last executing test programs: 20.515042504s ago: executing program 1 (id=3904): clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f00000000c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000f00), r3}}, 0x18) futex(&(0x7f0000000000), 0x100, 0x1, &(0x7f0000000080)={r0, r1+60000000}, &(0x7f00000000c0), 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12010002e217be0834073b04c3e9010203810902120001080900070904"], 0x0) 19.132190905s ago: executing program 1 (id=3913): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000390007012cbd7000fedbdf2504fc00000a000180b65233e369b00000"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x4c814) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000080)=@add_del={0x2, &(0x7f0000000000)='macvlan1\x00'}) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f0000000440)={{r0}, "442dbf14240e4b9ba93aafc63e76bd9ea04d8ef37b5aaed6c4fd3d737b6e247c9a485e14250842409f6f55f14c429b63970350b4cb5ec7387416abec44b877a2aec5a93c3fa64be432da74836eb79b584a74067a2394d6bbf99038d227f009013c82e2119ce320e16cbe791d88743cb77f9eeb2950d75c0e920d89fefa43dc1d7e0805421d05298fe1ff398c736406147ac8433205fae6cc10b21e79ede3d29b895ee75039e15f033b0fa186fe2a2ac5cf4450ca2158a8d1dd6096c4a49463ab82f5bcec0390a056b76b998866316a1edbb61db2ba969f0e32fe8dd24f748f5ed588bae6939367272f94e46700c0040fd4392fc7a5942b9a006692a11ca46e3f2ff7d0af77288f522bed856270d80aa48124fee2b083deada353c83e2d988f34963a34a7b0fabdcd0a68b88c94a507509cc12c9443314713cf3fb1340e746fcf544c5a0be23927d511688e70c6c6bd2d037b9be3295eb38c50249f0231a373a1dad7fadf87ba3947295420fee981507cacdc209246b2c804a1dd23bf806c8e2a07e46c37cfc69e71f95610b65da3bec59f0cb3aeb992ea790b31fc91864b962f68d48742f9069785705eb9b425ffa7b6b8bfbe3954ddcf7941df2b978671d3f5edbd141dc347f31ef656e64e249713ebb1c1c20462daaecb511c658dd847ce61cd66dfa4cc85648815023cc2188543f6e97ed45a7beb848c3f0ad7d13dc2cd7e5e9e519bc37abbfbdde255486c21c07ea8e6004ae50371409104802bdd79b91eb210369bc05ea62ceb895f726da5a3022ec40a15aba13353ac20bca9a6652795a99e2f29f1e17599d619a8d6c071b2aed5e244ebed5b7239111a0ab7163908015ac390bff175f95dc700eadd79ef4213ee69ca76393590fd4567c89c6c0dfdebc50af1459a88f26874f7ce6f011bcf252e5899379696ff1287a443546ed4456c8a4949f25405771d5480b46a4822a4e1a36e4eabd6d0c19016a830e0a42f01e4389ad05a1c75be3b38bbfcb30cc2285293d9e665f52055852c7f55e09201b491f3b703e0098c698fcb8ba8d8f2de5c48291099e59fb352743b337b29a6eb20cc55d1cf0e3cdbeebf9ce190d5fb68879cc2ae6972f36b4b995c74a6f9ddd0cc437464d304db855928ac2a8de65d489895d4cfc3f132606dd92b785cafe6fd04798be9ab9da813c862e79188bc6aaa74fccfd866d5be1c7b750068bbc57a2eb1e2a6a692bb147cad9e27977d7a8f20dd892658a54043d0229db0903e18750824d94d22117b71f6029b65fdf35c41735d9aacf19f3477e19cc2a8252cdde470eb247288637b71bd6c107b16150a1b2b0149e8262c72500891c741f482e60ebcc37fb99e4ed5660f17ebe437a71962f5acaec0592c170de5795f195b7b7d209aed30370010b62c93914edc3d35b28350c6549ea666bd73f40675c0c71c2f24880ec41cb15393eb3638c2d3f4e8a1294da1d88c130b23eb0b55309ec7791647ce5e755ad7cb2cb9e68a42f042c2cb90f0bc7e04376836df8951ab4411b8652e2ba965fcb4748f7796e982db673b75342af4edf75f4326882d9f086cbf62c67f3828d29b20732a4f7918585855b128e63aad5ac9a7f077be85bd3ea3a8c35bf4493e8f9a5cf4669feafc0d271002abbe190b539e5837bd1ca44aafbb22a799c169090639dc1a9016ed7a72db51fcec4e971fc106b67451d6e4f67e2b85cd2b43242d5c0c78e51ee84a6659c72cd2fbd550cfb2e98414870bf60d5c52acd3132660e171b9b19fc6a0ff4dee57e7cb7c99f0c01b88d038a64d2ba618f31f92a486c9bd519de799bbc2eb115af575316551c96ab1336b5c2a63adc64e6b03d58dd02b31da735d6e2799aa478dec9b7b85d96f21f24e413cc14c0f6cb7c1452355cc4582af36081772c249191d36edeaaa448a73d37695991342c90a25b65790e16055f749bfc66e800277ec3ce9fc955d2e06d4ea80049267959b1374cdff4e8ef8b37e21be9cabcbfc18ae6969308e20a38cdf135f5d4e26c70cc3278683bfe9a8c292963c49f5e0d1e506324044df12433566d8df9fb1d8ad92637adb9716761b0079c667987288ce84821e16a8005d4c21ae54b5b2b828ee0ae716e906444804fa2a1dd5faff867e0e92735a4508158784fa8d6259e616a83cc2f51483c4b0ed841532a4ec4ba963b93c212f082aaed08813a577ca5ae9c454b3524f785b3f21154823508141c23a7b98ab85121d38837cdaf2339f757b0c130a60e967189b1fc69f59f25ff76854dd5d48f4f7f8a7a6939921569dc58a66c8bed9e5531c0e33524f9084c92885497b8bdd1a9ff8ba2f012e835dcaea5a8c57a88a036213dc2c8d7c2ec24c314c4d20dd03b78fcadf7fb532825827d38b554ec3f37b2195bd4c4df1dbc7d4edc5bdb08f9f8fc1f8f4149db089f6806f7e0d71ed73f1a30a5e4a6b0801f953c90152c6ebbbd08cbffdb1c85a426d5710310e8bc325c6d903f4a68bb149b1a9195812eb180e27ecb202610f4dc8750db81b2ac8be4d9602deca7f908a34697de9fd0323af9e47106f13470d461ce9193d228e5a3867a7fd346dd2fee41f1e5de842342aae7b7f22733190f1c731a765094cb947d8eb575926449864ed93a4d266157b5a016148b5e4b28ce0e228292a064594fbf65068879c7e7163e43709f05888757723b44f16b86ed79d0482fbe1f38c3310c9f7e1ef2cc8e561dba1e1cbf18304d4e595267ee8ed4b4d7fca6fff0e7e5bb9d79f48dae597250164698b6f9995d56e6bfae065cbda47c020687161e7308ec8d546f620a358490be66f50640172f5faadd770860139651f5689068bba5f9c653ab8ba1f1bb7b130ea19df19230c4abcf52c5655faa781859f11a7ffd0e064d6129f92e7d65bc4f4a68a116bed890131faff92761521ffe5696ad41b56978f669e8a355d878a14c0d3adb55ba10ca610784e10a75a808f80529ad2d686d64d1c409881c36a782bbb0e9d2ca7eb875b4bbb3230606eadc893f250ec8be80f523d5015e40d65d237a112861575d46afed01c255992356c0784095b0264d91cdd29ca732cab56d98320c154043ca32d07ccbb4f09ff28af44bf530f405647fe960e34cffd3f1a08b3eba7712a6767635bb902cc9640828b2abf22bb0651fa005e9347504dfd73fe2c9650a5319ae631ab1aa6efe5eedad35a778f43393abe8dc99e85b03984622dc6e24e19d538d807807a68f24884ff9a6ce4b24241b2a4785b0db0714dec1247f4726166e594c48e90f476a2618adbeaf8747e9c0b81e9fbfaeea5eba29cd5608d08e762bd9d1da85d7a226f17f45a39526f024005c58db09869363e27149c000c40ca0444eb2f99c1662b688433c6cc88798484aae5c21650199952350e2aed3e53c75ccdd688ec3201db97255321addf7dbefba0539862c43638c3228d00076beca427b9eaa60e468ca44995a0dde7cb4b5269ba0d895d75dfb713a82f44c0143253f8e1a66cc258986f7d85e1f1a7e89614d09c30acfc5e520a6b5332bff3ef0ef72cab5fda707781489767056b4b9c31194c8725261a41751188df11b7c0343618700f2bbec261af33ab2f2271ae7b45adbe18e4b633c15819b1cd2d1c249cd14d3eb2db4779e6c60891d619c65a0715dad2c8ccc45356663a6cc204e325f5dee4ce010cf4dff5a7c51672a3d53b7fe491eeee78fdba0e9832dc8e32ab0c693c88e15929d2d76d8d958d9422bb1d86ab51710315cb936fd405bd4f5b8e8ac02e0396ef986ec3484a182bc84a302ad3a7be9b77246d1753d18c10f4adde356db22b7357415f3e733d85486b7d0e9088bd8676fe3fc1f42a8724250cff1908a3dae87f10a695e4a93112e77417dd0d5306823f83cab6be00a9ad548bebb42849fa1d2946719aabcd7a7763fe899fc778f96af990857cb79941f47542bedfee6c5e861e882a532ee6fcc41b8707c1fc7f884559c7572a55d1967f30ea492a259923b7d725804712edc424b0f24fb946e3bf8d548faddba50d2e16558e4a17f3f157bb0c6caefe706dfc56205b9cd83e9c85221e09bf99be7d7b58ff9ad4d19c1dcdfd6726c6807d34778a7a618dcd18f01c7fca93fea22de51dfee379a669b090e7113705c8a35c88e57666482b4687ff3ecb0e17d99469b2ed36bac89daabe32ba0a7b3994cdcb917540a4044fe630a470f23038e4f2f7a7aa7cac5c077e1ad152c2ca612dd8835b55f0a859d2cca182275e9364d3bce5fd428348f69e051b601b6250160bb6e9c0dc40d3a7ac9893a607f6bd7dded45fe2063e9af1ff900ab31c2023e33793c2443d8b89161fa5aa3abec7402b1288c80e9d0f6d4bcbc8d52ed3802700331a83ed40130412dcf112bbaef35407d27ca564f73078e3b243a954daeb38b3691d532756c67e5afa96b4240ba3423192c83fe57f843632125c0c75b5f5324ac882fa6db02687210b824de1ca8b154bddfa41d54e2957a77db169ea3e5a32a5db7889f3edaed5fc3f0070c66bb9d904ca1bf9c3c352396b2b503c65e40dcc1b0bb88a117703a85e9ed82aa3c4a8f8f3364edb63c451cfd7b05c4f6d2d514c5a0abc5f853d3710cf182504c522c4c5df2dc1485860133f04e85d8ccf85bd4e2bd397042f156d4b9327c9d8c31eb6d974842209ba4cec358085e20545d17a4effdc1d479d674ea917ff8f19c83a931f63a52bbe4a686397892f284984223ed8e6c0f731fa2184838528d91cdbb01303f1b6f11a2c9b949eefc6053a0dd9d83ac5a27e4a1fdb5b2f018379bba2bfd47bbe2f21b7941bcb083c3ae90213aa292c6d85c0af3baa9b0c3ef40fdc95bb0ebd89741d5391ece011d14b311c7099a1b19592efe706faff1ca661c395287792e9df818185b80a423d1f1432f2c881772588023b89f619e3add5436aedc18802168cb4c9350569779e7d2f3af6f8a02bcfbe73b48353ed3eb35ca4c94c6bedf7e54afc37a17d8421b0b739c9b5ecd759ca8e83894a2ecfc75b6a4a6f5dcb9a94d528c03c49f266d036e93de6fc92cd9aef6e414fb47efbf0f18567b687763802b233f1d4c5f21914abb1961a606c8a04f54c3b2886143a11bc6a55d0ab70e3b6a2aca3a5f5737d697b228a4439373e01290fa89fb1f66c6e3c4b8759ac41049655199a0161505e764c2e928d2dd8c3e3b7b252f265f520a5e228e2e423c1daeb543ff54ece4c4b18e6d806c93daf15e20ef0a4f70a94a4f0f2eec25eedca64eda984123753df3773e2cee90a187013b04652fdd4a9dc7e889d37b5c857fd6bc3a9b8514121097a5016c03250dfa2b6bb4cde0eaf37e52cf098aa007d1cc084b677acb9b58ad17c44e6310e0db38ac51f9dc1c2852b8e2c591df0b8a98f20a6b15d94aa7c4d0d80083387bb86d541d867afe1e04a4dc1f60f2ed4c16889c03bc68e26bd1db278d0cac7a1e1b624b4c8855dbdef515a02292ae4c4d69bdf833050e4220e8480e7277a15a4c8e29f302e31e27543a8d50ae1c8fca3ec620858ed1875ad32b159fee3a2efc22d8d9f7dbb52953236e19ec99f088e4cbeab56676be2465cde113dcd58b72f11512b6946ffb3d215362648f0d1ce9d0fb122a5eec319d4c4e2be24a52943e0b8f3fc6bc6a29fb34b035c572f3a66746648a5acd8448e6f7674b469c4a787c5d720b8db022698302e79007ccca4878e0ad00fe59bb17345c0fc624023c63dc2e3db1ceeb562354b099ba0bc85d098eb47f5a3362b1daffe1e43483d36d169793123aa721097cc3a5fd0347267f12ede77f1a8485e43eff364ab154fb738948d"}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_open_dev$usbmon(&(0x7f0000000000), 0x73, 0x400000) r5 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000098000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000006c000480680001800a0001006d61746368000000580002800e000100686173686c696d697400000008000240000000013c0003002e4a2c"], 0x10c}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r4}, 0x8) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f00000005c0)='cpu.stat\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_open_dev$vim2m(&(0x7f0000000280), 0x9, 0x2) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00'}) read$FUSE(0xffffffffffffffff, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(r7, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r11, r12, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000006c0)={0x0, r11}, 0xc) ioctl$vim2m_VIDIOC_S_CTRL(r9, 0xc008561c, &(0x7f0000000400)={0xf0f020}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x18, 0x9, 0xfffff00c}, {0x40, 0x0, 0x3, 0x5ae7}, {0x6, 0x0, 0x7, 0x2}]}, 0x8) syz_kvm_setup_cpu$x86(r7, r7, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f0000000180)="b9800000c00f3235000400000f30c744240014000000c74424020f26cea1ff2c24b92d0b0000b8469b9c94ba000000000f300f01c866420f38803442b9a30300000f326426470f019cd5a523ccd9670f08b97c020000b800700000ba000000000f3066b8c5000f00d0", 0x69}], 0x1, 0x4d, &(0x7f0000000300)=[@cr4={0x1, 0x20200c}], 0x1) 18.871446887s ago: executing program 1 (id=3914): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r5, 0x40304580, &(0x7f0000000b40)={0x54, 0x9, 0x1, {0x1, 0x1}, {0x60, 0x2}, @cond=[{0x7f, 0x2, 0x80, 0x6, 0x3, 0xe8}, {0x3, 0xffff, 0x1, 0x1, 0x2}]}) write$char_usb(r5, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 27) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000060a010400000000000000000a0000010900010073797a3100000000220000001100010000000000000000000200000a"], 0x48}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x10000004, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x804, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0xa, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x10005, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x4001, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x9, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0x2, 0x10100, 0x1, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000003c80)=ANY=[@ANYBLOB="020000000400000006000000aa"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000b40)={0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x7ff, r8}, 0x38) r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r12 = dup(r11) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000840)={0x5, 0x2, 0x3000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r11, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r13, 0xae80, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001300010029bd7000fcdbdf2500000000", @ANYRES32=r4, @ANYBLOB="201000000904000008000a00", @ANYRES32=r2, @ANYBLOB="28f87d3b6618225b1ae34ceeac1b0d0df7b5ff8573363b43b06f3decded2916abb6a03454fba378f784996eb0c2767985336f15034aa553f5436f3f5e23a44c155c16247d701b73c3eb0741ecb221f9e8685ddb8a586093855ddcd956d279784438cfbeb0d258dcb77bcd87f3face961ded5a7796f418126ceb45513a18ca4c2c88580311606b540c0d43e87c23bf0646940ca889eca26e36ac97c83f3541e9c0dad"], 0x28}, 0x1, 0x0, 0x0, 0x24004000}, 0x8804) syz_usb_connect$midi(0x0, 0xee, &(0x7f00000007c0)=ANY=[@ANYBLOB="120101020000001030144b474000010203010902dc000101fd40070904000006010300040624020205c707240109000700072401840007000624020206030b2403020e020fbb0b050007240100010700062402028004152403010407010704040901050606070f080b070206240200010509050c030004050e05042501000905001008"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) 16.699890252s ago: executing program 1 (id=3925): syz_clone3(&(0x7f0000002440)={0xa200800, 0x0, 0x0, 0x0, {0x3c}, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x58) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x0, 0x48) openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0), 0x20000, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) userfaultfd(0x801) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)=ANY=[], 0x50) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) futex_waitv(&(0x7f00000024c0)=[{0xfffffffffffff000, &(0x7f0000000340)=0x3, 0x82}, {0x4, &(0x7f0000000380), 0x2}, {0x8, &(0x7f00000003c0)=0x6, 0x82}, {0x8, &(0x7f0000000400)=0xfffffffffffffff9, 0x82}, {0x5, &(0x7f0000000440)=0x9d, 0x82}, {0x40000000800, &(0x7f0000000480)=0x3ff, 0x82}, {0xfffffffffffffffb, &(0x7f00000004c0)=0x7fffffff, 0x2}, {0x8, &(0x7f0000000500)=0xfff, 0x2}, {0x2, &(0x7f0000000540)=0x6, 0x2}, {0x16d55cf0, &(0x7f0000000580)=0x8, 0x2}, {0x0, &(0x7f0000000600)=0x5, 0x82}, {0x400, &(0x7f00000006c0)=0x7, 0x82}, {0xd, &(0x7f0000000700)=0x93c9, 0x82}, {0x8, &(0x7f0000000740)=0x4, 0x82}, {0x7, &(0x7f0000000780)=0x2, 0x82}, {0x2, &(0x7f00000007c0)=0x2, 0x82}, {0x1ff, &(0x7f0000000800)=0x5, 0xc3}, {0xe, &(0x7f0000000840)=0x2, 0x82}, {0x3, &(0x7f0000000880)=0x2, 0x2}, {0xb7c1, &(0x7f00000008c0)=0x200, 0x82}, {0x7, &(0x7f0000000900)=0x3071, 0x82}, {0x7fffffffffffffff, &(0x7f0000000940)=0x80000000, 0x82}, {0x8, &(0x7f0000000980)=0x7, 0x82}, {0xffffffffffffffff, &(0x7f00000009c0)=0x81, 0x82}, {0x7a9, &(0x7f0000000a00)=0x9, 0x82}, {0x3, &(0x7f0000000a40)=0x8, 0x2}, {0x1, &(0x7f0000000a80)=0x7fffffffffffffff, 0x2}, {0x0, &(0x7f0000000ac0)=0x7, 0x794f95716d57f652}, {0x3ff, &(0x7f0000000b00)=0x9, 0x2}, {0x3, &(0x7f0000000b40)=0x9, 0x2}, {0xb1, &(0x7f0000000b80)=0x10000, 0x2}, {0x3, &(0x7f0000000bc0)=0x7fffffff, 0x2}, {0x8, &(0x7f0000000c00)=0x12dde, 0x2}, {0x6, &(0x7f0000000c40)=0x2, 0x2}, {0xffffffffffffc000, &(0x7f0000000c80)=0xfffffffffffffff7, 0x82}, {0x4, &(0x7f0000000cc0)=0x7, 0x82}, {0x7, &(0x7f0000000d00)=0x4, 0x2}, {0x9, &(0x7f0000000d40)=0x7f, 0x4}, {0x2, &(0x7f0000000d80)=0x5, 0x82}, {0x100000001, &(0x7f0000000dc0)=0xf5, 0x2}, {0xa0, &(0x7f0000000e00)=0x3, 0x2}, {0x6, &(0x7f0000000e40)=0x3, 0x2}, {0xf76, &(0x7f0000000e80)=0x4, 0x2}, {0x3, &(0x7f0000000ec0)=0x4, 0x82}, {0xfff, &(0x7f0000000f00)=0x4a6, 0x2}, {0xa0000000000000, &(0x7f0000000f40)=0x3, 0x2}, {0x2, &(0x7f0000000f80)=0x7, 0x82}, {0x5, &(0x7f0000000fc0)=0x7, 0x82}, {0x80000000, &(0x7f0000001000)=0x2, 0x82}, {0x61c, &(0x7f0000001040)=0x1000, 0x2}, {0xfffffffffffffffe, &(0x7f0000001080)=0x2, 0x2}, {0x1, &(0x7f00000010c0)=0x3b, 0x2}, {0xfffffffffffffffe, &(0x7f0000001100), 0x2}, {0x4e, &(0x7f0000001140)=0x10000, 0x2}, {0xed1a, &(0x7f0000001180)=0x7fffffffffffffff, 0x82}, {0x56e, &(0x7f00000011c0)=0x5, 0x2}, {0x3, &(0x7f0000001200)=0x7, 0x2}, {0x5, &(0x7f0000001240)=0x3, 0x82}, {0x100000000, &(0x7f0000001280)=0xb6, 0x2}, {0x9, &(0x7f00000012c0)=0x5, 0x82}, {0x3, &(0x7f0000001300)=0x9, 0x2}, {0x7, &(0x7f0000001340)=0xc6f, 0x82}, {0x2, &(0x7f0000001380)=0x7, 0x82}, {0x18, &(0x7f00000013c0)=0x9e, 0x2}, {0x10001, &(0x7f0000001400)=0x7fffffffffffffff, 0x2}, {0x40, &(0x7f0000001440)=0x3, 0x82}, {0x9, &(0x7f0000001480)=0xb, 0x2}, {0x2, &(0x7f00000014c0), 0x2}, {0x6, &(0x7f0000001500)=0x8, 0x82}, {0x5, &(0x7f0000001540), 0x2}, {0x9, &(0x7f0000001580)=0xe08, 0x82}, {0xff, &(0x7f00000015c0)=0x1, 0x82}, {0x6, &(0x7f0000001600), 0x2}, {0xad5d, &(0x7f0000001640)=0xb9, 0x2}, {0x8, &(0x7f0000001680)=0x4, 0x3}, {0xfffffffffffffffc, &(0x7f00000016c0)=0x6, 0x2}, {0xfa, &(0x7f0000001700)=0x1, 0x2}, {0xd1, &(0x7f0000001740)=0xa, 0x82}, {0x5, &(0x7f0000001780)=0x800, 0x82}, {0x8, &(0x7f00000017c0)=0x2dfc, 0x82}, {0xe, &(0x7f0000001800)=0xd7f7, 0x2}, {0x6, &(0x7f0000001840)=0x9, 0x2}, {0x100000000, &(0x7f0000001880)=0x30a, 0x2}, {0x0, &(0x7f00000018c0)=0x83, 0x82}, {0x3, &(0x7f0000001900)=0x2, 0x82}, {0x800000000000000, &(0x7f0000001940)=0xfff, 0x82}, {0x6, &(0x7f0000001980)=0x9c7, 0x82}, {0xffff, &(0x7f00000019c0)=0xb7, 0x82}, {0x7, &(0x7f0000001a00)=0x6, 0x82}, {0x200, &(0x7f0000001a40)=0x4, 0x2}, {0x4, &(0x7f0000001a80)=0xff, 0x2}, {0xa, &(0x7f0000001ac0)=0x1, 0x2}, {0x3, &(0x7f0000001b00), 0x2}, {0x8, &(0x7f0000001b40)=0xffff, 0x2}, {0x3, &(0x7f0000001b80)=0x100, 0x2}, {0x5, &(0x7f0000001bc0)=0x7, 0x82}, {0x0, &(0x7f0000001c00)=0x5, 0x2}, {0x10001, &(0x7f0000001c40)=0xffffffffffff3339, 0x2}, {0x1, &(0x7f0000001c80)=0x8, 0x82}, {0x5, &(0x7f0000001cc0)=0x62e, 0x2}, {0xbc68, &(0x7f0000001d00)=0x5, 0x2}, {0x80, &(0x7f0000001d40)=0xfffffffffffffff9, 0x2}, {0x7, &(0x7f0000001d80)=0x6, 0xd93d49002c2c7130}, {0x2, &(0x7f0000001dc0)=0x6, 0x82}], 0x68, 0x0, &(0x7f0000000300), 0x9657b55f7dd6eeac) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc1b}, 0x28) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6, 0xe, 0x4, 0x4, 0x2, 0x1000, 0xf1, 0x0, 0x7fffffffffff9, 0x10000000005, 0x0, 0x1, 0x0, 0x5, 0x0, 0xbde], 0x1000, 0x3c4210}) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000200)={0x3, 0x1, 0x0, "ee4f6da8d2cf4011ac7b00", 0x32314742}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x408d6}, 0x24008011) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000180)={[0x3, 0x934, 0x2, 0x100000001, 0x10001, 0xf69f, 0xdc66, 0x201, 0x100000000, 0x4, 0x10001, 0x20000007, 0x400, 0x7f, 0x6071, 0x8], 0x4000, 0x8000}) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x12}, 0xfffffec9) socket(0x80000000000000a, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[], 0x14}}, 0x0) 16.106436523s ago: executing program 1 (id=3929): socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x4, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x1265, &(0x7f0000001ac0)={0xffffffffffffffff, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fa, 0x0, 0x0, 0x1c, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1cac3f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f050500000000e354b98ef0000000000000000000004000", [0x6, 0x3fd]}}) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f000098d000/0x2000)=nil, 0x2000, 0xc) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, {0xa, 0x4e24, 0x4000000, @local, 0xa000}}}, 0x32) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x1c30c0) ioctl$EVIOCGNAME(r3, 0x80404506, 0xffffffffffffffff) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r4, 0x5b04, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)={0x0, 0x0, 0x1, '\"'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_usb_connect$uac1(0x2, 0x83, &(0x7f0000001d00)=ANY=[@ANYBLOB], &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0}) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$printer(r6, 0x0, &(0x7f00000001c0)={0x34, &(0x7f0000000840)=ANY=[@ANYRES16=0x0, @ANYRESOCT=r5, @ANYRESOCT=r0, @ANYRES16=r6, @ANYBLOB="9eb4ac5b450f5c74017ea67f787afcb9ae3b2432e6418c57f13870bc896ac77faa7c25712261d330859bc19170134267f742f575440db95f327702dfb0b1eab8cd2060d8d85b8bf5983d6279445c1b29eb6292bc4d353b83501731e238830dad25167fddcaae77eb2fa457cceeead901a4bd5c9e7e4107e9b8a1a482aaa5ac92192d70d9d31c2b385cab2f609cb5e763c70ba94c8d767e04fd253284d990"], 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r7, 0x80015b1a, 0x0) r8 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201010200000010666602884000010203010902240001010030c90904000e010301010009210a00770122e60709058103ff03030548049f167817a19d79fc7ca12169601a02bb54e3cc03163da8e422234a94c3212fac5ce355d6b1bbc6afa86e623fc241bd43638f4a60d8cd58685378514c4c87af3d36a03f5a6fa64dba5e1622e3576c0e0c9ca10cd30bc98fc08b1632536c1e1242418471de2c175504702e4e95e4b86912efe7698a2853c7f59ceb4c3bc50df58a4f13c8b0d80f0b5617ed376d75a5d1af7b403e719f8d1253ad0209379a8c356f"], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x0}, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f0000000200)={0x14, &(0x7f0000000100)={0x0, 0xe, 0xa3, {0xa3, 0x22, "d603a277ab76fb810921ca5aec7b861f78145ce9f7c4d31f2519b9dc24ff12dbe21e6a45198e67a5b2b9ad134a0c2d3f405ab81f0da1da903105e66a02dc822af42ec7e88dec95f3a34ccd10bfadb734c18bfcdda7970036e5050b35fd3e90a616b6cefa4a22383cf9e6fab0c1fa1aa033f68f1f6203111079ec236c121dbc49096b2d1316af1c444aa7bdfa6b45fcf72e37e9d8421ae41a84b9ed353332fc1aed"}}, &(0x7f0000000300)=ANY=[@ANYRES64, @ANYRES32=r1]}, &(0x7f00000003c0)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="171312000000"], &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x8}, 0x0, &(0x7f0000000340)=ANY=[@ANYRES8=r7], &(0x7f0000000380)=ANY=[@ANYBLOB="4005050000c780bad90000"]}) 12.861460917s ago: executing program 1 (id=3938): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) write(r3, &(0x7f0000000200)="60000000100001000100000000000000000000000000000000000000000000000900030063616e3000000000340012800800010063616e0028000280240005006e6fd78aba62b914c202cc049c00b3204f4ee600e4940ce1a96e7688a1070000", 0x60) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {}, {0x6, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_EMATCHES={0x8, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) socket$inet6(0xa, 0x3, 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000080)=0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0xfffe, 0x6, 0xfffa}, 0x52, [0x8000, 0xc95a, 0x10, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0xa, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x2, 0x7, 0x205, 0x8, 0x4c74, 0xffff7fff, 0xe06, 0x3, 0xe, 0x0, 0x3fc0000, 0x7, 0x1000017, 0xffffffff, 0x7, 0x5, 0x80003e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x0, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2009, 