512484][T12137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.573316][ T5740] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input102 [ 533.585882][ T4969] bcm5974 3-1:1.0: could not read from device [ 533.614080][ T4969] bcm5974 3-1:1.0: could not read from device [ 533.627584][ T5737] usb 2-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 533.634042][ T5740] usb 3-1: USB disconnect, device number 85 [ 533.636052][ T5737] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 533.636077][ T5737] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 533.636125][ T5737] usb 2-1: config 1 interface 0 has no altsetting 0 [ 533.643527][ T4969] bcm5974 3-1:1.0: could not read from device [ 533.692509][ T5737] usb 2-1: string descriptor 0 read error: -22 [ 533.692696][ T5737] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 533.743367][ T5737] usb 2-1: 0:2 : does not exist [ 533.858168][ T5737] usb-storage 2-1:1.1: USB Mass Storage device detected [ 533.984139][ T5761] usbhid 5-1:0.0: can't add hid device: -71 [ 533.984281][ T5761] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 534.010365][ T5761] usb 5-1: USB disconnect, device number 72 [ 534.980445][ T5737] usb 2-1: us122l: couldn't allocate write buffer [ 534.981038][ T5737] snd-usb-us122l 2-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 535.013529][ T5737] usb 2-1: USB disconnect, device number 84 [ 535.137816][ C1] ip6_tunnel: ip6gre6 xmit: Local address not yet configured! [ 535.553701][T12190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 535.554261][T12190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 535.774220][ T8662] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 535.774249][ T8662] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.807829][ T2112] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 536.029196][T12191] dvmrp0: entered allmulticast mode [ 536.238228][ T8662] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.238255][ T8662] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.396794][ T2112] usb 5-1: unable to get BOS descriptor or descriptor too short [ 536.396850][ T2112] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 536.401519][ T2112] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 536.401559][ T2112] usb 5-1: can't read configurations, error -71 [ 536.487339][ T8662] bond0: (slave netdevsim1): Releasing backup interface [ 536.508958][ T8662] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.508984][ T8662] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.767418][ T8662] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.767452][ T8662] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.781805][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 536.807075][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 536.820992][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 536.835306][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 536.836104][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 536.927701][ T5737] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 537.078266][ T5737] usb 1-1: Using ep0 maxpacket: 32 [ 537.081668][ T5737] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 537.082885][ T5737] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 537.082910][ T5737] usb 1-1: config 0 has no interface number 0 [ 537.082962][ T5737] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 537.082983][ T5737] usb 1-1: config 0 interface 1 has no altsetting 0 [ 537.143911][ T5737] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.143942][ T5737] usb 1-1: Product: syz [ 537.143956][ T5737] usb 1-1: Manufacturer: syz [ 537.143971][ T5737] usb 1-1: SerialNumber: syz [ 537.185549][ T5737] usb 1-1: config 0 descriptor?? [ 537.275844][ T31] audit: type=1326 audit(1789991054.526:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12203 comm="syz.2.1956" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ed39e159 code=0x7ffc0000 [ 537.275904][ T31] audit: type=1326 audit(1789991054.526:1952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12203 comm="syz.2.1956" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ed39e159 code=0x7ffc0000 [ 537.329596][ T31] audit: type=1326 audit(1789991054.566:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12203 comm="syz.2.1956" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f61ed39e159 code=0x7ffc0000 [ 537.479262][ T5737] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 537.497866][ T5737] cx231xx 1-1:0.1: Failed to read PCB config [ 537.497940][ T5737] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71 [ 537.506643][ T5737] usb 1-1: USB disconnect, device number 78 [ 537.697848][ C0] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 537.800852][ T31] audit: type=1326 audit(1789991055.066:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12203 comm="syz.2.1956" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ed39e159 code=0x7ffc0000 [ 537.800891][ T31] audit: type=1326 audit(1789991055.066:1955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12203 comm="syz.2.1956" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ed39e159 code=0x7ffc0000 [ 538.038460][ T5737] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 538.191545][ T5737] usb 1-1: device descriptor read/64, error -71 [ 538.429956][ T5737] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 538.557632][ T5737] usb 1-1: device descriptor read/64, error -71 [ 538.669897][ T5737] usb usb1-port1: attempt power cycle [ 538.978807][ T52] Bluetooth: hci4: command tx timeout [ 539.017722][ T5737] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 539.039561][ T5737] usb 1-1: device descriptor read/8, error -71 [ 539.151821][ T8662] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 