last executing test programs: 4m15.920118715s ago: executing program 4 (id=3184): r0 = syz_usb_connect(0x2, 0xab, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e00100000000000000000060090015160500011516050009040101010e02000007058105000401"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000200000009000100626f6e64000059230100000c00028008000500ff347b21f990763e9f855ff32be6b11fe9a9fb2e0e24d0f8df9e1b2f88185488abbb092a000000000000003649063d2275e246163ec722b20060a4f636de7e0e8f4c7b020000000000000061dc7dc3a786aa946c0ab5d518fdbbccbe3f841e1d6290abde2fd9fc16f104e4307d42c63a06b088bb443948289505a668093d7986fb"], 0x3c}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000140)=[{0x28, 0x8, 0x4f, 0xfffff03c}, {0x6, 0x1, 0x0, 0x57b}]}, 0x10) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000600)=ANY=[@ANYBLOB="20811a00"/32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = add_key$user(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)="92cc148dade90a868ce906b54f5db925dca78f0465a26624c3243cf81a0b620f7d3733f60d26196e00763a7a5f1e902cf27f6f1898463e9d2f5e9f835b5fd56228adf87f4066db6553e49ea085644877b3da69fe04a79e2a466c90df97a3dfcf", 0x60, 0xfffffffffffffff8) r4 = add_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000140)="47181f988989f25fff7f0000", 0xc, 0xffffffffffffffff) keyctl$chown(0x4, r4, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f00000002c0)={0x0, r3, r4}, &(0x7f0000000340)=""/76, 0x4c, &(0x7f0000000480)={&(0x7f00000003c0)={'xxhash64-generic\x00'}, &(0x7f0000000440)="f81aaa06e7be0773ff9f94c8db0e0cbb75cce559f0b75ba5d2f5c0700a4215140e2018edbd7e7b8aefed3589fef902b1395caa8094c0717c", 0x38}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@bridge_getvlan={0x20, 0x72, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}}, 0x20004040) nanosleep(&(0x7f0000000300)={0x1}, 0x0) syz_open_dev$video(&(0x7f0000000100), 0x0, 0x0) syz_usb_connect$printer(0x5, 0x36, &(0x7f00000004c0)={{0x12, 0x1, 0x5f10f5c105342e0b, 0x0, 0x0, 0x0, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x40, 0xd0, 0x6, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x59, 0x4, 0x1}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x6, 0x7, 0x1}}]}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x201, 0x68, 0x1, 0x6, 0x8, 0x3c}, 0x5, &(0x7f00000006c0)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x40a}}]}) socket$nl_netfilter(0x10, 0x3, 0xc) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000180)={'fscrypt:', @desc3}, &(0x7f0000000640)={0x0, "eb807d106ab9a124348756ec218b8be7fbdd33774ff839a29de39fa3288c0523bf5b41e830fd334e08c70e1d8e68cf27c87643215d627cde8c0b4553213abab4", 0x2f}, 0x48, 0xfffffffffffffffa) 4m12.980376773s ago: executing program 4 (id=3190): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2080}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5}, @IFLA_BR_PRIORITY={0x6}]}}}]}, 0x44}}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/arp\x00') read$FUSE(r2, &(0x7f00000095c0)={0x2020}, 0x2020) preadv(r2, &(0x7f0000000080)=[{&(0x7f0000004540)=""/4105, 0x1009}], 0x1, 0x8001, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000040)={@remote, 0x62, r3}) 4m12.810297013s ago: executing program 4 (id=3191): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_uring_setup(0x5e0a, &(0x7f0000005840)={0x0, 0x58ca, 0x40, 0x0, 0x279}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000440)="66b9800000c00f326635000800000f3066b8007000000f23d80f21f86635400000c00f23f864f2c025d666b8d55c23630f23d00f21f86635000000010f23f8f20f10f6440f20c066350c000000440f22c0f30fc7b780daba210066edbaf80c66b83ea6898b66efbafc0ced670f38ca6915", 0x71}], 0x1, 0x6, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x9, @private1, 0x8001}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000007100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000002140)={0x50, 0x0, r5, {0x7, 0x2b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50) read$FUSE(r3, &(0x7f000000cdc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r6}, 0x10) syz_fuse_handle_req(r3, &(0x7f0000004940)="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", 0x2000, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x3c}}) syz_fuse_handle_req(r3, &(0x7f0000002780)="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", 0x2000, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)={0x20, 0x0, 0x9, {0x80000001, 0x0, 0x3, 0xfff}}, 0x0}) ioctl$FS_IOC_RESVSP(r4, 0x40086602, &(0x7f0000002740)={0x0, 0xdaff}) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000200)={{}, 0x0, 0x0, 0x1, 0x4, 0x1}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m11.55220511s ago: executing program 4 (id=3196): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000000)=0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_io_uring_setup(0x2af9, &(0x7f0000000080)={0x0, 0x15c5, 0x80, 0x2, 0xdd}, &(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000180)) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x6a}, @exit], &(0x7f00000002c0)='syzkaller\x00', 0x6}, 0x94) syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x1000595f, 0x10000, 0xfffffffe, 0x51}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='stack\x00') r10 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)) syz_ublk_add_dev(r1, r2, r4, r8, &(0x7f0000000240)={0x2e, 0x1, 0x0, r9, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x4, 0xd49, 0x0, 0x0, 0x1000, 0xffffffff, r10, 0x0, 0x20}}}, &(0x7f00000002c0)) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r11 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="120100020000000882052500400001020301090271000301f81005080b020001052008090400000001012000092401fdff0a11004708240a0000057f00090401000001022000090401010101022000090501"], 0x0) syz_usb_control_io$uac2(r11, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x500a}}}, 0x0) syz_usb_control_io$uac2(r11, 0x0, 0x0) syz_usb_control_io$uac2(r11, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000500)=ANY=[], 0x0, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000000340), 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) r13 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCINQ(r13, 0x541b, 0x0) 4m8.876467055s ago: executing program 4 (id=3201): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x26, 0x6caff549, 0xfffffffff323ca07, 0x800, 0xfffc, 0x1, 0x80, 0x0, 0x0, 0x1, 0x10001}}, 0x50) 4m8.480065596s ago: executing program 4 (id=3203): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0xffffffffffffffb7, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0xfffffffffffffd64, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x19}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_emit_ethernet(0xae, &(0x7f0000000880)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60b8192300780000fe8000000000000000000000000000aafe8000000000000000000000000000aa890e000000000000316efa913621b5a2df267f483e43d9b58309590995aa46d548ffd3b795fef52731d3896c94289df9d986f6730200000013633974f50accf3710d8c5ed7363d4d7ac5f11c7a7961f11a5041acb384f3db60a99de868dd37d1548349c7523845a3342d37511a3d492aed55c4375f97da03"], 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x20004000) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001880)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd1e, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x4, 0xa}, {}, {0xfff2, 0xfff3}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x1, 0x4, 0x4}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8848}, 0x400c0e0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x4, 0x8001, 0x0, 0x80000000b49, 0x200000000002, 0x4, 0xa, 0x3}, 0x0) r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r7, r7, 0x0, 0x7) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x1000000, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000380)={0x1, 0x3, 0x1000, 0x52, &(0x7f0000000280)="4b57b3db542fe3db0ff98a76b0acfa1537d6c6d241957f444a4eb602291f59a3c10758df044980cb6cbe87dfb107f1b39562b00bdb7c941a6efd5350e5254635941a7cf38c82c51d8c2923232c4a36b9348b", 0x69, 0x0, &(0x7f0000000300)="25312e43fac40f86c9ccdece94e319e97d17519df20dd74db87c9ca3dc910e8c27d551286c08a94ce43d414fa3fc957a4a1bc15494c4c55eb083991df30d4e8fe9bdcb5a777bbbe2ea4e3cd5162954d88a559f2c840ab2a334274709b367c37bae84f641c2dd7c05e0"}) syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c80000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000080), 0xfe, r8}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x80, r8}, 0x38) close(0x3) 3m53.197246919s ago: executing program 32 (id=3203): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0xffffffffffffffb7, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0xfffffffffffffd64, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x19}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_emit_ethernet(0xae, &(0x7f0000000880)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60b8192300780000fe8000000000000000000000000000aafe8000000000000000000000000000aa890e000000000000316efa913621b5a2df267f483e43d9b58309590995aa46d548ffd3b795fef52731d3896c94289df9d986f6730200000013633974f50accf3710d8c5ed7363d4d7ac5f11c7a7961f11a5041acb384f3db60a99de868dd37d1548349c7523845a3342d37511a3d492aed55c4375f97da03"], 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x20004000) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001880)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd1e, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x4, 0xa}, {}, {0xfff2, 0xfff3}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x1, 0x4, 0x4}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8848}, 0x400c0e0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x4, 0x8001, 0x0, 0x80000000b49, 0x200000000002, 0x4, 0xa, 0x3}, 0x0) r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r7, r7, 0x0, 0x7) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x1000000, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000380)={0x1, 0x3, 0x1000, 0x52, &(0x7f0000000280)="4b57b3db542fe3db0ff98a76b0acfa1537d6c6d241957f444a4eb602291f59a3c10758df044980cb6cbe87dfb107f1b39562b00bdb7c941a6efd5350e5254635941a7cf38c82c51d8c2923232c4a36b9348b", 0x69, 0x0, &(0x7f0000000300)="25312e43fac40f86c9ccdece94e319e97d17519df20dd74db87c9ca3dc910e8c27d551286c08a94ce43d414fa3fc957a4a1bc15494c4c55eb083991df30d4e8fe9bdcb5a777bbbe2ea4e3cd5162954d88a559f2c840ab2a334274709b367c37bae84f641c2dd7c05e0"}) syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c80000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000080), 0xfe, r8}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x80, r8}, 0x38) close(0x3) 6.721515249s ago: executing program 3 (id=4299): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x9, "", [{{0x9, 0x4, 0x0, 0xfe, 0x6, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x3, 0x7f, 0x1, {0x22, 0xf29}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0xc8, 0x1}}}}}]}}]}}, 0x0) syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x5, 0xe4, 0xf5, 0xff, 0x3}, 0x48, &(0x7f00000000c0)={0x5, 0xf, 0x48, 0x3, [@ssp_cap={0x24, 0x10, 0xa, 0x9, 0x6, 0x10, 0xf, 0x3, [0xf, 0xc030, 0xffffc0, 0xff0000, 0xc000, 0xff00]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x81, 0x40, 0x0, 0x7, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "2518e0b51fa82db58a2f6cce4e5958a1"}]}, 0x7, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x403}}, {0xe1, &(0x7f0000000180)=@string={0xe1, 0x3, "dd6d01d9216cee9772ab191613360a868096c4a0b92136e28cfa878dbe3712a9079f72c97e0d80782872961b7ae59172bdf2c5595da69397b5c7e226948167be1477939703a531fffd49164dc6113ce0520f49c3fc931f00efbee0c397a339f775aa50dfb0174728a4035851eb72a273a3e11d474fe5c5d7525252f1376403c89969c87b51b5e0acffe727ededbf7e1eed54babec6ed1b3f6bf5d94e107fd20e1fa7fead85b8b1c9184a133e3c23f99215589e48c91bcf5d448c244ac3813ccf4f42bfd4dc220a1318dc0713bdb17060cadba60c2310103672f466a3863269"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x280a}}, {0x1e, &(0x7f00000002c0)=@string={0x1e, 0x3, "4df2af3c410730585605f64f9e6640b8a2b265c2c3e01e63ac8ffde5"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x380a}}, {0x1d, &(0x7f0000000380)=@string={0x1d, 0x3, "24d8f03dd7a562aa68dacd93fd39cbb7416f4d1a5dbdfa82bd70b9"}}]}) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000005c0)=@userptr={0x5, 0xa, 0x4, 0x0, 0x9, {}, {0x2, 0x8, 0xd, 0x8, 0x7, 0xd, "adc52155"}, 0x9, 0x2, {}, 0x4, 0x0, r0}) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x9, "", [{{0x9, 0x4, 0x0, 0xfe, 0x6, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x3, 0x7f, 0x1, {0x22, 0xf29}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0xc8, 0x1}}}}}]}}]}}, 0x0) (async) syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x5, 0xe4, 0xf5, 0xff, 0x3}, 0x48, &(0x7f00000000c0)={0x5, 0xf, 0x48, 0x3, [@ssp_cap={0x24, 0x10, 0xa, 0x9, 0x6, 0x10, 0xf, 0x3, [0xf, 0xc030, 0xffffc0, 0xff0000, 0xc000, 0xff00]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x81, 0x40, 0x0, 0x7, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "2518e0b51fa82db58a2f6cce4e5958a1"}]}, 0x7, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x403}}, {0xe1, &(0x7f0000000180)=@string={0xe1, 0x3, "dd6d01d9216cee9772ab191613360a868096c4a0b92136e28cfa878dbe3712a9079f72c97e0d80782872961b7ae59172bdf2c5595da69397b5c7e226948167be1477939703a531fffd49164dc6113ce0520f49c3fc931f00efbee0c397a339f775aa50dfb0174728a4035851eb72a273a3e11d474fe5c5d7525252f1376403c89969c87b51b5e0acffe727ededbf7e1eed54babec6ed1b3f6bf5d94e107fd20e1fa7fead85b8b1c9184a133e3c23f99215589e48c91bcf5d448c244ac3813ccf4f42bfd4dc220a1318dc0713bdb17060cadba60c2310103672f466a3863269"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x280a}}, {0x1e, &(0x7f00000002c0)=@string={0x1e, 0x3, "4df2af3c410730585605f64f9e6640b8a2b265c2c3e01e63ac8ffde5"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x380a}}, {0x1d, &(0x7f0000000380)=@string={0x1d, 0x3, "24d8f03dd7a562aa68dacd93fd39cbb7416f4d1a5dbdfa82bd70b9"}}]}) (async) pipe2$watch_queue(&(0x7f0000000440), 0x80) (async) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) (async) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000005c0)=@userptr={0x5, 0xa, 0x4, 0x0, 0x9, {}, {0x2, 0x8, 0xd, 0x8, 0x7, 0xd, "adc52155"}, 0x9, 0x2, {}, 0x4, 0x0, r0}) (async) 5.927685715s ago: executing program 1 (id=4302): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x22020600) shutdown(0xffffffffffffffff, 0x0) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000340)={0xc0}) 5.596561053s ago: executing program 1 (id=4303): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x4) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0xa) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000080), 0x0, 0x400800) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f0000000200)={0x2, 0x9, 0x49, &(0x7f0000000180)=""/73}) landlock_restrict_self(r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6b}, 0x30, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000000)={0x210a, r2}, 0x0) landlock_restrict_self(r3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r4 = syz_usb_connect$uac3(0x3, 0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="12010003000000403512100040000102030109028a000301046008080b0001012430010904000000010130000a2401f5260005000000132403050004030306070000000400010004000924050602"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$uac3(r4, &(0x7f00000000c0)={0x14, &(0x7f0000000980)=ANY=[], 0x0}, 0x0) 5.316878869s ago: executing program 3 (id=4304): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e2e000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x113003) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002900)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x800}, 0x1c, 0x0}}], 0x1, 0x4000000) r2 = open_tree(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x109}) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x6a, 0x3, 0xfffffff4, 0xb5a3664e6e5b4adc) syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000) syz_open_dev$dri(0x0, 0x0, 0x40) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="7400000002060104000000000000000006000002050005000200000005000400000000001400078008001240001000000800134000005bad0500010007000000050001000700000009000200"], 0x74}}, 0x4000004) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}, 0x1, 0x0, 0x0, 0x48040}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010013000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 5.119810822s ago: executing program 3 (id=4305): socket$packet(0x11, 0xa, 0x300) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f00000007c0)={@random="e90c610faca2", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0xfffe, 0x27, 0x0, @gue={{0x2, 0x0, 0x2, 0x1}}}}}}}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000300)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x2, 0x8, 0x11, 0x0, @empty, @empty}, {0x4000, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "2a995ffbee74ab1b3690842deee3df48f8806827d5c763698c4c288abc85bfcc", "9f6cf565ebbd4ddfc4f9c023b431968db6dbc868705956f8baf975b8cb6e17048850e8e89f732bced1e3baee50e5acb8", "112c482ee3d37cb1a7a31c450e403a6ee32477eaeb41d283c8618b26", {"6652725f56c59b04563b19a79d293550", "25b048c89cb27902d8d629c56b49c550"}}}}}}}, 0x0) 5.000817926s ago: executing program 1 (id=4306): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3ca888001000010400eeffff11ffffffff00", @ANYRES32, @ANYBLOB="01000000010000001c0012000c00"], 0x3c}}, 0x0) 5.000203153s ago: executing program 3 (id=4308): syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f0102030109022d00010000000009040000032eb47d000905f9ffffff00000009050f94f9a5fe793958109f93a04ca1e9772b1dd6124b19cc9cb0230bdadf25ee80e07021bef26151b5a2d4533529145b23f07fd5e1e8d0bebefdf4d3b65ee91f3df0c6c155efb5d17f833baaf6f304b73c74ab0de7810ddb997dfccefded39083fa8349b2e7379892cdda44276d5abc24ad15fd1bf9a044fa3cd5fc87386228752762859a69395824cb0532f21d2669132c15f01f28d8bb7c68d826b2eda79c4c8a416c87fff818f3d4a4fd383e3b40bcd480553"], 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000040)={0x2000, 0x101, 0x0, 'queue0\x00'}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x5, 0x0, 0x3, 0x200000000180, 0x31b9, 0x6, 0xff, 0x58, 0x81, 0x5, 0x0, 0x8000029, 0x0, 0x2000000000006, 0x100, 0xbdc], 0x1, 0x43102}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x4]}}], 0x1c) 4.951176041s ago: executing program 1 (id=4309): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000000780)='^', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x4e20, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r3, 0xda90) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000cb78a405e0483020b990102030109022400010000000009040000025c291d1a090509000000e9ffff08050b01"], 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="1800000018140100000000000000a94a525ddcb40001080001000100007428b665a907ca871e2f50244da57f58c26550e9c000000000b93cbb79a6f3d1680de01b00f30798"], 0x18}, 0x1, 0x0, 0x0, 0x200040c0}, 0x400c044) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000008c0)={0x0, @in6={{0xa, 0x4e20, 0x6, @empty, 0x401}}, 0x2, 0x9}, &(0x7f0000000980)=0x90) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000380)=""/207) sendmsg$inet(r6, &(0x7f0000000180)={&(0x7f0000000300), 0x10, 0x0, 0x0, &(0x7f0000000340)=[@ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0x10, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}], 0x28}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x8c0, 0x2000) ioctl$DRM_IOCTL_GEM_OPEN(r7, 0xc010640b, &(0x7f0000000200)) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2400, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) io_uring_setup(0x3f81, &(0x7f0000000140)={0x0, 0xd738, 0x4, 0x1, 0x4e, 0x0, r9}) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4040) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x1, 0x2) 4.820983077s ago: executing program 0 (id=4311): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip_mr_cache\x00') lseek(r0, 0x9, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001040)={&(0x7f0000001000)=[0x0, 0x0, 0x0], 0x3}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = getpid() r3 = syz_usb_connect$uac3(0x2, 0xda, &(0x7f0000000d00)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x499, 0x2003, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc8, 0x3, 0x1, 0xe1, 0xa0, 0x3, {0x8, 0xb, 0x1, 0x1, 0x1, 0x21, 0x30, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x33, 0x3}, [@multiply_unit={0xb, 0x24, 0xd, 0x4, 0x8, 0x4, 0x1}, @cluster_info_segment={0x6, 0x20, 0xff, 0x86, 0x5}, @source_unit={0xc, 0x24, 0xb, 0xe, 0x1, 0x0, 0x4, 0x1}, @source_unit={0xc, 0x24, 0xb, 0xf8, 0x2, 0x1, 0xbf, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x9, 0x1, 0x7, 0x3, "19f15a", "fbe9da"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0xce, 0x4, 0x1, 0x0, "b091073ba56e49"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x40, 0x5, 0x1, {0xa, 0x25, 0x25, 0xc6, 0x7f, 0x166e}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7f, 0x2, 0xf, 0x4, "", 'w.C'}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x3, 0x2, 0x80}]}, {{0x9, 0x5, 0x82, 0x9, 0x7d7, 0x5, 0xf, 0x2, {0xa, 0x25, 0x25, 0x8, 0x3, 0x6}}}}}}}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000e00)={0xa, 0x6, 0x310, 0x5f, 0x10, 0x8d, 0x20, 0x8}, 0xf, &(0x7f0000000e40)=ANY=[@ANYBLOB="050f03"], 0x3, [{0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x8c, &(0x7f0000000ec0)=@string={0x8c, 0x3, "feef497d66a67b4995150d9f2096d5cf8f14ae634a1454a3d93a78e11201fad8fff0d187f4648e19f70f3a1713a3c8db32a630d20438b51f82f24efb61d65ff1d85a5ada08fdcdb45a4cb7b6455072866b3345b3d5649fcd41b9ec2e8d4a7d9490fb86ccd4de1e1ffe06cb5270619b41b188202646958d32a557a4f4e3f75f0475cb58907303c4c61f94"}}, {0x36, &(0x7f0000000f80)=@string={0x36, 