last executing test programs: 9m13.086483272s ago: executing program 3 (id=5482): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendmmsg$unix(r0, &(0x7f0000008280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x8001}}], 0x2, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, 0x3b, 0x301, 0x2270bc22, 0x25dfdbfd, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x34090000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xe}, {0x5, 0x5}}}, 0x24}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x4b6b9d28c5b9a46b, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xfffffffe}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async, rerun: 64) sigaltstack(&(0x7f0000001000)={&(0x7f0000002100)=""/4114, 0x1, 0xdf01}, 0x0) (rerun: 64) r4 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101400, 0x0) (async) sync_file_range(r6, 0x8b, 0x1, 0x7) (async, rerun: 64) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) (rerun: 64) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 9m12.792910722s ago: executing program 3 (id=5484): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, 0x0, &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cad, 0x1c080, 0xa, 0x20002f7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 9m12.41788285s ago: executing program 3 (id=5486): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="040000000000000008003f006563060008001b"], 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) 9m12.079601641s ago: executing program 3 (id=5489): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000001080)='./file0/../file0/../file0/../file0/file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) waitid$P_PIDFD(0x3, r2, 0x0, 0x20000000, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0x3, 0x7fff, 0xfffffffffffffffb}) 9m11.894346954s ago: executing program 3 (id=5492): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000340)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0xfb, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f000000a100)="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", 0x2000, &(0x7f0000000200)={&(0x7f0000000580)={0x50, 0x0, 0x100000001, {0x7, 0x28, 0x77, 0x2143040, 0x7f7f, 0x9, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004080)="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", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x78, 0x0, 0x7, {0xffffffff7ffffffa, 0x1, 0x0, {0x4, 0x7fffffffffffffff, 0x408, 0x201, 0x3, 0x6d6d, 0x9, 0x200207, 0xe000, 0x601d824b499141fd, 0xcd35, 0xffffffffffffffff, 0x0, 0x4, 0x808003}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) 9m11.326739591s ago: executing program 3 (id=5496): fsopen(&(0x7f0000000140)='ext3\x00', 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x14) sendmmsg$unix(r3, &(0x7f0000003180)=[{{&(0x7f0000000180)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000280)="2cc438e51fc5ba4523610692ca59836d913f7eae88c2f5f8b70f7f15406cdcae0bb44824a38648821fea1b4c1717f6ab2ab3a1df877c9f0468ebe8e4a34d44d0f82161f25807a1f0a1e1053f0eb74e30270f9faf58fe", 0x56}, {&(0x7f0000000300)="6e467ccf7c6f1f556488479c60ef94cd0dc285bcb61f7ebb3b62c8347f0d67bf0ef9d162269b33bb76540044d8ff02d430f8e6f0070ceec7c15089e312998eeeb4", 0x41}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f00000014c0)="0b921735987dcb85ea4d4226628c73e3883998086f1dd3863b8147165a200c66bb29a0ad265ccaf175b583897ef5f8165ba60c3825a3feb3a481ddc3456fa8fabf15a6210e1a802b7ecffde3c7dabc49987a93461e1fe8d6d0160b48f3bd8ef4055c20dc039971cff9cd", 0x6a}, {&(0x7f0000001540)="b5c0f56022001d55ac4ebd1b2478f534e7f5ef78ac8cfa8e0b38eec72c2d258ca781b565602094e2668cb086afc2cf0dac8d593a", 0x34}, {&(0x7f0000001580)="b89c987371116ecf7ec9f3924eb46abb1bae7cd786861f1db005580f8ecb8716950b7468932aaa94e3ddf2f9a8fcfb7cdbe15610b34374dd64f81306f0ade69729f168678bf339830758bf5782fc69ed626f2c61d396138a2eb8c1449d5eef01f25b23a78083b4069a853f1327ea98b1d042dc34378d21a16710497d08a6f7044cc7578c60799da6a926f483517f715dba7adc0e42d77714", 0x98}, {&(0x7f0000001640)="ce18e938f0f22d665bd9a5bd547c557cd09173adea40c8857b87111b39dc3483b63f", 0x22}], 0x7, 0x0, 0x0, 0x1}}, {{&(0x7f0000001700)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000002fc0)=[{&(0x7f0000001780)="d327beb14a3724fa5e820c95c9b3a9fbfd3a2d967629cb5913db70a336d3a27ef528b81d8d8a4b5c8332b715d7cf18eeb004f5a7c480ccac3ac9fb3cff429f9463648ed07c0c44a4af5cfe9d38e2c869d2a3212d31ae33bea6a2be6c2e9b11367b00f1a00ef83ef20eee0a2cbafa4e6969b6f510336b2c87352e23c892e961cc19e1eabf32fbf2be4268abbb7980e2fc44510024f7a466160e8e8835d4ae03c3b853e2ab8f1f554a109dbd8870e143de6f46d897ee7d493c88db4a7910f19bb0ebf6839a04", 0xc5}, {&(0x7f0000001880)="249f7198f0cfc124efd1d1a7ef7cee30a7587fb81d64c08862a8a945670c4d70c8c9387ec64f170cefd7209c6eb26582ab574bd1e0a3ea988e32256c149dd2dc783a08b2cfde65a36be05fe45548ebc87b3c46520472ad6910a45b3bb0f655492810bf387df31c3bf8886fd63c76601b728e7aabd266c31e4bd0e1f941354fc6793d572ff2c037ffb66482e47ccaca5fc9275232852ed240155f9eaf39699dfbebd4c84b13af5176979c95d4069ba8c4a2d1be18d947548845314eadacccdf9e98a4fda192867bb080849c066eaed3784561865cc1d18f71c8cc679630", 0xdd}, {&(0x7f0000001980)="41b9226b12c6a7abc0b3d0bd8ce62f098e857b228184e7348b56dd018856e4d42fc25f51d2d0481dad54e4e60930c7f47338299f51b2145e82ded3c40313246fb45b5e193e5d77e872fb5a7987444185fde96ba08e0fcd1fb2e6db6d63c53fc5fb49fdf4f7d4263c17008fdfe6f0ab14b4ef4f6a13f1ac7d8da4d05211bba4c46e3991c3a881433edcbd8e9c043671dd5b444a9b6c01aa5b5325d94eb583a07050e94e112fafcb55959187b4daa7f80745ad163d7f3a850b277416cc1ba0c429e2d5bc1ce52e29cf7a42f614d904c2b0d65b78ff1eb62d469f4fb9225f52f72cf659e695e8f136048d3bd8122e7878196793e1fce4311ade14", 0xf9}, {&(0x7f0000001a80)="13b25382d543ffbe3e893a6114e9f99844632ab49cff2550", 0x18}, {&(0x7f0000001ac0)="22acb153deb6cbd83ef798b2351ccfee51ea8066116db5dd1a02538bf23a349c62fe981316e2fcef0a5d1ff3a31f34af58b08303ca68692a32fd3c9132c741212f3b54a6e998dd8f5123bb71db81d2ed3d668a7ec9eaac01c7a145c20de6928511339b9a944607ced0b425874039d4159c4f5f4bc0cfffec4c1dedf1ae276809a6e78602f6a951a63aa794c210eb840d9a3374c147001a054bc79bbb2eb41a485988bafd9b52ad8370414d60e61ce5def1eb87596b15066940652928c18e92983974d67ea60a2e4eebc19693f5f33bf125cf0e26f699bf6e6aba7104b9fbac0f81d46e3419487e3ff156bfc3d4bd1c31d14296f3d1e3dd121ca9277584", 0xfd}, {&(0x7f0000001bc0)="4fc1b2993302e15e1588654a38ff589a94bf41865a795f8f7b0fb5b18b7c70573382392e12de4c5376bf00f41d78b5e41de79b9f82c5b575356ce47bb474afa577251819343675636beb1fa8a4f96fede1e30b1233d0c8e61dd69eddf35f69067993448c0720cf81318a019795de2fb033661782a4c50efc4208dec5d9f24d33987b22234fd3f36ea0a87b07300c9f507ca141ff8a3aead7a3241235501fb8a4bf810fe1250c40e00194c490b203db575f59189ae48cfdc1375f91b873d7c8636c95bcd96a27b9cbd779", 0xca}, {&(0x7f0000001cc0)="42d1d074f7037382dd7c0baa2f0b3200f79d97454aa95cdb7a392fbe5408833468c702a5135c230fc14185849f6dfd430f4227584658630f71a806f5f266435ab316e04492b7c67237c4923571006569ef2c9f3ae47864e5ac718b85d4f54a9a7db375e56f5b4b5c8b5666ba0aa1fdd94f9394f92d3cb4b23418374b786ba2ba3eae11b9611fb15d97602a006a1170afc7f792999336eac9fea806ddb688d3fac24dbbf0fafa55fabcfdea848415f3d1c97b91aecc7a2e64a1b4185961fc81e50da1a6e31b7eed8cb8fd266bdd39aecf", 0xd0}, {&(0x7f0000001dc0)="8bd1482b9767c93cfb5e95edb6220df50b4affd8cbd10e07814657d2764589ed8afbf4ace1eb5ace765de7d1f147ec65b2cbe07ca9691305e8c56ba514384c78b7fafafa1cd483b6b23ef11b1d850437cab90cf05df57f85f75a0f37384fb0208a6010f775bc45b2c6d200531928ee3313df9fc47816dbe86c1e1a27d2ed4b50551b115ed1a185b053cb05f658a4e0526e480a6ffda51adb45f7d9ae46468d354953a37594dacb48bc7acd75baf58064d68f200d978f4734e172eef08fca08fed26cfa52b33ff675b265b54a700862", 0xcf}, {&(0x7f0000001ec0)="199164288d2316926714506a1a813e29280d33471073a98479336b86ae9879496bfcf31a16e9843dddb0f594b218cbfc35b223011c68128b85dda83e5e0eb297e37bfb604de713993c884d202886894fd706f99b53409283deecb1a5f5bc54a27d9871efe79dd75423c0c33f7a85e0d5ee30509cd8b4ad64cc9bb1b389c819f9fa843507ac27dac473423bd62ac4b8d99a31fd9dd58019bbeac13a14a6107aa3fbf484727e7d12588a732ae18b5ac8cfb909eb31e1b362620bea6aa4bec047588f943b4dad2fdf5efe05edf53c269d17a5e5e937d5d92f4e7a0d", 0xda}, {&(0x7f0000001fc0)="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", 0x1000}], 0xa, &(0x7f0000003100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r0, r1, r2, r0, r3, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r3, 0xffffffffffffffff, r1, r2, r3, r2]}}], 0x70, 0x40000}}], 0x2, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000013c0)={0x0, 0x3, 0x2, {0x5, @vbi={0x0, 0x0, 0x100096, 0x4745504d, [0x1, 0x1], [0x8200, 0xfffffffc], 0x2}}}) ioctl$VIDIOC_QBUF(r4, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x5, 0x0, 0x4, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000000)=0xffffffc3, 0x4) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1d, 0x2, 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x1000, 0x0) bind$can_j1939(r5, &(0x7f0000000000)={0x1d, r7, 0x6}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) sendmmsg$inet(r5, &(0x7f0000004240), 0x0, 0x0) syz_usb_connect(0x6, 0xfffffffffffffeec, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 9m10.86358331s ago: executing program 32 (id=5496): fsopen(&(0x7f0000000140)='ext3\x00', 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x14) sendmmsg$unix(r3, &(0x7f0000003180)=[{{&(0x7f0000000180)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000280)="2cc438e51fc5ba4523610692ca59836d913f7eae88c2f5f8b70f7f15406cdcae0bb44824a38648821fea1b4c1717f6ab2ab3a1df877c9f0468ebe8e4a34d44d0f82161f25807a1f0a1e1053f0eb74e30270f9faf58fe", 0x56}, {&(0x7f0000000300)="6e467ccf7c6f1f556488479c60ef94cd0dc285bcb61f7ebb3b62c8347f0d67bf0ef9d162269b33bb76540044d8ff02d430f8e6f0070ceec7c15089e312998eeeb4", 0x41}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f00000014c0)="0b921735987dcb85ea4d4226628c73e3883998086f1dd3863b8147165a200c66bb29a0ad265ccaf175b583897ef5f8165ba60c3825a3feb3a481ddc3456fa8fabf15a6210e1a802b7ecffde3c7dabc49987a93461e1fe8d6d0160b48f3bd8ef4055c20dc039971cff9cd", 0x6a}, {&(0x7f0000001540)="b5c0f56022001d55ac4ebd1b2478f534e7f5ef78ac8cfa8e0b38eec72c2d258ca781b565602094e2668cb086afc2cf0dac8d593a", 0x34}, {&(0x7f0000001580)="b89c987371116ecf7ec9f3924eb46abb1bae7cd786861f1db005580f8ecb8716950b7468932aaa94e3ddf2f9a8fcfb7cdbe15610b34374dd64f81306f0ade69729f168678bf339830758bf5782fc69ed626f2c61d396138a2eb8c1449d5eef01f25b23a78083b4069a853f1327ea98b1d042dc34378d21a16710497d08a6f7044cc7578c60799da6a926f483517f715dba7adc0e42d77714", 0x98}, {&(0x7f0000001640)="ce18e938f0f22d665bd9a5bd547c557cd09173adea40c8857b87111b39dc3483b63f", 0x22}], 0x7, 0x0, 0x0, 0x1}}, {{&(0x7f0000001700)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000002fc0)=[{&(0x7f0000001780)="d327beb14a3724fa5e820c95c9b3a9fbfd3a2d967629cb5913db70a336d3a27ef528b81d8d8a4b5c8332b715d7cf18eeb004f5a7c480ccac3ac9fb3cff429f9463648ed07c0c44a4af5cfe9d38e2c869d2a3212d31ae33bea6a2be6c2e9b11367b00f1a00ef83ef20eee0a2cbafa4e6969b6f510336b2c87352e23c892e961cc19e1eabf32fbf2be4268abbb7980e2fc44510024f7a466160e8e8835d4ae03c3b853e2ab8f1f554a109dbd8870e143de6f46d897ee7d493c88db4a7910f19bb0ebf6839a04", 0xc5}, {&(0x7f0000001880)="249f7198f0cfc124efd1d1a7ef7cee30a7587fb81d64c08862a8a945670c4d70c8c9387ec64f170cefd7209c6eb26582ab574bd1e0a3ea988e32256c149dd2dc783a08b2cfde65a36be05fe45548ebc87b3c46520472ad6910a45b3bb0f655492810bf387df31c3bf8886fd63c76601b728e7aabd266c31e4bd0e1f941354fc6793d572ff2c037ffb66482e47ccaca5fc9275232852ed240155f9eaf39699dfbebd4c84b13af5176979c95d4069ba8c4a2d1be18d947548845314eadacccdf9e98a4fda192867bb080849c066eaed3784561865cc1d18f71c8cc679630", 0xdd}, {&(0x7f0000001980)="41b9226b12c6a7abc0b3d0bd8ce62f098e857b228184e7348b56dd018856e4d42fc25f51d2d0481dad54e4e60930c7f47338299f51b2145e82ded3c40313246fb45b5e193e5d77e872fb5a7987444185fde96ba08e0fcd1fb2e6db6d63c53fc5fb49fdf4f7d4263c17008fdfe6f0ab14b4ef4f6a13f1ac7d8da4d05211bba4c46e3991c3a881433edcbd8e9c043671dd5b444a9b6c01aa5b5325d94eb583a07050e94e112fafcb55959187b4daa7f80745ad163d7f3a850b277416cc1ba0c429e2d5bc1ce52e29cf7a42f614d904c2b0d65b78ff1eb62d469f4fb9225f52f72cf659e695e8f136048d3bd8122e7878196793e1fce4311ade14", 0xf9}, {&(0x7f0000001a80)="13b25382d543ffbe3e893a6114e9f99844632ab49cff2550", 0x18}, {&(0x7f0000001ac0)="22acb153deb6cbd83ef798b2351ccfee51ea8066116db5dd1a02538bf23a349c62fe981316e2fcef0a5d1ff3a31f34af58b08303ca68692a32fd3c9132c741212f3b54a6e998dd8f5123bb71db81d2ed3d668a7ec9eaac01c7a145c20de6928511339b9a944607ced0b425874039d4159c4f5f4bc0cfffec4c1dedf1ae276809a6e78602f6a951a63aa794c210eb840d9a3374c147001a054bc79bbb2eb41a485988bafd9b52ad8370414d60e61ce5def1eb87596b15066940652928c18e92983974d67ea60a2e4eebc19693f5f33bf125cf0e26f699bf6e6aba7104b9fbac0f81d46e3419487e3ff156bfc3d4bd1c31d14296f3d1e3dd121ca9277584", 0xfd}, {&(0x7f0000001bc0)="4fc1b2993302e15e1588654a38ff589a94bf41865a795f8f7b0fb5b18b7c70573382392e12de4c5376bf00f41d78b5e41de79b9f82c5b575356ce47bb474afa577251819343675636beb1fa8a4f96fede1e30b1233d0c8e61dd69eddf35f69067993448c0720cf81318a019795de2fb033661782a4c50efc4208dec5d9f24d33987b22234fd3f36ea0a87b07300c9f507ca141ff8a3aead7a3241235501fb8a4bf810fe1250c40e00194c490b203db575f59189ae48cfdc1375f91b873d7c8636c95bcd96a27b9cbd779", 0xca}, {&(0x7f0000001cc0)="42d1d074f7037382dd7c0baa2f0b3200f79d97454aa95cdb7a392fbe5408833468c702a5135c230fc14185849f6dfd430f4227584658630f71a806f5f266435ab316e04492b7c67237c4923571006569ef2c9f3ae47864e5ac718b85d4f54a9a7db375e56f5b4b5c8b5666ba0aa1fdd94f9394f92d3cb4b23418374b786ba2ba3eae11b9611fb15d97602a006a1170afc7f792999336eac9fea806ddb688d3fac24dbbf0fafa55fabcfdea848415f3d1c97b91aecc7a2e64a1b4185961fc81e50da1a6e31b7eed8cb8fd266bdd39aecf", 0xd0}, {&(0x7f0000001dc0)="8bd1482b9767c93cfb5e95edb6220df50b4affd8cbd10e07814657d2764589ed8afbf4ace1eb5ace765de7d1f147ec65b2cbe07ca9691305e8c56ba514384c78b7fafafa1cd483b6b23ef11b1d850437cab90cf05df57f85f75a0f37384fb0208a6010f775bc45b2c6d200531928ee3313df9fc47816dbe86c1e1a27d2ed4b50551b115ed1a185b053cb05f658a4e0526e480a6ffda51adb45f7d9ae46468d354953a37594dacb48bc7acd75baf58064d68f200d978f4734e172eef08fca08fed26cfa52b33ff675b265b54a700862", 0xcf}, {&(0x7f0000001ec0)="199164288d2316926714506a1a813e29280d33471073a98479336b86ae9879496bfcf31a16e9843dddb0f594b218cbfc35b223011c68128b85dda83e5e0eb297e37bfb604de713993c884d202886894fd706f99b53409283deecb1a5f5bc54a27d9871efe79dd75423c0c33f7a85e0d5ee30509cd8b4ad64cc9bb1b389c819f9fa843507ac27dac473423bd62ac4b8d99a31fd9dd58019bbeac13a14a6107aa3fbf484727e7d12588a732ae18b5ac8cfb909eb31e1b362620bea6aa4bec047588f943b4dad2fdf5efe05edf53c269d17a5e5e937d5d92f4e7a0d", 0xda}, {&(0x7f0000001fc0)="3248a576b237d65f4fe72a771185fc1dd8ab2ff2307f3f963c2647b649a4a5ab4d918a336d8978d12be6b3ca1e399da79c70c93fff3ed5b313f80cdd019103e0fff09a7585988aadcb7d4b825382ff1aa7c6b5fd1d310c526162f0e097efa4a56c79eaae924a842c1cd323fb34a5a0d0f8a1e981ad7aa4672b9d9c6d364b9adb198183a5d1c2f685d7c5a876afb62c37a388cfd0e239260741fed3d508ce65e65ea05ec27ae84dc24391e7139b0dde831499612492ecff43a78670b22a6549cc350fb7b266030ca557c7708e6106c401310c6e4fdce0df41f4daf9297cba17463e25a94c6273ff37c978cd082023b71c76bb4253ab69be035f6ed17a1c8bf22d06dfa90802da68bccc333e86b35cc82ed393589deb6f7c882622e77e903a733030b84af36b465a28025b416f8936f0f50168a2e8040e0f2824f7eba923c31aef16e57a393da559b1f90bd1bb24481f392952940f0a6063d26a454bc03c480364f137e7c295ac794033d450e06f62f7a377d9743c61d240fade81886e6b3d082c21d3bb7ae6d508c87dbd05b0bea1651b1943a990d918d36a2f5c3fdbe23664c5b0edf3cbc3fc50108c7edb84cb9c807eb15bd511e67c05b6d4cf17c4bbda6ced35ac7ddd20f239e65641c2f9ff4a8dcf5684e6beab02564d38daa55d4006fb8056d38a07c1cbc87c1848febaedbc359c271314d99cff4bb4e42e4569b9d4ac80366fb5c688b216e6de24e213b5f2b5b6e6e079db06a0afe9d6881d00c1c703d9a9768e4d215eedf99a7fac5ba872c6cef9007254df9c280d8a65672bda2df4b03d5af7372352bc3e0883f5f19618ff408c2e8a6022747a32e14886dfd232915281cec94646e0bfb3ba94bc5c463966db0f212a1741d542b5677b8b9985150e4434020ce2c6daa36ce0914ca7a708e4a49deb12bab8bb881cc0899b0642c281640cb3b82f2963c69fe87ade925ee1510c8b65eb11fdcf4eb2727c5f73737041ecf89c09685c6ba8218af8ca4c6a5cab648e1e2e2a58c4596483f3aff9449926a750d92ab881a2872e12e05055136c3e9f0925a36c41e8d3097aeb1e068852a2943d85d68ec2eac28f45cb41e1769857c11a989447b387f6bd6c4ed60c78febfeac69e92e0df134606b147167e0785c934e518c66b2e009fe1d494a82916c0b804f3a24dd5c7dfd4f286586d874e914a6a6c7fada3a0e2561badd9fd117c8946061f36378d3a8b31466620ce393b9b6065e5d96cb5b6c368e6d5a1124d96ba6a97945a14955e9cfd4511a8eb14d0750b0fadd7ea11f1d502c864cc3b6f6ac2f8fb8918244f5f116d82279244c04f61fbaab7a0c3c28f8d3530e4333b1bdb61464343722881bd76108286c35dcfd56a13b9c66cd96b3a9d6587a3126636897288cc3749991400608cd62288a36d9aa9b53feafa6a03d1540cb78a51bc338b7832ef8dfdf0676992f85f88566feaa209d153ef1397bd0bc7a1975e5c90fcbbe2858c6d9775b43aed6d4dff2f48d65706ce156fac5c3ee236607ee156a4578503051f07701f8837f67cb72ad24f96e54b5ce018077ce9d41293b820cbc2265cfb1280da22463556b7c834408fedb304323f2ce699123d2dea7507ce83208f003f7509dc74278d14a3bd036582fdbbbf5c88639706aef43286aa88aa78d4c542c5254969a50e0e64ad140b4c5abed2886a028529137847c4da444ecaad7117f2e1b37c7980e70aa34f40efc5a1908155413d55646d8a6a56002c77fe115de2e4e3af47bbd24f9f45de094619f0ba0e3f6e1725b8490452d0897c4d60be8fe62f1b0ec2f3a329936697f3f43268e31b14dd84be55780eee37b7446bdce7c9e25ae4f6c9f0f87bf428b3e92b9029a9fb58664713ab9cc2ce789351f140ae288c6f7dae1fef9965dde06a64735e32acb8c3c4a20f44abdc61700a00f7a349d9d7e987df9a66ef963fd497a1d98461ad38beb3bc2c196e6afabc4c743583179c66b2c31d05cb797af15173f1264fe5022815c9735b21a2df558eb38592970eab137c78617b06e4dc76d3067830e1180022578c2f92c81648aff0bac9c1e44a6c3b5bcf7022bc60a0b3d3f520aa6f99e7adb353469956e6369dce0c351691d8ee273cbfd8d2b07903e80654463d20e9262e57f0f25c1fa6e4407548a76e12545f24d13769a13ddd9864633d0ba3dfa57edf482ac6c562b766b9209cc8d8286e84be7c5b20c8307dfacc64473aca2f39b79f4c6d9ebc36c963b6918e3b8c3ef65f326ee1337e5d44b0c32e056a7479e41bc23625bd981a599c3732ed22efc41b653730f6b3300c351245f3686a884e12337be1badbcfadfdaca107752e0036155e681b444029c48f22a4e72a9a7464cbedf36c81d98db227b75c27b1f1d27df33c882b1be97bcb412a164c0b6baf65e6a4905ed958798383ceb08966bf99fca43f5c1d690d0ab40f4b9f67b8ef0951d2fe706d9bfb56bcce9ece9d48fdef2e9029e8ec285d220d7d744a408b0f9b988f93ad84c42270d95f6d356fb0ddf1b6f4af68f37d395b012eb448ed8953f3c8d126e88fd3bd92b4b6255c3ea88cd55151bd70c0fba7404649c20908618c8d79b8f0d900bab18435bbe750cc90bf38dc8c1c9b82fcb55a8e8569a8959bd4547cf8059fa08507ebc86296804cab52ca3209ca4bde44e7b13b44ec03ce26e15458a8367a15b4b409a91b2349fd38d4477018f58e60d783cbc729f1d555f0a1be29df10b7cf6357ebc5875d9b37381bda228d575d701ba1c826180597c78c24500429ab004dce2a2d26a7a39a214c030ff93ebe8d173e73be691ac2a3472b3f43faa9ddfd0fda9626781e0908ecdbee7221ed38b0348aa1c6cf37c0ef428f6f4cd531b83eb25f837fc5ecd302fec51da7aa43a20f25e5402955b5d5413be8e1bf09b61707f5231002724adea502b64b383d340c82b7fff679f25569f8525f52fc6e38fe70c30795fd267ce690153e781d6568df2c98d98c61fd39a4eea413cedf2203bb738b7558d50073c5def13c09e6a8dc1dd6d7092645c961c7fabe574f326fb0e81275a5094a68a1fd0d9f96fe0ac2dc67b2d5357ce487a3e788913803038127b742fcfe93b9952adf8363907ddfb588117e9803e1b52f764a8ca0a1ad95be3d508e822eb3bb21c34f3785e97be96b6961dcf601fe376339ed96038bd552212cba9f48f30d20bc16bcca18762b75595812f84250035ab59ac3f032864f523d0ee1a5320d1854ee8793e7a13462ec4011bae3599bdb4fc0ef02200e6a75838d4ed401e87e5fc3ac23665fa7fa81dd6348123571032dc412beea455df1c09c0a3ca5791db356b34890240741504f818c9721ea992029a27b9ac7271c25da10acf91663f0bb4965c06b6e139e820484d3d16baef1c5d15a03b5bbb3674430d1b7cfc4acaa949bdbfbeebe05a24b2da1832c21a90e1ce550932bab056f2b2478c2b2b5676d86bab2a06ef3b3195070df909dc33a3eb158223efed3741e37e4f9d7bb28b1049fefaa17c6f79637f36cdf9e88882ed26adfef000ec71e5d673ed391a1e47691aa0aa7528683ebcfd8d3456b16bb1a76cbbed549aeec12bab9345455690fe25c993bc9e11335fa294d6072e0956b51c0d4d63e6cf31f5b74c6846715ec1207b284c801f6648a246d12796ec14cdcec405c3cc8de6ec6ae8ae73e7b874046220f072aa5e31bc6d6214c64e18a43edd904be7925ea08806697b09c24b245d6d34a1ca0ee8e4f9dc5ed3acc84544f083c4930e49f1a96acaafc80410d3bebd961d101c743a5e15abd69b27d6e06c4517caba10e8e3165e61065f5479cda829de5b0a31a0ccc7abcc144e74989e0a2de4e41f9e7b8eb445d98c7e73092e34b114faf9686599504dcc4b1271e8dd5f491ffba2ae4b80bdec0b6ee8725dc90879bfed4dcb44891fd1b66b55c7100aff854b9ac0e8f914b390e1423d2dc546d2258b7190a8554ff29314fa23799eadd66e8a8e53e4f6b402b9fd69cd7e31fb03024ee7f748ff702bc2ba444efaff0d177c80808b0bb2b3ae4fb8eaf42649b9b7beb24df4e7df8df9a39df24b55d98d49a3988721361e040a60cf85d719fa1ef6be81fe71c1268ac7ef0219af99cdd366c282f6e256b60de916fac3062bd5ad32950f1baa8f490c281f554a57d5ea4564e204a64ffc6d9018f27b8af2a4f87aaab3d6f2f0154561f556c2760b477d434fb6d3605d94595a793a2d8e61ef8f682f606cf098b5fa8245a58fc1bcb6c04644ffa021480f18a0e51b74409e2f9d65d9aa13c935605e0a6c9e463011c28a909b130a91bba2c48733c038a92d9d433b36560c13f67c02f003fed286593b16df1305d9669712dc452d39e4f87873170a50517ec47d4e8673137c2d7c908b782a8395ef6595f639005c9da890b82c34191b5ed59b313580db2becfca678388cfb1569662f09e23c7a6cbacf399590ab202e37d9522addd43f376a13646bde37f375bbda9f3bd5b7f5ccbd964e81f60b2c94874dbb3372762c469b6dcbea9d17fa6af15904ef671d2ff892f7f3ce4f9e6e49c702f518fa5a9f5c8664804130bd9cb9784422da9273f5e9fbc03d8fdd929190aceb853a6c8d4e444598f12b3a24c458b324fffed2a7a3ed004547c5cd8a7ef3db0cb04dbc4966b690f21f78650ff9aae164cdda1e537458dda4a5849b8022ca696e04d35c6f9c32ffd4871db62b5d692b3a2bb261fac745dd7b40f952695b9027f0c2df0cbc3c82f985077a61506653704d2172c8df346f1edb15eefe54709433733d30da7f58e213090e57c83733ae66e9a6742a4a347c1d2f39c43d7f5f20a0eaf6d75f223f0d71b4f2b3244e719ea8b62d371191d6f924c3d0e2add93af5b4a3c1e83b55e3b87701e54970f312991517d8b6e636247c0f8651f22446cfa92d4f4decbee506d386953359a7ccd801e24e343b36fe55002c1c3b9a3b5fb45b4b76c5f4011d4bd4ec156fd74db0f9642393cddbf06a76654f189f2d00d7575967dedf8f37eedfb3425a9d2da012ef50f8815cbcab5c6269221be4b470efbabd81e464e32f8048cb1b53bffcf1dedfd99dd9cba93cb6d8d6508e4666ad2e5acdc61bc2d1bcf4306cd59f37f7c998be4b305948d1e7ada148073a132717c72a1067398291d0d33bd2a54efce8698eef93aed53ed00561a3192acc369bab036d89aa8ad012872a5e334e937874eb0c8264fa177219a3a44f68f27a2d75ca3e9ec31d7d337bbd84a55316a1646c5ac85cd0e52a39b8114bb2816107ba017d9a1e716ea0590e47c1520178a5fe9a7f2f6c390f5c5930292951b192c02ad3f4d7eb0fdb3479120f6625cf13907819d22ed57025daa2abbbf6da097b2a9755d27a4580b1ded730522cb111c31af33c34fb4258b27cbe369c67d762ab3618dcbc0e6cb663fdaa47074aa8e8ddb26d25721d9922f1b4bef767156a449b58d39d8f937f7cb5130438367b0b2e7f41b9709b61870de2b61aa57950d140b21d64f582489c9947f097052b5e64323a16b2782711721b853503a0f5452c19875ad388688c494901a3a89b3f9194a2fda1e9ecc6f86c98c3c64d421d4e703bae9f9cdaee369cba65ccf68ec5d02748edf9f49ec630820f104ef00c4af1f3c43e3c8052b0cb5c9054125b14377a2dd59a6f6f7248a138755b152483588c3d7f20a26a3c09de400d13f633a8525836d36695735f12666693c6086b8aa3d65f5a82f47325e31d149a13f7b2edf19fbf510b50641858f5036aa88a85cd767698b0a8251d1772f4a47fa800696d2ba33b6df7ee9fc0a984104f049828d1355c4", 0x1000}], 0xa, &(0x7f0000003100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r0, r1, r2, r0, r3, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r3, 0xffffffffffffffff, r1, r2, r3, r2]}}], 0x70, 0x40000}}], 0x2, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000013c0)={0x0, 0x3, 0x2, {0x5, @vbi={0x0, 0x0, 0x100096, 0x4745504d, [0x1, 0x1], [0x8200, 0xfffffffc], 0x2}}}) ioctl$VIDIOC_QBUF(r4, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x5, 0x0, 0x4, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000000)=0xffffffc3, 0x4) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1d, 0x2, 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x1000, 0x0) bind$can_j1939(r5, &(0x7f0000000000)={0x1d, r7, 0x6}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) sendmmsg$inet(r5, &(0x7f0000004240), 0x0, 0x0) syz_usb_connect(0x6, 0xfffffffffffffeec, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 4m33.886141062s ago: executing program 2 (id=7047): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r0, 0x4, 0x8e000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff4000/0x9000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0, r0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89e, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000d00)={0x2020}, 0x2020) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) r3 = fanotify_init(0x200, 0x800) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r3, 0x161, 0x40000874, r4, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x1) write$tun(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x11) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) 4m33.573154523s ago: executing program 2 (id=7050): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) syz_open_dev$cec(0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x0, 0x61}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa960bffff4, 0x13012, r0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000280)={0x3, @win={{0xc, 0x4, 0x1, 0x3}, 0x0, 0x631, 0x0, 0x0, 0x0, 0x6a}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x8200, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="0100"}) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x2d, 0x20040040) dup3(r6, r7, 0x0) connect$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r8, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) setsockopt$inet6_tcp_int(r8, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) connect$inet6(r8, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000140)=[{0x6, 0xfe, 0x0, 0x7fff7ffc}]}) 4m33.247751053s ago: executing program 2 (id=7054): r0 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f00000005c0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\v-_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\n\x8c0x0) sigaltstack(0x0, 0x0) (async) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) (async) mprotect(&(0x7f000000a000/0x2000)=nil, 0x2000, 0x2000000) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) (async) socket(0x10, 0x803, 0x0) (async) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) socket$packet(0x11, 0x3, 0x300) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = syz_open_dev$vcsa(&(0x7f0000000080), 0x8, 0x10000) ioctl$HIDIOCSFEATURE(r5, 0xc0404806, &(0x7f00000003c0)="466a97f295577ef34b00e94b41bfabbdb489fe95cb9e61dbe0f2af3cadd6efce3a10a66d0c67735127c3ea231b75428a70fb2172b7858d6321afeeef2fea99bef26eca1ab3fa31041353342dad2bd122a1bbf8d75435b28ed11067ff879f85980ab87a38e300ee1cb12e056c1457300ce202bd55609b239b23490ac75863c8e517b653a21fb488f785") r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) (async) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x88101) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r9, &(0x7f0000004200)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="1ce40000000000006abace"], 0xe) (async) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x40489}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x38}}, 0x0) socket$kcm(0x11, 0x3, 0x0) 4m32.775393116s ago: executing program 2 (id=7059): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00008, 0x0, 0x50032, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x0) ioctl$TCXONC(r3, 0x540a, 0x3) ioctl$TIOCGICOUNT(r3, 0x5409, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000140)={0x4000, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r4, 0x9) socket$pppl2tp(0x18, 0x1, 0x1) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4000000) sendto$inet(r2, 0x0, 0x0, 0x10008085, 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r7, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x2000000000001005, 0x19dff}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xaba4}, {0xa, 0x4e23, 0xfffffa0e, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3ba}, r7, 0x5}}, 0x48) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "9eebf9", 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x1, 0x0, 0xffd}}}}}}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x890, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000006, 0x0, 0x5, 0xfffffffffffffffc, 0xffffffff, 0xbf4, 0xfff, 0x808000000000005, 0x800000068], 0x2000, 0x80cd6}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 4m32.402061217s ago: executing program 2 (id=7061): syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000041000100fcff0700040000000100000004004880180001801400108010000b8008000100ac1414bb0400368008000200", @ANYRES32=r0, @ANYBLOB="2778fb246c290f50ab1b7fc9443227efc15fc48f6d5d7df1496d98419793004ca85623f1e88ceeae02d213383e8858fa90c5b3917a9d9c0e0234c26fb874f32b0c189df51e2993011f3f95d663adf6491e944d50e489bd110000000000"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r3 = dup(r2) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x8}}, 0x20) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000540)={0x4, 0x6, 0x0, 0x4, 0x15, "1c702ac6c98ad9decfa06e24b787a55737a502"}) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000340)={r3, 0x11, {0x0, 0x0, 0x0, 0x1a7, 0x322, 0x0, 0x1, 0x4, 0x8, "728f5f37643adbbdf35d72f7a16ffe72b9b609b7a01df9a3a52f514c60e5afce9858192ef4fab0dcad88fab04263e2b47a0ffd18536d66988bbac2069288b3d8", "c6061a8ab8e40a2a82514173d8c7160b3dd0c022dc7242815bb55f964984e732e1a2a571b2e2055c2af50c9c1b99e9dd2c2d38890fa713020fb7a3f109a72dd9", "8401657323ae50c161042ce9ef867c8ca8587a228eb6815edc1f15a1e0c121bd", [0x436, 0xd8]}}) ptrace$getregset(0x4204, 0x0, 0x201, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000002300090025bd7000ffd3df2501000000080001007f00000108000b"], 0x24}, 0x1, 0x0, 0x0, 0x24040811}, 0x8410) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m31.767820336s ago: executing program 33 (id=7061): syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000041000100fcff0700040000000100000004004880180001801400108010000b8008000100ac1414bb0400368008000200", @ANYRES32=r0, @ANYBLOB="2778fb246c290f50ab1b7fc9443227efc15fc48f6d5d7df1496d98419793004ca85623f1e88ceeae02d213383e8858fa90c5b3917a9d9c0e0234c26fb874f32b0c189df51e2993011f3f95d663adf6491e944d50e489bd110000000000"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r3 = dup(r2) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x8}}, 0x20) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000540)={0x4, 0x6, 0x0, 0x4, 0x15, "1c702ac6c98ad9decfa06e24b787a55737a502"}) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000340)={r3, 0x11, {0x0, 0x0, 0x0, 0x1a7, 0x322, 0x0, 0x1, 0x4, 0x8, "728f5f37643adbbdf35d72f7a16ffe72b9b609b7a01df9a3a52f514c60e5afce9858192ef4fab0dcad88fab04263e2b47a0ffd18536d66988bbac2069288b3d8", "c6061a8ab8e40a2a82514173d8c7160b3dd0c022dc7242815bb55f964984e732e1a2a571b2e2055c2af50c9c1b99e9dd2c2d38890fa713020fb7a3f109a72dd9", "8401657323ae50c161042ce9ef867c8ca8587a228eb6815edc1f15a1e0c121bd", [0x436, 0xd8]}}) ptrace$getregset(0x4204, 0x0, 0x201, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000002300090025bd7000ffd3df2501000000080001007f00000108000b"], 0x24}, 0x1, 0x0, 0x0, 0x24040811}, 0x8410) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.943389576s ago: executing program 4 (id=8123): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000380)={&(0x7f00000002c0)=""/162, 0xa2}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000008c0)) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000140)=0x200000000) ioctl$int_in(r1, 0x5421, &(0x7f0000000180)=0xe) preadv2(r1, &(0x7f0000000000)=[{&(0x7f0000000580)=""/249, 0xf9}], 0x1, 0x0, 0x0, 0x6) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r3}, 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r4) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="375e27bd7000fedbdf2514000000180007800c000300"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f00000001c0)={0x0, 0x224}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000240)={r7, 0x0, 0x20}, 0xc) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000240)=0x3ff, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r8 = gettid() r9 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) socket$inet6(0xa, 0x2, 0x4) read$FUSE(r9, &(0x7f00000044c0)={0x2020}, 0x2020) tkill(r8, 0x8) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) close(0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a521bf68b00005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 7.851505889s ago: executing program 6 (id=8129): r0 = syz_open_procfs(0x0, &(0x7f0000002340)='mountstats\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) fcntl$getflags(r1, 0x40a) write$nci(r0, &(0x7f0000000000)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x7, {0x0, 0x1, 0x3}}, 0x7) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x54, 0x0, 0x0) pread64(r0, &(0x7f0000002380)=""/253, 0xfd, 0x9d) get_mempolicy(0x0, &(0x7f0000000100), 0x400535a, &(0x7f0000835000/0x2000)=nil, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') read$FUSE(r3, &(0x7f0000002c00)={0x2020}, 0x2020) 7.712596817s ago: executing program 6 (id=8130): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x1000000000000000, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x182, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0xa) sendmmsg$unix(r1, &(0x7f0000004b00)=[{{0x0, 0x0, &(0x7f0000004800)=[{&(0x7f0000000600)='Z', 0x1}], 0x1, 0x0, 0x0, 0x8010}}], 0x1, 0x1) 7.522919005s ago: executing program 6 (id=8131): add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000002c0), 0xfffffffffffffffe, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x8, 0x8a, 0xfffffffffffffff9, 0x2000000000007, 0x4000000007, 0x43, 0x52e6ac5d, 0x2000ffffffff, 0x9655, 0xfffffffffffffffe, 0xa, 0x9, 0x1, 0x8000000b, 0x80000000000000, 0xcc3, 0x1, 0x8, 0x16, 0x3, 0x100000000, 0x5, 0x9, 0xfffffffffffffffe, 0x3, 0xa}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = memfd_create(&(0x7f0000000300)='\x92n\xff\xb5\xe1\x1f/\xbc\x04\x00\x00\x00\x00', 0x3) fallocate(r2, 0x0, 0x3, 0xffff) copy_file_range(r2, &(0x7f0000000040)=0x369, r2, &(0x7f0000000100)=0x6, 0x80, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x40084504, &(0x7f0000000000)=0x39a6) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000001280)=""/4092, &(0x7f00000010c0)=0xffc) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x1000000000000008, 0x2, 0x4000000000000e52, 0x1, 0x5479, 0x1043, 0x200000000006, 0x4, 0x1, 0xfffffffffffffffe, 0x100000000, 0x9ca6, 0x1, 0x8000000000005, 0x5c], 0x8080000, 0x42590}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000040)={r7, r7, r7, 0x4, 0x4, 0x6, 0x6, 0x7, 0x6, 0x84, 0xfff00000, 0x80000001}) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0xc004) write$binfmt_script(r8, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r8, 0x0) 5.83795385s ago: executing program 1 (id=8137): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r0, 0x40044591, 0x0) r1 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x5, 0x2}, 0x30, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r7 = getgid() mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x1200489, &(0x7f0000000400)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r7}}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r8, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x7) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x54, r9, 0x111, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0xd5, 0xb, 0x9}, {0x6, 0x16, 0xfffa}, {0x5, 0x12, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x804}, 0x20000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) unshare(0x2040400) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x1, 0x4, 0x89, 0x2, 0xffb, 0x7, 0xb6b, 0x0, 0x2, 0x1, 0x3, 0x9, 0xff, 0x1003, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0xa, 0x5, 0x100000, 0x9, 0x3, 0x63c, 0x10, 0x10001006, 0x2, 0x6, 0x1bf7, 0xb, 0x40, 0xfffffc00, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x3, 0x40001, 0x7f, 0x4, 0x0, 0x9, 0x8001, 0x101, 0xa, 0x1fa0860a, 0x3, 0x100aa, 0x7f, 0x2, 0x0, 0x4005, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x5, 0x7, 0x1, 0x0, 0x4, 0x9, 0x8, 0x3, 0x3, 0x4, 0x0, 0x7b2, 0x3f6, 0xffffffff, 0x6, 0x40000006, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x0, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x9, 0xc50, 0x2, 0xe, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x8, 0x5, 0x8, 0x100, 0x4, 0x2, 0x40, 0x8, 0x4, 0x5, 0x401, 0x66cd, 0x8, 0x8, 0x799e, 0x1fc, 0x6, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) inotify_init() landlock_restrict_self(r6, 0x5) landlock_restrict_self(0xffffffffffffffff, 0x1) 5.700368399s ago: executing program 1 (id=8138): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "41328ac33100", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89a06afff55f00fd"}, 0x38) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0) 5.599291229s ago: executing program 1 (id=8139): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) io_setup(0x9, &(0x7f0000000740)=0x0) io_destroy(r2) socketpair$unix(0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ustat(0x7f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e5876e4040200516940a0000000109022400010000000009040000025883b2000905850140000000000905f3"], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000000)=0x3) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x383201, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000180)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000140)=0x7fff}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x6000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) 5.578725439s ago: executing program 4 (id=8140): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x40000000, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = dup(r2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x42, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x52, &(0x7f0000000380)=[{}], 0x8, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xa6, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000640)={0x2, 0x0}, 0x8) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190) fcntl$setlease(r7, 0x400, 0x0) r8 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r8, 0x400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x88040, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0, {0x90}}, './file0\x00'}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x9, 0x6, 0x8, 0x8}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r10}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x15, &(0x7f00000000c0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x2}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc}}], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x84, &(0x7f0000000200)=""/132, 0x40f00, 0x2, '\x00', r4, @fallback=0x12, r5, 0x8, &(0x7f00000005c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x1, 0xffff, 0x3}, 0x10, r6, r9, 0x1, &(0x7f00000006c0)=[r10], &(0x7f0000000700)=[{0x4, 0x1, 0x7, 0x4}], 0x10, 0x9d}, 0x94) poll(&(0x7f0000000000)=[{r1, 0x63be}], 0x1, 0xa1) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) dup3(r1, r0, 0x0) 5.111047181s ago: executing program 0 (id=8141): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff4000/0x9000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0, r0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89e, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5.017789996s ago: executing program 0 (id=8142): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "41328ac33100", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89a06afff55f00fd"}, 0x38) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x25}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x30}, 0x1a01) 4.874579423s ago: executing program 0 (id=8143): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) io_setup(0x9, &(0x7f0000000740)=0x0) io_destroy(r2) socketpair$unix(0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ustat(0x7f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e5876e4040200516940a0000000109022400010000000009040000025883b2000905850140000000000905f3"], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000000)=0x3) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x383201, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000180)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000140)=0x7fff}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x6000) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) pipe(&(0x7f00000000c0)) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r9 = socket$pppoe(0x18, 0x1, 0x0) recvmsg(r9, &(0x7f0000001840)={0x0, 0x0, 0x0}, 0x10003) 4.582016785s ago: executing program 5 (id=8144): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18030000000000000000000000000000850000002e000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b80)={r0, 0x0, 0x7, 0x0, &(0x7f0000000000)="c03cba2d1f1f78", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.307194329s ago: executing program 6 (id=8145): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @loopback, 0x4}, 0x1c) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r1, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00031e0000000403"], &(0x7f0000000180)=ANY=[@ANYBLOB="000f82000000050f8200030710021a7602000a1003020b0001d8f4ff6c1003288baa2af1283279f2102f96fe5bd2a102e210686284d3ec03d07c5a6c0c715a36e93f82bb1c3533d684a7426a14b40824a084b31760a1a700334fc1a4043dcb04a0cb83ba6e0f5a194d6e88e6f0b9fb1030d1cbd8cf1d920077e88ae2e172ccf1ee1947201fecff1193"], 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x28000600) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000006a0083b0cbe05f0000000000000000000000000008000e0004"], 0x20}}, 0x4000884) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x2b, 0xfffffffe, 0x30004004, 0x0, 0xfffe, 0x6, 0xfffffffe, 0x0, 0x0, 0x1, 0x100}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r3 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0xaa24, 0xc000, 0x3, 0x1fa}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r3, 0x6633, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) 4.20694528s ago: executing program 5 (id=8146): syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x4, 0x10000000}, 0x0, &(0x7f0000001340)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r0 = socket(0x23, 0x80000, 0xd9) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newqdisc={0x50, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x81}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x842}, @TCA_CAKE_FLOW_MODE={0x8}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x8382, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r5, 0xc01064c7, &(0x7f0000000280)={0x0, 0x0, 0x0}) sendto$inet6(r1, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.881517396s ago: executing program 4 (id=8147): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) recvmsg$can_j1939(r0, &(0x7f0000001400)={0x0, 0xfffffd22, &(0x7f0000001380), 0x0, &(0x7f00000013c0)=""/12, 0xc}, 0x62) r1 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000040)={0x800, 0x6, 0x4, 0x10800, 0xa1d3, {0x77359400}, {0x5, 0x2, 0x3, 0x24, 0x2, 0x1a, "5b72e6d6"}, 0x7ff, 0x4, {}, 0x1034}) 3.626075452s ago: executing program 4 (id=8148): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={0xffffffffffffffff, 0x18000000000002a0, 0x42, 0xfffffffffffffec1, &(0x7f0000000500)="b9ff0300600d698cb89e14f008111f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xfb, &(0x7f0000000000), &(0x7f0000000280)="8dc92a8ff39080a675b6565efa3ed46f2a2756e4686c04020000002599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc06003fa40e054d38d49dfbebc2f137fc7110f48727f3ac3d6c83f6fda9222d2acdb0b3b9374206648707f4f5aeabd986d5f491389e9114ba8bd9aeeeed448e227802a455d6ba62aebeebc45885165e2501c30dc33fa47f5627e572e86278239ca2d8aeec7a25c43448bce8000000"}, 0x3d) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000006340)={0x2020, 0x0, 0x0, 0x0}, 0x2058) sendmmsg$inet6(r0, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000200)={0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYRES8, @ANYBLOB="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", @ANYRESOCT=r2], 0x568}}], 0x2, 0xff00) 2.614730939s ago: executing program 4 (id=8149): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000380)=ANY=[@ANYBLOB="0180c200000ebbbbbbbbbbbb0845000024000000020011907800000000000000000000fffc00109078e20100018000000000"], 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0xb9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9, 0x2}, 0x20) getsockname$l2tp6(r1, 0x0, &(0x7f0000000580)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x2000) getsockopt(0xffffffffffffffff, 0x40007, 0x84, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r2, 0x0, 0xffffffdb) setpriority(0x2, 0x0, 0x8) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2}) socket$nl_crypto(0x10, 0x3, 0x15) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYRES64=r1, @ANYRES16=r6, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r5, @ANYBLOB="20005e80080007003a05000008000600ef0000000800c29bdf055b6088ef0100"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r7 = io_uring_setup(0x5ab1, &(0x7f00000003c0)={0x0, 0xc8a5, 0x200, 0x10000008, 0x3a}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe6, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r7, 0x221d, 0xccd1, 0x12, 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x6, 0xf, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000140)="a08194cd1c0d", 0x0, 0xfffffff9, 0x21, 0x1, 0x0}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'nicvf0\x00', 0x0}) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000080)=@userptr={0x6, 0xa, 0x4, 0x1, 0x0, {0x0, 0x2710}, {0x1, 0xc, 0xd2, 0x6, 0x77, 0x6, "0080ca6f"}, 0xfb, 0x2, {&(0x7f00000002c0)}, 0x6}) 2.437230765s ago: executing program 1 (id=8150): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x9, 0x4d032, 0xffffffffffffffff, 0x0) (async, rerun: 32) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') (rerun: 32) preadv(r1, &(0x7f00000025c0)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/202, 0xca}, {&(0x7f00000024c0)=""/44, 0x2c}, {&(0x7f0000002500)=""/181, 0xb5}], 0x4, 0x200000, 0x10800009) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$pppoe(0x18, 0x1, 0x0) (async, rerun: 32) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000007c0)}, 0x400c804) (rerun: 32) r2 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) (async) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000180)={r5, 0x1, 0x6}, 0x10) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000080)={r7, 0x1, 0x6, @remote}, 0x10) (async) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={r7, 0x3, 0x6, @random="afbebd4aea8d"}, 0x10) (async) write$binfmt_misc(r3, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000400)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0xe, 0x4000080000000700, 0x0, 0x0, 0x19, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000004000", [0xfffffffffffffffc, 0x31]}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001000)={'syztnl0\x00', &(0x7f0000001280)={'tunl0\x00', 0x0, 0x7, 0x8, 0x4, 0x8, {{0x3c, 0x4, 0x3, 0x8, 0xf0, 0x64, 0x0, 0xea, 0x29, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x89, 0xd, "f32bbd8bf6f49176173c9d"}, @timestamp_addr={0x44, 0x4, 0xe2, 0x1, 0x2}, @cipso={0x86, 0x9b, 0x3, [{0x7, 0xc, "ff447e09ca1d87774bf1"}, {0x7, 0x4, "ea7f"}, {0x1, 0xf, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00'}, {0x2, 0x12, "4e15adaf92f63b270800000000000000"}, {0x0, 0x12, '\x00'/16}, {0x1, 0x12, "9cff23d08131538a7aac654dec46f6e5"}, {0x1, 0xc, "2cb588b2cc2eb69e21b1"}, {0x1, 0x4, "7d1e"}, {0x2, 0x12, "dfa3273fb264456d752c993de47b4366"}, {0x1, 0x12, "ac0dd2104c7682efedac1ad00ffc4931"}, {0x0, 0xc, "d1986b539187dc83bfd2"}]}, @ssrr={0x89, 0x13, 0x45, [@multicast1, @empty, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @end, @timestamp_prespec={0x44, 0x4, 0xd2, 0x3, 0x5}, @generic={0x89, 