539.224342][T12246] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 539.224363][T12246] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 539.278032][ T5737] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 539.284671][ T8662] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 539.305572][ T5737] usb 1-1: device descriptor read/8, error -71 [ 539.339512][ T8662] bond0 (unregistering): Released all slaves [ 539.412877][ T5737] usb usb1-port1: unable to enumerate USB device [ 539.639258][ T8662] IPVS: stopping backup sync thread 8517 ... [ 539.753974][T12261] ip6gre8: entered allmulticast mode [ 539.763993][ T8660] ip6_tunnel: ip6gre8 xmit: Local address not yet configured! [ 540.241129][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 540.287898][ T5697] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 540.467404][ T5697] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 540.501458][ T5697] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 540.501478][ T5697] usb 3-1: Product: syz [ 540.501489][ T5697] usb 3-1: Manufacturer: syz [ 540.501500][ T5697] usb 3-1: SerialNumber: syz [ 540.534379][ T5697] usb 3-1: config 0 descriptor?? [ 540.897912][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 541.057670][ T52] Bluetooth: hci4: command tx timeout [ 541.146362][T12264] netlink: 'syz.2.1969': attribute type 1 has an invalid length. [ 541.258200][T12290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.258844][T12290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.264176][T12286] input: syz1 as /devices/virtual/input/input103 [ 541.453394][T12293] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1973'. [ 541.479400][T12205] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.479504][T12205] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.479621][T12205] bridge_slave_0: entered allmulticast mode [ 541.484640][T12205] bridge_slave_0: entered promiscuous mode [ 541.518765][T12205] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.518876][T12205] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.520016][T12205] bridge_slave_1: entered allmulticast mode [ 541.522063][T12205] bridge_slave_1: entered promiscuous mode [ 541.810036][T12264] 8021q: adding VLAN 0 to HW filter on device bond5 [ 541.972588][ T5709] usb 3-1: USB disconnect, device number 86 [ 542.009793][ T30] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 542.178508][ T30] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 542.179707][ T30] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 542.179734][ T30] usb 5-1: config 0 has no interfaces? [ 542.179767][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.201561][ T30] usb 5-1: config 0 descriptor?? [ 542.407483][T12205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 542.421229][T12205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 542.498577][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 542.659800][T12205] team0: Port device team_slave_0 added [ 542.683986][T12205] team0: Port device team_slave_1 added [ 542.779723][ T8662] hsr_slave_0: left promiscuous mode [ 542.780571][ T8662] hsr_slave_1: left promiscuous mode [ 542.781643][ T8662] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 542.781681][ T8662] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 542.784074][ T8662] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 542.784099][ T8662] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 542.822206][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 542.875403][ T8662] veth1_macvtap: left promiscuous mode [ 542.875485][ T8662] veth0_macvtap: left promiscuous mode [ 542.889531][ T5737] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 542.901554][ T8662] veth1_vlan: left promiscuous mode [ 542.901764][ T8662] veth0_vlan: left promiscuous mode [ 543.048658][ T5737] usb 1-1: Using ep0 maxpacket: 16 [ 543.052530][ T5737] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 543.054490][ T5737] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 543.054531][ T5737] usb 1-1: config 1 has no interface number 0 [ 543.054575][ T5737] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 543.054602][ T5737] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 543.054625][ T5737] usb 1-1: config 1 interface 105 has no altsetting 0 [ 543.064999][ T5737] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 543.065031][ T5737] usb 1-1: Product: syz [ 543.065047][ T5737] usb 1-1: Manufacturer: syz [ 543.065062][ T5737] usb 1-1: SerialNumber: syz [ 543.138613][ T52] Bluetooth: hci4: command tx timeout [ 543.152499][T12312] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 543.152634][T12312] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 543.697822][ C1] ip6_tunnel: ip6gre8 xmit: Local address not yet configured! [ 543.721453][ T8662] team0 (unregistering): Port device team_slave_1 removed [ 543.775061][ T8662] team0 (unregistering): Port device team_slave_0 removed [ 544.700037][T12205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.700057][T12205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.700085][T12205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.765973][T12205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.765995][T12205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.766022][T12205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.774537][T12343] netlink: 'syz.3.1982': attribute type 1 has an invalid length. [ 545.022856][ T5697] usb 5-1: USB disconnect, device number 75 [ 545.187842][T12343] bond0: option mode: invalid value (8) [ 545.216632][T12343] bond0 (unregistering): Released all slaves [ 545.217809][ T52] Bluetooth: hci4: command tx timeout [ 545.408399][ T31] audit: type=1326 