0x3, "a35cbc6cbd14a13f9bd3cf1941bbce1b0f9c7e4a61bedf4b252827ec47351cd41f362d8f9659f6725f545f45c4580c4f9bd20cb4"}}]}) syz_usb_disconnect(r3) syz_pidfd_open(r2, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x1, 0x46a, 0xffdfffff, 0x5}) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default trusted:syz -92'], 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000200)="2abd09f90d00d589551407cd47716c95d9bfc291df42ca67fe85b8a109d56cad4de282382ae9b46cb362510456b8a914fa8f2ef56424c3897737d74dee0e1c029016306ac55d9a41815936b6526589e2c0209d0c2588d4d7212244dcb092c7ceef4cad80d572c65897deb9bde29927", 0x6f}, {&(0x7f00000002c0)="61dd2a1affa639b752d1f90000000000000000", 0x13}, {&(0x7f0000000900)="8e744e94e879bd2811315a3896e4e16eacb34bdf050fb2f2016348735ecc8243e30b1d2e4c5854472deadcaaf46f8d7e597ae8c91f75c01e188151d7f32ec1b164acfffa4d12adfe76f2bc612b7627673aff60c419f2df0919359506c3ec9a985b46f2a2051a423a2ce8713a6bd6375052fee24ce1bcffdd9b1c399a2109d1650a742c8965cfee1e30e541a32a6809ad66ec865c75a6f10bb4e2ffbcd58886257698bfd5fe428941e1e09fbe2d5146039789b4130ac40a59ddf6b03bb95b16a5e1e8515d670e375a61de426cfb2afa4fdc46560e7137903357b0734648ee31140354977c91099a2ec4f0aaba9bc60589e59e5213c4ca92a9f8701ca7355d112e6fd6e816b9c585007c78af5f2d2a3d1c71c82ca0669fdab2feac19e085901d3b3f3edd033f0826f26969cf6443598c4da0071a67bdfb27b7e0e6d611368ea0e9389eb95d57a9adb5452b355c4326a50fd4f3f238b59375e4d2633a10cf93945795b3f10a7ac3374498499f17d48e9a824745a3673aa20d33e4462131885338f83294b872606b5618b66840e59b26206826143fef27db81175502aac0fbe8da8de68506b3c27d2d3b2902d00a7189b67b1b2dda6eb5a93cbb824597e857e27056d7ea07604462e0cdd1354da7bf4acfb813404370633d19c1f988a5b99f050f3071b14dd24273f365313efca7b8679682626cbeff4610599c8cb9b5fe7ce6bd85688bfcc83b9a705e707fbdc45c8a39a3c72329fcbfe430fe1e25ea6122a5b996656336d31a698cc5c8aab385b963dc206d32ec257dd0c1f0144f2d754787617a0dedfdf6aeb874c261c1c39d45aa3f953828f4cacbf648dfb9c10e7e7f61f034842288dab273bc86162d9cd0f4b002410ae092f6192cb539a7e1bcfee356d17d8d6573efbf8fea3b1dc1f115a016d292731a5ed7e7218a6f9a084034135cd78514250f8d02d4d9f8091263d5372350158d464a20a5a1874771bf0893f60b2212c20dd0df88f8e368a3f37f03be8f33c254b936e81c43407bea0acf6eb091afda2d3fc9a840525b4aa63a2bd021a8b3751cf70ec378337ea74731fbd2303f8d0c1b2241bd41d0523a7d2b77e34fc3ea550e1d9e068c45f44d5420ba7620732f1b8c1980910bf63f92dc6092e68b1cf496dcbb71a70baa9de3753cf0fc73ea77df7504ae7d2f18ff85e0bf0ac83b4c1046185f00c1c141616c327e69f9fa56d9af6c203ead8f50f6c55769213ba9bd7e62fcb1c3ee798d26bb332f0d226112eb417fe7e4d2ff401f1ea3774500576fa47185a8cd30ebe646ca21f4d227a440ff0b312c77b58095d6cf9acf64835ab86cab78075ec52078b9ab5c43223369cb7ae5c87e51c4e3dde51f9110d7dc21908d6a5765740b82962bc8afc4240756f78865560d2b9754725cf6e42aef6b95d1f9d6ef6c2ff084c169b14c50fb27b8fc36", 0x3ff}], 0x3, 0x0, 0x0, 0x4008084}, 0x0) close(r4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x884, 0x0, 0x1, 0x0, 0xffffffff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2002, 0x8000056}}}}, [@NL80211_ATTR_TX_RATES={0x2fc, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x30, 0x4, 0xc, 0x48, 0x24]}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x7}, {0x6, 0x3}, {0x4, 0x1}, {0x4, 0x6}, {0x1, 0x9}, {0x7, 0x9}, {0x3, 0xa}, {0x5, 0x2}, {0x0, 0x6}, {0x0, 0x5}, {0x5, 0x3}, {0x5, 0x8}, {0x5, 0x3}, {0x5, 0x8}, {0x7, 0x1}, {0x2, 0x7}, {0x1, 0x9}, {0x4, 0x7}, {0x4, 0x3}, {0x2, 0x3}, {0x1, 0x6}, {0x0, 0x3}, {0x2, 0xa}, {0x6, 0x2}, {0x0, 0x9}, {0x1, 0x4}, {0x3}, {0x7, 0xa}, {0x2, 0x5}, {0x3, 0x2}, {0x1}, {0x6, 0x5}, {0x2, 0x8}, {0x6, 0x8}, {0x2, 0x2}, {0x5, 0x9}, {0x2, 0x4}, {0x5, 0x9}, {0x1, 0x3}, {0x4, 0xa}, {0x1, 0x2}, {0x0, 0x1f}, {0x1, 0x7}, {0x4}, {0x3, 0x8}, {0x0, 0x5}, {0x1}, {0x2}, {0x5, 0x5}, {0x3, 0x4}, {0x7, 0x8}, {0x4, 0x5}, {0x6, 0x5}, {0x0, 0x8}, {0x5, 0x1}, {0x4, 0xa}, {0x3, 0x4}, {0x4, 0x6}, {0x3, 0x1}, {0x0, 0x4}, {0x6, 0x8}, {0x6, 0xa}, {0x6, 0x4}, {0x7, 0x8}, {0x5, 0x3}, {0x7, 0x1}, {0x2, 0x7}, {0x4, 0xa}, {0x1, 0x9}]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x6, 0x24, 0x16, 0x9, 0x5, 0x48, 0x24, 0x12, 0xb, 0x7e, 0x79, 0x1b, 0xc, 0x6, 0x2, 0xb, 0xc, 0x6, 0x16, 0x3]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x36, 0x24, 0x1, 0x3, 0x2]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x9, 0x2, 0x1ff, 0xc4, 0x80, 0xf, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x8, 0x7, 0x0, 0x2, 0x2, 0x10, 0x9]}}]}, @NL80211_BAND_2GHZ={0xc0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3b, 0x2, [{0x2, 0x3}, {0x2, 0xa}, {0x2, 0x9}, {0x5, 0x5}, {0x1, 0x7}, {0x2, 0x4}, {0x7, 0x1}, {0x1, 0x1}, {0x4, 0x9}, {0x3, 0x2}, {0x2, 0x1}, {0x6}, {0x6, 0x5}, {0x1, 0x9}, {0x1, 0x5}, {0x1, 0x4}, {0x4}, {0x5, 0x7}, {0x3, 0x8}, {0x6, 0x8}, {0x0, 0x5}, {0x2, 0x7}, {0x1, 0x3}, {0x7, 0x2}, {0x4}, {0x0, 0x2}, {0x3, 0x5}, {0x4, 0x5}, {0x5, 0xa}, {0x6}, {0x3, 0x5}, {0x2, 0x7}, {0x5, 0x6}, {0x5, 0x8}, {}, {0x7, 0xa}, {0x6}, {0x0, 0xa}, {0x3, 0x1}, {0x7}, {0x5, 0xa}, {0x5, 0x1}, {0x4}, {0x3, 0xa}, {0x0, 0x8}, {0x0, 0x3}, {0x1, 0xa}, {0x6, 0x9}, {0x1, 0x7}, {0x2, 0x8}, {0x6}, {0x1, 0x3}, {0x5, 0x3}, {0x3, 0x9}, {0x7, 0x6}]}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x4, 0x4}, {0x2, 0x1}, {0x5, 0x7}, {0x7, 0x8}, {0x0, 0x5}, {0x5, 0x3}, {0x5, 0x8}, {0x5, 0x3}, {0x6, 0x3}, {0x3, 0x7}, {0x4, 0x3}, {0x6, 0x1}, {0x2, 0x3}, {0x4, 0x7}, {0x6, 0x2}, {0x0, 0x2}, {0x5, 0x8}, {0x4, 0x4}, {0x5, 0x2}, {0x6, 0x8}, {0x1, 0x9}, {0x3, 0x8}, {0x0, 0x6}, {0x7, 0x1}, {0x2, 0x5}, {0x4, 0x9}, {0x1}, {0x1, 0x3}, {0x0, 0x4}, {0x5, 0xa}, {0x6, 0x8}, {0x4, 0x9}, {0x1, 0x7}, {0x0, 0x6}, {0x6, 0x9}, {0x7, 0x9}, {0x7, 0x1}, {0x1, 0x6}, {0x4, 0x7}, {0x0, 0x7}, {0x1, 0x4}, {0x1, 0x7}, {0x0, 0x8}, {0x6, 0x5}, {0x5}, {0x0, 0x1}, {0x5, 0x4}, {0x1, 0x5}, {0x0, 0x6}, {0x4, 0x5}, {0x3, 0x4}, {0x0, 0x6}, {0x4, 0xa}, {0x1, 0x5}, {0x3, 0x7}, {0x2, 0x3}, {0x1}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x66c, 0x7, 0x84a8, 0x1ff, 0x6, 0x9, 0x7fff, 0x5]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x16, 0x12, 0xb, 0x5, 0x5, 0x12, 0x16, 0x60, 0x9, 0x18, 0x36, 0x18, 0x1b]}]}, @NL80211_BAND_5GHZ={0xb0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x6c, 0x1, 0x48, 0xb, 0x5, 0x3, 0x4]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x5, 0x36, 0x10, 0x48, 0x1, 0xb, 0x48, 0x3, 0x36, 0x4, 0x0, 0x1b, 0x0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x4, 0xcbd5, 0x3, 0x98, 0x8, 0x6, 0xd63d]}}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x3, 0x3}, {0x1, 0x4}, {0x1, 0x8}, {0x2, 0x6}, {0x7, 0x2}, {0x5, 0x7}, {0x6, 0x4}, {0x6, 0x4}, {0x1, 0x3}, {0x7, 0x7}, {0x6, 0x3}, {0x0, 0x5}, {0x4, 0x3}, {0x7, 0x2}, {0x4}, {0x0, 0x1}, {0x7, 0x8}, {0x3, 0xa}, {0x7, 0x8}, {0x5, 0x4}, {0x1, 0xa}, {0x4, 0x1}, {0x6, 0x7}, {0x2, 0x7}, {0x1, 0x5}, {0x1, 0x1}, {0x2, 0xa}, {0x1, 0x8}, {0x3, 0x6}, {0x7, 0x7}, {0x7, 0x1}, {0x1, 0x4}, {0x6, 0x6}, {0x4}, {0x1, 0x3}, {0x0, 0x3}, {0x1, 0x5}, {0x0, 0xa}, {0x0, 0x5}, {0x4, 0x4}, {0x6, 0x8}, {0x3, 0x5}, {0x4, 0xa}, {0x5, 0x1}, {0x0, 0x6}, {0x2, 0x8}, {0x0, 0xa}, {0x2}, {0x1, 0x2}, {0x2, 0x3}, {0x4, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x9, 0xfffc, 0x9, 0x400, 0x8, 0x0, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x4, 0x200, 0xae, 0x70, 0x9, 0xbd4, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x3, 0x6}, {0x2, 0x8}, {0x2}, {0x1, 0x4}, {}, {0x4, 0x6}, {0x1, 0xa}, {0x1, 0x2}, {0x0, 0x1}, {0x5, 0x2}, {0x3, 0x8}, {0x2, 0xa}, {0x1, 0x9}, {0x0, 0x1}, {0x0, 0x2}, {0x5, 0x9}, {0x5, 0x9}, {0x2, 0x4}, {0x5, 0x5}, {0x4, 0x6}, {0x7, 0x7}, {0x2, 0x3}, {0x2, 0x8}, {0x6, 0x1}, {0x7, 0x6}, {0x6, 0x6}, {0x1, 0x4}, {0x1, 0x5}, {0x2}, {0x1, 0xa}, {0x4, 0x4}, {0x1, 0x5}, {0x6, 0x4}, {0x5, 0x9}, {0x5, 0x1}, {0x3, 0x9}, {0x6, 0x2}, {0x2, 0x2}, {0x6, 0x8}, {0x1, 0x2}, {0x1, 0x3}, {0x6, 0x9}, {0x7, 0x7}, {0x3, 0x4}, {0x3, 0x4}, {0x5, 0x5}, {0x7, 0xa}, {0x6, 0x2}, {0x0, 0x3}, {0x7}, {0x4, 0x3}, {0x3, 0x2}, {0x6, 0x3}, {0x0, 0x9}, {0x4, 0xa}, {0x0, 0x8}, {0x1, 0x1}, {0x1, 0x8}, {0x1, 0x2}, {0x0, 0x1}, {0x0, 0x4}, {0x1, 0xa}, {0x3, 0x9}, {0x5, 0x3}, {0x0, 0x9}, {0x0, 0x1}, {0x4, 0x9}, {0x0, 0x9}, {0x0, 0x4}, {0x3, 0x5}, {0x7, 0x9}, {0x0, 0xa}, {0x0, 0x1}, {0x3, 0x9}, {0x0, 0x1}, {0x4, 0x9}]}]}, @NL80211_BAND_5GHZ={0x84, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff8, 0x6b9, 0x2, 0x800, 0x2, 0x40, 0xd1, 0x18]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x0, 0x4}, {0x4, 0x1}, {0x2, 0x5}, {0x4, 0x1}, {0x3, 0x8}, {0x1, 0xa}, {0x6, 0x1}, {0x4, 0x7}, {0x5, 0x2}, {0x4, 0x8}, {0x0, 0xa}, {0x3, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff7, 0x4, 0xf10, 0x9, 0xfff4, 0x5, 0x0, 0x9]}}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x4, 0x5}, {0x7, 0x7}, {0x2, 0x4}, {0x4}, {0x7, 0x8}, {0x1, 0x2}, {0x1, 0x4}, {0x4, 0x9}, {0x6, 0x3}, {0x6, 0x6}]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x6, 0x1, 0x60, 0x18, 0x9, 0x9, 0x48, 0x3, 0x4, 0xb, 0x60, 0xb, 0x1b, 0x20, 0x5, 0x3, 0x60, 0x6]}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_ATTR_TX_RATES={0xe4, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x81, 0x1, 0x4, 0x8000, 0x6, 0x0, 0x5]}}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x6c, 0x30, 0x1b, 0xb, 0x24, 0x6c, 0x12, 0x6c, 0x18, 0x6c, 0x1b, 0x36, 0x6, 0x36, 0x18, 0x18, 0x60, 0xb, 0xb, 0x1b, 0x1, 0x4, 0x1, 0x3, 0x30, 0x1b, 0x60, 0x24, 0x24, 0x48, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xc300, 0x5, 0x59d2, 0x3, 0x2, 0x433, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xec80, 0x8, 0x8, 0x4, 0xfff9, 0x4, 0x8, 0x8]}}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x12, 0x2, [{0x4, 0x7}, {0x2, 0x6}, {0x5}, {0x0, 0x4}, {0x1, 0xa}, {0x2, 0x7}, {0x3, 0x2}, {0x1, 0x6}, {0x7, 0x1}, {0x2}, {0x3, 0x9}, {0x4, 0xa}, {0x0, 0x5}, {0x2, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1, 0x401, 0x9, 0x7, 0x3, 0x81, 0x7]}}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0xf0, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xb0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x7, 0x0, 0x5, 0x4, 0xfff9, 0xbc, 0x202]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x7, 0x1, 0x7, 0xff10, 0x7f, 0x108a, 0x10]}}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x5, 0x5}, {0x6, 0x6}, {0x5, 0x7}, {0x7, 0x1}, {0x0, 0x5}, {0x3, 0x7}, {0x2, 0x9}, {0x3, 0x6}, {0x7, 0x5}, {0x7, 0x8}, {0x7, 0x2}, {0x5, 0x4}, {0x1, 0x7}, {0x6}, {0x4, 0x3}, {0x4, 0x1}, {0x6}, {0x1, 0x8}, {0x2, 0x5}, {0x2, 0x2}, {0x0, 0x4}, {0x4, 0x9}, {0x6, 0x2}, {0x6, 0x1}, {0x0, 0x6}, {0x1, 0x2}, {0x3, 0x8}, {0x6, 0x3}, {0x2, 0x4}, {0x6, 0x3}, {0x4, 0x9}, {0x5, 0x7}, {0x1}, {0x6, 0x1}, {0x3, 0x1}, {0x4, 0x2}, {0x3, 0x2}, {0x6, 0x5}, {0x0, 0x5}, {0x1, 0x5}, {0x5, 0x5}, {0x4, 0x8}, {0x0, 0x9}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x2}, {0x2, 0x8}, {0x2}, {0x6, 0xa}, {0x5, 0x7}, {0x4, 0xa}, {0x0, 0x9}, {0x6, 0xa}, {0x6, 0x1}, {0x4, 0x5}, {0x1, 0x1}, {0x6, 0x6}, {0x3, 0x8}, {0x3, 0x7}, {0x1, 0x2}, {0x6, 0x4}, {0x2, 0xa}, {0x4, 0x3}, {0x0, 0x1}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x0, 0x5561, 0x8, 0x5, 0x7ae, 0xe2c, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x6c, 0x18, 0xb, 0x24, 0x9, 0x24, 0x48, 0x1b, 0x5, 0x6, 0x41f7f588a64eec38, 0x30, 0x7e, 0x18, 0x6, 0x36, 0x36, 0xb, 0x16, 0x48, 0x3, 0x36, 0x16, 0x6c, 0xc, 0x1]}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x1, 0x5, 0x48, 0x30, 0x0, 0x16, 0x36, 0x48, 0x48, 0x4, 0x6c, 0x24, 0x12, 0x16, 0x12]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe, 0x5, 0x1000, 0x3, 0x0, 0x39, 0xeb22, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0xdc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0x5, 0x6, 0x8, 0x7, 0x1e10, 0x0, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x24, 0x1b, 0x2, 0x48, 0x60, 0x47, 0x36, 0x60, 0x30, 0x9, 0x0, 0x9, 0x60, 0x4, 0x12, 0x30, 0x1, 0x2, 0x9, 0x48, 0x48, 0x5, 0x6d, 0x36, 0x16, 0xb]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x7, 0x4, 0x4, 0xfffa, 0xfff8, 0x3, 0xf01]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb9, 0x9, 0x6, 0x8000, 0x48, 0x4, 0x8, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xfff9, 0x80, 0xd, 0x6, 0x60c4, 0x7, 0xd]}}]}, @NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x9, 0x2, [{0x6, 0x3}, {0x1, 0x7}, {0x2}, {0x0, 0x9}, {0x5, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x8, 0x7ff, 0x7, 0x1, 0x3, 0xfff, 0x9]}}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x1f4, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x11, 0x2, [{0x3, 0x5}, {0x1, 0x8}, {0x4, 0x2}, {0x1, 0x1}, {0x5, 0x9}, {0x0, 0x7}, {0x0, 0x4}, {0x1, 0x2}, {0x2, 0x1}, {0x5, 0x8}, {0x2, 0x1}, {0x5, 0x6}, {0x7, 0x6}]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x9, 0x5, 0x36, 0x30, 0x2, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x6ba9, 0x5, 0x401, 0x9, 0x5, 0x2, 0x73f]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x778, 0x10, 0x1, 0xaa1a, 0xd, 0x9, 0x99e3, 0xd]}}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x1, 0x7, 0x3, 0xc00, 0xfffe, 0xc, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0x45b, 0x3, 0x8, 0x2, 0xe, 0x6]}}]}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}]}, @NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x34, 0x2, [{0x0, 0xa}, {0x7, 0x9}, {0x2, 0xa}, {0x1}, {0x0, 0xa}, {0x6, 0x2}, {0x5, 0xa}, {0x6}, {0x2, 0x3}, {0x5, 0x6}, {0x6, 0x8}, {0x7}, {0x1, 0x6}, {0x3, 0x7}, {0x0, 0x6}, {0x5, 0x9}, {0x4, 0x7}, {0x1, 0x9}, {0x3, 0x2}, {0x4, 0x3}, {0x5, 0x1}, {0x2, 0x8}, {0x4, 0x6}, {0x0, 0x4}, {0x1}, {0x3, 0x7}, {0x7, 0x1}, {0x5}, {0x4, 0x2}, {0x3, 0x3}, {0x7, 0x3}, {0x6, 0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x7, 0x4}, {0x4, 0x6}, {0x2, 0x3}, {0x1, 0x9}, {0x2, 0x1}, {0x2, 0x8}, {0x7, 0xa}, {0x0, 0x5}, {0x3, 0x2}, {0x1, 0x7}, {0x3, 0x3}, {0x1, 0x3}, {0x4}, {0x2, 0x9}]}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x7, 0xa}, {0x0, 0x6}, {0x3, 0x3}, {}, {0x1, 0x6}, {0x6, 0xa}, {0x0, 0x6}, {0x6, 0x7}, {0x1, 0x9}, {0x0, 0x4}, {0x1, 0x5}, {0x5, 0x3}, {0x0, 0x2}, {0x1, 0x5}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x3}, {0x6, 0x6}, {0x0, 0x7}, {0x2, 0x9}, {0x2, 0x5}, {0x0, 0x5}, {0x5, 0x6}, {0x2, 0x8}, {0x1, 0x1}, {0x0, 0x5}, {0x0, 0x1}, {0x7, 0xa}, {0x5}, {0x6, 0x6}, {0x2}, {0x1, 0x4}, {0x4, 0x9}, {0x5, 0x3}, {0x7, 0x9}, {0x7, 0x7}, {0x6, 0x4}, {0x0, 0x8}, {0x7, 0x8}, {0x4, 0x9}, {0x0, 0x3}, {0x0, 0x5}, {0x0, 0x7}, {0x5, 0x7}, {0x3, 0x4}, {0x7, 0x2}, {0x1, 0x8}, {0x4, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x0, 0x8, 0xfff7, 0x3, 0x0, 0x6, 0x4]}}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x361d, 0x4, 0x1, 0xfff8, 0x3ff, 0x1002, 0x80, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa5c, 0x9, 0xd0, 0x4, 0xff01, 0x8001, 0x9, 0xff]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x22, 0x2, [{0x5, 0x7}, {0x0, 0x1}, {0x1, 0x4}, {0x2, 0x8}, {0x6, 0x5}, {0x2, 0x5}, {0x5}, {0x7, 0x1}, {0x0, 0x8}, {0x4, 0x5}, {0x1}, {0x2, 0xa}, {0x1, 0x1}, {0x3, 0x8}, {0x7}, {0x2, 0x9}, {0x4, 0x3}, {0x5, 0x8}, {0x2, 0x4}, {0x1, 0x3}, {0x3, 0x4}, {0x0, 0x1}, {0x6, 0x1}, {0x0, 0x8}, {0x1, 0x7}, {0x3, 0x2}, {0x1, 0x4}, {0x4, 0x3}, {0x2, 0x7}, {0x5, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x16, 0x2, 0x16, 0x24, 0x48, 0x5, 0x16, 0x16, 0x12, 0x18, 0x6, 0x1, 0x30, 0x3, 0x5, 0x6, 0x3, 0x48, 0x4, 0x33, 0x6, 0x18, 0x2, 0x5e, 0x60, 0x3, 0xb, 0x30, 0xb, 0x60, 0x60]}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x0, 0xa}, {0x0, 0x2}, {0x1, 0x2}, {0x3, 0x1}, {0x1, 0x7}, {0x4, 0x6}, {0x0, 0x7}, {0x1, 0x9}, {0x5}, {0x7}]}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x3, 0x1}, {0x6, 0x8}, {0x7, 0x9}, {0x5, 0xa}, {0x3, 0x1}, {0x1, 0x5}, {0x2, 0x2}, {0x4, 0x5}, {0x2, 0x6}, {0x2, 0x3}, {0x7, 0x1}, {0x1}, {0x1, 0x4}, {0x0, 0x9}, {0x2, 0x3}, {0x6, 0x2}, {0x2, 0x7}, {0x1, 0x8}, {0x1}, {0x0, 0x9}, {0x5, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x48, 0x5, 0x36, 0xb, 0x2, 0x12, 0x5, 0x6c, 0x16, 0x1, 0x24, 0x60, 0x24, 0x60, 0x6, 0x12, 0x18, 0x24, 0x46, 0x6]}]}]}, @NL80211_ATTR_TX_RATES={0xbc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x2, 0x7, 0x5, 0x3, 0x60, 0xe5, 0x4]}}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2a, 0x2, [{0x0, 0x9}, {0x4, 0x1}, {0x7, 0x2}, {0x6, 0x5}, {0x3, 0x1}, {0x1, 0x4}, {0x4, 0x8}, {0x1, 0x9}, {0x4, 0x2}, {0x4, 0x9}, {0x1, 0x7}, {0x2, 0x9}, {0x3, 0x1}, {0x2, 0x7}, {0x3}, {0x0, 0x6}, {0x3, 0x8}, {0x3, 0x6}, {0x4, 0xa}, {0x4, 0x3}, {0x6, 0x7}, {0x4, 0x7}, {0x7, 0x8}, {0x0, 0xa}, {0x1, 0x3}, {0x6, 0x3}, {0x1, 0x4}, {0x6, 0x6}, {0x6, 0xa}, {0x2, 0x4}, {0x1, 0x7}, {0x5, 0x5}, {0x2, 0x4}, {0x0, 0x2}, {0x2, 0x4}, {0x2, 0x6}, {0x2, 0x8}, {0x1, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1, 0x7, 0xd, 0x33a4, 0x4, 0x0, 0x6e1c]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x7, 0x5}, {0x0, 0x4}, {0x2, 0x6}, {0x7, 0x2}, {0x7, 0x5}, {0x0, 0x1}, {0x5, 0x2}, {0x0, 0x1}, {0x1, 0x5}, {0x5, 0x3}, {0x2, 0xa}, {0x6, 0x2}, {0x6, 0x4}, {0x3, 0xa}, {0x4, 0x4}, {0x4, 0x8}, {0x2, 0x4}, {0x0, 0x9}, {0x1, 0x5}, {0x0, 0x5}, {0x3, 0xa}, {0x6, 0x1}, {0x0, 0x6}, {0x1, 0x8}, {0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xbf8, 0x3, 0xe, 0x6, 0x3, 0xfffd, 0x8, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x884}, 0x1, 0x0, 0x0, 0x4000065}, 0x4048000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = landlock_create_ruleset(&(0x7f00000003c0)={0x200, 0x0, 0x2, 0xc42, 0x4, 0x1}, 0x30, 0x1) landlock_restrict_self(r7, 0xe) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r9, 0xc0303e03, &(0x7f0000000180)={"000000149c0286e08ffad43c40fc0a000000ab65a29e23546aad0281b3aff5eb", r9, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r10, 0xc0383e04, &(0x7f0000000100)={""/32, 0x0, 0x0, 0xfffffffffffffedd, 0x0, 0x0}) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 4.728463935s ago: executing program 2 (id=4312): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={0x0, 0xa4}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048851}, 0x490) 4.637037297s ago: executing program 2 (id=4313): socket$inet6(0xa, 0x3, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000080)={0x2, 0x0, 0x81, 0x10001, @vifc_lcl_addr=@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r2 = add_key$user(&(0x7f0000000040), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000080)="f5", 0x12, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xd3, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 4.4317438s ago: executing program 5 (id=4314): bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0100000007000000060000000300000000010000", @ANYRES32, @ANYBLOB="4d760000e20cf3da3d7f21107b1e581aa00000001000"/33, @ANYRES32=0x0, @ANYRES32, @ANYRES64], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000023c0)=@bpf_lsm={0x1e, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = syz_io_uring_setup(0x38, &(0x7f00000000c0)={0x0, 0x1d2d, 0x13500}, &(0x7f0000000240), &(0x7f0000000040), &(0x7f0000000000)) io_uring_enter(r0, 0x4138, 0xe0a8, 0x1, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000021c0)=ANY=[@ANYBLOB="180000005a0001002100000000000000160000000400034d0692b4c678917e8c3ee4c0eb7d2365ea6b12905e0d74ef2ca0587c6d4d291823933b8822886381850940a0457ff31ecec832f5b8673d09e7cd73aa2286c0d7f410eb2f"], 0x18}}, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x82) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',']) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='f', @ANYBLOB=',,']) r3 = socket$inet(0x2, 0x801, 0x6) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r3, 0x0, r4, 0x0, 0x40000000003, 0x0) read$FUSE(r4, &(0x7f0000000100)={0x2020}, 0x2020) preadv(r4, &(0x7f0000002140), 0x0, 0x6, 0xe33f) getsockname(r4, &(0x7f0000002480)=@isdn, &(0x7f0000002340)=0x80) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c000000030a010800000000000000000a0000070900010073797a31000000000c00024000000000000000020400048018000480140003006772653a0000000000000000000000000a000700726f757465"], 0x84}, 0x1, 0x0, 0x0, 0x40080a5}, 0x20008040) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000002180)={'sit0\x00', &(0x7f0000002140)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x21, &(0x7f0000000440), 0x1) 3.989287787s ago: executing program 5 (id=4315): socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000080)='ceph\x00', 0x0) execve(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x1b, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7) socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000300)=ANY=[], 0x8) socketpair(0x1, 0x805, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) write$cgroup_subtree(r2, 0x0, 0x0) getsockopt$inet6_opts(r1, 0x29, 0x36, 0x0, &(0x7f0000000140)) socket(0x1, 0x1, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000006, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) tkill(0x0, 0x10810038) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet6(0xa, 0x3, 0xff) setuid(0xee01) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f00000010c0)=ANY=[@ANYBLOB="1808981400000000001100000400000000001000a88ef92d53682869c77660df202d0d2aaf3852035184c3bda9c29aa6c2a7d253bfdba5168b7c354ac5b8be7058743e975c013bd00195a6df830b7bda184a5973c11d6124742cb0f3cfd79d1dd92dde00ddec0c8badbfab8a1e457749fec1ce6c71eca7bf3be8052932c58302b9a40fb736fb6895dd93f9ea44a14f42156c5e7d9d5bfee2335a4a5cde9ec1f6c896a6c937a9185ce6be13075f540b0e8308f702377b3ab0ce7cceb7a7fe4aa13ff1f39bcf7694824828", @ANYRES32=r4, @ANYBLOB="0000000000000000b707000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090800000000007baaf0ff00000000bd8900000000000007080000f8ffffffbf9400000000000007040000f0ffffffb70200000800000018270000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9100000000000056070000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r5) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001000)='memory.events\x00', 0x275a, 0x0) 3.634304307s ago: executing program 