last executing test programs: 6m14.118367498s ago: executing program 2 (id=233): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001800128008000100767266000c00028008000100e80300"], 0x48}}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={@local, @mcast2, @mcast1, 0x2, 0x0, 0x3, 0x400, 0x8, 0x290241, r1}) 6m13.766959162s ago: executing program 2 (id=236): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x1000000, 0x0, 0x4000000}, 0x0) 6m13.460523331s ago: executing program 2 (id=237): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x1c) (async, rerun: 32) r1 = socket$packet(0x11, 0x3, 0x300) (rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x648240, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r4, 0x9e, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff27, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2038, 0x8, 0x0, 0x0}}, 0x10) (async) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) (async) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0xfc, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x0, 0x0, 0x800}}}}}}, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000000)={@multicast, @random="c59a1b746cda", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0300", 0x0, 0x1d, 0xff, @remote, @local}}}}, 0x0) (async) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYRES16=r5], 0x0) sendto$inet6(r0, &(0x7f0000000240)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000080)=0x8, 0x4) (async, rerun: 32) unshare(0x64000600) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x70bd26, 0x25dfdbfc, {0x2, 0x14, 0x10, 0x0, 0xfd, 0x0, 0x0, 0x6, 0x20002200}, [@RTA_TABLE={0x8, 0xf, 0x7fe}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r9 = socket$inet_udp(0x2, 0x2, 0x0) (async) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014002000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) (async) r11 = syz_open_dev$dri(&(0x7f0000000100), 0x9, 0x8183) ioctl$DRM_IOCTL_DROP_MASTER(r11, 0x641f) ioctl$DRM_IOCTL_SET_VERSION(r11, 0xc0106407, &(0x7f0000000000)={0x1, 0x0, 0x1, 0x80000001}) ioctl$sock_inet_SIOCDELRT(r9, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xd}}, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e20, @broadcast}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0xff, 0x8, 0x401}) (async) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001880)=""/4096, 0x1000}, 0xf8d}], 0x1, 0x10122, 0x0) 6m11.361348986s ago: executing program 2 (id=250): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000000180)={&(0x7f0000000480)={0x34, 0x41, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0x9, 0x14, 0x0, 0x1, [@typed={0x4, 0x19, 0x0, 0x0, @binary}, @generic=')']}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 6m11.047811108s ago: executing program 2 (id=251): sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a4000000010201040000000000000000020000030800044000000001080004400000ffff800001801400018008"], 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r0 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) sendmsg$inet(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000500)="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", 0x1000}], 0x1}, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) readv(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/202, 0xca}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) syz_io_uring_setup(0x315b, &(0x7f00000001c0)={0x0, 0xcfcb, 0x1042, 0x1, 0x354}, &(0x7f0000000140), &(0x7f0000000300), &(0x7f0000000180)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000003c0)={&(0x7f0000000000/0x800000)=nil, 0x800000}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000001300050000000001feffffff07000000", @ANYRES32=r3, @ANYBLOB="402000000000000014001a80100004800c000a"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) 6m9.992757131s ago: executing program 2 (id=255): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, 0x0, 0x0, 0x0, 0x1}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c000780080006"], 0x5c}}, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, 0x0, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLL', 0xe}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r1, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x0, 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000000)={0x48, 0x7, r2, 0x0, 0x10000, 0x0, 0x8, 0x3f8f26, 0x27a5ff}) syz_usb_connect(0x3, 0x24, &(0x7f0000000dc0)={{0x12, 0x1, 0x300, 0x12, 0x7c, 0x3d, 0x10, 0xbfd, 0x124, 0xf52f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x15, 0xd, 0xb0, 0x4, "", [{{0x9, 0x4, 0xcd, 0x1, 0x0, 0xe2, 0x18, 0xc3, 0xc}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r4) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000010c0)='cmdline\x00') preadv(r6, &(0x7f0000001200)=[{&(0x7f0000000080)=""/4097, 0xffffff51}], 0x1, 0x3f, 0x6a76) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r6, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x140f, 0x40, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'umad\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc080) sendmsg$ETHTOOL_MSG_EEE_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000fcdbdf251f00000018000180140002006c6f"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x200040d4) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r8 = io_uring_setup(0x1198, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r8, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg(r7, &(0x7f0000000100)={0x0, 0x1, &(0x7f0000002200)=[{&(0x7f0000000780)=""/4108, 0x437aba2}], 0x1, 0x0, 0xfffffdee, 0x407006}, 0x2125) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0xc) 5m54.6309554s ago: executing program 32 (id=255): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, 0x0, 0x0, 0x0, 0x1}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c000780080006"], 0x5c}}, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, 0x0, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLL', 0xe}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r1, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x0, 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000000)={0x48, 0x7, r2, 0x0, 0x10000, 0x0, 0x8, 0x3f8f26, 0x27a5ff}) syz_usb_connect(0x3, 0x24, &(0x7f0000000dc0)={{0x12, 0x1, 0x300, 0x12, 0x7c, 0x3d, 0x10, 0xbfd, 0x124, 0xf52f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x15, 0xd, 0xb0, 0x4, "", [{{0x9, 0x4, 0xcd, 0x1, 0x0, 0xe2, 0x18, 0xc3, 0xc}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r4) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000010c0)='cmdline\x00') preadv(r6, &(0x7f0000001200)=[{&(0x7f0000000080)=""/4097, 0xffffff51}], 0x1, 0x3f, 0x6a76) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r6, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x140f, 0x40, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'umad\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc080) sendmsg$ETHTOOL_MSG_EEE_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000fcdbdf251f00000018000180140002006c6f"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x200040d4) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r8 = io_uring_setup(0x1198, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r8, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg(r7, &(0x7f0000000100)={0x0, 0x1, &(0x7f0000002200)=[{&(0x7f0000000780)=""/4108, 0x437aba2}], 0x1, 0x0, 0xfffffdee, 0x407006}, 0x2125) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0xc) 8.523848497s ago: executing program 3 (id=1987): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) syz_usb_connect(0x2, 0x3f, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0], 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x20001) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0x80045530, &(0x7f0000002500)=""/4101) r3 = dup3(r2, r2, 0x80000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) unshare(0x26020480) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES16, @ANYRES16=r2, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$l2tp6(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x2, &(0x7f0000000640)={0x5, 0x0, 0x0, 0x0, 0x12, 0x62, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfa0c, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=@deltaction={0x114, 0x31, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x5c, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x70, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8b78}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2dea}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ppoll(&(0x7f00000003c0)=[{r0}], 0x1, &(0x7f0000000440), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x2}) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) read$FUSE(r7, &(0x7f0000004ac0)={0x2020}, 0x2020) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000001040)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77622a85, 0x1002, 0x1}, @fda={0x66646185, 0x4, 0x5, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000700)=""/242, 0xf2, 0x0, 0x40}}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) socket$unix(0x1, 0x1, 0x0) r8 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fsmount(r8, 0x0, 0x0) 6.73351422s ago: executing program 4 (id=1996): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) bind$packet(r0, &(0x7f0000000500)={0x11, 0x3, r1}, 0x14) sendto$packet(r0, &(0x7f0000000200)="0011223344", 0x5, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000691000/0x2000)=nil, 0x0}, 0xfffffe78) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e41, 0x1f400, 0x201, 0xc1}) bpf$MAP_CREATE(0x0, 0x0, 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) fsopen(&(0x7f0000000780)='bpf\x00', 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000600)={'gre0\x00', &(0x7f0000000580)={'gretap0\x00', 0x0, 0x80, 0x7, 0x3, 0x81, {{0xb, 0x4, 0x1, 0x9, 0x2c, 0x68, 0x0, 0x4, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x42}, {[@ra={0x94, 0x4}, @end, @ssrr={0x89, 0xb, 0xb4, [@multicast2, @private=0xa010101]}, @generic={0x83, 0x6, "5cb3f850"}]}}}}}) sendmmsg$inet6(r3, 0x0, 0x0, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x3, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r5, 0x0, 0x0, 0x0, 0x0) setpriority(0x1, 0xffffffffffffffff, 0x20c) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d000100756470"], 0x54}}, 0x0) 6.537224832s ago: executing program 4 (id=1999): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) unshare(0x20000400) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1f, 0x4, 0x1, 0xbf22, 0x0, 0xffffffffffffffff, 0xe0d, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffe}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0xa, 0x4, 0x5, 0x0, r1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0d0000000a000000040000000500000000000000", @ANYRES32=r2], 0x48) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20044890) r3 = socket$netlink(0x10, 0x3, 0x1) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'rr\x00', 0x1, 0x10000004, 0x8}, 0x2c) socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) open_tree(0xffffffffffffff9c, 0x0, 0x1803) socket$nl_route(0x10, 0x3, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x88}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000030900010073797a310000000018010000030a010400000000000000000100ffff0900030073797a31000000002000048008000140000000051400030076657468315f6d6163767461700000000900010073797a3100000000280008"], 0x160}}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x3, 0x14c, 0x40004, 0x7, 0x8, 0x3, 0x7, 0x47, 0x14, 0x9, 0x7e4, 0x7}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, &(0x7f00000001c0)={0x0, 0x6, 0x44, {0x44, 0x11, "7a4d41079d497ae7a1e26c82dc92f4d80b8b8f50bc414b17eea9b9c58a82b7016741d97ca3f0bf01054342b56a68f70e30656201b730bc4bd664f95debb401ae1fda"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}, &(0x7f00000002c0)={0x0, 0x22, 0x17, {[@main=@item_4={0x3, 0x0, 0x9, "a545ac8b"}, @global=@item_012={0x0, 0x1, 0x4}, @local=@item_012={0x0, 0x2, 0x1}, @global=@item_012={0x0, 0x1, 0x9}, @global=@item_4={0x3, 0x1, 0x1, "7c916739"}, @global=@item_4={0x3, 0x1, 0x8, "30c15f2d"}, @local=@item_4={0x3, 0x2, 0x8, "b4378f56"}]}}, &(0x7f0000000300)={0x0, 0x21, 0x9, {0x9, 0x21, 0x200, 0x9, 0x1, {0x22, 0x3e8}}}}, &(0x7f0000000600)={0x2c, &(0x7f0000000380)={0x0, 0xe, 0x30, "afcac2b36ca202f0e5e9a5656585e70a106eab2699f8a0897c35f0c0cdd768f0514d90b2ddb487462fd3c17abed4bd89"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000400)={0x0, 0x8, 0x1}, &(0x7f00000004c0)={0x20, 0x1, 0xef, "c4ededbe280ad936ff1a10280e71a02e941fdd6e539339e474504dfd172b3493314c85bdc5c913d4e8f11a13eeee34526a2fa1b4ecb678a9f62150d8aee2cddea50814e4ac9ac8ce934df1dc03b526d75ce73a202872440ac87f29de2bf24d8ff1cc275886ef0dd6e9e3730ed44ea81d3bc0f59284f73a837a531b9bfae53837ebb10de083a864284ecba8ef89d63c3c0e822b64aa55c555bcb04ddd285dc7ec8bcb9b96613c5882cd0d8a85396e07f29112dd477d6a5248b13022c8db72c3e8a32228c34979d6cd6dddbdc939fe5cd532ee0a09d5bcd7214ea65eec71bb66bec65e637d7cf243b26de43f5b0a977e"}, &(0x7f00000005c0)={0x20, 0x3, 0x1, 0x2}}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 5.450630497s ago: executing program 1 (id=2002): syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000680)=ANY=[@ANYBLOB="120100020000002082057d004000010203010902600003010680070904000000010100000a2401a80f0a0002010209040100000102000009040101010102000104050100090402"], 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003a97569f110f002070c801020301090212000100098f03000600000000579883"], 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a4000000010201040000000000000000020000030800044000000001080004400000ffff800001801400018008"], 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000001300050000000001feffffff07000000", @ANYRES32=r1, @ANYBLOB="402000000000000014001a80100004800c"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) 5.384053254s ago: executing program 3 (id=2003): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYRES16=0x0], 0x80}}, 0x0) r3 = dup3(r0, r0, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r1, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20028081) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x40, r6, 0x1, 0x70bd2c, 0x1, {{0x2}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2, 0x2e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x976}]]}, 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x78, r1, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "2e4422efc0f624b1d8898ba166baeab2"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMK={0x14, 0xfe, "3832f0f4749d3774dd93d367774de6c3"}, @NL80211_ATTR_PMK={0x14, 0xfe, "1e3e33dcf290c961a8873bd3b039dc22"}, @NL80211_ATTR_PMK={0x14, 0xfe, "2b81b83bf700cefcf52ae19ea976e4ac"}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) 5.336159115s ago: executing program 3 (id=2004): syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d5502301"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0xae00) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000100)={&(0x7f0000000340)=[{0x3, 0x2000, 0x4f, &(0x7f0000000140)="9a192080743c14243134cab9fe4bcc05fc7a53b9cc0deae3274ffaab7a60ed1d8530fa4afb706f8e20defc419671415ddc17a048d9a114f6d6cfd1b8336fd1624c8bad3df5f0e939d42b173012c9af"}, {0x10, 0x1, 0x0, &(0x7f0000000200)}, {0xaca1, 0x8000, 0x6, &(0x7f00000002c0)="2b471025b25d"}], 0x3}) 4.599572798s ago: executing program 0 (id=2006): r0 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0xa4ff, 0x101, @empty, 0xa3c}, {0xa, 0xbffe, 0xfffffffd, @dev, 0x4}, 0x1000, {[0x9, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0x2]}}, 0xb9) 4.405587982s ago: executing program 0 (id=2007): unshare(0x64000600) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8021}, 0x4048800) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000001000000000000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200001400b000b703000000000000850000008300", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffff"], 0x0, 0x1, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002fc0)=@newtfilter={0x87c, 0x2c, 0x609, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0xffffffff, {0x0, 0x2}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x84c, 0x2, [@TCA_CGROUP_POLICE={0x848, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x401, 0x10000000, 0xfffffffa, 0x9, 0x0, {0x6, 0x1, 0x9, 0x3, 0x4, 0x676}, {0x9, 0x1, 0xfffd, 0xc9, 0x3, 0x456}, 0x1, 0x503, 0xe}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x1d4, 0x3, 0x401, 0x7, 0x5, 0x3, 0x0, 0x80, 0xd9, 0x0, 0x81, 0x5, 0x2, 0x2, 0x3, 0x401, 0x3, 0x3, 0x4, 0x1, 0x10000, 0x8, 0x400, 0x1, 0x2, 0xff, 0x2, 0xb22, 0x83, 0x2, 0x7fff, 0x7, 0x6, 0xfffffffd, 0x22, 0x1c8b, 0x4, 0x10001, 0x4, 0x8, 0x80000001, 0x6, 0x4, 0x3, 0x7, 0xf92, 0x17, 0xa0f7, 0x225, 0x8, 0x6, 0x2, 0x10001, 0x6, 0xe1c3, 0x4d, 0x3, 0x6, 0x398, 0x0, 0xc1a, 0x4, 0x8, 0x101, 0x8, 0xfffffff8, 0x634, 0x8, 0x5, 0x6, 0xffffffc4, 0x5, 0x0, 0x2, 0x5, 0x1, 0x4, 0x5, 0x4eb6, 0x400, 0x8000, 0x3, 0x6, 0xf76, 0x3, 0xf20, 0x80000001, 0x73, 0x4, 0x2, 0x9, 0x8, 0x1, 0xa, 0x4d989b25, 0x5, 0x0, 0x3, 0x4, 0x1, 0x8, 0x1, 0x6, 0x6, 0xffff0001, 0x100, 0x1, 0xd0ef, 0x2, 0xc9, 0x7, 0x7, 0xffffffff, 0x4, 0x5, 0x6, 0x5, 0x44c1, 0xffffff01, 0xffffffff, 0xffff, 0x3ff, 0x8, 0x3, 0xb, 0x6, 0x1, 0xffffffff, 0x7fff, 0x4, 0x2, 0x7, 0x1e3, 0x9, 0x5, 0x2, 0x5, 0x5, 0x5, 0x4, 0x2, 0x8, 0x0, 0x8, 0x200, 0x5, 0x8, 0x7, 0x9, 0x7, 0x7, 0x4, 0x0, 0x6, 0x160d, 0x4, 0xfffffff9, 0xc, 0x5, 0x5, 0xff, 0xdc, 0x2, 0x9, 0x1ff, 0xa, 0x3, 0x437, 0x2, 0xfffffffb, 0xfa7, 0x9, 0x3, 0x80000001, 0x200, 0x10000, 0xea49, 0x8, 0xff, 0x5, 0xff, 0x3, 0x8, 0x81, 0x7, 0x1, 0x1, 0x1, 0x3, 0x7, 0xfc4, 0x0, 0x4, 0x9, 0x8, 0x2, 0x9, 0xd, 0x10, 0x3ff, 0x7, 0x5, 0x4, 0xe136, 0x48d, 0x6, 0x10, 0x0, 0x6, 0x3, 0x2, 0xdc, 0xfe, 0x3, 0x6, 0xfffffffd, 0x7, 0x1, 0x5, 0x0, 0x9, 0x8, 0x9, 0x4, 0x8, 0x7, 0x1, 0xfff, 0x146e, 0x400, 0x0, 0xa, 0x3, 0x83e1, 0x1b, 0x888, 0x7, 0x288, 0x7ff, 0x6, 0x5, 0x10, 0x4, 0x80000001, 0x7, 0x4, 0x20, 0x6eb, 0x0, 0xfffffff8, 0x4, 0x1, 0x5, 0x1, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x9, 0x7ffffffc, 0x1, 0x5, 0x0, 0xfffffc4c, 0x1, 0x200, 0x7, 0x200, 0x7a5, 0x4, 0x1, 0x3, 0xfffffffc, 0x3, 0xab, 0x8142, 0x2, 0x0, 0x1000, 0x8, 0x40, 0x74e, 0x3623, 0x8, 0x86, 0x5, 0x5, 0x8001, 0x5045c494, 0x5, 0x8, 0x326a, 0x1, 0x0, 0x9, 0x1, 0x617e57a8, 0x7fffffff, 0x1000, 0x9e, 0xd5, 0x7, 0x56fc, 0xd, 0xfffffcfb, 0x3, 0x9, 0x7, 0xffff, 0x5, 0x80000000, 0x9, 0x4, 0x9, 0x2c72, 0x8, 0x5, 0x3, 0xa5, 0xa, 0x0, 0x9, 0x80000000, 0xfc, 0x0, 0xb, 0x8, 0xfffffff7, 0x6963, 0x0, 0x1, 0x5, 0x400, 0x0, 0x8, 0xf, 0x7fff, 0xfffffffd, 0x1, 0xffffffff, 0x7, 0x0, 0xa, 0xef8f, 0x0, 0x5, 0x0, 0x9, 0x2, 0x10000000, 0x0, 0x80000001, 0x0, 0xffffffff, 0x83, 0x4, 0x8, 0x2, 0x0, 0xff, 0xc3e, 0x7, 0xccb, 0xfffffff8, 0xfffffff9, 0xab, 0x10000, 0x0, 0x3, 0x752a5eb9, 0x1, 0x7, 0xedf4, 0x2b3, 0x1, 0x6, 0x6, 0x100, 0x8, 0x5, 0x6, 0x6, 0x7, 0x3, 0xfffffff7, 0x1, 0x7, 0xff, 0x48, 0x2e8, 0x3, 0x10, 0x7e69c17e, 0x9, 0x7648, 0x1000, 0x8, 0xf1, 0x3, 0xd7, 0x6, 0x3, 0x7, 0x9, 0x7f, 0x5, 0x200, 0x0, 0x9, 0x7, 0x5e, 0x4, 0x2, 0x7, 0x7, 0x7ff, 0x9a, 0x345f, 0xe, 0x7fffffff, 0x6, 0x7fffffff, 0xfffffffb, 0x9, 0x4, 0x8, 0x4009, 0x3, 0xfffffff7, 0x3, 0x7, 0x1, 0xf7a5, 0x0, 0x1, 0x9, 0x400, 0x81, 0x8, 0x7, 0x7ff, 0x5, 0x7f, 0x1, 0xfffffffe, 0xffffffff, 0x6, 0xff, 0x10001, 0x7, 0x1, 0x7, 0x6, 0xde3, 0xfffffffa, 0x200, 0x8, 0x5, 0xfffffff8, 0x9, 0x0, 0x0, 0x9, 0x6, 0x5, 0x6, 0x0, 0xffffffff, 0x5, 0x8667, 0x80, 0x0, 0x6, 0x9, 0x2, 0x4, 0x3, 0x6ae3, 0x1, 0x1, 0x7, 0x3, 0x1, 0x9, 0x5, 0x0, 0xfffffffa, 0x81, 0x3, 0x6, 0x8, 0x10000, 0x7, 0x7, 0x8001, 0x1, 0x2, 0x6, 0x2, 0x226c0000, 0x5f7e, 0xffffffff, 0x5, 0xfffffffd, 0xff, 0xad9, 0x4d3ae222, 0xfffffffe, 0x5, 0x9, 0x0, 0x9, 0x10000]}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x54}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e1e, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}], 0x2, 0x40) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='.