audit(1789991062.656:1956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12357 comm="syz.2.1985" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ed39e159 code=0x7ffc0000 [ 545.408463][ T31] audit: type=1326 audit(1789991062.656:1957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12357 comm="syz.2.1985" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ed39e159 code=0x7ffc0000 [ 545.410288][ T31] audit: type=1326 audit(1789991062.666:1958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12357 comm="syz.2.1985" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ed39e159 code=0x7ffc0000 [ 545.411154][ T31] audit: type=1326 audit(1789991062.666:1959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12357 comm="syz.2.1985" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f61ed39e159 code=0x7ffc0000 [ 545.411912][ T31] audit: type=1326 audit(1789991062.666:1960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12357 comm="syz.2.1985" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ed39e159 code=0x7ffc0000 [ 545.411964][ T31] audit: type=1326 audit(1789991062.666:1961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12357 comm="syz.2.1985" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ed39e159 code=0x7ffc0000 [ 545.412010][ T31] audit: type=1326 audit(1789991062.666:1962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12357 comm="syz.2.1985" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ed39e159 code=0x7ffc0000 [ 545.416357][ T31] audit: type=1326 audit(1789991062.666:1963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12357 comm="syz.2.1985" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ed39e159 code=0x7ffc0000 [ 545.416742][ T31] audit: type=1326 audit(1789991062.666:1964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12357 comm="syz.2.1985" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61ed39e159 code=0x7ffc0000 [ 545.470138][ T31] audit: type=1326 audit(1789991062.726:1965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12357 comm="syz.2.1985" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f61ed39e159 code=0x7ffc0000 [ 545.646904][ T5737] aqc111 1-1:1.105: probe with driver aqc111 failed with error -71 [ 545.688879][ T5737] usb 1-1: USB disconnect, device number 83 [ 545.715744][T12205] hsr_slave_0: entered promiscuous mode [ 545.717144][T12205] hsr_slave_1: entered promiscuous mode [ 545.732164][T12205] debugfs: 'hsr0' already exists in 'hsr' [ 545.732190][T12205] Cannot create hsr debugfs directory [ 546.076820][T12366] batman_adv: batadv0: Adding interface: veth0 [ 546.076847][T12366] batman_adv: batadv0: Interface activated: veth0 [ 546.242254][T12366] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 546.257152][T12366] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 546.288696][T12366] batman_adv: batadv0: Interface deactivated: veth0 [ 546.288723][T12366] batman_adv: batadv0: Removing interface: veth0 [ 546.399933][T12376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.400441][T12376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.638914][ T8662] IPVS: stop unused estimator thread 0... [ 546.657952][ C0] ip6_tunnel: ip6gre6 xmit: Local address not yet configured! [ 547.065860][ T5279] 8021q: adding VLAN 0 to HW filter on device eth3 [ 547.111308][T12392] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 548.472913][ T5737] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 548.631586][ T5737] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 548.642427][ T5737] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 548.642476][ T5737] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.671958][ T5737] usb 3-1: config 0 descriptor?? [ 548.913895][ T5737] usbhid 3-1:0.0: can't add hid device: -71 [ 548.914014][ T5737] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 548.922760][ T5737] usb 3-1: USB disconnect, device number 87 [ 549.378093][ T5737] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 549.530455][ T5737] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 549.536463][ T5737] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 549.536519][ T5737] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.546329][ T5737] usb 3-1: config 0 descriptor?? [ 549.676494][T12205] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 549.707682][ T5698] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 549.728557][T12205] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 549.760272][T12205] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 549.803437][T12205] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 549.817182][T12205] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 549.867849][T12205] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 549.868473][ T5698] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 549.871651][ T5698] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.906098][ T5698] usb 5-1: config 0 descriptor?? [ 549.918482][ T5698] pwc: Samsung MPC-C10 USB webcam detected. [ 549.925625][T12205] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 549.999189][T12205] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 549.999998][T12439] syzkaller1: entered promiscuous mode [ 550.000021][T12439] syzkaller1: entered allmulticast mode [ 550.482104][ T31] kauditd_printk_skb: 185 callbacks suppressed [ 550.482128][ T31] audit: type=1326 audit(1789991067.736:2151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12453 comm="syz.3.2001" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc523d9e159 code=0x7ffc0000 [ 550.482179][ T31] audit: type=1326 audit(1789991067.736:2152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12453 comm="syz.3.2001" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc523d9e159 