5 (id=4316): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r0 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000000580)={&(0x7f00000000c0), 0x10, &(0x7f00000004c0), 0x300}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x23a, 0x101000) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r2, 0x5761, &(0x7f0000000600)) fsetxattr$security_capability(r1, &(0x7f00000000c0), &(0x7f0000000580)=@v2={0x2000000, [{0xfff, 0x6}, {0x8000, 0x2}]}, 0x14, 0x3) 3.324965928s ago: executing program 3 (id=4317): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) link(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x101100, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x68000000}, 0x0) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x9, @private1}}, 0xa0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x80fe) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0xfffffffc, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}}, 0x80, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYRESOCT=r1, @ANYRESOCT=r0], 0x18, 0x68000000}, 0x80fe) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = fsopen(&(0x7f0000000380)='hpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000200)='source', &(0x7f0000000400)='//\xf2/\x06\b\xa30\\\\\xea\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas\x9d\x14\xe3\x0f\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7Gl\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\n\x8cr8, {0x4}}, './file0\x00'}) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000100)=0x1, 0x4) sendmsg$NFT_BATCH(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1a3"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40040) r10 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io(r10, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {0x0, 0x410c}}}, 0x1c}, 0x1, 0x0, 0x0, 0x400c015}, 0x6000c041) syz_usb_control_io$rtl8150(r10, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x4) 3.211825449s ago: executing program 5 (id=4318): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f0000000300)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x23, 0x301, 0x270bd22, 0x25dfdbfa, {0x1}}, 0x14}}, 0xc004) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r11, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) listen(r9, 0xc) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r12, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r13, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r14, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r15, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r16, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r7, {0xc, 0xc}, {0xa6, 0xfff1}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x40000) syz_open_dev$vim2m(&(0x7f00000001c0), 0x400000000000008, 0x2) 2.752168154s ago: executing program 0 (id=4319): socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0xa, 0x1, 0x106) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000180)={0x0, 0x20, 0x0, 0x0, 0x800, 0x0, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0x7, 0x0, 0x0, 0x0, 0x0, 0x17f, 0x7f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 2.311018537s ago: executing program 0 (id=4320): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast1, 0x2}}}, 0x30) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000980), 0xfdef) splice(r0, 0x0, r2, 0x0, 0x81, 0x2) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000000540)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r4, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$can_bcm(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000480)={0x2, 0x100, 0x220f, {0x77359400}, {}, {0x2, 0x1}, 0x1, @can={{0x3, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "433a127efc014c01"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x41) socket$key(0xf, 0x3, 0x2) 2.136455326s ago: executing program 5 (id=4321): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000080)={0x2, 0x0, 0x81, 0x10001, @vifc_lcl_addr=@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r2 = add_key$user(&(0x7f0000000040), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000080)="f5", 0x12, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xd3, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 1.96481669s ago: executing program 0 (id=4322): r0 = memfd_create(&(0x7f0000000540)='\xef\x15\xe9F\x91N<\xd6\boSaW\x00', 0x5) lseek(r0, 0x8000000000000006, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0x7f) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000000c0)={0x1, 0x0, [{0x1, 0xd2bd, 0x100005, 0xe8e8, 0xfffffffa}]}) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f00000005c0)=0x9) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000001c0)={"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"}) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x8100000) 1.509933218s ago: executing program 0 (id=4323): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={0x0, 0xa4}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048851}, 0x490) 1.225754023s ago: executing program 0 (id=4324): r0 = socket$pppl2tp(0x18, 0x1, 0x1) syz_open_dev$dri(&(0x7f0000000100), 0x7, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) syz_emit_ethernet(0xdc, &(0x7f00000001c0)={@remote, @multicast, @void, {@mpls_uc={0x8847, {[{0xd471, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0xffffe, 0x0, 0x1}, {0xb, 0x0, 0x1}, {0x80}], @generic="295a14a226ddb2392296518b3322e845af08fc59012136aa9dd7fc99aa5c6dcee36197a272dd8b11ab470e6ea719336445a3e1a5cfd4de2718a8abb67394540b3213549ba9ac8f08e6f297c6cbc4d7e5a60f54ea2cf168183c47e7ca22edd21451935b6d0a7d9d2dbb15520d000f59e72a0b8c955775847f93e51d5a48386eefe583a50269f5964e4fba6b62d7ef3a97e58dda98ac33163aea8e75d6e87c4b68b348c32409c420f42d8152748f3c36b2fe9130d5676bf8d673a2"}}}}, &(0x7f00000002c0)={0x1, 0x1, [0xd29, 0xe15, 0x878, 0x55a]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r3 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r3, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r4 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r2) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="090100000000fbdbdf250700000014485be451e86f5700080000000041e1e35500000000000000f8000500140080000000"], 0x30}, 0x1, 0x0, 0x0, 0x804}, 0xc000) 1.112712134s ago: executing program 2 (id=4325): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec775000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000e001000010000000000000000000000000a20000000000a05400000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a01040000000000000000010000002400048020000180080001006f736600140002800500020000000000080001400000001408000b40000000000900010073797a300000000014000000110001"], 0xd4}}, 0x0) 1.085078785s ago: executing program 1 (id=4326): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) fdatasync(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000580001800d0001007564703a73797a300000000044000400200001000a004e23000000030000000000000000020000000000000002000000200002"], 0x6c}}, 0x0) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r3, {0x7, 0x26, 0x6caff549, 0xfffffffff323ca07, 0x800, 0xfffc, 0x1, 0x80, 0x0, 0x0, 0x1, 0x10001}}, 0x50) 793.698743ms ago: executing program 2 (id=4327): socket$packet(0x11, 0x3, 0x300) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x3c, 0x41, 0x107, 0x70bd27, 0xfffffdfe, {0x4, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x18, 0x2, 0x0, 0x1, [@typed={0x14, 0x19, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4) preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000000)=""/42, 0x2a}], 0x1, 0x33, 0x2000051b) 791.841597ms ago: executing program 1 (id=4328): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004010}, 0x20000040) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES16=r1], 0x0) r2 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) write$P9_RVERSION(r2, 0x0, 0xfffffcd9) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_usb_connect$cdc_ncm(0x0, 0x7b, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x2, 0x1, 0x7, 0x70, 0x1, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "b88024"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x4, 0xc0, 0xc8, 0xf5}, {0x6, 0x24, 0x1a, 0x7, 0x1e}, [@country_functional={0xa, 0x24, 0x7, 0x1, 0x4, [0x6, 0x2]}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x7f, 0x9e, 0x9c}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0xc, 0x7, 0xe}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x38, 0xf1, 0x10}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x3, 0x8, 0x5, 0x40, 0x5}, 0x5, &(0x7f00000006c0)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x81d}}, {0xc3, &(0x7f0000000440)=@string={0xc3, 0x3, "db274a527bfdad0ca572ce77863c7f9381d7edcfab3da4b68afacad5b3b3b4faeae85d6ecf9400269b30367c9d10973582e24d331555c8009d59c700355add53c5e588fe0932ac6eca1a4f27e95ff65548f7c68f077fad695fbe99bc0b790cc77508a8e59b119e3c23a6eea77ed23596e7431cbbca6bb55d1e27895e9a546aca8c52013fc7fa4581957b115403efe9d60af828fbfb3d868b361ee42a3320e1f62ecb3e4853ff0f16ca3187c10018545ec531fc7b69af0a2dad3a2289895998b2fc"}}, {0x8, &(0x7f0000000240)=@string={0x8, 0x3, "bb9cd0f2d75f"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x2809}}]}) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x0, 0x890e, 0x2, 0x2, 0x3d4}, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7e5b, 0x1, 0x0, 0x1be, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x30dc, 0x80, 0x0, 0x29e, 0x0, r2}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x220, 0x2, 0x3, 0x38c, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6ae5, 0x8, 0x2, 0x233, 0x0, r2}}], 0x4, &(0x7f0000001a40)={0x2e, 0x6a, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x3}, 0x0, 0x0, '\x00', {0x1, 0xbe7, 0x0, &(0x7f0000000a40)=@buf_max_buf="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"}}, &(0x7f0000001ac0)) syz_io_uring_setup(0xd3a, &(0x7f0000001b00)={0x0, 0x9dae, 0x10000, 0x3, 0x34, 0x0, r4}, &(0x7f0000001b80), &(0x7f0000001bc0), &(0x7f0000001c00)) sendmsg$NL80211_CMD_ASSOCIATE(r3, 0x0, 0x20004c00) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c00000000000014"], 0x30}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c000000020603000000000000000000020000001c0007800800064000000001050015000200000008001240000040000500010006000000050005000200000005000400050000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000009e7569f2e6122c30820699471faa123fc574414033583562bef03c5b01b30ecffcdb110bd751d861d1fe850e7c16a1"], 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000001d40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001c40)={0xb0, 0x1, 0x2, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x84a77d7d}, @CTA_EXPECT_MASK={0x38, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x40}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xffffffff}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @mcast1}}}]}, @CTA_EXPECT_MASK={0x10, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0xb0}}, 0x8014) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="64000000090603000000000000000000020000003c0007800c000180080001407f0000010c001480080001400a0101000600044013880000060005403a9800000500070006000000080006400000000105000100060000000900020073797a310001010a421b211f6cdffaa7c8ec2255bab001"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 609.048552ms ago: executing program 2 (id=4329): bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@loopback, 0x0, 0x4, 0x1, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x2, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x4}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}}, 0x8004850) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x4040095}, 0x40010) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) 262.714557ms ago: executing program 5 (id=4330): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f00000001c0)={0xdddd0000, 0x18000, 0x9fef19c9430e26b8}) socket$nl_rdma(0x10, 0x3, 0x14) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x2b, 0x1, 0x1) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="400004001000ffff2abd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fda65f052100000020001280080001006774700014000280080003000100000008000100", @ANYRES32=r6, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x2000c000) write$binfmt_aout(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="03070000ba000000"], 0xc8) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f00000000c0)={0xa4, 0x0, 0x1}) setsockopt$inet6_tcp_int(r8, 0x6, 0x8, 0x0, 0x20) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000005c0)={[0x7, 0x7, 0xa, 0x4000000000000e52, 0x800000000001, 0x5459, 0x1041, 0x200200000006, 0x8, 0x400000001, 0x4, 0x10000fffffffe, 0x3, 0x40000000006, 0x8000000000005, 0x800040069], 0x54000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r9, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) listen(r9, 0x5) r10 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r10, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000040)) r11 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r11, &(0x7f0000000300)={0x2, 0x4e20, @loopback}, 0x10) shutdown(r11, 0x2) 33.234658ms ago: executing program 3 (id=4331): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)={0x1c, r1, 0x5, 0x3000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 0s ago: executing program 2 (id=4332): pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0xc) (async) cachestat(r0, &(0x7f0000000040)={0x3, 0x7}, &(0x7f0000000080), 0x0) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x88, r3, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_SETUP={0x14, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5, 0x1, 0x1}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}]}, @NL80211_ATTR_TX_RATES={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}], @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BSS_BASIC_RATES={0x21, 0x24, [{0x2, 0x1}, {0x36, 0x1}, {0x1, 0x1}, {0x36, 0x1}, {0x3, 0x1}, {0x18}, {0x16}, {0x1, 0x1}, {0x5, 0x1}, {0x12}, {0x12}, {0x1b, 0x1}, {0x6c}, {0x18, 0x1}, {0x24}, {0x1, 0x1}, {0x0, 0x1}, {0x85693728a9362454, 0x1}, {0x30}, {0xb, 0x1}, {0x48}, {0x24, 0x1}, {0x36, 0x1}, {0xb}, {0x16}, {0x6, 0x1}, {0x1b, 0x1}, {0x6c}, {0x24, 0x1}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8080}, 0x8044001) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000280)={{0x0, 0x0, 0x8, 0xa0, 0x5, 0x469, 0x3ff, 0x7fff, 0x3, 0x80000001, 0x3, 0x2, 0x1, 0x1, 0x7}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000000340)={{r4, 0x7, 0x8, 0x3, 0x2, 0x7, 0x4, 0x4, 0x1ab, 0x1, 0x8, 0x8, 0x4, 0x4e, 0xfd9e}}) (async) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x920080}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x14, r3, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$NILFS_IOCTL_SET_SUINFO(r1, 0x40186e8d, &(0x7f0000001480)={&(0x7f0000001440)=[{0x7, 0x2, 0x0, {0x0, 0x8, 0x1}}], 0x1, 0x20, 0x101, 0x1e}) (async, rerun: 64) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f00000014c0)={{0x2b, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x3, 'dh\x00', 0x1, 0x91c1, 0x48}, {@local, 0x4e22, 0x4, 0x5, 0x3ff, 0x3ff}}, 0x44) (async, rerun: 64) r5 = accept4$unix(r1, &(0x7f0000001540)=@abs, &(0x7f00000015c0)=0x6e, 0x800) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r2) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000001680)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000001780)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x1006400}, 0xc, &(0x7f0000001740)={&(0x7f00000016c0)={0x7c, r6, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffff8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x11}, 0x8004) (async) r8 = socket(0x2b, 0x80000, 0xc2e) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCOUTQ(r9, 0x5411, &(0x7f0000001800)) (async) sendmmsg$inet(r10, &(0x7f0000001c80)=[{{&(0x7f0000001840)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000001b40)=[{&(0x7f0000001880)="b0340fe45553fc763767a9ec8608f43e008e6f", 0x13}, {&(0x7f00000018c0)="fb90e7d44a3f8e60f0a2dd86f27bc03a8aa2b18b84602b435357f13f7ef2899fa47e87072b353bcc2ec803c35e757087aa5247a2fe092504303966e31cb488dbb1211657b7948d06d78b84bd1359859fca4452761cdf727aa1e8a5ddb20ddeb3b9825495370777162ad052ab2e45c7", 0x6f}, {&(0x7f0000001940)="a5ef607639c38006d55855552f202551e8b1c7d84a8b4d3ad70330cbd7b55b5bb7455e107c3703216aa5a15f548c7c4900aa41acc4028ba03b2fe1589863912ae1b6ddf584749d857151eaa926add1992d3070b02a33a6e2007e639b735a1311e72a1136f5892331cb9d48e5e5f4e600ce9837db76670959faa0c1115454af43185467f9800b4c7c1df9f5b98d8dedc2ae91c4264f715bdf5c81082c46f459a32d9ab85b7c390f8093d5b957d6fffcb4f43a99099febbf224499747cf2e680ef3c712765647bdea50a2b4b8b7819a5e978533591118284a8d84b20d941288e00469aef89ce8c6d4053", 0xe9}, {&(0x7f0000001a40)="f4d3e7764c0c34f6903a217e7f8746d1a5a785e844dd9bb5b2608b881424544ab4d186d3d4dd6511117f75e5431af8de7fad7f93ca6b78b06884fcea8998db2c948ff8bf69602505dc6e88fa374a0afa580f5d9a63c82d8f0d3591cb5fc511f153df7a08cce3ca6d97097a81a03fd1a07494c0a47d145b5f127d3db13b05403f524ce1479ef954acd3b7130c0ceb28e506c8f8cd276715348736144214f2b7e2d448c5166df06c9bcf306dd88855efede953881aadf8783596e3e9b370d087d68e796dffb116b95276e2c21dcf9bb254b82aee386f", 0xd5}], 0x4, &(0x7f0000001b80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1000}}, @ip_ttl={{0x14, 0x0, 0x2, 0xed2}}, @ip_retopts={{0x50, 0x0, 0x7, {[@generic={0x44, 0xe, "7490dd502240bc9a06c08437"}, @lsrr={0x83, 0x13, 0xa6, [@empty, @private=0xa010101, @loopback, @remote]}, @end, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xe, [{@multicast1, 0xa6}, {@dev={0xac, 0x14, 0x14, 0x11}, 0xffff5219}, {@private=0xa010101, 0xfb}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xd31}}, @ip_ttl={{0x14, 0x0, 0x2, 0x800}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @rand_addr=0x64010102, @broadcast}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0xe8}}], 0x1, 0x40) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000001dc0)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d00)={0x6c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x9, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x3}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x4}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x91}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) (async) getsockopt$IP_VS_SO_GET_DAEMON(r8, 0x0, 0x487, &(0x7f0000001e00), &(0x7f0000001e40)=0x30) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000001e80)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000001ec0)=0x1c) socket$inet_udp(0x2, 0x2, 0x0) (async) syz_open_dev$sndpcmc(&(0x7f0000001f00), 0xffffffff, 0x0) (async) r12 = syz_open_dev$ndb(&(0x7f0000001f40), 0x0, 0xc0403) ioctl$NBD_CLEAR_QUE(r12, 0xab05) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000001f80)) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000001fc0), r13) kernel console output (not intermixed with test programs): 9] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 961.320650][ T9] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid wMaxPacketSize 0 [ 961.320684][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 961.351159][ T9] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 961.351245][ T9] usb 6-1: Product: syz [ 961.351290][ T9] usb 6-1: Manufacturer: syz [ 961.351334][ T9] usb 6-1: SerialNumber: syz [ 961.481122][ T9] usb 6-1: config 0 descriptor?? [ 961.542836][ T9] usb 6-1: selecting invalid altsetting 0 [ 961.601836][T19522] nvme nvme0: failed to connect socket: -101 [ 961.760623][ T31] audit: type=1326 audit(1789466561.520:4209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19542 comm="syz.2.3988" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5499e159 code=0x7ffc0000 [ 961.760685][ T31] audit: type=1326 audit(1789466561.520:4210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19542 comm="syz.2.3988" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5499e159 code=0x7ffc0000 [ 961.840962][ T31] audit: type=1326 audit(1789466561.580:4211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19542 comm="syz.2.3988" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5499e159 code=0x7ffc0000 [ 961.841027][ T31] audit: type=1326 audit(1789466561.580:4212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19542 comm="syz.2.3988" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fda5499e159 code=0x7ffc0000 [ 961.841069][ T31] audit: type=1326 audit(1789466561.580:4213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19542 comm="syz.2.3988" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5499e159 code=0x7ffc0000 [ 961.841101][ T31] audit: type=1326 audit(1789466561.580:4215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19542 comm="syz.2.3988" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5499e159 code=0x7ffc0000 [ 961.841137][ T31] audit: type=1326 audit(1789466561.580:4216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19542 comm="syz.2.3988" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5499e159 code=0x7ffc0000 [ 961.867797][ T31] audit: type=1326 audit(1789466561.580:4214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19542 comm="syz.2.3988" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5499e159 code=0x7ffc0000 [ 961.867851][ T31] audit: type=1326 audit(1789466561.600:4217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19542 comm="syz.2.3988" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fda5499e159 code=0x7ffc0000 [ 961.976322][T14766] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 961.978522][T19526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 