\x00', 0x60000526) inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x5000000) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e21, 0x9, @mcast1, 0x5}}, 0x3, 0x1, 0xc, 0x0, 0x2, 0x2}, 0x9c) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x7, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) 4.313433907s ago: executing program 0 (id=2008): r0 = socket$inet6(0xa, 0x3, 0x7) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00'], 0x28}}], 0x1, 0x0) r1 = syz_open_dev$sg(&(0x7f00000000c0), 0x3, 0x444805) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x2, 0x16, 0x9, 0x7, 0xa, 0x0, 0x70bd2a, 0x25dfdbfd, [@sadb_x_policy={0x8, 0x12, 0x3, 0x3, 0x0, 0x0, 0xfffffff4, {0x6, 0x2b, 0x0, 0x3, 0x0, 0x4, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x36}, @in=@private=0xa010100}}]}, 0x50}}, 0x20008010) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000000)="aefdda9d242006000000f57f07603aeff0f64ebbee07962c38e22e11b44e65d76641cb0100070000002aa7", 0x2b}], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) r4 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a00090000000904010000010230000904010101010230000905010960"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001880)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb042, 0x1000, 0x2, 0x122}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x16ae, 0x200, 0x0, 0x266}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5eb7, 0x0, 0x2, 0x1b6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7126, 0x8000, 0x0, 0x147}, 0xffffffffffffffff}], 0x4, &(0x7f0000002b00)={0x2e, 0x2a, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xfff7}, 0x0, 0x0, '\x00', {0x0, 0xc56, 0x0, &(0x7f0000001b00)=@buf_max_buf="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"}}, &(0x7f0000002b80)) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbf48, 0x0, 0x3, 0x1cf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x50b, 0x2, 0x1, 0x1bd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xad4, 0x8000, 0x2, 0x105, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x27cd, 0x0, 0x3, 0x1f0}}], 0x4, 0x0, &(0x7f0000001740)) r6 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xe, 0x1, 'hashlimit\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x3c, 0x3, "6c6f00000000000000000000000000002000000010270000050000001000000010000000e8030000e8030000202000"/56}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x128}}, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r4, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000800000/0x1000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl(r9, 0x4048aecb, &(0x7f0000000200)="0100"/72) ioctl(r9, 0xc048aeca, &(0x7f0000000300)="0100"/72) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'nicvf0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xfffffffe, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0x16, 0x1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x2c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x7, 0x6, 0x7, 0x10, 0x1e, 0x17, 0x4}}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x7f, 0xc, 0xb, 0x14, 0x5}}]}}]}, 0x58}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000001810000089"], 0x48) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r12 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r12, 0x0, 0xffffffffffffff9c, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 4.164932473s ago: executing program 5 (id=2010): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="5611000000000000140012800a000100767863616e0000000400028008001c00", @ANYRES32, @ANYBLOB], 0x3c}}, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="8f0978d21b640fc79ca50000c0fe470f06430f01c2440f20c0ac0a0000e39d9d0f22c066460f38809bf77f00000f214a0fc73d0d0000003e653666400fc7775f400f01c4", 0x44}], 0x1, 0x10, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x6484c2, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) pwritev(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000200)="48d07e3a45a6a2b59e8243ddaf86e5f81cbe61f4f36c8b697f897b41d8e19efe5a3c800ddda31486c7ff31a800f4a6f30ee055fcdf4362f620656aeaa49122be1aef1a17886e99d05bb7347ff12f43e7dac51e6445569cf1b73ab150", 0x5c}], 0x1, 0x8, 0xc) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaab0c9420343758864450000280022000000069078ac"], 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10b200, 0x0) ioctl$KVM_GET_MSRS_sys(r7, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x485, 0x0, 0xbf0}]}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0xc0800) read$alg(r9, &(0x7f0000000140)=""/77, 0x4d) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) sendto$packet(0xffffffffffffffff, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r8, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 3.96320714s ago: executing program 1 (id=2011): r0 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES8, @ANYRES32=0xffffffffffffffff, @ANYBLOB='=\x00'/12, @ANYRES32=0x0, @ANYBLOB="877eea"], 0x20) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) syz_open_dev$sndpcmc(&(0x7f00000007c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r4, 0x1, &(0x7f0000000040)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x2}]) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/133, 0x85}, {0x0}], 0x2) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000280)={0x0, 0x1}) r6 = socket$alg(0x26, 0x5, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r7, 0x0, 0xb, &(0x7f0000000000)=0xfffffffd, 0x4) sendto$inet(r7, 0x0, 0xffef, 0x20000000, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES8=r1, @ANYRES32=0x0, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) recvfrom$inet(r7, 0x0, 0x0, 0x2042, 0x0, 0x0) bind$alg(r6, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(cbc-camellia-aesni,sha3-384-ce)\x00'}, 0x58) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r9 = userfaultfd(0x801) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r10 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f00000003c0)={0xc}) 3.68611883s ago: executing program 5 (id=2012): sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a4000000010201040000000000000000020000030800044000000001080004400000ffff8000018014000180080001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000001300050000000001feffffff07000000", @ANYRES32=r1, @ANYBLOB="402000000000000014001a80100005800c000a"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3.590048177s ago: executing program 5 (id=2013): r0 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x88001) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @local}, {0xa, 0x4e22, 0x4, @mcast2, 0xfffffffc}, 0x0, {[0x0, 0x0, 0x2, 0xfffffff9, 0x2, 0x0, 0x5]}}, 0x5c) write$tcp_congestion(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53}, 0x20) ioctl$sock_SIOCGIFCONF(r2, 0x890b, &(0x7f0000000000)=@buf={0xe0ff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="020000000400000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) tee(r3, r2, 0xf, 0x2) symlink(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') futimesat(0xffffffffffffff9c, &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x820b, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x30, 0x0, @in={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x11}}, @ib={0x1b, 0xfffe, 0x8, {"7d900600080000000900"}, 0x80000001, 0xe4bb, 0x6}}}, 0x118) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r5, 0x1, 0x1, &(0x7f0000000040)={0x6ea}, 0x4) lseek(r0, 0x8001, 0x1) sendto$inet6(r5, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$sock_TIOCOUTQ(r5, 0x5411, &(0x7f0000000080)) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) 3.503699822s ago: executing program 5 (id=2014): r0 = open(&(0x7f0000000340)='./bus\x00', 0x4c27e, 0x2) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17ffff7, 0x12, r0, 0x0) fallocate(r0, 0x0, 0x9, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4030582b, &(0x7f0000000040)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 3.385734618s ago: executing program 1 (id=2015): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000240)=@multiplanar_mmap={0x4, 0xe, 0x4, 0x40, 0x2, {0x77359400}, {0x2, 0x0, 0x2, 0x8, 0x1, 0x0, "414b2e9b"}, 0x7, 0x1, {0x0}, 0x7}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x4c, r2, 0xb97534d5fe9704cf, 0x1, 0xfffffffc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x800}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xe, 0xbd, [0x7, 0x8, 0x0, 0xe, 0x9]}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1c9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) 3.37016541s ago: executing program 5 (id=2016): syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x268, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000b00)={0x5, "a3acc211119c07558139ed270ee04200000000000000ff000000eaffffff00"}) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f00000000c0)) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x110, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6bcd41fd8"}}, 0x48}}, 0x410) r3 = io_uring_setup(0x1020, &(0x7f0000000a80)={0x0, 0x3, 0x3000, 0xffffffff, 0xfefffffb}) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r3, 0x21, &(0x7f0000000340)={0x0, 0x2fc3f, 0x8, 0xffffffff, 0x374, 0x0, r3}, 0x1) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25"}) r4 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x2, 0x263}, &(0x7f0000000100), &(0x7f0000000080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}]}, 0x3}, 0x1) io_uring_register$IORING_REGISTER_PBUF_STATUS(r4, 0x1a, &(0x7f0000000140), 0x1) close_range(r1, r2, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x18, {[@global=@item_012={0x1, 0x1, 0x0, "01"}, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @global=@item_012={0x1, 0x1, 0x2, "ff"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @main=@item_012={0x2, 0x0, 0x8, "008c"}, @global=@item_012={0x1, 0x1, 0x0, '\b'}, @global=@item_012={0x1, 0x1, 0x9, "01"}, @local=@item_012={0x1, 0x2, 0x2, '0'}, @main=@item_012={0x1, 0x0, 0x9, "02"}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0) r5 = syz_usb_connect$uac3(0x1, 0x108, &(0x7f0000000200)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf6, 0x3, 0x1, 0x3, 0x20, 0x6, {0x8, 0xb, 0x1, 0x1, 0x1, 0x0, 0x30, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x0, 0xa, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x3}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x9}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0xfa}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x7, 0x1, 0x58, 0x10, "e346"}, @as_header={0x17, 0x24, 0x1, 0x89, 0x7, 0xfffa, 0x4, 0x0, 0xfc, 0x97c, 0x8e}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xe68c, 0xd5, 0x9, 0x7f}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x80, 0x94, 0x7, {0xa, 0x25, 0x25, 0x4, 0x8, 0xfffb}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xd, 0x4, 0x6, 0x80}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x1, 0x8, 0x9, "ad", '\\&'}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x9e, 0xfffe, 0x7, "ee"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x0, 0x6, 0x0, "4890"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6d, 0x8, 0x1, 0x4}, @as_header={0x17, 0x24, 0x1, 0x1, 0x1, 0x4, 0x3, 0xfe, 0x5, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x9, 0xa, 0x9, {0xa, 0x25, 0x25, 0xf, 0x5b, 0x4}}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x200, 0x1, 0x0, 0x0, 0xff, 0x1}, 0x8, &(0x7f0000000400)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x8, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x2401}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x380a}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x414}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x414}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x404}}, {0x9e, &(0x7f00000005c0)=@string={0x9e, 0x3, "b32dd75aa550ff4415ee67de0d470fdbf67ea77dc351b7f109ff6a8e905ba0eece133b28afa11288a5c4137752cc4dd5895716eed76cc8addfa7b0cbe7fec57149683dbb5ef3383d0055c557fb48095ca1f30db6bb1a90989cd85e5e6c8268386db97c3d0f4dbd5a04a017a936040717ef2108406aff96b6bafda0d3fe35c27e866bd82ac1f4efb5c1a6266b76e1de4209f5af161d8bb14b974332d4"}}, {0x29, &(0x7f0000000680)=@string={0x29, 0x3, "96d00ba867d8ea859dbc3f296990b2a0b2a1ff791631a05c0167db9437131f5f2747825817ed90"}}]}) syz_usb_control_io(r5, 0x0, &(0x7f0000000f40)={0x84, &(0x7f0000000ac0)={0x60, 0xb, 0x11, "03002f7d69873cfae98062811b56f7765f"}, 0x0, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.365878417s ago: executing program 4 (id=2017): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x2000884c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000140016"], 0x4c}, 0x1, 0x0, 0x0, 0x40080}, 0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044014) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f0000000200)='foo#dnserror=+\x00', 0xf, 0xfffffffffffffffe) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r6 = syz_usbip_server_init(0x5) getsockname(r3, &(0x7f0000000140)=@nl=@unspec, &(0x7f00000001c0)=0x80) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000080)={0x0, 0x4, 0x6, 0xb}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fddbdf254f00000008000300", @ANYRES32=r5, @ANYBLOB="38007a801400020001ceb5581c2a57e668532c24f715f3820c000300000000000000000014000100352ce353de4bc718d691ac64c5249c44"], 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 3.276682739s ago: executing program 1 (id=2018): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x34, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x4}, @NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (fail_nth: 8) 3.133218436s ago: executing program 1 (id=2019): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xfffffffffffffffc, 0x800000000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="020602000200000002"], 0x10}}, 0x0) read$FUSE(r2, &(0x7f0000005080)={0x2020}, 0xaae) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="580000001000010029bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="159804000300000008000d000100000008001b00"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r4 = socket(0x1a, 0x5, 0x40) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc626, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x70, 0x1, "", [{{0x9, 0x4, 0x0, 0xd, 0x41, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0xff7f, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x3, 0x1, 0x2}}}}}]}}]}}, &(0x7f0000000040)={0xfffe, 0x0, 0x0, 0x0, 0x1}) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$lan78xx(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000000c0)={0x2c, &(0x7f0000000180)={0x0, 0x24, 0x2, {0x2, 0x21}}, 0x0, 0x0, 0x0, 0x0}, 0x0) io_submit(0x0, 0xfffffffffffffead, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(&(0x7f0000002040)='./file0\x00', &(0x7f0000000200)='./file2\x00') rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000780)='./file2\x00') symlinkat(&(0x7f0000001040)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x25, &(0x7f0000000080)=[@in={0x2, 0x0, @dev}], 0xffe2) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a01020000050000000000000000000c00024000000000000000010900010073797a3000000000140000001100010000000000000000000000000a647a4f24e909201a9ad59373cf"], 0x54}}, 0x4044811) 2.579238774s ago: executing program 4 (id=2020): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) bind$packet(r0, &(0x7f0000000500)={0x11, 0x3, r1}, 0x14) sendto$packet(r0, &(0x7f0000000200)="0011223344", 0x5, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000691000/0x2000)=nil, 0x0}, 0xfffffe78) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e41, 0x1f400, 0x201, 0xc1}) bpf$MAP_CREATE(0x0, 0x0, 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) fsopen(&(0x7f0000000780)='bpf\x00', 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000600)={'gre0\x00', &(0x7f0000000580)={'gretap0\x00', 0x0, 0x80, 0x7, 0x3, 0x81, {{0xb, 0x4, 0x1, 0x9, 0x2c, 0x68, 0x0, 0x4, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x42}, {[@ra={0x94, 0x4}, @end, @ssrr={0x89, 0xb, 0xb4, [@multicast2, @private=0xa010101]}, @generic={0x83, 0x6, "5cb3f850"}]}}}}}) sendmmsg$inet6(r3, 0x0, 0x0, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x3, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r5, 0x0, 0x0, 0x0, 0x0) setpriority(0x1, 0xffffffffffffffff, 0x20c) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d000100756470"], 0x54}}, 0x0) 2.491598563s ago: executing program 4 (id=2021): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x11, r0, 0x0) ftruncate(r0, 0x0) mmap(&(0x7f0000afd000/0x11000)=nil, 0x11000, 0x1000000, 0x30, r0, 0xaa663000) r1 = socket(0x11, 0xa, 0x33b) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) sendmsg$can_bcm(r1, 0x0, 0x20000040) io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x37b9, 0x1, 0x3, 0xce}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f00000017c0), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000001800)={@host, 0x1}) timer_create(0x2, &(0x7f0000004040)={0x0, 0x2f, 0x1}, &(0x7f0000004080)) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="18310000040000000000000000000000186100001d00000000000000810000001855000007000000ddf040f5651aa880"], &(0x7f0000000280)='syzkaller\x00', 0x9, 0x9c, &(0x7f00000002c0)=""/156, 0x41000, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0x3, 0xda5, 0xfff}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000400), &(0x7f0000000440)=[{0x2, 0x3, 0x3, 0x8}, {0x1, 0x4, 0x6, 0x6}], 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001740)={r3, 0x0, 0xda, 0x63, &(0x7f0000000540)="d97a7f2b680e9338fd4c4c8841fbf6af0db07e69a30303e8d7f92c0dcda4d5c45e605e613f03fd7c011d790c342077970c8bc686a79174da2157964e602a4bb9a865292215c0cc8db1cf064a2ab72cb95712c2f2bdc5a126750608d5487403916719b5a2456408ea6f892adb07f44ff6b9a080d9c00e8a5c7dbd9657c3e714063f591c1f611c0eb3f7d08aa62f2592aa51ec1ef8e029b63828f2c1dfe71925c6ec4b35b0b21f7cc39cf7d93fd51163d792d953fd6a908ea049191107ac02345a4e17f2f0e3a4cc3c615438e21736bada4399b84097a173bd29d5", &(0x7f0000001940)=""/99, 0xffff, 0x0, 0x5c, 0x1000, &(0x7f00000006c0)="ef932d22bc60e6b9b48fe7f2dbe2da7acc52dae3a0569aa29287d33d7cd11ce7be56b34de27e726d4f0e07fd49a20d5677d932e904f07c6421e5e3384cfec1566cea8bae438ec6e7d6197255275b858fdfde47906c38e4ff1b3474db", &(0x7f0000000740)="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", 0x4, 0x0, 0x8000}, 0x50) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1831a3, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001840)=@delqdisc={0xe4, 0x25, 0x2, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x1, 0xb}, {0xffe0, 0x10}, {0xe, 0xc}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0x3}}, @TCA_RATE={0x6, 0x5, {0x2, 0xff}}, @TCA_RATE={0x6, 0x5, {0x7, 0xc}}, @qdisc_kind_options=@q_netem={{0xa}, {0x90, 0x2, {{0x5, 0x0, 0x9, 0xff, 0x10000, 0x7fffffff}, [@TCA_NETEM_RATE={0x14, 0x6, {0x6, 0x7, 0x7fff, 0xb}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0xffffffff, 0x14, 0x1, 0x5c45, 0x300000000, 0x4}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_RATE64={0xc, 0x8, 0xd0a9532a129935e1}, @TCA_NETEM_CORR={0x10, 0x1, {0x3, 0x6, 0x2}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_ECN={0x8}]}}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x2204403c}, 0x0) r6 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000200)=ANY=[@ANYRESHEX=r2], 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x800, 0x3) syz_open_dev$video4linux(0x0, 0x3, 0x101100) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\a?'], 0x0, 0x0, 0x0, 0x0}, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) 2.224164891s ago: executing program 3 (id=2022): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="5611000000000000140012800a000100767863616e0000000400028008001c00", @ANYRES32, @ANYBLOB], 0x3c}}, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="8f0978d21b640fc79ca50000c0fe470f06430f01c2440f20c0ac0a0000e39d9d0f22c066460f38809bf77f00000f214a0fc73d0d0000003e653666400fc7775f400f01c4", 0x44}], 0x1, 0x10, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x6484c2, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) pwritev(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000200)="48d07e3a45a6a2b59e8243ddaf86e5f81cbe61f4f36c8b697f897b41d8e19efe5a3c800ddda31486c7ff31a800f4a6f30ee055fcdf4362f620656aeaa49122be1aef1a17886e99d05bb7347ff12f43e7dac51e6445569cf1b73ab150", 0x5c}], 0x1, 0x8, 0xc) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaab0c9420343758864450000280022000000069078ac"], 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10b200, 0x0) ioctl$KVM_GET_MSRS_sys(r7, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x485, 0x0, 0xbf0}]}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0xc0800) read$alg(r9, &(0x7f0000000140)=""/77, 0x4d) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r8, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 1.878793698s ago: executing program 4 (id=2023): shmget(0x1, 0x1000, 0x2, &(0x7f00003ae000/0x1000)=nil) socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000400)={0x38, 0x6, 0x8, 0x3, 0x5, 0x7, 0x1, 0xfffffe0000000005, 0xfa0d, 0xffffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000140), 0x4) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = fsopen(&(0x7f0000002380)='ecryptfs\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000300)=[{0x30, 0x6, 0x4, 0xfffff000}]}, 0x10) syz_usb_connect$uac2(0x5, 0xcf, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x2b73, 0x13, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbd, 0x3, 0x1, 0xf4, 0x0, 0x6, {0x8, 0xb, 0x0, 0x2, 0x1, 0x0, 0x20, 0x40}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x3, 0x6, 0x3f, 0x13}, [@processing_unit={0xf, 0x24, 0x8, 0x5, 0x5, [0x1, 0x1, 0x0, 0x0, 0x1]}, @input_terminal={0x10, 0x24, 0x2, 0x6, 0x1ff, 0x1, 0x5, 0x4, 0x6}, @processing_unit={0x7, 0x24, 0x8, 0x1, 0x6, [0x3]}, @input_terminal={0x10, 0x24, 0x2, 0x6, 0x405, 0x1, 0x6, 0xf, 0x5b, 0x6, 0xd4, 0x7f}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x52, 0x5, 0x3, 0x3}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xff11, 0xa, 0x59, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x3, 0x5, 0x9, {0x8, 0x25, 0x1, 0x3, 0xf, 0xc, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0xd, 0x0, 0xb6}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7, 0xff, 0x4c, {0x8, 0x25, 0x1, 0x81, 0xf, 0x40, 0x5}}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x9, 0x6, 0x7, 0x40, 0x7f}, 0x15, &(0x7f0000000500)=ANY=[@ANYBLOB="050f15000110100a0800000006835e7814597579465f9e86ee6822dbb2716ed492cb2dbc9446d765d7d56955e06faccf1c8b02cfbcc5ccd62f6010a9a9383d0103e285e720d48660baad8504c406ffcf4f157e79d83042033ed78b63d01368887405dc00c9f6e6d285e913ed380c70455ae241d46cea5b094ca141ed2345b059c3fe85f4bd2219fae969ca778b6ea29eb5a48b1055eae0ded8c68d561b8df8"], 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x40d}}]}) openat$kvm(0xffffffffffffff9c, 0x0, 0x111141, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbM:', 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xb8, r5, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7, 0x40}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "64a50e8becd6cefc8c54c82827a9ee9fb6ba3cfbb6cfa94a"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "173641290985b50d6e6120a6e384c375de650f2effcb242b"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @NL80211_ATTR_IFTYPE={0x8}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4084010}, 0x4) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r9 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0) fsetxattr$security_capability(r9, &(0x7f00000005c0), 0x0, 0x0, 0x4) fsetxattr(r9, &(0x7f0000000280)=@known='user.incfs.size\x00', 0x0, 0x0, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) socket(0x1, 0x803, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8000, &(0x7f0000000440)=ANY=[@ANYBLOB="d746a21148ff75706949bc353a89d588535b174ca586f3c083ebff597ad2e955ff49dfa1d9a991a1ed7c22917b7e451164335e1c000a733ac2638e1a8a59301a0c1ef99224832aeed4373b2f1e55ae0b11ca439430e663a5b16ff0f4c45f5b8e90923bf2dd790d1a776a2dfef2eacfc6711a69499b7b50", @ANYBLOB=',', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) 1.830979624s ago: executing program 3 (id=2024): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000100)={0x2, 0xffffffff, 0xfffffffe, 0x8, 0x4000002, 0x80508a}) 1.469120913s ago: executing program 5 (id=2025): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f00000001c0)) r1 = syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040109720770000000000010902350001010080320904000005ffffff000705810340000107058202000200070503020002000705840200020007050502000200"], 0x0) syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x20, {0x20, 0x0, "69da1d0af3ff945d93377b6959ea29a17efec5d444e4cdda14514e82fb4d"}}, &(0x7f0000000340)=ANY=[@ANYBLOB="0003000000000200719df99777b2b185a08295f141440063f27ec24162cea1a574b113"], &(0x7f0000000140)={0x0, 0x0, 0x1d, {0x0, 0x0, 0x1d, 0x1, [@ssp_cap={0x18, 0x10, 0xa, 0x9, 0x3, 0x4, 0xf00f, 0x6, [0x30, 0xff0000, 0x3f00]}]}}, &(0x7f0000000470)={0x0, 0x0, 0xf, {0xf, 0x0}}, &(0x7f0000000490)={0x0, 0x0, 0xc, {0xc, 0x0, 0x6, 0x0, 0x0, 0x9}}}, &(0x7f0000000500)={0x84, &(0x7f0000000640)={0x0, 0x0, 0xd7, "e024751ed53cd07fa456399bc4d8d089aa2ed6902465b70a0c472b33426d333a4e3e1b23bec98a27d567d410e877fc2a8d00769f6c4e49b75a996e68b0c65fd55369871de1c191d53e8112ad53478f51aa1fcc48dd176eb2bfb40d7e6c9e8902c7dcf40fb49d909d50c88f537cf4dce4045171902c4bbe815a9fdd369402a1abc979eb68bf0edbd98623b5543e52465dcc4e13159e5f9862a2ec25241fa5e7e4a483af605672503b540b7a34d67b24c3981e6bb5fa23bca073705106d74c63721e6807bbbcd8df1b947aef76f9366fe3025a28358ef1f7"}, &(0x7f0000000520)={0x0, 0x0, 0x1}, &(0x7f0000000530)={0x0, 0x0, 0x1}, &(0x7f0000000540)={0x0, 0x0, 0x4, {0x1}}, &(0x7f00000003c0)={0x0, 0x0, 0x8, {0x0, 0x1, [0x77ff]}}, 0x0, &(0x7f0000000570)={0x0, 0x0, 0x1}, &(0x7f0000000580)={0x0, 