last executing test programs: 9.287389582s ago: executing program 4 (id=986): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') (async) exit(0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newsa={0x19c, 0x12, 0x633, 0x0, 0x80000000, {{@in=@rand_addr=0x64010100, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@multicast2, 0x4d2, 0x32}, @in6=@loopback, {0x0, 0x8000}, {0x5, 0xffffffffffffffff, 0x0, 0x5}, {0x4, 0x2, 0x3dce6aa0}, 0x6, 0x2, 0x0, 0x4, 0x18, 0x19}, [@policy={0xac, 0x7, {{@in=@loopback, @in=@remote, 0x4e25, 0x9, 0x4e23, 0xe, 0xa, 0xc0, 0x20, 0x3a}, {0x1, 0x3, 0x1, 0xfa, 0x9, 0xd2f, 0x3c, 0x8000}, {0x8, 0x81, 0x9, 0x40}, 0x4, 0x6e6bb2, 0x1, 0x1, 0x0, 0x3}}]}, 0x19c}}, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r3, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r3, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f00000002c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x40000, {0x0, 0x0, 0x0, r15, {0x0, 0x7}, {0xfff1, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfa}]}, 0x38}}, 0x0) (async, rerun: 64) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r7, &(0x7f0000001000)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000fc0)={&(0x7f00000008c0)={0x6e4, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x40c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4a, 0x4, "b1bddf3f36387e921f2d0ee3dff44f8ef90daefd80de9752b8a43c81b9d28fa97cb7e7fcf95857f23ef641a0d58331099e2df4c2f7d133cb752ec44d998039b6e73993f30e06"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xcb, 0x5, "1d9889d469b0de79596885fce7524695efcb694cbf14d21edacd3a49ec8847616c44a483ab7408ca605a61907bafd3a9d1d04d93d1e1fc3fb2094ab919dd641f3b8a5524cf490aeba1cb4069f9f4d2cefd6bce28acb805130672fd982c4825e75a254fd5dd9db1a03f07d038633292fc8b35b550253f2e6802dc28101bfb157ed90ce20f2b6fd9a3ec7ae7d033b730d10e7a555b2429bb71b01c4b1aa6cd2581bd2b40896c5ba76811dcb7e4d8e6de85e4a671fd797ca5bdb8c162a9bdda383f9e7c540ce44019"}, @ETHTOOL_A_BITSET_BITS={0x148, 0x3, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'mountinfo\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'fd/3\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4b0}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'fd/3\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'mountinfo\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2f8}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '/dev/dri/card#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd0}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '^*@)\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '/dev/dri/card#\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0xa1, 0x4, "10b331e022b09c510349b8a3b18f5300246f7908470c2fad8e1b5a471e9f26d5a42bf078a0969a29a2362884a1d87796e02f5db24209b73b60298ff8addfda7a127c6d9acd3a89ea080b468ae366413ca899cc6951df0bb9317da2b703e9f23d81ec8cab76fcf9bdd7980f08ea11b3273917b788794fc3fd0b01337d0b1d6f6e6d3438a73eace69610f6bcc46bb1a72ca4917e03b8e979e537e994b79f"}, @ETHTOOL_A_BITSET_VALUE={0xf6, 0x4, "df433cdf53e10409519cd04a2c5f24e58be76de81f053903061c7aece04528141afc97cc39addf149366ae3c30218c644523bd9fbc63f6fdc827a4f85a0050f616335770d26891774af225c25e8678cebaf7addec448fd8a039be4089290ab4da429982c9fcdbbc0431641e42819b570e9a18559592b3b885620069b38403d48ba61091ee485a9b30564e406fb35dec6a4188438ad60a632ee4ddca5b177dd34bb3766bf23947aada39bec77eb90bdc31011d78b15c36d879e5f516b83a8cd01e44a707419647b1b644686d579f178d451b7f62278fe5f3f8f288eb3ed434b843d0eab11bf9841b74124bababd17bb68f2f8"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x2c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x1a, 0x5, "007cf2df73184d8c0c5f7118f8ef4ca07978a6c171d1"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xa4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x97, 0x5, "871048d01d0d86aeae6df7f3133958313fabbcba5fa3a046d7541a29a24ffc48ad4c2767d18932d3c827145cb0e8973f70998a1447b117071cc4ce3127df6cd8194e728d3dcdbd48636e7da04742b1754f14fcc4853e8e087507d7fb94bef0c95eaf0642697dff3ce34a2fc4050d13ad3568e4ece4af3e20bf6443c14931e1a743f924ca38019f2505c0842f896536a4a4db85"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x4}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x128, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_MASK={0x51, 0x5, "71c3f493f8cda948e7d223986ca4ee8b188f34331c103261229829be83d70cde01c17686a371a7d3206ab798a62d14765a0deea5cc8c584fea0333b86cc1c7070f7370c415bc8108827a351777"}, @ETHTOOL_A_BITSET_VALUE={0xc3, 0x4, "2d54cb3f9ff389f42914778745e39f2b0e6e772be3afcf95972d8bca7b4ac2a9866700c08aeb9350dbad0ad7cd405b4d68b64d645fb0d8b298a4a0af366096c9dc012fa16a46a789e3d852a353cc094985c3db823c83268921f28d19b41d353bc49933cbe157b7f89bd23c9e5e8d791230a17a6614ef479d97d3c43b4eba4bf593e15848af2a60b6194f8e2d0c241166b7d56512ff19b61064f04e55aed2f398a63eceec41d41a5361d28b68a8c769acbec78a937ca9b6c9c3a5630341989a"}]}]}, 0x6e4}, 0x1, 0x0, 0x0, 0x4020000}, 0x4040) (async, rerun: 64) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0xc001102a, 0x0, 0x5}]}) 9.023560616s ago: executing program 4 (id=989): r0 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400003fffffffffffe0000000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 9.023298175s ago: executing program 3 (id=990): r0 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}, @in6={0xa, 0x4e23, 0x200000, @loopback, 0x77100000}], 0x38) 8.880954363s ago: executing program 3 (id=992): socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$kcm(0x2, 0xa, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r3, 0x69b, 0x4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) socket$inet(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'hsr0\x00', 0x0}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 8.552507028s ago: executing program 4 (id=993): syz_usb_disconnect(0xffffffffffffffff) (async, rerun: 64) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) (rerun: 64) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x100, 0x28}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = getpgid(0x0) r2 = syz_pidfd_open(r1, 0x0) process_madvise(r2, &(0x7f0000000480)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1, 0x4, 0x0) (async, rerun: 32) syz_emit_ethernet(0x131, &(0x7f0000000300)={@broadcast, @local, @void, {@ipv6={0x86dd, @tipc_packet={0xc, 0x6, "4a3410", 0xfb, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x29}, @private0={0xfc, 0x0, '\x00', 0x1}, {[@routing={0x2c, 0xa, 0x1, 0x1, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @loopback, @mcast2, @remote]}, @hopopts={0x3b, 0x5, '\x00', [@calipso={0x7, 0x20, {0x0, 0x6, 0x7, 0xfff8, [0x2, 0x3, 0xfffffffffffffffc]}}, @enc_lim={0x4, 0x1, 0x80}, @pad1]}, @routing={0xff, 0xa, 0x0, 0x80, 0x0, [@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1]}], @payload_conn={{{0x1b, 0x0, 0x1, 0x0, 0x1, 0x6, 0x0, 0x2, 0x0, 0x0, 0x1, 0x2, 0x4, 0x0, 0x8, 0x8, 0x2, 0x4e23, 0x4e20}}, [0x0, 0x0, 0x0]}}}}}}, &(0x7f0000000440)={0x1, 0x2, [0x9e3, 0xcb2, 0xced, 0x346]}) (rerun: 32) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) (async) r4 = userfaultfd(0x80001) (async) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000466000/0x4000)=nil, 0x4000, 0xb, 0x40010, r6, 0x225dd000) (async) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000006c0)={[0x2, 0x3, 0xd5, 0x8, 0x8, 0x1, 0x9, 0x100000000, 0x7, 0x4, 0x9, 0x2, 0xff, 0x5, 0x80000001, 0x7fff], 0x9000, 0x380002}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) (async) read(r4, &(0x7f0000000540)=""/158, 0x9e) (async, rerun: 32) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) (async, rerun: 32) syz_memcpy_off$KVM_EXIT_MMIO(r3, 0x20, &(0x7f00000004c0)="9266b789d2a124c788f903c38e5f6d010600de5d1cb86feb", 0x0, 0x18) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000000)="aafc361abad74318502891c4c26423fb18e301de0a534d0136cd3295dd6a6d299206fef236153a6fb9f3ddaf173b35381663ab6d9a0d7eda9ebe3f5459c0c467048e63a19e308071", 0x0, 0x48) (async) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}}) (async) syz_usb_control_io(r0, 0x0, 0x0) 8.232067619s ago: executing program 3 (id=994): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000400)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="91100400000000009500000000000000ab89becd60798ba0c7b340b02956c1c3822c3f572da76a3b992d243e0b89f6b734d5fdf6cb7955ac9702e4a18821040f9856a1bf21bf5e9b77a91e739c3ee223bb727fb18bc991da02854893b585f4465da763f2ac1d5e22ab728ef23681fe8fdf16f570082bdfadcd7f48aa86c2c12a78db90a7781fa547451f272ad46f8e5733fb606f040417634328cbf1b47957851ce3cbc4eb683cc45e48df30ead552a32564e7d1ab13b4aa22e4dd4970134ec08873d32468bed08369a2ec7cef09ea5af2dfc3dbf2f13954a41a3e02b5e2fd65c37b0f22ce8f18ef"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) pipe2$watch_queue(0x0, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$evdev(0x0, 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000100)={0x54, 0x0, 0x0, {0xffff, 0x1}, {0x50, 0x2}, @cond=[{0x8, 0x5388, 0x8, 0x800, 0xc9, 0x7}, {0x0, 0x5, 0x1, 0x3, 0x8000, 0x9}]}) write$char_usb(r3, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000300)={0x4, 0x7}) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r2, 0x0, 0x2c, 0x24044000, &(0x7f0000000380)={0x2, 0x4e22, @remote}, 0x10) r4 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) r5 = socket(0x2d, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@empty, 0x37}) shmctl$IPC_RMID(r4, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8=r7, @ANYBLOB="79a9"], 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x4, 0x101000) r8 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) write$P9_RVERSION(r8, &(0x7f0000002200)=ANY=[], 0xfffffcd9) close_range(r6, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) 7.16406686s ago: executing program 4 (id=998): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000300)={0xa000201c}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x20000023896) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0xfffffff9) r3 = socket$igmp(0x2, 0x3, 0x2) recvfrom(r3, 0x0, 0x0, 0x20121, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x2000000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r6 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006df57108e2042414ebc7010203010902380003960000000904cc070002596105052406000105240006000d240f01900800000000070008060600000011090401"], 0x0) syz_usb_control_io$cdc_ncm(r6, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) pipe(0x0) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40046432, &(0x7f0000000080)=0x6) syz_usb_control_io$lan78xx(r6, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10500, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x5, 0x10, 0xcd, 0x6, 0x2, 0x3, 0x640, 0xe2, 0x40, 0x280, 0xc1, 0xffff, 0x38, 0x2, 0x5, 0x7f, 0x5}, [{0x5, 0x9f75, 0xa, 0x81, 0x7, 0x7ff, 0x4, 0xe786}, {0x6, 0x0, 0x6, 0x800, 0x6, 0xda, 0x6, 0x7}], "44ef5a211c4dcb9bd88c384aeca6c4130462a26cefd202200801468d5966fe1ea1d8093be9f3efadf77e1cd56d22f1f2a22d0a485f90cbdb121f99fc5246bac7510998e5bfe971bf0b95dda2490edb15dc3fa0828690393afcbc509a887f7e49aedb10171be9ba5f9df68e86b750a618b69615b8e6d05df25c10b8b091f1841e3abf1ffe299dce83918c83df6b1b42ce7a676fd6fc8d45353c1d8a349b054c18ff465e4cbfc2f9073d815019d7c4ba7dd6821c1bea5726f79d595b622b1ce2b42e1e6e49b92033a74d5eea62cfd4e7509c27a377ddfa301c72588d4e89e4fdd932ce0bbb61d23e12c9a5ee39d42ec6e91064250b5ba27c1fcbbe0b307782303ee6c73981ed145f851a71c28866af2b38db90df0ce44e2220458a0be80c4dcefac1df519d9ecd3c2007bb2373b5c20eb40210387e877f9fb056599d4b9016e695b3cfa4faa7bb24a5e41631189d22203e187c9b061c16ccde3598dd66740bbaeaa403b1b84becc469ebc8e66e351823163d8c7556494aad4aa0b792d21b0b0280a3469244575c6f34bddfa3f74ac4205c47f70166ee337a0b9991c89b350bcb8f2c27454c7ac438940e7ff29ca4dea66e0acfec56eb9187c9cd9d0761766c57ed277f3fee91d07e187e4e37d7b9376b6fcb3c4159d7604d6dc85f58d331c0e5def0d2df1b652ed7514b42920209d8fd9ad413e8bfc426d87c88954630d775540d00f8043c1f20564d43fa1ffd2dcdb128e3c4d7c6b92985a3306776f27f99b607b51e0200eca60f570ffc5a0911f6a07f360d94b97d78d627ddff6346ce079b983f49de026d039ae6edd3f5359035ea8a307f05c6de284d80799bf0aa6f1866642d729eb753e8b2a46b6de3c90d381ebe4d476fa08b4e0dcc6b32563fd43436c5ee46c75e4938f7a4c9bc8c00f50dfea4adae8ff1d42338815357dbf63d058c7266dfddc14f60f285a0773311aa1021a7cecca9cbddb4fe34515f197a1c2328554a1ae7073fa5f025bf5b24beb11d840d843c3725beeec3da2936ffc8c93e55a52eea3a6bf6a5e4dffa4c3ec3ee738f5f4560a9dca8ab64146ed6762d0856f0fce0335fa881be2d15fed8af1ef492f32b901c13ee944518f4a69e5d4b1a1081df46510e91e7ecd1d3011ac945c667e9532f5996dffb1cc381b09c4be3ed0fd0d24e41c8f58cbc8ba0cdcb38377495f1acfd64543aa5ea2266a4f8036cb7c174d0526a01f2db3ead67f23c24565a9b5141f50d7f83067609f72f7756ef17dc33e09d9ee40d6ec76e14888ea50c02e3e939d527c54edee9e94efe67081d16dba2b17451a836adf9c91c98846f78185e43a5ef01e5fad71b3f271e7ddea71d65fac5aa7f85f4b7a11deafd37cd4f93403966e1bf703052ecf090dc522d3fcab49e285416818f822d2380b9cc2e4a8dea9a9d9d3051289f70b17d70c2e773cfba02bc878bac23a0e040729360731b0cafc5facbcd894b390987fab3053a268a4b7f1aabcf0aa4bf125d9642dd76168285804c1b88aae5f2345a993259eefb06ac45d9250e74fb0ed36e0fc4429f55bceaaaa5e637018c1b6438133613fc10adc9a3f1a401a1745afc376660c4f6313969e958952a30ba1c61e1decf682ea4ef10a20760f70e6b2915cd19f4898067e6b85b69ed3258628645ef4b14ebd574149d7c2882b42a325279cfd621f39c98530166d3317a18865ffa7a43b8882fdf917fc371178db939e38ac0aa950147ece03c24480c1a201143c46d891c5477a284ca0527ada81eba694991ba4d6953224cc8594bd6e30856b3baaf76d895c36c4f1a5c007c7bf1a18992f652f5a3d49284f062d189305689d79f1591d2adda8f3e35040f14b2d4c9f0292e4656d7c4eb440f590457e2f5c99382ec86cd41a54055d82baf3656f4a18bd61354e6711ddd6f960b8b3aceea1da772e7dce53b6fa8abade78bd845df824b497a36ebe632f0a2a0f5330db7f035b972f0dd05bd0f1042ba4830a9a3bc17a7ed34e3f899aef50bd864d160f6d70988ed977db5406d6e77b68aaaabb627e41e11e6bc174d22490a054a798dd7eecf1d75df74ce25605459c8d1b93d326cf4c40d626c7fdddf897ae3c1b87e9710bfafec81ef21ebf15fc8131cc2e6f1278fd8b2d9f517c26179856e03db4f72f7fca352989021558769feef79cd9d7f1ab54f7cd748fa470edcca92bf4b026276c9bdc8ba14d0d44af1f87eb50d510f250e2bf58913c9a0fd6ecf789be5cf85e226b5e1ba0a9984178e9fe238ad1ad87277f6b602a653fc8b332aef75c9df887f93123d548417cde5ec9771539317e7f28afee7e57b3d59577c5771a7b2586290188bd2442d3c250dbd3b22bba003185caf47170932ba7cd49296c20764b85489ae4c0287673ce794b4a151b28ae0d5f1e5dcf6fc5cc055952959215b71e2ac43434856241dd0135dd012adf6ee7b2e4b49cb54db3f38c5569abd432066e36ded8955a6eb31d5ae81ce9a1dea21b08c023ad57d057678a253d817237d09f43e53add4c7feede1ec3775170196869079a549767328ba83beeeda6b64c2aa48b60679b0c9bf90d12a279f5b8d04d7d9bb9c59537d734f1618c02b2e1cc7c227712068d3987ea66740428238d59f498eed3f4c70469c0774eca66456f92e0f91222e2532a62ddb3b1768da4d87f0f244d1290825088f4927ec6069dcfa43dcc36d71ca2a1379b82817e996b15b80bc652d2c8142b9199a05001151cc95261382f8e1f031349ed67460bd296ac1713ebaacf5148560566dd859c4034badddec59caf29958c4d3e2982ffd41d640ac34b6c12e8e8cc38d10030304007107e004a66c6404bcbb31e1fd48d598550673ca099f8595778a89e4ca83a38ca7feef4b1787968b286cfbbbb6e510ca8ea2ce28bf1b2271bfbb84153b0336417a617b245d7e49c2be55e7f7dfe41348a33c1d00ddb5aaca8612363f6db0b3a2831d46826eea7b4b46d56c943a0877883e4adeadb44f00f91bac8e9668c8b9c8f03cb1efbb85e9e39e09d6be5dfc56a554d0c7cc8eabd87ea10aef272249f3336d0cd3f355bb9ae6d1df1c5f1e72de59e8920894ebe97c9cc0b32642582686b90e4d414f414853e163fdc4b21e1d8eb133054240ebf570d8a734daf2d20093e819e08b51c639400751d9e46e3bbd455c759e40f4d34b55f0803d3f103befac55b27ef3049747daba60d0f0c93610c040222ca8e31c031bab1cc5eeec5ed1da6c5a5c6a2c1e934ed197fff2c5cb5e3844dd5988cf20096d738224c9bb114c0f6aecea13b0d4025e6bc8e3d8552998d449ee7150f753a8c814179a9520bc357ed08bc3a2016eca3e007071430bedee7e4dbf6d3ef60f712550c84b4ce5378ee08eacbc54d2ec07fdd5c0199a6f839f3ed1ca87c2416861ce6056c7c35a7c4bd7c10a177b0f8294258848619ac0514ae94fc171e3acaef114ee64442f3377de9d0c75af552f060c524f353e598e829ba8be8eae96cf3c8194c428ff04399ec581e5aa6214d4631a1aa37ed40f16093bdbe16f0ad3cf23f0416510e1230b5a9c272257b87b046245168004f9f5682824855db1333a5831c3c91d74796bf6c947618dd5493f2adcfdf34de0ba9c634d1bfa452ecc9a24d814a7d331ee6cca1f8f6283f1bb46e19a13a3c537550661ea0f8de6aa981fca720390eb2e55f4db582d994551cf76f663b7ad84d0497b926892cdd3d6ff8daca1f35fb58bf9550d8e907b254bafb8567ea6fc4dbdc30702cb47596f307ae414ee0f79bc90452ed573b9e1b93345ab1fbfb1248db53dbfa33f8f947afd281758c42d5fab9b7ea0087005ed6c6c07f45196293d5ac4d0d96a3bee66dc57545c097e06056dfcc3d5c2573c6398fb3f9d5255266432ceffbe6235f46ad5b5712ea27f3c99bcae6efc325ffc6e49ed42fd298bbed612452d40417d39f50fb45f4c66eedee1d6332b3c4e8eaedd94aaf2837ca085a52d1a392b8a1357f89592188a2b204cd69a81baac6f63e1031426b91e615e181cf9ac165ca88865ecd72231af1a2df004230376654251976440649d9db6124dbdf1bb1f1e2aec186dbb72f9b292fa7f63c949be35d96442fe2830412bac3fefc5f7b47dbf216cc6d4597fd47ed960ec197e71867e184fdab2455a442bb8174c7a41a0689b586e4702d02a833cffc888c63b274b5d7bd8bd601f3da0298623022dcf1ddf898df7ef52add9abfe04c3bb7906a610b510f81c7d1298ab2748107bdcc68697335862960e2d20bd8006b32486bafa925a3aae0db574ec3080b137a4c5e11e482e4d7d494c2fbbd1efac1a9fac3b577460b81f1a456bbe0a8e5373402e16158dbabee9366d6c4240c2c0fe344acd2d1f72ca4f953ca3f8a6eced463af0556e91d1b6aa3fc2721ef98941519f7e2ddad021b745af8843909d36115f4470081df9de8d67d7f415749ff5cf7adc6a326b2716e8714ea64304b1248e90edcc4383e62182f45e872cf5cb6603c1e7c2f7e52148dfb1ce4ac614c5b618ec03b250d478e86927ddc15cde790e9ebca838a9969444f386078d539fa07aa0b7750c9684a3dec60ea691371ecb4dca7a83b8b9c973ec181e72159e5c92027daac00837caad138058518bae8d7cbf165789386c0bb56ca611434f4173ccdd40b8d7b13cf8b93599ca4287b39c048845de96506060be509f536ab5b837b02285d558fa710b30de9ca686f69cc01a130d5978ae2adaea4f12fb4ccf68acdf9218e7626719cdeb81a8beba6af21426496b29e0f79ec36ac331b21888afb51c2214ff28b2c35a1b119ff03bbe3da2dc0424f0401aa33359476c3b446b9e08f71c96551f09846b97b12a406ae4385b8edd44db66884efe30558563f873ade5132dc41cdee16f0d41cad0459da66cf8c4e0e408f027b5c639ba39018c1d26fa7c3021eb7a99f3c9b5be300cf4c3ff4c5133741f1b3e5655b97c42080ccfc2784a788cb93f7a6c37899559def3cc9472da6b6369c33e7abd49c6625b0a96e6f2b935d663d2cbd8d5a70ddbee131379c4afcba5c87e13d88856350e572b62c553c68aac480c666e3fea4c488fa5178f6436b4e6414f5ea082c140d7b824998f47e8632489363e35c10d42b1a8097af0252ce6463c6d1d61ab27262fb5742f572295d88010eec215e7f2b8407afe484380a4c83db3ac630a38bad331ba35a77d47313077651e573031ee1830a3a8b1addfcbb81bcaa0ec36a3dd6101bf7d0ddcdf477c247fccbbf7dfd0e6ffc4266a91a76e547f649b0bbc3f2ff90f80cde1360a2ed53f2878f844afa5c62110f5a292c6f04caafd55ac041be09e307fb237c8b170e0c462eb5fc23c773c71a19038c48dde4e39747c375f8e7f69462829b9e05a29f257661c1412f2a5b2ee3f1c67755f0157f17e9b7c626d199a94e37b67b21a3e4f831bd515977c661c43b4e9628190a090042f00c530e22c026abaa444732167b35fa64a86284e9542982844d2270b07febbadc1a24aea2eb454f5f74aedbc036d9e1eeeaa161be0c1f0713c27cc5cabdbb617614f22d438910cab2fb77ff3a32a9d95ae1d6f3a17577ab7b1d267985a3e89ef1348311a8000147d73115d8d72e39f7e32b9ba21248620bc2a6f220328b3a604776a7f62a30199184dd520adca8353a7165f65d751cfe94b3f0a84130e53c580431c2c9ef61202667c94ab8ae386a1c906d9179bcd0ade9b63eb92578fb5bc2aea395df392fca069143e1ed7baa36a1755ec45a15850aee4cf96b1a53a0dfb488dd2db4cacdfb47a5d4361f18f22426b188f45172c4aa788a67ab4044db36e", ['\x00', '\x00', '\x00']}, 0x13b0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$uac2(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, &(0x7f00000018c0)={0xc, &(0x7f0000001780)={0x0, 0xe, 0xa7, {0xa7, 0x31, "905fa2c5953704610e344868031b417f7574bea815f89f56209e0dc9cb3bc72698dc9b958d6b464856ff7e6e2cab37f82893057beaa48041ebf0b8a6bb014226ddf696812eb7a40e9aedcea5e23389697f1cbff8e9f280c7277523af8a54ed5ef44aa064255ee7e76b0102cbf73cd6b45601a92983644f33c5e7d5a1a342249b4fe44152c530db48a94ddab434d0b3bb6f0bd304ec4f88d758b3b6aebfb26471542d164ca3"}}, &(0x7f0000001840)={0x0, 0x3, 0x59, @string={0x59, 0x3, "4c7bcf44bb78c3b900daf7af2b89899c02aa3405c2a36ab69c220049d7d43e67177722c9e7fd899dfb6a8a11295ea05cc9ed73851605b3b4b370020f0edbb2f7fc904c9b04881bd8cab611ac1fc73220415585dc1a36d8"}}}, &(0x7f0000001b40)={0x24, &(0x7f0000001900)={0x0, 0x30, 0x56, "ea11fa8c636f1bda261fcfb3600826eef0e26efe0afbce4ae4bfbdf54cf8eccd2cc5b6a8e4ce98a2278c45808d3b7df43b6ba0c514913d2ad3dc94bf3bd5c314577ad8f951a05dcd8b57c8c9574d71dc34a6987cf779"}, &(0x7f0000001980)={0x0, 0xa, 0x1, 0xac}, &(0x7f00000019c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000001a00)={0x20, 0x81, 0x2, "962f"}, &(0x7f0000001a40)={0x20, 0x82, 0x2, "ed4d"}, &(0x7f0000001a80)={0x20, 0x83, 0x1, "7f"}, &(0x7f0000001ac0)={0x20, 0x84, 0x1, "97"}, &(0x7f0000001b00)={0x20, 0x85, 0x3, "f27d04"}}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) setsockopt$inet6_group_source_req(r7, 0x29, 0x0, &(0x7f0000001640)={0x8b30, {{0xa, 0x4e23, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e22, 0x7f, @remote, 0x107}}}, 0x104) 4.957565193s ago: executing program 2 (id=1008): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x8, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc044560f, &(0x7f00000001c0)=@mmap={0x0, 0x2, 0x0, 0x700, 0x0, {0x0, 0xea60}, {0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, "2063569a"}, 0x700}) 4.506442316s ago: executing program 2 (id=1010): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x10000, 0xffff, 0x8}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000240)={[{0x2, 0x4, 0x93, 0x1, 0x0, 0x5f, 0x5, 0x20, 0xa6, 0x2, 0x5, 0x9, 0x9}, {0xfffffff9, 0xfffa, 0x0, 0x0, 0x0, 0xf6, 0xce, 0x8, 0x4, 0xff, 0x4, 0xa2, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x1, 0x7, 0xfe, 0x8, 0x8, 0xfe, 0x4, 0x1000000000000004}], 0xcc78}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000080)={[{0x5, 0x1, 0xa, 0xd, 0x1, 0x7, 0xc, 0x2d, 0x7f, 0x6, 0x8, 0xf5, 0x9}, {0xf, 0x9, 0x4, 0x9, 0x8, 0xe, 0xc, 0x1, 0x8, 0x3, 