0xfffffffc, 0x573a, 0x0, 0x0, 0x5, 0x2f, 0x8, 0x312, 0x66abcbd2, 0xea4, 0x20000000, 0x4, 0x1007, 0x0, 0x8, 0x400, 0x401, 0x6, 0x0, 0x20000ff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x48, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8003, 0x1, 0xfe000000, 0xffef, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000008, 0x7, 0x0, 0x3, 0x9, 0x8c93690, 0x42, 0x3], [0x6, 0x40a, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x0, 0x1ef, 0x3, 0x8, 0x86, 0x1000515, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6cff, 0x6, 0x5, 0x200, 0x1fd, 0x80, 0x7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xcc, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ef, 0x2006, 0x80a2cd, 0x4, 0x25], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x40, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x1, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x8, 0x4, 0x5, 0xca, 0x1, 0xfffff000, 0x10000, 0xf, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000008, 0x3, 0x226, 0x4, 0x5, 0x84c0, 0x30b1d693, 0xa1f, 0xfffffc00, 0x7, 0x530e, 0xe1c4, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000800)) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r8, 0x84, 0x8, 0x0, 0x0) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="8b3300000000fffff00005"], 0x38}}, 0x0) 11.620921033s ago: executing program 2 (id=3943): syz_usb_connect$uac3(0x5, 0xba, &(0x7f0000000140)=ANY=[@ANYBLOB="12011001000000080c2018104000010203010902a8000301081001080b0001010130350904000000010130000a240108440005000000142402020404060409000000030080000200070013240303050404050200000000ff00ff037f00132403040304040410090000000600ff7f0d0009040100"], 0x0) modify_ldt$write2(0x11, &(0x7f0000000100)={0x5, 0x20001000, 0xffffffffffffffff, 0x1}, 0x10) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000980)="cd6fa1d1839978de85e2809882a3713be979d5a5a19255ba8ba7d5f1c72c1aa15f841a770a585c63dde13ba26d9d25ac268ea5ffde5fa73f6d5c55a15e6e2c1067e392a93b95bae460b21f50c300c95b181533923eee41cf97e991196ff47dad4dbbe69021b39181a0302186b10b68534993820f0cc22dde380727e5df927221db07061547219e17e7") ptrace$cont(0x20, r0, 0x200, 0x7) ptrace(0x21, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 10.789181999s ago: executing program 3 (id=3945): openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000009b80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a90000000060a010400000000000000000a0000040900010073797a310000000064000480340001800c0001007061796c6f61640024000280080001400000000a080003400000004f080004400000003808000240000000012c0001800a00010072656469720000001c00028008000240000000130800034000000029080001400000000e0900020073797a32"], 0x6c1c}, 0x1, 0x0, 0x0, 0x40}, 0x24000800) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffff, 0x7, &(0x7f0000006680)) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f00000000c0), &(0x7f0000000280)=0x4c) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f00000000c0)=0x6, 0x4) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000cc0)=ANY=[], 0xfdef) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003880)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x9, 0xfff3}, {}, {0x10, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x1000, 0x0, 0x5}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40004}, 0x2008c810) socket$netlink(0x10, 0x3, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4d8, 0xf002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) r8 = syz_usb_connect$uac1(0x6, 0xa0, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x582, 0x3b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x3, 0x1, 0x8, 0x100, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x19}, [@selector_unit={0x5, 0x24, 0x5, 0x4, 0x5}, @mixer_unit={0xa, 0x24, 0x4, 0x6, 0x0, "d308ab8bd9"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2, 0x1, 0x5, 0x9d}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x6, 0x6, 0x33, {0x7, 0x25, 0x1, 0xc, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x7, 0x2, 0x3, "fbc65188d6"}, @as_header={0x7, 0x24, 0x1, 0x2e, 0x9, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x5, 0xd, 0x1, {0x7, 0x25, 0x1, 0x4, 0x2, 0x3}}}}}}}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x250, 0x10, 0x7f, 0x7d, 0xff, 0x24}, 0xca, &(0x7f0000000d00)=ANY=[@ANYBLOB="050fca0001c5100a7d01a3a41947ecbdf6918d757879601e18a2f4e205f5cdb1ca2b35f14129a3a9652139db83a50a5e7e581d59aaef66e1000d0f5bd5cebc65242c7a6cf397c6ff3d45a6ce3a49c4a15befe070711a1c415e5193f809032b8a44f7016e2c87930b70d0bc96dbf10dc8f7f456f66f105f8b5c4c3f0aa9a686a984733b505f36262577f74502250762a156e18ea309ccd1f5e3b4b5d2689d409df07093025c00279671a729b7fbb64d66b9e4e1709448a9282b143b409243cd667c89e82a6c52bf496f61e71764f4622becdf6b548872dce0"], 0x6, [{0x42, &(0x7f0000000340)=ANY=[@ANYBLOB="4203f2a53692ca2260ce3fc82658cc3b61c6b16e5f3ee57550abb4743592adb92deb533a958f7b1b0dfe33f2d4aef435e7d7e79d9f5c27e02df4d62cb7cd7205fb6ae6de9ac2097ee091cde4e29273dd59f729d67f130d8c8e95b2e4903e9ea09650d696b2867674e867dd7cf693488ba6abc82fb66f24c7c42077241f109c2763e7fbd919a980680f8a99983d64c16b1987405cac6d7e0df07f72b79dc4c5aebe822157c7b4ab450df8d22454f6d59294e4cb496a0993e55db74752deb668613f4881da233fc9af1e587dd0eb77d848"]}, {0x61, &(0x7f0000000600)=@string={0x61, 0x3, "a6eca3203403bb28deb9324e218886571171e53f7979fa517f91a7f2accf32a64b37b1dc243c1c5c38de99cdfc180a598ca3c5b57326489221baff6ef7f2c8ccd9a281bb23740b7dfe206e6570babd541a929db8de165e23de9a417d000ff3"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x3009}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x2427}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x814}}]}) r9 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r9, &(0x7f0000000800)=[{{&(0x7f0000000280)={0xa, 0x0, 0x2, @mcast2, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000002900000043000000060004"], 0x18}}], 0x1, 0x40000080) syz_usb_control_io$uac1(r8, &(0x7f0000000940)={0x14, &(0x7f0000000800)={0x0, 0xa, 0xe4, {0xe4, 0x21, "e9de1d95be52ec179d92fe6f6e8e740bb5c1c3ff3a19eed28656db3f93f9f19c392c28023d06cf91ada219ec8c4993429844059d2352563c86000855120384a7ca0ab8be1c66e5bf301dd1ac3b60a0e9cec1743c5d37643e2e7b89a7e180cad73cd37e5c1b4763a545ac8d5ef71a7dbef6df16cf980957779fe7a78f483a7bef781f6f47a7c69be8a470bbd7077854fda05bde10ff500579210c2d81bfec7f11ea199d03c547690ca21f8be00a5b42609256c215ef4e6864e2e81a01d24e1c7e0ea888656567dee644e726036e7574f14f30a69235d3f67e03f1025d5977152beaba"}}, &(0x7f0000000900)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40d}}}, &(0x7f0000000bc0)={0x44, &(0x7f0000000980)={0x60, 0xe, 0x65, "1fb0dcaa0684352ca3ada76e4237a7b263f33f505ba67de9bf3fd7e702605786f3696de1ada26a8ea260ae667ff7a55028b28b533850a8439a0bebc501049c3a5fdd353d7b976745b2257c4f2660214d644b593969f7a392b69174a552645af58d8c3c0856"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x4}, 0x0, &(0x7f0000000a80)={0x20, 0x81, 0x1, "d9"}, &(0x7f0000000ac0)={0x20, 0x82, 0x1, "aa"}, &(0x7f00000002c0)=ANY=[@ANYBLOB="74733901fd3940eef2d6766d3d85e69adb2d137223e86a6d354662b302512fa1947669bc40e4cf7f716ad96f"], &(0x7f0000000c40)=ANY=[@ANYBLOB="8945b3612be220b064ab093b08489ac36619eb80f25038ccab89be26d30bce8c3a35d50a445cc8dad786eeed"], &(0x7f0000000b80)={0x20, 0x85, 0x3, "fcb002"}}) syz_usb_control_io$hid(r7, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0501150025ff0904a101090182008c0508950129309102c0000000000000"], 0x0}, 0x0) 10.452500696s ago: executing program 0 (id=3947): socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000840), &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x24}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0xa0000, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_procfs(0x0, 0x0) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) statx(r0, &(0x7f00000001c0)='./file0\x00', 0x400, 0x800, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x3, 0x1, 0x2000, 0x80004, 0xfffffffd, 0x0, "5debca561a5fbf61048955f6f876b2ff", 0x0, 0x20}) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r2, r2, r2}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a800800904000001030000000905", @ANYBLOB='|'], 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}]}, 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r5, 0x0, 0x0, 0x160, 0x0) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, 0x4, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20008040) 8.94568579s ago: executing program 0 (id=3950): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) close(0x3) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r3, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x492492492492775, 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000000)=0x2) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000080)=@sack_info={r6, 0x98}, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$uinput_user_dev(r8, 0x0, 0x0) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x5) ioctl$SNDCTL_SEQ_CTRLRATE(0xffffffffffffffff, 0xc0045103, &(0x7f00000007c0)=0x5) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) r9 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r9, 0x707, &(0x7f0000000400)={&(0x7f0000000280)=[{0x1e, 0x8611, 0x5e, &(0x7f00000000c0)='%:'}, {0x6, 0x0, 0x0, 0x0}], 0x2}) ioctl$UI_SET_SWBIT(r8, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r8, 0x5501) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0xc0, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x8, 0xffff}, {0xa, 0xffe0}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x90, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf4240}]}]}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0xc0}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000021002101000000007e2458fa70b05aad00000001009c614deb2953fc2c15864f3e0000001400010000000000000000000000ffff7f000001"], 0x30}}, 0x0) r11 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r11, 0xc0405668, &(0x7f0000000140)={0x19, 0x1, 0x10, "9611e6d6ffc88885163200000000000000000300000000000000010083df00", 0x2036315a}) 8.628880447s ago: executing program 3 (id=3951): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x1, 0xb}, {0x0, 0x9}, {0x3, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}, @TCA_FLOWER_KEY_MPLS_TTL={0x5, 0x43, 0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040004) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x2200, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x80903, 0x0) close_range(r4, r5, 0x2) r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc704, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)="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", 0x1d8, r0) 8.45315129s ago: executing program 2 (id=3953): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000002c0)={0x24, 0x10, 0x1, 0x0, 0x25dfdbfc, "", [@typed={0x8, 0xc3, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x4, 0x2b}]}, 0x24}], 0x1}, 0x20000000) 6.736139076s ago: executing program 2 (id=3955): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002440)=@newtfilter={0x8c, 0x2c, 0xf3f, 0x70bd2a, 0x25dfd3f5, {0x0, 0x0, 0x0, r1, {0x1}, {}, {0x2, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x5c, 0x2, [@TCA_FLOWER_ACT={0x58, 0x3, [@m_ctinfo={0x54, 0x1e, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x6, 0x2, 0x4f75, 0x9}}]}, {0xe, 0x6, "b7ef85b7b6f081b8ff6c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x6e13a4f0bfc48b10}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20041890}, 0x0) 6.54103924s ago: executing program 3 (id=3956): socket$nl_generic(0x10, 0x3, 0x10) openat$vcs(0xffffffffffffff9c, 0x0, 0x51d801, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_open_dev$loop(&(0x7f0000000200), 0x5, 0x86100) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000005c0)={r5, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r6, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r6, 0x1000) r7 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) ioctl$HIDIOCGFEATURE(r7, 0xc0404807, &(0x7f0000000080)={0x6, "1f7f67491b5a90eeaddb94a4031a82687063ba6e44f7b91d902d0008424ad04b9634bef178be4ba64223a1d6da6d232b4ea6a453724e5a9c45a204ec36715596"}) ioctl$HIDIOCSFEATURE(r7, 0xc0404806, &(0x7f0000000100)) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r9) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000002080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 6.459256987s ago: executing program 0 (id=3957): semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000140)=""/170) r0 = semget$private(0x0, 0x4, 0x200) r1 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000019c0)=0x14, 0x80000) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000001a00)=@req={0x5, 0x200, 0x4, 0x3}, 0x10) semctl$GETZCNT(r0, 0x3, 0xf, &(0x7f0000001900)=""/160) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x5, 0xfffffffd, 0x0, 0x0, 0x10}) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x0) r4 = semget$private(0x0, 0x2, 0x104) r5 = syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810320003600000904010000020d00000904010102020d0000090582020002070009090503"], 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x12, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r6, &(0x7f0000005280)=[{{0x0, 0x0, 0x0}, 0x10009}], 0x1, 0x10000, 0x0) sendmmsg$inet6(r6, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000004f80)="000000f5b8ac2bb992ebd4c7b3ba4f60bfed002da6280c91950619c2a0e39042e0e7800ae7b041ff132d7fb40180000014c56dc066ca", 0x36}], 0x1}}, {{0x0, 0xfffffffffffffcdb, &(0x7f0000000b00)=[{&(0x7f0000000a40)="a603418c2122b97d1414260a2a66d7", 0xf}], 0x1}}], 0x2, 0x20e8086) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) semctl$SEM_STAT(r4, 0x4, 0x12, &(0x7f0000001840)=""/150) sendmsg$sock(r3, &(0x7f0000001800)={&(0x7f0000000140)=@l2={0x1f, 0x3, @any, 0x7, 0x3}, 0x80, &(0x7f0000001740)=[{&(0x7f00000001c0)="2b32930e0fc84f1e6dc152e5f6955980eda7c512348f4d51793ceaf8f5769545cb85777a7d3ea7f4eb9d12c5a190136e0df4790331c08f52e03ddcba4877f3e556dd8e4c7b467474f8c34b122c0a1cffbb5b68a5b71c2285b3eaeb1bdc69d2e62c21a952ba33ba6aefd5c9f71480bbbab50289960ccd5f0027b83dc25944a97992cc8c61fc3a150ce0daeeda49005b9a89e4f50381826fa54e9fcab0320268eb1411eec8c37d49e46c4823a8a5b5a88985df2ea08fe7b930", 0xb8}, {&(0x7f0000000280)="c7653c3d6c0514b7d7ef69a6e25ee14a954580d05e104047e4c353133355b41e065339fdcae03a5bd8e4c6b5d3a96fabbbe0c7282e1c97f9b22345c0a9626f7481278e74abef9c12b17e", 0x4a}, {&(0x7f0000000300)="7cc9a56579733a4bcaa6b1490b711df5c9413285531f6e5746b8a02f402bcc8d2eb3c52f480ff639b510ed6637eed14ccb08db527c66fce3763db21a49d626facf44f3908e8ed637dea990f761f772e3b251e3325edf1cb6cb3561bfd29bb95de37f3a50433d694d2871e243212facd9caae579219e0b9356f747ff43b517bf2dd955cba6259468eb352aaacb49c9eca3318584204ef415665e8c62bcd80fe7aa0123fecaba050394531b2769c84977d74aff9a1450947825cc2e57a35b36e357ce099cc46e02817ec1ba6cfe8325217a1f6fec63d468280d16a", 0xda}, {&(0x7f0000000400)="326021d3857b197288d69102eb5c2d58c9a22b6a47b067851eb7fefd361141bf90085d241ab9a653bcb7f54f0891d54a7ccf6917fb5860627fb2860734e1f4e3a819a00a57b1f8c3ad9636313c80c8beb745726893c2ec4fa83d842a3ac22dea8cdb1bcb8853a25f822d111b76d35974798e09844ceac9080e47026a72b7a0bfb015dfa50437d9c8b85f0a5d9048954f20ed3299cd772fc7d98335d29fec6081c82497", 0xa3}, {&(0x7f00000004c0)="f9222c4ec729e977b1b4caa35c30b94fa431563f9d6b429e25f22911968d7e2b854c20eefdb1cd8e7d48ef05b1648c2d1c567d867c5bee836da956ef87523ea60d2200c3fd84e558f14895b395eeb9a2f211ef59bae3787ca209fe3e32f18fd148c699e10c65c76d86a712d8afc09e35ae1cda74", 0x74}, {&(0x7f0000000540)="b31faba1ad0f748ef0561d2da83cdd2bd7a02878c05fad6ee21ee29128bc0a07df813ff15f2e4b62919ee132dec2c74f18a447f6db6e54285e0431c07876718c15658e738befe2144fa2b477d75a1b24ede572ab363d8a3f0a7a31d32d1cad2d2752937c530bd22ab1633d425911a81bbbc211dda6df21d88a8bf9370fa5c2febf89c11bae1ce65efdc03fbd123945c006234e5214efa0532ef0601f0fc504dc04c087dbc572a0234ade33088e1e46fb39ff1c650dc4e870b18a6469d6ba32128c6119014ce9309fdc715ac0cbafee3d31a49d552fb936aad0bfeedc35337104da9442c387902b4a73044c587d0d0d8e24", 0xf1}, {&(0x7f0000000640)="c8724b4ad2d53708ef46f42cf23b06a58d79c1008ae14e6c14b91c55674fa4431f22be6d30356065af04ffc2a60c5496ae3d3f463b28ff0aa815d8b0d6c8b4910901244928cfe564b3b02dcc74bbd7a818aff4d042d18c08527a62ceba6d2e319ff536937cd5c16c76d4902d66ac757a085b5744e65d36e9c97d243e0372ce63e66b062b8b13e3efc961458a109e6b2a7db036d2d04d38906d41e243c67e40078e16afa84b4c69", 0xa7}, {&(0x7f0000000700)="7307eef1b0296edf78f4f68e728d302b3bd835793a16e54abf8aec52ec7b0bf890fe9bf8b03244b2c9204a7942c373344a7ba8db810734e6b6a8cfa34a", 0x3d}, {&(0x7f0000000740)="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", 0x1000}], 0x9}, 0x20000000) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002180), 0xa0002, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) 6.378503023s ago: executing program 2 (id=3958): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) r1 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_usb_connect$uac2(0x4, 0xa2, &(0x7f00000004c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x0, 0x499, 0x105c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x90, 0x3, 0x1, 0x10, 0x50, 0xf7, {0x8, 0xb, 0x2, 0x0, 0x1, 0x8, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xe982, 0xff, 0x9, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0xfffa, 0x7f, 0x7, "506d9ecd24bb"}, @as_header={0x10, 0x24, 0x1, 0x3f, 0x4, 0x2, 0x1, 0x4, 0x2, 0xb}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x1, 0x5, 0x5, {0x8, 0x25, 0x1, 0x80, 0x0, 0x2, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xd, 0x3, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x9, 0x4, {0x8, 0x25, 0x1, 0x1, 0x0, 0xf1, 0xf}}}}}}}}]}}, 0x0) syz_usb_connect$uac1(0x2, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x28, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newnexthop={0x50, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x3}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0x14, 0x2, [{0x1, 0x1}, {0x2, 0x1}]}, @NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xe0b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x64}]}]}, 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x21120, 0x68591}}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x4000804) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_connect$uac2(0x5, 0xa9, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x582, 0x3b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x97, 0x3, 0x1, 0xff, 0xc0, 0x1, {0x8, 0xb, 0x2, 0x0, 0x1, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xfff, 0xf1, 0x9, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x40, 0xff, 0x2, 0x9, 0x12}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2ea, 0x8, 0x9, 0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xf9, 0xf6, 0x0, {0x8, 0x25, 0x1, 0x0, 0xc, 0x5, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0xe775, 0x400, 0x3, "0a74e2fd1495"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7, 0x4, 0xe1, 0x72, "74ca", "be8f"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xf3, 0x28, 0x4, {0x8, 0x25, 0x1, 0x81, 0x35, 0x2}}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x9, 0xfc, 0x8, 0x40, 0x1}, 0x23, &(0x7f00000003c0)={0x5, 0xf, 0x23, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1a, 0xe, 0x1, 0x10}, @ss_container_id={0x14, 0x10, 0x4, 0xfb, "5454208bb73581a0d646e0d0b10f1100"}]}, 0x1, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x80a}}]}) syz_usb_control_io$uac2(r1, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="000d07010000000000000000e3c50b6c76000020ca0fed3ba53e8e26dc8918cef37fb6dfcd4a6c639e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 5.597762583s ago: executing program 4 (id=3959): socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000840), &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x24}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0xa0000, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_procfs(0x0, 0x0) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) statx(r0, &(0x7f00000001c0)='./file0\x00', 0x400, 0x800, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x3, 0x1, 0x2000, 0x80004, 0xfffffffd, 0x0, "5debca561a5fbf61048955f6f876b2ff", 0x0, 0x20}) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r2, r2, r2}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a800800904000001030000000905", @ANYBLOB='|'], 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}]}, 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r5, 0x0, 0x0, 0x160, 0x0) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, 0x4, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20008040) 4.392190261s ago: executing program 3 (id=3960): openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000009b80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a90000000060a010400000000000000000a0000040900010073797a310000000064000480340001800c0001007061796c6f61640024000280080001400000000a080003400000004f080004400000003808000240000000012c0001800a00010072656469720000001c00028008000240000000130800034000000029080001400000000e0900020073797a32"], 0x6c1c}, 0x1, 0x0, 0x0, 0x40}, 0x24000800) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffff, 0x7, &(0x7f0000006680)) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f00000000c0), &(0x7f0000000280)=0x4c) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f00000000c0)=0x6, 0x4) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000cc0)=ANY=[], 0xfdef) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003880)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x9, 0xfff3}, {}, {0x10, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x1000, 0x0, 0x5}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40004}, 0x2008c810) socket$netlink(0x10, 0x3, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4d8, 0xf002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) r8 = syz_usb_connect$uac1(0x6, 0xa0, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x582, 0x3b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x3, 0x1, 0x8, 0x100, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x19}, [@selector_unit={0x5, 0x24, 0x5, 0x4, 0x5}, @mixer_unit={0xa, 0x24, 0x4, 0x6, 0x0, "d308ab8bd9"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2, 0x1, 0x5, 0x9d}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x6, 0x6, 0x33, {0x7, 0x25, 0x1, 0xc, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x7, 0x2, 