code=0x7ffc0000 [ 550.546635][ T31] audit: type=1326 audit(1789991067.796:2153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12453 comm="syz.3.2001" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc523d9e159 code=0x7ffc0000 [ 550.547262][ T31] audit: type=1326 audit(1789991067.796:2154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12453 comm="syz.3.2001" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc523d9e159 code=0x7ffc0000 [ 550.555864][ T31] audit: type=1326 audit(1789991067.806:2155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12453 comm="syz.3.2001" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=468 compat=0 ip=0x7fc523d9e159 code=0x7ffc0000 [ 550.555915][ T31] audit: type=1326 audit(1789991067.806:2156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12453 comm="syz.3.2001" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc523d9e159 code=0x7ffc0000 [ 550.555954][ T31] audit: type=1326 audit(1789991067.806:2157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12453 comm="syz.3.2001" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc523d9e159 code=0x7ffc0000 [ 550.568008][ T31] audit: type=1326 audit(1789991067.816:2158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12453 comm="syz.3.2001" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc523d9e159 code=0x7ffc0000 [ 550.568060][ T31] audit: type=1326 audit(1789991067.826:2159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12453 comm="syz.3.2001" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc523d9e159 code=0x7ffc0000 [ 550.574583][ T31] audit: type=1326 audit(1789991067.826:2160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12453 comm="syz.3.2001" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc523d9e159 code=0x7ffc0000 [ 550.591907][ T5737] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 550.623307][ T5737] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input104 [ 550.873746][ T5698] pwc: send_video_command error -71 [ 550.873770][ T5698] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 550.873874][ T5698] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 550.876105][ T5698] usb 5-1: USB disconnect, device number 76 [ 550.922896][T12205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 550.961678][T12452] netlink: 'syz.0.2002': attribute type 1 has an invalid length. [ 551.063718][T12452] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2002'. [ 551.094845][T12205] 8021q: adding VLAN 0 to HW filter on device team0 [ 551.181709][ T1111] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.181852][ T1111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.205700][ T1111] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.207765][ T1111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.576765][T12466] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2003'. [ 551.609224][ T5698] usb 3-1: USB disconnect, device number 88 [ 551.609291][ C1] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 551.777783][ C1] ip6_tunnel: ip6gre8 xmit: Local address not yet configured! [ 551.894048][T12205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 552.333279][T12205] veth0_vlan: entered promiscuous mode [ 552.398758][T12205] veth1_vlan: entered promiscuous mode [ 552.417815][ C1] ip6_tunnel: ip6gre6 xmit: Local address not yet configured! [ 552.512114][ T5709] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 552.750002][T12205] veth0_macvtap: entered promiscuous mode [ 552.803201][T12205] veth1_macvtap: entered promiscuous mode [ 553.002894][T12205] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 553.095920][T12205] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 553.237716][ T8648] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.237765][ T8648] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.267735][ T8660] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.268325][ T1111] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.026835][ T8560] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.026864][ T8560] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.318200][ T5740] usb 1-1: new full-speed USB device number 84 using dummy_hcd [ 554.501153][ T5740] usb 1-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 554.503396][ T5740] usb 1-1: config 201 has an invalid interface number: 249 but max is 0 [ 554.503425][ T5740] usb 1-1: config 201 has no interface number 0 [ 554.503465][ T5740] usb 1-1: config 201 interface 249 altsetting 4 has an endpoint descriptor with address 0xF1, changing to 0x81 [ 554.503492][ T5740] usb 1-1: config 201 interface 249 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 554.503520][ T5740] usb 1-1: config 201 interface 249 has no altsetting 0 [ 554.504256][ T8662] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.504276][ T8662] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.589740][ T5740] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.589773][ T5740] usb 1-1: Product: syz [ 554.589788][ T5740] usb 1-1: Manufacturer: syz [ 554.589803][ T5740] usb 1-1: SerialNumber: syz [ 554.613368][T12529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2012'. [ 554.682581][T12529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.683214][T12529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.686844][T12530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.687448][T12530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.951326][ T5740] ath6kl: Failed to submit usb control message: -71 [ 554.951385][ T5740] ath6kl: unable to send the bmi data to the device: -71 [ 554.951399][ T5740] ath6kl: Unable to send get target info: -71 [ 554.972091][ T5740] ath6kl: Failed to init ath6kl core: -71 [ 554.976514][ T5740] ath6kl_usb 