961.979353][T19526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 962.072942][T11752] usb 6-1: USB disconnect, device number 36 [ 962.126241][T14766] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 962.134062][T14766] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 962.134122][T14766] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 962.134140][T14766] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 962.213918][T14766] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.213941][T14766] usb 1-1: Product: syz [ 962.213953][T14766] usb 1-1: Manufacturer: syz [ 962.213964][T14766] usb 1-1: SerialNumber: syz [ 962.279353][T19545] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3989'. [ 962.339964][T14766] usb 1-1: config 0 descriptor?? [ 962.576688][T11199] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 962.746474][T11199] usb 3-1: Using ep0 maxpacket: 32 [ 964.609788][T19560] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3990'. [ 964.609832][T19560] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3990'. [ 964.894259][T11199] usb 3-1: unable to get BOS descriptor or descriptor too short [ 964.894321][T11199] usb 3-1: New USB device found, idVendor=0499, idProduct=1024, bcdDevice= 0.40 [ 964.895853][T11199] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 964.895953][T11199] usb 3-1: can't read configurations, error -71 [ 965.918980][T19577] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4000'. [ 965.924127][T14766] usb 1-1: 0:0 : invalid sync pipe. is_playback 1, ep 0b, bSynchAddress ff [ 966.038645][T19580] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 966.172556][T14766] usb 1-1: USB disconnect, device number 55 [ 966.228046][ T5883] udevd[5883]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 966.307132][ T922] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 966.415721][ T5702] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 966.456652][ T922] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 966.458229][ T922] usb 6-1: config 1 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 966.458256][ T922] usb 6-1: config 1 interface 0 altsetting 64 endpoint 0x3 has invalid maxpacket 320, setting to 64 [ 966.458276][ T922] usb 6-1: config 1 interface 0 altsetting 64 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 966.458296][ T922] usb 6-1: config 1 interface 0 has no altsetting 0 [ 966.459451][ T922] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 966.459469][ T922] usb 6-1: SerialNumber: syz [ 966.464006][T19574] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 966.470050][ T922] hub 6-1:1.0: bad descriptor, ignoring hub [ 966.470132][ T922] hub 6-1:1.0: probe with driver hub failed with error -5 [ 966.473580][ T922] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 966.595995][ T5702] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 966.597544][ T5702] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid wMaxPacketSize 0 [ 966.597576][ T5702] usb 2-1: config 0 interface 0 has no altsetting 0 [ 966.601495][ T5702] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 966.601523][ T5702] usb 2-1: Product: syz [ 966.601541][ T5702] usb 2-1: Manufacturer: syz [ 966.601559][ T5702] usb 2-1: SerialNumber: syz [ 966.657887][ T5702] usb 2-1: config 0 descriptor?? [ 966.696282][ T922] cdc_acm 6-1:1.0: ttyACM0: USB ACM device [ 966.697426][ T5702] usb 2-1: selecting invalid altsetting 0 [ 966.767403][ T922] usb 6-1: USB disconnect, device number 37 [ 966.876368][T19581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 966.882897][T19581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 966.983490][ T5702] usb 2-1: USB disconnect, device number 66 [ 967.090564][ T5883] udevd[5883]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 967.705858][ T9] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 967.855310][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 967.855834][ T9] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 967.857422][ T9] usb 6-1: config 0 has no interfaces? [ 967.860017][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.860035][ T9] usb 6-1: Product: syz [ 967.860046][ T9] usb 6-1: Manufacturer: syz [ 967.860058][ T9] usb 6-1: SerialNumber: syz [ 967.863581][ T9] usb 6-1: config 0 descriptor?? [ 967.985678][T11199] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 968.012716][T19601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4010'. [ 968.120269][T19597] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4008'. [ 968.135495][T11199] usb 1-1: Using ep0 maxpacket: 32 [ 968.137792][T11199] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 968.138510][T11199] usb 1-1: config 0 has no interfaces? [ 968.141479][T11199] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.141506][T11199] usb 1-1: Product: syz [ 968.141523][T11199] usb 1-1: Manufacturer: syz [ 968.141538][T11199] usb 1-1: SerialNumber: syz [ 968.143140][ T922] usb 6-1: USB disconnect, device number 38 [ 968.201489][T11199] usb 1-1: config 0 descriptor?? [ 968.325330][ T9] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 968.412076][T19599] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4009'. [ 968.477096][ T9] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 968.492378][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 968.492416][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 968.492444][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 968.495006][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.495034][ T9] usb 3-1: Product: syz [ 968.495051][ T9] usb 3-1: Manufacturer: syz [ 968.495067][ T9] usb 3-1: SerialNumber: syz [ 968.560684][ T9] usb 3-1: config 0 descriptor?? [ 968.561776][T19603] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 968.594776][ T922] usb 1-1: USB disconnect, device number 56 [ 968.695264][ T9] rc_core: IR keymap rc-streamzap not found [ 968.695285][ T9] Registered IR keymap rc-empty [ 968.697824][ T9] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 968.711724][ T9] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input170 [ 968.839947][T19603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 968.851879][T19603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 969.109672][ T922] usb 3-1: USB disconnect, device number 60 [ 969.345314][ T5702] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 969.495259][ T5702] usb 6-1: Using ep0 maxpacket: 32 [ 969.496413][ T5702] usb 6-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 969.498073][ T5702] usb 6-1: config index 0 descriptor too short (asked for 9, got 0) [ 969.498138][ T5702] usb 6-1: can't read configurations, error -22 [ 969.555281][ T9] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 969.635485][ T5702] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 969.706805][ T9] usb 2-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 969.707867][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.710171][ T9] usb 2-1: config 0 descriptor?? [ 969.716776][ T9] pwc: Samsung MPC-C10 USB webcam detected. [ 969.785243][ T5702] usb 6-1: Using ep0 maxpacket: 32 [ 969.786359][ T5702] usb 6-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 969.789007][ T5702] usb 6-1: config index 0 descriptor too short (asked for 9, got 0) [ 969.789045][ T5702] usb 6-1: can't read configurations, error -22 [ 969.789333][ T5702] usb usb6-port1: attempt power cycle [ 970.130204][ T5702] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 970.156281][ T5702] usb 6-1: Using ep0 maxpacket: 32 [ 970.156989][ T5702] usb 6-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 970.159306][ T5702] usb 6-1: config index 0 descriptor too short (asked for 9, got 0) [ 970.159381][ T5702] usb 6-1: can't read configurations, error -22 [ 970.285551][ T5702] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 970.308195][ T5702] usb 6-1: Using ep0 maxpacket: 32 [ 970.308961][ T5702] usb 6-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 970.310687][ T5702] usb 6-1: config index 0 descriptor too short (asked for 9, got 0) [ 970.310725][ T5702] usb 6-1: can't read configurations, error -22 [ 970.310999][ T5702] usb usb6-port1: unable to enumerate USB device [ 970.991636][T19634] FAULT_INJECTION: forcing a failure. [ 970.991636][T19634] name failslab, interval 1, probability 0, space 0, times 0 [ 970.991677][T19634] CPU: 0 UID: 0 PID: 19634 Comm: syz.2.4020 Tainted: G L syzkaller #0 PREEMPT(full) [ 970.991716][T19634] Tainted: [L]=SOFTLOCKUP [ 970.991723][T19634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 970.991733][T19634] Call Trace: [ 970.991739][T19634] [ 970.991747][T19634] dump_stack_lvl+0xe8/0x150 [ 970.991775][T19634] should_fail_ex+0x410/0x560 [ 970.991796][T19634] ? __pfx_dev_uevent_name+0x10/0x10 [ 970.991821][T19634] should_failslab+0xa8/0x100 [ 970.991843][T19634] __kmalloc_cache_noprof+0xa3/0x600 [ 970.991861][T19634] ? kobject_uevent_env+0x289/0x9e0 [ 970.991885][T19634] ? kobject_uevent_env+0x289/0x9e0 [ 970.991911][T19634] ? __pfx_dev_uevent_name+0x10/0x10 [ 970.991934][T19634] kobject_uevent_env+0x289/0x9e0 [ 970.991975][T19634] ? __pfx_dummy_pullup+0x10/0x10 [ 970.992015][T19634] gadget_bind_driver+0x599/0x9e0 [ 970.992049][T19634] ? __pfx_gadget_bind_driver+0x10/0x10 [ 970.992069][T19634] really_probe+0x254/0xae0 [ 970.992100][T19634] __driver_probe_device+0x1e8/0x360 [ 970.992131][T19634] driver_probe_device+0x4f/0x240 [ 970.992154][T19634] __driver_attach+0x339/0x600 [ 970.992175][T19634] bus_for_each_dev+0x23b/0x2c0 [ 970.992204][T19634] ? __pfx___driver_attach+0x10/0x10 [ 970.992223][T19634] ? __pfx_bus_for_each_dev+0x10/0x10 [ 970.992248][T19634] ? preempt_schedule_thunk+0x16/0x40 [ 970.992272][T19634] bus_add_driver+0x345/0x670 [ 970.992302][T19634] driver_register+0x23a/0x320 [ 970.992326][T19634] usb_gadget_register_driver_owner+0xf9/0x270 [ 970.992355][T19634] raw_ioctl+0x1541/0x41c0 [ 970.992381][T19634] ? tomoyo_path_number_perm+0x219/0x5f0 [ 970.992402][T19634] ? do_vfs_ioctl+0x116f/0x1530 [ 970.992422][T19634] ? __pfx_raw_ioctl+0x10/0x10 [ 970.992451][T19634] ? hook_file_ioctl+0x1f2/0x600 [ 970.992484][T19634] ? __fget_files+0x2a/0x420 [ 970.992509][T19634] ? __fget_files+0x2a/0x420 [ 970.992531][T19634] ? __fget_files+0x3a2/0x420 [ 970.992552][T19634] ? __fget_files+0x2a/0x420 [ 970.992577][T19634] ? bpf_lsm_file_ioctl+0x9/0x20 [ 970.992600][T19634] ? __pfx_raw_ioctl+0x10/0x10 [ 970.992620][T19634] __se_sys_ioctl+0xfc/0x170 [ 970.992638][T19634] do_syscall_64+0x166/0x520 [ 970.992657][T19634] ? trace_irq_disable+0x3b/0x140 [ 970.992673][T19634] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.992693][T19634] ? clear_bhb_loop+0x70/0xc0 [ 970.992713][T19634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.992730][T19634] RIP: 0033:0x7fda5499ddeb [ 970.992745][T19634] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 970.992759][T19634] RSP: 002b:00007fda557a2f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 970.992777][T19634] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007fda5499ddeb [ 970.992789][T19634] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000006 [ 970.992799][T19634] RBP: 00007fda557a3fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 970.992810][T19634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 970.992820][T19634] R13: 00002000000006c0 R14: 0000000000000000 R15: 0000000000000000 [ 970.992844][T19634] [ 971.307604][ T10] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 971.516444][ T10] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 971.561326][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.561360][ T10] usb 3-1: Product: syz [ 971.561406][ T10] usb 3-1: Manufacturer: syz [ 971.561424][ T10] usb 3-1: SerialNumber: syz [ 972.206284][ T10] rtl8150 3-1:1.0: couldn't reset the device [ 972.206696][ T10] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 972.249351][ T10] usb 3-1: USB disconnect, device number 61 [ 973.226999][ T189] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 973.246788][ T10] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 973.375304][ T189] usb 1-1: device descriptor read/64, error -71 [ 973.395324][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 973.396246][ T10] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 973.397004][ T10] usb 3-1: config 0 has no interfaces? [ 973.399741][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.399768][ T10] usb 3-1: Product: syz [ 973.399812][ T10] usb 3-1: Manufacturer: syz [ 973.399829][ T10] usb 3-1: SerialNumber: syz [ 973.467584][ T10] usb 3-1: config 0 descriptor?? [ 973.469224][ T31] kauditd_printk_skb: 556 callbacks suppressed [ 973.469241][ T31] audit: type=1326 audit(1789466573.230:4774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19665 comm="syz.5.4029" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3581f9e159 code=0x7ffc0000 [ 973.471488][ T31] audit: type=1326 audit(1789466573.230:4776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19665 comm="syz.5.4029" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3581f9e159 code=0x7ffc0000 [ 973.472886][ T31] audit: type=1326 audit(1789466573.230:4775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19665 comm="syz.5.4029" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3581f9e159 code=0x7ffc0000 [ 973.472943][ T31] audit: type=1326 audit(1789466573.230:4777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19665 comm="syz.5.4029" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f3581f9e159 code=0x7ffc0000 [ 973.473381][ T31] audit: type=1326 audit(1789466573.230:4778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19665 comm="syz.5.4029" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3581f9e159 code=0x7ffc0000 [ 973.538598][ T31] audit: type=1326 audit(1789466573.300:4779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19665 comm="syz.5.4029" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3581f9e159 code=0x7ffc0000 [ 973.538665][ T31] audit: type=1326 audit(1789466573.300:4780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19665 comm="syz.5.4029" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3581f9dec2 code=0x7ffc0000 [ 973.665237][ T189] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 973.693119][T19663] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4028'. [ 973.754524][ T31] audit: type=1326 audit(1789466573.510:4782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19665 comm="syz.5.4029" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3581f9e159 code=0x7ffc0000 [ 973.754584][ T31] audit: type=1326 audit(1789466573.510:4781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19665 comm="syz.5.4029" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f3581f9df57 code=0x7ffc0000 [ 973.771382][ T31] audit: type=1326 audit(1789466573.520:4783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19665 comm="syz.5.4029" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3581f9e159 code=0x7ffc0000 [ 973.830701][ T189] usb 1-1: device descriptor read/64, error -71 [ 973.860299][ T25] usb 3-1: USB disconnect, device number 62 [ 973.936563][ T189] usb usb1-port1: attempt power cycle [ 974.275614][ T189] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 974.295985][ T189] usb 1-1: device descriptor read/8, error -71 [ 974.415296][ T10] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 974.466738][ T9] pwc: send_video_command error -71 [ 974.466755][ T9] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 974.466830][ T9] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 974.480725][ T9] usb 2-1: USB disconnect, device number 67 [ 974.565263][ T189] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 974.586258][ T189] usb 1-1: device descriptor read/8, error -71 [ 974.586843][ T10] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 974.588757][ T10] usb 6-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 974.588795][ T10] usb 6-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 974.588815][ T10] usb 6-1: config 1 interface 0 has no altsetting 0 [ 974.591393][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.591417][ T10] usb 6-1: Product: syz [ 974.591445][ T10] usb 6-1: Manufacturer: syz [ 974.591456][ T10] usb 6-1: SerialNumber: syz [ 974.654310][T19676] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 974.654616][T19676] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 974.703233][ T189] usb usb1-port1: unable to enumerate USB device [ 975.148462][T19681] syzkaller0: entered promiscuous mode [ 975.148492][T19681] syzkaller0: entered allmulticast mode [ 975.191861][T19681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4033'. [ 975.234587][T19681] bond1: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 975.247511][T19681] bond1: entered allmulticast mode [ 975.295776][T19681] [U] v3f"S/4:XTzWtlW= [ 975.295891][T19681] [U] J"e:" [ 975.375675][T19686] fuse: Unknown parameter 'smackfsroot' [ 977.241863][ T10] rtl8150 6-1:1.0: couldn't reset the device [ 977.242199][ T10] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 977.273990][ T10] usb 6-1: USB disconnect, device number 43 [ 977.365358][ T922] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 977.517825][ T922] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 977.518998][ T922] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 977.519018][ T922] usb 1-1: config 1 has no interface number 0 [ 977.522635][ T922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.522656][ T922] usb 1-1: Product: syz [ 977.522669][ T922] usb 1-1: Manufacturer: syz [ 977.522682][ T922] usb 1-1: SerialNumber: syz [ 977.580744][ T922] usb 1-1: 3:1 : does not exist [ 977.580764][ T922] usb 1-1: 3:2 : does not exist [ 977.711759][T19723] tipc: Started in network mode [ 977.711793][T19723] tipc: Node identity 4a0b70d8b66d, cluster identity 4711 [ 977.711951][T19723] tipc: Enabled bearer , priority 0 [ 977.712659][T19723] syzkaller0: entered promiscuous mode [ 977.712680][T19723] syzkaller0: entered allmulticast mode [ 977.749786][T19723] tipc: Resetting bearer [ 977.751497][T19722] tipc: Resetting bearer [ 977.780531][ T922] usb 1-1: USB disconnect, device number 61 [ 977.810167][T19722] tipc: Disabling bearer [ 977.859351][T19721] syzkaller0: entered promiscuous mode [ 977.861468][T19721] syzkaller0: entered allmulticast mode [ 977.895695][ T5638] udevd[5638]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 978.173094][T19731] netlink: 'syz.2.4048': attribute type 4 has an invalid length. [ 978.173118][T19731] netlink: 17 bytes leftover after parsing attributes in process `syz.2.4048'. [ 978.333145][T19733] FAULT_INJECTION: forcing a failure. [ 978.333145][T19733] name failslab, interval 1, probability 0, space 0, times 0 [ 978.333175][T19733] CPU: 1 UID: 0 PID: 19733 Comm: syz.5.4049 Tainted: G L syzkaller #0 PREEMPT(full) [ 978.333197][T19733] Tainted: [L]=SOFTLOCKUP [ 978.333204][T19733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 978.333213][T19733] Call Trace: [ 978.333220][T19733] [ 978.333227][T19733] dump_stack_lvl+0xe8/0x150 [ 978.333284][T19733] should_fail_ex+0x410/0x560 [ 978.333316][T19733] should_failslab+0xa8/0x100 [ 978.333345][T19733] ? fuse_get_req+0x8ee/0xd40 [ 978.333431][T19733] kmem_cache_alloc_noprof+0xa1/0x600 [ 978.333458][T19733] ? fuse_get_req+0x8ee/0xd40 [ 978.333488][T19733] fuse_get_req+0x8ee/0xd40 [ 978.333517][T19733] ? kasan_save_track+0x4f/0x80 [ 978.333535][T19733] ? kasan_save_track+0x3e/0x80 [ 978.333553][T19733] ? __pfx_fuse_get_req+0x10/0x10 [ 978.333577][T19733] ? path_openat+0x677/0x1d60 [ 978.333592][T19733] ? do_file_open+0x23e/0x4a0 [ 978.333606][T19733] ? do_sys_openat2+0x115/0x200 [ 978.333625][T19733] ? __x64_sys_openat+0x138/0x170 [ 978.333644][T19733] ? do_syscall_64+0x166/0x520 [ 978.333663][T19733] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.333689][T19733] fuse_chan_send+0x2cf/0x1ad0 [ 978.333721][T19733] ? from_kgid+0x1c6/0x660 [ 978.333736][T19733] ? __pfx_fuse_chan_send+0x10/0x10 [ 978.333762][T19733] ? __pfx_from_kgid+0x10/0x10 [ 978.333781][T19733] ? pid_nr_ns+0xcb/0x140 [ 978.333799][T19733] ? fuse_req_prep+0x5cc/0x9b0 [ 978.333827][T19733] ? __kmalloc_cache_noprof+0x321/0x600 [ 978.333847][T19733] ? __fuse_simple_request+0x7a/0xb0 [ 978.333875][T19733] fuse_dentry_revalidate+0x546/0xb30 [ 978.333900][T19733] ? __pfx_fuse_dentry_revalidate+0x10/0x10 [ 978.333942][T19733] ? __d_lookup+0x66/0x790 [ 978.333967][T19733] lookup_open+0x12ab/0x1a40 [ 978.334006][T19733] path_openat+0x677/0x1d60 [ 978.334042][T19733] do_file_open+0x23e/0x4a0 [ 978.334062][T19733] ? __pfx_do_file_open+0x10/0x10 [ 978.334095][T19733] ? _raw_spin_unlock+0x28/0x50 [ 978.334109][T19733] ? alloc_fd+0x651/0x6c0 [ 978.334139][T19733] do_sys_openat2+0x115/0x200 [ 978.334162][T19733] ? __pfx_do_sys_openat2+0x10/0x10 [ 978.334184][T19733] ? ksys_write+0x242/0x270 [ 978.334210][T19733] ? __pfx_ksys_write+0x10/0x10 [ 978.334238][T19733] __x64_sys_openat+0x138/0x170 [ 978.334263][T19733] do_syscall_64+0x166/0x520 [ 978.334280][T19733] ? trace_irq_disable+0x3b/0x140 [ 978.334297][T19733] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.334314][T19733] ? clear_bhb_loop+0x70/0xc0 [ 978.334334][T19733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.334350][T19733] RIP: 0033:0x7f3581f9e159 [ 978.334366][T19733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 978.334381][T19733] RSP: 002b:00007f3582e78028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 978.334399][T19733] RAX: ffffffffffffffda RBX: 00007f3582225fa0 