0x46, 0xe8}, {0x0, 0x7, 0xe8, 0x7f, 0x2, 0x7, 0x0, 0x4, 0x6, 0x8, 0x4, 0x4, 0x2}], 0xf}) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r5, 0x4068aea3, &(0x7f0000000240)={0xc0, 0x0, 0x1000}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r5, 0xae78, &(0x7f0000000000)=0x1) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0xeeee8000, 0xeeee0000, 0xc, 0x1, 0x81, 0x0, 0x0, 0x7}, {0x10000, 0xdddd1000, 0xc, 0xfc, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x9, 0xfc}, {0x3000, 0x8080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x8}, {0x80a0000, 0xffff1000, 0xf, 0x0, 0x0, 0x8, 0x0, 0x7}, {0x5000, 0xffff1000, 0xa, 0x2, 0xfe, 0x10, 0x3, 0xc, 0x58, 0x8, 0x4}, {0x50000, 0x1000, 0xb, 0x0, 0x0, 0xfd, 0xfc, 0x0, 0x0, 0x5, 0xc0}, {0x3000, 0x100000, 0x10, 0x8, 0x7, 0xfb, 0x0, 0x7, 0x1a, 0x2, 0x0, 0x2}, {0x0, 0x3000, 0xe, 0x2, 0x2, 0x54, 0x7, 0xfd, 0x0, 0x9, 0x7, 0x5}, {0x2000, 0x1}, {0x0, 0x2}, 0x9df9ffdf, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x2000, [0xdd41, 0x0, 0x2]}) ioctl$KVM_TRANSLATE(r6, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x1c, 0x50}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x282c81) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r9, 0x0, 0x29, 0x0, 0x1c) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="81ffffff000000002c0012800b00010067656e65766500001c000280050009000000000005000a0000000000050004000800000008000a00", @ANYRES64=r2, @ANYBLOB="5400000010001fff010000000000000000060000", @ANYRES32=0x0], 0x54}}, 0x4801) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x40605346, &(0x7f0000000280)={0x0, 0x1, {0x3, 0x0, 0x1000004, 0x1, 0x7}, 0xffffffff}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000400)={@empty, @remote}, &(0x7f0000000440)=0xc) 4.439894394s ago: executing program 3 (id=1011): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socket$inet_sctp(0x2, 0x5, 0x84) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r4, &(0x7f0000000400)=[{&(0x7f00000004c0)=""/203, 0xcb}], 0x1, 0x93, 0x2) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt(0xffffffffffffffff, 0x84, 0x7f, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config', 0x0, 0x0) getdents(r5, 0x0, 0x18) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000380)={0x80000000}) r6 = syz_open_dev$usbmon(0x0, 0xa, 0x0) ioctl$MON_IOCX_GETX(r6, 0x80089203, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffc9b}) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000180)={0x0, 0x9}, 0x8) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=@newsa={0x150, 0x10, 0x713, 0x70bd26, 0x0, {{@in=@rand_addr=0x64010101, @in=@dev={0xac, 0x14, 0x14, 0x35}, 0x4e22, 0x0, 0x4e23, 0x7, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x4d3, 0x32}, @in=@remote, {0x0, 0x0, 0x8, 0xa, 0x6, 0xfffffffffffffffd, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0xa, 0x1, 0x0, 0x28}, [@algo_aead={0x5a, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x70, 0x80, "316f74eeac053deb73fc018493cc"}}, @tfcpad={0x8, 0x16, 0x2}]}, 0x150}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[], 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x124}, 0x1, 0x0, 0x0, 0xd4}, 0x800) bind$tipc(r5, &(0x7f0000000340)=@name={0x1e, 0x2, 0x1, {{0x40, 0x3}, 0x1}}, 0x10) socket$kcm(0x29, 0x6, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r0, 0x1, 0x0, 0x0, {0x54}, [{{@nsim={{0xe, 0x2}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) socket$inet6(0xa, 0x2, 0x0) 3.763513865s ago: executing program 2 (id=1014): r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESOCT=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000093c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) getresgid(&(0x7f0000002800), 0x0, 0x0) ioctl$NILFS_IOCTL_SYNC(r1, 0x80086e8a, 0x0) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r5, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="500100000000000003000000000000000000000000000000030000000000000001000000000000800800000000000000aae4000058d80000030000000000000007000000000000000000000000000000f8ffff7f00000000070000000000000007000000000000000a0000000c0000000800000000400000ff7f0000", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0700000003000000000000000600000000000000700d000000000000010000000c000000d20000000000000001000000000000000000000000000000000000800000000007000000000000000200000009000000040000000000040005000000000000000400000000000000ffffffffffffff7fffffffffffffffffc0000000000000002a00000002000000010000000010000001000000", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="5dd7000002000000000000000100000000000000010001000000000001000000000800002e00000000000000bd47d9c3487f0c64bc38f6c59b0bcca53fbc77696b845e0921b53e700443110f3c0d48221d2031d7692f5dea16a7e26dc2bf3e006c925ee4b07bd87babebc93a17bdd60ee102dfdc0cd5bde83b07780892a15ad9b35e57bac04a9f18"], 0x0, 0x0, 0x0}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x28) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) syz_emit_ethernet(0xcd, &(0x7f0000000540)=ANY=[@ANYBLOB="d59f045e8a70b7759600189f88a83b00810013000004dc027a350030bead21c38a0dd61c79561e709676796a194674add94ec65b7f9ee3ebc1f3f989ca10c2a7e5f4f4a59a7c4b2ef5bcbdb9a95a896358abf117120abeaf4a8a11814237b8616e0c7aa04c07c9e6c0d9564db33195f1de0526ad1806bf15b69e436e295293d6f03e0fa68df12810f8b3d2b56d242c29605451614442766b3b86a55921ec51cc4a2ea51673b577d2a562f5d67fe792b923156a84432a42cd4589a53701371ca4fe3d32acef930871a04b8091a2"], &(0x7f0000000640)={0x0, 0x1, [0xe3f, 0x1c, 0x63c, 0x4]}) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = socket(0xa, 0x1, 0x0) r10 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x1a7a40) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$P9_RCREATE(r11, &(0x7f0000000000)={0xffffffffffffff2b, 0x73, 0x1, {{0xe4, 0x3, 0x1}, 0x8}}, 0x18) write$binfmt_misc(r11, &(0x7f0000000400)="5afdee94b0d11651485aa30c51bc1d0d03a4315c8911e482b961ddf162258948284ed622bbafac47664317247deabcf2275bb673bc99c7ed054d455cbe35f5688ecb9efd1916441e14c7d3a02d7bbdb54cbae659e2e28df97b21f18d9146d49ddca054d3cdf785b186a1d93e746e250dead67e4335075b9bb389996574df5023fb1b4d2e9dc256fc1c4d7839392960dedf13778ee30b60d1221fd108d42fd09becb71de322836485b97befc0d850277b7545eaeac459d77bc25896d3310827dd7fada1b5f5d866d7e6808f21fb6cae2d1da507a81b14746a00"/243, 0xf3) ioctl$LOOP_CONFIGURE(r10, 0x4c0a, &(0x7f00000002c0)={r11, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x48dd, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac100875397bdb22d0000b420a1a93c9e01177d3d058dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x100000000, 0x7]}}) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000002b40)=ANY=[@ANYBLOB="030000000a004e230000000cff010000000000000000000000000001f8ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000a004e2400010001fc0100000000000000000000000000010f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000179f87000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2000000004fc02000000000000000000000000000084020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e21000000012001000000000000000000000000000201000100"/524], 0x20c) setsockopt$inet6_group_source_req(r9, 0x29, 0x2c, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) 3.666632008s ago: executing program 1 (id=1016): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x2, 0x0, &(0x7f0000000140)) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1, r2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) syz_clone(0x60101300, 0x0, 0x0, 0x0, 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) r3 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r3, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef"], 0xfe33) recvmsg$kcm(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000001f00)=""/4095, 0xfff}], 0x1}, 0x102) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x8010) openat$kvm(0xffffffffffffff9c, 0x0, 0x82, 0x0) socket$alg(0x26, 0x5, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r4}, 0x38) r5 = syz_open_dev$dri(0x0, 0x0, 0x2000) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) r6 = getpgid(0x0) r7 = syz_pidfd_open(r6, 0x0) pidfd_send_signal(r7, 0x11, 0x0, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x5, 0x83, 0x7, 0x7ffc0001}]}) clock_adjtime(0x2, &(0x7f0000000e00)={0x1000ea, 0x1, 0x309, 0x0, 0x8000, 0xa, 0x0, 0x200000000002000, 0xfffffffe, 0x0, 0xcd99, 0x6, 0x8, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x33, 0x920, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 3.478964321s ago: executing program 2 (id=1017): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) (async) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000180)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) (async) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) (async) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x5c, 0x10, 0x1, 0x470bd27, 0x25dfd402, {0x0, 0x0, 0x0, r7, 0x64e98, 0x16ac1}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x24, 0x5, 0x0, 0x1, [@IFLA_BRPORT_FAST_LEAVE={0x5, 0x7, 0x1}, @IFLA_BRPORT_NEIGH_SUPPRESS={0x5}, @IFLA_BRPORT_GUARD={0x5, 0x5, 0x1}, @IFLA_BRPORT_ISOLATED={0x5, 0x21, 0x5}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) (async) sendto$packet(r3, &(0x7f00000000c0)="768327900de4063631b2074e38126d75188b0c450383b7a379bd9b16eae69923bcdc5fcf64831fb0b3e1670d488c83d0d65ed24e8d74e21e232d80358f508abab20c1d4b93eb9e5bb55d3be8a94eca0db1476675b7c3494dcde9187cb5cbb72acb733aef5dc4a6e7d3344e66bde857b1b0da619a0f61faa1315a7596", 0x7c, 0x40, &(0x7f0000000140)={0x11, 0x5, r7, 0x1, 0x7, 0x6, @remote}, 0x14) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300)=0x3, 0x4) (async) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e22, @multicast1}, 0x10) (async) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) 3.403874116s ago: executing program 1 (id=1018): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x2, 0x3, 0x0, &(0x7f0000000180)=""/53, 0x0}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000002c0)={0xa, 0x4e20, 0x80000, @loopback, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@dstopts={{0x18, 0x29, 0x37, {0x3c}}}], 0x18}, 0xc044) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000002}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040804}, 0x4048080) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.269649366s ago: executing program 2 (id=1019): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0x3, 0xffff}, {0xffff, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xffff}}}]}, 0x38}}, 0x4000) recvmmsg(r7, &(0x7f00000056c0)=[{{0x0, 0x0, &(0x7f0000004f40)=[{&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000005780)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/4080, 0xff0}], 0x3, 0x0, 0xfffffc5a}, 0xfff}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x100000, 0x0}, 0x7}], 0x3, 0x10022, 0x0) 3.135340982s ago: executing program 1 (id=1020): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x1c, 0x2f, 0x9, 0x70bd27, 0x600000, {0x4}, [@typed={0x4, 0x1d, 0x0, 0x0, @binary}, @typed={0x4, 0x18}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x10) 2.992891444s ago: executing program 1 (id=1021): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1c0000, 0x1, &(0x7f0000000040)) timer_create(0x3, 0x0, &(0x7f00000000c0)=0x0) timer_gettime(r0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r3, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc53}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f0000000280)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r6, 0x0) ioctl$KVM_INTERRUPT(r6, 0x4004ae86, &(0x7f0000000240)=0x4) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000000c0)={[0x8, 0x100000f, 0x9, 0x0, 0x1, 0x0, 0x2, 0x87b, 0x2, 0x0, 0x0, 0x0, 0x6, 0x6, 0x1, 0x3], 0x0, 0x8340}) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0}, 0x4000000) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$sequencer2(0xffffff9c, &(0x7f00000002c0), 0x100c0, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r7, 0x80045113, &(0x7f0000000380)) r8 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0cc5605, &(0x7f0000000480)={0x1, @pix={0x2a52cc03, 0x2, 0x36315247, 0x2, 0x2, 0x6, 0x6, 0x80000005, 0x1, 0x0, 0x0, 0x5000000}}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x4c, r10, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x8, 0x30}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1438a}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) 2.864464108s ago: executing program 2 (id=1022): io_setup(0x8, 0x0) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x13, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x8, "", [{{0x9, 0x4, 0x0, 0xfc, 0xdf, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x81, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0xc1}}}}}]}}]}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00006d3000/0x4000)=nil, 0x4000, 0x66) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xd0}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x0, 0x7, 0x4) timer_settime(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_deladdr={0x2c, 0x15, 0x1, 0xfffffffd, 0x1, {0x2, 0x18, 0x0, 0xc8}, [@IFA_LABEL={0x14, 0x3, 'veth0\x00'}]}, 0x2c}}, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000180)=0xf) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_open_dev$video(0x0, 0x101, 0xab02) syz_usb_control_io$hid(r0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @random="d8be17d19221", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x24, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x2, 0x0, 0xe7}}}}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)={0x20, 0x8, 0x2b, {0x2b, 0x21, "c263138526792c3cbdeace918d0fb74237cc6e446c4e88e78881ce2a52973661d67a0c554438db1787"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.749562538s ago: executing program 4 (id=1024): r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x2}, {0xb, 0x1}, {0x4, 0x2}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0xfc, 0x200, 0xa, 0x0, 0x0, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x14, 0x4, 0x9, 0x2, 0x8, 0x8001}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008814}, 0x8090) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x1, 0x2, 0x1, 0x8, 0xfffffffffffffff4}]}, &(0x7f0000019100)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) syz_usb_connect(0x3, 0x367, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000ef87ab08b4040210b4cd0102030109021d070300090000090467090920ef8b0009050701000200050209050e00000409d72ec40ec1dc52252ea7f077451ea7031d60a5e4b51a9e2102a105a98d21f58e8aaf542247f49978dc77719772dde944db913b7c979acb7f91f2306bf3f47da1b039b5d2fe03d85c78cf3b08a6d58e34cdaebb6d8f0e9f728b51beeb36ded235ecab20365c3cc031d22f1bb85e5f6f2427fcb797129f1361b09257c2274867ad04bd2894b9ae0539e2e7b50e9bb694e483c66661e7a68545f2835363356260d8bdbdebbb4b94b03558c006762c95be9c456b34c2c833fba72f61621cd3bdd07d0500ff7a41d4090509000800090f07072501810800000905080c400006020209050c01ff030804010905040040000e0509072501030908000905010300040efe09e20b1edb037387b5fc16aaba86735a0b45687ae681e8c97a56a4f2b448f14d197065be41f7ca366a5d9a5093ad45531dab348e6efadbbcc78a80ccf7151eeeeaa21cc68d75bd864c5d548ae8d45167bc7e555e0f0544b483f4fb38ab2ffefaa027006be172c96de3f71a5c919236a81f25b15b05e2d7178d86cdc319c6f59cf698c04aa2b7ffe8c957a55c5caffefa390fe03f0b5b463f5c51654d7dd0c3de61a3a1e4235bccb458d7c973c8f71c84d447864da3f054d39e75f22b776497588ac9cbd46532ea2667283178e39936291c4a07f47ac52d49a3839df5882dac368116e60725018006135e0905080008000303090905040000049db64007250181090100072501024c04000904"], 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) r2 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000100000014000200776730000000000000000000000000008800088084000080060005000100000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff5400098028000080060001000a0000001400020000000000000000000000ff0100000000000000000300000300000080060001000a000000140002000000000000000000000000000000000005000361f366ee058452123901f2b2e058c1d88056e4f2fe7816c6f48d3313f07f2134fc9280777effef6fe4a065734777b671ea2e5b71743afe"], 0xb0}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) (async) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000100000014000200776730000000000000000000000000008800088084000080060005000100000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff5400098028000080060001000a0000001400020000000000000000000000ff0100000000000000000300000300000080060001000a000000140002000000000000000000000000000000000005000361f366ee058452123901f2b2e058c1d88056e4f2fe7816c6f48d3313f07f2134fc9280777effef6fe4a065734777b671ea2e5b71743afe"], 0xb0}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newqdisc={0x78, 0x24, 0x100, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x8, 0x1}, {0xffff, 0x8}, {0x6, 0x9}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x44, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0x10}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x6}, @TCA_PIE_TARGET={0x8}, @TCA_PIE_TUPDATE={0x8, 0x3, 0xe249}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x4}, @TCA_PIE_LIMIT={0x8, 0x2, 0x7}, @TCA_PIE_TARGET={0x8, 0x1, 0x3}, @TCA_PIE_BETA={0x8, 0x5, 0x12}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newqdisc={0x78, 0x24, 0x100, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x8, 0x1}, {0xffff, 0x8}, {0x6, 0x9}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x44, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0x10}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x6}, @TCA_PIE_TARGET={0x8}, @TCA_PIE_TUPDATE={0x8, 0x3, 0xe249}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x4}, @TCA_PIE_LIMIT={0x8, 0x2, 0x7}, @TCA_PIE_TARGET={0x8, 0x1, 0x3}, @TCA_PIE_BETA={0x8, 0x5, 0x12}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newtfilter={0x1c0, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff3}, {0x5}, {0x7, 0x300}}, [@filter_kind_options=@f_flow={{0x9}, {0x190, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x23b2}, @TCA_FLOW_PERTURB={0x8, 0xc, 0xfffffffd}, @TCA_FLOW_POLICE={0xc, 0xa, 0x0, 0x1, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x4}]}, @TCA_FLOW_EMATCHES={0x168, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x12c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0xf, 0x2, 0xfff}, {0x1, 0x3, 0x2, "799688"}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x10, 0x3, 0x7}, {0x4, 0x10, 0xffffff00, 0x101}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x7, 0x3, 0x3}, {0x7, 0x3, 0x3, 0x4}}}, @TCF_EM_CONTAINER={0x78, 0x2, 0x0, 0x0, {{0x5, 0x0, 0x3}, "55f55220c7ab0185f59d951a28dd1f7aefd84bea0b630f7217313d387d18b2eb18807fd15a2d0b6ebe0f84ab7301e51d5eadae0c46e54af7deb00eef89636bddd32beadd772dbbef2e95f28c102f604d5b989d2f5a661b354dab013ba6757a70e6093efdd2e2ebdcdb416c"}}, @TCF_EM_CONTAINER={0x28, 0x1, 0x0, 0x0, {{0x9, 0x0, 0x3613}, "4a578b31126d306a65ec929fb0857694b5cd9f00f6017496e4437d"}}, @TCF_EM_IPT={0x3c, 0x3, 0x0, 0x0, {{0x80, 0x9, 0x100}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x4, 0x7, 0x57f1}, {{0x4, 0x0, 0x1}, {0x4, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x6, 0x8, 0x1}, {0x0, 0x6, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}]}]}}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r5, 0x6, 0x11, &(0x7f0000000000)=0x100010, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{}, &(0x7f0000000440), &(0x7f0000000480)='%+9llu \x00'}, 0x1c) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x4e0cc1, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$FUSE_DEV_IOC_CLONE(r8, 0x8004e500, &(0x7f0000000100)=r7) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRES64=r0, @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000c4000500e0000001000000000000000000000000000004d53c00000002000000e0000001000000000000000000000000073500000403070008000000040000000200000020010000000000000000000000000000000004d36c00000002000000fe8800000000000000000000000001010135000002007300008000000400000007000000e0000002000000000000000000000000800000013c0000000a000000ac1414bb000000000000000000000000000000000101090008000000e700000007000000"], 0x17c}}, 0x0) (async) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRES64=r0, @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000c4000500e0000001000000000000000000000000000004d53c00000002000000e0000001000000000000000000000000073500000403070008000000040000000200000020010000000000000000000000000000000004d36c00000002000000fe8800000000000000000000000001010135000002007300008000000400000007000000e0000002000000000000000000000000800000013c0000000a000000ac1414bb000000000000000000000000000000000101090008000000e700000007000000"], 0x17c}}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close(r9) (async) close(r9) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) (async) r10 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r10, 0xc0045005, &(0x7f00000000c0)=0x20) ioctl$SNDCTL_DSP_STEREO(r10, 0xc0045003, &(0x7f0000000600)=0x180004) write$binfmt_elf32(r10, 0x0, 0x4cd) (async) write$binfmt_elf32(r10, 0x0, 0x4cd) 2.132809319s ago: executing program 0 (id=1025): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900"], 0x7c}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="05000000090000000800000040"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r0}, 0x38) (fail_nth: 4) 1.736705051s ago: executing program 3 (id=1026): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x48, 0x0, 0x0) r2 = io_uring_setup(0x3454, &(0x7f0000000440)={0x0, 0x0, 0x10000, 0x0, 0x1, 0x0, r1}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4091, 0xffb}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 1.691925215s ago: executing program 0 (id=1027): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x4, 0xc, 0xff, 0x0, 0x50, @loopback, @local, 0x1, 0x40, 0x7, 0x401}}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_DQBUF(r4, 0xc04c5611, &(0x7f00000000c0)=@userptr={0x1, 0x5, 0x4, 0x8, 0x6, {}, {0x3, 0xe, 0x6, 0x1, 0x7, 0x0, "efd226dc"}, 0xc, 0x2, {0x0}, 0x8}) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r6}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="817403d681b740000005100003052abd700000060000", @ANYRES32=0x0, @ANYBLOB="0000000006380000180012800b0001006970366772650000080002800400120008000a00", @ANYRES32=r6, @ANYBLOB], 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, r1, 0x2, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x9}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x2}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x40) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r7, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/127, 0x7f}], 0x1, 0x4f, 0x0) write$vhost_msg(r7, &(0x7f0000000200)={0x1, {0x0, 0x0, &(0x7f0000000100)=""/55, 0x1, 0x4}}, 0x44) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(0xffffffffffffffff, 0x0, 0x85) unlinkat(r8, &(0x7f0000000140)='./file0\x00', 0x200) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000940)={@cgroup, 0x12, 0x1, 0x214, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000a00)={0x0, 0x0}, 0x8) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r12) sendmsg$NL80211_CMD_SET_INTERFACE(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="050027bd7000000000000600000008000300", @ANYRES32=r13, @ANYBLOB="08004d01"], 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000980)={@fallback=r10, r7, 0x30, 0x2020, r8, @void, @void, @value=r11, @void, r9}, 0x20) r15 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NFT_MSG_GETOBJ_RESET(r5, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000fc0)={0x1a4, r15, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x174, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0xf4, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @mcast2, 0x3}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0c000227734136bbd051f5248b73349484079ac37330b66c8c2d38b233240191"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f1448a8e528a999aa0105b52a5c9c4640383354baf19b5f39af29b59422afd55"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e7ff7701b926810da1b5902e7a364627b7e5194a545926646ae03e188b880fed"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "67145cfa4d7b699c1e0846a50afd9ba74e30480f6df0e68218cc108c2128c513"}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4004840}, 0x2000000) 1.602673984s ago: executing program 0 (id=1028): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x14, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x1}, 0x8) sendto$inet6(r0, &(0x7f0000000140)="9f", 0xfef4, 0x44004, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @loopback, 0xc5f}, 0x18) 1.459781398s ago: executing program 3 (id=1029): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000180)={'veth1_vlan\x00', &(0x7f00000005c0)=@ethtool_sset_info={0x37, 0x401, 0x4, [0x5]}}) socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac14140034"], 0x2c}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000200)="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", 0x130, 0x24010095, &(0x7f0000000080)={0xa, 0x4e21, 0xd2, @mcast1, 0x56}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, 0x0, &(0x7f0000000040)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000040)=0x4d, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xc2, &(0x7f0000000400)=ANY=[@ANYBLOB="3b657be0ece7a6e8b2fe3662a7192b89f8b925275fac5a7a7ed5221aea0018403cb528a56fa0e136484076d15c985b9dbd1d3dcb56de029b2d32b804cb2bf969f574f706d9e4f736a7c130f8c831f7a1a0c3fdce4929d66f0449"], 0x0) setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000000340)=0x6, 0x4) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setpgid(r2, r2) setpgid(0x0, r2) ioctl$VIDIOC_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f0000000500)) wait4(r2, 0x0, 0x2, 0x0) r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000080)={0x2}) ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0x80044dfe, &(0x7f0000000480)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x18) syz_usb_control_io$hid(r3, &(0x7f0000000c40)={0x14, 0x0, &(0x7f00000004c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}, 0x0, 0x0}, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000100)={0x0, 0x6, 0x2, &(0x7f0000000240)={0x2b, "1a9c66bf2f615e427b2644e953449f6c12f206b2855cd8c82b1b9951cf5e1dee93"}}) setpgid(r2, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="8110ac00f8cd58700d305c7569f9000000009500000000080000"], &(0x7f00000000c0)='GPL\x00', 0x7}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) setsockopt$IP_VS_SO_SET_EDITDEST(r5, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'wrr\x00', 0x0, 0x60000000, 0x6d}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4f26, 0x12002, 0xb, 0x8003, 0x10}}, 0x44) 1.395741643s ago: executing program 0 (id=1030): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000002c0)={0x2, 0xf, 0x0, 0x9, 0x7, 0x0, 0x70bd27, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0x0, 0xe, @in6={0xa, 0x4e24, 0x7, @private0, 0x7f}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80ff}, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0xa, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000117000/0x2000)=nil, 0x2) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, &(0x7f0000000080)={0x1, 0x2}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x4a, &(0x7f0000000080)={0x0, 0x0}, 0x10) ioctl$DRM_IOCTL_GET_UNIQUE(r3, 0xc0106401, &(0x7f00000000c0)={0x0, 0x0}) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x80, r2, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x33b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) 1.268537444s ago: executing program 0 (id=1031): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='lock io+'], 0xc) ppoll(&(0x7f00000000c0)=[{r0, 0x90}], 0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x40, 0x200c1) lseek(r1, 0x9, 0x1) r2 = io_uring_setup(0x6ff2, &(0x7f0000000100)={0x0, 0x5399, 0x4000, 0x2, 0x114}) mmap$IORING_OFF_SQ_RING(0x0, 0x8, 0x0, 0x50, r2, 0x0) write$vga_arbiter(r0, &(0x7f0000000200)=@unlock_all, 0xb) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r5, 0x4068aea3, &(0x7f0000000500)={0xa4, 0x0, 0x1}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000080)=@x86={0x7f, 0x3, 0xfd, 0x0, 0x7fffffff, 0x7e, 0xcb, 0x10, 0x7, 0x9, 0xb, 0x8, 0x0, 0x10003, 0x3f, 0xff, 0x4, 0x2, 0x12, '\x00', 0xb}) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000340)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000300)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000440)) 863.650017ms ago: executing program 1 (id=1032): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900"], 0x7c}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="05000000090000000800000040"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r0, 0x20}, 0x38) 192.928787ms ago: executing program 0 (id=1033): clock_adjtime(0x17, &(0x7f0000000000)={0xea33, 0x9, 0x379ee4, 0x0, 0x9, 0x1, 0x89, 0x3, 0x6, 0x7ffffffe, 0x3, 0x800, 0x9, 0x9, 0x8001, 0xffffffffffffffff, 0x800000, 0x2, 0xc, 0x5, 0x200, 0x3, 0x11cb, 0x101, 0x40, 0x9}) (async) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0xb0000) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) socket$xdp(0x2c, 0x3, 0x0) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x48000) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xfffffffffffffffe, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000001c0)={@remote}, 0x14) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) fsopen(&(0x7f0000000200)='binder\x00', 0x0) (async) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) poll(&(0x7f0000000000)=[{r5, 0xda10}], 0x1, 0xfbfeffff) (async) ioctl$VHOST_NET_SET_BACKEND(r5, 0xaf02, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000007fffff5850000006900000095"], &(0x7f0000005d80)='GPL\x00', 0xc}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000200)=r8, 0x4) (async) sendmsg$nl_xfrm(r6, &(0x7f0000005880)={0x0, 0x0, &(0x7f0000005840)={&(0x7f0000001c80)=ANY=[@ANYBLOB="34000000120001"], 0x34}, 0x1, 0x0, 0x0, 0x1090}, 0x40080) 88.081981ms ago: executing program 4 (id=1034): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x7) landlock_restrict_self(r2, 0x3) landlock_restrict_self(r3, 0x9) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0xa) landlock_restrict_self(r3, 0x1) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r2, 0x6) landlock_restrict_self(r3, 0x5) landlock_restrict_self(r3, 0xa) landlock_restrict_self(r2, 0xe) landlock_restrict_self(r2, 0xa) r4 = memfd_create(&(0x7f0000000340)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x99\xb80xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r3, 0x6f) setsockopt$inet6_int(r3, 0x29, 0x7, &(0x7f0000000180), 0x4) r4 = add_key$fscrypt_provisioning(&(0x7f0000002a40), &(0x7f0000002a80)={'syz', 0x2}, &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000000000061616161616161616161616161616161616161616161616161616161616161613131313131313131313131313131313131313131313131313131313131313131797641a3fdc370446525336674930f7d43e53695ef0a0a0fa0c6d5b39181c146092149e2a836b944ffe89e5c769fc292ed6507242ab5b579bcf555e636f86c64dc7920d9f3023256ff9ac83b0cabd127cd7c5bdb8b001c6f34334d46b386986a0f84"], 0x48, r1) keyctl$KEYCTL_MOVE(0x1e, r4, r1, 0xfffffffffffffffb, 0x1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0), &(0x7f00000002c0), 0x4d, r0, 0x0, 0x1c000000007400}, 0x38) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) preadv(r5, &(0x7f0000000140)=[{0x0}, {&(0x7f0000001300)=""/4100, 0x1004}], 0x2, 0x8c0, 0x2bd6) kernel console output (not intermixed with test programs): idProduct=023e, bcdDevice=d7.69 [ 261.022928][ T5622] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.036509][ T5690] usb 1-1: USB disconnect, device number 26 [ 261.054761][ T5622] usb 3-1: Product: syz [ 261.067389][ T5622] usb 3-1: Manufacturer: syz [ 261.077265][ T5622] usb 3-1: SerialNumber: syz [ 261.087380][ T5622] usb 3-1: config 0 descriptor?? [ 261.094776][ T5622] hub 3-1:0.0: bad descriptor, ignoring hub [ 261.103419][ T5622] hub 3-1:0.0: probe with driver hub failed with error -5 [ 261.128337][ T8626] syzkaller0: entered promiscuous mode [ 261.134362][ T8626] syzkaller0: entered allmulticast mode [ 261.296230][ T5622] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 261.368658][ T5622] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 261.377750][ T5622] dib0700: firmware download failed at 7 with -22 [ 261.600445][ T24] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 261.656513][ T30] audit: type=1326 audit(1782176752.657:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8633 comm="syz.3.740" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd40ec code=0x7ffc0000 [ 261.690107][ T30] audit: type=1326 audit(1782176752.657:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8633 comm="syz.3.740" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd40ec code=0x7ffc0000 [ 261.731622][ T8638] FAULT_INJECTION: forcing a failure. [ 261.731622][ T8638] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.749301][ T8638] CPU: 0 UID: 0 PID: 8638 Comm: syz.1.741 Tainted: G L syzkaller #0 PREEMPT(full) [ 261.749333][ T8638] Tainted: [L]=SOFTLOCKUP [ 261.749341][ T8638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 261.749353][ T8638] Call Trace: [ 261.749361][ T8638] [ 261.749369][ T8638] dump_stack_lvl+0xe8/0x150 [ 261.749399][ T8638] should_fail_ex+0x40c/0x560 [ 261.749426][ T8638] _copy_from_user+0x2d/0xb0 [ 261.749465][ T8638] cmsghdr_from_user_compat_to_kern+0x534/0x810 [ 261.749496][ T8638] ? __pfx_cmsghdr_from_user_compat_to_kern+0x10/0x10 [ 261.749521][ T8638] ? rcu_is_watching+0x15/0xb0 [ 261.749548][ T8638] ____sys_sendmsg+0x217/0x850 [ 261.749572][ T8638] ? __pfx_____sys_sendmsg+0x10/0x10 [ 261.749595][ T8638] ? rcu_is_watching+0x15/0xb0 [ 261.749622][ T8638] ___sys_sendmsg+0x2a5/0x360 [ 261.749641][ T8638] ? rcu_is_watching+0x15/0xb0 [ 261.749666][ T8638] ? __pfx____sys_sendmsg+0x10/0x10 [ 261.749707][ T8638] ? kstrtoull+0x12f/0x1d0 [ 261.749742][ T8638] ? __fget_files+0x2a/0x420 [ 261.749774][ T8638] ? __fget_files+0x3a2/0x420 [ 261.749820][ T8638] __sys_sendmmsg+0x2de/0x4d0 [ 261.749843][ T8638] ? __pfx___sys_sendmmsg+0x10/0x10 [ 261.749877][ T8638] ? fput+0xa0/0xd0 [ 261.749907][ T8638] ? ksys_write+0x242/0x270 [ 261.749934][ T8638] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 261.749959][ T8638] __do_fast_syscall_32+0x23e/0x6f0 [ 261.749993][ T8638] ? do_fast_syscall_32+0x33/0x70 [ 261.750025][ T8638] ? asm_int80_emulation+0x1a/0x20 [ 261.750045][ T8638] ? do_int80_emulation+0x29f/0x550 [ 261.750078][ T8638] do_fast_syscall_32+0x33/0x70 [ 261.750110][ T8638] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 261.750136][ T8638] RIP: 0023:0xf7f940ec [ 261.750153][ T8638] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 261.750172][ T8638] RSP: 002b:00000000f545650c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 261.750197][ T8638] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080002480 [ 261.750212][ T8638] RDX: 0000000000000001 RSI: 0000000000008000 RDI: 0000000000000000 [ 261.750226][ T8638] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 261.750238][ T8638] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 261.750251][ T8638] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 261.750272][ T8638] [ 261.989834][ T30] audit: type=1326 audit(1782176752.657:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8633 comm="syz.3.740" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd40ec code=0x7ffc0000 [ 262.014632][ T30] audit: type=1326 audit(1782176752.657:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8633 comm="syz.3.740" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd40ec code=0x7ffc0000 [ 262.018980][ T24] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 262.038957][ T30] audit: type=1326 audit(1782176752.657:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8633 comm="syz.3.740" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7fd40ec code=0x7ffc0000 [ 262.039004][ T30] audit: type=1326 audit(1782176752.657:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8633 comm="syz.3.740" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd40ec code=0x7ffc0000 [ 262.070601][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 262.072602][ T30] audit: type=1326 audit(1782176752.657:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8633 comm="syz.3.740" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd40ec code=0x7ffc0000 [ 262.154941][ T8640] netlink: 'syz.4.742': attribute type 10 has an invalid length. [ 262.164516][ T8640] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 262.173878][ T8640] bond0: (slave netdevsim1): Enslaving as an active interface with a down link [ 262.180171][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 262.246058][ T24] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 262.330845][ T24] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 262.340219][ T24] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 262.358978][ T24] usb 1-1: Product: syz [ 262.372394][ T24] usb 1-1: Manufacturer: syz [ 262.688948][ T8655] netlink: 24 bytes leftover after parsing attributes in process `syz.1.747'. [ 262.710445][ T5622] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 262.723210][ T24] cdc_wdm 1-1:1.0: skipping garbage [ 262.733890][ T24] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 262.758675][ T24] usb 1-1: USB disconnect, device number 27 [ 262.841367][ T8661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.850034][ T8661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.860485][ T5622] usb 5-1: Using ep0 maxpacket: 32 [ 262.872016][ T5622] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 262.890708][ T5622] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 262.910959][ T5622] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 262.926303][ T8663] syzkaller0: entered promiscuous mode [ 262.932126][ T5622] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 262.941629][ T8663] syzkaller0: entered allmulticast mode [ 262.947926][ T5622] usb 5-1: config 1 has no interface number 0 [ 262.958617][ T5622] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 262.969337][ T5622] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.001192][ T5622] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 263.059106][ T8666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.750'. [ 263.169255][ T8666] hsr_slave_0: left promiscuous mode [ 263.181532][ T8666] hsr_slave_1: left promiscuous mode [ 263.197240][ T5622] snd_usb_pod 5-1:1.1: set_interface failed [ 263.213991][ T5622] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 263.229241][ T5622] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 263.264790][ T5622] usb 5-1: USB disconnect, device number 40 [ 263.650898][ T5697] usb 3-1: USB disconnect, device number 48 [ 263.746443][ T30] audit: type=1326 audit(1782176754.747:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8680 comm="syz.4.754" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 263.772160][ T30] audit: type=1326 audit(1782176754.747:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8680 comm="syz.4.754" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 263.856802][ T8683] FAULT_INJECTION: forcing a failure. [ 263.856802][ T8683] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.871587][ T8683] CPU: 0 UID: 0 PID: 8683 Comm: syz.1.755 Tainted: G L syzkaller #0 PREEMPT(full) [ 263.871621][ T8683] Tainted: [L]=SOFTLOCKUP [ 263.871629][ T8683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 263.871642][ T8683] Call Trace: [ 263.871650][ T8683] [ 263.871657][ T8683] dump_stack_lvl+0xe8/0x150 [ 263.871685][ T8683] should_fail_ex+0x40c/0x560 [ 263.871710][ T8683] _copy_from_user+0x2d/0xb0 [ 263.871741][ T8683] kstrtouint_from_user+0xd6/0x180 [ 263.871765][ T8683] ? __might_fault+0xaf/0x130 [ 263.871793][ T8683] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 263.871819][ T8683] ? __mutex_trylock_common+0x15f/0x270 [ 263.871845][ T8683] ? vfs_write+0x22b/0xba0 [ 263.871865][ T8683] ? rcu_is_watching+0x15/0xb0 [ 263.871889][ T8683] proc_fail_nth_write+0x8e/0x210 [ 263.871920][ T8683] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 263.871953][ T8683] ? preempt_count_add+0x91/0x190 [ 263.871984][ T8683] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 263.872016][ T8683] vfs_write+0x296/0xba0 [ 263.872041][ T8683] ? __pfx_vfs_write+0x10/0x10 [ 263.872066][ T8683] ? __fget_files+0x3a2/0x420 [ 263.872097][ T8683] ? __fget_files+0x2a/0x420 [ 263.872132][ T8683] ksys_write+0x150/0x270 [ 263.872156][ T8683] ? __pfx_ksys_write+0x10/0x10 [ 263.872177][ T8683] ? rcu_is_watching+0x15/0xb0 [ 263.872202][ T8683] ? rcu_is_watching+0x15/0xb0 [ 263.872224][ T8683] ? asm_int80_emulation+0x1a/0x20 [ 263.872247][ T8683] do_int80_emulation+0x19a/0x550 [ 263.872279][ T8683] ? trace_irq_disable+0x3b/0x140 [ 263.872310][ T8683] ? asm_int80_emulation+0x1a/0x20 [ 263.872329][ T8683] ? clear_bhb_loop+0x40/0x90 [ 263.872349][ T8683] ? clear_bhb_loop+0x40/0x90 [ 263.872372][ T8683] asm_int80_emulation+0x1a/0x20 [ 263.872393][ T8683] RIP: 0023:0xf71971eb [ 263.872411][ T8683] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 263.872428][ T8683] RSP: 002b:00000000f54564bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 263.872451][ T8683] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54565d0 [ 263.872465][ T8683] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 263.872478][ T8683] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 263.872490][ T8683] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 263.872503][ T8683] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 263.872524][ T8683] [ 264.127180][ T5697] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 264.190886][ T5622] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 264.282120][ T5697] usb 3-1: not running at top speed; connect to a high speed hub [ 264.292633][ T5697] usb 3-1: config 127 has an invalid interface number: 136 but max is 0 [ 264.303327][ T5697] usb 3-1: config 127 has no interface number 0 [ 264.316894][ T5697] usb 3-1: config 127 interface 136 altsetting 0 endpoint 0x5 has an invalid bInterval 127, changing to 4 [ 264.356210][ T5622] usb 5-1: unable to get BOS descriptor or descriptor too short [ 264.362839][ T5697] usb 3-1: New USB device found, idVendor=03e8, idProduct=0008, bcdDevice=a3.4c [ 264.374571][ T5622] usb 5-1: not running at top speed; connect to a high speed hub [ 264.387749][ T5622] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 264.396110][ T5622] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 264.400744][ T5697] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.418872][ T5622] usb 5-1: config 4 has no interface number 0 [ 264.430519][ T5622] usb 5-1: string descriptor 0 read error: -22 [ 264.437227][ T5622] usb 5-1: Dual-Role OTG device on HNP port [ 264.445168][ T5622] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 264.451388][ T5697] usb 3-1: Product: syz [ 264.461516][ T5622] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=38 [ 264.488440][ T5697] usb 3-1: Manufacturer: syz [ 264.497188][ T5622] uvcvideo 5-1:4.147: Found UVC 0.02 device (04f2:b746) [ 264.499426][ T5697] usb 3-1: SerialNumber: syz [ 264.521590][ T5622] uvcvideo 5-1:4.147: No valid video chain found. [ 264.685555][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 264.685578][ T30] audit: type=1326 audit(1782176755.687:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8680 comm="syz.4.754" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 264.725516][ T5622] usb 5-1: USB disconnect, device number 41 [ 264.747896][ T8677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.753'. [ 264.781485][ T30] audit: type=1326 audit(1782176755.727:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8680 comm="syz.4.754" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 265.060094][ T5697] kaweth 3-1:127.136: couldn't find required endpoints [ 265.094638][ T5697] usb 3-1: USB disconnect, device number 49 [ 265.186611][ T8708] netlink: 24 bytes leftover after parsing attributes in process `syz.0.759'. [ 265.287643][ T8711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.304829][ T8711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.393169][ T8717] tipc: Started in network mode [ 265.398862][ T8717] tipc: Node identity 080211000001, cluster identity 4711 [ 265.409534][ T8717] tipc: Enabled bearer , priority 0 [ 265.422830][ T8717] syzkaller0: mtu less than device minimum [ 265.540545][ T5697] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 265.709481][ T5697] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 265.736842][ T5697] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 265.756414][ T5697] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 265.787371][ T5697] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.798459][ T8726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.764'. [ 265.882358][ T8713] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 265.903521][ T5697] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 265.960842][ T24] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 266.131452][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 266.147152][ T24] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 266.162635][ T24] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 266.180267][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.195892][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 266.210313][ T24] usb 3-1: config 1 has no interface number 0 [ 266.218148][ T24] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 266.228391][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.265625][ T24] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 266.456292][ T24] snd_usb_pod 3-1:1.1: set_interface failed [ 266.485193][ T24] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 266.508672][ T24] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 266.520632][ T5697] tipc: Node number set to 134418688 [ 266.540597][ T24] usb 3-1: USB disconnect, device number 50 [ 267.380786][ T24] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 267.398750][ T8742] bond3: entered allmulticast mode [ 267.554909][ T24] usb 3-1: config 1 interface 0 altsetting 10 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 267.640163][ T24] usb 3-1: config 1 interface 0 has no altsetting 0 [ 267.658150][ T8742] dvmrp8: entered allmulticast mode [ 268.405940][ T5622] usb 1-1: USB disconnect, device number 28 [ 268.518429][ T8756] netlink: 24 bytes leftover after parsing attributes in process `syz.0.771'. [ 269.068592][ T8738] bond3: left allmulticast mode [ 269.070760][ T5697] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 269.240492][ T5697] usb 1-1: Using ep0 maxpacket: 32 [ 269.250719][ T5622] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 269.281745][ T5697] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.300970][ T5697] usb 1-1: config 0 has no interfaces? [ 269.308344][ T5697] usb 1-1: New USB device found, idVendor=0525, idProduct=2888, bcdDevice=d0.43 [ 269.320124][ T5697] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.341441][ T5697] usb 1-1: config 0 descriptor?? [ 269.429408][ T5622] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 269.454370][ T5622] usb 5-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 269.474696][ T5622] usb 5-1: Product: syz [ 269.479160][ T5622] usb 5-1: Manufacturer: syz [ 269.486325][ T5622] usb 5-1: SerialNumber: syz [ 269.501517][ T8776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.502655][ T5622] usb 5-1: config 0 descriptor?? [ 269.517992][ T8776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.528340][ T5622] ch341 5-1:0.0: ch341-uart converter detected [ 269.579196][ T5718] usb 1-1: USB disconnect, device number 29 [ 269.705555][ T8784] netlink: 'syz.0.781': attribute type 11 has an invalid length. [ 269.850532][ T5697] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 269.955369][ T8787] bond3: option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2) [ 269.967927][ T8787] bond3 (unregistering): Released all slaves [ 270.002569][ T5697] usb 4-1: unable to get BOS descriptor or descriptor too short [ 270.011994][ T5697] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.025927][ T5697] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 270.035914][ T5697] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.044321][ T5697] usb 4-1: Product: syz [ 270.048748][ T5697] usb 4-1: Manufacturer: syz [ 270.054047][ T5697] usb 4-1: SerialNumber: syz [ 270.148521][ T24] usb 3-1: string descriptor 0 read error: -71 [ 270.179970][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 270.201712][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.227466][ T24] usb 3-1: can't set config #1, error -71 [ 270.249038][ T24] usb 3-1: USB disconnect, device number 51 [ 270.422406][ T5622] usb 5-1: failed to receive control message: -71 [ 270.447805][ T5622] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 270.484430][ T5697] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 270.500737][ T5622] usb 5-1: USB disconnect, device number 42 [ 270.534799][ T5622] ch341 5-1:0.0: device disconnected [ 270.546543][ T5697] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 270.598922][ T5697] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 270.650466][ T5697] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 270.686766][ T5697] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 270.741560][ T5697] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 270.751630][ T5697] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 270.804937][ T5697] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 270.830902][ T5697] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 270.950061][ T5697] usb 4-1: USB disconnect, device number 33 [ 271.030983][ T5634] udevd[5634]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 271.289422][ T8814] bond4: option arp_validate: invalid value (18446744073709551614) [ 271.308015][ T8814] bond4 (unregistering): Released all slaves [ 271.718551][ T8822] syz_tun: left promiscuous mode [ 271.752223][ T8824] netlink: 16 bytes leftover after parsing attributes in process `syz.3.789'. [ 271.850424][ T8822] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 271.967939][ T8824] veth1: entered promiscuous mode [ 272.004409][ T8824] veth1: left promiscuous mode [ 272.458062][ T8837] netlink: 28 bytes leftover after parsing attributes in process `syz.3.793'. [ 272.540656][ T5697] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 272.701644][ T5697] usb 3-1: Using ep0 maxpacket: 16 [ 272.719051][ T5697] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 272.742996][ T5697] usb 3-1: config 0 has no interface number 0 [ 272.762042][ T8847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.779021][ T5697] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 272.779872][ T8847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.799504][ T5697] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 272.809717][ T24] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 272.825416][ T5697] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 272.843984][ T5697] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.857607][ T5697] usb 3-1: Product: syz [ 272.866121][ T5697] usb 3-1: Manufacturer: syz [ 272.878152][ T5697] usb 3-1: SerialNumber: syz [ 272.886852][ T8847] bridge0: port 3(vlan4) entered blocking state [ 272.900161][ T5697] usb 3-1: config 0 descriptor?? [ 272.906600][ T8833] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 272.914639][ T8833] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 272.926131][ T8847] bridge0: port 3(vlan4) entered disabled state [ 272.940680][ T8847] vlan4: entered allmulticast mode [ 272.947395][ T8847] geneve0: entered allmulticast mode [ 272.962671][ T8847] vlan4: entered promiscuous mode [ 272.969934][ T8847] geneve0: entered promiscuous mode [ 272.970588][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 273.014023][ T24] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 273.033741][ T24] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 273.051309][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 273.068297][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 273.079157][ T24] usb 5-1: config 1 has no interface number 0 [ 273.087723][ T24] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 273.097061][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.122836][ T24] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 273.135369][ T8833] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 273.149496][ T8833] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 273.322357][ T24] snd_usb_pod 5-1:1.1: set_interface failed [ 273.333298][ T24] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 273.341614][ T24] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 273.359309][ T24] usb 5-1: USB disconnect, device number 43 [ 273.367002][ T5697] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 273.568517][ T8833] netlink: 9 bytes leftover after parsing attributes in process `syz.2.791'. [ 273.583819][ T8833] netlink: 9 bytes leftover after parsing attributes in process `syz.2.791'. [ 273.623443][ T8833] netlink: 40 bytes leftover after parsing attributes in process `syz.2.791'. [ 273.638586][ T5697] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 273.677831][ T5697] asix 3-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 273.698674][ T5697] asix 3-1:0.34: probe with driver asix failed with error -32 [ 273.966772][ T8862] netlink: 6 bytes leftover after parsing attributes in process `syz.3.799'. [ 274.160530][ T5622] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 274.322486][ T5622] usb 5-1: Using ep0 maxpacket: 32 [ 274.332409][ T5622] usb 5-1: unable to get BOS descriptor or descriptor too short [ 274.342131][ T5622] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 274.356367][ T5622] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 274.366808][ T5622] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.376668][ T5622] usb 5-1: Product: syz [ 274.381419][ T5622] usb 5-1: Manufacturer: syz [ 274.386354][ T5622] usb 5-1: SerialNumber: syz [ 274.604681][ T5622] usb 5-1: Cannot retrieve CPort count: 0 [ 274.617546][ T5622] usb 5-1: Cannot retrieve CPort count: -5 [ 274.625342][ T5622] es2_ap_driver 5-1:7.0: probe with driver es2_ap_driver failed with error -5 [ 274.843803][ T8861] binder: 8860:8861 ioctl c0306201 80000080 returned -14 [ 274.913030][ T5718] usb 5-1: USB disconnect, device number 44 [ 275.315550][ T5718] usb 3-1: USB disconnect, device number 52 [ 275.532686][ T8878] fuse: Unknown parameter 'al‹ow_other' [ 275.661040][ T8884] bridge2: entered promiscuous mode [ 275.667931][ T8884] bridge2: entered allmulticast mode [ 275.714658][ T8884] team0: Port device bridge2 added [ 275.737724][ T8887] bridge0: port 3(team0) entered blocking state [ 275.766973][ T8887] bridge0: port 3(team0) entered disabled state [ 275.782576][ T8887] team0: entered allmulticast mode [ 275.790754][ T8887] team_slave_0: entered allmulticast mode [ 275.797949][ T8887] team_slave_1: entered allmulticast mode [ 275.819732][ T8887] team0: entered promiscuous mode [ 275.825488][ T8887] team_slave_0: entered promiscuous mode [ 275.837522][ T8887] team_slave_1: entered promiscuous mode [ 275.852516][ T5697] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 276.020438][ T5697] usb 1-1: Using ep0 maxpacket: 16 [ 276.035071][ T5697] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.060421][ T5697] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 276.104790][ T5697] usb 1-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 276.131477][ T5697] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.158733][ T5697] usb 1-1: config 0 descriptor?? [ 276.592305][ T5697] aureal 0003:0755:2626.000C: unknown main item tag 0x0 [ 276.615374][ T5697] aureal 0003:0755:2626.000C: unknown main item tag 0x0 [ 276.636491][ T5697] aureal 0003:0755:2626.000C: unknown main item tag 0x0 [ 276.653104][ T5697] aureal 0003:0755:2626.000C: unknown main item tag 0x0 [ 276.673020][ T5697] aureal 0003:0755:2626.000C: unknown main item tag 0x0 [ 276.690416][ T5697] aureal 0003:0755:2626.000C: unknown main item tag 0x0 [ 276.706386][ T5697] aureal 0003:0755:2626.000C: unknown main item tag 0x0 [ 276.725168][ T5697] aureal 0003:0755:2626.000C: unknown main item tag 0x0 [ 276.745597][ T5697] aureal 0003:0755:2626.000C: unknown main item tag 0x0 [ 276.765589][ T5697] aureal 0003:0755:2626.000C: unknown main item tag 0x0 [ 276.791178][ T8882] netlink: 12 bytes leftover after parsing attributes in process `syz.0.809'. [ 276.805122][ T5697] aureal 0003:0755:2626.000C: hidraw0: USB HID v0.00 Device [HID 0755:2626] on usb-dummy_hcd.0-1/input0 [ 276.931872][ T8882] vlan4: entered allmulticast mode [ 276.947378][ T8882] bridge0: entered allmulticast mode [ 276.988375][ T8890] erspan0: left allmulticast mode [ 277.004793][ T8890] erspan0: left promiscuous mode [ 277.033581][ T8890] bridge2: port 1(erspan0) entered disabled state [ 277.074593][ T8890] bridge0: port 1(erspan0) entered blocking state [ 277.100999][ T8890] bridge0: port 1(erspan0) entered disabled state [ 277.124526][ T8890] erspan0: entered allmulticast mode [ 277.150714][ T8890] erspan0: entered promiscuous mode [ 277.207086][ T5690] usb 1-1: USB disconnect, device number 30 [ 277.780701][ T5690] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 277.964821][ T5690] usb 4-1: config 8 has an invalid interface number: 177 but max is 0 [ 277.987814][ T5690] usb 4-1: config 8 has no interface number 0 [ 278.005624][ T5690] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 278.035070][ T5690] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 278.060725][ T5697] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 278.072993][ T5690] usb 4-1: config 8 interface 177 has no altsetting 0 [ 278.092633][ T5690] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 278.110502][ T24] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 278.117376][ T5690] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.138371][ T8894] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 278.152354][ T8894] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 278.180837][ C0] ir_toy 4-1:8.177: out urb status: -71 [ 278.220646][ T5697] usb 1-1: Using ep0 maxpacket: 32 [ 278.230063][ T5697] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 278.242698][ T5697] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 278.252146][ T5697] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 278.267056][ T5697] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 278.276652][ T5697] usb 1-1: config 1 has no interface number 0 [ 278.282978][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 278.289129][ T5697] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 278.300869][ T24] usb 3-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 278.316532][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.326371][ T5697] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.347311][ T5697] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 278.357127][ T24] usb 3-1: config 0 descriptor?? [ 278.550709][ T5697] snd_usb_pod 1-1:1.1: set_interface failed [ 278.583126][ T5697] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 278.617276][ T5697] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 278.657491][ T5697] usb 1-1: USB disconnect, device number 31 [ 278.690415][ T5690] ir_toy 4-1:8.177: could not write reset command: -110 [ 278.713555][ T5690] ir_toy 4-1:8.177: probe with driver ir_toy failed with error -110 [ 278.804050][ T24] lenovo 0003:17EF:6067.000D: hidraw0: USB HID v0.20 Device [HID 17ef:6067] on usb-dummy_hcd.2-1/input0 [ 279.011396][ T5697] usb 3-1: USB disconnect, device number 53 [ 279.284706][ T8909] netlink: 'syz.1.815': attribute type 1 has an invalid length. [ 279.333361][ T8909] bond8: entered promiscuous mode [ 279.344748][ T8909] 8021q: adding VLAN 0 to HW filter on device bond8 [ 279.400571][ T5704] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 279.574914][ T5704] usb 1-1: unable to get BOS descriptor or descriptor too short [ 279.601104][ T30] audit: type=1326 audit(1782176770.607:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8912 comm="syz.1.816" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f940ec code=0x0 [ 279.639624][ T5704] usb 1-1: not running at top speed; connect to a high speed hub [ 279.653840][ T5704] usb 1-1: config 4 has an invalid interface number: 31 but max is 0 [ 279.668280][ T5704] usb 1-1: config 4 has no interface number 0 [ 279.684599][ T5704] usb 1-1: config 4 interface 31 has no altsetting 0 [ 279.707647][ T5704] usb 1-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice=f0.79 [ 279.722785][ T5704] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.746465][ T5704] usb 1-1: Product: syz [ 279.757824][ T5704] usb 1-1: Manufacturer: syz [ 279.784454][ T5704] usb 1-1: SerialNumber: syz [ 279.831488][ T5690] usb 3-1: new low-speed USB device number 54 using dummy_hcd [ 280.011550][ T5690] usb 3-1: Invalid ep0 maxpacket: 16 [ 280.018244][ T5704] sisusb 1-1:4.31: Invalid USB2VGA device [ 280.037402][ T5704] sisusb 1-1:4.31: probe with driver sisusb failed with error -22 [ 280.081642][ T5704] usb 1-1: USB disconnect, device number 32 [ 280.170502][ T5690] usb 3-1: new low-speed USB device number 55 using dummy_hcd [ 280.350490][ T5690] usb 3-1: Invalid ep0 maxpacket: 16 [ 280.360729][ T5690] usb usb3-port1: attempt power cycle [ 280.400545][ T5622] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 280.537098][ T5704] usb 4-1: USB disconnect, device number 34 [ 280.572027][ T5622] usb 5-1: unable to get BOS descriptor or descriptor too short [ 280.597711][ T5622] usb 5-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 280.614371][ T5622] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.626103][ T5622] usb 5-1: Product: syz [ 280.631062][ T5622] usb 5-1: Manufacturer: syz [ 280.637618][ T5622] usb 5-1: SerialNumber: syz [ 280.720480][ T5690] usb 3-1: new low-speed USB device number 56 using dummy_hcd [ 280.751571][ T5690] usb 3-1: Invalid ep0 maxpacket: 16 [ 280.876254][ T5622] usb 5-1: unit 5 not found! [ 280.893648][ T5622] usb 5-1: unit 3 not found! [ 280.904357][ T5690] usb 3-1: new low-speed USB device number 57 using dummy_hcd [ 280.943127][ T5690] usb 3-1: Invalid ep0 maxpacket: 16 [ 280.950895][ T5690] usb usb3-port1: unable to enumerate USB device [ 280.984255][ T8937] netlink: 6 bytes leftover after parsing attributes in process `syz.3.821'. [ 281.495767][ T5622] usb 5-1: us122l: couldn't allocate write buffer [ 281.517570][ T5622] snd-usb-us122l 5-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 281.546693][ T5622] usb 5-1: USB disconnect, device number 45 [ 281.586468][ T5637] udevd[5637]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such device [ 282.181425][ T8952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.317528][ T8952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.390117][ T8956] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 282.400578][ T8956] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 282.435245][ T8956] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 282.441458][ T8956] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 282.453493][ T8956] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 282.460078][ T8956] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 282.476319][ T8956] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 282.482901][ T8956] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 282.728851][ T8970] Invalid argument reading file caps for ./file0 [ 282.770482][ T8970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.830'. [ 283.090503][ T5704] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 283.197917][ T30] audit: type=1326 audit(1782176774.197:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8975 comm="syz.4.833" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fff0ec code=0x0 [ 283.251242][ T5704] usb 3-1: Using ep0 maxpacket: 32 [ 283.292886][ T5704] usb 3-1: unable to get BOS descriptor or descriptor too short [ 283.325253][ T5704] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 283.344618][ T5704] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 283.373375][ T5704] usb 3-1: config 14 has no interface number 0 [ 283.401775][ T5704] usb 3-1: config 14 has no interface number 1 [ 283.449490][ T5704] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 283.483224][ T5704] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 