0x3, "fbc65188d6"}, @as_header={0x7, 0x24, 0x1, 0x2e, 0x9, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x5, 0xd, 0x1, {0x7, 0x25, 0x1, 0x4, 0x2, 0x3}}}}}}}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x250, 0x10, 0x7f, 0x7d, 0xff, 0x24}, 0xca, &(0x7f0000000d00)=ANY=[@ANYBLOB="050fca0001c5100a7d01a3a41947ecbdf6918d757879601e18a2f4e205f5cdb1ca2b35f14129a3a9652139db83a50a5e7e581d59aaef66e1000d0f5bd5cebc65242c7a6cf397c6ff3d45a6ce3a49c4a15befe070711a1c415e5193f809032b8a44f7016e2c87930b70d0bc96dbf10dc8f7f456f66f105f8b5c4c3f0aa9a686a984733b505f36262577f74502250762a156e18ea309ccd1f5e3b4b5d2689d409df07093025c00279671a729b7fbb64d66b9e4e1709448a9282b143b409243cd667c89e82a6c52bf496f61e71764f4622becdf6b548872dce0"], 0x6, [{0x42, &(0x7f0000000340)=ANY=[@ANYBLOB="4203f2a53692ca2260ce3fc82658cc3b61c6b16e5f3ee57550abb4743592adb92deb533a958f7b1b0dfe33f2d4aef435e7d7e79d9f5c27e02df4d62cb7cd7205fb6ae6de9ac2097ee091cde4e29273dd59f729d67f130d8c8e95b2e4903e9ea09650d696b2867674e867dd7cf693488ba6abc82fb66f24c7c42077241f109c2763e7fbd919a980680f8a99983d64c16b1987405cac6d7e0df07f72b79dc4c5aebe822157c7b4ab450df8d22454f6d59294e4cb496a0993e55db74752deb668613f4881da233fc9af1e587dd0eb77d848"]}, {0x63, &(0x7f0000000600)=@string={0x63, 0x3, "a6eca3203403bb28deb9324e218886571171e53f7979fa517f91a7f2accf32a64b37b1dc243c1c5c38de99cdfc180a598ca3c5b57326489221baff6ef7f2c8ccd9a281bb23740b7dfe206e6570babd541a929db8de165e23de9a417d000ff39277"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x3009}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x2427}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x814}}]}) r9 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r9, &(0x7f0000000800)=[{{&(0x7f0000000280)={0xa, 0x0, 0x2, @mcast2, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000002900000043000000060004"], 0x18}}], 0x1, 0x40000080) syz_usb_control_io$uac1(r8, &(0x7f0000000940)={0x14, &(0x7f0000000800)={0x0, 0xa, 0xe4, {0xe4, 0x21, "e9de1d95be52ec179d92fe6f6e8e740bb5c1c3ff3a19eed28656db3f93f9f19c392c28023d06cf91ada219ec8c4993429844059d2352563c86000855120384a7ca0ab8be1c66e5bf301dd1ac3b60a0e9cec1743c5d37643e2e7b89a7e180cad73cd37e5c1b4763a545ac8d5ef71a7dbef6df16cf980957779fe7a78f483a7bef781f6f47a7c69be8a470bbd7077854fda05bde10ff500579210c2d81bfec7f11ea199d03c547690ca21f8be00a5b42609256c215ef4e6864e2e81a01d24e1c7e0ea888656567dee644e726036e7574f14f30a69235d3f67e03f1025d5977152beaba"}}, &(0x7f0000000900)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40d}}}, &(0x7f0000000bc0)={0x44, &(0x7f0000000980)={0x60, 0xe, 0x65, "1fb0dcaa0684352ca3ada76e4237a7b263f33f505ba67de9bf3fd7e702605786f3696de1ada26a8ea260ae667ff7a55028b28b533850a8439a0bebc501049c3a5fdd353d7b976745b2257c4f2660214d644b593969f7a392b69174a552645af58d8c3c0856"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x4}, 0x0, &(0x7f0000000a80)={0x20, 0x81, 0x1, "d9"}, &(0x7f0000000ac0)={0x20, 0x82, 0x1, "aa"}, &(0x7f00000002c0)=ANY=[@ANYBLOB="74733901fd3940eef2d6766d3d85e69adb2d137223e86a6d354662b302512fa1947669bc40e4cf7f716ad96f"], &(0x7f0000000c40)=ANY=[@ANYBLOB="8945b3612be220b064ab093b08489ac36619eb80f25038ccab89be26d30bce8c3a35d50a445cc8dad786eeed"], &(0x7f0000000b80)={0x20, 0x85, 0x3, "fcb002"}}) syz_usb_control_io$hid(r7, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0501150025ff0904a101090182008c0508950129309102c0000000000000"], 0x0}, 0x0) 4.00489137s ago: executing program 4 (id=3961): r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, '\x00', 0x36}, 0x7}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f0000000140)=[@init={0x18, 0x84, 0x0, {0x0, 0xfffd, 0x1ff, 0xd9}}, @dstaddrv6={0x20, 0x84, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}], 0x20000, 0x8890}, 0x24000052) 3.768108477s ago: executing program 4 (id=3962): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@ipv6_newaddr={0x40, 0x14, 0x101, 0x70bd26, 0x25dffbf8, {0xa, 0x38, 0x78, 0xff, r1}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004051}, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40011400}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xf8, r3, 0x200, 0x70bd2c, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x76}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xb}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x8855}, 0x448c0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x8, 0x0, 0xff, r5}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_ADDRESS={0x14, 0x1, @empty}, @IFA_RT_PRIORITY={0x8, 0x9, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) 3.572358488s ago: executing program 2 (id=3963): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407c2c25010000000000010902270001010080fa0904000003ffffff0007058102000200070502020002000705830340"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000680001040000000020000000000000000000000004000b00060012000100000004000200"], 0x28}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x15, 0x1, 0xfffffffc, 0x0, {0xb, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x3b5e04dbece314b7}, 0xc000) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r0, r4, 0x0) 3.402391168s ago: executing program 4 (id=3964): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) sync() r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x1a, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.109596467s ago: executing program 0 (id=3965): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x5b02, 0x0) 2.964697906s ago: executing program 4 (id=3966): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) close(0x3) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r3, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x492492492492775, 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000000)=0x2) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000080)=@sack_info={r6, 0x98}, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$uinput_user_dev(r8, &(0x7f0000000300)={'syz1\x00', {0x0, 0x0, 0xba8a, 0x2}, 0x0, [0x2, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x1004, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x800006, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0x7, 0x0, 0x5ee, 0x5, 0xfffffff7, 0xe, 0x0, 0xffffffff, 0x0, 0x0, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8, 0x0, 0xfffffff8, 0x2, 0x1, 0x2, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0800000, 0x100, 0x0, 0xfffffffd, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x81, 0xb, 0x0, 0x1, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x4007f, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x2, 0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0xe, 0x80000000, 0x2, 0xc7fff, 0x0, 0x5, 0x0, 0x3, 0x0, 0xf, 0x3, 0xffffff85, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88, 0x0, 0x8000], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffffff9, 0x0, 0x2, 0x4, 0xfffffffc, 0x0, 0x0, 0x2, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x6, 0x80000001, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x8080, 0x0, 0xe, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x7fffffe, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x5) ioctl$SNDCTL_SEQ_CTRLRATE(0xffffffffffffffff, 0xc0045103, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) r9 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r9, 0x707, &(0x7f0000000400)={&(0x7f0000000280)=[{0x1e, 0x8611, 0x5e, &(0x7f00000000c0)='%:'}, {0x6, 0x0, 0x0, 0x0}], 0x2}) ioctl$UI_SET_SWBIT(r8, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r8, 0x5501) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0xc0, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x8, 0xffff}, {0xa, 0xffe0}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x90, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf4240}]}]}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0xc0}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000021002101000000007e2458fa70b05aad00000001009c614deb2953fc2c15864f3e0000001400010000000000000000000000ffff7f000001"], 0x30}}, 0x0) r11 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r11, 0xc0405668, &(0x7f0000000140)={0x19, 0x1, 0x10, "9611e6d6ffc88885163200000000000000000300000000000000010083df00", 0x2036315a}) 2.448777207s ago: executing program 3 (id=3967): syz_usb_connect(0x6, 0x4b, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfd, 0x60, 0x1, "", [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x7, 0x1, 0x2, 0xef, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x6, 0xc9, 0x6f}}}}}]}}]}}, &(0x7f00000009c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x0, 0x0, 0x7, 0x38, 0x8, 0x5}, 0x5, &(0x7f00000002c0)={0x5, 0xf, 0x5}, 0x8, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x43e}}, {0x48, &(0x7f0000000440)=@string={0x48, 0x3, "e0994e9eea8e099022e7cfd80ee78b86e7d0b1b995c9b085f70a7a21a2a9f377151726850a79304b4cc4d7d0bbe3a5a2b0cf7783690e99c9f74cb9eaacfe08bd3692675be504"}}, {0xcb, &(0x7f0000000640)=@string={0xcb, 0x3, "ea51c9a2d8a044f4638e4da0ed11cab65ccc50aeb2620dced406b37c18c7ece71a6a08383a86e9f675a25f0db2e1383ee103831715d546c086bae7f69c7cdf543284606a58b58296403b84f215020239f5e2dfba3b9fcd5543e4a0e51d8cb1321a27e1d9c54b97566ba4e404dfcb182f078d7f546fafa5972d1f8b36c9fa32cbaafc988acc607a5f82ae9ae875df452e0c9e63b63dc2ae5c6d08be56793cc6465845e6b7c0974c0837b8b2abcc0a674b88da7a13921798ace9e4efd17d3fe31a2f56900bed6deb5a29"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0xc09}}, {0x3f, &(0x7f0000000780)=@string={0x3f, 0x3, "a3bf2b1f29962c16c20fa9cbc19d791d5e06e8aa5965aa41288106eec5d592cf24960cdf5f4ecf3bd32d27849db9d9278d107d42383aedf1a3263a9bf0"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x81d}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x420}}, {0xa4, &(0x7f0000000900)=@string={0xa4, 0x3, "8763237ae4f625754d62aabe0aea361dcb85794c93978117c1cf3124cc26561cefd505e102693837d8d4557af1a804c6892a9a766c002e7c24f1bdbbe1704d99b71e9c1c9d9cfca9e38c7a139980dd2fb24a5897a04e1028c4d07777453b6dd7bb3a09a36125ed0fd38fbba680978a0add48e73b4a4ab820dbcb53ba8c88b2f1eef58f6b8012faa9dc1bfaeaec9eaaaece361459f75bdb3b32aa2ec7c5d5fc3052ae"}}]}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x601, 0x8000, 0x0, {0x0, 0x0, 0x0, r5, {0x8, 0x1}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0xfa, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000081}, 0x84) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newtclass={0x44, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4, 0x1}, {0x0, 0x1}}, [@tclass_kind_options=@c_hfsc={{0x9}, {0x14, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0x0, 0x0, 0x3e8}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=@newtfilter={0x40, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffff, 0x1}}]}}]}, 0x40}}, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', 0x1}) r7 = socket$packet(0x11, 0x3, 0x300) bind$packet(r7, &(0x7f0000000500)={0x11, 0x0, r5}, 0x14) sendto(r7, &(0x7f0000000600)='\x00', 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800000000fbdb181000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000380)="10008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000000000000", 0x28}, {&(0x7f0000000000)="11c9064268e9", 0x6}, {&(0x7f00000000c0)="75c881e856a047ae2da543fd4f02617d41110d", 0x13}], 0x3}, 0x448d0) 1.460457253s ago: executing program 0 (id=3968): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_io_uring_setup(0xefb, &(0x7f00000001c0)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r5 = socket$inet6(0x10, 0x3, 0x0) write(r5, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000180)=0x1) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x2, {0x0, 0x0, 0x0, '\x00', &(0x7f0000000000), 0x2000000000}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a98000000060a010400000000000000000a0004050900010073797a31000000006c000480680001800a000100696e6e6572000000580002800800044000000012340005800c0001007061796c6f6164000700000008000340000000900800024000000000080004400000000008000140000000080800034000000002080002400000008408000140000000000900020073797a32"], 0xc0}, 0x1, 0x0, 0x0, 0x8890}, 0x24008000) syz_open_dev$I2C(&(0x7f0000000140), 0x6, 0x208380) 1.35928832s ago: executing program 2 (id=3969): socket$nl_generic(0x10, 0x3, 0x10) openat$vcs(0xffffffffffffff9c, 0x0, 0x51d801, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_open_dev$loop(&(0x7f0000000200), 0x5, 0x86100) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000005c0)={r5, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r6, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r6, 0x1000) r7 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) ioctl$HIDIOCGFEATURE(r7, 0xc0404807, &(0x7f0000000080)={0x6, "1f7f67491b5a90eeaddb94a4031a82687063ba6e44f7b91d902d0008424ad04b9634bef178be4ba64223a1d6da6d232b4ea6a453724e5a9c45a204ec36715596"}) ioctl$HIDIOCSFEATURE(r7, 0xc0404806, &(0x7f0000000100)) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r9) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000002080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 920.982362ms ago: executing program 0 (id=3970): socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000840), &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x24}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0xa0000, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_procfs(0x0, 0x0) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) statx(r0, &(0x7f00000001c0)='./file0\x00', 0x400, 0x800, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x3, 0x1, 0x2000, 0x80004, 0xfffffffd, 0x0, "5debca561a5fbf61048955f6f876b2ff", 0x0, 0x20}) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r2, r2, r2}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a800800904000001030000000905", @ANYBLOB='|'], 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}]}, 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r5, 0x0, 0x0, 0x160, 0x0) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, 0x4, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20008040) 227.778875ms ago: executing program 4 (id=3971): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000005000000040000000800000000000000", @ANYRES32, @ANYBLOB="0008008b96e6a10000000000000000000000fce9", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb707000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000180)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r4, 0x4068aea3, &(0x7f0000000280)={0xc0, 0x0, 0x8000}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x1) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fcntl$setownex(r7, 0xf, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002300)=ANY=[], 0x50) ioctl$KVM_RUN(r5, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r8, 0x4068aea3, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x2}, &(0x7f00000005c0)) 0s ago: executing program 3 (id=3972): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x50) syz_emit_ethernet(0x14, &(0x7f0000001500)=ANY=[@ANYBLOB="aaaaaa5aa772f37902000008adf33eb62a90f148"], 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140), 0xb7c8, 0xa8182) r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n [ 761.673937][T17189] dump_stack_lvl+0xe8/0x150 [ 761.673976][T17189] should_fail_ex+0x410/0x560 [ 761.674009][T17189] _copy_from_user+0x2d/0xb0 [ 761.674040][T17189] ___sys_recvmsg+0x173/0x5a0 [ 761.674074][T17189] ? __pfx____sys_recvmsg+0x10/0x10 [ 761.674099][T17189] ? lock_acquire+0x115/0x350 [ 761.674165][T17189] ? __fget_files+0x3a2/0x420 [ 761.674210][T17189] do_recvmmsg+0x31a/0x7f0 [ 761.674241][T17189] ? __pfx_do_recvmmsg+0x10/0x10 [ 761.674296][T17189] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 761.674332][T17189] ? __fget_files+0x3a2/0x420 [ 761.674374][T17189] __x64_sys_recvmmsg+0x198/0x250 [ 761.674392][T17189] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 761.674427][T17189] do_syscall_64+0x166/0x520 [ 761.674460][T17189] ? trace_irq_disable+0x3b/0x140 [ 761.674483][T17189] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.674506][T17189] ? clear_bhb_loop+0x70/0xc0 [ 761.674532][T17189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.674548][T17189] RIP: 0033:0x7ff69239e159 [ 761.674563][T17189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 761.674591][T17189] RSP: 002b:00007ff693181028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 761.674616][T17189] RAX: ffffffffffffffda RBX: 00007ff692625fa0 RCX: 00007ff69239e159 [ 761.674632][T17189] RDX: 0000000000000007 RSI: 0000200000008d80 RDI: 0000000000000003 [ 761.674647][T17189] RBP: 00007ff693181090 R08: 0000000000000000 R09: 0000000000000000 [ 761.674660][T17189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 761.674677][T17189] R13: 00007ff692626038 R14: 00007ff692625fa0 R15: 00007ff69274fa48 [ 761.674701][T17189] [ 761.929970][ T5770] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 761.953822][ T5710] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 762.046327][ T5710] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 762.069281][ T5710] usb 5-1: USB disconnect, device number 44 [ 762.082463][ T5770] usb 3-1: Using ep0 maxpacket: 16 [ 762.083536][ T5770] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 762.086072][ T5770] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 762.086110][ T5770] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 762.086135][ T5770] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 762.086182][ T5770] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.159353][ T5770] usb 3-1: config 0 descriptor?? [ 762.178732][ T7686] udevd[7686]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 762.210059][ T5696] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 762.232012][T17196] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3737'. [ 762.363384][ T5696] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 762.366494][ T5696] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 762.366527][ T5696] usb 1-1: config 0 has no interface number 0 [ 762.366603][ T5696] usb 1-1: config 0 interface 41 has no altsetting 0 [ 762.369347][ T5696] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.369374][ T5696] usb 1-1: Product: syz [ 762.369390][ T5696] usb 1-1: Manufacturer: syz [ 762.369405][ T5696] usb 1-1: SerialNumber: syz [ 762.430688][ T5696] usb 1-1: config 0 descriptor?? [ 762.462492][T17202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 762.465187][T17202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 762.513626][T17187] loop5: detected capacity change from 0 to 4095 [ 762.541973][T17202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 762.542447][T17202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 762.569577][T17202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3739'. [ 762.570208][ T5710] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 762.603046][T17202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 762.604121][T17203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 762.623032][T17202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 762.625730][T17203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 762.648757][T17202] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3739'. [ 762.710032][ T5681] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 762.740317][ T5710] usb 4-1: Using ep0 maxpacket: 32 [ 762.742525][ T5710] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 762.755595][ T5710] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.755675][ T5710] usb 4-1: Product: syz [ 762.755718][ T5710] usb 4-1: Manufacturer: syz [ 762.755767][ T5710] usb 4-1: SerialNumber: syz [ 762.798718][ T5710] usb 4-1: config 0 descriptor?? [ 762.869990][ T5681] usb 2-1: Using ep0 maxpacket: 16 [ 762.874857][ T5681] usb 2-1: unable to get BOS descriptor or descriptor too short [ 762.874954][ T5681] usb 2-1: New USB device found, idVendor=093a, idProduct=260e, bcdDevice=18.85 [ 762.876690][ T5681] usb 2-1: config 1 has an invalid interface number: 151 but max is 0 [ 762.876719][ T5681] usb 2-1: config 1 has no interface number 0 [ 762.876783][ T5681] usb 2-1: config 1 interface 151 has no altsetting 0 [ 762.925293][ T5681] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.925356][ T5681] usb 2-1: Product: syz [ 762.925373][ T5681] usb 2-1: Manufacturer: syz [ 762.925389][ T5681] usb 2-1: SerialNumber: syz [ 762.952189][T17187] Buffer I/O error on dev loop5, logical block 511, async page read [ 762.952540][ T7686] Buffer I/O error on dev loop5, logical block 511, async page read [ 763.049355][ T5710] usb 4-1: USB disconnect, device number 31 [ 763.136147][T17191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 763.154407][T17191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 763.179242][ T5696] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -32 [ 763.222398][ T5681] gspca_main: pac7311-2.14.0 probing 093a:260e [ 763.222956][ T5681] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -71 [ 763.223067][ T5681] pac7311 2-1:1.151: probe with driver pac7311 failed with error -71 [ 763.260226][ T5681] usb 2-1: USB disconnect, device number 23 [ 763.475570][ T5770] usbhid 3-1:0.0: can't add hid device: -71 [ 763.475707][ T5770] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 763.498896][ T5770] usb 3-1: USB disconnect, device number 35 [ 763.838357][T17219] dvmrp12: entered allmulticast mode [ 763.910105][ T5710] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 764.060901][ T5710] usb 4-1: New USB device found, idVendor=1e59, idProduct=0002, bcdDevice=98.ed [ 764.062273][ T5710] usb 4-1: config 253 has an invalid interface number: 130 but max is 0 [ 764.062302][ T5710] usb 4-1: config 253 has no interface number 0 [ 764.062333][ T5710] usb 4-1: config 253 interface 130 has no altsetting 0 [ 764.065320][ T5710] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.065340][ T5710] usb 4-1: Product: syz [ 764.065351][ T5710] usb 4-1: Manufacturer: syz [ 764.065362][ T5710] usb 4-1: SerialNumber: syz [ 764.134279][T17225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3746'. [ 764.164385][T17225] veth3: entered promiscuous mode [ 764.295587][T17216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 764.296263][T17216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 764.615584][ T5710] dvb-usb: found a 'EvolutePC TVWay+' in cold state, will try to load a firmware [ 764.618025][ T5710] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 764.618073][ T5710] dib0700: firmware download failed at 7 with -22 [ 764.646708][ T5710] usb 4-1: USB disconnect, device number 32 [ 764.810239][ T5617] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 764.820395][ T5681] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 764.953559][T17241] FAULT_INJECTION: forcing a failure. [ 764.953559][T17241] name failslab, interval 1, probability 0, space 0, times 0 [ 764.953589][T17241] CPU: 0 UID: 0 PID: 17241 Comm: syz.1.3751 Tainted: G L syzkaller #0 PREEMPT(full) [ 764.953611][T17241] Tainted: [L]=SOFTLOCKUP [ 764.953617][T17241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 764.953628][T17241] Call Trace: [ 764.953634][T17241] [ 764.953642][T17241] dump_stack_lvl+0xe8/0x150 [ 764.953670][T17241] should_fail_ex+0x410/0x560 [ 764.953694][T17241] should_failslab+0xa8/0x100 [ 764.953719][T17241] __kmalloc_cache_noprof+0xa3/0x600 [ 764.953738][T17241] ? __kmalloc_cache_noprof+0x14d/0x600 [ 764.953755][T17241] ? sctp_add_bind_addr+0x8c/0x370 [ 764.953773][T17241] ? sctp_add_bind_addr+0x8c/0x370 [ 764.953794][T17241] sctp_add_bind_addr+0x8c/0x370 [ 764.953815][T17241] sctp_copy_local_addr_list+0x31a/0x4e0 [ 764.953835][T17241] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 764.953854][T17241] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 764.953874][T17241] ? sctp_v6_is_any+0x64/0x80 [ 764.953894][T17241] ? sctp_copy_one_addr+0x93/0x360 [ 764.953938][T17241] sctp_bind_addr_copy+0xb3/0x3c0 [ 764.953970][T17241] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 764.954006][T17241] sctp_connect_new_asoc+0x2ff/0x6b0 [ 764.954031][T17241] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 764.954058][T17241] ? __local_bh_enable_ip+0xd6/0x140 [ 764.954080][T17241] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 764.954104][T17241] ? security_sctp_bind_connect+0x7e/0x2c0 [ 764.954126][T17241] sctp_sendmsg+0x159b/0x2d00 [ 764.954159][T17241] ? __pfx_sctp_sendmsg+0x10/0x10 [ 764.954184][T17241] ? __lock_acquire+0x747/0x2de0 [ 764.954211][T17241] ? aa_sock_msg_perm+0xf5/0x210 [ 764.954233][T17241] ? sock_rps_record_flow+0x19/0x350 [ 764.954255][T17241] ? inet_sendmsg+0x298/0x320 [ 764.954275][T17241] ? __pfx_inet_sendmsg+0x10/0x10 [ 764.954293][T17241] sock_sendmsg_nosec+0x10e/0x180 [ 764.954316][T17241] ____sys_sendmsg+0x54e/0x850 [ 764.954345][T17241] ? __pfx_____sys_sendmsg+0x10/0x10 [ 764.954397][T17241] ? import_iovec+0x73/0xa0 [ 764.954433][T17241] ___sys_sendmsg+0x2a5/0x360 [ 764.954471][T17241] ? __lock_acquire+0x747/0x2de0 [ 764.954494][T17241] ? __pfx____sys_sendmsg+0x10/0x10 [ 764.954524][T17241] ? kstrtouint+0x6e/0xe0 [ 764.954560][T17241] ? __fget_files+0x2a/0x420 [ 764.954584][T17241] ? __fget_files+0x3a2/0x420 [ 764.954622][T17241] __sys_sendmmsg+0x273/0x4d0 [ 764.954652][T17241] ? __pfx___sys_sendmmsg+0x10/0x10 [ 764.954685][T17241] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 764.954726][T17241] ? ksys_write+0x242/0x270 [ 764.954750][T17241] ? __pfx_ksys_write+0x10/0x10 [ 764.954777][T17241] __x64_sys_sendmmsg+0xa0/0xc0 [ 764.954804][T17241] do_syscall_64+0x166/0x520 [ 764.954829][T17241] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.954846][T17241] ? clear_bhb_loop+0x70/0xc0 [ 764.954866][T17241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.954882][T17241] RIP: 0033:0x7ff69239e159 [ 764.954898][T17241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 764.954937][T17241] RSP: 002b:00007ff693181028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 764.954969][T17241] RAX: ffffffffffffffda RBX: 00007ff692625fa0 RCX: 00007ff69239e159 [ 764.954982][T17241] RDX: 0000000000000001 RSI: 0000200000000580 RDI: 0000000000000003 [ 764.954999][T17241] RBP: 00007ff693181090 R08: 0000000000000000 R09: 0000000000000000 [ 764.955009][T17241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 764.955018][T17241] R13: 00007ff692626038 R14: 00007ff692625fa0 R15: 00007ff69274fa48 [ 764.955044][T17241] [ 764.960359][ T5617] usb 3-1: Using ep0 maxpacket: 32 [ 764.978813][ T5681] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 765.000600][ T5681] usb 5-1: config 27 has an invalid descriptor of length 198, skipping remainder of the config [ 765.000763][ T5681] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 19, changing to 8 [ 765.000854][ T5681] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 9599, setting to 1024 [ 765.000987][ T5681] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 765.003736][ T5681] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.009091][ T5617] usb 3-1: unable to get BOS descriptor or descriptor too short [ 765.009145][ T5617] usb 3-1: New USB device found, idVendor=2a39, idProduct=3fd2, bcdDevice= 0.40 [ 765.017746][ T5617] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 765.017770][ T5617] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 765.033332][T17234] raw-gadget.5 gadget.4: fail, usb_ep_enable returned -22 [ 765.091802][ T5681] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 765.111815][ T5681] usb 5-1: invalid MIDI out EP 0 [ 765.147622][ T5617] usb 3-1: string descriptor 0 read error: -22 [ 765.147760][ T5617] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.538397][ T5696] usb 1-1: USB disconnect, device number 48 [ 765.627723][T17235] netlink: 'syz.2.3749': attribute type 1 has an invalid length. [ 765.644700][T17236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 765.656802][T17236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 765.809973][ T5710] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 765.885278][ T5681] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 765.887149][ T5617] usb 3-1: unit 2 not found! [ 765.890449][ T5617] usb 3-1: 4:0: failed to get current value for ch 0 (-71) [ 765.918731][ T5681] usb 5-1: USB disconnect, device number 45 [ 765.937366][ T5617] usb 3-1: 4:0: failed to get current value for ch 0 (-71) [ 765.989978][ T5703] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 766.010592][ T5710] usb 2-1: Using ep0 maxpacket: 32 [ 766.015117][ T5710] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 766.041577][ T5710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.041608][ T5710] usb 2-1: Product: syz [ 766.041625][ T5710] usb 2-1: Manufacturer: syz [ 766.041642][ T5710] usb 2-1: SerialNumber: syz [ 766.079803][ T5710] usb 2-1: config 0 descriptor?? [ 766.087547][ T5617] usb 3-1: USB disconnect, device number 36 [ 766.150288][ T5703] usb 4-1: Using ep0 maxpacket: 8 [ 766.157016][ T5703] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 766.162282][ T5703] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 766.162339][ T5703] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 766.162364][ T5703] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 766.162391][ T5703] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 766.162416][ T5703] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 766.162461][ T5703] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.250739][ T7514] udevd[7514]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 766.304255][ T5710] usb 2-1: USB disconnect, device number 24 [ 766.508355][ T5703] usb 4-1: usb_control_msg returned -32 [ 766.508409][ T5703] usbtmc 4-1:16.0: can't read capabilities [ 766.802968][T17258] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 766.884644][T17262] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 766.908609][ T5696] usb 4-1: USB disconnect, device number 33 [ 766.926608][T17263] kvm [17255]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 767.026543][T17256] syz.2.3757 (17256): drop_caches: 2 [ 767.325899][T17271] netlink: 'syz.0.3761': attribute type 1 has an invalid length. [ 767.325969][T17271] netlink: 'syz.0.3761': attribute type 2 has an invalid length. [ 767.327217][T17271] netlink: 'syz.0.3761': attribute type 1 has an invalid length. [ 767.327238][T17271] netlink: 'syz.0.3761': attribute type 2 has an invalid length. [ 767.328171][T17271] xt_MASQUERADE: bad rangesize 177 [ 767.329677][ T31] kauditd_printk_skb: 19 callbacks suppressed [ 767.329706][ T31] audit: type=1326 audit(1791176323.960:2424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17270 comm="syz.0.3761" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7919e159 code=0x7ffc0000 [ 767.403275][ T31] audit: type=1326 audit(1791176324.040:2425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17270 comm="syz.0.3761" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7919e159 code=0x7ffc0000 [ 767.407000][ T31] audit: type=1326 audit(1791176324.040:2426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17270 comm="syz.0.3761" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f4d7919e159 code=0x7ffc0000 [ 767.407041][ T31] audit: type=1326 audit(1791176324.040:2427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17270 comm="syz.0.3761" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7919e159 code=0x7ffc0000 [ 767.407075][ T31] audit: type=1326 audit(1791176324.040:2428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17270 comm="syz.0.3761" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7919e159 code=0x7ffc0000 [ 767.455786][ T31] audit: type=1326 audit(1791176324.090:2429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17270 comm="syz.0.3761" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4d7919e159 code=0x7ffc0000 [ 767.457419][ T31] audit: type=1326 audit(1791176324.090:2430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17270 comm="syz.0.3761" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7919e159 code=0x7ffc0000 [ 767.459803][ T31] audit: type=1326 audit(1791176324.090:2431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17270 comm="syz.0.3761" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7919e159 code=0x7ffc0000 [ 767.468409][ T31] audit: type=1326 audit(1791176324.100:2432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17270 comm="syz.0.3761" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4d7919e159 code=0x7ffc0000 [ 767.477036][ T31] audit: type=1326 audit(1791176324.110:2433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17270 comm="syz.0.3761" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7919e159 code=0x7ffc0000 [ 767.512034][ T5696] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 767.691648][ T5696] usb 3-1: Using ep0 maxpacket: 16 [ 767.694085][ T5696] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 767.695451][ T5696] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 767.695479][ T5696] usb 3-1: config 0 has no interface number 0 [ 767.695519][ T5696] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 767.695547][ T5696] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 767.698171][ T5696] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.698201][ T5696] usb 3-1: Product: syz [ 767.698218][ T5696] usb 3-1: Manufacturer: syz [ 767.698234][ T5696] usb 3-1: SerialNumber: syz [ 767.732229][ T5696] usb 3-1: config 0 descriptor?? [ 767.740864][T17269] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 767.742858][T17269] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 767.958052][T17278] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 767.958170][T17278] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 767.979229][ T5696] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 767.979256][ T5696] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -32 [ 767.979443][ T5696] asix 3-1:0.251: probe with driver asix failed with error -5 [ 768.117823][T17282] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3764'. [ 768.258155][T17291] FAULT_INJECTION: forcing a failure. [ 768.258155][T17291] name failslab, interval 1, probability 0, space 0, times 0 [ 768.258195][T17291] CPU: 0 UID: 0 PID: 17291 Comm: syz.0.3767 Tainted: G L syzkaller #0 PREEMPT(full) [ 768.258226][T17291] Tainted: [L]=SOFTLOCKUP [ 768.258234][T17291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 768.258263][T17291] Call Trace: [ 768.258273][T17291] [ 768.258283][T17291] dump_stack_lvl+0xe8/0x150 [ 768.258328][T17291] should_fail_ex+0x410/0x560 [ 768.258364][T17291] should_failslab+0xa8/0x100 [ 768.258395][T17291] ? ep_insert+0x508/0x1af0 [ 768.258420][T17291] kmem_cache_alloc_noprof+0xa1/0x600 [ 768.258444][T17291] ? ep_insert+0x2b1/0x1af0 [ 768.258466][T17291] ? kmem_cache_alloc_noprof+0x156/0x600 [ 768.258490][T17291] ? ep_insert+0x508/0x1af0 [ 768.258521][T17291] ep_insert+0x508/0x1af0 [ 768.258561][T17291] ? __pfx_ep_insert+0x10/0x10 [ 768.258586][T17291] ? __pfx___mutex_lock+0x10/0x10 [ 768.258641][T17291] do_epoll_ctl_file+0x8c2/0xee0 [ 768.258676][T17291] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 768.258706][T17291] ? __fget_files+0x3a2/0x420 [ 768.258738][T17291] ? __fget_files+0x2a/0x420 [ 768.258780][T17291] __se_sys_epoll_ctl+0x162/0x230 [ 768.258810][T17291] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 768.258849][T17291] do_syscall_64+0x166/0x520 [ 768.258881][T17291] ? trace_irq_disable+0x3b/0x140 [ 768.258911][T17291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.258935][T17291] ? clear_bhb_loop+0x70/0xc0 [ 768.258964][T17291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.258987][T17291] RIP: 0033:0x7f4d7919e159 [ 768.259008][T17291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 768.259029][T17291] RSP: 002b:00007f4d7a0c5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 768.259054][T17291] RAX: ffffffffffffffda RBX: 00007f4d79426090 RCX: 00007f4d7919e159 [ 768.259071][T17291] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 768.259085][T17291] RBP: 00007f4d7a0c5090 R08: 0000000000000000 R09: 0000000000000000 [ 768.259100][T17291] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 768.259114][T17291] R13: 00007f4d79426128 R14: 00007f4d79426090 R15: 00007f4d7954fa48 [ 768.259149][T17291] [ 768.381147][ T5696] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 768.526690][T17296] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3768'. [ 768.530019][ T5703] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 768.554432][ T5696] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 768.573488][ T5696] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.573510][ T5696] usb 4-1: Product: syz [ 768.573521][ T5696] usb 4-1: Manufacturer: syz [ 768.573533][ T5696] usb 4-1: SerialNumber: syz [ 768.605700][ T5696] usb 4-1: config 0 descriptor?? [ 768.625174][ T5696] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 768.661451][ T5703] usb 2-1: device descriptor read/64, error -71 [ 768.901983][ T5703] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 769.014999][T17283] SET target dimension over the limit! [ 769.019138][T17283] bond_slave_1: Device is already in use. [ 769.033165][ T5703] usb 2-1: device descriptor read/64, error -71 [ 769.046524][ T5710] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 769.140596][ T5703] usb usb2-port1: attempt power cycle [ 769.220273][ T5710] usb 1-1: Using ep0 maxpacket: 32 [ 769.221221][ T5710] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 769.224115][ T5710] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 769.224143][ T5710] usb 1-1: config 0 has no interface number 0 [ 769.229084][ T5710] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.229110][ T5710] usb 1-1: Product: syz [ 769.229127][ T5710] usb 1-1: Manufacturer: syz [ 769.229148][ T5710] usb 1-1: SerialNumber: syz [ 769.294586][ T5696] gspca_stk1135: reg_w 0x200 err -71 [ 769.295748][ T5696] gspca_stk1135: serial bus timeout: status=0x00 [ 769.295760][ T5696] gspca_stk1135: Sensor write failed [ 769.295786][ T5696] gspca_stk1135: serial bus timeout: status=0x00 [ 769.295794][ T5696] gspca_stk1135: Sensor write failed [ 769.295819][ T5696] gspca_stk1135: serial bus timeout: status=0x00 [ 769.295826][ T5696] gspca_stk1135: Sensor read failed [ 769.295865][ T5696] gspca_stk1135: serial bus timeout: status=0x00 [ 769.295873][ T5696] gspca_stk1135: Sensor read failed [ 769.295879][ T5696] gspca_stk1135: Detected sensor type unknown (0x0) [ 769.295940][ T5696] gspca_stk1135: serial bus timeout: status=0x00 [ 769.295953][ T5696] gspca_stk1135: Sensor read failed [ 769.295984][ T5696] gspca_stk1135: serial bus timeout: status=0x00 [ 769.295992][ T5696] gspca_stk1135: Sensor read failed [ 769.296017][ T5696] gspca_stk1135: serial bus timeout: status=0x00 [ 769.296024][ T5696] gspca_stk1135: Sensor write failed [ 769.296049][ T5696] gspca_stk1135: serial bus timeout: status=0x00 [ 769.296057][ T5696] gspca_stk1135: Sensor write failed [ 769.296112][ T5696] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 769.396424][ T5710] usb 1-1: config 0 descriptor?? [ 769.416507][ T5696] usb 4-1: USB disconnect, device number 34 [ 769.442575][ T5710] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 769.442607][ T5710] usb 1-1: selecting invalid altsetting 1 [ 769.442626][ T5710] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 769.484016][ T5710] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 769.484357][ T5710] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 769.484408][ T5710] usb 1-1: media controller created [ 769.513236][ T5703] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 769.540810][ T5703] usb 2-1: device descriptor read/8, error -71 [ 769.567048][ T5710] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 769.646523][ T5710] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 769.646585][ T5710] zl10353_read_register: readreg error (reg=127, ret==-71) [ 769.647053][ T5710] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 769.733047][ T5710] usb 1-1: USB disconnect, device number 49 [ 769.800204][ T5703] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 769.822451][ T5703] usb 2-1: device descriptor read/8, error -71 [ 769.930303][ T5703] usb usb2-port1: unable to enumerate USB device [ 771.120034][ T5696] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 771.275121][ T5696] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 771.276398][ T5696] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 771.276430][ T5696] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 771.276456][ T5696] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 771.276501][ T5696] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.321599][ T5696] usb 1-1: config 0 descriptor?? [ 771.340867][ T5770] usb 3-1: USB disconnect, device number 37 [ 771.623716][T17332] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3778'. [ 771.760011][ T5703] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 771.783434][T17320] netlink: 'syz.0.3772': attribute type 1 has an invalid length. [ 771.882549][T17320] 8021q: adding VLAN 0 to HW filter on device bond9 [ 771.910026][ T5703] usb 4-1: Using ep0 maxpacket: 8 [ 771.914203][ T5703] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 771.915433][ T5703] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 771.915461][ T5703] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 771.915500][ T5703] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 771.951373][T17336] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3779'. [ 771.957626][T17336] openvswitch: netlink: Flow actions attr not present in new flow. [ 771.986761][ T5703] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.986794][ T5703] usb 4-1: Product: syz [ 771.986810][ T5703] usb 4-1: Manufacturer: syz [ 771.986825][ T5703] usb 4-1: SerialNumber: syz [ 772.077451][T17337] 8021q: adding VLAN 0 to HW filter on device bond9 [ 772.088057][T17337] bond9: (slave wireguard0): The slave device specified does not support setting the MAC address [ 772.102116][T17337] bond9: (slave wireguard0): Error -95 calling set_mac_address [ 772.292855][T17320] bond9: (slave wlan1): Opening slave failed [ 772.540497][ T5696] usbhid 1-1:0.0: can't add hid device: -71 [ 772.540619][ T5696] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 772.567653][ T5703] usb 4-1: USB disconnect, device number 35 [ 772.612868][ T5696] usb 1-1: USB disconnect, device number 50 [ 772.702315][T17340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3776'. [ 772.706059][ T7729] udevd[7729]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 772.910076][ T5688] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 773.072951][ T5688] usb 2-1: Using ep0 maxpacket: 32 [ 773.080806][ T5710] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 773.091183][ T5688] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 773.113779][ T5688] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 773.113819][ T5688] usb 2-1: config 0 has no interface number 0 [ 773.116871][ T5688] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.116939][ T5688] usb 2-1: Product: syz [ 773.116958][ T5688] usb 2-1: Manufacturer: syz [ 773.116975][ T5688] usb 2-1: SerialNumber: syz [ 773.120853][ T5688] usb 2-1: config 0 descriptor?? [ 773.184058][ T5688] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 773.184092][ T5688] usb 2-1: selecting invalid altsetting 1 [ 773.184111][ T5688] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 773.217229][ T5688] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 773.217578][ T5688] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 773.217628][ T5688] usb 2-1: media controller created [ 773.271757][ T5710] usb 5-1: Using ep0 maxpacket: 32 [ 773.274428][ T5710] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 773.274617][ T5688] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 773.277257][ T5710] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 773.323295][ T5710] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 773.323329][ T5710] usb 5-1: Product: syz [ 773.323346][ T5710] usb 5-1: Manufacturer: syz [ 773.323364][ T5710] usb 5-1: SerialNumber: syz [ 773.354826][ T5710] usb 5-1: config 0 descriptor?? [ 773.355632][T17349] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 773.357842][ T5710] hub 5-1:0.0: bad descriptor, ignoring hub [ 773.357871][ T5710] hub 5-1:0.0: probe with driver hub failed with error -5 [ 773.425834][ T5688] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 773.425896][ T5688] zl10353_read_register: readreg error (reg=127, ret==-71) [ 773.426343][ T5688] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 773.511683][ T5688] usb 2-1: USB disconnect, device number 29 [ 773.790190][ T5710] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 773.790596][ T5770] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 773.940143][ T5710] usb 3-1: Using ep0 maxpacket: 16 [ 773.941030][ T5710] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 773.944779][ T5710] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 773.944804][ T5710] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 773.944821][ T5710] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 773.944852][ T5710] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.948072][ T5770] usb 4-1: Using ep0 maxpacket: 16 [ 773.951018][ T5770] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 773.971227][ T5770] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 773.971363][ T5770] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 773.971432][ T5770] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 773.971541][ T5770] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.026366][ T5710] usb 3-1: config 0 descriptor?? [ 774.059295][ T5770] usb 4-1: config 0 descriptor?? [ 774.352246][T17357] loop5: detected capacity change from 0 to 4095 [ 774.823356][T17355] Buffer I/O error on dev loop5, logical block 511, async page read [ 774.895237][T17357] Buffer I/O error on dev loop5, logical block 511, async page read [ 774.896582][ T7686] Buffer I/O error on dev loop5, logical block 511, async page read [ 775.117188][ T5770] usbhid 4-1:0.0: can't add hid device: -71 [ 775.117307][ T5770] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 775.136562][ T5770] usb 4-1: USB disconnect, device number 36 [ 775.160411][ T5688] usb 5-1: USB disconnect, device number 46 [ 775.316811][T17373] hsr1: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 775.316843][T17373] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 775.341088][ T5688] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 775.480096][ T5688] usb 5-1: device descriptor read/64, error -71 [ 775.500065][ T5710] usbhid 3-1:0.0: can't add hid device: -71 [ 775.500148][ T5710] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 775.526784][ T5710] usb 3-1: USB disconnect, device number 38 [ 775.615148][T17377] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3791'. [ 775.721575][ T5688] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 775.850000][ T5688] usb 5-1: device descriptor read/64, error -71 [ 775.886599][ T31] kauditd_printk_skb: 33 callbacks suppressed [ 775.886620][ T31] audit: type=1326 audit(1791176332.520:2467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17379 comm="syz.2.3792" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f621b79e159 code=0x7ffc0000 [ 775.886872][ T31] audit: type=1326 audit(1791176332.520:2468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17379 comm="syz.2.3792" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f621b79e159 code=0x7ffc0000 [ 775.956046][ T31] audit: type=1326 audit(1791176332.590:2469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17379 comm="syz.2.3792" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f621b79e159 code=0x7ffc0000 [ 775.956178][ T31] audit: type=1326 audit(1791176332.590:2470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17379 comm="syz.2.3792" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f621b79e159 code=0x7ffc0000 [ 775.956357][ T31] audit: type=1326 audit(1791176332.590:2471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17379 comm="syz.2.3792" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f621b79e159 code=0x7ffc0000 [ 775.985496][ T5688] usb usb5-port1: attempt power cycle [ 776.027177][ T31] audit: type=1326 audit(1791176332.650:2472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17379 comm="syz.2.3792" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f621b79e159 code=0x7ffc0000 [ 776.070224][ T31] audit: type=1326 audit(1791176332.680:2473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17379 comm="syz.2.3792" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f621b79e159 code=0x7ffc0000 [ 776.070416][ T31] audit: type=1326 audit(1791176332.710:2474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17379 comm="syz.2.3792" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f621b79e159 code=0x7ffc0000 [ 776.104661][ T31] audit: type=1326 audit(1791176332.720:2475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17379 comm="syz.2.3792" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f621b79e159 code=0x7ffc0000 [ 776.104723][ T31] audit: type=1326 audit(1791176332.730:2476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17379 comm="syz.2.3792" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f621b79e159 code=0x7ffc0000 [ 776.402399][T17387] bond6: down delay (511) is not a multiple of miimon (8), value rounded to 504 ms [ 776.402441][T17387] bond6: entered promiscuous mode [ 776.630464][ T5696] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 776.787347][ T5696] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 776.801025][ T5696] usb 1-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0x7C, changing to 0xC [ 776.801065][ T5696] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 776.807424][ T5696] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 776.807457][ T5696] usb 1-1: Manufacturer: syz [ 776.807475][ T5696] usb 1-1: SerialNumber: syz [ 776.980089][ T5770] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 777.025164][ T5710] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 777.130143][ T5770] usb 2-1: Using ep0 maxpacket: 32 [ 777.131013][ T5770] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 777.133039][ T5770] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 777.133064][ T5770] usb 2-1: config 0 has no interface number 0 [ 777.170313][ T5770] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.170368][ T5770] usb 2-1: Product: syz [ 777.170379][ T5770] usb 2-1: Manufacturer: syz [ 777.170390][ T5770] usb 2-1: SerialNumber: syz [ 777.173277][ T5710] usb 3-1: Using ep0 maxpacket: 32 [ 777.174309][ T5710] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 777.175029][ T5770] usb 2-1: config 0 descriptor?? [ 777.176431][ T5710] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 777.176456][ T5710] usb 3-1: config 0 has no interface number 0 [ 777.210592][ T5710] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.210679][ T5710] usb 3-1: Product: syz [ 777.210721][ T5710] usb 3-1: Manufacturer: syz [ 777.210766][ T5710] usb 3-1: SerialNumber: syz [ 777.267878][ T5770] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 777.267931][ T5770] usb 2-1: selecting invalid altsetting 1 [ 777.267948][ T5770] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 777.302877][ T5770] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 777.303415][ T5770] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 777.303465][ T5770] usb 2-1: media controller created [ 777.308176][ T5710] usb 3-1: config 0 descriptor?? [ 777.351471][ T5710] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 777.351503][ T5710] usb 3-1: selecting invalid altsetting 1 [ 777.351522][ T5710] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 777.385344][ T5770] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 777.385737][ T5710] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 777.441740][ T5622] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 777.449156][ T5696] usbhid 1-1:36.0: couldn't find an input interrupt endpoint [ 777.466422][ T5710] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 777.466486][ T5710] usb 3-1: media controller created [ 777.471872][ T5696] usb 1-1: USB disconnect, device number 51 [ 777.480739][ T5770] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 777.480794][ T5770] zl10353_read_register: readreg error (reg=127, ret==-71) [ 777.481252][ T5770] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 777.584122][ T5710] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 777.592872][T17403] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 777.604632][T17403] input: syz1 as /devices/virtual/input/input112 [ 777.637334][ T5622] usb 4-1: Using ep0 maxpacket: 32 [ 777.660634][ T5622] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 777.666976][ T5622] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.688733][ T5622] usb 4-1: config 0 descriptor?? [ 777.734971][ T5710] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 777.735038][ T5710] zl10353_read_register: readreg error (reg=127, ret==-71) [ 777.735545][ T5710] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 777.764715][ T5770] usb 2-1: USB disconnect, device number 30 [ 777.905769][ T5622] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 777.908591][ T5622] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 777.909557][ T5622] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 777.909611][ T5622] usb 4-1: media controller created [ 777.964440][ T5622] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 777.969029][ T5710] usb 3-1: USB disconnect, device number 39 [ 778.134624][ T5622] az6027: usb out operation failed. (-71) [ 778.136866][ T5622] az6027: usb out operation failed. (-71) [ 778.136884][ T5622] stb0899_attach: Driver disabled by Kconfig [ 778.136928][ T5622] az6027: no front-end attached [ 778.136928][ T5622] [ 778.144591][ T5622] az6027: usb out operation failed. (-71) [ 778.144665][ T5622] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 778.179506][ T5622] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input113 [ 778.202443][ T5622] dvb-usb: schedule remote query interval to 400 msecs. [ 778.202471][ T5622] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 778.232873][ T5622] usb 4-1: USB disconnect, device number 37 [ 778.246406][T17411] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3804'. [ 778.306490][T17415] FAULT_INJECTION: forcing a failure. [ 778.306490][T17415] name failslab, interval 1, probability 0, space 0, times 0 [ 778.306530][T17415] CPU: 0 UID: 0 PID: 17415 Comm: syz.0.3803 Tainted: G L syzkaller #0 PREEMPT(full) [ 778.306561][T17415] Tainted: [L]=SOFTLOCKUP [ 778.306570][T17415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 778.306584][T17415] Call Trace: [ 778.306594][T17415] [ 778.306604][T17415] dump_stack_lvl+0xe8/0x150 [ 778.306643][T17415] should_fail_ex+0x410/0x560 [ 778.306677][T17415] ? __alloc_skb+0x1db/0x7a0 [ 778.306708][T17415] should_failslab+0xa8/0x100 [ 778.306740][T17415] ? __alloc_skb+0x1db/0x7a0 [ 778.306769][T17415] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 778.306794][T17415] ? __alloc_skb+0x18d/0x7a0 [ 778.306825][T17415] ? __alloc_skb+0x1db/0x7a0 [ 778.306862][T17415] __alloc_skb+0x1db/0x7a0 [ 778.306896][T17415] netlink_ack+0x136/0xb30 [ 778.306941][T17415] netlink_rcv_skb+0x2a4/0x4a0 [ 778.306968][T17415] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 778.306992][T17415] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 778.307028][T17415] ? bpf_lsm_capable+0x9/0x20 [ 778.307051][T17415] ? security_capable+0x7e/0x2c0 [ 778.307089][T17415] nfnetlink_rcv+0x2b9/0x28c0 [ 778.307126][T17415] ? kernel_text_address+0xa5/0xe0 [ 778.307154][T17415] ? __kernel_text_address+0xd/0x30 [ 778.307179][T17415] ? unwind_get_return_address+0x4d/0x90 [ 778.307207][T17415] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 778.307239][T17415] ? arch_stack_walk+0xfb/0x150 [ 778.307283][T17415] ? stack_trace_save+0xa9/0x100 [ 778.307309][T17415] ? __lock_acquire+0x747/0x2de0 [ 778.307335][T17415] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 778.307374][T17415] ? __kasan_slab_alloc+0x6c/0x80 [ 778.307401][T17415] ? kmem_cache_alloc_node_noprof+0x354/0x610 [ 778.307424][T17415] ? __alloc_skb+0x27a/0x7a0 [ 778.307453][T17415] ? netlink_sendmsg+0x5d4/0xb40 [ 778.307477][T17415] ? sock_sendmsg_nosec+0x13a/0x180 [ 778.307502][T17415] ? ____sys_sendmsg+0x54e/0x850 [ 778.307542][T17415] ? __lock_acquire+0x747/0x2de0 [ 778.307578][T17415] ? __netlink_lookup+0xc6/0x8b0 [ 778.307615][T17415] ? lock_acquire+0x115/0x350 [ 778.307640][T17415] ? netlink_deliver_tap+0x2e/0x1b0 [ 778.307671][T17415] ? netlink_deliver_tap+0x2e/0x1b0 [ 778.307695][T17415] ? netlink_deliver_tap+0x2e/0x1b0 [ 778.307726][T17415] netlink_unicast+0x7bd/0x940 [ 778.307771][T17415] netlink_sendmsg+0x813/0xb40 [ 778.307805][T17415] ? __pfx_netlink_sendmsg+0x10/0x10 [ 778.307839][T17415] ? apparmor_socket_sendmsg+0x98/0x360 [ 778.307870][T17415] ? __pfx_netlink_sendmsg+0x10/0x10 [ 778.307895][T17415] sock_sendmsg_nosec+0x13a/0x180 [ 778.307926][T17415] ____sys_sendmsg+0x54e/0x850 [ 778.307966][T17415] ? __pfx_____sys_sendmsg+0x10/0x10 [ 778.308010][T17415] ? import_iovec+0x73/0xa0 [ 778.308045][T17415] ___sys_sendmsg+0x2a5/0x360 [ 778.308076][T17415] ? __lock_acquire+0x747/0x2de0 [ 778.308106][T17415] ? __pfx____sys_sendmsg+0x10/0x10 [ 778.308177][T17415] ? __fget_files+0x2a/0x420 [ 778.308209][T17415] ? __fget_files+0x3a2/0x420 [ 778.308260][T17415] __x64_sys_sendmsg+0x1b1/0x290 [ 778.308298][T17415] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 778.308354][T17415] do_syscall_64+0x166/0x520 [ 778.308387][T17415] ? trace_irq_disable+0x3b/0x140 [ 778.308412][T17415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.308437][T17415] ? clear_bhb_loop+0x70/0xc0 [ 778.308466][T17415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.308490][T17415] RIP: 0033:0x7f4d7919e159 [ 778.308512][T17415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 778.308533][T17415] RSP: 002b:00007f4d7a0e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 778.308558][T17415] RAX: ffffffffffffffda RBX: 00007f4d79425fa0 RCX: 00007f4d7919e159 [ 778.308575][T17415] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 778.308591][T17415] RBP: 00007f4d7a0e6090 R08: 0000000000000000 R09: 0000000000000000 [ 778.308606][T17415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 778.308620][T17415] R13: 00007f4d79426038 R14: 00007f4d79425fa0 R15: 00007f4d7954fa48 [ 778.308655][T17415] [ 778.694315][ T5622] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 778.952160][T17426] FAULT_INJECTION: forcing a failure. [ 778.952160][T17426] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 778.952200][T17426] CPU: 0 UID: 0 PID: 17426 Comm: syz.3.3807 Tainted: G L syzkaller #0 PREEMPT(full) [ 778.952236][T17426] Tainted: [L]=SOFTLOCKUP [ 778.952243][T17426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 778.952253][T17426] Call Trace: [ 778.952260][T17426] [ 778.952268][T17426] dump_stack_lvl+0xe8/0x150 [ 778.952296][T17426] should_fail_ex+0x410/0x560 [ 778.952321][T17426] _copy_from_user+0x2d/0xb0 [ 778.952346][T17426] kstrtouint_from_user+0xd6/0x180 [ 778.952368][T17426] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 778.952394][T17426] ? lock_acquire+0x115/0x350 [ 778.952415][T17426] proc_fail_nth_write+0x8e/0x210 [ 778.952434][T17426] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 778.952458][T17426] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 778.952475][T17426] vfs_write+0x296/0xba0 [ 778.952498][T17426] ? __pfx_vfs_write+0x10/0x10 [ 778.952536][T17426] ? __fget_files+0x2a/0x420 [ 778.952579][T17426] ? __fget_files+0x3a2/0x420 [ 778.952612][T17426] ? __fget_files+0x2a/0x420 [ 778.952670][T17426] ksys_write+0x150/0x270 [ 778.952689][T17426] ? __pfx_ksys_write+0x10/0x10 [ 778.952733][T17426] do_syscall_64+0x166/0x520 [ 778.952766][T17426] ? trace_irq_disable+0x3b/0x140 [ 778.952791][T17426] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.952821][T17426] ? clear_bhb_loop+0x70/0xc0 [ 778.952841][T17426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.952858][T17426] RIP: 0033:0x7f540cb5e98e [ 778.952873][T17426] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 778.952887][T17426] RSP: 002b:00007f540d9a6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 778.952926][T17426] RAX: ffffffffffffffda RBX: 00007f540d9a76c0 RCX: 00007f540cb5e98e [ 778.952944][T17426] RDX: 0000000000000001 RSI: 00007f540d9a70a0 RDI: 0000000000000004 [ 778.952958][T17426] RBP: 00007f540d9a7090 R08: 0000000000000000 R09: 0000000000000000 [ 778.952978][T17426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 778.952988][T17426] R13: 00007f540ce26038 R14: 00007f540ce25fa0 R15: 00007f540cf4fa48 [ 778.953013][T17426] [ 779.257371][T17432] openvswitch: netlink: IPv4 tunnel dst address is zero [ 779.450135][ T5696] usb 5-1: new low-speed USB device number 50 using dummy_hcd [ 779.600331][ T5696] usb 5-1: Invalid ep0 maxpacket: 32 [ 779.636413][T17456] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3819'. [ 779.683265][T17458] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20128 [ 779.683991][T17457] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20128 [ 779.730033][ T5696] usb 5-1: new low-speed USB device number 51 using dummy_hcd [ 779.879938][ T5696] usb 5-1: Invalid ep0 maxpacket: 32 [ 779.880317][ T5696] usb usb5-port1: attempt power cycle [ 779.973721][T17465] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 780.090297][T17432] nvme nvme0: failed to connect socket: -512 [ 780.220034][ T5696] usb 5-1: new low-speed USB device number 52 using dummy_hcd [ 780.240641][ T5696] usb 5-1: Invalid ep0 maxpacket: 32 [ 780.302256][T17468] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 780.390079][ T5696] usb 5-1: new low-speed USB device number 53 using dummy_hcd [ 780.412945][ T5696] usb 5-1: Invalid ep0 maxpacket: 32 [ 780.413227][ T5696] usb usb5-port1: unable to enumerate USB device [ 780.711876][ T5696] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 780.728583][T17489] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3831'. [ 780.860019][ T5696] usb 1-1: Using ep0 maxpacket: 8 [ 780.860948][ T5696] usb 1-1: New USB device found, idVendor=18d1, idProduct=f404, bcdDevice= 0.02 [ 780.862280][ T5696] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 780.862305][ T5696] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 780.865052][ T5696] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.865079][ T5696] usb 1-1: Product: syz [ 780.865094][ T5696] usb 1-1: Manufacturer: syz [ 780.865110][ T5696] usb 1-1: SerialNumber: syz [ 780.937363][ T5696] usb 1-1: skipping empty audio interface (v1) [ 781.033473][ T5696] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 781.086099][ T7686] udevd[7686]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 781.199680][T17478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 781.215363][T17478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 781.334534][T17478] batman_adv: batadv0: Adding interface: syzkaller0 [ 781.334556][T17478] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 781.334594][T17478] batman_adv: batadv0: Interface activated: syzkaller0 [ 781.627412][T17477] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 781.658427][T17477] batman_adv: batadv0: Removing interface: syzkaller0 [ 781.693591][T17505] netlink: 'syz.1.3837': attribute type 10 has an invalid length. [ 781.693622][T17505] dummy0: left promiscuous mode [ 781.698435][T17505] dummy0: entered promiscuous mode [ 781.708138][T15092] usb 1-1: USB disconnect, device number 52 [ 781.710555][ T5696] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 781.735733][T17505] team0: Port device dummy0 added [ 781.862729][ T5681] usb 4-1: new low-speed USB device number 38 using dummy_hcd [ 781.876357][ T5696] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 781.879309][ T5696] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.888874][ T5696] usb 3-1: config 0 descriptor?? [ 781.903481][ T5696] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 782.015566][ T5681] usb 4-1: unable to get BOS descriptor or descriptor too short [ 782.015609][ T5681] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=fd.97 [ 782.017053][ T5681] usb 4-1: config 2 has an invalid interface number: 8 but max is 0 [ 782.017074][ T5681] usb 4-1: config 2 has no interface number 0 [ 782.017098][ T5681] usb 4-1: config 2 interface 8 has no altsetting 0 [ 782.038829][ T5681] usb 4-1: string descriptor 0 read error: -22 [ 782.039531][ T5681] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.085264][ T5681] usbtest 4-1:2.8: Linux user mode ISO test driver [ 782.085285][ T5681] usbtest 4-1:2.8: low-speed {control} tests [ 782.601225][ T5681] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 782.749999][ T5681] usb 1-1: Using ep0 maxpacket: 32 [ 782.750740][ T5681] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 782.751836][ T5681] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 782.751886][ T5681] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 782.751953][ T5681] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 782.751981][ T5681] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 782.755271][ T5681] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.755296][ T5681] usb 1-1: Product: syz [ 782.755311][ T5681] usb 1-1: Manufacturer: syz [ 782.755333][ T5681] usb 1-1: SerialNumber: syz [ 782.777173][ C1] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 782.801865][T15092] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 782.877444][ T5681] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input114 [ 782.957080][T17518] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3842'. [ 782.970469][T15092] usb 2-1: Using ep0 maxpacket: 32 [ 782.977124][T15092] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 782.980832][T15092] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 782.981008][T15092] usb 2-1: config 0 has no interface number 0 [ 783.006363][T15092] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.006385][T15092] usb 2-1: Product: syz [ 783.006399][T15092] usb 2-1: Manufacturer: syz [ 783.006410][T15092] usb 2-1: SerialNumber: syz [ 783.041017][T15092] usb 2-1: config 0 descriptor?? [ 783.056751][T15092] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 783.056789][T15092] usb 2-1: selecting invalid altsetting 1 [ 783.056802][T15092] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 783.060365][ T5681] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 783.060388][ T5681] (id 0x00) [ 783.092204][T15092] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 783.092631][T15092] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 783.092690][T15092] usb 2-1: media controller created [ 783.155089][T15092] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 783.243511][ T5681] rc_core: IR keymap rc-imon-pad not found [ 783.243536][ T5681] Registered IR keymap rc-empty [ 783.243785][ T5681] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 783.243806][ T5681] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 783.285289][ T5681] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 783.289524][ T5681] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input115 [ 783.333679][ T5681] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:53> initialized [ 783.495514][T17498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 783.498641][T17498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 783.589037][T17526] program syz.4.3844 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 783.607549][ T5696] usb 3-1: USB disconnect, device number 40 [ 783.712355][ T5703] usb 4-1: USB disconnect, device number 38 [ 784.099615][T17529] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 784.243995][T17534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 784.245078][T17534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 784.261294][T15092] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 784.261389][T15092] zl10353_read_register: readreg error (reg=127, ret==-110) [ 784.311656][T17516] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 784.406726][T17534] imon:send_packet: packet tx failed (-71) [ 784.406939][ T5703] usb 1-1: USB disconnect, device number 53 [ 784.422771][T17534] imon:vfd_write: send packet #2 failed [ 784.493315][T15092] usb 2-1: USB disconnect, device number 31 [ 785.055361][T17560] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3853'. [ 785.241411][ T5703] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 785.410865][ T5703] usb 5-1: Using ep0 maxpacket: 8 [ 785.412845][ T5703] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 785.413954][ T5703] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 785.413994][ T5703] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 785.414043][ T5703] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 785.414065][ T5703] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 785.414084][ T5703] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 785.414103][ T5703] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 785.414123][ T5703] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 785.414146][ T5703] usb 5-1: config 168 interface 0 has no altsetting 0 [ 785.415299][ T5703] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 785.415335][ T5703] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 785.415380][ T5703] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 785.415411][ T5703] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 785.415439][ T5703] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 785.415468][ T5703] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 785.415496][ T5703] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 785.415530][ T5703] usb 5-1: config 168 interface 0 has no altsetting 0 [ 785.417543][ T5703] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 785.417612][ T5703] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 785.417664][ T5703] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 785.417695][ T5703] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 785.417722][ T5703] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 785.417750][ T5703] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 785.417784][ T5703] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 785.417813][ T5703] usb 5-1: config 168 interface 0 has no altsetting 0 [ 785.457037][ T5710] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 785.482503][ T5703] usb 5-1: string descriptor 0 read error: -22 [ 785.482663][ T5703] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.735800][ T5710] usb 2-1: not running at top speed; connect to a high speed hub [ 785.735841][ T5710] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 785.765021][ T5710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.765043][ T5710] usb 2-1: Product: ᰉ [ 785.765054][ T5710] usb 2-1: Manufacturer: 킠腨▦鯲쪖굩蝪﹌禮Ⴙ籐麤飕儎푢埬蹎䛄觟륅ꀟƑ汓놙閡䠧躜ঌ陨㑏洸瓺槹嶶묉鬖틄莹皇ጄ葋⇩歊ￋ窶㺞찰맟ოᦨ鲽ગ泧孿钫ꨳ⧕虯慑谥ᕔꐔ뻁恖ኲ춸ꔬ卞홄㭙飼⤨舛㺶妡⴦堁샍僦ꫩ엿惬쀡 [ 785.765078][ T5710] usb 2-1: SerialNumber: Љ [ 785.839703][ T5703] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 785.971557][T17569] netlink: 'syz.3.3857': attribute type 10 has an invalid length. [ 785.973339][T17569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3857'. [ 785.976494][T17569] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3857'. [ 786.060270][ T31] kauditd_printk_skb: 26 callbacks suppressed [ 786.060293][ T31] audit: type=1326 audit(1791176342.700:2503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17562 comm="syz.1.3854" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69239e159 code=0x7ffc0000 [ 786.060466][ T31] audit: type=1326 audit(1791176342.700:2504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17562 comm="syz.1.3854" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69239e159 code=0x7ffc0000 [ 786.068861][ T31] audit: type=1326 audit(1791176342.700:2505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17562 comm="syz.1.3854" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff69235e98e code=0x7ffc0000 [ 786.103937][ T31] audit: type=1326 audit(1791176342.700:2506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17562 comm="syz.1.3854" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69239e159 code=0x7ffc0000 [ 786.104000][ T31] audit: type=1326 audit(1791176342.740:2507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17562 comm="syz.1.3854" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff69239e159 code=0x7ffc0000 [ 786.104046][ T31] audit: type=1326 audit(1791176342.740:2508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17562 comm="syz.1.3854" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69239e159 code=0x7ffc0000 [ 786.104104][ T31] audit: type=1326 audit(1791176342.740:2509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17562 comm="syz.1.3854" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69239e159 code=0x7ffc0000 [ 786.253004][ T31] audit: type=1326 audit(1791176342.860:2510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17562 comm="syz.1.3854" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7ff69239e159 code=0x7ffc0000 [ 786.253078][ T31] audit: type=1326 audit(1791176342.860:2511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17562 comm="syz.1.3854" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69239e159 code=0x7ffc0000 [ 786.253132][ T31] audit: type=1326 audit(1791176342.860:2512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17562 comm="syz.1.3854" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69239e159 code=0x7ffc0000 [ 786.334672][ T5710] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 786.354041][T17573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 786.354839][T17573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 786.382927][T17573] batadv_slave_0: entered promiscuous mode [ 786.487384][ T5703] usb 5-1: USB disconnect, device number 54 [ 786.545290][ T5710] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 786.592347][ T5710] usb 2-1: USB disconnect, device number 32 [ 786.633328][T17556] batadv_slave_0: left promiscuous mode [ 786.641648][ T7686] udevd[7686]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 786.720050][ T5681] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 786.825547][T17582] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 786.840725][T15092] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 786.870834][ T5681] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 786.873726][ T5681] usb 1-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0x7C, changing to 0xC [ 786.873769][ T5681] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 786.877422][ T5681] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 786.877457][ T5681] usb 1-1: Manufacturer: syz [ 786.877481][ T5681] usb 1-1: SerialNumber: syz [ 787.000266][T15092] usb 3-1: Using ep0 maxpacket: 32 [ 787.001490][T15092] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 787.003491][T15092] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 787.003516][T15092] usb 3-1: config 0 has no interface number 0 [ 787.007269][T15092] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.007291][T15092] usb 3-1: Product: syz [ 787.007302][T15092] usb 3-1: Manufacturer: syz [ 787.007313][T15092] usb 3-1: SerialNumber: syz [ 787.057452][T15092] usb 3-1: config 0 descriptor?? [ 787.074181][T15092] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 787.074213][T15092] usb 3-1: selecting invalid altsetting 1 [ 787.074232][T15092] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 787.077888][T15092] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 787.078269][T15092] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 787.078304][T15092] usb 3-1: media controller created [ 787.130267][T15092] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 787.156990][ T5681] usbhid 1-1:36.0: couldn't find an input interrupt endpoint [ 787.170626][ T5681] usb 1-1: USB disconnect, device number 54 [ 787.180020][ T5696] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 787.250748][T17588] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3864'. [ 787.329955][ T5696] usb 2-1: Using ep0 maxpacket: 32 [ 787.330844][ T5696] usb 2-1: New USB device found, idVendor=0cf3, idProduct=b003, bcdDevice=bf.24 [ 787.332736][ T5696] usb 2-1: config 3 has an invalid interface number: 249 but max is 0 [ 787.332765][ T5696] usb 2-1: config 3 has no interface number 0 [ 787.332811][ T5696] usb 2-1: config 3 interface 249 has no altsetting 0 [ 787.335840][ T5696] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.335870][ T5696] usb 2-1: Product: syz [ 787.335888][ T5696] usb 2-1: Manufacturer: syz [ 787.335927][ T5696] usb 2-1: SerialNumber: syz [ 787.556739][T17586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3863'. [ 787.575255][T17594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3863'. [ 787.605194][T17586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 787.605657][T17586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 787.643988][ T5696] usb 2-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 787.670176][ T5696] usb 2-1: USB disconnect, device number 33 [ 787.924631][T17601] bond3: option all_slaves_active: invalid value (230) [ 787.928497][T17601] bond3 (unregistering): Released all slaves [ 787.978489][T17603] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 788.261090][T15092] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 788.261177][T15092] zl10353_read_register: readreg error (reg=127, ret==-110) [ 788.281073][T17580] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 788.402355][T15092] usb 3-1: USB disconnect, device number 41 [ 788.586411][T17614] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3872'. [ 788.688369][T17620] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3875'. [ 788.849979][ T5696] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 789.007487][ T5696] usb 1-1: unable to get BOS descriptor or descriptor too short [ 789.008179][ T5696] usb 1-1: not running at top speed; connect to a high speed hub [ 789.008215][ T5696] usb 1-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 789.009369][ T5696] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 789.014843][ T5696] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 789.015048][ T5696] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 789.019793][ T5696] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 789.024561][ T5696] usb 1-1: Product: syz [ 789.024614][ T5696] usb 1-1: Manufacturer: syz [ 789.100620][ T5696] uvcvideo 1-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 789.101970][ T5696] uvcvideo 1-1:1.0: No valid video chain found. [ 789.120220][ T5681] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 789.178314][T17635] loop5: detected capacity change from 0 to 7 [ 789.179230][T17635] Dev loop5: unable to read RDB block 7 [ 789.179275][T17635] loop5: unable to read partition table [ 789.179499][T17635] loop5: partition table beyond EOD, truncated [ 789.179533][T17635] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 789.270453][ T5681] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 789.271644][ T5681] usb 2-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0x7C, changing to 0xC [ 789.271668][ T5681] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 789.273282][ T5681] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 789.273301][ T5681] usb 2-1: Manufacturer: syz [ 789.273313][ T5681] usb 2-1: SerialNumber: syz [ 789.532066][ T5681] usbhid 2-1:36.0: couldn't find an input interrupt endpoint [ 789.538964][ T5681] usb 2-1: USB disconnect, device number 34 [ 789.906067][T17653] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3888'. [ 790.010329][ T5696] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 790.161766][ T5696] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 790.163051][ T5696] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 790.163091][ T5696] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 790.163112][ T5696] usb 4-1: config 0 interface 0 has no altsetting 0 [ 790.163137][ T5696] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.165754][ T5696] usb 4-1: config 0 descriptor?? [ 790.207226][ T5681] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 790.286380][T15092] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 790.315637][T15092] hid-generic 0000:0000:0000.002C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 790.361824][ T5681] usb 3-1: Using ep0 maxpacket: 32 [ 790.363392][ T5681] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 790.365000][ T5681] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 790.365027][ T5681] usb 3-1: config 0 has no interface number 0 [ 790.395150][ T5681] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.395182][ T5681] usb 3-1: Product: syz [ 790.395199][ T5681] usb 3-1: Manufacturer: syz [ 790.395215][ T5681] usb 3-1: SerialNumber: syz [ 790.431346][ T5681] usb 3-1: config 0 descriptor?? [ 790.453537][ T5681] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 790.453561][ T5681] usb 3-1: selecting invalid altsetting 1 [ 790.453572][ T5681] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 790.488540][ T5681] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 790.488859][ T5681] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 790.488965][ T5681] usb 3-1: media controller created [ 790.558052][ T5681] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 790.626997][ T5696] usbhid 4-1:0.0: can't add hid device: -71 [ 790.627140][ T5696] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 790.659148][ T5696] usb 4-1: USB disconnect, device number 39 [ 790.777749][ T5710] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 790.920823][ T5710] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 790.922383][ T5710] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 790.922444][ T5710] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 790.922469][ T5710] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 790.922494][ T5710] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 790.922540][ T5710] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.195152][T17668] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 791.235298][T17673] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3895'. [ 791.443786][T17678] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3897'. [ 791.485767][T15092] usb 1-1: USB disconnect, device number 55 [ 791.520100][ T5696] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 791.545513][ T5710] usb 2-1: USB disconnect, device number 35 [ 791.584331][T17680] syzkaller0: entered promiscuous mode [ 791.584355][T17680] syzkaller0: entered allmulticast mode [ 791.599620][T17680] tipc: Enabled bearer , priority 0 [ 791.621372][ T5681] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 791.621440][ T5681] zl10353_read_register: readreg error (reg=127, ret==-110) [ 791.644646][T17655] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 791.672965][ T5696] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 791.672999][ T5696] usb 5-1: too many configurations: 102, using maximum allowed: 8 [ 791.674169][ T5696] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 791.674217][ T5696] usb 5-1: config 1 has no interface number 0 [ 791.676757][ T5696] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 791.676783][ T5696] usb 5-1: config 1 has no interface number 0 [ 791.679490][ T5696] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 791.679518][ T5696] usb 5-1: config 1 has no interface number 0 [ 791.693969][ T5681] usb 3-1: USB disconnect, device number 42 [ 791.754056][ T5696] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 791.754088][ T5696] usb 5-1: config 1 has no interface number 0 [ 791.759263][ T5696] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 791.759284][ T5696] usb 5-1: config 1 has no interface number 0 [ 791.769123][ T5696] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 791.769199][ T5696] usb 5-1: config 1 has no interface number 0 [ 791.799076][ T5696] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 791.799161][ T5696] usb 5-1: config 1 has no interface number 0 [ 791.823761][ T5696] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 791.823784][ T5696] usb 5-1: config 1 has no interface number 0 [ 791.829489][ T5696] usb 5-1: New USB device strings: Mfr=219, Product=128, SerialNumber=211 [ 791.829510][ T5696] usb 5-1: Product: syz [ 791.829522][ T5696] usb 5-1: Manufacturer: syz [ 791.829534][ T5696] usb 5-1: SerialNumber: syz [ 791.878496][ T5696] usb 5-1: 3:0 : does not exist [ 791.878514][ T5696] usb 5-1: 3:0 : does not exist [ 791.920819][T15092] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 792.070766][T15092] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 792.071797][T15092] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 792.071825][T15092] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 792.071878][T15092] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.162706][T15092] usb 5-1: USB disconnect, device number 55 [ 792.224691][T17684] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3900'. [ 792.603440][T17697] openvswitch: netlink: IP tunnel dst address not specified [ 792.655084][T17702] syzkaller0: mtu less than device minimum [ 792.710082][T15092] tipc: Node number set to 2851081701 [ 792.799967][ T5710] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 792.872839][T15092] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 792.911943][T15092] hid-generic 0000:0000:0000.002D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 792.950040][ T5710] usb 2-1: Using ep0 maxpacket: 8 [ 792.951019][ T5710] usb 2-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=e9.c3 [ 792.951064][ T5710] usb 2-1: too many configurations: 129, using maximum allowed: 8 [ 792.989316][ T5710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.989349][ T5710] usb 2-1: Product: syz [ 792.989366][ T5710] usb 2-1: Manufacturer: syz [ 792.989383][ T5710] usb 2-1: SerialNumber: syz [ 793.231870][ T5710] gspca_main: 0734:043b too many config [ 793.238636][ T5710] usb 2-1: USB disconnect, device number 36 [ 793.429195][T17713] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3908'. [ 793.429227][T17713] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3908'. [ 793.430166][T15092] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 793.611786][T15092] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 793.613009][T15092] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 793.613051][T15092] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 793.613085][T15092] usb 3-1: config 0 interface 0 has no altsetting 0 [ 793.613110][T15092] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.615628][T15092] usb 3-1: config 0 descriptor?? [ 793.901389][T17724] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3913'. [ 794.028738][T15092] usbhid 3-1:0.0: can't add hid device: -71 [ 794.028822][T15092] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 794.052575][T15092] usb 3-1: USB disconnect, device number 43 [ 794.110530][ T5710] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 794.205437][T17729] FAULT_INJECTION: forcing a failure. [ 794.205437][T17729] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 794.205507][T17729] CPU: 1 UID: 0 PID: 17729 Comm: syz.1.3914 Tainted: G L syzkaller #0 PREEMPT(full) [ 794.205539][T17729] Tainted: [L]=SOFTLOCKUP [ 794.205548][T17729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 794.205562][T17729] Call Trace: [ 794.205572][T17729] [ 794.205582][T17729] dump_stack_lvl+0xe8/0x150 [ 794.205621][T17729] should_fail_ex+0x410/0x560 [ 794.205654][T17729] _copy_from_user+0x2d/0xb0 [ 794.205688][T17729] input_event_from_user+0xb1/0x290 [ 794.205719][T17729] ? __pfx_input_event_from_user+0x10/0x10 [ 794.205758][T17729] evdev_write+0x2c7/0x4c0 [ 794.205784][T17729] ? __lock_acquire+0x747/0x2de0 [ 794.205812][T17729] ? __pfx_evdev_write+0x10/0x10 [ 794.205841][T17729] ? bpf_lsm_file_permission+0x9/0x20 [ 794.205873][T17729] ? security_file_permission+0x75/0x260 [ 794.205907][T17729] ? rw_verify_area+0x203/0x4c0 [ 794.205945][T17729] ? __pfx_evdev_write+0x10/0x10 [ 794.205970][T17729] vfs_write+0x296/0xba0 [ 794.206000][T17729] ? __pfx_vfs_write+0x10/0x10 [ 794.206024][T17729] ? __fget_files+0x2a/0x420 [ 794.206060][T17729] ? __fget_files+0x2a/0x420 [ 794.206100][T17729] ? __fget_files+0x3a2/0x420 [ 794.206133][T17729] ? __fget_files+0x2a/0x420 [ 794.206173][T17729] ksys_write+0x150/0x270 [ 794.206200][T17729] ? __pfx_ksys_write+0x10/0x10 [ 794.206233][T17729] do_syscall_64+0x166/0x520 [ 794.206266][T17729] ? trace_irq_disable+0x3b/0x140 [ 794.206292][T17729] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.206316][T17729] ? clear_bhb_loop+0x70/0xc0 [ 794.206345][T17729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.206368][T17729] RIP: 0033:0x7ff69239e159 [ 794.206390][T17729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 794.206409][T17729] RSP: 002b:00007ff693181028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 794.206434][T17729] RAX: ffffffffffffffda RBX: 00007ff692625fa0 RCX: 00007ff69239e159 [ 794.206451][T17729] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000006 [ 794.206466][T17729] RBP: 00007ff693181090 R08: 0000000000000000 R09: 0000000000000000 [ 794.206480][T17729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 794.206495][T17729] R13: 00007ff692626038 R14: 00007ff692625fa0 R15: 00007ff69274fa48 [ 794.206530][T17729] [ 794.300885][ T5710] usb 5-1: Using ep0 maxpacket: 32 [ 794.313569][ T5710] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 794.329213][ T5710] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 794.329246][ T5710] usb 5-1: config 0 has no interface number 0 [ 794.432801][ T5710] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.432833][ T5710] usb 5-1: Product: syz [ 794.432848][ T5710] usb 5-1: Manufacturer: syz [ 794.432864][ T5710] usb 5-1: SerialNumber: syz [ 794.522387][T17729] bond5: (slave bridge0): Releasing backup interface [ 794.522417][T17729] bridge0: left promiscuous mode [ 794.524667][ T5710] usb 5-1: config 0 descriptor?? [ 794.554940][ T5710] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 794.554973][ T5710] usb 5-1: selecting invalid altsetting 1 [ 794.554992][ T5710] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 794.590987][T17729] bridge0: entered promiscuous mode [ 794.591598][ T5710] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 794.591965][ T5710] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 794.592015][ T5710] usb 5-1: media controller created [ 794.595884][T17729] team0: Port device bridge0 added [ 794.643722][ T5710] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 794.649749][ T5712] usb 1-1: USB disconnect, device number 56 [ 794.707313][T17702] tipc: Resetting bearer [ 794.736686][T17702] tipc: Disabling bearer [ 794.780010][ T5770] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 794.842545][T17737] fuse: Bad value for 'fd' [ 794.897239][T17740] Set syz0 is full, maxelem 0 reached [ 794.930786][ T5770] usb 2-1: Using ep0 maxpacket: 16 [ 794.936406][ T5770] usb 2-1: unable to get BOS descriptor or descriptor too short [ 794.936460][ T5770] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 794.937516][ T5770] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 794.937569][ T5770] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 794.937595][ T5770] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 794.948829][ T5770] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.948965][ T5770] usb 2-1: Product: syz [ 794.949008][ T5770] usb 2-1: Manufacturer: syz [ 794.949054][ T5770] usb 2-1: SerialNumber: syz [ 795.160545][ T5703] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 795.189001][ T5712] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 795.204616][ T5712] hid-generic 0000:0000:0000.002E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 795.226108][ T5770] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 795.226166][ T5770] usb 2-1: MIDIStreaming interface descriptor not found [ 795.249804][T17749] FAULT_INJECTION: forcing a failure. [ 795.249804][T17749] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 795.253222][T17749] CPU: 1 UID: 0 PID: 17749 Comm: syz.3.3921 Tainted: G L syzkaller #0 PREEMPT(full) [ 795.253262][T17749] Tainted: [L]=SOFTLOCKUP [ 795.253272][T17749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 795.253288][T17749] Call Trace: [ 795.253297][T17749] [ 795.253308][T17749] dump_stack_lvl+0xe8/0x150 [ 795.253347][T17749] should_fail_ex+0x410/0x560 [ 795.253381][T17749] _copy_to_user+0x31/0xb0 [ 795.253426][T17749] simple_read_from_buffer+0xe1/0x170 [ 795.253467][T17749] proc_fail_nth_read+0x1bb/0x230 [ 795.253491][T17749] ? common_file_perm+0x20e/0x2b0 [ 795.253525][T17749] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 795.253553][T17749] ? rw_verify_area+0x24a/0x4c0 [ 795.253595][T17749] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 795.253620][T17749] vfs_read+0x213/0xa80 [ 795.253649][T17749] ? __pfx___mutex_lock+0x10/0x10 [ 795.253684][T17749] ? __pfx_vfs_read+0x10/0x10 [ 795.253708][T17749] ? __fget_files+0x2a/0x420 [ 795.253747][T17749] ? __fget_files+0x3a2/0x420 [ 795.253781][T17749] ? __fget_files+0x2a/0x420 [ 795.253824][T17749] ksys_read+0x150/0x270 [ 795.253851][T17749] ? __pfx_ksys_read+0x10/0x10 [ 795.253885][T17749] do_syscall_64+0x166/0x520 [ 795.253918][T17749] ? trace_irq_disable+0x3b/0x140 [ 795.253940][T17749] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.253959][T17749] ? clear_bhb_loop+0x70/0xc0 [ 795.253985][T17749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.254007][T17749] RIP: 0033:0x7f540cb5e98e [ 795.254025][T17749] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 795.254041][T17749] RSP: 002b:00007f540d985fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 795.254061][T17749] RAX: ffffffffffffffda RBX: 00007f540d9866c0 RCX: 00007f540cb5e98e [ 795.254075][T17749] RDX: 000000000000000f RSI: 00007f540d9860a0 RDI: 0000000000000004 [ 795.254087][T17749] RBP: 00007f540d986090 R08: 0000000000000000 R09: 0000000000000000 [ 795.254098][T17749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 795.254109][T17749] R13: 00007f540ce26128 R14: 00007f540ce26090 R15: 00007f540cf4fa48 [ 795.254143][T17749] [ 795.341138][ T5703] usb 1-1: Using ep0 maxpacket: 16 [ 795.352385][ T5703] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 795.409586][ T5703] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 795.409631][ T5703] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 795.409684][ T5703] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 795.409735][ T5703] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.578353][ T5703] usb 1-1: config 0 descriptor?? [ 795.700289][ T5710] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 795.700396][ T5710] zl10353_read_register: readreg error (reg=127, ret==-110) [ 795.725868][T17722] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 795.763936][ T5770] usb 2-1: USB disconnect, device number 37 [ 795.909044][ T5963] udevd[5963]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 795.996339][ T5710] usb 5-1: USB disconnect, device number 56 [ 796.011474][ T5703] usbhid 1-1:0.0: can't add hid device: -71 [ 796.011581][ T5703] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 796.034088][ T5703] usb 1-1: USB disconnect, device number 57 [ 796.261083][T17758] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3924'. [ 796.706049][T17767] sctp: [Deprecated]: syz.0.3927 (pid 17767) Use of struct sctp_assoc_value in delayed_ack socket option. [ 796.706049][T17767] Use struct sctp_sack_info instead [ 796.777428][T17767] : renamed from veth1_to_bond [ 796.932367][ T5703] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 797.091058][ T5703] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 797.092249][ T5703] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 797.092284][ T5703] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 797.092325][ T5703] usb 5-1: config 0 interface 0 has no altsetting 0 [ 797.092361][ T5703] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.097927][ T5703] usb 5-1: config 0 descriptor?? [ 797.229258][T17778] bridge0: port 2(syz_tun) entered blocking state [ 797.229408][T17778] bridge0: port 2(syz_tun) entered disabled state [ 797.229657][T17778] syz_tun: entered allmulticast mode [ 797.516766][ T5703] usbhid 5-1:0.0: can't add hid device: -71 [ 797.516928][ T5703] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 797.526677][ T5703] usb 5-1: USB disconnect, device number 57 [ 797.810015][ T5710] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 797.970114][ T5710] usb 2-1: Using ep0 maxpacket: 8 [ 797.970936][ T5710] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 797.972176][ T5710] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 797.972225][ T5710] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 797.972242][ T5710] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 797.972261][ T5710] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 797.972278][ T5710] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 797.972310][ T5710] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.206549][ T5710] usb 2-1: usb_control_msg returned -32 [ 798.206605][ T5710] usbtmc 2-1:16.0: can't read capabilities [ 798.380052][ T5703] usb 3-1: new low-speed USB device number 44 using dummy_hcd [ 798.554149][ T5703] usb 3-1: unable to get BOS descriptor or descriptor too short [ 798.554215][ T5703] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=fd.97 [ 798.555494][ T5703] usb 3-1: config 2 has an invalid interface number: 8 but max is 0 [ 798.555527][ T5703] usb 3-1: config 2 has no interface number 0 [ 798.555549][ T5703] usb 3-1: config 2 interface 8 has no altsetting 0 [ 798.559031][T17776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 798.559354][T17776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 798.631390][ T5703] usb 3-1: string descriptor 0 read error: -22 [ 798.631521][ T5703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.633760][T17776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 798.634155][T17776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 798.684646][ T5710] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 798.691818][ T5703] usbtest 3-1:2.8: Linux user mode ISO test driver [ 798.691875][ T5703] usbtest 3-1:2.8: low-speed {control} tests [ 798.740863][ T5688] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 798.831150][ T5710] usb 5-1: Using ep0 maxpacket: 32 [ 798.832070][ T5710] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 798.833480][ T5710] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 798.833510][ T5710] usb 5-1: config 0 has no interface number 0 [ 798.833555][ T5710] usb 5-1: config 0 interface 184 has no altsetting 0 [ 798.837802][ T5710] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.837828][ T5710] usb 5-1: Product: syz [ 798.837845][ T5710] usb 5-1: Manufacturer: syz [ 798.837867][ T5710] usb 5-1: SerialNumber: syz [ 798.896511][ T5710] usb 5-1: config 0 descriptor?? [ 798.911500][ T5688] usb 4-1: Using ep0 maxpacket: 32 [ 798.912301][ T5688] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 798.913220][T17776] usbtmc 2-1:16.0: control status returned 0 [ 798.920815][ T5688] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 798.920889][ T5688] usb 4-1: config 0 has no interface number 0 [ 798.938238][T17776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 798.953379][T17776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 798.965612][ T5688] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.965676][ T5688] usb 4-1: Product: syz [ 798.965689][ T5688] usb 4-1: Manufacturer: syz [ 798.965700][ T5688] usb 4-1: SerialNumber: syz [ 799.006179][ T5688] usb 4-1: config 0 descriptor?? [ 799.020875][ T5688] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 799.020972][ T5688] usb 4-1: selecting invalid altsetting 1 [ 799.020986][ T5688] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 799.028174][ T5688] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 799.029241][ T5688] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 799.030542][ T5688] usb 4-1: media controller created [ 799.115178][ T5688] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 799.125497][ T5703] usb 2-1: USB disconnect, device number 38 [ 799.520117][ T5710] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 799.520143][ T5710] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 799.726690][ T5710] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 799.726752][ T5710] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 799.726776][ T5710] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 799.726798][ T5710] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 799.727130][ T5710] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32 [ 800.085035][T17803] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3937'. [ 800.215806][T17804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 800.216859][T17804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 800.262008][ T5688] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 800.262083][ T5688] zl10353_read_register: readreg error (reg=127, ret==-110) [ 800.293360][T17800] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 800.433196][ T5688] usb 4-1: USB disconnect, device number 40 [ 800.513645][T17810] netlink: 'syz.1.3938': attribute type 10 has an invalid length. [ 800.535150][T17810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3938'. [ 800.559190][T17810] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3938'. [ 800.680434][ T5688] usb 3-1: USB disconnect, device number 44 [ 800.775296][ T5703] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 800.870259][ T5703] hid-generic 0000:0000:0000.002F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 801.120737][T17822] netlink: 'syz.3.3940': attribute type 1 has an invalid length. [ 801.124520][T17822] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3940'. [ 801.597234][ T5628] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 801.608976][ T5628] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 801.622151][ T5628] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 801.625385][ T5628] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 801.626332][ T5628] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 801.696836][ T5688] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 801.729212][T13205] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 801.740001][T13205] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 801.742798][T13205] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 801.745301][T13205] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 801.746238][T13205] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 801.831774][ T5712] usb 5-1: USB disconnect, device number 58 [ 801.874595][ T5688] usb 3-1: Using ep0 maxpacket: 8 [ 801.875367][ T5688] usb 3-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 801.877370][ T5688] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 801.877410][ T5688] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 801.880365][ T5688] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.880392][ T5688] usb 3-1: Product: syz [ 801.880409][ T5688] usb 3-1: Manufacturer: syz [ 801.880425][ T5688] usb 3-1: SerialNumber: syz [ 802.340746][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 802.340769][ T31] audit: type=1326 audit(1791176358.970:2514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17829 comm="syz.2.3943" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f621b79e159 code=0x0 [ 802.771127][T17849] input: syz0 as /devices/virtual/input/input119 [ 802.970806][ T5770] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 803.018228][T11338] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 803.020076][ T5712] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 803.121809][ T5770] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 803.123409][ T5770] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 803.123456][ T5770] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 803.123487][ T5770] usb 4-1: config 0 interface 0 has no altsetting 0 [ 803.123524][ T5770] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.126754][ T5770] usb 4-1: config 0 descriptor?? [ 803.183980][ T5712] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 803.188412][ T5712] usb 1-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0x7C, changing to 0xC [ 803.188569][ T5712] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 803.210738][ T5712] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 803.210820][ T5712] usb 1-1: Manufacturer: syz [ 803.210980][ T5712] usb 1-1: SerialNumber: syz [ 803.399257][T11338] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 803.499523][ T5712] usbhid 1-1:36.0: couldn't find an input interrupt endpoint [ 803.519608][ T5712] usb 1-1: USB disconnect, device number 58 [ 803.535358][T17834] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.538670][T17834] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.538872][T17834] bridge_slave_0: entered allmulticast mode [ 803.564166][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 803.564868][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 803.565798][ T5770] usbhid 4-1:0.0: can't add hid device: -71 [ 803.565951][ T5770] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 803.622172][ T5770] usb 4-1: USB disconnect, device number 41 [ 803.627186][T17834] bridge_slave_0: entered promiscuous mode [ 803.643264][T17834] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.662132][T17834] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.662323][T17834] bridge_slave_1: entered allmulticast mode [ 803.685079][T17834] bridge_slave_1: entered promiscuous mode [ 803.814693][T11338] bond0: (slave netdevsim1): Releasing backup interface [ 803.816048][T11338] netdevsim netdevsim1 netdevsim1 (unregistering): left promiscuous mode [ 803.842302][T11338] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 803.860892][T13205] Bluetooth: hci1: command tx timeout [ 803.923181][T17834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 803.955048][T11338] netdevsim netdevsim1  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 803.979000][T17834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 804.033807][T17861] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3949'. [ 804.074405][T17834] team0: Port device team_slave_0 added [ 804.089200][T17834] team0: Port device team_slave_1 added [ 804.196155][T17834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 804.196170][T17834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 804.196191][T17834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 804.204737][T17834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 804.204756][T17834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 804.204787][T17834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 804.391489][ T5712] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 804.551751][ T5712] usb 1-1: Using ep0 maxpacket: 32 [ 804.552962][ T5712] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 804.554519][ T5712] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 804.554546][ T5712] usb 1-1: config 0 has no interface number 0 [ 804.565500][ T5712] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.565588][ T5712] usb 1-1: Product: syz [ 804.565632][ T5712] usb 1-1: Manufacturer: syz [ 804.565691][ T5712] usb 1-1: SerialNumber: syz [ 804.597083][ T5712] usb 1-1: config 0 descriptor?? [ 804.625177][ T5712] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 804.625209][ T5712] usb 1-1: selecting invalid altsetting 1 [ 804.625228][ T5712] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 804.693328][ T5712] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 804.693666][ T5712] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 804.693723][ T5712] usb 1-1: media controller created [ 804.750500][ T5712] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 804.804814][T17834] hsr_slave_0: entered promiscuous mode [ 804.806103][T17834] hsr_slave_1: entered promiscuous mode [ 804.806925][T17834] debugfs: 'hsr0' already exists in 'hsr' [ 804.806948][T17834] Cannot create hsr debugfs directory [ 804.866290][T11338] dvmrp1: left allmulticast mode [ 804.866465][T11338] pimreg: left allmulticast mode [ 804.866595][T11338] dvmrp6: left allmulticast mode [ 804.866722][T11338] dvmrp12: left allmulticast mode [ 804.993272][ T5710] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 805.052173][ T5688] usb 3-1: unit 5 not found! [ 805.052212][ T5688] usb 3-1: unit 16 not found! [ 805.151029][ T5710] usb 4-1: New USB device found, idVendor=046d, idProduct=c704, bcdDevice= 0.00 [ 805.154244][ T5710] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 805.154282][ T5710] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 805.154315][ T5710] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 805.154362][ T5710] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.218117][ T5710] usb 4-1: config 0 descriptor?? [ 805.235134][ T5688] usb 3-1: USB disconnect, device number 45 [ 805.367550][ T7514] udevd[7514]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 805.513503][T11338] bond0 (unregistering): (slave vxlan0): Releasing backup interface [ 805.514138][T11338] vxlan0 (unregistering): left promiscuous mode [ 805.542027][T11338] bridge0 (unregistering): left promiscuous mode [ 805.544385][T11338] team0: Port device bridge0 removed [ 805.596612][T11338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 805.598632][T11338] bond0 (unregistering): Released all slaves [ 805.624980][T11338] bond1 (unregistering): Released all slaves [ 805.659012][T11338] bond2 (unregistering): Released all slaves [ 805.709312][T11338] bond3 (unregistering): Released all slaves [ 805.746139][T11338] bond4 (unregistering): Released all slaves [ 805.795263][T11338] bond5 (unregistering): Released all slaves [ 805.839657][T11338] bond6 (unregistering): Released all slaves [ 805.860948][T17863] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 805.880442][ T5712] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 805.880512][ T5712] zl10353_read_register: readreg error (reg=127, ret==-71) [ 805.881003][ T5712] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 805.951668][T13205] Bluetooth: hci1: command tx timeout [ 806.124820][ T5710] usbhid 4-1:0.0: can't add hid device: -71 [ 806.124962][ T5710] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 806.128711][ T5710] usb 4-1: USB disconnect, device number 42 [ 806.154957][ T5712] usb 1-1: USB disconnect, device number 59 [ 806.396700][T11338] tipc: Disabling bearer [ 806.398296][T11338] tipc: Left network mode [ 806.789354][ T5617] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 806.799199][ T5617] hid-generic 0000:0000:0000.0030: hidraw0: HID v0.00 Device [syz1] on syz0 [ 806.957805][ T5617] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 807.020101][ T5712] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 807.144389][ T5617] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 807.145772][ T5617] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 807.145804][ T5617] usb 1-1: config 1 has no interface number 0 [ 807.145848][ T5617] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 54, changing to 9 [ 807.145881][ T5617] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 807.145940][ T5617] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 807.149999][ T5617] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.150028][ T5617] usb 1-1: Product: syz [ 807.150074][ T5617] usb 1-1: Manufacturer: syz [ 807.150146][ T5617] usb 1-1: SerialNumber: syz [ 807.208638][ T5712] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 807.223837][ T5712] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 807.223867][ T5712] usb 3-1: config 0 has no interface number 0 [ 807.223937][ T5712] usb 3-1: config 0 interface 41 has no altsetting 0 [ 807.270309][ T5712] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.270341][ T5712] usb 3-1: Product: syz [ 807.270358][ T5712] usb 3-1: Manufacturer: syz [ 807.270376][ T5712] usb 3-1: SerialNumber: syz [ 807.298236][ T5712] usb 3-1: config 0 descriptor?? [ 807.715080][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1 [ 807.811059][ T5696] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 807.971154][ T5696] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 807.974579][ T5696] usb 5-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0x7C, changing to 0xC [ 807.974617][ T5696] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 807.980772][ T5696] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 807.980846][ T5696] usb 5-1: Manufacturer: syz [ 807.980972][ T5696] usb 5-1: SerialNumber: syz [ 808.033111][T13205] Bluetooth: hci1: command tx timeout [ 808.053108][ T5617] cdc_ncm 1-1:1.1: bind() failure [ 808.113124][T17895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 808.115980][T17895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 808.348547][ T5712] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 808.414824][ T5696] usbhid 5-1:36.0: couldn't find an input interrupt endpoint [ 808.467434][ T5696] usb 5-1: USB disconnect, device number 59 [ 808.663053][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.663126][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.715734][T17834] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 808.728814][T17834] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 808.745938][T17834] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 808.763271][T17834] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 808.768296][ T5712] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 808.768358][ T5712] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 808.768575][ T5712] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 808.798262][ T5712] usb 3-1: USB disconnect, device number 46 [ 808.824525][T17834] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 808.862596][T17834] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 808.869124][T17834] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 808.903815][T17834] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 809.130983][ T5617] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 809.280687][ T5617] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 809.281814][ T5617] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 809.281846][ T5617] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 809.281875][ T5617] usb 4-1: config 0 interface 0 has no altsetting 0 [ 809.281932][ T5617] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.285024][ T5617] usb 4-1: config 0 descriptor?? [ 809.368832][T17834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 809.472718][T17834] 8021q: adding VLAN 0 to HW filter on device team0 [ 809.534263][T11339] bridge0: port 1(bridge_slave_0) entered blocking state [ 809.534394][T11339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 809.616840][T16001] bridge0: port 2(bridge_slave_1) entered blocking state [ 809.616991][T16001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 809.658405][ T5696] usb 1-1: USB disconnect, device number 60 [ 809.698974][ T5617] usbhid 4-1:0.0: can't add hid device: -71 [ 809.699139][ T5617] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 809.746715][ T5617] usb 4-1: USB disconnect, device number 43 [ 809.892544][ T5712] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 809.920881][T11338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 809.924084][T11338] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 810.056550][ T5712] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 810.057757][ T5712] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 810.057806][ T5712] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.100536][T13205] Bluetooth: hci1: command tx timeout [ 810.220621][ T5617] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 810.255532][T11338] team0 (unregistering): Port device team_slave_1 removed [ 810.283721][T11338] team0 (unregistering): Port device team_slave_0 removed [ 810.318739][T11338] bond_slave_0 (unregistering): left promiscuous mode [ 810.319702][T11338] team0 (unregistering): Port device bond_slave_0 removed [ 810.338848][ T5712] qmi_wwan 3-1:1.0: cdc-wdm0: USB WDM device [ 810.370445][ T5617] usb 1-1: Using ep0 maxpacket: 8 [ 810.374195][ T5617] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 810.375398][ T5617] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 810.375454][ T5617] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 810.375479][ T5617] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 810.375506][ T5617] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 810.375533][ T5617] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 810.375577][ T5617] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.451739][ T5770] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 810.490117][ T5712] wwan wwan0: port wwan0qmi0 attached [ 810.600980][ T5770] usb 5-1: Using ep0 maxpacket: 32 [ 810.606434][ T5770] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 810.607829][ T5770] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 810.607856][ T5770] usb 5-1: config 0 has no interface number 0 [ 810.619770][ T5770] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.619960][ T5770] usb 5-1: Product: syz [ 810.620011][ T5770] usb 5-1: Manufacturer: syz [ 810.620053][ T5770] usb 5-1: SerialNumber: syz [ 810.652586][ T5770] usb 5-1: config 0 descriptor?? [ 810.697144][ T5770] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 810.697178][ T5770] usb 5-1: selecting invalid altsetting 1 [ 810.697197][ T5770] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 810.724545][ T5617] usb 1-1: usb_control_msg returned -32 [ 810.724602][ T5617] usbtmc 1-1:16.0: can't read capabilities [ 810.741972][ T5770] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 810.742772][ T5770] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 810.742960][ T5770] usb 5-1: media controller created [ 810.794959][ T5617] usb 1-1: USB disconnect, device number 61 [ 810.823253][ T5770] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 810.904477][T11338] dummy0 (unregistering): left promiscuous mode [ 810.919575][T11338] team0 (unregistering): Port device dummy0 removed [ 810.941974][T17965] input: syz1 as /devices/virtual/input/input121 [ 811.075274][ T5712] qmi_wwan 3-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.2-1, WWAN/QMI device, a2:5a:60:59:1d:9c [ 811.090271][ T5688] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 811.104185][ T5712] usb 3-1: USB disconnect, device number 47 [ 811.120367][ T5712] qmi_wwan 3-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.2-1, WWAN/QMI device [ 811.203956][ T5712] wwan wwan0: port wwan0qmi0 disconnected [ 811.240172][ T5688] usb 4-1: Using ep0 maxpacket: 8 [ 811.254400][ T5688] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 811.258542][ T5688] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 16 [ 811.258629][ T5688] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 811.258710][ T5688] usb 4-1: config 1 interface 0 has no altsetting 0 [ 811.322212][ T5688] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.322244][ T5688] usb 4-1: Product: 凪ꋉꃘ蹣ꁍᇭ뛊챜깐抲츍۔粳윘樚㠈蘺ꉵൟ㸸ϡឃ픕쁆몆粜哟萲橠땘隂㭀ȕ㤂뫟鼻嗍谝㊱✚䯅嚗ꑫӤ쯟⼘贇呿꽯鞥Ἥ㚋韛쬲ﲪ誘惌彺꺂⹅鸌뙣숽岮࡭嚾㱹䛆䕘럦韀ࡌ렷ꮲૌ䭧፺ធ겘퇯㽽᫣嘯ஐ淭嫫 [ 811.322276][ T5688] usb 4-1: Manufacturer: 駠鹎軪选蚋탧릱즕薰૷ⅺꦢ石᜕蔦礊䬰쑌탗ꊥ쾰荷๩즙䳷ﺬ봈鈶孧ӥ [ 811.322298][ T5688] usb 4-1: SerialNumber: ఉ [ 811.376309][T17963] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 811.622931][T17971] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3968'. [ 811.676998][T17834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 811.750877][T17962] batman_adv: batadv0: Removing interface: dummy0 [ 811.755609][T17962] bond0: (slave bond_slave_0): Releasing backup interface [ 811.782732][T17962] bond0: (slave bond_slave_1): Releasing backup interface [ 811.784071][T17962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 811.815230][T17962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 811.825975][T17962] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 811.912188][T11338] IPVS: stop unused estimator thread 0... [ 811.940254][T17955] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 811.967722][ T5770] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 811.967780][ T5770] zl10353_read_register: readreg error (reg=127, ret==-71) [ 811.968445][ T5770] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 812.036514][ T5770] usb 5-1: USB disconnect, device number 60 [ 812.147645][ T7725] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 812.166090][ T5688] usb 4-1: USB disconnect, device number 44 [ 812.263071][ T7725] hid-generic 0000:0000:0000.0031: hidraw0: HID v0.00 Device [syz1] on syz0 [ 812.397035][T17834] veth0_vlan: entered promiscuous mode [ 812.433741][T17834] veth1_vlan: entered promiscuous mode [ 812.500647][ T5622] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 812.522878][T17834] veth0_macvtap: entered promiscuous mode [ 812.537751][T17834] veth1_macvtap: entered promiscuous mode [ 812.576235][T17834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 812.598991][T17834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 812.654850][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.667246][ T5622] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 812.689059][ T5622] usb 1-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0x7C, changing to 0xC [ 812.689095][ T5622] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 812.720370][ T5622] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 812.720403][ T5622] usb 1-1: Manufacturer: syz [ 812.720421][ T5622] usb 1-1: SerialNumber: syz [ 812.721838][ T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.722821][ T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.723728][ T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.019333][ T5622] usbhid 1-1:36.0: couldn't find an input interrupt endpoint [ 813.051745][ T5622] usb 1-1: USB disconnect, device number 62 [ 813.120425][T17999] loop8: detected capacity change from 0 to 16384 [ 813.407001][T18005] loop8: detected capacity change from 16384 to 16383 [ 813.423802][T18005] I/O error, dev loop8, sector 1280 op 0x1:(WRITE) flags 0x804800 phys_seg 128 prio class 2 [ 813.423848][T18005] Buffer I/O error on dev loop8, logical block 160, lost async page write [ 813.423908][T18005] Buffer I/O error on dev loop8, logical block 161, lost async page write [ 813.423934][T18005] Buffer I/O error on dev loop8, logical block 162, lost async page write [ 813.423958][T18005] Buffer I/O error on dev loop8, logical block 163, lost async page write [ 813.423983][T18005] Buffer I/O error on dev loop8, logical block 164, lost async page write [ 813.424006][T18005] Buffer I/O error on dev loop8, logical block 165, lost async page write [ 813.424030][T18005] Buffer I/O error on dev loop8, logical block 166, lost async page write [ 813.424053][T18005] Buffer I/O error on dev loop8, logical block 167, lost async page write [ 813.424077][T18005] Buffer I/O error on dev loop8, logical block 168, lost async page write [ 813.424100][T18005] Buffer I/O error on dev loop8, logical block 169, lost async page write [ 813.428992][T18005] I/O error, dev loop8, sector 2304 op 0x1:(WRITE) flags 0x800800 phys_seg 32 prio class 2 [ 813.461699][ T5703] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 813.461780][ T5703] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 813.467826][ C1] ------------[ cut here ]------------ [ 813.467838][ C1] workqueue: cannot queue hci_cmd_timeout on wq hci1 [ 813.467869][ C1] WARNING: kernel/workqueue.c:2353 at __queue_work+0xd83/0x10d0, CPU#1: kworker/u8:8/11338 [ 813.573563][ C1] Modules linked in: [ 813.577486][ C1] CPU: 1 UID: 0 PID: 11338 Comm: kworker/u8:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 813.588618][ C1] Tainted: [L]=SOFTLOCKUP [ 813.592959][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 813.603031][ C1] Workqueue: 0x0 (events_unbound) [ 813.608179][ C1] RIP: 0010:__queue_work+0xd9f/0x10d0 [ 813.613590][ C1] Code: 49 81 c7 70 01 00 00 4c 8d 35 7d d5 ee 0e 48 89 f8 48 c1 e8 03 80 3c 18 00 74 05 e8 bb bb a9 00 49 8b 75 18 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 4c 89 e8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ef e8 [ 813.633224][ C1] RSP: 0018:ffffc90000a18bc0 EFLAGS: 00010046 [ 813.639324][ C1] RAX: 1ffff11009c1a14e RBX: dffffc0000000000 RCX: ffff8880274ebe80 [ 813.647340][ C1] RDX: ffff888028eaa170 RSI: ffffffff8ad783d0 RDI: ffffffff907d3ba0 [ 813.655366][ C1] RBP: 0000000000010000 R08: 0000000000000100 R09: 1ffffffff20f4caf [ 813.663359][ C1] R10: dffffc0000000000 R11: ffffffff818e6d40 R12: 0000000000000008 [ 813.671351][ C1] R13: ffff88804e0d0a58 R14: ffffffff907d3ba0 R15: ffff888028eaa170 [ 813.679379][ C1] FS: 0000000000000000(0000) GS:ffff888124dc6000(0000) knlGS:0000000000000000 [ 813.688331][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 813.694933][ C1] CR2: 0000001b33c11ff8 CR3: 000000007753e000 CR4: 00000000003526f0 [ 813.702927][ C1] Call Trace: [ 813.706230][ C1] [ 813.709097][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 813.714601][ C1] call_timer_fn+0x18d/0x5f0 [ 813.719222][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 813.725058][ C1] ? call_timer_fn+0xd5/0x5f0 [ 813.729769][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 813.734932][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 813.740080][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 813.745942][ C1] __run_timer_base+0x67e/0x8b0 [ 813.750830][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 813.756236][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 813.761499][ C1] run_timer_softirq+0xb7/0x170 [ 813.766373][ C1] handle_softirqs+0x226/0x860 [ 813.771163][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 813.775957][ C1] __irq_exit_rcu+0xcb/0x220 [ 813.780569][ C1] irq_exit_rcu+0x9/0x30 [ 813.784841][ C1] sysvec_call_function_single+0xa3/0xc0 [ 813.790505][ C1] [ 813.793455][ C1] [ 813.796404][ C1] asm_sysvec_call_function_single+0x1a/0x20 [ 813.802407][ C1] RIP: 0010:finish_task_switch+0x413/0xc60 [ 813.808235][ C1] Code: 04 00 00 41 c7 84 24 20 0e 00 00 00 00 00 00 e9 db 06 00 00 49 83 c4 48 4c 89 e7 e8 57 d0 53 0a e8 c2 2c 3a 00 fb 4c 8b 65 c8 <49> 8d bc 24 18 17 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 813.827870][ C1] RSP: 0018:ffffc90003bbfa60 EFLAGS: 00000206 [ 813.833981][ C1] RAX: 000000000025f417 RBX: ffff8880b873c8e0 RCX: 8000000000000001 [ 813.841982][ C1] RDX: 0000000000000000 RSI: ffffffff8e4172d0 RDI: ffffffff8c6dad80 [ 813.850002][ C1] RBP: ffffc90003bbfab0 R08: ffffffff907a657f R09: 1ffffffff20f4caf [ 813.857994][ C1] R10: dffffc0000000000 R11: fffffbfff20f4cb0 R12: ffff8880274ebe80 [ 813.865983][ C1] R13: ffff8880b873c8b8 R14: dffffc0000000000 R15: 1ffff110170e791c [ 813.873999][ C1] __schedule+0x17e3/0x58f0 [ 813.878554][ C1] ? __pfx___schedule+0x10/0x10 [ 813.883445][ C1] ? schedule+0x90/0x2b0 [ 813.887719][ C1] schedule+0x164/0x2b0 [ 813.891915][ C1] worker_thread+0xc12/0xfb0 [ 813.896564][ C1] kthread+0x38b/0x480 [ 813.900675][ C1] ? __pfx_worker_thread+0x10/0x10 [ 813.905822][ C1] ? __pfx_kthread+0x10/0x10 [ 813.910441][ C1] ret_from_fork+0x514/0xb70 [ 813.915063][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 813.920194][ C1] ? __switch_to+0xc89/0x1420 [ 813.924908][ C1] ? __pfx_kthread+0x10/0x10 [ 813.929522][ C1] ret_from_fork_asm+0x1a/0x30 [ 813.934326][ C1] [ 813.937392][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 813.944695][ C1] CPU: 1 UID: 0 PID: 11338 Comm: kworker/u8:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 813.955828][ C1] Tainted: [L]=SOFTLOCKUP [ 813.960168][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 813.970246][ C1] Workqueue: 0x0 (events_unbound) [ 813.975392][ C1] Call Trace: [ 813.978704][ C1] [ 813.981566][ C1] vpanic+0x56d/0xa60 [ 813.985592][ C1] ? __pfx__printk+0x10/0x10 [ 813.990248][ C1] ? __pfx_vpanic+0x10/0x10 [ 813.994775][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 814.000085][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 814.005312][ C1] panic+0xc5/0xd0 [ 814.009066][ C1] ? __pfx_panic+0x10/0x10 [ 814.013515][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 814.018487][ C1] __warn+0x315/0x4c0 [ 814.022495][ C1] ? __queue_work+0xd83/0x10d0 [ 814.027290][ C1] ? __queue_work+0xd83/0x10d0 [ 814.032118][ C1] __report_bug+0x276/0x570 [ 814.036658][ C1] ? insert_work+0x3d/0x330 [ 814.041181][ C1] ? __queue_work+0xbae/0x10d0 [ 814.045966][ C1] ? call_timer_fn+0x18d/0x5f0 [ 814.050758][ C1] ? __queue_work+0xd83/0x10d0 [ 814.055551][ C1] ? __pfx___report_bug+0x10/0x10 [ 814.060605][ C1] ? ret_from_fork+0x514/0xb70 [ 814.065388][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 814.070700][ C1] ? look_up_lock_class+0x57/0x110 [ 814.075863][ C1] ? register_lock_class+0x31/0x2e0 [ 814.081103][ C1] report_bug_entry+0x19b/0x290 [ 814.085984][ C1] ? __queue_work+0xd9f/0x10d0 [ 814.090770][ C1] ? __queue_work+0xda4/0x10d0 [ 814.095563][ C1] handle_bug+0xce/0x200 [ 814.099827][ C1] exc_invalid_op+0x1a/0x50 [ 814.104359][ C1] asm_exc_invalid_op+0x1a/0x20 [ 814.109226][ C1] RIP: 0010:__queue_work+0xd9f/0x10d0 [ 814.114623][ C1] Code: 49 81 c7 70 01 00 00 4c 8d 35 7d d5 ee 0e 48 89 f8 48 c1 e8 03 80 3c 18 00 74 05 e8 bb bb a9 00 49 8b 75 18 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 4c 89 e8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ef e8 [ 814.134255][ C1] RSP: 0018:ffffc90000a18bc0 EFLAGS: 00010046 [ 814.140345][ C1] RAX: 1ffff11009c1a14e RBX: dffffc0000000000 RCX: ffff8880274ebe80 [ 814.148354][ C1] RDX: ffff888028eaa170 RSI: ffffffff8ad783d0 RDI: ffffffff907d3ba0 [ 814.156346][ C1] RBP: 0000000000010000 R08: 0000000000000100 R09: 1ffffffff20f4caf [ 814.164336][ C1] R10: dffffc0000000000 R11: ffffffff818e6d40 R12: 0000000000000008 [ 814.172328][ C1] R13: ffff88804e0d0a58 R14: ffffffff907d3ba0 R15: ffff888028eaa170 [ 814.180324][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 814.186175][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 814.191502][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 814.196913][ C1] call_timer_fn+0x18d/0x5f0 [ 814.201529][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 814.207373][ C1] ? call_timer_fn+0xd5/0x5f0 [ 814.212362][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 814.217523][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 814.222668][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 814.228543][ C1] __run_timer_base+0x67e/0x8b0 [ 814.233440][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 814.238888][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 814.244130][ C1] run_timer_softirq+0xb7/0x170 [ 814.249012][ C1] handle_softirqs+0x226/0x860 [ 814.253810][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 814.258616][ C1] __irq_exit_rcu+0xcb/0x220 [ 814.263236][ C1] irq_exit_rcu+0x9/0x30 [ 814.267502][ C1] sysvec_call_function_single+0xa3/0xc0 [ 814.273174][ C1] [ 814.276134][ C1] [ 814.279090][ C1] asm_sysvec_call_function_single+0x1a/0x20 [ 814.285109][ C1] RIP: 0010:finish_task_switch+0x413/0xc60 [ 814.290958][ C1] Code: 04 00 00 41 c7 84 24 20 0e 00 00 00 00 00 00 e9 db 06 00 00 49 83 c4 48 4c 89 e7 e8 57 d0 53 0a e8 c2 2c 3a 00 fb 4c 8b 65 c8 <49> 8d bc 24 18 17 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 814.310585][ C1] RSP: 0018:ffffc90003bbfa60 EFLAGS: 00000206 [ 814.316675][ C1] RAX: 000000000025f417 RBX: ffff8880b873c8e0 RCX: 8000000000000001 [ 814.324662][ C1] RDX: 0000000000000000 RSI: ffffffff8e4172d0 RDI: ffffffff8c6dad80 [ 814.332648][ C1] RBP: ffffc90003bbfab0 R08: ffffffff907a657f R09: 1ffffffff20f4caf [ 814.340639][ C1] R10: dffffc0000000000 R11: fffffbfff20f4cb0 R12: ffff8880274ebe80 [ 814.348634][ C1] R13: ffff8880b873c8b8 R14: dffffc0000000000 R15: 1ffff110170e791c [ 814.356649][ C1] __schedule+0x17e3/0x58f0 [ 814.361232][ C1] ? __pfx___schedule+0x10/0x10 [ 814.366122][ C1] ? schedule+0x90/0x2b0 [ 814.370397][ C1] schedule+0x164/0x2b0 [ 814.374583][ C1] worker_thread+0xc12/0xfb0 [ 814.379218][ C1] kthread+0x38b/0x480 [ 814.383307][ C1] ? __pfx_worker_thread+0x10/0x10 [ 814.388463][ C1] ? __pfx_kthread+0x10/0x10 [ 814.393073][ C1] ret_from_fork+0x514/0xb70 [ 814.397698][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 814.402833][ C1] ? __switch_to+0xc89/0x1420 [ 814.407542][ C1] ? __pfx_kthread+0x10/0x10 [ 814.412154][ C1] ret_from_fork_asm+0x1a/0x30 [ 814.416960][ C1] [ 814.420660][ C1] Kernel Offset: disabled [ 814.425001][ C1] Rebooting in 86400 seconds..