0x0, 0x2}, &(0x7f0000000590)={0x0, 0x0, 0x2}, 0x0, &(0x7f00000005b0)={0x0, 0x0, 0x6}, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f00000005d0)={0x0, 0x0, 0x2}, &(0x7f00000005e0)={0x0, 0x0, 0x1}, &(0x7f00000005f0)={0x0, 0x0, 0x1}, &(0x7f0000000600)={0x0, 0x0, 0x1}}) nanosleep(&(0x7f0000000100)={0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000002000000000000000850000002e000000850000002a00000095", @ANYRESOCT=r0], &(0x7f0000000200)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setitimer(0x2, &(0x7f00000001c0)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./ttyUSB0\x00', 0x81b6, 0xbc00) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/key-users\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./ttyUSB0\x00', 0x802, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000009a65d0860040800dec30102030109021b050000000000090495d794b2eaf500090584"], 0x0) syz_usb_ep_write(r1, 0x81, 0x4, &(0x7f0000000300)='AAAA') clock_gettime(0x0, &(0x7f0000000380)) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x4ec}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r2, &(0x7f0000000300)=""/172, 0xdc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x80000a, 0x31, 0xffffffffffffffff, 0xd0fb8000) ioctl$UFFDIO_MOVE(r2, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c34000/0x3000)=nil, 0x1000, 0x1}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) 1.193122635s ago: executing program 0 (id=2026): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x475, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f00000028c0)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000400)="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", 0x42a}], 0x2}}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001440)="85ac6755b3764d9d8071a63907858eec8443bec7adaaea2c917ac41790a95d62511755a808b50539fb719daae0341b7d172229c58deb7f2d95c793aee3365bd04cc81c838294ad5237c74cd19b3ea8431a190ea1", 0x54}], 0x1}}], 0x2, 0x40) r3 = semget$private(0x0, 0x3, 0x101) semctl$SETVAL(r3, 0x2, 0x10, &(0x7f0000000000)=0x2) r4 = socket$l2tp6(0xa, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) unshare(0x2c020400) connect$inet(r0, &(0x7f00000008c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000078000000090a010400000000000000000100fffd08000a4000000000090002"], 0xc0}, 0x1, 0x0, 0x0, 0x40c0}, 0xc4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c00000003"], 0xa4}}, 0x0) mprotect(&(0x7f0000254000/0x1000)=nil, 0x1000, 0x5) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r6 = socket$alg(0x26, 0x5, 0x0) getpeername$packet(r2, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000880)=0x14) semop(r3, &(0x7f00000001c0)=[{0x3, 0x1c, 0x1800}, {0x3, 0x3, 0x1000}, {0x0, 0x0, 0x1800}], 0x3) r7 = syz_open_dev$dri(&(0x7f0000000400), 0x4, 0x400) ioctl$DRM_IOCTL_GET_STATS(r7, 0x80f86406, &(0x7f0000000440)=""/5) accept4(r6, 0x0, 0x0, 0x800) sendmsg$inet6(r4, &(0x7f0000000240)={&(0x7f0000000080)={0xa, 0x4e20, 0x6, @local}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="00000000bd47daeb2c790950f7bede5a6316a5bcb5e21fb33c0a1c13a523327c68d61f7679a490ba4e2244e7811cb63ffd9d8166c2db57c8b4ea9971a12897f9ffc38900823d1d15db224f000000000000000000000000000000002cef897a08a42e3615e926f70de6ded0f6e08de82a3bf766ea2b03f26a870187c6c9ac4f6240159e9f75372f4e2fec749ae4917d13e4f461a93bfff75db254f1850adce94d940fb1a8a3d0cf7b136da0f578c92cbd42731c11bc6a80112784c7ce364b3a4607aba7e406da538b8c6d42f6d416bbe735963326d00757be047da26f066b3a"], 0x28}, 0x808d0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000040)={0x2, 0x9, 0x5, 0x6, 0x80000000, 0x3a5, 0x2}, &(0x7f00000000c0)={0x5, 0xf, 0x5, 0x0, 0xfffffffffffffffb, 0x3, 0x6, 0xfffffffffffffffa}, &(0x7f0000000100)={0x6, 0x7fff, 0x6, 0xffffffffffffffff, 0x81, 0x9, 0x6, 0x1}, &(0x7f0000000180)={r8, r9+60000000}, &(0x7f0000000280)={&(0x7f0000000200)={[0x6]}, 0x8}) 1.068863895s ago: executing program 0 (id=2027): r0 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) unshare(0x400) r1 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x57, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x3c, 0x1, 0x100, "3a8e000000e21f0000000000b2b678920000800000000000000000001000", 0x38415261}) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x3) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000000180)={0x2020}, 0x2024) lseek(r3, 0x10000, 0x1) fsconfig$FSCONFIG_SET_FLAG(r3, 0x0, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r5, &(0x7f0000005f40)=[{{&(0x7f00000010c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=ANY=[], 0x28}}], 0x1, 0x4000004) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x96, 0x1, 0x2, 0xd59f80, 0x19ef, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x80008, 0xffffffff}, 0xd0, 0x9}}) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x178, 0xe138, 0x198, 0x0, 0x198, 0x230, 0x358, 0x358, 0x230, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'nicvf0\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0003000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c429955608b9952bed40ce4a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000080049", 0x4}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x5, 0x1, 0x9, 0xf, 'pptp\x00', {0xe}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0xb20, 0x1c0, 0x43, 0xa0, 0x0, 0x98, 0xa88, 0x178, 0x178, 0xa88, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x3, {0x100000001}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x888, 0x8c8, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x9}, {0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0xb1d}, {0x3}, {0x8}, {0x2, 0x3}, {0x3}, {0x103}], [{0xe8f3, 0x5}, {0x1d, 0x6}, {0x1, 0x8}, {0x0, 0x4}, {0x4, 0xc3e}, {0x1, 0x100}, {0x6, 0x7}, {0x3, 0x3}, {0xf2, 0x3}, {0x3ff, 0x8}, {0x10, 0x3}], 0x6, 0x6}, {[{0x80, 0x3}, {0x2}, {0x6, 0x1}, {0x355cbac3, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x7}, {0xe7, 0x2}, {0x3, 0x3}, {0x5598e8fe, 0x2}, {0x6, 0x1}], [{0x9, 0x9097}, {0x7, 0x9}, {0x7, 0xa}, {0x6, 0x8}, {0x20080, 0x5}, {0x13, 0xc0000000}, {0x40, 0xb}, {0x9, 0x6}, {0x4, 0x2}, {0x6, 0x7fffffff}, {0x7fffffff, 0x400}], 0x7}, {[{0x84, 0x2}, {}, {0x0, 0x2}, {0xffffffff, 0x1}, {}, {0x5, 0x1}, {0x5, 0x2}, {0x8, 0x3}, {0x2, 0x3}, {0x8, 0x1}, {0x7, 0x1}], [{0x9, 0x5}, {0x80, 0x32}, {0x0, 0xfffffff7}, {0xff, 0x1}, {0x7, 0xfffffff6}, {0xdb9, 0xff4}, {0x6, 0x3ff}, {0x3, 0x6}, {0x5, 0x10}, {0x9, 0x6}, {0x10000, 0x10002}], 0x3, 0x2a}, {[{0x3, 0x2}, {0xa, 0x1}, {0x6, 0x1}, {0x10, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x3, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x2}, {0x477d, 0x1}], [{0x0, 0xffffffff}, {0x200, 0x6}, {0x4be1, 0x4044}, {0x1}, {0x5, 0xc}, {0x3, 0x4}, {0x2, 0x4}, {0x800, 0x8000}, {0x8, 0x800}, {0x3, 0x2}, {0xe, 0x8000}], 0x4, 0xb}, {[{0x7, 0x1}, {0xd, 0x3}, {0x5}, {0x61}, {0x9}, {}, {0x2}, {0x1}, {0x40000000, 0x2}, {0x9, 0x3}, {0x5, 0x3}], [{0x58d, 0x3ff}, {0x0, 0x7f}, {0x6}, {0xfc9b, 0x80000001}, {0x101, 0x7}, {0x7, 0x1}, {0x7, 0x8001}, {0x2, 0x1}, {0x2, 0x2}, {0x9, 0x4cf}, {0x7, 0x10000}], 0x1}, {[{0x2}, {0x9}, {0x8, 0x1}, {0x2, 0x3}, {0x71, 0x3}, {0x0, 0x2}, {0xe, 0x2}, {0x6, 0x2}, {0x5}, {0x3000000, 0x3}, {0x6}], [{0x9, 0x3}, {0x5, 0x7fffffff}, {0xffff, 0x4}, {0x0, 0x7}, {0x8, 0xb502}, {0x1ff, 0x86}, {0x6, 0xffffffff}, {0x3, 0x4}, {0x5, 0x6}, {0xf, 0xf93}, {0x5, 0x4}], 0x3, 0x3}, {[{0x7, 0x1}, {0x3, 0x1}, {0x45d7}, {0xfff, 0x3}, {0xc4f, 0x3}, {0x0, 0x2}, {0x400, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0xfffffffd}, {0x2}], [{0x3, 0x6}, {0xed, 0xd}, {0x80, 0xb81d}, {0x2ca, 0x80000000}, {0x8, 0xff}, {0x7, 0x45a8}, {0x8, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0xfc, 0x6}, {0xd, 0x138c}], 0x6}, {[{0x4, 0x1}, {0x800}, {0x9, 0x2}, {0xf0000000, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x8, 0x2}, {}, {0x9}, {0x400, 0x2}, {0x8, 0x3}], [{0x7, 0xfffffffd}, {0x2}, {0x2, 0x2}, {0x8f, 0x6}, {0x7, 0x5}, {0x8, 0x7}, {0xb, 0x82c6}, {0xb1b}, {0xbd5c, 0xffff}, {0x1, 0x9b8d}, {0xec, 0x5}], 0x0, 0x6}, {[{0x8}, {0x0, 0x1}, {0xac000000}, {0x6, 0x2}, {0x2d8, 0x3}, {0x7e3ea4bc}, {0x8, 0x1324f499ce9a99e8}, {0x4f, 0x3}, {0x4, 0x2}, {0xfffffff7}, {0x3, 0x2}], [{0x5, 0x42}, {0x76a74689, 0xfffff156}, {0x1}, {0x8000, 0x7}, {0x400, 0xdd}, {0xfff, 0x8}, {0x76b, 0xfffffffe}, {0xa6d00, 0xfffffff7}, {0x10001, 0xfc8d}, {0x0, 0x10001}, {0x4, 0x3}], 0x1, 0x9}, {[{0x8, 0x1}, {0x3, 0x3}, {0x18, 0x3}, {0x3ff, 0x3}, {0x7fffffff}, {0x8}, {0x1}, {0x8, 0x3}, {0xf1b6}, {0x80, 0x3}, {0x4, 0x2}], [{0x2, 0x4}, {0x3, 0xf}, {0x9, 0x6}, {0x7f, 0x8}, {0x7, 0x273e1899}, {0x4, 0x1}, {0x6, 0x3}, {0x1, 0xb7}, {0x8, 0x3}, {0x3, 0x1}, {0x7ff, 0x63}], 0xb, 0x3}, {[{0x1, 0x2}, {0x6, 0x3}, {0xffff, 0x1}, {0x1}, {0x4, 0x3}, {0x4, 0x3}, {0xaa7}, {0x100, 0x3}, {0x2}, {0xfffffff7, 0xb90af65875a5dc08}, {0x4, 0x3}], [{0x3}, {0x8001, 0x7}, {0x10000, 0x7524}, {0x73d, 0x4}, {0x0, 0x280000}, {0x3, 0x3af}, {0x5, 0x2}, {0x101, 0xbf}, {0x10000, 0x6}, {0x3, 0x800}], 0x8, 0x5}], 0x3}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xb80) r9 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) read$alg(r11, &(0x7f0000000500)=""/4096, 0x1000) splice(r9, 0x0, r12, 0x0, 0x400000008000f28, 0x0) splice(r11, 0x0, r10, 0x0, 0x100, 0x3) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001500)=ANY=[@ANYBLOB="00010000036d0b"], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x0) ptrace(0x10, r6) socket$can_raw(0x1d, 0x3, 0x1) 112.548262ms ago: executing program 0 (id=2028): fsopen(&(0x7f0000000000)='fuse\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket(0x15, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) fsopen(&(0x7f0000000540)='tracefs\x00', 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x8801}, 0x20040000) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) 4.902205ms ago: executing program 3 (id=2029): syz_io_uring_setup(0xcc4, &(0x7f00000000c0)={0x0, 0x14c5, 0x400, 0x3, 0x26c}, &(0x7f00000001c0), &(0x7f0000000080), &(0x7f0000000000)) openat$ublk_ctrl(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) 0s ago: executing program 1 (id=2030): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$rtl8150(r3, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000680)={0x0, 0x5, 0x4, "0c8ac451"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1000, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) getpgid(0xffffffffffffffff) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000700)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x4, 0x20}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001140)=[@text16={0x10, &(0x7f0000001040)="baf80c66b8d2f0b18b66efbafc0cb80000efffa8d8de660ff57477baf80c66b8e6a1048b66efbafc0ced66b80500000066b9f370173d0f01c166b99209000066b8ba00000066ba000000000f300f0f64ffaef30f2cb80c40bad004ed66e291", 0x5f}], 0x1, 0x0, 0x0, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000001000)={0x0, 0x0, 0x80000001, 0xfffffffffffffff7, 0xffffffffffffffff}) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)) r6 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r7 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r6) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000780)={r7, 0x500}, &(0x7f00000007c0)={'enc=', 'pkcs1', ' hash=', {'sha224\x00'}}, 0x0, 0x0) (fail_nth: 9) pwritev(r5, &(0x7f0000000240)=[{&(0x7f0000000180)}], 0x1, 0x0, 0x80000) r8 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000200)='secret\x00', 0x0, 0x0) unshare(0x28000600) r9 = memfd_create(&(0x7f0000002b40)='/$!}\\\x00', 0x4) cachestat(r9, &(0x7f0000002b80)={0x30, 0xde}, 0x0, 0x0) kernel console output (not intermixed with test programs): 1] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 427.490674][ T5681] usb 6-1: setting power OFF [ 427.490698][ T5681] dvb-usb: bulk message failed: -22 (2/0) [ 427.490715][ T5681] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 427.490730][ T5681] (NULL device *): no alternate interface [ 427.587706][ T5681] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 427.615117][ T5681] usb 6-1: USB disconnect, device number 54 [ 428.060677][T11094] FAULT_INJECTION: forcing a failure. [ 428.060677][T11094] name failslab, interval 1, probability 0, space 0, times 0 [ 428.074378][T11094] CPU: 0 UID: 0 PID: 11094 Comm: syz.1.1673 Tainted: G L syzkaller #0 PREEMPT(full) [ 428.074416][T11094] Tainted: [L]=SOFTLOCKUP [ 428.074424][T11094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 428.074439][T11094] Call Trace: [ 428.074449][T11094] [ 428.074459][T11094] dump_stack_lvl+0xe8/0x150 [ 428.074503][T11094] should_fail_ex+0x410/0x560 [ 428.074543][T11094] should_failslab+0xa8/0x100 [ 428.074562][T11094] ? skb_clone+0x212/0x3a0 [ 428.074581][T11094] kmem_cache_alloc_noprof+0xa1/0x600 [ 428.074607][T11094] ? skb_clone+0x212/0x3a0 [ 428.074629][T11094] skb_clone+0x212/0x3a0 [ 428.074649][T11094] __netlink_deliver_tap+0x413/0x860 [ 428.074677][T11094] ? netlink_deliver_tap+0x2e/0x1b0 [ 428.074696][T11094] netlink_deliver_tap+0x19c/0x1b0 [ 428.074715][T11094] netlink_sendskb+0x68/0x140 [ 428.074734][T11094] netlink_rcv_skb+0x2a4/0x4a0 [ 428.074752][T11094] ? __pfx_genl_rcv_msg+0x10/0x10 [ 428.074777][T11094] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 428.074805][T11094] ? down_read+0x2be/0x330 [ 428.074823][T11094] genl_rcv+0x28/0x40 [ 428.074844][T11094] netlink_unicast+0x7bd/0x940 [ 428.074869][T11094] netlink_sendmsg+0x813/0xb40 [ 428.074895][T11094] ? __pfx_netlink_sendmsg+0x10/0x10 [ 428.074920][T11094] ? apparmor_socket_sendmsg+0x98/0x360 [ 428.074948][T11094] ? __pfx_netlink_sendmsg+0x10/0x10 [ 428.074969][T11094] sock_sendmsg_nosec+0x13a/0x180 [ 428.074995][T11094] ____sys_sendmsg+0x54e/0x850 [ 428.075035][T11094] ? __pfx_____sys_sendmsg+0x10/0x10 [ 428.075060][T11094] ? import_iovec+0x73/0xa0 [ 428.075080][T11094] ___sys_sendmsg+0x2a5/0x360 [ 428.075096][T11094] ? __lock_acquire+0x6df/0x2e50 [ 428.075116][T11094] ? __pfx____sys_sendmsg+0x10/0x10 [ 428.075159][T11094] ? __fget_files+0x2a/0x420 [ 428.075179][T11094] ? __fget_files+0x3a2/0x420 [ 428.075208][T11094] __x64_sys_sendmsg+0x1b1/0x290 [ 428.075227][T11094] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 428.075260][T11094] do_syscall_64+0x166/0x520 [ 428.075283][T11094] ? trace_irq_disable+0x3b/0x140 [ 428.075298][T11094] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.075315][T11094] ? clear_bhb_loop+0x70/0xc0 [ 428.075335][T11094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.075351][T11094] RIP: 0033:0x7f6aa1f9e159 [ 428.075366][T11094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.075380][T11094] RSP: 002b:00007f6aa2e41028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 428.075398][T11094] RAX: ffffffffffffffda RBX: 00007f6aa2225fa0 RCX: 00007f6aa1f9e159 [ 428.075410][T11094] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000005 [ 428.075421][T11094] RBP: 00007f6aa2e41090 R08: 0000000000000000 R09: 0000000000000000 [ 428.075431][T11094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.075441][T11094] R13: 00007f6aa2226038 R14: 00007f6aa2225fa0 R15: 00007f6aa234fa48 [ 428.075471][T11094] [ 428.898431][T11108] FAULT_INJECTION: forcing a failure. [ 428.898431][T11108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 428.898488][T11108] CPU: 1 UID: 0 PID: 11108 Comm: syz.5.1678 Tainted: G L syzkaller #0 PREEMPT(full) [ 428.898519][T11108] Tainted: [L]=SOFTLOCKUP [ 428.898529][T11108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 428.898542][T11108] Call Trace: [ 428.898551][T11108] [ 428.898561][T11108] dump_stack_lvl+0xe8/0x150 [ 428.898597][T11108] should_fail_ex+0x410/0x560 [ 428.898636][T11108] _copy_to_user+0x31/0xb0 [ 428.898721][T11108] vhci_read+0x350/0x560 [ 428.898802][T11108] ? __lock_acquire+0x6df/0x2e50 [ 428.898885][T11108] ? __pfx_vhci_read+0x10/0x10 [ 428.898933][T11108] ? common_file_perm+0x20e/0x2b0 [ 428.899005][T11108] ? bpf_lsm_file_permission+0x9/0x20 [ 428.899087][T11108] ? security_file_permission+0x75/0x260 [ 428.899170][T11108] ? rw_verify_area+0x24a/0x4c0 [ 428.899253][T11108] ? __pfx_vhci_read+0x10/0x10 [ 428.899313][T11108] vfs_read+0x213/0xa80 [ 428.899407][T11108] ? __pfx_vfs_read+0x10/0x10 [ 428.899492][T11108] ? __fget_files+0x2a/0x420 [ 428.899575][T11108] ? __fget_files+0x2a/0x420 [ 428.899639][T11108] ? __fget_files+0x3a2/0x420 [ 428.899711][T11108] ? __fget_files+0x2a/0x420 [ 428.899813][T11108] ksys_read+0x150/0x270 [ 428.899898][T11108] ? __pfx_ksys_read+0x10/0x10 [ 428.900007][T11108] do_syscall_64+0x166/0x520 [ 428.900083][T11108] ? trace_irq_disable+0x3b/0x140 [ 428.900143][T11108] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.900198][T11108] ? clear_bhb_loop+0x70/0xc0 [ 428.900275][T11108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.900345][T11108] RIP: 0033:0x7f062979e159 [ 428.900406][T11108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.900465][T11108] RSP: 002b:00007f06279f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 428.900535][T11108] RAX: ffffffffffffffda RBX: 00007f0629a25fa0 RCX: 00007f062979e159 [ 428.900578][T11108] RDX: 000000000000001a RSI: 0000000000000000 RDI: 00000000000000ca [ 428.900612][T11108] RBP: 00007f06279f6090 R08: 0000000000000000 R09: 0000000000000000 [ 428.900652][T11108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.900685][T11108] R13: 00007f0629a26038 R14: 00007f0629a25fa0 R15: 00007f0629b4fa48 [ 428.900768][T11108] [ 429.339891][T11114] xt_NFQUEUE: number of total queues is 0 [ 430.552496][T11141] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 431.027016][ T5689] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 431.166571][ T5689] usb 5-1: device descriptor read/64, error -71 [ 431.410789][ T5689] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 431.426916][ T5681] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 431.546790][ T5689] usb 5-1: device descriptor read/64, error -71 [ 431.577375][ T5681] usb 2-1: Using ep0 maxpacket: 16 [ 431.584053][ T5681] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 431.596198][ T5681] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 431.596280][ T5681] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 431.624375][ T5681] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.624424][ T5681] usb 2-1: Product: syz [ 431.624469][ T5681] usb 2-1: Manufacturer: syz [ 431.624490][ T5681] usb 2-1: SerialNumber: syz [ 431.654311][ T5681] usb 2-1: config 0 descriptor?? [ 431.660493][ T5689] usb usb5-port1: attempt power cycle [ 431.806697][ T5615] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 431.972369][ T5615] usb 6-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 431.984075][ T5615] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.006689][ T5689] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 432.009773][ T5615] mos7720 6-1:1.0: Moschip 2 port adapter converter detected [ 432.037618][ T5689] usb 5-1: device descriptor read/8, error -71 [ 432.134375][ T5681] usb 2-1: USB disconnect, device number 62 [ 432.214210][ T5615] usb 6-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 432.236195][ T5615] usb 6-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 432.284922][ T5689] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 432.307821][ T5689] usb 5-1: device descriptor read/8, error -71 [ 432.417916][ T5689] usb usb5-port1: unable to enumerate USB device [ 432.489577][T11169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.491434][T11169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.953358][T11190] netlink: 79 bytes leftover after parsing attributes in process `syz.4.1701'. [ 434.435082][ T5689] usb 6-1: USB disconnect, device number 55 [ 434.435164][ C1] usb 6-1: mos7720_interrupt_callback - Error -19 submitting control urb [ 434.515891][ T5689] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 434.533330][ T5689] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 434.548269][ T5689] mos7720 6-1:1.0: device disconnected [ 434.836971][ T5681] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 435.020746][ T5681] usb 5-1: Using ep0 maxpacket: 8 [ 435.026852][ T5681] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 435.040795][ T5681] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 435.065386][ T5681] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.065438][ T5681] usb 5-1: Product: syz [ 435.065472][ T5681] usb 5-1: Manufacturer: syz [ 435.065493][ T5681] usb 5-1: SerialNumber: syz [ 435.104356][ T5681] usb 5-1: config 0 descriptor?? [ 435.119393][ T5681] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 435.120507][ T5681] usb 5-1: setting power ON [ 435.129106][ T5681] dvb-usb: bulk message failed: -22 (2/0) [ 435.192586][ T5681] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 435.205496][ T5681] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 435.216148][ T5681] usb 5-1: media controller created [ 435.271242][ T5681] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 435.356271][ T5681] usb 5-1: selecting invalid altsetting 6 [ 435.371619][ T5681] usb 5-1: digital interface selection failed (-22) [ 435.379746][ T5681] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 435.392945][ T5681] usb 5-1: setting power OFF [ 435.392988][ T5681] dvb-usb: bulk message failed: -22 (2/0) [ 435.393023][ T5681] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 435.393042][ T5681] (NULL device *): no alternate interface [ 435.578976][ T5681] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 435.608607][ T5681] usb 5-1: USB disconnect, device number 89 [ 436.090676][T11228] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1714'. [ 436.328969][T11228] loop5: detected capacity change from 0 to 7 [ 436.335297][T11228] Dev loop5: unable to read RDB block 7 [ 436.336052][T11228] loop5: AHDI p1 p3 p4 [ 436.336117][T11228] loop5: partition table partially beyond EOD, truncated [ 436.343681][T11228] loop5: p1 size 100663296 extends beyond EOD, truncated [ 436.361596][T11228] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 436.376720][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 436.392410][T11234] netlink: 'syz.4.1714': attribute type 88 has an invalid length. [ 436.541864][ T6146] udevd[6146]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 436.573149][ T5625] udevd[5625]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 436.745010][T11246] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1718'. [ 436.759853][ T31] kauditd_printk_skb: 52 callbacks suppressed [ 436.759914][ T31] audit: type=1326 audit(1788411800.277:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11245 comm="syz.3.1718" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b3f9e159 code=0x7ffc0000 [ 436.766302][ T31] audit: type=1326 audit(1788411800.277:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11245 comm="syz.3.1718" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b3f9e159 code=0x7ffc0000 [ 436.766368][ T31] audit: type=1326 audit(1788411800.277:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11245 