283.513129][ T5704] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 283.545466][ T5704] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 283.575047][ T5704] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 283.608515][ T5704] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 283.651733][ T5704] usb 3-1: config 14 interface 57 has no altsetting 0 [ 283.670417][ T5704] usb 3-1: config 14 interface 228 has no altsetting 0 [ 283.693038][ T5704] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 283.704628][ T5704] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.734301][ T5704] usb 3-1: Product: syz [ 283.747873][ T5704] usb 3-1: Manufacturer: syz [ 283.762150][ T5704] usb 3-1: SerialNumber: syz [ 284.191543][ T5704] legousbtower 3-1:14.57: interrupt endpoints not found [ 284.365593][ T8992] netlink: 763 bytes leftover after parsing attributes in process `syz.3.836'. [ 284.603247][ T5704] legousbtower 3-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 284.653107][ T5704] legousbtower 3-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 285.175271][ T9011] usb 3-1: LEGO USB Tower reset control request failed [ 285.292932][ T9013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.305245][ T9013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.381425][ T5622] usb 3-1: USB disconnect, device number 58 [ 285.398203][ T5622] legousbtower 3-1:14.228: LEGO USB Tower #-160 now disconnected [ 285.820423][ T5690] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 285.820558][ T5704] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 285.850420][ T5622] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 285.934109][ T9031] FAULT_INJECTION: forcing a failure. [ 285.934109][ T9031] name failslab, interval 1, probability 0, space 0, times 0 [ 285.946966][ T9031] CPU: 1 UID: 0 PID: 9031 Comm: syz.2.849 Tainted: G L syzkaller #0 PREEMPT(full) [ 285.947001][ T9031] Tainted: [L]=SOFTLOCKUP [ 285.947014][ T9031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 285.947025][ T9031] Call Trace: [ 285.947031][ T9031] [ 285.947036][ T9031] dump_stack_lvl+0xe8/0x150 [ 285.947061][ T9031] should_fail_ex+0x40c/0x560 [ 285.947082][ T9031] should_failslab+0xa8/0x100 [ 285.947098][ T9031] ? skb_clone+0x212/0x3a0 [ 285.947113][ T9031] kmem_cache_alloc_noprof+0x87/0x650 [ 285.947135][ T9031] ? lock_acquire+0x5f/0x350 [ 285.947151][ T9031] skb_clone+0x212/0x3a0 [ 285.947165][ T9031] ? dev_queue_xmit_nit+0x25c/0xac0 [ 285.947189][ T9031] dev_queue_xmit_nit+0x28d/0xac0 [ 285.947212][ T9031] ? dev_queue_xmit_nit+0x2d/0xac0 [ 285.947236][ T9031] dev_hard_start_xmit+0x1c1/0x830 [ 285.947257][ T9031] __dev_queue_xmit+0x1435/0x37f0 [ 285.947273][ T9031] ? sock_sendmsg_nosec+0x13a/0x180 [ 285.947291][ T9031] ? ____sys_sendmsg+0x54e/0x850 [ 285.947308][ T9031] ? __dev_queue_xmit+0x29b/0x37f0 [ 285.947328][ T9031] ? __pfx___dev_queue_xmit+0x10/0x10 [ 285.947347][ T9031] ? __copy_skb_header+0xa3/0x4a0 [ 285.947365][ T9031] ? __skb_clone+0x449/0x6c0 [ 285.947381][ T9031] ? skb_clone+0x246/0x3a0 [ 285.947396][ T9031] __netlink_deliver_tap+0x5b4/0x860 [ 285.947416][ T9031] ? netlink_deliver_tap+0x2e/0x1b0 [ 285.947431][ T9031] netlink_deliver_tap+0x19c/0x1b0 [ 285.947446][ T9031] netlink_sendskb+0x68/0x140 [ 285.947468][ T9031] netlink_rcv_skb+0x2a4/0x4a0 [ 285.947483][ T9031] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 285.947506][ T9031] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 285.947525][ T9031] ? netlink_deliver_tap+0x2e/0x1b0 [ 285.947569][ T9031] netlink_unicast+0x7bb/0x940 [ 285.947624][ T9031] netlink_sendmsg+0x813/0xb40 [ 285.947656][ T9031] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.947672][ T9031] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 285.947691][ T9031] ? __import_iovec+0x5d7/0x7e0 [ 285.947714][ T9031] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.947729][ T9031] sock_sendmsg_nosec+0x13a/0x180 [ 285.947752][ T9031] ____sys_sendmsg+0x54e/0x850 [ 285.947769][ T9031] ? __pfx_____sys_sendmsg+0x10/0x10 [ 285.947788][ T9031] ___sys_sendmsg+0x2a5/0x360 [ 285.947801][ T9031] ? get_pid_task+0x20/0x1f0 [ 285.947817][ T9031] ? __pfx____sys_sendmsg+0x10/0x10 [ 285.947830][ T9031] ? __mutex_trylock_common+0x15f/0x270 [ 285.947849][ T9031] ? get_pid_task+0x20/0x1f0 [ 285.947862][ T9031] ? get_pid_task+0x20/0x1f0 [ 285.947886][ T9031] ? __fget_files+0x2a/0x420 [ 285.947907][ T9031] ? __fget_files+0x3a2/0x420 [ 285.947931][ T9031] __sys_sendmsg+0x177/0x240 [ 285.947945][ T9031] ? __pfx___sys_sendmsg+0x10/0x10 [ 285.947962][ T9031] ? rcu_is_watching+0x15/0xb0 [ 285.947980][ T9031] __do_fast_syscall_32+0x23e/0x6f0 [ 285.948003][ T9031] ? do_fast_syscall_32+0x33/0x70 [ 285.948024][ T9031] ? asm_int80_emulation+0x1a/0x20 [ 285.948038][ T9031] ? do_int80_emulation+0x29f/0x550 [ 285.948062][ T9031] ? trace_irq_disable+0x3b/0x140 [ 285.948086][ T9031] do_fast_syscall_32+0x33/0x70 [ 285.948108][ T9031] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 285.948126][ T9031] RIP: 0023:0xf7f530ec [ 285.948139][ T9031] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 285.948152][ T9031] RSP: 002b:00000000f541650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 285.948169][ T9031] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000380 [ 285.948179][ T9031] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 285.948188][ T9031] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 285.948197][ T9031] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 285.948206][ T9031] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 285.948221][ T9031] [ 286.328623][ T5622] usb 1-1: device descriptor read/64, error -71 [ 286.350443][ T5690] usb 4-1: Using ep0 maxpacket: 8 [ 286.350607][ T5704] usb 5-1: Using ep0 maxpacket: 32 [ 286.362803][ T5690] usb 4-1: config 1 interface 0 has no altsetting 0 [ 286.364235][ T5704] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.381204][ T5704] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.385362][ T5690] usb 4-1: string descriptor 0 read error: -22 [ 286.391514][ T5704] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 286.399966][ T5690] usb 4-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.40 [ 286.408395][ T5704] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.421769][ T5690] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.437563][ T5704] usb 5-1: config 0 descriptor?? [ 286.445998][ T5704] hub 5-1:0.0: USB hub found [ 286.590430][ T5622] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 286.648537][ T5690] hid_parser_main: 68 callbacks suppressed [ 286.648563][ T5690] sony 0003:054C:0268.000E: unknown main item tag 0x0 [ 286.654690][ T5704] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 286.675247][ T5690] sony 0003:054C:0268.000E: unknown main item tag 0x0 [ 286.682376][ T5690] sony 0003:054C:0268.000E: unknown main item tag 0x0 [ 286.689276][ T5690] sony 0003:054C:0268.000E: unknown main item tag 0x0 [ 286.696892][ T5690] sony 0003:054C:0268.000E: unknown main item tag 0x0 [ 286.714061][ T5690] sony 0003:054C:0268.000E: unknown main item tag 0x0 [ 286.729557][ T5690] sony 0003:054C:0268.000E: unknown main item tag 0x0 [ 286.736983][ T5622] usb 1-1: device descriptor read/64, error -71 [ 286.745617][ T5690] sony 0003:054C:0268.000E: unknown main item tag 0x0 [ 286.754153][ T5690] sony 0003:054C:0268.000E: unknown main item tag 0x0 [ 286.761635][ T5690] sony 0003:054C:0268.000E: unknown main item tag 0x0 [ 286.792294][ T9038] netlink: 60 bytes leftover after parsing attributes in process `syz.3.851'. [ 286.804451][ T9038] netlink: 52 bytes leftover after parsing attributes in process `syz.3.851'. [ 286.832135][ T9038] netlink: 72 bytes leftover after parsing attributes in process `syz.3.851'. [ 286.841836][ T5690] sony 0003:054C:0268.000E: hiddev0,hidraw0: USB HID v80.08 Device [HID 054c:0268] on usb-dummy_hcd.3-1/input0 [ 286.854336][ T5622] usb usb1-port1: attempt power cycle [ 286.867685][ T5690] sony 0003:054C:0268.000E: failed to claim input [ 286.877526][ T5704] hid-generic 0003:046D:C31C.000F: item fetching failed at offset 0/1 [ 286.890054][ T5690] usb 4-1: USB disconnect, device number 35 [ 286.903059][ T5704] hid-generic 0003:046D:C31C.000F: probe with driver hid-generic failed with error -22 [ 286.946215][ T9041] fido_id[9041]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 287.105322][ T9019] tipc: Enabled bearer , priority 0 [ 287.200470][ T5622] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 287.221609][ T5622] usb 1-1: device descriptor read/8, error -71 [ 287.230765][ T5704] usb 5-1: USB disconnect, device number 46 [ 287.359362][ T9053] netlink: 'syz.2.855': attribute type 1 has an invalid length. [ 287.377527][ T9053] bond1: entered promiscuous mode [ 287.384015][ T9053] 8021q: adding VLAN 0 to HW filter on device bond1 [ 287.460577][ T5622] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 287.464334][ T9059] netlink: 'syz.2.857': attribute type 12 has an invalid length. [ 287.491119][ T5622] usb 1-1: device descriptor read/8, error -71 [ 287.555217][ T30] audit: type=1326 audit(1782176778.557:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9060 comm="syz.2.858" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f530ec code=0x7ffc0000 [ 287.583584][ T30] audit: type=1326 audit(1782176778.557:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9060 comm="syz.2.858" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f530ec code=0x7ffc0000 [ 287.602270][ T5622] usb usb1-port1: unable to enumerate USB device [ 287.613156][ T30] audit: type=1326 audit(1782176778.557:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9060 comm="syz.2.858" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f530ec code=0x7ffc0000 [ 287.642724][ T30] audit: type=1326 audit(1782176778.557:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9060 comm="syz.2.858" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f530ec code=0x7ffc0000 [ 287.667678][ T30] audit: type=1326 audit(1782176778.557:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9060 comm="syz.2.858" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f530ec code=0x7ffc0000 [ 287.695370][ T30] audit: type=1326 audit(1782176778.557:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9060 comm="syz.2.858" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f530ec code=0x7ffc0000 [ 287.720709][ T30] audit: type=1326 audit(1782176778.557:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9060 comm="syz.2.858" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f530ec code=0x7ffc0000 [ 288.120463][ T5704] tipc: Node number set to 1 [ 288.130952][ T9086] faux_driver vgem: [drm] Unknown color mode 6; guessing buffer size. [ 288.364135][ T9097] FAULT_INJECTION: forcing a failure. [ 288.364135][ T9097] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 288.378808][ T9097] CPU: 0 UID: 0 PID: 9097 Comm: syz.1.865 Tainted: G L syzkaller #0 PREEMPT(full) [ 288.378844][ T9097] Tainted: [L]=SOFTLOCKUP [ 288.378853][ T9097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 288.378867][ T9097] Call Trace: [ 288.378875][ T9097] [ 288.378892][ T9097] dump_stack_lvl+0xe8/0x150 [ 288.378922][ T9097] should_fail_ex+0x40c/0x560 [ 288.378949][ T9097] _copy_from_user+0x2d/0xb0 [ 288.378982][ T9097] get_compat_msghdr+0xb3/0x4c0 [ 288.379008][ T9097] ? __pfx_get_compat_msghdr+0x10/0x10 [ 288.379037][ T9097] ___sys_sendmsg+0x201/0x360 [ 288.379058][ T9097] ? get_pid_task+0x20/0x1f0 [ 288.379083][ T9097] ? __pfx____sys_sendmsg+0x10/0x10 [ 288.379103][ T9097] ? __mutex_trylock_common+0x15f/0x270 [ 288.379131][ T9097] ? get_pid_task+0x20/0x1f0 [ 288.379150][ T9097] ? get_pid_task+0x20/0x1f0 [ 288.379189][ T9097] ? __fget_files+0x2a/0x420 [ 288.379220][ T9097] ? __fget_files+0x3a2/0x420 [ 288.379257][ T9097] __sys_sendmsg+0x177/0x240 [ 288.379278][ T9097] ? __pfx___sys_sendmsg+0x10/0x10 [ 288.379305][ T9097] ? rcu_is_watching+0x15/0xb0 [ 288.379331][ T9097] __do_fast_syscall_32+0x23e/0x6f0 [ 288.379365][ T9097] ? do_fast_syscall_32+0x33/0x70 [ 288.379397][ T9097] ? asm_int80_emulation+0x1a/0x20 [ 288.379418][ T9097] ? do_int80_emulation+0x29f/0x550 [ 288.379448][ T9097] ? trace_irq_disable+0x3b/0x140 [ 288.379482][ T9097] do_fast_syscall_32+0x33/0x70 [ 288.379514][ T9097] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 288.379539][ T9097] RIP: 0023:0xf7f940ec [ 288.379558][ T9097] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 288.379577][ T9097] RSP: 002b:00000000f543550c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 288.379601][ T9097] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000280 [ 288.379616][ T9097] RDX: 0000000004001840 RSI: 0000000000000000 RDI: 0000000000000000 [ 288.379630][ T9097] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 288.379643][ T9097] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 288.379656][ T9097] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 288.379678][ T9097] [ 288.690761][ T9102] netlink: 'syz.2.867': attribute type 1 has an invalid length. [ 288.749944][ T9102] bond2: entered promiscuous mode [ 288.759810][ T9102] 8021q: adding VLAN 0 to HW filter on device bond2 [ 288.806367][ T9109] loop3: detected capacity change from 0 to 7 [ 288.813370][ T9109] Dev loop3: unable to read RDB block 7 [ 288.819027][ T9109] loop3: AHDI p3 p4 [ 288.823462][ T9109] loop3: partition table partially beyond EOD, truncated [ 288.831014][ T9109] loop3: p3 start 1702000233 is beyond EOD, truncated [ 288.973602][ T30] audit: type=1326 audit(1782176779.977:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9112 comm="syz.4.872" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 289.045356][ T30] audit: type=1326 audit(1782176779.997:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9112 comm="syz.4.872" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 289.090471][ T5704] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 289.103600][ T30] audit: type=1326 audit(1782176779.997:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9112 comm="syz.4.872" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 289.251847][ T5704] usb 1-1: Using ep0 maxpacket: 16 [ 289.262976][ T5704] usb 1-1: config 251 has an invalid interface number: 202 but max is 0 [ 289.296685][ T5704] usb 1-1: config 251 has no interface number 0 [ 289.327155][ T5704] usb 1-1: config 251 interface 202 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 289.370747][ T5704] usb 1-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 289.397642][ T5704] usb 1-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 289.419598][ T5704] usb 1-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 289.433898][ T5704] usb 1-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 289.449662][ T5704] usb 1-1: config 251 interface 202 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.464904][ T5704] usb 1-1: config 251 interface 202 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.477095][ T5704] usb 1-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 289.492281][ T5704] usb 1-1: config 251 interface 202 has no altsetting 0 [ 289.501206][ T5704] usb 1-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 289.524341][ T5704] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 289.533618][ T5704] usb 1-1: Product: syz [ 289.537935][ T5704] usb 1-1: SerialNumber: syz [ 289.570505][ T5622] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 289.730626][ T5622] usb 4-1: Using ep0 maxpacket: 16 [ 289.757734][ T5622] usb 4-1: config 1 has an invalid descriptor of length 246, skipping remainder of the config [ 289.795558][ T5622] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 289.796681][ T5704] cxacru 1-1:251.202: cxacru_bind: interface has incorrect endpoints [ 289.838128][ T5704] cxacru 1-1:251.202: usbatm_usb_probe: bind failed: -19! [ 289.853189][ T5622] usb 4-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 289.876122][ T5622] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.921342][ T5704] usb 1-1: USB disconnect, device number 37 [ 289.928269][ T5622] usb 4-1: Product: syz [ 289.946327][ T5622] usb 4-1: Manufacturer: syz [ 289.969000][ T5622] usb 4-1: SerialNumber: syz [ 290.360896][ T5718] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 290.468625][ T9166] netlink: 28 bytes leftover after parsing attributes in process `syz.0.886'. [ 290.495280][ T9166] netlink: 28 bytes leftover after parsing attributes in process `syz.0.886'. [ 290.530261][ T9170] netlink: 4 bytes leftover after parsing attributes in process `syz.0.886'. [ 290.563864][ T5718] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 290.655135][ T5718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.692258][ T5718] usb 3-1: Product: syz [ 290.723403][ T9167] trusted_key: encrypted_key: keyword 'new2…µë˜±,Ë' not recognized [ 290.732505][ T5718] usb 3-1: Manufacturer: syz [ 290.769146][ T9167] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 290.780308][ T5718] usb 3-1: SerialNumber: syz [ 290.936523][ T5638] udevd[5638]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 290.954064][ T5622] usb 4-1: USB disconnect, device number 36 [ 291.219109][ T5718] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 59 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 291.814952][ T9192] bond3: Unable to set down delay as MII monitoring is disabled [ 291.839106][ T9192] bond3 (unregistering): Released all slaves [ 291.850504][ T5704] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 292.030435][ T5704] usb 4-1: Using ep0 maxpacket: 32 [ 292.049596][ T5704] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.083126][ T5704] usb 4-1: config 0 has no interfaces? [ 292.103477][ T5704] usb 4-1: New USB device found, idVendor=0525, idProduct=2888, bcdDevice=d0.43 [ 292.128409][ T5704] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.159096][ T5704] usb 4-1: config 0 descriptor?? [ 292.398828][ T5704] usb 4-1: USB disconnect, device number 37 [ 292.785347][ T9207] misc userio: Invalid payload size [ 293.004888][ T9209] netlink: 'syz.3.897': attribute type 1 has an invalid length. [ 293.042276][ T9209] bond4: entered promiscuous mode [ 293.052940][ T9209] 8021q: adding VLAN 0 to HW filter on device bond4 [ 293.162623][ T5697] usb 3-1: USB disconnect, device number 59 [ 293.187716][ T5697] usblp0: removed [ 293.592873][ T9225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.611795][ T9225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.631740][ T5718] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 293.750456][ T5690] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 293.831877][ T5718] usb 4-1: config 8 has an invalid interface number: 177 but max is 0 [ 293.853968][ T5718] usb 4-1: config 8 has no interface number 0 [ 293.872646][ T5718] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 293.907359][ T5718] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 293.931759][ T5690] usb 3-1: config 8 has an invalid interface number: 177 but max is 0 [ 293.946347][ T5718] usb 4-1: config 8 interface 177 has no altsetting 0 [ 293.959538][ T5690] usb 3-1: config 8 has no interface number 0 [ 293.975692][ T5718] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 293.986375][ T5690] usb 3-1: config 8 interface 177 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 294.009335][ T5718] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.025627][ T5690] usb 3-1: config 8 interface 177 altsetting 9 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 294.046632][ T9218] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 294.080567][ T5690] usb 3-1: config 8 interface 177 has no altsetting 0 [ 294.089948][ T9218] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 294.120235][ C0] ir_toy 4-1:8.177: out urb status: -71 [ 294.137021][ T5690] usb 3-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 294.184019][ T5690] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.237733][ T9219] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 294.272811][ T9219] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 294.310572][ C0] ir_toy 3-1:8.177: out urb status: -71 [ 294.620489][ T5718] ir_toy 4-1:8.177: could not write reset command: -110 [ 294.638419][ T5718] ir_toy 4-1:8.177: probe with driver ir_toy failed with error -110 [ 294.728293][ T9233] netlink: 'syz.0.904': attribute type 2 has an invalid length. [ 294.810652][ T5690] ir_toy 3-1:8.177: could not write reset command: -110 [ 294.832642][ T5690] ir_toy 3-1:8.177: probe with driver ir_toy failed with error -110 [ 295.740497][ T5690] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 295.900579][ T5690] usb 5-1: Using ep0 maxpacket: 32 [ 295.919430][ T5690] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 295.931300][ T5690] usb 5-1: config 0 has no interfaces? [ 295.937328][ T5690] usb 5-1: New USB device found, idVendor=0525, idProduct=2888, bcdDevice=d0.43 [ 295.963854][ T5690] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.985461][ T5690] usb 5-1: config 0 descriptor?? [ 296.214636][ T5690] usb 5-1: USB disconnect, device number 47 [ 296.644613][ T9245] netlink: 'syz.1.909': attribute type 1 has an invalid length. [ 296.668174][ T9245] bond9: entered promiscuous mode [ 296.675650][ T9245] 8021q: adding VLAN 0 to HW filter on device bond9 [ 296.743680][ T9248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.771248][ T9248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.788066][ T9248] loop9: detected capacity change from 0 to 