last executing test programs: 13m37.125490529s ago: executing program 1 (id=6071): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x8, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000940)=@mangle={'mangle\x00', 0x64, 0x6, 0x51c, 0xc8, 0x38c, 0xc8, 0x27c, 0xc8, 0x454, 0x454, 0x454, 0x454, 0x454, 0x6, 0x0, {[{{@ipv6={@remote, @mcast2, [0xff], [0x0, 0xffffffff, 0x0, 0xffffff00], 'gre0\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x0, 0x7}, 0x0, 0xa4, 0xc8}, @common=@unspec=@NFQUEUE1={0x24, 'NFQUEUE\x00', 0x1, {0x599c, 0x6}}}, {{@uncond, 0x0, 0xc8, 0xec, 0x0, {}, [@common=@inet=@socket1={{0x24}, 0x1}]}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0x27c}}, {{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0x38c}}, {{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x4}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@empty, 'lo\x00', {0xd}}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @HL={0x24, 'HL\x00', 0x0, {0x2, 0x8}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x578) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=@newlink={0x3c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x0, 0x1}]}}]}]}, 0x3c}}, 0x0) syz_emit_ethernet(0x84, &(0x7f0000000300)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x4e, 0x6, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xfffc, 0x0, 0xff6b}, {"153090dc4feca6539b724ef2494473e1b7c1a3fc4f8462015618c321d63c72d8be977b956c11cf4c03a460ddfa505b53a5933409ce9e9af8ae3f"}}}}}}}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$int_in(r2, 0x5421, &(0x7f0000000140)=0x2f) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r4 = dup(r3) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x8}}, 0x20) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x400000, 0x0, 0x3, "0062ba7d820700000000000000000000096304"}) r5 = syz_open_pts(r3, 0x80) dup3(r5, r3, 0x80000) ioctl$TCSETS(r4, 0x5402, 0x0) read(r3, &(0x7f00000005c0)=""/228, 0xe4) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000023c0)=0x2) 13m36.051588207s ago: executing program 1 (id=6073): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdir(&(0x7f0000000380)='./file0\x00', 0x40) open$dir(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8541, 0x15) rename(&(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000880)='./file0/file0\x00') syz_ublk_setup_io_uring(0x11a9, &(0x7f0000000500)={0x0, 0x725d, 0x8000, 0xffffffff, 0x116}, &(0x7f00000000c0), 0x0, 0x0) r0 = fsopen(&(0x7f0000000000)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='fd', &(0x7f00000000c0)='1', 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$unix(0x1, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) bind$unix(r2, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x52) write(0xffffffffffffffff, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r5, 0x2, {0x2, 0x0, 0x2}}, 0x18) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) ioctl$SNDCTL_TMR_START(r6, 0x5402) ioctl$SNDCTL_SEQ_RESET(r6, 0x5100) ioctl$SNDCTL_TMR_CONTINUE(r6, 0x5404) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x0, 0xc}, &(0x7f0000001fee)='R\x10\x02\x00\x00\x00\xe3c*sgrVex\xbe:\xf2', 0x0) socket(0x1d, 0x2, 0x6) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltclass={0x24, 0x29, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xfff3, 0xffff}, {0x7, 0xd}, {0xb, 0x7}}}, 0x24}}, 0x4000050) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000011"], 0x30}], 0x1}, 0x0) 13m35.573492854s ago: executing program 1 (id=6074): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) syz_emit_ethernet(0x17b, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6000000000000000000005000000000000000000000000bbff02000000000000000100004e227d3e0f1507"], 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0xd1, 0x0, 0x0) r4 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000000c0)={0x3f, 0x0, 0x1}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000100), &(0x7f0000001140), 0x2, 0x2) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) read$FUSE(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000003b00)=""/182, 0xb6, 0x591f) sendmmsg$unix(r6, 0x0, 0x0, 0x0) unshare(0x2000200) recvmmsg(r5, &(0x7f0000006180)=[{{&(0x7f0000000380)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000001600)=""/184, 0xb8}, {&(0x7f00000006c0)=""/148, 0x94}, {&(0x7f0000001480)=""/147, 0x93}, {&(0x7f0000000480)=""/262, 0x106}, {0x0}, {&(0x7f00000049c0)=""/4084, 0xff4}, {&(0x7f0000003340)=""/204, 0xcc}, {&(0x7f0000000280)=""/98, 0x62}], 0x8}, 0x9}, {{&(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000004900), 0x0, &(0x7f0000000300)=""/74, 0x4a}, 0xff}, {{&(0x7f0000005ec0)=@generic, 0x80, &(0x7f0000000980)=[{&(0x7f00000008c0)=""/129, 0x81}], 0x1, &(0x7f0000000640)=""/105, 0x69}, 0x10}], 0x3, 0x12002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x6921, &(0x7f00000005c0)={0x0, 0x4fdb, 0x400, 0x2, 0xfffffffd}, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000000)) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r7 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) write$dsp(r7, &(0x7f0000000780)="b8226ca7ac649c0bd85d1ebc3f5a95ecab509dd2f7a2e958fb4111fb1f9de96e5639d46a18eae343a7daec5b77f446b381394f4e84343e33b75c917d0a5bb719766bf9142fe615a360328b726be0b9b9373d230dbb953f2ade4f84e6d1d9845d6506b94a40137a0ca4c02992176ed02b12642d45f8434adccabc0d84c30e48f56a5b6d10c439e22052873f418ba746b5a7a39fc01094e8b4e4baff88254aac793dd0d6575134233b087cc2ae5cc59750d96785a00b", 0xb5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r8, 0x0) ioctl$BLKZEROOUT(r8, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) 13m32.355025282s ago: executing program 1 (id=6083): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/cgroup', 0x100, 0x80) getdents(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000006c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x134, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xbc, 0x42}}}}, [@NL80211_ATTR_SSID={0x8, 0x34, @random="cf676220"}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x2}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_TX_RATES={0xd8, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x30, 0x0, 0x6, 0x48, 0x16, 0x16, 0xc, 0x12, 0x4c, 0x1, 0x3, 0x48, 0x18, 0x30]}]}, @NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfb, 0x3, 0x0, 0x2ef, 0x2, 0x400, 0x0, 0xfff8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xae20, 0x7, 0x2, 0xf231, 0x3ff, 0x3, 0x200]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x200, 0x0, 0x5, 0x8, 0x1ff, 0x80, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x2, 0x81, 0x3, 0x4, 0x0, 0xe, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4a5e, 0x3, 0x0, 0x2, 0x2, 0x2, 0x0, 0x8f]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x5, 0xf000, 0x2, 0x7, 0x1, 0x4, 0x47d5]}}]}]}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_PBSS={0x4}]}, 0x134}, 0x1, 0x0, 0x0, 0x4040081}, 0x4000881) r3 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r3, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000680)=[{0x0, 0x48}, {&(0x7f0000000640)="25b2b3cb", 0x4}], 0x2, 0x0, 0x0, 0x900}, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x7fff, 0x61, &(0x7f0000000000)="6c97", 0x2, 0x0, 0x7ff0bdbe, 0xffffffff, 0x3, 0x6, 0x0}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000940)={@map, 0x1d, 0x1, 0x212, &(0x7f0000000480), 0x0, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0), &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x20, 0x0, @val=@tcx={@void, @value, @void, @void, r4}}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000c00)={'syztnl1\x00', &(0x7f0000000b80)={'ip6tnl0\x00', 0x0, 0x29, 0x3, 0x7, 0x6, 0x3a, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x20, 0x10001}}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x270) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r6}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000011c0)={r11, 0xe0, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000b40)={@ifindex=r5, 0xffffffffffffffff, 0x1, 0x2, 0xffffffffffffffff, @void, @value=r11, @void, @void, r4}, 0x20) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) sync_file_range(r12, 0xc, 0x2000000006, 0x6) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@ifindex, 0xffffffffffffffff, 0x22, 0x0, 0x0, @void, @value=r12, @void, @void, r4}, 0x20) ioctl$SNDRV_TIMER_IOCTL_SELECT(r12, 0x40345410, &(0x7f0000000700)={{0x1, 0x1, 0x8000, 0x3, 0x5}}) fstat(r0, &(0x7f0000000180)) 13m32.068157088s ago: executing program 4 (id=6087): syz_usb_connect$uac1(0x2, 0x9e, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201010200000020050b431740000102030109028c00030109403f0904000000010100000a2401d2000a00020102090401000001020000090401010101020000072401080505000f2402020002ff0f00f441a4440fb209050109ff037808ba072501080403000904020000010200000904020101010200000f240202000007000223c586c54c01072501000e0300e7eb3381d03a03a016e6d7d3583e5811e4008d"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000600)={&(0x7f0000000140), 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x11c, 0x2d, 0x800, 0x70bd26, 0x25dfdbfb, {0x13}, [@generic="1915b7f2a6bfce1bb03c491df48177aec9ab7460640455ee584f797361b2245aac8d73016ffa76ee4fd9dd7737162c1ea6d063e37428a4cb0fa6beeb15b5d2c3f19a81645d425e00d4324ead67cf79f150897c82e3487257136d", @nested={0xc, 0x12f, 0x0, 0x1, [@typed={0x5, 0x6a, 0x0, 0x0, @str='\x00'}]}, @generic="44eaef20b236d9ba5cfce7b79a41c174cfc9fb97b5434984b01ce0bd6ddf0ffbc9b9c71428369b76530975f397e9485e4f34d5492f88f55b58275d1bd2e3aa2c03a78b1a6e870b8024fbccaa8a6a76bd842a1440f427884d789b52ac962e9009a165d953ee40ac3af248df7e754dfd49db6d127f48319662e56ab3c8049d65d933c84391e69f1186552da495afefb7f461844c6d1a98d22b1359f5d0cf025c39cf92"]}, 0x11c}, 0x1, 0x0, 0x0, 0x8801}, 0x4000) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000002780)={0x18, 0x2f, 0x9, 0x70bd28, 0x0, {0x4}, [@nested={0x4, 0x12}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3600) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x2, 0x5, 0x9b, 0x1, 0x0, 0x5f, 0x9, 0x20, 0xa7, 0x2, 0x5, 0x9, 0x3}, {0x0, 0xfffc, 0x0, 0x0, 0x0, 0x2, 0xce, 0x0, 0x4, 0xff, 0x0, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x20, 0x0, 0x4, 0x1, 0x7, 0xfe, 0x7, 0x8, 0x7e, 0x1, 0x1000000000000004}], 0x7}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x3, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000080)) syz_emit_vhci(0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000a00)={'syz0\x00', {0x9, 0x7, 0x5, 0x1}, 0x3f, [0x9, 0x2, 0x8, 0x6, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x40000002, 0xfffffffb, 0x39, 0x747d5e13, 0x8, 0xeffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x2004, 0x3, 0x3, 0xf252, 0x80, 0x800, 0x300000, 0x7, 0xe, 0x4623f, 0xfffffffe, 0x0, 0x1ff, 0x8000, 0x0, 0xb, 0x401, 0x3, 0x7, 0x8da8, 0x2, 0x2, 0x2, 0x4, 0xe, 0x4, 0x3, 0x6, 0x4, 0x9, 0x1, 0x19df, 0x8, 0x2, 0x9, 0xffffffff, 0x7fffffff, 0x6, 0xe9, 0x5, 0x40, 0x8, 0x8, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x8001, 0x1ff, 0x1, 0x297, 0x5, 0x0, 0x6, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x0, 0x10, 0x0, 0xfffffffd, 0x5, 0x5, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x1, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xfffb, 0xcd5, 0x7, 0x1f, 0x404, 0x4, 0x8, 0x10, 0x9b2, 0x9, 0xe8b, 0x5, 0x80000001, 0x48, 0x3f92, 0x1000, 0x0, 0x11, 0x1, 0xfffffff9, 0xe58, 0x1000, 0x80040101, 0x4, 0x4, 0x5, 0x200003, 0x2, 0x5, 0xffff, 0x9, 0x8001, 0x3, 0x4, 0x3, 0x4, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0x3, 0xcac, 0x100fffd, 0x2005, 0x1, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x2003, 0xa, 0x88, 0x2, 0xffff8b7f, 0x4, 0x50, 0x2, 0x763, 0xb, 0x404, 0x0, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x63, 0xe47, 0x1, 0x1654, 0x4, 0x200, 0x2851, 0x3b, 0x20000002, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a8, 0x6, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0x4, 0xffffffff, 0x7fff, 0x2, 0xfffffff8, 0xcf, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x8002, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) write$input_event(r6, &(0x7f0000000000)={{0x77359400}, 0x15, 0x0, 0xfa000000}, 0xfe4f) bind$netlink(0xffffffffffffffff, &(0x7f0000000640)={0x10, 0x0, 0x25dfdbfc, 0x10000000}, 0xc) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="71b14aa1fd7a2c000000", @ANYRES16, @ANYBLOB="01002bbd7000fcdbdf251a00000018000180140002006c6f00"/38], 0x2c}, 0x1, 0x0, 0x0, 0x8081}, 0x4000000) 13m31.336662546s ago: executing program 1 (id=6093): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) syz_emit_ethernet(0x17b, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6000000000000000000005000000000000000000000000bbff02000000000000000100004e227d3e0f1507"], 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0xd1, 0x0, 0x0) r4 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000000c0)={0x3f, 0x0, 0x1}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000100), &(0x7f0000001140), 0x2, 0x2) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) read$FUSE(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000003b00)=""/182, 0xb6, 0x591f) sendmmsg$unix(r6, 0x0, 0x0, 0x0) unshare(0x2000200) recvmmsg(r5, &(0x7f0000006180)=[{{&(0x7f0000000380)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000001600)=""/184, 0xb8}, {&(0x7f00000006c0)=""/148, 0x94}, {&(0x7f0000001480)=""/147, 0x93}, {&(0x7f0000001700)=""/137, 0x89}, {&(0x7f00000049c0)=""/4084, 0xff4}, {&(0x7f0000003340)=""/204, 0xcc}, {&(0x7f0000000280)=""/98, 0x62}], 0x7}, 0x9}, {{&(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000004900), 0x0, &(0x7f0000000300)=""/74, 0x4a}, 0xff}, {{&(0x7f0000005ec0)=@generic, 0x80, &(0x7f0000000980)=[{&(0x7f00000008c0)=""/129, 0x81}], 0x1, &(0x7f0000000640)=""/105, 0x69}, 0x10}], 0x3, 0x12002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x6921, &(0x7f00000005c0)={0x0, 0x4fdb, 0x400, 0x2, 0xfffffffd}, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000000)) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r7 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) write$dsp(r7, &(0x7f0000000780)="b8226ca7ac649c0bd85d1ebc3f5a95ecab509dd2f7a2e958fb4111fb1f9de96e5639d46a18eae343a7daec5b77f446b381394f4e84343e33b75c917d0a5bb719766bf9142fe615a360328b726be0b9b9373d230dbb953f2ade4f84e6d1d9845d6506b94a40137a0ca4c02992176ed02b12642d45f8434adccabc0d84c30e48f56a5b6d10c439e22052873f418ba746b5a7a39fc01094e8b4e4baff88254aac793dd0d6575134233b087cc2ae5cc59750d96785a00b", 0xb5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r8, 0x0) ioctl$BLKZEROOUT(r8, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) 13m30.988073519s ago: executing program 1 (id=6094): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2, 0xd, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x1, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x3, {0x6, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@private1, @in6=@private1}}]}, 0xa0}}, 0x4000) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000600)={'wlan0\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) pread64(r3, &(0x7f0000002840)=""/4101, 0x1005, 0x800100ab8e) 13m30.128376915s ago: executing program 32 (id=6094): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2, 0xd, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x1, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x3, {0x6, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@private1, @in6=@private1}}]}, 0xa0}}, 0x4000) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000600)={'wlan0\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) pread64(r3, &(0x7f0000002840)=""/4101, 0x1005, 0x800100ab8e) 13m29.898048196s ago: executing program 4 (id=6099): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a090000000000000000000200000009000200737900000000000008000440000000000900010073797a30000000000800034000000001"], 0x98}}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0xc1105511, &(0x7f0000000040)={0xd, 0x3, 0x6a281203, 0xf7f, '\x00', 0x53}) 13m29.544427183s ago: executing program 4 (id=6100): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a09040000000000000000020000004c000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180000000000800014000000000180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}}, 0x20008004) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x4, 0x1}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f00000000c0)={0x1011000, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f0000000180)={0x1, 0x4, 0x100000000000000, 0x1000000, &(0x7f0000000000/0x1000000)=nil, 0x1000, r4}) socket$inet6_udp(0xa, 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x600000000000000) 13m28.480906584s ago: executing program 4 (id=6105): socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0xc2400, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, 0x0) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r4 = open_tree(r3, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8437f, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x1, &(0x7f0000001080)=0xc, 0x4) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0/file0\x00', 0x2ecf02, 0xc2) lsm_get_self_attr(0x64, 0xffffffffffffffff, 0x0, 0x1) openat$btrfs_control(0xffffff9c, &(0x7f00000002c0), 0x20642, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[], 0x50) 13m26.789109608s ago: executing program 4 (id=6113): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x2e}, @private=0xa010102, 0x0, 0x1, [@dev={0xac, 0x14, 0x14, 0x26}]}, 0xfc43) syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401e09030000000000000109022700010100c0320904"], &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0}) 13m26.263472827s ago: executing program 4 (id=6116): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f0000000080)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_tcp_int(r2, 0x6, 0x20, &(0x7f0000000000)=0x57, 0xd8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="480000001000370429bd7000fcdbdf2500000000", @ANYRES32=r1, @ANYBLOB="890c020008010500280012800a000100767863616e0000001800028014000100000000", @ANYRES32=r1], 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) 13m25.291794024s ago: executing program 33 (id=6116): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f0000000080)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_tcp_int(r2, 0x6, 0x20, &(0x7f0000000000)=0x57, 0xd8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="480000001000370429bd7000fcdbdf2500000000", @ANYRES32=r1, @ANYBLOB="890c020008010500280012800a000100767863616e0000001800028014000100000000", @ANYRES32=r1], 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) 12m6.743849213s ago: executing program 5 (id=6428): syz_usb_connect$hid(0x5, 0x36, &(0x7f0000001fc0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0xeef, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x40, 0x40, 0xa}}]}}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x1808e2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x20001, 0x18b) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000000)={0x5182, r0}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)={{0x10b, 0x9, 0x7, 0x299, 0x193, 0x0, 0x20c, 0xfffff000}, "74d3233ec6dc4043e0d5ff0e8631a3d1d5a156a90a85a22e10709d826946f5be6460eb9a0d02ae6e6e88bba43d75b90f65eb5f1317a16ff788485ab3e7863de8819b99098a8310f209236a762b110e511c9b400bd6d99981f1f916414a01d2c8f74ab77cd40ddf60739c37e0086942d1912a1a72354bb903243ac1e74e2cd60a0ea01b6072c711ad2e3227e2fe15", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x7ae) timer_create(0x2, &(0x7f0000000240)={0x0, 0x13, 0x1}, &(0x7f0000000080)=0x0) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timer_gettime(r2, &(0x7f0000000000)) 12m5.420742562s ago: executing program 5 (id=6432): openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf4a, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4043, 0x8a, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x1}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x5045, 0x1000, 0x3, 0x255, 0x0, r1}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x617d, 0x8, 0x2000, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) (fail_nth: 27) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) sigaltstack(&(0x7f0000000480)={&(0x7f0000004000)=""/4126, 0x80000001, 0x101e}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 12m5.391751781s ago: executing program 5 (id=6433): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0xf5ffffff, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x200}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000058}, 0x20008844) 12m5.300206815s ago: executing program 5 (id=6434): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 12m5.152957706s ago: executing program 5 (id=6435): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x8000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x200000, 0x0, 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x9801) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x8) vmsplice(r2, &(0x7f00000004c0)=[{&(0x7f00000000c0)="cd", 0x1}, {&(0x7f0000000240)='y', 0x1}, {&(0x7f0000000300)="9d", 0x1}, {&(0x7f0000000400)='h', 0x1}], 0x4, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f000000c300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x49}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000001340)={0x1012, 0x29, 0x2, {0x3, [{{0x8, 0x3, 0x1}, 0x20000000f9, 0xb, 0xfef, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}]}}, 0x1012) ioctl$UBLK_U_CMD_START_DEV(r1, 0xc0207506, &(0x7f0000000100)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) ioctl$SG_BLKTRACESETUP(r1, 0xc0401273, &(0x7f00000001c0)={'\x00', 0x8, 0x8000, 0x0, 0x7fffffff, 0x7, r5}) socket$inet6_tcp(0xa, 0x1, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVid:De', 0xfffffffffffffffe) 12m5.057144598s ago: executing program 5 (id=6437): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x6009}, 0x30, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0xc4) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x393}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f0000000400)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x3, 0x603, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xa8}}}, &(0x7f0000000180)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) syz_ublk_setup_queues(r7, r6, &(0x7f0000000480)={0x0, 0x18e2, 0x10000, 0x100081, 0x1d2}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb656, 0x200, 0x5, 0x41}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x216, 0x0, 0x2, 0x19b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x1, 0x1, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x800, 0x0, 0x231}}], 0x4, &(0x7f0000003900)={0x2e, 0x62, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, r5, '\x00', {0x3, 0xb66, 0x0, 0x0}}, 0x0) r8 = userfaultfd(0x80801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x145}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) socket$inet_mptcp(0x2, 0x1, 0x106) 11m49.919180394s ago: executing program 34 (id=6437): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x6009}, 0x30, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0xc4) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x393}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f0000000400)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x3, 0x603, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xa8}}}, &(0x7f0000000180)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) syz_ublk_setup_queues(r7, r6, &(0x7f0000000480)={0x0, 0x18e2, 0x10000, 0x100081, 0x1d2}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb656, 0x200, 0x5, 0x41}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x216, 0x0, 0x2, 0x19b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x1, 0x1, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x800, 0x0, 0x231}}], 0x4, &(0x7f0000003900)={0x2e, 0x62, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, r5, '\x00', {0x3, 0xb66, 0x0, 0x0}}, 0x0) r8 = userfaultfd(0x80801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x145}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) socket$inet_mptcp(0x2, 0x1, 0x106) 11m35.870454946s ago: executing program 0 (id=6561): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'batadv0\x00', &(0x7f0000000240)=@ethtool_gstrings={0x1b, 0x2}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000480)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000200)=@known='user.incfs.id\x00', 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) listxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000000000000100000014000200776730000000000000000000006d000008bd2cd3bb5ae500"], 