0x4, "a406"}, @timestamp={0x44, 0xc, 0xb6, 0x0, 0x5, [0x6, 0x1]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001040)={'batadv_slave_0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000001100)=[{{&(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000240)="d15dbc075f0f2aee162a4c39dc82c61f43c44184feb79932a1b638a4628f8ed2f9b3d50ee4154139bf283296cf9cc28f11278a199abc8507273981b471dafeb6646179f5be1034a070cb78baf6aa9c7b92ca92446e97d50591e2bea33c643020098762c83984cfc0e8b32e6613cb343b9115", 0x72}, {&(0x7f0000000300)="07272db4f70d01c676959a376a0260cfebc8a733733e96f76619aee7a14bd3fe17635ca1814d3b02fa8ab84efad3e5e687c2260c07af644d4cfa46815d49b564c862083097a99beb8fe3c37b5807a2b5b8024250e2f2eeff6f56d28f5990a5818d841e9837764fa548755bc720e963e13398c1100d2d9063396c44ab11f835b3dbd2aafbdedad095ad1cc23a90", 0x8d}, {&(0x7f00000003c0)="9d23bfc51bf01bd7eca40daf7281814f0311d03034ce7604d422159ebbe82348233286c988f7d3e4768cb305745e5ab7cab66e2b90950c6f46b3f3e901d448ae8ec6c3d99a8188bb54207dca6a593812ae606855f6272efe9e12d295254206dac795e870f936804de0cf1f702d3737bdce6e", 0x72}], 0x3, &(0x7f0000000480)=[@ip_ttl={{0x14, 0x0, 0x2, 0xfffffff0}}], 0x18}}, {{&(0x7f00000004c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000003680)=[{&(0x7f0000000500)="4037424d7e450932c4eea662fedfb6e5cefb45e0e46a48e9c842e33c2ab53032900e3713e28f36b8479a02b316c898e8a3bab65327e553c8a5ae18e3b7f1a6af1e33fe057525a5d6dae24be7d5d671050a21567acd44877e169b7ca2416e3353ac133d26c0371f6e73220700d671926c9f15bd7f9b611aee2d8594b857eac13e04dc5ed702ed36a258cccb4b59b550c002fb97bdf7dde56b9efa7ac9721731bea787615a558fecd59cdef38a89a7f1a739344ad35a4df4446a8c1ca38a8053f05651ac94355eca3836be0329816ba87efd2ae4074fb81839ce589c4c7b888f386fe7275d98fa43", 0xe7}, {&(0x7f0000000600)="119d03b078c518c945cf41801125ed8723964c37c1232d66ff525624593d621304eb5998b41eb37472d362db6a7b19cc505564c05f91d4eac6d8263c39a5c70a1b755678e95ebfe5a8207f35a507cad7832041", 0x53}, {&(0x7f0000000680)="9d9ac8b71a9d7aedff0fb079b2a2b94de3927195fddb3f54be7b2e1fe6ec3acda68c6f927dc8cf3fcd116f6188c9315a5fb3c2a1740d3266efd16cbc649ed39b9d36bf586a2a45de69858d376d0fed038ee6cf4cd672430931b25c71cde63a6f583971e6633f534033bee4ddaaa6aff2cfb5b5f1bd8efc3080aed6283e64799ba2180e1b68086ab77ffb4ba51528a412b67142c86b2202d8e7a93f8579857d79af31f85b0b23db2dd88940bf959fbb1502f8defb420e87f7a454b26c55ce66e6f0a85f523f", 0xc5}, {&(0x7f0000000780)="0eef5b6b44", 0x5}, {&(0x7f00000007c0)="fdc7e8880eaa45d707cd6d3dfe08f81c74a99ca0d101ed3d103e0e572f2b554801cd214726060c5815f441533325e61528fd5c97ee368b5725cf41fb3d28e626a5e6698a481e7bbe3102b41ac8be89fa8425dff0da060e044264de2cfe9cd109c8eb6c54fcc6b19782b14d9a16b9fbc16996c7a430abc67900f2858285fd8777565489e6", 0x84}, {&(0x7f0000000900)="ea8c8269442813bf0c378cec45727c491dec7d9931483eeb4591aeb43e2bebbe6adcaf6191ce3adb5b050cdb7529ddfd6f5388afad99d1d118b05f97aa7c83f6973d14b3027c8971c33033f06632dfa28fd666a8ef144845b5a2c55ba4b3f4993aca457f7546eff039f08f79285252b2d6c65e629d6353348a2fe424d697df3c1346759f1a3a7bb99f34cc9f922a92e6eb97cb54f6a95b1ee6d9e27c950bf6eea8a686f64659b1eb59ea3bbb96ac8b8ae0be64c52f292bba416aa5ecac27914403abeafede6ecd9e18005c79de49658e33fe4b148da439bfaea25bddd136ee0db37cdc3d6ef6f941a0448227d193b942ed4e2d", 0xf3}, {&(0x7f0000002680)="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", 0x1000}], 0x7}}, {{&(0x7f0000000a80)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f0000002600)=[{&(0x7f0000000cc0)="a9a67d", 0x3}, {&(0x7f0000000c40)="264c056a683ab4a969318348", 0xc}, {&(0x7f0000000dc0)="72a592774fd3d368b9a128604f7f5f7e75379a960e5e276a0545567e1a6eca3abaa5957d1730eead9eae3f66978943e787ff72ca1142af9dacec38e0219ba72d880aac1523f76141f3ec9895fb209f41358559f2389413214c6f0f6da12d1c939ca2e0aa98f6f1b57e74183ff16acaa8d308d6589ecf17553e893aa8fe28f404b3f8f3ae86a2c1a6d9df0b22c421b24e3a9a2a0c443a57f71ddd4715e2bb0b40b7ae4adcc2bf6440725688a526ba34f84a94806342d1e5736232334b636dfa28baa6e5b3a71c47b4aed925c8f38ce13fd3f8f5e2cf7ddaad6dbaa62cdfa2f655961428b9a36526866c08b0b3112751ef", 0xf0}, {&(0x7f0000000c80)="486af37962ab3e74ec15ac9951e70b97cb43b8829266e0eae96e43a62f7315d6eb999c8e816de3f159c9f915", 0x2c}, {&(0x7f0000000d40)="50ee869c680b7ba954c2ff76def4ae58c3da71dbe5c87d98fbf02fb6126c77479a1cef8cd47d3e553df7b992ad3cc9e727a3eb3ea1efd66ddefb49d544e0c641c910d4e4c3c3d956f5c1c8aceee3860f7334718910817b05d49b00179874a7336d006bbaca4d6d25583eeef70d7299327bdb51e1bf3af3c87feec0f6b3ec82", 0x7f}, {&(0x7f0000000b40)="24111f0ca484b7acf2f93dfb1ce7e161a29ea821e921b2d007991a9c801e820c92d101403107fa2a8b7b4c11eaef7c38580fc8ad50835b43ed41bf44134c6d6d6e4f6fb802d5c261601dca4b21b27dd9f48ebf611fb7f9acf70d0124c27f75399e", 0x61}, {&(0x7f00000000c0)="6bc0ceea57da5c62cd075faa8e6408957153022a2056ab734314000000", 0x1d}, {&(0x7f0000000f40)="3f455df492b8cb9cc17495e1a81ad78218c87b96408021a5dfde1869f17d35eca1be2213d8caebb10519da340acdc4fb3b4c0396cf2719ef7f2bfef267a2dabafc1a5d450797a3030bb63c5f311904eae5b6a166f82c3dff5d296a12ccba753bad2b43279d085c4709df98f455b6d1d9d60af67661955e168a2d0d6ae17cb6206a3ae70d83297552410f", 0x8a}], 0x8, &(0x7f0000000880)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @remote, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xc0}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @loopback, @local}}}], 0x78}}], 0x3, 0x8000) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r13, 0x6, 0x3, &(0x7f0000000180)=0x3ff, 0x4) (async) bind$inet(r13, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000011c0)=ANY=[@ANYBLOB="380000000e6f6619e48dad9effb7b189a2d15f90052c5f86f7601d0b9a43280800004c1026e5911899f71c26488fae27dbce8342eb0bc86ba391c350a179efd81f326fe8647e11180010630a26bada83f6d16faf967c6a556fce98ca1d4283f8", @ANYBLOB="010026bd7000000000000200000008000300", @ANYRES32=r11, @ANYBLOB="0c009900f40000002e000000080026007f1700000800270002000000"], 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x2400408c) 2.399994311s ago: executing program 0 (id=8151): r0 = socket$inet_sctp(0x2, 0x1, 0x84) poll(&(0x7f0000000200)=[{r0, 0x1210}], 0x1, 0x1ff8) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) accept4(r0, 0x0, 0x0, 0x0) 2.321896573s ago: executing program 5 (id=8152): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff4000/0x9000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0, r0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89e, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.256424817s ago: executing program 5 (id=8153): socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) socket$kcm(0x2d, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r3 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f0000000100)}], 0x2) io_uring_enter(r3, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f0000000000)=0x9, 0x4) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x48, 0x2, 0x8000, 0x9, 0x2, 0xfbfffe0000000001, 0xfa11, 0xfffffffb}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') lseek(r4, 0x100000008, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f00000002c0)={0xa, @sliced={0x8001, [0x6, 0x6, 0x6, 0x8, 0x8, 0x1ff, 0x3, 0x0, 0x79a, 0x5, 0x150a, 0x7fff, 0x7, 0x8, 0x6, 0x2, 0xfffb, 0x7, 0xfffd, 0x7, 0x80, 0x8000, 0x2, 0x4297, 0x4, 0x5, 0xeb95, 0x1, 0x8, 0x4, 0x5, 0x7, 0x1000, 0x7f, 0xa62c, 0x7, 0xfffd, 0x8, 0xb, 0x9, 0x6, 0x6, 0xf, 0x8, 0x193, 0x9, 0x7, 0xfce4], 0x6}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) 2.082586261s ago: executing program 1 (id=8154): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = memfd_create(&(0x7f0000000500)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x2) ftruncate(r5, 0xffff) (async) syz_usb_connect$uac3(0x3, 0xa0, &(0x7f0000000340)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x3, 0x1, 0x9, 0x20, 0xc, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0xf7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x2a, 0x1003}, [@output_terminal={0x13, 0x24, 0x3, 0x3, 0x0, 0x0, 0x6, 0x0, 0x4, 0x8, 0x4, 0xa}, @extension_unit={0xd, 0x24, 0xa, 0x6, 0x1, [0x0, 0x173ea21786b5b7df]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x2b0, 0x8, 0x5, 0xf8, {0xa, 0x25, 0x25, 0x2, 0x7, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x6, 0x2, 0x21, {0xa, 0x25, 0x25, 0x4, 0x2}}}}}}}}]}}, 0x0) (async) fcntl$addseals(r5, 0x409, 0x7) (async) r6 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x8000}) ioctl$OCFS2_IOC_RESVSP64(0xffffffffffffffff, 0x4030582a, &(0x7f0000000000)={0x2, 0x2, 0x7, 0x7, 0x6, 0x6}) r7 = fcntl$dupfd(r6, 0x0, r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r7}) (async) r8 = dup2(r1, r0) (async) r9 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x101) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x49, [0x3, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x1, 0x7f, 0xa, 0x4d, 0xfffffbf2, 0x5f, 0x0, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x8, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x9, 0x51e, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x0, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x5, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x10002, 0x12b, 0x8000, 0x6, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x3, 0x1ff, 0x2, 0x3, 0x0, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x4, 0xea4, 0x4, 0x5, 0x4, 0x80, 0x5, 0x400, 0x1, 0x7, 0x400001, 0xfc, 0x1005, 0x7ff, 0x5f31, 0x4, 0x29, 0x6, 0x1000007, 0x9, 0x4, 0x2, 0x8, 0x9, 0x7, 0x5, 0xfffffffd, 0x3, 0x8080, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x7, 0x6, 0xb, 0x48c93690, 0x2, 0xff], [0x4, 0x1, 0x6, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d5, 0x9, 0x5, 0xde5e, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x8, 0x8, 0x86, 0xb, 0x1000000b, 0x3e7, 0x100005, 0x5, 0x4, 0x40002, 0x1, 0x8, 0x84, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x6, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x8, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x6, 0x3, 0x101, 0x9, 0x4, 0x2], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x20001005, 0x938, 0x6, 0xd36b, 0x51bf, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x1, 0x1, 0xfffff801, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000006, 0x5, 0x8, 0xff, 0x3, 0x2, 0xffff, 0x3, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c0a, 0x0, 0x2, 0x1005, 0xb1c, 0x5, 0x1ff, 0xfff, 0xfff]}, 0x45c) (async) r10 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r10, &(0x7f0000000040)="e2", 0x918) (async) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x80489439, &(0x7f0000000080)) (async) r11 = dup2(r2, r10) ioctl$sock_inet6_tcp_SIOCINQ(r11, 0x541b, &(0x7f0000000100)) (async) write$qrtrtun(r9, &(0x7f00000014c0)="f885eacbb3a45a3ace061812b088e9b5a6eec9f10c64858f99018bcac44e5e96209712e1c0596d8616ce26dc54025276c0d69717baa5b75e2cfc213365472e26e8b6d48bec10bd13a12107ec88a9b03b5c13da5e63b2dfa3eaedcab48de643abccf33341c0220cc52d9c2eaa9cc696320dff5e29c0aa80f3785042bb0b09547907169227ffdb252ee700718b47871579ead76768a94421cbf6ae463c895d719d0fa3ae86769aa28f40afaf694673916a8d01eabdaee7e04c0fb818a9681117dacc53bd5e51cee3c115de08a1f2f38bb2093a0d6b6c2b629d791cf8a2fdfa943393c94a1433b032e21a3a252e99d752bf9bed71f181a8e1450f134a0f95f40708545244f43d43cdfcc0c0b526c9c100d83525ed97b9405e7288035fcb82840f032922faae6b5342b9bf4323ce8110fc06888d69fb4fc7c6d768d0bf6ad1c50825960c9147030ae5b72592b3e3bfd56fadcdfc420017cf35eb", 0x158) (async) close_range(r8, 0xffffffffffffffff, 0x0) 1.979847109s ago: executing program 1 (id=8155): prctl$PR_SCHED_CORE(0x3e, 0x2000001, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000180)='./file0\x00') sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r4, 0x25, &(0x7f00000031c0)={0x0, 0x0, 0x0, 0x2}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x0, 0x2, 0x0, 0x7ffffffb}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) accept(r6, 0x0, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock2(&(0x7f00005a2000/0x3000)=nil, 0x3000, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12012000f1048108cd060202d4c34e01000109021b1901000000d40904150001da40df000905", @ANYRES64], 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 1.291014847s ago: executing program 0 (id=8156): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x63682, 0x0) fdatasync(r0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x23, 0x0, &(0x7f0000000400)="e3ef7f6700001544940000000000000000000000040033a42c9550f5810011e0f0544b", 0x0, 0xa0000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000001}, 0x50) r1 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xe}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r6 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020}, 0x2020) io_uring_enter(r6, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) epoll_create1(0x0) syz_fuse_handle_req(r5, &(0x7f000000a100)="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", 0x2000, &(0x7f0000000200)={&(0x7f0000000380)={0x50, 0x0, 0x100000001, {0x7, 0x28, 0x7a, 0x2143040, 0x4, 0x9, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r4, 0x2219, 0x7724, 0x16, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x492492492492846, 0x0) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0x85) 1.109399527s ago: executing program 6 (id=8157): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x40000000, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = dup(r2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x42, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x52, &(0x7f0000000380)=[{}], 0x8, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xa6, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000640)={0x2, 0x0}, 0x8) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190) fcntl$setlease(r7, 0x400, 0x0) r8 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r8, 0x400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x88040, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0, {0x90}}, './file0\x00'}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x9, 0x6, 0x8, 0x8}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r10}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x15, &(0x7f00000000c0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x2}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc}}], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x84, &(0x7f0000000200)=""/132, 0x40f00, 0x2, '\x00', r4, @fallback=0x12, r5, 0x8, &(0x7f00000005c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x1, 0xffff, 0x3}, 0x10, r6, r9, 0x1, &(0x7f00000006c0)=[r10], &(0x7f0000000700)=[{0x4, 0x1, 0x7, 0x4}], 0x10, 0x9d}, 0x94) poll(&(0x7f0000000000)=[{r1, 0x63be}], 0x1, 0xa1) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) dup3(r1, r0, 0x0) 422.811848ms ago: executing program 5 (id=8158): mkdir(&(0x7f0000000140)='./control\x00', 0x111) r0 = inotify_init1(0x800) r1 = inotify_init1(0x80000) inotify_add_watch(r1, &(0x7f0000000040)='./control\x00', 0x20000004) inotify_add_watch(r0, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x64}}, 0x0) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, 0x0, 0x20004080) socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x12) 419.578061ms ago: executing program 4 (id=8159): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x4, 0x4) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={0xffffffffffffffff, 0x18000000000002a0, 0x42, 0xfffffffffffffec1, &(0x7f0000000500)="b9ff0300600d698cb89e14f008111f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xfb, &(0x7f0000000000), &(0x7f0000000280)="8dc92a8ff39080a675b6565efa3ed46f2a2756e4686c04020000002599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc06003fa40e054d38d49dfbebc2f137fc7110f48727f3ac3d6c83f6fda9222d2acdb0b3b9374206648707f4f5aeabd986d5f491389e9114ba8bd9aeeeed448e227802a455d6ba62aebeebc45885165e2501c30dc33fa47f5627e572e86278239ca2d8aeec7a25c43448bce8000000"}, 0x3d) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000006340)={0x2020, 0x0, 0x0, 0x0}, 0x2058) sendmmsg$inet6(r0, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000200)={0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYRES8, @ANYBLOB="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", @ANYRESOCT=r2], 0x568}}], 0x2, 0xff00) 163.454ms ago: executing program 0 (id=8160): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x358}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0xc000, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 12.478572ms ago: executing program 6 (id=8161): r0 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) clock_nanosleep(0x3, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000140), &(0x7f0000000180), 0x2, 0x2) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) r5 = io_uring_setup(0x5f8d, &(0x7f00000000c0)={0x0, 0x4178, 0x10, 0x8009002, 0x34b}) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000100)=0xb2f, 0x4) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x4, 0x0, 0xe4}]}, 0x10) close_range(r5, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) ioctl$XFS_IOC_OPEN_BY_HANDLE(r2, 0xc038586b, 0x0) r7 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f00000001c0)={0x0, 0x1}, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r9, &(0x7f0000000840)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r10, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x63}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x8810}, 0x20000000) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000080)={0x2, 0x3}, 0x4) ioctl$FE_GET_PROPERTY(r7, 0x80106f53, &(0x7f0000000040)={0x5, &(0x7f0000000440)=[{0x1a, '\x00', @buffer={"5757577095287f4cea7575980d0a10352180d68cf337ecf338c59363fdc85986", 0x20}, 0xffff}, {0x42, '\x00', @data=0x8, 0xffff}, {0x37, '\x00', @st={0x4, [{0x2}, {0x0, @uvalue=0x6}, {0x0, @uvalue=0x400}, {0x3, @uvalue=0xfffffffffffffffc}]}, 0x80000}, {0x11, '\x00', @buffer={"7d92c52655500169a9cb11aa8bf9ebbf5c0849c22e48e0f51760516445c41b54", 0x20}, 0x1}, {0x21, '\x00', @st={0x4, [{0x2, @svalue=0x80000001}, {0x1, @uvalue=0x2}, {0x3, @uvalue=0x7a}, {0x1, @uvalue=0x9}]}, 0x4}]}) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) 0s ago: executing program 5 (id=8162): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x41, 0x3, 0x290, 0x140, 0x19, 0x0, 0x140, 0x0, 0x1f8, 0x1f0, 0x1f0, 0x290, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'wlan1\x00', 'veth1_to_bridge\x00'}, 0x0, 0xe0, 0x140, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@limit={{0x48}, {0x0, 0x1}}, @common=@inet=@socket1={{0x28}, 0xc}]}, @common=@SET={0x60}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2f}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2709fb5a2bab03dc, 0xff0000ff, 'bridge_slave_0\x00', 'pimreg\x00', {}, {0xe8835d89a38d226f}, 0xff, 0x2, 0x1}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2f0) kernel console output (not intermixed with test programs): 628] RSP: 002b:00007f3c5782a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1758.178442][ T628] RAX: ffffffffffffffda RBX: 00007f3c56c25fa0 RCX: 00007f3c5699de59 [ 1758.178450][ T628] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 1758.178457][ T628] RBP: 00007f3c5782a090 R08: 0000000000000000 R09: 0000000000000000 [ 1758.178464][ T628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1758.178476][ T628] R13: 00007f3c56c26038 R14: 00007f3c56c25fa0 R15: 00007f3c56d4fa48 [ 1758.178507][ T628] [ 1758.544816][ T8472] rc_core: IR keymap rc-hauppauge not found [ 1758.552342][ T8472] Registered IR keymap rc-empty [ 1758.560199][ T8472] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1758.581279][ T8472] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1758.591003][T19561] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1758.613919][ T8472] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1758.628545][ T8472] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input214 [ 1758.659703][ T8472] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1758.686799][ T8472] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1758.711180][ T8472] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1758.731789][ T8472] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1758.752423][T19561] usb 2-1: Using ep0 maxpacket: 8 [ 1758.757848][ T8472] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1758.759654][T19561] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1758.778285][T19561] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1758.788950][T19561] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1758.799494][T19561] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1758.801118][ T8472] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1758.809987][T19561] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1758.830473][T19561] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1758.842714][T19561] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1758.861744][ T8472] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1758.891065][ T8472] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1758.911357][ T8472] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1758.927259][ T620] fuse: Unknown parameter 'fb' [ 1758.932582][ T8472] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1758.964170][ T8472] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 1758.973214][ T8472] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1759.161097][ T641] fuse: Bad value for 'fd' [ 1759.495756][ T8472] usb 6-1: USB disconnect, device number 86 [ 1759.630559][ T662] usbtmc 2-1:16.0: simple control status returned 79 [ 1759.851258][ T8472] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1760.001199][ T8472] usb 6-1: Using ep0 maxpacket: 8 [ 1760.008966][ T8472] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1760.020311][ T8472] usb 6-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1760.029890][ T8472] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1760.038082][ T8472] usb 6-1: Product: syz [ 1760.042497][ T8472] usb 6-1: Manufacturer: syz [ 1760.047136][ T8472] usb 6-1: SerialNumber: syz [ 1760.056830][ T8472] usb 6-1: config 0 descriptor?? [ 1760.071732][ T8472] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1760.347094][T31340] usb 2-1: USB disconnect, device number 68 [ 1760.591103][ T679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1760.602336][ T679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1760.638366][ T682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7662'. [ 1761.162230][T31340] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1761.320505][ T699] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7669'. [ 1761.361520][T31340] usb 5-1: Using ep0 maxpacket: 16 [ 1761.370132][T31340] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1761.384337][T31340] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1761.411286][T31340] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1761.437730][T31340] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1761.466776][T31340] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1761.487078][T31340] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1761.496822][T31340] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1761.506248][T31340] usb 5-1: Manufacturer: syz [ 1761.517959][T31340] usb 5-1: config 0 descriptor?? [ 1761.657208][ T709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1761.668060][ T709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1761.851289][T31340] rc_core: IR keymap rc-hauppauge not found [ 1761.867657][T31340] Registered IR keymap rc-empty [ 1761.892402][T31340] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1761.931041][T31340] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1761.972174][T31340] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1762.015212][T31340] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input215 [ 1762.050965][ T5688] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1762.062247][T31340] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1762.101248][T31340] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1762.139420][ T8472] gspca_zc3xx: reg_r err -32 [ 1762.144342][T31340] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1762.181493][T31340] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1762.202926][ T5688] usb 2-1: Using ep0 maxpacket: 16 [ 1762.210500][ T5688] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1762.221071][T31340] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1762.245260][ T5688] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1762.259406][ T5688] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1762.261113][T31340] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1762.284683][ T5688] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1762.293921][ T5688] usb 2-1: Product: syz [ 1762.299420][ T5688] usb 2-1: Manufacturer: syz [ 1762.306960][ T720] fuse: Unknown parameter 'fb' [ 1762.315201][ T5688] usb 2-1: SerialNumber: syz [ 1762.332862][T31340] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1762.342337][ T5688] usb 2-1: config 0 descriptor?? [ 1762.367481][ T5688] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1762.381649][ T5688] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1762.388954][T31340] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1762.401377][T31340] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1762.442503][T31340] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1762.485932][T31340] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 1762.508158][T31340] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1762.617151][ T717] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1762.730999][ T8472] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1762.741337][ T8472] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 1762.897275][ T717] syz.1.7675: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1762.956980][ T717] CPU: 0 UID: 0 PID: 717 Comm: syz.1.7675 Tainted: G L syzkaller #0 PREEMPT(full) [ 1762.957030][ T717] Tainted: [L]=SOFTLOCKUP [ 1762.957037][ T717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1762.957050][ T717] Call Trace: [ 1762.957059][ T717] [ 1762.957069][ T717] dump_stack_lvl+0xe8/0x150 [ 1762.957108][ T717] warn_alloc+0x24c/0x270 [ 1762.957142][ T717] ? __pfx_warn_alloc+0x10/0x10 [ 1762.957182][ T717] ? __mutex_trylock_common+0x15f/0x270 [ 1762.957208][ T717] __vmalloc_node_range_noprof+0x12c/0x1730 [ 1762.957236][ T717] ? rcu_is_watching+0x15/0xb0 [ 1762.957266][ T717] ? trace_contention_end+0x3d/0x140 [ 1762.957289][ T717] ? __mutex_lock+0x30d/0x1550 [ 1762.957321][ T717] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1762.957354][ T717] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1762.957380][ T717] ? dvb_dvr_do_ioctl+0x76/0x220 [ 1762.957408][ T717] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1762.957431][ T717] ? do_vfs_ioctl+0x116f/0x1530 [ 1762.957462][ T717] ? dvb_dvr_do_ioctl+0x12b/0x220 [ 1762.957484][ T717] vmalloc_noprof+0xb2/0xe0 [ 1762.957506][ T717] ? dvb_dvr_do_ioctl+0x12b/0x220 [ 1762.957529][ T717] dvb_dvr_do_ioctl+0x12b/0x220 [ 1762.957569][ T717] dvb_usercopy+0x199/0x2e0 [ 1762.957599][ T717] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 1762.957618][ T717] ? __pfx_dvb_usercopy+0x10/0x10 [ 1762.957658][ T717] ? __fget_files+0x3a2/0x420 [ 1762.957689][ T717] ? __fget_files+0x2a/0x420 [ 1762.957715][ T717] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 1762.957737][ T717] dvb_dvr_ioctl+0x29/0x40 [ 1762.957758][ T717] __se_sys_ioctl+0xfc/0x170 [ 1762.957776][ T717] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1762.957797][ T717] do_syscall_64+0x174/0x580 [ 1762.957826][ T717] ? clear_bhb_loop+0x40/0x90 [ 1762.957848][ T717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1762.957868][ T717] RIP: 0033:0x7ff9ee19de59 [ 1762.957887][ T717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1762.957905][ T717] RSP: 002b:00007ff9ef002028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1762.957928][ T717] RAX: ffffffffffffffda RBX: 00007ff9ee425fa0 RCX: 00007ff9ee19de59 [ 1762.957944][ T717] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 000000000000000a [ 1762.957958][ T717] RBP: 00007ff9ee233e6f R08: 0000000000000000 R09: 0000000000000000 [ 1762.957971][ T717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1762.957984][ T717] R13: 00007ff9ee426038 R14: 00007ff9ee425fa0 R15: 00007ff9ee54fa48 [ 1762.958017][ T717] [ 1762.962782][ T5720] usb 5-1: USB disconnect, device number 31 [ 1762.976773][ T717] Mem-Info: [ 1763.053230][ T726] nft_compat: unsupported protocol 247 [ 1763.529029][ T717] active_anon:8816 inactive_anon:10 isolated_anon:0 [ 1763.529029][ T717] active_file:0 inactive_file:27592 isolated_file:0 [ 1763.529029][ T717] unevictable:768 dirty:263 writeback:0 [ 1763.529029][ T717] slab_reclaimable:7211 slab_unreclaimable:111957 [ 1763.529029][ T717] mapped:36514 shmem:3350 pagetables:1656 [ 1763.529029][ T717] sec_pagetables:0 bounce:0 [ 1763.529029][ T717] kernel_misc_reclaimable:0 [ 1763.529029][ T717] free:1307906 free_pcp:12304 free_cma:0 [ 1763.641104][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1763.682673][ T717] Node 0 active_anon:35064kB inactive_anon:40kB active_file:0kB inactive_file:110212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:146032kB dirty:1052kB writeback:0kB shmem:11864kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14240kB pagetables:6296kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1763.719421][ T717] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:156kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1763.769944][ T717] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1763.870513][ T717] lowmem_reserve[]: 0 2489 2489 2489 2489 [ 1763.878068][ T717] Node 0 DMA32 free:1272624kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35164kB inactive_anon:40kB active_file:0kB inactive_file:110212kB unevictable:1536kB writepending:1052kB zspages:0kB present:3129332kB managed:2548772kB mlocked:0kB bounce:0kB free_pcp:50060kB local_pcp:32172kB free_cma:0kB [ 1763.938173][ T717] lowmem_reserve[]: 0 0 0 0 0 [ 1763.943958][ T717] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:264kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1763.980178][ T8472] usb 6-1: USB disconnect, device number 87 [ 1764.038320][ T717] lowmem_reserve[]: 0 0 0 0 0 [ 1764.043758][ T717] Node 1 Normal free:3943440kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:156kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1764.077375][ T717] lowmem_reserve[]: 0 0 0 0 0 [ 1764.086524][ T717] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1764.175468][ T717] Node 0 DMA32: 1583*4kB (UME) 2315*8kB (UME) 1817*16kB (UME) 1310*32kB (UME) 424*64kB (UME) 214*128kB (UME) 83*256kB (UME) 40*512kB (ME) 13*1024kB (UM) 7*2048kB (UME) 258*4096kB (UM) = 1276516kB [ 1764.207360][ T745] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7683'. [ 1764.226227][ T717] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1764.249235][ T717] Node 1 Normal: 2*4kB (UM) 1*8kB (U) 4*16kB (U) 4*32kB (UM) 9*64kB (UM) 2*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 3*2048kB (UM) 960*4096kB (UM) = 3943440kB [ 1764.270563][ T717] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1764.280550][ T717] Node 0 hugepages_total=5 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 1764.353622][ T717] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1764.419360][ T717] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1764.487754][ T717] 30944 total pagecache pages [ 1764.499042][ T717] 10 pages in swap cache [ 1764.533261][ T717] Free swap = 124956kB [ 1764.557668][ T717] Total swap = 124996kB [ 1764.576727][ T717] 2097051 pages RAM [ 1764.616662][ T717] 0 pages HighMem/MovableOnly [ 1764.639222][ T717] 428177 pages reserved [ 1764.675116][ T717] 0 pages cma reserved [ 1764.841795][ T5688] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1764.848825][ T5688] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1764.865622][ T5688] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 1764.887152][ T5688] em28xx 2-1:0.0: No AC97 audio processor [ 1764.944545][ T5688] usb 2-1: USB disconnect, device number 69 [ 1764.983097][ T5688] em28xx 2-1:0.0: Disconnecting em28xx [ 1765.013117][ T5688] em28xx 2-1:0.0: Freeing device [ 1765.351113][ T5688] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 1765.502989][ T5688] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1765.512931][ T8472] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1765.522101][ T5688] usb 2-1: not running at top speed; connect to a high speed hub [ 1765.531328][ T5688] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1765.543754][ T5688] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.44 [ 1765.553614][ T5688] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1765.562308][ T5688] usb 2-1: Product: syz [ 1765.566604][ T5688] usb 2-1: Manufacturer: syz [ 1765.571284][ T5688] usb 2-1: SerialNumber: syz [ 1765.671597][ T8472] usb 6-1: Using ep0 maxpacket: 8 [ 1765.694616][ T8472] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1765.704477][ T8472] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1765.713115][ T8472] usb 6-1: Product: syz [ 1765.717580][ T8472] usb 6-1: Manufacturer: syz [ 1765.746969][ T8472] usb 6-1: SerialNumber: syz [ 1765.757025][ T8472] usb 6-1: config 0 descriptor?? [ 1765.770803][ T8472] gspca_main: se401-2.14.0 probing 047d:5003 [ 1765.815357][ T5688] usb 2-1: USB disconnect, device number 70 [ 1765.981685][ T784] xt_CT: No such helper "netbios-ns" [ 1766.008778][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 1766.008791][ T30] audit: type=1326 audit(1783527015.972:25112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=782 comm="syz.4.7696" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3c5699de59 code=0x0 [ 1766.074937][ T787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1766.083797][ T787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1766.145629][ T787] fuse: Unknown parameter '' [ 1766.393529][ T5688] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1766.422776][ T5688] hid-generic 0000:0000:0000.0044: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1766.602664][ T8472] usb 6-1: reset high-speed USB device number 88 using dummy_hcd [ 1766.727650][ T795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1766.740800][ T795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1766.818304][ T795] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1766.877266][ T797] netlink: 'syz.4.7700': attribute type 1 has an invalid length. [ 1766.930136][ T797] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1766.984564][ T799] bond3: (slave veth0_to_bond): making interface the new active one [ 1767.015660][ T799] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1767.081509][ T770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1767.082829][ T803] FAULT_INJECTION: forcing a failure. [ 1767.082829][ T803] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1767.103554][ T803] CPU: 0 UID: 0 PID: 803 Comm: syz.0.7701 Tainted: G L syzkaller #0 PREEMPT(full) [ 1767.103584][ T803] Tainted: [L]=SOFTLOCKUP [ 1767.103592][ T803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1767.103603][ T803] Call Trace: [ 1767.103612][ T803] [ 1767.103621][ T803] dump_stack_lvl+0xe8/0x150 [ 1767.103661][ T803] should_fail_ex+0x40c/0x560 [ 1767.103702][ T803] _copy_from_user+0x2d/0xb0 [ 1767.103737][ T803] ___sys_sendmsg+0x1c6/0x360 [ 1767.103765][ T803] ? __lock_acquire+0x683/0x2cf0 [ 1767.103795][ T803] ? __pfx____sys_sendmsg+0x10/0x10 [ 1767.103858][ T803] ? __fget_files+0x2a/0x420 [ 1767.103887][ T803] ? __fget_files+0x3a2/0x420 [ 1767.103924][ T803] __x64_sys_sendmsg+0x1b1/0x290 [ 1767.103952][ T803] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1767.103993][ T803] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1767.104015][ T803] do_syscall_64+0x174/0x580 [ 1767.104042][ T803] ? trace_irq_disable+0x3b/0x140 [ 1767.104081][ T803] ? clear_bhb_loop+0x40/0x90 [ 1767.104105][ T803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1767.104126][ T803] RIP: 0033:0x7fbfad79de59 [ 1767.104146][ T803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1767.104172][ T803] RSP: 002b:00007fbfae64d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1767.104193][ T803] RAX: ffffffffffffffda RBX: 00007fbfada25fa0 RCX: 00007fbfad79de59 [ 1767.104206][ T803] RDX: 000000001400c0c0 RSI: 0000200000000140 RDI: 0000000000000003 [ 1767.104218][ T803] RBP: 00007fbfae64d090 R08: 0000000000000000 R09: 0000000000000000 [ 1767.104231][ T803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1767.104243][ T803] R13: 00007fbfada26038 R14: 00007fbfada25fa0 R15: 00007fbfadb4fa48 [ 1767.104270][ T803] [ 1767.104960][ T770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1767.395666][ T8472] gspca_se401: read req failed req 0x06 error -71 [ 1767.412526][ T8472] se401 6-1:0.0: probe with driver se401 failed with error -71 [ 1767.446917][ T8472] usb 6-1: USB disconnect, device number 88 [ 1767.569951][ T811] tipc: Started in network mode [ 1767.575456][ T811] tipc: Node identity ac14140f, cluster identity 4711 [ 1767.623454][ T811] tipc: New replicast peer: 255.255.255.255 [ 1767.671043][ T811] tipc: Enabled bearer , priority 10 [ 1767.961465][ T816] netlink: 236 bytes leftover after parsing attributes in process `syz.1.7705'. [ 1768.006512][ T817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1768.010175][ T816] netlink: 236 bytes leftover after parsing attributes in process `syz.1.7705'. [ 1768.045211][ T817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1768.136386][ T811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1768.147211][ T811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1768.214654][ T811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1768.268601][ T811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1768.530976][ T8472] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1768.671266][ T8472] usb 6-1: device descriptor read/64, error -71 [ 1768.750995][ T5688] tipc: Node number set to 2886997007 [ 1768.922516][ T8472] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1769.071129][ T8472] usb 6-1: device descriptor read/64, error -71 [ 1769.191431][ T8472] usb usb6-port1: attempt power cycle [ 1769.208240][ T835] fuse: Bad value for 'fd' [ 1769.271129][ T5720] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1769.440931][ T5720] usb 5-1: Using ep0 maxpacket: 16 [ 1769.456078][ T5720] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 119, changing to 10 [ 1769.474555][ T5720] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1769.482421][ T5720] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 1769.492453][ T5720] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1769.506131][ T5720] usb 5-1: config 0 descriptor?? [ 1769.541522][ T8472] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1769.572704][ T8472] usb 6-1: device descriptor read/8, error -71 [ 1769.811218][ T8472] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1769.842186][ T8472] usb 6-1: device descriptor read/8, error -71 [ 1769.925428][ T5720] kye 0003:0458:5013.0045: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1769.938223][ T5720] kye 0003:0458:5013.0045: unknown main item tag 0x0 [ 1769.947673][ T5720] kye 0003:0458:5013.0045: unknown main item tag 0x0 [ 1769.955288][ T5720] kye 0003:0458:5013.0045: unknown main item tag 0x0 [ 1769.955302][ T8472] usb usb6-port1: unable to enumerate USB device [ 1769.971676][ T5720] kye 0003:0458:5013.0045: unknown main item tag 0x0 [ 1769.986388][ T5720] kye 0003:0458:5013.0045: unknown main item tag 0x0 [ 1770.002332][ T5720] kye 0003:0458:5013.0045: unknown main item tag 0x0 [ 1770.018956][ T5720] kye 0003:0458:5013.0045: unknown main item tag 0x0 [ 1770.034110][ T5720] kye 0003:0458:5013.0045: unknown main item tag 0x0 [ 1770.053731][ T5720] kye 0003:0458:5013.0045: unknown main item tag 0x0 [ 1770.095300][ T5720] kye 0003:0458:5013.0045: hidraw0: USB HID v0.04 Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0 [ 1770.138993][ T5720] kye 0003:0458:5013.0045: tablet-enabling feature report not found [ 1770.176360][ T5720] kye 0003:0458:5013.0045: tablet enabling failed [ 1770.194428][ T841] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1770.522401][ T5720] usb 5-1: USB disconnect, device number 32 [ 1770.784274][ T850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1770.794984][ T850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1771.547815][ T863] tipc: Started in network mode [ 1771.560201][ T863] tipc: Node identity 00000028, cluster identity 4711 [ 1771.589160][ T863] tipc: Enabling of bearer rejected, failed to enable media [ 1771.765263][ T868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1771.840081][ T868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1771.927889][ T868] fuse: Bad value for 'fd' [ 1772.091477][T19543] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 1772.305160][T19543] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1772.343243][T19543] usb 2-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 1772.383989][T19543] usb 2-1: Product: syz [ 1772.403326][T19543] usb 2-1: Manufacturer: syz [ 1772.422924][T19543] usb 2-1: SerialNumber: syz [ 1772.483984][T19543] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 1772.802306][ T884] xt_hashlimit: size too large, truncated to 1048576 [ 1772.857950][ T874] x9: renamed from bridge_slave_0 (while UP) [ 1773.727017][T19543] vp7045: USB control message 'out' went wrong. [ 1773.776381][T19543] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1773.840117][T19543] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 1773.923347][T19543] usb 2-1: USB disconnect, device number 71 [ 1774.349508][ T916] fuse: Bad value for 'user_id' [ 1774.381101][ T916] fuse: Bad value for 'user_id' [ 1774.397240][ T916] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7729'. [ 1774.588871][ T929] syzkaller0: entered promiscuous mode [ 1774.595097][ T929] syzkaller0: entered allmulticast mode [ 1774.611882][ T932] netlink: 56 bytes leftover after parsing attributes in process `syz.5.7733'. [ 1774.921371][ T8472] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1775.072698][ T8472] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1775.108010][ T8472] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1775.157712][ T8472] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1775.202408][ T8472] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1775.239559][ T8472] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1775.285674][ T8472] usb 2-1: config 0 descriptor?? [ 1775.318505][ T8472] em28xx 2-1:0.0: New device @ 480 Mbps (2040:1605, interface 0, class 0) [ 1775.358313][ T8472] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1776.075982][ T971] FAULT_INJECTION: forcing a failure. [ 1776.075982][ T971] name failslab, interval 1, probability 0, space 0, times 0 [ 1776.090230][ T971] CPU: 0 UID: 0 PID: 971 Comm: syz.6.7741 Tainted: G L syzkaller #0 PREEMPT(full) [ 1776.090266][ T971] Tainted: [L]=SOFTLOCKUP [ 1776.090274][ T971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1776.090286][ T971] Call Trace: [ 1776.090295][ T971] [ 1776.090304][ T971] dump_stack_lvl+0xe8/0x150 [ 1776.090340][ T971] should_fail_ex+0x40c/0x560 [ 1776.090370][ T971] should_failslab+0xa8/0x100 [ 1776.090402][ T971] __kmalloc_node_track_caller_noprof+0x100/0x730 [ 1776.090432][ T971] ? __lock_acquire+0x683/0x2cf0 [ 1776.090458][ T971] ? __kernfs_new_node+0xa9/0x980 [ 1776.090486][ T971] ? __kernfs_new_node+0xa9/0x980 [ 1776.090521][ T971] kstrdup+0x42/0x100 [ 1776.090551][ T971] __kernfs_new_node+0xa9/0x980 [ 1776.090590][ T971] ? __pfx___kernfs_new_node+0x10/0x10 [ 1776.090620][ T971] ? kernfs_root+0x1c/0x230 [ 1776.090654][ T971] ? kernfs_root+0x1c/0x230 [ 1776.090679][ T971] ? kernfs_root+0x1c/0x230 [ 1776.090703][ T971] ? kernfs_root+0x1c/0x230 [ 1776.090735][ T971] kernfs_new_node+0xea/0x140 [ 1776.090769][ T971] kernfs_create_link+0xa7/0x200 [ 1776.090795][ T971] sysfs_do_create_link_sd+0x83/0x110 [ 1776.090825][ T971] device_add_class_symlinks+0x1cf/0x240 [ 1776.090859][ T971] device_add+0x467/0xb80 [ 1776.090890][ T971] device_create+0x269/0x300 [ 1776.090915][ T971] ? timer_init_key+0x161/0x2c0 [ 1776.090939][ T971] ? __pfx_device_create+0x10/0x10 [ 1776.090961][ T971] ? ieee80211_roc_setup+0x119/0x1d0 [ 1776.090988][ T971] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 1776.091021][ T971] mac80211_hwsim_new_radio+0x3f6/0x5680 [ 1776.091066][ T971] ? lockdep_hardirqs_on+0x7a/0x110 [ 1776.091092][ T971] ? irqentry_exit+0x218/0x8f0 [ 1776.091128][ T971] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1776.091169][ T971] hwsim_new_radio_nl+0xd8b/0xf90 [ 1776.091212][ T971] genl_family_rcv_msg_doit+0x233/0x340 [ 1776.091244][ T971] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1776.091282][ T971] ? bpf_lsm_capable+0x9/0x20 [ 1776.091308][ T971] ? security_capable+0x7e/0x2c0 [ 1776.091359][ T971] genl_rcv_msg+0x614/0x7a0 [ 1776.091392][ T971] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1776.091416][ T971] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1776.091446][ T971] ? __pfx_ref_tracker_free+0x10/0x10 [ 1776.091490][ T971] netlink_rcv_skb+0x226/0x4a0 [ 1776.091525][ T971] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1776.091553][ T971] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1776.091602][ T971] ? down_read+0x2be/0x330 [ 1776.091637][ T971] genl_rcv+0x28/0x40 [ 1776.091661][ T971] netlink_unicast+0x7bb/0x940 [ 1776.091702][ T971] netlink_sendmsg+0x813/0xb40 [ 1776.091734][ T971] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1776.091760][ T971] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1776.091788][ T971] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1776.091808][ T971] sock_sendmsg_nosec+0x13a/0x180 [ 1776.091836][ T971] ____sys_sendmsg+0x54e/0x850 [ 1776.091878][ T971] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1776.091920][ T971] ? import_iovec+0x73/0xa0 [ 1776.091954][ T971] ___sys_sendmsg+0x2a5/0x360 [ 1776.091984][ T971] ? __lock_acquire+0x683/0x2cf0 [ 1776.092018][ T971] ? __pfx____sys_sendmsg+0x10/0x10 [ 1776.092089][ T971] ? __fget_files+0x2a/0x420 [ 1776.092116][ T971] ? __fget_files+0x3a2/0x420 [ 1776.092153][ T971] __x64_sys_sendmsg+0x1b1/0x290 [ 1776.092188][ T971] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1776.092244][ T971] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1776.092267][ T971] do_syscall_64+0x174/0x580 [ 1776.092295][ T971] ? trace_irq_disable+0x3b/0x140 [ 1776.092320][ T971] ? clear_bhb_loop+0x40/0x90 [ 1776.092345][ T971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1776.092366][ T971] RIP: 0033:0x7f0fa6f9de59 [ 1776.092387][ T971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1776.092406][ T971] RSP: 002b:00007f0fa7e93028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1776.092429][ T971] RAX: ffffffffffffffda RBX: 00007f0fa7225fa0 RCX: 00007f0fa6f9de59 [ 1776.092446][ T971] RDX: 0000000020040004 RSI: 0000200000000080 RDI: 0000000000000003 [ 1776.092460][ T971] RBP: 00007f0fa7e93090 R08: 0000000000000000 R09: 0000000000000000 [ 1776.092474][ T971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1776.092488][ T971] R13: 00007f0fa7226038 R14: 00007f0fa7225fa0 R15: 00007f0fa734fa48 [ 1776.092523][ T971] [ 1776.581539][ T8472] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1776.587970][ T8472] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1776.595274][ T8472] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 1776.602439][ T8472] em28xx 2-1:0.0: No AC97 audio processor [ 1776.969691][T19543] usb 2-1: USB disconnect, device number 72 [ 1777.020365][T19543] em28xx 2-1:0.0: Disconnecting em28xx [ 1777.040293][T19543] em28xx 2-1:0.0: Freeing device [ 1777.687214][ T990] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 1777.736556][ T990] kvm: apic: phys broadcast and lowest prio [ 1778.113387][ T998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1778.136931][ T998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1778.700471][ T1003] FAULT_INJECTION: forcing a failure. [ 1778.700471][ T1003] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1778.730958][ T1003] CPU: 1 UID: 0 PID: 1003 Comm: syz.1.7750 Tainted: G L syzkaller #0 PREEMPT(full) [ 1778.730991][ T1003] Tainted: [L]=SOFTLOCKUP [ 1778.730998][ T1003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1778.731010][ T1003] Call Trace: [ 1778.731018][ T1003] [ 1778.731027][ T1003] dump_stack_lvl+0xe8/0x150 [ 1778.731064][ T1003] should_fail_ex+0x40c/0x560 [ 1778.731093][ T1003] _copy_to_user+0x31/0xb0 [ 1778.731123][ T1003] generic_map_lookup_batch+0xa39/0xeb0 [ 1778.731161][ T1003] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 1778.731182][ T1003] ? __fget_files+0x2a/0x420 [ 1778.731214][ T1003] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 1778.731236][ T1003] bpf_map_do_batch+0x27f/0x630 [ 1778.731261][ T1003] ? bpf_lsm_bpf+0x9/0x20 [ 1778.731292][ T1003] ? security_bpf+0x7e/0x2d0 [ 1778.731323][ T1003] __sys_bpf+0xa9f/0xd90 [ 1778.731352][ T1003] ? __pfx___sys_bpf+0x10/0x10 [ 1778.731383][ T1003] ? __fget_files+0x2a/0x420 [ 1778.731423][ T1003] ? ksys_write+0x242/0x270 [ 1778.731470][ T1003] ? __pfx_ksys_write+0x10/0x10 [ 1778.731499][ T1003] __x64_sys_bpf+0xba/0xd0 [ 1778.731522][ T1003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1778.731544][ T1003] do_syscall_64+0x174/0x580 [ 1778.731571][ T1003] ? trace_irq_disable+0x3b/0x140 [ 1778.731594][ T1003] ? clear_bhb_loop+0x40/0x90 [ 1778.731618][ T1003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1778.731637][ T1003] RIP: 0033:0x7ff9ee19de59 [ 1778.731656][ T1003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1778.731673][ T1003] RSP: 002b:00007ff9ef002028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1778.731692][ T1003] RAX: ffffffffffffffda RBX: 00007ff9ee425fa0 RCX: 00007ff9ee19de59 [ 1778.731706][ T1003] RDX: 0000000000000038 RSI: 00002000000003c0 RDI: 0000000000000018 [ 1778.731719][ T1003] RBP: 00007ff9ef002090 R08: 0000000000000000 R09: 0000000000000000 [ 1778.731731][ T1003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1778.731743][ T1003] R13: 00007ff9ee426038 R14: 00007ff9ee425fa0 R15: 00007ff9ee54fa48 [ 1778.731773][ T1003] [ 1779.294364][ T1006] binder: 1005:1006 ioctl c0306201 2000000003c0 returned -14 [ 1779.566554][ T1012] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7753'. [ 1779.941219][ T8472] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1780.094975][ T8472] usb 5-1: Using ep0 maxpacket: 16 [ 1780.104281][ T8472] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1780.116785][ T8472] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1780.143813][ T8472] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1780.165427][ T8472] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1780.190500][ T8472] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1780.226562][ T8472] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1780.244571][ T8472] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1780.252972][ T8472] usb 5-1: Manufacturer: syz [ 1780.266727][ T8472] usb 5-1: config 0 descriptor?? [ 1780.281220][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1780.608161][ T1042] loop8: detected capacity change from 0 to 7 [ 1780.615810][ T1042] Dev loop8: unable to read RDB block 7 [ 1780.622144][ T1042] loop8: unable to read partition table [ 1780.628259][ T1042] loop8: partition table beyond EOD, truncated [ 1780.634549][ T8472] rc_core: IR keymap rc-hauppauge not found [ 1780.634567][ T8472] Registered IR keymap rc-empty [ 1780.641340][ T1042] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1780.654921][ T8472] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1780.685201][ T8472] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1780.722096][ T8472] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1780.736404][ T8472] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input216 [ 1780.753340][ T8472] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1780.771333][ T8472] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1780.795537][ T8472] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1780.808418][ T1045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1780.817159][ T5688] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 1780.821396][ T8472] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1780.837997][ T1045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1780.851085][ T8472] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1780.876642][ T8472] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1780.901461][ T8472] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1780.931203][ T8472] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1780.951316][ T8472] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1780.971098][ T8472] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1780.980980][ T5688] usb 6-1: Using ep0 maxpacket: 16 [ 1781.004140][ T8472] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 1781.005278][ T5688] usb 6-1: config index 0 descriptor too short (expected 1068, got 27) [ 1781.029263][ T8472] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1781.031754][ T1021] fuse: Unknown parameter 'fb' [ 1781.043573][ T5688] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1781.059412][ T5688] usb 6-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 1781.068751][ T5688] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1781.077207][ T5688] usb 6-1: Product: syz [ 1781.081648][ T5688] usb 6-1: Manufacturer: syz [ 1781.086383][ T5688] usb 6-1: SerialNumber: syz [ 1781.097352][ T5688] usb 6-1: config 0 descriptor?? [ 1781.878999][T31343] usb 6-1: USB disconnect, device number 93 [ 1782.024081][T31340] usb 5-1: USB disconnect, device number 33 [ 1783.550680][ T1101] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7773'. [ 1783.609554][ T1108] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1783.672394][ T1103] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1783.702921][ T1101] netlink: 'syz.1.7773': attribute type 10 has an invalid length. [ 1783.763775][ T1111] netlink: 'syz.1.7773': attribute type 10 has an invalid length. [ 1783.911532][ T1101] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1783.961114][ T5688] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1784.003074][ T1101] team0: Port device netdevsim1 added [ 1784.075393][ T1111] team0: Port device netdevsim1 removed [ 1784.127183][ T1111] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1784.141116][ T5688] usb 5-1: Using ep0 maxpacket: 16 [ 1784.186581][ T5688] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1784.203896][ T1111] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1784.258501][ T5688] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1784.284807][ T5688] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1784.284838][ T5688] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1784.284859][ T5688] usb 5-1: Product: syz [ 1784.284873][ T5688] usb 5-1: Manufacturer: syz [ 1784.284888][ T5688] usb 5-1: SerialNumber: syz [ 1784.288805][ T5688] usb 5-1: config 0 descriptor?? [ 1785.680979][T31340] usb 5-1: USB disconnect, device number 34 [ 1785.827407][ T1141] fuse: Bad value for 'rootmode' [ 1786.741775][T25028] bond3: (slave gretap1): link status up again after 0 ms [ 1786.767345][T25028] bond3: (slave gretap1): failed to get link speed/duplex [ 1786.790992][T31340] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1786.952667][T31532] bond3: (slave gretap1): failed to get link speed/duplex [ 1786.981514][T31340] usb 5-1: Using ep0 maxpacket: 8 [ 1787.027434][T31340] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1787.042676][T31340] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1787.063316][T31340] usb 5-1: Product: syz [ 1787.084859][T31340] usb 5-1: Manufacturer: syz [ 1787.099905][T31340] usb 5-1: SerialNumber: syz [ 1787.202527][T31340] usb 5-1: config 0 descriptor?? [ 1787.280346][ T1173] bridge0: port 2(bridge_slave_1) entered disabled state [ 1787.288241][ T1173] bridge0: port 1(bridge_slave_0) entered disabled state [ 1787.417217][T31340] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1787.474985][ T1173] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1787.504482][ T1173] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1788.043552][ T1173] veth1_vlan: left allmulticast mode [ 1788.095168][T31540] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1788.122586][T31540] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1788.144911][T31540] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1788.180284][T31540] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1788.211317][T31540] bond3: (slave gretap1): failed to get link speed/duplex [ 1788.361050][ T1217] netlink: 'syz.0.7803': attribute type 1 has an invalid length. [ 1788.368945][T31538] bond3: (slave gretap1): failed to get link speed/duplex [ 1788.379359][ T1217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7803'. [ 1788.407804][ T1217] netlink: 'syz.0.7803': attribute type 1 has an invalid length. [ 1788.424867][ T1217] netlink: 'syz.0.7803': attribute type 2 has an invalid length. [ 1788.436787][ T1222] ALSA: mixer_oss: invalid OSS volume '' [ 1788.439573][ T1217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1788.461157][ T1222] ALSA: mixer_oss: invalid OSS volume '' [ 1788.470257][ T1217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1788.481058][T15192] bond3: (slave gretap1): failed to get link speed/duplex [ 1788.621047][T31538] bond3: (slave gretap1): failed to get link speed/duplex [ 1788.770998][T31540] bond3: (slave gretap1): failed to get link speed/duplex [ 1788.853782][ T1162] pim6reg1: entered promiscuous mode [ 1788.873200][ T1162] pim6reg1: entered allmulticast mode [ 1788.901105][T31533] bond3: (slave gretap1): failed to get link speed/duplex [ 1788.928616][T31340] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1789.028023][T31340] usb 5-1: USB disconnect, device number 35 [ 1789.136472][T31540] bond3: (slave gretap1): failed to get link speed/duplex [ 1790.036314][ T1253] IPv6: Can't replace route, no match found [ 1790.718724][ T1276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1790.719246][ T1276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1790.756275][ T1276] fuse: Unknown parameter 'fb' [ 1791.291314][T30249] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1791.463982][T30249] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1791.508708][T30249] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1791.548003][T30249] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1791.583367][T30249] usb 5-1: config 220 has no interface number 2 [ 1791.608835][T30249] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1791.656698][T30249] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1791.678872][T30249] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1791.705484][T30249] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1791.730310][T30249] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1791.758499][T25028] net_ratelimit: 22 callbacks suppressed [ 1791.758521][T25028] bond3: (slave gretap1): failed to get link speed/duplex [ 1791.807384][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.814282][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.825194][T30249] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1791.874213][T30249] usb 5-1: Product: syz [ 1791.895436][T30249] usb 5-1: Manufacturer: syz [ 1791.914820][T30249] usb 5-1: SerialNumber: syz [ 1791.931295][T31532] bond3: (slave gretap1): failed to get link speed/duplex [ 1792.051223][T31532] bond3: (slave gretap1): failed to get link speed/duplex [ 1792.176226][T31532] bond3: (slave gretap1): failed to get link speed/duplex [ 1792.220327][T30249] usb 5-1: selecting invalid altsetting 0 [ 1792.300034][T30249] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1792.348333][T31532] bond3: (slave gretap1): failed to get link speed/duplex [ 1792.387901][T30249] uvcvideo 5-1:220.0: No valid video chain found. [ 1792.456577][T30249] usb 5-1: selecting invalid altsetting 0 [ 1792.516906][T30249] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 1792.563003][T31539] bond3: (slave gretap1): failed to get link speed/duplex [ 1792.597632][T30249] usb 5-1: USB disconnect, device number 36 [ 1792.702728][T31532] bond3: (slave gretap1): failed to get link speed/duplex [ 1792.862461][T31540] bond3: (slave gretap1): failed to get link speed/duplex [ 1792.917565][T19543] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 1793.017167][T31532] bond3: (slave gretap1): failed to get link speed/duplex [ 1793.129315][T19543] usb 6-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1793.184101][T19543] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1793.208209][ T1320] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7834'. [ 1793.231683][T19543] usb 6-1: Product: syz [ 1793.236004][ T1320] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7834'. [ 1793.247560][T19543] usb 6-1: Manufacturer: syz [ 1793.266657][T19543] usb 6-1: SerialNumber: syz [ 1793.290182][T19543] usb 6-1: config 0 descriptor?? [ 1793.325151][T19543] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1793.445284][T31538] bond3: (slave gretap1): failed to get link speed/duplex [ 1793.726790][T19543] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 1793.747435][T19543] sq905c 6-1:0.0: Reading version command failed [ 1793.764319][T19543] sq905c 6-1:0.0: probe with driver sq905c failed with error -71 [ 1793.785424][T19543] usb 6-1: USB disconnect, device number 94 [ 1793.871051][T19537] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1793.951724][T30249] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1794.001278][T19537] usb 5-1: device descriptor read/64, error -71 [ 1794.111901][T30249] usb 2-1: Using ep0 maxpacket: 16 [ 1794.120273][T30249] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1794.131807][T30249] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1794.166600][T30249] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1794.200006][T30249] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1794.220770][T30249] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1794.236149][T30249] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1794.245965][T30249] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1794.258714][T30249] usb 2-1: Manufacturer: syz [ 1794.263218][T19537] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1794.278258][T30249] usb 2-1: config 0 descriptor?? [ 1794.412578][T19537] usb 5-1: device descriptor read/64, error -71 [ 1794.548346][T19537] usb usb5-port1: attempt power cycle [ 1794.632073][T30249] rc_core: IR keymap rc-hauppauge not found [ 1794.646356][T30249] Registered IR keymap rc-empty [ 1794.655643][T30249] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1794.711033][T30249] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1794.728323][ T1357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1794.745929][T30249] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1794.780065][ T1357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1794.803767][T30249] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input217 [ 1794.883131][T30249] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1794.934773][T19537] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1794.953069][T30249] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1794.991785][T19537] usb 5-1: device descriptor read/8, error -71 [ 1795.002262][T30249] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1795.065393][ T1364] fuse: Unknown parameter 'fb' [ 1795.074709][T30249] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1795.141737][T30249] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1795.212129][T30249] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1795.251166][T19537] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1795.266642][T30249] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1795.301969][T19537] usb 5-1: device descriptor read/8, error -71 [ 1795.334717][T30249] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1795.411245][T30249] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1795.430565][ T1354] fuse: fd is not a fuse device [ 1795.447907][T19537] usb usb5-port1: unable to enumerate USB device [ 1795.461907][T30249] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1795.499494][T30249] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 1795.537396][T30249] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1795.598316][T30249] usb 2-1: USB disconnect, device number 73 [ 1795.736977][ T1369] FAULT_INJECTION: forcing a failure. [ 1795.736977][ T1369] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1795.785911][ T1369] CPU: 1 UID: 0 PID: 1369 Comm: syz.6.7853 Tainted: G L syzkaller #0 PREEMPT(full) [ 1795.785945][ T1369] Tainted: [L]=SOFTLOCKUP [ 1795.785952][ T1369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1795.785964][ T1369] Call Trace: [ 1795.785974][ T1369] [ 1795.785982][ T1369] dump_stack_lvl+0xe8/0x150 [ 1795.786023][ T1369] should_fail_ex+0x40c/0x560 [ 1795.786049][ T1369] ? semctl_main+0x11a/0x1670 [ 1795.786213][ T1369] _copy_from_user+0x2d/0xb0 [ 1795.786244][ T1369] semctl_main+0x60d/0x1670 [ 1795.786275][ T1369] ? semctl_main+0x11a/0x1670 [ 1795.786305][ T1369] ? __pfx_semctl_main+0x10/0x10 [ 1795.786373][ T1369] ? __mutex_unlock_slowpath+0x731/0x900 [ 1795.786411][ T1369] __se_sys_semctl+0x33b/0x3e0 [ 1795.786440][ T1369] ? __pfx___se_sys_semctl+0x10/0x10 [ 1795.786474][ T1369] ? __pfx_ksys_write+0x10/0x10 [ 1795.786512][ T1369] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1795.786533][ T1369] do_syscall_64+0x174/0x580 [ 1795.786558][ T1369] ? trace_irq_disable+0x3b/0x140 [ 1795.786583][ T1369] ? clear_bhb_loop+0x40/0x90 [ 1795.786604][ T1369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1795.786624][ T1369] RIP: 0033:0x7f0fa6f9de59 [ 1795.786644][ T1369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1795.786661][ T1369] RSP: 002b:00007f0fa7e93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000042 [ 1795.786682][ T1369] RAX: ffffffffffffffda RBX: 00007f0fa7225fa0 RCX: 00007f0fa6f9de59 [ 1795.786697][ T1369] RDX: 0000000000000011 RSI: 0000000000000000 RDI: 0000000000000000 [ 1795.786710][ T1369] RBP: 00007f0fa7e93090 R08: 0000000000000000 R09: 0000000000000000 [ 1795.786722][ T1369] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 1795.786735][ T1369] R13: 00007f0fa7226038 R14: 00007f0fa7225fa0 R15: 00007f0fa734fa48 [ 1795.786765][ T1369] [ 1796.711802][T19537] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 1796.760211][ T1383] netlink: 'syz.4.7859': attribute type 1 has an invalid length. [ 1796.847421][ T1383] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1796.872086][ T1383] netlink: 'syz.4.7859': attribute type 10 has an invalid length. [ 1796.928329][ T1383] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7859'. [ 1796.955144][ T1386] bond4: (slave dummy0): making interface the new active one [ 1796.978698][ T1387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1796.995996][ T1387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1797.026864][ T1387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1797.039365][ T1386] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 1797.040560][ T1387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1797.110148][ T1383] dummy0: entered promiscuous mode [ 1797.155039][ T1383] bond4: (slave dummy0): Releasing active interface [ 1797.521292][T31540] net_ratelimit: 26 callbacks suppressed [ 1797.521315][T31540] bond3: (slave gretap1): failed to get link speed/duplex [ 1797.683003][T31533] bond3: (slave gretap1): failed to get link speed/duplex [ 1797.828913][T19537] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1797.837383][T19537] usb 6-1: no configurations [ 1797.841129][T31540] bond3: (slave gretap1): failed to get link speed/duplex [ 1797.882320][T19537] usb 6-1: can't read configurations, error -22 [ 1797.927554][ T1394] fuse: Unknown parameter 'ӝ0sG' [ 1797.981025][T31538] bond3: (slave gretap1): failed to get link speed/duplex [ 1798.067761][ T1396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7863'. [ 1798.098885][ T1396] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7863'. [ 1798.116819][T31538] bond3: (slave gretap1): failed to get link speed/duplex [ 1798.271339][T31540] bond3: (slave gretap1): failed to get link speed/duplex [ 1798.402711][T25028] bond3: (slave gretap1): failed to get link speed/duplex [ 1798.545527][T30996] bond3: (slave gretap1): failed to get link speed/duplex [ 1798.696859][T30996] bond3: (slave gretap1): failed to get link speed/duplex [ 1798.843285][T31538] bond3: (slave gretap1): failed to get link speed/duplex [ 1798.974171][T31340] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1799.136183][T31340] usb 5-1: device descriptor read/64, error -71 [ 1799.403003][T31340] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1799.472785][ T1426] netlink: 'syz.1.7873': attribute type 1 has an invalid length. [ 1799.551393][T31340] usb 5-1: device descriptor read/64, error -71 [ 1799.627452][ T1426] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1799.677140][T31340] usb usb5-port1: attempt power cycle [ 1799.727808][ T1433] bond1 (unregistering): Released all slaves [ 1799.756272][ T1424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7872'. [ 1800.022901][ T8474] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1800.052939][T31340] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1800.091648][T31340] usb 5-1: device descriptor read/8, error -71 [ 1800.204835][T19556] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 1800.232565][ T8474] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1800.251342][ T8474] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1800.270975][ T8474] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1800.292627][ T8474] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 259 [ 1800.314620][ T8474] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1800.341215][T31340] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1800.348869][ T8474] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1800.357508][ T8474] usb 2-1: Product: syz [ 1800.371442][ T8474] usb 2-1: Manufacturer: syz [ 1800.376683][T31340] usb 5-1: device descriptor read/8, error -71 [ 1800.383047][ T8474] usb 2-1: SerialNumber: syz [ 1800.388288][T19556] usb 6-1: config 171 has an invalid interface number: 109 but max is 0 [ 1800.404195][T19556] usb 6-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 1800.419163][ T8474] usb 2-1: config 0 descriptor?? [ 1800.431529][T19556] usb 6-1: config 171 has no interface number 0 [ 1800.438423][ T1426] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1800.451387][T19556] usb 6-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 1800.462806][ T8474] iguanair 2-1:0.0: probe with driver iguanair failed with error -12 [ 1800.482544][T19556] usb 6-1: config 171 interface 109 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1800.498355][T31340] usb usb5-port1: unable to enumerate USB device [ 1800.510957][T19556] usb 6-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 1800.544447][T19556] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 1800.570979][T19556] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1800.579042][T19556] usb 6-1: Product: syz [ 1800.590983][T19556] usb 6-1: Manufacturer: syz [ 1800.597135][T19556] usb 6-1: SerialNumber: syz [ 1800.616485][ T1437] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 1800.849937][T19556] ath6kl: Failed to submit usb control message: -71 [ 1800.878590][T19556] ath6kl: unable to send the bmi data to the device: -71 [ 1800.908318][T19556] ath6kl: Unable to send get target info: -71 [ 1801.015934][T19556] ath6kl: Failed to init ath6kl core: -71 [ 1801.026387][T19556] ath6kl_usb 6-1:171.109: probe with driver ath6kl_usb failed with error -71 [ 1801.054717][T19556] usb 6-1: USB disconnect, device number 97 [ 1801.183500][T19543] usb 2-1: USB disconnect, device number 74 [ 1801.829324][ T1463] netlink: 232 bytes leftover after parsing attributes in process `syz.1.7885'. [ 1801.908166][ T1453] FAULT_INJECTION: forcing a failure. [ 1801.908166][ T1453] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1801.946299][ T1453] CPU: 1 UID: 0 PID: 1453 Comm: syz.5.7881 Tainted: G L syzkaller #0 PREEMPT(full) [ 1801.946334][ T1453] Tainted: [L]=SOFTLOCKUP [ 1801.946343][ T1453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1801.946355][ T1453] Call Trace: [ 1801.946364][ T1453] [ 1801.946381][ T1453] dump_stack_lvl+0xe8/0x150 [ 1801.946416][ T1453] should_fail_ex+0x40c/0x560 [ 1801.946445][ T1453] _copy_to_iter+0x1e4/0x1810 [ 1801.946478][ T1453] ? do_raw_spin_lock+0x12b/0x2f0 [ 1801.946508][ T1453] ? __pfx__copy_to_iter+0x10/0x10 [ 1801.946534][ T1453] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1801.946559][ T1453] ? lockdep_hardirqs_on+0x7a/0x110 [ 1801.946582][ T1453] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1801.946628][ T1453] ? __skb_try_recv_datagram+0x3de/0x4e0 [ 1801.946664][ T1453] __skb_datagram_iter+0xf8/0x980 [ 1801.946682][ T1453] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 1801.946705][ T1453] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1801.946735][ T1453] skb_copy_datagram_iter+0xb5/0x240 [ 1801.946761][ T1453] netlink_recvmsg+0x2b9/0xa50 [ 1801.946792][ T1453] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1801.946821][ T1453] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1801.946844][ T1453] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1801.946866][ T1453] ? security_socket_recvmsg+0x7e/0x2c0 [ 1801.946890][ T1453] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1801.946910][ T1453] sock_recvmsg+0x196/0x1e0 [ 1801.946937][ T1453] __sys_recvfrom+0x231/0x3a0 [ 1801.946969][ T1453] ? __pfx___sys_recvfrom+0x10/0x10 [ 1801.947009][ T1453] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1801.947049][ T1453] ? rcu_is_watching+0x15/0xb0 [ 1801.947086][ T1453] __x64_sys_recvfrom+0xde/0x100 [ 1801.947113][ T1453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1801.947132][ T1453] do_syscall_64+0x174/0x580 [ 1801.947156][ T1453] ? trace_irq_disable+0x3b/0x140 [ 1801.947180][ T1453] ? clear_bhb_loop+0x40/0x90 [ 1801.947206][ T1453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1801.947227][ T1453] RIP: 0033:0x7f0cb995e68e [ 1801.947248][ T1453] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1801.947267][ T1453] RSP: 002b:00007f0cba7d1e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 1801.947290][ T1453] RAX: ffffffffffffffda RBX: 00007f0cba7d36c0 RCX: 00007f0cb995e68e [ 1801.947306][ T1453] RDX: 0000000000001000 RSI: 00007f0cba7d2000 RDI: 0000000000000004 [ 1801.947320][ T1453] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1801.947333][ T1453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1801.947346][ T1453] R13: 00007f0cba7d1f58 R14: 00007f0cba7d2000 R15: 0000000000000000 [ 1801.947387][ T1453] [ 1802.586350][ T1476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1802.594055][T31532] net_ratelimit: 24 callbacks suppressed [ 1802.594077][T31532] bond3: (slave gretap1): failed to get link speed/duplex [ 1802.625543][T30249] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1802.640731][ T1476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1802.665743][ T1476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1802.678726][ T1476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1802.741195][T31532] bond3: (slave gretap1): failed to get link speed/duplex [ 1802.802752][T30249] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1802.821099][T30249] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1802.846275][T30249] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1802.851133][T15192] bond3: (slave gretap1): failed to get link speed/duplex [ 1802.881049][T30249] usb 2-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 1802.911022][T30249] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1802.952514][T30249] usb 2-1: config 0 descriptor?? [ 1802.981392][T31538] bond3: (slave gretap1): failed to get link speed/duplex [ 1803.052654][ T30] audit: type=1326 audit(1783527053.022:25113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1479 comm="syz.5.7889" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cb999de59 code=0x7ffc0000 [ 1803.092107][T15192] bond3: (slave gretap1): failed to get link speed/duplex [ 1803.113120][ T30] audit: type=1326 audit(1783527053.042:25114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1479 comm="syz.5.7889" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cb999de59 code=0x7ffc0000 [ 1803.165564][ T30] audit: type=1326 audit(1783527053.042:25115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1479 comm="syz.5.7889" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cb999de59 code=0x7ffc0000 [ 1803.197898][T30249] usbhid 2-1:0.0: can't add hid device: -71 [ 1803.207373][T30249] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1803.215394][T31532] bond3: (slave gretap1): failed to get link speed/duplex [ 1803.238711][T30249] usb 2-1: USB disconnect, device number 75 [ 1803.257981][ T30] audit: type=1326 audit(1783527053.042:25116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1479 comm="syz.5.7889" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cb999de59 code=0x7ffc0000 [ 1803.289964][ T30] audit: type=1326 audit(1783527053.042:25117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1479 comm="syz.5.7889" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f0cb999de59 code=0x7ffc0000 [ 1803.315884][ T30] audit: type=1326 audit(1783527053.122:25118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1479 comm="syz.5.7889" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0cb995e68e code=0x7ffc0000 [ 1803.347473][T30996] bond3: (slave gretap1): failed to get link speed/duplex [ 1803.396756][ T30] audit: type=1326 audit(1783527053.122:25119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1479 comm="syz.5.7889" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0cb995e68e code=0x7ffc0000 [ 1803.430653][ T30] audit: type=1326 audit(1783527053.122:25120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1479 comm="syz.5.7889" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0cb995e68e code=0x7ffc0000 [ 1803.458652][ T30] audit: type=1326 audit(1783527053.122:25121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1479 comm="syz.5.7889" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0cb995e68e code=0x7ffc0000 [ 1803.484872][T31532] bond3: (slave gretap1): failed to get link speed/duplex [ 1803.494672][ T30] audit: type=1326 audit(1783527053.122:25122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1479 comm="syz.5.7889" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0cb995e68e code=0x7ffc0000 [ 1803.613522][T31533] bond3: (slave gretap1): failed to get link speed/duplex [ 1803.661953][ T1488] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7891'. [ 1803.721353][T31532] bond3: (slave gretap1): failed to get link speed/duplex [ 1804.281754][T30249] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1804.307945][ T1499] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1804.451395][T30249] usb 2-1: device descriptor read/64, error -71 [ 1804.711392][T30249] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1804.913436][T30249] usb 2-1: device descriptor read/64, error -71 [ 1805.099145][T30249] usb usb2-port1: attempt power cycle [ 1805.471085][T30249] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1805.521686][T30249] usb 2-1: device descriptor read/8, error -71 [ 1805.737751][ T1513] binder_alloc: 1508: pid 1508 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1805.781013][T30249] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1805.792110][ T1509] binder_alloc: 1508: pid 1508 spamming oneway? 2 buffers allocated for a total size of 5120 [ 1805.803856][T30249] usb 2-1: device descriptor read/8, error -71 [ 1805.911464][T30249] usb usb2-port1: unable to enumerate USB device [ 1806.935897][ T1539] FAULT_INJECTION: forcing a failure. [ 1806.935897][ T1539] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1807.001371][ T1539] CPU: 0 UID: 0 PID: 1539 Comm: syz.4.7905 Tainted: G L syzkaller #0 PREEMPT(full) [ 1807.001402][ T1539] Tainted: [L]=SOFTLOCKUP [ 1807.001409][ T1539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1807.001419][ T1539] Call Trace: [ 1807.001427][ T1539] [ 1807.001435][ T1539] dump_stack_lvl+0xe8/0x150 [ 1807.001473][ T1539] should_fail_ex+0x40c/0x560 [ 1807.001511][ T1539] _copy_from_user+0x2d/0xb0 [ 1807.001538][ T1539] kvm_arch_vcpu_ioctl+0xaf8/0x3030 [ 1807.001621][ T1539] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 1807.001652][ T1539] ? is_bpf_text_address+0x26/0x2b0 [ 1807.001688][ T1539] ? is_bpf_text_address+0x26/0x2b0 [ 1807.001716][ T1539] ? is_bpf_text_address+0x292/0x2b0 [ 1807.001734][ T1539] ? is_bpf_text_address+0x26/0x2b0 [ 1807.001750][ T1539] ? kernel_text_address+0xa5/0xe0 [ 1807.001767][ T1539] ? __kernel_text_address+0xd/0x30 [ 1807.001783][ T1539] ? unwind_get_return_address+0x4d/0x90 [ 1807.001797][ T1539] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1807.001818][ T1539] ? arch_stack_walk+0xfb/0x150 [ 1807.001848][ T1539] ? stack_trace_save+0xa9/0x100 [ 1807.001868][ T1539] ? __pfx_stack_trace_save+0x10/0x10 [ 1807.001888][ T1539] ? kasan_save_track+0x4f/0x80 [ 1807.001915][ T1539] ? stack_depot_save_flags+0x33/0x800 [ 1807.001942][ T1539] ? __lock_acquire+0x683/0x2cf0 [ 1807.001970][ T1539] ? __kasan_slab_free+0x5c/0x80 [ 1807.001988][ T1539] ? kfree+0x1c5/0x640 [ 1807.001999][ T1539] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 1807.002014][ T1539] ? security_file_ioctl+0xc3/0x2a0 [ 1807.002028][ T1539] ? __se_sys_ioctl+0x47/0x170 [ 1807.002037][ T1539] ? do_syscall_64+0x174/0x580 [ 1807.002052][ T1539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1807.002072][ T1539] ? __mutex_trylock_common+0x15f/0x270 [ 1807.002084][ T1539] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1807.002096][ T1539] ? rcu_is_watching+0x15/0xb0 [ 1807.002113][ T1539] ? trace_contention_end+0x3d/0x140 [ 1807.002124][ T1539] ? __mutex_lock+0x30d/0x1550 [ 1807.002141][ T1539] ? kasan_quarantine_put+0xbb/0x1f0 [ 1807.002156][ T1539] ? kvm_vcpu_ioctl+0x27f/0xfd0 [ 1807.002169][ T1539] ? __pfx___mutex_lock+0x10/0x10 [ 1807.002184][ T1539] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1807.002200][ T1539] ? do_vfs_ioctl+0x116f/0x1530 [ 1807.002212][ T1539] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1807.002223][ T1539] kvm_vcpu_ioctl+0x7e3/0xfd0 [ 1807.002238][ T1539] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1807.002248][ T1539] ? hook_file_ioctl+0x1f0/0x5f0 [ 1807.002274][ T1539] ? __fget_files+0x2a/0x420 [ 1807.002289][ T1539] ? __fget_files+0x2a/0x420 [ 1807.002302][ T1539] ? __fget_files+0x3a2/0x420 [ 1807.002314][ T1539] ? __fget_files+0x2a/0x420 [ 1807.002329][ T1539] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1807.002341][ T1539] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1807.002353][ T1539] __se_sys_ioctl+0xfc/0x170 [ 1807.002363][ T1539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1807.002374][ T1539] do_syscall_64+0x174/0x580 [ 1807.002387][ T1539] ? trace_irq_disable+0x3b/0x140 [ 1807.002401][ T1539] ? clear_bhb_loop+0x40/0x90 [ 1807.002413][ T1539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1807.002424][ T1539] RIP: 0033:0x7f3c5699de59 [ 1807.002435][ T1539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1807.002444][ T1539] RSP: 002b:00007f3c5782a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1807.002456][ T1539] RAX: ffffffffffffffda RBX: 00007f3c56c25fa0 RCX: 00007f3c5699de59 [ 1807.002464][ T1539] RDX: 0000200000000000 RSI: 000000004008ae9c RDI: 0000000000000005 [ 1807.002471][ T1539] RBP: 00007f3c5782a090 R08: 0000000000000000 R09: 0000000000000000 [ 1807.002477][ T1539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1807.002490][ T1539] R13: 00007f3c56c26038 R14: 00007f3c56c25fa0 R15: 00007f3c56d4fa48 [ 1807.002505][ T1539] [ 1807.662198][T31538] net_ratelimit: 30 callbacks suppressed [ 1807.662221][T31538] bond3: (slave gretap1): failed to get link speed/duplex [ 1807.729979][ T1544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1807.783735][T31538] bond3: (slave gretap1): failed to get link speed/duplex [ 1807.798413][ T1544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1807.953527][T31538] bond3: (slave gretap1): failed to get link speed/duplex [ 1808.071487][T23656] bond3: (slave gretap1): failed to get link speed/duplex [ 1808.192079][T31533] bond3: (slave gretap1): failed to get link speed/duplex [ 1808.341526][T31532] bond3: (slave gretap1): failed to get link speed/duplex [ 1808.483982][T31532] bond3: (slave gretap1): failed to get link speed/duplex [ 1808.621046][T23656] bond3: (slave gretap1): failed to get link speed/duplex [ 1808.751013][T23656] bond3: (slave gretap1): failed to get link speed/duplex [ 1808.881284][T30996] bond3: (slave gretap1): failed to get link speed/duplex [ 1809.311010][ T8474] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1809.483033][ T8474] usb 5-1: Using ep0 maxpacket: 32 [ 1809.518217][ T8474] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1809.562350][ T8474] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1809.619172][ T8474] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1809.651729][ T8474] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1809.694185][ T8474] usb 5-1: config 0 descriptor?? [ 1810.153430][ T8474] hid_parser_main: 31 callbacks suppressed [ 1810.153456][ T8474] ft260 0003:0403:6030.0046: unknown main item tag 0x0 [ 1810.225573][ T8474] ft260 0003:0403:6030.0046: unknown main item tag 0x0 [ 1810.342793][ T8474] ft260 0003:0403:6030.0046: chip code: 0000 0000 [ 1810.377372][ T1562] kvm: user requested TSC rate below hardware speed [ 1810.560235][ T8474] ft260 0003:0403:6030.0046: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 1810.631429][T19543] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 1810.761259][ T8474] ft260 0003:0403:6030.0046: failed to retrieve status: -32, no wakeup [ 1810.804109][T19543] usb 2-1: not running at top speed; connect to a high speed hub [ 1810.827690][T19543] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1810.854721][T19543] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1810.871246][T19543] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1810.879511][T19543] usb 2-1: Product: syz [ 1810.885639][T19543] usb 2-1: Manufacturer: syz [ 1810.896803][T19543] usb 2-1: SerialNumber: syz [ 1810.987497][ T1559] i2c i2c-1: adapter quirk: comb msg only to same addr (addr 0x05d6, size 0, write) [ 1811.003201][ T8474] usb 5-1: USB disconnect, device number 45 [ 1811.110235][ T1569] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7913'. [ 1811.138777][T19543] usb 2-1: USB disconnect, device number 80 [ 1811.165920][ T1572] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7915'. [ 1811.176065][ T1573] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7915'. [ 1811.203551][ T1571] netlink: 'syz.5.7915': attribute type 5 has an invalid length. [ 1811.214234][ T1571] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7915'. [ 1811.732499][ T1585] netlink: 'syz.1.7919': attribute type 10 has an invalid length. [ 1811.740594][ T1585] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7919'. [ 1811.750144][ T1585] dummy0: entered promiscuous mode [ 1811.756825][ T1585] bridge0: port 3(dummy0) entered blocking state [ 1811.764210][ T1585] bridge0: port 3(dummy0) entered disabled state [ 1811.771214][ T1585] dummy0: entered allmulticast mode [ 1811.782894][ T1585] netlink: 'syz.1.7919': attribute type 10 has an invalid length. [ 1811.791391][ T1585] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7919'. [ 1811.870385][ T1591] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7921'. [ 1811.891256][ T8474] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1811.934956][ T1593] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7922'. [ 1812.008863][ T1593] bridge2: port 1(veth3) entered blocking state [ 1812.041434][ T1593] bridge2: port 1(veth3) entered disabled state [ 1812.062548][ T8474] usb 5-1: Using ep0 maxpacket: 32 [ 1812.080813][ T1593] veth3: entered allmulticast mode [ 1812.096207][ T8474] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1812.110680][ T1593] veth3: entered promiscuous mode [ 1812.148629][ T8474] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1812.190524][ T8474] usb 5-1: Product: syz [ 1812.210116][ T8474] usb 5-1: Manufacturer: syz [ 1812.232568][ T8474] usb 5-1: SerialNumber: syz [ 1812.291633][ T8474] usb 5-1: config 0 descriptor?? [ 1812.339155][ T8474] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1812.380330][ T8474] dvb-usb: bulk message failed: -22 (4/0) [ 1812.418772][ T8474] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1812.476439][ T8474] dvb-usb: bulk message failed: -22 (5/0) [ 1812.534600][ T8474] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1812.579362][ T1612] xt_hashlimit: size too large, truncated to 1048576 [ 1812.642773][ T8474] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1812.693480][ T8474] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1812.722595][ T8474] usb 5-1: media controller created [ 1812.746090][T23656] net_ratelimit: 32 callbacks suppressed [ 1812.746113][T23656] bond3: (slave gretap1): failed to get link speed/duplex [ 1812.804876][ T8474] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1812.898712][ T8474] usb 5-1: selecting invalid altsetting 3 [ 1812.926567][ T8474] ttusb2: set interface to alts=3 failed [ 1812.941881][T31533] bond3: (slave gretap1): failed to get link speed/duplex [ 1813.094181][T30996] bond3: (slave gretap1): failed to get link speed/duplex [ 1813.179794][ T8474] DVB: Unable to find symbol tda10086_attach() [ 1813.229773][ T8474] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1813.243625][T31538] bond3: (slave gretap1): failed to get link speed/duplex [ 1813.294621][ T8474] dvb-usb: bulk message failed: -22 (4/0) [ 1813.328838][ T8474] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1813.391244][T31539] bond3: (slave gretap1): failed to get link speed/duplex [ 1813.399065][ T8474] dvb-usb: bulk message failed: -22 (5/0) [ 1813.425968][ T8474] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1813.489968][ T8474] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1813.531665][T31538] bond3: (slave gretap1): failed to get link speed/duplex [ 1813.569683][ T8474] usb 5-1: USB disconnect, device number 46 [ 1813.676030][T31532] bond3: (slave gretap1): failed to get link speed/duplex [ 1813.765133][ T8474] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1813.861072][T31539] bond3: (slave gretap1): failed to get link speed/duplex [ 1814.012202][T31538] bond3: (slave gretap1): failed to get link speed/duplex [ 1814.161008][T31533] bond3: (slave gretap1): failed to get link speed/duplex [ 1814.314199][ T1651] xt_hashlimit: size too large, truncated to 1048576 [ 1814.329569][ T1647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1814.367926][ T1647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1814.970668][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1814.970681][ T30] audit: type=1800 audit(1783527064.932:25131): pid=1664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.7942" name="file1" dev="tmpfs" ino=2378 res=0 errno=0 [ 1815.088811][ T1665] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1815.128261][ T1178] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1815.188009][ T1668] loop8: detected capacity change from 0 to 7 [ 1815.214767][ T1668] Dev loop8: unable to read RDB block 7 [ 1815.231181][ T1668] loop8: unable to read partition table [ 1815.247460][ T1668] loop8: partition table beyond EOD, truncated [ 1815.267139][ T1668] loop_reread_partitions: partition scan of loop8 (颫x^0) failed (rc=-5) [ 1816.213936][ T8474] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1816.370999][ T8474] usb 2-1: Using ep0 maxpacket: 32 [ 1816.387446][ T8474] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1816.413966][ T8474] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1816.454372][ T8474] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1816.486363][ T8474] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1816.528462][ T8474] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1816.554632][ T8474] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1816.585217][ T8474] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1816.623311][ T8474] usb 2-1: config 0 descriptor?? [ 1817.042066][ T8474] hid (null): invalid report_size 55607 [ 1817.063272][ T8474] corsair-cpro 0003:1B1C:0C10.0047: invalid report_size 55607 [ 1817.093501][ T8474] corsair-cpro 0003:1B1C:0C10.0047: item 0 2 1 7 parsing failed [ 1817.124748][ T8474] corsair-cpro 0003:1B1C:0C10.0047: probe with driver corsair-cpro failed with error -22 [ 1817.806827][T31539] net_ratelimit: 28 callbacks suppressed [ 1817.806848][T31539] bond3: (slave gretap1): failed to get link speed/duplex [ 1817.853902][T19543] usb 2-1: USB disconnect, device number 81 [ 1817.891330][ T1178] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 1817.932324][T31538] bond3: (slave gretap1): failed to get link speed/duplex [ 1818.053479][ T1178] usb 6-1: Using ep0 maxpacket: 16 [ 1818.061288][T31540] bond3: (slave gretap1): failed to get link speed/duplex [ 1818.071434][ T1178] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1818.102609][ T1178] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1818.138390][ T1178] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1818.191205][T31540] bond3: (slave gretap1): failed to get link speed/duplex [ 1818.213603][ T1178] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1818.223427][ T1178] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1818.237801][ T1178] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1818.247618][ T1178] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1818.256745][ T1178] usb 6-1: Manufacturer: syz [ 1818.268050][ T1178] usb 6-1: config 0 descriptor?? [ 1818.331692][T15192] bond3: (slave gretap1): failed to get link speed/duplex [ 1818.452651][T31540] bond3: (slave gretap1): failed to get link speed/duplex [ 1818.542861][ T1701] FAULT_INJECTION: forcing a failure. [ 1818.542861][ T1701] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1818.571763][ T1701] CPU: 0 UID: 0 PID: 1701 Comm: syz.1.7954 Tainted: G L syzkaller #0 PREEMPT(full) [ 1818.571795][ T1701] Tainted: [L]=SOFTLOCKUP [ 1818.571802][ T1701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1818.571814][ T1701] Call Trace: [ 1818.571822][ T1701] [ 1818.571831][ T1701] dump_stack_lvl+0xe8/0x150 [ 1818.571865][ T1701] should_fail_ex+0x40c/0x560 [ 1818.571892][ T1701] _copy_to_user+0x31/0xb0 [ 1818.571925][ T1701] simple_read_from_buffer+0xe1/0x170 [ 1818.571957][ T1701] proc_fail_nth_read+0x1bb/0x230 [ 1818.571987][ T1701] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1818.572016][ T1701] ? rw_verify_area+0x24a/0x4c0 [ 1818.572045][ T1701] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1818.572069][ T1701] vfs_read+0x213/0xa80 [ 1818.572102][ T1701] ? __pfx___mutex_lock+0x10/0x10 [ 1818.572130][ T1701] ? __pfx_vfs_read+0x10/0x10 [ 1818.572158][ T1701] ? __fget_files+0x2a/0x420 [ 1818.572184][ T1701] ? __fget_files+0x3a2/0x420 [ 1818.572207][ T1701] ? __fget_files+0x2a/0x420 [ 1818.572238][ T1701] ksys_read+0x150/0x270 [ 1818.572267][ T1701] ? __pfx_ksys_read+0x10/0x10 [ 1818.572302][ T1701] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1818.572323][ T1701] do_syscall_64+0x174/0x580 [ 1818.572348][ T1701] ? clear_bhb_loop+0x40/0x90 [ 1818.572367][ T1701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1818.572385][ T1701] RIP: 0033:0x7ff9ee15e68e [ 1818.572402][ T1701] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1818.572417][ T1701] RSP: 002b:00007ff9ef001fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1818.572437][ T1701] RAX: ffffffffffffffda RBX: 00007ff9ef0026c0 RCX: 00007ff9ee15e68e [ 1818.572466][ T1701] RDX: 000000000000000f RSI: 00007ff9ef0020a0 RDI: 0000000000000006 [ 1818.572478][ T1701] RBP: 00007ff9ef002090 R08: 0000000000000000 R09: 0000000000000000 [ 1818.572489][ T1701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1818.572499][ T1701] R13: 00007ff9ee426038 R14: 00007ff9ee425fa0 R15: 00007ff9ee54fa48 [ 1818.572526][ T1701] [ 1818.575827][T31540] bond3: (slave gretap1): failed to get link speed/duplex [ 1818.795340][ T1178] rc_core: IR keymap rc-hauppauge not found [ 1818.812339][ T1178] Registered IR keymap rc-empty [ 1818.821531][ T1178] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1818.851068][ T1178] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1818.871822][ T8474] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1818.882189][ T1178] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1818.949028][ T1178] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input219 [ 1818.951064][T31540] bond3: (slave gretap1): failed to get link speed/duplex [ 1819.011524][ T8474] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1819.029414][ T1706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7955'. [ 1819.048050][ T1178] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1819.097024][ T1708] fuse: Unknown parameter 'fb' [ 1819.111217][T31540] bond3: (slave gretap1): failed to get link speed/duplex [ 1819.141058][ T1178] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1819.199194][ T1178] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1819.245478][T31539] bond3: (slave gretap1): failed to get link speed/duplex [ 1819.251187][ T1178] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1819.302275][ T1178] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1819.371091][ T1178] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1819.438991][ T1178] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1819.501083][ T1178] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1819.551102][ T1178] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1819.591163][ T1178] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1819.625094][ T1178] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 1819.634315][ T1178] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1819.813871][ T8474] usb 6-1: USB disconnect, device number 98 [ 1820.114190][ T1725] xt_hashlimit: size too large, truncated to 1048576 [ 1820.190424][ T1730] program syz.5.7964 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1822.359851][ T1762] bridge0: port 2(bridge_slave_1) entered disabled state [ 1822.367311][ T1762] bridge0: port 1(bridge_slave_0) entered disabled state [ 1822.438833][ T1762] dummy0: left promiscuous mode [ 1822.461900][T19543] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 1822.571712][ T1762] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1822.597350][ T1762] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1822.652362][T19543] usb 6-1: Using ep0 maxpacket: 16 [ 1822.670053][T19543] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1822.696420][T19543] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1822.720268][T19543] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1822.766855][T19543] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1822.788270][T19543] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1822.819683][ T1762] ip6gre2: left allmulticast mode [ 1822.831756][ T1762] geneve2: left promiscuous mode [ 1822.848050][T19543] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1822.852725][ T1762] ip6tnl1: left allmulticast mode [ 1822.874005][T19543] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1822.893702][ T1762] bridge1: left allmulticast mode [ 1822.903990][T19543] usb 6-1: Manufacturer: syz [ 1822.930268][T31532] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1822.946047][T31532] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1822.950405][T19543] usb 6-1: config 0 descriptor?? [ 1822.970614][T31532] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1822.991389][T31532] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1823.105320][ T1774] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!l1r$Gt:uJ˺ [ 1823.300957][T19543] rc_core: IR keymap rc-hauppauge not found [ 1823.307452][T19543] Registered IR keymap rc-empty [ 1823.324919][T19543] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1823.362230][T19543] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1823.396037][T19543] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1823.439110][T19543] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input220 [ 1823.475914][T19543] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1823.511334][T19543] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1823.532069][T19543] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1823.561190][T19543] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1823.591607][T19543] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1823.613178][T19543] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1823.641796][T19543] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1823.661133][T19543] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1823.691183][T19543] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1823.721601][T19543] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1823.736619][ T1763] fuse: Unknown parameter 'fb' [ 1823.757966][T19543] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 1823.782119][T19543] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1824.812228][ T1806] xt_hashlimit: size too large, truncated to 1048576 [ 1825.178981][ T1811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1825.191775][ T1811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1825.620076][T31340] usb 6-1: USB disconnect, device number 99 [ 1825.710122][ T1817] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7980'. [ 1825.809563][ T1819] gre0: entered promiscuous mode [ 1825.857531][ T1819] gre0: entered allmulticast mode [ 1826.331397][ T1178] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 1826.532152][ T1178] usb 6-1: Using ep0 maxpacket: 32 [ 1826.554932][ T1178] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1826.588810][ T1178] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 34, changing to 7 [ 1826.630755][ T1178] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1826.650740][ T1824] netlink: 'syz.6.7983': attribute type 9 has an invalid length. [ 1826.665528][ T1178] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1826.700513][ T1178] usb 6-1: Product: syz [ 1826.725875][ T1178] usb 6-1: Manufacturer: syz [ 1826.753143][ T1178] usb 6-1: SerialNumber: syz [ 1827.042755][ T1178] usb 6-1: 1:1 : no UAC_FORMAT_TYPE desc [ 1827.090811][ T1178] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1827.413736][ T1178] usb 6-1: USB disconnect, device number 100 [ 1827.552995][ T495] udevd[495]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1828.171290][T31340] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1828.383159][T31340] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1828.425089][T31340] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1828.488855][T31340] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1828.534355][T31340] usb 6-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1828.583383][T31340] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1828.606490][ T1846] fuse: Bad value for 'fd' [ 1828.627795][T31340] usb 6-1: config 0 descriptor?? [ 1828.655747][T31340] em28xx 6-1:0.0: New device @ 480 Mbps (2040:1605, interface 0, class 0) [ 1828.689308][T31340] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1828.761257][T19543] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1828.780782][ T1848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1828.810007][ T1848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1828.840469][ T1848] fuse: Unknown parameter 'fb' [ 1828.991265][T19543] usb 5-1: Using ep0 maxpacket: 8 [ 1829.020237][T19543] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 1829.059317][T19543] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 1829.089130][T19543] usb 5-1: config 0 has no interface number 0 [ 1829.122780][T19543] usb 5-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1829.180402][T19543] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1829.245130][T19543] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1829.310345][T19543] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=c3.d4 [ 1829.410335][T19543] usb 5-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0 [ 1829.450241][T19543] usb 5-1: Product: syz [ 1829.479314][T19543] usb 5-1: Manufacturer: syz [ 1829.511294][T31340] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1829.529712][T31340] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1829.541098][ T1178] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1829.553800][T31340] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 1829.577658][T19543] usb 5-1: config 0 descriptor?? [ 1829.579074][T31340] em28xx 6-1:0.0: No AC97 audio processor [ 1829.631105][ T1844] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1829.705467][T31340] usb 6-1: USB disconnect, device number 101 [ 1829.760266][T31340] em28xx 6-1:0.0: Disconnecting em28xx [ 1829.772401][ T1178] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1829.796062][ T1178] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1829.829128][ T1178] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1829.860151][ T1178] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1829.886261][T31340] em28xx 6-1:0.0: Freeing device [ 1829.907854][ T1178] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1829.945890][ T1178] usb 2-1: config 0 descriptor?? [ 1829.981679][ T1178] em28xx 2-1:0.0: New device @ 480 Mbps (2040:1605, interface 0, class 0) [ 1830.007443][ T1178] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1830.073069][ T1859] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7995'. [ 1830.259493][ T1178] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1830.283783][ T1178] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1830.305902][ T1178] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 1830.315346][ T1178] em28xx 2-1:0.0: No AC97 audio processor [ 1830.336320][T19543] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.21/input/input221 [ 1830.356062][ T1178] usb 2-1: USB disconnect, device number 82 [ 1830.380344][ T1178] em28xx 2-1:0.0: Disconnecting em28xx [ 1830.416224][ T1178] em28xx 2-1:0.0: Freeing device [ 1830.691051][T19543] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1830.891328][T19543] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1830.988091][T19543] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1831.067472][T19543] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1831.095154][T19543] usb 6-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1831.105533][T19543] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1831.137330][T19543] usb 6-1: config 0 descriptor?? [ 1831.176954][T19543] em28xx 6-1:0.0: New device @ 480 Mbps (2040:1605, interface 0, class 0) [ 1831.217697][T19543] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1831.385816][ T30] audit: type=1326 audit(1783527081.352:25132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1874 comm="syz.0.8000" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbfad79de59 code=0x0 [ 1831.446249][ T1878] sg_write: data in/out 163806/24 bytes for SCSI command 0x0-- guessing data in; [ 1831.446249][ T1878] program syz.0.8000 not setting count and/or reply_len properly [ 1832.008604][ T1885] fuse: Bad value for 'fd' [ 1832.341576][T19543] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1832.366844][T19543] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1832.388703][T31340] usb 5-1: USB disconnect, device number 47 [ 1832.388859][ C1] keyspan_remote 5-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 1832.430275][T19543] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 1832.438014][T19543] em28xx 6-1:0.0: No AC97 audio processor [ 1833.674681][ T8474] usb 6-1: USB disconnect, device number 102 [ 1833.722750][ T8474] em28xx 6-1:0.0: Disconnecting em28xx [ 1833.765575][ T8474] em28xx 6-1:0.0: Freeing device [ 1833.774274][ T1907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1833.820293][ T1907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1833.869476][ T1907] fuse: Unknown parameter 'fb' [ 1834.203950][ T1912] netlink: 76 bytes leftover after parsing attributes in process `syz.5.8009'. [ 1834.688886][ T1925] mac80211_hwsim hwsim59 syzkaller0: entered promiscuous mode [ 1834.702690][ T1925] mac80211_hwsim hwsim59 syzkaller0: entered allmulticast mode [ 1834.741270][T31340] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 1834.903973][T31340] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1834.915441][T31340] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1834.929655][T31340] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1834.941509][T31340] usb 6-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1834.951690][T31340] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1834.968051][T31340] usb 6-1: config 0 descriptor?? [ 1834.987569][T31340] em28xx 6-1:0.0: New device @ 480 Mbps (2040:1605, interface 0, class 0) [ 1835.001573][T31340] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1836.103259][T31340] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1836.117888][T31340] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1836.169735][T31340] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 1836.220819][T31340] em28xx 6-1:0.0: No AC97 audio processor [ 1837.191184][T31340] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1837.390966][T31340] usb 5-1: Using ep0 maxpacket: 16 [ 1837.407121][T31340] usb 5-1: too many configurations: 14, using maximum allowed: 8 [ 1837.498716][T31340] usb 5-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 1837.542741][T31340] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1837.583493][T31340] usb 5-1: Product: syz [ 1837.603871][T31340] usb 5-1: Manufacturer: syz [ 1837.625068][T31340] usb 5-1: SerialNumber: syz [ 1837.655529][T31340] usb 5-1: config 0 descriptor?? [ 1837.863950][T19543] usb 6-1: USB disconnect, device number 103 [ 1837.923680][T19543] em28xx 6-1:0.0: Disconnecting em28xx [ 1837.956552][ T1960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1838.001333][ T1960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1838.018382][T19543] em28xx 6-1:0.0: Freeing device [ 1838.056916][ T1960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8024'. [ 1838.118371][T31340] usb 5-1: USB disconnect, device number 48 [ 1838.741419][T19543] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 1838.918679][T19543] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1838.948832][T19543] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1838.968856][T19543] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1838.980769][T19543] usb 6-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1838.994800][T19543] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1839.011673][T19543] usb 6-1: config 0 descriptor?? [ 1839.036013][T19543] em28xx 6-1:0.0: New device @ 480 Mbps (2040:1605, interface 0, class 0) [ 1839.051917][T19543] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1839.470971][ T8474] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1839.645599][ T8474] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1839.681005][ T8474] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1839.726192][ T8474] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1839.761971][ T8474] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1839.794034][ T8474] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1839.829183][ T8474] usb 5-1: config 0 descriptor?? [ 1839.865048][ T8474] em28xx 5-1:0.0: New device @ 480 Mbps (2040:1605, interface 0, class 0) [ 1839.898995][ T8474] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1840.058234][ T2000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1840.079760][ T2000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1840.181888][T19543] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1840.189578][T19543] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1840.212163][ T8474] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1840.224745][ T8474] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 1840.224988][T19543] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 1840.240535][T19543] em28xx 6-1:0.0: No AC97 audio processor [ 1840.240580][ T8474] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 1840.257018][ T8474] em28xx 5-1:0.0: No AC97 audio processor [ 1840.297166][ T8474] usb 5-1: USB disconnect, device number 49 [ 1840.316553][ T8474] em28xx 5-1:0.0: Disconnecting em28xx [ 1840.325387][ T8474] em28xx 5-1:0.0: Freeing device [ 1841.320666][T31340] usb 6-1: USB disconnect, device number 104 [ 1841.366032][T31340] em28xx 6-1:0.0: Disconnecting em28xx [ 1841.429925][T31340] em28xx 6-1:0.0: Freeing device [ 1841.515558][ T2023] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8047'. [ 1841.545121][ T2023] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8047'. [ 1841.577652][ T2023] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8047'. [ 1841.861232][ T2033] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8050'. [ 1842.161275][ T2038] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8052'. [ 1842.541473][ T2042] fuse: Bad value for 'fd' [ 1842.968772][ T2046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1843.038229][ T2049] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8054'. [ 1843.272552][ T2046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1843.821054][T31340] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1844.097792][T31340] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1844.130464][T31340] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1844.143010][T31340] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1844.154560][T31340] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1844.166902][T31340] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1844.272248][T31340] usb 5-1: config 0 descriptor?? [ 1844.489321][T31340] em28xx 5-1:0.0: New device @ 480 Mbps (2040:1605, interface 0, class 0) [ 1844.522044][T31340] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1844.804749][ T2067] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8059'. [ 1845.154599][ T2071] xt_hashlimit: size too large, truncated to 1048576 [ 1845.626518][T31340] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1845.654892][T31340] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 1845.692381][T31340] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 1845.722650][T31340] em28xx 5-1:0.0: No AC97 audio processor [ 1845.851935][ T2083] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1846.300320][ T2089] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8066'. [ 1846.485444][ T2093] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8067'. [ 1846.662082][T31340] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1846.832723][T31340] usb 2-1: Using ep0 maxpacket: 8 [ 1846.877683][T31340] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1846.932450][T31340] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1846.949416][ T2099] netlink: 104 bytes leftover after parsing attributes in process `syz.6.8069'. [ 1846.976153][T31340] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1847.023819][T31340] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1847.071737][T31340] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1847.118665][T31340] usb 2-1: Product: syz [ 1847.134906][T31340] usb 2-1: Manufacturer: syz [ 1847.149046][ T1178] usb 5-1: USB disconnect, device number 50 [ 1847.166717][T31340] usb 2-1: SerialNumber: syz [ 1847.199032][T31340] usb 2-1: config 0 descriptor?? [ 1847.199194][ T1178] em28xx 5-1:0.0: Disconnecting em28xx [ 1847.328336][ T1178] em28xx 5-1:0.0: Freeing device [ 1847.372395][ T2105] xt_hashlimit: size too large, truncated to 1048576 [ 1847.946954][ T2113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1847.967811][ T2113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1848.031345][T31340] usb 2-1: USB disconnect, device number 83 [ 1848.188965][ T2113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1848.209138][ T2113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1848.233895][ T2113] netlink: 'syz.0.8073': attribute type 21 has an invalid length. [ 1848.827398][ T2129] netlink: 104 bytes leftover after parsing attributes in process `syz.5.8079'. [ 1848.915719][ T2133] fuse: Bad value for 'fd' [ 1849.013026][ T2139] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8083'. [ 1849.162030][ T2144] xt_hashlimit: size too large, truncated to 1048576 [ 1849.776342][ T2160] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8089'. [ 1850.191015][T31340] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1850.341326][T31340] usb 5-1: Using ep0 maxpacket: 8 [ 1850.350137][T31340] usb 5-1: config 1 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1023 [ 1850.362947][T31340] usb 5-1: config 1 interface 0 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 1023 [ 1850.398653][T31340] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1850.416732][T31340] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1850.448431][T31340] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1850.460355][T31340] usb 5-1: Product: syz [ 1850.469058][T31340] usb 5-1: Manufacturer: Ё [ 1850.477087][T31340] usb 5-1: SerialNumber: syz [ 1850.490660][ T2161] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1850.506028][ T2161] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1850.582957][ T2172] fuse: Bad value for 'fd' [ 1850.787195][ T2160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1850.796233][ T2160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1850.846603][ T2160] netlink: 'syz.4.8089': attribute type 4 has an invalid length. [ 1850.930681][T31340] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 1850.955188][ T2181] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8095'. [ 1850.968360][T31340] usb 5-1: USB disconnect, device number 51 [ 1851.068599][ T2186] xt_hashlimit: size too large, truncated to 1048576 [ 1851.291451][ T2198] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8098'. [ 1851.323310][ T2198] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8098'. [ 1852.041549][T19537] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1852.141231][T31340] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1852.206885][T19537] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1852.219884][T19537] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1852.237614][T19537] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1852.249458][T19537] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1852.259619][T19537] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1852.290673][T19537] usb 5-1: config 0 descriptor?? [ 1852.314109][T31340] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1852.331555][T19537] em28xx 5-1:0.0: New device @ 480 Mbps (2040:1605, interface 0, class 0) [ 1852.355892][T31340] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1852.370179][T19537] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1852.383641][T31340] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1852.394994][T31340] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1852.405211][T31340] usb 2-1: Product: syz [ 1852.409534][T31340] usb 2-1: Manufacturer: syz [ 1852.415086][T31340] usb 2-1: SerialNumber: syz [ 1852.425915][T31340] usb 2-1: config 0 descriptor?? [ 1852.437163][ T2217] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1852.450683][ T2217] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1853.172431][T19537] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1853.191649][T19537] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 1853.209380][T19537] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 1853.223668][ T2217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1853.234675][T19537] em28xx 5-1:0.0: No AC97 audio processor [ 1853.243223][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.249698][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.250745][ T2217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1853.281478][T19537] usb 5-1: USB disconnect, device number 52 [ 1853.314519][T19537] em28xx 5-1:0.0: Disconnecting em28xx [ 1853.325794][ T2217] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1853.340203][T19537] em28xx 5-1:0.0: Freeing device [ 1853.355160][ T2217] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1853.447335][ T2229] xt_hashlimit: size too large, truncated to 1048576 [ 1853.587867][T31340] Error reading MAC address [ 1853.601246][T19543] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 1853.604282][T31340] usb 2-1: USB disconnect, device number 84 [ 1853.761222][T19543] usb 6-1: Using ep0 maxpacket: 16 [ 1853.768395][T19543] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1853.779055][T19543] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1853.790579][T19543] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1853.813329][T19543] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1853.832668][T19543] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1853.850143][T19543] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1853.862565][T19543] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1853.871150][T19543] usb 6-1: Manufacturer: syz [ 1853.878696][T19543] usb 6-1: config 0 descriptor?? [ 1854.037509][ T2241] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:4096x16 (0x32314247, 8, 0, 0, 0) [ 1854.171050][T19543] rc_core: IR keymap rc-hauppauge not found [ 1854.189125][T19543] Registered IR keymap rc-empty [ 1854.209297][T19543] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1854.251115][T19543] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1854.310163][T19543] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1854.361777][T19543] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input222 [ 1854.404967][T19543] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1854.463208][T19543] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1854.501279][T19543] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1854.561150][T19543] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1854.601473][T19543] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1854.652798][T19543] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1854.653294][ T2227] fuse: Unknown parameter 'fb' [ 1854.711243][T19543] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1854.803845][T19543] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1854.843781][T19543] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1854.911810][T19543] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1854.971297][T19543] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 1855.006390][T19543] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1855.072680][T30249] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1855.110437][ T2264] xt_hashlimit: size too large, truncated to 1048576 [ 1855.241838][T30249] usb 2-1: Using ep0 maxpacket: 32 [ 1855.267083][T30249] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 1855.295202][T30249] usb 2-1: config 0 has no interface number 0 [ 1855.309268][T30249] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1855.321811][ T2272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8123'. [ 1855.343609][T30249] usb 2-1: config 0 interface 85 has no altsetting 0 [ 1855.363574][T30249] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1855.373104][T30249] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1855.382022][T30249] usb 2-1: Product: syz [ 1855.386555][T30249] usb 2-1: Manufacturer: syz [ 1855.391552][T30249] usb 2-1: SerialNumber: syz [ 1855.470969][T19537] usb 6-1: USB disconnect, device number 105 [ 1855.481208][T30249] usb 2-1: config 0 descriptor?? [ 1855.739100][ T2284] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1856.147522][ T30] audit: type=1326 audit(1783527106.112:25133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2278 comm="syz.5.8125" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0cb999de59 code=0x0 [ 1856.188703][T30249] appletouch 2-1:0.85: Geyser mode initialized. [ 1856.200373][T30249] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input223 [ 1856.243150][ T2293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1856.299586][ T2293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1856.598301][T30249] usb 2-1: USB disconnect, device number 85 [ 1856.657640][T30249] appletouch 2-1:0.85: input: appletouch disconnected [ 1856.844231][ T2302] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8132'. [ 1857.091264][ T2305] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8133'. [ 1857.176740][ T2304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1857.206659][ T2304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1857.571048][T30249] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 1857.750986][T30249] usb 6-1: Using ep0 maxpacket: 16 [ 1857.763910][T30249] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1857.774465][T30249] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1857.786278][T30249] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1857.823157][T30249] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1857.835378][T30249] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1857.886546][T30249] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1857.896944][T30249] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1857.936634][T30249] usb 6-1: Manufacturer: syz [ 1857.943492][T30249] usb 6-1: config 0 descriptor?? [ 1858.135741][ T2315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1858.148831][ T2315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1858.173597][ T2315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1858.192846][ T2315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1858.225421][T30249] rc_core: IR keymap rc-hauppauge not found [ 1858.231784][T30249] Registered IR keymap rc-empty [ 1858.238656][T30249] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1858.261191][T30249] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1858.301879][T30249] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1858.347482][T30249] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input224 [ 1858.394093][T30249] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1858.413491][ T2315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1858.431183][T30249] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1858.431958][ T2315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1858.461726][T30249] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1858.491057][T30249] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1858.531084][T30249] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1858.561446][T30249] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1858.591219][T30249] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1858.611204][T30249] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1858.650025][ T2310] fuse: Unknown parameter 'fb' [ 1858.651358][T30249] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1858.681187][T30249] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1858.718599][T30249] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 1858.741223][T30249] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1858.951137][T19537] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1859.115014][T19537] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1859.129467][T19537] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1859.143059][T19537] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1859.171357][T19537] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1859.186797][T19537] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1859.207641][T19537] usb 2-1: config 0 descriptor?? [ 1859.237255][T19537] em28xx 2-1:0.0: New device @ 480 Mbps (2040:1605, interface 0, class 0) [ 1859.264461][T19537] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1859.381046][ T2337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1859.401452][ T2337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1859.583951][ T1179] usb 6-1: USB disconnect, device number 106 [ 1860.174529][ T2343] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8146'. [ 1860.422615][T19537] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1860.443548][T19537] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1860.476902][T19537] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 1860.521318][ T1179] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 1860.541227][T19537] em28xx 2-1:0.0: No AC97 audio processor [ 1860.735957][ T1179] usb 6-1: Using ep0 maxpacket: 8 [ 1860.758498][ T1179] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1860.780375][ T1179] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1860.819569][ T1179] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1860.856919][ T1179] usb 6-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1860.885636][ T1179] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1860.913310][ T1179] usb 6-1: Product: syz [ 1860.930973][ T1179] usb 6-1: Manufacturer: syz [ 1860.945261][ T1179] usb 6-1: SerialNumber: syz [ 1860.970396][ T1179] usb 6-1: config 0 descriptor?? [ 1861.041720][T31340] usb 2-1: USB disconnect, device number 86 [ 1861.073701][T31340] em28xx 2-1:0.0: Disconnecting em28xx [ 1861.117980][T31340] em28xx 2-1:0.0: Freeing device [ 1861.462907][ T1179] usb 6-1: USB disconnect, device number 107 [ 1863.122955][ T1179] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1863.200456][ T2389] program syz.0.8156 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1863.321029][ T1179] usb 2-1: Using ep0 maxpacket: 8 [ 1863.358648][ T1179] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 1863.381058][ T1179] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 1863.392873][ T1179] usb 2-1: config 0 has no interface number 0 [ 1863.404130][ T1179] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1863.419926][ T1179] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1863.434319][ T1179] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1863.461179][ T1179] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=c3.d4 [ 1863.472998][ T1179] usb 2-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0 [ 1863.483418][ T1179] usb 2-1: Product: syz [ 1863.488983][ T1179] usb 2-1: Manufacturer: syz [ 1863.527908][ T1179] usb 2-1: config 0 descriptor?? [ 1863.550094][ T2379] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1863.928761][ T2393] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8158'. [ 1863.974954][ T2393] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8158'. [ 1864.004708][ T2393] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8158'. [ 1864.289903][ T2399] xt_socket: unknown flags 0xc [ 1864.391612][ T2398] ================================================================== [ 1864.399722][ T2398] BUG: KASAN: slab-use-after-free in dvb_frontend_release+0x407/0x4d0 [ 1864.407907][ T2398] Read of size 4 at addr ffff88802acd863c by task syz.6.8161/2398 [ 1864.415721][ T2398] [ 1864.418060][ T2398] CPU: 0 UID: 0 PID: 2398 Comm: syz.6.8161 Tainted: G L syzkaller #0 PREEMPT(full) [ 1864.418090][ T2398] Tainted: [L]=SOFTLOCKUP [ 1864.418097][ T2398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1864.418116][ T2398] Call Trace: [ 1864.418127][ T2398] [ 1864.418136][ T2398] dump_stack_lvl+0xe8/0x150 [ 1864.418168][ T2398] print_address_description+0x55/0x1e0 [ 1864.418197][ T2398] ? dvb_frontend_release+0x407/0x4d0 [ 1864.418223][ T2398] print_report+0x58/0x70 [ 1864.418251][ T2398] kasan_report+0x117/0x150 [ 1864.418280][ T2398] ? dvb_frontend_release+0x407/0x4d0 [ 1864.418310][ T2398] dvb_frontend_release+0x407/0x4d0 [ 1864.418337][ T2398] ? __pfx_dvb_frontend_release+0x10/0x10 [ 1864.418363][ T2398] __fput+0x418/0xa50 [ 1864.418390][ T2398] task_work_run+0x1d9/0x270 [ 1864.418419][ T2398] ? __pfx_task_work_run+0x10/0x10 [ 1864.418450][ T2398] get_signal+0x1181/0x12c0 [ 1864.418477][ T2398] ? do_raw_spin_lock+0x12b/0x2f0 [ 1864.418500][ T2398] arch_do_signal_or_restart+0xbb/0x860 [ 1864.418525][ T2398] ? do_raw_spin_unlock+0xf5/0x210 [ 1864.418546][ T2398] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1864.418578][ T2398] exit_to_user_mode_loop+0x104/0x730 [ 1864.418602][ T2398] ? rcu_is_watching+0x15/0xb0 [ 1864.418629][ T2398] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1864.418650][ T2398] do_syscall_64+0x353/0x580 [ 1864.418676][ T2398] ? trace_irq_disable+0x3b/0x140 [ 1864.418699][ T2398] ? clear_bhb_loop+0x40/0x90 [ 1864.418720][ T2398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1864.418739][ T2398] RIP: 0033:0x7f0fa6f9de59 [ 1864.418758][ T2398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1864.418776][ T2398] RSP: 002b:00007f0fa734fba8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1864.418798][ T2398] RAX: 0000000000000000 RBX: 00007f0fa734fc90 RCX: 00007f0fa6f9de59 [ 1864.418812][ T2398] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1864.418823][ T2398] RBP: 00000000001c7244 R08: 0000000000000001 R09: 0000000000000000 [ 1864.418836][ T2398] R10: 0000001b31220000 R11: 0000000000000246 R12: 00007f0fa734fcd0 [ 1864.418849][ T2398] R13: 00007f0fa7225fac R14: 00000000001c72cc R15: 00007f0fa7225fa0 [ 1864.418869][ T2398] [ 1864.418876][ T2398] [ 1864.645035][ T2398] Allocated by task 1: [ 1864.649105][ T2398] kasan_save_track+0x3e/0x80 [ 1864.653787][ T2398] __kasan_kmalloc+0x93/0xb0 [ 1864.658385][ T2398] __kmalloc_cache_noprof+0x32d/0x660 [ 1864.663768][ T2398] dvb_register_device+0x309/0x1dd0 [ 1864.668997][ T2398] dvb_register_frontend+0x603/0x900 [ 1864.674315][ T2398] vidtv_bridge_probe+0x9d5/0xf60 [ 1864.679446][ T2398] platform_probe+0xf9/0x190 [ 1864.684124][ T2398] really_probe+0x254/0xae0 [ 1864.688624][ T2398] __driver_probe_device+0x1e8/0x360 [ 1864.693911][ T2398] driver_probe_device+0x4f/0x240 [ 1864.698960][ T2398] __driver_attach+0x339/0x600 [ 1864.703740][ T2398] bus_for_each_dev+0x23b/0x2c0 [ 1864.708593][ T2398] bus_add_driver+0x345/0x670 [ 1864.713285][ T2398] driver_register+0x23a/0x320 [ 1864.718053][ T2398] vidtv_bridge_init+0x3d/0x60 [ 1864.722912][ T2398] do_one_initcall+0x250/0x870 [ 1864.727690][ T2398] do_initcall_level+0x10a/0x1a0 [ 1864.732741][ T2398] do_initcalls+0x59/0xa0 [ 1864.737072][ T2398] kernel_init_freeable+0x29d/0x3e0 [ 1864.742620][ T2398] kernel_init+0x1d/0x1d0 [ 1864.746947][ T2398] ret_from_fork+0x514/0xb70 [ 1864.751538][ T2398] ret_from_fork_asm+0x1a/0x30 [ 1864.756313][ T2398] [ 1864.758636][ T2398] Freed by task 2398: [ 1864.762611][ T2398] kasan_save_track+0x3e/0x80 [ 1864.767308][ T2398] kasan_save_free_info+0x40/0x50 [ 1864.772340][ T2398] __kasan_slab_free+0x5c/0x80 [ 1864.777223][ T2398] kfree+0x1c5/0x640 [ 1864.781118][ T2398] dvb_generic_release+0x11d/0x1b0 [ 1864.786230][ T2398] dvb_frontend_release+0x132/0x4d0 [ 1864.791529][ T2398] __fput+0x418/0xa50 [ 1864.795507][ T2398] task_work_run+0x1d9/0x270 [ 1864.800120][ T2398] get_signal+0x1181/0x12c0 [ 1864.804625][ T2398] arch_do_signal_or_restart+0xbb/0x860 [ 1864.810186][ T2398] exit_to_user_mode_loop+0x104/0x730 [ 1864.815605][ T2398] do_syscall_64+0x353/0x580 [ 1864.820216][ T2398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1864.826121][ T2398] [ 1864.828451][ T2398] The buggy address belongs to the object at ffff88802acd8600 [ 1864.828451][ T2398] which belongs to the cache kmalloc-256 of size 256 [ 1864.842508][ T2398] The buggy address is located 60 bytes inside of [ 1864.842508][ T2398] freed 256-byte region [ffff88802acd8600, ffff88802acd8700) [ 1864.856211][ T2398] [ 1864.858546][ T2398] The buggy address belongs to the physical page: [ 1864.864978][ T2398] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2acd8 [ 1864.873744][ T2398] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1864.882248][ T2398] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1864.889872][ T2398] page_type: f5(slab) [ 1864.893864][ T2398] raw: 00fff00000000040 ffff88813fe3fb40 dead000000000122 0000000000000000 [ 1864.902450][ T2398] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 1864.911033][ T2398] head: 00fff00000000040 ffff88813fe3fb40 dead000000000122 0000000000000000 [ 1864.919723][ T2398] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 1864.928398][ T2398] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 1864.937072][ T2398] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 1864.945845][ T2398] page dumped because: kasan: bad access detected [ 1864.952277][ T2398] page_owner tracks the page as allocated [ 1864.957993][ T2398] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 16713779106, free_ts 0 [ 1864.977784][ T2398] post_alloc_hook+0x1f9/0x250 [ 1864.982565][ T2398] get_page_from_freelist+0x21fa/0x2270 [ 1864.988119][ T2398] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1864.993925][ T2398] allocate_slab+0x79/0x5e0 [ 1864.998429][ T2398] refill_objects+0x2d5/0x350 [ 1865.003118][ T2398] __pcs_replace_empty_main+0x2bf/0x6b0 [ 1865.008689][ T2398] __kmalloc_cache_noprof+0x3a7/0x660 [ 1865.014082][ T2398] bus_add_driver+0x162/0x670 [ 1865.018780][ T2398] driver_register+0x23a/0x320 [ 1865.023729][ T2398] usb_register_driver+0x1e4/0x390 [ 1865.029046][ T2398] do_one_initcall+0x250/0x870 [ 1865.033824][ T2398] do_initcall_level+0x10a/0x1a0 [ 1865.038763][ T2398] do_initcalls+0x59/0xa0 [ 1865.043109][ T2398] kernel_init_freeable+0x29d/0x3e0 [ 1865.048329][ T2398] kernel_init+0x1d/0x1d0 [ 1865.052747][ T2398] ret_from_fork+0x514/0xb70 [ 1865.057357][ T2398] page_owner free stack trace missing [ 1865.062717][ T2398] [ 1865.065076][ T2398] Memory state around the buggy address: [ 1865.070710][ T2398] ffff88802acd8500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1865.078765][ T2398] ffff88802acd8580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1865.086821][ T2398] >ffff88802acd8600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1865.094880][ T2398] ^ [ 1865.100781][ T2398] ffff88802acd8680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1865.108840][ T2398] ffff88802acd8700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1865.116899][ T2398] ================================================================== [ 1865.507719][ T2398] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1865.514979][ T2398] CPU: 0 UID: 0 PID: 2398 Comm: syz.6.8161 Tainted: G L syzkaller #0 PREEMPT(full) [ 1865.525840][ T2398] Tainted: [L]=SOFTLOCKUP [ 1865.530175][ T2398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1865.540239][ T2398] Call Trace: [ 1865.543531][ T2398] [ 1865.546472][ T2398] vpanic+0x56c/0xa60 [ 1865.550463][ T2398] ? __pfx_vpanic+0x10/0x10 [ 1865.554999][ T2398] ? __pfx___schedule+0x10/0x10 [ 1865.559854][ T2398] panic+0xc5/0xd0 [ 1865.563607][ T2398] ? __pfx_panic+0x10/0x10 [ 1865.568042][ T2398] ? preempt_schedule_common+0x82/0xd0 [ 1865.573533][ T2398] ? dvb_frontend_release+0x407/0x4d0 [ 1865.578914][ T2398] check_panic_on_warn+0x89/0xb0 [ 1865.583857][ T2398] ? dvb_frontend_release+0x407/0x4d0 [ 1865.589228][ T2398] end_report+0x73/0x170 [ 1865.593472][ T2398] ? dvb_frontend_release+0x407/0x4d0 [ 1865.598868][ T2398] kasan_report+0x128/0x150 [ 1865.603400][ T2398] ? dvb_frontend_release+0x407/0x4d0 [ 1865.608786][ T2398] dvb_frontend_release+0x407/0x4d0 [ 1865.613997][ T2398] ? __pfx_dvb_frontend_release+0x10/0x10 [ 1865.619756][ T2398] __fput+0x418/0xa50 [ 1865.623757][ T2398] task_work_run+0x1d9/0x270 [ 1865.628360][ T2398] ? __pfx_task_work_run+0x10/0x10 [ 1865.633510][ T2398] get_signal+0x1181/0x12c0 [ 1865.638048][ T2398] ? do_raw_spin_lock+0x12b/0x2f0 [ 1865.643091][ T2398] arch_do_signal_or_restart+0xbb/0x860 [ 1865.648657][ T2398] ? do_raw_spin_unlock+0xf5/0x210 [ 1865.653798][ T2398] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1865.659977][ T2398] exit_to_user_mode_loop+0x104/0x730 [ 1865.665383][ T2398] ? rcu_is_watching+0x15/0xb0 [ 1865.670169][ T2398] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1865.676255][ T2398] do_syscall_64+0x353/0x580 [ 1865.680951][ T2398] ? trace_irq_disable+0x3b/0x140 [ 1865.685996][ T2398] ? clear_bhb_loop+0x40/0x90 [ 1865.690692][ T2398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1865.696625][ T2398] RIP: 0033:0x7f0fa6f9de59 [ 1865.701046][ T2398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1865.720651][ T2398] RSP: 002b:00007f0fa734fba8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1865.729084][ T2398] RAX: 0000000000000000 RBX: 00007f0fa734fc90 RCX: 00007f0fa6f9de59 [ 1865.737066][ T2398] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1865.745045][ T2398] RBP: 00000000001c7244 R08: 0000000000000001 R09: 0000000000000000 [ 1865.753008][ T2398] R10: 0000001b31220000 R11: 0000000000000246 R12: 00007f0fa734fcd0 [ 1865.760991][ T2398] R13: 00007f0fa7225fac R14: 00000000001c72cc R15: 00007f0fa7225fa0 [ 1865.769091][ T2398] [ 1865.772429][ T2398] Kernel Offset: disabled [ 1865.776763][ T2398] Rebooting in 86400 seconds..