comm="syz.3.1718" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f04b3f9e159 code=0x7ffc0000 [ 436.777970][ T31] audit: type=1326 audit(1788411800.287:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11245 comm="syz.3.1718" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b3f9e159 code=0x7ffc0000 [ 436.778180][ T31] audit: type=1326 audit(1788411800.287:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11245 comm="syz.3.1718" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b3f9e159 code=0x7ffc0000 [ 436.790199][ T31] audit: type=1326 audit(1788411800.307:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11245 comm="syz.3.1718" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f04b3f9e159 code=0x7ffc0000 [ 436.790350][ T31] audit: type=1326 audit(1788411800.307:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11245 comm="syz.3.1718" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b3f9e159 code=0x7ffc0000 [ 436.799617][ T31] audit: type=1326 audit(1788411800.307:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11245 comm="syz.3.1718" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b3f9e159 code=0x7ffc0000 [ 436.799786][ T31] audit: type=1326 audit(1788411800.317:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11245 comm="syz.3.1718" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f04b3f9f9c7 code=0x7ffc0000 [ 436.802110][ T31] audit: type=1326 audit(1788411800.317:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11245 comm="syz.3.1718" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f04b3f5e98e code=0x7ffc0000 [ 436.977132][ T5702] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 437.187561][ T5702] usb 2-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 437.198913][ T5702] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.232601][ T5702] mos7720 2-1:1.0: Moschip 2 port adapter converter detected [ 437.293284][T11255] loop4: detected capacity change from 0 to 7 [ 437.318859][T11255] Dev loop4: unable to read RDB block 7 [ 437.319024][T11255] loop4: unable to read partition table [ 437.319897][T11255] loop4: partition table beyond EOD, truncated [ 437.320058][T11255] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 437.464421][ T5702] usb 2-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 437.521193][ T5702] usb 2-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 437.758385][T11264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.769138][T11264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.136921][ T5702] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 439.277082][ T5621] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 439.287785][ T5702] usb 6-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 439.293062][ T5702] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.323992][ T5702] usb 6-1: config 0 descriptor?? [ 439.370468][ T5702] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 439.437653][ T5621] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 439.459422][ T5621] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 439.470533][ T5621] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 439.483908][ T5621] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.498179][ T5621] usb 4-1: config 0 descriptor?? [ 439.509493][ T5621] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 439.667974][ T5681] usb 2-1: USB disconnect, device number 63 [ 439.667974][ C1] usb 2-1: mos7720_interrupt_callback - Error -19 submitting control urb [ 439.700008][ T5681] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 439.735461][ T5681] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 439.753653][ T5681] mos7720 2-1:1.0: device disconnected [ 439.977093][ T5702] gspca_sunplus: reg_w_riv err -71 [ 439.977356][ T5702] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 439.989838][ T5702] usb 6-1: USB disconnect, device number 56 [ 440.130929][T11304] FAULT_INJECTION: forcing a failure. [ 440.130929][T11304] name failslab, interval 1, probability 0, space 0, times 0 [ 440.130999][T11304] CPU: 1 UID: 0 PID: 11304 Comm: syz.4.1736 Tainted: G L syzkaller #0 PREEMPT(full) [ 440.131030][T11304] Tainted: [L]=SOFTLOCKUP [ 440.131039][T11304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 440.131101][T11304] Call Trace: [ 440.131146][T11304] [ 440.131179][T11304] dump_stack_lvl+0xe8/0x150 [ 440.131302][T11304] should_fail_ex+0x410/0x560 [ 440.131392][T11304] ? __alloc_skb+0x1db/0x7a0 [ 440.131482][T11304] should_failslab+0xa8/0x100 [ 440.131553][T11304] ? __alloc_skb+0x1db/0x7a0 [ 440.131638][T11304] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 440.131727][T11304] ? __alloc_skb+0x18d/0x7a0 [ 440.131833][T11304] ? __alloc_skb+0x1db/0x7a0 [ 440.131945][T11304] __alloc_skb+0x1db/0x7a0 [ 440.132032][T11304] netlink_ack+0x136/0xb30 [ 440.132104][T11304] ? __pfx_genl_rcv_msg+0x10/0x10 [ 440.132189][T11304] ? __pfx_nl80211_post_doit+0x10/0x10 [ 440.132257][T11304] ? __pfx_ref_tracker_free+0x10/0x10 [ 440.132342][T11304] netlink_rcv_skb+0x2a4/0x4a0 [ 440.132412][T11304] ? __pfx_genl_rcv_msg+0x10/0x10 [ 440.132500][T11304] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 440.132624][T11304] ? down_read+0x2be/0x330 [ 440.132704][T11304] genl_rcv+0x28/0x40 [ 440.132788][T11304] netlink_unicast+0x7bd/0x940 [ 440.132894][T11304] netlink_sendmsg+0x813/0xb40 [ 440.132992][T11304] ? __pfx_netlink_sendmsg+0x10/0x10 [ 440.133080][T11304] ? apparmor_socket_sendmsg+0x98/0x360 [ 440.133177][T11304] ? __pfx_netlink_sendmsg+0x10/0x10 [ 440.133241][T11304] sock_sendmsg_nosec+0x13a/0x180 [ 440.133335][T11304] ____sys_sendmsg+0x54e/0x850 [ 440.133398][T11304] ? __pfx_____sys_sendmsg+0x10/0x10 [ 440.133485][T11304] ? import_iovec+0x73/0xa0 [ 440.133552][T11304] ___sys_sendmsg+0x2a5/0x360 [ 440.133613][T11304] ? __lock_acquire+0x6df/0x2e50 [ 440.133688][T11304] ? __pfx____sys_sendmsg+0x10/0x10 [ 440.133849][T11304] ? __fget_files+0x2a/0x420 [ 440.133921][T11304] ? __fget_files+0x3a2/0x420 [ 440.134047][T11304] __x64_sys_sendmsg+0x1b1/0x290 [ 440.134119][T11304] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 440.134236][T11304] do_syscall_64+0x166/0x520 [ 440.134313][T11304] ? trace_irq_disable+0x3b/0x140 [ 440.134369][T11304] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.134424][T11304] ? clear_bhb_loop+0x70/0xc0 [ 440.134491][T11304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.134554][T11304] RIP: 0033:0x7f05b0f9e159 [ 440.134618][T11304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.134666][T11304] RSP: 002b:00007f05b1e9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 440.134731][T11304] RAX: ffffffffffffffda RBX: 00007f05b1225fa0 RCX: 00007f05b0f9e159 [ 440.134774][T11304] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 440.134814][T11304] RBP: 00007f05b1e9f090 R08: 0000000000000000 R09: 0000000000000000 [ 440.134858][T11304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 440.134892][T11304] R13: 00007f05b1226038 R14: 00007f05b1225fa0 R15: 00007f05b134fa48 [ 440.134973][T11304] [ 440.225900][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.225967][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.638505][T11311] netlink: 'syz.1.1738': attribute type 10 has an invalid length. [ 440.638556][T11311] netlink: 67 bytes leftover after parsing attributes in process `syz.1.1738'. [ 440.658391][T11311] vlan1: entered promiscuous mode [ 440.683463][T11311] team0: Port device vlan1 added [ 441.296639][ T5621] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 441.458036][ T5621] usb 6-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 441.470050][ T5621] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 441.483244][ T5621] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 441.483304][ T5621] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 441.511705][ T5621] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.511755][ T5621] usb 6-1: Product: syz [ 441.511791][ T5621] usb 6-1: Manufacturer: syz [ 441.511813][ T5621] usb 6-1: SerialNumber: syz [ 441.553733][ T5621] uvcvideo 6-1:1.0: Found UVC 1.00 device syz (046d:0821) [ 441.898667][ T5621] uvcvideo 6-1:1.0: Failed to query (GET_INFO) UVC control 1 on unit 3: -71 (exp. 1). [ 441.909464][ T5621] uvcvideo 6-1:1.0: No streaming interface found for terminal 32770. [ 441.932049][ T5621] usb 6-1: USB disconnect, device number 57 [ 442.092316][ T5348] usb 4-1: USB disconnect, device number 56 [ 442.243812][ T5624] Bluetooth: hci0: unexpected event for opcode 0x2002 [ 442.916613][ T5615] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 443.067127][ T5615] usb 6-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 443.070684][ T5615] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.091781][ T5615] usb 6-1: config 0 descriptor?? [ 443.132172][ T5615] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 443.195819][ T5624] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 443.467397][ T5702] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 443.618101][ T5702] usb 5-1: Using ep0 maxpacket: 32 [ 443.625709][ T5702] usb 5-1: unable to get BOS descriptor or descriptor too short [ 443.625964][ T5702] usb 5-1: New USB device found, idVendor=1415, idProduct=2000, bcdDevice=2b.98 [ 443.632803][ T5702] usb 5-1: config 12 has an invalid interface number: 183 but max is 3 [ 443.632947][ T5702] usb 5-1: config 12 has an invalid interface number: 229 but max is 3 [ 443.633002][ T5702] usb 5-1: config 12 has 2 interfaces, different from the descriptor's value: 4 [ 443.633108][ T5702] usb 5-1: config 12 has no interface number 0 [ 443.633171][ T5702] usb 5-1: config 12 has no interface number 1 [ 443.633332][ T5702] usb 5-1: config 12 interface 183 has no altsetting 0 [ 443.633450][ T5702] usb 5-1: config 12 interface 229 has no altsetting 0 [ 443.668390][ T5702] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.668517][ T5702] usb 5-1: Product: syz [ 443.668563][ T5702] usb 5-1: Manufacturer: syz [ 443.668608][ T5702] usb 5-1: SerialNumber: syz [ 443.802391][ T5615] gspca_sunplus: reg_w_riv err -71 [ 443.802678][ T5615] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 443.831743][ T5615] usb 6-1: USB disconnect, device number 58 [ 443.875847][ T31] kauditd_printk_skb: 18 callbacks suppressed [ 443.875908][ T31] audit: type=1326 audit(1788411807.387:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11353 comm="syz.1.1753" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa1f9e159 code=0x7ffc0000 [ 443.915231][ T31] audit: type=1326 audit(1788411807.387:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11353 comm="syz.1.1753" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa1f9e159 code=0x7ffc0000 [ 443.940654][ T31] audit: type=1326 audit(1788411807.437:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11353 comm="syz.1.1753" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f6aa1f9e159 code=0x7ffc0000 [ 443.940741][ T31] audit: type=1326 audit(1788411807.437:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11353 comm="syz.1.1753" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa1f9e159 code=0x7ffc0000 [ 443.940941][ T31] audit: type=1326 audit(1788411807.437:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11353 comm="syz.1.1753" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa1f9e159 code=0x7ffc0000 [ 443.990168][ T31] audit: type=1326 audit(1788411807.497:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11353 comm="syz.1.1753" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f6aa1f9e159 code=0x7ffc0000 [ 443.990360][ T31] audit: type=1326 audit(1788411807.497:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11353 comm="syz.1.1753" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa1f9e159 code=0x7ffc0000 [ 444.006826][ T31] audit: type=1326 audit(1788411807.497:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11353 comm="syz.1.1753" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa1f9e159 code=0x7ffc0000 [ 444.007038][ T31] audit: type=1326 audit(1788411807.517:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11353 comm="syz.1.1753" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f6aa1f9e159 code=0x7ffc0000 [ 444.007211][ T31] audit: type=1326 audit(1788411807.517:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11353 comm="syz.1.1753" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa1f9e159 code=0x7ffc0000 [ 444.202992][ T5702] usb 5-1: USB disconnect, device number 90 [ 444.579120][T11364] dvmrp0: entered allmulticast mode [ 444.709474][ T5702] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 444.899147][ T5702] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 444.910385][ T5702] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 444.910465][ T5702] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 444.910634][ T5702] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.942312][ T5702] usb 6-1: config 0 descriptor?? [ 444.957838][ T5702] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 445.144266][T11379] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1762'. [ 445.155586][T11379] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1762'. [ 445.436714][ T5615] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 445.510436][T11386] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 445.590291][ T5615] usb 2-1: Using ep0 maxpacket: 32 [ 445.595027][ T5615] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 445.603608][ T5615] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 445.603690][ T5615] usb 2-1: config 0 has no interface number 0 [ 445.603803][ T5615] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 445.603878][ T5615] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 445.603944][ T5615] usb 2-1: config 0 interface 85 has no altsetting 0 [ 445.635759][ T5615] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.635845][ T5615] usb 2-1: Product: syz [ 445.635889][ T5615] usb 2-1: Manufacturer: syz [ 445.635939][ T5615] usb 2-1: SerialNumber: syz [ 445.677532][ T5615] usb 2-1: config 0 descriptor?? [ 446.059757][T11397] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1765'. [ 446.257939][T11397] loop5: detected capacity change from 0 to 7 [ 446.268838][T11397] Dev loop5: unable to read RDB block 7 [ 446.268922][T11397] loop5: AHDI p1 p3 p4 [ 446.270217][T11397] loop5: partition table partially beyond EOD, truncated [ 446.271179][T11397] loop5: p1 size 100663296 extends beyond EOD, truncated [ 446.295025][T11397] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 446.323277][T11397] netlink: 'syz.0.1765': attribute type 88 has an invalid length. [ 446.482057][ T6146] udevd[6146]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 446.492815][ T5615] appletouch 2-1:0.85: Failed to read mode from device. [ 446.493392][ T5615] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 446.511131][ T5614] udevd[5614]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 446.560590][ T5615] usb 2-1: USB disconnect, device number 64 [ 447.374690][T11421] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 447.554921][ T5615] usb 6-1: USB disconnect, device number 59 [ 448.277366][T11436] fuse: Bad value for 'fd' [ 448.697218][ T5348] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 448.855281][ T5348] usb 6-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 448.860761][ T5348] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 448.860845][ T5348] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 448.860966][ T5348] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 448.904905][ T5348] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.904966][ T5348] usb 6-1: Product: syz [ 448.904990][ T5348] usb 6-1: Manufacturer: syz [ 448.905053][ T5348] usb 6-1: SerialNumber: syz [ 448.978174][ T5348] uvcvideo 6-1:1.0: Found UVC 1.00 device syz (046d:0821) [ 449.259065][T11445] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1780'. [ 449.401168][ T5348] uvcvideo 6-1:1.0: Failed to query (GET_INFO) UVC control 1 on unit 3: -71 (exp. 1). [ 449.401475][ T5348] uvcvideo 6-1:1.0: No streaming interface found for terminal 32770. [ 449.438647][ T5348] usb 6-1: USB disconnect, device number 60 [ 449.510348][T11445] loop5: detected capacity change from 0 to 7 [ 449.520770][T11445] Dev loop5: unable to read RDB block 7 [ 449.520838][T11445] loop5: AHDI p1 p3 p4 [ 449.520863][T11445] loop5: partition table partially beyond EOD, truncated [ 449.521344][T11445] loop5: p1 size 100663296 extends beyond EOD, truncated [ 449.548750][T11445] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 449.566370][T11446] netlink: 'syz.4.1780': attribute type 88 has an invalid length. [ 449.688937][ T6146] udevd[6146]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 449.743323][ T5614] udevd[5614]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 449.791202][ T6146] udevd[6146]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 449.801553][ T5625] udevd[5625]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 450.091916][T11456] netlink: 'syz.0.1784': attribute type 12 has an invalid length. [ 450.091979][T11456] netlink: 'syz.0.1784': attribute type 29 has an invalid length. [ 450.091997][T11456] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1784'. [ 450.137332][T11459] netlink: 71 bytes leftover after parsing attributes in process `syz.5.1786'. [ 450.150415][ T5348] usb 5-1: new full-speed USB device number 91 using dummy_hcd [ 450.298320][ T5348] usb 5-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 450.311047][ T5348] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 450.311115][ T5348] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.311141][ T5348] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 450.311283][ T5348] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.361546][ T5621] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 450.383922][ T5348] usb 5-1: config 0 descriptor?? [ 450.464958][T11466] Invalid argument reading file caps for ./file0 [ 450.514991][T11463] tipc: Enabled bearer , priority 0 [ 450.528374][ T5621] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 450.532479][ T5621] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 450.532618][ T5621] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 450.532741][ T5621] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.580861][ T5621] usb 2-1: config 0 descriptor?? [ 450.618588][ T5621] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 450.784135][ T31] kauditd_printk_skb: 20 callbacks suppressed [ 450.784184][ T31] audit: type=1326 audit(1788411814.297:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11472 comm="syz.5.1791" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062979e159 code=0x7ffc0000 [ 450.818156][ T31] audit: type=1326 audit(1788411814.337:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11472 comm="syz.5.1791" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062979e159 code=0x7ffc0000 [ 450.856311][ T31] audit: type=1326 audit(1788411814.367:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11472 comm="syz.5.1791" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f062979e159 code=0x7ffc0000 [ 450.856388][ T31] audit: type=1326 audit(1788411814.367:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11472 comm="syz.5.1791" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062979e159 code=0x7ffc0000 [ 450.881840][ T31] audit: type=1326 audit(1788411814.367:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11472 comm="syz.5.1791" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062979e159 code=0x7ffc0000 [ 450.881907][ T31] audit: type=1326 audit(1788411814.377:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11472 comm="syz.5.1791" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f062979e159 code=0x7ffc0000 [ 450.881969][ T31] audit: type=1326 audit(1788411814.377:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11472 comm="syz.5.1791" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062979e159 code=0x7ffc0000 [ 450.882016][ T31] audit: type=1326 audit(1788411814.377:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11472 comm="syz.5.1791" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062979e159 code=0x7ffc0000 [ 450.882062][ T31] audit: type=1326 audit(1788411814.377:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11472 comm="syz.5.1791" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f062979e159 code=0x7ffc0000 [ 450.882106][ T31] audit: type=1326 audit(1788411814.377:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11472 comm="syz.5.1791" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062979e159 code=0x7ffc0000 [ 451.068612][T11451] bond0: option miimon: invalid value (18446744073709551614) [ 451.076928][T11451] bond0: option miimon: allowed values 0 - 2147483647 [ 451.161328][ T5689] usb 5-1: USB disconnect, device number 91 [ 451.163470][T11477] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1792'. [ 451.225182][T11477] loop5: detected capacity change from 0 to 7 [ 451.232132][T11477] Dev loop5: unable to read RDB block 7 [ 451.232167][T11477] loop5: AHDI p1 p3 p4 [ 451.232189][T11477] loop5: partition table partially beyond EOD, truncated [ 451.235240][T11477] loop5: p1 size 100663296 extends beyond EOD, truncated [ 451.260195][T11477] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 451.284237][T11477] netlink: 'syz.5.1792': attribute type 88 has an invalid length. [ 451.314697][ T5625] udevd[5625]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 451.315150][ T6146] udevd[6146]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 451.411886][T11482] loop4: detected capacity change from 0 to 7 [ 451.421829][T11482] Dev loop4: unable to read RDB block 7 [ 451.421887][T11482] loop4: unable to read partition table [ 451.422120][T11482] loop4: partition table beyond EOD, truncated [ 451.422167][T11482] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 453.162475][ T5348] usb 2-1: USB disconnect, device number 65 [ 453.616655][ T5348] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 453.768483][ T5348] usb 2-1: Using ep0 maxpacket: 32 [ 453.774043][ T5348] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 453.791755][ T5348] usb 2-1: config index 0 descriptor too short (expected 19, got 18) [ 453.803141][ T5348] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.803219][ T5348] usb 2-1: Product: syz [ 453.803237][ T5348] usb 2-1: Manufacturer: syz [ 453.803254][ T5348] usb 2-1: SerialNumber: syz [ 453.847854][ T5348] usb 2-1: config 0 descriptor?? [ 453.866176][ T5348] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 453.866257][ T5348] dvb-usb: bulk message failed: -22 (2/0) [ 453.891107][ T5348] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 453.904317][ T5348] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 