0x30}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000040)={0x6, 0x7, 0x9, 0x0, 0x1, "100056f200"}) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x30b001, 0x0) socket$kcm(0xa, 0x3, 0x87) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_emit_ethernet(0x1de, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_connect(0x0, 0x97, &(0x7f0000000100)=ANY=[@ANYBLOB="12011001000000401e04103000010000000109028500020100803209040000000101000009240100013f0001010c24020101020002030000000c240202030d0002030000000c24020305060002030000000924050803010203000924030901010008"], 0x0) 11m32.597263997s ago: executing program 0 (id=6575): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$can_raw(0x1d, 0x3, 0x1) sched_setscheduler(0xffffffffffffffff, 0x6, &(0x7f0000000240)=0xa) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) io_setup(0x1, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000180)={r7, @in6={{0xa, 0x4e24, 0x68, @mcast1, 0xbc}}, 0xa, 0x0, 0x81, 0xfffffffd, 0x17, 0x9}, &(0x7f0000000380)=0x9c) writev(r5, &(0x7f0000000380)=[{0x0}, {&(0x7f00000004c0)="ea70918135eaab3a884242c9d1d25114aa96787c02826ef6ca3afcb0b9dcdf64e03e2d393b8f9ce9a5e0ad21c8e307f9e4bb018c5b22023f07", 0x39}], 0x2) syz_open_dev$sndpcmc(0x0, 0x0, 0x42c001) syz_open_dev$vivid(&(0x7f0000000140), 0x0, 0x2) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="80636ca2efba585d17c35434ff88dc480da2d6057378b387995fe0813d1ab18c410487089b38434c7711261cc823daa509533b99ce34d0c9cca9053e52dfef693af9d032cdc03d48f2dfaddd5617db118f0c324093d0c270fa313e10e6117d460e5a2a5086769689a06d01adb6cd745350a5484e1fc5585c", @ANYRES16=r9, @ANYBLOB="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"/650], 0x290}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000c00)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e22, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x9, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) 11m28.932906269s ago: executing program 0 (id=6587): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0x40040, 0xd2, 0xf}, 0x18) unlink(&(0x7f0000000100)='./file0\x00') execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000140)={0x1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r2, 0x5) r3 = syz_open_dev$loop(&(0x7f00000014c0), 0x4, 0x2) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x2001, 0x0, 0x1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) bind$tipc(r4, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r5, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0xffffffff, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x1004) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001540)={0xffffffffffffffff, 0x9, {0x0, 0x0, 0x0, 0xbb, 0x1b99, 0x0, 0x3, 0x4, 0x13, "b7f8ada941fbfa24b230324b3122fe227031c9fb2622e97099e554942542690fb0219cbefea4d3a5c75b831367cbd848f5a1b04aff3568c826ed63af1057abf6", "e5774ce57e1395c66549c09e1a753713979872f8b081a61f3a2ce683ee7b6ead66b72f1365216f05a2ea09d6cd61fc85ebf757186da4d22874517bf0100dd87b", "8cbcf6468f994f1274302174ba4d9ee37a68f48b1ba174b75fe8178e0debfa0a", [0x80000000, 0xffffffffffffff4e]}}) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0x5, "d52c2000000102000300ecffffff0100"}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="f0e93917ecd16cc398fca6072e28a1ad786a82274ea7a273ec9f86a70665634434cbc50f211ed82fd7b8fc672317c268fcaa44ad2e000100001f48092e2bfdd22a34664e7344e4b529fbff9c4af8e1f800"/92, @ANYRES16, @ANYBLOB="010000000000feffffff0200000008000300", @ANYRES32=r8, @ANYBLOB="080026003c1400000800270003000000"], 0x2c}}, 0x0) r9 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r9, 0xc2c45512, &(0x7f0000000700)={{0x1, 0x6, 0x5, 0x0, 'syz0\x00'}, 0x0, [0x0, 0xffffffff, 0xffff, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x200080, 0x4000, 0x3, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fb, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0xfffdffc7, 0x8, 0xffff, 0x3, 0x401, 0x5, 0x3, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x65, 0x80000001, 0x0, 0x0, 0x5, 0xf1e9, 0x0, 0x0, 0x2147, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x4, 0x0, 0x1ff, 0xfffffffc, 0x0, 0x0, 0x7, 0x801, 0xffffffdf, 0x5, 0x40000000, 0x0, 0x0, 0x0, 0xfffffffd, 0x800, 0x1, 0x0, 0x0, 0x0, 0x4000003, 0x0, 0x0, 0x9, 0x200040, 0xfffffffd]}) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r10, 0x127f, &(0x7f0000000240)={0x600, 0x1000000}) 11m27.495231836s ago: executing program 0 (id=6591): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mlock(&(0x7f0000585000/0x3000)=nil, 0x3000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r1 = openat$vim2m(0xffffff9c, &(0x7f0000000b00), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc0f8565c, &(0x7f0000000000)={0x40000000, 0x7, 0x2, {0x2, @raw_data="f91fd2868ba3d9189024fc4080a304009479c0b5fce2c7215ae05771dbf9dbfa9e2ad24622489141b4803cfeb0b70909e75715a13fada32fef53473eb9ce014fbe3929ea41fdeb0ff177dfb9d3227f213a6451b667d35b03d9b8a070754676e12990b86d463a0de7513744a2bb3bf4fb6049e30f7c535637beba9566c9fd8721c48fad424a5fb17bc1419fb85e5e7dce382ba5a1ce182b419becd67c18f0ba055b8d72225df5a5e7917f8a87a52b8c2516745c462e944b0c22a7e71ecf492a0ef916598abba0e732"}}) r2 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="200000002f00090027bd700000000000040000000c00180005ac0f"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x4) fsetxattr$security_capability(r2, &(0x7f0000000400), 0x0, 0x0, 0x1) fsetxattr$security_capability(r2, &(0x7f0000000100), 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001000030400000000fedbdf2500000300", @ANYRES32=0x0, @ANYBLOB="0000be281f000000200012800b00010067656e65766500001000028004000e0005000a"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4038587a, &(0x7f0000000640)={{r1, &(0x7f0000000240)='/dev/vim2m\x00', 0x440000, &(0x7f0000000380)={@_ha_fsid={[0x46, 0x7]}, {0x7, 0x4, 0x0, 0x3}}, 0x5, &(0x7f00000003c0), &(0x7f0000000500)=0x3}, {[0x4, 0x7, 0x81, 0x59]}, 0x2, 0xb0, &(0x7f0000000540)=""/176}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc04c560f, &(0x7f0000000280)=@multiplanar_mmap={0x1, 0x2, 0x4, 0x10000, 0x7, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x0, "0000e208"}, 0x5140, 0x1, {0x0}, 0x1, 0x20000000, r5}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'team_slave_0\x00', &(0x7f0000002fc0)=@ethtool_stats}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040e04093120"], 0x7) sendmsg$BATADV_CMD_SET_HARDIF(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010027bd7000fbdbdf251000000008000300", @ANYRES32=r9, @ANYBLOB="08000600", @ANYRES32=0x0, @ANYBLOB="afbba0a9f2560791a47ec59083aaf58fdc2446d3d47dc26156a1d3c8a3cf04d1f5cab0fa079f71b0e1fb681c5e0805b3c74a82375347aa98c30797a5317862cda316bb04251a67a977728a574f144fdb7d7dd60ddef5304500"/100], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000049000100ffffffff000000000a000000", @ANYRES32=r9, @ANYBLOB="0000000008000200ffffffff080002000c00000063036a7b9c1dc2e5ed5d787bf3dc1e79c601237ea813121e1630320adb736f60ebe4fe9ac1958be3b506242325e8e0c019bdce2e128a0242b207c561532c44974636697036c987605bf8e0db67000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4005}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) 11m26.131469416s ago: executing program 0 (id=6601): syz_usb_connect$uac1(0x2, 0x9e, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201010200000020050b431740000102030109028c00030109403f0904000000010100000a2401d2000a00020102090401000001020000090401010101020000072401080505000f2402020002ff0f00f441a4440fb209050109ff037808ba072501080403000904020000010200000904020101010200000f240202000007000223c586c54c01072501000e0300e7eb3381d03a03a016e6d7d3583e5811e400"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x4000) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42804}, 0x10) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3600) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x2, 0x5, 0x9b, 0x1, 0x0, 0x5f, 0x9, 0x20, 0xa7, 0x2, 0x5, 0x9, 0x3}, {0x0, 0xfffc, 0x0, 0x0, 0x0, 0x2, 0xce, 0x0, 0x4, 0xff, 0x0, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x20, 0x0, 0x4, 0x1, 0x7, 0xfe, 0x7, 0x8, 0x7e, 0x1, 0x1000000000000004}], 0x7}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x3, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000080)) syz_emit_vhci(0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000a00)={'syz0\x00', {0x9, 0x7, 0x5, 0x1}, 0x3f, [0x9, 0x2, 0x8, 0x6, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x40000002, 0xfffffffb, 0x39, 0x747d5e13, 0x8, 0xeffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x2004, 0x3, 0x3, 0xf252, 0x80, 0x800, 0x300000, 0x7, 0xe, 0x4623f, 0xfffffffe, 0x0, 0x1ff, 0x8000, 0x0, 0xb, 0x401, 0x3, 0x7, 0x8da8, 0x2, 0x2, 0x2, 0x4, 0xe, 0x4, 0x3, 0x6, 0x4, 0x9, 0x1, 0x19df, 0x8, 0x2, 0x9, 0xffffffff, 0x7fffffff, 0x6, 0xe9, 0x5, 0x40, 0x8, 0x8, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x8001, 0x1ff, 0x1, 0x297, 0x5, 0x0, 0x6, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x0, 0x10, 0x0, 0xfffffffd, 0x5, 0x5, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x1, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xfffb, 0xcd5, 0x7, 0x1f, 0x404, 0x4, 0x8, 0x10, 0x9b2, 0x9, 0xe8b, 0x5, 0x80000001, 0x48, 0x3f92, 0x1000, 0x0, 0x11, 0x1, 0xfffffff9, 0xe58, 0x1000, 0x80040101, 0x4, 0x4, 0x5, 0x200003, 0x2, 0x5, 0xffff, 0x9, 0x8001, 0x3, 0x4, 0x3, 0x4, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0x3, 0xcac, 0x100fffd, 0x2005, 0x1, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x2003, 0xa, 0x88, 0x2, 0xffff8b7f, 0x4, 0x50, 0x2, 0x763, 0xb, 0x404, 0x0, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x63, 0xe47, 0x1, 0x1654, 0x4, 0x200, 0x2851, 0x3b, 0x20000002, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a8, 0x6, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0x4, 0xffffffff, 0x7fff, 0x2, 0xfffffff8, 0xcf, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x8002, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) write$input_event(r6, &(0x7f0000000000)={{0x77359400}, 0x15, 0x0, 0xfa000000}, 0xfe4f) bind$netlink(0xffffffffffffffff, &(0x7f0000000640)={0x10, 0x0, 0x25dfdbfc, 0x10000000}, 0xc) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="71b14aa1fd7a2c000000", @ANYRES16, @ANYBLOB="01002bbd7000fcdbdf251a00000018000180140002006c6f00"/38], 0x2c}, 0x1, 0x0, 0x0, 0x8081}, 0x4000000) 11m24.433514467s ago: executing program 0 (id=6605): unshare(0x64000600) r0 = fsopen(&(0x7f0000000180)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='[::1::/\x00', 0x0) mmap(&(0x7f000013b000/0x3000)=nil, 0x3000, 0x2000001, 0x13, 0xffffffffffffffff, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x80000027) getdents(r2, &(0x7f0000000040)=""/114, 0x72) getsockopt$bt_hci(r1, 0x11c, 0x1, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x202, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r3, 0x10c000) r4 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') lseek(r4, 0xfffffff0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000001400000004"], 0x50) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000880), 0x0, 0x404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x4c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r6, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000004, 0x8010, 0xffffffffffffffff, 0xf02e0000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000481000/0x1000)=nil) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, 0x0, 0x18) 11m9.220956948s ago: executing program 35 (id=6605): unshare(0x64000600) r0 = fsopen(&(0x7f0000000180)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='[::1::/\x00', 0x0) mmap(&(0x7f000013b000/0x3000)=nil, 0x3000, 0x2000001, 0x13, 0xffffffffffffffff, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x80000027) getdents(r2, &(0x7f0000000040)=""/114, 0x72) getsockopt$bt_hci(r1, 0x11c, 0x1, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x202, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r3, 0x10c000) r4 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') lseek(r4, 0xfffffff0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000001400000004"], 0x50) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000880), 0x0, 0x404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x4c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r6, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000004, 0x8010, 0xffffffffffffffff, 0xf02e0000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000481000/0x1000)=nil) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, 0x0, 0x18) 8.724133718s ago: executing program 6 (id=9860): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) syz_emit_ethernet(0x17b, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6000000000000000000005000000000000000000000000bbff02000000000000000100004e227d3e0f1507"], 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0xd1, 0x0, 0x0) r4 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000000c0)={0x3f, 0x0, 0x1}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000100), &(0x7f0000001140), 0x2, 0x2) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) read$FUSE(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000003b00)=""/182, 0xb6, 0x591f) sendmmsg$unix(r6, 0x0, 0x0, 0x0) unshare(0x2000200) recvmmsg(r5, &(0x7f0000006180)=[{{&(0x7f0000000380)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000001600)=""/184, 0xb8}, {&(0x7f0000001480)=""/147, 0x93}, {&(0x7f0000000480)=""/262, 0x106}, {&(0x7f0000001700)=""/137, 0x89}, {&(0x7f00000049c0)=""/4084, 0xff4}, {&(0x7f0000003340)=""/204, 0xcc}, {&(0x7f0000000280)=""/98, 0x62}], 0x7}, 0x9}, {{&(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000004900), 0x0, &(0x7f0000000300)=""/74, 0x4a}, 0xff}, {{&(0x7f0000005ec0)=@generic, 0x80, &(0x7f0000000980)=[{&(0x7f00000008c0)=""/129, 0x81}], 0x1, &(0x7f0000000640)=""/105, 0x69}, 0x10}], 0x3, 0x12002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x6921, &(0x7f00000005c0)={0x0, 0x4fdb, 0x400, 0x2, 0xfffffffd}, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000000)) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r7 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) write$dsp(r7, &(0x7f0000000780)="b8226ca7ac649c0bd85d1ebc3f5a95ecab509dd2f7a2e958fb4111fb1f9de96e5639d46a18eae343a7daec5b77f446b381394f4e84343e33b75c917d0a5bb719766bf9142fe615a360328b726be0b9b9373d230dbb953f2ade4f84e6d1d9845d6506b94a40137a0ca4c02992176ed02b12642d45f8434adccabc0d84c30e48f56a5b6d10c439e22052873f418ba746b5a7a39fc01094e8b4e4baff88254aac793dd0d6575134233b087cc2ae5cc59750d96785a00b", 0xb5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r8, 0x0) ioctl$BLKZEROOUT(r8, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) (fail_nth: 3) 7.051707855s ago: executing program 8 (id=9868): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0xf5, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}}, 0x0) 6.940241994s ago: executing program 8 (id=9870): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(0x0, 0x22) r3 = socket(0x10, 0x803, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000140)=0xfffffffe) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x4, 0x40004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x6, 0x0, [0x166f]}}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x1}}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x2, 0x9}, 0x20) close(r4) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYRESOCT=r3], 0x48}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) r6 = socket$can_j1939(0x1d, 0x2, 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0xd031, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000040), 0x80000) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000200)=0x9, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) socket$inet6_sctp(0xa, 0x5, 0x84) 6.24953271s ago: executing program 3 (id=9872): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r1, 0x0, 0x10448) syz_emit_ethernet(0x6e, &(0x7f00000190c0)=ANY=[@ANYBLOB="a1be000a0000aaaaaaaaaabb86dd601200b000383a0020010000000000150000000000000000ff020000"], 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @empty}, @nfc, @l2tp={0x2, 0x0, @empty}, 0xa00, 0x0, 0x0, 0x0, 0x51}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902"], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r8, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000940)=""/3, 0x3, 0x3, 0x4, 0x0, 0x0, 0xc08}}, 0x11c) write$UHID_DESTROY(r8, &(0x7f0000019080), 0x4) ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000, 0xfd7f}) 6.137936413s ago: executing program 7 (id=9873): inotify_init1(0x800) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)=ANY=[@ANYRES32=r0], 0x20) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000c00"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 5.883691006s ago: executing program 7 (id=9875): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x14, 0xa, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0xa6ffffff, 0x20000001}, 0x0) 5.608059095s ago: executing program 7 (id=9877): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) socket$rds(0x15, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'bridge_slave_0\x00', &(0x7f0000000580)=@ethtool_perm_addr={0x4b, 0x1b, "fc1f451cd0bb70188cbc69a7e4b032911c67e9cd8071bf41d3f16202dfad1f2ef3f99a0000400200000000daeab244fa28db4996f690944e879f"}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, 0xfa00, {0xffffffffffffffff, 0xc068}}, 0x10) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x32600) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100}, {{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) openat$vicodec0(0xffffff9c, &(0x7f00000003c0), 0x2, 0x0) setpgid(0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000280), 0x2, 0x5}}, 0x20) pwritev2(r0, &(0x7f0000000740)=[{&(0x7f0000000140)="fc00498db051a5890358e87f44deaeeee897d36467e4a72a018e1385f10169b0af637f31863e86b1cf1799d91188fa", 0x2f}, {&(0x7f00000001c0)}, {&(0x7f0000000480)="5ad90bf52240780bf8c047c8f842313a7b6fa300af8e951bb6891e261c351a77e925117ff2caddc3384219ac0913f600d1502ea88e8117b8fc574547fd17e840d5c8336caeae6a1bc68b42178ca4f64da476e6c5d02c47ff9f655f09e2d2b2279018f4728e5f20d7ffbeadfd68cfdc20e1f7a6b894ee4ca6b37b49e1dc90afc5a801c46a77cd668794ba1e9eade6d730f8ffd1d3d11af2b5021e8243133a471fe95eb6d4beeb862721dd8b2716b2f8a9252c793db1ce5711d55ce962", 0xbc}, {&(0x7f00000005c0)="2792a99e551624cf0d290bcdf07f7c3a76087dd606212e9a9e531ae186c0a5c64ff6efb3812eb30a15d65af45ad36c885d9d3db572a78ffced79688714629233155705b0194b658a7f9bc3b9d0d23e5316ae1fa35a4129f0ec06ad3c3dbbec7dc345e83e7fcbec58234f162839ec398c58896d0c3af8286eadfd092f49c3fb3a891c68b04bb821f7c6032926a9f9473788a6b6b09e154000d58b1720552dec594f924a0d5c99772075dc6fb9e087c7bb302d0c78bf5e250596b53f4bcf68c7d97c9ab2e2f514d7f329f568c6085f51953a98a0546d8db9f35a46815b0c55226df333", 0xe2}], 0x4, 0x3, 0x10, 0x1) openat$rdma_cm(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000400)={0x7, 0x8, 0xfa00, {r3, 0x2}}, 0x10) 5.491519554s ago: executing program 6 (id=9878): syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xbd7, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, 0x0) r0 = socket(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) sendmsg$nl_route(r0, 0x0, 0x0) file_getattr(0xffffffffffffffff, 0x0, &(0x7f0000006040), 0x27, 0x1000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x2}}) 5.408965229s ago: executing program 7 (id=9879): r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$video(0x0, 0x8, 0x142) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x63, &(0x7f0000000000)=0x4, 0x4) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0xc}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x80, 0x4, 0x6}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(0xffffffffffffffff, 0x4068aea3, &(0x7f00000004c0)={0x80, 0x0, 0x3}) read$FUSE(r2, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x130, 0x0, 0x7, {0xffffffffffffffff, 0x8, 0x0, '\x00', {0x7ff, 0x1, 0x1, 0x7fd, 0xee01, r4, 0x1000, '\x00', 0xa, 0x8000, 0xb4e9, 0x4, {0x88007, 0xee}, {0xc7, 0x7f4a}, {0x1, 0x9}, {0x200000008, 0x3}, 0x8001, 0x3, 0xfffffbd0, 0x9}}}}) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x33, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8) write$FUSE_INIT(r2, &(0x7f0000001200)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0x22400181, 0x785, 0x3, 0x1, 0x4}}, 0x50) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYRESDEC=r0], &(0x7f0000000240)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000000)={0xfffffffe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) socket$inet_udp(0x2, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) inotify_init() fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 5.196561959s ago: executing program 6 (id=9880): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x8, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000940)=@mangle={'mangle\x00', 0x64, 0x6, 0x51c, 0xc8, 0x38c, 0xc8, 0x27c, 0xc8, 0x454, 0x454, 0x454, 0x454, 0x454, 0x6, 0x0, {[{{@ipv6={@remote, @mcast2, [0xff], [0x0, 0xffffffff, 0x0, 0xffffff00], 'gre0\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x0, 0x7}, 0x0, 0xa4, 0xc8}, @common=@unspec=@NFQUEUE1={0x24, 'NFQUEUE\x00', 0x1, {0x599c, 0x6}}}, {{@uncond, 0x0, 0xc8, 0xec, 0x0, {}, [@common=@inet=@socket1={{0x24}, 0x1}]}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0x27c}}, {{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0x38c}}, {{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x4}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@empty, 'lo\x00', {0xd}}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @HL={0x24, 'HL\x00', 0x0, {0x2, 0x8}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x578) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) syz_emit_ethernet(0x84, &(0x7f0000000300)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x4e, 0x6, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xfffc, 0x0, 0xff6b}, {"153090dc4feca6539b724ef2494473e1b7c1a3fc4f8462015618c321d63c72d8be977b956c11cf4c03a460ddfa505b53a5933409ce9e9af8ae3f"}}}}}}}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$int_in(r2, 0x5421, &(0x7f0000000140)=0x2f) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r4 = dup(r3) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x8}}, 0x20) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x400000, 0x0, 0x3, "0062ba7d820700000000000000000000096304"}) r5 = syz_open_pts(r3, 0x80) dup3(r5, r3, 0x80000) ioctl$TCSETS(r4, 0x5402, 0x0) read(r3, &(0x7f00000005c0)=""/228, 0xe4) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000023c0)=0x2) io_setup(0xd, &(0x7f00000000c0)=0x0) io_getevents(r6, 0x9, 0x3, &(0x7f00000006c0)=[{}, {}, {}], 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002439da20cd061201a2d20102030109021b0001000000000904000001717ffe000905a1"], 0x0) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x4e20, 0x6, @dev, 0x4}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000100)={0x20004}, 0x8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000600), 0x0, &(0x7f0000000640)}, 0x4004) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 3.920060832s ago: executing program 7 (id=9882): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, 0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') pread64(r3, &(0x7f0000000500)=""/31, 0x1f, 0x40000000009) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x14, &(0x7f0000000080), 0x75bb17c2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) file_getattr(r3, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x18, 0x1400) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_ublk_add_dev(r0, 0x0, r1, r2, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x2100, 0x10000004, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x800, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc6b, 0x8, 0x0, 0x7f, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x400, 0x2, 0x367}}], 0xfff2, 0x0, 0x0) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x390}) syz_usb_connect(0x2, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x1e, 0xbb, 0x1, 0x40, 0x557, 0x2022, 0x90e9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0xca, 0x1, 0xa0, 0x5, "", [{{0x9, 0x4, 0x5d, 0x4, 0x2, 0x1d, 0xe4, 0xa2, 0xe, [], [{{0x9, 0x5, 0x7, 0xa, 0x40, 0x2, 0x7, 0x81}}, {{0x9, 0x5, 0x8d, 0x2, 0x3ff, 0xe6, 0x9, 0x2}}]}}]}}]}}, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0}) 3.341650328s ago: executing program 8 (id=9884): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000540)="900000001c001f4d154a817393278bff0a80a57802000000e503740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e00a2c5fed0759cb068d0bf46d32345653667601e2ac63e057c7b501d196e016466fcb78dcaaf6c3efed495a46215be00a71bfb117c31254732f700760700c0c80cef7cff81d158ba86c9d2896c6d3bca2d0000000b0015009e49a656", 0x90, 0x20000004, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0007c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 3.145432622s ago: executing program 8 (id=9885): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x51) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005001900010000000800160000000100080017"], 0x44}}, 0x0) 3.08595835s ago: executing program 8 (id=9886): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000680), 0x200202, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x9, 0x0, 0x7ffffdbd}]}) (async) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000200)={0x80, 0x0, r1}) (async) r3 = shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x1000) shmdt(r3) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) (async, rerun: 32) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async, rerun: 32) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) (async, rerun: 64) syz_emit_ethernet(0x95, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f00000001c0)={0x1, 0x1, [0xf74, 0x4e0, 0xe4b, 0xa20]}) (async, rerun: 64) syz_io_uring_setup(0x40617c, 0x0, &(0x7f0000000340), &(0x7f0000000380), 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) munlockall() (async) r4 = fsopen(&(0x7f00000000c0)='romfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b \xcc*\xc4y\xd8\xd8\x87\xbcL\xe5\x96 qg,)\xa2T\xdf\xff\xa3\x13i\xac\xba\n\xec>!\xcbK\x00\x00\x00', 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0xfffffffe, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x4e23, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2e}, 0x6e6bbd}, [@migrate={0x9c, 0x11, [{@in=@loopback=0xa010101, @in=@loopback, @in6=@rand_addr=' \x01\x00', @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3c, 0x3, 0x0, 0x3501, 0x2, 0x2}, {@in=@private=0xa010101, @in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x38}, @in=@rand_addr=0x64010100, 0x0, 0x4, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x6a8dd86ef567f079}, 0x4020800) r5 = socket$packet(0x11, 0x2, 0x300) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xaece, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) read(r8, &(0x7f0000000040)=""/8, 0x8) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000040)=@req3={0x8, 0x8, 0x0, 0x9, 0x7, 0x7f, 0x3}, 0x1c) 2.332025178s ago: executing program 2 (id=9890): syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xbd7, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, 0x0) r0 = socket(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) sendmsg$nl_route(r0, 0x0, 0x0) file_getattr(0xffffffffffffffff, 0x0, &(0x7f0000006040), 0x27, 0x1000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x2}}) 2.283355671s ago: executing program 2 (id=9891): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndctrl(0x0, 0x6, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000200)={0x1, &(0x7f0000000500)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) rt_sigsuspend(0x0, 0xfe68) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="35010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa0009058202"], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000540)={'dummy0\x00', &(0x7f0000000640)=@ethtool_perm_addr={0x2a}}) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000300000010ef0e0e4840000102030109022d0001010900070904007f020301021009212100ff0122770c0905810300040907010905"], &(0x7f0000000240)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x0, 0x7f, 0xb, 0x20, 0x2e}, 0x19, &(0x7f00000003c0)=ANY=[@ANYBLOB="f50f19000114100481f149e959242d7c003b37bfd175f878bb7e4cb689d4f67bf66a680003dd7de67840c8f203de47a56ec3a90421c4cb0e301c6ffb112616d1b0065e0b9cff0000000000000000000000000056760d1f"], 0x3, [{0x2b, &(0x7f0000000280)=ANY=[@ANYBLOB="2b0376ca6f4f810c31e2f05d68dfa6408c14369c6b5eda9c390e70036e10a30c01000600000095f300000000"]}, {0x75, &(0x7f0000000680)=ANY=[@ANYRES64=r0]}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x403}}]}) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000002200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3) r4 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x101, 0x0) ioctl$TIOCSIG(r5, 0x40045436, 0x2a) r6 = syz_io_uring_setup(0xefd, &(0x7f00000007c0)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100), &(0x7f0000000340), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES2(r6, 0xd, &(0x7f0000000600)={0x1, 0x1, 0x0, &(0x7f0000000580)=[{0x0}], 0x0}, 0x20) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r4, 0xc0505350, &(0x7f0000000340)={{0x0, 0x1}, {0xf}, 0x7b}) r7 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r7, 0xc0844123, &(0x7f0000002fc0)) syz_usb_control_io$hid(r2, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1e) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0205710, &(0x7f0000000000)={0x1, 0x8000, 0xfffffea6, 0x0, 0x1}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x20400, 0x0) socket(0x840000000002, 0x3, 0x100) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x8, 0x7}]}) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) syz_io_uring_setup(0x34b9, &(0x7f0000000200)={0x0, 0x9354, 0x10, 0x5, 0x50}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) 2.103508653s ago: executing program 3 (id=9892): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r2, 0x7, 0xfffffffe, 0x346b}, 0x10) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000000)=@e={0xff, 0xb, 0x2, 0xa, @SEQ_NOTEON=@note=0x25, 0x2c, 0x1, 0xff}) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000800)=""/4096) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f00000026c0)={0x0, 'hsr0\x00', {0x3}, 0x8}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000500)={'hsr0\x00', &(0x7f00000004c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x200, 0x4a39b33c}, {0x2, 0xb}]}}) 1.983404132s ago: executing program 8 (id=9893): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x40, "", [{{0x9, 0x4, 0x0, 0xfb, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x4, 0x41, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x10, 0x24}}}}}]}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x7a, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000340)='./file0\x00', 0x8, 0x0, 0xfb, 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890c, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000680)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x700, @remote}}}, 0x118) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000682000/0x1000)=nil, 0x1000}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a000040050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970"], 0x58}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x884) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492627, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000003c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_usb_connect$cdc_ecm(0x2, 0xfe, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xec, 0x1, 0x1, 0x7, 0x40, 0xdc, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x0, "60d20d"}, {0x5, 0x24, 0x0, 0xf131}, {0xd, 0x24, 0xf, 0x1, 0x8000, 0x4, 0x204, 0xfa}, [@acm={0x4, 0x24, 0x2, 0x1}, @ncm={0x6, 0x24, 0x1a, 0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0x2, 0xa0, 0xaf}, @mdlm_detail={0x8e, 0x24, 0x13, 0x2, "0f45c34f0c814bd7c7ad75d3204562d83da4546f19b3a1fbcfc17502386f82f4a74b1684d1b09ff3cab823bad771580c29aae2d6a81ed2155b9e8a4da1390addcbc106165a25d600c53f54d41882721edc44f66907b8f76bec4fe792a8162b662149851dca2a80cb30d97a32cd47ff2f7c85cda41267191e073e1937d227cf9321c63f73039483f790e9"}, @obex={0x5, 0x24, 0x15, 0x705}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x428, 0xfb, 0x3, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x4, 0x6, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xf, 0xa, 0xc}}}}}]}}]}}, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1000008, 0x11, 0xffffffffffffffff, 0x82000000) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, 0x0, 0x0) 1.963851178s ago: executing program 6 (id=9894): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) fsopen(&(0x7f0000000040)='pipefs\x00', 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c) socket$key(0xf, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb0615}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PMTUDISC={0x5}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x6}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newsa={0x150, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x1}, {}, 0x40000, 0x0, 0xa, 0x0, 0x0, 0x80}, [@algo_auth={0x48, 0x1, {{'poly1305-simd\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x2, 0x4000, 0x20}}]}, 0x150}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fc000000130005000100000000000000000000000000000000000000000000010000000000000000000000000000000100000000000000000a00808000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xfc}}, 0x0) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)='A', 0x1}], 0x1}}], 0x1, 0x4000801) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001a000100010000000000000081000000000020"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4801) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x60000881}, 0x40004) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(r5, &(0x7f0000000340)={0x7, 0x6, 0x1, 0x0, 0x1}, 0x8) openat$6lowpan_control(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) 1.541117711s ago: executing program 7 (id=9895): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) open(0x0, 0x121342, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000c80)={0x2, 0x4e21, @empty}, 0x10) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/116, 0x74) sendfile(r1, 0xffffffffffffffff, 0x0, 0xffdb) sendto$inet(r0, &(0x7f00000001c0)='\x00', 0x1, 0x4c001, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x40000) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r2) close(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa9525000) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040), 0x0) 1.489794016s ago: executing program 2 (id=9896): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000540)="900000001c001f4d154a817393278bff0a80a57802000000e503740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e00a2c5fed0759cb068d0bf46d32345653667601e2ac63e057c7b501d196e016466fcb78dcaaf6c3efed495a46215be00a71bfb117c31254732f700760700c0c80cef7cff81d158ba86c9d2896c6d3bca2d0000000b0015009e49a656", 0x90, 0x20000004, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0007c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 1.278392702s ago: executing program 2 (id=9897): r0 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="120100020000000882052500400001020301090271000301f81005080b020001052008090400000001012000092401fdff0a11004708240a0000057f00090401000001022000090401010101022000090501"], 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000540)={0x14, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x425}}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000980)=@IORING_OP_RECVMSG={0xa, 0x78, 0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe226872fe4b151b2, 0x0, {0x3}}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) fchdir(r6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x2, &(0x7f00000004c0)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r6) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file0\x00', r1}, 0x18) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000000)={0x40, 0xd, 0x2, "9e7d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.120837691s ago: executing program 3 (id=9898): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) read(r0, &(0x7f0000000300)=""/172, 0xdc) r5 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x2a35, 0x80102) ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000000180)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x40080}, 0x880) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32], 0x0, 0x9, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r9 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.events\x00', 0x275a, 0x0) write$binfmt_misc(r10, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f00000002c0)={r10, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) r11 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl(r11, 0x4048aecb, &(0x7f0000000200)="0100") 981.43456ms ago: executing program 6 (id=9899): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x10103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00']) r1 = openat$vmci(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000200)=0x80000) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x7) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x2f, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x8001}, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) 522.491557ms ago: executing program 6 (id=9900): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) io_setup(0x6b, &(0x7f0000000180)=0x0) r2 = eventfd(0xb88) io_submit(r1, 0x1, &(0x7f0000000840)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x5, r0, &(0x7f00000003c0)="2530f8107dd908c967632349697f4d83e07c49393914bf9475a74e106b6e439688242320dc17bcc0c58a8676fa0757c955b01c14a3aa7ddd3f74189e559349de6d99709a8782c15a", 0x48, 0x1, 0x0, 0x1, r2}]) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r4}) 407.649994ms ago: executing program 2 (id=9901): r0 = socket$inet6(0xa, 0x5, 0x0) r1 = openat$mice(0xffffff9c, &(0x7f0000000100), 0x100) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000050}, 0xcfaa10ffff9d63a1) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000300)) sendmmsg$inet6(r0, &(0x7f0000002840)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback, 0x200}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000240)="a045e5b9", 0x4}], 0x1, &(0x7f0000000c40)=[@tclass={{0x10, 0x29, 0x43, 0x2}}, @rthdr={{0x14, 0x29, 0x39, {0x62, 0x0, 0x2, 0x1}}}], 0x24}}, {{&(0x7f0000000880)={0xa, 0x4e22, 0x6, @mcast1, 0x400}, 0x1c, &(0x7f00000008c0)=[{&(0x7f0000001040)="38069942", 0x4}], 0x1}}], 0x2, 0x40) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x1406, 0x400, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}}, 0x20000880) 405.301144ms ago: executing program 3 (id=9902): syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xbd7, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, 0x0) r0 = socket(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) sendmsg$nl_route(r0, 0x0, 0x0) file_getattr(0xffffffffffffffff, 0x0, &(0x7f0000006040), 0x27, 0x1000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) 228.701765ms ago: executing program 3 (id=9903): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000115d3017b1dee00f3000009010000000122290009ee80030000000000fdd9e48faa34f8aa03cc0000000000000000004c5521f05abfe2db69cc7980f60df5cdc2f566cd2836c96232a2bc9078af6aea94b9"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x14, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x1, {0x9, 0x21, 0x3}}}, &(0x7f0000000080)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0xfff3, @local, 0x26020}, 0x1c) syz_open_dev$hidraw(&(0x7f0000000280), 0x5, 0x80002) unshare(0x8000000) pselect6(0x40, &(0x7f0000000100)={0x1ff, 0x1, 0x0, 0x0, 0x800, 0x200000000000000, 0x3}, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socket$netlink(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="060986a303764dbeff0040000000040020000400", @ANYRES32=0x1, @ANYBLOB="00000000006e290ed9b200000000000000000000000000000068bf4744bf680d09a6a579e76b28a47bbbce57740dfd7220a9cfc03dd5d081fe702ea127a81ec25b50ff218b1d6650ed1db9051f20b0a6bcf1a32d21a3929a54221414574c8b8effbe7c7418b83302610b1ba2e1b322f2a4725ea7c0430cb9c03274af3c0f6ae00b3bb373a5b5276e1e59b4448a1d38f1a177f6b95da441b167c08e7fd4b386e3bc9c44c7e87f36f3cef120c6a192269bc3d7aa01426cf7d594b26ceda3", @ANYRESDEC=r4, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_create_resource$binfmt(&(0x7f00000003c0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'bond0\x00'}) 0s ago: executing program 2 (id=9904): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x8, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000940)=@mangle={'mangle\x00', 0x64, 0x6, 0x51c, 0xc8, 0x38c, 0xc8, 0x27c, 0xc8, 0x454, 0x454, 0x454, 0x454, 0x454, 0x6, 0x0, {[{{@ipv6={@remote, @mcast2, [0xff], [0x0, 0xffffffff, 0x0, 0xffffff00], 'gre0\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x0, 0x7}, 0x0, 0xa4, 0xc8}, @common=@unspec=@NFQUEUE1={0x24, 'NFQUEUE\x00', 0x1, {0x599c, 0x6}}}, {{@uncond, 0x0, 0xc8, 0xec, 0x0, {}, [@common=@inet=@socket1={{0x24}, 0x1}]}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0x27c}}, {{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0x38c}}, {{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x4}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@empty, 'lo\x00', {0xd}}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @HL={0x24, 'HL\x00', 0x0, {0x2, 0x8}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x578) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) syz_emit_ethernet(0x84, &(0x7f0000000300)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x4e, 0x6, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xfffc, 0x0, 0xff6b}, {"153090dc4feca6539b724ef2494473e1b7c1a3fc4f8462015618c321d63c72d8be977b956c11cf4c03a460ddfa505b53a5933409ce9e9af8ae3f"}}}}}}}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$int_in(r2, 0x5421, &(0x7f0000000140)=0x2f) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r4 = dup(r3) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x8}}, 0x20) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x400000, 0x0, 0x3, "0062ba7d820700000000000000000000096304"}) r5 = syz_open_pts(r3, 0x80) dup3(r5, r3, 0x80000) ioctl$TCSETS(r4, 0x5402, 0x0) read(r3, &(0x7f00000005c0)=""/228, 0xe4) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000023c0)=0x2) io_setup(0xd, &(0x7f00000000c0)=0x0) io_getevents(r6, 0x9, 0x3, &(0x7f00000006c0)=[{}, {}, {}], 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002439da20cd061201a2d20102030109021b0001000000000904000001717ffe000905a1"], 0x0) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x4e20, 0x6, @dev, 0x4}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000100)={0x20004}, 0x8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000600), 0x0, &(0x7f0000000640)}, 0x4004) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) kernel console output (not intermixed with test programs): E DTV-5100 USB2.0 DVB-T' in warm state. [ 2011.132675][T11981] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2011.133616][T11981] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 2011.133675][T11981] usb 4-1: media controller created [ 2011.147062][T11981] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2011.696126][T11981] zl10353_read_register: readreg error (reg=127, ret==0) [ 2011.696194][T11981] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 2011.696208][T11981] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 2012.153873][T20308] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 2012.324421][T20308] usb 8-1: Using ep0 maxpacket: 16 [ 2012.325215][T20308] usb 8-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2012.326317][T20308] usb 8-1: config 0 has an invalid interface number: 41 but max is 0 [ 2012.326342][T20308] usb 8-1: config 0 has no interface number 0 [ 2012.326394][T20308] usb 8-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2012.326413][T20308] usb 8-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2012.326426][T20308] usb 8-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 2012.326447][T20308] usb 8-1: config 0 interface 41 has no altsetting 0 [ 2012.332315][T20308] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2012.332334][T20308] usb 8-1: Product: syz [ 2012.332344][T20308] usb 8-1: Manufacturer: syz [ 2012.332353][T20308] usb 8-1: SerialNumber: syz [ 2012.349002][T20308] usb 8-1: config 0 descriptor?? [ 2012.437740][T20308] CoreChips 8-1:0.41: probe with driver CoreChips failed with error -22 [ 2012.953864][T11981] usb 9-1: new high-speed USB device number 116 using dummy_hcd [ 2013.105974][T11981] usb 9-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 2013.107336][T11981] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2013.107362][T11981] usb 9-1: config 0 has no interfaces? [ 2013.107395][T11981] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2013.112821][T11981] usb 9-1: config 0 descriptor?? [ 2013.199188][T11981] usb 4-1: USB disconnect, device number 13 [ 2013.289211][T11981] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 2014.093144][ T5155] FAULT_INJECTION: forcing a failure. [ 2014.093144][ T5155] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2014.093186][ T5155] CPU: 1 UID: 0 PID: 5155 Comm: syz.3.9538 Tainted: G L syzkaller #0 PREEMPT(full) [ 2014.093216][ T5155] Tainted: [L]=SOFTLOCKUP [ 2014.093224][ T5155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2014.093238][ T5155] Call Trace: [ 2014.093246][ T5155] [ 2014.093256][ T5155] dump_stack_lvl+0xe8/0x150 [ 2014.093292][ T5155] should_fail_ex+0x410/0x560 [ 2014.093321][ T5155] _copy_from_iter+0x1d3/0x1660 [ 2014.093351][ T5155] ? _copy_from_iter+0x21b/0x1660 [ 2014.093375][ T5155] ? __pfx__copy_from_iter+0x10/0x10 [ 2014.093404][ T5155] ? __pfx__copy_from_iter+0x10/0x10 [ 2014.093434][ T5155] copy_page_from_iter+0x219/0x2d0 [ 2014.093463][ T5155] skb_copy_datagram_from_iter+0x2f4/0x720 [ 2014.093507][ T5155] tun_get_user+0xc7f/0x44d0 [ 2014.093573][ T5155] ? aa_file_perm+0x18b/0x15f0 [ 2014.093605][ T5155] ? aa_file_perm+0x4ed/0x15f0 [ 2014.093631][ T5155] ? __pfx_tun_get_user+0x10/0x10 [ 2014.093656][ T5155] ? __lock_acquire+0x747/0x2de0 [ 2014.093688][ T5155] ? __lock_acquire+0x747/0x2de0 [ 2014.093711][ T5155] ? ref_tracker_alloc+0x341/0x4b0 [ 2014.093736][ T5155] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 2014.093763][ T5155] ? lock_acquire+0x115/0x350 [ 2014.093783][ T5155] ? tun_get+0x1c/0x2f0 [ 2014.093808][ T5155] ? tun_get+0x1c/0x2f0 [ 2014.093827][ T5155] ? tun_get+0x1c/0x2f0 [ 2014.093851][ T5155] tun_chr_write_iter+0x113/0x200 [ 2014.093874][ T5155] vfs_write+0x612/0xba0 [ 2014.093912][ T5155] ? __pfx_vfs_write+0x10/0x10 [ 2014.093945][ T5155] ? __rcu_read_unlock+0x83/0xe0 [ 2014.093980][ T5155] ? __fget_files+0x2a/0x420 [ 2014.094017][ T5155] ksys_write+0x150/0x270 [ 2014.094058][ T5155] ? __pfx_ksys_write+0x10/0x10 [ 2014.094099][ T5155] __do_fast_syscall_32+0x27a/0x6a0 [ 2014.094125][ T5155] ? do_fast_syscall_32+0x33/0x70 [ 2014.094148][ T5155] ? asm_int80_emulation+0x1a/0x20 [ 2014.094168][ T5155] ? do_int80_emulation+0x299/0x500 [ 2014.094189][ T5155] ? trace_irq_disable+0x3b/0x140 [ 2014.094215][ T5155] do_fast_syscall_32+0x33/0x70 [ 2014.094239][ T5155] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2014.094264][ T5155] RIP: 0023:0xf7fd30ec [ 2014.094285][ T5155] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2014.094303][ T5155] RSP: 002b:00000000f545450c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 2014.094328][ T5155] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800002c0 [ 2014.094342][ T5155] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000000 [ 2014.094356][ T5155] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2014.094368][ T5155] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2014.094381][ T5155] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2014.094413][ T5155] [ 2014.811328][ T31] audit: type=1326 audit(1789739545.363:9970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5165 comm="syz.2.9542" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd70ec code=0x0 [ 2014.969505][T20308] usb 8-1: USB disconnect, device number 6 [ 2015.614295][T20308] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 2015.623898][ T982] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 2015.763997][T20308] usb 8-1: Using ep0 maxpacket: 16 [ 2015.764823][T20308] usb 8-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 2015.770919][T20308] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2015.770948][T20308] usb 8-1: Product: syz [ 2015.770963][T20308] usb 8-1: Manufacturer: syz [ 2015.770978][T20308] usb 8-1: SerialNumber: syz [ 2015.817072][ T982] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2015.818872][T20308] usb 8-1: config 0 descriptor?? [ 2015.819345][ T982] usb 4-1: not running at top speed; connect to a high speed hub [ 2015.819379][ T982] usb 4-1: New USB device found, idVendor=0557, idProduct=2022, bcdDevice=90.e9 [ 2015.865360][ T982] usb 4-1: config 202 has an invalid interface number: 93 but max is 0 [ 2015.865391][ T982] usb 4-1: config 202 has no interface number 0 [ 2015.865433][ T982] usb 4-1: config 202 interface 93 altsetting 4 endpoint 0x8D has invalid maxpacket 1023, setting to 64 [ 2015.865458][ T982] usb 4-1: config 202 interface 93 has no altsetting 0 [ 2015.871173][ T982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2015.871232][ T982] usb 4-1: Product: syz [ 2015.871248][ T982] usb 4-1: Manufacturer: syz [ 2015.871263][ T982] usb 4-1: SerialNumber: syz [ 2015.874301][ T5184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2015.879248][ T5184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2015.948466][ T5173] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2015.961075][ T10] usb 9-1: USB disconnect, device number 116 [ 2016.184775][ T982] pl2303 4-1:202.93: required interrupt-in endpoint missing [ 2016.193193][ T982] usb 4-1: USB disconnect, device number 14 [ 2016.238407][T20308] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 2016.241647][T20308] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2016.242537][T20308] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 2016.242573][T20308] usb 8-1: media controller created [ 2016.295159][T20308] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2016.452442][T20308] zl10353_read_register: readreg error (reg=127, ret==0) [ 2016.452507][T20308] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 2016.452521][T20308] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 2016.489199][T20308] usb 8-1: USB disconnect, device number 7 [ 2016.552143][T20308] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 2017.464286][T11981] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 2017.614884][T11981] usb 4-1: Using ep0 maxpacket: 16 [ 2017.615806][T11981] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2017.619697][T11981] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 2017.619725][T11981] usb 4-1: config 0 has no interface number 0 [ 2017.619770][T11981] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2017.619796][T11981] usb 4-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2017.619819][T11981] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 2017.619842][T11981] usb 4-1: config 0 interface 41 has no altsetting 0 [ 2017.631645][T11981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2017.631674][T11981] usb 4-1: Product: syz [ 2017.631688][T11981] usb 4-1: Manufacturer: syz [ 2017.631701][T11981] usb 4-1: SerialNumber: syz [ 2017.668497][T11981] usb 4-1: config 0 descriptor?? [ 2017.680263][T11981] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -22 [ 2019.002191][ T5209] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9555'. [ 2019.177394][ T31] audit: type=1326 audit(1789739549.733:9971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5216 comm="syz.6.9558" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf703f0ec code=0x0 [ 2019.193871][T29634] Bluetooth: hci2: command 0x0406 tx timeout [ 2019.623887][T20308] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 2019.774983][T20308] usb 8-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 2019.776697][T20308] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2019.776723][T20308] usb 8-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 2019.776761][T20308] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2020.123474][ T3123] Bluetooth: hci2: unexpected event for opcode 0x1405 [ 2020.138910][T29634] Bluetooth: hci2: hardware error 0x82 [ 2020.230279][ T5232] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9562'. [ 2020.242601][T27034] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discove! [ 2020.242758][ T5227] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discove" [ 2020.291414][T11981] usb 4-1: USB disconnect, device number 15 [ 2020.380969][ T5235] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9563'. [ 2021.041166][ T5248] random: crng reseeded on system resumption [ 2021.094789][ T5248] sctp: [Deprecated]: syz.6.9568 (pid 5248) Use of int in max_burst socket option. [ 2021.094789][ T5248] Use struct sctp_assoc_value instead [ 2021.123167][ T5248] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9568'. [ 2021.412649][ T5259] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9569'. [ 2021.620579][ T5259] team0: Port device team_slave_0 removed [ 2022.151091][ T5266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9571'. [ 2022.244658][T29634] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 2022.662351][T20308] usb 8-1: USB disconnect, device number 8 [ 2022.950815][ T5273] FAULT_INJECTION: forcing a failure. [ 2022.950815][ T5273] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2022.950844][ T5273] CPU: 0 UID: 0 PID: 5273 Comm: syz.6.9574 Tainted: G L syzkaller #0 PREEMPT(full) [ 2022.950862][ T5273] Tainted: [L]=SOFTLOCKUP [ 2022.950867][ T5273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2022.950875][ T5273] Call Trace: [ 2022.950881][ T5273] [ 2022.950887][ T5273] dump_stack_lvl+0xe8/0x150 [ 2022.950910][ T5273] should_fail_ex+0x410/0x560 [ 2022.950928][ T5273] prepare_alloc_pages+0x223/0x600 [ 2022.950945][ T5273] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 2022.950961][ T5273] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2022.950977][ T5273] ? __pfx_policy_nodemask+0x10/0x10 [ 2022.950994][ T5273] ? __lock_acquire+0x747/0x2de0 [ 2022.951029][ T5273] alloc_pages_mpol+0x21e/0x390 [ 2022.951047][ T5273] folio_alloc_mpol_noprof+0x39/0x160 [ 2022.951064][ T5273] vma_alloc_folio_noprof+0xe1/0x1e0 [ 2022.951080][ T5273] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 2022.951111][ T5273] ? lock_acquire+0x115/0x350 [ 2022.951127][ T5273] do_pte_missing+0x173a/0x34b0 [ 2022.951157][ T5273] handle_mm_fault+0x1a53/0x3750 [ 2022.951206][ T5273] ? handle_mm_fault+0xf1/0x3750 [ 2022.951235][ T5273] ? __pfx_handle_mm_fault+0x10/0x10 [ 2022.951251][ T5273] ? follow_page_pte+0x748/0xf10 [ 2022.951272][ T5273] ? __pfx_follow_page_pte+0x10/0x10 [ 2022.951305][ T5273] __get_user_pages+0x1675/0x2750 [ 2022.951354][ T5273] populate_vma_page_range+0x2be/0x3c0 [ 2022.951371][ T5273] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2022.951388][ T5273] ? down_read+0x2be/0x330 [ 2022.951406][ T5273] __mm_populate+0x25f/0x390 [ 2022.951422][ T5273] ? __pfx___mm_populate+0x10/0x10 [ 2022.951443][ T5273] do_mlock+0x622/0x730 [ 2022.951463][ T5273] ? __pfx_do_mlock+0x10/0x10 [ 2022.951481][ T5273] ? fput+0xa0/0xd0 [ 2022.951495][ T5273] ? ksys_write+0x242/0x270 [ 2022.951520][ T5273] __ia32_sys_mlock+0x76/0xa0 [ 2022.951535][ T5273] __do_fast_syscall_32+0x27a/0x6a0 [ 2022.951550][ T5273] ? do_fast_syscall_32+0x33/0x70 [ 2022.951563][ T5273] ? asm_int80_emulation+0x1a/0x20 [ 2022.951575][ T5273] ? do_int80_emulation+0x299/0x500 [ 2022.951587][ T5273] ? trace_irq_disable+0x3b/0x140 [ 2022.951602][ T5273] do_fast_syscall_32+0x33/0x70 [ 2022.951616][ T5273] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2022.951631][ T5273] RIP: 0023:0xf703f0ec [ 2022.951643][ T5273] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2022.951654][ T5273] RSP: 002b:00000000f542d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000096 [ 2022.951669][ T5273] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000800000 [ 2022.951679][ T5273] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2022.951686][ T5273] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2022.951694][ T5273] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2022.951701][ T5273] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2022.951720][ T5273] [ 2023.143870][T20308] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 2023.293991][T20308] usb 8-1: Using ep0 maxpacket: 16 [ 2023.295866][T20308] usb 8-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2023.297938][T20308] usb 8-1: config 0 has an invalid interface number: 41 but max is 0 [ 2023.297955][T20308] usb 8-1: config 0 has no interface number 0 [ 2023.297981][T20308] usb 8-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2023.297996][T20308] usb 8-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2023.298009][T20308] usb 8-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 2023.298024][T20308] usb 8-1: config 0 interface 41 has no altsetting 0 [ 2023.301553][T20308] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2023.301573][T20308] usb 8-1: Product: syz [ 2023.301582][T20308] usb 8-1: Manufacturer: syz [ 2023.301590][T20308] usb 8-1: SerialNumber: syz [ 2023.324770][T20308] usb 8-1: config 0 descriptor?? [ 2023.356163][T20308] CoreChips 8-1:0.41: probe with driver CoreChips failed with error -22 [ 2024.131119][ T5290] vivid-004: ================= START STATUS ================= [ 2024.131136][ T5290] vivid-004: Radio HW Seek Mode: Bounded [ 2024.131152][ T5290] vivid-004: Radio Programmable HW Seek: false [ 2024.131164][ T5290] vivid-004: RDS Rx I/O Mode: Block I/O [ 2024.131177][ T5290] vivid-004: Generate RBDS Instead of RDS: false [ 2024.131190][ T5290] vivid-004: RDS Reception: true [ 2024.131202][ T5290] vivid-004: RDS Program Type: 0 inactive [ 2024.131218][ T5290] vivid-004: RDS PS Name: inactive [ 2024.131232][ T5290] vivid-004: RDS Radio Text: inactive [ 2024.131247][ T5290] vivid-004: RDS Traffic Announcement: false inactive [ 2024.131261][ T5290] vivid-004: RDS Traffic Program: false inactive [ 2024.131276][ T5290] vivid-004: RDS Music: false inactive [ 2024.131291][ T5290] vivid-004: ================== END STATUS ================== [ 2024.132661][ T5290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2024.227704][ T5290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2024.452818][ T5297] syz_tun: entered allmulticast mode [ 2024.501263][ T5297] dvmrp6: entered allmulticast mode [ 2024.959144][ T5299] bond1 (unregistering): Released all slaves [ 2025.079789][ T5291] syz_tun: left allmulticast mode [ 2025.334087][T29634] Bluetooth: hci5: hardware error 0x82 [ 2025.527356][T27032] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discove! [ 2025.558789][ T5306] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discove" [ 2025.596071][ T31] audit: type=1326 audit(1789739556.153:9972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5317 comm="syz.3.9586" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd30ec code=0x0 [ 2025.837662][T30166] usb 8-1: USB disconnect, device number 9 [ 2025.905923][ T5321] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9587'. [ 2026.313969][ T9] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 2026.463935][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 2026.464739][ T9] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2026.466116][ T9] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2026.466149][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2026.466173][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2026.466196][ T9] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2026.466239][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2026.725256][ T9] usb 8-1: GET_CAPABILITIES returned 0 [ 2026.725310][ T9] usbtmc 8-1:16.0: can't read capabilities [ 2026.895121][ T5343] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 2026.951724][ T5325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2026.967638][ T5325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2026.990722][T30166] usb 8-1: USB disconnect, device number 10 [ 2027.168464][ T5348] netlink: 'syz.3.9597': attribute type 1 has an invalid length. [ 2027.293482][ T5348] bond2: entered promiscuous mode [ 2027.300756][ T5348] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2027.398923][ T5350] bond2: (slave bridge1): making interface the new active one [ 2027.398949][ T5350] bridge1: entered promiscuous mode [ 2027.429338][ T5350] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 2027.439185][T29634] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 2027.585496][T20308] usb 9-1: new high-speed USB device number 117 using dummy_hcd [ 2027.734901][T20308] usb 9-1: Using ep0 maxpacket: 16 [ 2027.735689][T20308] usb 9-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2027.736679][T20308] usb 9-1: config 0 has an invalid interface number: 41 but max is 0 [ 2027.736710][T20308] usb 9-1: config 0 has no interface number 0 [ 2027.736736][T20308] usb 9-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2027.736752][T20308] usb 9-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2027.736765][T20308] usb 9-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 2027.736779][T20308] usb 9-1: config 0 interface 41 has no altsetting 0 [ 2027.743223][T20308] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2027.743242][T20308] usb 9-1: Product: syz [ 2027.743252][T20308] usb 9-1: Manufacturer: syz [ 2027.743260][T20308] usb 9-1: SerialNumber: syz [ 2027.789759][T20308] usb 9-1: config 0 descriptor?? [ 2027.815812][T20308] CoreChips 9-1:0.41: probe with driver CoreChips failed with error -22 [ 2028.394653][ T5367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2028.394955][ T5367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2028.708069][ T31] audit: type=1326 audit(1789739559.263:9973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5371 comm="syz.3.9604" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd30ec code=0x0 [ 2028.918233][ T5370] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9602'. [ 2028.946578][ T5380] Invalid logical block size (2304) [ 2029.499546][ T5390] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9609'. [ 2030.038197][ T5400] netlink: 'syz.6.9613': attribute type 6 has an invalid length. [ 2030.357830][ T9] usb 9-1: USB disconnect, device number 117 [ 2030.400117][ T5405] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 2030.466557][ T5412] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 2030.637132][ T5400] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2030.637163][ T5400] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2030.638506][ T5400] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2030.638527][ T5400] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2031.690182][ T31] audit: type=1326 audit(1789739562.243:9974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5436 comm="syz.6.9621" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf703f0ec code=0x0 [ 2031.764992][ T5437] bridge0: port 3(wlan1) entered blocking state [ 2031.765193][ T5437] bridge0: port 3(wlan1) entered disabled state [ 2031.765399][ T5437] mac80211_hwsim hwsim194 wlan1: entered allmulticast mode [ 2031.767458][ T5437] mac80211_hwsim hwsim194 wlan1: entered promiscuous mode [ 2031.809781][ T5437] mac80211_hwsim hwsim194 wlan1 (unregistering): left allmulticast mode [ 2031.809816][ T5437] mac80211_hwsim hwsim194 wlan1 (unregistering): left promiscuous mode [ 2031.809949][ T5437] bridge0: port 3(wlan1) entered disabled state [ 2032.217735][ T5447] random: crng reseeded on system resumption [ 2032.309438][ T5447] sctp: [Deprecated]: syz.2.9624 (pid 5447) Use of int in max_burst socket option. [ 2032.309438][ T5447] Use struct sctp_assoc_value instead [ 2032.353163][ T5447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9624'. [ 2032.438776][ T5448] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9623'. [ 2032.732791][ T5457] netlink: 'syz.6.9627': attribute type 7 has an invalid length. [ 2032.732818][ T5457] netlink: 'syz.6.9627': attribute type 8 has an invalid length. [ 2032.752022][ T5457] tipc: Trying to set illegal importance in message [ 2032.954320][ T10] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 2033.113893][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 2033.116583][ T10] usb 8-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2033.117732][ T10] usb 8-1: config 0 has an invalid interface number: 41 but max is 0 [ 2033.117759][ T10] usb 8-1: config 0 has no interface number 0 [ 2033.117804][ T10] usb 8-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2033.117830][ T10] usb 8-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2033.117852][ T10] usb 8-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 2033.117876][ T10] usb 8-1: config 0 interface 41 has no altsetting 0 [ 2033.122429][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2033.122456][ T10] usb 8-1: Product: syz [ 2033.122471][ T10] usb 8-1: Manufacturer: syz [ 2033.122486][ T10] usb 8-1: SerialNumber: syz [ 2033.156818][ T5466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2033.175524][T29634] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 2033.228030][ T5466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2033.228060][ T10] usb 8-1: config 0 descriptor?? [ 2033.232217][ T10] CoreChips 8-1:0.41: probe with driver CoreChips failed with error -22 [ 2033.571685][ T5479] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9634'. [ 2033.745539][ T5482] random: crng reseeded on system resumption [ 2033.791990][ T5483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2033.792532][ T5483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2033.861584][ T5482] sctp: [Deprecated]: syz.8.9635 (pid 5482) Use of int in max_burst socket option. [ 2033.861584][ T5482] Use struct sctp_assoc_value instead [ 2033.917477][ T5482] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9635'. [ 2033.985672][ T31] audit: type=1326 audit(1789739564.543:9975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5487 comm="syz.2.9637" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd70ec code=0x0 [ 2034.383979][ T9] usb 9-1: new full-speed USB device number 118 using dummy_hcd [ 2034.549887][ T9] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2034.571561][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2034.571592][ T9] usb 9-1: Product: syz [ 2034.571609][ T9] usb 9-1: Manufacturer: syz [ 2034.571624][ T9] usb 9-1: SerialNumber: syz [ 2034.602398][ T9] usb 9-1: config 0 descriptor?? [ 2034.805085][ T9] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2035.657957][ T5516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2035.658494][ T5516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2035.717853][ T982] usb 8-1: USB disconnect, device number 11 [ 2036.093564][ T9] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2036.111042][ T9] usb 9-1: USB disconnect, device number 118 [ 2036.163947][ T982] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 2036.315956][ T982] usb 8-1: Using ep0 maxpacket: 32 [ 2036.321558][ T982] usb 8-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=d2.a2 [ 2036.323808][ T982] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2036.323855][ T982] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2036.367563][ T982] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2036.367594][ T982] usb 8-1: Product: syz [ 2036.367610][ T982] usb 8-1: Manufacturer: syz [ 2036.367624][ T982] usb 8-1: SerialNumber: syz [ 2036.373257][ T982] usb 8-1: config 0 descriptor?? [ 2036.405087][ T982] keyspan 8-1:0.0: Keyspan 1 port adapter converter detected [ 2036.405262][ T982] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 87 [ 2036.405316][ T982] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 7 [ 2036.408794][ T982] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 81 [ 2036.408856][ T982] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 1 [ 2036.408905][ T982] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 2 [ 2036.408954][ T982] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 85 [ 2036.409002][ T982] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 5 [ 2036.413593][ T982] usb 8-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2036.552987][ T5529] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9650'. [ 2036.664694][ T982] usb 8-1: USB disconnect, device number 12 [ 2036.673170][ T982] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2036.673621][ T982] keyspan 8-1:0.0: device disconnected [ 2036.867590][ T31] audit: type=1326 audit(1789739567.423:9976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5535 comm="syz.2.9652" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd70ec code=0x0 [ 2037.087815][ T5542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9654'. [ 2037.602099][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.602141][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.629309][ T5555] netlink: 84 bytes leftover after parsing attributes in process `syz.3.9659'. [ 2037.713838][ T10] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 2037.870512][ T31] audit: type=1326 audit(1789739568.423:9977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5560 comm="syz.2.9671" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd70ec code=0x0 [ 2037.898431][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 2037.906211][ T10] usb 8-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2037.907586][ T10] usb 8-1: config 0 has an invalid interface number: 41 but max is 0 [ 2037.907613][ T10] usb 8-1: config 0 has no interface number 0 [ 2037.907657][ T10] usb 8-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2037.907683][ T10] usb 8-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2037.907706][ T10] usb 8-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 2037.907729][ T10] usb 8-1: config 0 interface 41 has no altsetting 0 [ 2037.931573][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2037.931603][ T10] usb 8-1: Product: syz [ 2037.931618][ T10] usb 8-1: Manufacturer: syz [ 2037.931633][ T10] usb 8-1: SerialNumber: syz [ 2038.003601][ T10] usb 8-1: config 0 descriptor?? [ 2038.014584][ T10] CoreChips 8-1:0.41: probe with driver CoreChips failed with error -22 [ 2038.092656][ T5565] FAULT_INJECTION: forcing a failure. [ 2038.092656][ T5565] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2038.092695][ T5565] CPU: 0 UID: 0 PID: 5565 Comm: syz.6.9662 Tainted: G L syzkaller #0 PREEMPT(full) [ 2038.092723][ T5565] Tainted: [L]=SOFTLOCKUP [ 2038.092732][ T5565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2038.092745][ T5565] Call Trace: [ 2038.092754][ T5565] [ 2038.092764][ T5565] dump_stack_lvl+0xe8/0x150 [ 2038.092802][ T5565] should_fail_ex+0x410/0x560 [ 2038.092831][ T5565] prepare_alloc_pages+0x223/0x600 [ 2038.092860][ T5565] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 2038.092892][ T5565] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2038.092916][ T5565] ? __pfx_policy_nodemask+0x10/0x10 [ 2038.092939][ T5565] ? snd_seq_timer_open+0x49a/0x620 [ 2038.092976][ T5565] alloc_pages_mpol+0x21e/0x390 [ 2038.093004][ T5565] ? snd_seq_oss_readq_new+0x3c/0x1d0 [ 2038.093028][ T5565] ___kmalloc_large_node+0x4f/0x120 [ 2038.093062][ T5565] __kmalloc_large_node_noprof+0x18/0x90 [ 2038.093085][ T5565] __kmalloc_noprof+0x3fb/0x720 [ 2038.093105][ T5565] ? snd_seq_queue_alloc+0x57c/0x740 [ 2038.093145][ T5565] ? snd_seq_oss_readq_new+0x3c/0x1d0 [ 2038.093174][ T5565] snd_seq_oss_readq_new+0x3c/0x1d0 [ 2038.093198][ T5565] snd_seq_oss_open+0x803/0xf40 [ 2038.093231][ T5565] ? __pfx_snd_seq_oss_open+0x10/0x10 [ 2038.093297][ T5565] ? rcu_is_watching+0x16/0xb0 [ 2038.093322][ T5565] ? trace_contention_end+0x3d/0x140 [ 2038.093372][ T5565] ? __pfx___mutex_lock+0x10/0x10 [ 2038.093401][ T5565] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 2038.093429][ T5565] ? __pfx_free_devinfo+0x10/0x10 [ 2038.093455][ T5565] ? do_raw_spin_unlock+0xf5/0x200 [ 2038.093488][ T5565] ? soundcore_open+0x2da/0x490 [ 2038.093519][ T5565] odev_open+0x67/0xa0 [ 2038.093544][ T5565] chrdev_open+0x4d9/0x600 [ 2038.093570][ T5565] ? __pfx_chrdev_open+0x10/0x10 [ 2038.093595][ T5565] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 2038.093623][ T5565] ? __pfx_chrdev_open+0x10/0x10 [ 2038.093644][ T5565] do_dentry_open+0x816/0x1380 [ 2038.093682][ T5565] vfs_open+0x3b/0x340 [ 2038.093703][ T5565] ? path_openat+0x1428/0x1d60 [ 2038.093726][ T5565] path_openat+0x1443/0x1d60 [ 2038.093767][ T5565] do_file_open+0x23e/0x4a0 [ 2038.093796][ T5565] ? __pfx_do_file_open+0x10/0x10 [ 2038.093840][ T5565] ? _raw_spin_unlock+0x28/0x50 [ 2038.093869][ T5565] ? alloc_fd+0x651/0x6c0 [ 2038.093907][ T5565] do_sys_openat2+0x115/0x200 [ 2038.093937][ T5565] ? __pfx_do_sys_openat2+0x10/0x10 [ 2038.093965][ T5565] ? ksys_write+0x242/0x270 [ 2038.093998][ T5565] ? __pfx_ksys_write+0x10/0x10 [ 2038.094033][ T5565] __ia32_compat_sys_openat+0x131/0x160 [ 2038.094067][ T5565] do_int80_emulation+0x198/0x500 [ 2038.094091][ T5565] ? trace_irq_disable+0x3b/0x140 [ 2038.094111][ T5565] ? asm_int80_emulation+0x1a/0x20 [ 2038.094144][ T5565] ? clear_bhb_loop+0x70/0xc0 [ 2038.094166][ T5565] ? clear_bhb_loop+0x70/0xc0 [ 2038.094192][ T5565] asm_int80_emulation+0x1a/0x20 [ 2038.094213][ T5565] RIP: 0023:0xf71775ab [ 2038.094233][ T5565] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 2038.094251][ T5565] RSP: 002b:00000000f542d03c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 2038.094276][ T5565] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f542d100 [ 2038.094291][ T5565] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2038.094303][ T5565] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2038.094316][ T5565] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2038.094329][ T5565] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2038.094363][ T5565] [ 2038.125084][T20308] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 2038.277775][T20308] usb 4-1: Using ep0 maxpacket: 32 [ 2038.279112][T20308] usb 4-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=d2.a2 [ 2038.283017][T20308] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 2038.283047][T20308] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2038.294001][T20308] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2038.294027][T20308] usb 4-1: Product: syz [ 2038.294041][T20308] usb 4-1: Manufacturer: syz [ 2038.294054][T20308] usb 4-1: SerialNumber: syz [ 2038.308014][T20308] usb 4-1: config 0 descriptor?? [ 2038.326181][T20308] keyspan 4-1:0.0: Keyspan 1 port adapter converter detected [ 2038.327595][T20308] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 87 [ 2038.327678][T20308] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7 [ 2038.332972][T20308] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 2038.333062][T20308] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 2038.333144][T20308] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 85 [ 2038.338740][T20308] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 5 [ 2038.345960][T20308] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2038.608360][ T5569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2038.608898][ T5569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2038.644016][T30166] usb 4-1: USB disconnect, device number 16 [ 2038.676507][T30166] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2038.679095][T30166] keyspan 4-1:0.0: device disconnected [ 2040.501122][T30166] usb 8-1: USB disconnect, device number 13 [ 2040.513847][ T10] usb 9-1: new high-speed USB device number 119 using dummy_hcd [ 2040.521773][ T5594] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9669'. [ 2040.623866][ T9] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 2040.683788][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 2040.684440][ T10] usb 9-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=d2.a2 [ 2040.685979][ T10] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2040.687912][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2040.687929][ T10] usb 9-1: Product: syz [ 2040.687939][ T10] usb 9-1: Manufacturer: syz [ 2040.687947][ T10] usb 9-1: SerialNumber: syz [ 2040.745661][ T10] usb 9-1: config 0 descriptor?? [ 2040.749379][ T10] keyspan 9-1:0.0: Keyspan 1 port adapter converter detected [ 2040.749661][ T10] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 87 [ 2040.749743][ T10] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 7 [ 2040.752319][ T10] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 81 [ 2040.752417][ T10] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 1 [ 2040.752509][ T10] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 2 [ 2040.752609][ T10] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 85 [ 2040.752703][ T10] keyspan 9-1:0.0: found no endpoint descriptor for endpoint 5 [ 2040.835156][ T10] usb 9-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2040.837347][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2040.837899][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 2040.837935][ T9] usb 4-1: New USB device found, idVendor=0557, idProduct=2022, bcdDevice=90.e9 [ 2040.839436][ T9] usb 4-1: config 202 has an invalid interface number: 93 but max is 0 [ 2040.839462][ T9] usb 4-1: config 202 has no interface number 0 [ 2040.840473][ T9] usb 4-1: config 202 interface 93 altsetting 4 endpoint 0x8D has invalid maxpacket 1023, setting to 64 [ 2040.840514][ T9] usb 4-1: config 202 interface 93 has no altsetting 0 [ 2040.910859][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2040.910892][ T9] usb 4-1: Product: syz [ 2040.910907][ T9] usb 4-1: Manufacturer: syz [ 2040.910922][ T9] usb 4-1: SerialNumber: syz [ 2040.942971][ T5590] raw-gadget.5 gadget.3: fail, usb_ep_enable returned -22 [ 2040.971738][ T10] usb 9-1: USB disconnect, device number 119 [ 2040.989792][ T10] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2040.991127][ T10] keyspan 9-1:0.0: device disconnected [ 2041.099157][ T5596] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9670'. [ 2041.186193][ T9] pl2303 4-1:202.93: required interrupt-in endpoint missing [ 2041.204763][ T9] usb 4-1: USB disconnect, device number 17 [ 2041.211879][ T5596] gtp0: entered promiscuous mode [ 2041.211905][ T5596] gtp0: entered allmulticast mode [ 2041.661013][ T31] audit: type=1326 audit(1789739572.213:9978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5611 comm="syz.8.9675" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa40ec code=0x0 [ 2041.856327][ T9] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 2042.013993][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 2042.017549][ T9] usb 8-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 2042.022740][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2042.022768][ T9] usb 8-1: Product: syz [ 2042.022784][ T9] usb 8-1: Manufacturer: syz [ 2042.022799][ T9] usb 8-1: SerialNumber: syz [ 2042.069471][ T9] usb 8-1: config 0 descriptor?? [ 2042.492790][ T9] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 2042.510842][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2042.511762][ T9] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 2042.511817][ T9] usb 8-1: media controller created [ 2042.552403][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2042.573805][ T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 2042.701231][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 2042.701333][ T9] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 2042.701349][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 2042.731630][ T9] usb 8-1: USB disconnect, device number 14 [ 2042.745675][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 2042.746431][ T10] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2042.748723][ T10] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 2042.748749][ T10] usb 4-1: config 0 has no interface number 0 [ 2042.748792][ T10] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2042.748818][ T10] usb 4-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2042.748840][ T10] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 2042.748864][ T10] usb 4-1: config 0 interface 41 has no altsetting 0 [ 2042.752752][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2042.752778][ T10] usb 4-1: Product: syz [ 2042.752794][ T10] usb 4-1: Manufacturer: syz [ 2042.752809][ T10] usb 4-1: SerialNumber: syz [ 2042.851674][ T10] usb 4-1: config 0 descriptor?? [ 2042.867772][ T10] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -22 [ 2042.900973][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 2042.903879][T11981] usb 9-1: new high-speed USB device number 120 using dummy_hcd [ 2043.054181][T11981] usb 9-1: device descriptor read/64, error -71 [ 2043.313799][T11981] usb 9-1: new high-speed USB device number 121 using dummy_hcd [ 2043.453825][T11981] usb 9-1: device descriptor read/64, error -71 [ 2043.487848][ T5640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2043.512160][ T5640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2043.564202][T11981] usb usb9-port1: attempt power cycle [ 2043.903900][T30166] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 2043.924933][T11981] usb 9-1: new high-speed USB device number 122 using dummy_hcd [ 2043.954760][T11981] usb 9-1: device descriptor read/8, error -71 [ 2044.056513][T30166] usb 8-1: Using ep0 maxpacket: 32 [ 2044.057398][T30166] usb 8-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=d2.a2 [ 2044.059078][T30166] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2044.061856][T30166] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2044.061881][T30166] usb 8-1: Product: syz [ 2044.061896][T30166] usb 8-1: Manufacturer: syz [ 2044.061911][T30166] usb 8-1: SerialNumber: syz [ 2044.065528][T30166] usb 8-1: config 0 descriptor?? [ 2044.070169][T30166] keyspan 8-1:0.0: Keyspan 1 port adapter converter detected [ 2044.070380][T30166] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 87 [ 2044.070458][T30166] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 7 [ 2044.078444][T30166] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 81 [ 2044.078544][T30166] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 1 [ 2044.081121][T30166] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 2 [ 2044.081212][T30166] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 85 [ 2044.081294][T30166] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 5 [ 2044.127962][T30166] usb 8-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2044.223814][T11981] usb 9-1: new high-speed USB device number 123 using dummy_hcd [ 2044.244648][T11981] usb 9-1: device descriptor read/8, error -71 [ 2044.306930][T30166] usb 8-1: USB disconnect, device number 15 [ 2044.335387][T30166] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2044.340646][T30166] keyspan 8-1:0.0: device disconnected [ 2044.359563][T11981] usb usb9-port1: unable to enumerate USB device [ 2045.250929][ T5653] vivid-000: ================= START STATUS ================= [ 2045.250953][ T5653] vivid-000: Generate PTS: true [ 2045.250979][ T5653] vivid-000: Generate SCR: true [ 2045.251000][ T5653] tpg source WxH: 720x576 (Y'CbCr) [ 2045.251014][ T5653] tpg field: 4 [ 2045.251022][ T5653] tpg crop: (0,0)/720x576 [ 2045.251037][ T5653] tpg compose: (0,0)/512x2304 [ 2045.251050][ T5653] tpg colorspace: 1 [ 2045.251059][ T5653] tpg transfer function: 3/3 [ 2045.251070][ T5653] tpg Y'CbCr encoding: 0/1 [ 2045.251081][ T5653] tpg quantization: 0/2 [ 2045.251091][ T5653] tpg RGB range: 0/1 [ 2045.251101][ T5653] vivid-000: ================== END STATUS ================== [ 2045.398914][ T982] usb 4-1: USB disconnect, device number 18 [ 2045.571386][ T31] audit: type=1326 audit(1789739576.123:9979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5666 comm="syz.6.9693" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf703f0ec code=0x0 [ 2046.126321][T23972] usb 9-1: new high-speed USB device number 124 using dummy_hcd [ 2046.283977][T23972] usb 9-1: Using ep0 maxpacket: 16 [ 2046.286510][T23972] usb 9-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 2046.292719][T23972] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2046.292747][T23972] usb 9-1: Product: syz [ 2046.292762][T23972] usb 9-1: Manufacturer: syz [ 2046.292779][T23972] usb 9-1: SerialNumber: syz [ 2046.337009][T23972] usb 9-1: config 0 descriptor?? [ 2046.773106][T23972] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 2046.783621][T23972] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2046.785934][T23972] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 2046.785993][T23972] usb 9-1: media controller created [ 2046.798862][T23972] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2046.913937][ T5775] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 2046.984364][T23972] zl10353_read_register: readreg error (reg=127, ret==0) [ 2046.984430][T23972] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 2046.984445][T23972] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 2046.987938][T23972] usb 9-1: USB disconnect, device number 124 [ 2047.000257][ T9] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 2047.063372][T23972] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 2047.074021][ T5775] usb 4-1: Using ep0 maxpacket: 16 [ 2047.074768][ T5775] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2047.076082][ T5775] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2047.076106][ T5775] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2047.079378][ T5775] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2047.079402][ T5775] usb 4-1: Product: syz [ 2047.079416][ T5775] usb 4-1: Manufacturer: syz [ 2047.079431][ T5775] usb 4-1: SerialNumber: syz [ 2047.151639][ T5775] usb 4-1: 0:2 : does not exist [ 2047.165062][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 2047.167838][ T9] usb 8-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=d2.a2 [ 2047.168898][ T9] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2047.172898][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2047.172916][ T9] usb 8-1: Product: syz [ 2047.172924][ T9] usb 8-1: Manufacturer: syz [ 2047.172933][ T9] usb 8-1: SerialNumber: syz [ 2047.191020][ T9] usb 8-1: config 0 descriptor?? [ 2047.241404][ T9] keyspan 8-1:0.0: Keyspan 1 port adapter converter detected [ 2047.241564][ T9] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 87 [ 2047.241608][ T9] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 7 [ 2047.242873][ T9] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 81 [ 2047.242944][ T9] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 1 [ 2047.243000][ T9] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 2 [ 2047.243067][ T9] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 85 [ 2047.243115][ T9] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 5 [ 2047.260233][ T9] usb 8-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2047.355226][ T5775] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 2047.413952][ T5775] usb 4-1: USB disconnect, device number 19 [ 2047.447392][ T982] usb 8-1: USB disconnect, device number 16 [ 2047.475400][ T982] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2047.476209][ T982] keyspan 8-1:0.0: device disconnected [ 2047.749731][ T5693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2047.759275][ T5693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2047.762418][ T5693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2047.765405][ T5693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2048.415694][ T31] audit: type=1326 audit(1789739578.973:9980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5702 comm="syz.7.9706" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f350ec code=0x0 [ 2048.465311][T20308] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 2048.594030][T20308] usb 4-1: device descriptor read/64, error -71 [ 2048.855594][T20308] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 2048.983845][T20308] usb 4-1: device descriptor read/64, error -71 [ 2049.095152][T20308] usb usb4-port1: attempt power cycle [ 2049.265856][ T5713] gretap0: entered promiscuous mode [ 2049.267003][ T5713] A link change request failed with some changes committed already. Interface vlan2 may have been left with an inconsistent configuration, please check. [ 2049.433868][T20308] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 2049.454601][T20308] usb 4-1: device descriptor read/8, error -71 [ 2049.577225][ T982] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 2049.693885][T20308] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 2049.714638][T20308] usb 4-1: device descriptor read/8, error -71 [ 2049.730852][ T982] usb 8-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 2049.732287][ T982] usb 8-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 2049.732340][ T982] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2049.732364][ T982] usb 8-1: config 4 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 2049.732388][ T982] usb 8-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xDC, changing to 0x8C [ 2049.732414][ T982] usb 8-1: config 4 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 243 [ 2049.786150][ T982] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2049.786178][ T982] usb 8-1: Product: syz [ 2049.786193][ T982] usb 8-1: Manufacturer: syz [ 2049.786208][ T982] usb 8-1: SerialNumber: syz [ 2049.824582][T20308] usb usb4-port1: unable to enumerate USB device [ 2049.828390][ T5717] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 2049.831638][ T982] usb 8-1: ucan: probing device on interface #0 [ 2049.831665][ T982] usb 8-1: ucan: invalid out_ep MaxPacketSize [ 2049.831681][ T982] usb 8-1: ucan: probe failed; try to update the device firmware [ 2050.039595][ T5775] usb 8-1: USB disconnect, device number 17 [ 2051.064064][ T982] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 2051.225106][ T982] usb 8-1: Using ep0 maxpacket: 32 [ 2051.236941][ T982] usb 8-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=d2.a2 [ 2051.265224][ T982] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2051.291483][ T982] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2051.291526][ T982] usb 8-1: Product: syz [ 2051.291542][ T982] usb 8-1: Manufacturer: syz [ 2051.291558][ T982] usb 8-1: SerialNumber: syz [ 2051.332929][ T982] usb 8-1: config 0 descriptor?? [ 2051.342485][ T982] keyspan 8-1:0.0: Keyspan 1 port adapter converter detected [ 2051.342620][ T982] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 87 [ 2051.342664][ T982] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 7 [ 2051.343623][ T982] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 81 [ 2051.375584][ T982] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 1 [ 2051.376073][ T982] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 2 [ 2051.376170][ T982] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 85 [ 2051.376265][ T982] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 5 [ 2051.380762][ T982] usb 8-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2051.575037][T20308] usb 8-1: USB disconnect, device number 18 [ 2051.578302][T20308] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2051.578760][T20308] keyspan 8-1:0.0: device disconnected [ 2052.255419][ T982] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 2052.259787][ T5745] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9719'. [ 2052.390349][ T5749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2052.390653][ T5749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2052.412350][ T982] usb 4-1: Using ep0 maxpacket: 16 [ 2052.413051][ T982] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 2052.431511][ T982] usb 4-1: config 254 has an invalid interface number: 235 but max is 0 [ 2052.431542][ T982] usb 4-1: config 254 has no interface number 0 [ 2052.431588][ T982] usb 4-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 2052.431615][ T982] usb 4-1: config 254 interface 235 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2052.431642][ T982] usb 4-1: config 254 interface 235 altsetting 2 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2052.431666][ T982] usb 4-1: config 254 interface 235 altsetting 2 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2052.431690][ T982] usb 4-1: config 254 interface 235 has no altsetting 0 [ 2052.473199][ T982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2052.473219][ T982] usb 4-1: Product: syz [ 2052.473228][ T982] usb 4-1: Manufacturer: syz [ 2052.473237][ T982] usb 4-1: SerialNumber: syz [ 2052.533467][ T5743] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2052.781035][ T5755] bridge0: port 3(erspan0) entered blocking state [ 2052.781124][ T5755] bridge0: port 3(erspan0) entered disabled state [ 2052.781274][ T5755] erspan0: entered allmulticast mode [ 2052.809548][ T5755] erspan0: entered promiscuous mode [ 2052.828049][ T5755] bridge0: port 3(erspan0) entered blocking state [ 2052.828276][ T5755] bridge0: port 3(erspan0) entered forwarding state [ 2052.935150][T10390] IPVS: starting estimator thread 0... [ 2053.023884][ T5761] IPVS: using max 26 ests per chain, 62400 per kthread [ 2053.050954][ T5743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2053.062726][ T5743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2053.267818][ T5743] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2053.286799][ T982] usbtest 4-1:254.235: Linux gadget zero [ 2053.286826][ T982] usbtest 4-1:254.235: high-speed {control in/out bulk-out iso-in} tests (+alt) [ 2053.852221][ T982] usb 4-1: USB disconnect, device number 24 [ 2054.500963][ T9] usb 8-1: new full-speed USB device number 19 using dummy_hcd [ 2054.653047][ T9] usb 8-1: unable to get BOS descriptor or descriptor too short [ 2054.659573][ T9] usb 8-1: not running at top speed; connect to a high speed hub [ 2054.659608][ T9] usb 8-1: New USB device found, idVendor=0557, idProduct=2022, bcdDevice=90.e9 [ 2054.661882][ T9] usb 8-1: config 202 has an invalid interface number: 93 but max is 0 [ 2054.661915][ T9] usb 8-1: config 202 has no interface number 0 [ 2054.661956][ T9] usb 8-1: config 202 interface 93 altsetting 4 endpoint 0x8D has invalid maxpacket 1023, setting to 64 [ 2054.661981][ T9] usb 8-1: config 202 interface 93 has no altsetting 0 [ 2054.671911][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2054.671938][ T9] usb 8-1: Product: syz [ 2054.671951][ T9] usb 8-1: Manufacturer: syz [ 2054.671965][ T9] usb 8-1: SerialNumber: syz [ 2054.691968][ T5773] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 2054.935081][ T9] pl2303 8-1:202.93: required interrupt-in endpoint missing [ 2054.946549][ T9] usb 8-1: USB disconnect, device number 19 [ 2055.214884][T20308] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 2055.363816][T20308] usb 4-1: Using ep0 maxpacket: 32 [ 2055.366536][T20308] usb 4-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=d2.a2 [ 2055.368110][T20308] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2055.370509][T20308] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2055.370536][T20308] usb 4-1: Product: syz [ 2055.370550][T20308] usb 4-1: Manufacturer: syz [ 2055.370596][T20308] usb 4-1: SerialNumber: syz [ 2055.426641][T20308] usb 4-1: config 0 descriptor?? [ 2055.437272][T20308] keyspan 4-1:0.0: Keyspan 1 port adapter converter detected [ 2055.437414][T20308] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 87 [ 2055.437461][T20308] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7 [ 2055.440811][T20308] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 2055.440912][T20308] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 2055.442614][T20308] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 2055.442713][T20308] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 85 [ 2055.442808][T20308] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 5 [ 2055.511313][T20308] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2055.703560][ T982] usb 4-1: USB disconnect, device number 25 [ 2055.721717][ T982] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2055.722158][ T982] keyspan 4-1:0.0: device disconnected [ 2056.010695][ T5793] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9731'. [ 2056.195290][ T982] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 2056.356964][ T982] usb 8-1: Using ep0 maxpacket: 32 [ 2056.358289][ T982] usb 8-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=d2.a2 [ 2056.360039][ T982] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2056.363330][ T982] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2056.363356][ T982] usb 8-1: Product: syz [ 2056.363370][ T982] usb 8-1: Manufacturer: syz [ 2056.363385][ T982] usb 8-1: SerialNumber: syz [ 2056.423561][ T982] usb 8-1: config 0 descriptor?? [ 2056.434522][ T982] keyspan 8-1:0.0: Keyspan 1 port adapter converter detected [ 2056.434769][ T982] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 87 [ 2056.434852][ T982] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 7 [ 2056.444217][ T982] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 81 [ 2056.444315][ T982] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 1 [ 2056.444480][ T982] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 2 [ 2056.444575][ T982] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 85 [ 2056.444668][ T982] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 5 [ 2056.512164][ T982] usb 8-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2056.649304][T20308] usb 8-1: USB disconnect, device number 20 [ 2056.665769][T20308] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2056.669490][T20308] keyspan 8-1:0.0: device disconnected [ 2056.783840][ T982] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 2056.933879][ T982] usb 4-1: Using ep0 maxpacket: 16 [ 2056.936676][ T982] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2056.938776][ T982] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 2056.938795][ T982] usb 4-1: config 0 has no interface number 0 [ 2056.938821][ T982] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2056.938836][ T982] usb 4-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2056.938849][ T982] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 2056.938863][ T982] usb 4-1: config 0 interface 41 has no altsetting 0 [ 2056.942346][ T982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2056.942373][ T982] usb 4-1: Product: syz [ 2056.942388][ T982] usb 4-1: Manufacturer: syz [ 2056.942403][ T982] usb 4-1: SerialNumber: syz [ 2057.035109][ T982] usb 4-1: config 0 descriptor?? [ 2057.041998][ T982] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -22 [ 2057.182856][ T5807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2057.183165][ T5807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2057.410398][ T5807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2057.422823][ T5807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2057.598833][ T5817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2057.599136][ T5817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2057.700624][ T5814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2057.702229][ T5814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2058.001629][ T5824] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9743'. [ 2058.102765][T19329] bridge_slave_1: left allmulticast mode [ 2058.102788][T19329] bridge_slave_1: left promiscuous mode [ 2058.102957][T19329] bridge0: port 2(bridge_slave_1) entered disabled state [ 2058.129993][T19329] bridge_slave_0: left allmulticast mode [ 2058.130014][T19329] bridge_slave_0: left promiscuous mode [ 2058.130202][T19329] bridge0: port 1(bridge_slave_0) entered disabled state [ 2058.130869][ T5827] FAULT_INJECTION: forcing a failure. [ 2058.130869][ T5827] name failslab, interval 1, probability 0, space 0, times 0 [ 2058.130892][ T5827] CPU: 1 UID: 0 PID: 5827 Comm: syz.7.9744 Tainted: G L syzkaller #0 PREEMPT(full) [ 2058.130909][ T5827] Tainted: [L]=SOFTLOCKUP [ 2058.130914][ T5827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2058.130929][ T5827] Call Trace: [ 2058.130935][ T5827] [ 2058.130941][ T5827] dump_stack_lvl+0xe8/0x150 [ 2058.130964][ T5827] should_fail_ex+0x410/0x560 [ 2058.130981][ T5827] ? __alloc_skb+0x1db/0x7a0 [ 2058.130995][ T5827] should_failslab+0xa8/0x100 [ 2058.131010][ T5827] ? __alloc_skb+0x1db/0x7a0 [ 2058.131022][ T5827] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 2058.131040][ T5827] ? __alloc_skb+0x18d/0x7a0 [ 2058.131053][ T5827] ? __alloc_skb+0x1db/0x7a0 [ 2058.131070][ T5827] __alloc_skb+0x1db/0x7a0 [ 2058.131086][ T5827] __ip_append_data+0x2aa9/0x3cf0 [ 2058.131105][ T5827] ? __lock_acquire+0x747/0x2de0 [ 2058.131131][ T5827] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 2058.131162][ T5827] ? __pfx___ip_append_data+0x10/0x10 [ 2058.131180][ T5827] ? ipv4_mtu+0x561/0x670 [ 2058.131195][ T5827] ? ipv4_mtu+0x23/0x670 [ 2058.131211][ T5827] ? __pfx_ipv4_mtu+0x10/0x10 [ 2058.131226][ T5827] ? ip_setup_cork+0x4ed/0x8f0 [ 2058.131245][ T5827] ip_append_data+0x10d/0x190 [ 2058.131264][ T5827] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 2058.131283][ T5827] udp_sendmsg+0x3ef/0x2140 [ 2058.131309][ T5827] ? __pfx_udp_sendmsg+0x10/0x10 [ 2058.131327][ T5827] ? is_bpf_text_address+0x26/0x2b0 [ 2058.131345][ T5827] ? is_bpf_text_address+0x292/0x2b0 [ 2058.131359][ T5827] ? is_bpf_text_address+0x26/0x2b0 [ 2058.131377][ T5827] ? __asan_memset+0x22/0x50 [ 2058.131396][ T5827] ? current_check_autobind_udp_socket+0x18c/0x3e0 [ 2058.131412][ T5827] ? arch_stack_walk+0xfb/0x150 [ 2058.131430][ T5827] ? aa_sock_msg_perm+0xfc/0x210 [ 2058.131444][ T5827] ? sock_rps_record_flow+0x19/0x350 [ 2058.131463][ T5827] ? inet_sendmsg+0x23e/0x320 [ 2058.131479][ T5827] ? apparmor_socket_sendmsg+0x98/0x360 [ 2058.131492][ T5827] ? __pfx_inet_sendmsg+0x10/0x10 [ 2058.131509][ T5827] sock_sendmsg_nosec+0x10e/0x180 [ 2058.131528][ T5827] sock_sendmsg+0x1ca/0x2d0 [ 2058.131546][ T5827] ? __lock_acquire+0x747/0x2de0 [ 2058.131560][ T5827] ? __pfx_sock_sendmsg+0x10/0x10 [ 2058.131576][ T5827] ? kasan_save_free_info+0x40/0x50 [ 2058.131600][ T5827] ? __asan_memset+0x22/0x50 [ 2058.131618][ T5827] ? iov_iter_bvec+0xb8/0x180 [ 2058.131634][ T5827] splice_to_socket+0xb5e/0x12a0 [ 2058.131665][ T5827] ? __pfx_splice_to_socket+0x10/0x10 [ 2058.131680][ T5827] ? kasan_quarantine_put+0xbb/0x1f0 [ 2058.131716][ T5827] ? register_lock_class+0x31/0x2e0 [ 2058.131731][ T5827] ? __pfx_splice_to_socket+0x10/0x10 [ 2058.131748][ T5827] direct_splice_actor+0x101/0x160 [ 2058.131768][ T5827] splice_direct_to_actor+0x57b/0xcb0 [ 2058.131815][ T5827] ? __pfx_direct_splice_actor+0x10/0x10 [ 2058.131844][ T5827] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 2058.131885][ T5827] do_splice_direct+0x195/0x290 [ 2058.131906][ T5827] ? __pfx_do_splice_direct+0x10/0x10 [ 2058.131932][ T5827] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 2058.131945][ T5827] ? bpf_lsm_file_permission+0x9/0x20 [ 2058.131961][ T5827] ? security_file_permission+0x75/0x260 [ 2058.131981][ T5827] ? rw_verify_area+0x203/0x4c0 [ 2058.132001][ T5827] do_sendfile+0x52e/0x7c0 [ 2058.132020][ T5827] ? __pfx_do_sendfile+0x10/0x10 [ 2058.132033][ T5827] ? ksys_write+0x242/0x270 [ 2058.132053][ T5827] ? __ia32_compat_sys_sendfile+0x180/0x1d0 [ 2058.132070][ T5827] __do_fast_syscall_32+0x27a/0x6a0 [ 2058.132085][ T5827] ? do_fast_syscall_32+0x33/0x70 [ 2058.132099][ T5827] ? asm_int80_emulation+0x1a/0x20 [ 2058.132111][ T5827] ? do_int80_emulation+0x299/0x500 [ 2058.132123][ T5827] ? trace_irq_disable+0x3b/0x140 [ 2058.132138][ T5827] do_fast_syscall_32+0x33/0x70 [ 2058.132152][ T5827] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2058.132165][ T5827] RIP: 0023:0xf7f350ec [ 2058.132179][ T5827] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2058.132189][ T5827] RSP: 002b:00000000f53f650c EFLAGS: 00000206 ORIG_RAX: 00000000000000bb [ 2058.132207][ T5827] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000004 [ 2058.132222][ T5827] RDX: 0000000000000000 RSI: 000000000000106f RDI: 0000000000000000 [ 2058.132234][ T5827] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2058.132244][ T5827] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2058.132252][ T5827] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2058.132270][ T5827] [ 2058.287333][T19329] dvmrp6: left allmulticast mode [ 2058.868580][T19329] batman_adv: batadv0: Removing interface: ip6gretap1 [ 2059.235263][ T5775] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 2059.363860][ T5775] usb 8-1: device descriptor read/64, error -71 [ 2059.533825][ T982] usb 9-1: new full-speed USB device number 125 using dummy_hcd [ 2059.604082][ T5775] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 2059.626403][ T10] usb 4-1: USB disconnect, device number 26 [ 2059.644043][T19329] team0: Port device bridge0 removed [ 2059.686457][ T982] usb 9-1: unable to get BOS descriptor or descriptor too short [ 2059.687217][ T982] usb 9-1: not running at top speed; connect to a high speed hub [ 2059.687251][ T982] usb 9-1: New USB device found, idVendor=0557, idProduct=2022, bcdDevice=90.e9 [ 2059.688578][ T982] usb 9-1: config 202 has an invalid interface number: 93 but max is 0 [ 2059.688605][ T982] usb 9-1: config 202 has no interface number 0 [ 2059.688650][ T982] usb 9-1: config 202 interface 93 altsetting 4 endpoint 0x8D has invalid maxpacket 1023, setting to 64 [ 2059.688678][ T982] usb 9-1: config 202 interface 93 has no altsetting 0 [ 2059.691273][ T982] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2059.691293][ T982] usb 9-1: Product: syz [ 2059.691302][ T982] usb 9-1: Manufacturer: syz [ 2059.691311][ T982] usb 9-1: SerialNumber: syz [ 2059.733937][ T5775] usb 8-1: device descriptor read/64, error -71 [ 2059.789796][ T5828] raw-gadget.8 gadget.8: fail, usb_ep_enable returned -22 [ 2059.818264][T19329] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2059.819661][T19329] bond0 (unregistering): Released all slaves [ 2059.844582][ T5775] usb usb8-port1: attempt power cycle [ 2059.857047][T19329] bond1 (unregistering): Released all slaves [ 2059.937236][T19329] bond2 (unregistering): (slave dummy0): Releasing active interface [ 2059.939975][T19329] bond2 (unregistering): Released all slaves [ 2060.066265][ T982] pl2303 9-1:202.93: required interrupt-in endpoint missing [ 2060.100310][ T982] usb 9-1: USB disconnect, device number 125 [ 2060.194087][ T5775] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 2060.216323][ T5775] usb 8-1: device descriptor read/8, error -71 [ 2060.465596][ T5775] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 2060.523570][ T5775] usb 8-1: device descriptor read/8, error -71 [ 2060.625264][ T5775] usb usb8-port1: unable to enumerate USB device [ 2061.460513][ T5845] FAULT_INJECTION: forcing a failure. [ 2061.460513][ T5845] name failslab, interval 1, probability 0, space 0, times 0 [ 2061.460541][ T5845] CPU: 1 UID: 0 PID: 5845 Comm: syz.8.9749 Tainted: G L syzkaller #0 PREEMPT(full) [ 2061.460559][ T5845] Tainted: [L]=SOFTLOCKUP [ 2061.460564][ T5845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2061.460571][ T5845] Call Trace: [ 2061.460577][ T5845] [ 2061.460583][ T5845] dump_stack_lvl+0xe8/0x150 [ 2061.460607][ T5845] should_fail_ex+0x410/0x560 [ 2061.460625][ T5845] should_failslab+0xa8/0x100 [ 2061.460641][ T5845] ? vm_area_dup+0x28/0x760 [ 2061.460659][ T5845] kmem_cache_alloc_noprof+0xa1/0x600 [ 2061.460678][ T5845] ? vm_area_dup+0x28/0x760 [ 2061.460700][ T5845] vm_area_dup+0x28/0x760 [ 2061.460717][ T5845] ? dup_mmap+0x6b5/0x1dc0 [ 2061.460736][ T5845] dup_mmap+0x87d/0x1dc0 [ 2061.460764][ T5845] ? __pfx_dup_mmap+0x10/0x10 [ 2061.460782][ T5845] ? do_raw_spin_lock+0x12b/0x2f0 [ 2061.460808][ T5845] ? lock_acquire+0x115/0x350 [ 2061.460832][ T5845] copy_mm+0x11a/0x480 [ 2061.460850][ T5845] ? copy_process+0xd3c/0x43e0 [ 2061.460865][ T5845] copy_process+0x1e75/0x43e0 [ 2061.460886][ T5845] ? copy_process+0xd3c/0x43e0 [ 2061.460913][ T5845] ? __pfx_copy_process+0x10/0x10 [ 2061.460936][ T5845] kernel_clone+0x2d7/0x940 [ 2061.460960][ T5845] ? __pfx_kernel_clone+0x10/0x10 [ 2061.460989][ T5845] __se_sys_clone3+0x33c/0x360 [ 2061.461009][ T5845] ? __pfx___se_sys_clone3+0x10/0x10 [ 2061.461034][ T5845] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2061.461051][ T5845] ? __fget_files+0x3a2/0x420 [ 2061.461085][ T5845] __do_fast_syscall_32+0x27a/0x6a0 [ 2061.461099][ T5845] ? do_fast_syscall_32+0x33/0x70 [ 2061.461113][ T5845] ? asm_int80_emulation+0x1a/0x20 [ 2061.461125][ T5845] ? do_int80_emulation+0x299/0x500 [ 2061.461138][ T5845] ? trace_irq_disable+0x3b/0x140 [ 2061.461153][ T5845] do_fast_syscall_32+0x33/0x70 [ 2061.461167][ T5845] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2061.461182][ T5845] RIP: 0023:0xf7fa40ec [ 2061.461194][ T5845] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2061.461205][ T5845] RSP: 002b:00000000f54663dc EFLAGS: 00000206 ORIG_RAX: 00000000000001b3 [ 2061.461221][ T5845] RAX: ffffffffffffffda RBX: 00000000f5466410 RCX: 0000000000000058 [ 2061.461230][ T5845] RDX: 0000000000000000 RSI: 0000000000a00000 RDI: 0000000000000002 [ 2061.461238][ T5845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2061.461245][ T5845] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2061.461253][ T5845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2061.461273][ T5845] [ 2061.811719][T19329] hsr_slave_0: left promiscuous mode [ 2061.822563][T19329] hsr_slave_1: left promiscuous mode [ 2061.857016][T19329] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2061.857865][T19329] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2062.987783][T19329] team0 (unregistering): Port device team_slave_1 removed [ 2063.062860][T19329] team0 (unregistering): Port device team_slave_0 removed [ 2064.204513][ T5872] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9754'. [ 2064.664394][ T5881] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9766'. [ 2064.711565][T19329] IPVS: stop unused estimator thread 0... [ 2065.304030][ T5889] netlink: 'syz.3.9759': attribute type 2 has an invalid length. [ 2065.368276][ T5889] UHID_CREATE from different security context by process 1573 (syz.3.9759), this is not allowed. [ 2065.693767][ T5896] netlink: 656 bytes leftover after parsing attributes in process `syz.7.9761'. [ 2065.693798][ T5896] netlink: 52 bytes leftover after parsing attributes in process `syz.7.9761'. [ 2066.373638][ T5902] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9762'. [ 2066.373728][ T5902] openvswitch: netlink: Flow actions attr not present in new flow. [ 2066.947448][ T5910] netlink: 'syz.2.9764': attribute type 4 has an invalid length. [ 2067.011234][ T5910] netlink: 'syz.2.9764': attribute type 4 has an invalid length. [ 2067.024304][ T10] usb 9-1: new full-speed USB device number 126 using dummy_hcd [ 2067.176611][ T10] usb 9-1: unable to get BOS descriptor or descriptor too short [ 2067.177318][ T10] usb 9-1: not running at top speed; connect to a high speed hub [ 2067.177354][ T10] usb 9-1: New USB device found, idVendor=0557, idProduct=2022, bcdDevice=90.e9 [ 2067.179283][ T10] usb 9-1: config 202 has an invalid interface number: 93 but max is 0 [ 2067.179311][ T10] usb 9-1: config 202 has no interface number 0 [ 2067.179351][ T10] usb 9-1: config 202 interface 93 altsetting 4 endpoint 0x8D has invalid maxpacket 1023, setting to 64 [ 2067.179368][ T10] usb 9-1: config 202 interface 93 has no altsetting 0 [ 2067.254060][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2067.254083][ T10] usb 9-1: Product: syz [ 2067.254093][ T10] usb 9-1: Manufacturer: syz [ 2067.254102][ T10] usb 9-1: SerialNumber: syz [ 2067.264140][ T5892] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2067.401516][ T5917] fuse: Unknown parameter 'root00000000040000' [ 2067.498816][ T10] pl2303 9-1:202.93: required interrupt-in endpoint missing [ 2067.514902][ T10] usb 9-1: USB disconnect, device number 126 [ 2068.681750][ T5933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2068.682053][ T5933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2068.725306][T20308] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 2068.877382][T20308] usb 8-1: Using ep0 maxpacket: 16 [ 2068.879051][T20308] usb 8-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2068.880593][T20308] usb 8-1: config 0 has an invalid interface number: 41 but max is 0 [ 2068.880621][T20308] usb 8-1: config 0 has no interface number 0 [ 2068.880666][T20308] usb 8-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2068.880693][T20308] usb 8-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2068.880717][T20308] usb 8-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 2068.880742][T20308] usb 8-1: config 0 interface 41 has no altsetting 0 [ 2068.887512][T20308] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2068.887538][T20308] usb 8-1: Product: syz [ 2068.887552][T20308] usb 8-1: Manufacturer: syz [ 2068.887565][T20308] usb 8-1: SerialNumber: syz [ 2068.892914][T20308] usb 8-1: config 0 descriptor?? [ 2068.910157][T20308] CoreChips 8-1:0.41: probe with driver CoreChips failed with error -22 [ 2069.418136][ T5942] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9774'. [ 2069.418156][ T5942] openvswitch: netlink: Flow actions attr not present in new flow. [ 2069.494113][ T5943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2069.502090][ T5943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2070.582961][ T3123] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2070.601340][ T3123] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2070.612578][ T3123] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2070.623295][ T3123] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2070.631766][ T3123] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2071.523583][T23972] usb 8-1: USB disconnect, device number 25 [ 2072.167359][ T5977] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9784'. [ 2072.240091][T27032] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2072.240133][T27032] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2072.717263][ T5991] FAULT_INJECTION: forcing a failure. [ 2072.717263][ T5991] name failslab, interval 1, probability 0, space 0, times 0 [ 2072.717317][ T5991] CPU: 1 UID: 0 PID: 5991 Comm: syz.7.9786 Tainted: G L syzkaller #0 PREEMPT(full) [ 2072.717343][ T5991] Tainted: [L]=SOFTLOCKUP [ 2072.717350][ T5991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2072.717370][ T5991] Call Trace: [ 2072.717377][ T5991] [ 2072.717386][ T5991] dump_stack_lvl+0xe8/0x150 [ 2072.717419][ T5991] should_fail_ex+0x410/0x560 [ 2072.717445][ T5991] should_failslab+0xa8/0x100 [ 2072.717469][ T5991] __kmalloc_cache_noprof+0xa3/0x600 [ 2072.717489][ T5991] ? __kmalloc_cache_noprof+0x14d/0x600 [ 2072.717504][ T5991] ? sctp_add_bind_addr+0x8c/0x370 [ 2072.717530][ T5991] ? sctp_add_bind_addr+0x8c/0x370 [ 2072.717560][ T5991] sctp_add_bind_addr+0x8c/0x370 [ 2072.717589][ T5991] sctp_copy_local_addr_list+0x31a/0x4e0 [ 2072.717617][ T5991] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 2072.717642][ T5991] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 2072.717668][ T5991] ? sctp_v6_is_any+0x64/0x80 [ 2072.717695][ T5991] ? sctp_copy_one_addr+0x93/0x360 [ 2072.717724][ T5991] sctp_bind_addr_copy+0xb3/0x3c0 [ 2072.717749][ T5991] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 2072.717776][ T5991] sctp_connect_new_asoc+0x2ff/0x6b0 [ 2072.717805][ T5991] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 2072.717831][ T5991] ? __local_bh_enable_ip+0xd6/0x140 [ 2072.717853][ T5991] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 2072.717876][ T5991] ? security_sctp_bind_connect+0x7e/0x2c0 [ 2072.717908][ T5991] sctp_sendmsg+0x159b/0x2d00 [ 2072.717943][ T5991] ? __pfx_sctp_sendmsg+0x10/0x10 [ 2072.717964][ T5991] ? lock_acquire+0x115/0x350 [ 2072.718001][ T5991] ? aa_sock_msg_perm+0xf5/0x210 [ 2072.718022][ T5991] ? sock_rps_record_flow+0x19/0x350 [ 2072.718052][ T5991] ? inet_sendmsg+0x298/0x320 [ 2072.718080][ T5991] ? __pfx_inet_sendmsg+0x10/0x10 [ 2072.718104][ T5991] sock_sendmsg_nosec+0x10e/0x180 [ 2072.718134][ T5991] __sys_sendto+0x408/0x5a0 [ 2072.718161][ T5991] ? __pfx___sys_sendto+0x10/0x10 [ 2072.718196][ T5991] ? __fget_files+0x3a2/0x420 [ 2072.718233][ T5991] ? ksys_write+0x242/0x270 [ 2072.718265][ T5991] __ia32_sys_sendto+0xdd/0x100 [ 2072.718289][ T5991] __do_fast_syscall_32+0x27a/0x6a0 [ 2072.718312][ T5991] ? do_fast_syscall_32+0x33/0x70 [ 2072.718331][ T5991] ? asm_int80_emulation+0x1a/0x20 [ 2072.718349][ T5991] ? do_int80_emulation+0x299/0x500 [ 2072.718377][ T5991] ? trace_irq_disable+0x3b/0x140 [ 2072.718400][ T5991] do_fast_syscall_32+0x33/0x70 [ 2072.718421][ T5991] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2072.718442][ T5991] RIP: 0023:0xf7f350ec [ 2072.718461][ T5991] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2072.718477][ T5991] RSP: 002b:00000000f53f650c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 2072.718499][ T5991] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 2072.718512][ T5991] RDX: 0000000000000001 RSI: 0000000000000051 RDI: 0000000080000080 [ 2072.718524][ T5991] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 2072.718535][ T5991] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2072.718547][ T5991] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2072.718578][ T5991] [ 2072.743519][T29634] Bluetooth: hci3: command tx timeout [ 2073.108925][T27032] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2073.108953][T27032] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2073.238150][ T5960] bridge0: port 1(bridge_slave_0) entered blocking state [ 2073.241423][ T5960] bridge0: port 1(bridge_slave_0) entered disabled state [ 2073.241816][ T5960] bridge_slave_0: entered allmulticast mode [ 2073.268463][ T5960] bridge_slave_0: entered promiscuous mode [ 2073.286143][ T5960] bridge0: port 2(bridge_slave_1) entered blocking state [ 2073.287612][ T5960] bridge0: port 2(bridge_slave_1) entered disabled state [ 2073.287806][ T5960] bridge_slave_1: entered allmulticast mode [ 2073.293238][ T5960] bridge_slave_1: entered promiscuous mode [ 2073.476211][T27032] bond0: (slave netdevsim1): Releasing backup interface [ 2073.506107][T27032] netdevsim netdevsim8 netdevsim1 (unregistering): left allmulticast mode [ 2073.532582][T27032] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2073.532620][T27032] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2073.730122][ T5960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2073.747078][ T5960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2074.197305][ T5960] team0: Port device team_slave_0 added [ 2074.253275][ T5960] team0: Port device team_slave_1 added [ 2074.544347][ T5960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2074.544367][ T5960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2074.544394][ T5960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2074.794194][T29634] Bluetooth: hci3: command tx timeout [ 2075.009208][ T5960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2075.009223][ T5960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2075.009240][ T5960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2075.300091][ T6023] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2075.459889][ T5960] hsr_slave_0: entered promiscuous mode [ 2075.465535][ T5960] hsr_slave_1: entered promiscuous mode [ 2075.466268][ T5960] debugfs: 'hsr0' already exists in 'hsr' [ 2075.466287][ T5960] Cannot create hsr debugfs directory [ 2076.271453][T27032] bridge_slave_1: left promiscuous mode [ 2076.272055][T27032] bridge0: port 2(bridge_slave_1) entered disabled state [ 2076.364136][T27032] bridge0: port 1(bridge_slave_0) entered disabled state [ 2076.411589][T27032] dvmrp6: left allmulticast mode [ 2076.873866][T29634] Bluetooth: hci3: command tx timeout [ 2077.665499][T27032] team0: Port device bridge0 removed [ 2077.725580][T27032] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2077.727552][T27032] bond0 (unregistering): Released all slaves [ 2077.751596][T27032] bond2 (unregistering): Released all slaves [ 2078.586180][ T6053] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2078.968802][T29634] Bluetooth: hci3: command tx timeout [ 2079.064056][T20308] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 2079.071950][ T6058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2079.072249][ T6058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2079.265506][ T6057] loop5: detected capacity change from 0 to 7 [ 2079.266703][ T6057] loop5: [ 2079.266732][ T6057] loop5: partition table partially beyond EOD, truncated [ 2079.270932][T20308] usb 8-1: unable to get BOS descriptor or descriptor too short [ 2079.270987][T20308] usb 8-1: New USB device found, idVendor=1235, idProduct=8010, bcdDevice= 0.40 [ 2079.271965][T20308] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 2079.272007][T20308] usb 8-1: can't read configurations, error -71 [ 2079.625286][ T982] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 2079.630387][T27032] hsr_slave_0: left promiscuous mode [ 2079.631394][T27032] hsr_slave_1: left promiscuous mode [ 2079.641121][T27032] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2079.641145][T27032] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2079.644023][T27032] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2079.644043][T27032] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2079.663539][T27032] veth1_macvtap: left promiscuous mode [ 2079.663578][T27032] veth0_macvtap: left promiscuous mode [ 2079.664714][T27032] veth1_vlan: left allmulticast mode [ 2079.664931][T27032] veth1_vlan: left promiscuous mode [ 2079.665001][T27032] veth0_vlan: left promiscuous mode [ 2079.777540][ T982] usb 4-1: Using ep0 maxpacket: 16 [ 2079.778432][ T982] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2079.780023][ T982] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 2079.780050][ T982] usb 4-1: config 0 has no interface number 0 [ 2079.780095][ T982] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2079.780121][ T982] usb 4-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2079.780144][ T982] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 2079.780167][ T982] usb 4-1: config 0 interface 41 has no altsetting 0 [ 2079.786822][ T982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2079.786858][ T982] usb 4-1: Product: syz [ 2079.786872][ T982] usb 4-1: Manufacturer: syz [ 2079.786886][ T982] usb 4-1: SerialNumber: syz [ 2079.815251][ T982] usb 4-1: config 0 descriptor?? [ 2079.824866][ T982] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -22 [ 2080.402452][ T6084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2080.420750][ T6084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2080.861029][T27032] team0 (unregistering): Port device team_slave_1 removed [ 2082.212584][T27032] IPVS: stop unused estimator thread 0... [ 2082.420718][ T5775] usb 4-1: USB disconnect, device number 27 [ 2082.613490][ T6098] binder: 6097:6098 ioctl c0306201 80000080 returned -14 [ 2083.540935][ T5960] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2083.753078][ T5960] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2083.757152][ T5960] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2083.847044][ T5960] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2083.851105][ T5960] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2083.882161][ T5960] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2083.894402][ T5960] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2083.959004][ T5960] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2084.253611][ T5960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2084.328127][ T5960] 8021q: adding VLAN 0 to HW filter on device team0 [ 2084.376939][T27022] bridge0: port 1(bridge_slave_0) entered blocking state [ 2084.377068][T27022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2084.404779][T27900] bridge0: port 2(bridge_slave_1) entered blocking state [ 2084.404903][T27900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2084.595608][ T5960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2084.820594][ T5960] veth0_vlan: entered promiscuous mode [ 2084.865795][ T5960] veth1_vlan: entered promiscuous mode [ 2084.983528][ T5960] veth0_macvtap: entered promiscuous mode [ 2085.016494][ T5960] veth1_macvtap: entered promiscuous mode [ 2085.089756][ T5960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2085.120474][ T5960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2085.303856][T10390] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2085.522391][T27022] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2085.568382][T27034] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2085.800114][T27900] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2085.800139][T27900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2085.868260][T27022] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2085.961657][T10390] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2085.961680][T10390] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2086.100194][ T6131] ALSA: mixer_oss: invalid OSS volume '' [ 2086.100212][ T6131] ALSA: mixer_oss: invalid OSS volume '+--' [ 2086.100220][ T6131] ALSA: mixer_oss: invalid OSS volume '+--' [ 2086.100227][ T6131] ALSA: mixer_oss: invalid OSS volume '+--' [ 2086.100234][ T6131] ALSA: mixer_oss: invalid OSS volume '|--' [ 2086.100241][ T6131] ALSA: mixer_oss: invalid OSS volume '/8' [ 2086.100248][ T6131] ALSA: mixer_oss: invalid OSS volume '|--' [ 2086.100255][ T6131] ALSA: mixer_oss: invalid OSS volume '/32' [ 2086.100262][ T6131] ALSA: mixer_oss: invalid OSS volume '|--' [ 2086.100269][ T6131] ALSA: mixer_oss: invalid OSS volume '/32' [ 2086.100276][ T6131] ALSA: mixer_oss: invalid OSS volume '+--' [ 2086.100283][ T6131] ALSA: mixer_oss: invalid OSS volume '+--' [ 2086.100290][ T6131] ALSA: mixer_oss: invalid OSS volume '|--' [ 2086.100297][ T6131] ALSA: mixer_oss: invalid OSS volume '/24' [ 2086.100304][ T6131] ALSA: mixer_oss: invalid OSS volume '/24' [ 2086.100310][ T6131] ALSA: mixer_oss: invalid OSS volume '/24' [ 2086.100317][ T6131] ALSA: mixer_oss: invalid OSS volume '/24' [ 2086.100324][ T6131] ALSA: mixer_oss: invalid OSS volume '/24' [ 2086.100331][ T6131] ALSA: mixer_oss: invalid OSS volume '/24' [ 2086.100338][ T6131] ALSA: mixer_oss: invalid OSS volume '/24' [ 2086.100345][ T6131] ALSA: mixer_oss: invalid OSS volume '/24' [ 2086.100352][ T6131] ALSA: mixer_oss: invalid OSS volume '/24' [ 2086.100359][ T6131] ALSA: mixer_oss: invalid OSS volume '/24' [ 2086.100366][ T6131] ALSA: mixer_oss: invalid OSS volume '/24' [ 2086.100373][ T6131] ALSA: mixer_oss: invalid OSS volume '/24' [ 2086.100380][ T6131] ALSA: mixer_oss: invalid OSS volume '/24' [ 2086.100387][ T6131] ALSA: mixer_oss: invalid OSS volume '/24' [ 2086.100394][ T6131] ALSA: mixer_oss: invalid OSS volume '/24' [ 2086.100401][ T6131] ALSA: mixer_oss: invalid OSS volume '/24' [ 2086.100408][ T6131] ALSA: mixer_oss: invalid OSS volume '/24' [ 2086.100415][ T6131] ALSA: mixer_oss: invalid OSS volume '/24' [ 2086.100421][ T6131] ALSA: mixer_oss: invalid OSS volume '/24' [ 2086.100428][ T6131] ALSA: mixer_oss: invalid OSS volume '/24' [ 2086.100436][ T6131] ALSA: mixer_oss: invalid OSS volume '/24' [ 2086.100442][ T6131] ALSA: mixer_oss: invalid OSS volume '/24' [ 2086.100449][ T6131] ALSA: mixer_oss: invalid OSS volume '/24' [ 2086.100456][ T6131] ALSA: mixer_oss: invalid OSS volume '/24' [ 2086.100463][ T6131] ALSA: mixer_oss: invalid OSS volume '/24' [ 2086.100478][ T6131] ALSA: mixer_oss: invalid OSS volume '/24' [ 2086.100485][ T6131] ALSA: mixer_oss: invalid OSS volume '/24' [ 2086.100492][ T6131] ALSA: mixer_oss: invalid OSS volume '/24' [ 2086.100499][ T6131] ALSA: mixer_oss: invalid OSS volume '/24' [ 2086.100506][ T6131] ALSA: mixer_oss: invalid OSS volume '/24' [ 2086.100513][ T6131] ALSA: mixer_oss: invalid OSS volume '/24' [ 2086.100520][ T6131] ALSA: mixer_oss: invalid OSS volume '/24' [ 2086.100527][ T6131] ALSA: mixer_oss: invalid OSS volume '/24' [ 2086.100534][ T6131] ALSA: mixer_oss: invalid OSS volume '/24' [ 2086.100541][ T6131] ALSA: mixer_oss: invalid OSS volume '/24' [ 2086.100548][ T6131] ALSA: mixer_oss: invalid OSS volume '/24' [ 2086.100555][ T6131] ALSA: mixer_oss: invalid OSS volume '/24' [ 2086.100562][ T6131] ALSA: mixer_oss: invalid OSS volume '/24' [ 2086.100569][ T6131] ALSA: mixer_oss: invalid OSS volume '/24' [ 2086.100576][ T6131] ALSA: mixer_oss: invalid OSS volume '/24' [ 2086.100583][ T6131] ALSA: mixer_oss: invalid OSS volume '/24' [ 2086.100590][ T6131] ALSA: mixer_oss: invalid OSS volume '/24' [ 2086.100597][ T6131] ALSA: mixer_oss: invalid OSS volume '/24' [ 2086.100605][ T6131] ALSA: mixer_oss: invalid OSS volume '/24' [ 2086.100612][ T6131] ALSA: mixer_oss: invalid OSS volume '/24' [ 2086.100619][ T6131] ALSA: mixer_oss: invalid OSS volume '/24' [ 2086.100629][ T6131] ALSA: mixer_oss: invalid OSS volume '/24' [ 2086.100642][ T6131] ALSA: mixer_oss: invalid OSS volume '/24' [ 2086.100654][ T6131] ALSA: mixer_oss: invalid OSS volume '/24' [ 2086.100666][ T6131] ALSA: mixer_oss: invalid OSS volume '/24' [ 2086.102220][ T6131] ALSA: mixer_oss: invalid OSS volume '/24' [ 2086.102231][ T6131] ALSA: mixer_oss: invalid OSS volume '/24' [ 2086.102238][ T6131] ALSA: mixer_oss: invalid OSS volume '|--' [ 2086.102245][ T6131] ALSA: mixer_oss: invalid OSS volume '/32' [ 2086.102252][ T6131] ALSA: mixer_oss: invalid OSS volume '|--' [ 2086.102259][ T6131] ALSA: mixer_oss: invalid OSS volume '/32' [ 2086.102266][ T6131] ALSA: mixer_oss: invalid OSS volume '|--' [ 2086.102273][ T6131] ALSA: mixer_oss: invalid OSS volume '/32' [ 2086.102280][ T6131] ALSA: mixer_oss: invalid OSS volume '|--' [ 2086.102288][ T6131] ALSA: mixer_oss: invalid OSS volume '/32' [ 2086.102295][ T6131] ALSA: mixer_oss: invalid OSS volume '|--' [ 2086.102302][ T6131] ALSA: mixer_oss: invalid OSS volume '/32' [ 2086.102309][ T6131] ALSA: mixer_oss: invalid OSS volume '|--' [ 2086.102316][ T6131] ALSA: mixer_oss: invalid OSS volume '/32' [ 2086.102323][ T6131] ALSA: mixer_oss: invalid OSS volume '|--' [ 2086.102330][ T6131] ALSA: mixer_oss: invalid OSS volume '/32' [ 2086.102337][ T6131] ALSA: mixer_oss: invalid OSS volume '|--' [ 2086.102344][ T6131] ALSA: mixer_oss: invalid OSS volume '/32' [ 2086.102351][ T6131] ALSA: mixer_oss: invalid OSS volume '|--' [ 2086.102358][ T6131] ALSA: mixer_oss: invalid OSS volume '/32' [ 2086.102365][ T6131] ALSA: mixer_oss: invalid OSS volume '|--' [ 2086.102373][ T6131] ALSA: mixer_oss: invalid OSS volume '/32' [ 2086.102380][ T6131] ALSA: mixer_oss: invalid OSS volume '|--' [ 2086.102387][ T6131] ALSA: mixer_oss: invalid OSS volume '/32' [ 2086.102394][ T6131] ALSA: mixer_oss: invalid OSS volume '|--' [ 2086.102401][ T6131] ALSA: mixer_oss: invalid OSS volume '/32' [ 2086.102408][ T6131] ALSA: mixer_oss: invalid OSS volume '|--' [ 2086.102416][ T6131] ALSA: mixer_oss: invalid OSS volume '/32' [ 2086.102423][ T6131] ALSA: mixer_oss: invalid OSS volume '|--' [ 2086.102430][ T6131] ALSA: mixer_oss: invalid OSS volume '/32' [ 2086.102437][ T6131] ALSA: mixer_oss: invalid OSS volume '|--' [ 2086.102444][ T6131] ALSA: mixer_oss: invalid OSS volume '/32' [ 2086.102451][ T6131] ALSA: mixer_oss: invalid OSS volume '|--' [ 2086.102458][ T6131] ALSA: mixer_oss: invalid OSS volume '/32' [ 2086.102470][ T6131] ALSA: mixer_oss: invalid OSS volume '|--' [ 2086.102478][ T6131] ALSA: mixer_oss: invalid OSS volume '/32' [ 2086.102485][ T6131] ALSA: mixer_oss: invalid OSS volume '|--' [ 2086.102492][ T6131] ALSA: mixer_oss: invalid OSS volume '/32' [ 2086.102499][ T6131] ALSA: mixer_oss: invalid OSS volume '|--' [ 2086.102506][ T6131] ALSA: mixer_oss: invalid OSS volume '/32' [ 2086.102512][ T6131] ALSA: mixer_oss: invalid OSS volume '|--' [ 2086.102519][ T6131] ALSA: mixer_oss: invalid OSS volume '/32' [ 2086.102526][ T6131] ALSA: mixer_oss: invalid OSS volume '|--' [ 2086.102534][ T6131] ALSA: mixer_oss: invalid OSS volume '/32' [ 2086.102541][ T6131] ALSA: mixer_oss: invalid OSS volume '+--' [ 2086.102548][ T6131] ALSA: mixer_oss: invalid OSS volume '|--' [ 2086.102556][ T6131] ALSA: mixer_oss: invalid OSS volume '/32' [ 2086.102563][ T6131] ALSA: mixer_oss: invalid OSS volume '|--' [ 2086.102570][ T6131] ALSA: mixer_oss: invalid OSS volume '/32' [ 2086.102577][ T6131] ALSA: mixer_oss: invalid OSS volume '|--' [ 2086.102583][ T6131] ALSA: mixer_oss: invalid OSS volume '/32' [ 2086.102590][ T6131] ALSA: mixer_oss: invalid OSS volume '|--' [ 2086.102597][ T6131] ALSA: mixer_oss: invalid OSS volume '/32' [ 2086.102604][ T6131] ALSA: mixer_oss: invalid OSS volume '|--' [ 2086.102610][ T6131] ALSA: mixer_oss: invalid OSS volume '/32' [ 2086.102617][ T6131] ALSA: mixer_oss: invalid OSS volume '|--' [ 2086.102624][ T6131] ALSA: mixer_oss: invalid OSS volume '/32' [ 2086.102630][ T6131] ALSA: mixer_oss: invalid OSS volume '|--' [ 2086.102637][ T6131] ALSA: mixer_oss: invalid OSS volume '/32' [ 2086.102644][ T6131] ALSA: mixer_oss: invalid OSS volume '|--' [ 2086.102651][ T6131] ALSA: mixer_oss: invalid OSS volume '/32' [ 2086.102657][ T6131] ALSA: mixer_oss: invalid OSS volume '|--' [ 2086.102664][ T6131] ALSA: mixer_oss: invalid OSS volume '/32' [ 2086.102671][ T6131] ALSA: mixer_oss: invalid OSS volume '|--' [ 2086.102678][ T6131] ALSA: mixer_oss: invalid OSS volume '/32' [ 2086.102684][ T6131] ALSA: mixer_oss: invalid OSS volume '|--' [ 2086.102691][ T6131] ALSA: mixer_oss: invalid OSS volume '/32' [ 2086.102698][ T6131] ALSA: mixer_oss: invalid OSS volume '|--' [ 2086.102705][ T6131] ALSA: mixer_oss: invalid OSS volume '/32' [ 2086.102711][ T6131] ALSA: mixer_oss: invalid OSS volume '|--' [ 2086.102718][ T6131] ALSA: mixer_oss: invalid OSS volume '/32' [ 2086.102725][ T6131] ALSA: mixer_oss: invalid OSS volume '|--' [ 2086.102731][ T6131] ALSA: mixer_oss: invalid OSS volume '/32' [ 2086.102738][ T6131] ALSA: mixer_oss: invalid OSS volume '|--' [ 2086.102746][ T6131] ALSA: mixer_oss: invalid OSS volume '/32' [ 2086.102752][ T6131] ALSA: mixer_oss: invalid OSS volume '|--' [ 2086.102759][ T6131] ALSA: mixer_oss: invalid OSS volume '/32' [ 2086.102831][ T6131] ALSA: mixer_oss: invalid OSS volume '' [ 2087.345628][T23970] usb 8-1: new full-speed USB device number 28 using dummy_hcd [ 2087.393818][T30167] usb 9-1: new low-speed USB device number 127 using dummy_hcd [ 2087.506843][T23970] usb 8-1: unable to get BOS descriptor or descriptor too short [ 2087.507508][T23970] usb 8-1: not running at top speed; connect to a high speed hub [ 2087.507543][T23970] usb 8-1: New USB device found, idVendor=0557, idProduct=2022, bcdDevice=90.e9 [ 2087.508600][T23970] usb 8-1: config 202 has an invalid interface number: 93 but max is 0 [ 2087.508617][T23970] usb 8-1: config 202 has no interface number 0 [ 2087.508643][T23970] usb 8-1: config 202 interface 93 altsetting 4 endpoint 0x8D has invalid maxpacket 1023, setting to 64 [ 2087.508660][T23970] usb 8-1: config 202 interface 93 has no altsetting 0 [ 2087.510799][T23970] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2087.510838][T23970] usb 8-1: Product: syz [ 2087.510854][T23970] usb 8-1: Manufacturer: syz [ 2087.510863][T23970] usb 8-1: SerialNumber: syz [ 2087.538888][ T6120] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 2087.601196][T30167] usb 9-1: device descriptor read/64, error -71 [ 2087.752379][T23970] pl2303 8-1:202.93: required interrupt-in endpoint missing [ 2087.778239][T23970] usb 8-1: USB disconnect, device number 28 [ 2087.834244][T30167] usb 9-1: new low-speed USB device number 2 using dummy_hcd [ 2087.957031][ T6142] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9827'. [ 2087.957059][ T6142] openvswitch: netlink: Flow actions attr not present in new flow. [ 2087.964114][T30167] usb 9-1: device descriptor read/64, error -71 [ 2088.084501][T30167] usb usb9-port1: attempt power cycle [ 2088.434415][T30167] usb 9-1: new low-speed USB device number 3 using dummy_hcd [ 2088.454859][T30167] usb 9-1: device descriptor read/8, error -71 [ 2088.693866][T30167] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 2088.716375][T30167] usb 9-1: device descriptor read/8, error -71 [ 2088.824326][T30167] usb usb9-port1: unable to enumerate USB device [ 2089.191897][ T6158] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1226918919 (78522810816 ns) > initial count (60690011328 ns). Using initial count to start timer. [ 2089.227531][ T6158] kvm: pic: single mode not supported [ 2089.354359][T30167] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 2089.503888][T30167] usb 4-1: Using ep0 maxpacket: 32 [ 2089.504635][T30167] usb 4-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=d2.a2 [ 2089.506062][T30167] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 2089.506095][T30167] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2089.510086][T30167] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2089.510104][T30167] usb 4-1: Product: syz [ 2089.510113][T30167] usb 4-1: Manufacturer: syz [ 2089.510122][T30167] usb 4-1: SerialNumber: syz [ 2089.515080][T30167] usb 4-1: config 0 descriptor?? [ 2089.595544][T30167] keyspan 4-1:0.0: Keyspan 1 port adapter converter detected [ 2089.595789][T30167] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 87 [ 2089.595878][T30167] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7 [ 2089.597244][T30167] keyspan 4-1:0.0: unsupported endpoint type 0 [ 2089.597297][T30167] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 2089.597350][T30167] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 2089.597398][T30167] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 85 [ 2089.597447][T30167] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 5 [ 2089.600753][T30167] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2089.812554][T30167] usb 4-1: USB disconnect, device number 28 [ 2089.837921][T30167] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2089.842766][T30167] keyspan 4-1:0.0: device disconnected [ 2090.468431][ T6173] netlink: Conntrack attr has 12 unknown bytes [ 2090.468459][ T6173] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2090.853783][T23970] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 2091.005988][T23970] usb 9-1: Using ep0 maxpacket: 8 [ 2091.006921][T23970] usb 9-1: New USB device found, idVendor=10d2, idProduct=0001, bcdDevice= 0.00 [ 2091.008677][T23970] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2091.041633][T23970] usb 9-1: config 0 descriptor?? [ 2091.060013][T23970] usblcd 9-1:0.0: Could not find both bulk-in and bulk-out endpoints [ 2091.278081][T30167] usb 9-1: USB disconnect, device number 5 [ 2091.423511][ T6186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2091.436296][ T6186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2091.733827][T23970] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 2091.891890][T23970] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2091.892319][T23970] usb 4-1: not running at top speed; connect to a high speed hub [ 2091.892368][T23970] usb 4-1: New USB device found, idVendor=0557, idProduct=2022, bcdDevice=90.e9 [ 2091.896879][T23970] usb 4-1: config 202 has an invalid interface number: 93 but max is 0 [ 2091.896906][T23970] usb 4-1: config 202 has no interface number 0 [ 2091.896948][T23970] usb 4-1: config 202 interface 93 altsetting 4 endpoint 0x8D has invalid maxpacket 1023, setting to 64 [ 2091.896973][T23970] usb 4-1: config 202 interface 93 has no altsetting 0 [ 2091.900004][T23970] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2091.900027][T23970] usb 4-1: Product: syz [ 2091.900041][T23970] usb 4-1: Manufacturer: syz [ 2091.900055][T23970] usb 4-1: SerialNumber: syz [ 2091.963098][ T6180] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 2092.188803][T23970] pl2303 4-1:202.93: required interrupt-in endpoint missing [ 2092.207307][T23970] usb 4-1: USB disconnect, device number 29 [ 2092.348340][ T6198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2092.348955][ T6198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2092.550139][ T6202] FAULT_INJECTION: forcing a failure. [ 2092.550139][ T6202] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2092.550179][ T6202] CPU: 1 UID: 0 PID: 6202 Comm: syz.7.9849 Tainted: G L syzkaller #0 PREEMPT(full) [ 2092.550207][ T6202] Tainted: [L]=SOFTLOCKUP [ 2092.550216][ T6202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2092.550228][ T6202] Call Trace: [ 2092.550238][ T6202] [ 2092.550248][ T6202] dump_stack_lvl+0xe8/0x150 [ 2092.550288][ T6202] should_fail_ex+0x410/0x560 [ 2092.550322][ T6202] _copy_to_user+0x31/0xb0 [ 2092.550352][ T6202] simple_read_from_buffer+0xe1/0x170 [ 2092.550399][ T6202] proc_fail_nth_read+0x1bb/0x230 [ 2092.550431][ T6202] ? common_file_perm+0x20e/0x2b0 [ 2092.550462][ T6202] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2092.550498][ T6202] ? rw_verify_area+0x24a/0x4c0 [ 2092.550532][ T6202] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2092.550563][ T6202] vfs_read+0x213/0xa80 [ 2092.550600][ T6202] ? __pfx___mutex_lock+0x10/0x10 [ 2092.550629][ T6202] ? __pfx_vfs_read+0x10/0x10 [ 2092.550661][ T6202] ? __fget_files+0x2a/0x420 [ 2092.550695][ T6202] ? __fget_files+0x3a2/0x420 [ 2092.550722][ T6202] ? __fget_files+0x2a/0x420 [ 2092.550760][ T6202] ksys_read+0x150/0x270 [ 2092.550797][ T6202] ? __pfx_ksys_read+0x10/0x10 [ 2092.550830][ T6202] ? asm_int80_emulation+0x1a/0x20 [ 2092.550859][ T6202] do_int80_emulation+0x198/0x500 [ 2092.550881][ T6202] ? trace_irq_disable+0x3b/0x140 [ 2092.550903][ T6202] ? asm_int80_emulation+0x1a/0x20 [ 2092.550922][ T6202] ? clear_bhb_loop+0x70/0xc0 [ 2092.550943][ T6202] ? clear_bhb_loop+0x70/0xc0 [ 2092.550968][ T6202] asm_int80_emulation+0x1a/0x20 [ 2092.550987][ T6202] RIP: 0023:0xf71375ab [ 2092.551007][ T6202] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 2092.551024][ T6202] RSP: 002b:00000000f53f64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 2092.551047][ T6202] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f53f65d0 [ 2092.551062][ T6202] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 2092.551075][ T6202] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2092.551087][ T6202] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2092.551101][ T6202] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2092.551131][ T6202] [ 2092.811418][ T6206] netlink: Conntrack attr type has unexpected length (type=0, length=8, expected=0) [ 2092.811466][ T6206] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2092.863835][T23970] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 2093.015023][T23970] usb 9-1: Using ep0 maxpacket: 16 [ 2093.017205][T23970] usb 9-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2093.019423][T23970] usb 9-1: config 0 has an invalid interface number: 41 but max is 0 [ 2093.019450][T23970] usb 9-1: config 0 has no interface number 0 [ 2093.019494][T23970] usb 9-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2093.019520][T23970] usb 9-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2093.019541][T23970] usb 9-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 2093.019565][T23970] usb 9-1: config 0 interface 41 has no altsetting 0 [ 2093.027552][T23970] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2093.027579][T23970] usb 9-1: Product: syz [ 2093.027593][T23970] usb 9-1: Manufacturer: syz [ 2093.027607][T23970] usb 9-1: SerialNumber: syz [ 2093.036578][T23970] usb 9-1: config 0 descriptor?? [ 2093.048587][T23970] CoreChips 9-1:0.41: probe with driver CoreChips failed with error -22 [ 2093.099418][ T6216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2093.106461][ T6216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2093.233933][T30166] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 2093.393799][T30166] usb 4-1: Using ep0 maxpacket: 16 [ 2093.396736][T30166] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 2093.406123][T30166] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2093.406155][T30166] usb 4-1: Product: syz [ 2093.406170][T30166] usb 4-1: Manufacturer: syz [ 2093.406185][T30166] usb 4-1: SerialNumber: syz [ 2093.449879][T30166] usb 4-1: config 0 descriptor?? [ 2093.623863][ T6225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2093.628323][ T6225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2093.684273][ T6128] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 2093.795106][ T6229] netlink: 'syz.6.9858': attribute type 10 has an invalid length. [ 2093.835054][ T6128] usb 8-1: Using ep0 maxpacket: 8 [ 2093.839137][ T6128] usb 8-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 2093.844793][ T6128] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2093.857712][ T6128] usb 8-1: config 0 descriptor?? [ 2093.872068][ T6128] usb 8-1: probing VID:PID(0424:012C) [ 2093.879884][T30166] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 2093.907111][ T6128] usb 8-1: vub300 testing BULK IN EndPoint(0) 81 [ 2093.907142][ T6128] usb 8-1: vub300 testing BULK OUT EndPoint(1) 02 [ 2093.907162][ T6128] usb 8-1: vub300 testing BULK IN EndPoint(2) 83 [ 2093.907181][ T6128] usb 8-1: vub300 testing BULK OUT EndPoint(3) 04 [ 2093.907200][ T6128] usb 8-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 2093.948314][T30166] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2093.972751][T30166] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 2093.972870][T30166] usb 4-1: media controller created [ 2093.975768][ T6229] bridge0: port 3(erspan0) entered disabled state [ 2093.975972][ T6229] bridge0: port 2(bridge_slave_1) entered disabled state [ 2093.976608][ T6229] bridge0: port 1(bridge_slave_0) entered disabled state [ 