7 [ 297.072404][ T5697] usb 4-1: USB disconnect, device number 38 [ 297.188941][ T9252] Invalid logical block size (1050184017) [ 297.207066][ T9248] Dev loop9: unable to read RDB block 7 [ 297.227311][ T9248] loop9: unable to read partition table [ 297.254084][ T9248] loop9: partition table beyond EOD, truncated [ 297.272084][ T9248] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 297.298544][ T5690] usb 3-1: USB disconnect, device number 60 [ 297.557008][ T9264] vlan1: entered allmulticast mode [ 297.563273][ T9264] bond0: entered allmulticast mode [ 297.568613][ T9264] bond_slave_0: entered allmulticast mode [ 297.577703][ T9264] bond_slave_1: entered allmulticast mode [ 297.584409][ T9264] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 297.594342][ T9264] bridge0: port 4(vlan1) entered blocking state [ 297.600949][ T9264] bridge0: port 4(vlan1) entered disabled state [ 297.608517][ T9264] vlan1: entered promiscuous mode [ 297.613853][ T9264] bond0: entered promiscuous mode [ 297.618960][ T9264] bond_slave_0: entered promiscuous mode [ 297.624946][ T9264] bond_slave_1: entered promiscuous mode [ 297.631061][ T9264] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 297.639433][ T9264] bridge0: port 4(vlan1) entered blocking state [ 297.646015][ T9264] bridge0: port 4(vlan1) entered forwarding state [ 297.659797][ T6215] bridge0: port 4(vlan1) entered disabled state [ 297.691404][ T5622] usb 4-1: new low-speed USB device number 39 using dummy_hcd [ 297.753410][ T9267] tipc: Enabling of bearer rejected, failed to enable media [ 297.851948][ T5622] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 297.875207][ T5622] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 297.895973][ T5622] usb 4-1: string descriptor 0 read error: -22 [ 297.902570][ T3428] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 297.913357][ T5622] usb 4-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice= 0.40 [ 297.914538][ T9275] netlink: 'syz.1.921': attribute type 1 has an invalid length. [ 297.923865][ T5622] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.949715][ T5622] usb 4-1: 0:1 : does not exist [ 297.957737][ T5622] usb 4-1: 0:2 : does not exist [ 297.990227][ T9275] bond10: entered promiscuous mode [ 297.996248][ T9275] 8021q: adding VLAN 0 to HW filter on device bond10 [ 298.062231][ T3428] usb 1-1: config 1 has an invalid interface number: 128 but max is 2 [ 298.074514][ T3428] usb 1-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 298.094917][ T3428] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 298.104588][ T3428] usb 1-1: config 1 has no interface number 0 [ 298.117357][ T3428] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 298.128156][ T3428] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 298.141738][ T3428] usb 1-1: SerialNumber: syz [ 298.670425][ T5697] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 298.832367][ T5697] usb 3-1: config 5 has an invalid interface number: 42 but max is 0 [ 298.849299][ T5697] usb 3-1: config 5 has no interface number 0 [ 298.867271][ T5697] usb 3-1: config 5 interface 42 has no altsetting 0 [ 298.886989][ T5697] usb 3-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice=e0.90 [ 298.902966][ T5697] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.923703][ T5697] usb 3-1: Product: syz [ 298.931892][ T5697] usb 3-1: Manufacturer: syz [ 298.936744][ T5697] usb 3-1: SerialNumber: syz [ 299.206851][ T5697] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:5.42/input/input52 [ 299.231157][ T4976] bcm5974 3-1:5.42: could not read from device [ 299.247981][ T4976] bcm5974 3-1:5.42: could not read from device [ 299.255749][ T5697] usb 3-1: USB disconnect, device number 61 [ 299.285005][ T4976] bcm5974 3-1:5.42: could not read from device [ 299.353030][ T9298] fuse: Unknown parameter 'f' [ 299.498057][ T9308] bond_slave_0: entered allmulticast mode [ 299.513515][ T9306] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 299.582968][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 299.582987][ T30] audit: type=1326 audit(1782176790.587:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.0.930" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff50ec code=0x7ffc0000 [ 299.615097][ T30] audit: type=1326 audit(1782176790.627:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.0.930" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff50ec code=0x7ffc0000 [ 299.624029][ T9311] kvm: kvm [9310]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x11e) = 0xbe70a111 [ 299.642263][ T30] audit: type=1326 audit(1782176790.627:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.0.930" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff50ec code=0x7ffc0000 [ 299.674361][ T30] audit: type=1326 audit(1782176790.627:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.0.930" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff50ec code=0x7ffc0000 [ 299.701581][ T30] audit: type=1326 audit(1782176790.627:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.0.930" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7ff50ec code=0x7ffc0000 [ 299.749464][ T30] audit: type=1326 audit(1782176790.627:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.0.930" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff50ec code=0x7ffc0000 [ 299.805166][ T30] audit: type=1326 audit(1782176790.627:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.0.930" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff50ec code=0x7ffc0000 [ 299.862073][ T30] audit: type=1326 audit(1782176790.627:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.0.930" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7ff50ec code=0x7ffc0000 [ 299.893268][ T30] audit: type=1326 audit(1782176790.707:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.0.930" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff50ec code=0x7ffc0000 [ 299.918601][ T30] audit: type=1326 audit(1782176790.747:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.0.930" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff50ec code=0x7ffc0000 [ 300.494702][ T3428] usb 1-1: 128:2 : does not exist [ 300.499834][ T5622] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 300.518926][ T3428] usb 1-1: unit 116 not found! [ 300.564068][ T5622] usb 4-1: USB disconnect, device number 39 [ 300.663872][ T3428] usb 1-1: USB disconnect, device number 38 [ 300.674907][ T9338] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 300.692619][ T5690] IPVS: starting estimator thread 0... [ 300.705880][ T5637] udevd[5637]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.128/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 300.738139][ T9344] input: syz1 as /devices/virtual/input/input53 [ 300.810794][ T9343] IPVS: using max 40 ests per chain, 96000 per kthread [ 301.030498][ T3428] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 301.130440][ T5697] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 301.177731][ T9350] netlink: 'syz.2.941': attribute type 1 has an invalid length. [ 301.193083][ T3428] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.204977][ T3428] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.209912][ T9350] bond3: entered promiscuous mode [ 301.219279][ T3428] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 301.224055][ T9350] 8021q: adding VLAN 0 to HW filter on device bond3 [ 301.231921][ T3428] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.248956][ T3428] usb 1-1: config 0 descriptor?? [ 301.300598][ T5697] usb 5-1: Using ep0 maxpacket: 16 [ 301.309869][ T5697] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.333881][ T5697] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.354378][ T5697] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 301.369809][ T5697] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.410215][ T5697] usb 5-1: config 0 descriptor?? [ 301.668480][ T3428] hid_parser_main: 4004 callbacks suppressed [ 301.668516][ T3428] playstation 0003:054C:0DF2.0010: unknown main item tag 0x0 [ 301.697007][ T3428] playstation 0003:054C:0DF2.0010: unknown main item tag 0x0 [ 301.712796][ T3428] playstation 0003:054C:0DF2.0010: unknown main item tag 0x0 [ 301.727351][ T3428] playstation 0003:054C:0DF2.0010: unknown main item tag 0x0 [ 301.745132][ T3428] playstation 0003:054C:0DF2.0010: unknown main item tag 0x0 [ 301.767093][ T3428] playstation 0003:054C:0DF2.0010: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 301.849182][ T5697] konepure 0003:1E7D:2DB4.0011: hidraw1: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.4-1/input0 [ 302.251474][ T3428] playstation 0003:054C:0DF2.0010: Invalid accelerometer calibration data for axis (1), disabling calibration. [ 302.302847][ T3428] input: HID 054c:0df2 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:0DF2.0010/input/input54 [ 302.369015][ T3428] input: HID 054c:0df2 Motion Sensors as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:0DF2.0010/input/input55 [ 302.450941][ T3428] input: HID 054c:0df2 Touchpad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:0DF2.0010/input/input56 [ 302.541303][ T3428] input: HID 054c:0df2 Headset Jack as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:0DF2.0010/input/input57 [ 302.608425][ T9380] netlink: 6 bytes leftover after parsing attributes in process `syz.3.945'. [ 302.689735][ T3428] playstation 0003:054C:0DF2.0010: Registered DualSense controller hw_version=0xe8f2453f fw_version=0xa9ff1c9c [ 302.920547][ T5690] usb 1-1: reset high-speed USB device number 39 using dummy_hcd [ 303.060452][ T5690] usb 1-1: device descriptor read/64, error -32 [ 303.300809][ T5690] usb 1-1: reset high-speed USB device number 39 using dummy_hcd [ 303.328366][ T9384] netlink: 12 bytes leftover after parsing attributes in process `syz.1.946'. [ 303.395747][ T9384] vlan5: entered allmulticast mode [ 303.409907][ T9384] bridge6: entered allmulticast mode [ 303.437147][ T9384] netlink: 20 bytes leftover after parsing attributes in process `syz.1.946'. [ 303.459006][ T9384] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 303.466308][ T9384] IPv6: NLM_F_CREATE should be set when creating new route [ 303.502301][ T9387] erspan0: left allmulticast mode [ 303.514971][ T9387] erspan0: left promiscuous mode [ 303.522676][ T9387] bridge4: port 1(erspan0) entered disabled state [ 303.581176][ T9386] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 304.081349][ T3428] usb 1-1: USB disconnect, device number 39 [ 304.247364][ T5711] usb 5-1: USB disconnect, device number 48 [ 304.343272][ T9401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.951'. [ 304.790672][ T5704] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 304.893110][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 304.893128][ T30] audit: type=1326 audit(1782176795.897:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9414 comm="syz.3.956" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fd40ec code=0x0 [ 304.950790][ T5704] usb 3-1: Using ep0 maxpacket: 8 [ 304.964625][ T9420] netlink: 'syz.0.957': attribute type 1 has an invalid length. [ 304.974377][ T5704] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.992678][ T5704] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 305.010791][ T9420] bond3: entered promiscuous mode [ 305.016047][ T5704] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 305.024901][ T9420] 8021q: adding VLAN 0 to HW filter on device bond3 [ 305.032612][ T5704] usb 3-1: SerialNumber: syz [ 305.069841][ T5704] usb 3-1: config 0 descriptor?? [ 305.078270][ T9417] ptrace attach of ""[9424] was attempted by "ci-upstream-kasan-gce-386/syz-executor exec"[9417] [ 305.122021][ T5704] uvcvideo 3-1:0.0: Found UVC 0.00 device (05ac:8501) [ 305.143424][ T5704] uvcvideo 3-1:0.0: No valid video chain found. [ 305.346941][ T9413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.382282][ T9413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.462565][ T9433] bond4: option all_slaves_active: invalid value (8) [ 305.494423][ T9439] FAULT_INJECTION: forcing a failure. [ 305.494423][ T9439] name failslab, interval 1, probability 0, space 0, times 0 [ 305.507532][ T9438] block device autoloading is deprecated and will be removed. [ 305.545390][ T9439] CPU: 0 UID: 0 PID: 9439 Comm: syz.1.960 Tainted: G L syzkaller #0 PREEMPT(full) [ 305.545417][ T9439] Tainted: [L]=SOFTLOCKUP [ 305.545432][ T9439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 305.545442][ T9439] Call Trace: [ 305.545448][ T9439] [ 305.545454][ T9439] dump_stack_lvl+0xe8/0x150 [ 305.545497][ T9439] should_fail_ex+0x40c/0x560 [ 305.545524][ T9439] should_failslab+0xa8/0x100 [ 305.545548][ T9439] __kvmalloc_node_noprof+0x16e/0x890 [ 305.545563][ T9439] ? snd_pcm_oss_change_params_locked+0x2982/0x3c80 [ 305.545589][ T9439] ? snd_pcm_oss_change_params_locked+0x294b/0x3c80 [ 305.545628][ T9439] snd_pcm_oss_change_params_locked+0x2982/0x3c80 [ 305.545664][ T9439] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 305.545689][ T9439] ? __mutex_unlock_slowpath+0x731/0x900 [ 305.545719][ T9439] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 305.545763][ T9439] ? snd_pcm_oss_get_formats+0x39c/0x420 [ 305.545782][ T9439] ? _snd_pcm_hw_param_any+0xf6/0x270 [ 305.545803][ T9439] snd_pcm_oss_get_active_substream+0x1e2/0x280 [ 305.545829][ T9439] snd_pcm_oss_set_format+0x10d/0x510 [ 305.545850][ T9439] snd_pcm_oss_ioctl+0xbe9/0xdf0 [ 305.545869][ T9439] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 305.545888][ T9439] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 305.545906][ T9439] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 305.545943][ T9439] ? __fget_files+0x3a2/0x420 [ 305.545979][ T9439] ? fput+0xa0/0xd0 [ 305.546007][ T9439] ? ksys_write+0x242/0x270 [ 305.546031][ T9439] ? rcu_is_watching+0x15/0xb0 [ 305.546058][ T9439] __do_fast_syscall_32+0x23e/0x6f0 [ 305.546091][ T9439] ? do_fast_syscall_32+0x33/0x70 [ 305.546121][ T9439] ? asm_int80_emulation+0x1a/0x20 [ 305.546140][ T9439] ? do_int80_emulation+0x29f/0x550 [ 305.546171][ T9439] ? trace_irq_disable+0x3b/0x140 [ 305.546203][ T9439] do_fast_syscall_32+0x33/0x70 [ 305.546235][ T9439] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 305.546263][ T9439] RIP: 0023:0xf7f940ec [ 305.546276][ T9439] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 305.546289][ T9439] RSP: 002b:00000000f543550c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 305.546305][ T9439] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c0045005 [ 305.546316][ T9439] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 305.546326][ T9439] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 305.546335][ T9439] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 305.546344][ T9439] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 305.546359][ T9439] [ 306.109826][ T9442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.961'. [ 306.131403][ T9433] bond4 (unregistering): Released all slaves [ 306.420624][ T3428] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 306.592129][ T3428] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 306.620528][ T3428] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.653379][ T3428] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.679494][ T30] audit: type=1326 audit(1782176797.677:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9444 comm="syz.1.962" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f940ec code=0x7ffc0000 [ 306.679503][ T3428] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 306.682323][ T3428] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 306.734764][ T3428] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 306.746940][ T3428] usb 5-1: Manufacturer: syz [ 306.822770][ T3428] usb 5-1: config 0 descriptor?? [ 306.830617][ T30] audit: type=1326 audit(1782176797.677:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9444 comm="syz.1.962" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f940ec code=0x7ffc0000 [ 306.927789][ T30] audit: type=1326 audit(1782176797.747:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9444 comm="syz.1.962" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f940ec code=0x7ffc0000 [ 307.006987][ T30] audit: type=1326 audit(1782176797.747:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9444 comm="syz.1.962" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f940ec code=0x7ffc0000 [ 307.051444][ T30] audit: type=1326 audit(1782176797.747:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9444 comm="syz.1.962" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f940ec code=0x7ffc0000 [ 307.152753][ T30] audit: type=1326 audit(1782176797.747:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9444 comm="syz.1.962" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f940ec code=0x7ffc0000 [ 307.188659][ T30] audit: type=1326 audit(1782176797.757:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9444 comm="syz.1.962" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f940ec code=0x7ffc0000 [ 307.249730][ T30] audit: type=1326 audit(1782176797.757:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9444 comm="syz.1.962" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f940ec code=0x7ffc0000 [ 307.316106][ T3428] appleir 0003:05AC:8243.0012: unknown main item tag 0x0 [ 307.333529][ T30] audit: type=1326 audit(1782176797.757:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9444 comm="syz.1.962" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f940ec code=0x7ffc0000 [ 307.360481][ T5704] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 307.368742][ T3428] appleir 0003:05AC:8243.0012: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 307.381461][ T9449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.446919][ T9449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.488361][ T3428] usb 3-1: USB disconnect, device number 62 [ 307.511847][ T5704] usb 4-1: device descriptor read/64, error -71 [ 307.771399][ T5704] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 307.806020][ T9460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.965'. [ 307.820523][ T9460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.965'. [ 307.829502][ T9460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.965'. [ 307.910494][ T5704] usb 4-1: device descriptor read/64, error -71 [ 308.030698][ T5704] usb usb4-port1: attempt power cycle [ 308.110478][ T3428] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 308.250415][ T3428] usb 3-1: device descriptor read/64, error -71 [ 308.390976][ T5704] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 308.423690][ T5704] usb 4-1: device descriptor read/8, error -71 [ 308.500634][ T3428] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 308.526628][ T9466] netlink: 'syz.0.966': attribute type 1 has an invalid length. [ 308.562256][ T9466] bond4: entered promiscuous mode [ 308.567777][ T9466] 8021q: adding VLAN 0 to HW filter on device bond4 [ 308.650474][ T3428] usb 3-1: device descriptor read/64, error -71 [ 308.671401][ T5704] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 308.690949][ T5704] usb 4-1: device descriptor read/8, error -71 [ 308.761788][ T3428] usb usb3-port1: attempt power cycle [ 308.800659][ T5704] usb usb4-port1: unable to enumerate USB device [ 309.110725][ T3428] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 309.142346][ T3428] usb 3-1: device descriptor read/8, error -71 [ 309.340011][ T9442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 309.351985][ T5711] usb 5-1: USB disconnect, device number 49 [ 309.383998][ T3428] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 309.413714][ T3428] usb 3-1: device descriptor read/8, error -71 [ 309.530614][ T3428] usb usb3-port1: unable to enumerate USB device [ 309.760494][ T5704] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 309.920524][ T5704] usb 1-1: Using ep0 maxpacket: 32 [ 309.937997][ T5704] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 309.956484][ T5704] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 309.976037][ T5704] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 309.985681][ T5704] usb 1-1: config 1 has no interface number 0 [ 309.991989][ T5704] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 310.003972][ T5704] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 310.018302][ T5704] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 310.032138][ T5704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.050625][ T5704] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 310.250749][ T5704] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 310.673059][ T5704] usb 1-1: USB disconnect, device number 40 [ 310.688935][ T5704] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 310.708639][ T30] kauditd_printk_skb: 1096 callbacks suppressed [ 310.708660][ T30] audit: type=1326 audit(1782176801.707:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9488 comm="syz.1.974" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f940ec code=0x0 [ 311.040410][ T3428] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 311.099802][ T9499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.976'. [ 311.116745][ T9499] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.135023][ T9499] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.149676][ T9499] FAULT_INJECTION: forcing a failure. [ 311.149676][ T9499] name failslab, interval 1, probability 0, space 0, times 0 [ 311.170725][ T9499] CPU: 1 UID: 0 PID: 9499 Comm: syz.3.976 