453.904431][ T5348] usb 2-1: media controller created [ 453.965495][ T5348] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 454.062338][ T5348] usb 2-1: selecting invalid altsetting 7 [ 454.062393][ T5348] cxusb: set interface failed [ 454.062431][ T5348] dvb-usb: bulk message failed: -22 (1/0) [ 454.099428][T11504] cxusb: i2c wr: len=79 is too big! [ 454.099428][T11504] [ 454.329092][ T5348] DVB: Unable to find symbol lgdt330x_attach() [ 454.329154][ T5348] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 454.528701][ T5348] rc_core: IR keymap rc-dvico-portable not found [ 454.528749][ T5348] Registered IR keymap rc-empty [ 454.543915][ T5348] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 454.556247][ T5348] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input36 [ 454.584306][ T5348] dvb-usb: schedule remote query interval to 100 msecs. [ 454.584363][ T5348] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 454.617156][ T5348] usb 2-1: USB disconnect, device number 66 [ 454.924901][ T5348] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 456.351047][ T5348] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 456.500521][ T5348] usb 5-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 456.513155][ T5348] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.531345][ T5348] usb 5-1: config 0 descriptor?? [ 456.569554][ T5348] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 457.342216][ T5348] gspca_sunplus: reg_w_riv err -71 [ 457.342333][ T5348] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 457.421925][ T5348] usb 5-1: USB disconnect, device number 92 [ 458.451344][T11593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1822'. [ 458.471716][T11593] trusted_key: encrypted_key: insufficient parameters specified [ 459.356722][ T5689] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 459.506904][ T5689] usb 5-1: Using ep0 maxpacket: 32 [ 459.512990][ T5689] usb 5-1: New USB device found, idVendor=1199, idProduct=0301, bcdDevice=b3.54 [ 459.526120][ T5689] usb 5-1: config 2 has an invalid interface number: 87 but max is 1 [ 459.535392][ T5689] usb 5-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 459.535458][ T5689] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 459.535486][ T5689] usb 5-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 459.544383][ T5689] usb 5-1: config 2 has no interface number 0 [ 459.544523][ T5689] usb 5-1: config 2 interface 87 altsetting 15 endpoint 0xC has invalid maxpacket 1015, setting to 64 [ 459.544557][ T5689] usb 5-1: config 2 interface 87 altsetting 15 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 459.544597][ T5689] usb 5-1: config 2 interface 87 altsetting 15 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 459.544630][ T5689] usb 5-1: config 2 interface 87 altsetting 15 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 459.544659][ T5689] usb 5-1: config 2 interface 87 altsetting 15 has 4 endpoint descriptors, different from the interface descriptor's value: 11 [ 459.544688][ T5689] usb 5-1: config 2 interface 87 has no altsetting 0 [ 459.649860][ T5689] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.649921][ T5689] usb 5-1: Product: syz [ 459.649961][ T5689] usb 5-1: Manufacturer: ᐇ [ 459.649983][ T5689] usb 5-1: SerialNumber: syz [ 460.468753][T11623] FAULT_INJECTION: forcing a failure. [ 460.468753][T11623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 460.468825][T11623] CPU: 1 UID: 0 PID: 11623 Comm: syz.5.1832 Tainted: G L syzkaller #0 PREEMPT(full) [ 460.468857][T11623] Tainted: [L]=SOFTLOCKUP [ 460.468867][T11623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 460.468880][T11623] Call Trace: [ 460.468888][T11623] [ 460.468945][T11623] dump_stack_lvl+0xe8/0x150 [ 460.469048][T11623] should_fail_ex+0x410/0x560 [ 460.469212][T11623] _copy_from_user+0x2d/0xb0 [ 460.469276][T11623] __sys_sendto+0x2a9/0x5a0 [ 460.469337][T11623] ? ksys_write+0x1e6/0x270 [ 460.469430][T11623] ? __pfx___sys_sendto+0x10/0x10 [ 460.469521][T11623] ? __mutex_unlock_slowpath+0x731/0x900 [ 460.469687][T11623] ? __pfx_ksys_write+0x10/0x10 [ 460.469773][T11623] __x64_sys_sendto+0xde/0x100 [ 460.469835][T11623] do_syscall_64+0x166/0x520 [ 460.469923][T11623] ? trace_irq_disable+0x3b/0x140 [ 460.469984][T11623] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.470051][T11623] ? clear_bhb_loop+0x70/0xc0 [ 460.470110][T11623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.470169][T11623] RIP: 0033:0x7f062979e159 [ 460.470224][T11623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 460.470274][T11623] RSP: 002b:00007f06279f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 460.470343][T11623] RAX: ffffffffffffffda RBX: 00007f0629a25fa0 RCX: 00007f062979e159 [ 460.470385][T11623] RDX: 0000000000000004 RSI: 0000200000000200 RDI: 0000000000000003 [ 460.470431][T11623] RBP: 00007f06279f6090 R08: 0000200000000080 R09: 0000000000000014 [ 460.470477][T11623] R10: 00000000040408d4 R11: 0000000000000246 R12: 0000000000000001 [ 460.470523][T11623] R13: 00007f0629a26038 R14: 00007f0629a25fa0 R15: 00007f0629b4fa48 [ 460.470613][T11623] [ 460.707764][ T5681] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 460.846745][ T5702] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 460.869329][ T5681] usb 2-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 460.874831][ T5681] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.891222][ T5681] usb 2-1: config 0 descriptor?? [ 460.903235][ T5681] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 460.986894][ T25] usb 6-1: new low-speed USB device number 61 using dummy_hcd [ 460.997374][ T5702] usb 4-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.40 [ 460.999941][ T5702] usb 4-1: too many endpoints for config 1 interface 0 altsetting 13: 65, using maximum allowed: 30 [ 461.000059][ T5702] usb 4-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 461.000140][ T5702] usb 4-1: config 1 interface 0 has no altsetting 0 [ 461.028309][ T5702] usb 4-1: string descriptor 0 read error: -22 [ 461.028751][ T5702] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.137325][ T25] usb 6-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 461.142465][ T25] usb 6-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1536, setting to 8 [ 461.142627][ T25] usb 6-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 461.142709][ T25] usb 6-1: config 0 interface 0 has no altsetting 0 [ 461.142883][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.163759][ T25] usb 6-1: config 0 descriptor?? [ 461.168773][T11627] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 461.481983][T11629] random: crng reseeded on system resumption [ 461.574864][ T5681] gspca_sunplus: reg_w_riv err -71 [ 461.580391][ T5681] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 461.580774][ T5702] hid_parser_main: 8020 callbacks suppressed [ 461.580833][ T5702] logitech 0003:046D:C626.001D: unknown main item tag 0x0 [ 461.580975][ T5702] logitech 0003:046D:C626.001D: unknown main item tag 0x0 [ 461.581106][ T5702] logitech 0003:046D:C626.001D: unknown main item tag 0x0 [ 461.581174][ T5702] logitech 0003:046D:C626.001D: unknown main item tag 0x0 [ 461.581297][ T5702] logitech 0003:046D:C626.001D: unknown main item tag 0x0 [ 461.581441][ T5702] logitech 0003:046D:C626.001D: unknown main item tag 0x0 [ 461.581519][ T5702] logitech 0003:046D:C626.001D: unknown main item tag 0x0 [ 461.581632][ T5702] logitech 0003:046D:C626.001D: unknown main item tag 0x0 [ 461.581711][ T5702] logitech 0003:046D:C626.001D: unknown main item tag 0x0 [ 461.593654][ T5702] logitech 0003:046D:C626.001D: unknown main item tag 0x0 [ 461.674644][ T5681] usb 2-1: USB disconnect, device number 67 [ 461.888277][ T5702] logitech 0003:046D:C626.001D: hidraw0: USB HID vff.7f Device [HID 046d:c626] on usb-dummy_hcd.3-1/input0 [ 461.989575][ T5689] sierra 5-1:2.87: Sierra USB modem converter detected [ 462.013945][ T5689] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 462.037584][ T5689] usb 5-1: USB disconnect, device number 93 [ 462.056295][ T5689] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 462.067410][ T5689] sierra 5-1:2.87: device disconnected [ 462.328748][T11639] FAULT_INJECTION: forcing a failure. [ 462.328748][T11639] name failslab, interval 1, probability 0, space 0, times 0 [ 462.328807][T11639] CPU: 1 UID: 0 PID: 11639 Comm: syz.1.1837 Tainted: G L syzkaller #0 PREEMPT(full) [ 462.328843][T11639] Tainted: [L]=SOFTLOCKUP [ 462.328853][T11639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 462.328867][T11639] Call Trace: [ 462.328877][T11639] [ 462.328888][T11639] dump_stack_lvl+0xe8/0x150 [ 462.328927][T11639] should_fail_ex+0x410/0x560 [ 462.328968][T11639] should_failslab+0xa8/0x100 [ 462.328995][T11639] ? skb_clone+0x212/0x3a0 [ 462.329020][T11639] kmem_cache_alloc_noprof+0xa1/0x600 [ 462.329058][T11639] ? skb_clone+0x212/0x3a0 [ 462.329091][T11639] skb_clone+0x212/0x3a0 [ 462.329122][T11639] __netlink_deliver_tap+0x413/0x860 [ 462.329163][T11639] ? netlink_deliver_tap+0x2e/0x1b0 [ 462.329193][T11639] netlink_deliver_tap+0x19c/0x1b0 [ 462.329224][T11639] netlink_sendskb+0x68/0x140 [ 462.329252][T11639] netlink_rcv_skb+0x2a4/0x4a0 [ 462.329281][T11639] ? __pfx_genl_rcv_msg+0x10/0x10 [ 462.329316][T11639] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 462.329367][T11639] ? down_read+0x2be/0x330 [ 462.329394][T11639] genl_rcv+0x28/0x40 [ 462.329425][T11639] netlink_unicast+0x7bd/0x940 [ 462.329461][T11639] netlink_sendmsg+0x813/0xb40 [ 462.329498][T11639] ? __pfx_netlink_sendmsg+0x10/0x10 [ 462.329535][T11639] ? apparmor_socket_sendmsg+0x98/0x360 [ 462.329572][T11639] ? __pfx_netlink_sendmsg+0x10/0x10 [ 462.329600][T11639] sock_sendmsg_nosec+0x13a/0x180 [ 462.329635][T11639] ____sys_sendmsg+0x54e/0x850 [ 462.329667][T11639] ? __pfx_____sys_sendmsg+0x10/0x10 [ 462.329703][T11639] ? import_iovec+0x73/0xa0 [ 462.329733][T11639] ___sys_sendmsg+0x2a5/0x360 [ 462.329757][T11639] ? __lock_acquire+0x6df/0x2e50 [ 462.329785][T11639] ? __pfx____sys_sendmsg+0x10/0x10 [ 462.329848][T11639] ? __fget_files+0x2a/0x420 [ 462.329878][T11639] ? __fget_files+0x3a2/0x420 [ 462.329920][T11639] __x64_sys_sendmsg+0x1b1/0x290 [ 462.329949][T11639] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 462.329998][T11639] do_syscall_64+0x166/0x520 [ 462.330029][T11639] ? trace_irq_disable+0x3b/0x140 [ 462.330051][T11639] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.330073][T11639] ? clear_bhb_loop+0x70/0xc0 [ 462.330100][T11639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.330122][T11639] RIP: 0033:0x7f6aa1f9e159 [ 462.330143][T11639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 462.330163][T11639] RSP: 002b:00007f6aa2e41028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 462.330275][T11639] RAX: ffffffffffffffda RBX: 00007f6aa2225fa0 RCX: 00007f6aa1f9e159 [ 462.330336][T11639] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005 [ 462.330420][T11639] RBP: 00007f6aa2e41090 R08: 0000000000000000 R09: 0000000000000000 [ 462.330463][T11639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.330497][T11639] R13: 00007f6aa2226038 R14: 00007f6aa2225fa0 R15: 00007f6aa234fa48 [ 462.330586][T11639] [ 462.742706][T11646] FAULT_INJECTION: forcing a failure. [ 462.742706][T11646] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 462.742790][T11646] CPU: 1 UID: 0 PID: 11646 Comm: syz.0.1838 Tainted: G L syzkaller #0 PREEMPT(full) [ 462.742821][T11646] Tainted: [L]=SOFTLOCKUP [ 462.742830][T11646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 462.742842][T11646] Call Trace: [ 462.742852][T11646] [ 462.742861][T11646] dump_stack_lvl+0xe8/0x150 [ 462.742902][T11646] should_fail_ex+0x410/0x560 [ 462.742940][T11646] _copy_to_user+0x31/0xb0 [ 462.742967][T11646] simple_read_from_buffer+0xe1/0x170 [ 462.743002][T11646] proc_fail_nth_read+0x1bb/0x230 [ 462.743035][T11646] ? common_file_perm+0x20e/0x2b0 [ 462.743061][T11646] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 462.743097][T11646] ? rw_verify_area+0x24a/0x4c0 [ 462.743130][T11646] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 462.743162][T11646] vfs_read+0x213/0xa80 [ 462.743199][T11646] ? __pfx___mutex_lock+0x10/0x10 [ 462.743233][T11646] ? __pfx_vfs_read+0x10/0x10 [ 462.743266][T11646] ? __fget_files+0x2a/0x420 [ 462.743308][T11646] ? __fget_files+0x3a2/0x420 [ 462.743335][T11646] ? __fget_files+0x2a/0x420 [ 462.743373][T11646] ksys_read+0x150/0x270 [ 462.743407][T11646] ? __pfx_ksys_read+0x10/0x10 [ 462.743450][T11646] do_syscall_64+0x166/0x520 [ 462.743482][T11646] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.743505][T11646] ? clear_bhb_loop+0x70/0xc0 [ 462.743533][T11646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.743555][T11646] RIP: 0033:0x7efc29b5e98e [ 462.743575][T11646] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 462.743593][T11646] RSP: 002b:00007efc2aaeefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 462.743617][T11646] RAX: ffffffffffffffda RBX: 00007efc2aaef6c0 RCX: 00007efc29b5e98e [ 462.743633][T11646] RDX: 000000000000000f RSI: 00007efc2aaef0a0 RDI: 0000000000000004 [ 462.743647][T11646] RBP: 00007efc2aaef090 R08: 0000000000000000 R09: 0000000000000000 [ 462.743662][T11646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.743675][T11646] R13: 00007efc29e26038 R14: 00007efc29e25fa0 R15: 00007efc29f4fa48 [ 462.743709][T11646] [ 463.085007][ T25] usbhid 6-1:0.0: can't add hid device: -71 [ 463.085282][ T25] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 463.122979][ T25] usb 6-1: USB disconnect, device number 61 [ 463.133185][ T31] kauditd_printk_skb: 16 callbacks suppressed [ 463.133231][ T31] audit: type=1326 audit(1788411826.647:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11655 comm="syz.0.1840" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc29b9e159 code=0x7ffc0000 [ 463.133300][ T31] audit: type=1326 audit(1788411826.647:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11655 comm="syz.0.1840" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc29b9e159 code=0x7ffc0000 [ 463.133349][ T31] audit: type=1326 audit(1788411826.647:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11655 comm="syz.0.1840" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7efc29b9e159 code=0x7ffc0000 [ 463.133398][ T31] audit: type=1326 audit(1788411826.647:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11655 comm="syz.0.1840" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc29b9e159 code=0x7ffc0000 [ 463.133444][ T31] audit: type=1326 audit(1788411826.647:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11655 comm="syz.0.1840" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc29b9e159 code=0x7ffc0000 [ 463.133901][ T31] audit: type=1326 audit(1788411826.647:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11655 comm="syz.0.1840" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7efc29b9e159 code=0x7ffc0000 [ 463.240509][ T31] audit: type=1326 audit(1788411826.647:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11655 comm="syz.0.1840" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc29b9e159 code=0x7ffc0000 [ 463.240566][ T31] audit: type=1326 audit(1788411826.757:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11655 comm="syz.0.1840" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7efc29b9e159 code=0x7ffc0000 [ 463.252216][ T31] audit: type=1326 audit(1788411826.757:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11655 comm="syz.0.1840" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc29b9e159 code=0x7ffc0000 [ 463.258665][ T31] audit: type=1326 audit(1788411826.767:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11655 comm="syz.0.1840" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7efc29b9e159 code=0x7ffc0000 [ 463.516423][ T5615] usb 4-1: USB disconnect, device number 57 [ 464.258115][T11683] netlink: 'syz.0.1846': attribute type 1 has an invalid length. [ 464.288063][ T5681] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 464.323773][T11680] bond3: (slave veth0_to_bond): making interface the new active one [ 464.337967][T11680] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 464.369947][T11680] macvlan2: entered promiscuous mode [ 464.377476][T11680] macvlan2: entered allmulticast mode [ 464.385298][T11680] bond3: entered promiscuous mode [ 464.390498][T11680] veth0_to_bond: entered promiscuous mode [ 464.403639][T11680] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 464.438955][T11680] bond3: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 464.454134][ T5681] usb 2-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 464.470196][ T5681] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.470250][ T5681] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 464.470305][ T5681] usb 2-1: config 0 interface 0 has no altsetting 0 [ 464.470348][ T5681] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.498246][T11680] bond3: left promiscuous mode [ 464.498276][T11680] veth0_to_bond: left promiscuous mode [ 464.529703][ T5681] usb 2-1: config 0 descriptor?? [ 464.764286][T11688] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1850'. [ 464.947223][ T5689] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 465.107689][ T5689] usb 4-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 465.119619][ T5689] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.163921][ T5689] mos7720 4-1:1.0: Moschip 2 port adapter converter detected [ 465.232827][T11674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.242226][T11674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.252732][ T5681] usbhid 2-1:0.0: can't add hid device: -71 [ 465.262346][ T5681] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 465.281197][ T5681] usb 2-1: USB disconnect, device number 68 [ 465.372662][ T5689] usb 4-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 465.400979][ T5689] usb 4-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 465.668140][T11705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.680063][T11705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.817115][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 466.292062][T11713] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1858'. [ 466.395099][T11713] loop5: detected capacity change from 0 to 7 [ 466.411201][T11713] Dev loop5: unable to read RDB block 7 [ 466.419261][T11713] loop5: AHDI p1 p3 p4 [ 466.419338][T11713] loop5: partition table partially beyond EOD, truncated [ 466.419581][T11713] loop5: p1 size 100663296 extends beyond EOD, truncated [ 466.447224][T11713] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 466.479668][T11713] netlink: 'syz.5.1858': attribute type 88 has an invalid length. [ 466.595813][ T5625] udevd[5625]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 466.608285][ T6146] udevd[6146]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 467.436752][ T5702] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 467.577072][ T5615] usb 4-1: USB disconnect, device number 58 [ 467.577143][ C0] usb 4-1: mos7720_interrupt_callback - Error -19 submitting control urb [ 467.636639][ T5702] usb 2-1: Using ep0 maxpacket: 8 [ 467.651134][ T5702] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 467.670012][ T5702] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 467.670092][ T5702] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.694254][ T5615] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 467.711030][ T5702] usb 2-1: config 0 descriptor?? [ 467.732382][ T5615] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 467.745938][ T5615] mos7720 4-1:1.0: device disconnected [ 468.018955][ T5702] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 468.136806][ T31] kauditd_printk_skb: 63 callbacks suppressed [ 468.136859][ T31] audit: type=1326 audit(1788411831.647:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11724 comm="syz.1.1861" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f6aa1f9e159 code=0x7ffc0000 [ 468.136911][ T31] audit: type=1326 audit(1788411831.647:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11724 comm="syz.1.1861" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f6aa1f9e159 code=0x7ffc0000 [ 468.137095][ T31] audit: type=1326 audit(1788411831.647:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11724 comm="syz.1.1861" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f6aa1f9e159 code=0x7ffc0000 [ 468.137222][ T31] audit: type=1326 audit(1788411831.647:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11724 comm="syz.1.1861" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f6aa1f9e159 code=0x7ffc0000 [ 468.137348][ T31] audit: type=1326 audit(1788411831.647:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11724 comm="syz.1.1861" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f6aa1f9e159 code=0x7ffc0000 [ 468.137464][ T31] audit: type=1326 audit(1788411831.647:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11724 comm="syz.1.1861" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f6aa1f9e159 code=0x7ffc0000 [ 468.141532][ T31] audit: type=1326 audit(1788411831.647:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11724 comm="syz.1.1861" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f6aa1f9e159 code=0x7ffc0000 [ 468.148190][ T31] audit: type=1326 audit(1788411831.657:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11724 comm="syz.1.1861" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6aa1f5e98e code=0x7ffc0000 [ 468.185394][ T31] audit: type=1326 audit(1788411831.697:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11724 comm="syz.1.1861" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6aa1f5e98e code=0x7ffc0000 [ 468.245667][ T31] audit: type=1326 audit(1788411831.757:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11724 comm="syz.1.1861" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f6aa1f9e159 code=0x7ffc0000 [ 468.599614][T11741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1865'. [ 468.599672][T11741] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1865'. [ 468.607581][T11741] netlink: 'syz.3.1865': attribute type 7 has an invalid length. [ 468.662200][T11743] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1865'. [ 468.662520][T11743] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1865'. [ 468.662589][T11743] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1865'. [ 468.696953][ T5615] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 468.726642][ T38] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.726724][ T38] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.726829][ T38] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.726923][ T38] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.849734][ T5615] usb 6-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 