RCX: 00007f3581f9e159 [ 978.334411][T19733] RDX: 0000000000880cc2 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 978.334423][T19733] RBP: 00007f3582e78090 R08: 0000000000000000 R09: 0000000000000000 [ 978.334434][T19733] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 978.334444][T19733] R13: 00007f3582226038 R14: 00007f3582225fa0 R15: 00007f358234fa48 [ 978.334470][T19733] [ 978.742900][T19737] tipc: Enabling of bearer rejected, failed to enable media [ 979.005379][ T10] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 979.155228][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 979.156123][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=120a, bcdDevice=7b.2d [ 979.156164][ T10] usb 1-1: too many configurations: 152, using maximum allowed: 8 [ 979.161003][ T10] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 979.161042][ T10] usb 1-1: can't read configurations, error -61 [ 979.305815][ T10] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 979.365350][ T9] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 979.465264][ T922] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 979.465326][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 979.466183][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=120a, bcdDevice=7b.2d [ 979.466224][ T10] usb 1-1: too many configurations: 152, using maximum allowed: 8 [ 979.467928][ T10] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 979.468001][ T10] usb 1-1: can't read configurations, error -61 [ 979.468425][ T10] usb usb1-port1: attempt power cycle [ 979.526927][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 979.532782][ T9] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 979.533693][ T9] usb 3-1: config 0 has no interfaces? [ 979.551533][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.551554][ T9] usb 3-1: Product: syz [ 979.551566][ T9] usb 3-1: Manufacturer: syz [ 979.551577][ T9] usb 3-1: SerialNumber: syz [ 979.553996][ T9] usb 3-1: config 0 descriptor?? [ 979.615257][ T922] usb 6-1: Using ep0 maxpacket: 32 [ 979.616027][ T922] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 979.617452][ T922] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 979.620283][ T922] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.620305][ T922] usb 6-1: Product: syz [ 979.620316][ T922] usb 6-1: Manufacturer: syz [ 979.620328][ T922] usb 6-1: SerialNumber: syz [ 979.623594][ T922] usb 6-1: config 0 descriptor?? [ 979.624500][T19749] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 979.634665][ T922] hub 6-1:0.0: bad descriptor, ignoring hub [ 979.634744][ T922] hub 6-1:0.0: probe with driver hub failed with error -5 [ 979.648057][ T922] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input171 [ 979.767202][T19745] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4054'. [ 979.825351][ T10] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 979.845936][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 979.846634][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=120a, bcdDevice=7b.2d [ 979.846720][ T10] usb 1-1: too many configurations: 152, using maximum allowed: 8 [ 979.848755][ T10] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 979.848792][ T10] usb 1-1: can't read configurations, error -61 [ 979.894225][ T922] usb 6-1: USB disconnect, device number 44 [ 979.894298][ C1] usbtouchscreen 6-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 979.912592][T11199] usb 3-1: USB disconnect, device number 63 [ 980.006018][ T10] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 980.025975][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 980.026645][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=120a, bcdDevice=7b.2d [ 980.026690][ T10] usb 1-1: too many configurations: 152, using maximum allowed: 8 [ 980.028168][ T10] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 980.028193][ T10] usb 1-1: can't read configurations, error -61 [ 980.028449][ T10] usb usb1-port1: unable to enumerate USB device [ 980.488510][ T922] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 980.546737][T19769] FAULT_INJECTION: forcing a failure. [ 980.546737][T19769] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 980.546776][T19769] CPU: 0 UID: 0 PID: 19769 Comm: syz.5.4063 Tainted: G L syzkaller #0 PREEMPT(full) [ 980.546807][T19769] Tainted: [L]=SOFTLOCKUP [ 980.546816][T19769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 980.546830][T19769] Call Trace: [ 980.546839][T19769] [ 980.546849][T19769] dump_stack_lvl+0xe8/0x150 [ 980.546886][T19769] should_fail_ex+0x410/0x560 [ 980.546918][T19769] _copy_to_user+0x31/0xb0 [ 980.546950][T19769] simple_read_from_buffer+0xe1/0x170 [ 980.546987][T19769] proc_fail_nth_read+0x1bb/0x230 [ 980.547022][T19769] ? common_file_perm+0x20e/0x2b0 [ 980.547059][T19769] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 980.547097][T19769] ? rw_verify_area+0x24a/0x4c0 [ 980.547129][T19769] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 980.547164][T19769] vfs_read+0x213/0xa80 [ 980.547202][T19769] ? __pfx___mutex_lock+0x10/0x10 [ 980.547230][T19769] ? __pfx_vfs_read+0x10/0x10 [ 980.547266][T19769] ? __fget_files+0x2a/0x420 [ 980.547302][T19769] ? __fget_files+0x3a2/0x420 [ 980.547331][T19769] ? __fget_files+0x2a/0x420 [ 980.547371][T19769] ksys_read+0x150/0x270 [ 980.547407][T19769] ? __pfx_ksys_read+0x10/0x10 [ 980.547452][T19769] do_syscall_64+0x166/0x520 [ 980.547477][T19769] ? trace_irq_disable+0x3b/0x140 [ 980.547499][T19769] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.547522][T19769] ? clear_bhb_loop+0x70/0xc0 [ 980.547551][T19769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.547574][T19769] RIP: 0033:0x7f3581f5e98e [ 980.547595][T19769] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 980.547615][T19769] RSP: 002b:00007f3582e77fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 980.547639][T19769] RAX: ffffffffffffffda RBX: 00007f3582e786c0 RCX: 00007f3581f5e98e [ 980.547657][T19769] RDX: 000000000000000f RSI: 00007f3582e780a0 RDI: 0000000000000004 [ 980.547672][T19769] RBP: 00007f3582e78090 R08: 0000000000000000 R09: 0000000000000000 [ 980.547687][T19769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 980.547701][T19769] R13: 00007f3582226038 R14: 00007f3582225fa0 R15: 00007f358234fa48 [ 980.547737][T19769] [ 980.636324][ T922] usb 2-1: Using ep0 maxpacket: 8 [ 980.638352][ T922] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 980.644882][ T922] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 980.644957][ T922] usb 2-1: config 0 has an invalid interface number: 149 but max is -1 [ 980.645012][ T922] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 980.645072][ T922] usb 2-1: config 0 has no interface number 0 [ 980.645360][ T922] usb 2-1: too many endpoints for config 0 interface 149 altsetting 215: 148, using maximum allowed: 30 [ 980.645558][ T922] usb 2-1: config 0 interface 149 altsetting 215 endpoint 0x84 has an invalid bInterval 121, changing to 10 [ 980.645642][ T922] usb 2-1: config 0 interface 149 altsetting 215 endpoint 0x84 has invalid maxpacket 26477, setting to 1024 [ 980.645719][ T922] usb 2-1: config 0 interface 149 altsetting 215 has 1 endpoint descriptor, different from the interface descriptor's value: 148 [ 980.645795][ T922] usb 2-1: config 0 interface 149 has no altsetting 0 [ 980.652442][ T922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.652473][ T922] usb 2-1: Product: syz [ 980.652490][ T922] usb 2-1: Manufacturer: syz [ 980.652507][ T922] usb 2-1: SerialNumber: syz [ 980.681204][ T922] usb 2-1: config 0 descriptor?? [ 980.686822][T19761] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 980.707144][ T922] hub 2-1:0.149: bad descriptor, ignoring hub [ 980.707221][ T922] hub 2-1:0.149: probe with driver hub failed with error -5 [ 980.800090][ T922] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.149/input/input172 [ 980.986462][ T922] usb 2-1: USB disconnect, device number 68 [ 981.054283][T19773] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4065'. [ 981.086732][ T5702] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 981.236109][ T5702] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 981.237607][ T5702] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid wMaxPacketSize 0 [ 981.237638][ T5702] usb 3-1: config 0 interface 0 has no altsetting 0 [ 981.240931][ T5702] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 981.240960][ T5702] usb 3-1: Product: syz [ 981.240976][ T5702] usb 3-1: Manufacturer: syz [ 981.240993][ T5702] usb 3-1: SerialNumber: syz [ 981.251458][ T5702] usb 3-1: config 0 descriptor?? [ 981.309161][ T5702] usb 3-1: selecting invalid altsetting 0 [ 981.492575][T19771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 981.507979][T19771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 981.527745][ T10] usb 3-1: USB disconnect, device number 64 [ 981.971332][ T31] kauditd_printk_skb: 50 callbacks suppressed [ 981.971348][ T31] audit: type=1326 audit(1789466581.730:4834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19781 comm="syz.0.4068" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682df9e159 code=0x7ffc0000 [ 981.971834][ T31] audit: type=1326 audit(1789466581.730:4835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19781 comm="syz.0.4068" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682df9e159 code=0x7ffc0000 [ 981.972402][ T31] audit: type=1326 audit(1789466581.730:4836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19781 comm="syz.0.4068" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f682df9e159 code=0x7ffc0000 [ 982.034040][T11199] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 982.091275][ T31] audit: type=1326 audit(1789466581.850:4837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19784 comm="syz.0.4068" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f682df5e98e code=0x7ffc0000 [ 982.092799][ T31] audit: type=1326 audit(1789466581.850:4838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19781 comm="syz.0.4068" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682df9e159 code=0x7ffc0000 [ 982.092839][ T31] audit: type=1326 audit(1789466581.850:4839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19781 comm="syz.0.4068" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682df9e159 code=0x7ffc0000 [ 982.112472][ T31] audit: type=1326 audit(1789466581.870:4840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19781 comm="syz.0.4068" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f682df9e159 code=0x7ffc0000 [ 982.114115][ T31] audit: type=1326 audit(1789466581.870:4841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19781 comm="syz.0.4068" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682df9e159 code=0x7ffc0000 [ 982.159475][ T31] audit: type=1326 audit(1789466581.920:4842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19781 comm="syz.0.4068" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f682df9e159 code=0x7ffc0000 [ 982.168707][ T31] audit: type=1326 audit(1789466581.920:4843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19781 comm="syz.0.4068" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682df9e159 code=0x7ffc0000 [ 982.286129][T11199] usb 2-1: New USB device found, idVendor=0582, idProduct=0047, bcdDevice= 0.40 [ 982.306163][T11199] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 982.306211][T11199] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 982.313099][T11199] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.313130][T11199] usb 2-1: Product: syz [ 982.313141][T11199] usb 2-1: Manufacturer: syz [ 982.313153][T11199] usb 2-1: SerialNumber: syz [ 982.595562][T11199] usb 2-1: cannot setup if 1: error -71 [ 982.595886][T11199] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 982.620104][T11199] usb 2-1: cannot setup if 1: error -71 [ 982.620398][T11199] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 982.644184][T11199] usb 2-1: cannot setup if 1: error -71 [ 982.695698][ T25] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 982.765339][T11199] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 982.768129][T11199] usb 2-1: USB disconnect, device number 69 [ 982.836164][ T5638] udevd[5638]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 982.851548][ T25] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 982.876456][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.900719][ T25] usb 3-1: config 0 descriptor?? [ 983.107795][ T25] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 983.255231][T11199] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 983.343324][ T25] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 983.343353][ T25] [drm] Initialized udl on minor 1 [ 983.425204][T11199] usb 1-1: Using ep0 maxpacket: 32 [ 983.430953][T11199] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 983.431486][T11199] usb 1-1: config 0 has no interfaces? [ 983.435020][T11199] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.435049][T11199] usb 1-1: Product: syz [ 983.435073][T11199] usb 1-1: Manufacturer: syz [ 983.435089][T11199] usb 1-1: SerialNumber: syz [ 983.470539][T11199] usb 1-1: config 0 descriptor?? [ 983.686182][T19793] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4072'. [ 983.847648][T19793] bond6: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 983.871509][T19793] bond6 (unregistering): Released all slaves [ 983.976999][T19805] tipc: Started in network mode [ 983.977050][T19805] tipc: Node identity 8a4bf413a963, cluster identity 4711 [ 983.977212][T19805] tipc: Enabled bearer , priority 0 [ 983.977763][T19803] syzkaller0: entered promiscuous mode [ 983.977788][T19803] syzkaller0: entered allmulticast mode [ 984.051966][ T9] usb 1-1: USB disconnect, device number 66 [ 984.109400][T19802] tipc: Resetting bearer [ 984.140464][T19802] tipc: Disabling bearer [ 984.954116][T19834] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 985.828964][T19853] libceph: resolve 'c' (ret=-3): failed [ 986.335302][ T9] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 986.405540][ T922] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 986.498293][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 986.503751][ T9] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 986.503808][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 986.503827][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 986.554328][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.554358][ T9] usb 1-1: Product: syz [ 986.554373][ T9] usb 1-1: Manufacturer: syz [ 986.554390][ T9] usb 1-1: SerialNumber: syz [ 986.581818][ T922] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 986.601844][ T922] usb 6-1: config 0 descriptor has 1 excess byte, ignoring [ 986.601894][ T922] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 986.601943][ T922] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 986.604517][ T9] usb 1-1: config 0 descriptor?? [ 986.646462][ T922] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.646492][ T922] usb 6-1: Product: syz [ 986.646531][ T922] usb 6-1: Manufacturer: syz [ 986.646543][ T922] usb 6-1: SerialNumber: syz [ 986.681821][ T922] usb 6-1: config 0 descriptor?? [ 986.864067][T19860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4086'. [ 986.937883][T19868] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4087'. [ 987.030217][T19873] program syz.3.4090 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 987.100007][T19874] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 987.183072][T19874] batadv1: entered allmulticast mode [ 987.995718][ T10] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 988.155364][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 988.158236][ T10] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 988.159283][ T10] usb 2-1: config 0 has no interfaces? [ 988.188617][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.188672][ T10] usb 2-1: Product: syz [ 988.188692][ T10] usb 2-1: Manufacturer: syz [ 988.188704][ T10] usb 2-1: SerialNumber: syz [ 988.223840][ T10] usb 2-1: config 0 descriptor?? [ 988.436456][T19876] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4091'. [ 988.456330][ T25] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 988.456838][ T25] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 988.506087][ T5702] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 988.508720][ T5702] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 988.514786][ T25] usb 3-1: USB disconnect, device number 65 [ 988.559295][ T5702] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 988.702665][T19876] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 988.743170][T19876] bond2 (unregistering): Released all slaves [ 989.010191][T19885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4094'. [ 989.390283][ T9] usb 1-1: 0:0 : invalid sync pipe. is_playback 1, ep 0b, bSynchAddress ff [ 989.605065][ T922] usb 6-1: 0:0 : invalid sync pipe. is_playback 1, ep 0b, bSynchAddress ff [ 989.630552][ T9] usb 1-1: USB disconnect, device number 67 [ 989.810862][T19895] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 989.881009][ T922] usb 6-1: USB disconnect, device number 45 [ 990.181504][ T5883] udevd[5883]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 990.487930][ T5702] usb 2-1: USB disconnect, device number 70 [ 990.533172][T19915] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 990.721709][T19921] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4105'. [ 990.767369][T19926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4106'. [ 990.788579][T19926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4106'. [ 990.788608][T19926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4106'. [ 990.813050][T19926] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4106'. [ 991.051072][T19930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4108'. [ 991.059196][T19930] ip_tables: iptables: counters copy to user failed while replacing table [ 991.250133][T19928] could not allocate digest TFM handle sha1-ni [ 991.357217][ T9] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 991.411276][T19942] libceph: resolve 'c' (ret=-3): failed [ 991.509164][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 991.509206][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 991.513219][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 991.513291][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.580379][ T9] uvcvideo 2-1:1.1: Unknown video format 32595559-0000-0010-8000-00aa00389b00 [ 991.580488][ T9] uvcvideo 2-1:1.0: Found UVC 1.00 device (046d:0825) [ 991.580555][ T9] uvcvideo 2-1:1.1: No supported video formats found. [ 991.580572][ T9] uvcvideo 2-1:1.1: Failed to initialize the device (-22). [ 991.585048][ T9] uvcvideo 2-1:1.0: probe with driver uvcvideo failed with error -22 [ 991.771076][T19947] input input173: cannot allocate more than FF_MAX_EFFECTS effects [ 991.809849][T19955] FAULT_INJECTION: forcing a failure. [ 991.809849][T19955] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 991.809879][T19955] CPU: 0 UID: 0 PID: 19955 Comm: syz.5.4116 Tainted: G L syzkaller #0 PREEMPT(full) [ 991.809902][T19955] Tainted: [L]=SOFTLOCKUP [ 991.809908][T19955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 991.809920][T19955] Call Trace: [ 991.809927][T19955] [ 991.809934][T19955] dump_stack_lvl+0xe8/0x150 [ 991.809962][T19955] should_fail_ex+0x410/0x560 [ 991.809984][T19955] _copy_from_user+0x2d/0xb0 [ 991.810007][T19955] __se_sys_set_mempolicy+0x39f/0x4e0 [ 991.810030][T19955] ? __pfx___se_sys_set_mempolicy+0x10/0x10 [ 991.810050][T19955] ? __pfx_ksys_write+0x10/0x10 [ 991.810083][T19955] do_syscall_64+0x166/0x520 [ 991.810101][T19955] ? trace_irq_disable+0x3b/0x140 [ 991.810117][T19955] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.810134][T19955] ? clear_bhb_loop+0x70/0xc0 [ 991.810154][T19955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.810170][T19955] RIP: 0033:0x7f3581f9e159 [ 991.810185][T19955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 991.810199][T19955] RSP: 002b:00007f3582e78028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ee [ 991.810217][T19955] RAX: ffffffffffffffda RBX: 00007f3582225fa0 RCX: 00007f3581f9e159 [ 991.810230][T19955] RDX: 0000000000000009 RSI: 0000200000000080 RDI: 0000000000004005 [ 991.810241][T19955] RBP: 00007f3582e78090 R08: 0000000000000000 R09: 0000000000000000 [ 991.810251][T19955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 991.810261][T19955] R13: 00007f3582226038 R14: 00007f3582225fa0 R15: 00007f358234fa48 [ 991.810286][T19955] [ 992.188570][T19968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 992.211935][T19968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 992.385531][ T5702] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 992.545396][ T5702] usb 6-1: Using ep0 maxpacket: 32 [ 992.546149][ T5702] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 992.546698][ T5702] usb 6-1: config 0 has no interfaces? [ 992.551519][ T5702] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.551539][ T5702] usb 6-1: Product: syz [ 992.551551][ T5702] usb 6-1: Manufacturer: syz [ 992.551562][ T5702] usb 6-1: SerialNumber: syz [ 992.610786][ T5702] usb 6-1: config 0 descriptor?? [ 992.727467][T19980] xt_hashlimit: size too large, truncated to 1048576 [ 992.755353][ T189] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 992.802921][T19987] __nla_validate_parse: 2 callbacks suppressed [ 992.802939][T19987] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4122'. [ 