Tainted: G L syzkaller #0 PREEMPT(full) [ 311.170760][ T9499] Tainted: [L]=SOFTLOCKUP [ 311.170768][ T9499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 311.170780][ T9499] Call Trace: [ 311.170787][ T9499] [ 311.170795][ T9499] dump_stack_lvl+0xe8/0x150 [ 311.170824][ T9499] should_fail_ex+0x40c/0x560 [ 311.170851][ T9499] should_failslab+0xa8/0x100 [ 311.170874][ T9499] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 311.170904][ T9499] ? rcu_is_watching+0x15/0xb0 [ 311.170929][ T9499] ? __alloc_skb+0x1d7/0x7a0 [ 311.170967][ T9499] ? trace_irq_enable+0x3b/0x140 [ 311.171000][ T9499] __alloc_skb+0x1d7/0x7a0 [ 311.171032][ T9499] rtmsg_ifinfo_build_skb+0x7f/0x260 [ 311.171063][ T9499] rtnetlink_event+0x1b7/0x270 [ 311.171108][ T9499] notifier_call_chain+0x1a5/0x3d0 [ 311.171132][ T9499] __netdev_upper_dev_unlink+0x1e0/0x780 [ 311.171166][ T9499] ? __pfx___netdev_upper_dev_unlink+0x10/0x10 [ 311.171208][ T9499] ? __pfx_ref_tracker_free+0x10/0x10 [ 311.171234][ T9499] ? netdev_upper_dev_unlink+0x8b/0xe0 [ 311.171275][ T9499] netdev_upper_dev_unlink+0x99/0xe0 [ 311.171311][ T9499] ? __pfx_netdev_upper_dev_unlink+0x10/0x10 [ 311.171343][ T9499] ? disable_delayed_work_sync+0x5c/0xf0 [ 311.171368][ T9499] batadv_hardif_disable_interface+0xa19/0x1000 [ 311.171403][ T9499] ? batadv_hardif_disable_interface+0x42b/0x1000 [ 311.171433][ T9499] ? __pfx_batadv_hardif_disable_interface+0x10/0x10 [ 311.171465][ T9499] ? __pfx___mutex_lock+0x10/0x10 [ 311.171495][ T9499] ? kasan_save_track+0x4f/0x80 [ 311.171527][ T9499] ? dev_hard_start_xmit+0x2cd/0x830 [ 311.171547][ T9499] ? __dev_queue_xmit+0x1435/0x37f0 [ 311.171571][ T9499] batadv_meshif_destroy_netlink+0x65/0x220 [ 311.171606][ T9499] ? __pfx_batadv_meshif_destroy_netlink+0x10/0x10 [ 311.171639][ T9499] rtnl_dellink+0x5ad/0x810 [ 311.171669][ T9499] ? __pfx_rtnl_dellink+0x10/0x10 [ 311.171734][ T9499] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 311.171764][ T9499] ? rcu_is_watching+0x15/0xb0 [ 311.171787][ T9499] ? __pfx_rtnl_dellink+0x10/0x10 [ 311.171817][ T9499] ? rcu_is_watching+0x15/0xb0 [ 311.171839][ T9499] ? __pfx_rtnl_dellink+0x10/0x10 [ 311.171869][ T9499] ? lock_release+0x4b/0x3c0 [ 311.171887][ T9499] ? bpf_lsm_capable+0x9/0x20 [ 311.171905][ T9499] ? security_capable+0x7e/0x2c0 [ 311.171928][ T9499] ? __pfx_rtnl_dellink+0x10/0x10 [ 311.171964][ T9499] rtnetlink_rcv_msg+0x802/0xc00 [ 311.171996][ T9499] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 311.172025][ T9499] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 311.172055][ T9499] ? ref_tracker_free+0x689/0x830 [ 311.172082][ T9499] ? __pfx_ref_tracker_free+0x10/0x10 [ 311.172112][ T9499] netlink_rcv_skb+0x226/0x4a0 [ 311.172134][ T9499] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 311.172165][ T9499] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 311.172192][ T9499] ? netlink_deliver_tap+0x2e/0x1b0 [ 311.172215][ T9499] netlink_unicast+0x7bb/0x940 [ 311.172251][ T9499] netlink_sendmsg+0x813/0xb40 [ 311.172277][ T9499] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.172300][ T9499] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 311.172325][ T9499] ? __import_iovec+0x5d7/0x7e0 [ 311.172357][ T9499] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.172378][ T9499] sock_sendmsg_nosec+0x13a/0x180 [ 311.172405][ T9499] ____sys_sendmsg+0x54e/0x850 [ 311.172428][ T9499] ? __pfx_____sys_sendmsg+0x10/0x10 [ 311.172455][ T9499] ___sys_sendmsg+0x2a5/0x360 [ 311.172475][ T9499] ? get_pid_task+0x20/0x1f0 [ 311.172496][ T9499] ? __pfx____sys_sendmsg+0x10/0x10 [ 311.172515][ T9499] ? __mutex_trylock_common+0x15f/0x270 [ 311.172541][ T9499] ? get_pid_task+0x20/0x1f0 [ 311.172560][ T9499] ? get_pid_task+0x20/0x1f0 [ 311.172595][ T9499] ? __fget_files+0x2a/0x420 [ 311.172626][ T9499] ? __fget_files+0x3a2/0x420 [ 311.172668][ T9499] __sys_sendmsg+0x177/0x240 [ 311.172690][ T9499] ? __pfx___sys_sendmsg+0x10/0x10 [ 311.172715][ T9499] ? rcu_is_watching+0x15/0xb0 [ 311.172741][ T9499] __do_fast_syscall_32+0x23e/0x6f0 [ 311.172773][ T9499] ? do_fast_syscall_32+0x33/0x70 [ 311.172805][ T9499] ? asm_int80_emulation+0x1a/0x20 [ 311.172825][ T9499] ? do_int80_emulation+0x29f/0x550 [ 311.172855][ T9499] ? trace_irq_disable+0x3b/0x140 [ 311.172887][ T9499] do_fast_syscall_32+0x33/0x70 [ 311.172919][ T9499] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 311.172946][ T9499] RIP: 0023:0xf7fd40ec [ 311.172973][ T9499] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 311.172991][ T9499] RSP: 002b:00000000f549650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 311.173015][ T9499] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000280 [ 311.173030][ T9499] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 311.173044][ T9499] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 311.173056][ T9499] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 311.173069][ T9499] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 311.173091][ T9499] [ 311.174266][ T9499] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.260533][ T3428] usb 3-1: Using ep0 maxpacket: 32 [ 311.692967][ T9499] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.781169][ T3428] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 311.789762][ T3428] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 311.798473][ T3428] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 311.810195][ T3428] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 311.844900][ T3428] usb 3-1: config 1 has no interface number 0 [ 311.868710][ T3428] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 311.920494][ T3428] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.947167][ T3428] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 311.954537][ T9504] netlink: 'syz.0.978': attribute type 1 has an invalid length. [ 312.005737][ T9504] bond5: entered promiscuous mode [ 312.023795][ T9504] 8021q: adding VLAN 0 to HW filter on device bond5 [ 312.149834][ T3428] snd_usb_pod 3-1:1.1: set_interface failed [ 312.163726][ T3428] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 312.184681][ T3428] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 312.220871][ T3428] usb 3-1: USB disconnect, device number 67 [ 312.231159][ T9509] syzkaller0: entered promiscuous mode [ 312.272149][ T9509] syzkaller0: entered allmulticast mode [ 312.357451][ T9512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.387708][ T9512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.684612][ T9516] netlink: 44 bytes leftover after parsing attributes in process `syz.0.982'. [ 312.697220][ T9521] tipc: Can't bind to reserved service type 0 [ 312.862988][ T9527] netlink: 40 bytes leftover after parsing attributes in process `syz.4.986'. [ 313.020254][ T9534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.046586][ T9534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.133389][ T9542] netlink: 'syz.4.989': attribute type 8 has an invalid length. [ 313.167787][ T9542] netlink: 4 bytes leftover after parsing attributes in process `syz.4.989'. [ 313.207646][ T9542] veth1_to_team: entered promiscuous mode [ 313.225749][ T9542] gretap0: entered promiscuous mode [ 313.293916][ T9542] veth1_to_team: left promiscuous mode [ 313.338630][ T30] audit: type=1326 audit(1782176804.337:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9544 comm="syz.2.991" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f530ec code=0x0 [ 313.369524][ T9550] netlink: 14 bytes leftover after parsing attributes in process `syz.3.992'. [ 313.396642][ T9542] gretap0: left promiscuous mode [ 313.518052][ T9550] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.613634][ T9550] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.648637][ T9550] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 313.701384][ T9550] bond0 (unregistering): Released all slaves [ 313.880431][ T5690] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 314.045419][ T5690] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 314.084355][ T5690] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.111930][ T5690] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 314.135784][ T5690] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.191163][ T5690] usb 5-1: config 0 descriptor?? [ 314.239641][ T5690] hub 5-1:0.0: USB hub found [ 314.393448][ T5711] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 314.451875][ T9559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.489481][ T9559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.518039][ T9559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.534092][ T9559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.594162][ T9559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.626020][ T9559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.652006][ T9559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.682207][ T9559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.710437][ T5711] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 314.740143][ T9559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.750633][ T5711] usb 4-1: config 0 interface 0 has no altsetting 0 [ 314.774195][ T9559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.824767][ T5690] hub 5-1:0.0: 1 port detected [ 314.839476][ T5711] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 314.851132][ T3428] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 314.875622][ T5711] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 314.894145][ T5711] usb 4-1: Product: syz [ 314.903939][ T5690] usb 5-1: USB disconnect, device number 50 [ 314.923783][ T5711] usb 4-1: Manufacturer: syz [ 314.941063][ T5711] usb 4-1: SerialNumber: syz [ 314.971466][ T5711] usb 4-1: config 0 descriptor?? [ 314.993459][ T9577] netlink: 20 bytes leftover after parsing attributes in process `syz.2.999'. [ 315.061416][ T3428] usb 1-1: Using ep0 maxpacket: 32 [ 315.077451][ T3428] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 315.091250][ T3428] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 315.094866][ T9576] bond0: (slave macsec2): Error -34 calling dev_set_mtu [ 315.105280][ T5711] usb 4-1: selecting invalid altsetting 0 [ 315.112827][ T3428] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 315.167584][ T3428] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 315.194382][ T3428] usb 1-1: config 1 has no interface number 0 [ 315.204052][ T3428] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 315.239783][ T3428] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.280770][ T3428] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 315.311015][ T5697] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 315.377594][ T9563] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 315.387646][ T9563] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 315.398700][ T9563] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 315.409293][ T9563] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 315.426730][ T5711] usb 4-1: USB disconnect, device number 44 [ 315.433304][ T5690] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 315.482736][ T5697] usb 3-1: unable to get BOS descriptor or descriptor too short [ 315.492475][ T3428] snd_usb_pod 1-1:1.1: set_interface failed [ 315.499856][ T5697] usb 3-1: not running at top speed; connect to a high speed hub [ 315.513418][ T5697] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 315.524582][ T3428] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 315.536434][ T3428] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 315.549018][ T5697] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 315.560120][ T3428] usb 1-1: USB disconnect, device number 41 [ 315.572331][ T5697] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.592173][ T5690] usb 5-1: config 150 has an invalid interface number: 204 but max is 2 [ 315.600838][ T5690] usb 5-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 315.612144][ T5697] usb 3-1: Product: syz [ 315.618756][ T5690] usb 5-1: config 150 has no interface number 0 [ 315.639743][ T5697] usb 3-1: Manufacturer: syz [ 315.656227][ T5697] usb 3-1: SerialNumber: syz [ 315.656257][ T5690] usb 5-1: config 150 interface 204 has no altsetting 0 [ 315.675017][ T9577] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 315.696300][ T5690] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 315.708571][ T5690] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.723843][ T9582] netlink: 'syz.1.1000': attribute type 2 has an invalid length. [ 315.735111][ T5690] usb 5-1: Product: syz [ 315.740244][ T5690] usb 5-1: Manufacturer: syz [ 315.746773][ T5690] usb 5-1: SerialNumber: syz [ 315.753617][ T9582] FAULT_INJECTION: forcing a failure. [ 315.753617][ T9582] name failslab, interval 1, probability 0, space 0, times 0 [ 315.772745][ T9582] CPU: 1 UID: 0 PID: 9582 Comm: syz.1.1000 Tainted: G L syzkaller #0 PREEMPT(full) [ 315.772783][ T9582] Tainted: [L]=SOFTLOCKUP [ 315.772791][ T9582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 315.772805][ T9582] Call Trace: [ 315.772813][ T9582] [ 315.772822][ T9582] dump_stack_lvl+0xe8/0x150 [ 315.772851][ T9582] should_fail_ex+0x40c/0x560 [ 315.772878][ T9582] should_failslab+0xa8/0x100 [ 315.772901][ T9582] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 315.772935][ T9582] ? __kernfs_new_node+0xa9/0x980 [ 315.772958][ T9582] kstrdup+0x42/0x100 [ 315.772979][ T9582] __kernfs_new_node+0xa9/0x980 [ 315.772997][ T9582] ? rcu_is_watching+0x15/0xb0 [ 315.773022][ T9582] ? rcu_is_watching+0x15/0xb0 [ 315.773053][ T9582] ? __pfx___kernfs_new_node+0x10/0x10 [ 315.773073][ T9582] ? rcu_is_watching+0x15/0xb0 [ 315.773096][ T9582] ? kernfs_root+0x1c/0x230 [ 315.773127][ T9582] ? rcu_is_watching+0x15/0xb0 [ 315.773148][ T9582] ? kernfs_root+0x1c/0x230 [ 315.773180][ T9582] ? lock_release+0x4b/0x3c0 [ 315.773199][ T9582] ? __pfx_make_kgid+0x10/0x10 [ 315.773226][ T9582] ? kernfs_root+0x1c/0x230 [ 315.773253][ T9582] ? kernfs_root+0x1c/0x230 [ 315.773284][ T9582] kernfs_create_dir_ns+0xfe/0x230 [ 315.773306][ T9582] sysfs_create_dir_ns+0x12f/0x2a0 [ 315.773337][ T9582] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 315.773366][ T9582] ? do_raw_spin_unlock+0xf5/0x210 [ 315.773396][ T9582] kobject_add_internal+0x622/0xcd0 [ 315.773422][ T9582] kobject_add+0x163/0x240 [ 315.773442][ T9582] ? rcu_is_watching+0x15/0xb0 [ 315.773467][ T9582] ? __pfx_kobject_add+0x10/0x10 [ 315.773486][ T9582] ? kobject_put+0x50f/0x550 [ 315.773527][ T9582] ? get_device_parent+0x366/0x3a0 [ 315.773562][ T9582] device_add+0x3fa/0xb80 [ 315.773593][ T9582] netdev_register_kobject+0x178/0x310 [ 315.773622][ T9582] register_netdevice+0x1433/0x1eb0 [ 315.773653][ T9582] ? __pfx_register_netdevice+0x10/0x10 [ 315.773683][ T9582] internal_dev_create+0x28f/0x480 [ 315.773717][ T9582] ovs_vport_add+0x112/0x370 [ 315.773746][ T9582] new_vport+0x1a/0x190 [ 315.773771][ T9582] ovs_dp_cmd_new+0x69e/0xad0 [ 315.773804][ T9582] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 315.773832][ T9582] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 315.773862][ T9582] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 315.773894][ T9582] genl_family_rcv_msg_doit+0x233/0x340 [ 315.773932][ T9582] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 315.773966][ T9582] ? bpf_lsm_capable+0x9/0x20 [ 315.773985][ T9582] ? security_capable+0x7e/0x2c0 [ 315.774007][ T9582] genl_rcv_msg+0x614/0x7a0 [ 315.774060][ T9582] ? __pfx_genl_rcv_msg+0x10/0x10 [ 315.774086][ T9582] ? ref_tracker_free+0x689/0x830 [ 315.774112][ T9582] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 315.774138][ T9582] ? __pfx_ref_tracker_free+0x10/0x10 [ 315.774169][ T9582] netlink_rcv_skb+0x226/0x4a0 [ 315.774190][ T9582] ? __pfx_genl_rcv_msg+0x10/0x10 [ 315.774217][ T9582] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 315.774245][ T9582] ? down_read+0x2be/0x330 [ 315.774278][ T9582] genl_rcv+0x28/0x40 [ 315.774303][ T9582] netlink_unicast+0x7bb/0x940 [ 315.774339][ T9582] netlink_sendmsg+0x813/0xb40 [ 315.774365][ T9582] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.774388][ T9582] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 315.774414][ T9582] ? __import_iovec+0x5d7/0x7e0 [ 315.774446][ T9582] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.774467][ T9582] sock_sendmsg_nosec+0x13a/0x180 [ 315.774495][ T9582] ____sys_sendmsg+0x54e/0x850 [ 315.774517][ T9582] ? __pfx_____sys_sendmsg+0x10/0x10 [ 315.774545][ T9582] ___sys_sendmsg+0x2a5/0x360 [ 315.774565][ T9582] ? get_pid_task+0x20/0x1f0 [ 315.774588][ T9582] ? __pfx____sys_sendmsg+0x10/0x10 [ 315.774607][ T9582] ? __mutex_trylock_common+0x15f/0x270 [ 315.774633][ T9582] ? get_pid_task+0x20/0x1f0 [ 315.774653][ T9582] ? get_pid_task+0x20/0x1f0 [ 315.774687][ T9582] ? __fget_files+0x2a/0x420 [ 315.774718][ T9582] ? __fget_files+0x3a2/0x420 [ 315.774754][ T9582] __sys_sendmsg+0x177/0x240 [ 315.774775][ T9582] ? __pfx___sys_sendmsg+0x10/0x10 [ 315.774800][ T9582] ? rcu_is_watching+0x15/0xb0 [ 315.774830][ T9582] __do_fast_syscall_32+0x23e/0x6f0 [ 315.774863][ T9582] ? do_fast_syscall_32+0x33/0x70 [ 315.774895][ T9582] ? asm_int80_emulation+0x1a/0x20 [ 315.774916][ T9582] ? do_int80_emulation+0x29f/0x550 [ 315.774946][ T9582] ? trace_irq_disable+0x3b/0x140 [ 315.774979][ T9582] do_fast_syscall_32+0x33/0x70 [ 315.775010][ T9582] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 315.775036][ T9582] RIP: 0023:0xf7f940ec [ 315.775062][ T9582] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 315.775081][ T9582] RSP: 002b:00000000f545650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 315.775105][ T9582] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 315.775120][ T9582] RDX: 0000000000004040 RSI: 0000000000000000 RDI: 0000000000000000 [ 315.775134][ T9582] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 315.775146][ T9582] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 315.775159][ T9582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 315.775181][ T9582] [ 315.775430][ T9582] kobject: kobject_add_internal failed for  (error: -12 parent: net) [ 316.345212][ T5697] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 316.372207][ T5690] xr_serial 5-1:150.204: skipping garbage [ 316.378630][ T5690] xr_serial 5-1:150.204: xr_serial converter detected [ 316.389054][ T5697] usb 3-1: MIDIStreaming interface descriptor not found [ 316.512913][ T5697] usb 3-1: USB disconnect, device number 68 [ 316.752991][ T30] audit: type=1326 audit(1782176807.757:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9596 comm="syz.0.1005" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff50ec code=0x7ffc0000 [ 316.780091][ T30] audit: type=1326 audit(1782176807.757:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9596 comm="syz.0.1005" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff50ec code=0x7ffc0000 [ 316.856994][ T30] audit: type=1326 audit(1782176807.787:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9596 comm="syz.0.1005" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff50ec code=0x7ffc0000 [ 316.902966][ T9601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1004'. [ 316.953217][ T30] audit: type=1326 audit(1782176807.787:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9596 comm="syz.0.1005" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff50ec code=0x7ffc0000 [ 316.985994][ T9603] netlink: 'syz.2.1006': attribute type 2 has an invalid length. [ 316.994874][ T9603] FAULT_INJECTION: forcing a failure. [ 316.994874][ T9603] name failslab, interval 1, probability 0, space 0, times 0 [ 317.008761][ T9603] CPU: 1 UID: 0 PID: 9603 Comm: syz.2.1006 Tainted: G L syzkaller #0 PREEMPT(full) [ 317.008794][ T9603] Tainted: [L]=SOFTLOCKUP [ 317.008803][ T9603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 317.008816][ T9603] Call Trace: [ 317.008823][ T9603] [ 317.008832][ T9603] dump_stack_lvl+0xe8/0x150 [ 317.008862][ T9603] should_fail_ex+0x40c/0x560 [ 317.008889][ T9603] should_failslab+0xa8/0x100 [ 317.008913][ T9603] __kvmalloc_node_noprof+0x16e/0x890 [ 317.008934][ T9603] ? alloc_netdev_mqs+0xa9/0x1260 [ 317.008963][ T9603] alloc_netdev_mqs+0xa9/0x1260 [ 317.008986][ T9603] ? __pfx_do_setup+0x10/0x10 [ 317.009018][ T9603] internal_dev_create+0x89/0x480 [ 317.009052][ T9603] ovs_vport_add+0x112/0x370 [ 317.009085][ T9603] new_vport+0x1a/0x190 [ 317.009111][ T9603] ovs_dp_cmd_new+0x69e/0xad0 [ 317.009144][ T9603] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 317.009171][ T9603] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 317.009202][ T9603] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 317.009241][ T9603] genl_family_rcv_msg_doit+0x233/0x340 [ 317.009278][ T9603] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 317.009312][ T9603] ? bpf_lsm_capable+0x9/0x20 [ 317.009332][ T9603] ? security_capable+0x7e/0x2c0 [ 317.009355][ T9603] genl_rcv_msg+0x614/0x7a0 [ 317.009385][ T9603] ? __pfx_genl_rcv_msg+0x10/0x10 [ 317.009410][ T9603] ? ref_tracker_free+0x689/0x830 [ 317.009436][ T9603] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 317.009463][ T9603] ? __pfx_ref_tracker_free+0x10/0x10 [ 317.009494][ T9603] netlink_rcv_skb+0x226/0x4a0 [ 317.009515][ T9603] ? __pfx_genl_rcv_msg+0x10/0x10 [ 317.009542][ T9603] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 317.009570][ T9603] ? down_read+0x2be/0x330 [ 317.009604][ T9603] genl_rcv+0x28/0x40 [ 317.009629][ T9603] netlink_unicast+0x7bb/0x940 [ 317.009674][ T9603] netlink_sendmsg+0x813/0xb40 [ 317.009701][ T9603] ? __pfx_netlink_sendmsg+0x10/0x10 [ 317.009723][ T9603] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 317.009751][ T9603] ? __import_iovec+0x5d7/0x7e0 [ 317.009784][ T9603] ? __pfx_netlink_sendmsg+0x10/0x10 [ 317.009805][ T9603] sock_sendmsg_nosec+0x13a/0x180 [ 317.009833][ T9603] ____sys_sendmsg+0x54e/0x850 [ 317.009857][ T9603] ? __pfx_____sys_sendmsg+0x10/0x10 [ 317.009886][ T9603] ___sys_sendmsg+0x2a5/0x360 [ 317.009906][ T9603] ? get_pid_task+0x20/0x1f0 [ 317.009929][ T9603] ? __pfx____sys_sendmsg+0x10/0x10 [ 317.009949][ T9603] ? __mutex_trylock_common+0x15f/0x270 [ 317.009976][ T9603] ? get_pid_task+0x20/0x1f0 [ 317.009994][ T9603] ? get_pid_task+0x20/0x1f0 [ 317.010030][ T9603] ? __fget_files+0x2a/0x420 [ 317.010062][ T9603] ? __fget_files+0x3a2/0x420 [ 317.010098][ T9603] __sys_sendmsg+0x177/0x240 [ 317.010119][ T9603] ? __pfx___sys_sendmsg+0x10/0x10 [ 317.010145][ T9603] ? rcu_is_watching+0x15/0xb0 [ 317.010173][ T9603] __do_fast_syscall_32+0x23e/0x6f0 [ 317.010204][ T9603] ? do_fast_syscall_32+0x33/0x70 [ 317.010236][ T9603] ? asm_int80_emulation+0x1a/0x20 [ 317.010256][ T9603] ? do_int80_emulation+0x29f/0x550 [ 317.010288][ T9603] ? trace_irq_disable+0x3b/0x140 [ 317.010319][ T9603] do_fast_syscall_32+0x33/0x70 [ 317.010349][ T9603] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 317.010374][ T9603] RIP: 0023:0xf7f530ec [ 317.010392][ T9603] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 317.010410][ T9603] RSP: 002b:00000000f541650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 317.010434][ T9603] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 317.010449][ T9603] RDX: 0000000000004040 RSI: 0000000000000000 RDI: 0000000000000000 [ 317.010462][ T9603] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 317.010473][ T9603] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 317.010485][ T9603] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 317.010505][ T9603] [ 317.019345][ T30] audit: type=1326 audit(1782176807.817:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9596 comm="syz.0.1005" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7ff50ec code=0x7ffc0000 [ 317.427296][ T30] audit: type=1326 audit(1782176807.817:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9596 comm="syz.0.1005" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff50ec code=0x7ffc0000 [ 317.453844][ T5690] usb 5-1: xr_serial converter now attached to ttyUSB0 [ 317.471832][ T30] audit: type=1326 audit(1782176807.817:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9596 comm="syz.0.1005" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7ff50ec code=0x7ffc0000 [ 317.498569][ T9607] use of bytesused == 0 is deprecated and will be removed in the future, [ 317.514719][ T9607] use the actual size instead. [ 317.519655][ T30] audit: type=1326 audit(1782176807.817:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9596 comm="syz.0.1005" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff50ec code=0x7ffc0000 [ 317.599986][ T30] audit: type=1326 audit(1782176807.817:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9596 comm="syz.0.1005" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff50ec code=0x7ffc0000 [ 317.645780][ T9613] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1009'. [ 317.710735][ T9612] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 317.721157][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.724891][ T9610] syzkaller0: entered promiscuous mode [ 317.727720][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.742031][ T9612] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 317.750264][ T9610] syzkaller0: entered allmulticast mode [ 317.757164][ T9612] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 317.780101][ T9612] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 317.795762][ T9612] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 317.876974][ T9621] FAULT_INJECTION: forcing a failure. [ 317.876974][ T9621] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 317.920956][ T9621] CPU: 0 UID: 0 PID: 9621 Comm: syz.0.1012 Tainted: G L syzkaller #0 PREEMPT(full) [ 317.920991][ T9621] Tainted: [L]=SOFTLOCKUP [ 317.921000][ T9621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 317.921016][ T9621] Call Trace: [ 317.921022][ T9621] [ 317.921029][ T9621] dump_stack_lvl+0xe8/0x150 [ 317.921056][ T9621] should_fail_ex+0x40c/0x560 [ 317.921077][ T9621] _copy_from_user+0x2d/0xb0 [ 317.921106][ T9621] kstrtouint_from_user+0xd6/0x180 [ 317.921125][ T9621] ? __might_fault+0xaf/0x130 [ 317.921146][ T9621] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 317.921165][ T9621] ? __mutex_trylock_common+0x15f/0x270 [ 317.921184][ T9621] ? vfs_write+0x22b/0xba0 [ 317.921199][ T9621] ? rcu_is_watching+0x15/0xb0 [ 317.921247][ T9621] proc_fail_nth_write+0x8e/0x210 [ 317.921280][ T9621] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 317.921312][ T9621] ? preempt_count_add+0x91/0x190 [ 317.921360][ T9621] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 317.921391][ T9621] vfs_write+0x296/0xba0 [ 317.921446][ T9621] ? __pfx_vfs_write+0x10/0x10 [ 317.921472][ T9621] ? __fget_files+0x3a2/0x420 [ 317.921503][ T9621] ? __fget_files+0x2a/0x420 [ 317.921538][ T9621] ksys_write+0x150/0x270 [ 317.921561][ T9621] ? __pfx_ksys_write+0x10/0x10 [ 317.921580][ T9621] ? rcu_is_watching+0x15/0xb0 [ 317.921604][ T9621] ? rcu_is_watching+0x15/0xb0 [ 317.921626][ T9621] ? asm_int80_emulation+0x1a/0x20 [ 317.921648][ T9621] do_int80_emulation+0x19a/0x550 [ 317.921678][ T9621] ? trace_irq_disable+0x3b/0x140 [ 317.921708][ T9621] ? asm_int80_emulation+0x1a/0x20 [ 317.921726][ T9621] ? clear_bhb_loop+0x40/0x90 [ 317.921747][ T9621] ? clear_bhb_loop+0x40/0x90 [ 317.921770][ T9621] asm_int80_emulation+0x1a/0x20 [ 317.921789][ T9621] RIP: 0023:0xf71f71eb [ 317.921808][ T9621] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 317.921828][ T9621] RSP: 002b:00000000f54b64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 317.921850][ T9621] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54b65d0 [ 317.921865][ T9621] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 317.921877][ T9621] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 317.921890][ T9621] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 317.921903][ T9621] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 317.921924][ T9621] [ 318.206477][ T9622] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1011'. [ 318.353898][ T9630] fuse: Bad value for 'user_id' [ 318.364025][ T9630] fuse: Bad value for 'user_id' [ 318.806570][ T30] audit: type=1326 audit(1782176809.807:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9642 comm="syz.1.1018" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f940ec code=0x7ffc0000 [ 319.189948][ T9652] netlink: 'syz.1.1021': attribute type 11 has an invalid length. [ 319.308546][ T9652] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 319.324663][ T5697] usb 5-1: USB disconnect, device number 51 [ 319.338398][ T5697] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 319.351365][ T9657] FAULT_INJECTION: forcing a failure. [ 319.351365][ T9657] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.374125][ T5697] xr_serial 5-1:150.204: device disconnected [ 319.430575][ T9657] CPU: 0 UID: 0 PID: 9657 Comm: syz.0.1023 Tainted: G L syzkaller #0 PREEMPT(full) [ 319.430602][ T9657] Tainted: [L]=SOFTLOCKUP [ 319.430608][ T9657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 319.430618][ T9657] Call Trace: [ 319.430623][ T9657] [ 319.430629][ T9657] dump_stack_lvl+0xe8/0x150 [ 319.430650][ T9657] should_fail_ex+0x40c/0x560 [ 319.430670][ T9657] _copy_from_iter+0x1d3/0x1660 [ 319.430690][ T9657] ? rcu_is_watching+0x15/0xb0 [ 319.430708][ T9657] ? trace_kmem_cache_alloc+0x29/0xe0 [ 319.430729][ T9657] ? __build_skb+0x62/0x440 [ 319.430751][ T9657] ? kmem_cache_alloc_noprof+0x303/0x650 [ 319.430771][ T9657] ? __build_skb+0x62/0x440 [ 319.430792][ T9657] ? __pfx__copy_from_iter+0x10/0x10 [ 319.430812][ T9657] ? __build_skb+0x2a2/0x440 [ 319.430834][ T9657] ? netlink_sendmsg+0x650/0xb40 [ 319.430849][ T9657] ? skb_put+0x112/0x210 [ 319.430871][ T9657] netlink_sendmsg+0x6c0/0xb40 [ 319.430890][ T9657] ? __pfx_netlink_sendmsg+0x10/0x10 [ 319.430905][ T9657] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 319.430926][ T9657] ? __fget_files+0x3a2/0x420 [ 319.430951][ T9657] ? __fget_files+0x2a/0x420 [ 319.430974][ T9657] ? __pfx_netlink_sendmsg+0x10/0x10 [ 319.430988][ T9657] sock_sendmsg_nosec+0x13a/0x180 [ 319.431008][ T9657] __sys_sendto+0x408/0x5a0 [ 319.431029][ T9657] ? lock_release+0x4b/0x3c0 [ 319.431044][ T9657] ? __pfx___sys_sendto+0x10/0x10 [ 319.431070][ T9657] ? __fget_files+0x3a2/0x420 [ 319.431095][ T9657] ? ksys_write+0x242/0x270 [ 319.431113][ T9657] __ia32_sys_sendto+0xdd/0x100 [ 319.431137][ T9657] __do_fast_syscall_32+0x23e/0x6f0 [ 319.431160][ T9657] ? do_fast_syscall_32+0x33/0x70 [ 319.431182][ T9657] ? asm_int80_emulation+0x1a/0x20 [ 319.431196][ T9657] ? do_int80_emulation+0x29f/0x550 [ 319.431220][ T9657] do_fast_syscall_32+0x33/0x70 [ 319.431242][ T9657] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 319.431260][ T9657] RIP: 0023:0xf7ff50ec [ 319.431274][ T9657] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 319.431287][ T9657] RSP: 002b:00000000f54b650c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 319.431303][ T9657] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 319.431313][ T9657] RDX: 0000000000010a73 RSI: 0000000000000800 RDI: 0000000000000000 [ 319.431323][ T9657] RBP: 000000005a5de35b R08: 0000000000000000 R09: 0000000000000000 [ 319.431332][ T9657] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 319.431341][ T9657] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 319.431356][ T9657] [ 320.003525][ T9661] FAULT_INJECTION: forcing a failure. [ 320.003525][ T9661] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 320.020637][ T5711] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 320.030570][ T9661] CPU: 0 UID: 0 PID: 9661 Comm: syz.0.1025 Tainted: G L syzkaller #0 PREEMPT(full) [ 320.030608][ T9661] Tainted: [L]=SOFTLOCKUP [ 320.030617][ T9661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 320.030631][ T9661] Call Trace: [ 320.030640][ T9661] [ 320.030649][ T9661] dump_stack_lvl+0xe8/0x150 [ 320.030680][ T9661] should_fail_ex+0x40c/0x560 [ 320.030707][ T9661] _copy_from_user+0x2d/0xb0 [ 320.030743][ T9661] generic_map_update_batch+0x651/0x9a0 [ 320.030779][ T9661] ? __pfx_generic_map_update_batch+0x10/0x10 [ 320.030809][ T9661] ? __fget_files+0x2a/0x420 [ 320.030846][ T9661] ? __pfx_generic_map_update_batch+0x10/0x10 [ 320.030876][ T9661] bpf_map_do_batch+0x391/0x630 [ 320.030903][ T9661] __sys_bpf+0xbe5/0xd90 [ 320.030940][ T9661] ? __pfx___sys_bpf+0x10/0x10 [ 320.030980][ T9661] ? __mutex_unlock_slowpath+0x731/0x900 [ 320.031025][ T9661] ? fput+0xa0/0xd0 [ 320.031058][ T9661] ? ksys_write+0x242/0x270 [ 320.031086][ T9661] __ia32_sys_bpf+0xba/0xd0 [ 320.031119][ T9661] __do_fast_syscall_32+0x23e/0x6f0 [ 320.031153][ T9661] ? do_fast_syscall_32+0x33/0x70 [ 320.031186][ T9661] ? asm_int80_emulation+0x1a/0x20 [ 320.031208][ T9661] ? do_int80_emulation+0x29f/0x550 [ 320.031243][ T9661] ? trace_irq_disable+0x3b/0x140 [ 320.031290][ T9661] do_fast_syscall_32+0x33/0x70 [ 320.031325][ T9661] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 320.031354][ T9661] RIP: 0023:0xf7ff50ec [ 320.031374][ T9661] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 320.031396][ T9661] RSP: 002b:00000000f54b650c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 320.031422][ T9661] RAX: ffffffffffffffda RBX: 000000000000001a RCX: 0000000080000200 [ 320.031439][ T9661] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 0000000000000000 [ 320.031454][ T9661] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 320.031468][ T9661] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 320.031482][ T9661] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 320.031506][ T9661] [ 320.257929][ T24] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 320.414385][ T9663] netlink: 'syz.0.1027': attribute type 1 has an invalid length. [ 320.437150][ T9663] bond6: entered promiscuous mode [ 320.442842][ T9663] 8021q: adding VLAN 0 to HW filter on device bond6 [ 320.502154][ T5711] usb 3-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 320.514052][ T5711] usb 3-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 320.527477][ T5711] usb 3-1: config 0 interface 0 has no altsetting 0 [ 320.537980][ T5711] usb 3-1: New USB device found, idVendor=056a, idProduct=0013, bcdDevice= 0.00 [ 320.547102][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 320.555030][ T24] usb 5-1: config index 0 descriptor too short (expected 1821, got 853) [ 320.563693][ T24] usb 5-1: config 0 has an invalid interface number: 103 but max is 2 [ 320.572701][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 320.585205][ T24] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 320.595036][ T24] usb 5-1: config 0 has no interface number 1 [ 320.601589][ T24] usb 5-1: config 0 interface 103 altsetting 9 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 320.610843][ T5711] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.620460][ T24] usb 5-1: config 0 interface 103 altsetting 9 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 320.640437][ T24] usb 5-1: config 0 interface 103 altsetting 9 has a duplicate endpoint with address 0x8, skipping [ 320.652372][ T5711] usb 3-1: config 0 descriptor?? [ 320.671680][ T24] usb 5-1: config 0 interface 103 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 320.696848][ T24] usb 5-1: config 0 interface 103 has no altsetting 0 [ 320.713641][ T24] usb 5-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=cd.b4 [ 320.731775][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.744836][ T24] usb 5-1: Product: syz [ 320.750141][ T24] usb 5-1: Manufacturer: syz [ 320.758152][ T24] usb 5-1: SerialNumber: syz [ 320.776404][ T24] usb 5-1: config 0 descriptor?? [ 320.988906][ T9659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1024'. [ 321.022077][ T9677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1024'. [ 321.610567][ T5704] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 321.770425][ T5704] usb 4-1: Using ep0 maxpacket: 16 [ 321.810657][ T5704] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 321.850794][ T5711] usbhid 3-1:0.0: can't add hid device: -71 [ 321.862083][ T5704] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.873383][ T5711] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 321.910108][ T5704] usb 4-1: Product: syz [ 321.922078][ T5711] usb 3-1: USB disconnect, device number 69 [ 321.925773][ T5704] usb 4-1: Manufacturer: syz [ 321.963045][ T5704] usb 4-1: SerialNumber: syz [ 322.005652][ T24] videodev: could not get a free minor [ 322.029742][ T24] dsbr100 5-1:0.0: couldn't register video device [ 322.044961][ T24] dsbr100 5-1:0.0: probe with driver dsbr100 failed with error -23 [ 322.065934][ T24] usb 5-1: USB disconnect, device number 52 [ 322.152900][ T9706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.177224][ T9706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.209398][ T5704] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 322.243099][ T5704] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 322.257151][ T5704] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 322.268531][ T5704] usb 4-1: media controller created [ 322.285719][ T5704] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 322.298357][ T9706] ------------[ cut here ]------------ [ 322.304052][ T9706] usb 4-1: BOGUS control dir, pipe 80002d80 doesn't match bRequestType c0 [ 322.312823][ T9706] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1057/0x18b0, CPU#0: syz.1.1035/9706 [ 322.323254][ T9706] Modules linked in: [ 322.327278][ T9706] CPU: 0 UID: 0 PID: 9706 Comm: syz.1.1035 Tainted: G L syzkaller #0 PREEMPT(full) [ 322.338874][ T9706] Tainted: [L]=SOFTLOCKUP [ 322.343309][ T9706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 322.353553][ T9706] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 322.359254][ T9706] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89 [ 322.379059][ T9706] RSP: 0018:ffffc90003e6f678 EFLAGS: 00010246 [ 322.385965][ T9706] RAX: 0000000000000000 RBX: ffff888074acdb00 RCX: 0000000080002d80 [ 322.394094][ T9706] RDX: ffff888074da2c00 RSI: ffffffff8c81b560 RDI: ffffffff903f7190 [ 322.402418][ T9706] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000 [ 322.410491][ T9706] R10: ffffc90003e6f760 R11: fffff520007cdef8 R12: 1ffff110053441f0 [ 322.418479][ T9706] R13: ffff888029a20f80 R14: ffff888074da2c00 R15: 0000000080002d80 [ 322.426700][ T9706] FS: 0000000000000000(0000) GS:ffff888125251000(0063) knlGS:00000000f5456b40 [ 322.435958][ T9706] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 322.442807][ T9706] CR2: 0000000080079018 CR3: 0000000079518000 CR4: 00000000003526f0 [ 322.451051][ T24] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 322.451074][ T9706] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 322.466827][ T9706] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 322.474936][ T9706] Call Trace: [ 322.478255][ T9706] [ 322.481360][ T9706] usb_start_wait_urb+0x13f/0x5b0 [ 322.486447][ T9706] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 322.492119][ T9706] usb_control_msg+0x234/0x3e0 [ 322.496945][ T9706] gl861_ctrl_msg+0x207/0x420 [ 322.501768][ T9706] ? rcu_is_watching+0x15/0xb0 [ 322.506599][ T9706] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 322.511891][ T9706] ? aa_file_perm+0x4ed/0x15f0 [ 322.516736][ T9706] gl861_i2c_master_xfer+0x439/0x6a0 [ 322.522157][ T9706] __i2c_transfer+0x7be/0x1fe0 [ 322.527068][ T9706] ? trace_irq_enable+0x3b/0x140 [ 322.532343][ T9706] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 322.538216][ T9706] ? rt_mutex_lock_nested+0x156/0x1c0 [ 322.543719][ T9706] ? i2c_transfer+0xc8/0x2d0 [ 322.548365][ T9706] i2c_transfer+0x1cc/0x2d0 [ 322.553008][ T9706] i2c_transfer_buffer_flags+0x10d/0x1a0 [ 322.558772][ T9706] ? __asan_memset+0x22/0x50 [ 322.563476][ T9706] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 322.569695][ T9706] ? i2cdev_read+0xe8/0x250 [ 322.574344][ T9706] i2cdev_read+0x10d/0x250 [ 322.579011][ T9706] vfs_readv+0x57c/0x850 [ 322.583388][ T9706] ? __pfx_i2cdev_read+0x10/0x10 [ 322.588413][ T9706] ? __pfx_vfs_readv+0x10/0x10 [ 322.593414][ T9706] ? lock_release+0x4b/0x3c0 [ 322.598078][ T9706] ? __fget_files+0x3a2/0x420 [ 322.602885][ T9706] ? __fget_files+0x2a/0x420 [ 322.607919][ T9706] __ia32_compat_sys_preadv+0x1eb/0x300 [ 322.613639][ T9706] ? __pfx___ia32_compat_sys_preadv+0x10/0x10 [ 322.619790][ T9706] ? rcu_is_watching+0x15/0xb0 [ 322.624712][ T9706] __do_fast_syscall_32+0x23e/0x6f0 [ 322.630002][ T9706] ? do_fast_syscall_32+0x33/0x70 [ 322.635172][ T9706] ? asm_int80_emulation+0x1a/0x20 [ 322.640428][ T9706] ? do_int80_emulation+0x29f/0x550 [ 322.646122][ T9706] ? trace_irq_disable+0x3b/0x140 [ 322.651356][ T9706] do_fast_syscall_32+0x33/0x70 [ 322.656363][ T9706] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 322.662827][ T9706] RIP: 0023:0xf7f940ec [ 322.667086][ T9706] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 322.687331][ T9706] RSP: 002b:00000000f545650c EFLAGS: 00000206 ORIG_RAX: 000000000000014d [ 322.696241][ T9706] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000140 [ 322.704312][ T9706] RDX: 0000000000000002 RSI: 00000000000008c0 RDI: 0000000000002bd6 [ 322.712366][ T9706] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 322.721124][ T9706] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 322.729267][ T9706] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 322.737479][ T9706] [ 322.740834][ T9706] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 322.748266][ T9706] CPU: 0 UID: 0 PID: 9706 Comm: syz.1.1035 Tainted: G L syzkaller #0 PREEMPT(full) [ 322.759176][ T9706] Tainted: [L]=SOFTLOCKUP [ 322.763509][ T9706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 322.773573][ T9706] Call Trace: [ 322.776865][ T9706] [ 322.779805][ T9706] vpanic+0x56c/0xa60 [ 322.783814][ T9706] ? __pfx__printk+0x10/0x10 [ 322.788440][ T9706] ? __pfx_vpanic+0x10/0x10 [ 322.792954][ T9706] ? is_bpf_text_address+0x292/0x2b0 [ 322.798255][ T9706] ? is_bpf_text_address+0x26/0x2b0 [ 322.803473][ T9706] panic+0xc5/0xd0 [ 322.807217][ T9706] ? __pfx_panic+0x10/0x10 [ 322.811657][ T9706] __warn+0x315/0x4c0 [ 322.815645][ T9706] ? usb_submit_urb+0x1057/0x18b0 [ 322.820708][ T9706] ? usb_submit_urb+0x1057/0x18b0 [ 322.825738][ T9706] __report_bug+0x331/0x530 [ 322.830263][ T9706] ? stack_depot_save_flags+0x250/0x800 [ 322.835865][ T9706] ? usb_submit_urb+0x1057/0x18b0 [ 322.840902][ T9706] ? __pfx___report_bug+0x10/0x10 [ 322.845948][ T9706] ? rcu_is_watching+0x15/0xb0 [ 322.850726][ T9706] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 322.856586][ T9706] ? stack_depot_save_flags+0x3ec/0x800 [ 322.862181][ T9706] report_bug_entry+0x19a/0x290 [ 322.867088][ T9706] ? usb_submit_urb+0x1100/0x18b0 [ 322.872148][ T9706] ? usb_submit_urb+0x1105/0x18b0 [ 322.877218][ T9706] handle_bug+0xce/0x200 [ 322.881498][ T9706] exc_invalid_op+0x1a/0x50 [ 322.886039][ T9706] asm_exc_invalid_op+0x1a/0x20 [ 322.890920][ T9706] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 322.896859][ T9706] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89