468.881413][ T5615] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.893995][ T5615] usb 6-1: config 0 descriptor?? [ 468.927287][ T5615] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 469.428331][ T5743] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 469.588228][ T5743] usb 4-1: Using ep0 maxpacket: 16 [ 469.592058][ T5743] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 469.604970][ T5743] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 469.605047][ T5743] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 469.641324][ T5743] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.641382][ T5743] usb 4-1: Product: syz [ 469.641431][ T5743] usb 4-1: Manufacturer: syz [ 469.641448][ T5743] usb 4-1: SerialNumber: syz [ 469.688320][ T5743] usb 4-1: config 0 descriptor?? [ 469.728546][ T5615] gspca_sunplus: reg_w_riv err -71 [ 469.728712][ T5615] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 469.747592][ T5615] usb 6-1: USB disconnect, device number 62 [ 470.550449][ T5615] usb 4-1: USB disconnect, device number 59 [ 470.753727][ T5615] usb 2-1: USB disconnect, device number 69 [ 470.958162][T11770] netlink: 'syz.1.1874': attribute type 29 has an invalid length. [ 471.183927][T11770] nvme_tcp: malformed address passed: .27.0.0.1:4420 [ 471.596849][T11786] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1880'. [ 471.703178][ T5615] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 471.816089][T11786] loop5: detected capacity change from 0 to 7 [ 471.839240][T11786] Dev loop5: unable to read RDB block 7 [ 471.839327][T11786] loop5: AHDI p1 p3 p4 [ 471.839355][T11786] loop5: partition table partially beyond EOD, truncated [ 471.839569][T11786] loop5: p1 size 100663296 extends beyond EOD, truncated [ 471.891706][ T5615] usb 4-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 471.906814][ T5615] usb 4-1: config 54 has an invalid interface number: 97 but max is 0 [ 471.906860][ T5615] usb 4-1: config 54 has an invalid descriptor of length 97, skipping remainder of the config [ 471.906898][ T5615] usb 4-1: config 54 has no interface number 0 [ 471.906931][ T5615] usb 4-1: too many endpoints for config 54 interface 97 altsetting 97: 97, using maximum allowed: 30 [ 471.906976][ T5615] usb 4-1: config 54 interface 97 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 471.907009][ T5615] usb 4-1: config 54 interface 97 has no altsetting 0 [ 471.934805][T11786] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 471.987946][ T5615] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.996338][ T5615] usb 4-1: Product: syz [ 471.996357][ T5615] usb 4-1: Manufacturer: syz [ 471.996388][ T5615] usb 4-1: SerialNumber: syz [ 472.028383][T11791] netlink: 'syz.0.1880': attribute type 88 has an invalid length. [ 472.344277][ T5614] udevd[5614]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 472.361430][ T5625] udevd[5625]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 472.561683][ T5615] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 472.580121][ T5615] dvb-usb: bulk message failed: -22 (3/0) [ 472.634479][ T5615] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 472.655960][ T5615] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 error while loading driver (-19) [ 472.665982][ T5615] dvb_usb_umt_010 4-1:54.97: probe with driver dvb_usb_umt_010 failed with error -22 [ 472.687703][ T5615] usb 4-1: USB disconnect, device number 60 [ 473.795356][T11823] FAULT_INJECTION: forcing a failure. [ 473.795356][T11823] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 473.795404][T11823] CPU: 1 UID: 0 PID: 11823 Comm: syz.0.1888 Tainted: G L syzkaller #0 PREEMPT(full) [ 473.795428][T11823] Tainted: [L]=SOFTLOCKUP [ 473.795435][T11823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 473.795446][T11823] Call Trace: [ 473.795452][T11823] [ 473.795460][T11823] dump_stack_lvl+0xe8/0x150 [ 473.795488][T11823] should_fail_ex+0x410/0x560 [ 473.795618][T11823] _copy_to_user+0x31/0xb0 [ 473.795655][T11823] simple_read_from_buffer+0xe1/0x170 [ 473.795682][T11823] proc_fail_nth_read+0x1bb/0x230 [ 473.795706][T11823] ? common_file_perm+0x20e/0x2b0 [ 473.795748][T11823] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 473.795783][T11823] ? rw_verify_area+0x24a/0x4c0 [ 473.795808][T11823] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 473.795832][T11823] vfs_read+0x213/0xa80 [ 473.795859][T11823] ? __pfx___mutex_lock+0x10/0x10 [ 473.795936][T11823] ? __pfx_vfs_read+0x10/0x10 [ 473.795960][T11823] ? __fget_files+0x2a/0x420 [ 473.795985][T11823] ? __fget_files+0x3a2/0x420 [ 473.796005][T11823] ? __fget_files+0x2a/0x420 [ 473.796033][T11823] ksys_read+0x150/0x270 [ 473.796058][T11823] ? __pfx_ksys_read+0x10/0x10 [ 473.796088][T11823] do_syscall_64+0x166/0x520 [ 473.796130][T11823] ? trace_irq_disable+0x3b/0x140 [ 473.796146][T11823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.796163][T11823] ? clear_bhb_loop+0x70/0xc0 [ 473.796183][T11823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.796200][T11823] RIP: 0033:0x7efc29b5e98e [ 473.796215][T11823] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 473.796231][T11823] RSP: 002b:00007efc2aaeefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 473.796280][T11823] RAX: ffffffffffffffda RBX: 00007efc2aaef6c0 RCX: 00007efc29b5e98e [ 473.796304][T11823] RDX: 000000000000000f RSI: 00007efc2aaef0a0 RDI: 0000000000000004 [ 473.796316][T11823] RBP: 00007efc2aaef090 R08: 0000000000000000 R09: 0000000000000000 [ 473.796326][T11823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 473.796337][T11823] R13: 00007efc29e26038 R14: 00007efc29e25fa0 R15: 00007efc29f4fa48 [ 473.796361][T11823] [ 473.981538][ T5615] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 474.029805][ T5681] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 474.156780][ T5615] usb 4-1: Using ep0 maxpacket: 16 [ 474.164192][ T5615] usb 4-1: New USB device found, idVendor=0421, idProduct=010e, bcdDevice=2c.50 [ 474.176687][ T5615] usb 4-1: config 0 has an invalid interface number: 112 but max is 0 [ 474.176749][ T5615] usb 4-1: config 0 has no interface number 0 [ 474.176801][ T5615] usb 4-1: config 0 interface 112 has no altsetting 0 [ 474.190141][ T5681] usb 6-1: Using ep0 maxpacket: 32 [ 474.193566][ T5681] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 474.221853][ T5615] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.230318][ T5615] usb 4-1: Product: syz [ 474.234635][ T5615] usb 4-1: Manufacturer: syz [ 474.239395][ T5615] usb 4-1: SerialNumber: syz [ 474.244100][ T5681] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.244141][ T5681] usb 6-1: Product: syz [ 474.244157][ T5681] usb 6-1: Manufacturer: syz [ 474.244173][ T5681] usb 6-1: SerialNumber: syz [ 474.274106][ T5615] usb 4-1: config 0 descriptor?? [ 474.304733][ T5681] usb 6-1: config 0 descriptor?? [ 474.336067][ T5681] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 474.340044][ T5681] dvb-usb: bulk message failed: -22 (4/0) [ 474.340108][ T5681] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 474.340450][ T5681] dvb-usb: bulk message failed: -22 (5/0) [ 474.340501][ T5681] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 474.413513][ T5681] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 474.424500][ T5681] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 474.424565][ T5681] usb 6-1: media controller created [ 474.476208][T11828] FAULT_INJECTION: forcing a failure. [ 474.476208][T11828] name failslab, interval 1, probability 0, space 0, times 0 [ 474.490506][T11828] CPU: 1 UID: 0 PID: 11828 Comm: syz.0.1890 Tainted: G L syzkaller #0 PREEMPT(full) [ 474.490561][T11828] Tainted: [L]=SOFTLOCKUP [ 474.490579][T11828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 474.490597][T11828] Call Trace: [ 474.490607][T11828] [ 474.490621][T11828] dump_stack_lvl+0xe8/0x150 [ 474.490660][T11828] should_fail_ex+0x410/0x560 [ 474.490709][T11828] should_failslab+0xa8/0x100 [ 474.490744][T11828] __kmalloc_noprof+0xfe/0x720 [ 474.490809][T11828] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 474.490978][T11828] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 474.491024][T11828] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 474.491074][T11828] genl_family_rcv_msg_doit+0xda/0x340 [ 474.491121][T11828] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 474.491174][T11828] ? apparmor_capable+0x126/0x170 [ 474.491269][T11828] ? bpf_lsm_capable+0x9/0x20 [ 474.491307][T11828] ? security_capable+0x7e/0x2c0 [ 474.491366][T11828] genl_rcv_msg+0x614/0x7a0 [ 474.491432][T11828] ? __pfx_genl_rcv_msg+0x10/0x10 [ 474.491470][T11828] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 474.491526][T11828] ? __pfx_nl80211_join_mesh+0x10/0x10 [ 474.491597][T11828] ? __pfx_nl80211_post_doit+0x10/0x10 [ 474.491638][T11828] ? __pfx_ref_tracker_free+0x10/0x10 [ 474.491710][T11828] netlink_rcv_skb+0x226/0x4a0 [ 474.491740][T11828] ? __pfx_genl_rcv_msg+0x10/0x10 [ 474.491806][T11828] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 474.491868][T11828] ? down_read+0x2be/0x330 [ 474.491895][T11828] genl_rcv+0x28/0x40 [ 474.491927][T11828] netlink_unicast+0x7bd/0x940 [ 474.491964][T11828] netlink_sendmsg+0x813/0xb40 [ 474.492033][T11828] ? __pfx_netlink_sendmsg+0x10/0x10 [ 474.492079][T11828] ? apparmor_socket_sendmsg+0x98/0x360 [ 474.492117][T11828] ? __pfx_netlink_sendmsg+0x10/0x10 [ 474.492145][T11828] sock_sendmsg_nosec+0x13a/0x180 [ 474.492225][T11828] ____sys_sendmsg+0x54e/0x850 [ 474.492267][T11828] ? __pfx_____sys_sendmsg+0x10/0x10 [ 474.492307][T11828] ? import_iovec+0x73/0xa0 [ 474.492367][T11828] ___sys_sendmsg+0x2a5/0x360 [ 474.492399][T11828] ? __lock_acquire+0x6df/0x2e50 [ 474.492433][T11828] ? __pfx____sys_sendmsg+0x10/0x10 [ 474.492492][T11828] ? __fget_files+0x2a/0x420 [ 474.492525][T11828] ? __fget_files+0x3a2/0x420 [ 474.492589][T11828] __x64_sys_sendmsg+0x1b1/0x290 [ 474.492617][T11828] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 474.492663][T11828] do_syscall_64+0x166/0x520 [ 474.492714][T11828] ? trace_irq_disable+0x3b/0x140 [ 474.492738][T11828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.492760][T11828] ? clear_bhb_loop+0x70/0xc0 [ 474.492796][T11828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.492830][T11828] RIP: 0033:0x7efc29b9e159 [ 474.492853][T11828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 474.492872][T11828] RSP: 002b:00007efc2aaef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 474.492898][T11828] RAX: ffffffffffffffda RBX: 00007efc29e25fa0 RCX: 00007efc29b9e159 [ 474.492915][T11828] RDX: 000000000004c040 RSI: 0000200000000040 RDI: 0000000000000003 [ 474.492930][T11828] RBP: 00007efc2aaef090 R08: 0000000000000000 R09: 0000000000000000 [ 474.492945][T11828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 474.492983][T11828] R13: 00007efc29e26038 R14: 00007efc29e25fa0 R15: 00007efc29f4fa48 [ 474.493019][T11828] [ 474.804500][T11829] netlink: 'syz.3.1886': attribute type 46 has an invalid length. [ 474.878710][T11822] dvb-usb: bulk message failed: -22 (8/0) [ 474.878759][T11822] ttusb2: there might have been an error during control message transfer. (rlen = 5, was 0) [ 474.878964][T11822] ttusb2: i2c transfer failed. [ 474.916207][ T5681] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 474.939077][T11829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.953407][T11829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.076104][ T5615] rndis_host 4-1:0.112: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 475.098966][ T5615] usb 4-1: USB disconnect, device number 61 [ 475.170843][ T5681] usb 6-1: selecting invalid altsetting 3 [ 475.170896][ T5681] ttusb2: set interface to alts=3 failed [ 475.274672][ T5681] DVB: Unable to find symbol tda10086_attach() [ 475.274726][ T5681] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 475.283419][ T5681] dvb-usb: bulk message failed: -22 (4/0) [ 475.283491][ T5681] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 475.283812][ T5681] dvb-usb: bulk message failed: -22 (5/0) [ 475.283863][ T5681] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 475.284047][ T5681] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 475.335721][T11836] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1892'. [ 475.365844][ T5681] usb 6-1: USB disconnect, device number 63 [ 475.420152][T11832] veth0: mtu less than device minimum [ 475.460960][ T5681] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 475.601452][T11836] loop5: detected capacity change from 0 to 7 [ 475.629395][T11836] Dev loop5: unable to read RDB block 7 [ 475.629467][T11836] loop5: AHDI p1 p3 p4 [ 475.629490][T11836] loop5: partition table partially beyond EOD, truncated [ 475.630267][T11836] loop5: p1 size 100663296 extends beyond EOD, truncated [ 475.650654][T11836] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 475.678477][T11839] netlink: 'syz.1.1892': attribute type 88 has an invalid length. [ 475.991052][ T6146] udevd[6146]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 476.009632][ T5625] udevd[5625]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 476.027026][ T5681] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 476.200211][ T5681] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 476.218070][ T5681] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 476.218103][ T5681] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 476.241074][ T5681] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.241126][ T5681] usb 6-1: Product: syz [ 476.241144][ T5681] usb 6-1: Manufacturer: syz [ 476.241161][ T5681] usb 6-1: SerialNumber: syz [ 476.593725][T11842] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 476.618369][T11842] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 476.626088][T11842] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 476.632540][T11842] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 476.647047][T11842] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 476.796689][ T5681] usb 6-1: USB disconnect, device number 64 [ 476.912087][T11866] SET target dimension over the limit! [ 477.760594][ T5681] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 477.860585][T11879] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1905'. [ 477.916994][ T5681] usb 6-1: Using ep0 maxpacket: 8 [ 477.922742][ T5681] usb 6-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 477.934103][ T5681] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 477.958013][ T5681] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.958068][ T5681] usb 6-1: Product: Љ [ 477.958107][ T5681] usb 6-1: Manufacturer:  [ 477.958165][ T5681] usb 6-1: SerialNumber: Њ [ 478.005069][T11879] loop5: detected capacity change from 0 to 7 [ 478.013149][T11879] Dev loop5: unable to read RDB block 7 [ 478.013226][T11879] loop5: AHDI p1 p3 p4 [ 478.013248][T11879] loop5: partition table partially beyond EOD, truncated [ 478.014111][T11879] loop5: p1 size 100663296 extends beyond EOD, truncated [ 478.046322][T11879] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 478.083656][T11879] netlink: 'syz.1.1905': attribute type 88 has an invalid length. [ 478.127254][ T5743] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 478.260268][ T5614] udevd[5614]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 478.278460][ T5743] usb 5-1: Using ep0 maxpacket: 32 [ 478.280639][ T5743] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 478.294180][ T6146] udevd[6146]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 478.307330][ T5743] usb 5-1: config index 0 descriptor too short (expected 164, got 36) [ 478.307448][ T5743] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.307495][ T5743] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.307573][ T5743] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.358716][ T5743] usb 5-1: config 0 descriptor?? [ 478.382475][ T5681] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 478.628040][ T5624] Bluetooth: hci1: command 0x0406 tx timeout [ 478.628075][ T5613] Bluetooth: hci0: command 0x0406 tx timeout [ 478.655509][ T5681] usb 6-1: USB disconnect, device number 65 [ 478.698474][ T5613] Bluetooth: hci5: command 0x0c1a tx timeout [ 478.698734][ T5624] Bluetooth: hci4: command 0x0406 tx timeout [ 478.698901][ T5624] Bluetooth: hci3: command 0x0406 tx timeout [ 478.779890][ T5633] udevd[5633]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 478.805410][T11880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.816886][ T5702] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 478.817654][T11880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.880492][ T5743] hid_parser_main: 4005 callbacks suppressed [ 478.883128][ T5743] logitech 0003:046D:C29C.001E: unknown main item tag 0x1 [ 478.907979][ T5743] logitech 0003:046D:C29C.001E: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.4-1/input0 [ 478.978629][ T5702] usb 2-1: Using ep0 maxpacket: 8 [ 478.984740][ T5702] usb 2-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.00 [ 478.996372][ T5702] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.997121][ T5702] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.022223][ T5702] usb 2-1: config 0 descriptor?? [ 479.075524][ T5743] logitech 0003:046D:C29C.001E: no inputs found [ 479.133351][ T5743] usb 5-1: USB disconnect, device number 94 [ 479.636635][ T5743] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 479.707408][ T5621] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 479.796575][ T5743] usb 5-1: Using ep0 maxpacket: 32 [ 479.801291][ T5743] usb 5-1: unable to get BOS descriptor or descriptor too short [ 479.801436][ T5743] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 479.805299][ T5743] usb 5-1: config index 0 descriptor too short (expected 65, got 36) [ 479.805367][ T5743] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 479.805432][ T5743] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 479.805490][ T5743] usb 5-1: config 14 has no interface number 0 [ 479.805541][ T5743] usb 5-1: config 14 has no interface number 1 [ 479.805701][ T5743] usb 5-1: config 14 interface 228 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 479.805794][ T5743] usb 5-1: config 14 interface 57 has no altsetting 0 [ 479.805858][ T5743] usb 5-1: config 14 interface 228 has no altsetting 0 [ 479.811363][ T5743] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.811390][ T5743] usb 5-1: Product: syz [ 479.811628][ T5743] usb 5-1: Manufacturer: syz [ 479.811647][ T5743] usb 5-1: SerialNumber: syz [ 479.846738][ T5621] usb 4-1: device descriptor read/64, error -71 [ 480.069640][T11909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.084531][T11909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.096619][ T5621] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 480.236896][ T5621] usb 4-1: device descriptor read/64, error -71 [ 480.282930][ T5743] legousbtower 5-1:14.57: interrupt endpoints not found [ 480.347162][ T5621] usb usb4-port1: attempt power cycle [ 480.489650][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 480.490765][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 480.493432][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 480.494532][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 480.503134][ T5743] legousbtower 5-1:14.228: interrupt endpoints not found [ 480.536334][ T5743] usb 5-1: USB disconnect, device number 95 [ 480.686638][ T5621] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 480.709955][ T5621] usb 4-1: device descriptor read/8, error -71 [ 480.966758][ T5621] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 480.987198][ T5621] usb 4-1: device descriptor read/8, error -71 [ 481.107076][ T5621] usb usb4-port1: unable to enumerate USB device [ 481.670370][ T5702] usbhid 2-1:0.0: can't add hid device: -71 [ 481.678844][ T5702] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 481.699167][ T5702] usb 2-1: USB disconnect, device number 70 [ 481.726590][ T5615] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 481.895534][ T5615] usb 5-1: unable to get BOS descriptor or descriptor too short [ 481.895609][ T5615] usb 5-1: New USB device found, idVendor=2040, idProduct=7500, bcdDevice=d8.83 [ 481.917321][ T5615] usb 5-1: config 114 has an invalid interface number: 216 but max is 0 [ 481.917373][ T5615] usb 5-1: config 114 has no interface number 0 [ 481.917441][ T5615] usb 5-1: config 114 interface 216 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 481.917477][ T5615] usb 5-1: config 114 interface 216 has no altsetting 0 [ 481.959785][ T5615] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.959822][ T5615] usb 5-1: Product: syz [ 481.959872][ T5615] usb 5-1: Manufacturer: syz [ 481.959895][ T5615] usb 5-1: SerialNumber: syz [ 482.019493][T11924] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 482.280815][ T5615] pvrusb2: Hardware description: WinTV HVR-1950 Model 750xx [ 482.281679][ T5615] usb 5-1: selecting invalid altsetting 0 [ 482.319760][ T5615] usb 5-1: USB disconnect, device number 96 [ 482.348707][ T2343] pvrusb2: Failed to submit write-control URB status=-19 [ 482.387416][T11930] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1917'. [ 482.402266][ T2343] usb 5-1: Direct firmware load for v4l-pvrusb2-73xxx-01.fw failed with error -2 [ 482.402324][ T2343] usb 5-1: Falling back to sysfs fallback for: v4l-pvrusb2-73xxx-01.fw [ 482.459883][T11930] loop5: detected capacity change from 0 to 7 [ 482.477956][T11930] Dev loop5: unable to read RDB block 7 [ 482.478012][T11930] loop5: AHDI p1 p3 p4 [ 482.478056][T11930] loop5: partition table partially beyond EOD, truncated [ 482.478291][T11930] loop5: p1 size 100663296 extends beyond EOD, truncated [ 482.509570][T11930] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 482.564444][T11930] netlink: 'syz.5.1917': attribute type 88 has an invalid length. [ 482.632560][ T5614] udevd[5614]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 482.643569][ T6146] udevd[6146]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 483.286627][ T25] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 483.437253][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 483.443158][ T25] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 483.454119][ T25] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 483.463014][ T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 483.463035][ T25] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 483.489897][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.498690][ T25] usb 4-1: Product: syz [ 483.503727][ T25] usb 4-1: Manufacturer: syz [ 483.503749][ T25] usb 4-1: SerialNumber: syz [ 483.566803][ T25] usb 4-1: 0:2 : does not exist [ 484.138627][T11959] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1924'. [ 484.256632][ T5348] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 484.476934][ T5348] usb 2-1: Using ep0 maxpacket: 32 [ 484.483121][ T5348] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 484.496295][ T5348] usb 2-1: config 0 has no interfaces? [ 484.505974][ T5348] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.506024][ T5348] usb 2-1: Product: syz [ 484.506091][ T5348] usb 2-1: Manufacturer: syz [ 484.506114][ T5348] usb 2-1: SerialNumber: syz [ 484.552290][ T5348] usb 2-1: config 0 descriptor?? [ 484.696702][ T5743] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 484.791589][T11957] netlink: 'syz.1.1923': attribute type 1 has an invalid length. [ 484.866940][ T5743] usb 6-1: Using ep0 maxpacket: 32 [ 484.873283][ T5743] usb 6-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 484.878394][ T5743] usb 6-1: config index 0 descriptor too short (expected 164, got 36) [ 484.878577][ T5743] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 484.878645][ T5743] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 484.878763][ T5743] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.926093][ T5743] usb 6-1: config 0 descriptor?? [ 484.964301][T11957] bond4: option mode: invalid value (7) [ 484.976888][T11957] bond4 (unregistering): Released all slaves [ 485.047658][T11965] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 485.185237][ T5348] usb 2-1: USB disconnect, device number 71 [ 485.356358][T11961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.368513][T11961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.386031][ T5743] logitech 0003:046D:C29C.001F: unknown main item tag 0x1 [ 485.394669][ T5743] logitech 0003:046D:C29C.001F: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.5-1/input0 [ 485.581980][ T5743] logitech 0003:046D:C29C.001F: no inputs found [ 485.614376][ T5743] usb 6-1: USB disconnect, device number 66 [ 485.823542][ T25] usb 4-1: 1:0: cannot get min/max values for control 4 (id 1) [ 485.941466][ T25] usb 4-1: USB disconnect, device number 66 [ 485.994588][T11975] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1928'. [ 486.038932][ T6146] udevd[6146]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 486.147422][T11979] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1930'. [ 486.156751][ T5743] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 486.227302][T11979] loop5: detected capacity change from 0 to 7 [ 486.230975][T11979] Dev loop5: unable to read RDB block 7 [ 486.231062][T11979] loop5: AHDI p1 p3 p4 [ 486.231120][T11979] loop5: partition table partially beyond EOD, truncated [ 486.232786][T11979] loop5: p1 size 100663296 extends beyond EOD, truncated [ 486.235269][T11979] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 486.288618][T11979] netlink: 'syz.1.1930': attribute type 88 has an invalid length. [ 486.339637][ T5614] udevd[5614]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 486.349612][ T6146] udevd[6146]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 486.357249][ T5743] usb 6-1: Using ep0 maxpacket: 32 [ 486.368377][ T25] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 486.370941][ T5743] usb 6-1: unable to get BOS descriptor or descriptor too short [ 486.371074][ T5743] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 486.374289][ T5743] usb 6-1: config index 0 descriptor too short (expected 65, got 36) [ 486.374360][ T5743] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 486.374429][ T5743] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 486.374474][ T5743] usb 6-1: config 14 has no interface number 0 [ 486.374522][ T5743] usb 6-1: config 14 has no interface number 1 [ 486.374681][ T5743] usb 6-1: config 14 interface 228 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 486.374783][ T5743] usb 6-1: config 14 interface 57 has no altsetting 0 [ 486.374834][ T5743] usb 6-1: config 14 interface 228 has no altsetting 0 [ 486.417775][ T5743] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.417856][ T5743] usb 6-1: Product: syz [ 486.417905][ T5743] usb 6-1: Manufacturer: syz [ 486.417953][ T5743] usb 6-1: SerialNumber: syz [ 486.547013][ T25] usb 4-1: device descriptor read/64, error -71 [ 486.786623][ T25] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 486.864089][ T5743] legousbtower 6-1:14.57: interrupt endpoints not found [ 486.916615][ T25] usb 4-1: device descriptor read/64, error -71 [ 487.027068][ T25] usb usb4-port1: attempt power cycle [ 487.069326][ T5743] legousbtower 6-1:14.228: interrupt endpoints not found [ 487.088698][ T5743] usb 6-1: USB disconnect, device number 67 [ 487.366675][ T25] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 487.387639][ T25] usb 4-1: device descriptor read/8, error -71 [ 487.626778][ T25] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 487.650438][ T25] usb 4-1: device descriptor read/8, error -71 [ 487.758681][ T25] usb usb4-port1: unable to enumerate USB device [ 488.126579][ T5743] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 488.309736][ T5743] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 488.320583][ T5743] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.320631][ T5743] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 488.320651][ T5743] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 488.320684][ T5743] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.367774][ T5743] usb 6-1: config 0 descriptor?? [ 488.424152][ T31] kauditd_printk_skb: 473 callbacks suppressed [ 488.424197][ T31] audit: type=1326 audit(1788411851.937:2149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12006 comm="syz.0.1939" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc29b9e159 code=0x7ffc0000 [ 488.424281][ T31] audit: type=1326 audit(1788411851.937:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12006 comm="syz.0.1939" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc29b9e159 code=0x7ffc0000 [ 488.479686][ T31] audit: type=1326 audit(1788411851.987:2151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12006 comm="syz.0.1939" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7efc29b9e159 code=0x7ffc0000 [ 488.479727][ T31] audit: type=1326 audit(1788411851.987:2152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12006 comm="syz.0.1939" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc29b9e159 code=0x7ffc0000 [ 488.479757][ T31] audit: type=1326 audit(1788411851.987:2153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12006 comm="syz.0.1939" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc29b9e159 code=0x7ffc0000 [ 488.487434][ T31] audit: type=1326 audit(1788411851.997:2154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12006 comm="syz.0.1939" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7efc29b9e159 code=0x7ffc0000 [ 488.487591][ T31] audit: type=1326 audit(1788411851.997:2155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12006 comm="syz.0.1939" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc29b9e159 code=0x7ffc0000 [ 488.491938][ T31] audit: type=1326 audit(1788411852.007:2156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12006 comm="syz.0.1939" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efc29b9e159 code=0x7ffc0000 [ 488.493385][ T31] audit: type=1326 audit(1788411852.007:2157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12006 comm="syz.0.1939" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc29b9e159 code=0x7ffc0000 [ 488.495606][ T31] audit: type=1326 audit(1788411852.007:2158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12006 comm="syz.0.1939" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc29b9e159 code=0x7ffc0000 [ 488.884550][ T5743] usbhid 6-1:0.0: can't add hid device: -71 [ 488.890964][ T5743] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 488.903116][ T5743] usb 6-1: USB disconnect, device number 68 [ 489.756801][ T25] usb 6-1: new low-speed USB device number 69 using dummy_hcd [ 489.907416][ T25] usb 6-1: New USB device found, idVendor=a168, idProduct=0617, bcdDevice=a7.e8 [ 489.909157][ T25] usb 6-1: config 0 has an invalid interface number: 90 but max is 0 [ 489.909553][ T25] usb 6-1: config 0 has no interface number 0 [ 489.909997][ T25] usb 6-1: config 0 interface 90 has no altsetting 0 [ 489.924457][ T25] usb 6-1: string descriptor 0 read error: -22 [ 489.924831][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.962859][ T25] usb 6-1: config 0 descriptor?? [ 489.982589][ T25] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0617 [ 490.272584][T12027] netlink: 'syz.5.1945': attribute type 1 has an invalid length. [ 490.331993][ T25] gspca_sn9c20x: Write register 1000 failed -71 [ 490.332123][ T25] gspca_sn9c20x: Device initialization failed [ 490.332370][ T25] gspca_sn9c20x 6-1:0.90: probe with driver gspca_sn9c20x failed with error -71 [ 490.358796][ T25] usb 6-1: USB disconnect, device number 69 [ 490.536805][ T5348] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 490.711395][ T5348] usb 2-1: unable to get BOS descriptor or descriptor too short [ 490.711468][ T5348] usb 2-1: New USB device found, idVendor=2040, idProduct=7500, bcdDevice=d8.83 [ 490.712817][ T5348] usb 2-1: config 114 has an invalid interface number: 216 but max is 0 [ 490.712849][ T5348] usb 2-1: config 114 has no interface number 0 [ 490.712904][ T5348] usb 2-1: config 114 interface 216 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 490.712934][ T5348] usb 2-1: config 114 interface 216 has no altsetting 0 [ 490.715622][ T5348] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.715655][ T5348] usb 2-1: Product: syz [ 490.715686][ T5348] usb 2-1: Manufacturer: syz [ 490.715706][ T5348] usb 2-1: SerialNumber: syz [ 490.720340][T12041] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 490.937020][ T5681] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 490.964624][ T5348] pvrusb2: Hardware description: WinTV HVR-1950 Model 750xx [ 490.970256][ T5348] usb 2-1: selecting invalid altsetting 0 [ 490.995603][ T5348] usb 2-1: USB disconnect, device number 72 [ 491.019110][ T5348] pvrusb2: Device being rendered inoperable [ 491.118133][ T5681] usb 4-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 491.128903][ T5681] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 491.141053][ T5681] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 491.141097][ T5681] usb 4-1: Product: syz [ 491.141144][ T5681] usb 4-1: Manufacturer: syz [ 491.346640][ T5702] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 491.372211][T12059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.375205][T12059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.390160][ T5681] usb 4-1: USB disconnect, device number 71 [ 491.507327][ T5702] usb 6-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.40 [ 491.512965][ T5702] usb 6-1: too many endpoints for config 1 interface 0 altsetting 13: 65, using maximum allowed: 30 [ 491.513114][ T5702] usb 6-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 491.513207][ T5702] usb 6-1: config 1 interface 0 has no altsetting 0 [ 491.525556][ T5702] usb 6-1: string descriptor 0 read error: -22 [ 491.525950][ T5702] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.991468][ T5702] logitech 0003:046D:C626.0020: unknown main item tag 0x0 [ 491.991527][ T5702] logitech 0003:046D:C626.0020: unknown main item tag 0x0 [ 491.994496][ T5702] logitech 0003:046D:C626.0020: unknown main item tag 0x0 [ 491.994602][ T5702] logitech 0003:046D:C626.0020: unknown main item tag 0x0 [ 491.994673][ T5702] logitech 0003:046D:C626.0020: unknown main item tag 0x0 [ 491.994744][ T5702] logitech 0003:046D:C626.0020: unknown main item tag 0x0 [ 491.994815][ T5702] logitech 0003:046D:C626.0020: unknown main item tag 0x0 [ 491.994885][ T5702] logitech 0003:046D:C626.0020: unknown main item tag 0x0 [ 491.994955][ T5702] logitech 0003:046D:C626.0020: unknown main item tag 0x0 [ 491.995027][ T5702] logitech 0003:046D:C626.0020: unknown main item tag 0x0 [ 492.171818][ T5702] logitech 0003:046D:C626.0020: hidraw0: USB HID vff.7f Device [HID 046d:c626] on usb-dummy_hcd.5-1/input0 [ 492.242014][ T5702] usb 6-1: USB disconnect, device number 70 [ 492.316089][T12068] usb usb7: usbfs: process 12068 (syz.3.1958) did not claim interface 0 before use [ 492.395516][T12067] fido_id[12067]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 493.156913][ T25] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 493.186819][ T5621] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 493.311010][ T25] usb 2-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 493.320009][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.346192][ T25] mos7720 2-1:1.0: Moschip 2 port adapter converter detected [ 493.354772][ T5621] usb 6-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 493.365651][ T5621] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 493.365699][ T5621] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 493.365727][ T5621] usb 6-1: config 1 has no interface number 0 [ 493.365773][ T5621] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 493.365811][ T5621] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 493.365846][ T5621] usb 6-1: config 1 interface 2 has no altsetting 1 [ 493.427268][ T5621] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 493.427318][ T5621] usb 6-1: Product: syz [ 493.427352][ T5621] usb 6-1: Manufacturer: syz [ 493.427373][ T5621] usb 6-1: SerialNumber: syz [ 493.551281][ T25] usb 2-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 493.583843][ T25] usb 2-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 493.699665][T12089] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 493.762123][T12090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.779762][T12090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.818712][T12095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.828511][T12095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.852180][T12090] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(15) [ 493.852213][T12090] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 493.852805][T12090] vhci_hcd vhci_hcd.0: Device attached [ 493.881199][T12096] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1965'. [ 493.895446][T12090] vhci_hcd vhci_hcd.0: port 0 already used [ 493.906745][T12090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.919819][T12090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.965427][T12097] vhci_hcd: connection closed [ 493.965883][ T86] vhci_hcd vhci_hcd.5: stop threads [ 493.965963][ T86] vhci_hcd vhci_hcd.5: release socket [ 493.966057][ T86] vhci_hcd vhci_hcd.5: disconnect device [ 494.012147][ T5621] usb 6-1: 1:0 : does not exist [ 494.017848][ T5621] usb 6-1: 1:3 : does not exist [ 494.023000][ T5621] usb 6-1: 1:4 : does not exist [ 494.092614][ T5621] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 494.117774][ T5621] usb 6-1: USB disconnect, device number 71 [ 494.150710][ T6146] udevd[6146]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 494.447167][T12109] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1971'. [ 494.846872][ T31] kauditd_printk_skb: 56 callbacks suppressed [ 494.847180][ T31] audit: type=1326 audit(1788411858.357:2213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12116 comm="syz.3.1974" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b3f9e159 code=0x7ffc0000 [ 494.847747][ T31] audit: type=1326 audit(1788411858.357:2214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12116 comm="syz.3.1974" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b3f9e159 code=0x7ffc0000 [ 494.848028][ T31] audit: type=1326 audit(1788411858.357:2215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12116 comm="syz.3.1974" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f04b3f9e159 code=0x7ffc0000 [ 494.848314][ T31] audit: type=1326 audit(1788411858.357:2216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12116 comm="syz.3.1974" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b3f9e159 code=0x7ffc0000 [ 494.848528][ T31] audit: type=1326 audit(1788411858.357:2217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12116 comm="syz.3.1974" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f04b3f9e159 code=0x7ffc0000 [ 494.848717][ T31] audit: type=1326 audit(1788411858.357:2218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12116 comm="syz.3.1974" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b3f9e159 code=0x7ffc0000 [ 494.849089][ T31] audit: type=1326 audit(1788411858.357:2219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12116 comm="syz.3.1974" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f04b3f9e159 code=0x7ffc0000 [ 494.849351][ T31] audit: type=1326 audit(1788411858.357:2220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12116 comm="syz.3.1974" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b3f9e159 code=0x7ffc0000 [ 494.849626][ T31] audit: type=1326 audit(1788411858.357:2221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12116 comm="syz.3.1974" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b3f9e159 code=0x7ffc0000 [ 495.088783][ T5348] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 495.089197][ C1] raw-gadget.2 gadget.5: ignoring, device is not running [ 495.217482][ T5348] usb 6-1: device descriptor read/64, error -32 [ 495.456713][ T5348] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 495.509387][T12127] FAULT_INJECTION: forcing a failure. [ 495.509387][T12127] name failslab, interval 1, probability 0, space 0, times 0 [ 495.509465][T12127] CPU: 1 UID: 0 PID: 12127 Comm: syz.3.1979 Tainted: G L syzkaller #0 PREEMPT(full) [ 495.509495][T12127] Tainted: [L]=SOFTLOCKUP [ 495.509530][T12127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 495.509582][T12127] Call Trace: [ 495.509618][T12127] [ 495.509648][T12127] dump_stack_lvl+0xe8/0x150 [ 495.509761][T12127] should_fail_ex+0x410/0x560 [ 495.509817][T12127] should_failslab+0xa8/0x100 [ 495.509891][T12127] __kvmalloc_node_noprof+0x176/0x820 [ 495.509959][T12127] ? video_usercopy+0xa54/0x1430 [ 495.510125][T12127] ? video_usercopy+0xa54/0x1430 [ 495.510209][T12127] video_usercopy+0xa54/0x1430 [ 495.510301][T12127] ? hook_file_ioctl+0x1f2/0x600 [ 495.510399][T12127] ? __pfx___video_do_ioctl+0x10/0x10 [ 495.510480][T12127] ? __pfx_video_usercopy+0x10/0x10 [ 495.510577][T12127] ? __fget_files+0x2a/0x420 [ 495.510658][T12127] ? __fget_files+0x2a/0x420 [ 495.510723][T12127] ? __fget_files+0x3a2/0x420 [ 495.510795][T12127] v4l2_ioctl+0x18d/0x1e0 [ 495.510866][T12127] ? __pfx_v4l2_ioctl+0x10/0x10 [ 495.510943][T12127] __se_sys_ioctl+0xfc/0x170 [ 495.511012][T12127] do_syscall_64+0x166/0x520 [ 495.511110][T12127] ? trace_irq_disable+0x3b/0x140 [ 495.511168][T12127] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.511230][T12127] ? clear_bhb_loop+0x70/0xc0 [ 495.511309][T12127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.511362][T12127] RIP: 0033:0x7f04b3f9e159 [ 495.511417][T12127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.511469][T12127] RSP: 002b:00007f04b4e1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 495.511532][T12127] RAX: ffffffffffffffda RBX: 00007f04b4225fa0 RCX: 00007f04b3f9e159 [ 495.511573][T12127] RDX: 0000200000000200 RSI: 00000000c0285628 RDI: 0000000000000003 [ 495.511612][T12127] RBP: 00007f04b4e1f090 R08: 0000000000000000 R09: 0000000000000000 [ 495.511651][T12127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.511683][T12127] R13: 00007f04b4226038 R14: 00007f04b4225fa0 R15: 00007f04b434fa48 [ 495.511767][T12127] [ 495.612492][ T5348] usb 6-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.40 [ 495.621775][ T5348] usb 6-1: too many endpoints for config 1 interface 0 altsetting 13: 65, using maximum allowed: 30 [ 495.621946][ T5348] usb 6-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 495.622272][ T5348] usb 6-1: config 1 interface 0 has no altsetting 0 [ 495.672620][ T5348] usb 6-1: string descriptor 0 read error: -22 [ 495.673170][ T5348] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.808212][ T5743] usb 2-1: USB disconnect, device number 73 [ 495.808273][ C1] usb 2-1: mos7720_interrupt_callback - Error -19 submitting control urb [ 495.843935][ T5743] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 495.859839][ T5743] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 495.870944][ T5743] mos7720 2-1:1.0: device disconnected [ 496.264386][ T5348] logitech 0003:046D:C626.0021: hidraw0: USB HID vff.7f Device [HID 046d:c626] on usb-dummy_hcd.5-1/input0 [ 496.289706][T12139] FAULT_INJECTION: forcing a failure. [ 496.289706][T12139] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 496.289781][T12139] CPU: 1 UID: 0 PID: 12139 Comm: syz.3.1983 Tainted: G L syzkaller #0 PREEMPT(full) [ 496.289841][T12139] Tainted: [L]=SOFTLOCKUP [ 496.289872][T12139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 496.289915][T12139] Call Trace: [ 496.289944][T12139] [ 496.289985][T12139] dump_stack_lvl+0xe8/0x150 [ 496.290095][T12139] should_fail_ex+0x410/0x560 [ 496.290185][T12139] _copy_to_user+0x31/0xb0 [ 496.290257][T12139] simple_read_from_buffer+0xe1/0x170 [ 496.290360][T12139] proc_fail_nth_read+0x1bb/0x230 [ 496.290441][T12139] ? common_file_perm+0x20e/0x2b0 [ 496.290505][T12139] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 496.290605][T12139] ? rw_verify_area+0x24a/0x4c0 [ 496.290696][T12139] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 496.290786][T12139] vfs_read+0x213/0xa80 [ 496.290872][T12139] ? __pfx___mutex_lock+0x10/0x10 [ 496.290964][T12139] ? __pfx_vfs_read+0x10/0x10 [ 496.291054][T12139] ? __fget_files+0x2a/0x420 [ 496.291137][T12139] ? __fget_files+0x3a2/0x420 [ 496.291208][T12139] ? __fget_files+0x2a/0x420 [ 496.291310][T12139] ksys_read+0x150/0x270 [ 496.291414][T12139] ? __pfx_ksys_read+0x10/0x10 [ 496.291531][T12139] do_syscall_64+0x166/0x520 [ 496.291614][T12139] ? trace_irq_disable+0x3b/0x140 [ 496.291676][T12139] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.291737][T12139] ? clear_bhb_loop+0x70/0xc0 [ 496.291807][T12139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.291860][T12139] RIP: 0033:0x7f04b3f5e98e [ 496.291912][T12139] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 496.291959][T12139] RSP: 002b:00007f04b4e1efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 496.292020][T12139] RAX: ffffffffffffffda RBX: 00007f04b4e1f6c0 RCX: 00007f04b3f5e98e [ 496.292061][T12139] RDX: 000000000000000f RSI: 00007f04b4e1f0a0 RDI: 0000000000000003 [ 496.292100][T12139] RBP: 00007f04b4e1f090 R08: 0000000000000000 R09: 0000000000000000 [ 496.292132][T12139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.292163][T12139] R13: 00007f04b4226038 R14: 00007f04b4225fa0 R15: 00007f04b434fa48 [ 496.292246][T12139] [ 496.551360][ T5702] usb 6-1: USB disconnect, device number 73 [ 