992.827330][T19967] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4119'. [ 992.906603][ T189] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 992.927372][ T189] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.927393][ T189] usb 1-1: Product: syz [ 992.927405][ T189] usb 1-1: Manufacturer: syz [ 992.927416][ T189] usb 1-1: SerialNumber: syz [ 992.930482][T19967] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 992.937125][ T189] usb 1-1: config 0 descriptor?? [ 992.983483][T19967] bond1 (unregistering): Released all slaves [ 993.024646][ T189] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 993.088930][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.088994][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.367892][ T9] usb 6-1: USB disconnect, device number 46 [ 993.728067][T19972] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 993.729132][ T189] gspca_sunplus: reg_w_riv err -71 [ 993.729338][ T189] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 993.763242][ T189] usb 1-1: USB disconnect, device number 68 [ 994.185010][ T10] usb 2-1: USB disconnect, device number 71 [ 994.306954][ T189] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 994.465588][ T189] usb 3-1: Using ep0 maxpacket: 16 [ 994.470482][ T189] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 994.499769][ T189] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.499801][ T189] usb 3-1: Product: syz [ 994.499819][ T189] usb 3-1: Manufacturer: syz [ 994.499836][ T189] usb 3-1: SerialNumber: syz [ 994.532284][ T189] r8152-cfgselector 3-1: Unknown version 0x0000 [ 994.532316][ T189] r8152-cfgselector 3-1: config 0 descriptor?? [ 995.044435][T20014] fuse: Unknown parameter 'ro:'.lmode' [ 996.915800][ T189] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 997.065240][ T189] usb 2-1: Using ep0 maxpacket: 32 [ 997.065872][ T189] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 997.066534][ T189] usb 2-1: config 0 has no interfaces? [ 997.068658][ T189] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.068677][ T189] usb 2-1: Product: syz [ 997.068688][ T189] usb 2-1: Manufacturer: syz [ 997.068699][ T189] usb 2-1: SerialNumber: syz [ 997.107733][ T189] usb 2-1: config 0 descriptor?? [ 997.141236][ T189] r8152-cfgselector 3-1: USB disconnect, device number 66 [ 997.325195][T20045] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4137'. [ 997.362575][T20045] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 997.364136][T20045] bond2 (unregistering): Released all slaves [ 997.488341][ T25] usb 2-1: USB disconnect, device number 72 [ 997.611351][T20068] FAULT_INJECTION: forcing a failure. [ 997.611351][T20068] name failslab, interval 1, probability 0, space 0, times 0 [ 997.611392][T20068] CPU: 0 UID: 0 PID: 20068 Comm: syz.0.4144 Tainted: G L syzkaller #0 PREEMPT(full) [ 997.611423][T20068] Tainted: [L]=SOFTLOCKUP [ 997.611432][T20068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 997.611446][T20068] Call Trace: [ 997.611455][T20068] [ 997.611466][T20068] dump_stack_lvl+0xe8/0x150 [ 997.611504][T20068] should_fail_ex+0x410/0x560 [ 997.611535][T20068] should_failslab+0xa8/0x100 [ 997.611571][T20068] __kvmalloc_node_noprof+0x176/0x820 [ 997.611601][T20068] ? seq_read_iter+0x1ea/0xca0 [ 997.611626][T20068] ? seq_read_iter+0x1ea/0xca0 [ 997.611658][T20068] seq_read_iter+0x1ea/0xca0 [ 997.611683][T20068] ? __alloc_pages_noprof+0x80/0x100 [ 997.611710][T20068] ? alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 997.611745][T20068] proc_reg_read_iter+0x1b7/0x280 [ 997.611775][T20068] copy_splice_read+0x5ff/0xaa0 [ 997.611818][T20068] ? rcu_is_watching+0x16/0xb0 [ 997.611846][T20068] ? __pfx_copy_splice_read+0x10/0x10 [ 997.611877][T20068] ? trace_kmalloc+0x2a/0xf0 [ 997.611900][T20068] ? look_up_lock_class+0x57/0x110 [ 997.611928][T20068] ? register_lock_class+0x31/0x2e0 [ 997.611968][T20068] ? alloc_pipe_info+0x35d/0x4c0 [ 997.611994][T20068] ? __pfx_copy_splice_read+0x10/0x10 [ 997.612030][T20068] splice_direct_to_actor+0x48b/0xcb0 [ 997.612086][T20068] ? __pfx_direct_splice_actor+0x10/0x10 [ 997.612119][T20068] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 997.612164][T20068] do_splice_direct+0x195/0x290 [ 997.612201][T20068] ? __pfx_do_splice_direct+0x10/0x10 [ 997.612236][T20068] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 997.612261][T20068] ? bpf_lsm_file_permission+0x9/0x20 [ 997.612297][T20068] ? security_file_permission+0x75/0x260 [ 997.612323][T20068] ? rw_verify_area+0x203/0x4c0 [ 997.612360][T20068] do_sendfile+0x52e/0x7c0 [ 997.612397][T20068] ? __pfx_do_sendfile+0x10/0x10 [ 997.612424][T20068] ? __fget_files+0x3a2/0x420 [ 997.612466][T20068] __se_sys_sendfile64+0x144/0x1a0 [ 997.612495][T20068] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 997.612534][T20068] do_syscall_64+0x166/0x520 [ 997.612559][T20068] ? trace_irq_disable+0x3b/0x140 [ 997.612582][T20068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 997.612606][T20068] ? clear_bhb_loop+0x70/0xc0 [ 997.612634][T20068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 997.612657][T20068] RIP: 0033:0x7f682df9e159 [ 997.612679][T20068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 997.612699][T20068] RSP: 002b:00007f682edb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 997.612724][T20068] RAX: ffffffffffffffda RBX: 00007f682e226090 RCX: 00007f682df9e159 [ 997.612742][T20068] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000006 [ 997.612757][T20068] RBP: 00007f682edb6090 R08: 0000000000000000 R09: 0000000000000000 [ 997.612772][T20068] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 997.612786][T20068] R13: 00007f682e226128 R14: 00007f682e226090 R15: 00007f682e34fa48 [ 997.612823][T20068] [ 997.996499][T20074] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4147'. [ 999.559704][T20103] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4155'. [ 1000.825973][ T10] usb 3-1: new low-speed USB device number 67 using dummy_hcd [ 1000.924333][T20113] syzkaller0: entered promiscuous mode [ 1000.924358][T20113] syzkaller0: entered allmulticast mode [ 1000.975706][ T10] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c1f, bcdDevice= 0.00 [ 1000.976695][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1000.976718][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 1000.976738][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1000.976768][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.980917][ T10] usb 3-1: config 0 descriptor?? [ 1000.981457][T20109] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1001.416014][T20118] FAULT_INJECTION: forcing a failure. [ 1001.416014][T20118] name failslab, interval 1, probability 0, space 0, times 0 [ 1001.416054][T20118] CPU: 1 UID: 0 PID: 20118 Comm: syz.0.4161 Tainted: G L syzkaller #0 PREEMPT(full) [ 1001.416085][T20118] Tainted: [L]=SOFTLOCKUP [ 1001.416094][T20118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1001.416109][T20118] Call Trace: [ 1001.416119][T20118] [ 1001.416129][T20118] dump_stack_lvl+0xe8/0x150 [ 1001.416176][T20118] should_fail_ex+0x410/0x560 [ 1001.416206][T20118] should_failslab+0xa8/0x100 [ 1001.416237][T20118] __kvmalloc_node_noprof+0x176/0x820 [ 1001.416266][T20118] ? __kvmalloc_node_noprof+0x345/0x820 [ 1001.416290][T20118] ? analyze_subprog+0x882/0x9e00 [ 1001.416315][T20118] ? analyze_subprog+0x882/0x9e00 [ 1001.416349][T20118] analyze_subprog+0x882/0x9e00 [ 1001.416375][T20118] ? is_bpf_text_address+0x292/0x2b0 [ 1001.416409][T20118] ? kernel_text_address+0xa5/0xe0 [ 1001.416442][T20118] ? arch_stack_walk+0xfb/0x150 [ 1001.416484][T20118] ? __pfx_stack_trace_save+0x10/0x10 [ 1001.416524][T20118] ? call_instance+0x263/0x560 [ 1001.416548][T20118] ? bpf_compute_subprog_arg_access+0x2a3/0x14d0 [ 1001.416575][T20118] ? bpf_compute_live_registers+0x8d3/0x1ff0 [ 1001.416603][T20118] ? __pfx_analyze_subprog+0x10/0x10 [ 1001.416628][T20118] ? __x64_sys_bpf+0xba/0xd0 [ 1001.416648][T20118] ? do_syscall_64+0x166/0x520 [ 1001.416674][T20118] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.416739][T20118] ? call_instance+0x263/0x560 [ 1001.416764][T20118] ? rcu_is_watching+0x16/0xb0 [ 1001.416792][T20118] ? call_instance+0x263/0x560 [ 1001.416815][T20118] ? trace_kmalloc+0x2a/0xf0 [ 1001.416839][T20118] ? call_instance+0x263/0x560 [ 1001.416864][T20118] ? __kvmalloc_node_noprof+0x52f/0x820 [ 1001.416891][T20118] ? __kvmalloc_node_noprof+0x345/0x820 [ 1001.416916][T20118] ? call_instance+0x263/0x560 [ 1001.416940][T20118] ? call_instance+0x263/0x560 [ 1001.416973][T20118] ? call_instance+0x42e/0x560 [ 1001.417007][T20118] bpf_compute_subprog_arg_access+0x2c9/0x14d0 [ 1001.417058][T20118] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 1001.417088][T20118] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 1001.417114][T20118] ? trace_kmalloc+0x2a/0xf0 [ 1001.417135][T20118] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 1001.417178][T20118] ? __kvmalloc_node_noprof+0x345/0x820 [ 1001.417203][T20118] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 1001.417229][T20118] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 1001.417269][T20118] bpf_compute_live_registers+0x8d3/0x1ff0 [ 1001.417317][T20118] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 1001.417358][T20118] bpf_check+0x25ed/0x2e10 [ 1001.417396][T20118] ? ktime_get_with_offset+0x93/0x2d0 [ 1001.417426][T20118] ? __pfx_bpf_check+0x10/0x10 [ 1001.417455][T20118] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1001.417491][T20118] bpf_prog_load+0x14d6/0x1c20 [ 1001.417532][T20118] ? __pfx_bpf_prog_load+0x10/0x10 [ 1001.417587][T20118] __sys_bpf+0xd0d/0xd90 [ 1001.417639][T20118] ? __pfx___sys_bpf+0x10/0x10 [ 1001.417675][T20118] ? __fget_files+0x2a/0x420 [ 1001.417726][T20118] ? ksys_write+0x242/0x270 [ 1001.417763][T20118] ? __pfx_ksys_write+0x10/0x10 [ 1001.417804][T20118] __x64_sys_bpf+0xba/0xd0 [ 1001.417831][T20118] do_syscall_64+0x166/0x520 [ 1001.417856][T20118] ? trace_irq_disable+0x3b/0x140 [ 1001.417880][T20118] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.417902][T20118] ? clear_bhb_loop+0x70/0xc0 [ 1001.417931][T20118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.417955][T20118] RIP: 0033:0x7f682df9e159 [ 1001.417977][T20118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1001.417997][T20118] RSP: 002b:00007f682edd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1001.418023][T20118] RAX: ffffffffffffffda RBX: 00007f682e225fa0 RCX: 00007f682df9e159 [ 1001.418040][T20118] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005 [ 1001.418056][T20118] RBP: 00007f682edd7090 R08: 0000000000000000 R09: 0000000000000000 [ 1001.418071][T20118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1001.418086][T20118] R13: 00007f682e226038 R14: 00007f682e225fa0 R15: 00007f682e34fa48 [ 1001.418122][T20118] [ 1001.465953][ T9] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1001.657205][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 1001.664500][ T9] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1001.675472][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 1001.675755][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1001.677717][ T9] usb 6-1: config 0 has no interfaces? [ 1001.715251][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.715280][ T9] usb 6-1: Product: syz [ 1001.715296][ T9] usb 6-1: Manufacturer: syz [ 1001.715313][ T9] usb 6-1: SerialNumber: syz [ 1001.746968][ T10] usb 3-1: USB disconnect, device number 67 [ 1001.764546][ T9] usb 6-1: config 0 descriptor?? [ 1001.978582][T20116] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4160'. [ 1002.066233][T20122] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4162'. [ 1002.096119][T20116] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1002.143981][T20116] bond1 (unregistering): Released all slaves [ 1002.237771][T20128] SET target dimension over the limit! [ 1002.288505][T20127] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4164'. [ 1002.312273][ T10] usb 6-1: USB disconnect, device number 47 [ 1002.350892][T20123] vlan2: entered allmulticast mode [ 1002.350917][T20123] bridge4: entered allmulticast mode [ 1002.890342][T20150] FAULT_INJECTION: forcing a failure. [ 1002.890342][T20150] name failslab, interval 1, probability 0, space 0, times 0 [ 1002.890371][T20150] CPU: 1 UID: 0 PID: 20150 Comm: syz.2.4171 Tainted: G L syzkaller #0 PREEMPT(full) [ 1002.890393][T20150] Tainted: [L]=SOFTLOCKUP [ 1002.890399][T20150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1002.890409][T20150] Call Trace: [ 1002.890416][T20150] [ 1002.890423][T20150] dump_stack_lvl+0xe8/0x150 [ 1002.890451][T20150] should_fail_ex+0x410/0x560 [ 1002.890473][T20150] should_failslab+0xa8/0x100 [ 1002.890495][T20150] __kvmalloc_node_noprof+0x176/0x820 [ 1002.890523][T20150] ? bpf_compute_postorder+0x83/0x970 [ 1002.890539][T20150] ? bpf_compute_postorder+0x83/0x970 [ 1002.890561][T20150] bpf_compute_postorder+0x83/0x970 [ 1002.890578][T20150] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 1002.890600][T20150] ? add_kfuncs+0x251/0x2e0 [ 1002.890622][T20150] bpf_check+0x24d6/0x2e10 [ 1002.890648][T20150] ? ktime_get_with_offset+0x93/0x2d0 [ 1002.890669][T20150] ? __pfx_bpf_check+0x10/0x10 [ 1002.890689][T20150] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1002.890716][T20150] bpf_prog_load+0x14d6/0x1c20 [ 1002.890783][T20150] ? __pfx_bpf_prog_load+0x10/0x10 [ 1002.890837][T20150] __sys_bpf+0xd0d/0xd90 [ 1002.890878][T20150] ? __pfx___sys_bpf+0x10/0x10 [ 1002.890917][T20150] ? __fget_files+0x2a/0x420 [ 1002.890968][T20150] ? ksys_write+0x242/0x270 [ 1002.891005][T20150] ? __pfx_ksys_write+0x10/0x10 [ 1002.891046][T20150] __x64_sys_bpf+0xba/0xd0 [ 1002.891073][T20150] do_syscall_64+0x166/0x520 [ 1002.891099][T20150] ? trace_irq_disable+0x3b/0x140 [ 1002.891122][T20150] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1002.891147][T20150] ? clear_bhb_loop+0x70/0xc0 [ 1002.891175][T20150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1002.891199][T20150] RIP: 0033:0x7fda5499e159 [ 1002.891221][T20150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1002.891241][T20150] RSP: 002b:00007fda557a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1002.891266][T20150] RAX: ffffffffffffffda RBX: 00007fda54c25fa0 RCX: 00007fda5499e159 [ 1002.891283][T20150] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 1002.891299][T20150] RBP: 00007fda557a5090 R08: 0000000000000000 R09: 0000000000000000 [ 1002.891314][T20150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1002.891329][T20150] R13: 00007fda54c26038 R14: 00007fda54c25fa0 R15: 00007fda54d4fa48 [ 1002.891366][T20150] [ 1003.057320][T11199] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 1003.226796][T11199] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1003.228357][T11199] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1003.228384][T11199] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1003.234388][T11199] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.234416][T11199] usb 2-1: Product: syz [ 1003.234433][T11199] usb 2-1: Manufacturer: syz [ 1003.234450][T11199] usb 2-1: SerialNumber: syz [ 1003.354762][T11199] usb 2-1: 0:2 : does not exist [ 1003.533649][T11199] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1003.617339][T11199] usb 2-1: USB disconnect, device number 73 [ 1003.635311][ T5702] usb 6-1: new full-speed USB device number 48 using dummy_hcd [ 1003.728657][ T5638] udevd[5638]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1003.796408][ T5702] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1003.797497][ T5702] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1003.797520][ T5702] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1003.797540][ T5702] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1003.801718][ T5702] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.801737][ T5702] usb 6-1: Product: syz [ 1003.801749][ T5702] usb 6-1: Manufacturer: syz [ 1003.801760][ T5702] usb 6-1: SerialNumber: syz [ 1003.878684][ T5702] usb 6-1: config 0 descriptor?? [ 1003.879676][T20153] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1004.049856][ T5702] rc_core: IR keymap rc-streamzap not found [ 1004.049880][ T5702] Registered IR keymap rc-empty [ 1004.051277][ T5702] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1004.066888][ T5702] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input174 [ 1004.118939][T20153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1004.137532][T20153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1004.392674][T11199] usb 6-1: USB disconnect, device number 48 [ 1004.615246][ T10] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1004.765241][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 1004.768938][ T10] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1004.770373][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.773551][ T10] usb 3-1: config 0 descriptor?? [ 1004.871508][ T31] kauditd_printk_skb: 12 callbacks suppressed [ 1004.871530][ T31] audit: type=1326 audit(1789466604.630:4856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20182 comm="syz.0.4182" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682df9e159 code=0x7ffc0000 [ 1004.871821][ T31] audit: type=1326 audit(1789466604.630:4857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20182 comm="syz.0.4182" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682df9e159 code=0x7ffc0000 [ 1004.933435][ T31] audit: type=1326 audit(1789466604.690:4858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20182 comm="syz.0.4182" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f682df5e98e code=0x7ffc0000 [ 1004.933520][ T31] audit: type=1326 audit(1789466604.690:4859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20182 comm="syz.0.4182" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f682df9ddeb code=0x7ffc0000 [ 1004.933567][ T31] audit: type=1326 audit(1789466604.690:4860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20182 comm="syz.0.4182" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f682df9ddeb code=0x7ffc0000 [ 1004.988499][ T31] audit: type=1326 audit(1789466604.700:4861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20182 comm="syz.0.4182" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f682df9ddeb code=0x7ffc0000 [ 1004.988682][ T31] audit: type=1326 audit(1789466604.720:4862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20182 comm="syz.0.4182" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f682df9ddeb code=0x7ffc0000 [ 1005.059480][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1005.070243][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1005.071342][ T31] audit: type=1326 audit(1789466604.830:4863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20182 comm="syz.0.4182" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f682df9ddeb code=0x7ffc0000 [ 1005.072499][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1005.072551][ T10] usb 3-1: media controller created [ 1005.136962][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1005.139695][ T31] audit: type=1326 audit(1789466604.900:4864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20182 comm="syz.0.4182" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f682df9ddeb code=0x7ffc0000 [ 1005.197715][ T9] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1005.202241][ T31] audit: type=1326 audit(1789466604.960:4865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20182 comm="syz.0.4182" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f682df9ddeb code=0x7ffc0000 [ 1005.290329][T20163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1005.316040][T20163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1005.345219][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1005.346142][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1005.349197][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1005.349229][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1005.349299][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.410099][ T9] usb 1-1: config 0 descriptor?? [ 1005.427397][ T9] hub 1-1:0.0: USB hub found [ 1005.479243][ T10] az6027: usb out operation failed. (-71) [ 1005.479655][ T10] az6027: usb out operation failed. (-71) [ 1005.479671][ T10] stb0899_attach: Driver disabled by Kconfig [ 1005.479684][ T10] az6027: no front-end attached [ 1005.479684][ T10] [ 1005.480073][ T10] az6027: usb out operation failed. (-71) [ 1005.480087][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1005.499610][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input175 [ 1005.555415][T11199] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1005.559710][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 1005.559735][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1005.579857][ T10] usb 3-1: USB disconnect, device number 68 [ 1005.636727][ T9] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1005.705613][T11199] usb 6-1: Using ep0 maxpacket: 8 [ 1005.707872][T11199] usb 6-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1005.709924][T11199] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1005.741855][T11199] usb 6-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 1005.741884][T11199] usb 6-1: Product: syz [ 1005.741929][T11199] usb 6-1: Manufacturer: syz [ 1005.741947][T11199] usb 6-1: SerialNumber: syz [ 1005.781248][T11199] usb 6-1: config 0 descriptor?? [ 1005.801985][T11199] imon_raw 6-1:0.0: IR endpoint missing [ 