1-1:201.249: probe with driver ath6kl_usb failed with error -71 [ 555.034488][ T5740] usb 1-1: USB disconnect, device number 84 [ 555.328384][ T30] usb 3-1: new full-speed USB device number 89 using dummy_hcd [ 555.480236][ T30] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 555.497773][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.507085][ T30] usb 3-1: config 0 descriptor?? [ 555.543422][ T30] pwc: Samsung MPC-C10 USB webcam detected. [ 556.085420][ T31] kauditd_printk_skb: 70 callbacks suppressed [ 556.085474][ T31] audit: type=1326 audit(1789991073.336:2231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12545 comm="syz.1.2015" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348b19e159 code=0x7ffc0000 [ 556.127278][ T31] audit: type=1326 audit(1789991073.386:2232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12545 comm="syz.1.2015" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348b19e159 code=0x7ffc0000 [ 556.154985][ T31] audit: type=1326 audit(1789991073.386:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12545 comm="syz.1.2015" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f348b19e159 code=0x7ffc0000 [ 556.257749][ C1] ip6_tunnel: ip6gre7 xmit: Local address not yet configured! [ 556.353901][ T30] pwc: send_video_command error -71 [ 556.353927][ T30] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 556.354037][ T30] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 556.380488][ T30] usb 3-1: USB disconnect, device number 89 [ 556.821726][T12578] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2021'. [ 556.920266][T12578] ip6tnl2: entered allmulticast mode [ 557.080899][T12584] netlink: 'syz.4.2023': attribute type 1 has an invalid length. [ 557.127724][T12584] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2023'. [ 557.291432][T12593] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 557.291453][T12593] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 558.181846][ T30] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 558.330088][ T30] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 558.332482][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.374182][ T30] usb 1-1: config 0 descriptor?? [ 558.395262][ T30] cp210x 1-1:0.0: cp210x converter detected [ 558.523280][ T31] audit: type=1326 audit(1789991075.776:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12607 comm="syz.4.2028" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe55959e159 code=0x7ffc0000 [ 558.523445][ T31] audit: type=1326 audit(1789991075.776:2235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12607 comm="syz.4.2028" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe55959e159 code=0x7ffc0000 [ 558.553375][ T31] audit: type=1326 audit(1789991075.786:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12607 comm="syz.4.2028" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fe55959e159 code=0x7ffc0000 [ 558.553472][ T31] audit: type=1326 audit(1789991075.786:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12607 comm="syz.4.2028" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe55959e159 code=0x7ffc0000 [ 558.553518][ T31] audit: type=1326 audit(1789991075.786:2238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12607 comm="syz.4.2028" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe55959e159 code=0x7ffc0000 [ 558.553591][ T31] audit: type=1326 audit(1789991075.786:2239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12607 comm="syz.4.2028" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fe55959e159 code=0x7ffc0000 [ 558.553635][ T31] audit: type=1326 audit(1789991075.786:2240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12607 comm="syz.4.2028" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe55959e159 code=0x7ffc0000 [ 558.751657][ T30] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 558.751689][ T30] cp210x 1-1:0.0: querying part number failed [ 558.827074][ T30] usb 1-1: cp210x converter now attached to ttyUSB0 [ 558.840932][ T30] usb 1-1: USB disconnect, device number 85 [ 558.874583][T12605] IPVS: length: 165 != 24 [ 558.899518][ T30] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 558.901754][ T30] cp210x 1-1:0.0: device disconnected [ 559.137753][ T5698] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 559.325955][ T5698] usb 2-1: unable to get BOS descriptor or descriptor too short [ 559.325993][ T5698] usb 2-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 559.346584][ T5698] usb 2-1: config index 0 descriptor too short (expected 32799, got 31) [ 559.346617][ T5698] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 559.346659][ T5698] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 559.421493][ T5698] usb 2-1: string descriptor 0 read error: -22 [ 559.421640][ T5698] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.540981][ T5698] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 559.822299][ T5698] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 559.826744][ T5698] usb 2-1: USB disconnect, device number 85 [ 560.027641][ T30] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 560.098000][ T5709] usb 1-1: new full-speed USB device number 86 using dummy_hcd [ 560.171170][T12651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.177504][T12651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.188862][ T30] usb 5-1: Using ep0 maxpacket: 8 [ 560.198308][ T30] usb 5-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 560.201663][T12651] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2034'. [ 560.223882][ T30] usb 5-1: too many endpoints for config 0 interface 0 altsetting 5: 34, using maximum allowed: 30 [ 560.223936][ T30] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.223965][ T30] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 560.223991][ T30] usb 5-1: config 0 interface 0 has no altsetting 0 [ 560.224023][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.267267][ T30] usb 5-1: config 0 descriptor?? [ 560.342686][ T5709] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 560.360414][ T5709] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.363448][ T5709] usb 1-1: config 0 descriptor?? [ 560.376487][ T5709] pwc: Samsung MPC-C10 USB webcam detected. [ 560.796197][T12635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.796860][T12635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.880317][T12635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.892321][T12635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.896411][ T5709] pwc: send_video_command error -71 [ 560.896431][ T5709] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 560.896534][ T5709] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 560.900767][T12664] netlink: 'syz.2.2037': attribute type 1 has an invalid length. [ 560.900788][T12664] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2037'. [ 560.909046][ T5709] usb 1-1: USB disconnect, device number 86 [ 560.938067][ T30] usbhid 5-1:0.0: can't add hid device: -71 [ 560.938210][ T30] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 560.970461][ T30] usb 5-1: USB disconnect, device number 78 [ 561.416895][T12673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.417460][T12673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.459209][T12673] sctp: [Deprecated]: syz.3.2039 (pid 12673) Use of int in max_burst socket option deprecated. [ 561.459209][T12673] Use struct sctp_assoc_value instead [ 561.757633][ T5709] usb 1-1: new low-speed USB device number 87 using dummy_hcd [ 561.911455][ T5709] usb 1-1: New USB device found, idVendor=1235, idProduct=8211, bcdDevice= 0.40 [ 561.915412][ T5709] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1023, setting to 0 [ 561.915446][ T5709] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 0 [ 561.925813][ T5709] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.925840][ T5709] usb 1-1: Manufacturer: ㋷㍑넕㣏缷븿圖શ飇雮雼뵘堮霬ᝄဗ [ 562.108163][ T10] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 562.182695][ T5709] usb 1-1: low speed audio streaming not supported [ 562.182713][ T5709] usb 1-1: low speed audio streaming not supported [ 562.288489][ T10] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 562.293711][ T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 562.293739][ T10] usb 2-1: config 0 has no interface number 0 [ 562.304133][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.304161][ T10] usb 2-1: Product: syz [ 562.304174][ T10] usb 2-1: Manufacturer: syz [ 562.304187][ T10] usb 2-1: SerialNumber: syz [ 562.316838][ T10] usb 2-1: config 0 descriptor?? [ 562.362690][ T10] usb 2-1: selecting invalid altsetting 1 [ 562.362790][ T10] dvb_ttusb_budget: ttusb_init_controller: error [ 562.362800][ T10] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 562.409420][ T5709] usb 1-1: USB disconnect, device number 87 [ 562.455512][T12700] program syz.4.2048 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 562.523977][ T8859] udevd[8859]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 562.599519][T12691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.607384][T12691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.665195][T12691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.665467][T12691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.864188][T12702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.869194][ T10] DVB: Unable to find symbol stv0299_attach() [ 562.880739][T12702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.886046][T12702] tipc: Started in network mode [ 562.886069][T12702] tipc: Node identity 4, cluster identity 4711 [ 562.886081][T12702] tipc: Node number set to 4 [ 562.891636][T12702] tipc: Enabled bearer , priority 0 [ 563.043920][ T10] DVB: Unable to find symbol tda8083_attach() [ 563.043935][ T10] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 563.204612][T12702] tipc: Disabling bearer [ 563.277669][ T30] usb 1-1: new full-speed USB device number 88 using dummy_hcd [ 563.307811][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.307875][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.374542][ T5709] usb 2-1: USB disconnect, device number 86 [ 563.438838][ T30] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 563.440213][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.497280][ T30] usb 1-1: config 0 descriptor?? [ 563.514801][ T30] pwc: Samsung MPC-C10 USB webcam detected. [ 564.052481][ T30] pwc: send_video_command error -71 [ 564.052499][ T30] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 564.052567][ T30] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 564.090515][ T30] usb 1-1: USB disconnect, device number 88 [ 564.549111][T12728] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2056'. [ 565.154057][T12751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2063'. [ 565.405882][T12758] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2066'. [ 565.634862][T12764] syzkaller0: entered promiscuous mode [ 565.755185][T12764] input: syz1 as /devices/virtual/input/input105 [ 565.774753][ T5698] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 565.935808][ T5698] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 565.949268][ T5698] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 565.949287][ T5698] usb 3-1: Product: syz [ 565.949297][ T5698] usb 3-1: SerialNumber: syz [ 565.954264][ T5698] usb 3-1: config 0 descriptor?? [ 566.046283][T12769] ------------[ cut here ]------------ [ 566.046294][T12769] kvm_is_error_gpa(gpa) == kvm_is_error_hva(uhva) [ 566.046301][T12769] WARNING: arch/x86/kvm/../../../virt/kvm/pfncache.c:267 at __kvm_gpc_refresh+0x1510/0x1710, CPU#0: syz.1.2069/12769 [ 566.071151][T12769] Modules linked in: [ 566.075101][T12769] CPU: 0 UID: 0 PID: 12769 Comm: syz.1.2069 Tainted: G L syzkaller #0 PREEMPT(full) [ 566.086109][T12769] Tainted: [L]=SOFTLOCKUP [ 566.090532][T12769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 566.101071][T12769] RIP: 0010:__kvm_gpc_refresh+0x1510/0x1710 [ 566.107097][T12769] Code: c6 05 8b e1 22 0f 01 48 c7 c7 46 aa 3f 8e be 44 04 00 00 48 c7 c2 40 42 02 8c e8 6b b3 62 00 e9 81 ee ff ff e8 81 0b 87 00 90 <0f> 0b 90 bb ea ff ff ff 49 bf 00 00 00 00 00 fc ff df e9 4b f6 ff [ 566.127269][T12769] RSP: 0018:ffffc9000541f1c0 EFLAGS: 00010287 [ 566.133835][T12769] RAX: ffffffff8140d07f RBX: ffff888000000000 RCX: 0000000000080000 [ 566.142243][T12769] RDX: ffffc90003f81000 RSI: 000000000000039f RDI: 00000000000003a0 [ 566.150402][T12769] RBP: ffffc9000541f350 R08: ffffffff907a507f R09: 1ffffffff20f4a0f [ 566.158478][T12769] R10: dffffc0000000000 R11: fffffbfff20f4a10 R12: 1ffff92000a83e4c [ 566.166784][T12769] R13: ffff888079651d60 R14: ffff888000000000 R15: ffffffffffffff01 [ 566.174880][T12769] FS: 00007f348c0b26c0(0000) GS:ffff888124ccd000(0000) knlGS:0000000000000000 [ 566.183989][T12769] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 566.190636][T12769] CR2: 00007f348c090ff8 CR3: 000000007c5b0000 CR4: 00000000003526f0 [ 566.198804][T12769] Call Trace: [ 566.202291][T12769] [ 566.205265][T12769] ? lock_acquire+0x115/0x350 [ 566.210006][T12769] ? kvm_gpc_refresh+0x31/0x110 [ 566.214917][T12769] ? __pfx___kvm_gpc_refresh+0x10/0x10 [ 566.220470][T12769] ? lock_acquire+0x115/0x350 [ 566.225170][T12769] ? lock_acquire+0x115/0x350 [ 566.230142][T12769] kvm_gpc_refresh+0xe1/0x110 [ 566.234826][T12769] ? kvm_xen_set_evtchn+0x11e/0x220 [ 566.240329][T12769] kvm_xen_set_evtchn+0x14f/0x220 [ 566.245606][T12769] kvm_xen_hvm_evtchn_send+0x120/0x1e0 [ 566.251131][T12769] kvm_arch_vm_ioctl+0xfad/0x1a10 [ 566.256179][T12769] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 566.261807][T12769] ? __lock_acquire+0x747/0x2de0 [ 566.266858][T12769] ? __lock_acquire+0x747/0x2de0 [ 566.271864][T12769] ? lock_acquire+0x115/0x350 [ 566.276559][T12769] ? lock_acquire+0x115/0x350 [ 566.281275][T12769] ? is_bpf_text_address+0x26/0x2b0 [ 566.286757][T12769] ? is_bpf_text_address+0x292/0x2b0 [ 566.292197][T12769] ? kernel_text_address+0xa5/0xe0 [ 566.297419][T12769] ? __kernel_text_address+0xd/0x30 [ 566.302680][T12769] ? unwind_get_return_address+0x4d/0x90 [ 566.308428][T12769] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 566.314948][T12769] ? arch_stack_walk+0xfb/0x150 [ 566.319903][T12769] ? stack_trace_save+0xa9/0x100 [ 566.324873][T12769] ? __pfx_stack_trace_save+0x10/0x10 [ 566.330576][T12769] ? kasan_save_track+0x4f/0x80 [ 566.335431][T12769] ? stack_depot_save_flags+0x33/0x7f0 [ 566.341137][T12769] ? __lock_acquire+0x747/0x2de0 [ 566.346123][T12769] ? kasan_save_track+0x4f/0x80 [ 566.351065][T12769] ? kasan_save_track+0x3e/0x80 [ 566.355962][T12769] ? kasan_save_free_info+0x40/0x50 [ 566.361201][T12769] ? __kasan_slab_free+0x5c/0x80 [ 566.366178][T12769] ? kfree+0x1c5/0x650 [ 566.370322][T12769] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 566.376006][T12769] ? security_file_ioctl+0xc3/0x2a0 [ 566.381331][T12769] ? __se_sys_ioctl+0x47/0x170 [ 566.386122][T12769] ? do_syscall_64+0x166/0x520 [ 566.390947][T12769] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.397099][T12769] kvm_vm_ioctl+0x8f7/0xd30 [ 566.401706][T12769] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 566.406796][T12769] ? kasan_quarantine_put+0xbb/0x1f0 [ 566.412158][T12769] ? tomoyo_path_number_perm+0x219/0x5f0 [ 566.417919][T12769] ? tomoyo_path_number_perm+0x219/0x5f0 [ 566.423570][T12769] ? do_vfs_ioctl+0x116f/0x1530 [ 566.428468][T12769] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 566.433749][T12769] ? hook_file_ioctl+0x1f2/0x600 [ 566.438924][T12769] ? lockdep_hardirqs_on+0x7b/0x110 [ 566.444147][T12769] ? irqentry_exit+0x218/0x910 [ 566.448950][T12769] ? trace_irq_disable+0x3b/0x140 [ 566.453998][T12769] ? bpf_lsm_file_ioctl+0x9/0x20 [ 566.458979][T12769] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 566.464020][T12769] __se_sys_ioctl+0xfc/0x170 [ 566.468656][T12769] do_syscall_64+0x166/0x520 [ 566.473263][T12769] ? trace_irq_disable+0x3b/0x140 [ 566.478369][T12769] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.484463][T12769] ? clear_bhb_loop+0x70/0xc0 [ 566.489389][T12769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.495296][T12769] RIP: 0033:0x7f348b19e159 [ 566.500532][T12769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 566.520398][T12769] RSP: 002b:00007f348c0b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 566.528940][T12769] RAX: ffffffffffffffda RBX: 00007f348b425fa0 RCX: 00007f348b19e159 [ 566.537173][T12769] RDX: 0000200000000100 RSI: 00000000400caed0 RDI: 0000000000000009 [ 566.545362][T12769] RBP: 00007f348b23506b R08: 0000000000000000 R09: 0000000000000000 [ 566.553382][T12769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 566.561385][T12769] R13: 00007f348b426038 R14: 00007f348b425fa0 R15: 00007f348b54fa48 [ 566.569399][T12769] [ 566.572432][T12769] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 566.579704][T12769] CPU: 0 UID: 0 PID: 12769 Comm: syz.1.2069 Tainted: G L syzkaller #0 PREEMPT(full) [ 566.590645][T12769] Tainted: [L]=SOFTLOCKUP [ 566.594961][T12769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 566.605180][T12769] Call Trace: [ 566.608456][T12769] [ 566.611385][T12769] vpanic+0x56d/0xa60 [ 566.615394][T12769] ? __pfx__printk+0x10/0x10 [ 