496.604423][T12141] fido_id[12141]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 497.196703][ T5348] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 497.326644][ T5348] usb 4-1: device descriptor read/64, error -71 [ 497.566743][ T5348] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 497.707167][ T5348] usb 4-1: device descriptor read/64, error -71 [ 497.817813][ T5348] usb usb4-port1: attempt power cycle [ 497.885936][T12158] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1991'. [ 498.186185][ T5348] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 498.209742][ T5348] usb 4-1: device descriptor read/8, error -71 [ 498.446670][ T5348] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 498.467384][ T5348] usb 4-1: device descriptor read/8, error -71 [ 498.577307][ T5348] usb usb4-port1: unable to enumerate USB device [ 498.873119][T12180] syzkaller0: entered promiscuous mode [ 498.873172][T12180] syzkaller0: entered allmulticast mode [ 499.033889][T12184] vcan0: tx drop: invalid da for name 0xfffffffffffffffd [ 499.054944][T12184] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 499.667664][ T5743] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 499.828063][ T5743] usb 6-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.40 [ 499.832241][ T5743] usb 6-1: too many endpoints for config 1 interface 0 altsetting 13: 65, using maximum allowed: 30 [ 499.832379][ T5743] usb 6-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 499.832464][ T5743] usb 6-1: config 1 interface 0 has no altsetting 0 [ 499.842798][ T5743] usb 6-1: string descriptor 0 read error: -22 [ 499.843161][ T5743] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.013295][T12197] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2003'. [ 500.307215][ T5681] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 500.310972][ T5743] hid_parser_main: 8020 callbacks suppressed [ 500.311076][ T5743] logitech 0003:046D:C626.0022: unknown main item tag 0x0 [ 500.311163][ T5743] logitech 0003:046D:C626.0022: unknown main item tag 0x0 [ 500.311301][ T5743] logitech 0003:046D:C626.0022: unknown main item tag 0x0 [ 500.311432][ T5743] logitech 0003:046D:C626.0022: unknown main item tag 0x0 [ 500.311516][ T5743] logitech 0003:046D:C626.0022: unknown main item tag 0x0 [ 500.311646][ T5743] logitech 0003:046D:C626.0022: unknown main item tag 0x0 [ 500.311798][ T5743] logitech 0003:046D:C626.0022: unknown main item tag 0x0 [ 500.312137][ T5743] logitech 0003:046D:C626.0022: unknown main item tag 0x0 [ 500.312277][ T5743] logitech 0003:046D:C626.0022: unknown main item tag 0x0 [ 500.312364][ T5743] logitech 0003:046D:C626.0022: unknown main item tag 0x0 [ 500.383927][ T5348] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 500.446196][ T5743] logitech 0003:046D:C626.0022: hidraw0: USB HID vff.7f Device [HID 046d:c626] on usb-dummy_hcd.5-1/input0 [ 500.486902][ T5681] usb 2-1: Using ep0 maxpacket: 32 [ 500.492155][ T5681] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 500.507294][ T5681] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 500.507442][ T5681] usb 2-1: config 1 interface 1 altsetting 1 has an invalid endpoint descriptor of length 4, skipping [ 500.537821][ T5681] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.537877][ T5681] usb 2-1: Product: syz [ 500.537895][ T5681] usb 2-1: Manufacturer: syz [ 500.537911][ T5681] usb 2-1: SerialNumber: syz [ 500.561055][ T5348] usb 4-1: Using ep0 maxpacket: 32 [ 500.576682][ T5348] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 500.576749][ T5348] usb 4-1: no configurations [ 500.576781][ T5348] usb 4-1: can't read configurations, error -22 [ 500.598358][ T5743] usb 6-1: USB disconnect, device number 74 [ 500.639777][T12203] fido_id[12203]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 500.716754][ T5348] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 500.804314][T12200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.806241][T12200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.831356][ T5681] snd-ua101 2-1:1.1: invalid bNumEndpoints [ 500.831427][ T5681] snd-ua101 2-1:1.0: invalid num_altsetting [ 500.876592][ T5348] usb 4-1: Using ep0 maxpacket: 32 [ 500.879034][ T5681] usb 2-1: USB disconnect, device number 74 [ 500.892024][ T5348] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 500.902058][ T5348] usb 4-1: no configurations [ 500.906913][ T5348] usb 4-1: can't read configurations, error -22 [ 500.913856][ T5348] usb usb4-port1: attempt power cycle [ 501.063170][T12211] dvmrp0: entered allmulticast mode [ 501.118163][T11528] dvmrp0: left allmulticast mode [ 501.256809][ T5348] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 501.277413][ T5348] usb 4-1: Using ep0 maxpacket: 32 [ 501.279131][ T5348] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 501.279256][ T5348] usb 4-1: no configurations [ 501.279299][ T5348] usb 4-1: can't read configurations, error -22 [ 501.411148][ T5348] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 501.432112][ T5348] usb 4-1: Using ep0 maxpacket: 32 [ 501.440208][ T5348] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 501.440280][ T5348] usb 4-1: no configurations [ 501.440296][ T5348] usb 4-1: can't read configurations, error -22 [ 501.443016][ T5348] usb usb4-port1: unable to enumerate USB device [ 501.470977][T12221] syzkaller0: entered promiscuous mode [ 501.471024][T12221] syzkaller0: entered allmulticast mode [ 501.658036][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.664474][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.934328][ T31] audit: type=1800 audit(1788411865.447:2222): pid=12235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2014" name="bus" dev="tmpfs" ino=1870 res=0 errno=0 [ 502.113210][T12241] Option 'dnserror' to dns_resolver key: bad/missing value [ 502.136724][T12241] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 502.136753][T12241] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 502.136852][T12241] vhci_hcd vhci_hcd.0: Device attached [ 502.167031][T12242] vhci_hcd: connection closed [ 502.169348][T11528] vhci_hcd vhci_hcd.4: stop threads [ 502.169397][T11528] vhci_hcd vhci_hcd.4: release socket [ 502.169423][T11528] vhci_hcd vhci_hcd.4: disconnect device [ 502.516740][ T5681] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 502.546609][ T5702] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 502.678369][ T5681] usb 6-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 502.690255][ T5681] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 502.690336][ T5681] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 502.690373][ T5681] usb 6-1: config 0 interface 0 has no altsetting 0 [ 502.690520][ T5681] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.729739][ T5681] usb 6-1: config 0 descriptor?? [ 502.737238][ T5702] usb 2-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.40 [ 502.749852][ T5702] usb 2-1: too many endpoints for config 1 interface 0 altsetting 13: 65, using maximum allowed: 30 [ 502.749921][ T5702] usb 2-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 502.749975][ T5702] usb 2-1: config 1 interface 0 has no altsetting 0 [ 502.785848][ T5702] usb 2-1: string descriptor 0 read error: -22 [ 502.792493][ T5702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.297053][ T5702] logitech 0003:046D:C626.0024: hidraw0: USB HID vff.7f Device [HID 046d:c626] on usb-dummy_hcd.1-1/input0 [ 503.349820][T12239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.358548][T12239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.371822][ T5681] sony 0003:054C:0268.0023: failed to retrieve feature report 0xf2 with the Sixaxis MAC address [ 503.416139][ T5681] sony 0003:054C:0268.0023: hiddev0,hidraw1: USB HID v80.00 Joystick [HID 054c:0268] on usb-dummy_hcd.5-1/input0 [ 503.416239][ T5681] sony 0003:054C:0268.0023: failed to claim input [ 503.437852][ T5614] udevd[5614]: setting mode of /dev/usb/hiddev0 to 020600 failed: No such file or directory [ 503.438021][ T5614] udevd[5614]: setting owner of /dev/usb/hiddev0 to uid=0, gid=0 failed: No such file or directory [ 503.534715][ T5681] usb 6-1: USB disconnect, device number 75 [ 503.619424][T12258] fido_id[12258]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 503.897301][ T25] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 504.047290][ T25] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 504.058604][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.069888][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.069948][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 504.070008][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.105851][ T25] usb 4-1: config 0 descriptor?? [ 504.246852][ T5744] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 504.408257][ T5744] usb 6-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 504.415309][ T5744] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.449921][ T5744] mos7720 6-1:1.0: Moschip 2 port adapter converter detected [ 504.470997][T12270] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 504.511277][T12270] xt_connbytes: Forcing CT accounting to be enabled [ 504.661911][ T5744] usb 6-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 504.700403][ T5744] usb 6-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 504.733057][ T25] usbhid 4-1:0.0: can't add hid device: -71 [ 504.733207][ T25] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 504.769846][ T25] usb 4-1: USB disconnect, device number 80 [ 504.916148][T12274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.928204][T12274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.382819][ T25] usb 2-1: USB disconnect, device number 75 [ 505.497059][ T32] INFO: task kworker/1:5:5682 blocked for more than 143 seconds. [ 505.505241][ T32] Tainted: G L syzkaller #0 [ 505.507433][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 505.507543][ T32] task:kworker/1:5 state:D stack:22504 pid:5682 tgid:5682 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 505.507797][ T32] Workqueue: usb_hub_wq hub_event [ 505.508028][ T32] Call Trace: [ 505.508050][ T32] [ 505.508092][ T32] __schedule+0x17db/0x58f0 [ 505.508321][ T32] ? do_raw_spin_unlock+0xf5/0x200 [ 505.508522][ T32] ? __pfx___schedule+0x10/0x10 [ 505.508723][ T32] ? schedule+0x90/0x2b0 [ 505.508797][ T32] schedule+0x164/0x2b0 [ 505.513167][ T32] schedule_preempt_disabled+0x13/0x30 [ 505.513337][ T32] __mutex_lock+0x7c1/0x1550 [ 505.513424][ T32] ? __mutex_lock+0x5d4/0x1550 [ 505.513594][ T32] ? hub_event+0x20c9/0x4d30 [ 505.517236][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 505.517468][ T32] hub_event+0x20c9/0x4d30 [ 505.517639][ T32] ? register_lock_class+0x31/0x2e0 [ 505.517859][ T32] ? __pfx_hub_event+0x10/0x10 [ 505.518001][ T32] ? rcu_is_watching+0x16/0xb0 [ 505.518076][ T32] ? process_scheduled_works+0x97a/0x1630 [ 505.518210][ T32] process_scheduled_works+0xc3d/0x1630 [ 505.518437][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 505.518589][ T32] ? assign_work+0x3cf/0x5d0 [ 505.518735][ T32] worker_thread+0xa47/0xfb0 [ 505.527547][ T32] kthread+0x38b/0x480 [ 505.527693][ T32] ? __pfx_worker_thread+0x10/0x10 [ 505.527771][ T32] ? __pfx_kthread+0x10/0x10 [ 505.527883][ T32] ret_from_fork+0x514/0xb70 [ 505.527957][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 505.528104][ T32] ? __switch_to+0xc89/0x1420 [ 505.528200][ T32] ? __pfx_kthread+0x10/0x10 [ 505.528335][ T32] ret_from_fork_asm+0x1a/0x30 [ 505.528540][ T32] [ 505.528895][ T32] [ 505.528895][ T32] Showing all locks held in the system: [ 505.528928][ T32] locks held by kworker/0:1/10: 5, on CPU#0: [ 505.529026][ T32] #0: ffff888020ad4d40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 505.529246][ T32] #1: ffffc900000f7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 505.543174][ T32] #2: ffff88802ab621d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 505.543410][ T32] #3: ffff88802ab66568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20a1/0x4d30 [ 505.543616][ T32] #4: ffff88802aa68c60 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20c9/0x4d30 [ 505.543752][ T32] locks held by pr/ttyS0/16: 2, last CPU#1: [ 505.543892][ T32] #0: ffffffff8ec362b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 505.544100][ T32] #1: ffffffff9ad31098 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0 [ 505.544466][ T32] locks held by kworker/1:0/25: 3, on CPU#1: [ 505.544543][ T32] #0: ffff888020ad4d40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 505.563796][ ** replaying previous printk message ** [ 505.563796][ T32] #1: ffffc900001f7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 505.563999][ T32] #2: ffff88802838b1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 505.564373][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 505.564418][ T32] #0: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 505.564735][ T32] locks held by pvrusb2-context/2343: 2, on CPU#0: [ 505.564773][ T32] #0: ffff88807f484180 (&hdw->big_lock_mutex){+.+.}-{4:4}, at: pvr2_hdw_initialize+0xe4/0x3c60 [ 505.565188][ T32] #1: ffffffff8ebf7cc8 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xfc/0x2c0 [ 505.565479][ T32] locks held by klogd/4971: 1, last CPU#0: [ 505.565521][ T32] #0: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 505.587595][ T32] locks held by udevd/4982: 1, last CPU#0: [ 505.587621][ T32] #0: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 505.587944][ T32] locks held by getty/5371: 2, on CPU#1: [ 505.587989][ T32] #0: ffff8880322e50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 505.588399][ T32] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 505.588635][ T32] locks held by kworker/1:4/5615: 6, on CPU#1: [ 505.588679][ T32] #0: ffff888020ad4d40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 505.589067][ T32] #1: ffffc90003e87c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 505.589364][ T32] #2: ffff88802806e1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 505.615630][ T32] #3: ffff8880339371d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xfc/0x9a0 [ 505.615984][ T32] #4: ffff888058c4c1a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 505.616237][ T32] #5: ffff88807f484180 (&hdw->big_lock_mutex){+.+.}-{4:4}, at: pvr2_hdw_disconnect+0x6d/0x4f0 [ 505.616774][ T32] locks held by udevd/5625: 4, on CPU#0: [ 505.616798][ T32] #0: ffff8880756a9f38 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0 [ 505.616852][ T32] #1: ffff88805915fc80 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420 [ 505.616937][ T32] #2: ffff8880501111e8 (kn->active#30){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 505.617276][ T32] #3: ffff8880339371d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 505.638013][ T32] locks held by syz-executor/5632: 4, last CPU#1: [ 505.638065][ T32] #0: ffffffff8ee35c10 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x480 [ 505.638280][ T32] #1: ffff888031447678 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 505.646389][ T32] #2: ffff8880587fc378 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 505.649403][ T32] #3: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 505.660084][ T32] locks held by kworker/1:5/5682: 5, on CPU#1: [ 505.660128][ T32] #0: ffff888020ad4d40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 505.660410][ T32] #1: ffffc90004b27c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 505.660611][ T32] #2: ffff88802a6551d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 505.660822][ T32] #3: ffff88802a5d9568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20a1/0x4d30 [ 505.661036][ T32] #4: ffff88802aa68c60 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20c9/0x4d30 [ 505.661242][ T32] locks held by kworker/0:7/5743: 2, last CPU#0: [ 505.661279][ T32] #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 505.661507][ T32] #1: ffffc90004d5fc40 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 505.695469][ T32] locks held by kworker/u8:11/11521: 5, last CPU#0: [ 505.695535][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 505.695869][ T32] #1: ffffc90007117c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 505.696095][ T32] #2: ffffffff8ebe98f0 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_disable+0x12/0x20 [ 505.696281][ T32] #3: ffffffff8ee38180 (jump_label_mutex){+.+.}-{4:4}, at: static_key_disable_cpuslocked+0x8d/0x1a0 [ 505.696633][ T32] #4: ffffffff8ebff620 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30 [ 505.696907][ T32] locks held by kworker/u8:15/11526: 3, last CPU#0: [ 505.697003][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 505.697212][ T32] #1: ffffc900033c7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 505.714632][ T32] #2: ffff8880b8626118 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1a9/0xed0 [ 505.714852][ T32] locks held by syz.4.2023/12263: 1, last CPU#0: [ 505.714894][ T32] #0: ffff888079cef678 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 505.715127][ T32] locks held by syz.5.2025/12265: 1, on CPU#0: [ 505.715225][ T32] #0: ffff888079d336b8 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 505.715461][ T32] locks held by syz.5.2025/12274: 1, last CPU#0: [ 505.715505][ T32] #0: ffff888079d336b8 (&mm->mmap_lock){++++}-{4:4}, at: __mm_populate+0x182/0x390 [ 505.715718][ T32] locks held by syz.0.2028/12278: 1, last CPU#0: [ 505.715816][ T32] #0: ffff888027284e00 (&dev->mutex){....}-{4:4}, at: __driver_attach+0x32e/0x600 [ 505.716021][ T32] locks held by syz.3.2029/12276: 1, on CPU#0: [ 505.716065][ T32] #0: ffff888079cec378 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 505.716270][ T32] locks held by syz.3.2029/12277: 2, last CPU#0: [ 505.750610][ T32] #0: ffff888079cec378 (&mm->mmap_lock){++++}-{4:4}, at: __gup_longterm_locked+0x2ec/0x15c0 [ 505.750958][ T32] #1: ffff8880b863bb20 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb2/0x160 [ 505.751235][ T32] [ 505.751249][ T32] ============================================= [ 505.751249][ T32] [ 505.751287][ T32] NMI backtrace for cpu 0 [ 505.751342][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 505.751419][ T32] Tainted: [L]=SOFTLOCKUP [ 505.751442][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 505.751483][ T32] Call Trace: [ 505.751506][ T32] [ 505.751529][ T32] dump_stack_lvl+0xe8/0x150 [ 505.751627][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 505.751824][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 505.751925][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 505.752071][ T32] sys_info+0x135/0x170 [ 505.752144][ T32] watchdog+0xfd7/0x1030 [ 505.752227][ T32] ? watchdog+0x1c7/0x1030 [ 505.752306][ T32] kthread+0x38b/0x480 [ 505.752362][ T32] ? __pfx_watchdog+0x10/0x10 [ 505.752415][ T32] ? __pfx_kthread+0x10/0x10 [ 505.752479][ T32] ret_from_fork+0x514/0xb70 [ 505.752536][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 505.752623][ T32] ? __switch_to+0xc89/0x1420 [ 505.752708][ T32] ? __pfx_kthread+0x10/0x10 [ 505.752764][ T32] ret_from_fork_asm+0x1a/0x30 [ 505.752892][ T32] [ 505.753031][ T32] Sending NMI from CPU 0 to CPUs 1: [ 505.753104][ C1] NMI backtrace for cpu 1 [ 505.753121][ C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 505.753148][ C1] Tainted: [L]=SOFTLOCKUP [ 505.753156][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 505.753170][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 505.753239][ C1] Code: e8 4e b3 55 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 9f 7c c5 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 9a e0 74 06 cc 44 89 f9 80 e1 07 [ 505.753255][ C1] RSP: 0018:ffffc900001578e0 EFLAGS: 00000002 [ 505.753279][ C1] RAX: 1ffffffff35a6220 RBX: 00000000000003fd RCX: 0000000000000000 [ 505.753292][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 505.753305][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 505.753320][ C1] R10: dffffc0000000000 R11: ffffffff85720780 R12: dffffc0000000000 [ 505.753334][ C1] R13: 0000000000000000 R14: ffffffff9ad310c0 R15: 0000000000000000 [ 505.753346][ C1] FS: 0000000000000000(0000) GS:ffff888124dda000(0000) knlGS:0000000000000000 [ 505.753361][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 505.753374][ C1] CR2: 000000110c34078c CR3: 0000000074876000 CR4: 00000000003526f0 [ 505.753391][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 505.753402][ C1] DR3: 000000000000000c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 505.753413][ C1] Call Trace: [ 505.753421][ C1] [ 505.753430][ C1] wait_for_lsr+0x184/0x2f0 [ 505.753465][ C1] wait_for_xmitr+0x2c/0x340 [ 505.753495][ C1] serial8250_console_write+0xc41/0x1200 [ 505.753528][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 505.753555][ C1] ? __schedule+0x17f1/0x58f0 [ 505.753589][ C1] nbcon_emit_next_record+0xef5/0x1a90 [ 505.753620][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 505.753643][ C1] ? nbcon_context_try_acquire+0x819/0xbd0 [ 505.753669][ C1] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 505.753722][ C1] nbcon_kthread_func+0x679/0x880 [ 505.753749][ C1] ? nbcon_kthread_func+0x163/0x880 [ 505.753767][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 505.753791][ C1] ? __kthread_parkme+0x71/0x1f0 [ 505.753818][ C1] ? __kthread_parkme+0x199/0x1f0 [ 505.753846][ C1] kthread+0x38b/0x480 [ 505.753863][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 505.753884][ C1] ? __pfx_kthread+0x10/0x10 [ 505.753903][ C1] ret_from_fork+0x514/0xb70 [ 505.753922][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 505.753950][ C1] ? __switch_to+0xc89/0x1420 [ 505.753976][ C1] ? __pfx_kthread+0x10/0x10 [ 505.753993][ C1] ret_from_fork_asm+0x1a/0x30 [ 505.754034][ C1] [ 505.801252][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 506.766188][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 506.776872][ T32] Tainted: [L]=SOFTLOCKUP [ 506.781193][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 506.791247][ T32] Call Trace: [ 506.794533][ T32] [ 506.797471][ T32] vpanic+0x56d/0xa60 [ 506.801474][ T32] ? __pfx___schedule+0x10/0x10 [ 506.806338][ T32] ? __pfx_vpanic+0x10/0x10 [ 506.810860][ T32] ? irqentry_exit+0x218/0x910 [ 506.815651][ T32] panic+0xc5/0xd0 [ 506.819403][ T32] ? __pfx_panic+0x10/0x10 [ 506.823842][ T32] watchdog+0x1030/0x1030 [ 506.828198][ T32] ? watchdog+0x1c7/0x1030 [ 506.832625][ T32] kthread+0x38b/0x480 [ 506.836710][ T32] ? __pfx_watchdog+0x10/0x10 [ 506.841406][ T32] ? __pfx_kthread+0x10/0x10 [ 506.846002][ T32] ret_from_fork+0x514/0xb70 [ 506.850605][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 506.855730][ T32] ? __switch_to+0xc89/0x1420 [ 506.860422][ T32] ? __pfx_kthread+0x10/0x10 [ 506.865053][ T32] ret_from_fork_asm+0x1a/0x30 [ 506.869858][ T32] [ 506.873568][ T32] Kernel Offset: disabled [ 506.878017][ T32] Rebooting in 86400 seconds..