1005.830016][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1006.014951][T11199] usb 6-1: USB disconnect, device number 49 [ 1006.294778][ T9] hid_parser_main: 1 callbacks suppressed [ 1006.294807][ T9] hid-generic 0003:046D:C31C.0044: unknown main item tag 0x0 [ 1006.398210][ T9] hid-generic 0003:046D:C31C.0044: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 1006.591458][T20203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1006.601955][T20203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1006.936559][T20209] FAULT_INJECTION: forcing a failure. [ 1006.936559][T20209] name failslab, interval 1, probability 0, space 0, times 0 [ 1006.936599][T20209] CPU: 0 UID: 0 PID: 20209 Comm: syz.5.4190 Tainted: G L syzkaller #0 PREEMPT(full) [ 1006.936630][T20209] Tainted: [L]=SOFTLOCKUP [ 1006.936640][T20209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1006.936653][T20209] Call Trace: [ 1006.936663][T20209] [ 1006.936673][T20209] dump_stack_lvl+0xe8/0x150 [ 1006.936712][T20209] should_fail_ex+0x410/0x560 [ 1006.936744][T20209] should_failslab+0xa8/0x100 [ 1006.936773][T20209] ? security_inode_alloc+0x39/0x310 [ 1006.936805][T20209] kmem_cache_alloc_noprof+0xa1/0x600 [ 1006.936844][T20209] ? __pfx_make_kgid+0x10/0x10 [ 1006.936877][T20209] ? security_inode_alloc+0x39/0x310 [ 1006.936919][T20209] security_inode_alloc+0x39/0x310 [ 1006.936953][T20209] inode_init_always_gfp+0x97e/0xd30 [ 1006.936990][T20209] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1006.937013][T20209] alloc_inode+0x82/0x1b0 [ 1006.937044][T20209] __sock_create+0x12d/0x9d0 [ 1006.937069][T20209] ? _get_random_bytes+0x1e7/0x260 [ 1006.937207][T20209] udp_sock_create4+0xc5/0x480 [ 1006.937259][T20209] ? __pfx_udp_sock_create4+0x10/0x10 [ 1006.937306][T20209] rxrpc_lookup_local+0xd16/0x15d0 [ 1006.937372][T20209] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 1006.937411][T20209] ? rxrpc_sendmsg+0x11e/0x6b0 [ 1006.937496][T20209] ? __local_bh_enable_ip+0xd6/0x140 [ 1006.937534][T20209] rxrpc_sendmsg+0x34b/0x6b0 [ 1006.937575][T20209] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 1006.937609][T20209] sock_sendmsg_nosec+0x13a/0x180 [ 1006.937637][T20209] ____sys_sendmsg+0x54e/0x850 [ 1006.937675][T20209] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1006.937716][T20209] ? import_iovec+0x73/0xa0 [ 1006.937751][T20209] ___sys_sendmsg+0x2a5/0x360 [ 1006.937781][T20209] ? __lock_acquire+0x747/0x2de0 [ 1006.937810][T20209] ? __pfx____sys_sendmsg+0x10/0x10 [ 1006.937880][T20209] ? __fget_files+0x2a/0x420 [ 1006.937912][T20209] ? __fget_files+0x3a2/0x420 [ 1006.937956][T20209] __x64_sys_sendmsg+0x1b1/0x290 [ 1006.937990][T20209] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1006.938045][T20209] do_syscall_64+0x166/0x520 [ 1006.938071][T20209] ? trace_irq_disable+0x3b/0x140 [ 1006.938094][T20209] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1006.938119][T20209] ? clear_bhb_loop+0x70/0xc0 [ 1006.938148][T20209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1006.938171][T20209] RIP: 0033:0x7f3581f9e159 [ 1006.938193][T20209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1006.938213][T20209] RSP: 002b:00007f3582e78028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1006.938239][T20209] RAX: ffffffffffffffda RBX: 00007f3582225fa0 RCX: 00007f3581f9e159 [ 1006.938256][T20209] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1006.938272][T20209] RBP: 00007f3582e78090 R08: 0000000000000000 R09: 0000000000000000 [ 1006.938295][T20209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1006.938309][T20209] R13: 00007f3582226038 R14: 00007f3582225fa0 R15: 00007f358234fa48 [ 1006.938346][T20209] [ 1006.938522][T20209] socket: no more sockets [ 1007.484179][ T5702] usb 1-1: USB disconnect, device number 69 [ 1007.565255][T11199] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1007.667307][T20220] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[16815] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[20220] [ 1007.715798][T11199] usb 3-1: Using ep0 maxpacket: 32 [ 1007.717138][T11199] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1007.746900][T11199] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.746922][T11199] usb 3-1: Product: syz [ 1007.746934][T11199] usb 3-1: Manufacturer: syz [ 1007.746945][T11199] usb 3-1: SerialNumber: syz [ 1007.760265][T11199] usb 3-1: config 0 descriptor?? [ 1007.797564][T11199] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1008.018507][T20224] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4193'. [ 1008.208512][T20226] geneve2: entered allmulticast mode [ 1008.513614][ T5712] usb 4-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1008.538418][ T5712] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 1008.580741][ T5712] usb 4-1: USB disconnect, device number 100 [ 1009.092097][T20230] Invalid logical block size (11) [ 1009.535328][ T9] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 1009.555384][T11199] gspca_topro: reg_r err -110 [ 1009.555480][T11199] gspca_topro: Sensor soi763a [ 1009.696861][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1009.709451][ T9] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1009.709538][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1009.728464][T11199] usb 2-1: new low-speed USB device number 74 using dummy_hcd [ 1009.747830][ T9] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1009.747863][ T9] usb 6-1: Product: syz [ 1009.747880][ T9] usb 6-1: Manufacturer: syz [ 1009.747897][ T9] usb 6-1: SerialNumber: syz [ 1009.783372][ T9] usb 6-1: config 0 descriptor?? [ 1009.818911][ T9] usb 6-1: selecting invalid altsetting 0 [ 1009.847662][ T189] usb 3-1: USB disconnect, device number 69 [ 1009.914082][T11199] usb 2-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.40 [ 1009.940648][T11199] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 1009.940687][T11199] usb 2-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1009.940715][T11199] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1009.995912][T20232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1009.997710][T20232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1010.134877][T20241] ip_tables: iptables: counters copy to user failed while replacing table [ 1010.170771][ T9] usb 6-1: USB disconnect, device number 50 [ 1010.241500][T20232] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4196'. [ 1010.625425][ T5702] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 1010.789319][ T5702] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1010.792098][ T5702] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 1010.792125][ T5702] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1010.792151][ T5702] usb 1-1: config 0 has no interface number 0 [ 1010.792180][ T5702] usb 1-1: config 0 interface 133 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1010.795269][ T5702] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.795297][ T5702] usb 1-1: Product: syz [ 1010.795314][ T5702] usb 1-1: Manufacturer: syz [ 1010.795332][ T5702] usb 1-1: SerialNumber: syz [ 1010.873503][ T5702] usb 1-1: config 0 descriptor?? [ 1011.049767][T20257] xt_hashlimit: size too large, truncated to 1048576 [ 1011.104221][ T5702] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected [ 1011.104438][ T5702] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 82 [ 1011.132862][ T5702] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81 [ 1011.132968][ T5702] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1 [ 1011.133063][ T5702] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2 [ 1011.169335][ T5702] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1011.563728][ T9] usb 1-1: USB disconnect, device number 70 [ 1011.599344][ T9] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1011.613859][ T9] keyspan 1-1:0.133: device disconnected [ 1011.884360][T20264] binder: BINDER_SET_CONTEXT_MGR already set [ 1011.884378][T20264] binder: 20263:20264 ioctl 4018620d 200000000040 returned -16 [ 1012.454626][T11199] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.454659][T11199] usb 2-1: Product: 벃੼坲㊢ৌꚹ䬆泊᣹苍ษ爿췼䪨漃ⲓꈆ㵂⶗迀ॣ㥆鵨ୀ贏㏓㦩㖛㻰ठ枫Ｌ䓤묟鋌잜跭ᖪ彋䟧땋ᕓ鲵 [ 1012.454685][T11199] usb 2-1: Manufacturer: 窗ϸ䛿덫늊촰䕊袒諂Ｅᕇ讱ꅼꗋ㈼⻢ᓔ괻鉈᎔䌦휀ș㗯쩻Ꝼ怲达儲ａ [ 1012.501624][T11199] usb 2-1: can't set config #1, error -71 [ 1012.519120][T11199] usb 2-1: USB disconnect, device number 74 [ 1012.955265][ T5702] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1013.115845][ T5702] usb 1-1: Using ep0 maxpacket: 32 [ 1013.117035][ T5702] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1013.121611][ T5702] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 1013.121639][ T5702] usb 1-1: config 0 has no interface number 0 [ 1013.121699][ T5702] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1013.121729][ T5702] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1013.156198][ T5702] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.156229][ T5702] usb 1-1: Product: syz [ 1013.156247][ T5702] usb 1-1: Manufacturer: syz [ 1013.156264][ T5702] usb 1-1: SerialNumber: syz [ 1013.210896][ T5702] usb 1-1: config 0 descriptor?? [ 1013.440511][T20293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1013.459598][T20302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1013.463848][T20293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1013.484633][T20303] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4218'. [ 1013.495058][T20302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1013.587412][ T5702] radio-si470x 1-1:0.35: this is not a si470x device. [ 1013.616095][ T5702] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 1013.634906][ T5702] usb 1-1: USB disconnect, device number 71 [ 1014.067069][T11199] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1014.174230][T20311] FAULT_INJECTION: forcing a failure. [ 1014.174230][T20311] name failslab, interval 1, probability 0, space 0, times 0 [ 1014.174269][T20311] CPU: 1 UID: 0 PID: 20311 Comm: syz.5.4221 Tainted: G L syzkaller #0 PREEMPT(full) [ 1014.174300][T20311] Tainted: [L]=SOFTLOCKUP [ 1014.174309][T20311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1014.174324][T20311] Call Trace: [ 1014.174334][T20311] [ 1014.174344][T20311] dump_stack_lvl+0xe8/0x150 [ 1014.174382][T20311] should_fail_ex+0x410/0x560 [ 1014.174414][T20311] should_failslab+0xa8/0x100 [ 1014.174446][T20311] __kvmalloc_node_noprof+0x176/0x820 [ 1014.174476][T20311] ? alloc_netdev_mqs+0x8fb/0x12a0 [ 1014.174510][T20311] ? alloc_netdev_mqs+0x8fb/0x12a0 [ 1014.174545][T20311] ? __asan_memset+0x22/0x50 [ 1014.174591][T20311] alloc_netdev_mqs+0x8fb/0x12a0 [ 1014.174625][T20311] ? __pfx_macvlan_setup+0x10/0x10 [ 1014.174653][T20311] rtnl_create_link+0x321/0xd70 [ 1014.174683][T20311] rtnl_newlink_create+0x258/0x7b0 [ 1014.174721][T20311] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1014.174761][T20311] ? __pfx___mutex_lock+0x10/0x10 [ 1014.174788][T20311] ? ns_capable+0x89/0xe0 [ 1014.174813][T20311] rtnl_newlink+0x166d/0x1c30 [ 1014.174845][T20311] ? __pfx_rtnl_newlink+0x10/0x10 [ 1014.174864][T20311] ? do_syscall_64+0x166/0x520 [ 1014.174881][T20311] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.174924][T20311] ? kasan_quarantine_put+0xbb/0x1f0 [ 1014.174941][T20311] ? lockdep_hardirqs_on+0x7b/0x110 [ 1014.174963][T20311] ? nlmon_xmit+0xb0/0x100 [ 1014.174980][T20311] ? kmem_cache_free+0x182/0x650 [ 1014.175006][T20311] ? __lock_acquire+0x747/0x2de0 [ 1014.175030][T20311] ? __local_bh_enable_ip+0xd6/0x140 [ 1014.175052][T20311] ? lockdep_hardirqs_on+0x7b/0x110 [ 1014.175070][T20311] ? __dev_queue_xmit+0x29b/0x3820 [ 1014.175119][T20311] ? __local_bh_enable_ip+0xd6/0x140 [ 1014.175147][T20311] ? __dev_queue_xmit+0x29b/0x3820 [ 1014.175187][T20311] ? lock_acquire+0x115/0x350 [ 1014.175226][T20311] ? __pfx_rtnl_newlink+0x10/0x10 [ 1014.175253][T20311] rtnetlink_rcv_msg+0x802/0xc00 [ 1014.175285][T20311] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1014.175312][T20311] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1014.175339][T20311] ? ref_tracker_free+0x689/0x830 [ 1014.175370][T20311] ? __pfx_ref_tracker_free+0x10/0x10 [ 1014.175409][T20311] netlink_rcv_skb+0x226/0x4a0 [ 1014.175450][T20311] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1014.175472][T20311] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1014.175505][T20311] ? netlink_deliver_tap+0x2e/0x1b0 [ 1014.175529][T20311] ? netlink_deliver_tap+0x2e/0x1b0 [ 1014.175558][T20311] netlink_unicast+0x7bd/0x940 [ 1014.175594][T20311] netlink_sendmsg+0x813/0xb40 [ 1014.175626][T20311] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1014.175657][T20311] ? apparmor_socket_sendmsg+0x98/0x360 [ 1014.175677][T20311] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1014.175701][T20311] sock_sendmsg_nosec+0x13a/0x180 [ 1014.175720][T20311] ____sys_sendmsg+0x54e/0x850 [ 1014.175747][T20311] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1014.175776][T20311] ? import_iovec+0x73/0xa0 [ 1014.175799][T20311] ___sys_sendmsg+0x2a5/0x360 [ 1014.175820][T20311] ? __lock_acquire+0x747/0x2de0 [ 1014.175840][T20311] ? __pfx____sys_sendmsg+0x10/0x10 [ 1014.175888][T20311] ? __fget_files+0x2a/0x420 [ 1014.175910][T20311] ? __fget_files+0x3a2/0x420 [ 1014.175941][T20311] __x64_sys_sendmsg+0x1b1/0x290 [ 1014.175965][T20311] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1014.176003][T20311] do_syscall_64+0x166/0x520 [ 1014.176021][T20311] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.176038][T20311] ? clear_bhb_loop+0x70/0xc0 [ 1014.176058][T20311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.176075][T20311] RIP: 0033:0x7f3581f9e159 [ 1014.176092][T20311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1014.176106][T20311] RSP: 002b:00007f3582e78028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1014.176124][T20311] RAX: ffffffffffffffda RBX: 00007f3582225fa0 RCX: 00007f3581f9e159 [ 1014.176137][T20311] RDX: 0000000008000002 RSI: 0000200000000300 RDI: 0000000000000003 [ 1014.176148][T20311] RBP: 00007f3582e78090 R08: 0000000000000000 R09: 0000000000000000 [ 1014.176159][T20311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1014.176187][T20311] R13: 00007f3582226038 R14: 00007f3582225fa0 R15: 00007f358234fa48 [ 1014.176225][T20311] [ 1014.218548][T11199] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1014.230039][T11199] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1014.230155][T11199] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1014.230218][T11199] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1014.243572][T11199] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.243640][T11199] usb 2-1: Product: syz [ 1014.243681][T11199] usb 2-1: Manufacturer: syz [ 1014.243724][T11199] usb 2-1: SerialNumber: syz [ 1014.677252][T11199] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 1014.732528][T11199] usb 2-1: USB disconnect, device number 75 [ 1015.436820][T20328] FAULT_INJECTION: forcing a failure. [ 1015.436820][T20328] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1015.436864][T20328] CPU: 1 UID: 0 PID: 20328 Comm: syz.5.4227 Tainted: G L syzkaller #0 PREEMPT(full) [ 1015.436895][T20328] Tainted: [L]=SOFTLOCKUP [ 1015.436905][T20328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1015.436919][T20328] Call Trace: [ 1015.436932][T20328] [ 1015.436942][T20328] dump_stack_lvl+0xe8/0x150 [ 1015.436990][T20328] should_fail_ex+0x410/0x560 [ 1015.437023][T20328] _copy_to_iter+0x1e4/0x1810 [ 1015.437047][T20328] ? sock_recvmsg+0x196/0x1e0 [ 1015.437069][T20328] ? ____sys_recvmsg+0x1e6/0x4a0 [ 1015.437099][T20328] ? ___sys_recvmsg+0x213/0x5a0 [ 1015.437128][T20328] ? __x64_sys_recvmsg+0x1ae/0x290 [ 1015.437173][T20328] ? __pfx__copy_to_iter+0x10/0x10 [ 1015.437215][T20328] __skb_datagram_iter+0x419/0x980 [ 1015.437251][T20328] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1015.437294][T20328] skb_copy_datagram_iter+0xb5/0x240 [ 1015.437332][T20328] unix_stream_read_actor+0x6c/0xb0 [ 1015.437368][T20328] unix_stream_read_generic+0xa73/0x22e0 [ 1015.437433][T20328] ? __pfx_unix_stream_read_generic+0x10/0x10 [ 1015.437464][T20328] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1015.437510][T20328] ? __lock_acquire+0x747/0x2de0 [ 1015.437538][T20328] unix_stream_recvmsg+0x16b/0x1d0 [ 1015.437575][T20328] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 1015.437607][T20328] ? __pfx_unix_stream_read_actor+0x10/0x10 [ 1015.437640][T20328] ? aa_sock_msg_perm+0x129/0x210 [ 1015.437674][T20328] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1015.437701][T20328] ? security_socket_recvmsg+0x7e/0x2c0 [ 1015.437734][T20328] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 1015.437767][T20328] sock_recvmsg+0x196/0x1e0 [ 1015.437795][T20328] ____sys_recvmsg+0x1e6/0x4a0 [ 1015.437836][T20328] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1015.437885][T20328] ? import_iovec+0x73/0xa0 [ 1015.437917][T20328] ___sys_recvmsg+0x213/0x5a0 [ 1015.437955][T20328] ? __pfx____sys_recvmsg+0x10/0x10 [ 1015.438002][T20328] ? lock_acquire+0x115/0x350 [ 1015.438043][T20328] ? __fget_files+0x3a2/0x420 [ 1015.438086][T20328] __x64_sys_recvmsg+0x1ae/0x290 [ 1015.438121][T20328] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1015.438176][T20328] do_syscall_64+0x166/0x520 [ 1015.438200][T20328] ? trace_irq_disable+0x3b/0x140 [ 1015.438224][T20328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.438248][T20328] ? clear_bhb_loop+0x70/0xc0 [ 1015.438276][T20328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.438298][T20328] RIP: 0033:0x7f3581f9e159 [ 1015.438319][T20328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1015.438337][T20328] RSP: 002b:00007f3582e57028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1015.438359][T20328] RAX: ffffffffffffffda RBX: 00007f3582226090 RCX: 00007f3581f9e159 [ 1015.438377][T20328] RDX: 0000000040000100 RSI: 0000200000001140 RDI: 0000000000000004 [ 1015.438393][T20328] RBP: 00007f3582e57090 R08: 0000000000000000 R09: 0000000000000000 [ 1015.438408][T20328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1015.438422][T20328] R13: 00007f3582226128 R14: 00007f3582226090 R15: 00007f358234fa48 [ 1015.438459][T20328] [ 1016.013080][T20332] netlink: 'syz.1.4229': attribute type 1 has an invalid length. [ 1016.013105][T20332] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4229'. [ 1016.961776][T20346] fuse: Unknown parameter ' [ 1021.230001][T20416] dump_stack_lvl+0xe8/0x150 [ 1021.230039][T20416] should_fail_ex+0x410/0x560 [ 1021.230072][T20416] should_failslab+0xa8/0x100 [ 1021.230104][T20416] __kmalloc_noprof+0xfe/0x720 [ 1021.230129][T20416] ? tomoyo_encode+0x2ad/0x570 [ 1021.230179][T20416] ? tomoyo_encode+0x2ad/0x570 [ 1021.230216][T20416] tomoyo_encode+0x2ad/0x570 [ 1021.230252][T20416] tomoyo_realpath_from_path+0x5fa/0x640 [ 1021.230304][T20416] tomoyo_mount_permission+0x3e9/0x9e0 [ 1021.230334][T20416] ? tomoyo_mount_permission+0x2b5/0x9e0 [ 1021.230367][T20416] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 1021.230395][T20416] ? kasan_save_track+0x4f/0x80 [ 1021.230469][T20416] ? kasan_quarantine_put+0xbb/0x1f0 [ 1021.230506][T20416] security_sb_mount+0xe4/0x320 [ 1021.230540][T20416] path_mount+0xbc/0x1050 [ 1021.230573][T20416] ? user_path_at+0xd4/0x160 [ 1021.230611][T20416] __se_sys_mount+0x31d/0x420 [ 1021.230649][T20416] ? __pfx___se_sys_mount+0x10/0x10 [ 1021.230686][T20416] ? __x64_sys_mount+0x20/0xc0 [ 1021.230720][T20416] do_syscall_64+0x166/0x520 [ 1021.230747][T20416] ? trace_irq_disable+0x3b/0x140 [ 1021.230770][T20416] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1021.230794][T20416] ? clear_bhb_loop+0x70/0xc0 [ 1021.230822][T20416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1021.230844][T20416] RIP: 0033:0x7fb413b9e159 [ 1021.230864][T20416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1021.230892][T20416] RSP: 002b:00007fb414a15028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1021.230917][T20416] RAX: ffffffffffffffda RBX: 00007fb413e25fa0 RCX: 00007fb413b9e159 [ 1021.230934][T20416] RDX: 0000200000002100 RSI: 0000200000000200 RDI: 0000000000000000 [ 1021.230957][T20416] RBP: 00007fb414a15090 R08: 0000200000004380 R09: 0000000000000000 [ 1021.230977][T20416] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 1021.230992][T20416] R13: 00007fb413e26038 R14: 00007fb413e25fa0 R15: 00007fb413f4fa48 [ 1021.231028][T20416] [ 1021.275413][T20416] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1021.593223][T11199] usb 1-1: USB disconnect, device number 72 [ 1021.632899][T20422] netlink: 'syz.3.4258': attribute type 3 has an invalid length. [ 1021.632923][T20422] netlink: 'syz.3.4258': attribute type 6 has an invalid length. [ 1021.632938][T20422] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4258'. [ 1021.885640][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 1021.885718][T20397] usb 2-1: dvb_usb_au6610: wlen=0, aborting [ 1021.885789][T20397] usb 2-1: dvb_usb_au6610: wlen=4100, aborting [ 1021.939121][ T9] usb 2-1: USB disconnect, device number 76 [ 1022.065579][ T5702] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1022.095277][T11199] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 1022.199706][ T5702] usb 6-1: device descriptor read/64, error -71 [ 1022.246192][T11199] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1022.247567][T11199] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1022.247608][T11199] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1022.251083][T11199] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1022.251113][T11199] usb 