2094.020957][T30166] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2094.029382][ T6229] bridge0: port 3(erspan0) entered blocking state [ 2094.029542][ T6229] bridge0: port 3(erspan0) entered forwarding state [ 2094.029864][ T6229] bridge0: port 2(bridge_slave_1) entered blocking state [ 2094.029995][ T6229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2094.030270][ T6229] bridge0: port 1(bridge_slave_0) entered blocking state [ 2094.030429][ T6229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2094.070386][ T6231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2094.070977][ T6231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2094.089236][ T6229] team0: Port device bridge0 added [ 2094.121532][ T6231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2094.122237][ T6231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2094.169541][T30166] zl10353_read_register: readreg error (reg=127, ret==0) [ 2094.169608][T30166] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 2094.169622][T30166] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 2094.180577][T30166] usb 4-1: USB disconnect, device number 30 [ 2094.300977][T30166] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 2094.312310][ T6128] usb 8-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 2094.381653][ T6236] FAULT_INJECTION: forcing a failure. [ 2094.381653][ T6236] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2094.381722][ T6236] CPU: 0 UID: 0 PID: 6236 Comm: syz.6.9860 Tainted: G L syzkaller #0 PREEMPT(full) [ 2094.381749][ T6236] Tainted: [L]=SOFTLOCKUP [ 2094.381757][ T6236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2094.381778][ T6236] Call Trace: [ 2094.381786][ T6236] [ 2094.381795][ T6236] dump_stack_lvl+0xe8/0x150 [ 2094.381834][ T6236] should_fail_ex+0x410/0x560 [ 2094.381862][ T6236] _copy_from_user+0x2d/0xb0 [ 2094.381889][ T6236] blkdev_common_ioctl+0x15d4/0x3250 [ 2094.382031][ T6236] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 2094.382062][ T6236] ? kasan_quarantine_put+0xbb/0x1f0 [ 2094.382094][ T6236] ? tomoyo_path_number_perm+0x219/0x5f0 [ 2094.382118][ T6236] ? tomoyo_path_number_perm+0x219/0x5f0 [ 2094.382144][ T6236] ? do_vfs_ioctl+0x116f/0x1530 [ 2094.382169][ T6236] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 2094.382205][ T6236] ? hook_file_ioctl_compat+0x1f2/0x600 [ 2094.382249][ T6236] compat_blkdev_ioctl+0x55e/0x7c0 [ 2094.382273][ T6236] ? __fget_files+0x2a/0x420 [ 2094.382305][ T6236] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 2094.382330][ T6236] ? __fget_files+0x2a/0x420 [ 2094.382360][ T6236] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 2094.382394][ T6236] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 2094.382419][ T6236] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 2094.382442][ T6236] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2094.382468][ T6236] ? __fget_files+0x3a2/0x420 [ 2094.382501][ T6236] ? fput+0xa0/0xd0 [ 2094.382528][ T6236] ? ksys_write+0x242/0x270 [ 2094.382569][ T6236] __do_fast_syscall_32+0x27a/0x6a0 [ 2094.382594][ T6236] ? do_fast_syscall_32+0x33/0x70 [ 2094.382616][ T6236] ? asm_int80_emulation+0x1a/0x20 [ 2094.382635][ T6236] ? do_int80_emulation+0x299/0x500 [ 2094.382656][ T6236] ? trace_irq_disable+0x3b/0x140 [ 2094.382682][ T6236] do_fast_syscall_32+0x33/0x70 [ 2094.382706][ T6236] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2094.382729][ T6236] RIP: 0023:0xf703f0ec [ 2094.382747][ T6236] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2094.382774][ T6236] RSP: 002b:00000000f540c50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2094.382797][ T6236] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 000000000000127f [ 2094.382811][ T6236] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2094.382823][ T6236] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2094.382834][ T6236] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2094.382845][ T6236] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2094.382874][ T6236] [ 2094.521949][ T6128] vub300 8-1:0.0: probe with driver vub300 failed with error -22 [ 2094.769238][ T6238] netlink: Conntrack attr type has unexpected length (type=0, length=8, expected=0) [ 2094.769285][ T6238] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2094.934346][ T6242] FAULT_INJECTION: forcing a failure. [ 2094.934346][ T6242] name failslab, interval 1, probability 0, space 0, times 0 [ 2094.934387][ T6242] CPU: 0 UID: 0 PID: 6242 Comm: syz.2.9863 Tainted: G L syzkaller #0 PREEMPT(full) [ 2094.934425][ T6242] Tainted: [L]=SOFTLOCKUP [ 2094.934434][ T6242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2094.934447][ T6242] Call Trace: [ 2094.934456][ T6242] [ 2094.934466][ T6242] dump_stack_lvl+0xe8/0x150 [ 2094.934502][ T6242] should_fail_ex+0x410/0x560 [ 2094.934532][ T6242] should_failslab+0xa8/0x100 [ 2094.934563][ T6242] __kmalloc_cache_noprof+0xa3/0x600 [ 2094.934587][ T6242] ? kvm_create_vm_debugfs+0x325/0x8f0 [ 2094.934609][ T6242] ? kvm_create_vm_debugfs+0x325/0x8f0 [ 2094.934630][ T6242] ? debugfs_create_file_full+0x3f/0x60 [ 2094.934690][ T6242] kvm_create_vm_debugfs+0x325/0x8f0 [ 2094.934721][ T6242] ? __pfx_kvm_create_vm_debugfs+0x10/0x10 [ 2094.934758][ T6242] kvm_dev_ioctl+0x1362/0x1770 [ 2094.934788][ T6242] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 2094.934814][ T6242] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 2094.934847][ T6242] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 2094.934875][ T6242] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 2094.934900][ T6242] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2094.934925][ T6242] ? __fget_files+0x3a2/0x420 [ 2094.934960][ T6242] ? fput+0xa0/0xd0 [ 2094.934986][ T6242] ? ksys_write+0x242/0x270 [ 2094.935027][ T6242] __do_fast_syscall_32+0x27a/0x6a0 [ 2094.935053][ T6242] ? do_fast_syscall_32+0x33/0x70 [ 2094.935075][ T6242] ? asm_int80_emulation+0x1a/0x20 [ 2094.935094][ T6242] ? do_int80_emulation+0x299/0x500 [ 2094.935116][ T6242] ? trace_irq_disable+0x3b/0x140 [ 2094.935142][ T6242] do_fast_syscall_32+0x33/0x70 [ 2094.935165][ T6242] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2094.935190][ T6242] RIP: 0023:0xf7fd70ec [ 2094.935211][ T6242] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2094.935228][ T6242] RSP: 002b:00000000f549650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2094.935253][ T6242] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ae01 [ 2094.935268][ T6242] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2094.935281][ T6242] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2094.935293][ T6242] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2094.935305][ T6242] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2094.935336][ T6242] [ 2095.322886][ T6247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2095.328515][ T6247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2095.623068][T20308] usb 9-1: USB disconnect, device number 6 [ 2095.683806][ T6128] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 2095.840525][ T6128] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2095.841222][ T6128] usb 4-1: not running at top speed; connect to a high speed hub [ 2095.841255][ T6128] usb 4-1: New USB device found, idVendor=0557, idProduct=2022, bcdDevice=90.e9 [ 2095.842556][ T6128] usb 4-1: config 202 has an invalid interface number: 93 but max is 0 [ 2095.842582][ T6128] usb 4-1: config 202 has no interface number 0 [ 2095.842629][ T6128] usb 4-1: config 202 interface 93 altsetting 4 endpoint 0x8D has invalid maxpacket 1023, setting to 64 [ 2095.842656][ T6128] usb 4-1: config 202 interface 93 has no altsetting 0 [ 2095.847117][ T6128] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2095.847141][ T6128] usb 4-1: Product: syz [ 2095.847154][ T6128] usb 4-1: Manufacturer: syz [ 2095.847169][ T6128] usb 4-1: SerialNumber: syz [ 2095.856504][ T6249] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 2096.130716][ T6128] pl2303 4-1:202.93: required interrupt-in endpoint missing [ 2096.146147][ T6128] usb 4-1: USB disconnect, device number 31 [ 2096.260646][ T6262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2096.261271][ T6262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2096.861887][ T6128] usb 8-1: USB disconnect, device number 29 [ 2096.989553][ T6268] netlink: Conntrack attr type has unexpected length (type=0, length=8, expected=0) [ 2096.989582][ T6268] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2097.596684][ T6277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2097.618202][ T6277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2097.644087][ T6277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2097.644712][ T6277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2098.145452][ T6128] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 2098.294409][ T6128] usb 4-1: Using ep0 maxpacket: 32 [ 2098.295317][ T6128] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 2098.296323][ T6128] usb 4-1: config 0 has no interfaces? [ 2098.304861][ T6128] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2098.304889][ T6128] usb 4-1: Product: syz [ 2098.304903][ T6128] usb 4-1: Manufacturer: syz [ 2098.304916][ T6128] usb 4-1: SerialNumber: syz [ 2098.322890][ T6128] usb 4-1: config 0 descriptor?? [ 2098.751825][ T6289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2098.760653][ T6289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2099.036967][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.037027][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.477522][T30167] hid-generic 0003:0004:0000.00A5: unknown main item tag 0x0 [ 2099.477550][T30167] hid-generic 0003:0004:0000.00A5: unknown main item tag 0x0 [ 2099.477566][T30167] hid-generic 0003:0004:0000.00A5: unknown main item tag 0x0 [ 2099.525838][T30167] hid-generic 0003:0004:0000.00A5: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 2099.721091][T30166] usb 4-1: USB disconnect, device number 32 [ 2099.774221][ T6298] netlink: 'syz.2.9883': attribute type 13 has an invalid length. [ 2099.774250][ T6298] netlink: 296 bytes leftover after parsing attributes in process `syz.2.9883'. [ 2099.790924][ T6300] netlink: 96 bytes leftover after parsing attributes in process `syz.8.9884'. [ 2100.114032][ T6311] netlink: 'syz.2.9887': attribute type 1 has an invalid length. [ 2100.213133][ T6311] bond1: option mode: invalid value (9) [ 2100.229803][ T6311] bond1 (unregistering): Released all slaves [ 2100.364885][ T5775] usb 8-1: new full-speed USB device number 30 using dummy_hcd [ 2100.519995][ T5775] usb 8-1: unable to get BOS descriptor or descriptor too short [ 2100.520542][ T5775] usb 8-1: not running at top speed; connect to a high speed hub [ 2100.520576][ T5775] usb 8-1: New USB device found, idVendor=0557, idProduct=2022, bcdDevice=90.e9 [ 2100.522257][ T5775] usb 8-1: config 202 has an invalid interface number: 93 but max is 0 [ 2100.522284][ T5775] usb 8-1: config 202 has no interface number 0 [ 2100.522328][ T5775] usb 8-1: config 202 interface 93 altsetting 4 endpoint 0x8D has invalid maxpacket 1023, setting to 64 [ 2100.522357][ T5775] usb 8-1: config 202 interface 93 has no altsetting 0 [ 2100.549772][ T6321] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9889'. [ 2100.570100][ T5775] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2100.570126][ T5775] usb 8-1: Product: syz [ 2100.570139][ T5775] usb 8-1: Manufacturer: syz [ 2100.570154][ T5775] usb 8-1: SerialNumber: syz [ 2100.592622][ T6293] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 2100.802330][ T6326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2100.803102][ T6326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2100.827349][ T6326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2100.827882][ T6326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2100.833968][ T5775] pl2303 8-1:202.93: required interrupt-in endpoint missing [ 2100.865761][ T5775] usb 8-1: USB disconnect, device number 30 [ 2101.153383][ T6335] netlink: 72 bytes leftover after parsing attributes in process `syz.6.9894'. [ 2101.243873][T30166] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 2101.399938][T30166] usb 9-1: Using ep0 maxpacket: 8 [ 2101.402155][T30166] usb 9-1: New USB device found, idVendor=056a, idProduct=00fb, bcdDevice= 0.00 [ 2101.403450][T30166] usb 9-1: config 0 interface 0 altsetting 251 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2101.403482][T30166] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2101.403518][T30166] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2101.453406][T30166] usb 9-1: config 0 descriptor?? [ 2101.620652][ T6342] netlink: 96 bytes leftover after parsing attributes in process `syz.2.9896'. [ 2101.852181][ T6344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2101.852565][ T6344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2101.946539][ T6330] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9893'. [ 2102.118558][ T6348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2102.119425][ T6348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2102.329474][ T6346] loop4: detected capacity change from 0 to 7 [ 2102.358689][ T6346] Dev loop4: unable to read RDB block 7 [ 2102.358719][ T6346] loop4: AHDI p1 p2 [ 2102.358743][ T6346] loop4: partition table partially beyond EOD, truncated [ 2102.358952][ T6346] loop4: p1 start 1702258030 is beyond EOD, truncated [ 2103.171816][ T6365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2103.172782][ T6365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2103.206146][T30167] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 2103.356770][T30167] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2103.357809][T30167] usb 4-1: config 21 has an invalid descriptor of length 29, skipping remainder of the config [ 2103.357825][T30167] usb 4-1: config 21 has 0 interfaces, different from the descriptor's value: 1 [ 2103.357847][T30167] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2103.514637][ T32] INFO: task kworker/1:4:29494 blocked for more than 143 seconds. [ 2103.514665][ T32] Tainted: G L syzkaller #0 [ 2103.514673][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2103.514682][ T32] task:kworker/1:4 state:D stack:22488 pid:29494 tgid:29494 ppid:2 task_flags:0x4288060 flags:0x00080000 [ 2103.514744][ T32] Workqueue: usb_hub_wq hub_event [ 2103.514844][ T32] Call Trace: [ 2103.514853][ T32] [ 2103.514867][ T32] __schedule+0x17db/0x58f0 [ 2103.514933][ T32] ? __pfx___schedule+0x10/0x10 [ 2103.514964][ T32] ? schedule+0x90/0x2b0 [ 2103.514985][ T32] schedule+0x164/0x2b0 [ 2103.515008][ T32] schedule_timeout+0xc0/0x2c0 [ 2103.515037][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 2103.515065][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 2103.515105][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 2103.515125][ T32] ? wait_for_completion+0x272/0x5e0 [ 2103.515137][ T32] wait_for_completion+0x2ca/0x5e0 [ 2103.515159][ T32] ? __pfx_wait_for_completion+0x10/0x10 [ 2103.515186][ T32] ? kobject_put+0x50f/0x550 [ 2103.515236][ T32] i2c_del_adapter+0x292/0x440 [ 2103.515325][ T32] ? __pfx_i2c_del_adapter+0x10/0x10 [ 2103.515356][ T32] ? kfree+0x4d/0x650 [ 2103.515393][ T32] dvb_usb_i2c_exit+0x64/0xb0 [ 2103.515443][ T32] dvb_usb_device_exit+0x1cb/0x350 [ 2103.515458][ T32] ? __pfx_rpm_resume+0x10/0x10 [ 2103.515523][ T32] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 2103.515555][ T32] ? usb_disable_interface+0x31d/0x350 [ 2103.515604][ T32] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2103.515640][ T32] usb_unbind_interface+0x295/0x9f0 [ 2103.515666][ T32] ? kernfs_remove_by_name_ns+0x101/0x140 [ 2103.515718][ T32] ? kernfs_remove_by_name_ns+0x101/0x140 [ 2103.515743][ T32] ? __pfx_usb_unbind_interface+0x10/0x10 [ 2103.515766][ T32] device_release_driver_internal+0x4f5/0x880 [ 2103.515825][ T32] bus_remove_device+0x444/0x560 [ 2103.515861][ T32] ? __pfx_bus_remove_device+0x10/0x10 [ 2103.515894][ T32] ? kernfs_remove_by_name_ns+0x101/0x140 [ 2103.515911][ T32] device_del+0x524/0x8f0 [ 2103.515930][ T32] ? __pfx_device_del+0x10/0x10 [ 2103.515943][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 2103.515975][ T32] usb_disable_device+0x3d4/0x8d0 [ 2103.516009][ T32] usb_disconnect+0x346/0x9a0 [ 2103.516039][ T32] hub_event+0x1bbb/0x4d30 [ 2103.516059][ T32] ? do_raw_spin_unlock+0xf5/0x200 [ 2103.516084][ T32] ? register_lock_class+0x31/0x2e0 [ 2103.516126][ T32] ? __pfx_hub_event+0x10/0x10 [ 2103.516160][ T32] ? rcu_is_watching+0x16/0xb0 [ 2103.516186][ T32] ? process_scheduled_works+0x97a/0x1630 [ 2103.516212][ T32] process_scheduled_works+0xc3d/0x1630 [ 2103.516279][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 2103.516323][ T32] ? assign_work+0x3cf/0x5d0 [ 2103.516354][ T32] worker_thread+0xa47/0xfb0 [ 2103.516384][ T32] ? __kthread_parkme+0x71/0x1f0 [ 2103.516407][ T32] kthread+0x38b/0x480 [ 2103.516422][ T32] ? __pfx_worker_thread+0x10/0x10 [ 2103.516447][ T32] ? __pfx_kthread+0x10/0x10 [ 2103.516469][ T32] ret_from_fork+0x514/0xb70 [ 2103.516493][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 2103.516523][ T32] ? __switch_to+0xc89/0x1420 [ 2103.516543][ T32] ? __pfx_kthread+0x10/0x10 [ 2103.516556][ T32] ret_from_fork_asm+0x1a/0x30 [ 2103.516590][ T32] [ 2103.516642][ T32] [ 2103.516642][ T32] Showing all locks held in the system: [ 2103.516654][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 2103.516752][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2103.516862][ T32] locks held by udevd/4982: 2, last CPU#0: [ 2103.516877][ T32] #0: ffff8880369fa460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 2103.516929][ T32] #1: ffff8880369def18 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: filename_unlinkat+0x2a7/0x610 [ 2103.516992][ T32] locks held by getty/5373: 2, on CPU#0: [ 2103.517005][ T32] #0: ffff88803639e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2103.517060][ T32] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 2103.517121][ T32] locks held by kworker/1:4/29494: 5, on CPU#1: [ 2103.517136][ T32] #0: ffff8880222b5140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2103.517178][ T32] #1: ffffc9000a16fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2103.517212][ T32] #2: ffff888029cea1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 2103.517262][ T32] #3: ffff88807e5011d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xfc/0x9a0 [ 2103.517316][ T32] #4: ffff888029cf21a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 2103.517349][ T32] locks held by kworker/1:7/30166: 5, on CPU#1: [ 2103.517358][ T32] #0: ffff8880222b5140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2103.517406][ T32] #1: ffffc90003f97c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2103.517459][ T32] #2: ffff888029da61d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 2103.517495][ T32] #3: ffff8880260761d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 2103.517525][ T32] #4: ffff8880260751a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 2103.517574][ T32] locks held by kworker/1:9/30167: 4, on CPU#1: [ 2103.517588][ T32] #0: ffff8880222b5140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2103.517638][ T32] #1: ffffc900033dfc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2103.517670][ T32] #2: ffff888029bb91d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 2103.517711][ T32] #3: ffff88807d9931d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 2103.517765][ T32] locks held by syz.8.9893/6330: 1, last CPU#0: [ 2103.517779][ T32] #0: ffffffff9aee8560 (nfnl_subsys_ipset){+.+.}-{4:4}, at: call_ad+0x26c/0xb50 [ 2103.517883][ T32] locks held by syz.7.9895/6353: 1, last CPU#0: [ 2103.517899][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 2103.517962][ T32] locks held by syz.6.9900/6355: 1, on CPU#0: [ 2103.517977][ T32] #0: ffff88801cafe678 (&worker->mutex){+.+.}-{4:4}, at: __vhost_worker_flush+0x189/0x230 [ 2103.518076][ T32] locks held by vhost-6355/6360: 2, last CPU#0: [ 2103.518090][ T32] #0: ffff888056c440e0 (&vtsk->exit_mutex){+.+.}-{4:4}, at: vhost_task_fn+0x3a8/0x4b0 [ 2103.518124][ T32] #1: ffff88801cafe678 (&worker->mutex){+.+.}-{4:4}, at: vhost_worker_killed+0x57/0x390 [ 2103.518163][ T32] [ 2103.518169][ T32] ============================================= [ 2103.518169][ T32] [ 2103.518179][ T32] NMI backtrace for cpu 0 [ 2103.518195][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2103.518221][ T32] Tainted: [L]=SOFTLOCKUP [ 2103.518228][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2103.518240][ T32] Call Trace: [ 2103.518249][ T32] [ 2103.518257][ T32] dump_stack_lvl+0xe8/0x150 [ 2103.518277][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 2103.518300][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2103.518333][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 2103.518365][ T32] sys_info+0x135/0x170 [ 2103.518389][ T32] watchdog+0xfd7/0x1030 [ 2103.518424][ T32] ? watchdog+0x1c7/0x1030 [ 2103.518439][ T32] kthread+0x38b/0x480 [ 2103.518451][ T32] ? __pfx_watchdog+0x10/0x10 [ 2103.518461][ T32] ? __pfx_kthread+0x10/0x10 [ 2103.518478][ T32] ret_from_fork+0x514/0xb70 [ 2103.518501][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 2103.518530][ T32] ? __switch_to+0xc89/0x1420 [ 2103.518559][ T32] ? __pfx_kthread+0x10/0x10 [ 2103.518578][ T32] ret_from_fork_asm+0x1a/0x30 [ 2103.518603][ T32] [ 2103.518608][ T32] Sending NMI from CPU 0 to CPUs 1: [ 2103.518642][ C1] NMI backtrace for cpu 1 [ 2103.518661][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 2103.518686][ C1] Tainted: [L]=SOFTLOCKUP [ 2103.518693][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2103.518704][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 2103.518726][ C1] Code: 9c 8f 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 91 24 00 fb f4 8c 08 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 2103.518744][ C1] RSP: 0000:ffffc900001a7e40 EFLAGS: 00000242 [ 2103.518761][ C1] RAX: 00000000011227d9 RBX: ffffffff819baed0 RCX: 8000000000000001 [ 2103.518775][ C1] RDX: 0000000000000001 RSI: ffffffff8e475f59 RDI: ffffffff8c6d9a80 [ 2103.518788][ C1] RBP: ffffc900001a7f10 R08: ffff8880b8733a1b R09: 1ffff110170e6743 [ 2103.518809][ C1] R10: dffffc0000000000 R11: ffffed10170e6744 R12: 0000000000000000 [ 2103.518823][ C1] R13: 1ffff11003cd2bb8 R14: 1ffff92000034fd0 R15: dffffc0000000000 [ 2103.518837][ C1] FS: 0000000000000000(0000) GS:ffff888124dd2000(0000) knlGS:0000000000000000 [ 2103.518853][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2103.518866][ C1] CR2: 000000008000004c CR3: 000000002ae66000 CR4: 00000000003526f0 [ 2103.518884][ C1] Call Trace: [ 2103.518892][ C1] [ 2103.518899][ C1] default_idle+0x9/0x20 [ 2103.518920][ C1] default_idle_call+0x72/0xb0 [ 2103.518941][ C1] do_idle+0x2e0/0x540 [ 2103.518969][ C1] ? __pfx_do_idle+0x10/0x10 [ 2103.519000][ C1] cpu_startup_entry+0x43/0x60 [ 2103.519017][ C1] start_secondary+0x101/0x110 [ 2103.519043][ C1] common_startup_64+0x13e/0x157 [ 2103.519072][ C1] [ 2103.523750][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 2104.445179][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2104.455870][ T32] Tainted: [L]=SOFTLOCKUP [ 2104.460201][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2104.470253][ T32] Call Trace: [ 2104.473549][ T32] [ 2104.476500][ T32] vpanic+0x56d/0xa60 [ 2104.480517][ T32] ? __pfx___schedule+0x10/0x10 [ 2104.485394][ T32] ? __pfx_vpanic+0x10/0x10 [ 2104.489919][ T32] panic+0xc5/0xd0 [ 2104.493664][ T32] ? __pfx_panic+0x10/0x10 [ 2104.498104][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 2104.503663][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 2104.509053][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 2104.515208][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 2104.521363][ T32] watchdog+0x1030/0x1030 [ 2104.525726][ T32] ? watchdog+0x1c7/0x1030 [ 2104.530170][ T32] kthread+0x38b/0x480 [ 2104.534240][ T32] ? __pfx_watchdog+0x10/0x10 [ 2104.538921][ T32] ? __pfx_kthread+0x10/0x10 [ 2104.543528][ T32] ret_from_fork+0x514/0xb70 [ 2104.548126][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 2104.553241][ T32] ? __switch_to+0xc89/0x1420 [ 2104.557931][ T32] ? __pfx_kthread+0x10/0x10 [ 2104.562535][ T32] ret_from_fork_asm+0x1a/0x30 [ 2104.567341][ T32] [ 2104.570635][ T32] Kernel Offset: disabled [ 2104.574971][ T32] Rebooting in 86400 seconds..