566.619985][T12769] ? __pfx_vpanic+0x10/0x10 [ 566.624487][T12769] ? is_bpf_text_address+0x292/0x2b0 [ 566.629792][T12769] ? is_bpf_text_address+0x26/0x2b0 [ 566.634993][T12769] panic+0xc5/0xd0 [ 566.638714][T12769] ? __pfx_panic+0x10/0x10 [ 566.643144][T12769] __warn+0x315/0x4c0 [ 566.647126][T12769] ? __kvm_gpc_refresh+0x1510/0x1710 [ 566.652409][T12769] ? __kvm_gpc_refresh+0x1510/0x1710 [ 566.657691][T12769] __report_bug+0x276/0x570 [ 566.662261][T12769] ? check_path+0x21/0x40 [ 566.666585][T12769] ? __kvm_gpc_refresh+0x1510/0x1710 [ 566.671872][T12769] ? __pfx___report_bug+0x10/0x10 [ 566.676890][T12769] ? lockdep_unlock+0x5c/0xd0 [ 566.681560][T12769] ? __lock_acquire+0x1511/0x2de0 [ 566.686582][T12769] ? __kvm_gpc_refresh+0x1510/0x1710 [ 566.691914][T12769] report_bug+0x16b/0x220 [ 566.696258][T12769] ? __kvm_gpc_refresh+0x1510/0x1710 [ 566.701553][T12769] ? __kvm_gpc_refresh+0x1512/0x1710 [ 566.706845][T12769] handle_bug+0x9c/0x200 [ 566.711091][T12769] exc_invalid_op+0x1a/0x50 [ 566.715604][T12769] asm_exc_invalid_op+0x1a/0x20 [ 566.720448][T12769] RIP: 0010:__kvm_gpc_refresh+0x1510/0x1710 [ 566.726341][T12769] Code: c6 05 8b e1 22 0f 01 48 c7 c7 46 aa 3f 8e be 44 04 00 00 48 c7 c2 40 42 02 8c e8 6b b3 62 00 e9 81 ee ff ff e8 81 0b 87 00 90 <0f> 0b 90 bb ea ff ff ff 49 bf 00 00 00 00 00 fc ff df e9 4b f6 ff [ 566.745942][T12769] RSP: 0018:ffffc9000541f1c0 EFLAGS: 00010287 [ 566.752006][T12769] RAX: ffffffff8140d07f RBX: ffff888000000000 RCX: 0000000000080000 [ 566.759975][T12769] RDX: ffffc90003f81000 RSI: 000000000000039f RDI: 00000000000003a0 [ 566.767937][T12769] RBP: ffffc9000541f350 R08: ffffffff907a507f R09: 1ffffffff20f4a0f [ 566.775900][T12769] R10: dffffc0000000000 R11: fffffbfff20f4a10 R12: 1ffff92000a83e4c [ 566.783900][T12769] R13: ffff888079651d60 R14: ffff888000000000 R15: ffffffffffffff01 [ 566.791876][T12769] ? __kvm_gpc_refresh+0x150f/0x1710 [ 566.797169][T12769] ? lock_acquire+0x115/0x350 [ 566.801837][T12769] ? kvm_gpc_refresh+0x31/0x110 [ 566.806705][T12769] ? __pfx___kvm_gpc_refresh+0x10/0x10 [ 566.812161][T12769] ? lock_acquire+0x115/0x350 [ 566.816835][T12769] ? lock_acquire+0x115/0x350 [ 566.821509][T12769] kvm_gpc_refresh+0xe1/0x110 [ 566.826186][T12769] ? kvm_xen_set_evtchn+0x11e/0x220 [ 566.831406][T12769] kvm_xen_set_evtchn+0x14f/0x220 [ 566.836451][T12769] kvm_xen_hvm_evtchn_send+0x120/0x1e0 [ 566.841921][T12769] kvm_arch_vm_ioctl+0xfad/0x1a10 [ 566.846967][T12769] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 566.852424][T12769] ? __lock_acquire+0x747/0x2de0 [ 566.857362][T12769] ? __lock_acquire+0x747/0x2de0 [ 566.862306][T12769] ? lock_acquire+0x115/0x350 [ 566.866982][T12769] ? lock_acquire+0x115/0x350 [ 566.871667][T12769] ? is_bpf_text_address+0x26/0x2b0 [ 566.876880][T12769] ? is_bpf_text_address+0x292/0x2b0 [ 566.882167][T12769] ? kernel_text_address+0xa5/0xe0 [ 566.887277][T12769] ? __kernel_text_address+0xd/0x30 [ 566.892469][T12769] ? unwind_get_return_address+0x4d/0x90 [ 566.898097][T12769] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 566.904243][T12769] ? arch_stack_walk+0xfb/0x150 [ 566.909096][T12769] ? stack_trace_save+0xa9/0x100 [ 566.914025][T12769] ? __pfx_stack_trace_save+0x10/0x10 [ 566.919387][T12769] ? kasan_save_track+0x4f/0x80 [ 566.924247][T12769] ? stack_depot_save_flags+0x33/0x7f0 [ 566.929702][T12769] ? __lock_acquire+0x747/0x2de0 [ 566.934636][T12769] ? kasan_save_track+0x4f/0x80 [ 566.939496][T12769] ? kasan_save_track+0x3e/0x80 [ 566.944342][T12769] ? kasan_save_free_info+0x40/0x50 [ 566.949560][T12769] ? __kasan_slab_free+0x5c/0x80 [ 566.954502][T12769] ? kfree+0x1c5/0x650 [ 566.958566][T12769] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 566.964189][T12769] ? security_file_ioctl+0xc3/0x2a0 [ 566.969378][T12769] ? __se_sys_ioctl+0x47/0x170 [ 566.974152][T12769] ? do_syscall_64+0x166/0x520 [ 566.978934][T12769] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.985003][T12769] kvm_vm_ioctl+0x8f7/0xd30 [ 566.989506][T12769] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 566.994537][T12769] ? kasan_quarantine_put+0xbb/0x1f0 [ 566.999825][T12769] ? tomoyo_path_number_perm+0x219/0x5f0 [ 567.005460][T12769] ? tomoyo_path_number_perm+0x219/0x5f0 [ 567.011101][T12769] ? do_vfs_ioctl+0x116f/0x1530 [ 567.015947][T12769] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 567.021085][T12769] ? hook_file_ioctl+0x1f2/0x600 [ 567.026039][T12769] ? lockdep_hardirqs_on+0x7b/0x110 [ 567.031234][T12769] ? irqentry_exit+0x218/0x910 [ 567.036006][T12769] ? trace_irq_disable+0x3b/0x140 [ 567.041031][T12769] ? bpf_lsm_file_ioctl+0x9/0x20 [ 567.045968][T12769] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 567.051175][T12769] __se_sys_ioctl+0xfc/0x170 [ 567.055789][T12769] do_syscall_64+0x166/0x520 [ 567.060381][T12769] ? trace_irq_disable+0x3b/0x140 [ 567.065417][T12769] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.071477][T12769] ? clear_bhb_loop+0x70/0xc0 [ 567.076155][T12769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.082038][T12769] RIP: 0033:0x7f348b19e159 [ 567.086577][T12769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 567.106280][T12769] RSP: 002b:00007f348c0b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 567.114713][T12769] RAX: ffffffffffffffda RBX: 00007f348b425fa0 RCX: 00007f348b19e159 [ 567.122682][T12769] RDX: 0000200000000100 RSI: 00000000400caed0 RDI: 0000000000000009 [ 567.130647][T12769] RBP: 00007f348b23506b R08: 0000000000000000 R09: 0000000000000000 [ 567.138611][T12769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 567.146579][T12769] R13: 00007f348b426038 R14: 00007f348b425fa0 R15: 00007f348b54fa48 [ 567.154556][T12769] [ 567.157743][T12769] Kernel Offset: disabled [ 567.162065][T12769] Rebooting in 86400 seconds..