3-1: Product: syz [ 1022.251130][T11199] usb 3-1: Manufacturer: syz [ 1022.251147][T11199] usb 3-1: SerialNumber: syz [ 1022.291106][T11199] usb 3-1: config 0 descriptor?? [ 1022.323740][T11199] usb 3-1: selecting invalid altsetting 0 [ 1022.357626][T15996] IPVS: starting estimator thread 0... [ 1022.445398][T20445] IPVS: using max 25 ests per chain, 60000 per kthread [ 1022.445620][ T5702] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1022.446474][T20449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4265'. [ 1022.446507][T20449] netlink: 'syz.3.4265': attribute type 30 has an invalid length. [ 1022.500446][T20447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4265'. [ 1022.500483][T20447] netlink: 'syz.3.4265': attribute type 30 has an invalid length. [ 1022.555984][T20435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1022.556490][T20435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1022.585672][ T5702] usb 6-1: device descriptor read/64, error -71 [ 1022.590759][T20449] vxlan1: entered promiscuous mode [ 1022.590787][T20449] vxlan1: entered allmulticast mode [ 1022.619984][T15996] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1022.627492][ T958] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1022.627619][ T958] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1022.627718][ T958] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1022.634107][ T922] usb 3-1: USB disconnect, device number 71 [ 1022.695851][ T5702] usb usb6-port1: attempt power cycle [ 1022.733353][T20455] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4267'. [ 1022.938589][T20465] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1023.056157][ T5702] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1023.076792][ T5702] usb 6-1: device descriptor read/8, error -71 [ 1023.315268][ T5702] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1023.336124][ T5702] usb 6-1: device descriptor read/8, error -71 [ 1023.440733][T20478] FAULT_INJECTION: forcing a failure. [ 1023.440733][T20478] name failslab, interval 1, probability 0, space 0, times 0 [ 1023.440762][T20478] CPU: 0 UID: 0 PID: 20478 Comm: syz.2.4276 Tainted: G L syzkaller #0 PREEMPT(full) [ 1023.440785][T20478] Tainted: [L]=SOFTLOCKUP [ 1023.440791][T20478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1023.440802][T20478] Call Trace: [ 1023.440817][T20478] [ 1023.440824][T20478] dump_stack_lvl+0xe8/0x150 [ 1023.440852][T20478] should_fail_ex+0x410/0x560 [ 1023.440875][T20478] should_failslab+0xa8/0x100 [ 1023.440897][T20478] __kmalloc_noprof+0xfe/0x720 [ 1023.440914][T20478] ? tomoyo_encode+0x2ad/0x570 [ 1023.440938][T20478] ? tomoyo_encode+0x2ad/0x570 [ 1023.440960][T20478] ? __get_fs_type+0x21/0x280 [ 1023.440979][T20478] tomoyo_encode+0x2ad/0x570 [ 1023.441004][T20478] tomoyo_mount_permission+0x50d/0x9e0 [ 1023.441025][T20478] ? tomoyo_mount_permission+0x2b5/0x9e0 [ 1023.441049][T20478] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 1023.441069][T20478] ? kasan_save_track+0x4f/0x80 [ 1023.441122][T20478] ? kasan_quarantine_put+0xbb/0x1f0 [ 1023.441142][T20478] security_sb_mount+0xe4/0x320 [ 1023.441166][T20478] path_mount+0xbc/0x1050 [ 1023.441191][T20478] ? user_path_at+0xd4/0x160 [ 1023.441217][T20478] __se_sys_mount+0x31d/0x420 [ 1023.441244][T20478] ? __pfx___se_sys_mount+0x10/0x10 [ 1023.441271][T20478] ? __x64_sys_mount+0x20/0xc0 [ 1023.441296][T20478] do_syscall_64+0x166/0x520 [ 1023.441315][T20478] ? trace_irq_disable+0x3b/0x140 [ 1023.441332][T20478] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.441349][T20478] ? clear_bhb_loop+0x70/0xc0 [ 1023.441369][T20478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.441386][T20478] RIP: 0033:0x7fda5499e159 [ 1023.441401][T20478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1023.441415][T20478] RSP: 002b:00007fda557a5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1023.441432][T20478] RAX: ffffffffffffffda RBX: 00007fda54c25fa0 RCX: 00007fda5499e159 [ 1023.441444][T20478] RDX: 0000200000002100 RSI: 0000200000000200 RDI: 0000000000000000 [ 1023.441455][T20478] RBP: 00007fda557a5090 R08: 0000200000004380 R09: 0000000000000000 [ 1023.441466][T20478] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000002 [ 1023.441476][T20478] R13: 00007fda54c26038 R14: 00007fda54c25fa0 R15: 00007fda54d4fa48 [ 1023.441501][T20478] [ 1023.459768][ T5702] usb usb6-port1: unable to enumerate USB device [ 1023.799091][T20480] syzkaller0: entered promiscuous mode [ 1023.799121][T20480] syzkaller0: entered allmulticast mode [ 1028.488469][T20491] macvlan0: entered promiscuous mode [ 1028.897102][ T25] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1029.027264][ T25] usb 3-1: device descriptor read/64, error -71 [ 1029.265265][ T25] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1029.395569][ T25] usb 3-1: device descriptor read/64, error -71 [ 1029.507022][ T25] usb usb3-port1: attempt power cycle [ 1029.847974][ T25] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1029.871792][ T25] usb 3-1: device descriptor read/8, error -71 [ 1030.105293][ T25] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1030.125594][ T5744] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1030.126600][ T25] usb 3-1: device descriptor read/8, error -71 [ 1030.235659][ T25] usb usb3-port1: unable to enumerate USB device [ 1030.287551][ T5744] usb 4-1: Using ep0 maxpacket: 32 [ 1030.288292][ T5744] usb 4-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 1030.289683][ T5744] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1030.289708][ T5744] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1030.289759][ T5744] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.353563][ T5744] usb 4-1: config 0 descriptor?? [ 1030.397444][T20567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1030.398026][T20567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1030.399253][T20567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1030.399816][T20567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1030.446852][T20567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1030.449065][T20567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1030.456096][T20567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1030.499523][T20567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1030.569709][T20554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1030.570978][T20554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1030.605413][T11199] usb 6-1: new full-speed USB device number 56 using dummy_hcd [ 1030.610022][ T5744] usbhid 4-1:0.0: can't add hid device: -71 [ 1030.610131][ T5744] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1030.641660][ T5744] usb 4-1: USB disconnect, device number 103 [ 1030.735226][T11199] usb 6-1: device descriptor read/64, error -71 [ 1030.761139][T20561] can: request_module (can-proto-0) failed. [ 1030.985255][T11199] usb 6-1: new full-speed USB device number 57 using dummy_hcd [ 1031.242264][T20580] netlink: 'syz.3.4304': attribute type 4 has an invalid length. [ 1031.242285][T20580] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4304'. [ 1031.276123][T20580] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1031.716166][ T5702] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1031.869460][ T5702] usb 4-1: Using ep0 maxpacket: 8 [ 1031.870222][ T5702] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 1031.872051][ T5702] usb 4-1: config 0 has an invalid descriptor of length 88, skipping remainder of the config [ 1031.872108][ T5702] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 1031.872137][ T5702] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1031.872166][ T5702] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 1031.872196][ T5702] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 42489, setting to 64 [ 1031.872225][ T5702] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1031.889152][ T5702] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.889228][ T5702] usb 4-1: Product: syz [ 1031.889266][ T5702] usb 4-1: Manufacturer: syz [ 1031.889311][ T5702] usb 4-1: SerialNumber: syz [ 1031.934782][ T5702] usb 4-1: config 0 descriptor?? [ 1031.979407][T20584] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1032.021957][ T5702] ati_remote 4-1:0.0: ati_remote_probe: Unexpected endpoint_out [ 1032.035990][ T922] usb 1-1: new full-speed USB device number 73 using dummy_hcd [ 1032.075401][ T9] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1032.162002][T20605] cifs: Unknown parameter 'f,' [ 1032.187975][ T922] usb 1-1: not running at top speed; connect to a high speed hub [ 1032.188030][ T922] usb 1-1: New USB device found, idVendor=0499, idProduct=2003, bcdDevice= 0.40 [ 1032.194512][ T922] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 4 [ 1032.194561][ T922] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 2007, setting to 1023 [ 1032.201246][ T922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.201328][ T922] usb 1-1: Product: 岣沼ᒽ㾡펛᧏뭁ᯎ鰏䩾빡䯟⠥㕇퐜㘟輭妖狶呟䕟壄伌튛됌 [ 1032.201382][ T922] usb 1-1: Manufacturer: 絉Ꙧ䥻ᖕ鼍阠쿕ᒏ掮ᑊꍔ㫙Ē蟑擴ᦎ࿷᜺ꌓ꘲툰㠄᾵פֿ홡嫘ﴈ듍䱚뚷偅虲㍫덅擕춟륁⻬䪍鑽ﮐ첆἞۾勋慰䆛袱☠镆㊍垥џ쭵遘ͳ웄鐟 [ 1032.201451][ T922] usb 1-1: SerialNumber: syz [ 1032.318228][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1032.340606][ T5702] usb 4-1: USB disconnect, device number 104 [ 1032.342401][ T9] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 1032.342467][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1032.342517][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1032.415483][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.415514][ T9] usb 2-1: Product: syz [ 1032.415530][ T9] usb 2-1: Manufacturer: syz [ 1032.415545][ T9] usb 2-1: SerialNumber: syz [ 1032.504735][ T9] usb 2-1: config 0 descriptor?? [ 1032.541135][ T922] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1032.541581][ T922] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1032.574462][ T922] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1032.582519][ T922] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 1032.607654][ T922] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1032.745055][T20595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4309'. [ 1032.844156][ T922] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 1032.879752][ T922] usb 1-1: USB disconnect, device number 73 [ 1033.078240][T20517] udevd[20517]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1033.363430][ T31] kauditd_printk_skb: 94 callbacks suppressed [ 1033.363454][ T31] audit: type=1326 audit(1789466633.110:5686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20612 comm="syz.3.4317" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb413b9e159 code=0x7ffc0000 [ 1033.363516][ T31] audit: type=1326 audit(1789466633.110:5687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20612 comm="syz.3.4317" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb413b9e159 code=0x7ffc0000 [ 1033.382054][ T31] audit: type=1326 audit(1789466633.140:5688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20612 comm="syz.3.4317" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb413b9e159 code=0x7ffc0000 [ 1033.382239][ T31] audit: type=1326 audit(1789466633.140:5690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20612 comm="syz.3.4317" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7fb413b9e159 code=0x7ffc0000 [ 1033.382366][ T31] audit: type=1326 audit(1789466633.140:5691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20612 comm="syz.3.4317" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb413b9e159 code=0x7ffc0000 [ 1033.382483][ T31] audit: type=1326 audit(1789466633.140:5692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20612 comm="syz.3.4317" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb413b9e159 code=0x7ffc0000 [ 1033.428809][ T31] audit: type=1326 audit(1789466633.140:5689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20612 comm="syz.3.4317" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb413b9e159 code=0x7ffc0000 [ 1033.428981][ T31] audit: type=1326 audit(1789466633.190:5693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20612 comm="syz.3.4317" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb413b9e159 code=0x7ffc0000 [ 1033.439922][ T31] audit: type=1326 audit(1789466633.200:5694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20612 comm="syz.3.4317" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb413b9e159 code=0x7ffc0000 [ 1033.440101][ T31] audit: type=1326 audit(1789466633.200:5695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20612 comm="syz.3.4317" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb413b9e159 code=0x7ffc0000 [ 1033.779491][T20613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4317'. [ 1034.047229][ T189] usb 4-1: new full-speed USB device number 105 using dummy_hcd [ 1034.175254][ T189] usb 4-1: device descriptor read/64, error -71 [ 1034.428374][ T189] usb 4-1: new full-speed USB device number 106 using dummy_hcd [ 1034.556114][ T189] usb 4-1: device descriptor read/64, error -71 [ 1034.667363][ T189] usb usb4-port1: attempt power cycle [ 1034.757538][T20629] kvm: user requested TSC rate below hardware speed [ 1034.763493][T20629] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 1035.017001][ T189] usb 4-1: new full-speed USB device number 107 using dummy_hcd [ 1035.048781][ T189] usb 4-1: device descriptor read/8, error -71 [ 1035.307482][ T189] usb 4-1: new full-speed USB device number 108 using dummy_hcd [ 1035.328120][ T189] usb 4-1: device descriptor read/8, error -71 [ 1035.366514][ T9] usb 2-1: 0:0 : invalid sync pipe. is_playback 1, ep 0b, bSynchAddress ff [ 1035.436252][ T189] usb usb4-port1: unable to enumerate USB device [ 1035.508619][T20635] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4324'. [ 1035.584375][T20639] tipc: Enabling of bearer rejected, failed to enable media [ 1035.601263][ T9] usb 2-1: USB disconnect, device number 77 [ 1035.747923][T20514] udevd[20514]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1035.785813][T20642] openvswitch: netlink: Actions may not be safe on all matching packets [ 1036.125717][ T922] usb 2-1: new full-speed USB device number 78 using dummy_hcd [ 1036.276752][ T922] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1036.279432][ T922] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1036.279465][ T922] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1036.282730][ T922] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1036.282757][ T922] usb 2-1: Product: syz [ 1036.282774][ T922] usb 2-1: Manufacturer: syz [ 1036.282791][ T922] usb 2-1: SerialNumber: syz [ 1036.302682][ T922] usb 2-1: config 0 descriptor?? [ 1036.353193][ T922] usb 2-1: selecting invalid altsetting 0 [ 1036.559184][T20644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1036.561265][T20644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1036.597260][T20644] snd-usb-audio 2-1:0.0: Runtime PM usage count underflow! [ 1036.598663][T20647] [ 1036.608264][T20647] ====================================================== [ 1036.615312][T20647] WARNING: possible circular locking dependency detected [ 1036.622421][T20647] syzkaller #0 Tainted: G L [ 1036.628435][T20647] ------------------------------------------------------ [ 1036.635478][T20647] syz.5.4330/20647 is trying to acquire lock: [ 1036.641577][T20647] ffff8880539dd568 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x101/0xca0 [ 1036.653122][T20647] [ 1036.653122][T20647] but task is already holding lock: [ 1036.660611][T20647] ffff8880539de660 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x24d/0x550 [ 1036.669736][T20647] [ 1036.669736][T20647] which lock already depends on the new lock. [ 1036.669736][T20647] [ 1036.680273][T20647] [ 1036.680273][T20647] the existing dependency chain (in reverse order) is: [ 1036.689326][T20647] [ 1036.689326][T20647] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 1036.697122][T20647] lock_sock_nested+0x41/0x100 [ 1036.702452][T20647] smc_listen_out+0xd4/0x3d0 [ 1036.707637][T20647] smc_listen_work+0x81d/0x1410 [ 1036.713051][T20647] process_scheduled_works+0xc3d/0x1630 [ 1036.719171][T20647] worker_thread+0xa47/0xfb0 [ 1036.724333][T20647] kthread+0x38b/0x480 [ 1036.728971][T20647] ret_from_fork+0x514/0xb70 [ 1036.734121][T20647] ret_from_fork_asm+0x1a/0x30 [ 1036.739562][T20647] [ 1036.739562][T20647] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 1036.749766][T20647] __lock_acquire+0x164c/0x2de0 [ 1036.755220][T20647] lock_acquire+0x115/0x350 [ 1036.760290][T20647] __flush_work+0x74c/0xca0 [ 1036.765368][T20647] __cancel_work_sync+0xbf/0x110 [ 1036.770900][T20647] smc_clcsock_release+0x60/0xf0 [ 1036.776476][T20647] __smc_release+0x64e/0x7c0 [ 1036.781633][T20647] smc_close_non_accepted+0xd5/0x1f0 [ 1036.787501][T20647] smc_close_active+0xb30/0xf20 [ 1036.792906][T20647] __smc_release+0x9c/0x7c0 [ 1036.797974][T20647] smc_release+0x2c5/0x550 [ 1036.802959][T20647] __sock_release+0xa0/0x1f0 [ 1036.808107][T20647] sock_close+0x1c/0x30 [ 1036.812842][T20647] __fput+0x418/0xa50 [ 1036.817393][T20647] task_work_run+0x1d9/0x270 [ 1036.822555][T20647] exit_to_user_mode_loop+0x204/0x770 [ 1036.828486][T20647] do_syscall_64+0x328/0x520 [ 1036.833647][T20647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.840102][T20647] [ 1036.840102][T20647] other info that might help us debug this: [ 1036.840102][T20647] [ 1036.850447][T20647] Possible unsafe locking scenario: [ 1036.850447][T20647] [ 1036.857920][T20647] CPU0 CPU1 [ 1036.863323][T20647] ---- ---- [ 1036.868703][T20647] lock(sk_lock-AF_SMC/1); [ 1036.873232][T20647] lock((work_completion)(&new_smc->smc_listen_work)); [ 1036.882719][T20647] lock(sk_lock-AF_SMC/1); [ 1036.889765][T20647] lock((work_completion)(&new_smc->smc_listen_work)); [ 1036.896721][T20647] [ 1036.896721][T20647] *** DEADLOCK *** [ 1036.896721][T20647] [ 1036.904880][T20647] locks held by syz.5.4330/20647: 3, last CPU#1: [ 1036.911244][T20647] #0: ffff888057da9380 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 1036.921805][T20647] #1: ffff8880539de660 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x24d/0x550 [ 1036.931248][T20647] #2: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: __flush_work+0x101/0xca0 [ 1036.940511][T20647] [ 1036.940511][T20647] stack backtrace: [ 1036.946420][T20647] CPU: 1 UID: 0 PID: 20647 Comm: syz.5.4330 Tainted: G L syzkaller #0 PREEMPT(full) [ 1036.957467][T20647] Tainted: [L]=SOFTLOCKUP [ 1036.961801][T20647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 1036.971867][T20647] Call Trace: [ 1036.975165][T20647] [ 1036.978122][T20647] dump_stack_lvl+0xe8/0x150 [ 1036.982746][T20647] print_circular_bug+0x2e2/0x300 [ 1036.987820][T20647] check_noncircular+0x12f/0x150 [ 1036.992782][T20647] __lock_acquire+0x164c/0x2de0 [ 1036.997655][T20647] ? __pfx___schedule+0x10/0x10 [ 1037.002523][T20647] ? irqentry_exit+0x218/0x910 [ 1037.007310][T20647] ? irqentry_exit+0x218/0x910 [ 1037.012118][T20647] ? trace_irq_disable+0x3b/0x140 [ 1037.017164][T20647] lock_acquire+0x115/0x350 [ 1037.021684][T20647] ? __flush_work+0x101/0xca0 [ 1037.026399][T20647] ? preempt_schedule_thunk+0x16/0x40 [ 1037.031792][T20647] ? __flush_work+0x101/0xca0 [ 1037.036495][T20647] __flush_work+0x74c/0xca0 [ 1037.041029][T20647] ? __flush_work+0x101/0xca0 [ 1037.045738][T20647] ? __flush_work+0x101/0xca0 [ 1037.050443][T20647] ? __pfx___flush_work+0x10/0x10 [ 1037.055516][T20647] ? __pfx_wq_barrier_func+0x10/0x10 [ 1037.060836][T20647] ? __cancel_work_sync+0x5c/0x110 [ 1037.065979][T20647] __cancel_work_sync+0xbf/0x110 [ 1037.070947][T20647] smc_clcsock_release+0x60/0xf0 [ 1037.075913][T20647] __smc_release+0x64e/0x7c0 [ 1037.080535][T20647] smc_close_non_accepted+0xd5/0x1f0 [ 1037.085839][T20647] smc_close_active+0xb30/0xf20 [ 1037.090712][T20647] ? __pfx_sock_def_readable+0x10/0x10 [ 1037.096193][T20647] __smc_release+0x9c/0x7c0 [ 1037.100720][T20647] ? __local_bh_enable_ip+0xd6/0x140 [ 1037.106033][T20647] smc_release+0x2c5/0x550 [ 1037.110481][T20647] __sock_release+0xa0/0x1f0 [ 1037.115095][T20647] ? __pfx_sock_close+0x10/0x10 [ 1037.119998][T20647] sock_close+0x1c/0x30 [ 1037.124183][T20647] __fput+0x418/0xa50 [ 1037.128190][T20647] task_work_run+0x1d9/0x270 [ 1037.132806][T20647] ? __pfx_task_work_run+0x10/0x10 [ 1037.137943][T20647] exit_to_user_mode_loop+0x204/0x770 [ 1037.143331][T20647] ? rcu_is_watching+0x16/0xb0 [ 1037.148130][T20647] do_syscall_64+0x328/0x520 [ 1037.152749][T20647] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.158853][T20647] ? clear_bhb_loop+0x70/0xc0 [ 1037.163572][T20647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.169672][T20647] RIP: 0033:0x7f3581f9e159 [ 1037.174121][T20647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1037.193745][T20647] RSP: 002b:00007f358234fba8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1037.202208][T20647] RAX: 0000000000000000 RBX: 00007f358234fc90 RCX: 00007f3581f9e159 [ 1037.210202][T20647] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1037.218206][T20647] RBP: 00000000000fcfa9 R08: 0000000000000001 R09: 0000000000000000 [ 1037.226197][T20647] R10: 0000001b30020000 R11: 0000000000000246 R12: 00007f358234fcd0 [ 1037.234183][T20647] R13: 00007f3582225fac R14: 00000000000fd0d9 R15: 00007f3582225fa0 [ 1037.242183][T20647] [ 1037.280609][ T922] usb 2-1: USB disconnect, device number 78 [ 1037.294245][T20571] udevd[20571]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory